@claude-flow/shared 3.0.0-alpha.1 → 3.0.0-alpha.8

package/.claude-flow/logs/headless/testgaps_1777379546969_dvf2a1_result.log

@@ -0,0 +1,155 @@
+[2026-04-28T12:36:51.594Z] RESULT
+============================================================
+{
+  "success": true,
+  "output": "Now I have enough to produce the complete gap analysis with actionable skeletons.\n\n---\n\n## Test Coverage Gap Analysis\n\n### Summary\n\nThe codebase has **5 existing test files** covering hooks and event-store. **11 source modules have zero test coverage**, and gaps exist inside the tested modules.\n\n---\n\n## 1. Entire Modules With No Tests\n\n### 1a. `src/core/event-bus.ts` — EventBus\n\nZero coverage on the core pub/sub system. Missing:\n- Basic `emit` / `on` dispatch\n- `emitAsync` waits for all handlers\n- `once` fires exactly once\n- `off` removes specific handlers\n- `removeAllListeners` scoped vs full\n- `subscribe` with `IEventFilter` (type + source + priority)\n- `IEventSubscription.pause()` / `resume()` suppresses/re-enables dispatch\n- Wildcard `*` handler receives all event types\n- Async handler errors are caught and logged (don't throw)\n\n```ts\n// __tests__/core/event-bus.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventBus, createEventBus } from '../../src/core/event-bus.js';\n\ndescribe('EventBus', () => {\n  let bus: EventBus;\n  beforeEach(() => { bus = createEventBus(); });\n\n  describe('emit / on', () => {\n    it('dispatches payload to subscriber', () => {\n      const handler = vi.fn();\n      bus.on('test:event', handler);\n      bus.emit('test:event', { value: 42 });\n      expect(handler).toHaveBeenCalledOnce();\n      expect(handler.mock.calls[0][0].payload).toEqual({ value: 42 });\n    });\n\n    it('does not dispatch to wrong type', () => {\n      const handler = vi.fn();\n      bus.on('other:event', handler);\n      bus.emit('test:event', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n\n    it('dispatches to wildcard subscribers', () => {\n      const handler = vi.fn();\n      bus.on('*', handler);\n      bus.emit('anything', {});\n      expect(handler).toHaveBeenCalled();\n    });\n  });\n\n  describe('emitAsync', () => {\n    it('waits for async handlers before resolving', async () => {\n      const order: number[] = [];\n      bus.on('ev', async () => { await new Promise(r => setTimeout(r, 10)); order.push(1); });\n      await bus.emitAsync('ev', {});\n      order.push(2);\n      expect(order[0]).toBe(1);\n    });\n  });\n\n  describe('once', () => {\n    it('fires handler exactly once', async () => {\n      const handler = vi.fn();\n      bus.once('ev', handler);\n      bus.emit('ev', {});\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n  });\n\n  describe('off', () => {\n    it('removes specific handler', () => {\n      const handler = vi.fn();\n      bus.on('ev', handler);\n      bus.off('ev', handler);\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('removeAllListeners', () => {\n    it('removes all handlers for a type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('ev', h1); bus.on('ev', h2);\n      bus.removeAllListeners('ev');\n      bus.emit('ev', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n\n    it('removes all handlers when called without type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('a', h1); bus.on('b', h2);\n      bus.removeAllListeners();\n      bus.emit('a', {}); bus.emit('b', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('subscription lifecycle', () => {\n    it('pause suppresses dispatch, resume re-enables', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.pause();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n      sub.resume();\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n\n    it('unsubscribe removes handler', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.unsubscribe();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('listenerCount / eventNames', () => {\n    it('tracks listener counts', () => {\n      bus.on('ev', vi.fn()); bus.on('ev', vi.fn());\n      expect(bus.listenerCount('ev')).toBe(2);\n      expect(bus.listenerCount('other')).toBe(0);\n    });\n\n    it('returns registered event names', () => {\n      bus.on('a', vi.fn()); bus.on('b', vi.fn());\n      expect(bus.eventNames()).toContain('a');\n      expect(bus.eventNames()).toContain('b');\n    });\n  });\n\n  describe('error handling', () => {\n    it('catches errors in async handlers without throwing', async () => {\n      bus.on('ev', async () => { throw new Error('boom'); });\n      await expect(bus.emitAsync('ev', {})).resolves.toBeUndefined();\n    });\n  });\n});\n```\n\n---\n\n### 1b. `src/core/config/` — Config Module\n\nNo tests for `validator.ts`, `defaults.ts`, or `loader.ts`. Missing:\n\n- `validateAgentConfig` / `validateTaskConfig` / `validateSwarmConfig` — valid and invalid inputs\n- `ConfigValidator.validateOrThrow()` throws with readable message on invalid data\n- `ConfigValidator.isValid()` returns boolean\n- Schema defaults are applied (e.g., `capabilities` defaults to `[]` when omitted)\n- `mergeWithDefaults` deep-merges properly\n- `ConfigLoader.load()` returns defaults when no file found\n- `ConfigLoader.load()` merges env vars (`CLAUDE_FLOW_MAX_AGENTS`, `CLAUDE_FLOW_MEMORY_TYPE`)\n- `ConfigLoader.load()` warns about invalid JSON config file\n\n```ts\n// __tests__/core/config/validator.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateAgentConfig, validateTaskConfig, validateSwarmConfig,\n  validateMemoryConfig, validateSystemConfig, ConfigValidator,\n} from '../../../src/core/config/index.js';\n\ndescribe('validateAgentConfig', () => {\n  it('accepts valid agent config', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'Coder', type: 'coder' });\n    expect(result.success).toBe(true);\n    expect(result.data?.capabilities).toEqual([]);   // default applied\n    expect(result.data?.priority).toBe(50);          // default\n  });\n\n  it('rejects missing required fields', () => {\n    const result = validateAgentConfig({ name: 'Coder' });\n    expect(result.success).toBe(false);\n    expect(result.errors?.some(e => e.path === 'id')).toBe(true);\n  });\n\n  it('rejects priority out of range', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'X', type: 'coder', priority: 101 });\n    expect(result.success).toBe(false);\n  });\n});\n\ndescribe('validateSwarmConfig', () => {\n  it('rejects unknown topology', () => {\n    const result = validateSwarmConfig({ topology: 'unknown' });\n    expect(result.success).toBe(false);\n  });\n\n  it('accepts all valid topologies', () => {\n    const topologies = ['hierarchical', 'mesh', 'ring', 'star', 'adaptive', 'hierarchical-mesh'];\n    for (const topology of topologies) {\n      expect(validateSwarmConfig({ topology }).success).toBe(true);\n    }\n  });\n});\n\ndescribe('ConfigValidator', () => {\n  it('validateOrThrow throws with readable message', () => {\n    expect(() => ConfigValidator.validateAgentOrThrow({ name: 'X' }))\n      .toThrow('Invalid agent configuration');\n  });\n\n  it('isValid returns false for invalid data', () => {\n    const { AgentConfigSchema } = require('../../../src/core/config/schema.js');\n    expect(ConfigValidator.isValid(AgentConfigSchema, {})).toBe(false);\n  });\n});\n```\n\n```ts\n// __tests__/core/config/defaults.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { mergeWithDefaults, agentTypePresets, defaultSystemConfig } from '../../../src/core/config/defaults.js';\n\ndescribe('mergeWithDefaults', () => {\n  it('applies defaults for missing keys', () => {\n    const result = mergeWithDefaults({ a: 1 } as any, { a: 0, b: 2 } as any);\n    expect(result.a).toBe(1);\n    expect(result.b).toBe(2);\n  });\n\n  it('override wins over default', () => {\n    const result = mergeWithDefaults({ key: 'override' } as any, { key: 'default' } as any);\n    expect(result.key).toBe('override');\n  });\n});\n\ndescribe('agentTypePresets', () => {\n  it('has preset for all core agent types', () => {\n    const expectedTypes = ['coder', 'reviewer', 'tester', 'researcher', 'planner', 'coordinator'];\n    for (const type of expectedTypes) {\n      expect(agentTypePresets[type]).toBeDefined();\n    }\n  });\n\n  it('coordinator has highest priority', () => {\n    expect(agentTypePresets.coordinator!.priority).toBeGreaterThan(\n      agentTypePresets.coder!.priority!\n    );\n  });\n});\n```\n\n---\n\n### 1c. `src/resilience/circuit-breaker.ts` — CircuitBreaker\n\nZero coverage. Missing state transitions: `CLOSED → OPEN → HALF_OPEN → CLOSED`.\n\n```ts\n// __tests__/resilience/circuit-breaker.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { CircuitBreaker, CircuitBreakerState } from '../../src/resilience/circuit-breaker.js';\n\ndescribe('CircuitBreaker', () => {\n  let breaker: CircuitBreaker;\n\n  beforeEach(() => {\n    breaker = new CircuitBreaker({\n      name: 'test',\n      failureThreshold: 3,\n      successThreshold: 2,\n      timeout: 100,\n      rollingWindow: 5000,\n      volumeThreshold: 3,\n    });\n  });\n\n  it('starts in CLOSED state', () => {\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('executes function successfully in CLOSED state', async () => {\n    const result = await breaker.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('ok');\n  });\n\n  it('transitions to OPEN after failure threshold is met', async () => {\n    const failFn = () => Promise.reject(new Error('fail'));\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(failFn).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('rejects immediately when OPEN without fallback', async () => {\n    // Force open via failures\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await expect(breaker.execute(() => Promise.resolve('ok')))\n      .rejects.toThrow(\"Circuit breaker 'test' is open\");\n    expect(breaker.getStats().rejectedRequests).toBe(1);\n  });\n\n  it('uses fallback when OPEN', async () => {\n    const breakerWithFallback = new CircuitBreaker({\n      name: 'fb', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      fallback: () => 'fallback-value',\n    });\n    await breakerWithFallback.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    const result = await breakerWithFallback.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('fallback-value');\n  });\n\n  it('transitions OPEN → HALF_OPEN after timeout', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n    await new Promise(r => setTimeout(r, 150));\n    expect(breaker.getState()).toBe(CircuitBreakerState.HALF_OPEN);\n  });\n\n  it('transitions HALF_OPEN → CLOSED after success threshold', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    // Now in HALF_OPEN — 2 successes needed\n    await breaker.execute(() => Promise.resolve('ok'));\n    await breaker.execute(() => Promise.resolve('ok'));\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('transitions HALF_OPEN → OPEN on failure', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    await breaker.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('respects custom isFailure predicate', async () => {\n    const selective = new CircuitBreaker({\n      name: 'sel', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      isFailure: (e) => e.message === 'real-failure',\n    });\n    // This error is ignored\n    await selective.execute(() => Promise.reject(new Error('ignore'))).catch(() => {});\n    expect(selective.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('reset returns to CLOSED', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    breaker.reset();\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('emits stateChange event', async () => {\n    const listener = vi.fn();\n    breaker.on('stateChange', listener);\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(listener).toHaveBeenCalledWith(\n      expect.objectContaining({ from: CircuitBreakerState.CLOSED, to: CircuitBreakerState.OPEN })\n    );\n  });\n\n  it('does not trip below volumeThreshold', async () => {\n    // volumeThreshold = 3, failureThreshold = 3\n    // Only 2 requests — should not trip\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n});\n```\n\n---\n\n### 1d. `src/resilience/retry.ts` — Retry\n\n```ts\n// __tests__/resilience/retry.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { retry, withRetry, RetryableErrors } from '../../src/resilience/retry.js';\n\ndescribe('retry', () => {\n  it('returns result on first success', async () => {\n    const fn = vi.fn(() => Promise.resolve('value'));\n    const result = await retry(fn, { maxAttempts: 3 });\n    expect(result.success).toBe(true);\n    expect(result.result).toBe('value');\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('retries on failure and eventually succeeds', async () => {\n    let calls = 0;\n    const fn = vi.fn(() => {\n      calls++;\n      if (calls < 3) return Promise.reject(new Error('fail'));\n      return Promise.resolve('ok');\n    });\n    const result = await retry(fn, { maxAttempts: 5, initialDelay: 1 });\n    expect(result.success).toBe(true);\n    expect(result.attempts).toBe(3);\n  });\n\n  it('returns failure after exhausting all attempts', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('always fails')));\n    const result = await retry(fn, { maxAttempts: 3, initialDelay: 1 });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(3);\n    expect(result.errors).toHaveLength(3);\n  });\n\n  it('stops immediately for non-retryable errors', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('permanent')));\n    const result = await retry(fn, {\n      maxAttempts: 5,\n      initialDelay: 1,\n      retryableErrors: (e) => e.message !== 'permanent',\n    });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('calls onRetry callback with attempt info', async () => {\n    const onRetry = vi.fn();\n    const fn = vi.fn()\n      .mockRejectedValueOnce(new Error('fail'))\n      .mockResolvedValueOnce('ok');\n    await retry(fn, { maxAttempts: 3, initialDelay: 1, onRetry });\n    expect(onRetry).toHaveBeenCalledOnce();\n    expect(onRetry.mock.calls[0][1]).toBe(1); // attempt number\n  });\n\n  it('respects maxDelay cap', async () => {\n    const delays: number[] = [];\n    const fn = vi.fn(() => Promise.reject(new Error('fail')));\n    const onRetry = (_: Error, __: number, delay: number) => delays.push(delay);\n    await retry(fn, {\n      maxAttempts: 5, initialDelay: 1000, backoffMultiplier: 10,\n      maxDelay: 500, jitter: 0, onRetry,\n    });\n    expect(delays.every(d => d <= 500)).toBe(true);\n  });\n});\n\ndescribe('RetryableErrors', () => {\n  it('network detects ECONNRESET', () => {\n    expect(RetryableErrors.network(new Error('ECONNRESET'))).toBe(true);\n    expect(RetryableErrors.network(new Error('syntax error'))).toBe(false);\n  });\n\n  it('rateLimit detects 429', () => {\n    expect(RetryableErrors.rateLimit(new Error('429 Too Many'))).toBe(true);\n  });\n\n  it('transient combines network + rateLimit + 5xx', () => {\n    expect(RetryableErrors.transient(new Error('ETIMEDOUT'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('500 Internal Server Error'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('validation error'))).toBe(false);\n  });\n});\n```\n\n---\n\n### 1e. `src/resilience/bulkhead.ts` — Bulkhead\n\n```ts\n// __tests__/resilience/bulkhead.