@sanqianx/project-knowledge 5.0.19 → 5.0.20-rc.1

package/_modules/knowledge-engine/README.md

@@ -114,6 +114,10 @@ node src/bin.js serve [--port 5790] [--host 127.0.0.1] [--data DIR]
 
 ## 验证与尚未验收项
 
+默认维护模型额度或余额不足时，不会成功生成知识；提交任务仍先持久化。SDK 明确报告 billing 错误时记录 `MODEL_QUOTA_EXHAUSTED`，请求限流单独记录 `MODEL_RATE_LIMITED`，不把任意 HTTP 429 当作余额耗尽。同项目后续提交保持排队，失败与排队记录跨重启保留；恢复额度或更换默认维护模型后需显式重试前一条失败提交，不会自动消耗额度反复重试。
+
+`/api/snapshot` 的兼容扩展字段 `maintenance` 包含执行启用状态、事件消费启用状态及按当前项目过滤的 journal 故障。建单前的消费故障不会伪造提交运行；外壳展示“提交事件消费受阻”，不能将零条运行当作没有提交。故障变化和恢复通过现有 progress 流通知，稳定故障不产生重复刷新事件。未启动服务时，Hook 已捕获的事件保留于 journal，服务消费后才生成分析任务。
+
 `npm test` 覆盖真实 Git/Hook、真实分项目 journal、真实 vector-hub 文件索引、晋升、重复抑制、FIFO/并发、记忆、旧格式拒绝、新版恢复及进程隔离。自动测试中的模型和 embedding 是可控替身。
 
 `npm run test:web` 使用兄弟源码仓库启动隔离的五服务网页环境，只有模型与 embedding 是替身。单一 1920×1080 视口验证双目录 UI 导入、真实 Hook 到自动刷新、原生消息流与中止、快速项目切换/草稿/历史、迟到检索及文件响应、领域检索、记忆落盘、四 iframe 身份与主题、唯一进度连接、诊断关闭和保留数据解绑；不会在用户代码仓库提交。该脚本是开发验收工具，不属于引擎生产运行依赖。

package/_modules/knowledge-engine/src/analysis-failures.js

@@ -0,0 +1,39 @@
+'use strict';
+
+const failures = {
+  MODEL_QUOTA_EXHAUSTED: '默认维护模型的额度或余额不足。提交证据与失败记录已保留；恢复额度或更换默认模型后，请重试此提交。',
+  MODEL_RATE_LIMITED: '默认维护模型请求受限。提交证据与失败记录已保留，请稍后重试。',
+  MODEL_AUTH_FAILED: '默认维护模型认证失败。提交证据与失败记录已保留，请检查凭据后重试。',
+  AI_RUNTIME_REQUIRED: '后台分析运行时不可用，请修复安装后重试。',
+  ANALYSIS_OUTPUT_MISSING: '后台分析未生成有效文件，提交证据与失败记录已保留，请重试。',
+  MODEL_FAILED: '后台 Agent 分析失败。提交证据与失败记录已保留，请检查默认维护模型后重试。',
+};
+
+// Provider text can echo credentials. Classify structured codes only; neither
+// raw messages nor unknown codes may cross the worker IPC boundary.
+function classifyAnalysisFailure(input) {
+  const codes = new Set(), statuses = new Set(), seen = new Set();
+  function collect(value, depth = 0) {
+    if (typeof value === 'string') { codes.add(value.toLowerCase()); return; }
+    if (!value || typeof value !== 'object' || depth > 3 || seen.has(value)) return;
+    seen.add(value);
+    for (const key of ['code', 'type']) if (typeof value[key] === 'string') codes.add(value[key].toLowerCase());
+    if (value.status !== undefined) statuses.add(Number(value.status));
+    collect(value.error, depth + 1); collect(value.cause, depth + 1);
+  }
+  collect(input);
+  const has = (...values) => values.some(value => codes.has(value));
+  if (has('billing_error', 'insufficient_quota', 'quota_exceeded', 'insufficient_balance', 'model_quota_exhausted')) return 'MODEL_QUOTA_EXHAUSTED';
+  if (has('authentication_failed', 'authentication_error', 'model_auth_failed') || statuses.has(401)) return 'MODEL_AUTH_FAILED';
+  if (has('rate_limit', 'rate_limit_error', 'model_rate_limited') || statuses.has(429)) return 'MODEL_RATE_LIMITED';
+  if (has('module_not_found', 'ai_runtime_required')) return 'AI_RUNTIME_REQUIRED';
+  if (has('analysis_output_missing')) return 'ANALYSIS_OUTPUT_MISSING';
+  return 'MODEL_FAILED';
+}
+
+function analysisFailure(code) {
+  code = Object.hasOwn(failures, code) ? code : 'MODEL_FAILED';
+  return Object.assign(new Error(failures[code]), { code, retryable: true });
+}
+
+module.exports = { classifyAnalysisFailure, analysisFailure };

