@sanqianx/project-knowledge 5.0.18 → 5.0.20-rc.1

package/_site/_test/model-context-windows-test.js

@@ -1,89 +1,89 @@
-// Tests for model-context-windows: lookup table + resolution priority chain.
-//   profile.contextWindow (explicit override)
-//     → model name table (anthropic / minimax / glm / gpt / deepseek / qwen / gemini)
-//       → CLAUDE_CONTEXT_WINDOW env
-//         → 200000 fallback
-
-const { lookupContextWindow, resolveContextWindow } = require('../lib/model-context-windows');
-
-function assert(cond, msg) { if (!cond) throw new Error(msg); }
-
-(() => {
-  try {
-    // ---- lookupContextWindow: family prefix matching ----
-    assert(lookupContextWindow('claude-opus-4-7') === 200000, 'claude-opus-4-7 → 200000');
-    assert(lookupContextWindow('claude-sonnet-4-6') === 200000, 'claude-sonnet-4-6 → 200000');
-    assert(lookupContextWindow('claude-haiku-4-5') === 200000, 'claude-haiku-4-5 → 200000');
-    assert(lookupContextWindow('claude-3-5-sonnet-20241022') === 200000, 'claude-3-5 → 200000');
-
-    assert(lookupContextWindow('glm-5.2') === 1048576, 'glm-5.2 → 1M');
-    assert(lookupContextWindow('GLM-4.6') === 1048576, 'GLM-4.6 (uppercase) → 1M');
-    assert(lookupContextWindow('glm-4.5-air') === 128000, 'glm-4.5-air → 128000');
-    assert(lookupContextWindow('glm-4-plus') === 128000, 'glm-4-plus → 128000');
-
-    assert(lookupContextWindow('MiniMax-M3') === 1048576, 'MiniMax-M3 → 1M');
-    assert(lookupContextWindow('minimax-m2') === 1048576, 'minimax-m2 → 1M');
-
-    assert(lookupContextWindow('gpt-5-mini') === 200000, 'gpt-5-mini → 200000');
-    assert(lookupContextWindow('gpt-4o-2024-08-06') === 128000, 'gpt-4o → 128000');
-    assert(lookupContextWindow('gpt-4.1-2025-04-14') === 1047576, 'gpt-4.1 → 1047576');
-
-    assert(lookupContextWindow('deepseek-v3') === 128000, 'deepseek-v3 → 128000');
-    assert(lookupContextWindow('deepseek-r1') === 128000, 'deepseek-r1 → 128000');
-
-    assert(lookupContextWindow('qwen3-coder') === 131072, 'qwen3 → 131072');
-    assert(lookupContextWindow('gemini-2.5-pro') === 1048576, 'gemini-2.5 → 1M');
-
-    assert(lookupContextWindow('totally-unknown-model') === null, 'unknown → null');
-    assert(lookupContextWindow('') === null, 'empty → null');
-    assert(lookupContextWindow(null) === null, 'null → null');
-    assert(lookupContextWindow(undefined) === null, 'undefined → null');
-
-    // ---- resolveContextWindow: priority chain ----
-
-    // 1. profile.contextWindow wins over everything
-    assert(resolveContextWindow({ profileContextWindow: 500000, model: 'claude-opus-4' }) === 500000,
-      'explicit profileContextWindow must override table');
-
-    // 2. table wins when profile is empty
-    assert(resolveContextWindow({ model: 'glm-5.2' }) === 1048576,
-      'table hit should be used when profileContextWindow empty');
-
-    // 3. env wins when profile + table both miss
-    assert(resolveContextWindow({ model: 'unknown-model', env: { CLAUDE_CONTEXT_WINDOW: '99999' } }) === 99999,
-      'env should be used when table misses');
-
-    // 4. fallback (200000 default) when nothing matches
-    assert(resolveContextWindow({ model: 'unknown-model' }) === 200000,
-      'default fallback should be 200000');
-
-    // 5. profile.contextWindow = 0 / negative treated as unset
-    assert(resolveContextWindow({ profileContextWindow: 0, model: 'glm-5.2' }) === 1048576,
-      'profileContextWindow=0 should fall through to table');
-    assert(resolveContextWindow({ profileContextWindow: -1, model: 'glm-5.2' }) === 1048576,
-      'negative profileContextWindow should fall through to table');