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { Bulkhead, createSemaphore } from '../../src/resilience/bulkhead.js';\n\ndescribe('Bulkhead', () => {\n  it('executes functions up to maxConcurrent immediately', async () => {\n    const bh = new Bulkhead({ name: 'test', maxConcurrent: 2, maxQueue: 5, queueTimeout: 1000 });\n    const results = await Promise.all([\n      bh.execute(() => Promise.resolve(1)),\n      bh.execute(() => Promise.resolve(2)),\n    ]);\n    expect(results).toEqual([1, 2]);\n    expect(bh.getStats().completed).toBe(2);\n  });\n\n  it('queues excess requests and processes them', async () => {\n    const bh = new Bulkhead({ name: 'bh', maxConcurrent: 1, maxQueue: 5, queueTimeout: 1000 });\n    let resolve1!: () => void;\n    const p1 = new Promise<void>(r => { resolve1 = r; });\n\n    const result1 = bh.execute(() => p1.then(() => 'first'));\n    const result2 = bh.execute(() => Promise.resolve('second'));\n\n    resolve1();\n    const [r1, r2] = await Promise.all([result1, result2]);\n    expect(r1).toBe('first');\n    expect(r2).toBe('second');\n  });\n\n  it('rejects when queue is full', async () => {\n    const bh = new Bulkhead({ name: 'full', maxConcurrent: 1, maxQueue: 1, queueTimeout: 5000 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker); // occupies concurrency slot\n    bh.execute(() => Promise.resolve('queued')); // fills queue\n\n    await expect(bh.execute(() => Promise.resolve('overflow')))\n      .rejects.toThrow(\"Bulkhead 'full' is full\");\n    expect(bh.getStats().rejected).toBe(1);\n\n    resolve();\n  });\n\n  it('times out queued items', async () => {\n    const bh = new Bulkhead({ name: 'to', maxConcurrent: 1, maxQueue: 5, queueTimeout: 50 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker);\n    const queued = bh.execute(() => Promise.resolve('ok'));\n\n    await expect(queued).rejects.toThrow('queue timeout');\n    expect(bh.getStats().timedOut).toBe(1);\n\n    resolve();\n  });\n\n  it('calls onRejected callback on full', async () => {\n    const onRejected = vi.fn();\n    const bh = new Bulkhead({ name: 'cb', maxConcurrent: 1, maxQueue: 0, queueTimeout: 1000, onRejected });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n    bh.execute(() => blocker);\n    await bh.execute(() => Promise.resolve()).catch(() => {});\n    expect(onRejected).toHaveBeenCalledWith('full');\n    resolve();\n  });\n});\n\ndescribe('createSemaphore', () => {\n  it('limits concurrent access', async () => {\n    const sem = createSemaphore(2);\n    let active = 0;\n    let maxActive = 0;\n\n    const task = async () => {\n      await sem.acquire();\n      active++;\n      maxActive = Math.max(maxActive, active);\n      await new Promise(r => setTimeout(r, 10));\n      active--;\n      sem.release();\n    };\n\n    await Promise.all([task(), task(), task(), task()]);\n    expect(maxActive).toBeLessThanOrEqual(2);\n  });\n});\n```\n\n---\n\n### 1f. `src/resilience/rate-limiter.ts` — SlidingWindowRateLimiter & TokenBucketRateLimiter\n\n```ts\n// __tests__/resilience/rate-limiter.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { SlidingWindowRateLimiter, TokenBucketRateLimiter } from '../../src/resilience/rate-limiter.js';\n\ndescribe('SlidingWindowRateLimiter', () => {\n  it('allows requests up to limit', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 3, windowMs: 10000 });\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false); // 4th blocked\n    limiter.destroy();\n  });\n\n  it('tracks remaining and used counts', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 5, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.consume('k');\n    const r = limiter.consume('k');\n    expect(r.used).toBe(3);\n    expect(r.remaining).toBe(2);\n    limiter.destroy();\n  });\n\n  it('check does not consume a token', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.check('k'); // peek only\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false);\n    limiter.destroy();\n  });\n\n  it('reset clears a key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.reset('k');\n    expect(limiter.consume('k').allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('tracks separately by key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    expect(limiter.consume('user-1').allowed).toBe(true);\n    expect(limiter.consume('user-1').allowed).toBe(false);\n    expect(limiter.consume('user-2').allowed).toBe(true); // separate key\n    limiter.destroy();\n  });\n});\n\ndescribe('TokenBucketRateLimiter', () => {\n  it('starts with full bucket', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 5, windowMs: 1000 });\n    const r = limiter.check();\n    expect(r.remaining).toBe(5);\n    expect(r.allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('consumes tokens on each request', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 2, windowMs: 10000 });\n    limiter.consume();\n    const r = limiter.consume();\n    expect(r.remaining).toBe(0);\n    expect(limiter.consume().allowed).toBe(false);\n    limiter.destroy();\n  });\n});\n```\n\n---\n\n### 1g. `src/security/input-validation.ts`\n\nZero coverage on all validation functions.\n\n```ts\n// __tests__/security/input-validation.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateInput, sanitizeString, validatePath,\n  validateCommand, validateTags, isValidIdentifier, escapeForSql,\n} from '../../src/security/input-validation.js';\n\ndescribe('validateInput', () => {\n  it('returns valid: true for valid string', () => {\n    const r = validateInput('hello');\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toBe('hello');\n  });\n\n  it('trims whitespace by default', () => {\n    expect(validateInput('  hi  ').sanitized).toBe('hi');\n  });\n\n  it('returns error for null when required', () => {\n    const r = validateInput(null, { required: true });\n    expect(r.valid).toBe(false);\n    expect(r.error).toMatch(/required/i);\n  });\n\n  it('returns valid for null when not required', () => {\n    expect(validateInput(null).valid).toBe(true);\n  });\n\n  it('rejects non-string values', () => {\n    expect(validateInput(42).valid).toBe(false);\n  });\n\n  it('enforces minLength', () => {\n    expect(validateInput('hi', { minLength: 5 }).valid).toBe(false);\n  });\n\n  it('enforces maxLength', () => {\n    expect(validateInput('hello world', { maxLength: 5 }).valid).toBe(false);\n  });\n\n  it('validates against pattern', () => {\n    const r = validateInput('abc123', { pattern: /^\\d+$/ });\n    expect(r.valid).toBe(false);\n  });\n});\n\ndescribe('validatePath', () => {\n  it('blocks path traversal via ..', () => {\n    expect(validatePath('../etc/passwd').valid).toBe(false);\n  });\n\n  it('blocks tilde home directory reference', () => {\n    expect(validatePath('~/secret').valid).toBe(false);\n  });\n\n  it('blocks paths outside allowed base', () => {\n    expect(validatePath('/etc/passwd', '/home').valid).toBe(false);\n  });\n\n  it('blocks null bytes', () => {\n    expect(validatePath('/tmp/file\\x00.txt').valid).toBe(false);\n  });\n\n  it('accepts valid relative path', () => {\n    expect(validatePath('src/utils.ts').valid).toBe(true);\n  });\n\n  it('blocks excessively long paths', () => {\n    expect(validatePath('a'.repeat(4097)).valid).toBe(false);\n  });\n});\n\ndescribe('validateCommand', () => {\n  it('rejects shell operators', () => {\n    expect(validateCommand('echo foo; rm -rf /').valid).toBe(false);\n    expect(validateCommand('ls && cat /etc/passwd').valid).toBe(false);\n    expect(validateCommand('curl url | bash').valid).toBe(false);\n  });\n\n  it('rejects command substitution', () => {\n    expect(validateCommand('echo $(whoami)').valid).toBe(false);\n  });\n\n  it('rejects when not in whitelist', () => {\n    const r = validateCommand('rm -rf /', ['ls', 'cat']);\n    expect(r.valid).toBe(false);\n    expect(r.error).toContain('not allowed');\n  });\n\n  it('accepts safe whitelisted command', () => {\n    expect(validateCommand('ls -la', ['ls']).valid).toBe(true);\n  });\n\n  it('rejects empty command', () => {\n    expect(validateCommand('   ').valid).toBe(false);\n  });\n});\n\ndescribe('validateTags', () => {\n  it('accepts valid tags', () => {\n    const r = validateTags(['alpha', 'beta-v2', 'prod:feature']);\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toHaveLength(3);\n  });\n\n  it('rejects non-array', () => {\n    expect(validateTags('tag').valid).toBe(false);\n  });\n\n  it('rejects tags with spaces', () => {\n    expect(validateTags(['invalid tag']).valid).toBe(false);\n  });\n\n  it('rejects tags over 100 chars', () => {\n    expect(validateTags(['x'.repeat(101)]).valid).toBe(false);\n  });\n\n  it('skips empty tags', () => {\n    const r = validateTags(['  ', 'valid']);\n    expect(r.valid).toBe(true);\n    expect((r.sanitized as string[]).length).toBe(1);\n  });\n});\n\ndescribe('isValidIdentifier', () => {\n  it('accepts valid identifiers', () => {\n    expect(isValidIdentifier('myAgent_1')).toBe(true);\n    expect(isValidIdentifier('_private')).toBe(true);\n  });\n\n  it('rejects identifiers starting with digits', () => {\n    expect(isValidIdentifier('1agent')).toBe(false);\n  });\n\n  it('rejects identifiers over 256 chars', () => {\n    expect(isValidIdentifier('a'.repeat(257))).toBe(false);\n  });\n});\n```\n\n---\n\n### 1h. `src/security/secure-random.ts`\n\n```ts\n// __tests__/security/secure-random.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  generateSecureId, generateUUID, generateSecureToken,\n  generateShortId, generateSessionId, secureRandomInt, secureRandomChoice, secureShuffleArray,\n} from '../../src/security/secure-random.js';\n\ndescribe('generateSecureId', () => {\n  it('generates unique IDs', () => {\n    const ids = new Set(Array.from({ length: 100 }, () => generateSecureId()));\n    expect(ids.size).toBe(100);\n  });\n\n  it('applies prefix', () => {\n    expect(generateSecureId('agent')).toMatch(/^agent_/);\n  });\n});\n\ndescribe('generateUUID', () => {\n  it('generates valid UUID v4 format', () => {\n    const uuid = generateUUID();\n    expect(uuid).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i);\n  });\n});\n\ndescribe('secureRandomInt', () => {\n  it('returns value within [min, max]', () => {\n    for (let i = 0; i < 100; i++) {\n      const v = secureRandomInt(5, 10);\n      expect(v).toBeGreaterThanOrEqual(5);\n      expect(v).toBeLessThanOrEqual(10);\n    }\n  });\n\n  it('handles single-value range', () => {\n    expect(secureRandomInt(7, 7)).toBe(7);\n  });\n});\n\ndescribe('secureRandomChoice', () => {\n  it('selects element from array', () => {\n    const arr = ['a', 'b', 'c'];\n    const result = secureRandomChoice(arr);\n    expect(arr).toContain(result);\n  });\n\n  it('throws on empty array', () => {\n    expect(() => secureRandomChoice([])).toThrow();\n  });\n});\n\ndescribe('secureShuffleArray', () => {\n  it('returns array with same elements', () => {\n    const arr = [1, 2, 3, 4, 5];\n    const shuffled = secureShuffleArray(arr);\n    expect(shuffled).toHaveLength(arr.length);\n    expect(shuffled.sort()).toEqual([...arr].sort());\n  });\n\n  it('does not mutate original array', () => {\n    const arr = [1, 2, 3];\n    const orig = [...arr];\n    secureShuffleArray(arr);\n    expect(arr).toEqual(orig);\n  });\n});\n```\n\n---\n\n## 2. Gaps in Existing Tests\n\n### 2a. `src/hooks/hooks.test.ts` — HookRegistry & HookExecutor gaps\n\n**Untested in `HookRegistry`:**\n- `unregisterAll(event)` removes only that event's hooks\n- `unregisterAll()` removes all hooks and resets counter\n- `getHook(hookId)` returns definition or `undefined`\n- `count(event)` vs `count()` — scoped vs total\n\n**Untested in `HookExecutor`:**\n- `continueChain === false` stops the chain without setting `aborted = true`\n- `collectResults: false` (default) returns empty `results[]`\n- `executeParallel` throws when `events.length !== contexts.length`\n- `executeParallel` respects `maxParallel` batch size (emits in batches, not all at once)\n- `executeSequential` aborts entire chain when intermediate event fails and `continueOnError` is false\n\n```ts\n// Additional tests to add to src/hooks/hooks.test.ts:\n\ndescribe('HookRegistry — missing coverage', () => {\n  it('unregisterAll(event) removes only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n\n    const removed = registry.unregisterAll(HookEvent.PreToolUse);\n    expect(removed).toBe(2);\n    expect(registry.count(HookEvent.PreToolUse)).toBe(0);\n    expect(registry.count(HookEvent.PostToolUse)).toBe(1);\n  });\n\n  it('unregisterAll() removes everything', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    const removed = registry.unregisterAll();\n    expect(removed).toBe(2);\n    expect(registry.count()).toBe(0);\n  });\n\n  it('getHook returns definition for valid id', () => {\n    const handler = vi.fn();\n    const id = registry.register(HookEvent.PreEdit, handler);\n    const def = registry.getHook(id);\n    expect(def).toBeDefined();\n    expect(def?.handler).toBe(handler);\n  });\n\n  it('getHook returns undefined for unknown id', () => {\n    expect(registry.getHook('no-such-id')).toBeUndefined();\n  });\n\n  it('count(event) counts only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    expect(registry.count(HookEvent.PreToolUse)).toBe(2);\n    expect(registry.count()).toBe(3);\n  });\n});\n\ndescribe('HookExecutor — missing coverage', () => {\n  it('continueChain=false stops chain but aborted remains false', async () => {\n    const h1 = vi.fn(async () => ({ success: true }));\n    const h2 = vi.fn(async () => ({ success: true, continueChain: false }));\n    const h3 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1, HookPriority.High);\n    registry.register(HookEvent.PreEdit, h2, HookPriority.Normal);\n    registry.register(HookEvent.PreEdit, h3, HookPriority.Low);\n\n    const result = await executor.execute(HookEvent.PreEdit, { event: HookEvent.PreEdit, timestamp: new Date() });\n    expect(result.hooksExecuted).toBe(2);\n    expect(h3).not.toHaveBeenCalled();\n    expect(result.aborted).toBe(false); // chain stopped but not aborted\n  });\n\n  it('collectResults=false returns empty results array', async () => {\n    registry.register(HookEvent.PreEdit, async () => ({ success: true }));\n    const result = await executor.execute(\n      HookEvent.PreEdit,\n      { event: HookEvent.PreEdit, timestamp: new Date() },\n      { collectResults: false }\n    );\n    expect(result.results).toHaveLength(0);\n  });\n\n  it('executeParallel throws when arrays have different lengths', async () => {\n    await expect(\n      executor.executeParallel(\n        [HookEvent.PreEdit],\n        [{ event: HookEvent.PreEdit, timestamp: new Date() }, { event: HookEvent.PostEdit, timestamp: new Date() }]\n      )\n    ).rejects.toThrow('same length');\n  });\n\n  it('executeSequential aborts after failing event when continueOnError is false', async () => {\n    const h1 = vi.fn(async () => { throw new Error('fail'); });\n    const h2 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1);\n    registry.register(HookEvent.PostEdit, h2);\n\n    const result = await executor.executeSequential(\n      [HookEvent.PreEdit, HookEvent.PostEdit],\n      { event: HookEvent.PreEdit, timestamp: new