sdlc-agent-4-enterprise-server 1.20.0 → 1.21.0

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.19.1-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.21.0-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>

package/dist/engine/tools/drawio-export-png.js

@@ -80,9 +80,9 @@ function decodeBase64Content(b64) {
 }
 function wrapXmlIfNeeded(content) {
     const trimmed = content.trim();
-    if (trimmed.startsWith('<mxfile') || trimmed.startsWith('<?xml'))
+    if (trimmed.startsWith('<mxfile') || trimmed.startsWith('<?xml') || trimmed.startsWith('<mxGraphModel'))
         return content;
-    return `<?xml version="1.0" encoding="UTF-8"?>\n<mxfile host="app.diagrams.net">\n${content}\n</mxfile>`;
+    return `<?xml version="1.0" encoding="UTF-8"?>\n<mxfile host="app.diagrams.net">\n<diagram name="Page-1">\n${content}\n</diagram>\n</mxfile>`;
 }
 async function renderWithEngine(renderer, inputPath, outputPath, workspace, orchestrationEngine) {
     switch (renderer) {

package/dist/engine/tools/drawio-export-png.js.map

@@ -1 +1 @@
-{"version":3,"file":"drawio-export-png.js","sourceRoot":"","sources":["../../../src/engine/tools/drawio-export-png.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEvJ,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,gFAAgF;IAC7F,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;YACrF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAClF;QACD,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;CACF,CAAC;AAIF,IAAI,cAAc,GAAwB,IAAI,CAAC;AAE/C,MAAM,UAAU,cAAc,CAAC,mBAAyB;IACtD,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACnD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,OAAO,EAAE,CAAC;QAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAAC,cAAc,GAAG,YAAY,CAAC;QAAC,OAAO,cAAc,CAAC;IAAC,CAAC;IACvG,IAAI,mBAAmB,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACzF,cAAc,GAAG,qBAAqB,CAAC;QAAC,OAAO,cAAc,CAAC;IAChE,CAAC;IACD,IAAI,mBAAmB,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/E,cAAc,GAAG,eAAe,CAAC;QAAC,OAAO,cAAc,CAAC;IAC1D,CAAC;IACD,cAAc,GAAG,MAAM,CAAC;IACxB,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,mBAAyB;IAC5D,OAAO,cAAc,CAAC,mBAAmB,CAAC,KAAK,MAAM,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,cAAc,GAAG,IAAI,CAAC;IACtB,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA6B,EAC7B,SAAiB,EACjB,mBAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,cAAoC,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjF,OAAO,6EAA6E,OAAO,aAAa,CAAC;AAC3G,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAsB,EAAE,SAAiB,EAAE,UAAkB,EAC7D,SAAiB,EAAE,mBAAyB;IAE5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YAAE,MAAM,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAAC,MAAM;QACrE,KAAK,qBAAqB;YAAE,MAAM,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAAC,MAAM;QACjH,KAAK,eAAe;YAAE,MAAM,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAAC,MAAM;QAC9G,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC"}
+{"version":3,"file":"drawio-export-png.js","sourceRoot":"","sources":["../../../src/engine/tools/drawio-export-png.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEvJ,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,gFAAgF;IAC7F,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;YACrF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAClF;QACD,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;CACF,CAAC;AAIF,IAAI,cAAc,GAAwB,IAAI,CAAC;AAE/C,MAAM,UAAU,cAAc,CAAC,mBAAyB;IACtD,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACnD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,OAAO,EAAE,CAAC;QAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAAC,cAAc,GAAG,YAAY,CAAC;QAAC,OAAO,cAAc,CAAC;IAAC,CAAC;IACvG,IAAI,mBAAmB,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACzF,cAAc,GAAG,qBAAqB,CAAC;QAAC,OAAO,cAAc,CAAC;IAChE,CAAC;IACD,IAAI,mBAAmB,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/E,cAAc,GAAG,eAAe,CAAC;QAAC,OAAO,cAAc,CAAC;IAC1D,CAAC;IACD,cAAc,GAAG,MAAM,CAAC;IACxB,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,mBAAyB;IAC5D,OAAO,cAAc,CAAC,mBAAmB,CAAC,KAAK,MAAM,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,cAAc,GAAG,IAAI,CAAC;IACtB,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA6B,EAC7B,SAAiB,EACjB,mBAAyB;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,cAAoC,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,OAAO,CAAC;IACxH,OAAO,sGAAsG,OAAO,yBAAyB,CAAC;AAChJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAsB,EAAE,SAAiB,EAAE,UAAkB,EAC7D,SAAiB,EAAE,mBAAyB;IAE5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YAAE,MAAM,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAAC,MAAM;QACrE,KAAK,qBAAqB;YAAE,MAAM,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAAC,MAAM;QACjH,KAAK,eAAe;YAAE,MAAM,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAAC,MAAM;QAC9G,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/knowledge/KnowledgeDb.d.ts

