agentic-qe 3.13.12 → 3.14.1

package/dist/cli/chunks/{workflow-DYMO47FF.js → workflow-33PUXXJV.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.13.12");process.exit(0)}
-import"./chunk-VBHA4SDU.js";import{b as $}from"./chunk-7RVLVIAI.js";import{d as R}from"./chunk-42AS3HPO.js";import{b as k,c as C,d as b}from"./chunk-M7CPJW53.js";import{c as W}from"./chunk-VA2ORJB5.js";import"./chunk-E67ZXRG6.js";import"./chunk-L3GBNX7B.js";import"./chunk-ZMYV4R32.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.14.1");process.exit(0)}
+import{b as $}from"./chunk-HPQU6XZH.js";import"./chunk-PMREFRPP.js";import{d as R}from"./chunk-UUE5CBZQ.js";import{b as k,c as C,d as b}from"./chunk-5Y2QFSVZ.js";import{c as W}from"./chunk-VVP2ROXD.js";import"./chunk-UWRMPRY5.js";import"./chunk-NAJCQJSK.js";import"./chunk-EHW62JL2.js";import{Command as O}from"commander";import o from"chalk";function P(d,a){let m=d.indexOf("=");return m>0&&(a[d.substring(0,m)]=d.substring(m+1)),a}function x(d,a,m){let y=new O("workflow").description("Manage QE workflows and pipelines (ADR-041)");return y.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(t,l)=>{if(!await m())return;let e=await import("fs"),c=(await import("path")).resolve(t);try{console.log(o.blue(`
  Running workflow from: ${t}
 `));let s=k(c);if(!s.success||!s.workflow){console.log(o.red("Failed to parse pipeline:"));for(let w of s.errors)console.log(o.red(`   ${w}`));await a(1)}let r={...W(l.params,"params")};if(s.pipeline){for(let w of s.pipeline.stages)if(w.params)for(let[S,h]of Object.entries(w.params))r[S]=h}if(!d.workflowOrchestrator.getWorkflow(s.workflow.id)){let w=d.workflowOrchestrator.registerWorkflow(s.workflow);w.success||(console.log(o.red(`Failed to register workflow: ${w.error.message}`)),await a(1))}let n=await d.workflowOrchestrator.executeWorkflow(s.workflow.id,r);if(!n.success){console.log(o.red(`Failed to start workflow: ${n.error.message}`)),await a(1);return}let p=n.value;if(console.log(o.cyan(`  Execution ID: ${p}`)),console.log(o.gray(`  Workflow: ${s.workflow.name}`)),console.log(o.gray(`  Stages: ${s.workflow.steps.length}`)),console.log(""),l.watch){console.log(o.blue(`Workflow Progress:
 `));let w,S=Date.now();for(;;){let g=d.workflowOrchestrator.getWorkflowStatus(p);if(!g)break;if(!w||w.progress!==g.progress||w.status!==g.status||JSON.stringify(w.currentSteps)!==JSON.stringify(g.currentSteps)){process.stdout.write("\r\x1B[K");let v="\u2588".repeat(Math.floor(g.progress/5))+"\u2591".repeat(20-Math.floor(g.progress/5)),D=g.status==="completed"?o.green:g.status==="failed"?o.red:g.status==="running"?o.yellow:o.gray;console.log(`  [${v}] ${g.progress}% - ${D(g.status)}`),g.currentSteps.length>0&&l.verbose&&console.log(o.gray(`    Running: ${g.currentSteps.join(", ")}`)),w=g}if(g.status==="completed"||g.status==="failed"||g.status==="cancelled")break;await new Promise(v=>setTimeout(v,500))}let h=d.workflowOrchestrator.getWorkflowStatus(p);if(h){console.log("");let g=h.duration||Date.now()-S;h.status==="completed"?(console.log(o.green("Workflow completed successfully")),console.log(o.gray(`   Duration: ${$(g)}`)),console.log(o.gray(`   Completed: ${h.completedSteps.length} stages`)),h.skippedSteps.length>0&&console.log(o.yellow(`   Skipped: ${h.skippedSteps.length} stages`))):h.status==="failed"?(console.log(o.red("Workflow failed")),console.log(o.red(`   Error: ${h.error}`)),console.log(o.gray(`   Failed stages: ${h.failedSteps.join(", ")}`))):console.log(o.yellow(`Workflow ${h.status}`))}}else console.log(o.green("Workflow execution started")),console.log(o.gray(`   Use 'aqe workflow status ${p}' to check progress`));console.log(""),await a(0)}catch(s){console.error(o.red(`
@@ -35,10 +35,10 @@ Workflow cancelled: ${t}
 `)):console.log(o.red(`
 Failed to cancel workflow: ${l.error.message}
 `)),await a(l.success?0:1)}catch(l){console.error(o.red(`
-Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-PDIUEK7B.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
+Failed to cancel workflow:`),l),await a(1)}}),y.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:t}=await import("./browser-workflow-L6TDB5O5.js"),e=await new t().invoke({});if(e.success&&e.data){console.log(o.blue(`
  Browser Workflow Templates:
 `));for(let u of e.data.availableTemplates)console.log(`  ${o.cyan(u)}`);console.log("")}else console.log(o.red(`Failed: ${e.error||"Unknown error"}`));await a(0)}catch(t){console.error(o.red(`
-Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-PDIUEK7B.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-TZDVTNE7.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
+Failed:`),t),await a(1)}}),y.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",P,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(t,l)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-L6TDB5O5.js"),{writeOutput:u,toJSON:c}=await import("./ci-output-MD5GTVR2.js"),s=new e,f={variables:l.var||{}};if(l.yaml)f.workflowYaml=l.yaml;else if(t)if(t.endsWith(".yaml")||t.endsWith(".yml")){let i=await import("fs"),p=(await import("path")).resolve(t);i.existsSync(p)||(console.log(o.red(`
 File not found: ${p}
 `)),await a(1)),f.workflowYaml=i.readFileSync(p,"utf-8")}else f.templateName=t;else console.log(o.red(`
 Provide a template name or --yaml. Use "workflow browser-list" to see templates.

