agentic-qe 3.11.3 → 3.11.4

package/dist/cli/chunks/{validate-swarm-FNK3GCJ4.js → validate-swarm-QD3LYPUF.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{a as i,b as k,c as d,d as p}from"./chunk-A4NYOH7P.js";import"./chunk-3CBYKKRW.js";import{a as v}from"./chunk-FZLCKIPP.js";import{a as h}from"./chunk-CGKHG46K.js";import"./chunk-7S7QF4HJ.js";import"./chunk-WLLGPGQY.js";import"./chunk-3BREKEL5.js";import"./chunk-6KKKPVOF.js";import"./chunk-S2T2BXUL.js";import"./chunk-P4UGVVVX.js";import"./chunk-NBOEXSV2.js";import"./chunk-SFGBC5RP.js";import"./chunk-O7ZDQ5FF.js";import"./chunk-JVXPKHND.js";import"./chunk-7FVWETN4.js";import"./chunk-UNH2DE2G.js";import"./chunk-7UOH55UT.js";import"./chunk-BA7PJS3Y.js";import"./chunk-G6MPXBCD.js";import"./chunk-UTGW75AZ.js";import"./chunk-REZ2GZQ3.js";import"./chunk-LGEZ3ZJX.js";import"./chunk-UFZCHVLH.js";import"./chunk-DNOBN3IR.js";import"./chunk-2OUXYSQV.js";import"./chunk-WV66MXJI.js";import"./chunk-WTKT2AD3.js";import"./chunk-77QJQRL2.js";import"./chunk-36HTS4EP.js";import"./chunk-OVEG5MEL.js";import"./chunk-PLQADRA6.js";import"./chunk-L6PH7JIE.js";import"./chunk-PUK5NE47.js";import{Command as x}from"commander";import o from"chalk";function j(e,t,n){let c=new x("validate").description("Validation commands for skills and agents");return c.command("swarm").description("Validate skills in parallel using Claude Flow swarms (ADR-056)").option("-s, --skills <skills>",'Comma-separated list of skills to validate, or "all" for P0 skills',"all").option("-m, --models <models>","Comma-separated list of models to validate against",p.join(",")).option("-t, --topology <topology>","Swarm topology: hierarchical or mesh","hierarchical").option("--max-concurrent <number>","Maximum concurrent skill validations",String(i.maxConcurrentSkills)).option("--max-models <number>","Maximum concurrent models per skill",String(i.maxConcurrentModels)).option("--timeout <ms>","Timeout per validation in milliseconds",String(i.timeout)).option("--no-retry","Disable retries on failure").option("-v, --verbose","Show detailed output").option("--json","Output results as JSON").action(async l=>{if(await n())try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a as i,b as k,c as d,d as p}from"./chunk-D6CKKNYC.js";import"./chunk-SL3SNOO2.js";import{a as v}from"./chunk-VO6YJGB4.js";import{a as h}from"./chunk-EONKMHKO.js";import"./chunk-4JFH3MVA.js";import"./chunk-TU6YN43Q.js";import"./chunk-3FJZMQJ7.js";import"./chunk-NFJT7XXR.js";import"./chunk-BRLUNIR4.js";import"./chunk-QSDIY3E2.js";import"./chunk-IF3HPQNV.js";import"./chunk-YKSWC7I4.js";import"./chunk-54B6P2WS.js";import"./chunk-TPMBFARK.js";import"./chunk-LW5DHT3Z.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-LLUPRGOR.js";import"./chunk-VJGHRWMH.js";import"./chunk-NSPCZPTB.js";import"./chunk-O7PVZ32A.js";import"./chunk-PEIQDQXN.js";import"./chunk-BMQDELPA.js";import"./chunk-TCWR6TDN.js";import"./chunk-YUHM72VQ.js";import"./chunk-PQUXFSN6.js";import"./chunk-7AWK43JN.js";import"./chunk-VCUCD3B5.js";import"./chunk-QJ5NCYJ3.js";import"./chunk-TQ373GGI.js";import"./chunk-7QTB5XIQ.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";import{Command as x}from"commander";import o from"chalk";function j(e,t,n){let c=new x("validate").description("Validation commands for skills and agents");return c.command("swarm").description("Validate skills in parallel using Claude Flow swarms (ADR-056)").option("-s, --skills <skills>",'Comma-separated list of skills to validate, or "all" for P0 skills',"all").option("-m, --models <models>","Comma-separated list of models to validate against",p.join(",")).option("-t, --topology <topology>","Swarm topology: hierarchical or mesh","hierarchical").option("--max-concurrent <number>","Maximum concurrent skill validations",String(i.maxConcurrentSkills)).option("--max-models <number>","Maximum concurrent models per skill",String(i.maxConcurrentModels)).option("--timeout <ms>","Timeout per validation in milliseconds",String(i.timeout)).option("--no-retry","Disable retries on failure").option("-v, --verbose","Show detailed output").option("--json","Output results as JSON").action(async l=>{if(await n())try{console.log(o.blue(`
  Swarm Skill Validation
 `));let r=l.skills==="all"?[...d]:l.skills.split(",").map(y=>y.trim()),u=l.models.split(",").map(y=>y.trim()),g=P(l.topology),a={topology:g,maxConcurrentSkills:parseInt(l.maxConcurrent,10)||i.maxConcurrentSkills,maxConcurrentModels:parseInt(l.maxModels,10)||i.maxConcurrentModels,timeout:parseInt(l.timeout,10)||i.timeout,continueOnFailure:!0,retry:l.retry!==!1?i.retry:void 0};l.verbose&&(console.log(o.gray("Configuration:")),console.log(o.gray(`  Topology: ${a.topology}`)),console.log(o.gray(`  Skills: ${r.length}`)),console.log(o.gray(`  Models: ${u.length}`)),console.log(o.gray(`  Max Concurrent Skills: ${a.maxConcurrentSkills}`)),console.log(o.gray(`  Max Concurrent Models: ${a.maxConcurrentModels}`)),console.log(o.gray(`  Timeout: ${a.timeout}ms`)),console.log(o.gray(`  Retry: ${a.retry?"enabled":"disabled"}`)),console.log("")),console.log(o.cyan(`  Skills: ${r.join(", ")}`)),console.log(o.cyan(`  Models: ${u.join(", ")}`)),console.log(o.cyan(`  Topology: ${g}`)),console.log("");let m=await R(e),f=h(m),C=k(a,f),$=Date.now();console.log(o.yellow(`  Starting parallel validation...
 `));let b=await C.validateSkillsParallel(r,u),s=C.getSummary(b),w=Date.now()-$;l.json?T(s):D(s,l.verbose),console.log(o.blue(`