@@ -0,0 +1,30 @@
+/**
+ * SA4E-85 — Knowledge SQLite persistence layer.
+ * Internal storage behind KnowledgeService. Not a LangGraph checkpointer —
+ * checkpoints are JSON projections stored here. DB perms hardened (Finding #22).
+ */
+import Database from 'better-sqlite3';
+import type { Thread, Message, Checkpoint, ToolExecution, Artifact, KnowledgeEvent, Agent, SaveCheckpointInput, MessageInput } from './models.js';
+export declare class KnowledgeDb {
+    private db;
+    constructor(dbPath?: string, existing?: Database.Database);
+    static createInMemory(): KnowledgeDb;
+    private migrate;
+    close(): void;
+    createThread(t: Thread): void;
+    listThreads(workspaceId: string): Thread[];
+    getThread(threadId: string): Thread | null;
+    deleteThread(threadId: string): void;
+    appendMessage(workspaceId: string, threadId: string, m: MessageInput, seq: number): void;
+    listMessages(threadId: string): Message[];
+    countMessages(threadId: string): number;
+    getCheckpoint(threadId: string): Checkpoint | null;
+    upsertCheckpoint(workspaceId: string, threadId: string, input: SaveCheckpointInput): Checkpoint;
+    addToolExecution(exec: ToolExecution): void;
+    addArtifact(a: Artifact): void;
+    listArtifacts(threadId: string): Artifact[];
+    appendEvent(workspaceId: string, threadId: string, type: string, payload: unknown): void;
+    listEvents(threadId: string): KnowledgeEvent[];
+    upsertAgent(a: Agent): Agent;
+    listAgents(): Agent[];
+}