package/_modules/knowledge-engine/src/analysis-worker.js

@@ -4,6 +4,7 @@ const { pathToFileURL } = require('node:url');
 const { evaluateAutomationToolUse } = require('./runtime/automation-config');
 const { RuntimeLayout } = require('./runtime/layout');
 const { ANALYSIS_SYSTEM_INSTRUCTIONS, requireAnalysisOutput } = require('./analysis-contract');
+const { classifyAnalysisFailure, analysisFailure } = require('./analysis-failures');
 
 const abortController = new AbortController();
 process.once('SIGTERM', () => abortController.abort());
@@ -11,6 +12,7 @@ process.once('disconnect', () => abortController.abort());
 process.on('message', message => { if (message?.type === 'cancel') abortController.abort(); });
 
 process.once('message', async job => {
+  let failureCode = 'MODEL_FAILED';
   try {
     const { query } = await import(pathToFileURL(require.resolve('@anthropic-ai/claude-agent-sdk')).href);
     const layout = new RuntimeLayout(job.stagingPath);
@@ -40,15 +42,17 @@ process.once('message', async job => {
       }] }] },
     } });
     for await (const message of turn) {
+      if (message.type === 'assistant' && message.error) failureCode = classifyAnalysisFailure(message.error);
       if (message.type === 'result') completed = message.subtype === 'success' && !message.is_error;
     }
-    if (!completed) throw new Error('MODEL_FAILED');
+    if (!completed) throw analysisFailure(failureCode);
     requireAnalysisOutput(job.manifestPath);
     process.send({ type: 'complete' }, () => process.exit(0));
   } catch (error) {
     // SDK/provider messages can echo credentials. Only controlled codes leave
     // this isolated process; raw output is never written to state or logs.
-    const code = error.code === 'MODULE_NOT_FOUND' ? 'AI_RUNTIME_REQUIRED' : error.code === 'ANALYSIS_OUTPUT_MISSING' ? error.code : 'MODEL_FAILED';
+    const classified = classifyAnalysisFailure(error);
+    const code = classified === 'MODEL_FAILED' ? failureCode : classified;
     process.send({ type: 'failure', code }, () => process.exit(1));
   }
 });

package/_modules/knowledge-engine/src/coordinator.js

@@ -137,6 +137,7 @@ class EngineCoordinator extends EventEmitter {
     return job;
   }
   async drainJournals() {
+    const prior = JSON.stringify([...this.journalFailures.values()]);
     this.draining = true;
     try {
       await this.bridge.registerConsumer('knowledge-engine', { journals: ['*'] });
@@ -157,8 +158,14 @@ class EngineCoordinator extends EventEmitter {
     finally {
       this.journalError = this.journalFailures.size ? '事件消费异常，未消费证据与游标已保留，请查看诊断日志。' : null;
       this.draining = false;
+      if (JSON.stringify([...this.journalFailures.values()]) !== prior) this.emit('progress', this.store.addEvent({ type: 'knowledge.journal', summary: this.journalError ? '提交事件消费受阻，请查看维护状态' : '提交事件消费已恢复' }));
     }
   }
+  maintenanceStatus(projectId) {
+    const project = projectId ? this.store.getProject(projectId) : null;
+    const failures = [...this.journalFailures.values()].filter(failure => !projectId || failure.journalId === 'connection' || (failure.journalId === 'global' && !failure.projectId) || failure.projectId === projectId || failure.journalId === project?.journalId);
+    return { projectId: projectId || null, executionEnabled: this.executionEnabled && (!projectId || !!project && (!this.allowedProjects || this.allowedProjects.has(projectId))), consuming: this.consume, journal: { error: failures.length ? this.journalError : null, failures } };
+  }
   async recordJournalFailure(journalId, error) {
     const context = error.journalContext || {};
     const failure = { journalId, sequence: context.sequence ?? null, projectId: context.projectId || null, code: error.code || 'JOURNAL_FAILED', message: this.safeMessage(error.message) };

package/_modules/knowledge-engine/src/headless-analyzer.js

@@ -4,6 +4,7 @@ const path = require('node:path');
 const { frameFrozenEvidence, memoryCandidateContract } = require('./analysis-contract');
 const { finalizeAnalysisOutput } = require('./analysis-output');
 const { freezeKnowledgeTargets } = require('./knowledge-targets');
+const { analysisFailure } = require('./analysis-failures');
 
 class HeadlessAnalyzer {
   get sourceReadMode() { return 'isolated-frozen-evidence'; }
@@ -42,7 +43,7 @@ class HeadlessAnalyzer {
       const timer = setTimeout(() => stop(Object.assign(new Error('知识分析超时。'), { code: 'MODEL_TIMEOUT', retryable: true })), this.timeoutMs);
       child.on('message', message => {
         if (message?.type === 'complete') stop();
-        else if (message?.type === 'failure') stop(Object.assign(new Error('后台 Agent 分析失败，请检查模型配置。'), { code: ['AI_RUNTIME_REQUIRED', 'ANALYSIS_OUTPUT_MISSING'].includes(message.code) ? message.code : 'MODEL_FAILED', retryable: true }));
+        else if (message?.type === 'failure') stop(analysisFailure(message.code));
       });
       child.on('error', () => stop(Object.assign(new Error('无法启动后台分析进程。'), { code: 'WORKER_START_FAILED', retryable: true })));
       // A completion message is not an exit: retain the directory lock until