package/dist/cli/chunks/{vibium-E2CK2GBQ.js → vibium-2J3H2ITD.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{c as t}from"./chunk-PUK5NE47.js";import{createRequire as o}from"module";var i,e,a,c,l,p,s,m,u,d,A,f,h,_,b,v,L,n=t(()=>{i=o(import.meta.url),e=i("vibium"),a=e,{RuvectorLayer:c,TensorCompress:l,differentiableSearch:p,hierarchicalForward:s,getCompressionLevel:m,init:u,FlashAttention:d,DotProductAttention:A,MultiHeadAttention:f,HyperbolicAttention:h,LinearAttention:_,MoEAttention:b,SonaEngine:v,pipeline:L}=e||{}});n();export{A as DotProductAttention,d as FlashAttention,h as HyperbolicAttention,_ as LinearAttention,b as MoEAttention,f as MultiHeadAttention,c as RuvectorLayer,v as SonaEngine,l as TensorCompress,a as default,p as differentiableSearch,m as getCompressionLevel,s as hierarchicalForward,u as init,L as pipeline};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{c as t}from"./chunk-Y4AXOHW4.js";import{createRequire as o}from"module";var i,e,a,c,l,p,s,m,u,d,A,f,h,_,b,v,L,n=t(()=>{i=o(import.meta.url),e=i("vibium"),a=e,{RuvectorLayer:c,TensorCompress:l,differentiableSearch:p,hierarchicalForward:s,getCompressionLevel:m,init:u,FlashAttention:d,DotProductAttention:A,MultiHeadAttention:f,HyperbolicAttention:h,LinearAttention:_,MoEAttention:b,SonaEngine:v,pipeline:L}=e||{}});n();export{A as DotProductAttention,d as FlashAttention,h as HyperbolicAttention,_ as LinearAttention,b as MoEAttention,f as MultiHeadAttention,c as RuvectorLayer,v as SonaEngine,l as TensorCompress,a as default,p as differentiableSearch,m as getCompressionLevel,s as hierarchicalForward,u as init,L as pipeline};

package/dist/cli/chunks/visual-security-MPUG5HPI.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a}from"./chunk-A4OMK3FO.js";import"./chunk-ZSA6V5FH.js";import"./chunk-IQBZBUP5.js";import"./chunk-TPMBFARK.js";import"./chunk-LW5DHT3Z.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-LLUPRGOR.js";import"./chunk-VJGHRWMH.js";import"./chunk-NSPCZPTB.js";import"./chunk-PEIQDQXN.js";import"./chunk-BMQDELPA.js";import"./chunk-ICCTQ5LO.js";import"./chunk-TCWR6TDN.js";import"./chunk-YUHM72VQ.js";import"./chunk-PQUXFSN6.js";import"./chunk-7AWK43JN.js";import"./chunk-VCUCD3B5.js";import"./chunk-QJ5NCYJ3.js";import"./chunk-TQ373GGI.js";import"./chunk-7QTB5XIQ.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";export{a as VisualSecurityTool};

package/dist/cli/chunks/{web-tree-sitter-63VRNKZV.js → web-tree-sitter-KRNUOGKI.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import"./chunk-PUK5NE47.js";import{createRequire as t}from"module";var o=t(import.meta.url),e=o("web-tree-sitter"),i=e,{RuvectorLayer:n,TensorCompress:a,differentiableSearch:c,hierarchicalForward:s,getCompressionLevel:l,init:p,FlashAttention:m,DotProductAttention:u,MultiHeadAttention:d,HyperbolicAttention:A,LinearAttention:f,MoEAttention:h,SonaEngine:_,pipeline:b}=e||{};export{u as DotProductAttention,m as FlashAttention,A as HyperbolicAttention,f as LinearAttention,h as MoEAttention,d as MultiHeadAttention,n as RuvectorLayer,_ as SonaEngine,a as TensorCompress,i as default,c as differentiableSearch,l as getCompressionLevel,s as hierarchicalForward,p as init,b as pipeline};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import"./chunk-Y4AXOHW4.js";import{createRequire as t}from"module";var o=t(import.meta.url),e=o("web-tree-sitter"),i=e,{RuvectorLayer:n,TensorCompress:a,differentiableSearch:c,hierarchicalForward:s,getCompressionLevel:l,init:p,FlashAttention:m,DotProductAttention:u,MultiHeadAttention:d,HyperbolicAttention:A,LinearAttention:f,MoEAttention:h,SonaEngine:_,pipeline:b}=e||{};export{u as DotProductAttention,m as FlashAttention,A as HyperbolicAttention,f as LinearAttention,h as MoEAttention,d as MultiHeadAttention,n as RuvectorLayer,_ as SonaEngine,a as TensorCompress,i as default,c as differentiableSearch,l as getCompressionLevel,s as hierarchicalForward,p as init,b as pipeline};

