agentic-qe 3.11.5 → 3.12.0

package/dist/cli/chunks/{workflow-43EMD5FY.js → workflow-ENBWRMBA.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.5");process.exit(0)}
-import"./chunk-MTBGOWJA.js";import{b as $}from"./chunk-HJWT4KME.js";import{d as R}from"./chunk-FMNXHVIN.js";import{b as k,c as C,d as b}from"./chunk-BJLA2IX7.js";import{c as W}from"./chunk-CKOF27L7.js";import"./chunk-5WMU7XCF.js";import"./chunk-RKXZLTWR.js";import"./chunk-C4EZNOWK.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.12.0");process.exit(0)}
+import"./chunk-EZE2HRQB.js";import{b as $}from"./chunk-MBF3Q7FQ.js";import{d as R}from"./chunk-SPEUF7ZL.js";import{b as k,c as C,d as b}from"./chunk-JYX7AZHE.js";import{c as W}from"./chunk-K5SN66B4.js";import"./chunk-7ZIVDGSN.js";import"./chunk-RHC7TFPU.js";import"./chunk-3AFNXU45.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
  Running workflow from: ${t}
 `));let s=k(c);if(!s.success||!s.workflow){console.log(o.red("Failed to parse pipeline:"));for(let w of s.errors)console.log(o.red(`   ${w}`));await a(1)}let r={...W(l.params,"params")};if(s.pipeline){for(let w of s.pipeline.stages)if(w.params)for(let[S,h]of Object.entries(w.params))r[S]=h}if(!d.workflowOrchestrator.getWorkflow(s.workflow.id)){let w=d.workflowOrchestrator.registerWorkflow(s.workflow);w.success||(console.log(o.red(`Failed to register workflow: ${w.error.message}`)),await a(1))}let n=await d.workflowOrchestrator.executeWorkflow(s.workflow.id,r);if(!n.success){console.log(o.red(`Failed to start workflow: ${n.error.message}`)),await a(1);return}let p=n.value;if(console.log(o.cyan(`  Execution ID: ${p}`)),console.log(o.gray(`  Workflow: ${s.workflow.name}`)),console.log(o.gray(`  Stages: ${s.workflow.steps.length}`)),console.log(""),l.watch){console.log(o.blue(`Workflow Progress:
 `));let w,S=Date.now();for(;;){let g=d.workflowOrchestrator.getWorkflowStatus(p);if(!g)break;if(!w||w.progress!==g.progress||w.status!==g.status||JSON.stringify(w.currentSteps)!==JSON.stringify(g.currentSteps)){process.stdout.write("\r\x1B[K");let v="\u2588".repeat(Math.floor(g.progress/5))+"\u2591".repeat(20-Math.floor(g.progress/5)),D=g.status==="completed"?o.green:g.status==="failed"?o.red:g.status==="running"?o.yellow:o.gray;console.log(`  [${v}] ${g.progress}% - ${D(g.status)}`),g.currentSteps.length>0&&l.verbose&&console.log(o.gray(`    Running: ${g.currentSteps.join(", ")}`)),w=g}if(g.status==="completed"||g.status==="failed"||g.status==="cancelled")break;await new Promise(v=>setTimeout(v,500))}let h=d.workflowOrchestrator.getWorkflowStatus(p);if(h){console.log("");let g=h.duration||Date.now()-S;h.status==="completed"?(console.log(o.green("Workflow completed successfully")),console.log(o.gray(`   Duration: ${$(g)}`)),console.log(o.gray(`   Completed: ${h.completedSteps.length} stages`)),h.skippedSteps.length>0&&console.log(o.yellow(`   Skipped: ${h.skippedSteps.length} stages`))):h.status==="failed"?(console.log(o.red("Workflow failed")),console.log(o.red(`   Error: ${h.error}`)),console.log(o.gray(`   Failed stages: ${h.failedSteps.join(", ")}`))):console.log(o.yellow(`Workflow ${h.status}`))}}else console.log(o.green("Workflow execution started")),console.log(o.gray(`   Use 'aqe workflow status ${p}' to check progress`));console.log(""),await a(0)}catch(s){console.error(o.red(`
@@ -35,10 +35,10 @@ Workflow cancelled: ${t}
 `)):console.log(o.red(`
 Failed to cancel workflow: ${l.error.message}
 `)),await a(l.success?0:1)}catch(l){console.error(o.red(`
-Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-4HX6RP5F.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
+Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-UGYJE64S.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
  Browser Workflow Templates:
 `));for(let u of e.data.availableTemplates)console.log(`  ${o.cyan(u)}`);console.log("")}else console.log(o.red(`Failed: ${e.error||"Unknown error"}`));await a(0)}catch(t){console.error(o.red(`
-Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-4HX6RP5F.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-I4HY2FYJ.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
+Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-UGYJE64S.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-62SGMGB2.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
 File not found: ${p}
 `)),await a(1)),f.workflowYaml=i.readFileSync(p,"utf-8")}else f.templateName=t;else console.log(o.red(`
 Provide a template name or --yaml. Use "workflow browser-list" to see templates.