package/dist/cli/chunks/workflow-orchestrator-RZWCLTT5.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.14.1");process.exit(0)}
+import{a,b,c,d}from"./chunk-FH7SCX2I.js";import"./chunk-HCCILQGN.js";import"./chunk-6YIMLUH6.js";import"./chunk-HJD52N32.js";import"./chunk-AZUC7E5S.js";import"./chunk-CGZ7LTUK.js";import"./chunk-J7VAD4RG.js";import"./chunk-D6RCRTTR.js";import"./chunk-VVP2ROXD.js";import"./chunk-UWRMPRY5.js";import"./chunk-NAJCQJSK.js";import"./chunk-LJ63HPPN.js";import"./chunk-45S5553E.js";import"./chunk-CGDW47WP.js";import"./chunk-FPBQ7BXU.js";import"./chunk-L4WATX6B.js";import"./chunk-7GF6IRSU.js";import"./chunk-3WSH4HD2.js";import"./chunk-TGFJUL6M.js";import"./chunk-PYAH4K2U.js";import"./chunk-DKXSJDII.js";import"./chunk-EHW62JL2.js";export{b as DEFAULT_WORKFLOW_CONFIG,a as WorkflowEvents,c as WorkflowOrchestrator,d as createWorkflowOrchestrator};

package/dist/cli/chunks/{wrappers-7S6DQTEA.js → wrappers-ASAU36VK.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.13.12");process.exit(0)}
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-7PCIN7UN.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-2VY7FL6A.js";import"./chunk-M73KM3AZ.js";import"./chunk-KRZYWVS3.js";import"./chunk-3ASVQILY.js";import"./chunk-GEQWCK4F.js";import"./chunk-IOJ34SXJ.js";import"./chunk-6KI6LAAZ.js";import"./chunk-VA2ORJB5.js";import"./chunk-L3GBNX7B.js";import"./chunk-Z56BBX77.js";import"./chunk-5E76HULA.js";import"./chunk-7LATB5IR.js";import"./chunk-4Z4X2ND4.js";import"./chunk-U5G6OC2C.js";import"./chunk-JVFZAJ5N.js";import"./chunk-2VTX4SYW.js";import"./chunk-N4OQ4D4V.js";import"./chunk-AN5CGTTJ.js";import"./chunk-ZMYV4R32.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.14.1");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-TQ2JZVZ3.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-S53ZUAVI.js";import"./chunk-6YIMLUH6.js";import"./chunk-HJD52N32.js";import"./chunk-AZUC7E5S.js";import"./chunk-CGZ7LTUK.js";import"./chunk-J7VAD4RG.js";import"./chunk-D6RCRTTR.js";import"./chunk-VVP2ROXD.js";import"./chunk-NAJCQJSK.js";import"./chunk-45S5553E.js";import"./chunk-CGDW47WP.js";import"./chunk-FPBQ7BXU.js";import"./chunk-L4WATX6B.js";import"./chunk-7GF6IRSU.js";import"./chunk-3WSH4HD2.js";import"./chunk-TGFJUL6M.js";import"./chunk-PYAH4K2U.js";import"./chunk-DKXSJDII.js";import"./chunk-EHW62JL2.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};

