Files
Dragan Spiridonov a6202c39a3 chore(release): v3.9.1 (#395)
* feat: implement ADR-062 (StrongDM all 3 tiers) and ADR-087 (RuVector 14/14 capabilities)

ADR-062 StrongDM Software Factory — all 6 actions across 3 tiers:
- Tier 1: Loop detection wired to MCP protocol-server (blocks on strike 3+),
  token dashboard (pre-existing)
- Tier 2: Holdout testing (10% FNV-1a selection, filtered in test-execution),
  gate ratcheting (monotonic 5-pass/2%/95% cap, persisted to MemoryBackend)
- Tier 3: Progressive context (TF-IDF prediction, reduces availableFiles on spawn),
  meta-learning cycle (4 insight types, stored + published as domain events)

ADR-087 RuVector Advanced Capabilities — milestones 1-5:
- EWC++ recordOutcome + backgroundConsolidate wired to 3 domain coordinators
- R1: HDC fingerprinting (10K-bit hypervectors, wired to PatternStore.store())
- R3: Delta event sourcing (sparse encoding, wired to PatternStore.store())
- R13: Cognitive routing (predictive compression, wired to mailbox.send/receive)
- R14: Hyperbolic HNSW (Poincare ball, auto-indexed in PatternStore.store())

Also updates ADR statuses: 059, 060, 061 → Implemented (were already done),
062 → Implemented, 086 → In Progress, 087 → Implemented.

223 new tests across 11 test files, all passing. Zero regressions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: implement RVF cluster (ADR-065/066/067/071) with native benchmarks

Implements the RVF persistence cluster for persistent HNSW vector storage,
agent memory branching, and HNSW unification foundation.

Key changes:
- RvfPatternStore: IPatternStore backed by @ruvector/rvf-node native HNSW
  (1.2ms cold-start, 0.19ms search p50, verified with real native binary)
- AgentMemoryBranch: per-agent COW isolation via derive(), ingest-log merge,
  wired into Kernel.initialize() + DefaultAgentCoordinator
- HnswLegacyBridge: adapts old IHNSWIndex to unified IHnswIndexProvider,
  wired into PatternStore when useUnifiedHnsw flag enabled
- Factory routing: createPatternStore() returns RvfPatternStore when flag
  enabled + native available + data directory exists
- Dream engine: accepts external RVF adapter (no duplicate file handles),
  RVCOWBranchManager enhanced with recall validation check
- @ruvector/gnn bumped 0.1.19→0.1.25, 3 new feature flags added
- IPatternStore interface extracted for polymorphic pattern store usage
- 50 new tests (16 RvfPatternStore + 17 AgentMemoryBranch + 12 bridge + 5 benchmarks)
- 1188 tests pass, 0 regressions

ADR status: 066 Implemented, 067 Implemented, 065 Implemented,
069/071 In Progress (honest assessment after brutal-honesty review)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(init): resolve skills/agents paths from package root, not relative to bundle depth

esbuild code-splitting puts installer code into dist/cli/chunks/ (3 levels
deep) instead of dist/init/ (2 levels deep), so the old ../../ traversals
landed at dist/ instead of the package root — causing "Source directory not
found" errors for all global installs.

Replace brittle relative-path resolution in all 4 installers with a shared
findPackageRoot() that walks up to the nearest package.json with
name=agentic-qe. Prioritise assets/ paths (canonical npm source) over
.claude/ paths.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: complete RVF cluster Phases 2-3 (ADR-067/069/071/072) with devil's advocate fixes

Phase 2A (ADR-067): Agent memory branching enabled — useAgentMemoryBranching=true,
BRANCH_DISCARD witness action, recordIngest callback exposed to agents via config.

Phase 2B (ADR-069): Dream RVF COW — useRvfFork driven by isRVFPatternStoreEnabled(),
child adapter stored + temp files cleaned up on merge/discard, 13 tests.

Phase 2C (ADR-071): HNSW unification — useUnifiedHnsw=true, HNSWEmbeddingIndex routes
through HnswAdapter, UnifiedMemory vectorIndex uses UnifiedHnswIndex, HnswLegacyBridge
delegates to adapter string-ID APIs (no duplicate ID maps), addEmbeddingsBatch routed
correctly, saveIndex/loadIndex safe under unified mode.

Phase 3 (ADR-072): RVF primary migration scaffolding — RvfMigrationAdapter (5-stage
routing with write latency tracking), RvfConsistencyValidator (rolling divergence +
compaction), RvfStageGate (go/no-go with witness chain), rvfMigrationStage=1 default,
wired into shared-rvf-dual-writer at stage >= 2, 32 tests.

