mirror of
https://github.com/proffesor-for-testing/agentic-qe.git
synced 2026-09-19 08:45:47 +08:00
Profa
651fd73d3a
🎉 Major Release: Phase 3 Dashboards & Visualization + Modular Init Refactoring **Key Achievements**: - ✅ **SECURITY**: Fixed critical shell injection vulnerability in Claude Code hooks - ✅ **PERFORMANCE**: Parallel phase execution (2-3s speedup on init) - ✅ **ROBUSTNESS**: Centralized template path resolution - ✅ **DOCUMENTATION**: Updated MCP setup instructions with troubleshooting ## Security **🔒 CRITICAL: Shell Injection Fix** (src/cli/init/claude-config.ts:92-166): - Fixed shell injection vulnerability in Claude Code hooks - All hook commands now use `jq -R '@sh'` for proper shell escaping - Severity: HIGH - Prevents malicious file names from executing arbitrary commands ## Performance **⚡ Parallel Phase Execution** (src/cli/init/index.ts:142-206): - Init command now executes non-critical phases concurrently - Speedup: 2-3 seconds faster on `aqe init` (from ~8s to ~5-6s) - Graceful degradation: Non-critical phase failures logged as warnings ## Refactoring **🔧 Centralized Template Path Resolution** (src/cli/init/utils/path-utils.ts:80-192): - Added `getPackageRoot()` function with upward search - Added `resolveTemplatePath()` with 4-tier fallback logic - Updated bash-wrapper.ts and documentation.ts to use centralized paths - Works in development, installed package, and monorepo scenarios ## Documentation **📚 MCP Integration Guide Updates** (docs/guides/MCP-INTEGRATION.md): - Updated setup commands from obsolete `mcp:start` to `npx aqe-mcp` - Added comprehensive troubleshooting for "Failed to connect" issue - Documented stale/duplicate MCP entry resolution - Added manual testing and verification steps **📋 Changelog Updates** (CHANGELOG.md): - Documented all v1.9.0 changes in dedicated sections - Added security, performance, and refactoring details - Updated skill count (38 → 40 QE skills) - Updated agent count (18 → 19 main + 11 subagents) **📖 README Updates** (README.md): - Updated skill count references throughout - Updated agent count references throughout - Documented modular init system benefits ## Verification Tested in /tmp/aqe-test-project: - ✅ Build successful (0 TypeScript errors) - ✅ `aqe init --yes` completes successfully - ✅ All components initialized (directories, databases, configs, agents, skills) - ✅ Security fix verified (jq -R '@sh' in all hooks) - ✅ Parallel execution working (5-6s total time) - ✅ Template resolution working (found at development path) - ✅ MCP server connects successfully after doc update ## Impact Breaking Changes: ❌ None - Fully backward compatible Migration: ✅ No action required 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>