spine-framework 0.3.144 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (451) hide show
  1. package/.env.example +76 -0
  2. package/.framework/.spine-manifest.json +19 -0
  3. package/.framework/cli/commands/agents.ts +61 -33
  4. package/.framework/cli/commands/auth.ts +60 -28
  5. package/.framework/cli/commands/create-app.ts +212 -80
  6. package/.framework/cli/commands/dev.ts +184 -68
  7. package/.framework/cli/commands/doctor.ts +324 -152
  8. package/.framework/cli/commands/generate.ts +119 -68
  9. package/.framework/cli/commands/init.ts +141 -242
  10. package/.framework/cli/commands/install-app.ts +1336 -314
  11. package/.framework/cli/commands/items.ts +31 -29
  12. package/.framework/cli/commands/migrate.ts +299 -156
  13. package/.framework/cli/commands/migrations.ts +62 -30
  14. package/.framework/cli/commands/pipelines.ts +31 -29
  15. package/.framework/cli/commands/status.ts +105 -45
  16. package/.framework/cli/commands/system.ts +47 -42
  17. package/.framework/cli/commands/test.ts +161 -102
  18. package/.framework/cli/commands/upgrade.ts +260 -0
  19. package/.framework/cli/commands/validate-app.ts +517 -161
  20. package/.framework/cli/context.ts +117 -85
  21. package/.framework/cli/env-loader.ts +74 -43
  22. package/.framework/cli/index.ts +70 -46
  23. package/.framework/cli/lib/project-files.ts +404 -0
  24. package/.framework/docs/guides/testing-guide.md +1 -1
  25. package/.framework/docs/runtime-types.md +72 -72
  26. package/.framework/functions/_shared/access.ts +84 -0
  27. package/.framework/functions/_shared/agent-runner.ts +5051 -1026
  28. package/.framework/functions/_shared/app-manifest.ts +214 -94
  29. package/.framework/functions/_shared/ast.ts +214 -0
  30. package/.framework/functions/_shared/audit.ts +91 -55
  31. package/.framework/functions/_shared/cil.ts +368 -127
  32. package/.framework/functions/_shared/db.ts +337 -68
  33. package/.framework/functions/_shared/funnel.ts +228 -0
  34. package/.framework/functions/_shared/geo.ts +105 -0
  35. package/.framework/functions/_shared/hash-api-key.ts +94 -17
  36. package/.framework/functions/_shared/index.ts +22 -224
  37. package/.framework/functions/_shared/kb.ts +832 -58
  38. package/.framework/functions/_shared/llm.ts +118 -18
  39. package/.framework/functions/_shared/logging.ts +317 -19
  40. package/.framework/functions/_shared/middleware.ts +701 -131
  41. package/.framework/functions/_shared/notify.ts +70 -0
  42. package/.framework/functions/_shared/outcomes.ts +34 -19
  43. package/.framework/functions/_shared/permissions.ts +501 -315
  44. package/.framework/functions/_shared/pipeline-runner.ts +704 -155
  45. package/.framework/functions/_shared/principal.ts +436 -263
  46. package/.framework/functions/_shared/rate-limit.ts +233 -0
  47. package/.framework/functions/_shared/resolve-credentials.ts +86 -19
  48. package/.framework/functions/_shared/resolve-ids.ts +203 -139
  49. package/.framework/functions/_shared/retry-deliveries.ts +51 -16
  50. package/.framework/functions/_shared/schema-utils.ts +602 -521
  51. package/.framework/functions/_shared/security.ts +345 -0
  52. package/.framework/functions/_shared/testing.ts +197 -172
  53. package/.framework/functions/_shared/tracing.ts +351 -21
  54. package/.framework/functions/_shared/trigger-engine.ts +425 -136
  55. package/.framework/functions/_shared/webhook-registration.ts +71 -70
  56. package/.framework/functions/_shared/webhook-registry.ts +126 -83
  57. package/.framework/functions/account-nodes.ts +30 -30
  58. package/.framework/functions/adapters/generic-webhook-inbound.ts +49 -16
  59. package/.framework/functions/adapters/generic-webhook-outbound.ts +17 -17
  60. package/.framework/functions/adapters/openai-outbound.ts +15 -16
  61. package/.framework/functions/admin-data.ts +596 -173
  62. package/.framework/functions/admin-funnel.ts +64 -60
  63. package/.framework/functions/admin-install-funnel.ts +84 -66
  64. package/.framework/functions/admin-signals.ts +69 -51
  65. package/.framework/functions/ai-agents.ts +431 -106
  66. package/.framework/functions/ai-interactions.ts +186 -112
  67. package/.framework/functions/api-keys.ts +107 -107
  68. package/.framework/functions/apps.ts +154 -136
  69. package/.framework/functions/auth.ts +83 -65
  70. package/.framework/functions/cil-agent-ingest.ts +189 -232
  71. package/.framework/functions/cil-agent.ts +433 -177
  72. package/.framework/functions/cil-callmap.ts +642 -430
  73. package/.framework/functions/cil-config.ts +139 -135
  74. package/.framework/functions/cil-context.ts +214 -127
  75. package/.framework/functions/cil-doc.ts +587 -458
  76. package/.framework/functions/cil-embeddings.ts +453 -364
  77. package/.framework/functions/cil-graph.ts +427 -142
  78. package/.framework/functions/cil-ingest.ts +1418 -1154
  79. package/.framework/functions/cil-pipeline.ts +276 -21
  80. package/.framework/functions/cil-project.ts +659 -132
  81. package/.framework/functions/cil-validate.ts +198 -164
  82. package/.framework/functions/debug-auth.ts +57 -55
  83. package/.framework/functions/deliveries.ts +80 -21
  84. package/.framework/functions/embeddings.ts +1023 -318
  85. package/.framework/functions/eval-harness.ts +146 -108
  86. package/.framework/functions/integration-outbound.ts +205 -75
  87. package/.framework/functions/integration-routes.ts +128 -23
  88. package/.framework/functions/integrations.ts +125 -100
  89. package/.framework/functions/invites.ts +1095 -460
  90. package/.framework/functions/item-progress.ts +158 -102
  91. package/.framework/functions/kb.ts +34 -10
  92. package/.framework/functions/logs.ts +133 -133
  93. package/.framework/functions/observability.ts +152 -122
  94. package/.framework/functions/pipeline-executions.ts +147 -132
  95. package/.framework/functions/pipelines.ts +134 -119
  96. package/.framework/functions/prompt-configs.ts +96 -80
  97. package/.framework/functions/roles.ts +112 -82
