sqlew 3.6.10 → 3.7.1

package/dist/tools/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/tools/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AA6BvD,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EAGnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,aAAa,CAAC;AAkKrB;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAmC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,MAAM,GAAE,gBAAqB,EAC7B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAmE7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,GAAG;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,EACzD,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAoE9B;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,oBAAoB,CAAC,CAwE/B;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAmE9B;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,qBAAqB,CAAC,CA6FhC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,wBAAwB,CAAC,CA2FnC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAClC,MAAM,GAAE,oBAAyB,EACjC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAiLjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,wBAAwB,CAAC,CAgGnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAsE7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAuFlC;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAmDjC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,GAAE,mBAAwB,EAChC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,EAChC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,0BAA0B,CAAC,CA6DrC;AAMD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,GAAG,EACX,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,GAAG,CAAC,CAyDd;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,GAAG,EACX,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,GAAG,CAAC,CA8Bd;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,GAAG,CA2FlC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,GAAG,CAkIrC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/tools/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAgCvD,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EAGnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,aAAa,CAAC;AAkLrB;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAqC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,MAAM,GAAE,gBAAqB,EAC7B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA4F7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,GAAG;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,EACzD,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAwE9B;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,oBAAoB,CAAC,CA2E/B;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAsE9B;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAuHhC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,wBAAwB,CAAC,CA2FnC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAClC,MAAM,GAAE,oBAAyB,EACjC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAoLjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,wBAAwB,CAAC,CAoGnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA4E7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,CA0FlC;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAyDjC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,GAAE,mBAAwB,EAChC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAiDhC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,EAChC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,0BAA0B,CAAC,CA6ErC;AAMD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,GAAG,EACX,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,GAAG,CAAC,CAyDd;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,GAAG,EACX,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,GAAG,CAAC,CA8Bd;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,GAAG,CA2FlC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,GAAG,CAkIrC"}

package/dist/tools/context.js

@@ -5,12 +5,14 @@
  * CONVERTED: Using Knex.js with DatabaseAdapter (async/await)
  */
 import { getAdapter, getOrCreateAgent, getOrCreateContextKey, getOrCreateTag, getOrCreateScope, getLayerId, addDecisionContext as dbAddDecisionContext, getDecisionWithContext as dbGetDecisionWithContext, listDecisionContexts as dbListDecisionContexts } from '../database.js';
+import { getProjectContext } from '../utils/project-context.js';
 import { STRING_TO_STATUS, DEFAULT_VERSION, DEFAULT_STATUS } from '../constants.js';
 import { validateRequired, validateStatus } from '../utils/validators.js';
 import { logDecisionSet, logDecisionUpdate, recordDecisionHistory } from '../utils/activity-logging.js';
 import { parseStringArray } from '../utils/param-parser.js';
 import { validateActionParams, validateBatchParams } from '../utils/parameter-validator.js';