package/dist/cli/chunks/workflow-orchestrator-S4LBFTYD.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.12.0");process.exit(0)}
+import{a,b,c,d}from"./chunk-I6WHYRWB.js";import"./chunk-G6LR7FK7.js";import"./chunk-C4SZSPXY.js";import"./chunk-SSXAW3ER.js";import"./chunk-MDT3LIXS.js";import"./chunk-TJEJ4UVX.js";import"./chunk-L5ZLOW3K.js";import"./chunk-K5SN66B4.js";import"./chunk-W2OMW6UU.js";import"./chunk-7ZIVDGSN.js";import"./chunk-RHC7TFPU.js";import"./chunk-6JNNZGI2.js";import"./chunk-UVVKFBF7.js";import"./chunk-YKOTOCO6.js";import"./chunk-FZIHOMGY.js";import"./chunk-KJWQ7ENF.js";import"./chunk-V2MD5EDD.js";import"./chunk-64M3FFM4.js";import"./chunk-AEX75YGI.js";import"./chunk-27JCWG5J.js";import"./chunk-2KHDGC7N.js";import"./chunk-3AFNXU45.js";export{b as DEFAULT_WORKFLOW_CONFIG,a as WorkflowEvents,c as WorkflowOrchestrator,d as createWorkflowOrchestrator};

package/dist/cli/chunks/{wrappers-3N7AYNM3.js → wrappers-MHLNYANQ.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.11.5");process.exit(0)}
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-KQVIWE3W.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-TBT3OFRW.js";import"./chunk-NCSXLMDL.js";import"./chunk-IU5RSN6M.js";import"./chunk-ZMPAM4DY.js";import"./chunk-Y25PO65W.js";import"./chunk-YFCULQBP.js";import"./chunk-CKOF27L7.js";import"./chunk-TTJJ4DQE.js";import"./chunk-RKXZLTWR.js";import"./chunk-FHTYEAQ3.js";import"./chunk-WHHQIL4F.js";import"./chunk-3JF5A72M.js";import"./chunk-CDJP6COA.js";import"./chunk-FIPKIIMS.js";import"./chunk-2XQHG56O.js";import"./chunk-2XPMATEK.js";import"./chunk-JDSHUECG.js";import"./chunk-GODAWJMZ.js";import"./chunk-C4EZNOWK.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.12.0");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-ZT2WHCVM.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-ZVPAFX4I.js";import"./chunk-C4SZSPXY.js";import"./chunk-SSXAW3ER.js";import"./chunk-MDT3LIXS.js";import"./chunk-TJEJ4UVX.js";import"./chunk-L5ZLOW3K.js";import"./chunk-K5SN66B4.js";import"./chunk-W2OMW6UU.js";import"./chunk-RHC7TFPU.js";import"./chunk-UVVKFBF7.js";import"./chunk-YKOTOCO6.js";import"./chunk-FZIHOMGY.js";import"./chunk-KJWQ7ENF.js";import"./chunk-V2MD5EDD.js";import"./chunk-64M3FFM4.js";import"./chunk-AEX75YGI.js";import"./chunk-27JCWG5J.js";import"./chunk-2KHDGC7N.js";import"./chunk-3AFNXU45.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};

package/dist/cli/commands/quality-gate.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Agentic QE v3 - Quality Gate Command (ADR-119)
+ *
+ * `aqe quality-gate` runs the two-gate, three-valued quality verdict against a
+ * pinned ADR-117 checklist: the mechanical (oracle) gate plus a FRONTIER judge.
+ * It calls the SAME `runQualityGate` orchestrator as the `qe/quality/gate` MCP
+ * tool, so CLI and MCP stay in exact parity.
+ *
+ * The oracle (mechanical) result is supplied by the caller (`--oracle-passed` /
+ * `--baseline-passed`, or `--oracle-file`) because the ADR-113 mutation oracle
+ * runs upstream. A missing oracle result is treated as a non-executed test ⇒
+ * mechanical fail (never a silent pass).
+ */
+import { Command } from 'commander';
+import type { CLIContext } from '../handlers/interfaces.js';
+import type { Judge } from '../../validation/quality-verdict.js';
+export declare function createQualityGateCommand(_context: CLIContext, cleanupAndExit: (code: number) => Promise<never>, _ensureInitialized: () => Promise<boolean>): Command;
+/**
+ * Build the frontier judge from the shared multi-provider router. When no
+ * provider/credentials are available the judge's preflight fails ⇒ the verdict
+ * is `inconclusive` (never a silent pass). Identical construction to the MCP tool.
+ */
+export declare function buildJudge(model?: string): Promise<Judge>;
+//# sourceMappingURL=quality-gate.d.ts.map