-
-    // 6. non-finite profileContextWindow (NaN, string) ignored
-    assert(resolveContextWindow({ profileContextWindow: NaN, model: 'minimax-m3' }) === 1048576,
-      'NaN profileContextWindow should fall through');
-    assert(resolveContextWindow({ profileContextWindow: 'abc', model: 'minimax-m3' }) === 1048576,
-      'non-numeric string profileContextWindow should fall through');
-
-    // 7. custom fallback honored when nothing else matches
-    assert(resolveContextWindow({ model: 'unknown', fallback: 12345 }) === 12345,
-      'custom fallback should be respected');
-
-    // 8. no args at all → fallback
-    assert(resolveContextWindow() === 200000,
-      'no-args call should hit default fallback');
-
-    // 9. fractional context window floored
-    assert(resolveContextWindow({ profileContextWindow: 123456.789, model: 'x' }) === 123456,
-      'fractional contextWindow should be floored');
-
-    console.log('model-context-windows test passed');
-  } catch (e) {
-    console.error('model-context-windows test failed:', e.message);
-    process.exitCode = 1;
-  }
-})();
+// Tests for model-context-windows: lookup table + resolution priority chain.
+//   profile.contextWindow (explicit override)
+//     → model name table (anthropic / minimax / glm / gpt / deepseek / qwen / gemini)
+//       → CLAUDE_CONTEXT_WINDOW env
+//         → 200000 fallback
+
+const { lookupContextWindow, resolveContextWindow } = require('../lib/model-context-windows');
+
+function assert(cond, msg) { if (!cond) throw new Error(msg); }
+
+(() => {
+  try {
+    // ---- lookupContextWindow: family prefix matching ----
+    assert(lookupContextWindow('claude-opus-4-7') === 200000, 'claude-opus-4-7 → 200000');
+    assert(lookupContextWindow('claude-sonnet-4-6') === 200000, 'claude-sonnet-4-6 → 200000');
+    assert(lookupContextWindow('claude-haiku-4-5') === 200000, 'claude-haiku-4-5 → 200000');
+    assert(lookupContextWindow('claude-3-5-sonnet-20241022') === 200000, 'claude-3-5 → 200000');
+
+    assert(lookupContextWindow('glm-5.2') === 1048576, 'glm-5.2 → 1M');
+    assert(lookupContextWindow('GLM-4.6') === 1048576, 'GLM-4.6 (uppercase) → 1M');
+    assert(lookupContextWindow('glm-4.5-air') === 128000, 'glm-4.5-air → 128000');
+    assert(lookupContextWindow('glm-4-plus') === 128000, 'glm-4-plus → 128000');
+
+    assert(lookupContextWindow('MiniMax-M3') === 1048576, 'MiniMax-M3 → 1M');
+    assert(lookupContextWindow('minimax-m2') === 1048576, 'minimax-m2 → 1M');
+
+    assert(lookupContextWindow('gpt-5-mini') === 200000, 'gpt-5-mini → 200000');
+    assert(lookupContextWindow('gpt-4o-2024-08-06') === 128000, 'gpt-4o → 128000');
+    assert(lookupContextWindow('gpt-4.1-2025-04-14') === 1047576, 'gpt-4.1 → 1047576');
+
+    assert(lookupContextWindow('deepseek-v3') === 128000, 'deepseek-v3 → 128000');
+    assert(lookupContextWindow('deepseek-r1') === 128000, 'deepseek-r1 → 128000');
+
+    assert(lookupContextWindow('qwen3-coder') === 131072, 'qwen3 → 131072');
+    assert(lookupContextWindow('gemini-2.5-pro') === 1048576, 'gemini-2.5 → 1M');
+
+    assert(lookupContextWindow('totally-unknown-model') === null, 'unknown → null');
+    assert(lookupContextWindow('') === null, 'empty → null');
+    assert(lookupContextWindow(null) === null, 'null → null');
+    assert(lookupContextWindow(undefined) === null, 'undefined → null');
+
+    // ---- resolveContextWindow: priority chain ----
+
+    // 1. profile.contextWindow wins over everything
+    assert(resolveContextWindow({ profileContextWindow: 500000, model: 'claude-opus-4' }) === 500000,
+      'explicit profileContextWindow must override table');