-import { debugLogFunctionEntry, debugLogFunctionExit, debugLogTransaction, debugLogCriticalError } from '../utils/debug-logger.js';
+import connectionManager from '../utils/connection-manager.js';
+import { debugLog, debugLogFunctionEntry, debugLogFunctionExit, debugLogTransaction, debugLogCriticalError } from '../utils/debug-logger.js';
 /**
  * Internal helper: Set decision without wrapping in transaction
  * Used by setDecision (with transaction) and setDecisionBatch (manages its own transaction)
@@ -22,6 +24,8 @@ import { debugLogFunctionEntry, debugLogFunctionExit, debugLogTransaction, debug
  */
 async function setDecisionInternal(params, adapter, trx) {
     const knex = trx || adapter.getKnex();
+    // Validate project context (Constraint #29 - fail-fast before mutations)
+    const projectId = getProjectContext().getProjectId();
     // Validate required parameters
     const trimmedKey = validateRequired(params.key, 'key');
     if (params.value === undefined || params.value === null) {
@@ -57,12 +61,13 @@ async function setDecisionInternal(params, adapter, trx) {
     const ts = Math.floor(Date.now() / 1000);
     // Check if decision already exists for activity logging
     const existingDecision = await knex(isNumeric ? 't_decisions_numeric' : 't_decisions')
-        .where({ key_id: keyId })
+        .where({ key_id: keyId, project_id: projectId })
         .first();
     // Insert or update decision based on value type
     const tableName = isNumeric ? 't_decisions_numeric' : 't_decisions';
     const decisionData = {
         key_id: keyId,
+        project_id: projectId,
         value: isNumeric ? value : String(value),
         agent_id: agentId,
         layer_id: layerId,
@@ -71,7 +76,7 @@ async function setDecisionInternal(params, adapter, trx) {
         ts: ts
     };
     // Use transaction-aware upsert instead of adapter.upsert to avoid connection pool timeout
-    const conflictColumns = ['key_id'];
+    const conflictColumns = ['key_id', 'project_id'];
     const updateColumns = Object.keys(decisionData).filter(key => !conflictColumns.includes(key));
     const updateData = updateColumns.reduce((acc, col) => {
         acc[col] = decisionData[col];
@@ -116,24 +121,36 @@ async function setDecisionInternal(params, adapter, trx) {
     if (params.tags && params.tags.length > 0) {
         // Parse tags (handles both arrays and JSON strings from MCP)
         const tags = parseStringArray(params.tags);
-        // Clear existing tags
-        await knex('t_decision_tags').where({ decision_key_id: keyId }).delete();
+        // Clear existing tags for this project
+        await knex('t_decision_tags')
+            .where({ decision_key_id: keyId, project_id: projectId })
+            .delete();
         // Insert new tags
         for (const tagName of tags) {
             const tagId = await getOrCreateTag(adapter, tagName, trx);
-            await knex('t_decision_tags').insert({ decision_key_id: keyId, tag_id: tagId });
+            await knex('t_decision_tags').insert({
+                decision_key_id: keyId,
+                tag_id: tagId,
+                project_id: projectId
+            });
         }
     }
     // Handle m_scopes (many-to-many)
     if (params.scopes && params.scopes.length > 0) {
         // Parse scopes (handles both arrays and JSON strings from MCP)
         const scopes = parseStringArray(params.scopes);
-        // Clear existing scopes
-        await knex('t_decision_scopes').where({ decision_key_id: keyId }).delete();
+        // Clear existing scopes for this project
+        await knex('t_decision_scopes')
+            .where({ decision_key_id: keyId, project_id: projectId })
+            .delete();
         // Insert new scopes
         for (const scopeName of scopes) {
             const scopeId = await getOrCreateScope(adapter, scopeName, trx);
-            await knex('t_decision_scopes').insert({ decision_key_id: keyId, scope_id: scopeId });
+            await knex('t_decision_scopes').insert({
+                decision_key_id: keyId,
+                scope_id: scopeId,
+                project_id: projectId
+            });
         }
     }
     return {
@@ -165,12 +182,14 @@ export async function setDecision(params, adapter) {
     const actualAdapter = adapter ?? getAdapter();
     try {
         debugLogTransaction('START', 'setDecision');
-        // Use transaction for atomicity
-        const result = await actualAdapter.transaction(async (trx) => {
-            debugLogTransaction('COMMIT', 'setDecision-transaction-begin');
-            const internalResult = await setDecisionInternal(params, actualAdapter, trx);
-            debugLogTransaction('COMMIT', 'setDecision-transaction-end');
-            return internalResult;