package/dist/cli/commands/learning.js

@@ -21,6 +21,8 @@ import { createLearningMetricsTracker, } from '../../learning/metrics-tracker.js
 import { createRegretTracker, } from '../../learning/regret-tracker.js';
 import { openDatabase } from '../../shared/safe-db.js';
 import { createSQLitePatternStore } from '../../learning/sqlite-persistence.js';
+import { getActiveEmbeddingSpaceIdentity } from '../../learning/real-embeddings.js';
+import { inspectEmbeddingSpaceRows } from '../../learning/embedding-space.js';
 // Extracted helpers
 import { initializeLearningSystem, printJson, printSuccess, printError, printInfo, displayDashboard, getDbPath, compressFile, decompressFile, verifyDatabaseIntegrity, getSchemaVersion, padRight, EXPORT_FORMAT_VERSION, DOMAIN_MAPPING, PATTERN_TYPE_MAPPING, } from './learning-helpers.js';
 // ============================================================================
@@ -65,12 +67,54 @@ Examples:
     registerImportMergeCommand(learning);
     registerDreamCommand(learning);
     registerBackfillEmbeddingsCommand(learning);
+    registerEmbeddingHealthCommand(learning);
     registerRepairCommand(learning);
     registerHealthCommand(learning);
     registerLoopHealthCommand(learning);
     return learning;
 }
 // ============================================================================
+// Subcommand: embedding-health (#633)
+// ============================================================================
+function registerEmbeddingHealthCommand(learning) {
+    learning
+        .command('embedding-health')
+        .description('Display active and stored embedding-space provenance')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const dbPath = path.join(findProjectRoot(), '.agentic-qe', 'memory.db');
+        if (!existsSync(dbPath)) {
+            throw new Error('Database not found. Run "aqe init --auto" first.');
+        }
+        const db = openDatabase(dbPath, { readonly: true });
+        try {
+            const table = db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='qe_pattern_embeddings'").get();
+            const hasSpaceId = table
+                ? db.prepare("PRAGMA table_info('qe_pattern_embeddings')").all()
+                    .some((column) => column.name === 'space_id')
+                : false;
+            const rows = table
+                ? db.prepare(`SELECT ${hasSpaceId ? 'space_id' : 'NULL'} AS spaceId FROM qe_pattern_embeddings`).all()
+                : [];
+            const diagnostics = inspectEmbeddingSpaceRows(rows, getActiveEmbeddingSpaceIdentity()?.spaceId ?? null);
+            if (options.json) {
+                printJson(diagnostics);
+                return;
+            }
+            console.log(chalk.bold('\nEmbedding Space Health\n'));
+            console.log(`  Status: ${diagnostics.status}`);
+            console.log(`  Active space: ${diagnostics.activeSpaceId ?? '(runtime not initialized)'}`);
+            console.log(`  Stored spaces: ${diagnostics.storedSpaceIds.join(', ') || '(none)'}`);
+            console.log(`  Verified vectors: ${diagnostics.verifiedVectors}`);
+            console.log(`  Mismatched vectors: ${diagnostics.mismatchedVectors}`);
+            console.log(`  Unverified vectors: ${diagnostics.unverifiedVectors}\n`);
+        }
+        finally {
+            db.close();
+        }
+    });
+}
+// ============================================================================
 // Subcommand: backfill-embeddings
 // ============================================================================
 function registerBackfillEmbeddingsCommand(learning) {

package/dist/cli/commands/llm-router.js

@@ -687,29 +687,35 @@ async function executeAdvise(options) {
             console.log(chalk.gray('Consulting advisor...'));
         }
         // Lazy-load to keep CLI cold-start fast when advise is not used
-        const { createProviderManager } = await import('../../shared/llm/provider-manager.js');
-        const { createHybridRouter } = await import('../../shared/llm/router/hybrid-router.js');
-        const { MultiModelExecutor, DEFAULT_ADVISOR_PROVIDER, DEFAULT_ADVISOR_MODEL } = await import('../../routing/advisor/multi-model-executor.js');
-        const provider = (options.provider ?? DEFAULT_ADVISOR_PROVIDER);
-        const model = options.model ?? DEFAULT_ADVISOR_MODEL;
-        // Phase 0: bootstrap a minimal ProviderManager + HybridRouter for the advisor call.
-        // Phase 1+ reuses a shared router from the AQE kernel.
-        const providerManager = createProviderManager({
-            primary: provider === 'openrouter' ? 'openrouter' : provider,
-            providers: {
-                openrouter: {
-                    apiKey: process.env.OPENROUTER_API_KEY,
-                    model,
-                },
+        const { createLLMRouterService } = await import('../../shared/llm/llm-router-service.js');
+        const { MultiModelExecutor, DEFAULT_ADVISOR_MODEL } = await import('../../routing/advisor/multi-model-executor.js');
+        const requestedProvider = options.provider;
+        // Use the same config-aware construction path as the kernel. In particular,
+        // loadRouterConfig() registers ADR-127 external providers before the
+        // ProviderManager is built. The old minimal bootstrap bypassed that step,
+        // so `llm providers` recognized a declared host while `llm advise` rejected
+        // the same identity as unknown (#628).
+        const built = await createLLMRouterService({
+            projectRoot: configProjectRoot(),
+            // Advisor transcripts may be paired with ambient API credentials. A
+            // repository-controlled baseUrl must never become their destination.
+            allowProjectProviderEndpoints: false,
+            override: {
+                mode: 'manual',
+                ...(requestedProvider ? { defaultProvider: requestedProvider } : {}),
+                ...(options.model ? { defaultModel: options.model } : {}),
             },
         });
-        const router = createHybridRouter(providerManager, {
-            mode: 'manual',
-            defaultProvider: provider,
-            defaultModel: model,
-        });
-        await router.initialize();
-        const executor = new MultiModelExecutor(router);
+        if (!built) {
+            throw new Error(`No enabled LLM provider is available for advisor${requestedProvider ? ` provider "${requestedProvider}"` : ''}.`);
+        }
+        // With no CLI/MCP override, honor the project's resolved default. Falling
+        // back to OpenRouter here made declared external defaults unreachable when
+        // an OpenRouter key happened to coexist in the environment.
+        const provider = requestedProvider ?? built.resolvedConfig.defaultProvider;
+        const model = options.model ?? built.resolvedConfig.providers?.[provider]?.defaultModel ??
+            built.resolvedConfig.defaultModel ?? DEFAULT_ADVISOR_MODEL;
+        const executor = new MultiModelExecutor(built.router);
         const redactMode = (options.redact ?? 'strict');
         const result = await executor.consult(transcript, {
             provider,