+
+    // 2. table wins when profile is empty
+    assert(resolveContextWindow({ model: 'glm-5.2' }) === 1048576,
+      'table hit should be used when profileContextWindow empty');
+
+    // 3. env wins when profile + table both miss
+    assert(resolveContextWindow({ model: 'unknown-model', env: { CLAUDE_CONTEXT_WINDOW: '99999' } }) === 99999,
+      'env should be used when table misses');
+
+    // 4. fallback (200000 default) when nothing matches
+    assert(resolveContextWindow({ model: 'unknown-model' }) === 200000,
+      'default fallback should be 200000');
+
+    // 5. profile.contextWindow = 0 / negative treated as unset
+    assert(resolveContextWindow({ profileContextWindow: 0, model: 'glm-5.2' }) === 1048576,
+      'profileContextWindow=0 should fall through to table');
+    assert(resolveContextWindow({ profileContextWindow: -1, model: 'glm-5.2' }) === 1048576,
+      'negative profileContextWindow should fall through to table');
+
+    // 6. non-finite profileContextWindow (NaN, string) ignored
+    assert(resolveContextWindow({ profileContextWindow: NaN, model: 'minimax-m3' }) === 1048576,
+      'NaN profileContextWindow should fall through');
+    assert(resolveContextWindow({ profileContextWindow: 'abc', model: 'minimax-m3' }) === 1048576,
+      'non-numeric string profileContextWindow should fall through');
+
+    // 7. custom fallback honored when nothing else matches
+    assert(resolveContextWindow({ model: 'unknown', fallback: 12345 }) === 12345,
+      'custom fallback should be respected');
+
+    // 8. no args at all → fallback
+    assert(resolveContextWindow() === 200000,
+      'no-args call should hit default fallback');
+
+    // 9. fractional context window floored
+    assert(resolveContextWindow({ profileContextWindow: 123456.789, model: 'x' }) === 123456,
+      'fractional contextWindow should be floored');
+
+    console.log('model-context-windows test passed');
+  } catch (e) {
+    console.error('model-context-windows test failed:', e.message);
+    process.exitCode = 1;
+  }
+})();

package/_site/_test/module-agent-start-proxy-test.js

@@ -1,65 +1,65 @@
-'use strict';
-const assert = require('node:assert/strict');
-const http = require('node:http');
-const { Readable } = require('node:stream');
-const { EventEmitter } = require('node:events');
-const { ModuleBridge } = require('../lib/module-bridge');
-
-async function budget(method, pathname) {
-  const timers = [], originalTimer = global.setTimeout, originalFetch = global.fetch;
-  const req = Readable.from([]); req.method = method; req.headers = {};
-  const res = new EventEmitter();
-  res.writeHead = () => {}; res.end = () => { res.writableEnded = true; };
-  try {
-    global.setTimeout = (fn, ms, ...args) => { timers.push(ms); return originalTimer(fn, ms, ...args); };
-    global.fetch = async () => new Response('{}', { headers: { 'Content-Type': 'application/json' } });
-    await new ModuleBridge().proxy(req, res, 'http://127.0.0.1:5760' + pathname);
-    return timers[0];
-  } finally { global.setTimeout = originalTimer; global.fetch = originalFetch; }
-}
-
-(async () => {
-  const upstream = http.createServer((req, res) => {
-    const timer = setTimeout(() => { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end('{"accepted":true}'); }, 11000);
-    res.on('close', () => clearTimeout(timer));
-  });
-  await new Promise(resolve => upstream.listen(0, '127.0.0.1', resolve));
-  const bridge = new ModuleBridge();
-  const target = `http://127.0.0.1:${upstream.address().port}/api/claude-workbench/v1/sessions/cold-client/input`;
