@sanqianx/project-knowledge 5.0.19 → 5.0.20-rc.1

package/_site/_test/legacy-workbench-exclusion-test.js

@@ -1,92 +1,92 @@
-// Run: node _site/_test/legacy-workbench-exclusion-test.js
-//
-// T17 / GATE LEGACY-001: old embedded Workbench pairs are excluded from
-// Development Conversation presentation and new commit binding; genuine
-// explicit MCP requirements survive; immutable snapshots and JSONL lines are
-// never rewritten.
-
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { StorageLayout } = require('../lib/storage-layout');
-const { ProjectStore } = require('../lib/project-store');
-const { ConversationStore } = require('../lib/conversation-store');
-const { CommitConversationBinder } = require('../lib/commit-conversation-binder');
-const { computeConversationExclusions, readDevelopmentEvents } = require('../lib/conversation-exclusions');
-
-const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-legacy-exclusion-${process.pid}-`));
-const layout = new StorageLayout({ dataDir: path.join(temp, 'data') });
-const projects = new ProjectStore({ layout });
-const store = new ConversationStore({ layout, projectStore: projects, logger: null });
-const projectId = 'project-legacy';
-
-const repoIdentity = { commonDir: path.join(temp, 'repo', '.git') };
-
-async function append(input) {
-  await store.appendEvent(projectId, {
-    source: 'claude-code',
-    sessionId: 'legacy-session',
-    projectPath: path.join(temp, 'repo'),
-    repoIdentity,
-    branch: 'main',
-    capturedAt: '2026-08-01T00:00:00.000Z',
-    ...input,
-  });
-}
-
-(async () => {
-  await projects.create(projectId, {
-    displayName: 'Legacy', storageName: 'legacy',
-    repoPath: path.join(temp, 'repo'), knowledgePath: path.join(temp, 'knowledge'),
-    repoIdentity,
-  }, { conversationBaselineCursor: 0 });
-
-  // Old embedded Workbench pair (explicit-REQ1 + embedded-assistant-REQ1).
-  await append({ eventId: 'explicit-REQ1', sequence: 1, eventType: 'user_prompt', role: 'user', content: 'Workbench prompt', turnId: 'turn-embed-1', identityConfidence: 'high' });
-  await append({ eventId: 'embedded-assistant-REQ1', sequence: 2, eventType: 'assistant_response', role: 'assistant', content: 'Workbench reply', turnId: 'turn-embed-1', rawEventType: 'embedded-claude-result', identityConfidence: 'high' });
-  // Genuine explicit MCP requirement NOT paired with an embedded assistant.
-  await append({ eventId: 'explicit-REQ2', sequence: 3, eventType: 'user_prompt', role: 'user', content: 'Genuine MCP requirement', turnId: 'turn-explicit-2', identityConfidence: 'explicit', explicitCommitSha: 'f'.repeat(40) });
-  // Modern bridge-projected event.
-  await append({ eventId: 'evt-bridge-1', sequence: 4, eventType: 'user_prompt', role: 'user', content: 'Modern bridge event', turnId: 'turn-bridge', identityConfidence: 'exact' });
-
-  const eventsRaw = store.readEvents(projectId);
-  assert.strictEqual(eventsRaw.length, 4, 'raw JSONL lines are never deleted');
-
-  const manifest = computeConversationExclusions(projectId, eventsRaw);
-  assert.deepStrictEqual(manifest.excludedEventIds, ['embedded-assistant-REQ1', 'explicit-REQ1'], 'only the embedded pair is excluded');
-
-  const development = readDevelopmentEvents(store, projectId);
-  assert.deepStrictEqual(development.map(event => event.eventId), ['explicit-REQ2', 'evt-bridge-1'], 'genuine explicit + bridge events survive');
-  assert.strictEqual(development.some(event => event.content === 'Workbench prompt'), false);
-  assert.strictEqual(development.some(event => event.content === 'Workbench reply'), false);
-
-  // Manifest persisted for audit; JSONL untouched.