package/dist/cli/commands/platform.d.ts

@@ -22,6 +22,7 @@ export interface PlatformVerificationResult {
 export interface PlatformVerificationOptions {
     expectMcp?: boolean;
     expectRuflo?: boolean;
+    guidancePolicy?: 'full' | 'compact' | 'none';
 }
 /** Inspect the complete installed surface for a platform without changing it. */
 export declare function verifyPlatformConfiguration(projectRoot: string, platformId: PlatformId, options?: PlatformVerificationOptions): PlatformVerificationResult;

package/dist/cli/commands/platform.js

@@ -7,7 +7,7 @@
  *   setup  - Set up a specific platform by name
  *   verify - Verify a platform's configuration
  */
-import { Command } from 'commander';
+import { Command, Option } from 'commander';
 import chalk from 'chalk';
 import { existsSync, readFileSync } from 'node:fs';
 import path from 'node:path';
@@ -65,6 +65,14 @@ function checkAqeEntry(filePath, _platform) {
         return false;
     }
 }
+function detectCodexGuidance(content) {
+    const start = '<!-- BEGIN AGENTIC-QE CODEX -->';
+    const end = '<!-- END AGENTIC-QE CODEX -->';
+    const blocks = content.match(/<!-- BEGIN AGENTIC-QE CODEX -->[\s\S]*?<!-- END AGENTIC-QE CODEX -->/g) || [];
+    if (blocks.length === 0)
+        return content.includes(start) || content.includes(end) ? 'malformed' : 'none';
+    return blocks[0].includes('Discover AQE tools and skills from their live schemas') ? 'compact' : 'full';
+}
 /** Inspect the complete installed surface for a platform without changing it. */
 export function verifyPlatformConfiguration(projectRoot, platformId, options = {}) {
     const platform = PLATFORM_REGISTRY[platformId];
@@ -90,10 +98,14 @@ export function verifyPlatformConfiguration(projectRoot, platformId, options = {
     }
     const rulesPath = path.join(projectRoot, platform.rulesPath);
     const rulesExists = existsSync(rulesPath);
-    add('Behavioral rules', rulesExists, rulesExists ? platform.rulesPath : `missing: ${platform.rulesPath}`);
-    if (platformId === 'codex' && rulesExists) {
-        const rules = readFileSync(rulesPath, 'utf-8');
-        add('AQE instructions', rules.includes('Quality Engineering Standards (Agentic QE)'), 'AGENTS.md contains generated AQE guidance');
+    if (platformId === 'codex') {
+        const expected = options.guidancePolicy ?? 'full';
+        const actual = rulesExists ? detectCodexGuidance(readFileSync(rulesPath, 'utf-8')) : 'none';
+        add('Behavioral rules', expected === 'none' || rulesExists, expected === 'none' ? 'intentionally disabled' : (rulesExists ? platform.rulesPath : `missing: ${platform.rulesPath}`));
+        add('Codex guidance', actual === expected, `selected=${expected}, detected=${actual}`);
+    }
+    else {
+        add('Behavioral rules', rulesExists, rulesExists ? platform.rulesPath : `missing: ${platform.rulesPath}`);
     }
     if (platformId === 'codex') {
         const hooksPath = path.join(projectRoot, '.codex', 'hooks.json');
@@ -175,6 +187,9 @@ export function createPlatformCommand() {
         .description('Set up a specific platform configuration')
         .option('--overwrite', 'Overwrite existing configuration files')
         .option('--with-ruflo', 'Add optional Ruflo guidance and lifecycle hooks (Codex only)')
+        .addOption(new Option('--codex-guidance <mode>', 'Codex AGENTS.md guidance policy')
+        .choices(['full', 'compact', 'none'])
+        .default('full'))
         .action(async (name, options) => {
         const projectRoot = process.cwd();
         if (!isValidPlatformId(name)) {
@@ -222,7 +237,10 @@ export function createPlatformCommand() {
             const installer = factory({
                 projectRoot,
                 overwrite: options.overwrite,
-                ...(name === 'codex' ? { includeRuflo: options.withRuflo } : {}),
+                ...(name === 'codex' ? {
+                    includeRuflo: options.withRuflo,
+                    guidancePolicy: options.codexGuidance,
+                } : {}),
             });
             const result = await installer.install();
             if (result.success) {
@@ -262,6 +280,9 @@ export function createPlatformCommand() {
         .description('Verify a platform configuration is correct')
         .option('--no-mcp', 'Verify a deliberately MCP-free platform installation')
         .option('--with-ruflo', 'Require optional Ruflo guidance and lifecycle hooks (Codex only)')
+        .addOption(new Option('--codex-guidance <mode>', 'Expected Codex AGENTS.md guidance policy')
+        .choices(['full', 'compact', 'none'])
+        .default('full'))
         .action(async (name, options) => {
         const projectRoot = process.cwd();
         if (!isValidPlatformId(name)) {
@@ -279,6 +300,7 @@ export function createPlatformCommand() {
         const verification = verifyPlatformConfiguration(projectRoot, name, {
             expectMcp: options.mcp !== false,
             expectRuflo: options.withRuflo,
+            guidancePolicy: options.codexGuidance,
         });
         for (const check of verification.checks) {
             const message = `  [${check.passed ? 'pass' : 'fail'}] ${check.label}: ${check.detail}`;

