- Mock createTaskExecutor in domain-handlers and wrapped-domain-handlers
tests to eliminate 30s+ real execution timeouts
- Reduce fleet init churn in core-handlers tests from 31x to 5x using
shared beforeAll/afterAll lifecycle
- Set vitest maxForks=1 and fileParallelism=false to prevent OOM in
DevPod/Codespace (15GB total, ~7GB consumed by VS Code + Claude)
- Add actions:write permission to optimized-ci.yml and mcp-tools-test.yml
to fix artifact upload 403 Forbidden errors
- Delegate root test:mcp script to v3's test:unit:mcp (respects exclusions)
- Widen topology-optimizer convergence tolerance (2x→3x) with retry:3
to stabilize probabilistic TD error test
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Tests were still asserting 128-dimensional vectors after the source
code was updated to use 768 dimensions in v3.6.13.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Tests were still asserting 128-dimensional vectors after the source
code was updated to use 768 dimensions in v3.6.13.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: resolve issues #284-#288 — HNSW dimension mismatch, real security scanning, hooks directory
- Fix HNSW 128→768 dimension mismatch across 13 source files and 5 test files
that caused native SIGABRT crashes in ruvector-gnn (#284, #285)
- Add dimension guard in unified-memory-hnsw.ts to skip mismatched vectors
- Rewrite security scan to perform real SAST file analysis instead of
returning hardcoded fake findings (#287)
- Add Cobertura XML parser, fix secret detection regex, broaden CORS
detection patterns (#286)
- Replace fake MCP handlers with real implementations (#286)
- Create .claude/hooks/ directory and install hook assets in init
phase 07-hooks.ts (#288)
- Remove dangerous uncaughtException handler from protocol-server.ts
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* chore(release): bump version to v3.6.12
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: prevent SQLite corruption from concurrent writers — centralized safe-db opener
Root cause: 40+ places opened memory.db with `new Database()` without WAL mode
or busy_timeout. When 10 Claude Code hooks spawn separate processes that
concurrently write to the DB, rollback journal mode causes page-level corruption.
Fix: Created v3/src/shared/safe-db.ts with openDatabase() that enforces
WAL + busy_timeout=5000 on every open. Replaced all 28 direct new Database()
calls across v3/src (22 files), hooks (1 file), helpers (2 files), and
scripts (2 files). Only remaining direct call is the UnifiedMemoryManager
singleton which already sets WAL + busy_timeout itself.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: resolve 5 critical issues from #292 — test gen, dimensions, coverage, security, hooks
Issue 1: test_generate_enhanced returned placeholder stubs (add() === null)
- Agent Booster was intercepting generate-tests tasks via func-to-arrow detection
- Added task-type blocklist to prevent Booster from hijacking domain tasks
- Fixed mapToResult to use real testCode from domain service instead of V2 stubs
- Added extractAssertionsFromCode() to parse real vitest/jest assertions
- Added testCode pass-through in task executor result mapping
- Added uncaughtException/unhandledRejection handlers in MCP entry
- Wrapped feedback loop init in defensive try/catch
Issue 2: CLI test generate vector dimension mismatch 768 vs 128
- Changed embeddingDim from 128 to 768 in 6 locations across
decision-transformer, coordinator, test-prioritizer, feature-flags,
shard-embeddings
Issue 3: MCP coverage_analyze_sublinear returned empty coverageByFile
- Added automatic coverage collection when no data exists
- Detects test runner from package.json (vitest/jest/nyc)
- Runs tests with --coverage flag, re-checks for data
- Returns informative warning if collection fails
- Added per-file coverage mapping in result
Issue 4: Security scan missed secrets in JS/TS files and known CVEs
- Changed cross-lang pattern loop from otherFiles to filesToScan
- Added known-CVE checking for python-jose and python-multipart
- Added generic SECRET assignment pattern to security-patterns.ts
Issue 5: aqe init --auto hooks not wired to settings.json
- Added post-write verification after settings.json write
- Logs warning if AQE hooks not detected after write
Also added Bug Fix Verification rules to CLAUDE.md.