Date() }\n    );\n    expect(result.aborted).toBe(true);\n    expect(h2).not.toHaveBeenCalled();\n  });\n});\n```\n\n---\n\n### 2b. `src/events/event-store.test.ts` — EventStore gaps\n\n**Missing:**\n- `ensureInitialized` throws when called before `initialize()`\n- `afterTimestamp` / `beforeTimestamp` filters in `query()`\n- `fromVersion` filter in `query()`\n- `snapshot:recommended` event emitted when version hits `snapshotThreshold`\n- `event:appended` event fired per append\n- `getSnapshot` returns `null` for unknown aggregate\n- Stats `oldestEvent` / `newestEvent` set after appending\n- Stats `snapshotCount` increments after `saveSnapshot`\n\n```ts\n// Additional tests to add to src/events/event-store.test.ts:\n\ndescribe('EventStore — missing coverage', () => {\n  it('throws when methods called before initialize()', async () => {\n    const uninit = new EventStore({ databasePath: ':memory:' });\n    await expect(uninit.append(createAgentSpawnedEvent('a', 'coder', 'core', [])))\n      .rejects.toThrow('not initialized');\n  });\n\n  it('emits event:appended for each append', async () => {\n    const handler = vi.fn();\n    eventStore.on('event:appended', handler);\n    await eventStore.append(createAgentSpawnedEvent('a1', 'coder', 'core', []));\n    expect(handler).toHaveBeenCalledOnce();\n  });\n\n  it('emits snapshot:recommended when version hits threshold', async () => {\n    const store = new EventStore({ databasePath: ':memory:', snapshotThreshold: 2 });\n    await store.initialize();\n    const handler = vi.fn();\n    store.on('snapshot:recommended', handler);\n\n    await store.append(createAgentSpawnedEvent('agg', 'coder', 'core', []));\n    await store.append(createAgentStartedEvent('agg'));\n    expect(handler).toHaveBeenCalledOnce();\n    await store.shutdown();\n  });\n\n  it('query filters by afterTimestamp', async () => {\n    const before = Date.now();\n    await new Promise(r => setTimeout(r, 5));\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const events = await eventStore.query({ afterTimestamp: before });\n    expect(events).toHaveLength(1);\n  });\n\n  it('query filters by beforeTimestamp', async () => {\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const after = Date.now() + 1000;\n    const events = await eventStore.query({ beforeTimestamp: after });\n    expect(events.length).toBeGreaterThan(0);\n    const noEvents = await eventStore.query({ beforeTimestamp: 0 });\n    expect(noEvents).toHaveLength(0);\n  });\n\n  it('query filters by fromVersion', async () => {\n    await eventStore.append(createAgentSpawnedEvent('v', 'coder', 'core', []));\n    await eventStore.append(createAgentStartedEvent('v'));\n    const events = await eventStore.query({ aggregateIds: ['v'], fromVersion: 2 });\n    expect(events).toHaveLength(1);\n    expect(events[0].version).toBe(2);\n  });\n\n  it('getSnapshot returns null for unknown aggregate', async () => {\n    const snap = await eventStore.getSnapshot('no-such-aggregate');\n    expect(snap).toBeNull();\n  });\n\n  it('stats show oldest/newest timestamps after appending', async () => {\n    await eventStore.append(createAgentSpawnedEvent('a', 'coder', 'core', []));\n    const stats = await eventStore.getStats();\n    expect(stats.oldestEvent).not.toBeNull();\n    expect(stats.newestEvent).not.toBeNull();\n    expect(stats.newestEvent!).toBeGreaterThanOrEqual(stats.oldestEvent!);\n  });\n\n  it('stats count snapshots', async () => {\n    await eventStore.saveSnapshot({\n      aggregateId: 'a1', aggregateType: 'agent',\n      version: 1, state: {}, timestamp: Date.now(),\n    });\n    const stats = await eventStore.getStats();\n    expect(stats.snapshotCount).toBe(1);\n  });\n});\n```\n\n---\n\n### 2c. `src/core/orchestrator/event-coordinator.ts` gaps\n\nThe `EventCoordinator` class has no test file at all.\n\n```ts\n// __tests__/core/orchestrator/event-coordinator.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventCoordinator } from '../../../src/core/orchestrator/event-coordinator.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\nimport { SystemEventTypes } from '../../../src/core/interfaces/event.interface.js';\n\ndescribe('EventCoordinator', () => {\n  let coordinator: EventCoordinator;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(async () => {\n    bus = createEventBus();\n    coordinator = new EventCoordinator(bus);\n    await coordinator.initialize();\n  });\n\n  afterEach(async () => { await coordinator.shutdown(); });\n\n  it('registers handlers and routes events', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('test:event', handler);\n    await bus.emitAsync('test:event', { data: 1 });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('unregisters handlers', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('ev', handler);\n    coordinator.unregisterHandler('ev', handler);\n    await bus.emitAsync('ev', {});\n    expect(handler).not.toHaveBeenCalled();\n  });\n\n  it('initialize is idempotent', async () => {\n    await coordinator.initialize(); // second call — should not throw or double-register\n    expect(coordinator.isInitialized()).toBe(true);\n  });\n\n  it('shutdown clears handlers', async () => {\n    coordinator.registerHandler('ev', vi.fn());\n    await coordinator.shutdown();\n    expect(coordinator.getRegisteredTypes()).toHaveLength(0);\n    expect(coordinator.isInitialized()).toBe(false);\n  });\n\n  it('getHandlerCount returns correct count', () => {\n    coordinator.registerHandler('ev', vi.fn());\n    coordinator.registerHandler('ev', vi.fn());\n    expect(coordinator.getHandlerCount('ev')).toBe(2);\n    expect(coordinator.getHandlerCount('other')).toBe(0);\n  });\n\n  it('handler errors do not throw from route()', async () => {\n    coordinator.registerHandler('ev', async () => { throw new Error('boom'); });\n    await expect(coordinator.route({ id: '1', type: 'ev', timestamp: new Date(), source: 'test', payload: {} }))\n      .resolves.toBeUndefined();\n  });\n});\n```\n\n---\n\n## 3. Integration Test Gaps\n\nThese cross-cutting scenarios are not covered anywhere:\n\n| Scenario | Missing Test |\n|---|---|\n| Config load → validate → use in TaskManager | No integration test |\n| EventBus ↔ EventCoordinator: coordinator routes events dispatched on bus | No integration test |\n| HookExecutor with real EventBus: `hooks:error` event emitted on handler exception | Partially in hooks.test.ts but only verifies execution, not bus event shape |\n| TaskManager.cleanup() removes tasks older than threshold | TaskManager has no tests at all |\n| TaskQueue priority ordering with `updatePriority()` reordering | No test |\n| SessionHooksManager + InMemorySessionStorage: full round-trip store and list | Partially tested but `list()` not verified independently |\n\n```ts\n// __tests__/core/orchestrator/task-manager.test.ts (skeleton)\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { TaskQueue, TaskManager } from '../../../src/core/orchestrator/task-manager.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\n\ndescribe('TaskQueue', () => {\n  let queue: TaskQueue;\n  beforeEach(() => { queue = new TaskQueue(); });\n\n  it('dequeues in priority order', async () => {\n    const make = (id: string, priority: number) =>\n      ({ id, type: 'test', description: '', priority, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('low', 10));\n    await queue.enqueue(make('high', 90));\n    await queue.enqueue(make('mid', 50));\n    expect((await queue.dequeue())!.id).toBe('high');\n    expect((await queue.dequeue())!.id).toBe('mid');\n    expect((await queue.dequeue())!.id).toBe('low');\n  });\n\n  it('updatePriority re-sorts queue', async () => {\n    const make = (id: string, p: number) =>\n      ({ id, type: 't', description: '', priority: p, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('a', 10));\n    await queue.enqueue(make('b', 20));\n    await queue.updatePriority('a', 100);\n    expect((await queue.dequeue())!.id).toBe('a');\n  });\n\n  it('remove returns false for missing task', async () => {\n    expect(await queue.remove('ghost')).toBe(false);\n  });\n});\n\ndescribe('TaskManager', () => {\n  let manager: TaskManager;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(() => {\n    bus = createEventBus();\n    manager = new TaskManager(bus);\n  });\n\n  it('createTask emits TASK_CREATED event', async () => {\n    const handler = vi.fn();\n    bus.on('task:created', handler);\n    await manager.createTask({ type: 'work', description: 'Do stuff' });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('assignTask throws for unknown task', async () => {\n    await expect(manager.assignTask('ghost', 'agent-1')).rejects.toThrow('Task not found');\n  });\n\n  it('getTasks filters by status', async () => {\n    const t1 = await manager.createTask({ type: 'a', description: 'd' });\n    await manager.createTask({ type: 'b', description: 'd' });\n    await manager.assignTask(t1.id, 'agent-1');\n    const assigned = manager.getTasks({ status: 'assigned' });\n    expect(assigned).toHaveLength(1);\n    expect(assigned[0].id).toBe(t1.id);\n  });\n\n  it('getMetrics tracks completed and failed counts', async () => {\n    const t = await manager.createTask({ type: 'x', description: 'd' });\n    await manager.completeTask(t.id, { taskId: t.id, success: true, duration: 100 });\n    const m = manager.getMetrics();\n    expect(m.completedTasks).toBe(1);\n    expect(m.totalTasks).toBe(1);\n  });\n});\n```\n\n---\n\n## Priority Order for Implementation\n\n| Priority | Module | Risk if untested |\n|---|---|---|\n| **Critical** | `src/security/input-validation.ts` | Security bugs go undetected (path traversal, injection) |\n| **Critical** | `src/resilience/circuit-breaker.ts` | State machine bugs cause cascading failures in prod |\n| **High** | `src/core/event-bus.ts` | Core pub/sub is foundational — silent dispatch bugs |\n| **High** | `src/core/config/validator.ts` | Invalid configs silently accepted or cryptically rejected |\n| **High** | `src/resilience/retry.ts` | Retry exhaustion / non-retryable filtering bugs |\n| **Medium** | `src/core/orchestrator/event-coordinator.ts` | Event routing gaps not caught |\n| **Medium** | `src/core/orchestrator/task-manager.ts` | TaskQueue priority ordering bugs |\n| **Medium** | `src/resilience/bulkhead.ts` + `rate-limiter.ts` | Resource protection failures |\n| **Lower** | `src/security/secure-random.ts` | Wraps well-tested Node crypto — lower risk |\n| **Lower** | Event-store edge cases | Functional core is tested; edge cases are non-critical |\n",
+  "parsedOutput": {
+    "sections": [
+      {
+        "title": "Test Coverage Gap Analysis",
+        "content": "\n",
+        "level": 2
+      },
+      {
+        "title": "Summary",
+        "content": "\nThe codebase has **5 existing test files** covering hooks and event-store. **11 source modules have zero test coverage**, and gaps exist inside the tested modules.\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1. Entire Modules With No Tests",
+        "content": "\n",
+        "level": 2
+      },
+      {
+        "title": "1a. `src/core/event-bus.ts` — EventBus",
+        "content": "\nZero coverage on the core pub/sub system. Missing:\n- Basic `emit` / `on` dispatch\n- `emitAsync` waits for all handlers\n- `once` fires exactly once\n- `off` removes specific handlers\n- `removeAllListeners` scoped vs full\n- `subscribe` with `IEventFilter` (type + source + priority)\n- `IEventSubscription.pause()` / `resume()` suppresses/re-enables dispatch\n- Wildcard `*` handler receives all event types\n- Async handler errors are caught and logged (don't throw)\n\n```ts\n// __tests__/core/event-bus.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventBus, createEventBus } from '../../src/core/event-bus.js';\n\ndescribe('EventBus', () => {\n  let bus: EventBus;\n  beforeEach(() => { bus = createEventBus(); });\n\n  describe('emit / on', () => {\n    it('dispatches payload to subscriber', () => {\n      const handler = vi.fn();\n      bus.on('test:event', handler);\n      bus.emit('test:event', { value: 42 });\n      expect(handler).toHaveBeenCalledOnce();\n      expect(handler.mock.calls[0][0].payload).toEqual({ value: 42 });\n    });\n\n    it('does not dispatch to wrong type', () => {\n      const handler = vi.fn();\n      bus.on('other:event', handler);\n      bus.emit('test:event', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n\n    it('dispatches to wildcard subscribers', () => {\n      const handler = vi.fn();\n      bus.on('*', handler);\n      bus.emit('anything', {});\n      expect(handler).toHaveBeenCalled();\n    });\n  });\n\n  describe('emitAsync', () => {\n    it('waits for async handlers before resolving', async () => {\n      const order: number[] = [];\n      bus.on('ev', async () => { await new Promise(r => setTimeout(r, 10)); order.push(1); });\n      await bus.emitAsync('ev', {});\n      order.push(2);\n      expect(order[0]).toBe(1);\n    });\n  });\n\n  describe('once', () => {\n    it('fires handler exactly once', async () => {\n      const handler = vi.fn();\n      bus.once('ev', handler);\n      bus.emit('ev', {});\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n  });\n\n  describe('off', () => {\n    it('removes specific handler', () => {\n      const handler = vi.fn();\n      bus.on('ev', handler);\n      bus.off('ev', handler);\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('removeAllListeners', () => {\n    it('removes all handlers for a type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('ev', h1); bus.on('ev', h2);\n      bus.removeAllListeners('ev');\n      bus.emit('ev', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n\n    it('removes all handlers when called without type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('a', h1); bus.on('b', h2);\n      bus.removeAllListeners();\n      bus.emit('a', {}); bus.emit('b', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('subscription lifecycle', () => {\n    it('pause suppresses dispatch, resume re-enables', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.pause();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n      sub.resume();\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n\n    it('unsubscribe removes handler', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.unsubscribe();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('listenerCount / eventNames', () => {\n    it('tracks listener counts', () => {\n      bus.on('ev', vi.fn()); bus.on('ev', vi.fn());\n      expect(bus.listenerCount('ev')).toBe(2);\n      expect(bus.listenerCount('other')).toBe(0);\n    });\n\n    it('returns registered event names', () => {\n      bus.on('a', vi.fn()); bus.on('b', vi.fn());\n      expect(bus.eventNames()).toContain('a');\n      expect(bus.eventNames()).toContain('b');\n    });\n  });\n\n  describe('error handling', () => {\n    it('catches errors in async handlers without throwing', async () => {\n      bus.on('ev', async () => { throw new Error('boom'); });\n      await expect(bus.emitAsync('ev', {})).resolves.toBeUndefined();\n    });\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1b. `src/core/config/` — Config Module",