package/_modules/knowledge-engine/src/server.js

@@ -143,7 +143,7 @@ async function api(method, pathname, search, body, store, coordinator, ctx) {
   if (method === 'GET' && pathname === '/api/events') return { events: store.listEvents(search.get('limit')).filter(e => !search.get('projectId') || e.projectId === search.get('projectId')) };
   if (method === 'POST' && pathname === '/api/events' && ctx.debug) return { event: store.addEvent(body) };
   if (method === 'POST' && pathname === '/api/bridge/notify') { if (coordinator.consume) coordinator.drain(); return { accepted: true }; }
-  if (method === 'GET' && pathname === '/api/snapshot') return { projects: store.listProjects(), ...(search.get('summary') === '1' ? store.listRunPage({ projectId: search.get('projectId'), limit: search.get('limit') || 50, before: search.get('before') }) : { runs: store.listRuns(search.get('projectId')) }), events: store.listEvents(50), memories: coordinator.memories.list(), sharedScopes: store.state.sharedScopes };
+  if (method === 'GET' && pathname === '/api/snapshot') return { projects: store.listProjects(), ...(search.get('summary') === '1' ? store.listRunPage({ projectId: search.get('projectId'), limit: search.get('limit') || 50, before: search.get('before') }) : { runs: store.listRuns(search.get('projectId')) }), events: store.listEvents(50), memories: coordinator.memories.list(), sharedScopes: store.state.sharedScopes, maintenance: coordinator.maintenanceStatus(search.get('projectId')) };
   throw httpError(404, 'NOT_FOUND', '接口不存在。');
 }
 

