agentic-qe 3.14.5 → 3.14.7

package/dist/cli/commands/audit.d.ts

@@ -4,7 +4,8 @@
  * Verifies the witness chain audit trail integrity.
  * Shows chain length, integrity status, and last receipt hash.
  *
- * Usage: aqe audit verify [--format json|text]
+ * Usage: aqe audit verify [--chain governance|audit] [--format json|text]
+ *        aqe audit repair --chain audit [--dry-run] [--format json|text]
  *
  * @module cli/commands/audit
  * @see ADR-083-coherence-gated-agent-actions.md
@@ -12,6 +13,8 @@
 import { Command } from 'commander';
 import { type ChainVerificationResult } from '../../governance/witness-chain.js';
 import type { CLIContext } from '../handlers/interfaces.js';
+import type { ChainStatus } from '../../audit/witness-chain-verifier.js';
+import type { RepairResult } from '../../audit/witness-chain-repair.js';
 /**
  * Verification output for JSON format.
  */
@@ -22,11 +25,17 @@ export interface AuditVerifyOutput {
     brokenAt: number;
     lastHash: string;
     message: string;
+    status?: ChainStatus;
+    tampered?: boolean;
+    tamperedAt?: number;
+    tamperReason?: string;
+    forks?: number[];
+    acknowledgedForks?: number[];
 }
 /**
  * Format verification result as human-readable text.
  */
-export declare function formatVerificationText(result: ChainVerificationResult, featureEnabled: boolean): string;
+export declare function formatVerificationText(result: ChainVerificationResult, featureEnabled: boolean, audit?: Pick<AuditVerifyOutput, 'status' | 'tamperedAt' | 'tamperReason' | 'forks' | 'acknowledgedForks'>): string;
 /**
  * Handle the audit verify command.
  *
@@ -48,6 +57,15 @@ export declare function handleAuditVerify(options: {
 export declare function handleAuditChainVerify(options: {
     format?: 'json' | 'text';
 }): Promise<AuditVerifyOutput>;
+/**
+ * `aqe audit repair --chain audit`: re-anchor a store whose only breaks are
+ * accidental pre-3.14.5 forks (#753). Refuses on tampering, backs up first,
+ * never rewrites existing rows. See src/audit/witness-chain-repair.ts.
+ */
+export declare function handleAuditChainRepair(options: {
+    format?: 'json' | 'text';
+    dryRun?: boolean;
+}): Promise<RepairResult>;
 /**
  * Create the audit command group following the project convention.
  */