+        "content": "\nNo tests for `validator.ts`, `defaults.ts`, or `loader.ts`. Missing:\n\n- `validateAgentConfig` / `validateTaskConfig` / `validateSwarmConfig` — valid and invalid inputs\n- `ConfigValidator.validateOrThrow()` throws with readable message on invalid data\n- `ConfigValidator.isValid()` returns boolean\n- Schema defaults are applied (e.g., `capabilities` defaults to `[]` when omitted)\n- `mergeWithDefaults` deep-merges properly\n- `ConfigLoader.load()` returns defaults when no file found\n- `ConfigLoader.load()` merges env vars (`CLAUDE_FLOW_MAX_AGENTS`, `CLAUDE_FLOW_MEMORY_TYPE`)\n- `ConfigLoader.load()` warns about invalid JSON config file\n\n```ts\n// __tests__/core/config/validator.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateAgentConfig, validateTaskConfig, validateSwarmConfig,\n  validateMemoryConfig, validateSystemConfig, ConfigValidator,\n} from '../../../src/core/config/index.js';\n\ndescribe('validateAgentConfig', () => {\n  it('accepts valid agent config', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'Coder', type: 'coder' });\n    expect(result.success).toBe(true);\n    expect(result.data?.capabilities).toEqual([]);   // default applied\n    expect(result.data?.priority).toBe(50);          // default\n  });\n\n  it('rejects missing required fields', () => {\n    const result = validateAgentConfig({ name: 'Coder' });\n    expect(result.success).toBe(false);\n    expect(result.errors?.some(e => e.path === 'id')).toBe(true);\n  });\n\n  it('rejects priority out of range', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'X', type: 'coder', priority: 101 });\n    expect(result.success).toBe(false);\n  });\n});\n\ndescribe('validateSwarmConfig', () => {\n  it('rejects unknown topology', () => {\n    const result = validateSwarmConfig({ topology: 'unknown' });\n    expect(result.success).toBe(false);\n  });\n\n  it('accepts all valid topologies', () => {\n    const topologies = ['hierarchical', 'mesh', 'ring', 'star', 'adaptive', 'hierarchical-mesh'];\n    for (const topology of topologies) {\n      expect(validateSwarmConfig({ topology }).success).toBe(true);\n    }\n  });\n});\n\ndescribe('ConfigValidator', () => {\n  it('validateOrThrow throws with readable message', () => {\n    expect(() => ConfigValidator.validateAgentOrThrow({ name: 'X' }))\n      .toThrow('Invalid agent configuration');\n  });\n\n  it('isValid returns false for invalid data', () => {\n    const { AgentConfigSchema } = require('../../../src/core/config/schema.js');\n    expect(ConfigValidator.isValid(AgentConfigSchema, {})).toBe(false);\n  });\n});\n```\n\n```ts\n// __tests__/core/config/defaults.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { mergeWithDefaults, agentTypePresets, defaultSystemConfig } from '../../../src/core/config/defaults.js';\n\ndescribe('mergeWithDefaults', () => {\n  it('applies defaults for missing keys', () => {\n    const result = mergeWithDefaults({ a: 1 } as any, { a: 0, b: 2 } as any);\n    expect(result.a).toBe(1);\n    expect(result.b).toBe(2);\n  });\n\n  it('override wins over default', () => {\n    const result = mergeWithDefaults({ key: 'override' } as any, { key: 'default' } as any);\n    expect(result.key).toBe('override');\n  });\n});\n\ndescribe('agentTypePresets', () => {\n  it('has preset for all core agent types', () => {\n    const expectedTypes = ['coder', 'reviewer', 'tester', 'researcher', 'planner', 'coordinator'];\n    for (const type of expectedTypes) {\n      expect(agentTypePresets[type]).toBeDefined();\n    }\n  });\n\n  it('coordinator has highest priority', () => {\n    expect(agentTypePresets.coordinator!.priority).toBeGreaterThan(\n      agentTypePresets.coder!.priority!\n    );\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1c. `src/resilience/circuit-breaker.ts` — CircuitBreaker",
+        "content": "\nZero coverage. Missing state transitions: `CLOSED → OPEN → HALF_OPEN → CLOSED`.\n\n```ts\n// __tests__/resilience/circuit-breaker.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { CircuitBreaker, CircuitBreakerState } from '../../src/resilience/circuit-breaker.js';\n\ndescribe('CircuitBreaker', () => {\n  let breaker: CircuitBreaker;\n\n  beforeEach(() => {\n    breaker = new CircuitBreaker({\n      name: 'test',\n      failureThreshold: 3,\n      successThreshold: 2,\n      timeout: 100,\n      rollingWindow: 5000,\n      volumeThreshold: 3,\n    });\n  });\n\n  it('starts in CLOSED state', () => {\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('executes function successfully in CLOSED state', async () => {\n    const result = await breaker.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('ok');\n  });\n\n  it('transitions to OPEN after failure threshold is met', async () => {\n    const failFn = () => Promise.reject(new Error('fail'));\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(failFn).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('rejects immediately when OPEN without fallback', async () => {\n    // Force open via failures\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await expect(breaker.execute(() => Promise.resolve('ok')))\n      .rejects.toThrow(\"Circuit breaker 'test' is open\");\n    expect(breaker.getStats().rejectedRequests).toBe(1);\n  });\n\n  it('uses fallback when OPEN', async () => {\n    const breakerWithFallback = new CircuitBreaker({\n      name: 'fb', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      fallback: () => 'fallback-value',\n    });\n    await breakerWithFallback.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    const result = await breakerWithFallback.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('fallback-value');\n  });\n\n  it('transitions OPEN → HALF_OPEN after timeout', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n    await new Promise(r => setTimeout(r, 150));\n    expect(breaker.getState()).toBe(CircuitBreakerState.HALF_OPEN);\n  });\n\n  it('transitions HALF_OPEN → CLOSED after success threshold', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    // Now in HALF_OPEN — 2 successes needed\n    await breaker.execute(() => Promise.resolve('ok'));\n    await breaker.execute(() => Promise.resolve('ok'));\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('transitions HALF_OPEN → OPEN on failure', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    await breaker.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('respects custom isFailure predicate', async () => {\n    const selective = new CircuitBreaker({\n      name: 'sel', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      isFailure: (e) => e.message === 'real-failure',\n    });\n    // This error is ignored\n    await selective.execute(() => Promise.reject(new Error('ignore'))).catch(() => {});\n    expect(selective.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('reset returns to CLOSED', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    breaker.reset();\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('emits stateChange event', async () => {\n    const listener = vi.fn();\n    breaker.on('stateChange', listener);\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(listener).toHaveBeenCalledWith(\n      expect.objectContaining({ from: CircuitBreakerState.CLOSED, to: CircuitBreakerState.OPEN })\n    );\n  });\n\n  it('does not trip below volumeThreshold', async () => {\n    // volumeThreshold = 3, failureThreshold = 3\n    // Only 2 requests — should not trip\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1d. `src/resilience/retry.ts` — Retry",
+        "content": "\n```ts\n// __tests__/resilience/retry.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { retry, withRetry, RetryableErrors } from '../../src/resilience/retry.js';\n\ndescribe('retry', () => {\n  it('returns result on first success', async () => {\n    const fn = vi.fn(() => Promise.resolve('value'));\n    const result = await retry(fn, { maxAttempts: 3 });\n    expect(result.success).toBe(true);\n    expect(result.result).toBe('value');\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('retries on failure and eventually succeeds', async () => {\n    let calls = 0;\n    const fn = vi.fn(() => {\n      calls++;\n      if (calls < 3) return Promise.reject(new Error('fail'));\n      return Promise.resolve('ok');\n    });\n    const result = await retry(fn, { maxAttempts: 5, initialDelay: 1 });\n    expect(result.success).toBe(true);\n    expect(result.attempts).toBe(3);\n  });\n\n  it('returns failure after exhausting all attempts', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('always fails')));\n    const result = await retry(fn, { maxAttempts: 3, initialDelay: 1 });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(3);\n    expect(result.errors).toHaveLength(3);\n  });\n\n  it('stops immediately for non-retryable errors', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('permanent')));\n    const result = await retry(fn, {\n      maxAttempts: 5,\n      initialDelay: 1,\n      retryableErrors: (e) => e.message !== 'permanent',\n    });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('calls onRetry callback with attempt info', async () => {\n    const onRetry = vi.fn();\n    const fn = vi.fn()\n      .mockRejectedValueOnce(new Error('fail'))\n      .mockResolvedValueOnce('ok');\n    await retry(fn, { maxAttempts: 3, initialDelay: 1, onRetry });\n    expect(onRetry).toHaveBeenCalledOnce();\n    expect(onRetry.mock.calls[0][1]).toBe(1); // attempt number\n  });\n\n  it('respects maxDelay cap', async () => {\n    const delays: number[] = [];\n    const fn = vi.fn(() => Promise.reject(new Error('fail')));\n    const onRetry = (_: Error, __: number, delay: number) => delays.push(delay);\n    await retry(fn, {\n      maxAttempts: 5, initialDelay: 1000, backoffMultiplier: 10,\n      maxDelay: 500, jitter: 0, onRetry,\n    });\n    expect(delays.every(d => d <= 500)).toBe(true);\n  });\n});\n\ndescribe('RetryableErrors', () => {\n  it('network detects ECONNRESET', () => {\n    expect(RetryableErrors.network(new Error('ECONNRESET'))).toBe(true);\n    expect(RetryableErrors.network(new Error('syntax error'))).toBe(false);\n  });\n\n  it('rateLimit detects 429', () => {\n    expect(RetryableErrors.rateLimit(new Error('429 Too Many'))).toBe(true);\n  });\n\n  it('transient combines network + rateLimit + 5xx', () => {\n    expect(RetryableErrors.transient(new Error('ETIMEDOUT'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('500 Internal Server Error'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('validation error'))).toBe(false);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1e. `src/resilience/bulkhead.ts` — Bulkhead",
+        "content": "\n```ts\n// __tests__/resilience/bulkhead.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { Bulkhead, createSemaphore } from '../../src/resilience/bulkhead.js';\n\ndescribe('Bulkhead', () => {\n  it('executes functions up to maxConcurrent immediately', async () => {\n    const bh = new Bulkhead({ name: 'test', maxConcurrent: 2, maxQueue: 5, queueTimeout: 1000 });\n    const results = await Promise.all([\n      bh.execute(() => Promise.resolve(1)),\n      bh.execute(() => Promise.resolve(2)),\n    ]);\n    expect(results).toEqual([1, 2]);\n    expect(bh.getStats().completed).toBe(2);\n  });\n\n  it('queues excess requests and processes them', async () => {\n    const bh = new Bulkhead({ name: 'bh', maxConcurrent: 1, maxQueue: 5, queueTimeout: 1000 });\n    let resolve1!: () => void;\n    const p1 = new Promise<void>(r => { resolve1 = r; });\n\n    const result1 = bh.execute(() => p1.then(() => 'first'));\n    const result2 = bh.execute(() => Promise.resolve('second'));\n\n    resolve1();\n    const [r1, r2] = await Promise.all([result1, result2]);\n    expect(r1).toBe('first');\n    expect(r2).toBe('second');\n  });\n\n  it('rejects when queue is full', async () => {\n    const bh = new Bulkhead({ name: 'full', maxConcurrent: 1, maxQueue: 1, queueTimeout: 5000 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker); // occupies concurrency slot\n    bh.execute(() => Promise.resolve('queued')); // fills queue\n\n    await expect(bh.execute(() => Promise.resolve('overflow')))\n      .rejects.toThrow(\"Bulkhead 'full' is full\");\n    expect(bh.getStats().rejected).toBe(1);\n\n    resolve();\n  });\n\n  it('times out queued items', async () => {\n    const bh = new Bulkhead({ name: 'to', maxConcurrent: 1, maxQueue: 5, queueTimeout: 50 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker);\n    const queued = bh.execute(() => Promise.resolve('ok'));\n\n    await expect(queued).rejects.toThrow('queue timeout');\n    expect(bh.getStats().timedOut).toBe(1);\n\n    resolve();\n  });\n\n  it('calls onRejected callback on full', async () => {\n    const onRejected = vi.fn();\n    const bh = new Bulkhead({ name: 'cb', maxConcurrent: 1, maxQueue: 0, queueTimeout: 1000, onRejected });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n    bh.execute(() => blocker);\n    await bh.execute(() => Promise.resolve()).catch(() => {});\n    expect(onRejected).toHaveBeenCalledWith('full');\n    resolve();\n  });\n});\n\ndescribe('createSemaphore', () => {\n  it('limits concurrent access', async () => {\n    const sem = createSemaphore(2);\n    let active = 0;\n    let maxActive = 0;\n\n    const task = async () => {\n      await sem.acquire();\n      active++;\n      maxActive = Math.max(maxActive, active);\n      await new Promise(r => setTimeout(r, 10));\n      active--;\n      sem.release();\n    };\n\n    await Promise.all([task(), task(), task(), task()]);\n    expect(maxActive).toBeLessThanOrEqual(2);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1f. `src/resilience/rate-limiter.ts` — SlidingWindowRateLimiter & TokenBucketRateLimiter",
+        "content": "\n```ts\n// __tests__/resilience/rate-limiter.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { SlidingWindowRateLimiter, TokenBucketRateLimiter } from '../../src/resilience/rate-limiter.js';\n\ndescribe('SlidingWindowRateLimiter', () => {\n  it('allows requests up to limit', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 3, windowMs: 10000 });\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false); // 4th blocked\n    limiter.destroy();\n  });\n\n  it('tracks remaining and used counts', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 5, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.consume('k');\n    const r = limiter.consume('k');\n    expect(r.used).toBe(3);\n    expect(r.remaining).toBe(2);\n    limiter.destroy();\n  });\n\n  it('check does not consume a token', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.check('k'); // peek only\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false);\n    limiter.destroy();\n  });\n\n  it('reset clears a key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.reset('k');\n    expect(limiter.consume('k').allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('tracks separately by key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    expect(limiter.consume('user-1').allowed).toBe(true);\n    expect(limiter.consume('user-1').allowed).toBe(false);\n    expect(limiter.consume('user-2').allowed).toBe(true); // separate key\n    limiter.destroy();\n  });\n});\n\ndescribe('TokenBucketRateLimiter', () => {\n  it('starts with full bucket', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 5, windowMs: 1000 });\n    const r = limiter.check();\n    expect(r.remaining).toBe(5);\n    expect(r.allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('consumes tokens on each request', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 2, windowMs: 10000 });\n    limiter.consume();\n    const r = limiter.consume();\n    expect(r.remaining).toBe(0);\n    expect(limiter.consume().allowed).toBe(false);\n    limiter.destroy();\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1g. `src/security/input-validation.ts`",