  98. package/.framework/functions/security.ts +450 -0
  99. package/.framework/functions/system-cron.ts +117 -80
  100. package/.framework/functions/system.ts +158 -98
  101. package/.framework/functions/tests.ts +29 -29
  102. package/.framework/functions/timers.ts +94 -95
  103. package/.framework/functions/trigger-scheduler.ts +10 -0
  104. package/.framework/functions/triggers.ts +179 -149
  105. package/.framework/functions/types.ts +137 -125
  106. package/.framework/mcp/index.ts +133 -0
  107. package/.framework/mcp/load-env.ts +60 -0
  108. package/.framework/mcp/shared/app-manifest.ts +275 -0
  109. package/.framework/mcp/shared/db.ts +477 -0
  110. package/.framework/mcp/shared/kb.ts +118 -0
  111. package/.framework/mcp/tools/architect.ts +431 -0
  112. package/.framework/mcp/tools/cil/context.ts +345 -0
  113. package/.framework/mcp/tools/cil/graph.ts +242 -0
  114. package/.framework/mcp/tools/cil/ingest.ts +1217 -0
  115. package/.framework/mcp/tools/cil/pipeline-orchestrator.ts +693 -0
  116. package/.framework/mcp/tools/cil/pipeline.ts +767 -0
  117. package/.framework/mcp/tools/cil/project.ts +791 -0
  118. package/.framework/mcp/tools/cil/retrieval.ts +336 -0
  119. package/.framework/mcp/tools/cil/search-core.ts +454 -0
  120. package/.framework/mcp/tools/cil/search.ts +97 -0
  121. package/.framework/mcp/tools/cil/suggest.ts +186 -0
  122. package/.framework/mcp/tools/cil/validate.ts +1369 -0
  123. package/.framework/mcp/tools/kb/delete.ts +139 -0
  124. package/.framework/mcp/tools/kb/index.ts +52 -0
  125. package/.framework/mcp/tools/kb/ingest.ts +84 -0
  126. package/.framework/mcp/tools/kb/list-types.ts +102 -0
  127. package/.framework/mcp/tools/kb/publish.ts +100 -0
  128. package/.framework/mcp/tools/kb/reindex.ts +86 -0
  129. package/.framework/mcp/tools/kb/revoke.ts +85 -0
  130. package/.framework/mcp/tools/kb/search.ts +101 -0
  131. package/.framework/mcp/tools/kb/upsert.ts +125 -0
  132. package/.framework/mcp/tools/observability.ts +510 -0
  133. package/.framework/migrations/001_core_schema.sql +15 -0
  134. package/.framework/migrations/002_core_rls_and_functions.sql +15 -0
  135. package/.framework/migrations/003_core_system_data.sql +16 -1
  136. package/.framework/migrations/004_core_rpc_and_broker.sql +17 -1
  137. package/.framework/migrations/005_core_observability.sql +17 -1
  138. package/.framework/migrations/006_security_hardening_rls.sql +15 -0
  139. package/.framework/migrations/007_kb_article_list.sql +17 -1
  140. package/.framework/migrations/008_items_target.sql +15 -0
  141. package/.framework/migrations/009_roles_slug_unique.sql +15 -0
  142. package/.framework/migrations/010_auth_user_trigger.sql +15 -0
  143. package/.framework/migrations/011_spine_system_account.sql +16 -0
  144. package/.framework/migrations/012_service_role_grants.sql +16 -0
  145. package/.framework/migrations/013_get_account_apps_role_filter.sql +15 -0
  146. package/.framework/migrations/014_apps_required_roles.sql +16 -0
  147. package/.framework/migrations/015_types_kind_slug_unique.sql +20 -0
  148. package/.framework/migrations/016_cil_types.sql +281 -0
  149. package/.framework/migrations/017_cil_stable_ids.sql +37 -0
  150. package/.framework/migrations/018_runtime_tables.sql +129 -0
  151. package/.framework/migrations/019_agent_prompt_columns.sql +56 -0
  152. package/.framework/migrations/020_schema_reconciliation.sql +67 -0
  153. package/.framework/migrations/021_kb_embedding_lifecycle.sql +31 -0
  154. package/.framework/migrations/032_cil_status_migration.sql +73 -0
  155. package/.framework/migrations/033_cil_versioning.sql +73 -0
  156. package/.framework/migrations/034_match_embeddings_knn.sql +115 -0
  157. package/.framework/migrations/035_rate_limits.sql +55 -0
  158. package/.framework/migrations/036_demo_record_flags.sql +72 -0
  159. package/.framework/migrations/037_kb_types_canonical.sql +244 -0
  160. package/.framework/migrations/038_drop_demo_record_flags.sql +38 -0
  161. package/.framework/migrations/042_registration_hierarchy.sql +309 -0
  162. package/.framework/migrations/043_policy_actor_cleanup.sql +39 -0
  163. package/.framework/migrations/044_match_embeddings_filtered_knn.sql +151 -0
  164. package/.framework/migrations/045_security_critical_rls.sql +139 -0
  165. package/.framework/migrations/046_security_missing_rls.sql +79 -0
  166. package/.framework/migrations/047_people_updated_by.sql +27 -0
  167. package/.framework/migrations/048_watcher_last_seen_at.sql +24 -0
  168. package/.framework/migrations/049_security_blocklist.sql +148 -0
  169. package/.framework/migrations/050_notifications.sql +49 -0
  170. package/.framework/migrations/051_message_agent_fields.sql +74 -0
  171. package/.framework/migrations/052_registration_security.sql +421 -0
  172. package/.framework/migrations/053_builtin_action_seeds.sql +66 -0
  173. package/.framework/migrations/054_kb_ingest_lease.sql +157 -0
  174. package/.framework/migrations/055_type_id_drift_reconciliation.sql +33 -0
  175. package/.framework/migrations/056_slug_column_reconciliation.sql +38 -0
  176. package/.framework/migrations/057_pipelines_slug_identity.sql +14 -0
  177. package/.framework/migrations/058_account_data_field_declarations.sql +53 -0
  178. package/.framework/migrations/059_registration_placement_fixes.sql +269 -0
  179. package/.framework/migrations/060_account_person_record_permissions.sql +38 -0
  180. package/.framework/migrations/061_fk_dedup.sql +32 -0
  181. package/.framework/public/spine-logo.svg +10 -3
  182. package/.framework/scripts/app-install-cli.ts +190 -93
  183. package/.framework/scripts/assemble-frontend.sh +127 -44
  184. package/.framework/scripts/assemble-functions.sh +128 -30
  185. package/.framework/scripts/boundary-check.sh +6 -2
  186. package/.framework/scripts/build-manifest.sh +24 -68
  187. package/.framework/scripts/check-core-integrity.sh +15 -76
  188. package/.framework/scripts/checksum-manifest.mts +343 -0