package/dist/knowledge/KnowledgeDb.js

@@ -0,0 +1,148 @@
+/**
+ * SA4E-85 — Knowledge SQLite persistence layer.
+ * Internal storage behind KnowledgeService. Not a LangGraph checkpointer —
+ * checkpoints are JSON projections stored here. DB perms hardened (Finding #22).
+ */
+import Database from 'better-sqlite3';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+import { KNOWLEDGE_SCHEMA } from './schema.js';
+function parse(raw, fallback) {
+    if (!raw)
+        return fallback;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return fallback;
+    }
+}
+function openDb(dbPath) {
+    if (!dbPath)
+        throw new Error('KnowledgeDb requires a dbPath');
+    const dir = path.dirname(dbPath);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    const db = new Database(dbPath);
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    try {
+        fs.chmodSync(dbPath, 0o600);
+    }
+    catch { /* best-effort on Windows */ }
+    return db;
+}
+export class KnowledgeDb {
+    db;
+    constructor(dbPath, existing) {
+        this.db = existing ?? openDb(dbPath);
+        this.migrate();
+    }
+    static createInMemory() {
+        return new KnowledgeDb(undefined, new Database(':memory:'));
+    }
+    migrate() { this.db.exec(KNOWLEDGE_SCHEMA); }
+    close() { this.db.close(); }
+    // --- threads (projection) ---
+    createThread(t) {
+        this.db.prepare('INSERT INTO threads (thread_id, workspace_id, title, agent_id, status, created_at, updated_at) VALUES (@thread_id, @workspace_id, @title, @agent_id, @status, @created_at, @updated_at)')
+            .run(t);
+    }
+    listThreads(workspaceId) {
+        return this.db.prepare('SELECT * FROM threads WHERE workspace_id = ? ORDER BY updated_at DESC').all(workspaceId);
+    }
+    getThread(threadId) {
+        const row = this.db.prepare('SELECT * FROM threads WHERE thread_id = ?').get(threadId);
+        return row ? row : null;
+    }
+    deleteThread(threadId) {
+        this.db.transaction(() => {
+            for (const table of ['threads', 'messages', 'checkpoints', 'tool_executions', 'artifacts', 'events']) {
+                this.db.prepare(`DELETE FROM ${table} WHERE thread_id = ?`).run(threadId);
+            }
+        })();
+    }
+    // --- messages (projection) ---
+    appendMessage(workspaceId, threadId, m, seq) {
+        const row = { id: m.id ?? crypto.randomUUID(), thread_id: threadId, workspace_id: workspaceId, role: m.role, content: m.content, agent_id: m.agent_id ?? null, timestamp: m.timestamp ?? new Date().toISOString(), seq };
+        this.db.prepare('INSERT OR IGNORE INTO messages (id, thread_id, workspace_id, role, content, agent_id, timestamp, seq) VALUES (@id, @thread_id, @workspace_id, @role, @content, @agent_id, @timestamp, @seq)').run(row);
+    }
+    listMessages(threadId) {
+        return this.db.prepare('SELECT * FROM messages WHERE thread_id = ? ORDER BY seq ASC').all(threadId);
+    }
+    countMessages(threadId) {
+        const row = this.db.prepare('SELECT COUNT(*) as cnt FROM messages WHERE thread_id = ?').get(threadId);
+        return row?.cnt ?? 0;
+    }
+    // --- checkpoints (projection) ---
+    getCheckpoint(threadId) {
+        const row = this.db.prepare('SELECT * FROM checkpoints WHERE thread_id = ?').get(threadId);
+        if (!row)
+            return null;
+        return {
+            thread_id: row.thread_id,
+            workspace_id: row.workspace_id,
+            checkpoint: parse(row.checkpoint, null),
+            metadata: parse(row.metadata, {}),
+            channel_versions: parse(row.channel_versions, {}),
+            pending_writes: parse(row.pending_writes, []),
+            version: row.version,
+            updated_at: row.updated_at,
+        };
+    }
+    upsertCheckpoint(workspaceId, threadId, input) {
+        const existing = this.getCheckpoint(threadId);
+        const version = (existing?.version ?? 0) + 1;
+        const writes = [...(existing?.pending_writes ?? []), ...(input.writes ?? input.pendingWrites ?? [])];
+        const checkpoint = input.checkpoint ?? existing?.checkpoint ?? null;
+        const metadata = input.metadata ?? existing?.metadata ?? {};
+        const channelVersions = input.newVersions ?? existing?.channel_versions ?? {};
+        const updatedAt = new Date().toISOString();
+        this.db.prepare('INSERT INTO checkpoints (thread_id, workspace_id, checkpoint, metadata, channel_versions, pending_writes, version, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (thread_id) DO UPDATE SET checkpoint = excluded.checkpoint, metadata = excluded.metadata, channel_versions = excluded.channel_versions, pending_writes = excluded.pending_writes, version = excluded.version, updated_at = excluded.updated_at')
+            .run(threadId, workspaceId, JSON.stringify(checkpoint), JSON.stringify(metadata), JSON.stringify(channelVersions), JSON.stringify(writes), version, updatedAt);
+        return { thread_id: threadId, workspace_id: workspaceId, checkpoint, metadata, channel_versions: channelVersions, pending_writes: writes, version, updated_at: updatedAt };
+    }
+    // --- tool executions (projection) ---
+    addToolExecution(exec) {
+        this.db.prepare('INSERT INTO tool_executions (id, thread_id, workspace_id, tool_id, name, status, input, output, created_at) VALUES (@id, @thread_id, @workspace_id, @tool_id, @name, @status, @input, @output, @created_at)')
+            .run({ ...exec, input: JSON.stringify(exec.input ?? null), output: JSON.stringify(exec.output ?? null) });
+    }
+    // --- artifacts (projection) ---
+    addArtifact(a) {
+        this.db.prepare('INSERT INTO artifacts (id, thread_id, workspace_id, type, name, content, created_at) VALUES (@id, @thread_id, @workspace_id, @type, @name, @content, @created_at)')
+            .run({ ...a, content: JSON.stringify(a.content ?? null) });
+    }
+    listArtifacts(threadId) {
+        return this.db.prepare('SELECT * FROM artifacts WHERE thread_id = ? ORDER BY created_at ASC').all(threadId)
+            .map((row) => ({ ...row, content: parse(row.content, null) }));
+    }
+    // --- events (append-only log) ---
+    appendEvent(workspaceId, threadId, type, payload) {
+        this.db.prepare('INSERT INTO events (thread_id, workspace_id, type, payload, created_at) VALUES (?, ?, ?, ?, ?)')
+            .run(threadId, workspaceId, type, JSON.stringify(payload ?? {}), new Date().toISOString());
+    }
+    listEvents(threadId) {
+        return this.db.prepare('SELECT * FROM events WHERE thread_id = ? ORDER BY id ASC').all(threadId)
+            .map((row) => ({ ...row, payload: parse(row.payload, null) }));
+    }
+    // --- agents (registry) ---
+    upsertAgent(a) {
+        this.db.prepare('INSERT INTO agents (agent_id, name, description, tools, mcp_servers, auto_approve, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT (agent_id) DO UPDATE SET name = excluded.name, description = excluded.description, tools = excluded.tools, mcp_servers = excluded.mcp_servers, auto_approve = excluded.auto_approve, updated_at = excluded.updated_at')
+            .run(a.agent_id, a.name, a.description, JSON.stringify(a.tools), JSON.stringify(a.mcp_servers), JSON.stringify(a.auto_approve), a.created_at, a.updated_at);
+        return a;
+    }
+    listAgents() {
+        return this.db.prepare('SELECT * FROM agents ORDER BY name ASC').all().map((row) => ({
+            agent_id: row.agent_id,
+            name: row.name,
+            description: row.description,
+            tools: parse(row.tools, []),
+            mcp_servers: parse(row.mcp_servers, []),
+            auto_approve: parse(row.auto_approve, []),
+            created_at: row.created_at,
+            updated_at: row.updated_at,
+        }));
+    }
+}
+//# sourceMappingURL=KnowledgeDb.js.map

