2 Commits

Author	SHA1	Message	Date
Profa	43a1d7e5f0	fix(security): resolve all 9 GitHub code scanning alerts ... HIGH severity: - #158: Fix DOM XSS in sorter.js — replace innerHTML with createElement/appendChild - #151: Fix weak password hash in test fixture — SHA-512 → scryptSync - #152,#153: Fix incomplete URL sanitization in OAuth test — .includes() → exact match - #154: Fix incomplete hostname regexp — escape regex special chars in expectMemoryStored MEDIUM severity: - #155,#156,#157: Fix prototype pollution flags — replace Object.defineProperty with direct assignment on validated, null-prototype objects (guards already existed) - #150: Delete obsolete publish-v3-alpha.yml workflow (dead since v3.7.5 flatten) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 08:13:01 +00:00
Profa	2253d05618	feat: flatten project structure — archive v2, promote v3 to root ... Remove the nested v3/ subdirectory by moving all active source code, tests, configs, and assets directly to the project root. Archive v2/ (dead code, 847MB) to v2-archive.tar.gz. Key changes: - Move v3/src/ → src/, v3/tests/ → tests/, v3/packages/ → packages/ - Move v3/tsconfig.json, v3/vitest.config.ts to root - Merge v3/package.json into root package.json (ESM, scripts, deps, exports) - Merge v3/scripts/ into scripts/, v3/implementation/ into docs/implementation/ - Update all CI workflows to remove "cd v3 &&" and v3/ path prefixes - Fix all init installer path resolution (3-level-up → 2-level-up) - Fix hooks to use "node ./dist/cli/bundle.js" instead of bare "aqe" - Update settings.json ADR/DDD directories to docs/implementation/ - Fix helper scripts (statusline, adr-compliance, ddd-tracker, guidance-hooks) - Update 58 agent definitions: aqe/v3/ → aqe/ memory namespaces - Update 15 guidance shards: v3/src/ → src/ path references - Fix sync interfaces: remove v3/ and v2/ path references - Fix test path calculations (process.cwd() + '..' no longer needed) - Fix flaky perf test threshold (500ms → 1000ms for CI environments) - Fix complexity-analyzer test to match ADR-051 keyword-based eligibility Build passes, 17,901 tests pass, CLI and MCP bundles verified. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-01 11:35:41 +00:00