-  const manifestFile = path.join(layout.getProjectMetadataDir(projectId), 'conversation-exclusions.json');
-  assert.ok(fs.existsSync(manifestFile), 'exclusion manifest is persisted');
-  assert.strictEqual(JSON.parse(fs.readFileSync(manifestFile, 'utf8')).schema, 'conversation-exclusions/v1');
-  assert.strictEqual(store.readEvents(projectId).length, 4, 'raw store still holds every historical line');
-
-  // New commit binding excludes the legacy pair.
-  const binder = new CommitConversationBinder({ layout, projectStore: projects, conversationStore: store });
-  const commitSha = 'a'.repeat(40);
-  store.writeBoundary(projectId, {
-    repoIdentity, commitSha, parentShas: [], branch: 'main', committedAt: '2026-08-02T00:00:00.000Z',
-    bridgeCursorAtCommit: 10, journalSequence: 10, openTurnIdsAtCommit: [], operationId: 'op-legacy',
-  });
-  const snapshot = await binder.bind({ projectId, commitSha });
-  assert.ok(!JSON.stringify(snapshot).includes('Workbench prompt'), 'legacy embedded pair never binds to a new commit');
-  assert.ok(!JSON.stringify(snapshot).includes('embedded-claude-result'));
-
-  // An old frozen snapshot written before the migration stays byte-identical.
-  const frozenPath = layout.getProjectCommitConversationPath(projectId, commitSha);
-  const before = fs.readFileSync(frozenPath, 'utf8');
-  const rebound = await binder.bind({ projectId, commitSha });
-  assert.strictEqual(rebound.snapshotHash, snapshot.snapshotHash, 'immutable snapshot untouched by exclusion');
-  assert.strictEqual(fs.readFileSync(frozenPath, 'utf8'), before);
-
-  console.log('legacy-workbench-exclusion-test PASS');
-})().catch(error => {
-  console.error(error.stack || error.message);
-  process.exitCode = 1;
-});
+// Run: node _site/_test/legacy-workbench-exclusion-test.js
+//
+// T17 / GATE LEGACY-001: old embedded Workbench pairs are excluded from
+// Development Conversation presentation and new commit binding; genuine
+// explicit MCP requirements survive; immutable snapshots and JSONL lines are
+// never rewritten.
+
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { StorageLayout } = require('../lib/storage-layout');
+const { ProjectStore } = require('../lib/project-store');
+const { ConversationStore } = require('../lib/conversation-store');
+const { CommitConversationBinder } = require('../lib/commit-conversation-binder');
+const { computeConversationExclusions, readDevelopmentEvents } = require('../lib/conversation-exclusions');
+
+const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-legacy-exclusion-${process.pid}-`));
+const layout = new StorageLayout({ dataDir: path.join(temp, 'data') });
+const projects = new ProjectStore({ layout });
+const store = new ConversationStore({ layout, projectStore: projects, logger: null });
+const projectId = 'project-legacy';
+
+const repoIdentity = { commonDir: path.join(temp, 'repo', '.git') };
+
+async function append(input) {
+  await store.appendEvent(projectId, {
+    source: 'claude-code',
+    sessionId: 'legacy-session',
+    projectPath: path.join(temp, 'repo'),
+    repoIdentity,
+    branch: 'main',
+    capturedAt: '2026-08-01T00:00:00.000Z',
+    ...input,
+  });
+}
+
+(async () => {
+  await projects.create(projectId, {
+    displayName: 'Legacy', storageName: 'legacy',
+    repoPath: path.join(temp, 'repo'), knowledgePath: path.join(temp, 'knowledge'),
+    repoIdentity,
+  }, { conversationBaselineCursor: 0 });
+
+  // Old embedded Workbench pair (explicit-REQ1 + embedded-assistant-REQ1).
+  await append({ eventId: 'explicit-REQ1', sequence: 1, eventType: 'user_prompt', role: 'user', content: 'Workbench prompt', turnId: 'turn-embed-1', identityConfidence: 'high' });
+  await append({ eventId: 'embedded-assistant-REQ1', sequence: 2, eventType: 'assistant_response', role: 'assistant', content: 'Workbench reply', turnId: 'turn-embed-1', rawEventType: 'embedded-claude-result', identityConfidence: 'high' });
+  // Genuine explicit MCP requirement NOT paired with an embedded assistant.