package/dist/cli/commands/quality-gate.js

@@ -19,7 +19,7 @@ import { runQualityGate, listChecklistIds, } from '../../validation/quality-gate
 import { createRouterFrontierJudge, createUnavailableJudge, } from '../../validation/frontier-judge.js';
 export function createQualityGateCommand(_context, cleanupAndExit, _ensureInitialized) {
     return new Command('quality-gate')
-        .description('Two-gate, three-valued quality verdict against a pinned ADR-117 checklist (ADR-119)')
+        .description('Fail-closed quality and verification-reach verdict against a pinned checklist')
         .option('-c, --checklist <id>', 'Pinned anchor checklist id (e.g. A1-inRange)')
         .option('-a, --artifact-file <path>', 'File containing the artifact under judgement')
         .option('--artifact <text>', 'Inline artifact text (alternative to --artifact-file)')
@@ -27,6 +27,7 @@ export function createQualityGateCommand(_context, cleanupAndExit, _ensureInitia
         .option('--baseline-passed', 'Tests executed against the reference implementation')
         .option('--oracle-file <path>', 'JSON file with { passed, baselinePassed } from the ADR-113 oracle')
         .option('--anchor <path>', 'Override the frozen anchor path (ADR-117)')
+        .option('--verification-manifest <path>', 'Revision-bound failure-mode reach manifest (#651)')
         .option('--model <id>', 'Frontier judge model id (ADR-111: always frontier-tier)')
         .option('--list', 'List the available pinned checklist ids and exit')
         .option('-F, --format <format>', 'Output format (text|json)', 'text')
@@ -64,13 +65,14 @@ export function createQualityGateCommand(_context, cleanupAndExit, _ensureInitia
                 checklistId: options.checklist,
                 judge,
                 anchorPath: options.anchor,
+                verificationManifest: resolveVerificationManifest(options.verificationManifest),
             };
             const result = await runQualityGate(request);
             if (format === 'json') {
                 writeOutput(toJSON(result), options.output);
             }
             else {
-                printVerdict(result.verdict, result.mechanical, result.specCoverage, result.unmet, result.reason);
+                printVerdict(result.verdict, result.qualityVerdict, result.coverageVerdict, result.mechanical, result.specCoverage, result.unmet, result.reason, result.verification);
             }
             // Exit codes: 0 pass, 1 fail, 3 inconclusive (distinct so CI can branch).
             const code = result.verdict === 'pass' ? 0 : result.verdict === 'fail' ? 1 : 3;
@@ -82,6 +84,11 @@ export function createQualityGateCommand(_context, cleanupAndExit, _ensureInitia
         }
     });
 }
+function resolveVerificationManifest(path) {
+    if (!path)
+        return undefined;
+    return JSON.parse(fs.readFileSync(path, 'utf8'));
+}
 function resolveArtifact(options) {
     if (typeof options.artifact === 'string')
         return options.artifact;
@@ -121,11 +128,13 @@ export async function buildJudge(model) {
         logger: (message) => console.error(message),
     });
 }
-function printVerdict(verdict, mechanical, specCoverage, unmet, reason) {
+function printVerdict(verdict, qualityVerdict, coverageVerdict, mechanical, specCoverage, unmet, reason, verification) {
     const icon = verdict === 'pass' ? chalk.green('✓ PASS')
         : verdict === 'fail' ? chalk.red('✗ FAIL')
             : chalk.yellow('? INCONCLUSIVE');
     console.log(`\n  Quality Gate: ${icon}`);
+    console.log(`  Quality verdict: ${qualityVerdict}`);
+    console.log(`  Coverage verdict: ${coverageVerdict}`);
     console.log(`  Mechanical gate: ${mechanical === 'pass' ? chalk.green('pass') : chalk.red('fail')}`);
     if (specCoverage != null)
         console.log(`  Spec coverage:   ${chalk.cyan((specCoverage * 100).toFixed(0) + '%')}`);
@@ -134,6 +143,19 @@ function printVerdict(verdict, mechanical, specCoverage, unmet, reason) {
         for (const u of unmet)
             console.log(chalk.gray(`    - ${u}`));
     }
+    if (verification.kind === 'legacy-unknown') {
+        console.log(chalk.yellow(`  Verification reach: ${verification.reason}`));
+    }
+    else {
+        console.log(chalk.cyan('  Verification reach:'));
+        for (const risk of verification.risks) {
+            const direct = risk.directCheckIds.join(', ') || 'none';
+            const partial = risk.partialCheckIds.join(', ') || 'none';
+            const uncovered = risk.uncoveredObservations.join(', ') || 'none';
+            console.log(`    ${risk.riskId}: ${risk.verdict}`);
+            console.log(chalk.gray(`      direct=${direct}; partial=${partial}; uncovered=${uncovered}`));
+        }
+    }
     console.log(chalk.gray(`  ${reason}\n`));
 }
 //# sourceMappingURL=quality-gate.js.map