package/dist/cli/commands/audit.js

@@ -4,7 +4,8 @@
  * Verifies the witness chain audit trail integrity.
  * Shows chain length, integrity status, and last receipt hash.
  *
- * Usage: aqe audit verify [--format json|text]
+ * Usage: aqe audit verify [--chain governance|audit] [--format json|text]
+ *        aqe audit repair --chain audit [--dry-run] [--format json|text]
  *
  * @module cli/commands/audit
  * @see ADR-083-coherence-gated-agent-actions.md
@@ -18,7 +19,7 @@ import path from 'node:path';
 /**
  * Format verification result as human-readable text.
  */
-export function formatVerificationText(result, featureEnabled) {
+export function formatVerificationText(result, featureEnabled, audit) {
     const lines = [];
     lines.push(chalk.bold('Witness Chain Audit Verification'));
     lines.push('');
@@ -30,20 +31,36 @@ export function formatVerificationText(result, featureEnabled) {
     // Chain length
     lines.push(`  Chain Length:  ${result.length} receipts`);
     // Integrity status
-    const integrityStatus = result.valid
-        ? chalk.green('VALID')
-        : chalk.red('BROKEN');
+    const integrityStatus = audit?.status === 'forked'
+        ? chalk.yellow('FORKED (no tampering detected)')
+        : result.valid
+            ? chalk.green(audit?.status === 'valid-with-forks' ? 'VALID (forks re-anchored)' : 'VALID')
+            : chalk.red(audit?.status === 'tampered' ? 'BROKEN (tampering detected)' : 'BROKEN');
     lines.push(`  Integrity:    ${integrityStatus}`);
     // Last hash
     if (result.length > 0) {
         lines.push(`  Last Hash:    ${result.lastHash.slice(0, 16)}...`);
     }
+    const forkCount = audit?.forks?.length ?? 0;
+    if (forkCount > 0) {
+        const reanchored = audit?.acknowledgedForks?.length ?? 0;
+        lines.push(`  Forks:        ${forkCount} accidental (pre-3.14.5 concurrent writes, #753), ${reanchored} re-anchored`);
+    }
     // Details
-    if (!result.valid && result.brokenAt >= 0) {
+    if (audit?.status === 'forked') {
+        lines.push('');
+        lines.push(chalk.yellow(`  ${result.message}`));
+    }
+    else if (!result.valid && result.brokenAt >= 0) {
         lines.push('');
-        lines.push(chalk.red(`  Break detected at index ${result.brokenAt}`));
+        const at = audit?.status === 'tampered' && audit.tamperedAt !== undefined ? audit.tamperedAt : result.brokenAt;
+        lines.push(chalk.red(`  Break detected at index ${at}${audit?.tamperReason ? ` (${audit.tamperReason})` : ''}`));
         lines.push(chalk.red(`  ${result.message}`));
     }
+    else if (result.valid && forkCount > 0) {
+        lines.push('');
+        lines.push(chalk.green(`  ${result.message}`));
+    }
     lines.push('');
     return lines.join('\n');
 }
@@ -109,8 +126,7 @@ export async function handleAuditVerify(options) {
  */
 export async function handleAuditChainVerify(options) {
     const { WitnessChain, hashWith, serializeEntry } = await import('../../audit/witness-chain.js');
-    const root = findProjectRoot();
-    const dbPath = path.join(root, '.agentic-qe', 'memory.db');
+    const { dbPath, keyDir } = auditChainPaths();
     let output;
     if (!existsSync(dbPath)) {
         output = {
@@ -126,10 +142,15 @@ export async function handleAuditChainVerify(options) {
         const { default: Database } = await import('better-sqlite3');
         const db = new Database(dbPath, { readonly: true });
         try {
-            const chain = new WitnessChain(db);
+            const chain = new WitnessChain(db, (await loadReadOnlyKeyManager(keyDir)) ?? undefined);
             await chain.initialize();
-            const result = chain.verify({ includeArchive: true, checkSignatures: true });
-            const lastEntry = db.prepare('SELECT * FROM witness_chain ORDER BY id DESC LIMIT 1').get();
+            // Fork and CHAIN_REANCHOR rows signed by a key in witness-keys/ are always
+            // signature-checked. The every-row `checkSignatures` sweep stays off, as it
+            // effectively was before this command loaded keys: it would fail rows