package/dist/knowledge/KnowledgeDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KnowledgeDb.js","sourceRoot":"","sources":["../../src/knowledge/KnowledgeDb.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK/C,SAAS,KAAK,CAAI,GAA8B,EAAE,QAAW;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;AACjE,CAAC;AAED,SAAS,MAAM,CAAC,MAAe;IAC7B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,WAAW;IACd,EAAE,CAAoB;IAE9B,YAAY,MAAe,EAAE,QAA4B;QACvD,IAAI,CAAC,EAAE,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,cAAc;QACnB,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,OAAO,KAAW,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAE3D,KAAK,KAAW,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAElC,+BAA+B;IAC/B,YAAY,CAAC,CAAS;QACpB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yLAAyL,CAAC;aACvM,GAAG,CAAC,CAAuC,CAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAwB,CAAC;IAC1I,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAoB,CAAC;QAC1G,OAAO,GAAG,CAAC,CAAC,CAAE,GAAyB,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,sBAAsB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,gCAAgC;IAChC,aAAa,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAe,EAAE,GAAW;QAC/E,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;QACzN,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6LAA6L,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1N,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAyB,CAAC;IAC9H,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAQ,CAAC;QAC7G,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,mCAAmC;IACnC,aAAa,CAAC,QAAgB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAoB,CAAC;QAC9G,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;YACvC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjC,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACjD,cAAc,EAAE,KAAK,CAAiB,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,WAAmB,EAAE,QAAgB,EAAE,KAA0B;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC5D,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,IAAI,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2ZAA2Z,CAAC;aACza,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACjK,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC7K,CAAC;IAED,uCAAuC;IACvC,gBAAgB,CAAC,IAAmB;QAClC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6MAA6M,CAAC;aAC3N,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,iCAAiC;IACjC,WAAW,CAAC,CAAW;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mKAAmK,CAAC;aACjL,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAsB;aAC9H,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAA0B,CAAC;IAC5F,CAAC;IAED,mCAAmC;IACnC,WAAW,CAAC,WAAmB,EAAE,QAAgB,EAAE,IAAY,EAAE,OAAgB;QAC/E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gGAAgG,CAAC;aAC9G,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAsB;aACnH,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAgC,CAAC;IAClG,CAAC;IAED,4BAA4B;IAC5B,WAAW,CAAC,CAAQ;QAClB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8WAA8W,CAAC;aAC5X,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAC9J,OAAO,CAAC,CAAC;IACX,CAAC;IAED,UAAU;QACR,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAuB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzG,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,KAAK,CAAW,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YACrC,WAAW,EAAE,KAAK,CAAW,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACjD,YAAY,EAAE,KAAK,CAAW,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;YACnD,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAuB,CAAC;IAC5B,CAAC;CACF"}

package/dist/knowledge/KnowledgeModule.d.ts

@@ -0,0 +1,31 @@
+/**
+ * SA4E-85 — Knowledge Module.
+ * Wraps KnowledgeService for the ModuleRegistry lifecycle. Exposes the service
+ * to route factories via getService(). DB path follows backend convention:
+ * <workspace>/.code-intel/knowledge.db (matching memory module data dir).
+ */
+import type { IModule, ModuleStatus } from '../types/module.js';
+import type { ToolHandler, ToolDefinition } from '../types/tool.js';
+import type { Logger } from 'pino';
+import { KnowledgeService } from './KnowledgeService.js';
+export interface KnowledgeModuleOptions {
+    dbPath?: string;
+    defaultWorkspace?: string;
+    service?: KnowledgeService;
+}
+export declare class KnowledgeModule implements IModule {
+    private readonly options;
+    readonly name = "knowledge";
+    private _status;
+    private logger;
+    private db;
+    private service;
+    constructor(logger: Logger, options?: KnowledgeModuleOptions);
+    get status(): ModuleStatus;
+    getService(): KnowledgeService;
+    initialize(): Promise<void>;
+    shutdown(): Promise<void>;
+    getToolHandlers(): Map<string, ToolHandler>;
+    getToolDefinitions(): ToolDefinition[];
+    private resolveDefaultDbPath;
+}