+        "content": "\nZero coverage on all validation functions.\n\n```ts\n// __tests__/security/input-validation.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateInput, sanitizeString, validatePath,\n  validateCommand, validateTags, isValidIdentifier, escapeForSql,\n} from '../../src/security/input-validation.js';\n\ndescribe('validateInput', () => {\n  it('returns valid: true for valid string', () => {\n    const r = validateInput('hello');\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toBe('hello');\n  });\n\n  it('trims whitespace by default', () => {\n    expect(validateInput('  hi  ').sanitized).toBe('hi');\n  });\n\n  it('returns error for null when required', () => {\n    const r = validateInput(null, { required: true });\n    expect(r.valid).toBe(false);\n    expect(r.error).toMatch(/required/i);\n  });\n\n  it('returns valid for null when not required', () => {\n    expect(validateInput(null).valid).toBe(true);\n  });\n\n  it('rejects non-string values', () => {\n    expect(validateInput(42).valid).toBe(false);\n  });\n\n  it('enforces minLength', () => {\n    expect(validateInput('hi', { minLength: 5 }).valid).toBe(false);\n  });\n\n  it('enforces maxLength', () => {\n    expect(validateInput('hello world', { maxLength: 5 }).valid).toBe(false);\n  });\n\n  it('validates against pattern', () => {\n    const r = validateInput('abc123', { pattern: /^\\d+$/ });\n    expect(r.valid).toBe(false);\n  });\n});\n\ndescribe('validatePath', () => {\n  it('blocks path traversal via ..', () => {\n    expect(validatePath('../etc/passwd').valid).toBe(false);\n  });\n\n  it('blocks tilde home directory reference', () => {\n    expect(validatePath('~/secret').valid).toBe(false);\n  });\n\n  it('blocks paths outside allowed base', () => {\n    expect(validatePath('/etc/passwd', '/home').valid).toBe(false);\n  });\n\n  it('blocks null bytes', () => {\n    expect(validatePath('/tmp/file\\x00.txt').valid).toBe(false);\n  });\n\n  it('accepts valid relative path', () => {\n    expect(validatePath('src/utils.ts').valid).toBe(true);\n  });\n\n  it('blocks excessively long paths', () => {\n    expect(validatePath('a'.repeat(4097)).valid).toBe(false);\n  });\n});\n\ndescribe('validateCommand', () => {\n  it('rejects shell operators', () => {\n    expect(validateCommand('echo foo; rm -rf /').valid).toBe(false);\n    expect(validateCommand('ls && cat /etc/passwd').valid).toBe(false);\n    expect(validateCommand('curl url | bash').valid).toBe(false);\n  });\n\n  it('rejects command substitution', () => {\n    expect(validateCommand('echo $(whoami)').valid).toBe(false);\n  });\n\n  it('rejects when not in whitelist', () => {\n    const r = validateCommand('rm -rf /', ['ls', 'cat']);\n    expect(r.valid).toBe(false);\n    expect(r.error).toContain('not allowed');\n  });\n\n  it('accepts safe whitelisted command', () => {\n    expect(validateCommand('ls -la', ['ls']).valid).toBe(true);\n  });\n\n  it('rejects empty command', () => {\n    expect(validateCommand('   ').valid).toBe(false);\n  });\n});\n\ndescribe('validateTags', () => {\n  it('accepts valid tags', () => {\n    const r = validateTags(['alpha', 'beta-v2', 'prod:feature']);\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toHaveLength(3);\n  });\n\n  it('rejects non-array', () => {\n    expect(validateTags('tag').valid).toBe(false);\n  });\n\n  it('rejects tags with spaces', () => {\n    expect(validateTags(['invalid tag']).valid).toBe(false);\n  });\n\n  it('rejects tags over 100 chars', () => {\n    expect(validateTags(['x'.repeat(101)]).valid).toBe(false);\n  });\n\n  it('skips empty tags', () => {\n    const r = validateTags(['  ', 'valid']);\n    expect(r.valid).toBe(true);\n    expect((r.sanitized as string[]).length).toBe(1);\n  });\n});\n\ndescribe('isValidIdentifier', () => {\n  it('accepts valid identifiers', () => {\n    expect(isValidIdentifier('myAgent_1')).toBe(true);\n    expect(isValidIdentifier('_private')).toBe(true);\n  });\n\n  it('rejects identifiers starting with digits', () => {\n    expect(isValidIdentifier('1agent')).toBe(false);\n  });\n\n  it('rejects identifiers over 256 chars', () => {\n    expect(isValidIdentifier('a'.repeat(257))).toBe(false);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "1h. `src/security/secure-random.ts`",
+        "content": "\n```ts\n// __tests__/security/secure-random.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  generateSecureId, generateUUID, generateSecureToken,\n  generateShortId, generateSessionId, secureRandomInt, secureRandomChoice, secureShuffleArray,\n} from '../../src/security/secure-random.js';\n\ndescribe('generateSecureId', () => {\n  it('generates unique IDs', () => {\n    const ids = new Set(Array.from({ length: 100 }, () => generateSecureId()));\n    expect(ids.size).toBe(100);\n  });\n\n  it('applies prefix', () => {\n    expect(generateSecureId('agent')).toMatch(/^agent_/);\n  });\n});\n\ndescribe('generateUUID', () => {\n  it('generates valid UUID v4 format', () => {\n    const uuid = generateUUID();\n    expect(uuid).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i);\n  });\n});\n\ndescribe('secureRandomInt', () => {\n  it('returns value within [min, max]', () => {\n    for (let i = 0; i < 100; i++) {\n      const v = secureRandomInt(5, 10);\n      expect(v).toBeGreaterThanOrEqual(5);\n      expect(v).toBeLessThanOrEqual(10);\n    }\n  });\n\n  it('handles single-value range', () => {\n    expect(secureRandomInt(7, 7)).toBe(7);\n  });\n});\n\ndescribe('secureRandomChoice', () => {\n  it('selects element from array', () => {\n    const arr = ['a', 'b', 'c'];\n    const result = secureRandomChoice(arr);\n    expect(arr).toContain(result);\n  });\n\n  it('throws on empty array', () => {\n    expect(() => secureRandomChoice([])).toThrow();\n  });\n});\n\ndescribe('secureShuffleArray', () => {\n  it('returns array with same elements', () => {\n    const arr = [1, 2, 3, 4, 5];\n    const shuffled = secureShuffleArray(arr);\n    expect(shuffled).toHaveLength(arr.length);\n    expect(shuffled.sort()).toEqual([...arr].sort());\n  });\n\n  it('does not mutate original array', () => {\n    const arr = [1, 2, 3];\n    const orig = [...arr];\n    secureShuffleArray(arr);\n    expect(arr).toEqual(orig);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "2. Gaps in Existing Tests",
+        "content": "\n",
+        "level": 2
+      },
+      {
+        "title": "2a. `src/hooks/hooks.test.ts` — HookRegistry & HookExecutor gaps",
+        "content": "\n**Untested in `HookRegistry`:**\n- `unregisterAll(event)` removes only that event's hooks\n- `unregisterAll()` removes all hooks and resets counter\n- `getHook(hookId)` returns definition or `undefined`\n- `count(event)` vs `count()` — scoped vs total\n\n**Untested in `HookExecutor`:**\n- `continueChain === false` stops the chain without setting `aborted = true`\n- `collectResults: false` (default) returns empty `results[]`\n- `executeParallel` throws when `events.length !== contexts.length`\n- `executeParallel` respects `maxParallel` batch size (emits in batches, not all at once)\n- `executeSequential` aborts entire chain when intermediate event fails and `continueOnError` is false\n\n```ts\n// Additional tests to add to src/hooks/hooks.test.ts:\n\ndescribe('HookRegistry — missing coverage', () => {\n  it('unregisterAll(event) removes only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n\n    const removed = registry.unregisterAll(HookEvent.PreToolUse);\n    expect(removed).toBe(2);\n    expect(registry.count(HookEvent.PreToolUse)).toBe(0);\n    expect(registry.count(HookEvent.PostToolUse)).toBe(1);\n  });\n\n  it('unregisterAll() removes everything', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    const removed = registry.unregisterAll();\n    expect(removed).toBe(2);\n    expect(registry.count()).toBe(0);\n  });\n\n  it('getHook returns definition for valid id', () => {\n    const handler = vi.fn();\n    const id = registry.register(HookEvent.PreEdit, handler);\n    const def = registry.getHook(id);\n    expect(def).toBeDefined();\n    expect(def?.handler).toBe(handler);\n  });\n\n  it('getHook returns undefined for unknown id', () => {\n    expect(registry.getHook('no-such-id')).toBeUndefined();\n  });\n\n  it('count(event) counts only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    expect(registry.count(HookEvent.PreToolUse)).toBe(2);\n    expect(registry.count()).toBe(3);\n  });\n});\n\ndescribe('HookExecutor — missing coverage', () => {\n  it('continueChain=false stops chain but aborted remains false', async () => {\n    const h1 = vi.fn(async () => ({ success: true }));\n    const h2 = vi.fn(async () => ({ success: true, continueChain: false }));\n    const h3 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1, HookPriority.High);\n    registry.register(HookEvent.PreEdit, h2, HookPriority.Normal);\n    registry.register(HookEvent.PreEdit, h3, HookPriority.Low);\n\n    const result = await executor.execute(HookEvent.PreEdit, { event: HookEvent.PreEdit, timestamp: new Date() });\n    expect(result.hooksExecuted).toBe(2);\n    expect(h3).not.toHaveBeenCalled();\n    expect(result.aborted).toBe(false); // chain stopped but not aborted\n  });\n\n  it('collectResults=false returns empty results array', async () => {\n    registry.register(HookEvent.PreEdit, async () => ({ success: true }));\n    const result = await executor.execute(\n      HookEvent.PreEdit,\n      { event: HookEvent.PreEdit, timestamp: new Date() },\n      { collectResults: false }\n    );\n    expect(result.results).toHaveLength(0);\n  });\n\n  it('executeParallel throws when arrays have different lengths', async () => {\n    await expect(\n      executor.executeParallel(\n        [HookEvent.PreEdit],\n        [{ event: HookEvent.PreEdit, timestamp: new Date() }, { event: HookEvent.PostEdit, timestamp: new Date() }]\n      )\n    ).rejects.toThrow('same length');\n  });\n\n  it('executeSequential aborts after failing event when continueOnError is false', async () => {\n    const h1 = vi.fn(async () => { throw new Error('fail'); });\n    const h2 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1);\n    registry.register(HookEvent.PostEdit, h2);\n\n    const result = await executor.executeSequential(\n      [HookEvent.PreEdit, HookEvent.PostEdit],\n      { event: HookEvent.PreEdit, timestamp: new Date() }\n    );\n    expect(result.aborted).toBe(true);\n    expect(h2).not.toHaveBeenCalled();\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "2b. `src/events/event-store.test.ts` — EventStore gaps",
+        "content": "\n**Missing:**\n- `ensureInitialized` throws when called before `initialize()`\n- `afterTimestamp` / `beforeTimestamp` filters in `query()`\n- `fromVersion` filter in `query()`\n- `snapshot:recommended` event emitted when version hits `snapshotThreshold`\n- `event:appended` event fired per append\n- `getSnapshot` returns `null` for unknown aggregate\n- Stats `oldestEvent` / `newestEvent` set after appending\n- Stats `snapshotCount` increments after `saveSnapshot`\n\n```ts\n// Additional tests to add to src/events/event-store.test.ts:\n\ndescribe('EventStore — missing coverage', () => {\n  it('throws when methods called before initialize()', async () => {\n    const uninit = new EventStore({ databasePath: ':memory:' });\n    await expect(uninit.append(createAgentSpawnedEvent('a', 'coder', 'core', [])))\n      .rejects.toThrow('not initialized');\n  });\n\n  it('emits event:appended for each append', async () => {\n    const handler = vi.fn();\n    eventStore.on('event:appended', handler);\n    await eventStore.append(createAgentSpawnedEvent('a1', 'coder', 'core', []));\n    expect(handler).toHaveBeenCalledOnce();\n  });\n\n  it('emits snapshot:recommended when version hits threshold', async () => {\n    const store = new EventStore({ databasePath: ':memory:', snapshotThreshold: 2 });\n    await store.initialize();\n    const handler = vi.fn();\n    store.on('snapshot:recommended', handler);\n\n    await store.append(createAgentSpawnedEvent('agg', 'coder', 'core', []));\n    await store.append(createAgentStartedEvent('agg'));\n    expect(handler).toHaveBeenCalledOnce();\n    await store.shutdown();\n  });\n\n  it('query filters by afterTimestamp', async () => {\n    const before = Date.now();\n    await new Promise(r => setTimeout(r, 5));\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const events = await eventStore.query({ afterTimestamp: before });\n    expect(events).toHaveLength(1);\n  });\n\n  it('query filters by beforeTimestamp', async () => {\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const after = Date.now() + 1000;\n    const events = await eventStore.query({ beforeTimestamp: after });\n    expect(events.length).toBeGreaterThan(0);\n    const noEvents = await eventStore.query({ beforeTimestamp: 0 });\n    expect(noEvents).toHaveLength(0);\n  });\n\n  it('query filters by fromVersion', async () => {\n    await eventStore.append(createAgentSpawnedEvent('v', 'coder', 'core', []));\n    await eventStore.append(createAgentStartedEvent('v'));\n    const events = await eventStore.query({ aggregateIds: ['v'], fromVersion: 2 });\n    expect(events).toHaveLength(1);\n    expect(events[0].version).toBe(2);\n  });\n\n  it('getSnapshot returns null for unknown aggregate', async () => {\n    const snap = await eventStore.getSnapshot('no-such-aggregate');\n    expect(snap).toBeNull();\n  });\n\n  it('stats show oldest/newest timestamps after appending', async () => {\n    await eventStore.append(createAgentSpawnedEvent('a', 'coder', 'core', []));\n    const stats = await eventStore.getStats();\n    expect(stats.oldestEvent).not.toBeNull();\n    expect(stats.newestEvent).not.toBeNull();\n    expect(stats.newestEvent!).toBeGreaterThanOrEqual(stats.oldestEvent!);\n  });\n\n  it('stats count snapshots', async () => {\n    await eventStore.saveSnapshot({\n      aggregateId: 'a1', aggregateType: 'agent',\n      version: 1, state: {}, timestamp: Date.now(),\n    });\n    const stats = await eventStore.getStats();\n    expect(stats.snapshotCount).toBe(1);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "2c. `src/core/orchestrator/event-coordinator.ts` gaps",