package/dist/cli/commands/quality-gate.js

@@ -0,0 +1,135 @@
+/**
+ * Agentic QE v3 - Quality Gate Command (ADR-119)
+ *
+ * `aqe quality-gate` runs the two-gate, three-valued quality verdict against a
+ * pinned ADR-117 checklist: the mechanical (oracle) gate plus a FRONTIER judge.
+ * It calls the SAME `runQualityGate` orchestrator as the `qe/quality/gate` MCP
+ * tool, so CLI and MCP stay in exact parity.
+ *
+ * The oracle (mechanical) result is supplied by the caller (`--oracle-passed` /
+ * `--baseline-passed`, or `--oracle-file`) because the ADR-113 mutation oracle
+ * runs upstream. A missing oracle result is treated as a non-executed test ⇒
+ * mechanical fail (never a silent pass).
+ */
+import { Command } from 'commander';
+import chalk from 'chalk';
+import fs from 'node:fs';
+import { writeOutput, toJSON } from '../utils/ci-output.js';
+import { runQualityGate, listChecklistIds, } from '../../validation/quality-gate-runner.js';
+import { createRouterFrontierJudge, createUnavailableJudge, } from '../../validation/frontier-judge.js';
+export function createQualityGateCommand(_context, cleanupAndExit, _ensureInitialized) {
+    return new Command('quality-gate')
+        .description('Two-gate, three-valued quality verdict against a pinned ADR-117 checklist (ADR-119)')
+        .option('-c, --checklist <id>', 'Pinned anchor checklist id (e.g. A1-inRange)')
+        .option('-a, --artifact-file <path>', 'File containing the artifact under judgement')
+        .option('--artifact <text>', 'Inline artifact text (alternative to --artifact-file)')
+        .option('--oracle-passed', 'Mechanical oracle passed (mutation score met threshold)')
+        .option('--baseline-passed', 'Tests executed against the reference implementation')
+        .option('--oracle-file <path>', 'JSON file with { passed, baselinePassed } from the ADR-113 oracle')
+        .option('--anchor <path>', 'Override the frozen anchor path (ADR-117)')
+        .option('--model <id>', 'Frontier judge model id (ADR-111: always frontier-tier)')
+        .option('--list', 'List the available pinned checklist ids and exit')
+        .option('-F, --format <format>', 'Output format (text|json)', 'text')
+        .option('-o, --output <path>', 'Write output to file')
+        .action(async (options) => {
+        // No kernel/memory needed: this reads the frozen ADR-117 anchor and calls
+        // the LLM router — so it runs standalone in CI without a fleet init.
+        const format = options.format;
+        try {
+            if (options.list) {
+                const ids = listChecklistIds(options.anchor);
+                if (format === 'json')
+                    writeOutput(toJSON({ checklists: ids }), options.output);
+                else
+                    console.log(`Available checklists:\n  ${ids.join('\n  ')}`);
+                await cleanupAndExit(0);
+                return;
+            }
+            if (!options.checklist) {
+                console.error(chalk.red('Missing required option -c, --checklist <id> (use --list to see ids)'));
+                await cleanupAndExit(1);
+                return;
+            }
+            const artifact = resolveArtifact(options);
+            if (artifact == null) {
+                console.error(chalk.red('Provide --artifact-file <path> or --artifact <text>'));
+                await cleanupAndExit(1);
+                return;
+            }
+            const oracleResult = resolveOracle(options);
+            const judge = await buildJudge(options.model);
+            const request = {
+                oracleResult,
+                artifact,
+                checklistId: options.checklist,
+                judge,
+                anchorPath: options.anchor,
+            };
+            const result = await runQualityGate(request);
+            if (format === 'json') {
+                writeOutput(toJSON(result), options.output);
+            }
+            else {
+                printVerdict(result.verdict, result.mechanical, result.specCoverage, result.unmet, result.reason);
+            }
+            // Exit codes: 0 pass, 1 fail, 3 inconclusive (distinct so CI can branch).
+            const code = result.verdict === 'pass' ? 0 : result.verdict === 'fail' ? 1 : 3;
+            await cleanupAndExit(code);
+        }
+        catch (error) {
+            console.error(chalk.red('\nQuality gate failed:'), error instanceof Error ? error.message : error);
+            await cleanupAndExit(1);
+        }
+    });
+}
+function resolveArtifact(options) {
+    if (typeof options.artifact === 'string')
+        return options.artifact;
+    if (options.artifactFile)
+        return fs.readFileSync(options.artifactFile, 'utf8');
+    return null;
+}
+/**
+ * Resolve the mechanical-gate (oracle) result. `--oracle-file` wins; otherwise
+ * the boolean flags. Returns null (⇒ mechanical fail) when nothing is supplied,
+ * so an un-run oracle can never masquerade as a pass.
+ */
+function resolveOracle(options) {
+    if (options.oracleFile) {
+        const raw = JSON.parse(fs.readFileSync(options.oracleFile, 'utf8'));
+        return { passed: !!raw.passed, baselinePassed: !!raw.baselinePassed };
+    }
+    if (options.oraclePassed === undefined && options.baselinePassed === undefined) {
+        return null;
+    }
+    return { passed: !!options.oraclePassed, baselinePassed: !!options.baselinePassed };
+}
+/**
+ * Build the frontier judge from the shared multi-provider router. When no
+ * provider/credentials are available the judge's preflight fails ⇒ the verdict
+ * is `inconclusive` (never a silent pass). Identical construction to the MCP tool.
+ */
+export async function buildJudge(model) {
+    const { createLLMRouterService } = await import('../../shared/llm/llm-router-service.js');
+    const built = await createLLMRouterService().catch(() => null);
+    if (!built) {
+        return createUnavailableJudge('no LLM provider configured — set a frontier provider API key');
+    }
+    return createRouterFrontierJudge(built.router, model ? { model } : {});
+}
+function printVerdict(verdict, mechanical, specCoverage, unmet, reason) {
+    const icon = verdict === 'pass' ? chalk.green('✓ PASS')
+        : verdict === 'fail' ? chalk.red('✗ FAIL')
+            : chalk.yellow('? INCONCLUSIVE');
+    console.log(`\n  Quality Gate: ${icon}`);
+    console.log(`  Mechanical gate: ${mechanical === 'pass' ? chalk.green('pass') : chalk.red('fail')}`);
+    if (specCoverage != null)
+        console.log(`  Spec coverage:   ${chalk.cyan((specCoverage * 100).toFixed(0) + '%')}`);
+    if (unmet.length > 0) {
+        console.log(chalk.cyan('  Unmet requirements:'));
+        for (const u of unmet)
+            console.log(chalk.gray(`    - ${u}`));
+    }
+    console.log(chalk.gray(`  ${reason}\n`));
+}
+//# sourceMappingURL=quality-gate.js.map