  189. package/.framework/scripts/cil-migrate-markers.ts +403 -0
  190. package/.framework/scripts/fix-cil-markers.mjs +176 -0
  191. package/.framework/scripts/verify-integrity.sh +21 -57
  192. package/.framework/scripts/verify-manifest.mts +305 -0
  193. package/.framework/seeds/types/funnel_signal_use.json +74 -21
  194. package/.framework/seeds/types/spine_instance.json +73 -21
  195. package/.framework/src/App.tsx +118 -72
  196. package/.framework/src/apps/admin/index.tsx +855 -58
  197. package/.framework/src/components/AppWrapper.tsx +43 -45
  198. package/.framework/src/components/CustomAppLoader.tsx +160 -116
  199. package/.framework/src/components/admin/AdminListPage.tsx +46 -44
  200. package/.framework/src/components/admin/AdminSidebar.tsx +57 -47
  201. package/.framework/src/components/admin/AdminStatsCard.tsx +46 -44
  202. package/.framework/src/components/admin/PageInstructions.tsx +98 -2
  203. package/.framework/src/components/admin/SortableTableHeader.tsx +44 -45
  204. package/.framework/src/components/app-shell/GenericAppShell.tsx +64 -65
  205. package/.framework/src/components/app-shell/GenericDetailPage.tsx +44 -47
  206. package/.framework/src/components/app-shell/GenericListPage.tsx +45 -49
  207. package/.framework/src/components/app-sidebar.tsx +42 -45
  208. package/.framework/src/components/auth/ProtectedRoute.tsx +48 -41
  209. package/.framework/src/components/auth/TurnstileWidget.tsx +27 -0
  210. package/.framework/src/components/kb/KBArticleEditor.tsx +231 -22
  211. package/.framework/src/components/kb/KBArticleList.tsx +251 -10
  212. package/.framework/src/components/layout/AppShell.tsx +51 -45
  213. package/.framework/src/components/layout/Header.tsx +42 -43
  214. package/.framework/src/components/layout/Layout.tsx +46 -46
  215. package/.framework/src/components/layout/Sidebar.tsx +196 -96
  216. package/.framework/src/components/runtime/DataDetailHeader.tsx +55 -30
  217. package/.framework/src/components/runtime/DataDetailPage.tsx +31 -269
  218. package/.framework/src/components/runtime/DataFilters.tsx +49 -74
  219. package/.framework/src/components/runtime/DataHeader.tsx +53 -32
  220. package/.framework/src/components/runtime/DataListPage.tsx +51 -155
  221. package/.framework/src/components/runtime/DataStats.tsx +66 -44
  222. package/.framework/src/components/runtime/DataTable.tsx +49 -149
  223. package/.framework/src/components/runtime/SchemaDetailForm.tsx +45 -75
  224. package/.framework/src/components/runtime/index.ts +119 -16
  225. package/.framework/src/components/search-form.tsx +46 -29
  226. package/.framework/src/components/shared/AgentView.tsx +65 -48
  227. package/.framework/src/components/shared/FieldRenderer.tsx +144 -50
  228. package/.framework/src/components/shared/InviteManager.tsx +207 -97
  229. package/.framework/src/components/shared/MemberList.tsx +97 -0
  230. package/.framework/src/components/shared/SchemaFields.tsx +107 -86
  231. package/.framework/src/components/ui/DataTable.tsx +80 -68
  232. package/.framework/src/components/ui/Form.tsx +157 -146
  233. package/.framework/src/components/ui/ItemCard.tsx +74 -67
  234. package/.framework/src/components/ui/ItemListView.tsx +73 -68
  235. package/.framework/src/components/ui/LoadingSpinner.tsx +43 -48
  236. package/.framework/src/components/ui/Modal.tsx +78 -68
  237. package/.framework/src/components/ui/RichTextEditor.tsx +89 -69
  238. package/.framework/src/components/ui/accordion.tsx +85 -86
  239. package/.framework/src/components/ui/alert-dialog.tsx +197 -184
  240. package/.framework/src/components/ui/alert.tsx +105 -94
  241. package/.framework/src/components/ui/aspect-ratio.tsx +57 -43
  242. package/.framework/src/components/ui/avatar.tsx +122 -107
  243. package/.framework/src/components/ui/badge.tsx +60 -55
  244. package/.framework/src/components/ui/breadcrumb.tsx +127 -128
  245. package/.framework/src/components/ui/button-group.tsx +86 -72
  246. package/.framework/src/components/ui/button.tsx +71 -50
  247. package/.framework/src/components/ui/calendar.tsx +72 -57
  248. package/.framework/src/components/ui/card.tsx +136 -129
  249. package/.framework/src/components/ui/carousel.tsx +226 -107
  250. package/.framework/src/components/ui/chart.tsx +252 -147
  251. package/.framework/src/components/ui/checkbox.tsx +43 -44
  252. package/.framework/src/components/ui/collapsible.tsx +86 -71
  253. package/.framework/src/components/ui/combobox.tsx +282 -249
  254. package/.framework/src/components/ui/command.tsx +158 -146
  255. package/.framework/src/components/ui/context-menu.tsx +239 -240
  256. package/.framework/src/components/ui/dialog.tsx +174 -157
  257. package/.framework/src/components/ui/direction.tsx +72 -56
  258. package/.framework/src/components/ui/drawer.tsx +168 -169
  259. package/.framework/src/components/ui/dropdown-menu.tsx +254 -223
  260. package/.framework/src/components/ui/empty.tsx +131 -120
  261. package/.framework/src/components/ui/field.tsx +205 -173
  262. package/.framework/src/components/ui/hover-card.tsx +71 -72
  263. package/.framework/src/components/ui/input-group.tsx +148 -133
  264. package/.framework/src/components/ui/input-otp.tsx +99 -86
  265. package/.framework/src/components/ui/input.tsx +43 -41
  266. package/.framework/src/components/ui/item.tsx +207 -185
  267. package/.framework/src/components/ui/kbd.tsx +57 -56
  268. package/.framework/src/components/ui/label.tsx +45 -41
  269. package/.framework/src/components/ui/menubar.tsx +268 -236
  270. package/.framework/src/components/ui/native-select.tsx +85 -86
  271. package/.framework/src/components/ui/navigation-menu.tsx +166 -156
  272. package/.framework/src/components/ui/pagination.tsx +131 -141
  273. package/.framework/src/components/ui/popover.tsx +125 -128
  274. package/.framework/src/components/ui/progress.tsx +47 -44
  275. package/.framework/src/components/ui/radio-group.tsx +60 -55
  276. package/.framework/src/components/ui/resizable.tsx +85 -72