+        "content": "\nThe `EventCoordinator` class has no test file at all.\n\n```ts\n// __tests__/core/orchestrator/event-coordinator.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventCoordinator } from '../../../src/core/orchestrator/event-coordinator.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\nimport { SystemEventTypes } from '../../../src/core/interfaces/event.interface.js';\n\ndescribe('EventCoordinator', () => {\n  let coordinator: EventCoordinator;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(async () => {\n    bus = createEventBus();\n    coordinator = new EventCoordinator(bus);\n    await coordinator.initialize();\n  });\n\n  afterEach(async () => { await coordinator.shutdown(); });\n\n  it('registers handlers and routes events', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('test:event', handler);\n    await bus.emitAsync('test:event', { data: 1 });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('unregisters handlers', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('ev', handler);\n    coordinator.unregisterHandler('ev', handler);\n    await bus.emitAsync('ev', {});\n    expect(handler).not.toHaveBeenCalled();\n  });\n\n  it('initialize is idempotent', async () => {\n    await coordinator.initialize(); // second call — should not throw or double-register\n    expect(coordinator.isInitialized()).toBe(true);\n  });\n\n  it('shutdown clears handlers', async () => {\n    coordinator.registerHandler('ev', vi.fn());\n    await coordinator.shutdown();\n    expect(coordinator.getRegisteredTypes()).toHaveLength(0);\n    expect(coordinator.isInitialized()).toBe(false);\n  });\n\n  it('getHandlerCount returns correct count', () => {\n    coordinator.registerHandler('ev', vi.fn());\n    coordinator.registerHandler('ev', vi.fn());\n    expect(coordinator.getHandlerCount('ev')).toBe(2);\n    expect(coordinator.getHandlerCount('other')).toBe(0);\n  });\n\n  it('handler errors do not throw from route()', async () => {\n    coordinator.registerHandler('ev', async () => { throw new Error('boom'); });\n    await expect(coordinator.route({ id: '1', type: 'ev', timestamp: new Date(), source: 'test', payload: {} }))\n      .resolves.toBeUndefined();\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "3. Integration Test Gaps",
+        "content": "\nThese cross-cutting scenarios are not covered anywhere:\n\n| Scenario | Missing Test |\n|---|---|\n| Config load → validate → use in TaskManager | No integration test |\n| EventBus ↔ EventCoordinator: coordinator routes events dispatched on bus | No integration test |\n| HookExecutor with real EventBus: `hooks:error` event emitted on handler exception | Partially in hooks.test.ts but only verifies execution, not bus event shape |\n| TaskManager.cleanup() removes tasks older than threshold | TaskManager has no tests at all |\n| TaskQueue priority ordering with `updatePriority()` reordering | No test |\n| SessionHooksManager + InMemorySessionStorage: full round-trip store and list | Partially tested but `list()` not verified independently |\n\n```ts\n// __tests__/core/orchestrator/task-manager.test.ts (skeleton)\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { TaskQueue, TaskManager } from '../../../src/core/orchestrator/task-manager.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\n\ndescribe('TaskQueue', () => {\n  let queue: TaskQueue;\n  beforeEach(() => { queue = new TaskQueue(); });\n\n  it('dequeues in priority order', async () => {\n    const make = (id: string, priority: number) =>\n      ({ id, type: 'test', description: '', priority, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('low', 10));\n    await queue.enqueue(make('high', 90));\n    await queue.enqueue(make('mid', 50));\n    expect((await queue.dequeue())!.id).toBe('high');\n    expect((await queue.dequeue())!.id).toBe('mid');\n    expect((await queue.dequeue())!.id).toBe('low');\n  });\n\n  it('updatePriority re-sorts queue', async () => {\n    const make = (id: string, p: number) =>\n      ({ id, type: 't', description: '', priority: p, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('a', 10));\n    await queue.enqueue(make('b', 20));\n    await queue.updatePriority('a', 100);\n    expect((await queue.dequeue())!.id).toBe('a');\n  });\n\n  it('remove returns false for missing task', async () => {\n    expect(await queue.remove('ghost')).toBe(false);\n  });\n});\n\ndescribe('TaskManager', () => {\n  let manager: TaskManager;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(() => {\n    bus = createEventBus();\n    manager = new TaskManager(bus);\n  });\n\n  it('createTask emits TASK_CREATED event', async () => {\n    const handler = vi.fn();\n    bus.on('task:created', handler);\n    await manager.createTask({ type: 'work', description: 'Do stuff' });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('assignTask throws for unknown task', async () => {\n    await expect(manager.assignTask('ghost', 'agent-1')).rejects.toThrow('Task not found');\n  });\n\n  it('getTasks filters by status', async () => {\n    const t1 = await manager.createTask({ type: 'a', description: 'd' });\n    await manager.createTask({ type: 'b', description: 'd' });\n    await manager.assignTask(t1.id, 'agent-1');\n    const assigned = manager.getTasks({ status: 'assigned' });\n    expect(assigned).toHaveLength(1);\n    expect(assigned[0].id).toBe(t1.id);\n  });\n\n  it('getMetrics tracks completed and failed counts', async () => {\n    const t = await manager.createTask({ type: 'x', description: 'd' });\n    await manager.completeTask(t.id, { taskId: t.id, success: true, duration: 100 });\n    const m = manager.getMetrics();\n    expect(m.completedTasks).toBe(1);\n    expect(m.totalTasks).toBe(1);\n  });\n});\n```\n\n---\n\n",
+        "level": 2
+      },
+      {
+        "title": "Priority Order for Implementation",
+        "content": "| Priority | Module | Risk if untested |\n|---|---|---|\n| **Critical** | `src/security/input-validation.ts` | Security bugs go undetected (path traversal, injection) |\n| **Critical** | `src/resilience/circuit-breaker.ts` | State machine bugs cause cascading failures in prod |\n| **High** | `src/core/event-bus.ts` | Core pub/sub is foundational — silent dispatch bugs |\n| **High** | `src/core/config/validator.ts` | Invalid configs silently accepted or cryptically rejected |\n| **High** | `src/resilience/retry.ts` | Retry exhaustion / non-retryable filtering bugs |\n| **Medium** | `src/core/orchestrator/event-coordinator.ts` | Event routing gaps not caught |\n| **Medium** | `src/core/orchestrator/task-manager.ts` | TaskQueue priority ordering bugs |\n| **Medium** | `src/resilience/bulkhead.ts` + `rate-limiter.ts` | Resource protection failures |\n| **Lower** | `src/security/secure-random.ts` | Wraps well-tested Node crypto — lower risk |\n| **Lower** | Event-store edge cases | Functional core is tested; edge cases are non-critical |",
+        "level": 2
+      }
+    ],
+    "codeBlocks": [
+      {
+        "language": "ts",
+        "code": "// __tests__/core/event-bus.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventBus, createEventBus } from '../../src/core/event-bus.js';\n\ndescribe('EventBus', () => {\n  let bus: EventBus;\n  beforeEach(() => { bus = createEventBus(); });\n\n  describe('emit / on', () => {\n    it('dispatches payload to subscriber', () => {\n      const handler = vi.fn();\n      bus.on('test:event', handler);\n      bus.emit('test:event', { value: 42 });\n      expect(handler).toHaveBeenCalledOnce();\n      expect(handler.mock.calls[0][0].payload).toEqual({ value: 42 });\n    });\n\n    it('does not dispatch to wrong type', () => {\n      const handler = vi.fn();\n      bus.on('other:event', handler);\n      bus.emit('test:event', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n\n    it('dispatches to wildcard subscribers', () => {\n      const handler = vi.fn();\n      bus.on('*', handler);\n      bus.emit('anything', {});\n      expect(handler).toHaveBeenCalled();\n    });\n  });\n\n  describe('emitAsync', () => {\n    it('waits for async handlers before resolving', async () => {\n      const order: number[] = [];\n      bus.on('ev', async () => { await new Promise(r => setTimeout(r, 10)); order.push(1); });\n      await bus.emitAsync('ev', {});\n      order.push(2);\n      expect(order[0]).toBe(1);\n    });\n  });\n\n  describe('once', () => {\n    it('fires handler exactly once', async () => {\n      const handler = vi.fn();\n      bus.once('ev', handler);\n      bus.emit('ev', {});\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n  });\n\n  describe('off', () => {\n    it('removes specific handler', () => {\n      const handler = vi.fn();\n      bus.on('ev', handler);\n      bus.off('ev', handler);\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('removeAllListeners', () => {\n    it('removes all handlers for a type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('ev', h1); bus.on('ev', h2);\n      bus.removeAllListeners('ev');\n      bus.emit('ev', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n\n    it('removes all handlers when called without type', () => {\n      const h1 = vi.fn(), h2 = vi.fn();\n      bus.on('a', h1); bus.on('b', h2);\n      bus.removeAllListeners();\n      bus.emit('a', {}); bus.emit('b', {});\n      expect(h1).not.toHaveBeenCalled();\n      expect(h2).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('subscription lifecycle', () => {\n    it('pause suppresses dispatch, resume re-enables', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.pause();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n      sub.resume();\n      bus.emit('ev', {});\n      expect(handler).toHaveBeenCalledOnce();\n    });\n\n    it('unsubscribe removes handler', () => {\n      const handler = vi.fn();\n      const sub = bus.on('ev', handler);\n      sub.unsubscribe();\n      bus.emit('ev', {});\n      expect(handler).not.toHaveBeenCalled();\n    });\n  });\n\n  describe('listenerCount / eventNames', () => {\n    it('tracks listener counts', () => {\n      bus.on('ev', vi.fn()); bus.on('ev', vi.fn());\n      expect(bus.listenerCount('ev')).toBe(2);\n      expect(bus.listenerCount('other')).toBe(0);\n    });\n\n    it('returns registered event names', () => {\n      bus.on('a', vi.fn()); bus.on('b', vi.fn());\n      expect(bus.eventNames()).toContain('a');\n      expect(bus.eventNames()).toContain('b');\n    });\n  });\n\n  describe('error handling', () => {\n    it('catches errors in async handlers without throwing', async () => {\n      bus.on('ev', async () => { throw new Error('boom'); });\n      await expect(bus.emitAsync('ev', {})).resolves.toBeUndefined();\n    });\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/core/config/validator.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateAgentConfig, validateTaskConfig, validateSwarmConfig,\n  validateMemoryConfig, validateSystemConfig, ConfigValidator,\n} from '../../../src/core/config/index.js';\n\ndescribe('validateAgentConfig', () => {\n  it('accepts valid agent config', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'Coder', type: 'coder' });\n    expect(result.success).toBe(true);\n    expect(result.data?.capabilities).toEqual([]);   // default applied\n    expect(result.data?.priority).toBe(50);          // default\n  });\n\n  it('rejects missing required fields', () => {\n    const result = validateAgentConfig({ name: 'Coder' });\n    expect(result.success).toBe(false);\n    expect(result.errors?.some(e => e.path === 'id')).toBe(true);\n  });\n\n  it('rejects priority out of range', () => {\n    const result = validateAgentConfig({ id: 'a1', name: 'X', type: 'coder', priority: 101 });\n    expect(result.success).toBe(false);\n  });\n});\n\ndescribe('validateSwarmConfig', () => {\n  it('rejects unknown topology', () => {\n    const result = validateSwarmConfig({ topology: 'unknown' });\n    expect(result.success).toBe(false);\n  });\n\n  it('accepts all valid topologies', () => {\n    const topologies = ['hierarchical', 'mesh', 'ring', 'star', 'adaptive', 'hierarchical-mesh'];\n    for (const topology of topologies) {\n      expect(validateSwarmConfig({ topology }).success).toBe(true);\n    }\n  });\n});\n\ndescribe('ConfigValidator', () => {\n  it('validateOrThrow throws with readable message', () => {\n    expect(() => ConfigValidator.validateAgentOrThrow({ name: 'X' }))\n      .toThrow('Invalid agent configuration');\n  });\n\n  it('isValid returns false for invalid data', () => {\n    const { AgentConfigSchema } = require('../../../src/core/config/schema.js');\n    expect(ConfigValidator.isValid(AgentConfigSchema, {})).toBe(false);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/core/config/defaults.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { mergeWithDefaults, agentTypePresets, defaultSystemConfig } from '../../../src/core/config/defaults.js';\n\ndescribe('mergeWithDefaults', () => {\n  it('applies defaults for missing keys', () => {\n    const result = mergeWithDefaults({ a: 1 } as any, { a: 0, b: 2 } as any);\n    expect(result.a).toBe(1);\n    expect(result.b).toBe(2);\n  });\n\n  it('override wins over default', () => {\n    const result = mergeWithDefaults({ key: 'override' } as any, { key: 'default' } as any);\n    expect(result.key).toBe('override');\n  });\n});\n\ndescribe('agentTypePresets', () => {\n  it('has preset for all core agent types', () => {\n    const expectedTypes = ['coder', 'reviewer', 'tester', 'researcher', 'planner', 'coordinator'];\n    for (const type of expectedTypes) {\n      expect(agentTypePresets[type]).toBeDefined();\n    }\n  });\n\n  it('coordinator has highest priority', () => {\n    expect(agentTypePresets.coordinator!.priority).toBeGreaterThan(\n      agentTypePresets.coder!.priority!\n    );\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/resilience/circuit-breaker.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { CircuitBreaker, CircuitBreakerState } from '../../src/resilience/circuit-breaker.js';\n\ndescribe('CircuitBreaker', () => {\n  let breaker: CircuitBreaker;\n\n  beforeEach(() => {\n    breaker = new CircuitBreaker({\n      name: 'test',\n      failureThreshold: 3,\n      successThreshold: 2,\n      timeout: 100,\n      rollingWindow: 5000,\n      volumeThreshold: 3,\n    });\n  });\n\n  it('starts in CLOSED state', () => {\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('executes function successfully in CLOSED state', async () => {\n    const result = await breaker.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('ok');\n  });\n\n  it('transitions to OPEN after failure threshold is met', async () => {\n    const failFn = () => Promise.reject(new Error('fail'));\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(failFn).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('rejects immediately when OPEN without fallback', async () => {\n    // Force open via failures\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await expect(breaker.execute(() => Promise.resolve('ok')))\n      .rejects.toThrow(\"Circuit breaker 'test' is open\");\n    expect(breaker.getStats().rejectedRequests).toBe(1);\n  });\n\n  it('uses fallback when OPEN', async () => {\n    const breakerWithFallback = new CircuitBreaker({\n      name: 'fb', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      fallback: () => 'fallback-value',\n    });\n    await breakerWithFallback.