+  await append({ eventId: 'explicit-REQ2', sequence: 3, eventType: 'user_prompt', role: 'user', content: 'Genuine MCP requirement', turnId: 'turn-explicit-2', identityConfidence: 'explicit', explicitCommitSha: 'f'.repeat(40) });
+  // Modern bridge-projected event.
+  await append({ eventId: 'evt-bridge-1', sequence: 4, eventType: 'user_prompt', role: 'user', content: 'Modern bridge event', turnId: 'turn-bridge', identityConfidence: 'exact' });
+
+  const eventsRaw = store.readEvents(projectId);
+  assert.strictEqual(eventsRaw.length, 4, 'raw JSONL lines are never deleted');
+
+  const manifest = computeConversationExclusions(projectId, eventsRaw);
+  assert.deepStrictEqual(manifest.excludedEventIds, ['embedded-assistant-REQ1', 'explicit-REQ1'], 'only the embedded pair is excluded');
+
+  const development = readDevelopmentEvents(store, projectId);
+  assert.deepStrictEqual(development.map(event => event.eventId), ['explicit-REQ2', 'evt-bridge-1'], 'genuine explicit + bridge events survive');
+  assert.strictEqual(development.some(event => event.content === 'Workbench prompt'), false);
+  assert.strictEqual(development.some(event => event.content === 'Workbench reply'), false);
+
+  // Manifest persisted for audit; JSONL untouched.
+  const manifestFile = path.join(layout.getProjectMetadataDir(projectId), 'conversation-exclusions.json');
+  assert.ok(fs.existsSync(manifestFile), 'exclusion manifest is persisted');
+  assert.strictEqual(JSON.parse(fs.readFileSync(manifestFile, 'utf8')).schema, 'conversation-exclusions/v1');
+  assert.strictEqual(store.readEvents(projectId).length, 4, 'raw store still holds every historical line');
+
+  // New commit binding excludes the legacy pair.
+  const binder = new CommitConversationBinder({ layout, projectStore: projects, conversationStore: store });
+  const commitSha = 'a'.repeat(40);
+  store.writeBoundary(projectId, {
+    repoIdentity, commitSha, parentShas: [], branch: 'main', committedAt: '2026-08-02T00:00:00.000Z',
+    bridgeCursorAtCommit: 10, journalSequence: 10, openTurnIdsAtCommit: [], operationId: 'op-legacy',
+  });
+  const snapshot = await binder.bind({ projectId, commitSha });
+  assert.ok(!JSON.stringify(snapshot).includes('Workbench prompt'), 'legacy embedded pair never binds to a new commit');
+  assert.ok(!JSON.stringify(snapshot).includes('embedded-claude-result'));
+
+  // An old frozen snapshot written before the migration stays byte-identical.
+  const frozenPath = layout.getProjectCommitConversationPath(projectId, commitSha);
+  const before = fs.readFileSync(frozenPath, 'utf8');
+  const rebound = await binder.bind({ projectId, commitSha });
+  assert.strictEqual(rebound.snapshotHash, snapshot.snapshotHash, 'immutable snapshot untouched by exclusion');
+  assert.strictEqual(fs.readFileSync(frozenPath, 'utf8'), before);
+
+  console.log('legacy-workbench-exclusion-test PASS');
+})().catch(error => {
+  console.error(error.stack || error.message);
+  process.exitCode = 1;
+});

package/_site/_test/live-gateway-test.js

@@ -1,48 +1,48 @@
-'use strict';
-const assert = require('node:assert/strict');
-const http = require('node:http');
-const { once } = require('node:events');
-const { WebSocket } = require('ws');
-const { attachLiveGateway } = require('../lib/live-gateway');
-const wait = ms => new Promise(resolve => setTimeout(resolve, ms));
-(async () => {
-  let active = 0, total = 0;
-  const upstream = http.createServer((req, res) => {
-    active++; total++;
-    res.writeHead(200, { 'Content-Type': 'text/event-stream' });
-    res.write('id: 17\r\nevent: snapshot\r\ndata: {"ok":true}\r');
-    setTimeout(() => { if (!res.destroyed) res.write('\n\r\n'); }, 5);
-    req.on('close', () => { active--; });
-  });
-  await new Promise(resolve => upstream.listen(0, '127.0.0.1', resolve));