package/dist/knowledge/KnowledgeModule.js

@@ -0,0 +1,63 @@
+/**
+ * SA4E-85 — Knowledge Module.
+ * Wraps KnowledgeService for the ModuleRegistry lifecycle. Exposes the service
+ * to route factories via getService(). DB path follows backend convention:
+ * <workspace>/.code-intel/knowledge.db (matching memory module data dir).
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { KnowledgeDb } from './KnowledgeDb.js';
+import { KnowledgeService } from './KnowledgeService.js';
+export class KnowledgeModule {
+    options;
+    name = 'knowledge';
+    _status = 'initializing';
+    logger;
+    db = null;
+    service;
+    constructor(logger, options = {}) {
+        this.options = options;
+        this.logger = logger.child({ module: this.name });
+    }
+    get status() { return this._status; }
+    getService() { return this.service; }
+    async initialize() {
+        this.logger.info('Initializing knowledge module');
+        try {
+            if (this.options.service) {
+                this.service = this.options.service;
+            }
+            else {
+                const dbPath = this.options.dbPath ?? this.resolveDefaultDbPath();
+                const dir = path.dirname(dbPath);
+                if (!fs.existsSync(dir))
+                    fs.mkdirSync(dir, { recursive: true });
+                this.db = new KnowledgeDb(dbPath);
+                this.service = new KnowledgeService(this.db, this.logger, {
+                    defaultWorkspace: this.options.defaultWorkspace,
+                });
+            }
+            this._status = 'ready';
+            this.logger.info('Knowledge module ready');
+        }
+        catch (err) {
+            this.logger.error({ err }, 'Failed to initialize knowledge module');
+            this._status = 'error';
+        }
+    }
+    async shutdown() {
+        if (this.db) {
+            this.db.close();
+            this.db = null;
+        }
+        this._status = 'stopped';
+    }
+    getToolHandlers() { return new Map(); }
+    getToolDefinitions() { return []; }
+    resolveDefaultDbPath() {
+        const dataDir = process.env.CODE_INTEL_DATA_DIR || '.code-intel';
+        const workspace = process.env.CODE_INTEL_WORKSPACE || process.cwd();
+        return path.resolve(workspace, dataDir, 'knowledge.db');
+    }
+}
+//# sourceMappingURL=KnowledgeModule.js.map

package/dist/knowledge/KnowledgeModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KnowledgeModule.js","sourceRoot":"","sources":["../../src/knowledge/KnowledgeModule.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAQzD,MAAM,OAAO,eAAe;IAOmB;IANpC,IAAI,GAAG,WAAW,CAAC;IACpB,OAAO,GAAiB,cAAc,CAAC;IACvC,MAAM,CAAS;IACf,EAAE,GAAuB,IAAI,CAAC;IAC9B,OAAO,CAAoB;IAEnC,YAAY,MAAc,EAAmB,UAAkC,EAAE;QAApC,YAAO,GAAP,OAAO,CAA6B;QAC/E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,KAAmB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnD,UAAU,KAAuB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAClE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;oBACxD,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,eAAe,KAA+B,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAEjE,kBAAkB,KAAuB,OAAO,EAAE,CAAC,CAAC,CAAC;IAE7C,oBAAoB;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,aAAa,CAAC;QACjE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/dist/knowledge/KnowledgeService.d.ts