package/_site/_test/agent-capture-mcp-ui-test.js

@@ -1,67 +1,67 @@
-'use strict';
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-const http = require('node:http');
-const { createRequire } = require('node:module');
-const coreRoot = path.resolve(process.env.KB_CAPTURE_TEST_CORE_ROOT || path.join(__dirname, '../..'));
-const fromCore = createRequire(path.join(coreRoot, 'package.json'));
-const { createRuntime, initializeRuntime, createRequestHandler } = fromCore('./_site/lib/server-app');
-const { BridgeAdapter } = fromCore('./_site/lib/bridge-adapter');
-const { ModuleBridge } = fromCore('./_site/lib/module-bridge');
-const { findChrome } = require('./helpers/find-chrome');
-const { launchCdpBrowser, waitFor } = require('./helpers/cdp-browser');
-
-const HOSTILE_DETAIL = '<img src=x onerror="window.__kbXssProbe=1"> INJECT-STATUS-MARKER sk-abcdef123456';
-
-function clientFixture(client, label) {
-  const mcpCapable = client === 'claude' || client === 'codex';
-  return {
-    client, label, available: false, configFound: false,
-    knowledgeIntegration: { ok: true, state: 'installed' },
-    automaticContext: { supported: client !== 'opencode', configured: false, state: 'check-failed', detail: HOSTILE_DETAIL },
-    developmentCapture: { ok: true, state: 'installed', installed: true, detail: HOSTILE_DETAIL },
-    mcpStartup: mcpCapable ? { state: 'failed', checkedAt: new Date().toISOString(), scope: 'client:' + client, code: 'PROBE_TIMEOUT', expectedVersion: '9.9.9-test', detail: HOSTILE_DETAIL } : undefined,
-  };
-}
-
-async function main() {
-  const temp = fs.mkdtempSync(path.join(os.tmpdir(), 'kb-agent-mcp-ui-'));
-  const dataDir = path.join(temp, 'data');
-  const homeDir = path.join(temp, 'home');
-  const eventsHome = path.join(dataDir, 'events');
-  const offline = http.createServer((req, res) => { res.writeHead(503, { 'content-type': 'application/json' }); res.end(JSON.stringify({ ok: false, error: { message: 'offline stub' } })); });
-  await new Promise(resolve => offline.listen(0, '127.0.0.1', resolve));
-  const offlineUrl = 'http://127.0.0.1:' + offline.address().port;
-  const runtime = createRuntime({ dataDir, analysisOwner: 'engine', bridgeAdapter: new BridgeAdapter({ dataDir, bridgeHomeDir: eventsHome }), moduleBridge: new ModuleBridge({ terminalUrl: offlineUrl, engineUrl: offlineUrl, eventBridgeUrl: offlineUrl, vectorHubUrl: offlineUrl }) });
-  await initializeRuntime(runtime);
-  const server = http.createServer(createRequestHandler(runtime, { integrationOptions: { homeDir, env: {}, commandResolver: () => '' } }));
-  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
-  const base = 'http://127.0.0.1:' + server.address().port;
-  const payload = JSON.stringify({ bridge: { ok: true }, scan: { state: 'ready' }, clients: [clientFixture('claude', 'Claude Code'), clientFixture('codex', 'Codex'), clientFixture('zcode', 'ZCode'), clientFixture('opencode', 'OpenCode')] });
-  let browser;
-  try {
-    browser = await launchCdpBrowser({ chrome: findChrome(), profileDir: path.join(temp, 'browser'), url: base, width: 1440, height: 900 });
-    const run = expression => browser.evaluate(expression);
-    const click = selector => run('document.querySelector(' + JSON.stringify(selector) + ').click()');
-    await run('(() => { const original = window.fetch; window.__originalFetch = original; window.fetch = (input, init) => { const url = String(input && input.url || input); if (url.includes(\'/api/integrations/status\')) { return Promise.resolve({ ok: true, json: async () => (' + payload + ') }); } return original(input, init); }; })()');
-    await click('#openSystem');
-    await waitFor(() => run("document.querySelectorAll('#agentCaptureList .agent-capture-row').length === 4"), 'capture rows render');
-    assert(await run("document.getElementById('agentCaptureList').textContent.includes('PROBE_TIMEOUT')"), 'the MCP startup failure code must be rendered for MCP-capable clients');
-    const claudeRowHtml = await run("document.querySelector('#agentCaptureList .agent-capture-row').innerHTML");
-    assert(claudeRowHtml.includes('&lt;img'), 'hostile mcpStartup detail must be HTML-escaped, got: ' + claudeRowHtml.slice(0, 300));
-    assert(!claudeRowHtml.includes('<img'), 'no raw hostile markup may reach the DOM');
-    assert.equal(await run('window.__kbXssProbe'), undefined, 'the hostile onerror must never execute');
-    const smalls = await run("[...document.querySelectorAll('#agentCaptureList small')].map(el => el.textContent).join('|')");
-    assert(smalls.split('|').some(text => text.startsWith('MCP')), 'the MCP diagnostic is its own line item, got: ' + smalls);
-    assert.equal(browser.exceptions.length, 0, JSON.stringify(browser.exceptions));
-    console.log('agent-capture-mcp-ui-test PASS (MCP line rendered separately; hostile detail escaped; no XSS execution)');
-  } finally {
-    await browser?.close(); server.closeAllConnections(); await new Promise(resolve => server.close(resolve));
-    offline.closeAllConnections(); await new Promise(resolve => offline.close(resolve)); await runtime.logger.close();
-    assert.equal(path.dirname(temp), path.resolve(os.tmpdir())); assert.ok(path.basename(temp).startsWith('kb-agent-mcp-ui-'));
-    fs.rmSync(temp, { recursive: true, force: true, maxRetries: 12, retryDelay: 200 });
-  }
-}
-main().catch(error => { console.error(error.stack); process.exitCode = 1; });