-  const origin = `http://127.0.0.1:${upstream.address().port}`;
-  const server = http.createServer();
-  const runtime = { moduleBridge: { engineUrl: origin, engineCompatible: true, _terminalApi: route => origin + route } };
-  const gateway = attachLiveGateway(server, runtime);
-  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
-  const base = `http://127.0.0.1:${server.address().port}`, clients = [];
-  try {
-    for (let i = 0; i < 8; i++) {
-      const ws = new WebSocket(base.replace('http:', 'ws:') + '/api/live', { origin: base }); clients.push(ws);
-      await once(ws, 'open');
-      const messages = []; ws.on('message', b => messages.push(JSON.parse(String(b))));
-      ws.send(JSON.stringify({ type: 'subscribe', id: 'engine', route: '/api/engine/progress?summary=1' }));
-      for (let n = 0; n < 100 && !messages.some(m => m.type === 'event'); n++) await wait(5);
-      const event = messages.find(m => m.type === 'event'); assert.equal(event.event, 'snapshot'); assert.equal(event.cursor, '17'); assert.deepEqual(JSON.parse(event.data), { ok: true });
-      ws.send(JSON.stringify({ type: 'subscribe', id: 'invalid', route: 'http://attacker.invalid/private' }));
-      for (let n = 0; n < 100 && !messages.some(m => m.id === 'invalid'); n++) await wait(5);
-      assert.equal(messages.find(m => m.id === 'invalid').code, 'INVALID_SUBSCRIPTION');
-    }
-    assert.equal(active, 8); assert.equal(total, 8, 'invalid URLs never fetch an upstream');
-    const last = clients.at(-1);
-    last.send(JSON.stringify({ type: 'unsubscribe', id: 'engine' }));
-    for (let n = 0; n < 100 && active !== 7; n++) await wait(5);
-    assert.equal(active, 7, 'unsubscribing releases the upstream');
-    const rejected = new WebSocket(base.replace('http:', 'ws:') + '/api/live', { origin: 'http://evil.invalid' });
-    await new Promise(resolve => { rejected.on('error', resolve); rejected.on('open', () => { throw new Error('cross-origin upgrade was accepted'); }); });
-    gateway.close();
-    for (let n = 0; n < 100 && active; n++) await wait(5);
-    assert.equal(active, 0);
-    console.log('live-gateway-test PASS (8 real sockets, CRLF frames, bounded allowlist, unsubscribe and shutdown release)');
-  } finally { for (const ws of clients) ws.terminate(); gateway.close(); upstream.closeAllConnections(); await Promise.all([new Promise(r => server.close(r)), new Promise(r => upstream.close(r))]); }
-})().catch(error => { console.error(error); process.exitCode = 1; });
+'use strict';
+const assert = require('node:assert/strict');
+const http = require('node:http');
+const { once } = require('node:events');
+const { WebSocket } = require('ws');
+const { attachLiveGateway } = require('../lib/live-gateway');
+const wait = ms => new Promise(resolve => setTimeout(resolve, ms));
+(async () => {
+  let active = 0, total = 0;
+  const upstream = http.createServer((req, res) => {
+    active++; total++;
+    res.writeHead(200, { 'Content-Type': 'text/event-stream' });
+    res.write('id: 17\r\nevent: snapshot\r\ndata: {"ok":true}\r');
+    setTimeout(() => { if (!res.destroyed) res.write('\n\r\n'); }, 5);
+    req.on('close', () => { active--; });
+  });
+  await new Promise(resolve => upstream.listen(0, '127.0.0.1', resolve));
+  const origin = `http://127.0.0.1:${upstream.address().port}`;
+  const server = http.createServer();
+  const runtime = { moduleBridge: { engineUrl: origin, engineCompatible: true, _terminalApi: route => origin + route } };
+  const gateway = attachLiveGateway(server, runtime);
+  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+  const base = `http://127.0.0.1:${server.address().port}`, clients = [];
+  try {
+    for (let i = 0; i < 8; i++) {
+      const ws = new WebSocket(base.replace('http:', 'ws:') + '/api/live', { origin: base }); clients.push(ws);