Closes#292
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* chore(release): bump version to v3.6.13
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
* fix: resolve issues #284-#288 — HNSW dimension mismatch, real security scanning, hooks directory
- Fix HNSW 128→768 dimension mismatch across 13 source files and 5 test files
that caused native SIGABRT crashes in ruvector-gnn (#284, #285)
- Add dimension guard in unified-memory-hnsw.ts to skip mismatched vectors
- Rewrite security scan to perform real SAST file analysis instead of
returning hardcoded fake findings (#287)
- Add Cobertura XML parser, fix secret detection regex, broaden CORS
detection patterns (#286)
- Replace fake MCP handlers with real implementations (#286)
- Create .claude/hooks/ directory and install hook assets in init
phase 07-hooks.ts (#288)
- Remove dangerous uncaughtException handler from protocol-server.ts
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* chore(release): bump version to v3.6.12
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix: prevent SQLite corruption from concurrent writers — centralized safe-db opener
Root cause: 40+ places opened memory.db with `new Database()` without WAL mode
or busy_timeout. When 10 Claude Code hooks spawn separate processes that
concurrently write to the DB, rollback journal mode causes page-level corruption.
Fix: Created v3/src/shared/safe-db.ts with openDatabase() that enforces
WAL + busy_timeout=5000 on every open. Replaced all 28 direct new Database()
calls across v3/src (22 files), hooks (1 file), helpers (2 files), and
scripts (2 files). Only remaining direct call is the UnifiedMemoryManager
singleton which already sets WAL + busy_timeout itself.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Version bump, changelog, release docs, and test fix for mechanical
transform scoring tests to align with the new conditional override.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- #274: Prevent test_generate_enhanced from crashing MCP connection by
adding try/catch safety wrapper in protocol-server and fixing temp file
extension mapping for non-JS/TS languages
- #275: Expand code_index file discovery to support 12+ languages (Python,
Go, Rust, Java, Kotlin, Ruby, C#, PHP, Swift, C/C++, Scala)
- #276: Remove all synthetic/fabricated file paths from coverage and defect
prediction handlers — only return real data from the analyzer
- #277: Add cross-language regex security scanning for hardcoded secrets,
dangerous functions, SQL injection, CORS misconfig in non-JS/TS files
- #278: Fix TinyDancer routing — mechanical transforms only score low when
no other signals present; security/architecture get minimum floor scores
- #279: Auto-resize HNSW vectors on dimension mismatch (768→128) instead
of panicking the Rust WASM layer
- #280: New shared file-discovery utility used by all CLI commands, replacing
inline TS-only walkers with multi-language recursive discovery
- #281: Upgrade fallback LOC counter to node-native accurate line counting
with comment stripping, max file size guard, and comprehensive excludeDirs
- #282: Enrich MCP routing with domain inference and isCritical detection
so MCP and CLI use the same routing logic
Also: smart settings-merge for aqe init --auto that detects and replaces
existing AQE hooks instead of duplicating them, preserves non-AQE user hooks.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The test suite passes 533 files / 16,994 tests but Vitest's fork
manager OOMs at teardown causing exit code 1. This check verifies
all test files passed with no failures before continuing.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* feat(qcsd): add Production Telemetry swarm — 5th QCSD lifecycle phase
Complete the QCSD lifecycle (Ideation → Refinement → Development → CI/CD → Production)
with the Production Telemetry swarm for post-release health assessment.