+            // signed by keys this project never stored (e.g. imported rows).
+            const result = chain.verify({ includeArchive: true, checkSignatures: false });
+            const { tableExists } = await import('../../audit/witness-chain-verifier.js');
+            const lastEntry = !tableExists(db, 'witness_chain') ? undefined : db.prepare('SELECT * FROM witness_chain ORDER BY id DESC LIMIT 1').get();
             const lastHash = lastEntry
                 ? hashWith(lastEntry.hash_algo || 'sha256', serializeEntry(lastEntry))
                 : '';
@@ -139,9 +160,13 @@ export async function handleAuditChainVerify(options) {
                 integrity: result.valid,
                 brokenAt: result.brokenAt ?? -1,
                 lastHash,
-                message: result.valid
-                    ? `Audit chain verified: ${result.entriesChecked} entries checked, ${result.signatureFailures ?? 0} signature failures`
-                    : `Audit chain BROKEN at id=${result.brokenAt} (${result.entriesChecked} entries checked before the break)`,
+                message: auditChainMessage(result),
+                status: result.status,
+                tampered: result.tampered,
+                ...(result.tamperedAt !== undefined ? { tamperedAt: result.tamperedAt } : {}),
+                ...(result.tamperReason ? { tamperReason: result.tamperReason } : {}),
+                forks: result.forks,
+                acknowledgedForks: result.acknowledgedForks,
             };
         }
         finally {
@@ -152,10 +177,103 @@ export async function handleAuditChainVerify(options) {
         console.log(JSON.stringify(output, null, 2));
     }
     else {
-        console.log(formatVerificationText({ valid: output.integrity, length: output.chainLength, brokenAt: output.brokenAt, lastHash: output.lastHash, message: output.message }, output.featureEnabled));
+        console.log(formatVerificationText({ valid: output.integrity, length: output.chainLength, brokenAt: output.brokenAt, lastHash: output.lastHash, message: output.message }, output.featureEnabled, output));
     }
     return output;
 }
+function auditChainPaths() {
+    const root = findProjectRoot();
+    return {
+        dbPath: path.join(root, '.agentic-qe', 'memory.db'),
+        keyDir: path.join(root, '.agentic-qe', 'witness-keys'),
+    };
+}
+/** Persisted witness keys, loaded without generating (or writing) anything. */
+async function loadReadOnlyKeyManager(keyDir) {
+    if (!existsSync(keyDir))
+        return null;
+    const { WitnessKeyManager: KeyManager } = await import('../../audit/witness-key-manager.js');
+    return new KeyManager({ keyDir, autoGenerate: false });
+}
+function auditChainMessage(result) {
+    const n = result.entriesChecked;
+    const forks = result.forks.length;
+    const pending = forks - result.acknowledgedForks.length;
+    switch (result.status) {
+        case 'valid':
+            return `Audit chain verified: ${n} entries checked, ${result.signatureFailures ?? 0} signature failures`;
+        case 'valid-with-forks':
+            return `Audit chain verified: ${n} entries checked; ${forks} accidental fork(s) from pre-3.14.5 ` +
+                'concurrent writes are re-anchored by CHAIN_REANCHOR, no tampering detected';
+        case 'forked':
+            return `${pending} accidental fork(s) (pre-3.14.5 concurrent writes, #753), no tampering detected — ` +
+                `${n} entries checked, first fork at id=${result.brokenAt}. ` +
+                'Run `aqe audit repair --chain audit` to back up the store and re-anchor.';
+        default:
+            return `Audit chain BROKEN: tampering detected at id=${result.tamperedAt} (${result.tamperReason}); ` +
+                `${n} entries checked` + (forks > 0 ? `, ${forks} accidental fork(s) found before it` : '');
+    }
+}
+function repairFailed(result) {
+    if (result.action === 'refused')
+        return true;
+    return result.action === 'reanchored' && !(result.after?.status === 'valid' || result.after?.status === 'valid-with-forks');
