1166 Commits

Author SHA1 Message Date
Dragan Spiridonov f2251f51f1 Merge pull request #358 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.8.1
v3.8.1
2026-03-17 13:01:56 +01:00
Dragan Spiridonov b5539aa471 chore(release): bump version to v3.8.1
Fix MCP tool prefix mismatch in 8 agent files (mcp__agentic_qe_v3__ → mcp__agentic-qe__)
and permission pattern in settings.json/settings-merge.ts. Closes #357.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-17 10:28:39 +00:00
Dragan Spiridonov df992ef892 fix(ci): verify CLI/MCP bundles instead of raw ESM index.js
dist/index.js uses bare directory imports (e.g., './shared/types')
which Node.js ESM rejects with ERR_UNSUPPORTED_DIR_IMPORT. This is
fine for bundler consumers but fails with direct node import.

Verify the self-contained esbuild bundles (CLI + MCP) instead —
these are what users actually execute.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
v3.8.0
2026-03-17 08:20:10 +00:00
Dragan Spiridonov f040ee7ce6 fix(ci): replace test suite with import smoke test in publish workflow
The vitest forks pool hangs on GitHub's 2-core runners when test files
trigger HNSW/ONNX/SQLite initialization across parallel forks. This
affected even test:unit:fast because qe-reasoning-bank loads the full
HNSW stack.

Replace with fast import smoke tests:
- Verify dist/index.js imports cleanly (2s)
- Verify CLI bundle executes --version (2s)

The full 19K+ test suite runs in PR CI (optimized-ci.yml) before merge.
Running tests again at publish time is redundant and unreliable on
constrained runners. Build artifact verification is sufficient.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-17 08:10:33 +00:00
Dragan Spiridonov f5780ce55c fix(ci): use test:unit:fast for publish smoke tests
Root cause analysis of publish timeouts:
- v3.7.22 had 10.9K tests completing in 6min on CI runners
- v3.8.0 added 31 new test files (+9K tests) from RuVector integration
- The heavy test subset (coordination, integrations, domains) triggers
  HNSW/ONNX/SQLite initialization per forked process, which is ~8x slower
  on GitHub's 2-core runners vs our 4-core Codespace
- Tests would hang during parallel fork initialization, exhausting the
  30-minute job timeout

Fix: Run test:unit:fast (~7K core tests) as publish smoke tests.
The full suite (19K+ tests) is already validated by PR CI checks
(optimized-ci.yml) before merge — re-running in publish is redundant
and unreliable on constrained runners.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-17 07:45:07 +00:00
Dragan Spiridonov 4ab89962a9 fix(ci): use test:unit instead of test:ci in publish workflow
The full test:ci suite (~20K tests) exceeds GitHub runner time limits.
Unit tests (~15K tests) provide sufficient verification for publish —
the full integration suite already runs on PR checks before merge.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 20:57:22 +00:00
Dragan Spiridonov 1855a9f544 fix(ci): increase workflow timeouts for larger test suite
Build and Verify job in npm-publish.yml: 20m → 30m
MCP validation job in mcp-tools-test.yml: 5m → 10m

The RuVector integration added ~4K new tests, pushing the full
test:ci suite past the old 20-minute limit on GitHub runners.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 20:25:19 +00:00
Dragan Spiridonov c911aa88a8 feat: enable all 15 RuVector feature flags by default (opt-out instead of opt-in)
All new RuVector capabilities (native HNSW, neural routing, coherence
gates, transfer learning, etc.) now ship enabled so users get immediate
value on upgrade. Users can disable individual features via CLI or
setRuVectorFeatureFlags() for opt-out.

Update 11 test files to match new defaults.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 19:58:13 +00:00
Dragan Spiridonov 73cba36a38 Merge pull request #356 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.8.0
2026-03-16 20:39:02 +01:00
Dragan Spiridonov ae5fd4c36d chore(release): bump to v3.8.0, fix package-lock.json sync
Upgrade from v3.7.23 to v3.8.0 — this is a minor version bump
reflecting the scope of the RuVector integration (23 tasks, 4 phases).