Cross-cutting fixes from devil's advocate review:
- Shared RVF adapter singleton eliminates dual file handles (kernel + dream engine)
- RvfPatternStore reports honest nativeAvailable=false + rvfInitError on failure
- ESM-safe dynamic import() replaces require() in dream-engine and branch-manager
- quality_assess defaults to src/ instead of cwd to prevent full-project scan hang
- discoverSourceFiles skips .agentic-qe/.claude/.cache dirs, adds maxFiles=5000 cap

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: complete RVF cluster plan — Phase 2C decommission, Phase 3 integration, fix 7 pre-existing test failures

Phase 2C (ADR-071) — HNSW decommission:
- Remove RuvectorFlatIndex fallback from unified-memory.ts; always use UnifiedHnswIndex
- Hardcode isUnifiedHnswActive()=true in HNSWEmbeddingIndex (hnswlib-node legacy path is dead code)
- Create HnswShadowValidator for brute-force vs HnswAdapter divergence validation
- Benchmark alias (rvf-pattern-store.bench.ts) for plan compliance

Phase 3 (ADR-072) — RVF Primary Migration integration:
- RvfMigrationCoordinator: wires adapter + validator + gate with real SQLite/RVF handles
- MCP tools: migration_status, migration_check, migration_promote (persistence category)
- Kernel boot wiring: coordinator initializes when rvfMigrationStage >= 2
- RvfMigrationAdapter.setStage(): propagate promotions to routing logic
- Promote default rvfMigrationStage from 1 (hybrid) to 2 (dual-write-sqlite-primary)
- Integration test: 13 tests covering full lifecycle (stage 1→2→3→4), write/read routing,
  consistency checks, gate enforcement, fallback, metrics

Test fixes (7 pre-existing failures → 1 remaining):
- code-intelligence-metrics-wiring: spy console.info not console.log (logger routes to console.info)
- mcp-integration: disable ADR-062 loop detection (repeated identical calls are by design)
- dream-cycle-tool (2 tests): RvfPatternStore empty-query branch returns all patterns from SQLite
- coherence-integration (4 tests): RvfPatternStore vector search fallback computes brute-force
  cosine over SQLite embeddings when RVF adapter unavailable; getStats() falls back to SQLite count;
  auto-attach SQLitePatternStore in initialize() when not explicitly wired

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore(release): bump version to v3.9.1

- Version bump in package.json and skills-manifest.json
- Fix "Dynamic require of X is not supported" in ESM bundles by adding
  createRequire banner to both CLI and MCP build scripts — every chunk
  now has a working require() for Node.js builtins
- Add CHANGELOG.md entry and release notes for v3.9.1

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): regenerate package-lock.json for npm ci compatibility

The lock file was out of sync with package.json — new transitive
dependencies added on main were missing. All 15 CI checks failed
at `npm ci` with "Missing from lock file" errors.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): pin Node to 24.13.0 and restore working lock file

Node 24.14.1 ships npm 11.11.0 which enforces stricter lock file
validation than 11.6.x (what 24.13.0 ships). The existing lock file
passes under 11.6.x but fails under 11.11.0 with "Missing from lock
file" for transitive dependencies of private-registry packages.

Pin all 5 workflow files to node-version: '24.13.0' and restore the
lock file from commit f9b76968 (last CI-passing state) with only the
version bump to 3.9.1.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): regenerate package-lock.json with npm 10 for stable npm ci

npm 11 (Node 24) produces internally inconsistent lock files that npm ci
rejects — each npm install resolves transitive deps differently. Generated
with npm 10 (Node 22 LTS) which produces stable lock files compatible with
both npm 10 and npm 11.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-05 18:51:49 +02:00