+}
+/**
+ * `aqe audit repair --chain audit`: re-anchor a store whose only breaks are
+ * accidental pre-3.14.5 forks (#753). Refuses on tampering, backs up first,
+ * never rewrites existing rows. See src/audit/witness-chain-repair.ts.
+ */
+export async function handleAuditChainRepair(options) {
+    const { repairWitnessChainForks } = await import('../../audit/witness-chain-repair.js');
+    const { dbPath, keyDir } = auditChainPaths();
+    const dryRun = options.dryRun === true;
+    let result;
+    if (!existsSync(dbPath)) {
+        const empty = { status: 'valid', entriesChecked: 0, forks: 0, unacknowledgedForks: 0 };
+        result = {
+            action: 'none', dryRun, message: `No database found at ${dbPath} — nothing to repair`,
+            before: empty, rowsBefore: { live: 0, archive: 0 }, rowsAfter: { live: 0, archive: 0 }, forksAcknowledged: [],
+        };
+    }
+    else {
+        const { openDatabase } = await import('../../shared/safe-db.js');
+        // A dry run opens read-only and never generates a signing key.
+        const db = openDatabase(dbPath, { readonly: dryRun, fileMustExist: true });
+        try {
+            const keyManager = dryRun
+                ? await loadReadOnlyKeyManager(keyDir)
+                : (await import('../../audit/witness-key-manager.js')).getDefaultWitnessKeyManager();
+            result = await repairWitnessChainForks(db, { dbPath, dryRun, keyManager });
+        }
+        finally {
+            db.close();
+        }
+    }
+    if (options.format === 'json') {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        console.log(formatRepairText(result));
+    }
+    return result;
+}
+function formatRepairText(result) {
+    const color = result.action === 'refused' ? chalk.red : result.action === 'reanchored' ? chalk.green : chalk.yellow;
+    const lines = [
+        chalk.bold('Witness Chain Audit Repair'),
+        '',
+        `  Action:       ${color(result.action.toUpperCase())}${result.dryRun ? ' (dry run)' : ''}`,
+        `  Before:       ${result.before.status}, ${result.before.forks} fork(s), ${result.before.unacknowledgedForks} unacknowledged`,
+        `  Rows:         live ${result.rowsBefore.live} -> ${result.rowsAfter.live}, archive ${result.rowsBefore.archive} -> ${result.rowsAfter.archive}`,
+    ];
+    if (result.after)
+        lines.push(`  After:        ${result.after.status}`);
+    if (result.backupPath)
+        lines.push(`  Backup:       ${result.backupPath}`);
+    lines.push('', `  ${color(result.message)}`, '');
+    return lines.join('\n');
+}
 /**
  * Create the audit command group following the project convention.
  */
@@ -180,6 +298,30 @@ export function createAuditCommand(_context, cleanupAndExit, _ensureInitialized)
             await cleanupAndExit(1);
         }
     });
+    audit
+        .command('repair')
+        .description('Re-anchor accidental pre-3.14.5 forks in the audit chain (#753); backs up first, refuses on tampering')
+        .option('-C, --chain <chain>', 'Chain to repair (only "audit" is supported)', 'audit')
+        .option('--dry-run', 'Report what would be done without writing anything', false)
+        .option('-F, --format <format>', 'Output format (json|text)', 'text')
+        .action(async (options) => {
+        try {
+            if (options.chain !== 'audit') {
+                console.error(`aqe audit repair supports only --chain audit (got "${options.chain}")`);
+                await cleanupAndExit(1);
+                return;
+            }
+            const result = await handleAuditChainRepair({
+                format: options.format,
+                dryRun: options.dryRun === true,
+            });
+            await cleanupAndExit(repairFailed(result) ? 1 : 0);
+        }
+        catch (error) {
+            console.error('Failed to repair witness chain:', error);
+            await cleanupAndExit(1);
+        }
+    });
     return audit;
 }
 //# sourceMappingURL=audit.js.map