-  const shell = http.createServer((req, res) => bridge.proxy(req, res, target));
-  await new Promise(resolve => shell.listen(0, '127.0.0.1', resolve));
-  try {
-    const response = await fetch(`http://127.0.0.1:${shell.address().port}/send`, { method: 'POST', body: '{}' });
-    assert.equal(response.status, 200, 'cold native client startup must not be reported as unreachable after ten seconds');
-    assert.equal((await response.json()).accepted, true);
-  } finally {
-    for (const server of [shell, upstream]) { server.closeAllConnections(); await new Promise(resolve => server.close(resolve)); }
-  }
-  assert.equal(await budget('POST', '/api/claude-workbench/v1/sessions'), 90000);
-  assert.equal(await budget('POST', '/api/claude-workbench/v1/sessions/cold-client/input?scope=project'), 90000);
-  for (const [method, route] of [
-    ['GET', '/api/claude-workbench/v1/sessions'],
-    ['POST', '/api/claude-workbench/v1/sessions/cold-client/abort'],
-    ['POST', '/api/claude-workbench/v1/sessions/cold-client/permission'],
-    ['POST', '/api/engine/runs'],
-    ['POST', '/api/sessions/cold-client/input'],
-  ]) assert.equal(await budget(method, route), 10000, 'unrelated APIs must keep their ordinary timeout');
-  assert.equal(await budget('POST', '/api/claude-workbench/v1/system/pick-folder'), 600000);
-  const originalFetch = global.fetch;
-  let warning, failure;
-  const request = Readable.from([]); request.method = 'GET'; request.headers = {};
-  const response = new EventEmitter(); response.writeHead = () => {};
-  response.end = bytes => { response.writableEnded = true; failure = JSON.parse(bytes); };
-  try {
-    global.fetch = async () => { throw new Error('upstream leaked credential: secret-proxy-fixture'); };
-    const safeBridge = new ModuleBridge({ logger: { warn(...args) { warning = args; } } });
-    await safeBridge.proxy(request, response, 'http://127.0.0.1:5760/api/health?apiKey=secret-proxy-fixture');
-    assert.equal(failure.error, 'MODULE_UNREACHABLE');
-    assert.equal(failure.details.failureKind, 'NETWORK_ERROR');
-    assert.equal(failure.details.timeoutMs, 10000);
-    assert.equal(warning[0], 'module.proxy.failed');
-    assert.equal(warning[2].context.path, '/api/health');
-    assert.ok(!JSON.stringify([failure, warning]).includes('secret-proxy-fixture'), 'diagnostics omit queries, raw errors and credentials');
-  } finally { global.fetch = originalFetch; }
-  console.log('module-agent-start-proxy-test PASS');
-})().catch(error => { console.error(error); process.exitCode = 1; });
+'use strict';
+const assert = require('node:assert/strict');
+const http = require('node:http');
+const { Readable } = require('node:stream');
+const { EventEmitter } = require('node:events');
+const { ModuleBridge } = require('../lib/module-bridge');
+
+async function budget(method, pathname) {
+  const timers = [], originalTimer = global.setTimeout, originalFetch = global.fetch;
+  const req = Readable.from([]); req.method = method; req.headers = {};
+  const res = new EventEmitter();
+  res.writeHead = () => {}; res.end = () => { res.writableEnded = true; };
+  try {
+    global.setTimeout = (fn, ms, ...args) => { timers.push(ms); return originalTimer(fn, ms, ...args); };
+    global.fetch = async () => new Response('{}', { headers: { 'Content-Type': 'application/json' } });
+    await new ModuleBridge().proxy(req, res, 'http://127.0.0.1:5760' + pathname);
+    return timers[0];
+  } finally { global.setTimeout = originalTimer; global.fetch = originalFetch; }
+}
+
+(async () => {
+  const upstream = http.createServer((req, res) => {