package/dist/cli/index.js

@@ -248,6 +248,11 @@ registerLazyCommand(program, {
     description: 'Quality assessment shortcut',
     factory: () => import('./commands/quality.js').then(m => m.createQualityCommand(context, cleanupAndExit, ensureInitialized)),
 });
+registerLazyCommand(program, {
+    name: 'quality-gate',
+    description: 'Two-gate, three-valued quality verdict against a pinned checklist (ADR-119)',
+    factory: () => import('./commands/quality-gate.js').then(m => m.createQualityGateCommand(context, cleanupAndExit, ensureInitialized)),
+});
 registerLazyCommand(program, {
     name: 'security',
     description: 'Security scanning and URL validation',

package/dist/coordination/mincut/dream-integration.d.ts

@@ -53,6 +53,11 @@ interface DreamInsight {
     applied: boolean;
     suggestedAction?: string;
     createdAt: Date;
+    /**
+     * ADR-121 evidence tier of the insight. Absent → the conservative default
+     * (`proxy:structural`), which the ADR-120 dream-apply gate will not apply.
+     */
+    provenanceTier?: string;
 }
 interface PatternImportData {
     id: string;
@@ -165,6 +170,12 @@ export interface DreamIntegrationConfig {
     maxAdaptationHistory: number;
     /** Whether to auto-apply high-confidence insights */
     autoApplyInsights: boolean;
+    /**
+     * ADR-121: whether `judge:llm`-tier insights may be applied. A single LLM
+     * judgment is noisy, so judge-tier apply is opt-in (default false). Oracle
+     * tier always applies; proxy tier never does.
+     */
+    allowJudgeTierApply?: boolean;
 }
 /**
  * Default dream integration configuration