Regenerate package-lock.json from scratch to fix npm ci failures
caused by stale transitive dependency entries (agentic-flow@2.0.7
referenced packages not in the lock file).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 19:04:34 +00:00
Dragan Spiridonov ae7f9f9b66 chore(release): bump version to v3.7.23
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 18:15:16 +00:00
Dragan Spiridonov 6b249c034f feat: RuVector integration phases 1-4 — native HNSW, neural routing, safety gates, differentiation
Implements 23 tasks across 4 phases per docs/implementation/ruvector-integration-plan.md:

Phase 1 — Foundation (make what we have faster):
- Native HNSW backend via @ruvector/router (150x search speedup, ADR-081)
- Metadata filtering layer with composable AND/OR/NOT/FIELD expressions
- Temporal tensor compression (Int8Array quantization, 4x memory reduction)
- Deterministic golden-ratio dithering for cross-platform reproducibility
- 15 feature flags (all default false) with CLI profiles

Phase 2 — Intelligence (make agents smarter):
- Neural TinyDancer router with REINFORCE policy gradient (ADR-082)
- SONA three-loop enhancement (MicroLoRA 0.18μs/adapt via WASM)
- Cross-domain transfer learning with Thompson Sampling (ADR-084)
- Regret tracking with log-log regression growth classification

Phase 3 — Safety (make agents trustworthy):
- Sheaf-gated test validation via prime-radiant CohomologyEngine
- Coherence-gated agent actions (3-filter pipeline, ADR-083)
- Witness chain audit trail with SHA-256 hash linking
- HNSW health monitoring with spectral analysis

Phase 4 — Differentiation (make AQE unique):
- Cognitive container export/import (RVF v2)
- DAG attention scheduler for dependency-aware test ordering
- CNN visual regression with spatial pooling embeddings
- Behavior tree orchestration (Sequence/Selector/Parallel)
- Reasoning QEC with majority-vote consensus
- Browser QE dashboard scaffolding

Also: remove obsolete v2-to-v3-migration test (source already removed),
add ADR-081 through ADR-085, research docs, benchmarks, and integration
test suites for all 4 phases.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 17:37:43 +00:00
Dragan Spiridonov 20b098697e fix: add regression tests for march-fixes branch and fix 4 flaky tests
Move @ruvector/tiny-dancer-linux-arm64-gnu from dependencies to
optionalDependencies to prevent npm install failures on non-ARM64.

Add 26 regression tests across 5 files covering untested new paths:
- task-executor coherence gate & reasoning QEC advisory paths
- aqe-learning-engine witness chain & domain transfer wiring
- experience-capture witnessHash & setWitnessChain integration
- pattern-store filter-adapter module resolution & search compat
- metrics-tracker getDashboardDataWithRegret method

Fix 4 flaky tests failing under full-suite contention by resetting
shared singletons (queenGovernanceAdapter, sharedMinCutGraph,
UnifiedPersistence) in beforeEach/afterEach to prevent cross-test
state contamination.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-16 17:35:41 +00:00
Dragan Spiridonov d3d5e5bdd0 Merge pull request #354 from proffesor-for-testing/dependabot/npm_and_yarn/npm_and_yarn-5dfce78a3a
chore(deps): bump file-type from 21.3.1 to 21.3.2 in the npm_and_yarn group across 1 directory
2026-03-14 20:25:07 +01:00
Dragan Spiridonov b2f5e380cc Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-5dfce78a3a 2026-03-14 18:13:02 +01:00
Dragan Spiridonov b24477d3ae Update QE Skills count from 80 to 74 2026-03-14 16:09:02 +01:00
dependabot[bot] b8e3154691 chore(deps): bump file-type in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [file-type](https://github.com/sindresorhus/file-type).