+        // Use transaction for atomicity with connection retry
+        const result = await connectionManager.executeWithRetry(async () => {
+            return await actualAdapter.transaction(async (trx) => {
+                debugLogTransaction('COMMIT', 'setDecision-transaction-begin');
+                const internalResult = await setDecisionInternal(params, actualAdapter, trx);
+                debugLogTransaction('COMMIT', 'setDecision-transaction-end');
+                return internalResult;
+            });
         });
         debugLogFunctionExit('setDecision', true, result);
         return result;
@@ -205,9 +224,31 @@ export async function getContext(params = {}, adapter) {
     }
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Determine which project to query (current or referenced)
+    let projectId;
+    if (params._reference_project) {
+        // Cross-project query: look up the referenced project
+        const refProject = await knex('m_projects')
+            .where({ name: params._reference_project })
+            .first();
+        if (!refProject) {
+            throw new Error(`Referenced project "${params._reference_project}" not found`);
+        }
+        projectId = refProject.id;
+        debugLog('INFO', 'Cross-project query', {
+            currentProject: getProjectContext().getProjectName(),
+            referencedProject: params._reference_project,
+            projectId
+        });
+    }
+    else {
+        // Normal query: use current project
+        projectId = getProjectContext().getProjectId();
+    }
     try {
         // Build query dynamically based on filters
-        let query = knex('v_tagged_decisions');
+        // NOTE: v_tagged_decisions view will be updated to include project_id filtering
+        let query = knex('v_tagged_decisions').where('project_id', projectId);
         // Filter by status
         if (params.status) {
             if (!STRING_TO_STATUS[params.status]) {
@@ -275,6 +316,8 @@ export async function getDecision(params, adapter) {
     }
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     // Validate parameter
     if (!params.key || params.key.trim() === '') {
         throw new Error('Parameter "key" is required and cannot be empty');
@@ -282,6 +325,7 @@ export async function getDecision(params, adapter) {
     try {
         // If include_context is true, use the context-aware function
         if (params.include_context) {
+            // TODO: Update dbGetDecisionWithContext to accept projectId parameter
             const result = await dbGetDecisionWithContext(actualAdapter, params.key);
             if (!result) {
                 return {
@@ -311,7 +355,7 @@ export async function getDecision(params, adapter) {
         }
         // Standard query without context (backward compatible)
         const row = await knex('v_tagged_decisions')
-            .where({ key: params.key })
+            .where({ key: params.key, project_id: projectId })
             .first();
         if (!row) {
             return {
@@ -346,6 +390,8 @@ export async function searchByTags(params, adapter) {
     }
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     // Validate required parameters
     if (!params.tags || params.tags.length === 0) {
         throw new Error('Parameter "tags" is required and must contain at least one tag');
@@ -354,7 +400,7 @@ export async function searchByTags(params, adapter) {
         // Parse tags (handles both arrays and JSON strings from MCP)
         const tags = parseStringArray(params.tags);
         const matchMode = params.match_mode || 'OR';
-        let query = knex('v_tagged_decisions');
+        let query = knex('v_tagged_decisions').where('project_id', projectId);
         // Apply tag filtering based on match mode
         if (matchMode === 'AND') {
             // All tags must be present
@@ -421,6 +467,8 @@ export async function getVersions(params, adapter) {
     }
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     // Validate required parameter
     if (!params.key || params.key.trim() === '') {
         throw new Error('Parameter "key" is required and cannot be empty');
@@ -442,7 +490,7 @@ export async function getVersions(params, adapter) {
         // Query t_decision_history with agent join
         const rows = await knex('t_decision_history as dh')
             .leftJoin('m_agents as a', 'dh.agent_id', 'a.id')
-            .where('dh.key_id', keyId)
+            .where({ 'dh.key_id': keyId, 'dh.project_id': projectId })
             .select('dh.version', 'dh.value', 'a.name as agent_name', knex.raw(`datetime(dh.ts, 'unixepoch') as timestamp`))
             .orderBy('dh.ts', 'desc');
         // Transform to response format