package/dist/coordination/mincut/dream-integration.js

@@ -21,6 +21,8 @@
  */
 import { v4 as uuidv4 } from 'uuid';
 import { StrangeLoopController } from './strange-loop';
+import { DEFAULT_PROVENANCE_TIER } from '../../learning/provenance-tier.js';
+import { reExecutePathGate, pathGateFingerprint, pathSealedHash, verifyPathPromotion, } from '../../validation/gate-reexecute.js';
 /**
  * Default dream integration configuration
  */
@@ -930,19 +932,44 @@ export class DreamMinCutController {
                 continue;
             }
             const action = this.integration.convertInsightToAction(insight);
-            if (action && action.type !== 'no_action') {
-                // Record as adaptation
-                this.integration.getMetaTracker().recordAdaptation({
-                    timestamp: new Date(),
-                    type: 'insight_applied',
-                    trigger: 'dream_insight',
-                    stateBefore: { minCutValue: 0, weakVertexCount: 0 },
-                    stateAfter: { minCutValue: 0, weakVertexCount: 0 },
-                    improvement: insight.noveltyScore * insight.confidenceScore,
-                    insightId: insight.id,
-                });
-                appliedCount++;
+            const actionable = !!action && action.type !== 'no_action';
+            // ADR-120: seal the apply decision's inputs and re-execute the frozen
+            // `dream-apply/v1` rule. This is the A8-EXT fake-`applied`-counter home:
+            // a logged apply the frozen rule would reject (proxy-tier evidence, or an
+            // insight that produced no real reorganization) is a forgery. Only a
+            // receipt that re-executes to `promote` on intact sealed inputs is
+            // counted as applied — the log no longer decides, the re-run does.
+            const sealed = {
+                provenanceTier: insight.provenanceTier ?? DEFAULT_PROVENANCE_TIER,
+                allowJudgeTier: this.config.allowJudgeTierApply,
+                insightConfidence: insight.confidenceScore,
+                insightConfidenceThreshold: this.config.insightConfidenceThreshold,
+                insightActionable: actionable,
+            };
+            const rerun = reExecutePathGate('dream-apply/v1', sealed);
+            const receipt = {
+                ruleVersion: 'dream-apply/v1',
+                ruleFingerprint: pathGateFingerprint('dream-apply/v1'),
+                sealedHash: pathSealedHash(sealed),
+                sealed,
+                recordedVerdict: rerun.promote ? 'promote' : 'reject',
+            };
+            const verdict = verifyPathPromotion(receipt);
+            if (!verdict.valid || !rerun.promote) {
+                continue; // not reproducibly applicable under the frozen rule — do not count
             }
+            // Record as adaptation
+            this.integration.getMetaTracker().recordAdaptation({
+                timestamp: new Date(),
+                type: 'insight_applied',
+                trigger: 'dream_insight',
+                stateBefore: { minCutValue: 0, weakVertexCount: 0 },
+                stateAfter: { minCutValue: 0, weakVertexCount: 0 },
+                improvement: insight.noveltyScore * insight.confidenceScore,
+                insightId: insight.id,
+            });
+            insight.applied = true;
+            appliedCount++;
         }
         return appliedCount;
     }

package/dist/integrations/ruvector/feature-flags.js

@@ -441,6 +441,13 @@ export function isHyperbolicHnswEnabled() {
  */
 export function initFeatureFlagsFromEnv() {
     const envFlags = {};
+    // RVF-backed PatternStore (ADR-066). Was the only flag WITHOUT an env override,
+    // so an environment where RVF native init fails (e.g. `RVF error 0x0303:
+    // FsyncFailed` on a macOS virtiofs bind mount) had no runtime way to fall back
+    // to the SQLite HNSW PatternStore. Set RUVECTOR_USE_RVF_PATTERN_STORE=false there.
+    if (process.env.RUVECTOR_USE_RVF_PATTERN_STORE !== undefined) {
+        envFlags.useRVFPatternStore = process.env.RUVECTOR_USE_RVF_PATTERN_STORE === 'true';
+    }
     if (process.env.RUVECTOR_USE_SONA !== undefined) {
         envFlags.useQESONA = process.env.RUVECTOR_USE_SONA === 'true';
     }

package/dist/learning/pattern-lifecycle.d.ts

@@ -37,6 +37,12 @@ export interface PatternLifecycleConfig {
     promotionActivityWindowDays: number;
     /** ADR-061: Asymmetric learning config */
     asymmetricLearning: Partial<AsymmetricLearningConfig>;
+    /**
+     * ADR-121: allow `judge:llm`-tier evidence to promote patterns. A single LLM
+     * judgment is noisy (ADR-119), so judge-tier promotion is an explicit,
+     * cost-bearing opt-in. Default false — only `oracle:test-exec` promotes.
+     */
+    allowJudgeTierPromotion: boolean;
 }
 /**
  * Default lifecycle configuration
@@ -103,6 +109,10 @@ export interface PromotionCheckResult {
     currentReward: number;
     currentOccurrences: number;
     currentSuccessRate: number;
+    /** ADR-121: evidence tier of the pattern (gates promotion). */
+    provenanceTier: string;
+    /** ADR-121: whether the pattern's evidence tier is strong enough to promote. */
+    meetsProvenanceTier: boolean;
 }
 /**
  * Result of deprecation check
@@ -178,6 +188,12 @@ export declare class PatternLifecycleManager {
      * Generate template content from experience aggregate
      */
     private generateTemplateContent;
+    /**
+     * ADR-121: read a pattern's provenance tier. Tolerant of an un-migrated DB
+     * (column absent) and of a NULL/unknown value — both degrade to the
+     * conservative default so the gate can never be bypassed by a missing tier.
+     */
+    private getProvenanceTier;
     /**
      * Check if a pattern should be promoted
      */