+      await once(ws, 'open');
+      const messages = []; ws.on('message', b => messages.push(JSON.parse(String(b))));
+      ws.send(JSON.stringify({ type: 'subscribe', id: 'engine', route: '/api/engine/progress?summary=1' }));
+      for (let n = 0; n < 100 && !messages.some(m => m.type === 'event'); n++) await wait(5);
+      const event = messages.find(m => m.type === 'event'); assert.equal(event.event, 'snapshot'); assert.equal(event.cursor, '17'); assert.deepEqual(JSON.parse(event.data), { ok: true });
+      ws.send(JSON.stringify({ type: 'subscribe', id: 'invalid', route: 'http://attacker.invalid/private' }));
+      for (let n = 0; n < 100 && !messages.some(m => m.id === 'invalid'); n++) await wait(5);
+      assert.equal(messages.find(m => m.id === 'invalid').code, 'INVALID_SUBSCRIPTION');
+    }
+    assert.equal(active, 8); assert.equal(total, 8, 'invalid URLs never fetch an upstream');
+    const last = clients.at(-1);
+    last.send(JSON.stringify({ type: 'unsubscribe', id: 'engine' }));
+    for (let n = 0; n < 100 && active !== 7; n++) await wait(5);
+    assert.equal(active, 7, 'unsubscribing releases the upstream');
+    const rejected = new WebSocket(base.replace('http:', 'ws:') + '/api/live', { origin: 'http://evil.invalid' });
+    await new Promise(resolve => { rejected.on('error', resolve); rejected.on('open', () => { throw new Error('cross-origin upgrade was accepted'); }); });
+    gateway.close();
+    for (let n = 0; n < 100 && active; n++) await wait(5);
+    assert.equal(active, 0);
+    console.log('live-gateway-test PASS (8 real sockets, CRLF frames, bounded allowlist, unsubscribe and shutdown release)');
+  } finally { for (const ws of clients) ws.terminate(); gateway.close(); upstream.closeAllConnections(); await Promise.all([new Promise(r => server.close(r)), new Promise(r => upstream.close(r))]); }
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/local-marketplace-test.js

@@ -1,16 +1,16 @@
-'use strict';
-const assert = require('node:assert/strict');
-const path = require('node:path');
-const { IntegrationManager } = require('../lib/integration-installer');
-const commands = [];
-const root = path.resolve(__dirname, '../..');
-const manager = new IntegrationManager({ rootDir: root, commandResolver: name => name, runner: (cmd, args) => {
-  commands.push(args);
-  return { status: 0, stdout: '[]', stderr: '' };
-} });
-manager.ensureClaudeMarketplace();
-assert.equal(commands.find(args => args.slice(0, 3).join(' ') === 'plugin marketplace add')[3], root, 'Claude installs from the downloaded npm package, not GitHub');
-const custom = new IntegrationManager({ marketplaceSource: 'https://example.invalid/explicit.git', commandResolver: name => name, runner: (cmd, args) => ({ status: 0, stdout: '[]' }), dryRun: true });
-custom.ensureClaudeMarketplace();
-assert.equal(custom.planned[0].args[3], 'https://example.invalid/explicit.git');
-console.log('Local marketplace and explicit-source override passed.');
+'use strict';
+const assert = require('node:assert/strict');
+const path = require('node:path');
+const { IntegrationManager } = require('../lib/integration-installer');
+const commands = [];
+const root = path.resolve(__dirname, '../..');
+const manager = new IntegrationManager({ rootDir: root, commandResolver: name => name, runner: (cmd, args) => {
+  commands.push(args);
+  return { status: 0, stdout: '[]', stderr: '' };
+} });
+manager.ensureClaudeMarketplace();
+assert.equal(commands.find(args => args.slice(0, 3).join(' ') === 'plugin marketplace add')[3], root, 'Claude installs from the downloaded npm package, not GitHub');
+const custom = new IntegrationManager({ marketplaceSource: 'https://example.invalid/explicit.git', commandResolver: name => name, runner: (cmd, args) => ({ status: 0, stdout: '[]' }), dryRun: true });