package/dist/cli/handlers/brain-handler.js

@@ -29,6 +29,7 @@ export class BrainHandler {
             .requiredOption('-o, --output <path>', 'Output directory path')
             .option('--format <format>', 'Export format: rvf (default) or jsonl', 'rvf')
             .option('--db <path>', 'Source database path')
+            .option('--force-overwrite-richer', 'Allow replacing an existing RVF with fewer patterns', false)
             .action(async (options) => {
             await this.executeExport(options);
         });
@@ -90,6 +91,7 @@ export class BrainHandler {
             const manifest = await exportBrain(dbPath, {
                 outputPath: path.resolve(options.output),
                 format: options.format,
+                allowOverwriteRicher: options.forceOverwriteRicher,
             });
             console.log(chalk.green('  Export complete.'));
             console.log(`  Format:   ${chalk.cyan('format' in manifest ? manifest.format ?? 'jsonl' : 'jsonl')}`);

package/dist/cli/handlers/init-handler.d.ts

@@ -66,6 +66,10 @@ export interface InitJsonOutput {
             agents: number;
             skills: number;
         };
+        codexGuidance?: {
+            policy: 'full' | 'compact' | 'none';
+            ownedBytes: number;
+        };
     };
     totalDurationMs: number;
     timestamp: string;
@@ -94,6 +98,7 @@ interface InitOptions {
     withRoocode?: boolean;
     withCodex?: boolean;
     withRuflo?: boolean;
+    codexGuidance?: 'full' | 'compact' | 'none';
     withWindsurf?: boolean;
     withContinuedev?: boolean;
     withAllPlatforms?: boolean;

package/dist/cli/handlers/init-handler.js

@@ -3,6 +3,7 @@
  *
  * Handles the 'aqe init' command for system initialization.
  */
+import { Option } from 'commander';
 import chalk from 'chalk';
 import { createRequire } from 'node:module';
 import { ALL_DOMAINS } from '../../shared/types/index.js';
@@ -49,6 +50,9 @@ export class InitHandler {
             .option('--with-kilocode', 'Include Kilo Code MCP config and custom QE mode')
             .option('--with-roocode', 'Include Roo Code MCP config and custom QE mode')
             .option('--with-codex', 'Include OpenAI Codex CLI MCP, AGENTS.md, hooks, and QE skills')
+            .addOption(new Option('--codex-guidance <mode>', 'Codex AGENTS.md guidance policy')
+            .choices(['full', 'compact', 'none'])
+            .default('full'))
             .option('--with-ruflo', 'Add optional Ruflo guidance and lifecycle hooks to the Codex setup')
             .option('--with-windsurf', 'Include Windsurf MCP config and rules')
             .option('--with-continuedev', 'Include Continue.dev MCP config and rules')
@@ -181,6 +185,7 @@ export class InitHandler {
             withRooCode: options.withRoocode,
             withCodex: options.withCodex,
             withRuflo: options.withRuflo,
+            codexGuidance: options.codexGuidance,
             withWindsurf: options.withWindsurf,
             withContinueDev: options.withContinuedev,
             noMcp: options.noMcp && !options.withMcp,
@@ -447,6 +452,7 @@ Options:
   --with-n8n                 Install n8n workflow testing agents and skills
   --with-opencode            Include OpenCode agent/skill provisioning
   --with-codex               Include OpenAI Codex hooks, instructions, skills, and MCP
+  --codex-guidance <mode>    Codex AGENTS.md guidance: full, compact, or none
   --with-ruflo               Opt into Ruflo guidance and lifecycle hooks for Codex
   --auto-migrate             Automatically migrate from v2 if detected
   --with-claude-flow         Force Claude Flow integration setup