package/dist/cli/chunks/{windsurf-installer-5BTCVOLH.js → windsurf-installer-PQIPH3WP.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{b as u}from"./chunk-ABD6JBNO.js";import{a as f,c as d}from"./chunk-LGEZ3ZJX.js";import"./chunk-PUK5NE47.js";d();import{existsSync as i,mkdirSync as h,readFileSync as g,writeFileSync as a}from"fs";import{join as p,dirname as v}from"path";var c=class{projectRoot;overwrite;options;generator;constructor(e){this.projectRoot=e.projectRoot,this.overwrite=e.overwrite??!1,this.options=e,this.generator=u()}async install(){let e={success:!0,mcpConfigured:!1,rulesInstalled:!1,errors:[],configPath:"",rulesPath:""};try{let t=this.generator.generateMcpConfig("windsurf",{memoryBackend:this.options.memoryBackend}),r=p(this.projectRoot,t.path);if(e.configPath=r,!i(r)||this.overwrite){let o=v(r);if(i(o)||h(o,{recursive:!0}),i(r)&&this.overwrite){let m=this.mergeExistingConfig(r,t.content);a(r,m)}else a(r,t.content);e.mcpConfigured=!0}let s=this.generator.generateBehavioralRules("windsurf"),n=p(this.projectRoot,s.path);if(e.rulesPath=n,!i(n)||this.overwrite){if(i(n)&&this.overwrite){let o=this.mergeExistingRules(n,s.content);a(n,o)}else a(n,s.content);e.rulesInstalled=!0}}catch(t){e.success=!1,e.errors.push(`Windsurf installation failed: ${f(t)}`)}return e}mergeExistingConfig(e,t){try{let r=JSON.parse(g(e,"utf-8")),s=JSON.parse(t);return r.mcpServers||(r.mcpServers={}),Object.assign(r.mcpServers,s.mcpServers),JSON.stringify(r,null,2)+`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{b as u}from"./chunk-JPENUVCI.js";import{a as f,c as d}from"./chunk-PEIQDQXN.js";import"./chunk-Y4AXOHW4.js";d();import{existsSync as i,mkdirSync as h,readFileSync as g,writeFileSync as a}from"fs";import{join as p,dirname as v}from"path";var c=class{projectRoot;overwrite;options;generator;constructor(e){this.projectRoot=e.projectRoot,this.overwrite=e.overwrite??!1,this.options=e,this.generator=u()}async install(){let e={success:!0,mcpConfigured:!1,rulesInstalled:!1,errors:[],configPath:"",rulesPath:""};try{let t=this.generator.generateMcpConfig("windsurf",{memoryBackend:this.options.memoryBackend}),r=p(this.projectRoot,t.path);if(e.configPath=r,!i(r)||this.overwrite){let o=v(r);if(i(o)||h(o,{recursive:!0}),i(r)&&this.overwrite){let m=this.mergeExistingConfig(r,t.content);a(r,m)}else a(r,t.content);e.mcpConfigured=!0}let s=this.generator.generateBehavioralRules("windsurf"),n=p(this.projectRoot,s.path);if(e.rulesPath=n,!i(n)||this.overwrite){if(i(n)&&this.overwrite){let o=this.mergeExistingRules(n,s.content);a(n,o)}else a(n,s.content);e.rulesInstalled=!0}}catch(t){e.success=!1,e.errors.push(`Windsurf installation failed: ${f(t)}`)}return e}mergeExistingConfig(e,t){try{let r=JSON.parse(g(e,"utf-8")),s=JSON.parse(t);return r.mcpServers||(r.mcpServers={}),Object.assign(r.mcpServers,s.mcpServers),JSON.stringify(r,null,2)+`
 `}catch{return t}}mergeExistingRules(e,t){try{let r=g(e,"utf-8");return r.includes("Agentic QE")||r.includes("fleet_init")?r:r.trimEnd()+`
 
 ---

package/dist/cli/chunks/{witness-chain-6CUUGISD.js → witness-chain-HPLOYPS7.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{a,b,c,d,e,f,g}from"./chunk-S2T2BXUL.js";import"./chunk-UNH2DE2G.js";import"./chunk-7UOH55UT.js";import"./chunk-L6PH7JIE.js";import"./chunk-PUK5NE47.js";export{c as PersistentWitnessChain,a as SPRTAccumulator,b as WitnessChain,f as createPersistentWitnessChain,e as createWitnessChain,d as createWitnessChainSQLitePersistence,g as isWitnessChainFeatureEnabled};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a,b,c,d,e,f,g}from"./chunk-BRLUNIR4.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";export{c as PersistentWitnessChain,a as SPRTAccumulator,b as WitnessChain,f as createPersistentWitnessChain,e as createWitnessChain,d as createWitnessChainSQLitePersistence,g as isWitnessChainFeatureEnabled};

package/dist/cli/chunks/witness-chain-Q4BZHPDF.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i}from"./chunk-5AQ7FXYG.js";import"./chunk-TPMBFARK.js";import"./chunk-LW5DHT3Z.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-LLUPRGOR.js";import"./chunk-VJGHRWMH.js";import"./chunk-NSPCZPTB.js";import"./chunk-PEIQDQXN.js";import"./chunk-TCWR6TDN.js";import"./chunk-YUHM72VQ.js";import"./chunk-PQUXFSN6.js";import"./chunk-7AWK43JN.js";import"./chunk-VCUCD3B5.js";import"./chunk-QJ5NCYJ3.js";import"./chunk-TQ373GGI.js";import"./chunk-7QTB5XIQ.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";export{a as GENESIS_PREV_HASH,f as WitnessChain,i as _resetWitnessChainForTests,h as createWitnessChain,g as getWitnessChain,d as hashWith,e as serializeEntry,b as sha256,c as shake256};