@@ -0,0 +1,50 @@
+/**
+ * SA4E-85 — KnowledgeService: business logic + workspace binding.
+ * Event Sourcing: every mutation appends to the append-only event log;
+ * threads / messages / checkpoints are projections on top of it.
+ *
+ * Workspace isolation (SECURITY-REVIEW Finding #18): every thread access verifies
+ * the caller's workspace_id matches the stored one. On mismatch all accessor
+ * methods return null (routes map to 404 — never 403, preventing enumeration).
+ */
+import type { Logger } from 'pino';
+import type { KnowledgeDb } from './KnowledgeDb.js';
+import type { ProjectContext } from '../modules/memory/ProjectContext.js';
+import type { Thread, Message, Checkpoint, KnowledgeEvent, Artifact, ToolExecution, Agent, CreateThreadInput, SaveCheckpointInput } from './models.js';
+export interface KnowledgeServiceOptions {
+    defaultWorkspace?: string;
+}
+export declare class KnowledgeService {
+    private readonly db;
+    private readonly logger;
+    private readonly defaultWorkspace;
+    constructor(db: KnowledgeDb, logger: Logger, options?: KnowledgeServiceOptions);
+    /** Caller workspace: X-Project-Id > JWT wid claim > default. */
+    resolveWorkspaceId(ctx: ProjectContext): string;
+    /** Return the thread only if it belongs to the caller's workspace. */
+    private ownedThread;
+    createThread(ctx: ProjectContext, input: CreateThreadInput): Thread;
+    listThreads(ctx: ProjectContext): Thread[];
+    getThread(ctx: ProjectContext, threadId: string): Thread | null;
+    getMessages(ctx: ProjectContext, threadId: string): Message[] | null;
+    getCheckpoint(ctx: ProjectContext, threadId: string): Checkpoint | null;
+    /** Save checkpoint (+ optional writes / messages) — projection updated transactionally. */
+    saveCheckpoint(ctx: ProjectContext, threadId: string, input: SaveCheckpointInput): Checkpoint | null;
+    getEvents(ctx: ProjectContext, threadId: string): KnowledgeEvent[] | null;
+    getArtifacts(ctx: ProjectContext, threadId: string): Artifact[] | null;
+    addArtifact(ctx: ProjectContext, threadId: string, input: {
+        type: string;
+        name: string;
+        content?: unknown;
+    }): Artifact | null;
+    addToolExecution(ctx: ProjectContext, threadId: string, input: {
+        tool_id: string;
+        name: string;
+        status: ToolExecution['status'];
+        input?: unknown;
+        output?: unknown;
+    }): ToolExecution | null;
+    getAgents(): Agent[];
+    upsertAgent(input: Omit<Agent, 'created_at' | 'updated_at'>): Agent;
+    deleteThread(ctx: ProjectContext, threadId: string): boolean;
+}