- 12 agents (3 core + 7 conditional + 2 feedback) across 4 DDD domains
- 9-phase execution: flag detection, parallel core spawn, conditional spawn,
HEALTHY/DEGRADED/CRITICAL decision logic, report generation, learning
persistence, sequential feedback loop closure
- 7 domain flags driving conditional agent activation
- Cross-phase signal consumption from CI/CD via memory_query
- Dual feedback loops to Ideation (strategic) and Refinement (tactical)
- All scores normalized to 0-100 scale across all agent types
- Enterprise-integration agents (middleware, SAP, SoD) wired into decision logic
- Phase 8 sequential enforcement for data-dependent feedback agents
- JSON schema with 15 $defs including 3 enterprise analysis types
- 8 eval test cases including 3 decision logic determinism tests
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(qcsd): align eval test case domain flags with provided metrics
tc006: add HAS_MIDDLEWARE (middlewareHealth: 12 present)
tc007: fix HAS_INFRASTRUCTURE_CHANGE true (resilienceScore: 92),
add HAS_MIDDLEWARE (middlewareHealth: 88),
add HAS_AUTHORIZATION (sodCompliance: 95)
tc008: add HAS_MIDDLEWARE (middlewareHealth: 55),
add HAS_SAP_INTEGRATION (sapHealth: 40)
No test outcome changes — flags now match the non-null metrics
each test case provides, preventing future maintainer confusion.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* feat(qcsd): add automatic post-deploy telemetry collection and production swarm trigger
- New script: scripts/collect-production-telemetry.sh
Collects DORA metrics (deployment frequency, lead time, change failure
rate, MTTR) from GitHub API via gh CLI. Outputs structured JSON to
docs/telemetry/production/. Runs standalone or in GHA.
- New workflow: .github/workflows/qcsd-production-trigger.yml
Triggers after npm publish (workflow_run), weekly schedule, or manual
dispatch. Collects telemetry, commits to repo, creates GitHub Issue
with invocation command for the production swarm.
- Edit: .claude/hooks/cross-phase-memory.yaml
Added Loop 5 (CI/CD → Production deploy trigger) with post-release-decision
and pre-production hooks. Updated routing and header comment (4→5 loops).
- Edit: .claude/skills/qcsd-production-swarm/SKILL.md
Added Step 0.5 (auto-detect pre-collected GHA telemetry). Non-breaking
fallback to manual input when no telemetry file exists.
- New: docs/telemetry/production/.gitkeep (output directory)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Lalit <lalit@example.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Implement three P1 items from skill-evaluation-research.md that deepen
eval grading in the runner's validateOutput method:
- P1-6: Negative control test cases (inverted pass logic for "skill
should decline" tests)
- P1-5: Finding count enforcement (JSON parse + regex fallback),
schema_path validation, and weighted grading rubric scoring
(completeness/accuracy/actionability)
- P1-4: Adaptive rubric that extracts keywords from prompts (quoted
strings, format words, named standards) as dynamic must_contain checks
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Enables the eval-driven development loop (baseline → write skill → compare)
with two subcommands: `init` bootstraps eval YAML from SKILL.md content,
`compare` diffs two eval run JSON files showing improvements/regressions.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Pytest now emits @patch() decorators, Jest/Vitest emits vi.mock()/jest.mock()
in stub tests, and Mocha emits sinon.stub() setup — all driven by KG dependency
data. CLI now outputs generated test code. Benchmark shows +78% assertions,
5 file reads avoided, at only +3.2% token cost.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Previously 3 of 5 PostToolUse hooks and the UserPromptSubmit hook were
read-only — they generated routing guidance but never wrote learning
data to the database, so patterns and experiences stopped growing.
- Add persistCommandExperience() helper for direct CLI hook DB writes
- Fix post-command: record outcomes, emit TestExecutionResult for test
commands, persist captured_experiences, increment dream counter
- Fix route (UserPromptSubmit): persist routing decisions to
routing_outcomes table after routeTask() returns
- Fix post-edit: generate synthetic patternId from file path, call
recordOutcome() for qe_pattern_usage rows, persist experience
- Fix QEAgentCompletion: auto-create pattern via storePattern() when
patternId doesn't exist yet (e.g. task:agent:taskId from CLI hooks)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Two features in this commit:
1. Knowledge Graph context now flows into test generation pipeline.
When `aqe code index .` populates vectors, test generation produces
+78% more assertions and +2.9% higher coverage estimates by using
KG dependency and semantic similarity data.