@@ -481,6 +529,27 @@ export async function searchByLayer(params, adapter) {
     }
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Determine which project to query (current or referenced)
+    let projectId;
+    if (params._reference_project) {
+        // Cross-project query: look up the referenced project
+        const refProject = await knex('m_projects')
+            .where({ name: params._reference_project })
+            .first();
+        if (!refProject) {
+            throw new Error(`Referenced project "${params._reference_project}" not found`);
+        }
+        projectId = refProject.id;
+        debugLog('INFO', 'Cross-project searchByLayer', {
+            currentProject: getProjectContext().getProjectName(),
+            referencedProject: params._reference_project,
+            projectId
+        });
+    }
+    else {
+        // Normal query: use current project
+        projectId = getProjectContext().getProjectId();
+    }
     // Validate required parameter
     if (!params.layer || params.layer.trim() === '') {
         throw new Error('Parameter "layer" is required and cannot be empty');
@@ -502,7 +571,7 @@ export async function searchByLayer(params, adapter) {
         if (includeTagsValue) {
             // Use v_tagged_decisions view for full metadata
             rows = await knex('v_tagged_decisions')
-                .where({ layer: params.layer, status: statusValue })
+                .where({ layer: params.layer, status: statusValue, project_id: projectId })
                 .orderBy('updated', 'desc')
                 .select('*');
         }
@@ -515,6 +584,7 @@ export async function searchByLayer(params, adapter) {
                 .leftJoin('m_agents as a', 'd.agent_id', 'a.id')
                 .where('l.name', params.layer)
                 .where('d.status', statusInt)
+                .where('d.project_id', projectId)
                 .select('ck.key', 'd.value', 'd.version', knex.raw(`CASE d.status WHEN 1 THEN 'active' WHEN 2 THEN 'deprecated' WHEN 3 THEN 'draft' END as status`), 'l.name as layer', knex.raw('NULL as tags'), knex.raw('NULL as scopes'), 'a.name as decided_by', knex.raw(`datetime(d.ts, 'unixepoch') as updated`));
             const numericDecisions = knex('t_decisions_numeric as dn')
                 .innerJoin('m_context_keys as ck', 'dn.key_id', 'ck.id')
@@ -522,6 +592,7 @@ export async function searchByLayer(params, adapter) {
                 .leftJoin('m_agents as a', 'dn.agent_id', 'a.id')
                 .where('l.name', params.layer)
                 .where('dn.status', statusInt)
+                .where('dn.project_id', projectId)
                 .select('ck.key', knex.raw('CAST(dn.value AS TEXT) as value'), 'dn.version', knex.raw(`CASE dn.status WHEN 1 THEN 'active' WHEN 2 THEN 'deprecated' WHEN 3 THEN 'draft' END as status`), 'l.name as layer', knex.raw('NULL as tags'), knex.raw('NULL as scopes'), 'a.name as decided_by', knex.raw(`datetime(dn.ts, 'unixepoch') as updated`));
             // Union both queries
             rows = await stringDecisions.union([numericDecisions]).orderBy('updated', 'desc');
@@ -672,6 +743,8 @@ export async function searchAdvanced(params = {}, adapter) {
     validateActionParams('decision', 'search_advanced', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     try {
         // Parse relative time to Unix timestamp
         const parseRelativeTime = (relativeTime) => {
@@ -695,7 +768,7 @@ export async function searchAdvanced(params = {}, adapter) {
             }
         };
         // Build base query using v_tagged_decisions view
-        let query = knex('v_tagged_decisions');
+        let query = knex('v_tagged_decisions').where('project_id', projectId);
         // Filter by layers (OR relationship)
         if (params.layers && params.layers.length > 0) {
             query = query.whereIn('layer', params.layers);
@@ -853,25 +926,27 @@ export async function setDecisionBatch(params, adapter) {
     try {
         if (atomic) {
             // Atomic mode: All or nothing
-            const results = await actualAdapter.transaction(async (trx) => {
-                const processedResults = [];
-                for (const decision of params.decisions) {
-                    try {
-                        const result = await setDecisionInternal(decision, actualAdapter, trx);
-                        processedResults.push({
-                            key: decision.key,
-                            key_id: result.key_id,
-                            version: result.version,
-                            success: true,
-                            error: undefined
-                        });
-                    }
-                    catch (error) {