+custom.ensureClaudeMarketplace();
+assert.equal(custom.planned[0].args[3], 'https://example.invalid/explicit.git');
+console.log('Local marketplace and explicit-source override passed.');

package/_site/_test/log-redaction-test.js

@@ -1,58 +1,58 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { StorageLayout } = require('../lib/storage-layout');
-const { Logger, LogRepository, redactValue, serializeError } = require('../lib/structured-logger');
-
-(async () => {
-  const secret = 'sk-secret-123456';
-  const value = redactValue({
-    apiKey: secret,
-    headers: { authorization: 'Bearer ' + secret },
-    url: 'https://user:' + secret + '@example.invalid/path?token=' + secret,
-    nested: [{ clientSecret: secret }, { safe: 'visible' }],
-  }, { secrets: [secret] });
-  const text = JSON.stringify(value);
-  assert(!text.includes(secret));
-  assert(text.includes('visible'));
-
-  const cause = Object.assign(new Error('cause ' + secret), { code: 'ECAUSE' });
-  const error = Object.assign(new Error('Bearer ' + secret), { code: 'ETEST', cause });
-  const serialized = JSON.stringify(serializeError(error, { secrets: [secret] }));
-  assert(!serialized.includes(secret));
-  assert(serialized.includes('ETEST'));
-  assert(serialized.includes('ECAUSE'));
-
-  const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-dynamic-redaction-'));
-  try {
-    const layout = new StorageLayout({ dataDir });
-    let currentSecret = 'dynamic-secret-one';
-    const settings = { levels: ['info', 'error'], retentionDays: 365, maxTotalSizeMB: 10 };
-    const secretsProvider = () => [currentSecret];
-    const logger = new Logger({ layout, settingsProvider: () => settings, secretsProvider });
-    await logger.info('secret.first', 'first ' + currentSecret, { context: { echoed: currentSecret } });
-    currentSecret = 'dynamic-secret-two';
-    await logger.error('secret.second', 'second ' + currentSecret, { error: new Error('failure ' + currentSecret) });
-    await logger.close();
-
-    const repository = new LogRepository({ layout, settingsProvider: () => settings, secretsProvider });
-    const page = repository.query({ from: '2000-01-01', to: '2999-12-31' });
-    const queried = JSON.stringify(page);
-    assert(!queried.includes(currentSecret), 'current configured secret must be redacted during query');
-    assert(!queried.includes('dynamic-secret-one'), 'write-time configured secret must be redacted before persistence');
-
-    const exportPath = path.join(dataDir, 'export.jsonl');
-    repository.exportToFile(exportPath, { from: '2000-01-01', to: '2999-12-31' });
-    const exported = fs.readFileSync(exportPath, 'utf8');
-    assert(!exported.includes('dynamic-secret-one'));
-    assert(!exported.includes('dynamic-secret-two'));
-  } finally {
-    fs.rmSync(dataDir, { recursive: true, force: true });
-  }
-
-  console.log('log-redaction-test PASS');
-})().catch(error => {
-  console.error(error.stack || error.message);
-  process.exitCode = 1;
-});
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { StorageLayout } = require('../lib/storage-layout');
+const { Logger, LogRepository, redactValue, serializeError } = require('../lib/structured-logger');
+
+(async () => {
+  const secret = 'sk-secret-123456';
+  const value = redactValue({
+    apiKey: secret,
+    headers: { authorization: 'Bearer ' + secret },
+    url: 'https://user:' + secret + '@example.invalid/path?token=' + secret,
+    nested: [{ clientSecret: secret }, { safe: 'visible' }],
+  }, { secrets: [secret] });
+  const text = JSON.stringify(value);
+  assert(!text.includes(secret));
+  assert(text.includes('visible'));
+
+  const cause = Object.assign(new Error('cause ' + secret), { code: 'ECAUSE' });