  277. package/.framework/src/components/ui/scroll-area.tsx +57 -58
  278. package/.framework/src/components/ui/select.tsx +182 -169
  279. package/.framework/src/components/ui/separator.tsx +42 -43
  280. package/.framework/src/components/ui/sheet.tsx +170 -159
  281. package/.framework/src/components/ui/sidebar.tsx +395 -398
  282. package/.framework/src/components/ui/skeleton.tsx +42 -43
  283. package/.framework/src/components/ui/slider.tsx +61 -44
  284. package/.framework/src/components/ui/sonner.tsx +44 -44
  285. package/.framework/src/components/ui/spinner.tsx +47 -42
  286. package/.framework/src/components/ui/switch.tsx +56 -42
  287. package/.framework/src/components/ui/table-primitives.tsx +272 -132
  288. package/.framework/src/components/ui/table.tsx +140 -142
  289. package/.framework/src/components/ui/tabs.tsx +110 -93
  290. package/.framework/src/components/ui/textarea.tsx +43 -44
  291. package/.framework/src/components/ui/toggle-group.tsx +87 -71
  292. package/.framework/src/components/ui/toggle.tsx +56 -56
  293. package/.framework/src/components/ui/tooltip.tsx +99 -85
  294. package/.framework/src/contexts/AppContext.tsx +166 -114
  295. package/.framework/src/contexts/AuthContext.tsx +232 -137
  296. package/.framework/src/hooks/use-mobile.ts +43 -44
  297. package/.framework/src/hooks/useApi.ts +185 -172
  298. package/.framework/src/hooks/useAppPath.ts +31 -29
  299. package/.framework/src/hooks/useApps.ts +77 -42
  300. package/.framework/src/hooks/useEntityList.ts +66 -29
  301. package/.framework/src/hooks/useEntityRecord.ts +76 -32
  302. package/.framework/src/hooks/useForm.ts +62 -30
  303. package/.framework/src/hooks/useListSchema.ts +60 -43
  304. package/.framework/src/hooks/useSchemaRecord.ts +115 -95
  305. package/.framework/src/lib/api.ts +258 -134
  306. package/.framework/src/lib/registration.ts +181 -0
  307. package/.framework/src/lib/supabase.ts +118 -81
  308. package/.framework/src/lib/utils.ts +266 -266
  309. package/.framework/src/main.tsx +43 -44
  310. package/.framework/src/pages/DashboardPage.tsx +44 -43
  311. package/.framework/src/pages/NoAppPage.tsx +50 -0
  312. package/.framework/src/pages/NotFoundPage.tsx +32 -29
  313. package/.framework/src/pages/SetupPage.tsx +34 -33
  314. package/.framework/src/pages/admin/AIAgentDetailPage.tsx +69 -58
  315. package/.framework/src/pages/admin/AIAgentsPage.tsx +43 -40
  316. package/.framework/src/pages/admin/APIKeyDetailPage.tsx +63 -55
  317. package/.framework/src/pages/admin/APIKeysPage.tsx +44 -42
  318. package/.framework/src/pages/admin/AlertsConfigPage.tsx +117 -94
  319. package/.framework/src/pages/admin/AppDetailPage.tsx +48 -42
  320. package/.framework/src/pages/admin/AppsPage.tsx +45 -42
  321. package/.framework/src/pages/admin/DeliveriesPage.tsx +49 -17
  322. package/.framework/src/pages/admin/DesignedPage.tsx +31 -30
  323. package/.framework/src/pages/admin/EmbeddingDetailPage.tsx +58 -0
  324. package/.framework/src/pages/admin/EmbeddingsPage.tsx +49 -0
  325. package/.framework/src/pages/admin/ExtendedShadcnTestPage.tsx +31 -29
  326. package/.framework/src/pages/admin/IncrementalShadcnTestPage.tsx +46 -29
  327. package/.framework/src/pages/admin/IntegratedDashboard.tsx +32 -29
  328. package/.framework/src/pages/admin/IntegrationDetailPage.tsx +68 -55
  329. package/.framework/src/pages/admin/IntegrationsPage.tsx +45 -42
  330. package/.framework/src/pages/admin/InvitesPage.tsx +60 -44
  331. package/.framework/src/pages/admin/LogsPage.tsx +87 -137
  332. package/.framework/src/pages/admin/MinimalShadcnTestPage.tsx +31 -29
  333. package/.framework/src/pages/admin/ObservabilityDashboard.tsx +150 -89
  334. package/.framework/src/pages/admin/PipelineDetailPage.tsx +77 -104
  335. package/.framework/src/pages/admin/PipelineExecutionsPage.tsx +44 -43
  336. package/.framework/src/pages/admin/PipelinesPage.tsx +59 -145
  337. package/.framework/src/pages/admin/PromptConfigDetailPage.tsx +53 -42
  338. package/.framework/src/pages/admin/PromptConfigsPage.tsx +47 -117
  339. package/.framework/src/pages/admin/ProperlyDesignedPage.tsx +31 -44
  340. package/.framework/src/pages/admin/RoleDetailPage.tsx +49 -92
  341. package/.framework/src/pages/admin/RolesPage.tsx +47 -164
  342. package/.framework/src/pages/admin/SecurityPage.tsx +310 -0
  343. package/.framework/src/pages/admin/SelectTestPage.tsx +30 -32
  344. package/.framework/src/pages/admin/ShadcnTestPage.tsx +37 -44
  345. package/.framework/src/pages/admin/SimpleDashboard.tsx +32 -44
  346. package/.framework/src/pages/admin/TestRunDetailPage.tsx +97 -44
  347. package/.framework/src/pages/admin/TestingDashboard.tsx +126 -71
  348. package/.framework/src/pages/admin/TimerDetailPage.tsx +67 -55
  349. package/.framework/src/pages/admin/TimersPage.tsx +44 -42
  350. package/.framework/src/pages/admin/TriggerDetailPage.tsx +47 -42
  351. package/.framework/src/pages/admin/TriggersPage.tsx +58 -57
  352. package/.framework/src/pages/admin/TypeDetailPage.tsx +91 -55
  353. package/.framework/src/pages/admin/TypesPage.tsx +45 -42
  354. package/.framework/src/pages/admin/cil/CILAgentPage.tsx +258 -128
  355. package/.framework/src/pages/admin/cil/CILChunkDetailPage.tsx +127 -123
  356. package/.framework/src/pages/admin/cil/CILDashboardPage.tsx +308 -235
  357. package/.framework/src/pages/admin/cil/CILFileListPage.tsx +159 -110
  358. package/.framework/src/pages/admin/cil/CILFileSelectPage.tsx +432 -0
  359. package/.framework/src/pages/admin/cil/CILGraphPage.tsx +200 -178
  360. package/.framework/src/pages/admin/cil/CILIngestionPage.tsx +286 -239
  361. package/.framework/src/pages/admin/cil/CILProjectsPage.tsx +211 -90
  362. package/.framework/src/pages/admin/cil/CILSearchPage.tsx +156 -143
  363. package/.framework/src/pages/admin/cil/CILSuggestionsPage.tsx +379 -0
  364. package/.framework/src/pages/admin/cil/CILVersionsPage.tsx +337 -0
  365. package/.framework/src/pages/admin/cil/FlexiblePipelinePage.tsx +219 -214