package/dist/cli/index.js

@@ -10,6 +10,7 @@
  * See: cli/commands/ for additional command modules
  */
 import { toErrorMessage } from '../shared/error-utils.js';
+import { createRequire } from 'node:module';
 import { Command } from 'commander';
 import chalk from 'chalk';
 import { ALL_DOMAINS } from '../shared/types/index.js';
@@ -207,7 +208,9 @@ async function cleanupAndExit(code = 0) {
 // CLI Program
 // ============================================================================
 const program = new Command();
-const VERSION = typeof __CLI_VERSION__ !== 'undefined' ? __CLI_VERSION__ : '0.0.0-dev';
+const require = createRequire(import.meta.url);
+const packageVersion = require('../../package.json').version;
+const VERSION = typeof __CLI_VERSION__ !== 'undefined' ? __CLI_VERSION__ : packageVersion;
 program
     .name('aqe')
     .description('Agentic QE - Domain-Driven Quality Engineering')

package/dist/context/compaction/index.d.ts

@@ -24,6 +24,7 @@ export { Tier1Microcompact, type Tier1Result } from './tier1-microcompact';
 export { Tier2SessionSummary, type ConversationMessage, type Tier2Result, type SessionSummaryOptions } from './tier2-session-summary';
 export { Tier3LLMCompact, type Tier3Result, type LLMCompactCaller, type Tier3Options } from './tier3-llm-compact';
 export { Tier4Reactive, type Tier4Result, type Tier4Options } from './tier4-reactive';
+export { hashContextContent, leastTrustedAuthority, type ContextSourceKind, type InstructionAuthority, type InstructionProvenance, type ProvenancedContent, } from './instruction-provenance';
 export interface CompactionPipelineOptions {
     /** Total context budget in tokens (default: 100_000) */
     totalBudget?: number;

package/dist/context/compaction/index.js

@@ -25,6 +25,7 @@ export { Tier1Microcompact } from './tier1-microcompact.js';
 export { Tier2SessionSummary } from './tier2-session-summary.js';
 export { Tier3LLMCompact } from './tier3-llm-compact.js';
 export { Tier4Reactive } from './tier4-reactive.js';
+export { hashContextContent, leastTrustedAuthority, } from './instruction-provenance.js';
 // ============================================================================
 // CompactionPipeline
 // ============================================================================
@@ -138,6 +139,8 @@ export class CompactionPipeline {
                             content: t3.summary,
                             timestamp: Date.now(),
                             estimatedTokens: t3.summaryTokens,
+                            id: t3.summaryItem?.id,
+                            provenance: t3.summaryItem,
                         }];
                     this.budget.releaseTokens(t3.tokensSaved);
                 }

package/dist/context/compaction/instruction-provenance.d.ts

@@ -0,0 +1,20 @@
+export type InstructionAuthority = 'system-effective' | 'user-authorized' | 'assistant-derived' | 'tool-observation' | 'memory-derived' | 'unknown';
+export type ContextSourceKind = 'user' | 'tool' | 'file' | 'web' | 'agent' | 'memory' | 'skill' | 'goal' | 'schedule';
+export interface InstructionProvenance {
+    authority: InstructionAuthority;
+    /** Immutable authority at the start of this item's derivation chain. */
+    originAuthority: InstructionAuthority;
+    sourceKind: ContextSourceKind;
+    sourceRef?: string;
+    parentIds: string[];
+    contentHash: string;
+    createdAt: string;
+    mayInduceAction: boolean;
+}
+export interface ProvenancedContent extends InstructionProvenance {
+    id: string;
+    content: string;
+}
+export declare function hashContextContent(content: string): string;
+export declare function leastTrustedAuthority(authorities: InstructionAuthority[]): InstructionAuthority;
+//# sourceMappingURL=instruction-provenance.d.ts.map

package/dist/context/compaction/instruction-provenance.js

@@ -0,0 +1,18 @@
+import { createHash } from 'node:crypto';
+const AUTHORITY_TRUST = {
+    unknown: 0,
+    'tool-observation': 1,
+    'memory-derived': 1,
+    'assistant-derived': 2,
+    'user-authorized': 3,
+    'system-effective': 4,
+};
+export function hashContextContent(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+export function leastTrustedAuthority(authorities) {
+    if (authorities.length === 0)
+        return 'unknown';
+    return authorities.reduce((least, current) => AUTHORITY_TRUST[current] < AUTHORITY_TRUST[least] ? current : least);
+}
+//# sourceMappingURL=instruction-provenance.js.map