package/dist/cli/chunks/{workflow-V7ED22XT.js → workflow-OAQ3FWCY.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{b as $}from"./chunk-EXCU4J7T.js";import"./chunk-LW5TUN5F.js";import{d as R}from"./chunk-WYJFVSEB.js";import{b as k,c as C,d as b}from"./chunk-RXN5DWVM.js";import{c as W}from"./chunk-G6MPXBCD.js";import"./chunk-REZ2GZQ3.js";import"./chunk-LGEZ3ZJX.js";import"./chunk-PUK5NE47.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{b as $}from"./chunk-2KNFS3L5.js";import"./chunk-SRVTNG6L.js";import{d as R}from"./chunk-6545AS2J.js";import{b as k,c as C,d as b}from"./chunk-ARPBG6FQ.js";import{c as W}from"./chunk-VJGHRWMH.js";import"./chunk-O7PVZ32A.js";import"./chunk-PEIQDQXN.js";import"./chunk-Y4AXOHW4.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
  Running workflow from: ${t}
 `));let s=k(c);if(!s.success||!s.workflow){console.log(o.red("Failed to parse pipeline:"));for(let w of s.errors)console.log(o.red(`   ${w}`));await a(1)}let r={...W(l.params,"params")};if(s.pipeline){for(let w of s.pipeline.stages)if(w.params)for(let[S,h]of Object.entries(w.params))r[S]=h}if(!d.workflowOrchestrator.getWorkflow(s.workflow.id)){let w=d.workflowOrchestrator.registerWorkflow(s.workflow);w.success||(console.log(o.red(`Failed to register workflow: ${w.error.message}`)),await a(1))}let n=await d.workflowOrchestrator.executeWorkflow(s.workflow.id,r);if(!n.success){console.log(o.red(`Failed to start workflow: ${n.error.message}`)),await a(1);return}let p=n.value;if(console.log(o.cyan(`  Execution ID: ${p}`)),console.log(o.gray(`  Workflow: ${s.workflow.name}`)),console.log(o.gray(`  Stages: ${s.workflow.steps.length}`)),console.log(""),l.watch){console.log(o.blue(`Workflow Progress:
 `));let w,S=Date.now();for(;;){let g=d.workflowOrchestrator.getWorkflowStatus(p);if(!g)break;if(!w||w.progress!==g.progress||w.status!==g.status||JSON.stringify(w.currentSteps)!==JSON.stringify(g.currentSteps)){process.stdout.write("\r\x1B[K");let v="\u2588".repeat(Math.floor(g.progress/5))+"\u2591".repeat(20-Math.floor(g.progress/5)),D=g.status==="completed"?o.green:g.status==="failed"?o.red:g.status==="running"?o.yellow:o.gray;console.log(`  [${v}] ${g.progress}% - ${D(g.status)}`),g.currentSteps.length>0&&l.verbose&&console.log(o.gray(`    Running: ${g.currentSteps.join(", ")}`)),w=g}if(g.status==="completed"||g.status==="failed"||g.status==="cancelled")break;await new Promise(v=>setTimeout(v,500))}let h=d.workflowOrchestrator.getWorkflowStatus(p);if(h){console.log("");let g=h.duration||Date.now()-S;h.status==="completed"?(console.log(o.green("Workflow completed successfully")),console.log(o.gray(`   Duration: ${$(g)}`)),console.log(o.gray(`   Completed: ${h.completedSteps.length} stages`)),h.skippedSteps.length>0&&console.log(o.yellow(`   Skipped: ${h.skippedSteps.length} stages`))):h.status==="failed"?(console.log(o.red("Workflow failed")),console.log(o.red(`   Error: ${h.error}`)),console.log(o.gray(`   Failed stages: ${h.failedSteps.join(", ")}`))):console.log(o.yellow(`Workflow ${h.status}`))}}else console.log(o.green("Workflow execution started")),console.log(o.gray(`   Use 'aqe workflow status ${p}' to check progress`));console.log(""),await a(0)}catch(s){console.error(o.red(`
@@ -35,10 +35,10 @@ Workflow cancelled: ${t}
 `)):console.log(o.red(`
 Failed to cancel workflow: ${l.error.message}
 `)),await a(l.success?0:1)}catch(l){console.error(o.red(`
-Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-MP5P7KZF.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
+Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-4DGHFYY3.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
  Browser Workflow Templates:
 `));for(let u of e.data.availableTemplates)console.log(`  ${o.cyan(u)}`);console.log("")}else console.log(o.red(`Failed: ${e.error||"Unknown error"}`));await a(0)}catch(t){console.error(o.red(`
-Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-MP5P7KZF.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-JNXJV4B2.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
+Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-4DGHFYY3.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-YBVXLA6O.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
 File not found: ${p}
 `)),await a(1)),f.workflowYaml=i.readFileSync(p,"utf-8")}else f.templateName=t;else console.log(o.red(`
 Provide a template name or --yaml. Use "workflow browser-list" to see templates.

package/dist/cli/chunks/workflow-orchestrator-4NDWECYK.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a,b,c,d}from"./chunk-WMIRAD3J.js";import"./chunk-4BFCLSDN.js";import"./chunk-TPMBFARK.js";import"./chunk-LW5DHT3Z.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-LLUPRGOR.js";import"./chunk-VJGHRWMH.js";import"./chunk-NSPCZPTB.js";import"./chunk-O7PVZ32A.js";import"./chunk-PEIQDQXN.js";import"./chunk-BMQDELPA.js";import"./chunk-TCWR6TDN.js";import"./chunk-YUHM72VQ.js";import"./chunk-PQUXFSN6.js";import"./chunk-7AWK43JN.js";import"./chunk-VCUCD3B5.js";import"./chunk-QJ5NCYJ3.js";import"./chunk-TQ373GGI.js";import"./chunk-7QTB5XIQ.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";export{b as DEFAULT_WORKFLOW_CONFIG,a as WorkflowEvents,c as WorkflowOrchestrator,d as createWorkflowOrchestrator};