package/dist/cli/commands/ci.js

@@ -53,7 +53,7 @@ async function executePhase(phase, context, outputDir, phaseIndex) {
                 if (result.success && result.value) {
                     const gen = result.value;
                     details = { testsGenerated: gen.tests.length, coverageEstimate: gen.coverageEstimate };
-                    summary = `Generated ${gen.tests.length} tests (est. ${gen.coverageEstimate}% coverage)`;
+                    summary = `Generated ${gen.tests.length} tests (${gen.coverageEstimate == null ? 'coverage unmeasured' : `est. ${gen.coverageEstimate}% coverage`})`;
                     const artifactPath = path.join(outputDir, 'test-generation.json');
                     fs.writeFileSync(artifactPath, toJSON(gen), 'utf-8');
                     artifacts.push(artifactPath);

package/dist/cli/commands/claude-flow-setup.js

@@ -16,7 +16,8 @@
  * - Rule-based model routing
  * - Local pattern learning
  */
-import { existsSync, writeFileSync, readFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
+import { writeFileIfChanged } from '../../init/idempotent-write.js';
 import { join } from 'node:path';
 import { safeJsonParse } from '../../shared/safe-json.js';
 import { toErrorMessage } from '../../shared/error-utils.js';
@@ -143,8 +144,8 @@ function updateMCPConfig(projectRoot) {
             env: {},
         };
     }
-    // Write updated settings
-    writeFileSync(claudeSettingsPath, JSON.stringify(settings, null, 2));
+    // Write updated settings — only when something changed (#778).
+    writeFileIfChanged(claudeSettingsPath, JSON.stringify(settings, null, 2));
 }
 // ============================================================================
 // Main Setup Function
@@ -195,7 +196,7 @@ export async function setupClaudeFlowIntegration(options) {
     const configPath = join(aqeDir, 'claude-flow-integration.json');
     try {
         const config = generateClaudeFlowConfig(projectRoot, features);
-        writeFileSync(configPath, JSON.stringify(config, null, 2));
+        writeFileIfChanged(configPath, JSON.stringify(config, null, 2));
         if (debug)
             console.log(`[ClaudeFlow] Config written to: ${configPath}`);
     }

package/dist/cli/commands/test.js

@@ -8,11 +8,13 @@ import chalk from 'chalk';
 import { filterTestFilesForFramework, walkSourceFiles } from '../utils/file-discovery.js';
 import { writeOutput, toJSON, toJUnit, testRunToMarkdown } from '../utils/ci-output.js';
 import { writeQualityEvidence } from '../../domains/quality-assessment/quality-evidence.js';
+import { validateBehaviorExamples } from '../../domains/test-generation/services/behavior-example-validation.js';
 export function createTestCommand(context, cleanupAndExit, ensureInitialized) {
     const testCmd = new Command('test')
         .description('Test generation, execution, scheduling, and load testing')
         .argument('<action>', 'Action (generate|execute|schedule|load)')
         .argument('[target]', 'Target file or directory')
+        .option('--behavior-examples <path>', 'JSON specification examples for a single source file')
         .option('-f, --framework <framework>', 'Test framework', 'vitest')
         .option('-t, --type <type>', 'Test type (unit|integration|e2e)', 'unit')
         .option('-F, --format <format>', 'Output format (text|json|junit|markdown)', 'text')
@@ -44,7 +46,17 @@ export function createTestCommand(context, cleanupAndExit, ensureInitialized) {
                     return;
                 }
                 console.log(chalk.gray(`  Found ${sourceFiles.length} source files\n`));
+                let behaviorExamples;
+                if (options.behaviorExamples) {
+                    if (sourceFiles.length !== 1)
+                        throw new Error('--behavior-examples requires exactly one source file');
+                    const fs = await import('node:fs/promises');
+                    // Same boundary validator as the MCP tools (#795): a malformed
+                    // fixture file fails here with a non-zero exit.
+                    behaviorExamples = validateBehaviorExamples(JSON.parse(await fs.readFile(options.behaviorExamples, 'utf8')));
+                }
                 const result = await testGenAPI.generateTests({
+                    behaviorExamples,
                     sourceFiles,
                     testType: options.type,
                     framework: options.framework,
@@ -73,7 +85,7 @@ export function createTestCommand(context, cleanupAndExit, ensureInitialized) {
                     else if (format === 'markdown') {
                         const md = `# Test Generation Report\n\n` +
                             `- **Tests Generated**: ${generated.tests.length}\n` +
-                            `- **Coverage Estimate**: ${generated.coverageEstimate}%\n` +
+                            `- **Coverage Estimate**: ${generated.coverageEstimate == null ? 'Unmeasured' : generated.coverageEstimate + '%'}\n` +
                             `- **Patterns Used**: ${generated.patternsUsed.join(', ') || 'none'}\n\n` +
                             `## Tests\n\n` +
                             generated.tests.map(t => `- **${t.name}** (${t.assertions} assertions) — \`${t.sourceFile}\``).join('\n') + '\n';
@@ -100,14 +112,17 @@ export function createTestCommand(context, cleanupAndExit, ensureInitialized) {
                         if (generated.tests.length > 10) {
                             console.log(chalk.gray(`    ... and ${generated.tests.length - 10} more`));
                         }
-                        console.log(`\n  Coverage Estimate: ${chalk.yellow(generated.coverageEstimate + '%')}`);
+                        console.log(`\n  Coverage Estimate: ${chalk.yellow(generated.coverageEstimate == null ? 'Unmeasured' : generated.coverageEstimate + '%')}`);
                         if (generated.patternsUsed.length > 0) {
                             console.log(`  Patterns Used: ${chalk.cyan(generated.patternsUsed.join(', '))}`);
                         }
                     }
                 }
                 else {
-                    console.log(chalk.red(`Failed: ${result.error?.message || 'Unknown error'}`));
+                    // A rejected generation (including fixtures the domain refuses,
+                    // e.g. an unknown export) must not exit 0 (#795).
+                    console.error(chalk.red(`Failed: ${result.error?.message || 'Unknown error'}`));
+                    await cleanupAndExit(1);
                 }
             }
             else if (action === 'execute') {