+    const timer = setTimeout(() => { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end('{"accepted":true}'); }, 11000);
+    res.on('close', () => clearTimeout(timer));
+  });
+  await new Promise(resolve => upstream.listen(0, '127.0.0.1', resolve));
+  const bridge = new ModuleBridge();
+  const target = `http://127.0.0.1:${upstream.address().port}/api/claude-workbench/v1/sessions/cold-client/input`;
+  const shell = http.createServer((req, res) => bridge.proxy(req, res, target));
+  await new Promise(resolve => shell.listen(0, '127.0.0.1', resolve));
+  try {
+    const response = await fetch(`http://127.0.0.1:${shell.address().port}/send`, { method: 'POST', body: '{}' });
+    assert.equal(response.status, 200, 'cold native client startup must not be reported as unreachable after ten seconds');
+    assert.equal((await response.json()).accepted, true);
+  } finally {
+    for (const server of [shell, upstream]) { server.closeAllConnections(); await new Promise(resolve => server.close(resolve)); }
+  }
+  assert.equal(await budget('POST', '/api/claude-workbench/v1/sessions'), 90000);
+  assert.equal(await budget('POST', '/api/claude-workbench/v1/sessions/cold-client/input?scope=project'), 90000);
+  for (const [method, route] of [
+    ['GET', '/api/claude-workbench/v1/sessions'],
+    ['POST', '/api/claude-workbench/v1/sessions/cold-client/abort'],
+    ['POST', '/api/claude-workbench/v1/sessions/cold-client/permission'],
+    ['POST', '/api/engine/runs'],
+    ['POST', '/api/sessions/cold-client/input'],
+  ]) assert.equal(await budget(method, route), 10000, 'unrelated APIs must keep their ordinary timeout');
+  assert.equal(await budget('POST', '/api/claude-workbench/v1/system/pick-folder'), 600000);
+  const originalFetch = global.fetch;
+  let warning, failure;
+  const request = Readable.from([]); request.method = 'GET'; request.headers = {};
+  const response = new EventEmitter(); response.writeHead = () => {};
+  response.end = bytes => { response.writableEnded = true; failure = JSON.parse(bytes); };
+  try {
+    global.fetch = async () => { throw new Error('upstream leaked credential: secret-proxy-fixture'); };
+    const safeBridge = new ModuleBridge({ logger: { warn(...args) { warning = args; } } });
+    await safeBridge.proxy(request, response, 'http://127.0.0.1:5760/api/health?apiKey=secret-proxy-fixture');
+    assert.equal(failure.error, 'MODULE_UNREACHABLE');
+    assert.equal(failure.details.failureKind, 'NETWORK_ERROR');
+    assert.equal(failure.details.timeoutMs, 10000);
+    assert.equal(warning[0], 'module.proxy.failed');
+    assert.equal(warning[2].context.path, '/api/health');
+    assert.ok(!JSON.stringify([failure, warning]).includes('secret-proxy-fixture'), 'diagnostics omit queries, raw errors and credentials');
+  } finally { global.fetch = originalFetch; }
+  console.log('module-agent-start-proxy-test PASS');
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/module-artifact-integrity-test.js

@@ -1,27 +1,27 @@
-'use strict';
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-const crypto = require('node:crypto');
-const { verifyInstalled, safeRelative } = require('../scripts/pack-module-candidates');
-const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kb-module-integrity-'));
-const directory = path.join(root, 'node_modules/test-module'); fs.mkdirSync(directory, { recursive: true });
-const pkg = JSON.stringify({ name: 'test-module', version: '1.0.0' });
-fs.writeFileSync(path.join(directory, 'package.json'), pkg); fs.writeFileSync(path.join(directory, 'ui.js'), 'real-ui');
-const hash = text => crypto.createHash('sha256').update(text).digest('hex');