-                        const message = error instanceof Error ? error.message : String(error);
-                        throw new Error(`Batch failed at decision "${decision.key}": ${message}`);
+            const results = await connectionManager.executeWithRetry(async () => {
+                return await actualAdapter.transaction(async (trx) => {
+                    const processedResults = [];
+                    for (const decision of params.decisions) {
+                        try {
+                            const result = await setDecisionInternal(decision, actualAdapter, trx);
+                            processedResults.push({
+                                key: decision.key,
+                                key_id: result.key_id,
+                                version: result.version,
+                                success: true,
+                                error: undefined
+                            });
+                        }
+                        catch (error) {
+                            const message = error instanceof Error ? error.message : String(error);
+                            throw new Error(`Batch failed at decision "${decision.key}": ${message}`);
+                        }
                     }
-                }
-                return processedResults;
+                    return processedResults;
+                });
             });
             return {
                 success: true,
@@ -887,8 +962,10 @@ export async function setDecisionBatch(params, adapter) {
             let failed = 0;
             for (const decision of params.decisions) {
                 try {
-                    const result = await actualAdapter.transaction(async (trx) => {
-                        return await setDecisionInternal(decision, actualAdapter, trx);
+                    const result = await connectionManager.executeWithRetry(async () => {
+                        return await actualAdapter.transaction(async (trx) => {
+                            return await setDecisionInternal(decision, actualAdapter, trx);
+                        });
                     });
                     results.push({
                         key: decision.key,
@@ -938,6 +1015,8 @@ export async function hasUpdates(params, adapter) {
     validateActionParams('decision', 'has_updates', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     try {
         // Parse ISO timestamp to Unix epoch
         const sinceDate = new Date(params.since_timestamp);
@@ -947,10 +1026,12 @@ export async function hasUpdates(params, adapter) {
         const sinceTs = Math.floor(sinceDate.getTime() / 1000);
         // Count decisions updated since timestamp (both string and numeric tables)
         const decisionCount1 = await knex('t_decisions')
+            .where({ project_id: projectId })
             .where('ts', '>', sinceTs)
             .count('* as count')
             .first();
         const decisionCount2 = await knex('t_decisions_numeric')
+            .where({ project_id: projectId })
             .where('ts', '>', sinceTs)
             .count('* as count')
             .first();
@@ -973,8 +1054,9 @@ export async function hasUpdates(params, adapter) {
                 .first();
             messagesCount = messageResult?.count || 0;
         }
-        // Count file changes since timestamp
+        // Count file changes since timestamp (project-scoped)
         const fileResult = await knex('t_file_changes')
+            .where({ project_id: projectId })
             .where('ts', '>', sinceTs)
             .count('* as count')
             .first();
@@ -1009,10 +1091,12 @@ export async function setFromTemplate(params, adapter) {
     validateActionParams('decision', 'set_from_template', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     try {
-        // Get template
+        // Get template (templates are project-scoped)
         const templateRow = await knex('t_decision_templates')
-            .where({ name: params.template })
+            .where({ name: params.template, project_id: projectId })
             .first();
         if (!templateRow) {
             throw new Error(`Template not found: ${params.template}`);
@@ -1081,40 +1165,45 @@ export async function createTemplate(params, adapter) {
     validateActionParams('decision', 'create_template', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context (Constraint #29 - fail-fast before mutations)
+    const projectId = getProjectContext().getProjectId();
     try {
-        return await actualAdapter.transaction(async (trx) => {
-            // Validate layer if provided in defaults
-            if (params.defaults.layer) {
-                const layerId = await getLayerId(actualAdapter, params.defaults.layer, trx);