package/dist/cli/handlers/init-handler.d.ts

@@ -94,6 +94,8 @@ interface InitOptions {
     wizard?: boolean;
     auto?: boolean;
     upgrade?: boolean;
+    /** Explicitly install the optional browser engine and browser payload. */
+    browserEngine?: boolean;
     minimal?: boolean;
     skipPatterns?: boolean;
     skipCodeIndex?: boolean;

package/dist/cli/handlers/init-handler.js

@@ -37,6 +37,8 @@ export class InitHandler {
             .option('--wizard', 'Run interactive setup wizard')
             .option('--auto', 'Auto-configure based on project analysis')
             .option('-u, --upgrade', 'Upgrade existing installation (overwrite skills, agents, validation)')
+            .option('--browser-engine', 'Install optional Vibium and browser payload (explicit download)', false)
+            .option('--no-browser-engine', 'Skip optional browser setup (default)')
             .option('--minimal', 'Minimal configuration (skip optional features)')
             .option('--skip-patterns', 'Skip loading pre-trained patterns')
             .option('--skip-code-index', 'Skip code intelligence pre-scan (supported escape hatch — KG can be built later via `aqe code index`, also via env AQE_SKIP_CODE_INDEX=1)')
@@ -103,7 +105,7 @@ export class InitHandler {
             if (options.wizard || options.auto) {
                 console.log(chalk.blue('\n  Agentic QE v3 Initialization\n'));
                 // Use modular orchestrator for --auto or --modular
-                if (options.auto || options.modular) {
+                if (options.auto || options.modular || options.browserEngine) {
                     await this.runModularInit(options, context);
                     return;
                 }
@@ -128,7 +130,7 @@ export class InitHandler {
             // surface it was meant to suppress.
             const noClaudeRequested = options.claude === false;
             const noStatusLineRequested = options.statusline === false;
-            if (options.modular || platformRequested || databaseFree || noClaudeRequested || noStatusLineRequested) {
+            if (options.browserEngine || options.modular || platformRequested || databaseFree || noClaudeRequested || noStatusLineRequested) {
                 console.log(chalk.blue('\n  Agentic QE v3 Initialization\n'));
                 await this.runModularInit(options, context);
                 return;
@@ -173,6 +175,7 @@ export class InitHandler {
             autoMode: options.auto,
             upgrade: options.upgrade,
             minimal: options.minimal,
+            browserEngine: options.browserEngine,
             skipPatterns: options.skipPatterns,
             skipCodeIndex: options.skipCodeIndex,
             withN8n: options.withN8n,
@@ -301,6 +304,7 @@ export class InitHandler {
             projectRoot: process.cwd(),
             autoMode: options.auto,
             minimal: options.minimal,
+            browserEngine: options.browserEngine,
             skipPatterns: options.skipPatterns,
             withN8n: options.withN8n,
         };
@@ -449,6 +453,8 @@ Options:
   -u, --upgrade              Upgrade existing installation (overwrite skills, agents, validation)
   --minimal                  Minimal configuration (skip optional features)
   --skip-patterns            Skip loading pre-trained patterns
+  --browser-engine          Install optional Vibium and browser payload
+  --no-browser-engine       Skip browser setup (default)
   --with-n8n                 Install n8n workflow testing agents and skills
   --with-opencode            Include OpenCode agent/skill provisioning
   --with-codex               Include OpenAI Codex hooks, instructions, skills, and MCP