Updates `file-type` from 21.3.1 to 21.3.2
- [Release notes](https://github.com/sindresorhus/file-type/releases)
- [Commits](https://github.com/sindresorhus/file-type/compare/v21.3.1...v21.3.2)

---
updated-dependencies:
- dependency-name: file-type
  dependency-version: 21.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-14 12:27:01 +00:00
Dragan Spiridonov ba4e2c6de0 Merge pull request #353 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.7.22
v3.7.22
2026-03-14 12:08:38 +01:00
Dragan Spiridonov 29c5793252 chore(release): bump version to v3.7.22
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-14 11:05:13 +00:00
Dragan Spiridonov 948d4e0f41 fix: use __dirname instead of process.cwd() in helpers for reliable path resolution (#352)
Helpers (brain-checkpoint.cjs, statusline-v3.cjs) used process.cwd()
to find the project root, which breaks when Claude Code runs hooks from
a different working directory. Fixed to use path.resolve(__dirname, '..', '..')
since these files always live at <project>/.claude/helpers/.

Also updated hook commands in 07-hooks.ts and settings-merge.ts to use
$(git rev-parse --show-toplevel) for absolute path resolution.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-14 09:54:30 +00:00
Dragan Spiridonov 24625cf78c fix: escape quotes in settings.json hook commands to produce valid JSON
Five hook commands (UserPromptSubmit, SessionStart, Stop) had unescaped
double quotes around $(git rev-parse ...) subshells, breaking JSON parsing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-14 09:43:41 +00:00
Dragan Spiridonov c0989110d7 refactor: remove all v2-to-v3 migration code (no v2 users exist)
Deletes 7 v2-migration files (~2,600 lines) and cleans up all
references. writeVersionToDb/readVersionFromDb relocated to
init-wizard-steps.ts to preserve the v3 upgrade system
(aqe init --upgrade / --auto).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 09:25:01 +00:00
Dragan Spiridonov c3899c41e3 fix: unblock pattern growth pipeline and remove v2 learning_experiences refs
Root cause: pattern count stalled for 5 days because:
1. cli-hook experiences (quality=0.40, sr=0.24) flooded the pipeline,
   failing the HAVING clause thresholds — now filtered out
2. Pattern names were static (agent-session-pattern), so dedup check
   always matched existing patterns — now date-bucketed (YYYY-MM)
3. PatternLifecycleManager queried non-existent learning_experiences
   table — now uses captured_experiences directly
4. captured_experiences table was missing 5 consolidation columns
   (consolidated_into, consolidation_count, etc.) — now auto-migrated

Also removes all learning_experiences references from runtime code
paths (metrics-tracker, pattern-lifecycle, learning CLI commands).

Closes #348 (pattern stagnation)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 08:57:22 +00:00
Dragan Spiridonov e394b07d1b fix: enforce safe DB opens everywhere to prevent SQLite corruption (#348)
Replace all remaining raw `new Database()` calls with `openDatabase()` from
safe-db.ts, which enforces WAL mode + busy_timeout=5000ms. This prevents
B-tree index corruption from concurrent hook/session writers.

Also adds `aqe learning repair` CLI command for dump+reimport recovery of
corrupted databases without data loss.

Fixes #348

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 08:21:07 +00:00
Dragan Spiridonov fe11808bbc Merge pull request #351 from proffesor-for-testing/dependabot/npm_and_yarn/npm_and_yarn-1d4d4816e9
chore(deps): bump undici from 7.22.0 to 7.24.1 in the npm_and_yarn group across 1 directory
2026-03-14 08:52:46 +01:00
dependabot[bot] ac89377dc5 chore(deps): bump undici in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [undici](https://github.com/nodejs/undici).


Updates `undici` from 7.22.0 to 7.24.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.22.0...v7.24.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.24.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 23:33:53 +00:00
Dragan Spiridonov cbc9b2afee Merge pull request #349 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.7.21
v3.7.21
2026-03-13 17:58:24 +01:00
Dragan Spiridonov 1ce7b79f60 chore(release): bump version to v3.7.21
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 16:36:40 +00:00
Dragan Spiridonov 575633958a fix: eliminate shell injection vectors, upgrade error logging, and reduce DRY violations
P1 (Security): Convert all execSync template-literal calls to execFileSync
with argument arrays, eliminating shell metacharacter injection across:
- claude-flow-adapter.ts (8 calls)
- trajectory-bridge.ts, pretrain-bridge.ts, model-router-bridge.ts (8 calls)
- brain-checkpoint.cjs, statusline-v3.cjs helpers (3 calls)
- 07-hooks.ts generated scripts (2 calls)
Remove dead escapeArg() methods from bridge files.