+'use strict';
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const http = require('node:http');
+const { createRequire } = require('node:module');
+const coreRoot = path.resolve(process.env.KB_CAPTURE_TEST_CORE_ROOT || path.join(__dirname, '../..'));
+const fromCore = createRequire(path.join(coreRoot, 'package.json'));
+const { createRuntime, initializeRuntime, createRequestHandler } = fromCore('./_site/lib/server-app');
+const { BridgeAdapter } = fromCore('./_site/lib/bridge-adapter');
+const { ModuleBridge } = fromCore('./_site/lib/module-bridge');
+const { findChrome } = require('./helpers/find-chrome');
+const { launchCdpBrowser, waitFor } = require('./helpers/cdp-browser');
+
+const HOSTILE_DETAIL = '<img src=x onerror="window.__kbXssProbe=1"> INJECT-STATUS-MARKER sk-abcdef123456';
+
+function clientFixture(client, label) {
+  const mcpCapable = client === 'claude' || client === 'codex';
+  return {
+    client, label, available: false, configFound: false,
+    knowledgeIntegration: { ok: true, state: 'installed' },
+    automaticContext: { supported: client !== 'opencode', configured: false, state: 'check-failed', detail: HOSTILE_DETAIL },
+    developmentCapture: { ok: true, state: 'installed', installed: true, detail: HOSTILE_DETAIL },
+    mcpStartup: mcpCapable ? { state: 'failed', checkedAt: new Date().toISOString(), scope: 'client:' + client, code: 'PROBE_TIMEOUT', expectedVersion: '9.9.9-test', detail: HOSTILE_DETAIL } : undefined,
+  };
+}
+
+async function main() {
+  const temp = fs.mkdtempSync(path.join(os.tmpdir(), 'kb-agent-mcp-ui-'));
+  const dataDir = path.join(temp, 'data');
+  const homeDir = path.join(temp, 'home');
+  const eventsHome = path.join(dataDir, 'events');
+  const offline = http.createServer((req, res) => { res.writeHead(503, { 'content-type': 'application/json' }); res.end(JSON.stringify({ ok: false, error: { message: 'offline stub' } })); });
+  await new Promise(resolve => offline.listen(0, '127.0.0.1', resolve));
+  const offlineUrl = 'http://127.0.0.1:' + offline.address().port;
+  const runtime = createRuntime({ dataDir, analysisOwner: 'engine', bridgeAdapter: new BridgeAdapter({ dataDir, bridgeHomeDir: eventsHome }), moduleBridge: new ModuleBridge({ terminalUrl: offlineUrl, engineUrl: offlineUrl, eventBridgeUrl: offlineUrl, vectorHubUrl: offlineUrl }) });
+  await initializeRuntime(runtime);
+  const server = http.createServer(createRequestHandler(runtime, { integrationOptions: { homeDir, env: {}, commandResolver: () => '' } }));
+  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+  const base = 'http://127.0.0.1:' + server.address().port;
+  const payload = JSON.stringify({ bridge: { ok: true }, scan: { state: 'ready' }, clients: [clientFixture('claude', 'Claude Code'), clientFixture('codex', 'Codex'), clientFixture('zcode', 'ZCode'), clientFixture('opencode', 'OpenCode')] });
+  let browser;
+  try {
+    browser = await launchCdpBrowser({ chrome: findChrome(), profileDir: path.join(temp, 'browser'), url: base, width: 1440, height: 900 });
+    const run = expression => browser.evaluate(expression);
+    const click = selector => run('document.querySelector(' + JSON.stringify(selector) + ').click()');
+    await run('(() => { const original = window.fetch; window.__originalFetch = original; window.fetch = (input, init) => { const url = String(input && input.url || input); if (url.includes(\'/api/integrations/status\')) { return Promise.resolve({ ok: true, json: async () => (' + payload + ') }); } return original(input, init); }; })()');
+    await click('#openSystem');
+    await waitFor(() => run("document.querySelectorAll('#agentCaptureList .agent-capture-row').length === 4"), 'capture rows render');
+    assert(await run("document.getElementById('agentCaptureList').textContent.includes('PROBE_TIMEOUT')"), 'the MCP startup failure code must be rendered for MCP-capable clients');
+    const claudeRowHtml = await run("document.querySelector('#agentCaptureList .agent-capture-row').innerHTML");
+    assert(claudeRowHtml.includes('&lt;img'), 'hostile mcpStartup detail must be HTML-escaped, got: ' + claudeRowHtml.slice(0, 300));
+    assert(!claudeRowHtml.includes('<img'), 'no raw hostile markup may reach the DOM');
+    assert.equal(await run('window.__kbXssProbe'), undefined, 'the hostile onerror must never execute');
+    const smalls = await run("[...document.querySelectorAll('#agentCaptureList small')].map(el => el.textContent).join('|')");
+    assert(smalls.split('|').some(text => text.startsWith('MCP')), 'the MCP diagnostic is its own line item, got: ' + smalls);
+    assert.equal(browser.exceptions.length, 0, JSON.stringify(browser.exceptions));
+    console.log('agent-capture-mcp-ui-test PASS (MCP line rendered separately; hostile detail escaped; no XSS execution)');
+  } finally {
+    await browser?.close(); server.closeAllConnections(); await new Promise(resolve => server.close(resolve));
+    offline.closeAllConnections(); await new Promise(resolve => offline.close(resolve)); await runtime.logger.close();
+    assert.equal(path.dirname(temp), path.resolve(os.tmpdir())); assert.ok(path.basename(temp).startsWith('kb-agent-mcp-ui-'));
+    fs.rmSync(temp, { recursive: true, force: true, maxRetries: 12, retryDelay: 200 });
+  }
+}
+main().catch(error => { console.error(error.stack); process.exitCode = 1; });