-                if (layerId === null) {
-                    throw new Error(`Invalid layer in defaults: ${params.defaults.layer}. Must be one of: presentation, business, data, infrastructure, cross-cutting`);
+        return await connectionManager.executeWithRetry(async () => {
+            return await actualAdapter.transaction(async (trx) => {
+                // Validate layer if provided in defaults
+                if (params.defaults.layer) {
+                    const layerId = await getLayerId(actualAdapter, params.defaults.layer, trx);
+                    if (layerId === null) {
+                        throw new Error(`Invalid layer in defaults: ${params.defaults.layer}. Must be one of: presentation, business, data, infrastructure, cross-cutting`);
+                    }
                 }
-            }
-            // Validate status if provided in defaults
-            if (params.defaults.status && !STRING_TO_STATUS[params.defaults.status]) {
-                throw new Error(`Invalid status in defaults: ${params.defaults.status}. Must be 'active', 'deprecated', or 'draft'`);
-            }
-            // Get or create agent if creator specified
-            let createdById = null;
-            if (params.created_by) {
-                createdById = await getOrCreateAgent(actualAdapter, params.created_by, trx);
-            }
-            // Serialize defaults and required fields
-            const defaultsJson = JSON.stringify(params.defaults);
-            const requiredFieldsJson = params.required_fields ? JSON.stringify(params.required_fields) : null;
-            // Insert template
-            const [id] = await trx('t_decision_templates').insert({
-                name: params.name,
-                defaults: defaultsJson,
-                required_fields: requiredFieldsJson,
-                created_by: createdById
+                // Validate status if provided in defaults
+                if (params.defaults.status && !STRING_TO_STATUS[params.defaults.status]) {
+                    throw new Error(`Invalid status in defaults: ${params.defaults.status}. Must be 'active', 'deprecated', or 'draft'`);
+                }
+                // Get or create agent if creator specified
+                let createdById = null;
+                if (params.created_by) {
+                    createdById = await getOrCreateAgent(actualAdapter, params.created_by, trx);
+                }
+                // Serialize defaults and required fields
+                const defaultsJson = JSON.stringify(params.defaults);
+                const requiredFieldsJson = params.required_fields ? JSON.stringify(params.required_fields) : null;
+                // Insert template
+                const [id] = await trx('t_decision_templates').insert({
+                    name: params.name,
+                    project_id: projectId,
+                    defaults: defaultsJson,
+                    required_fields: requiredFieldsJson,
+                    created_by: createdById
+                });
+                return {
+                    success: true,
+                    template_id: id,
+                    template_name: params.name,
+                    message: `Template "${params.name}" created successfully`
+                };
             });
-            return {
-                success: true,
-                template_id: id,
-                template_name: params.name,
-                message: `Template "${params.name}" created successfully`
-            };
         });
     }
     catch (error) {
@@ -1135,9 +1224,12 @@ export async function listTemplates(params = {}, adapter) {
     validateActionParams('decision', 'list_templates', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context
+    const projectId = getProjectContext().getProjectId();
     try {
         const rows = await knex('t_decision_templates as t')
             .leftJoin('m_agents as a', 't.created_by', 'a.id')
+            .where('t.project_id', projectId)
             .select('t.id', 't.name', 't.defaults', 't.required_fields', 'a.name as created_by', knex.raw(`datetime(t.ts, 'unixepoch') as created_at`))
             .orderBy('t.name', 'asc');
         // Parse JSON fields
@@ -1180,45 +1272,60 @@ export async function hardDeleteDecision(params, adapter) {
     validateActionParams('decision', 'hard_delete', params);
     const actualAdapter = adapter ?? getAdapter();
     const knex = actualAdapter.getKnex();
+    // Validate project context (fail-fast)
+    const projectId = getProjectContext().getProjectId();
     try {
-        return await actualAdapter.transaction(async (trx) => {
-            // Get key_id
-            const keyResult = await trx('m_context_keys')