-const manifest = { modules: { test: { installName: 'test-module', name: 'test-module', version: '1.0.0', files: { 'package.json': hash(pkg), 'ui.js': hash('real-ui') } } } };
-verifyInstalled(manifest, root);
-fs.writeFileSync(path.join(directory, 'ui.js'), 'old-ui');
-assert.throws(() => verifyInstalled(manifest, root), /stale or altered/);
-for (const unsafe of ['../secret', '/absolute', 'ui/../../secret', 'ui\\secret', 'ui/./secret']) assert.equal(safeRelative(unsafe), false);
-assert.equal(safeRelative('ui/app.js'), true);
-const { contentAddressedArtifact } = require('../scripts/install-module-candidates');
-const tarball = path.join(root, 'same-version.tgz');
-fs.writeFileSync(tarball, 'old candidate'); const old = contentAddressedArtifact(tarball);
-fs.writeFileSync(tarball, 'new candidate'); const updated = contentAddressedArtifact(tarball);
-assert.notEqual(old.file, updated.file, 'same-version changes must invalidate the npm artifact address');
-assert.equal(fs.readFileSync(old.file, 'utf8'), 'old candidate');
-assert.equal(fs.readFileSync(updated.file, 'utf8'), 'new candidate');
-assert.equal(contentAddressedArtifact(tarball).file, updated.file, 'identical bytes keep a stable content address');
-console.log('module artifact integrity test PASS');
+'use strict';
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { verifyInstalled, safeRelative } = require('../scripts/pack-module-candidates');
+const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kb-module-integrity-'));
+const directory = path.join(root, 'node_modules/test-module'); fs.mkdirSync(directory, { recursive: true });
+const pkg = JSON.stringify({ name: 'test-module', version: '1.0.0' });
+fs.writeFileSync(path.join(directory, 'package.json'), pkg); fs.writeFileSync(path.join(directory, 'ui.js'), 'real-ui');
+const hash = text => crypto.createHash('sha256').update(text).digest('hex');
+const manifest = { modules: { test: { installName: 'test-module', name: 'test-module', version: '1.0.0', files: { 'package.json': hash(pkg), 'ui.js': hash('real-ui') } } } };
+verifyInstalled(manifest, root);
+fs.writeFileSync(path.join(directory, 'ui.js'), 'old-ui');
+assert.throws(() => verifyInstalled(manifest, root), /stale or altered/);
+for (const unsafe of ['../secret', '/absolute', 'ui/../../secret', 'ui\\secret', 'ui/./secret']) assert.equal(safeRelative(unsafe), false);
+assert.equal(safeRelative('ui/app.js'), true);
+const { contentAddressedArtifact } = require('../scripts/install-module-candidates');
+const tarball = path.join(root, 'same-version.tgz');
+fs.writeFileSync(tarball, 'old candidate'); const old = contentAddressedArtifact(tarball);
+fs.writeFileSync(tarball, 'new candidate'); const updated = contentAddressedArtifact(tarball);
+assert.notEqual(old.file, updated.file, 'same-version changes must invalidate the npm artifact address');
+assert.equal(fs.readFileSync(old.file, 'utf8'), 'old candidate');
+assert.equal(fs.readFileSync(updated.file, 'utf8'), 'new candidate');
+assert.equal(contentAddressedArtifact(tarball).file, updated.file, 'identical bytes keep a stable content address');
+console.log('module artifact integrity test PASS');

package/_site/_test/module-boundary-test.js

@@ -1,30 +1,30 @@
-'use strict';
-const assert = require('node:assert/strict');
-const { ModuleBridge } = require('../lib/module-bridge');
-
-(async () => {
-  const bridge = new ModuleBridge({ engineUrl: 'http://127.0.0.1:1', settingsStore: { read: () => ({ knowledge: { rootPath: 'D:/test-knowledge' }, brain: { id: 'brain-default', name: 'test', domains: [] } }) } });