package/_site/_test/ai-profile-test.js

@@ -1,75 +1,75 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { spawnServer } = require('./helpers/spawn-server');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const PORT = 7795;
-const BASE = `http://127.0.0.1:${PORT}`;
-const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pkb-ai-v2-'));
-
-async function request(method, pathname, body) {
-  const response = await fetch(`${BASE}${pathname}`, {
-    method,
-    headers: body === undefined ? undefined : { 'content-type': 'application/json' },
-    body: body === undefined ? undefined : JSON.stringify(body),
-  });
-  return { status: response.status, text: await response.text() };
-}
-
-async function json(method, pathname, body) {
-  const result = await request(method, pathname, body);
-  return { ...result, data: JSON.parse(result.text || '{}') };
-}
-
-async function waitForServer() {
-  for (let attempt = 0; attempt < 100; attempt += 1) {
-    try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
-    await new Promise(resolve => setTimeout(resolve, 100));
-  }
-  throw new Error('server did not start');
-}
-
-(async () => {
-  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'ai-profile-v2', extraEnv: { KB_SKIP_MIGRATION: '1' } });
-  try {
-    await waitForServer();
-    let result = await json('PUT', '/api/ai-profiles', {
-      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{
-        id: 'secure', name: 'Secure', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'replace', value: 'sk-secret-1234' },
-      }],
-    });
-    assert.strictEqual(result.status, 200, result.text);
-    assert.strictEqual(result.data.config.profiles[0].hasApiKey, true);
-    assert.strictEqual(result.data.config.profiles[0].apiKeyMasked, '****1234');
-    assert(!result.text.includes('sk-secret-1234'));
-
-    result = await json('GET', '/api/ai-profiles');
-    assert.strictEqual(result.status, 200);
-    assert(!result.text.includes('sk-secret-1234'));
-    assert(!/"apiKey"\s*:/.test(result.text));
-
-    result = await json('PUT', '/api/ai-profiles', {
-      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{ id: 'secure', name: 'Renamed', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'preserve' } }],
-    });
-    assert.strictEqual(result.status, 200);
-    let settings = JSON.parse(fs.readFileSync(path.join(dataDir, 'settings.json'), 'utf8'));
-    assert.strictEqual(settings.ai.profiles[0].apiKey, 'sk-secret-1234');
-
-    result = await json('PUT', '/api/ai-profiles', {
-      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{ id: 'secure', name: 'Renamed', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'clear' } }],
-    });
-    assert.strictEqual(result.status, 200);
-    settings = JSON.parse(fs.readFileSync(path.join(dataDir, 'settings.json'), 'utf8'));
-    assert(!Object.prototype.hasOwnProperty.call(settings.ai.profiles[0], 'apiKey'));
-
-    result = await json('PUT', '/api/ai-profiles', { profiles: [{ id: '../bad', apiKeyUpdate: { mode: 'clear' } }] });
-    assert.strictEqual(result.status, 400);
-    assert.strictEqual(result.data.error.code, 'INVALID_ARGUMENT');
-    assert(!Object.prototype.hasOwnProperty.call(result.data.error, 'stack'));
-    console.log('ai-profile-test PASS');
-  } finally {
-    await spawned.cleanup();
-  }
-})().catch(error => { console.error(error); process.exitCode = 1; });
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnServer } = require('./helpers/spawn-server');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const PORT = 7795;
+const BASE = `http://127.0.0.1:${PORT}`;
+const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pkb-ai-v2-'));
+
+async function request(method, pathname, body) {
+  const response = await fetch(`${BASE}${pathname}`, {
+    method,
+    headers: body === undefined ? undefined : { 'content-type': 'application/json' },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+  return { status: response.status, text: await response.text() };
+}
+
+async function json(method, pathname, body) {
+  const result = await request(method, pathname, body);
+  return { ...result, data: JSON.parse(result.text || '{}') };
+}
+
+async function waitForServer() {
+  for (let attempt = 0; attempt < 100; attempt += 1) {
+    try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+  throw new Error('server did not start');
+}
+
+(async () => {
+  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'ai-profile-v2', extraEnv: { KB_SKIP_MIGRATION: '1' } });
+  try {
+    await waitForServer();
+    let result = await json('PUT', '/api/ai-profiles', {
+      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{
+        id: 'secure', name: 'Secure', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'replace', value: 'sk-secret-1234' },
+      }],
+    });
+    assert.strictEqual(result.status, 200, result.text);
+    assert.strictEqual(result.data.config.profiles[0].hasApiKey, true);
+    assert.strictEqual(result.data.config.profiles[0].apiKeyMasked, '****1234');
+    assert(!result.text.includes('sk-secret-1234'));
+
+    result = await json('GET', '/api/ai-profiles');
+    assert.strictEqual(result.status, 200);
+    assert(!result.text.includes('sk-secret-1234'));
+    assert(!/"apiKey"\s*:/.test(result.text));
+
+    result = await json('PUT', '/api/ai-profiles', {
+      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{ id: 'secure', name: 'Renamed', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'preserve' } }],
+    });
+    assert.strictEqual(result.status, 200);
+    let settings = JSON.parse(fs.readFileSync(path.join(dataDir, 'settings.json'), 'utf8'));
+    assert.strictEqual(settings.ai.profiles[0].apiKey, 'sk-secret-1234');
+
+    result = await json('PUT', '/api/ai-profiles', {
+      schema: 'ai-profiles/v1', defaultProfileId: 'secure', profiles: [{ id: 'secure', name: 'Renamed', enabled: true, implementation: 'claude-code-agent', apiKeyUpdate: { mode: 'clear' } }],
+    });
+    assert.strictEqual(result.status, 200);
+    settings = JSON.parse(fs.readFileSync(path.join(dataDir, 'settings.json'), 'utf8'));
+    assert(!Object.prototype.hasOwnProperty.call(settings.ai.profiles[0], 'apiKey'));
+
+    result = await json('PUT', '/api/ai-profiles', { profiles: [{ id: '../bad', apiKeyUpdate: { mode: 'clear' } }] });
+    assert.strictEqual(result.status, 400);
+    assert.strictEqual(result.data.error.code, 'INVALID_ARGUMENT');
+    assert(!Object.prototype.hasOwnProperty.call(result.data.error, 'stack'));
+    console.log('ai-profile-test PASS');
+  } finally {
+    await spawned.cleanup();
+  }
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/ai-vendor-presets-test.js

