mirror of
https://github.com/proffesor-for-testing/agentic-qe.git
synced 2026-09-19 08:45:47 +08:00
Dragan Spiridonov
3d7a2f91dd
Security (CodeQL #193-196): - command-validator: replace greedy .* with [^)]* in $() pattern - input-sanitizer: replace .* with \S+(?:\.\S+)* in UPDATE SET pattern - path-traversal-validator: split alternation into two .replace() calls - regex-safety-validator: use [^\]]* and non-greedy variants in detection patterns Flaky test indicators (5 files, 58 real setTimeout calls eliminated): - file-watcher.test.ts: vi.useFakeTimers + advanceTimersByTimeAsync - qcsd-refinement.test.ts: vi.useFakeTimers + advanceTimersByTimeAsync - qcsd-ideation-url.test.ts: vi.useFakeTimers + advanceTimersByTimeAsync - server-client.test.ts: process.nextTick for data callbacks - stream-controller.test.ts: vi.useFakeTimers + advanceTimersByTimeAsync File size discipline (issue #374 P2): - time-crystal.ts (1,714 → 6 files, max 447 lines): time-crystal-types, phase-executor, time-crystal-persistence, time-crystal-analysis, time-crystal-scheduling, time-crystal (controller) - qe-reasoning-bank.ts (1,941 → 7 files, max 738 lines): qe-reasoning-bank-types, pretrained-patterns, agent-routing, embedding-utils, pattern-promotion, qe-reasoning-bank (class) All re-exports preserved for backward compatibility. 536 directly affected tests pass. Build clean. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>