-  let calls = [];
-  bridge.proxy = async (_req, _res, target) => calls.push(target);
-  for (const route of ['api/health', '%61pi/health', 'a/../api/runtime-config', '%2e%2e/api/control', '%252e%252e/api/control', 'x\\api/health', 'internal/maintenance-config']) {
-    const res = { end() {}, statusCode: 0 };
-    await bridge.proxyModuleUi({ method: 'GET' }, res, 'engine', route, '');
-    assert.equal(res.statusCode, 404); assert.equal(calls.length, 0);
-  }
-  await bridge.proxyModuleUi({ method: 'GET' }, { end() {} }, 'terminal', 'agent-terminal/app.js', '?embed=1');
-  assert.equal(calls.length, 1);
-  calls = [];
-  bridge._fetch = async (url, init) => {
-    if (url.endsWith('/scopes')) throw new Error('scope connection failure');
-    if (url.endsWith('/internal/maintenance-config') || url.endsWith('/internal/embedding-config')) throw new Error('profile source offline');
-    calls.push({ url, body: JSON.parse(init.body) });
-    return { ok: true };
-  };
-  const status = await bridge.syncEngineConfiguration();
-  assert.equal(status.scopes, false); assert.equal(status.model, false);
-  assert.equal(calls.length, 2);
-  assert.equal(calls.find(call => call.url.endsWith('/api/runtime-config')).body.profile, null, 'scope failures must not leave a stale model credential active');
-  assert.equal(calls.find(call => call.url.endsWith('/api/internal/runtime-config')).body.settings, null, 'profile source failure must clear a stale embedding credential');
-  assert.equal(status.embedding, false);
-  console.log('module-boundary-test PASS');
-})().catch(error => { console.error(error); process.exitCode = 1; });
+'use strict';
+const assert = require('node:assert/strict');
+const { ModuleBridge } = require('../lib/module-bridge');
+
+(async () => {
+  const bridge = new ModuleBridge({ engineUrl: 'http://127.0.0.1:1', settingsStore: { read: () => ({ knowledge: { rootPath: 'D:/test-knowledge' }, brain: { id: 'brain-default', name: 'test', domains: [] } }) } });
+  let calls = [];
+  bridge.proxy = async (_req, _res, target) => calls.push(target);
+  for (const route of ['api/health', '%61pi/health', 'a/../api/runtime-config', '%2e%2e/api/control', '%252e%252e/api/control', 'x\\api/health', 'internal/maintenance-config']) {
+    const res = { end() {}, statusCode: 0 };
+    await bridge.proxyModuleUi({ method: 'GET' }, res, 'engine', route, '');
+    assert.equal(res.statusCode, 404); assert.equal(calls.length, 0);
+  }
+  await bridge.proxyModuleUi({ method: 'GET' }, { end() {} }, 'terminal', 'agent-terminal/app.js', '?embed=1');
+  assert.equal(calls.length, 1);
+  calls = [];
+  bridge._fetch = async (url, init) => {
+    if (url.endsWith('/scopes')) throw new Error('scope connection failure');
+    if (url.endsWith('/internal/maintenance-config') || url.endsWith('/internal/embedding-config')) throw new Error('profile source offline');
+    calls.push({ url, body: JSON.parse(init.body) });
+    return { ok: true };
+  };
+  const status = await bridge.syncEngineConfiguration();
+  assert.equal(status.scopes, false); assert.equal(status.model, false);
+  assert.equal(calls.length, 2);
+  assert.equal(calls.find(call => call.url.endsWith('/api/runtime-config')).body.profile, null, 'scope failures must not leave a stale model credential active');
+  assert.equal(calls.find(call => call.url.endsWith('/api/internal/runtime-config')).body.settings, null, 'profile source failure must clear a stale embedding credential');
+  assert.equal(status.embedding, false);
+  console.log('module-boundary-test PASS');
+})().catch(error => { console.error(error); process.exitCode = 1; });