package/dist/cli/chunks/{wrappers-7S3NTTLW.js → wrappers-UPIU6S5S.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.3");process.exit(0)}
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-6IHB3T6M.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-22CUJA33.js";import"./chunk-JVXPKHND.js";import"./chunk-7FVWETN4.js";import"./chunk-UNH2DE2G.js";import"./chunk-7UOH55UT.js";import"./chunk-BA7PJS3Y.js";import"./chunk-G6MPXBCD.js";import"./chunk-UTGW75AZ.js";import"./chunk-LGEZ3ZJX.js";import"./chunk-DNOBN3IR.js";import"./chunk-2OUXYSQV.js";import"./chunk-WV66MXJI.js";import"./chunk-WTKT2AD3.js";import"./chunk-77QJQRL2.js";import"./chunk-36HTS4EP.js";import"./chunk-OVEG5MEL.js";import"./chunk-PLQADRA6.js";import"./chunk-L6PH7JIE.js";import"./chunk-PUK5NE47.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.4");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-KYTFIP6R.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-G3TFNY4T.js";import"./chunk-TPMBFARK.js";import"./chunk-LW5DHT3Z.js";import"./chunk-XXRTWG7O.js";import"./chunk-6GYGAW53.js";import"./chunk-LLUPRGOR.js";import"./chunk-VJGHRWMH.js";import"./chunk-NSPCZPTB.js";import"./chunk-PEIQDQXN.js";import"./chunk-TCWR6TDN.js";import"./chunk-YUHM72VQ.js";import"./chunk-PQUXFSN6.js";import"./chunk-7AWK43JN.js";import"./chunk-VCUCD3B5.js";import"./chunk-QJ5NCYJ3.js";import"./chunk-TQ373GGI.js";import"./chunk-7QTB5XIQ.js";import"./chunk-7ADD2ZQL.js";import"./chunk-Y4AXOHW4.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};

package/dist/coordination/consensus/providers/ollama-provider.js

@@ -11,6 +11,7 @@
 import { BaseModelProvider } from '../model-provider';
 import { CONSENSUS_CONSTANTS, OLLAMA_CONSTANTS } from '../../constants.js';
 import { toErrorMessage, toError } from '../../../shared/error-utils.js';
+import { resolveOllamaBaseUrl } from '../../../shared/llm/ollama-url.js';
 // ============================================================================
 // Model Information
 // ============================================================================
@@ -51,7 +52,7 @@ export function getCodeOllamaModels() {
 // Ollama Provider Implementation
 // ============================================================================
 const DEFAULT_CONFIG = {
-    baseUrl: OLLAMA_CONSTANTS.DEFAULT_BASE_URL,
+    baseUrl: resolveOllamaBaseUrl(OLLAMA_CONSTANTS.DEFAULT_BASE_URL),
     defaultModel: 'llama3.1',
     defaultTimeout: CONSENSUS_CONSTANTS.OLLAMA_TIMEOUT_MS, // 5 minutes (local models can be slow)
     maxRetries: 2,
@@ -330,7 +331,7 @@ export function createMultiOllamaProviders(models = getRecommendedOllamaModels()
  * @param baseUrl - Ollama server URL
  * @returns True if Ollama is running and accessible
  */
-export async function isOllamaAvailable(baseUrl = 'http://localhost:11434') {
+export async function isOllamaAvailable(baseUrl = resolveOllamaBaseUrl(OLLAMA_CONSTANTS.DEFAULT_BASE_URL)) {
     try {
         const controller = new AbortController();
         const timeoutId = setTimeout(() => controller.abort(), 5000);

package/dist/integrations/ruvector/proof-gate.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Tamper-evident hash-chain audit gate — a faithful, dependency-free TypeScript
+ * port of RuVector's `ruvector-proof-gate` `HashChainGate` (upstream ADR-194;
+ * AQE-side integration decision: ADR-116).
+ *
+ * Why ported rather than bound: the Rust crate ships no NAPI/WASM binding, and
+ * the algorithm is small and exact. This uses only Node's `crypto` (no native
+ * dep) and opens NO database — the chain lives in memory and is serialized via
+ * {@link HashChainGate.toJSON}/{@link HashChainGate.fromJSON} so a caller can
+ * persist it through the existing unified `memory.db` (never a competing store).
+ *
+ * QE use-case: turn AQE's "verify row counts BEFORE and AFTER, never claim a
+ * sync/migration succeeded without proof" mandate into a cryptographic
+ * guarantee. Admit one payload per DB operation (table, op, row-count, content
+ * digest); a later `verifyIntegrity()` proves no admitted entry was mutated,
+ * reordered, or dropped.
+ *
+ * Commitment: commitment[n] = SHA256("ruvector:chain:" || commitment[n-1] ||
+ * payload_hash[n] || u64le(n)), seeded from a fixed genesis. Verification is
+ * O(n): replay from genesis. (Genesis differs from the Rust literal — we do not
+ * interoperate with Rust receipts, only self-verify.)
+ */
+/** Any admissible payload. Objects are canonicalized (sorted keys) before hashing. */
+export type GatePayload = string | Uint8Array | Record<string, unknown>;
+export interface WriteReceipt {
+    /** 0-based admission order. */
+    sequence: number;
+    /** SHA-256 of the canonical payload bytes (hex). */
+    payloadHash: string;
+    /** Chain commitment at this entry (hex) — binds it to every prior entry. */
+    chainCommitment: string;
+}
+/** Serializable chain state for persistence through the unified store. */
+export interface HashChainState {
+    seq: number;
+    head: string;
+    chain: string[];
+    payloadHashes: string[];
+}
+/**
+ * Sequential SHA-256 hash chain. O(1) per `admit`, O(n) `verifyIntegrity`.
+ * In-memory; persist/restore via {@link toJSON}/{@link fromJSON}.
+ */
+export declare class HashChainGate {
+    private seq;
+    private prev;
+    private readonly chain;
+    private readonly payloadHashes;
+    /** Admit a payload; returns a receipt committing the chain state. */
+    admit(payload: GatePayload): WriteReceipt;
+    /** True iff `receipt` matches the commitment recorded at its sequence. */
+    verifyReceipt(receipt: WriteReceipt): boolean;
+    /** Current chain head (hex). Changes after every successful `admit`. */
+    chainRoot(): string;
+    get length(): number;
+    get isEmpty(): boolean;
+    /**
+     * Full cryptographic re-derivation from genesis. Returns false if ANY
+     * commitment fails to re-derive — catches a mutated commitment, a mutated
+     * payload hash, a reorder, or a length mismatch.
+     */
+    verifyIntegrity(): boolean;
+    /** Snapshot for persistence through the unified store (no DB opened here). */
+    toJSON(): HashChainState;
+    /** Restore a chain from a {@link toJSON} snapshot. */
+    static fromJSON(state: HashChainState): HashChainGate;
+}
+//# sourceMappingURL=proof-gate.d.ts.map