package/dist/learning/pattern-lifecycle.js

@@ -11,6 +11,8 @@
 import { PROMOTION_THRESHOLD } from './qe-patterns.js';
 import { AsymmetricLearningEngine } from './asymmetric-learning.js';
 import { safeJsonParse } from '../shared/safe-json.js';
+import { tierAllowsPromotion, DEFAULT_PROVENANCE_TIER } from './provenance-tier.js';
+import { reExecutePathGate, pathGateFingerprint, pathSealedHash, verifyPathPromotion, } from '../validation/gate-reexecute.js';
 import { LoggerFactory } from '../logging/index.js';
 import { isTemporalCompressionEnabled } from '../integrations/ruvector/feature-flags.js';
 const logger = LoggerFactory.create('pattern-lifecycle');
@@ -28,6 +30,7 @@ export const DEFAULT_LIFECYCLE_CONFIG = {
     maxAgeForActivePatterns: 90,
     promotionActivityWindowDays: 30,
     asymmetricLearning: {},
+    allowJudgeTierPromotion: false,
 };
 // ============================================================================
 // EWC++ catastrophic-forgetting protection (#510 item 6)
@@ -143,6 +146,23 @@ export class PatternLifecycleManager {
       `);
             console.log('[PatternLifecycle] Added promotion_date column to qe_patterns');
         }
+        // ADR-121: provenance_tier — additive, conservative-default migration.
+        // The DEFAULT backfills every existing row as 'proxy:structural', which can
+        // never over-credit legacy history. Rows re-derived from execution evidence
+        // are re-tiered upward through the normal write path (never up-tiered here).
+        // Distinct from the lifecycle `tier` (short-term/long-term) column.
+        try {
+            this.db.prepare(`
+        SELECT provenance_tier FROM qe_patterns LIMIT 1
+      `).get();
+        }
+        catch (e) {
+            logger.debug('Adding missing provenance_tier column', { error: e instanceof Error ? e.message : String(e) });
+            this.db.exec(`
+        ALTER TABLE qe_patterns ADD COLUMN provenance_tier TEXT DEFAULT '${DEFAULT_PROVENANCE_TIER}'
+      `);
+            console.log(`[PatternLifecycle] Added provenance_tier column to qe_patterns (backfilled '${DEFAULT_PROVENANCE_TIER}')`);
+        }
     }
     // ============================================================================
     // Experience Extraction
@@ -344,6 +364,20 @@ Pattern extracted from ${exp.count} successful experiences.`;
     // ============================================================================
     // Pattern Promotion
     // ============================================================================
+    /**
+     * ADR-121: read a pattern's provenance tier. Tolerant of an un-migrated DB
+     * (column absent) and of a NULL/unknown value — both degrade to the
+     * conservative default so the gate can never be bypassed by a missing tier.
+     */
+    getProvenanceTier(patternId) {
+        try {
+            const row = this.db.prepare(`SELECT provenance_tier FROM qe_patterns WHERE id = ?`).get(patternId);
+            return row?.provenance_tier ?? DEFAULT_PROVENANCE_TIER;
+        }
+        catch {
+            return DEFAULT_PROVENANCE_TIER;
+        }
+    }
     /**
      * Check if a pattern should be promoted
      */
@@ -359,23 +393,35 @@ Pattern extracted from ${exp.count} successful experiences.`;
                 currentReward: 0,
                 currentOccurrences: 0,
                 currentSuccessRate: 0,
+                provenanceTier: DEFAULT_PROVENANCE_TIER,
+                meetsProvenanceTier: false,
             };
         }
         const avgReward = pattern.qualityScore;
         const meetsReward = avgReward >= this.config.promotionRewardThreshold;
         const meetsOccurrences = pattern.usageCount >= this.config.promotionMinOccurrences;
         const meetsSuccessRate = pattern.successRate >= this.config.promotionMinSuccessRate;
+        // ADR-121: evidence-tier gate. Only oracle:test-exec (or judge:llm under an
+        // explicit budget flag) may promote; proxy:structural is never auto-promoted.
+        // Read the tier directly — the column is additive and may be absent on an
+        // un-migrated DB, in which case it defaults to the conservative tier.
+        const provenanceTier = this.getProvenanceTier(patternId);
+        const meetsProvenanceTier = tierAllowsPromotion(provenanceTier, {
+            allowJudgeTier: this.config.allowJudgeTierPromotion,
+        });
         // Temporal window: require activity within configured window to prevent
         // promoting stale patterns that haven't been validated recently
         const PROMOTION_ACTIVITY_WINDOW_MS = this.config.promotionActivityWindowDays * 24 * 60 * 60 * 1000;
         const lastActivity = pattern.lastUsedAt?.getTime() ?? pattern.createdAt.getTime();
         const meetsActivityWindow = (Date.now() - lastActivity) < PROMOTION_ACTIVITY_WINDOW_MS;
         return {
-            shouldPromote: pattern.tier === 'short-term' && meetsReward && meetsOccurrences && meetsSuccessRate && meetsActivityWindow,
+            shouldPromote: pattern.tier === 'short-term' && meetsProvenanceTier && meetsReward && meetsOccurrences && meetsSuccessRate && meetsActivityWindow,
             meetsRewardThreshold: meetsReward,
             meetsOccurrenceThreshold: meetsOccurrences,
             meetsSuccessRateThreshold: meetsSuccessRate,
             meetsActivityWindow,
+            provenanceTier,
+            meetsProvenanceTier,
             currentReward: avgReward,
             currentOccurrences: pattern.usageCount,
             currentSuccessRate: pattern.successRate,
@@ -389,6 +435,36 @@ Pattern extracted from ${exp.count} successful experiences.`;
         if (!check.shouldPromote) {
             return false;
         }
+        // ADR-120: re-execute the frozen `pattern-promote/v1` rule on the sealed
+        // check result before writing. `checkPromotion` is advisory; the frozen
+        // rule is authoritative. A forged/stale promote (proxy-tier or sub-threshold
+        // inputs logged as `promote`) fails `verifyPathPromotion` and the UPDATE is
+        // skipped — the same defense the flywheel accept path gets (ADR-120 §5).
+        const sealed = {
+            provenanceTier: check.provenanceTier,
+            allowJudgeTier: this.config.allowJudgeTierPromotion,
+            reward: check.currentReward,
+            rewardThreshold: this.config.promotionRewardThreshold,
+            occurrences: check.currentOccurrences,
+            occurrenceThreshold: this.config.promotionMinOccurrences,
+            successRate: check.currentSuccessRate,
+            successRateThreshold: this.config.promotionMinSuccessRate,
+            withinActivityWindow: check.meetsActivityWindow,
+        };
+        const rerun = reExecutePathGate('pattern-promote/v1', sealed);
+        const receipt = {
+            ruleVersion: 'pattern-promote/v1',
+            ruleFingerprint: pathGateFingerprint('pattern-promote/v1'),
+            sealedHash: pathSealedHash(sealed),
+            sealed,
+            recordedVerdict: rerun.promote ? 'promote' : 'reject',
+        };
+        const verdict = verifyPathPromotion(receipt);
+        if (!verdict.valid || !rerun.promote) {
+            // The advisory verdict is not reproducible under the frozen rule — refuse.
+            console.warn(`[PatternLifecycle] Refusing to promote ${patternId}: ${rerun.reason} (${verdict.reason})`);
+            return false;
+        }
         this.db.prepare(`
       UPDATE qe_patterns
       SET tier = 'long-term',