@@ -1,91 +1,91 @@
-// Tests for ai-vendor-presets: 4 vendors with full fields, name/id lookup.
-
-const { AI_VENDOR_PRESETS, listVendorPresetNames, findVendorPresetByName } = require('../lib/ai-vendor-presets');
-
-function assert(cond, msg) { if (!cond) throw new Error(msg); }
-
-(() => {
-  try {
-    // 1. Exactly 4 vendors
-    assert(Array.isArray(AI_VENDOR_PRESETS), 'AI_VENDOR_PRESETS should be an array');
-    assert(AI_VENDOR_PRESETS.length === 4, `expected 4 vendors, got ${AI_VENDOR_PRESETS.length}`);
-
-    // 2. IDs unique and match the expected set
-    const ids = AI_VENDOR_PRESETS.map(v => v.id).sort();
-    assert(JSON.stringify(ids) === JSON.stringify(['anthropic', 'deepseek', 'minimax', 'zhipu']),
-      `vendor ids should be anthropic/deepseek/minimax/zhipu, got ${JSON.stringify(ids)}`);
-
-    // 3. Every preset has the required fields
-    const required = ['id', 'name', 'baseUrl', 'mainModel', 'thinkingModel',
-                      'haikuModel', 'sonnetModel', 'opusModel', 'contextWindow', 'website'];
-    for (const v of AI_VENDOR_PRESETS) {
-      for (const f of required) {
-        assert(v[f] !== undefined && v[f] !== null && v[f] !== '',
-          `vendor ${v.id} missing or empty field: ${f}`);
-      }
-    }
-
-    // 4. baseUrl: https://, no trailing slash
-    for (const v of AI_VENDOR_PRESETS) {
-      assert(/^https?:\/\//.test(v.baseUrl), `${v.id} baseUrl must start with http(s)://`);
-      assert(!/\/$/.test(v.baseUrl), `${v.id} baseUrl must NOT have trailing slash`);
-    }
-
-    // 5. contextWindow is a positive integer
-    for (const v of AI_VENDOR_PRESETS) {
-      assert(Number.isInteger(v.contextWindow) && v.contextWindow > 0,
-        `${v.id} contextWindow must be a positive integer, got ${v.contextWindow}`);
-    }
-
-    // 6. Specific known values
-    const minimax = findVendorPresetByName('MiniMax');
-    assert(minimax && minimax.baseUrl === 'https://api.minimaxi.com/anthropic',
-      `minimax baseUrl wrong: ${minimax && minimax.baseUrl}`);
-    assert(minimax && minimax.mainModel === 'MiniMax-M3',
-      `minimax mainModel wrong: ${minimax && minimax.mainModel}`);
-    assert(minimax && minimax.contextWindow === 1048576,
-      `minimax contextWindow should be 1M`);
-
-    const anthropic = findVendorPresetByName('Anthropic Claude');
-    assert(anthropic && anthropic.baseUrl === 'https://api.anthropic.com',
-      `anthropic baseUrl wrong`);
-    assert(anthropic && anthropic.contextWindow === 200000,
-      `anthropic contextWindow should be 200K`);
-
-    const zhipu = findVendorPresetByName('智谱 GLM');
-    assert(zhipu && zhipu.baseUrl === 'https://open.bigmodel.cn/api/anthropic',
-      `zhipu baseUrl wrong: ${zhipu && zhipu.baseUrl}`);
-
-    const deepseek = findVendorPresetByName('DeepSeek');
-    assert(deepseek && deepseek.baseUrl === 'https://api.deepseek.com/anthropic',
-      `deepseek baseUrl wrong: ${deepseek && deepseek.baseUrl}`);
-    assert(deepseek && deepseek.mainModel === 'deepseek-chat',
-      `deepseek mainModel wrong`);
-    assert(deepseek && deepseek.thinkingModel === 'deepseek-reasoner',
-      `deepseek thinkingModel wrong`);
-
-    // 7. Case-insensitive lookup by name
-    assert(findVendorPresetByName('minimax').id === 'minimax', 'lowercase name lookup');
-    assert(findVendorPresetByName('MINIMAX').id === 'minimax', 'uppercase name lookup');
-
-    // 8. Lookup by id also works
-    assert(findVendorPresetByName('minimax').id === 'minimax', 'id lookup');
-
-    // 9. Unknown / empty / null returns null (no false positive)
-    assert(findVendorPresetByName('Totally Unknown Vendor') === null, 'unknown vendor → null');
-    assert(findVendorPresetByName('') === null, 'empty name → null');
-    assert(findVendorPresetByName(null) === null, 'null name → null');
-    assert(findVendorPresetByName(undefined) === null, 'undefined name → null');
-
-    // 10. listVendorPresetNames returns all 4 names in stable order
-    const names = listVendorPresetNames();
-    assert(names.length === 4, `expected 4 names, got ${names.length}`);
-    assert(names.every(n => typeof n === 'string' && n.length > 0),
-      'all names should be non-empty strings');
-
-    console.log('ai-vendor-presets test passed');
-  } catch (e) {
-    console.error('ai-vendor-presets test failed:', e.message);
-    process.exitCode = 1;