package/dist/integrations/ruvector/proof-gate.js

@@ -0,0 +1,135 @@
+/**
+ * Tamper-evident hash-chain audit gate — a faithful, dependency-free TypeScript
+ * port of RuVector's `ruvector-proof-gate` `HashChainGate` (upstream ADR-194;
+ * AQE-side integration decision: ADR-116).
+ *
+ * Why ported rather than bound: the Rust crate ships no NAPI/WASM binding, and
+ * the algorithm is small and exact. This uses only Node's `crypto` (no native
+ * dep) and opens NO database — the chain lives in memory and is serialized via
+ * {@link HashChainGate.toJSON}/{@link HashChainGate.fromJSON} so a caller can
+ * persist it through the existing unified `memory.db` (never a competing store).
+ *
+ * QE use-case: turn AQE's "verify row counts BEFORE and AFTER, never claim a
+ * sync/migration succeeded without proof" mandate into a cryptographic
+ * guarantee. Admit one payload per DB operation (table, op, row-count, content
+ * digest); a later `verifyIntegrity()` proves no admitted entry was mutated,
+ * reordered, or dropped.
+ *
+ * Commitment: commitment[n] = SHA256("ruvector:chain:" || commitment[n-1] ||
+ * payload_hash[n] || u64le(n)), seeded from a fixed genesis. Verification is
+ * O(n): replay from genesis. (Genesis differs from the Rust literal — we do not
+ * interoperate with Rust receipts, only self-verify.)
+ */
+import { createHash } from 'node:crypto';
+const CHAIN_TAG = Buffer.from('ruvector:chain:');
+/** Re-derivation anchor. Self-consistent; not byte-compatible with the Rust crate. */
+const GENESIS = createHash('sha256').update('ruvector-proof-gate-v1').digest();
+function u64le(n) {
+    const b = Buffer.alloc(8);
+    b.writeBigUInt64LE(BigInt(n));
+    return b;
+}
+/** Deterministic, key-sorted serialization so equal payloads hash equally. */
+function canonicalBytes(payload) {
+    if (typeof payload === 'string')
+        return Buffer.from(payload, 'utf8');
+    if (payload instanceof Uint8Array)
+        return Buffer.from(payload);
+    return Buffer.from(canonicalJson(payload), 'utf8');
+}
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    const keys = Object.keys(value).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalJson(value[k])}`).join(',')}}`;
+}
+function sha256(...parts) {
+    const h = createHash('sha256');
+    for (const p of parts)
+        h.update(p);
+    return h.digest();
+}
+function commitmentOf(prev, payloadHash, seq) {
+    return sha256(CHAIN_TAG, prev, payloadHash, u64le(seq));
+}
+/**
+ * Sequential SHA-256 hash chain. O(1) per `admit`, O(n) `verifyIntegrity`.
+ * In-memory; persist/restore via {@link toJSON}/{@link fromJSON}.
+ */
+export class HashChainGate {
+    seq = 0;
+    prev = GENESIS;
+    chain = [];
+    payloadHashes = [];
+    /** Admit a payload; returns a receipt committing the chain state. */
+    admit(payload) {
+        const payloadHash = sha256(canonicalBytes(payload));
+        const commitment = commitmentOf(this.prev, payloadHash, this.seq);
+        this.prev = commitment;
+        this.chain.push(commitment);
+        this.payloadHashes.push(payloadHash);
+        const receipt = {
+            sequence: this.seq,
+            payloadHash: payloadHash.toString('hex'),
+            chainCommitment: commitment.toString('hex'),
+        };
+        this.seq += 1;
+        return receipt;
+    }
+    /** True iff `receipt` matches the commitment recorded at its sequence. */
+    verifyReceipt(receipt) {
+        return (receipt.sequence >= 0 &&
+            receipt.sequence < this.chain.length &&
+            this.chain[receipt.sequence].toString('hex') === receipt.chainCommitment);
+    }
+    /** Current chain head (hex). Changes after every successful `admit`. */
+    chainRoot() {
+        return this.prev.toString('hex');
+    }
+    get length() {
+        return this.seq;
+    }
+    get isEmpty() {
+        return this.seq === 0;
+    }
+    /**
+     * Full cryptographic re-derivation from genesis. Returns false if ANY
+     * commitment fails to re-derive — catches a mutated commitment, a mutated
+     * payload hash, a reorder, or a length mismatch.
+     */
+    verifyIntegrity() {
+        if (this.chain.length !== this.payloadHashes.length)
+            return false;
+        let prev = GENESIS;
+        for (let i = 0; i < this.chain.length; i++) {
+            const expected = commitmentOf(prev, this.payloadHashes[i], i);
+            if (!expected.equals(this.chain[i]))
+                return false;
+            prev = this.chain[i];
+        }
+        return prev.equals(this.prev);
+    }
+    /** Snapshot for persistence through the unified store (no DB opened here). */
+    toJSON() {
+        return {
+            seq: this.seq,
+            head: this.prev.toString('hex'),
+            chain: this.chain.map((c) => c.toString('hex')),
+            payloadHashes: this.payloadHashes.map((p) => p.toString('hex')),
+        };
+    }
+    /** Restore a chain from a {@link toJSON} snapshot. */
+    static fromJSON(state) {
+        const g = new HashChainGate();
+        g.seq = state.seq;
+        g.prev = Buffer.from(state.head, 'hex');
+        for (const c of state.chain)
+            g.chain.push(Buffer.from(c, 'hex'));
+        for (const p of state.payloadHashes)
+            g.payloadHashes.push(Buffer.from(p, 'hex'));
+        return g;
+    }
+}
+//# sourceMappingURL=proof-gate.js.map