+  const error = Object.assign(new Error('Bearer ' + secret), { code: 'ETEST', cause });
+  const serialized = JSON.stringify(serializeError(error, { secrets: [secret] }));
+  assert(!serialized.includes(secret));
+  assert(serialized.includes('ETEST'));
+  assert(serialized.includes('ECAUSE'));
+
+  const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-dynamic-redaction-'));
+  try {
+    const layout = new StorageLayout({ dataDir });
+    let currentSecret = 'dynamic-secret-one';
+    const settings = { levels: ['info', 'error'], retentionDays: 365, maxTotalSizeMB: 10 };
+    const secretsProvider = () => [currentSecret];
+    const logger = new Logger({ layout, settingsProvider: () => settings, secretsProvider });
+    await logger.info('secret.first', 'first ' + currentSecret, { context: { echoed: currentSecret } });
+    currentSecret = 'dynamic-secret-two';
+    await logger.error('secret.second', 'second ' + currentSecret, { error: new Error('failure ' + currentSecret) });
+    await logger.close();
+
+    const repository = new LogRepository({ layout, settingsProvider: () => settings, secretsProvider });
+    const page = repository.query({ from: '2000-01-01', to: '2999-12-31' });
+    const queried = JSON.stringify(page);
+    assert(!queried.includes(currentSecret), 'current configured secret must be redacted during query');
+    assert(!queried.includes('dynamic-secret-one'), 'write-time configured secret must be redacted before persistence');
+
+    const exportPath = path.join(dataDir, 'export.jsonl');
+    repository.exportToFile(exportPath, { from: '2000-01-01', to: '2999-12-31' });
+    const exported = fs.readFileSync(exportPath, 'utf8');
+    assert(!exported.includes('dynamic-secret-one'));
+    assert(!exported.includes('dynamic-secret-two'));
+  } finally {
+    fs.rmSync(dataDir, { recursive: true, force: true });
+  }
+
+  console.log('log-redaction-test PASS');
+})().catch(error => {
+  console.error(error.stack || error.message);
+  process.exitCode = 1;
+});

package/_site/_test/markdown-maintenance-test.js

@@ -1,11 +1,11 @@
-const assert = require('assert');
-const { canonicalRelativePath, validateMarkdown } = require('../lib/knowledge-promotion');
-
-assert.strictEqual(canonicalRelativePath('modules/core.md'), 'modules/core.md');
-for (const invalid of ['../outside.md', '/absolute.md', 'modules/00-index.md', 'module.txt', 'CON.md', 'modules/file.md:stream']) {
-  assert.throws(() => canonicalRelativePath(invalid), undefined, `unsafe promotion path should fail: ${invalid}`);
-}
-assert.doesNotThrow(() => validateMarkdown('# Verified fact\n\nEvidence-backed content.\n', 'modules/core.md'));
-assert.throws(() => validateMarkdown('# Placeholder\n\nTODO: invent this later.\n', 'modules/core.md'), /placeholder/i);
-assert.throws(() => validateMarkdown('# Title\n\n\u0000invalid', 'modules/core.md'), /control/i);
-console.log('markdown-maintenance-test: PASS');
+const assert = require('assert');
+const { canonicalRelativePath, validateMarkdown } = require('../lib/knowledge-promotion');
+
+assert.strictEqual(canonicalRelativePath('modules/core.md'), 'modules/core.md');
+for (const invalid of ['../outside.md', '/absolute.md', 'modules/00-index.md', 'module.txt', 'CON.md', 'modules/file.md:stream']) {
+  assert.throws(() => canonicalRelativePath(invalid), undefined, `unsafe promotion path should fail: ${invalid}`);
+}
+assert.doesNotThrow(() => validateMarkdown('# Verified fact\n\nEvidence-backed content.\n', 'modules/core.md'));
+assert.throws(() => validateMarkdown('# Placeholder\n\nTODO: invent this later.\n', 'modules/core.md'), /placeholder/i);
+assert.throws(() => validateMarkdown('# Title\n\n\u0000invalid', 'modules/core.md'), /control/i);
+console.log('markdown-maintenance-test: PASS');