-                .where({ key: params.key })
-                .first('id');
-            if (!keyResult) {
-                // Key doesn't exist - still return success (idempotent)
-                return {
-                    success: true,
-                    key: params.key,
-                    message: `Decision "${params.key}" not found (already deleted or never existed)`
-                };
-            }
-            const keyId = keyResult.id;
-            // Delete from t_decisions (if exists)
-            const deletedString = await trx('t_decisions').where({ key_id: keyId }).delete();
-            // Delete from t_decisions_numeric (if exists)
-            const deletedNumeric = await trx('t_decisions_numeric').where({ key_id: keyId }).delete();
-            // Delete from t_decision_history (CASCADE should handle this, but explicit for clarity)
-            const deletedHistory = await trx('t_decision_history').where({ key_id: keyId }).delete();
-            // Delete from t_decision_tags (CASCADE should handle this)
-            const deletedTags = await trx('t_decision_tags').where({ decision_key_id: keyId }).delete();
-            // Delete from t_decision_scopes (CASCADE should handle this)
-            const deletedScopes = await trx('t_decision_scopes').where({ decision_key_id: keyId }).delete();
-            // Calculate total deleted records
-            const totalDeleted = deletedString + deletedNumeric + deletedHistory + deletedTags + deletedScopes;
-            if (totalDeleted === 0) {
+        return await connectionManager.executeWithRetry(async () => {
+            return await actualAdapter.transaction(async (trx) => {
+                // Get key_id
+                const keyResult = await trx('m_context_keys')
+                    .where({ key: params.key })
+                    .first('id');
+                if (!keyResult) {
+                    // Key doesn't exist - still return success (idempotent)
+                    return {
+                        success: true,
+                        key: params.key,
+                        message: `Decision "${params.key}" not found (already deleted or never existed)`
+                    };
+                }
+                const keyId = keyResult.id;
+                // SECURITY: All deletes MUST filter by project_id to prevent cross-project deletion
+                // Delete from t_decisions (if exists in this project)
+                const deletedString = await trx('t_decisions')
+                    .where({ key_id: keyId, project_id: projectId })
+                    .delete();
+                // Delete from t_decisions_numeric (if exists in this project)
+                const deletedNumeric = await trx('t_decisions_numeric')
+                    .where({ key_id: keyId, project_id: projectId })
+                    .delete();
+                // Delete from t_decision_history (for this project only)
+                const deletedHistory = await trx('t_decision_history')
+                    .where({ key_id: keyId, project_id: projectId })
+                    .delete();
+                // Delete from t_decision_tags (for this project only)
+                const deletedTags = await trx('t_decision_tags')
+                    .where({ decision_key_id: keyId, project_id: projectId })
+                    .delete();
+                // Delete from t_decision_scopes (for this project only)
+                const deletedScopes = await trx('t_decision_scopes')
+                    .where({ decision_key_id: keyId, project_id: projectId })
+                    .delete();
+                // Calculate total deleted records
+                const totalDeleted = deletedString + deletedNumeric + deletedHistory + deletedTags + deletedScopes;
+                if (totalDeleted === 0) {
+                    return {
+                        success: true,
+                        key: params.key,
+                        message: `Decision "${params.key}" not found (already deleted or never existed)`
+                    };
+                }
                 return {
                     success: true,
                     key: params.key,
-                    message: `Decision "${params.key}" not found (already deleted or never existed)`
+                    message: `Decision "${params.key}" permanently deleted (${totalDeleted} record${totalDeleted === 1 ? '' : 's'})`
                 };
-            }
-            return {
-                success: true,
-                key: params.key,
-                message: `Decision "${params.key}" permanently deleted (${totalDeleted} record${totalDeleted === 1 ? '' : 's'})`
-            };
+            });
         });
     }
     catch (error) {