  366. package/.framework/src/pages/admin/kb/KBAdminPage.tsx +64 -0
  367. package/.framework/src/pages/auth/AuthConfirmPage.tsx +135 -65
  368. package/.framework/src/pages/auth/ForgotPasswordPage.tsx +39 -31
  369. package/.framework/src/pages/auth/LoginPage.tsx +38 -32
  370. package/.framework/src/pages/auth/PendingApprovalPage.tsx +31 -28
  371. package/.framework/src/pages/auth/RegisterPage.tsx +429 -155
  372. package/.framework/src/pages/spine-framework/APIPage.tsx +33 -30
  373. package/.framework/src/pages/spine-framework/CLIPage.tsx +32 -30
  374. package/.framework/src/types/auth.ts +101 -93
  375. package/.framework/src/types/types.ts +283 -262
  376. package/.framework/templates/project.json +87 -0
  377. package/.framework/templates/spine.config.neutral.json +7 -0
  378. package/.framework/tests/api/api-surface.test.ts +381 -0
  379. package/.framework/tests/fixtures/seed.ts +427 -0
  380. package/.framework/tests/fixtures/teardown.ts +228 -0
  381. package/.framework/tests/reporter.ts +351 -0
  382. package/.framework/tests/setup.ts +135 -0
  383. package/.framework/tests/ui/ui-sweep.ts +278 -0
  384. package/.framework/tests/unit/admin-data-logger.test.ts +310 -0
  385. package/.framework/tests/unit/agent-runner.test.ts +2389 -0
  386. package/.framework/tests/unit/ai-interactions.test.ts +81 -0
  387. package/.framework/tests/unit/app-manifest.test.ts +359 -0
  388. package/.framework/tests/unit/assembly-scripts.test.ts +172 -0
  389. package/.framework/tests/unit/cil-determinism.test.ts +85 -0
  390. package/.framework/tests/unit/core-isolation.test.ts +153 -0
  391. package/.framework/tests/unit/funnel-signals.test.ts +135 -0
  392. package/.framework/tests/unit/install-app.test.ts +1759 -0
  393. package/.framework/tests/unit/invites-security.test.ts +572 -0
  394. package/.framework/tests/unit/kb-ingest-lease.test.ts +287 -0
  395. package/.framework/tests/unit/kb-search.test.ts +119 -0
  396. package/.framework/tests/unit/migrate.test.ts +509 -0
  397. package/.framework/tests/unit/notify.test.ts +136 -0
  398. package/.framework/tests/unit/permissions.test.ts +269 -0
  399. package/.framework/tests/unit/pipeline-runner.test.ts +755 -0
  400. package/.framework/tests/unit/principal-cache.test.ts +138 -0
  401. package/.framework/tests/unit/retrieval-golden.test.ts +520 -0
  402. package/.framework/tests/unit/runtime-isolation.test.ts +642 -0
  403. package/.framework/tests/unit/schema-utils.test.ts +225 -0
  404. package/.framework/tests/unit/trigger-engine.test.ts +513 -0
  405. package/.framework/tests/unit/validate-app.test.ts +527 -0
  406. package/README.md +34 -3
  407. package/bin/spine-framework.cjs +1 -0
  408. package/config/tailwind.config.cjs +7 -0
  409. package/config/tsconfig.functions.json +42 -0
  410. package/config/tsconfig.json +37 -9
  411. package/config/vite.config.ts +31 -2
  412. package/netlify.toml +31 -3
  413. package/package.json +46 -29
  414. package/scripts/assemble-frontend.sh +127 -44
  415. package/scripts/assemble-functions.sh +127 -29
  416. package/scripts/boundary-check.sh +6 -2
  417. package/scripts/build-manifest.sh +24 -68
  418. package/scripts/checksum-manifest.mts +345 -0
  419. package/scripts/dev-clean.sh +86 -0
  420. package/scripts/dev-netlify.sh +49 -0
  421. package/scripts/netlify-dev-wrapper.sh +2 -0
  422. package/scripts/verify-install.ts +358 -0
  423. package/scripts/verify-integrity.sh +21 -57
  424. package/scripts/verify-manifest.mts +305 -0
  425. package/templates/project/gitignore +45 -0
  426. package/{config → templates/project}/package-lock.json +22335 -9366
  427. package/vitest.config.ts +46 -0
  428. package/.framework/public/spine.config.json +0 -91
  429. package/config/deno.lock +0 -108
  430. package/config/tsconfig.node.tsbuildinfo +0 -1
  431. package/config/tsconfig.tsbuildinfo +0 -1
  432. package/config/vite.config.d.ts +0 -2
  433. package/custom/.devin/AGENT.md +0 -357
  434. package/custom/.devin/skills/install-app/SKILL.md +0 -39
  435. package/custom/.devin/skills/spine-workbench-discovery/SKILL.md +0 -39
  436. package/custom/.devin/skills/spine-workbench-idea/SKILL.md +0 -36
  437. package/custom/.devin/skills/spine-workbench-implement/SKILL.md +0 -46
  438. package/custom/.devin/skills/spine-workbench-initiative/SKILL.md +0 -28
  439. package/custom/.devin/skills/spine-workbench-plan/SKILL.md +0 -38
  440. package/custom/.devin/workflows/app-install.yaml +0 -83
  441. package/custom/README.md +0 -79
  442. package/docs/README.md +0 -15
  443. package/scripts/app-install-cli.ts +0 -286
  444. package/scripts/check-core-integrity.sh +0 -82
  445. package/scripts/ingest-chunks.cjs +0 -202
  446. package/scripts/kb-chunk-parser.cjs +0 -312
  447. package/scripts/kb-chunk-parser.ts +0 -330
  448. package/scripts/kb-ingest-docs.ts +0 -203
  449. package/scripts/load-test-app-install.ts +0 -484
  450. package/scripts/test-login.js +0 -33
  451. package/spine.config.json +0 -91
@@ -0,0 +1,287 @@
1
+ // CIL[BEGIN stable_id="~/.framework/tests/unit/kb-ingest-lease.test.ts:module_header:module_header" type="module_header" identity="module_header" parent="none"]
2
+ // CIL[DOC-MACRO purpose="Unit tests for kbIngest document-lease branches, supersede_keys supersession, and kbRevoke lease clearing"]
3
+ // CIL[DOC-RESPONSIBILITY responsibility="Exercise acquire_document_lease outcomes (acquired/reused/processing), token-fenced release, release-on-failure, functionality.kb.supersede_keys-driven archival, and kbRevoke's document_leases delete"]
4
+ // CIL[DOC-CONTEXT module="tests/unit/kb-ingest-lease" layer="test-unit" related_files=".framework/functions/_shared/kb.ts,.framework/migrations/054_kb_ingest_lease.sql"]
5
+ // CIL[DOC-CONTRACT inputs="none" outputs="vitest assertions" errors="none" side_effects="Mocks _shared/db.ts adminDb (from + rpc) and _shared/llm.ts callOpenAIEmbeddings"]
6