package/dist/learning/provenance-tier.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Provenance tiers for learning writes (ADR-121).
+ *
+ * Every learning write carries an explicit evidence tier. Authority tracks
+ * evidence strength: an execution-observed outcome is ground truth, an LLM
+ * judgment is a noisy opinion (ADR-119), a structural/co-occurrence inference
+ * is a weak guess. Only `oracle:test-exec` (or an explicitly-budgeted
+ * `judge:llm`) may change fleet behavior; `proxy:structural` is written and
+ * searchable but never auto-promoted.
+ *
+ * Mirrors ruflo ADR-174's in-code tier gate (not prose). Shared across every
+ * promotion path (pattern promotion, dream apply, flywheel accept) so the gate
+ * is defined once.
+ */
+/** Evidence tiers, strongest first. */
+export type ProvenanceTier = 'oracle:test-exec' | 'judge:llm' | 'proxy:structural';
+/** Ordered strongest → weakest. Index is the rank (0 = strongest). */
+export declare const PROVENANCE_TIERS: readonly ProvenanceTier[];
+/**
+ * Conservative default for undifferentiated / legacy / unknown writes.
+ * The backfill (ADR-121 §4) tags all pre-existing rows with this — it can
+ * never over-credit, only under-credit until a row is re-derived from
+ * execution evidence through the normal write path.
+ */
+export declare const DEFAULT_PROVENANCE_TIER: ProvenanceTier;
+/** Rank of a tier (0 = strongest). Unknown tiers rank as the weakest. */
+export declare function tierRank(tier: string | null | undefined): number;
+/**
+ * Normalize any raw value read from storage into a known tier.
+ * Null / undefined / unrecognized → the conservative default. Never throws —
+ * a bad tier must degrade to "weak", never crash the promotion path.
+ */
+export declare function coerceTier(raw: string | null | undefined): ProvenanceTier;
+export interface PromotionTierOptions {
+    /**
+     * When true, `judge:llm`-tier evidence may promote. This is an explicit,
+     * cost-bearing budget decision (ADR-121 §2 / ADR-119): a single LLM judgment
+     * is noisy, so judge-tier promotion is opt-in, never the default.
+     */
+    allowJudgeTier?: boolean;
+}
+/**
+ * The in-code promotion gate (ADR-121 §2). `oracle:test-exec` may always
+ * promote; `judge:llm` promotes only under an explicit budget flag;
+ * `proxy:structural` is NEVER auto-promoted.
+ *
+ * This is the single authority consulted by every promotion path. It does not
+ * decide whether the *metrics* clear threshold — only whether the *evidence
+ * tier* is strong enough to be allowed to change fleet behavior at all.
+ */
+export declare function tierAllowsPromotion(tier: string | null | undefined, options?: PromotionTierOptions): boolean;
+//# sourceMappingURL=provenance-tier.d.ts.map