package/dist/knowledge/KnowledgeService.js

@@ -0,0 +1,152 @@
+/**
+ * SA4E-85 — KnowledgeService: business logic + workspace binding.
+ * Event Sourcing: every mutation appends to the append-only event log;
+ * threads / messages / checkpoints are projections on top of it.
+ *
+ * Workspace isolation (SECURITY-REVIEW Finding #18): every thread access verifies
+ * the caller's workspace_id matches the stored one. On mismatch all accessor
+ * methods return null (routes map to 404 — never 403, preventing enumeration).
+ */
+import * as crypto from 'crypto';
+import { isUuidV4 } from './models.js';
+export class KnowledgeService {
+    db;
+    logger;
+    defaultWorkspace;
+    constructor(db, logger, options = {}) {
+        this.db = db;
+        this.logger = logger;
+        this.defaultWorkspace = options.defaultWorkspace ?? 'default';
+    }
+    /** Caller workspace: X-Project-Id > JWT wid claim > default. */
+    resolveWorkspaceId(ctx) {
+        return ctx.projectId || ctx.workspaceId || this.defaultWorkspace;
+    }
+    /** Return the thread only if it belongs to the caller's workspace. */
+    ownedThread(ctx, threadId) {
+        if (!isUuidV4(threadId))
+            return null;
+        const thread = this.db.getThread(threadId);
+        if (!thread || thread.workspace_id !== this.resolveWorkspaceId(ctx))
+            return null;
+        return thread;
+    }
+    createThread(ctx, input) {
+        const now = new Date().toISOString();
+        const thread = {
+            thread_id: crypto.randomUUID(),
+            workspace_id: this.resolveWorkspaceId(ctx),
+            title: input.title?.trim() || 'New thread',
+            agent_id: input.agent_id || null,
+            status: 'active',
+            created_at: now,
+            updated_at: now,
+        };
+        this.db.createThread(thread);
+        this.db.appendEvent(thread.workspace_id, thread.thread_id, 'THREAD_CREATED', {
+            title: thread.title,
+            agent_id: thread.agent_id,
+        });
+        this.logger.info({ thread_id: thread.thread_id, workspace_id: thread.workspace_id }, 'Thread created');
+        return thread;
+    }
+    listThreads(ctx) {
+        return this.db.listThreads(this.resolveWorkspaceId(ctx));
+    }
+    getThread(ctx, threadId) {
+        return this.ownedThread(ctx, threadId);
+    }
+    getMessages(ctx, threadId) {
+        if (!this.ownedThread(ctx, threadId))
+            return null;
+        return this.db.listMessages(threadId);
+    }
+    getCheckpoint(ctx, threadId) {
+        if (!this.ownedThread(ctx, threadId))
+            return null;
+        return this.db.getCheckpoint(threadId);
+    }
+    /** Save checkpoint (+ optional writes / messages) — projection updated transactionally. */
+    saveCheckpoint(ctx, threadId, input) {
+        const thread = this.ownedThread(ctx, threadId);
+        if (!thread)
+            return null;
+        const checkpoint = this.db.upsertCheckpoint(thread.workspace_id, threadId, input);
+        const messages = input.messages ?? [];
+        const seqBase = this.db.countMessages(threadId);
+        messages.forEach((m, i) => {
+            this.db.appendMessage(thread.workspace_id, threadId, m, seqBase + i);
+        });
+        this.db.appendEvent(thread.workspace_id, threadId, 'CHECKPOINT_SAVED', {
+            version: checkpoint.version,
+            writes: (input.writes ?? input.pendingWrites ?? []).length,
+            messages: messages.length,
+        });
+        this.logger.info({ thread_id: threadId, version: checkpoint.version }, 'Checkpoint saved');
+        return checkpoint;
+    }
+    getEvents(ctx, threadId) {
+        if (!this.ownedThread(ctx, threadId))
+            return null;
+        return this.db.listEvents(threadId);
+    }
+    getArtifacts(ctx, threadId) {
+        if (!this.ownedThread(ctx, threadId))
+            return null;
+        return this.db.listArtifacts(threadId);
+    }
+    addArtifact(ctx, threadId, input) {
+        const thread = this.ownedThread(ctx, threadId);
+        if (!thread)
+            return null;
+        const artifact = {
+            id: crypto.randomUUID(),
+            thread_id: threadId,
+            workspace_id: thread.workspace_id,
+            type: input.type,
+            name: input.name,
+            content: input.content ?? null,
+            created_at: new Date().toISOString(),
+        };
+        this.db.addArtifact(artifact);
+        this.db.appendEvent(thread.workspace_id, threadId, 'ARTIFACT_ADDED', { type: input.type, name: input.name });
+        return artifact;
+    }
+    addToolExecution(ctx, threadId, input) {
+        const thread = this.ownedThread(ctx, threadId);
+        if (!thread)
+            return null;
+        const exec = {
+            id: crypto.randomUUID(),
+            thread_id: threadId,
+            workspace_id: thread.workspace_id,
+            tool_id: input.tool_id,
+            name: input.name,
+            status: input.status,
+            input: input.input ?? null,
+            output: input.output ?? null,
+            created_at: new Date().toISOString(),
+        };
+        this.db.addToolExecution(exec);
+        this.db.appendEvent(thread.workspace_id, threadId, 'TOOL_EXECUTION', { tool_id: input.tool_id, status: input.status });
+        return exec;
+    }
+    getAgents() {
+        return this.db.listAgents();
+    }
+    upsertAgent(input) {
+        const now = new Date().toISOString();
+        const agent = { ...input, created_at: now, updated_at: now };
+        return this.db.upsertAgent(agent);
+    }
+    deleteThread(ctx, threadId) {
+        const thread = this.ownedThread(ctx, threadId);
+        if (!thread)
+            return false;
+        this.db.appendEvent(thread.workspace_id, threadId, 'THREAD_DELETED', {});
+        this.db.deleteThread(threadId);
+        this.logger.info({ thread_id: threadId }, 'Thread deleted');
+        return true;
+    }
+}
+//# sourceMappingURL=KnowledgeService.js.map

package/dist/knowledge/KnowledgeService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KnowledgeService.js","sourceRoot":"","sources":["../../src/knowledge/KnowledgeService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAcjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAMvC,MAAM,OAAO,gBAAgB;IAIR;IACA;IAJF,gBAAgB,CAAS;IAE1C,YACmB,EAAe,EACf,MAAc,EAC/B,UAAmC,EAAE;QAFpB,OAAE,GAAF,EAAE,CAAa;QACf,WAAM,GAAN,MAAM,CAAQ;QAG/B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAChE,CAAC;IAED,gEAAgE;IAChE,kBAAkB,CAAC,GAAmB;QACpC,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC;IACnE,CAAC;IAED,sEAAsE;IAC9D,WAAW,CAAC,GAAmB,EAAE,QAAgB;QACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY,CAAC,GAAmB,EAAE,KAAwB;QACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAW;YACrB,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;YAC9B,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAC1C,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,YAAY;YAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAChB,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE;YAC3E,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACvG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,GAAmB;QAC7B,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,SAAS,CAAC,GAAmB,EAAE,QAAgB;QAC7C,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,WAAW,CAAC,GAAmB,EAAE,QAAgB;QAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,aAAa,CAAC,GAAmB,EAAE,QAAgB;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,2FAA2F;IAC3F,cAAc,CAAC,GAAmB,EAAE,QAAgB,EAAE,KAA0B;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACxB,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE;YACrE,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM;YAC1D,QAAQ,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC3F,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,GAAmB,EAAE,QAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,CAAC,GAAmB,EAAE,QAAgB;QAChD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,WAAW,CAAC,GAAmB,EAAE,QAAgB,EAAE,KAAwD;QACzG,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7G,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,GAAmB,EAAE,QAAgB,EAAE,KAA4G;QAClK,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAkB;YAC1B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,KAA+C;QACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAU,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,YAAY,CAAC,GAAmB,EAAE,QAAgB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/knowledge/__tests__/KnowledgeService.pbt.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SA4E-85 — PBT-HYD-01: thread_id from Backend KB createThread always UUID v4.
+ * Property-based testing with fast-check (500 runs, per STC).
+ * STC: PBT-HYD-01 — thread_id always valid UUID v4 format.
+ */
+export {};