+ // CIL[DOC-MICRO logic_summary="Fluent thenable mock records each query's method ops; a resolver inspects the recorded ops to return per-table results (items load vs supersession select vs update, embeddings count/insert/delete, document_leases delete)" notable_decisions="ops are recorded rather than pre-programmed per call so assertions can inspect the .or() supersession filter and delete targets"]
7
+ // CIL[DOC-CONFIDENCE pass="first" score="0.9" flags="none"]
8
+ // CIL[DOC-STABILITY stability="stable"]
9
+ // CIL[DOC-AUDIENCE audience="test maintainers"]
10
+ import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
11
+
12
+ vi.mock('../../functions/_shared/db.ts', () => ({
13
+ adminDb: { from: vi.fn(), rpc: vi.fn() }
14
+ }))
15
+
16
+ vi.mock('../../functions/_shared/llm.ts', () => ({
17
+ callOpenAIEmbeddings: vi.fn(async (_ctx: any, texts: string[]) => ({
18
+ data: texts.map(() => ({ embedding: [0.1, 0.2, 0.3] }))
19
+ }))
20
+ }))
21
+
22
+ vi.mock('../../functions/_shared/permissions.ts', () => ({
23
+ sanitizeRecordData: vi.fn(async (_ctx: any, record: any) => ({ ...record }))
24
+ }))
25
+
26
+ import { adminDb } from '../../functions/_shared/db.ts'
27
+ import { callOpenAIEmbeddings } from '../../functions/_shared/llm.ts'
28
+ import { kbIngest, kbRevoke } from '../../functions/_shared/kb.ts'
29
+ // CIL[END stable_id="~/.framework/tests/unit/kb-ingest-lease.test.ts:module_header:module_header"]
30
+
31
+ type Op = [string, any[]]
32
+ interface QueryLog { table: string; ops: Op[] }
33
+
34
+ const ITEM_ID = '11111111-1111-4111-8111-111111111111'
35
+ const LEASE_ID = '22222222-2222-4222-8222-222222222222'
36
+
37
+ function makeRecord(overrides: any = {}): any {
38
+ return {
39
+ id: ITEM_ID,
40
+ account_id: 'acct-1',
41
+ type_id: 'type-1',
42
+ app_id: 'app-1',
43
+ status: 'published',
44
+ title: 'Hello',
45
+ data: { content: 'world content', source_ticket_id: 'ticket-9', slug: 'hello' },
46
+ design_schema: {
47
+ functionality: {
48
+ kb: {
49
+ vector_fields: ['title', 'content'],
50
+ chunk_field: 'content',
51
+ supersede_keys: ['source_ticket_id', 'slug'],
52
+ },
53
+ },
54
+ },
55
+ ...overrides,
56
+ }
57
+ }
58
+
59
+ // Fluent thenable query mock: every method records its op and returns the
60
+ // same thenable; awaiting resolves a result chosen by inspecting the ops.
61
+ function setupDb(opts: {
62
+ record?: any
63
+ staleItems?: any[]
64
+ embedCount?: number
65
+ }) {
66
+ const queries: QueryLog[] = []
67
+ vi.mocked(adminDb.from).mockImplementation((table: string) => {
68
+ const q: QueryLog = { table, ops: [] }
69
+ queries.push(q)
70
+ const self: any = new Proxy({}, {
71
+ get(_t, prop: string | symbol) {
72
+ if (prop === 'then') {
73
+ return (res: any, rej?: any) =>
74
+ Promise.resolve(resolveQuery(q, opts)).then(res, rej)
75
+ }
76
+ if (prop === 'catch') {
77
+ return (rej: any) =>
78
+ Promise.resolve(resolveQuery(q, opts)).catch(rej)
79
+ }
80
+ return (...args: any[]) => {
81
+ q.ops.push([prop as string, args])
82
+ return self
83
+ }
84
+ },
85
+ })
86
+ return self
87
+ })
88
+ return queries
89
+ }
90
+
91
+ function resolveQuery(q: QueryLog, opts: any): any {
92
+ const has = (m: string) => q.ops.some(([n]) => n === m)
93
+ if (q.table === 'items') {
94
+ if (has('update')) return { data: null, error: null }
95
+ if (has('or')) return { data: opts.staleItems ?? [], error: null }
96
+ return { data: opts.record ?? null, error: null }
97
+ }
98
+ if (q.table === 'types') {
99
+ return { data: { slug: 'demo_kb_article', app_id: 'app-1' }, error: null }
100
+ }
101
+ if (q.table === 'embeddings') {
102
+ if (has('insert') || has('delete')) return { data: null, error: null }
103
+ return { count: opts.embedCount ?? 0, data: null, error: null }
104
+ }
105
+ if (q.table === 'document_leases') return { data: null, error: null }
106
+ return { data: null, error: null }
107
+ }
108
+
109
+ function setupRpc(opts: { lease?: any; release?: any }) {
110
+ const calls: Array<[string, any]> = []
111
+ vi.mocked(adminDb.rpc).mockImplementation(async (name: string, params: any) => {
112
+ calls.push([name, params])
113
+ if (name === 'acquire_document_lease') {
114
+ return { data: opts.lease ?? { outcome: 'acquired', lease_id: LEASE_ID }, error: null }
115
+ }
116
+ if (name === 'release_document_lease') {
117
+ return { data: opts.release ?? true, error: null }
118
+ }
119
+ if (name === 'revoke_embeddings_for_item') return { data: 3, error: null }
120
+ return { data: null, error: null }
121
+ })
122
+ return calls
123
+ }
124
+
125
+ const ctx: any = { accountId: 'acct-1', requestId: 'req-t', principal: { id: 'sys' } }
126
+ const rpcNamed = (calls: Array<[string, any]>, name: string) =>
127
+ calls.filter(([n]) => n === name).map(([, p]) => p)
128
+ const queriesWithOp = (queries: QueryLog[], table: string, op: string) =>
129
+ queries.filter((q) => q.table === table && q.ops.some(([n]) => n === op))
130
+
131
+ describe('kbIngest — document lease branches', () => {
132
+ beforeEach(() => vi.clearAllMocks())
133
+ afterEach(() => vi.restoreAllMocks())
134
+
135
+ it('acquired: embeds declared vector fields and releases the lease completed', async () => {
136
+ const queries = setupDb({ record: makeRecord() })
137
+ const rpcCalls = setupRpc({})
138
+
139
+ const res = await kbIngest(ctx, { id: ITEM_ID })
140
+
141
+ expect(res.ok).toBe(true)
142
+ expect(res.count).toBe(2) // title + content chunks
143
+ expect(callOpenAIEmbeddings).toHaveBeenCalledTimes(1)
144
+
145
+ const [acquire] = rpcNamed(rpcCalls, 'acquire_document_lease')
146
+ expect(acquire.p_document_id).toBe(ITEM_ID)
147
+ expect(acquire.p_account_id).toBe('acct-1')
148
+ expect(acquire.p_content_hash).toMatch(/^[0-9a-f]{64}$/)
149
+
150
+ const [release] = rpcNamed(rpcCalls, 'release_document_lease')
151
+ expect(release).toEqual({
152
+ p_document_id: ITEM_ID,
153
+ p_lease_id: LEASE_ID,
154
+ p_status: 'completed',
155
+ })
156
+ // Old embeddings were cleared inside the lease — via the embeddings
157
+ // delete, not through a document_leases delete on our own row.