P2 (Reliability): Replace swallowed .catch(() => {}) handlers with
structured logging via createLogger() from the project's LoggerFactory:
- task-executor.ts: 5 recordOutcome catches → logger.warn with taskId
- experience-capture-middleware.ts: embedding catch → ecLogger.warn
- token-tracker.ts: DB init + KV persist → ttLogger.warn
- qe-reasoning-bank.ts: 3 witness chain catches → logger.warn
- init-wizard.ts: V2 migration → console.warn (logger not yet initialized)

P2 (Correctness): Guard non-null assertion in mincut-test-optimizer.ts
with early continue. Wrap JSON.parse in brain-rvf-exporter.ts with
inner try-catch for clearer error messages on malformed kernel data.

P3 (DRY): Extract shared backoffDelay() to src/shared/llm/retry.ts,
replacing 12 duplicate Math.min(1000 * Math.pow(2, attempt), 30000)
across 6 LLM providers. Collapse 100-line capability boolean matrix
in agent-router-config.ts into 4 named presets.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 16:15:37 +00:00
Dragan Spiridonov 3ec84594dd ADR updates statuses 2026-03-13 13:54:47 +00:00
Dragan Spiridonov 5baf27e8e7 feat: implement agent dependency intelligence (#342)
Add three subsystems for fleet orchestration intelligence:
- Pre-spawn MCP validation scans agent files for tool references and
  validates availability at install and spawn time (advisory only)
- Agent dependency graph with YAML frontmatter parsing, topological
  sort, and phased spawn plans for multi-agent orchestration
- Co-execution repository tracks agent pair success rates, feeding
  behavioral signals into the signal merger for routing decisions

Wire all subsystems into the queen coordinator: dependency graph built
on initialize(), MCP validation in requestAgentSpawn(), co-execution
recording in handleTaskCompletionCallback(), and getSpawnPlan()/
getDependencyGraph() exposed on the public interface.

Add structured dependencies frontmatter to 5 agent definitions and
475 passing tests including 7 end-to-end integration tests proving
the wiring works.

Closes #342

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 13:52:27 +00:00
Dragan Spiridonov 253cefab7e fix: wire semgrep into SAST pipeline and correct security scanner overclaims
Semgrep integration was well-written but only used as a fallback in the
coordination layer — never invoked when the regex scanner succeeded.
Now SASTScanner.scanWithRules() runs pattern scanning + semgrep in parallel
when semgrep is installed, merging and deduplicating results.

Also corrects agent documentation that falsely claimed OWASP ZAP, TruffleHog,
Gitleaks, ESLint Security, and Snyk integrations. The actual implementations
are: regex patterns + semgrep (SAST), OSV API (deps), custom fetch-based
scanner (DAST), and regex patterns (secrets).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 13:46:52 +00:00
Dragan Spiridonov d0d7dbef19 Merge pull request #347 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.7.20
v3.7.20
2026-03-12 20:32:11 +01:00
Dragan Spiridonov 8156b4fa92 chore(release): bump version to v3.7.20
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 19:11:25 +00:00
Dragan Spiridonov 6442491a09 fix: deduplicate brain-checkpoint hooks and fix governance time budget (#344, #345)
Hook deduplication: add brain-checkpoint.cjs and .claude/helpers/ patterns to
AQE_COMMAND_PATTERNS so mergeHooksSmart() correctly identifies them as AQE-owned
and removes old copies on re-init instead of accumulating duplicates.

Governance time budget: change budgetRemaining.timeMs to measure idle time since
last action instead of total elapsed since first action, and increase default
idleTimeoutMs from 5 to 15 minutes. Prevents false "Budget exhausted: time"
blocks on requirements_validate and coverage_analyze_sublinear.