265 lines
8.4 KiB
YAML

name: MCP Tools Testing
permissions:
contents: read
actions: write
issues: write
pull-requests: write
checks: write
on:
push:
branches: [main, testing-with-qe]
paths:
- 'src/mcp/**'
- 'tests/mcp/**'
- 'tests/integration/mcp/**'
- 'package.json'
- 'package-lock.json'
pull_request:
branches: [main]
paths:
- 'src/mcp/**'
- 'tests/mcp/**'
- 'tests/integration/mcp/**'
- 'package.json'
# On PRs: cancel stale runs when a new push arrives (old run is obsolete).
# On main: never cancel — every push must run to completion for accurate CI signal.
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
# Split MCP unit tests into parallel shards by subdirectory.
# Previously ran as one sequential job hitting the 30-min timeout.
# Now each shard runs in ~8-12 min instead of ~25 min total.
mcp-unit-handlers:
name: MCP Units — Handlers
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- run: npm run build
- name: Run handler tests
run: bash scripts/ci-vitest-run.sh tests/unit/mcp/handlers/ --fileParallelism=false --reporter=verbose
env:
NODE_OPTIONS: '--max-old-space-size=1024'
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-unit-handlers-results
path: junit.xml
retention-days: 14
mcp-unit-security:
name: MCP Units — Security
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- run: npm run build
- name: Run security tests
run: timeout 480 npx vitest run tests/unit/mcp/security/ --fileParallelism=false --reporter=verbose
env:
NODE_OPTIONS: '--max-old-space-size=1024'
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-unit-security-results
path: junit.xml
retention-days: 14
mcp-unit-tools-transport:
name: MCP Units — Tools + Transport + Metrics
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- run: npm run build
- name: Run tools, transport, metrics tests
run: >-
timeout 480 npx vitest run
tests/unit/mcp/tools/
tests/unit/mcp/transport/
tests/unit/mcp/metrics/
--fileParallelism=false
--reporter=verbose
env:
NODE_OPTIONS: '--max-old-space-size=1024'
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-unit-tools-transport-results
path: junit.xml
retention-days: 14
mcp-unit-root:
name: MCP Units — Root Files
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- run: npm run build
- name: Run root-level MCP tests
run: >-
bash scripts/ci-vitest-run.sh
tests/unit/mcp/mcp-server.test.ts
tests/unit/mcp/mcp-performance-benchmark.test.ts
tests/unit/mcp/tool-registry-security.test.ts
tests/unit/mcp/tool-scoping.test.ts
tests/unit/mcp/wrapped-domain-handlers.test.ts
--fileParallelism=false
--reporter=verbose
env:
NODE_OPTIONS: '--max-old-space-size=1024'
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-unit-root-results
path: junit.xml
retention-days: 14
mcp-integration-tests:
name: MCP Integration Tests
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- name: Run MCP integration tests
run: |
timeout 480 npm run test:mcp:integration; EXIT=$?
if [ $EXIT -eq 124 ] && [ -f junit.xml ]; then
FAILURES=$(grep -c '<failure' junit.xml 2>/dev/null || echo "0")
if [ "$FAILURES" = "0" ]; then
echo "::warning::Vitest hung after tests passed (exit 124). Treating as success."
exit 0
fi
fi
exit $EXIT
env:
NODE_OPTIONS: '--max-old-space-size=1024'
continue-on-error: true
- name: Generate test report
uses: dorny/test-reporter@v1
if: always() && hashFiles('junit.xml') != ''
continue-on-error: true
with:
name: MCP Integration Test Results
path: 'junit.xml'
reporter: jest-junit
fail-on-error: false
fail-on-empty: false
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-integration-test-results
path: |
test-results/
junit.xml
retention-days: 30
mcp-validation:
name: Validate All MCP Tools
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: '24.13.0', cache: 'npm' }
- run: npm ci
- run: npm run build
- name: Validate MCP tools
run: timeout 480 npm run mcp:validate
continue-on-error: true
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-validation-report
path: reports/mcp-validation-*.json
retention-days: 30
- name: Generate MCP report
run: timeout 480 npm run mcp:report
if: always()
- uses: actions/upload-artifact@v4
if: always()
with:
name: mcp-report
path: reports/mcp-report-*.md
retention-days: 30
mcp-summary:
name: MCP Test Summary
runs-on: ubuntu-latest
needs: [mcp-unit-handlers, mcp-unit-security, mcp-unit-tools-transport, mcp-unit-root, mcp-integration-tests, mcp-validation]
if: always()
steps:
- name: Download all artifacts
uses: actions/download-artifact@v4
- name: Create summary comment
uses: actions/github-script@v7
if: github.event_name == 'pull_request'
with:
script: |
const fs = require('fs');
const path = require('path');
let summary = '## MCP Tools Test Summary\n\n';
// Check validation report
try {
const validationFiles = fs.readdirSync('mcp-validation-report');
if (validationFiles.length > 0) {
const reportPath = path.join('mcp-validation-report', validationFiles[0]);
const report = JSON.parse(fs.readFileSync(reportPath, 'utf8'));
summary += `### Validation Results\n`;
summary += `- Total Tools: ${report.totalTools}\n`;
summary += `- Valid Tools: ${report.validTools}\n`;
summary += `- Invalid Tools: ${report.invalidTools}\n`;
summary += `- Coverage: ${report.coverage}%\n\n`;
}
} catch (err) {
summary += '### Validation Results\n- Validation report not found\n\n';
}
summary += '### Unit Test Results\n';
summary += '- Handlers: ${{ needs.mcp-unit-handlers.result }}\n';
summary += '- Security: ${{ needs.mcp-unit-security.result }}\n';
summary += '- Tools/Transport: ${{ needs.mcp-unit-tools-transport.result }}\n';
summary += '- Root: ${{ needs.mcp-unit-root.result }}\n\n';
summary += '### Other Results\n';
summary += '- Integration Tests: ${{ needs.mcp-integration-tests.result }}\n';
summary += '- Validation: ${{ needs.mcp-validation.result }}\n';
github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: summary
});