package/dist/context/compaction/tier2-session-summary.d.ts

@@ -12,6 +12,7 @@
  *   - Retains at least `minRecentTokens` of recent conversation
  *   - Caps summary at `maxSummaryTokens`
  */
+import { type InstructionProvenance, type ProvenancedContent } from './instruction-provenance';
 export interface ConversationMessage {
     role: 'user' | 'assistant' | 'tool_use' | 'tool_result';
     content: string;
@@ -20,6 +21,10 @@ export interface ConversationMessage {
     estimatedTokens?: number;
     /** If this is a tool_use, the ID linking it to its tool_result pair */
     toolUseId?: string;
+    /** Stable item identity used by derived summaries. */
+    id?: string;
+    /** Missing legacy provenance is treated as unknown and non-authorizing. */
+    provenance?: InstructionProvenance;
 }
 export interface SessionSummaryOptions {
     /** Minimum tokens of recent conversation to preserve (default: 10_000) */
@@ -31,6 +36,8 @@ export interface Tier2Result {
     tier: 2;
     /** The condensed summary text */
     summary: string;
+    /** Non-authorizing envelope for the derived summary. */
+    summaryItem?: ProvenancedContent;
     /** Tokens in the summary */
     summaryTokens: number;
     /** Messages preserved verbatim (recent tail) */
@@ -58,6 +65,7 @@ export declare class Tier2SessionSummary {
      *   3. Return summary + preserved tail.
      */
     compact(messages: ConversationMessage[]): Tier2Result;
+    private deriveSummaryItem;
     /**
      * Walk backward to find the first index where we've accumulated enough
      * recent tokens. Never splits a tool_use/tool_result pair.

package/dist/context/compaction/tier2-session-summary.js

@@ -13,6 +13,7 @@
  *   - Caps summary at `maxSummaryTokens`
  */
 import { estimateTokensPadded } from '../../mcp/middleware/microcompact.js';
+import { hashContextContent, leastTrustedAuthority, } from './instruction-provenance.js';
 // ============================================================================
 // Defaults
 // ============================================================================
@@ -63,11 +64,13 @@ export class Tier2SessionSummary {
         const preservedTokens = toPreserve.reduce((s, m) => s + m.estimatedTokens, 0);
         // Build summary from the older messages
         const summary = this.buildSummary(toSummarize);
+        const summaryItem = summary ? this.deriveSummaryItem(summary, toSummarize) : undefined;
         const summaryTokens = Math.min(estimateTokensPadded(summary), this.maxSummaryTokens);
         const tokensSaved = originalTokens - preservedTokens - summaryTokens;
         return {
             tier: 2,
             summary,
+            summaryItem,
             summaryTokens,
             preservedMessages: toPreserve,
             preservedTokens,
@@ -76,6 +79,23 @@ export class Tier2SessionSummary {
             tokensSaved: Math.max(0, tokensSaved),
         };
     }
+    deriveSummaryItem(summary, parents) {
+        const parentIds = parents.map(message => message.id ?? `sha256:${hashContextContent(message.content)}`);
+        const originAuthority = leastTrustedAuthority(parents.map(message => message.provenance?.originAuthority ?? 'unknown'));
+        const contentHash = hashContextContent(summary);
+        return {
+            id: `tier2:${contentHash}`,
+            content: summary,
+            authority: 'assistant-derived',
+            originAuthority,
+            sourceKind: 'agent',
+            sourceRef: 'context-compaction:tier2',
+            parentIds,
+            contentHash,
+            createdAt: new Date().toISOString(),
+            mayInduceAction: true,
+        };
+    }
     // --------------------------------------------------------------------------
     // Internal
     // --------------------------------------------------------------------------

package/dist/context/compaction/tier3-llm-compact.d.ts

@@ -18,6 +18,7 @@
  *   9. Suggested Next Action
  */
 import type { ConversationMessage } from './tier2-session-summary';
+import { type ProvenancedContent } from './instruction-provenance';
 export interface Tier3Options {
     /** Max tokens reserved for the summary output (default: 20_000) */
     maxSummaryTokens?: number;
@@ -39,6 +40,8 @@ export interface Tier3Result {
     tier: 3;
     /** The structured 9-section summary */
     summary: string;
+    /** Non-authorizing envelope retaining the summary's derivation chain. */
+    summaryItem?: ProvenancedContent;
     /** Tokens in the summary */
     summaryTokens: number;
     /** Original message count */
@@ -59,6 +62,7 @@ export declare class Tier3LLMCompact {
     compact(messages: ConversationMessage[]): Promise<Tier3Result>;
     /** Build a compact transcript for the LLM prompt. */
     private buildTranscript;
+    private deriveSummaryItem;
     /** Extractive fallback when no LLM is available. */
     private extractiveFallback;
 }