package/dist/learning/provenance-tier.js

@@ -0,0 +1,64 @@
+/**
+ * Provenance tiers for learning writes (ADR-121).
+ *
+ * Every learning write carries an explicit evidence tier. Authority tracks
+ * evidence strength: an execution-observed outcome is ground truth, an LLM
+ * judgment is a noisy opinion (ADR-119), a structural/co-occurrence inference
+ * is a weak guess. Only `oracle:test-exec` (or an explicitly-budgeted
+ * `judge:llm`) may change fleet behavior; `proxy:structural` is written and
+ * searchable but never auto-promoted.
+ *
+ * Mirrors ruflo ADR-174's in-code tier gate (not prose). Shared across every
+ * promotion path (pattern promotion, dream apply, flywheel accept) so the gate
+ * is defined once.
+ */
+/** Ordered strongest → weakest. Index is the rank (0 = strongest). */
+export const PROVENANCE_TIERS = [
+    'oracle:test-exec',
+    'judge:llm',
+    'proxy:structural',
+];
+/**
+ * Conservative default for undifferentiated / legacy / unknown writes.
+ * The backfill (ADR-121 §4) tags all pre-existing rows with this — it can
+ * never over-credit, only under-credit until a row is re-derived from
+ * execution evidence through the normal write path.
+ */
+export const DEFAULT_PROVENANCE_TIER = 'proxy:structural';
+/** Rank of a tier (0 = strongest). Unknown tiers rank as the weakest. */
+export function tierRank(tier) {
+    const idx = PROVENANCE_TIERS.indexOf(coerceTier(tier));
+    return idx < 0 ? PROVENANCE_TIERS.length - 1 : idx;
+}
+/**
+ * Normalize any raw value read from storage into a known tier.
+ * Null / undefined / unrecognized → the conservative default. Never throws —
+ * a bad tier must degrade to "weak", never crash the promotion path.
+ */
+export function coerceTier(raw) {
+    if (raw && PROVENANCE_TIERS.includes(raw)) {
+        return raw;
+    }
+    return DEFAULT_PROVENANCE_TIER;
+}
+/**
+ * The in-code promotion gate (ADR-121 §2). `oracle:test-exec` may always
+ * promote; `judge:llm` promotes only under an explicit budget flag;
+ * `proxy:structural` is NEVER auto-promoted.
+ *
+ * This is the single authority consulted by every promotion path. It does not
+ * decide whether the *metrics* clear threshold — only whether the *evidence
+ * tier* is strong enough to be allowed to change fleet behavior at all.
+ */
+export function tierAllowsPromotion(tier, options = {}) {
+    switch (coerceTier(tier)) {
+        case 'oracle:test-exec':
+            return true;
+        case 'judge:llm':
+            return options.allowJudgeTier === true;
+        case 'proxy:structural':
+        default:
+            return false;
+    }
+}
+//# sourceMappingURL=provenance-tier.js.map