2. Replaced pure JS HNSW index with RuvectorFlatIndex backed by
@ruvector/gnn (Rust/NAPI). Vector loading drops from 16-18s to 65ms
(276x faster), recall improves from 70% to 100%, memory drops 3.4x,
and per-query search stays comparable (3.4ms vs 2.3ms).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The QEReasoningBank now uses structured JSON logging, so the error
message format changed from inline to JSON with patternId field.
Relaxed assertion to match the common substring.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The proof-envelope and compliance-reporter generate UUID-based IDs
(e.g., env_660cd46a-...) but tests expected two underscore-separated
segments. Updated regex to match actual UUID format.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The heuristic accessibility analysis with memory backend initialization
exceeds 30s on GitHub Actions runners.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Domain index.ts barrel exports register service factories as side effects,
but after CQ-005 converted task-executor imports to `import type`, these
registrations never fired — breaking both tests (18 failures) and production
service resolution. Also fix benchmark UNIQUE constraint collision.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
TypeScript's package.json has no "exports" field, causing Node.js 22+ ESM
legacyMainResolve to fail with ERR_MODULE_NOT_FOUND in devcontainer environments.
Add esbuild plugin to rewrite bare "typescript" specifier to explicit subpath
"typescript/lib/typescript.js" in both CLI and MCP bundles.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Three changes to close the vectors table persistence gap:
- ONNX adapter: persist embeddings to vectors table via vectorStore()
after storing in-memory (non-fatal fallback if DB unavailable)
- Shard embeddings: persist to vectors table alongside existing JSON
file for cross-system access via unified storage
- RuVector: parse health response features instead of hardcoding
vector-store support; enables dynamic feature detection
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Close persistence gaps identified by Sherlock investigation across 13 files:
- Wire QualityFeedbackLoop into handler-factory → task-executor for
routing_outcomes persistence (ADR-023)
- Wire recordExperienceApplication() after getGuidance() in ReasoningBank
- Wire MinCut alert/weak-vertex persistence in MinCutHealthMonitor
- Wire healing action persistence in StrangeLoopController (ADR-047)
- Wire buildHypergraphFromIndex() in CodeIndexProtocol after index()
- Fix EmbeddingCache async init race with pending writes queue (ADR-046)
- Remove dead goap_execution_steps schema (PlanExecutor uses executed_steps)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The self-learning system wrote data but never read it back — patterns
had usage_count=0, experiences were never queried, and confidence
updates were lost on restart. This wires SQLitePatternStore into
QEReasoningBank so pattern usage, promotion, and deletion persist.
- qe-reasoning-bank: delegate recordOutcome/promotePattern to SQLitePatternStore
- pattern-store: wire delete/promote to SQLite via setSqliteStore()
- sqlite-persistence: add deletePattern(), dedup migration, INSERT OR REPLACE
- test-generator: fix broken memory.get('pattern:...') with qe_patterns query
- coordinator: fire PreTestGeneration hook, merge returned patterns
- qe-hooks: query recent qe_pattern_usage in pre-execution hooks
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Remove leftover json-patch-utils.test.ts (877 lines) that was not
cleaned up after TQ-005 test file split
- Eliminate all 77 `as any` type casts across 29 source files:
- MCP tools: use existing typed `context.memory` instead of cast
- Learning/optimization: use `Partial<QEPatternContext>` for unions
- Init orchestrator: use `Record<string, unknown>` for phase data
- Optimizer: replace monkey-patch casts with Object.defineProperty
- Consensus engine: use indexed access for private field
- Native learning provider: typed pattern store params
- Benchmarks: proper mock factory for MemoryBackend
- Shared utils: Number() conversion, proper type imports
- TypeScript compiles clean with 0 errors
- Closes audit finding from brutal honesty review
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The tasksCompleted counter was missing from the extracted QueenTaskContext
interface, causing completed tasks to not be counted after the god file split.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Dragan Spiridonov