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    const result = await breakerWithFallback.execute(() => Promise.resolve('ok'));\n    expect(result).toBe('fallback-value');\n  });\n\n  it('transitions OPEN → HALF_OPEN after timeout', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n    await new Promise(r => setTimeout(r, 150));\n    expect(breaker.getState()).toBe(CircuitBreakerState.HALF_OPEN);\n  });\n\n  it('transitions HALF_OPEN → CLOSED after success threshold', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    // Now in HALF_OPEN — 2 successes needed\n    await breaker.execute(() => Promise.resolve('ok'));\n    await breaker.execute(() => Promise.resolve('ok'));\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('transitions HALF_OPEN → OPEN on failure', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    await new Promise(r => setTimeout(r, 150));\n    await breaker.execute(() => Promise.reject(new Error('fail'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.OPEN);\n  });\n\n  it('respects custom isFailure predicate', async () => {\n    const selective = new CircuitBreaker({\n      name: 'sel', failureThreshold: 1, successThreshold: 1,\n      timeout: 100, rollingWindow: 5000, volumeThreshold: 1,\n      isFailure: (e) => e.message === 'real-failure',\n    });\n    // This error is ignored\n    await selective.execute(() => Promise.reject(new Error('ignore'))).catch(() => {});\n    expect(selective.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('reset returns to CLOSED', async () => {\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    breaker.reset();\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n\n  it('emits stateChange event', async () => {\n    const listener = vi.fn();\n    breaker.on('stateChange', listener);\n    for (let i = 0; i < 3; i++) {\n      await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    }\n    expect(listener).toHaveBeenCalledWith(\n      expect.objectContaining({ from: CircuitBreakerState.CLOSED, to: CircuitBreakerState.OPEN })\n    );\n  });\n\n  it('does not trip below volumeThreshold', async () => {\n    // volumeThreshold = 3, failureThreshold = 3\n    // Only 2 requests — should not trip\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    await breaker.execute(() => Promise.reject(new Error('x'))).catch(() => {});\n    expect(breaker.getState()).toBe(CircuitBreakerState.CLOSED);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/resilience/retry.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { retry, withRetry, RetryableErrors } from '../../src/resilience/retry.js';\n\ndescribe('retry', () => {\n  it('returns result on first success', async () => {\n    const fn = vi.fn(() => Promise.resolve('value'));\n    const result = await retry(fn, { maxAttempts: 3 });\n    expect(result.success).toBe(true);\n    expect(result.result).toBe('value');\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('retries on failure and eventually succeeds', async () => {\n    let calls = 0;\n    const fn = vi.fn(() => {\n      calls++;\n      if (calls < 3) return Promise.reject(new Error('fail'));\n      return Promise.resolve('ok');\n    });\n    const result = await retry(fn, { maxAttempts: 5, initialDelay: 1 });\n    expect(result.success).toBe(true);\n    expect(result.attempts).toBe(3);\n  });\n\n  it('returns failure after exhausting all attempts', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('always fails')));\n    const result = await retry(fn, { maxAttempts: 3, initialDelay: 1 });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(3);\n    expect(result.errors).toHaveLength(3);\n  });\n\n  it('stops immediately for non-retryable errors', async () => {\n    const fn = vi.fn(() => Promise.reject(new Error('permanent')));\n    const result = await retry(fn, {\n      maxAttempts: 5,\n      initialDelay: 1,\n      retryableErrors: (e) => e.message !== 'permanent',\n    });\n    expect(result.success).toBe(false);\n    expect(result.attempts).toBe(1);\n    expect(fn).toHaveBeenCalledOnce();\n  });\n\n  it('calls onRetry callback with attempt info', async () => {\n    const onRetry = vi.fn();\n    const fn = vi.fn()\n      .mockRejectedValueOnce(new Error('fail'))\n      .mockResolvedValueOnce('ok');\n    await retry(fn, { maxAttempts: 3, initialDelay: 1, onRetry });\n    expect(onRetry).toHaveBeenCalledOnce();\n    expect(onRetry.mock.calls[0][1]).toBe(1); // attempt number\n  });\n\n  it('respects maxDelay cap', async () => {\n    const delays: number[] = [];\n    const fn = vi.fn(() => Promise.reject(new Error('fail')));\n    const onRetry = (_: Error, __: number, delay: number) => delays.push(delay);\n    await retry(fn, {\n      maxAttempts: 5, initialDelay: 1000, backoffMultiplier: 10,\n      maxDelay: 500, jitter: 0, onRetry,\n    });\n    expect(delays.every(d => d <= 500)).toBe(true);\n  });\n});\n\ndescribe('RetryableErrors', () => {\n  it('network detects ECONNRESET', () => {\n    expect(RetryableErrors.network(new Error('ECONNRESET'))).toBe(true);\n    expect(RetryableErrors.network(new Error('syntax error'))).toBe(false);\n  });\n\n  it('rateLimit detects 429', () => {\n    expect(RetryableErrors.rateLimit(new Error('429 Too Many'))).toBe(true);\n  });\n\n  it('transient combines network + rateLimit + 5xx', () => {\n    expect(RetryableErrors.transient(new Error('ETIMEDOUT'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('500 Internal Server Error'))).toBe(true);\n    expect(RetryableErrors.transient(new Error('validation error'))).toBe(false);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/resilience/bulkhead.test.ts\nimport { describe, it, expect, vi } from 'vitest';\nimport { Bulkhead, createSemaphore } from '../../src/resilience/bulkhead.js';\n\ndescribe('Bulkhead', () => {\n  it('executes functions up to maxConcurrent immediately', async () => {\n    const bh = new Bulkhead({ name: 'test', maxConcurrent: 2, maxQueue: 5, queueTimeout: 1000 });\n    const results = await Promise.all([\n      bh.execute(() => Promise.resolve(1)),\n      bh.execute(() => Promise.resolve(2)),\n    ]);\n    expect(results).toEqual([1, 2]);\n    expect(bh.getStats().completed).toBe(2);\n  });\n\n  it('queues excess requests and processes them', async () => {\n    const bh = new Bulkhead({ name: 'bh', maxConcurrent: 1, maxQueue: 5, queueTimeout: 1000 });\n    let resolve1!: () => void;\n    const p1 = new Promise<void>(r => { resolve1 = r; });\n\n    const result1 = bh.execute(() => p1.then(() => 'first'));\n    const result2 = bh.execute(() => Promise.resolve('second'));\n\n    resolve1();\n    const [r1, r2] = await Promise.all([result1, result2]);\n    expect(r1).toBe('first');\n    expect(r2).toBe('second');\n  });\n\n  it('rejects when queue is full', async () => {\n    const bh = new Bulkhead({ name: 'full', maxConcurrent: 1, maxQueue: 1, queueTimeout: 5000 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker); // occupies concurrency slot\n    bh.execute(() => Promise.resolve('queued')); // fills queue\n\n    await expect(bh.execute(() => Promise.resolve('overflow')))\n      .rejects.toThrow(\"Bulkhead 'full' is full\");\n    expect(bh.getStats().rejected).toBe(1);\n\n    resolve();\n  });\n\n  it('times out queued items', async () => {\n    const bh = new Bulkhead({ name: 'to', maxConcurrent: 1, maxQueue: 5, queueTimeout: 50 });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n\n    bh.execute(() => blocker);\n    const queued = bh.execute(() => Promise.resolve('ok'));\n\n    await expect(queued).rejects.toThrow('queue timeout');\n    expect(bh.getStats().timedOut).toBe(1);\n\n    resolve();\n  });\n\n  it('calls onRejected callback on full', async () => {\n    const onRejected = vi.fn();\n    const bh = new Bulkhead({ name: 'cb', maxConcurrent: 1, maxQueue: 0, queueTimeout: 1000, onRejected });\n    let resolve!: () => void;\n    const blocker = new Promise<void>(r => { resolve = r; });\n    bh.execute(() => blocker);\n    await bh.execute(() => Promise.resolve()).catch(() => {});\n    expect(onRejected).toHaveBeenCalledWith('full');\n    resolve();\n  });\n});\n\ndescribe('createSemaphore', () => {\n  it('limits concurrent access', async () => {\n    const sem = createSemaphore(2);\n    let active = 0;\n    let maxActive = 0;\n\n    const task = async () => {\n      await sem.acquire();\n      active++;\n      maxActive = Math.max(maxActive, active);\n      await new Promise(r => setTimeout(r, 10));\n      active--;\n      sem.release();\n    };\n\n    await Promise.all([task(), task(), task(), task()]);\n    expect(maxActive).toBeLessThanOrEqual(2);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/resilience/rate-limiter.test.ts\nimport { describe, it, expect } from 'vitest';\nimport { SlidingWindowRateLimiter, TokenBucketRateLimiter } from '../../src/resilience/rate-limiter.js';\n\ndescribe('SlidingWindowRateLimiter', () => {\n  it('allows requests up to limit', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 3, windowMs: 10000 });\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false); // 4th blocked\n    limiter.destroy();\n  });\n\n  it('tracks remaining and used counts', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 5, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.consume('k');\n    const r = limiter.consume('k');\n    expect(r.used).toBe(3);\n    expect(r.remaining).toBe(2);\n    limiter.destroy();\n  });\n\n  it('check does not consume a token', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.check('k'); // peek only\n    expect(limiter.consume('k').allowed).toBe(true);\n    expect(limiter.consume('k').allowed).toBe(false);\n    limiter.destroy();\n  });\n\n  it('reset clears a key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    limiter.consume('k');\n    limiter.reset('k');\n    expect(limiter.consume('k').allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('tracks separately by key', () => {\n    const limiter = new SlidingWindowRateLimiter({ maxRequests: 1, windowMs: 10000 });\n    expect(limiter.consume('user-1').allowed).toBe(true);\n    expect(limiter.consume('user-1').allowed).toBe(false);\n    expect(limiter.consume('user-2').allowed).toBe(true); // separate key\n    limiter.destroy();\n  });\n});\n\ndescribe('TokenBucketRateLimiter', () => {\n  it('starts with full bucket', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 5, windowMs: 1000 });\n    const r = limiter.check();\n    expect(r.remaining).toBe(5);\n    expect(r.allowed).toBe(true);\n    limiter.destroy();\n  });\n\n  it('consumes tokens on each request', () => {\n    const limiter = new TokenBucketRateLimiter({ maxRequests: 2, windowMs: 10000 });\n    limiter.consume();\n    const r = limiter.consume();\n    expect(r.remaining).toBe(0);\n    expect(limiter.consume().allowed).toBe(false);\n    limiter.destroy();\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/security/input-validation.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  validateInput, sanitizeString, validatePath,\n  validateCommand, validateTags, isValidIdentifier, escapeForSql,\n} from '../../src/security/input-validation.js';\n\ndescribe('validateInput', () => {\n  it('returns valid: true for valid string', () => {\n    const r = validateInput('hello');\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toBe('hello');\n  });\n\n  it('trims whitespace by default', () => {\n    expect(validateInput('  hi  ').sanitized).toBe('hi');\n  });\n\n  it('returns error for null when required', () => {\n    const r = validateInput(null, { required: true });\n    expect(r.valid).toBe(false);\n    expect(r.error).toMatch(/required/i);\n  });\n\n  it('returns valid for null when not required', () => {\n    expect(validateInput(null).valid).toBe(true);\n  });\n\n  it('rejects non-string values', () => {\n    expect(validateInput(42).valid).toBe(false);\n  });\n\n  it('enforces minLength', () => {\n    expect(validateInput('hi', { minLength: 5 }).valid).toBe(false);\n  });\n\n  it('enforces maxLength', () => {\n    expect(validateInput('hello world', { maxLength: 5 }).valid).toBe(false);\n  });\n\n  it('validates against pattern', () => {\n    const r = validateInput('abc123', { pattern: /^\\d+$/ });\n    expect(r.valid).toBe(false);\n  });\n});\n\ndescribe('validatePath', () => {\n  it('blocks path traversal via ..', () => {\n    expect(validatePath('../etc/passwd').valid).toBe(false);\n  });\n\n  it('blocks tilde home directory reference', () => {\n    expect(validatePath('~/secret').valid).toBe(false);\n  });\n\n  it('blocks paths outside allowed base', () => {\n    expect(validatePath('/etc/passwd', '/home').valid).toBe(false);\n  });\n\n  it('blocks null bytes', () => {\n    expect(validatePath('/tmp/file\\x00.txt').valid).toBe(false);\n  });\n\n  it('accepts valid relative path', () => {\n    expect(validatePath('src/utils.ts').valid).toBe(true);\n  });\n\n  it('blocks excessively long paths', () => {\n    expect(validatePath('a'.repeat(4097)).valid).toBe(false);\n  });\n});\n\ndescribe('validateCommand', () => {\n  it('rejects shell operators', () => {\n    expect(validateCommand('echo foo; rm -rf /').valid).toBe(false);\n    expect(validateCommand('ls && cat /etc/passwd').valid).toBe(false);\n    expect(validateCommand('curl url | bash').valid).toBe(false);\n  });\n\n  it('rejects command substitution', () => {\n    expect(validateCommand('echo $(whoami)').valid).toBe(false);\n  });\n\n  it('rejects when not in whitelist', () => {\n    const r = validateCommand('rm -rf /', ['ls', 'cat']);\n    expect(r.valid).toBe(false);\n    expect(r.error).toContain('not allowed');\n  });\n\n  it('accepts safe whitelisted command', () => {\n    expect(validateCommand('ls -la', ['ls']).valid).toBe(true);\n  });\n\n  it('rejects empty command', () => {\n    expect(validateCommand('   ').valid).toBe(false);\n  });\n});\n\ndescribe('validateTags', () => {\n  it('accepts valid tags', () => {\n    const r = validateTags(['alpha', 'beta-v2', 'prod:feature']);\n    expect(r.valid).toBe(true);\n    expect(r.sanitized).toHaveLength(3);\n  });\n\n  it('rejects non-array', () => {\n    expect(validateTags('tag').valid).toBe(false);\n  });\n\n  it('rejects tags with spaces', () => {\n    expect(validateTags(['invalid tag']).valid).toBe(false);\n  });\n\n  it('rejects tags over 100 chars', () => {\n    expect(validateTags(['x'.repeat(101)]).valid).toBe(false);\n  });\n\n  it('skips empty tags', () => {\n    const r = validateTags(['  ', 'valid']);\n    expect(r.valid).toBe(true);\n    expect((r.sanitized as string[]).length).toBe(1);\n  });\n});\n\ndescribe('isValidIdentifier', () => {\n  it('accepts valid identifiers', () => {\n    expect(isValidIdentifier('myAgent_1')).toBe(true);\n    expect(isValidIdentifier('_private')).toBe(true);\n  });\n\n  it('rejects identifiers starting with digits', () => {\n    expect(isValidIdentifier('1agent')).toBe(false);\n  });\n\n  it('rejects identifiers over 256 chars', () => {\n    expect(isValidIdentifier('a'.repeat(257))).toBe(false);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/security/secure-random.test.ts\nimport { describe, it, expect } from 'vitest';\nimport {\n  generateSecureId, generateUUID, generateSecureToken,\n  generateShortId, generateSessionId, secureRandomInt, secureRandomChoice, secureShuffleArray,\n} from '../../src/security/secure-random.js';\n\ndescribe('generateSecureId', () => {\n  it('generates unique IDs', () => {\n    const ids = new Set(Array.from({ length: 100 }, () => generateSecureId()));\n    expect(ids.size).toBe(100);\n  });\n\n  it('applies prefix', () => {\n    expect(generateSecureId('agent')).toMatch(/^agent_/);\n  });\n});\n\ndescribe('generateUUID', () => {\n  it('generates valid UUID v4 format', () => {\n    const uuid = generateUUID();\n    expect(uuid).