158
+ expect(queriesWithOp(queries, 'embeddings', 'delete')).toHaveLength(1)
159
+ expect(queriesWithOp(queries, 'document_leases', 'delete')).toHaveLength(0)
160
+ })
161
+
162
+ it('reused: returns the live embeddings count and never calls the embedder', async () => {
163
+ setupDb({ record: makeRecord(), embedCount: 7 })
164
+ const rpcCalls = setupRpc({ lease: { outcome: 'reused' } })
165
+
166
+ const res = await kbIngest(ctx, { id: ITEM_ID })
167
+
168
+ expect(res).toMatchObject({ ok: true, count: 7 })
169
+ expect(res.message).toContain('reused')
170
+ expect(callOpenAIEmbeddings).not.toHaveBeenCalled()
171
+ expect(rpcNamed(rpcCalls, 'release_document_lease')).toHaveLength(0)
172
+ })
173
+
174
+ it('processing: reports in_progress, embeds nothing, releases nothing', async () => {
175
+ setupDb({ record: makeRecord() })
176
+ const rpcCalls = setupRpc({ lease: { outcome: 'processing', lease_id: null } })
177
+
178
+ const res = await kbIngest(ctx, { id: ITEM_ID })
179
+
180
+ expect(res).toMatchObject({ ok: true, in_progress: true })
181
+ expect(res.message).toContain('in progress')
182
+ expect(callOpenAIEmbeddings).not.toHaveBeenCalled()
183
+ expect(rpcNamed(rpcCalls, 'release_document_lease')).toHaveLength(0)
184
+ })
185
+
186
+ it('fenced release: warns but still returns the ingest result', async () => {
187
+ setupDb({ record: makeRecord() })
188
+ setupRpc({ release: false })
189
+ const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
190
+
191
+ const res = await kbIngest(ctx, { id: ITEM_ID })
192
+
193
+ expect(res.ok).toBe(true)
194
+ expect(warn).toHaveBeenCalledWith(expect.stringContaining('fenced'))
195
+ })
196
+
197
+ it('embed failure: propagates and releases the lease as failed', async () => {
198
+ setupDb({ record: makeRecord() })
199
+ const rpcCalls = setupRpc({})
200
+ vi.mocked(callOpenAIEmbeddings).mockRejectedValueOnce(new Error('openai down'))
201
+
202
+ await expect(kbIngest(ctx, { id: ITEM_ID })).rejects.toThrow('openai down')
203
+
204
+ const [release] = rpcNamed(rpcCalls, 'release_document_lease')
205
+ expect(release.p_status).toBe('failed')
206
+ expect(release.p_lease_id).toBe(LEASE_ID)
207
+ })
208
+ })
209
+
210
+ describe('kbIngest — supersede_keys-driven supersession', () => {
211
+ beforeEach(() => vi.clearAllMocks())
212
+
213
+ it('builds the stale match from all declared keys present in record.data', async () => {
214
+ const stale = { id: 'old-1', status: 'published', data: { source_ticket_id: 'ticket-9' } }
215
+ const queries = setupDb({ record: makeRecord(), staleItems: [stale] })
216
+ setupRpc({})
217
+
218
+ await kbIngest(ctx, { id: ITEM_ID })
219
+
220
+ const [orQuery] = queriesWithOp(queries, 'items', 'or')
221
+ expect(orQuery.ops.find(([n]) => n === 'or')?.[1][0])
222
+ .toBe('data->>source_ticket_id.eq.ticket-9,data->>slug.eq.hello')
223
+
224
+ // The stale doc was archived…
225
+ const [update] = queriesWithOp(queries, 'items', 'update')
226
+ const updatePayload = update.ops.find(([n]) => n === 'update')?.[1][0]
227
+ expect(updatePayload.status).toBe('archived')
228
+ expect(updatePayload.data.superseded_by).toBe(ITEM_ID)
229
+ // …and revoked through kbRevoke, which also clears its lease row.
230
+ const leaseDeletes = queriesWithOp(queries, 'document_leases', 'delete')
231
+ expect(leaseDeletes).toHaveLength(1)
232
+ expect(leaseDeletes[0].ops.find(([n]) => n === 'eq')?.[1][1]).toBe('old-1')
233
+ })
234
+
235
+ it('skips supersession entirely when supersede_keys is undeclared', async () => {
236
+ const record = makeRecord()
237
+ record.design_schema.functionality.kb.supersede_keys = undefined
238
+ const queries = setupDb({ record })
239
+ setupRpc({})
240
+
241
+ await kbIngest(ctx, { id: ITEM_ID })
242
+
243
+ expect(queriesWithOp(queries, 'items', 'or')).toHaveLength(0)
244
+ expect(queriesWithOp(queries, 'items', 'update')).toHaveLength(0)
245
+ })
246
+
247
+ it('skips keys declared but absent from record.data', async () => {
248
+ const record = makeRecord({ data: { content: 'world content' } }) // no slug/source_ticket_id
249
+ const queries = setupDb({ record })
250
+ setupRpc({})
251
+
252
+ await kbIngest(ctx, { id: ITEM_ID })
253
+
254
+ expect(queriesWithOp(queries, 'items', 'or')).toHaveLength(0)
255
+ })
256
+ })
257
+
258
+ describe('kbRevoke — lease clearing', () => {
259
+ beforeEach(() => vi.clearAllMocks())
260
+
261
+ it('clears embeddings and deletes the document_leases row', async () => {
262
+ const queries = setupDb({})
263
+ const rpcCalls = setupRpc({})
264
+
265
+ const res = await kbRevoke(ctx, { id: ITEM_ID })
266
+
267
+ expect(res).toMatchObject({ ok: true, count: 3 })
268
+ expect(rpcNamed(rpcCalls, 'revoke_embeddings_for_item')[0])
269
+ .toEqual({ p_item_id: ITEM_ID })
270
+ const [embDelete] = queriesWithOp(queries, 'embeddings', 'delete')
271
+ expect(embDelete.ops.find(([n]) => n === 'eq')?.[1]).toEqual(['document_id', ITEM_ID])
272
+ const [leaseDelete] = queriesWithOp(queries, 'document_leases', 'delete')
273
+ expect(leaseDelete.ops.find(([n]) => n === 'eq')?.[1]).toEqual(['document_id', ITEM_ID])
274
+ })
275
+
276