Closes #344, closes #345

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 18:51:49 +00:00
Dragan Spiridonov 9a0e26bcba docs: add missing v3.7.19 release notes
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 18:40:59 +00:00
Dragan Spiridonov 1d8a6b7d52 Merge pull request #343 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.7.19 — YAML pipelines, validation pipeline, cross-phase signals
v3.7.19
2026-03-12 17:18:36 +01:00
Dragan Spiridonov 87ff3e96da feat: YAML pipelines, validation pipeline, cross-phase signals, heartbeat scheduler, context sources
- Add YAML deterministic pipeline loader and registry (Imp-9) for token-free workflow execution
- Add validation pipeline skill and MCP handler (BMAD-003) with 13-step requirements validation
- Add cross-phase signal handlers for QCSD feedback loops (store, query, agent_complete, phase events)
- Add heartbeat scheduler worker (Imp-10) for token-free background maintenance every 30 minutes
- Add defect intelligence and requirements traceability context sources
- Register all new MCP tools in protocol-server and server
- Update skills manifests, tests, and documentation

chore(release): bump version to v3.7.19

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 16:17:04 +00:00
Dragan Spiridonov 2b5e2795f3 iterative-loop skill 2026-03-11 16:21:34 +00:00
Dragan Spiridonov 1f363bc352 Merge pull request #341 from proffesor-for-testing/hotfix/init-agents-install
fix(init): agents not installed during upgrade
v3.7.18
2026-03-11 16:49:33 +01:00
Dragan Spiridonov 4efa556482 fix(init): agents not installed during aqe init --auto upgrade
preserveOverridesDir() used __dirname (undefined in ESM bundles), causing
a TypeError that crashed the agents installer. Skills were installed but
agents were silently skipped. Fixed by using import.meta.url resolution
with try/catch fallback. Also wrapped agents installer in try/catch in
the assets phase so one failure doesn't crash the entire phase.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-11 15:49:06 +00:00
Dragan Spiridonov afdbad2f1d Merge pull request #340 from proffesor-for-testing/march-fixes-and-improvements
chore(release): v3.7.17
v3.7.17
2026-03-11 15:07:20 +01:00
Dragan Spiridonov 8bb5d77391 chore(release): bump version to v3.7.17
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-11 13:46:59 +00:00
Dragan Spiridonov 514135814a release skill 2026-03-11 13:30:00 +00:00
Dragan Spiridonov 9e7320e79f feat(bmad): implement 6 BMAD-inspired quality engineering improvements
- Adversarial review with minimum findings enforcement (weighted scoring, second-pass, clean justification)
- Agent customization overlays via .claude/agent-overrides/*.yaml with runtime integration
- Structured validation pipelines with 13-step requirements validation and blocking gates
- Mechanical edge case detection with regex-based branch enumerator (13 construct types) and CLI command
- Context compilation for agents with parallel source gathering and token budget management
- Micro-file step architecture splitting 5 QCSD skills into 44 step files (<500 lines each)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-11 13:29:49 +00:00
Dragan Spiridonov 180c2e081c Merge remote-tracking branch 'origin/main' into march-fixes-and-improvements 2026-03-11 13:21:38 +00:00
Dragan Spiridonov 80b5587232 Merge pull request #339 from proffesor-for-testing/dependabot/npm_and_yarn/npm_and_yarn-877cdb123e
chore(deps): bump file-type from 21.3.0 to 21.3.1 in the npm_and_yarn group across 1 directory
2026-03-11 14:16:06 +01:00
Dragan Spiridonov 6307ce1f9a statusline fixes 2026-03-11 11:43:34 +00:00
dependabot[bot] 4bdf8998df chore(deps): bump file-type in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [file-type](https://github.com/sindresorhus/file-type).


Updates `file-type` from 21.3.0 to 21.3.1
- [Release notes](https://github.com/sindresorhus/file-type/releases)
- [Commits](https://github.com/sindresorhus/file-type/compare/v21.3.0...v21.3.1)

---
updated-dependencies:
- dependency-name: file-type
  dependency-version: 21.3.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 09:55:34 +00:00
Dragan Spiridonov 4f14069c22 Merge branch 'main' into march-fixes-and-improvements 2026-03-11 09:54:42 +00:00