package/dist/knowledge/__tests__/KnowledgeService.pbt.test.js

@@ -0,0 +1,47 @@
+/**
+ * SA4E-85 — PBT-HYD-01: thread_id from Backend KB createThread always UUID v4.
+ * Property-based testing with fast-check (500 runs, per STC).
+ * STC: PBT-HYD-01 — thread_id always valid UUID v4 format.
+ */
+import { describe, it, expect } from 'vitest';
+import fc from 'fast-check';
+import pino from 'pino';
+import { KnowledgeDb } from '../KnowledgeDb.js';
+import { KnowledgeService } from '../KnowledgeService.js';
+import { createProjectContext } from '../../modules/memory/ProjectContext.js';
+import { isUuidV4, UUID_V4_REGEX } from '../models.js';
+const logger = pino({ level: 'silent' });
+describe('PBT-HYD-01 — backend thread_id always valid UUID v4', () => {
+    it('holds for 500 random createThread inputs', () => {
+        const db = KnowledgeDb.createInMemory();
+        const service = new KnowledgeService(db, logger);
+        const ctx = createProjectContext('pbt-ws', 'pbt-user');
+        fc.assert(fc.property(fc.string({ maxLength: 64 }), fc.string({ maxLength: 32 }), fc.boolean(), (title, agentId, hasAgent) => {
+            const thread = service.createThread(ctx, {
+                title,
+                agent_id: hasAgent ? agentId : null,
+            });
+            expect(thread.thread_id).toMatch(UUID_V4_REGEX);
+            expect(isUuidV4(thread.thread_id)).toBe(true);
+        }), { numRuns: 500 });
+    });
+    it('thread ids are unique across creations', () => {
+        const db = KnowledgeDb.createInMemory();
+        const service = new KnowledgeService(db, logger);
+        const ctx = createProjectContext('pbt-ws', 'pbt-user');
+        const ids = new Set(Array.from({ length: 100 }, () => service.createThread(ctx, {}).thread_id));
+        expect(ids.size).toBe(100);
+    });
+    it('invalid thread_id strings are rejected by accessors', () => {
+        const db = KnowledgeDb.createInMemory();
+        const service = new KnowledgeService(db, logger);
+        const ctx = createProjectContext('pbt-ws', 'pbt-user');
+        fc.assert(fc.property(fc.string({ maxLength: 100 }), (badId) => {
+            fc.pre(!UUID_V4_REGEX.test(badId));
+            expect(service.getThread(ctx, badId)).toBeNull();
+            expect(service.getMessages(ctx, badId)).toBeNull();
+            expect(service.getCheckpoint(ctx, badId)).toBeNull();
+        }), { numRuns: 500 });
+    });
+});
+//# sourceMappingURL=KnowledgeService.pbt.test.js.map

package/dist/knowledge/__tests__/KnowledgeService.pbt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KnowledgeService.pbt.test.js","sourceRoot":"","sources":["../../../src/knowledge/__tests__/KnowledgeService.pbt.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAEzC,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEvD,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC5B,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC5B,EAAE,CAAC,OAAO,EAAE,EACZ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE;gBACvC,KAAK;gBACL,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aACpC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvD,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YACnD,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/knowledge/__tests__/KnowledgeService.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SA4E-85 — KnowledgeService unit tests.
+ * Covers: thread creation (PBT-HYD-01 contract), workspace binding (#18),
+ * checkpoint PUT→GET roundtrip (IT-HYD-03 backend logic), DELETE cascade.
+ */
+export {};