+ it('non-published ingest routes through kbRevoke and clears the lease', async () => {
277
+ const queries = setupDb({ record: makeRecord({ status: 'draft' }) })
278
+ setupRpc({})
279
+
280
+ const res = await kbIngest(ctx, { id: ITEM_ID })
281
+
282
+ expect(res.message).toContain('not published')
283
+ expect(queriesWithOp(queries, 'document_leases', 'delete')).toHaveLength(1)
284
+ const rpcCalls = vi.mocked(adminDb.rpc).mock.calls.map(([n]) => n)
285
+ expect(rpcCalls).not.toContain('acquire_document_lease')
286
+ })
287
+ })
@@ -0,0 +1,119 @@
1
+ import { describe, it, expect, vi, beforeEach } from 'vitest'
2
+
3
+ vi.mock('../../functions/_shared/db.ts', () => ({
4
+ adminDb: { from: vi.fn(), rpc: vi.fn() }
5
+ }))
6
+
7
+ vi.mock('../../functions/_shared/llm.ts', () => ({
8
+ callOpenAIEmbeddings: vi.fn().mockResolvedValue({ data: [{ embedding: [0.1, 0.2] }] })
9
+ }))
10
+
11
+ vi.mock('../../functions/_shared/permissions.ts', () => ({
12
+ sanitizeRecordData: vi.fn(async (_ctx: any, record: any) => ({ ...record }))
13
+ }))
14
+
15
+ import { adminDb } from '../../functions/_shared/db.ts'
16
+ import { kbSearch } from '../../functions/_shared/kb.ts'
17
+
18
+ const UUID1 = '123e4567-e89b-42d3-a456-426614174000'
19
+ const SID = '~/.framework/src/types/types.ts:DesignSchema:interface'
20
+
21
+ function makeCtx(): any {
22
+ return { accountId: 'acct-1', db: null, appId: 'test-app' }
23
+ }
24
+
25
+ function appsQuery() {
26
+ return {
27
+ select: vi.fn().mockReturnThis(),
28
+ eq: vi.fn().mockReturnThis(),
29
+ maybeSingle: vi.fn().mockResolvedValue({
30
+ data: {
31
+ id: 'app-1',
32
+ slug: 'test-app',
33
+ required_roles: [],
34
+ config: { knowledge: { account: true, platform: true, cil: { project_ids: ['proj-x'] } } }
35
+ },
36
+ error: null
37
+ })
38
+ } as any
39
+ }
40
+
41
+ function accountsQuery() {
42
+ return {
43
+ select: vi.fn().mockReturnThis(),
44
+ eq: vi.fn().mockReturnThis(),
45
+ maybeSingle: vi.fn().mockResolvedValue({ data: { id: 'sys-acct' }, error: null })
46
+ } as any
47
+ }
48
+
49
+ function itemsQuery(result: any[], inCalls: [string, any][]) {
50
+ const q: any = {
51
+ select: vi.fn(() => q),
52
+ in: vi.fn((field: string, values: any[]) => { inCalls.push([field, values]); return q }),
53
+ then: (resolve: any) => resolve({ data: result, error: null })
54
+ }
55
+ return q
56
+ }
57
+
58
+ describe('kbSearch — sources filter and stable_id lookup', () => {
59
+ beforeEach(() => vi.clearAllMocks())
60
+
61
+ it('excludes cil_chunk matches for sources:["kb"] and never queries items by a non-UUID id', async () => {
62
+ vi.mocked(adminDb.rpc).mockResolvedValue({
63
+ data: [
64
+ { document_id: UUID1, similarity: 0.6, content: 'kb body', metadata: { item_type: 'kb_article', vector_type: 'semantic' }, account_id: 'acct-1' },
65
+ { document_id: SID, similarity: 0.9, content: 'code chunk', metadata: { item_type: 'cil_chunk', vector_type: 'semantic', project_id: 'proj-x' }, account_id: 'sys-acct' },
66
+ ],
67
+ error: null
68
+ } as any)
69
+
70
+ const inCalls: [string, any][] = []
71
+ vi.mocked(adminDb.from).mockImplementation((table: string) => {
72
+ if (table === 'apps') return appsQuery()
73
+ if (table === 'accounts') return accountsQuery()
74
+ return itemsQuery([
75
+ { id: UUID1, title: 'KB article', status: 'published', data: { content: 'kb body' }, types: { slug: 'kb_article' } }
76
+ ], inCalls)
77
+ })
78
+
79
+ const res = await kbSearch(makeCtx(), { query: 'design schema', sources: ['kb'] })
80
+
81
+ expect(res.results).toHaveLength(1)
82
+ expect(res.results[0].document_id).toBe(UUID1)
83
+ expect(res.results[0].source).toBe('kb')
84
+ const idCalls = inCalls.filter(([f]) => f === 'id')
85
+ for (const [, vals] of idCalls) {
86
+ expect(vals).not.toContain(SID)
87
+ }
88
+ expect(inCalls.find(([f]) => f === 'data->>stable_id')).toBeUndefined()
89
+ })
90
+
91
+ it('uses the data->>stable_id lookup for cil_chunk matches when sources includes code', async () => {
92
+ vi.mocked(adminDb.rpc).mockResolvedValue({
93
+ data: [
94
+ { document_id: SID, similarity: 0.9, content: 'code chunk', metadata: { item_type: 'cil_chunk', vector_type: 'semantic', project_id: 'proj-x' }, account_id: 'sys-acct' },
95
+ ],
96
+ error: null
97
+ } as any)
98
+
99
+ const inCalls: [string, any][] = []
100
+ vi.mocked(adminDb.from).mockImplementation((table: string) => {
101
+ if (table === 'apps') return appsQuery()
102
+ if (table === 'accounts') return accountsQuery()
103
+ return itemsQuery([
104
+ { id: 'chunk-item-1', title: 'DesignSchema', status: 'published', data: { stable_id: SID, kb_type: 'cil_chunk' }, types: { slug: 'cil_chunk' } }
105
+ ], inCalls)
106
+ })
107
+
108
+ const res = await kbSearch(makeCtx(), { query: 'design schema', sources: ['code'] })
109
+
110
+ expect(inCalls).toContainEqual(['data->>stable_id', [SID]])
111
+ const idCalls = inCalls.filter(([f]) => f === 'id')
112
+ for (const [, vals] of idCalls) {
113
+ expect(vals).not.toContain(SID)
114
+ }
115
+ expect(res.results).toHaveLength(1)
116
+ expect(res.results[0].document_id).toBe(SID)
117
+ expect(res.results[0].source).toBe('code')
118
+ })
119
+ })