package/dist/kernel/unified-memory.d.ts

@@ -71,6 +71,10 @@ export declare class UnifiedMemoryManager {
     private preparedStatements;
     private vectorIndex;
     private crdtStore;
+    private proofGate;
+    private proofGateEnvChecked;
+    private static readonly PROOF_NS;
+    private static readonly PROOF_KEY;
     private constructor();
     static getInstance(config?: Partial<UnifiedMemoryConfig>): UnifiedMemoryManager;
     static getInstanceAsync(config?: Partial<UnifiedMemoryConfig>): Promise<UnifiedMemoryManager>;
@@ -94,6 +98,37 @@ export declare class UnifiedMemoryManager {
     kvExists(key: string, namespace?: string): Promise<boolean>;
     kvSearch(pattern: string, namespace?: string, limit?: number): Promise<string[]>;
     kvCleanupExpired(): Promise<number>;
+    /**
+     * Enable the tamper-evident proof-gate audit. OFF by default — once enabled,
+     * every kv write/delete admits a receipt to a persisted SHA-256 hash chain so
+     * {@link verifyMemoryIntegrity} can later prove no admitted write was mutated,
+     * reordered, or dropped. Restores any chain persisted from a prior process.
+     *
+     * Intended for BOUNDED audit windows (a sync / migration / publish gate), not
+     * permanent always-on use: the chain grows O(n) with audited writes and its
+     * snapshot is rewritten per write. Idempotent.
+     */
+    enableProofGate(): void;
+    isProofGateEnabled(): boolean;
+    /**
+     * Re-derive the proof-gate chain from genesis. Returns true iff no admitted
+     * write was mutated, reordered, or dropped. Throws if the gate is not enabled.
+     */
+    verifyMemoryIntegrity(): boolean;
+    /** Current proof-gate chain head (hex), or null if the gate is not enabled. */
+    getProofChainRoot(): string | null;
+    /** Number of writes admitted to the proof-gate chain (0 if not enabled). */
+    getProofChainLength(): number;
+    /**
+     * Best-effort audit of a kv mutation. Admits a content-bound receipt and
+     * persists the chain. NEVER throws into the caller — the actual write has
+     * already committed; a failed audit must not break or alter it.
+     */
+    private auditWrite;
+    /** Persist the chain snapshot via a DIRECT write (bypasses kvSet → no recursion). */
+    private persistProofChain;
+    /** Restore a persisted chain from the reserved namespace, or null if none/corrupt. */
+    private loadProofChain;
     vectorStore(id: string, embedding: number[], namespace?: string, metadata?: unknown): Promise<void>;
     vectorGet(id: string): Promise<{
         embedding: number[];