-  }
-})();
+// Tests for ai-vendor-presets: 4 vendors with full fields, name/id lookup.
+
+const { AI_VENDOR_PRESETS, listVendorPresetNames, findVendorPresetByName } = require('../lib/ai-vendor-presets');
+
+function assert(cond, msg) { if (!cond) throw new Error(msg); }
+
+(() => {
+  try {
+    // 1. Exactly 4 vendors
+    assert(Array.isArray(AI_VENDOR_PRESETS), 'AI_VENDOR_PRESETS should be an array');
+    assert(AI_VENDOR_PRESETS.length === 4, `expected 4 vendors, got ${AI_VENDOR_PRESETS.length}`);
+
+    // 2. IDs unique and match the expected set
+    const ids = AI_VENDOR_PRESETS.map(v => v.id).sort();
+    assert(JSON.stringify(ids) === JSON.stringify(['anthropic', 'deepseek', 'minimax', 'zhipu']),
+      `vendor ids should be anthropic/deepseek/minimax/zhipu, got ${JSON.stringify(ids)}`);
+
+    // 3. Every preset has the required fields
+    const required = ['id', 'name', 'baseUrl', 'mainModel', 'thinkingModel',
+                      'haikuModel', 'sonnetModel', 'opusModel', 'contextWindow', 'website'];
+    for (const v of AI_VENDOR_PRESETS) {
+      for (const f of required) {
+        assert(v[f] !== undefined && v[f] !== null && v[f] !== '',
+          `vendor ${v.id} missing or empty field: ${f}`);
+      }
+    }
+
+    // 4. baseUrl: https://, no trailing slash
+    for (const v of AI_VENDOR_PRESETS) {
+      assert(/^https?:\/\//.test(v.baseUrl), `${v.id} baseUrl must start with http(s)://`);
+      assert(!/\/$/.test(v.baseUrl), `${v.id} baseUrl must NOT have trailing slash`);
+    }
+
+    // 5. contextWindow is a positive integer
+    for (const v of AI_VENDOR_PRESETS) {
+      assert(Number.isInteger(v.contextWindow) && v.contextWindow > 0,
+        `${v.id} contextWindow must be a positive integer, got ${v.contextWindow}`);
+    }
+
+    // 6. Specific known values
+    const minimax = findVendorPresetByName('MiniMax');
+    assert(minimax && minimax.baseUrl === 'https://api.minimaxi.com/anthropic',
+      `minimax baseUrl wrong: ${minimax && minimax.baseUrl}`);
+    assert(minimax && minimax.mainModel === 'MiniMax-M3',
+      `minimax mainModel wrong: ${minimax && minimax.mainModel}`);
+    assert(minimax && minimax.contextWindow === 1048576,
+      `minimax contextWindow should be 1M`);
+
+    const anthropic = findVendorPresetByName('Anthropic Claude');
+    assert(anthropic && anthropic.baseUrl === 'https://api.anthropic.com',
+      `anthropic baseUrl wrong`);
+    assert(anthropic && anthropic.contextWindow === 200000,
+      `anthropic contextWindow should be 200K`);
+
+    const zhipu = findVendorPresetByName('智谱 GLM');
+    assert(zhipu && zhipu.baseUrl === 'https://open.bigmodel.cn/api/anthropic',
+      `zhipu baseUrl wrong: ${zhipu && zhipu.baseUrl}`);
+
+    const deepseek = findVendorPresetByName('DeepSeek');
+    assert(deepseek && deepseek.baseUrl === 'https://api.deepseek.com/anthropic',
+      `deepseek baseUrl wrong: ${deepseek && deepseek.baseUrl}`);
+    assert(deepseek && deepseek.mainModel === 'deepseek-chat',
+      `deepseek mainModel wrong`);
+    assert(deepseek && deepseek.thinkingModel === 'deepseek-reasoner',
+      `deepseek thinkingModel wrong`);
+
+    // 7. Case-insensitive lookup by name
+    assert(findVendorPresetByName('minimax').id === 'minimax', 'lowercase name lookup');
+    assert(findVendorPresetByName('MINIMAX').id === 'minimax', 'uppercase name lookup');
+
+    // 8. Lookup by id also works
+    assert(findVendorPresetByName('minimax').id === 'minimax', 'id lookup');
+
+    // 9. Unknown / empty / null returns null (no false positive)
+    assert(findVendorPresetByName('Totally Unknown Vendor') === null, 'unknown vendor → null');
+    assert(findVendorPresetByName('') === null, 'empty name → null');
+    assert(findVendorPresetByName(null) === null, 'null name → null');
+    assert(findVendorPresetByName(undefined) === null, 'undefined name → null');
+
+    // 10. listVendorPresetNames returns all 4 names in stable order
+    const names = listVendorPresetNames();
+    assert(names.length === 4, `expected 4 names, got ${names.length}`);
+    assert(names.every(n => typeof n === 'string' && n.length > 0),
+      'all names should be non-empty strings');
+
+    console.log('ai-vendor-presets test passed');
+  } catch (e) {
+    console.error('ai-vendor-presets test failed:', e.message);
+    process.exitCode = 1;
+  }
+})();