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i);\n  });\n});\n\ndescribe('secureRandomInt', () => {\n  it('returns value within [min, max]', () => {\n    for (let i = 0; i < 100; i++) {\n      const v = secureRandomInt(5, 10);\n      expect(v).toBeGreaterThanOrEqual(5);\n      expect(v).toBeLessThanOrEqual(10);\n    }\n  });\n\n  it('handles single-value range', () => {\n    expect(secureRandomInt(7, 7)).toBe(7);\n  });\n});\n\ndescribe('secureRandomChoice', () => {\n  it('selects element from array', () => {\n    const arr = ['a', 'b', 'c'];\n    const result = secureRandomChoice(arr);\n    expect(arr).toContain(result);\n  });\n\n  it('throws on empty array', () => {\n    expect(() => secureRandomChoice([])).toThrow();\n  });\n});\n\ndescribe('secureShuffleArray', () => {\n  it('returns array with same elements', () => {\n    const arr = [1, 2, 3, 4, 5];\n    const shuffled = secureShuffleArray(arr);\n    expect(shuffled).toHaveLength(arr.length);\n    expect(shuffled.sort()).toEqual([...arr].sort());\n  });\n\n  it('does not mutate original array', () => {\n    const arr = [1, 2, 3];\n    const orig = [...arr];\n    secureShuffleArray(arr);\n    expect(arr).toEqual(orig);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// Additional tests to add to src/hooks/hooks.test.ts:\n\ndescribe('HookRegistry — missing coverage', () => {\n  it('unregisterAll(event) removes only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n\n    const removed = registry.unregisterAll(HookEvent.PreToolUse);\n    expect(removed).toBe(2);\n    expect(registry.count(HookEvent.PreToolUse)).toBe(0);\n    expect(registry.count(HookEvent.PostToolUse)).toBe(1);\n  });\n\n  it('unregisterAll() removes everything', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    const removed = registry.unregisterAll();\n    expect(removed).toBe(2);\n    expect(registry.count()).toBe(0);\n  });\n\n  it('getHook returns definition for valid id', () => {\n    const handler = vi.fn();\n    const id = registry.register(HookEvent.PreEdit, handler);\n    const def = registry.getHook(id);\n    expect(def).toBeDefined();\n    expect(def?.handler).toBe(handler);\n  });\n\n  it('getHook returns undefined for unknown id', () => {\n    expect(registry.getHook('no-such-id')).toBeUndefined();\n  });\n\n  it('count(event) counts only that event', () => {\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PreToolUse, vi.fn());\n    registry.register(HookEvent.PostToolUse, vi.fn());\n    expect(registry.count(HookEvent.PreToolUse)).toBe(2);\n    expect(registry.count()).toBe(3);\n  });\n});\n\ndescribe('HookExecutor — missing coverage', () => {\n  it('continueChain=false stops chain but aborted remains false', async () => {\n    const h1 = vi.fn(async () => ({ success: true }));\n    const h2 = vi.fn(async () => ({ success: true, continueChain: false }));\n    const h3 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1, HookPriority.High);\n    registry.register(HookEvent.PreEdit, h2, HookPriority.Normal);\n    registry.register(HookEvent.PreEdit, h3, HookPriority.Low);\n\n    const result = await executor.execute(HookEvent.PreEdit, { event: HookEvent.PreEdit, timestamp: new Date() });\n    expect(result.hooksExecuted).toBe(2);\n    expect(h3).not.toHaveBeenCalled();\n    expect(result.aborted).toBe(false); // chain stopped but not aborted\n  });\n\n  it('collectResults=false returns empty results array', async () => {\n    registry.register(HookEvent.PreEdit, async () => ({ success: true }));\n    const result = await executor.execute(\n      HookEvent.PreEdit,\n      { event: HookEvent.PreEdit, timestamp: new Date() },\n      { collectResults: false }\n    );\n    expect(result.results).toHaveLength(0);\n  });\n\n  it('executeParallel throws when arrays have different lengths', async () => {\n    await expect(\n      executor.executeParallel(\n        [HookEvent.PreEdit],\n        [{ event: HookEvent.PreEdit, timestamp: new Date() }, { event: HookEvent.PostEdit, timestamp: new Date() }]\n      )\n    ).rejects.toThrow('same length');\n  });\n\n  it('executeSequential aborts after failing event when continueOnError is false', async () => {\n    const h1 = vi.fn(async () => { throw new Error('fail'); });\n    const h2 = vi.fn(async () => ({ success: true }));\n    registry.register(HookEvent.PreEdit, h1);\n    registry.register(HookEvent.PostEdit, h2);\n\n    const result = await executor.executeSequential(\n      [HookEvent.PreEdit, HookEvent.PostEdit],\n      { event: HookEvent.PreEdit, timestamp: new Date() }\n    );\n    expect(result.aborted).toBe(true);\n    expect(h2).not.toHaveBeenCalled();\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// Additional tests to add to src/events/event-store.test.ts:\n\ndescribe('EventStore — missing coverage', () => {\n  it('throws when methods called before initialize()', async () => {\n    const uninit = new EventStore({ databasePath: ':memory:' });\n    await expect(uninit.append(createAgentSpawnedEvent('a', 'coder', 'core', [])))\n      .rejects.toThrow('not initialized');\n  });\n\n  it('emits event:appended for each append', async () => {\n    const handler = vi.fn();\n    eventStore.on('event:appended', handler);\n    await eventStore.append(createAgentSpawnedEvent('a1', 'coder', 'core', []));\n    expect(handler).toHaveBeenCalledOnce();\n  });\n\n  it('emits snapshot:recommended when version hits threshold', async () => {\n    const store = new EventStore({ databasePath: ':memory:', snapshotThreshold: 2 });\n    await store.initialize();\n    const handler = vi.fn();\n    store.on('snapshot:recommended', handler);\n\n    await store.append(createAgentSpawnedEvent('agg', 'coder', 'core', []));\n    await store.append(createAgentStartedEvent('agg'));\n    expect(handler).toHaveBeenCalledOnce();\n    await store.shutdown();\n  });\n\n  it('query filters by afterTimestamp', async () => {\n    const before = Date.now();\n    await new Promise(r => setTimeout(r, 5));\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const events = await eventStore.query({ afterTimestamp: before });\n    expect(events).toHaveLength(1);\n  });\n\n  it('query filters by beforeTimestamp', async () => {\n    await eventStore.append(createAgentSpawnedEvent('x', 'coder', 'core', []));\n    const after = Date.now() + 1000;\n    const events = await eventStore.query({ beforeTimestamp: after });\n    expect(events.length).toBeGreaterThan(0);\n    const noEvents = await eventStore.query({ beforeTimestamp: 0 });\n    expect(noEvents).toHaveLength(0);\n  });\n\n  it('query filters by fromVersion', async () => {\n    await eventStore.append(createAgentSpawnedEvent('v', 'coder', 'core', []));\n    await eventStore.append(createAgentStartedEvent('v'));\n    const events = await eventStore.query({ aggregateIds: ['v'], fromVersion: 2 });\n    expect(events).toHaveLength(1);\n    expect(events[0].version).toBe(2);\n  });\n\n  it('getSnapshot returns null for unknown aggregate', async () => {\n    const snap = await eventStore.getSnapshot('no-such-aggregate');\n    expect(snap).toBeNull();\n  });\n\n  it('stats show oldest/newest timestamps after appending', async () => {\n    await eventStore.append(createAgentSpawnedEvent('a', 'coder', 'core', []));\n    const stats = await eventStore.getStats();\n    expect(stats.oldestEvent).not.toBeNull();\n    expect(stats.newestEvent).not.toBeNull();\n    expect(stats.newestEvent!).toBeGreaterThanOrEqual(stats.oldestEvent!);\n  });\n\n  it('stats count snapshots', async () => {\n    await eventStore.saveSnapshot({\n      aggregateId: 'a1', aggregateType: 'agent',\n      version: 1, state: {}, timestamp: Date.now(),\n    });\n    const stats = await eventStore.getStats();\n    expect(stats.snapshotCount).toBe(1);\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/core/orchestrator/event-coordinator.test.ts\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { EventCoordinator } from '../../../src/core/orchestrator/event-coordinator.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\nimport { SystemEventTypes } from '../../../src/core/interfaces/event.interface.js';\n\ndescribe('EventCoordinator', () => {\n  let coordinator: EventCoordinator;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(async () => {\n    bus = createEventBus();\n    coordinator = new EventCoordinator(bus);\n    await coordinator.initialize();\n  });\n\n  afterEach(async () => { await coordinator.shutdown(); });\n\n  it('registers handlers and routes events', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('test:event', handler);\n    await bus.emitAsync('test:event', { data: 1 });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('unregisters handlers', async () => {\n    const handler = vi.fn();\n    coordinator.registerHandler('ev', handler);\n    coordinator.unregisterHandler('ev', handler);\n    await bus.emitAsync('ev', {});\n    expect(handler).not.toHaveBeenCalled();\n  });\n\n  it('initialize is idempotent', async () => {\n    await coordinator.initialize(); // second call — should not throw or double-register\n    expect(coordinator.isInitialized()).toBe(true);\n  });\n\n  it('shutdown clears handlers', async () => {\n    coordinator.registerHandler('ev', vi.fn());\n    await coordinator.shutdown();\n    expect(coordinator.getRegisteredTypes()).toHaveLength(0);\n    expect(coordinator.isInitialized()).toBe(false);\n  });\n\n  it('getHandlerCount returns correct count', () => {\n    coordinator.registerHandler('ev', vi.fn());\n    coordinator.registerHandler('ev', vi.fn());\n    expect(coordinator.getHandlerCount('ev')).toBe(2);\n    expect(coordinator.getHandlerCount('other')).toBe(0);\n  });\n\n  it('handler errors do not throw from route()', async () => {\n    coordinator.registerHandler('ev', async () => { throw new Error('boom'); });\n    await expect(coordinator.route({ id: '1', type: 'ev', timestamp: new Date(), source: 'test', payload: {} }))\n      .resolves.toBeUndefined();\n  });\n});"
+      },
+      {
+        "language": "ts",
+        "code": "// __tests__/core/orchestrator/task-manager.test.ts (skeleton)\nimport { describe, it, expect, vi, beforeEach } from 'vitest';\nimport { TaskQueue, TaskManager } from '../../../src/core/orchestrator/task-manager.js';\nimport { createEventBus } from '../../../src/core/event-bus.js';\n\ndescribe('TaskQueue', () => {\n  let queue: TaskQueue;\n  beforeEach(() => { queue = new TaskQueue(); });\n\n  it('dequeues in priority order', async () => {\n    const make = (id: string, priority: number) =>\n      ({ id, type: 'test', description: '', priority, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('low', 10));\n    await queue.enqueue(make('high', 90));\n    await queue.enqueue(make('mid', 50));\n    expect((await queue.dequeue())!.id).toBe('high');\n    expect((await queue.dequeue())!.id).toBe('mid');\n    expect((await queue.dequeue())!.id).toBe('low');\n  });\n\n  it('updatePriority re-sorts queue', async () => {\n    const make = (id: string, p: number) =>\n      ({ id, type: 't', description: '', priority: p, createdAt: new Date(), status: 'pending' as const });\n    await queue.enqueue(make('a', 10));\n    await queue.enqueue(make('b', 20));\n    await queue.updatePriority('a', 100);\n    expect((await queue.dequeue())!.id).toBe('a');\n  });\n\n  it('remove returns false for missing task', async () => {\n    expect(await queue.remove('ghost')).toBe(false);\n  });\n});\n\ndescribe('TaskManager', () => {\n  let manager: TaskManager;\n  let bus: ReturnType<typeof createEventBus>;\n\n  beforeEach(() => {\n    bus = createEventBus();\n    manager = new TaskManager(bus);\n  });\n\n  it('createTask emits TASK_CREATED event', async () => {\n    const handler = vi.fn();\n    bus.on('task:created', handler);\n    await manager.createTask({ type: 'work', description: 'Do stuff' });\n    expect(handler).toHaveBeenCalled();\n  });\n\n  it('assignTask throws for unknown task', async () => {\n    await expect(manager.assignTask('ghost', 'agent-1')).rejects.toThrow('Task not found');\n  });\n\n  it('getTasks filters by status', async () => {\n    const t1 = await manager.createTask({ type: 'a', description: 'd' });\n    await manager.createTask({ type: 'b', description: 'd' });\n    await manager.assignTask(t1.id, 'agent-1');\n    const assigned = manager.getTasks({ status: 'assigned' });\n    expect(assigned).toHaveLength(1);\n    expect(assigned[0].id).toBe(t1.id);\n  });\n\n  it('getMetrics tracks completed and failed counts', async () => {\n    const t = await manager.createTask({ type: 'x', description: 'd' });\n    await manager.completeTask(t.id, { taskId: t.id, success: true, duration: 100 });\n    const m = manager.getMetrics();\n    expect(m.completedTasks).toBe(1);\n    expect(m.totalTasks).toBe(1);\n  });\n});"
+      }
+    ]
+  },
+  "durationMs": 264624,
+  "model": "sonnet",
+  "sandboxMode": "permissive",
+  "workerType": "testgaps",
+  "timestamp": "2026-04-28T12:36:51.593Z",
+  "executionId": "testgaps_1777379546969_dvf2a1"
+}

package/.claude-flow/metrics/codebase-map.json

@@ -0,0 +1,11 @@
+{
+  "timestamp": "2026-04-28T12:54:27.007Z",
+  "projectRoot": "/Users/cohen/Projects/ruflo/v3/@claude-flow/shared",
+  "structure": {
+    "hasPackageJson": true,
+    "hasTsConfig": true,
+    "hasClaudeConfig": false,
+    "hasClaudeFlow": true
+  },
+  "scannedAt": 1777380867007
+}

package/.claude-flow/metrics/consolidation.json

@@ -0,0 +1,6 @@
+{
+  "timestamp": "2026-04-28T12:30:26.971Z",
+  "patternsConsolidated": 0,
+  "memoryCleaned": 0,
+  "duplicatesRemoved": 0
+}

package/.claude-flow/sessions/current.json

@@ -0,0 +1,13 @@
+{
+  "id": "session-1777379065535",
+  "startedAt": "2026-04-28T12:24:25.535Z",
+  "platform": "darwin",
+  "cwd": "/Users/cohen/Projects/ruflo/v3/@claude-flow/shared",
+  "context": {},
+  "metrics": {
+    "edits": 2,
+    "commands": 0,
+    "tasks": 0,
+    "errors": 0
+  }
+}

package/.swarm/hnsw.metadata.json

@@ -0,0 +1 @@
+[["entry_1777379065632_2bc6n",{"id":"entry_1777379065632_2bc6n","key":"-","namespace":"security_analysis","content":"name: RuVector Security Analysis\ndescription: Completed security audit of ruvector codebase\ntype: project\n---"}],["entry_1777379065806_kajfc",{"id":"entry_1777379065806_kajfc","key":"date-2026-04-02","namespace":"security_analysis","content":"Completed comprehensive security analysis of the ruvector npm package codebase across all critical components including CLI, MCP server, and core modules.\n\n**Key Findings:**\n- No hardcoded secrets or API keys detected\n- Good input validation in place for shell commands\n- Path validation is implemented with comprehensive checks\n- Most critical vulnerabilities mitigated through sanitization\n\n**Critical Issues:** 0\n**High Issues:** 2  \n**Medium Issues:** 3\n**Low Issues:** 2\n**Risk Score:** 28/100\n\n"}],["entry_1777379065826_8zi4lo",{"id":"entry_1777379065826_8zi4lo","key":"regtest","namespace":"sessions","content":"Session started: regtest"}],["entry_1777379065834_og8bcw",{"id":"entry_1777379065834_og8bcw","key":"test-123","namespace":"tasks","content":"Task completed: test-123"}],["entry_1777379065842_mq07aw",{"id":"entry_1777379065842_mq07aw","key":"test-fix-1","namespace":"tasks","content":"Task completed: test-fix-1"}]]