package/dist/kernel/unified-memory.js

@@ -29,6 +29,7 @@ import * as os from 'os';
 import * as path from 'path';
 import { MEMORY_CONSTANTS } from './constants.js';
 import { LoggerFactory } from '../logging/index.js';
+import { HashChainGate } from '../integrations/ruvector/proof-gate.js';
 const logger = LoggerFactory.create('unified-memory');
 // Re-export from shared module for backward compatibility
 export { validateTableName, ALLOWED_TABLE_NAMES } from '../shared/sql-safety.js';
@@ -122,6 +123,12 @@ export class UnifiedMemoryManager {
     vectorIndex = new UnifiedHnswIndex('qe-memory');
     // CRDT store for distributed state synchronization
     crdtStore = null;
+    // Proof-gate (AQE ADR-116; upstream ADR-194): tamper-evident SHA-256 hash chain over kv writes.
+    // Off by default; enable per audit window via enableProofGate() / AQE_PROOF_GATE=1.
+    proofGate = null;
+    proofGateEnvChecked = false;
+    static PROOF_NS = '__proofgate__';
+    static PROOF_KEY = 'chain';
     constructor(config) {
         const resolvedDefaults = getResolvedDefaultConfig();
         this.config = { ...resolvedDefaults, ...config };
@@ -506,6 +513,8 @@ export class UnifiedMemoryManager {
       INSERT OR REPLACE INTO kv_store (key, namespace, value, expires_at)
       VALUES (?, ?, ?, ?)
     `).run(key, namespace, serialized, expiresAt);
+        // ADR-194: tamper-evident audit (no-op unless the proof-gate is enabled).
+        this.auditWrite('kvSet', namespace, key, serialized);
     }
     async kvGet(key, namespace = 'default') {
         this.ensureInitialized();
@@ -524,6 +533,9 @@ export class UnifiedMemoryManager {
     async kvDelete(key, namespace = 'default') {
         this.ensureInitialized();
         const result = this.db.prepare('DELETE FROM kv_store WHERE key = ? AND namespace = ?').run(key, namespace);
+        // ADR-194: audit deletes too (no-op unless the proof-gate is enabled).
+        if (result.changes > 0)
+            this.auditWrite('kvDelete', namespace, key, '');
         return result.changes > 0;
     }
     async kvExists(key, namespace = 'default') {
@@ -551,6 +563,99 @@ export class UnifiedMemoryManager {
         return result.changes;
     }
     // ============================================================================
+    // Proof-Gate: tamper-evident write audit (ADR-194)
+    // ============================================================================
+    /**
+     * Enable the tamper-evident proof-gate audit. OFF by default — once enabled,
+     * every kv write/delete admits a receipt to a persisted SHA-256 hash chain so
+     * {@link verifyMemoryIntegrity} can later prove no admitted write was mutated,
+     * reordered, or dropped. Restores any chain persisted from a prior process.
+     *
+     * Intended for BOUNDED audit windows (a sync / migration / publish gate), not
+     * permanent always-on use: the chain grows O(n) with audited writes and its
+     * snapshot is rewritten per write. Idempotent.
+     */
+    enableProofGate() {
+        this.ensureInitialized();
+        this.proofGateEnvChecked = true;
+        if (this.proofGate)
+            return;
+        this.proofGate = this.loadProofChain() ?? new HashChainGate();
+    }
+    isProofGateEnabled() {
+        return this.proofGate !== null;
+    }
+    /**
+     * Re-derive the proof-gate chain from genesis. Returns true iff no admitted
+     * write was mutated, reordered, or dropped. Throws if the gate is not enabled.
+     */
+    verifyMemoryIntegrity() {
+        if (!this.proofGate) {
+            throw new Error('Proof-gate not enabled — call enableProofGate() or set AQE_PROOF_GATE=1');
+        }
+        return this.proofGate.verifyIntegrity();
+    }
+    /** Current proof-gate chain head (hex), or null if the gate is not enabled. */
+    getProofChainRoot() {
+        return this.proofGate ? this.proofGate.chainRoot() : null;
+    }
+    /** Number of writes admitted to the proof-gate chain (0 if not enabled). */
+    getProofChainLength() {
+        return this.proofGate ? this.proofGate.length : 0;
+    }
+    /**
+     * Best-effort audit of a kv mutation. Admits a content-bound receipt and
+     * persists the chain. NEVER throws into the caller — the actual write has
+     * already committed; a failed audit must not break or alter it.
+     */
+    auditWrite(op, namespace, key, serializedValue) {
+        // Lazy env-enable so an operator can turn auditing on without a code change.
+        if (!this.proofGate) {
+            if (this.proofGateEnvChecked)
+                return;
+            this.proofGateEnvChecked = true;
+            if (process.env.AQE_PROOF_GATE !== '1')
+                return;
+            this.proofGate = this.loadProofChain() ?? new HashChainGate();
+        }
+        // Never audit the chain's own persistence namespace (no self-reference / recursion).
+        if (namespace === UnifiedMemoryManager.PROOF_NS)
+            return;
+        try {
+            this.proofGate.admit({ op, ns: namespace, key, value: serializedValue });
+            this.persistProofChain();
+        }
+        catch (error) {
+            logger.warn(`proof-gate audit skipped for ${namespace}/${key}: ${toErrorMessage(error)}`);
+        }
+    }
+    /** Persist the chain snapshot via a DIRECT write (bypasses kvSet → no recursion). */
+    persistProofChain() {
+        if (!this.proofGate || !this.db)
+            return;
+        this.db.prepare(`
+      INSERT OR REPLACE INTO kv_store (key, namespace, value, expires_at)
+      VALUES (?, ?, ?, NULL)
+    `).run(UnifiedMemoryManager.PROOF_KEY, UnifiedMemoryManager.PROOF_NS, JSON.stringify(this.proofGate.toJSON()));
+    }
+    /** Restore a persisted chain from the reserved namespace, or null if none/corrupt. */
+    loadProofChain() {
+        if (!this.db)
+            return null;
+        const row = this.db.prepare(`
+      SELECT value FROM kv_store WHERE key = ? AND namespace = ?
+    `).get(UnifiedMemoryManager.PROOF_KEY, UnifiedMemoryManager.PROOF_NS);
+        if (!row)
+            return null;
+        try {
+            return HashChainGate.fromJSON(JSON.parse(row.value));
+        }
+        catch (error) {
+            logger.warn(`proof-gate chain failed to load (starting fresh): ${toErrorMessage(error)}`);
+            return null;
+        }
+    }
+    // ============================================================================
     // Vector Operations
     // ============================================================================
     async vectorStore(id, embedding, namespace = 'default', metadata) {

package/dist/learning/local-judge-client.js

@@ -17,6 +17,7 @@
  *   qwen3:30b-a3b   — 18GB, highest quality, use only if RAM permits
  */
 import { LoggerFactory } from '../logging/index.js';
+import { resolveOllamaBaseUrl } from '../shared/llm/ollama-url.js';
 const logger = LoggerFactory.create('local-judge');
 const DEFAULT_URL = 'http://localhost:11434';
 const DEFAULT_MODEL = 'qwen3:8b';
@@ -46,7 +47,7 @@ export class LocalJudgeClient {
     model;
     enabled;
     constructor(opts) {
-        this.baseUrl = opts?.url ?? process.env['NAGUAL_JUDGE_URL'] ?? DEFAULT_URL;
+        this.baseUrl = opts?.url ?? process.env['NAGUAL_JUDGE_URL'] ?? resolveOllamaBaseUrl(DEFAULT_URL);
         this.model = opts?.model ?? process.env['NAGUAL_JUDGE_MODEL'] ?? DEFAULT_MODEL;
         // Only active when explicitly configured via env or constructor options
         this.enabled = Boolean(opts?.url ?? opts?.model ??