package/dist/cli/index.js

@@ -21,6 +21,7 @@ import { ALL_DOMAINS } from '../shared/types/index.js';
 // ============================================================================
 import { applyCommandVerbosity, installCliLogGate, isCliLogLevelEnabled } from './log-gate.js';
 import { LogLevel } from '../logging/index.js';
+import { formatErrorForLog } from '../logging/redaction.js';
 installCliLogGate();
 // ============================================================================
 // CLI State
@@ -213,6 +214,7 @@ program.hook('preAction', (_thisCommand, actionCommand) => {
 // ============================================================================
 import { registerLazyCommand, registerLazyHandler } from './lazy-registry.js';
 import { isForegroundCommandActive } from './foreground-command.js';
+import { requestOwnedShutdown } from '../kernel/process-lifecycle.js';
 registerLazyHandler(program, 'init', 'Initialize the AQE v3 system', () => import('./handlers/init-handler.js').then(m => m.createInitHandler(cleanupAndExit)), context);
 registerLazyHandler(program, 'status', 'Show system status', () => import('./handlers/status-handler.js').then(m => m.createStatusHandler(cleanupAndExit, ensureInitializedStrict)), context);
 registerLazyHandler(program, 'health', 'Check system health', () => import('./handlers/status-handler.js').then(m => m.createHealthHandler(cleanupAndExit, ensureInitializedStrict)), context);
@@ -378,12 +380,19 @@ registerLazyCommand(program, {
 // ============================================================================
 // Shutdown Handlers
 // ============================================================================
+// #801: `aqe mcp` runs the MCP server in this process and it claims the
+// lifecycle; exiting here would pre-empt its graceful shutdown (which releases
+// the shared patterns RVF lock). Every other command keeps the immediate exit.
 process.on('SIGINT', async () => {
+    if (requestOwnedShutdown('SIGINT'))
+        return;
     console.log(chalk.yellow('\n\nShutting down...'));
     console.log(chalk.green('Shutdown complete\n'));
     await cleanupAndExit(0);
 });
 process.on('SIGTERM', async () => {
+    if (requestOwnedShutdown('SIGTERM'))
+        return;
     console.log(chalk.yellow('\nReceived SIGTERM, shutting down gracefully...'));
     await cleanupAndExit(0);
 });
@@ -420,7 +429,7 @@ async function main() {
     await cleanupAndExit(process.exitCode ?? 0);
 }
 main().catch(async (error) => {
-    console.error(chalk.red('Fatal error:'), error);
+    console.error(chalk.red('Fatal error:'), formatErrorForLog(error));
     await cleanupAndExit(1);
 });
 //# sourceMappingURL=index.js.map

package/dist/coordination/handlers/test-execution-handlers.js

@@ -87,7 +87,7 @@ export function registerTestExecutionHandlers(ctx) {
                 // Return a graceful fallback with warning when no source files provided
                 return ok({
                     testsGenerated: 0,
-                    coverageEstimate: 0,
+                    coverageEstimate: null,
                     tests: [],
                     patternsUsed: [],
                     warning: 'No source files or code provided for test generation. Provide sourceCode, filePath, or sourceFiles in the payload.',
@@ -111,6 +111,7 @@ export function registerTestExecutionHandlers(ctx) {
                 coverageTarget: payload.coverageGoal || 80,
                 patterns: [],
                 importPathOverrides,
+                behaviorExamples: payload.behaviorExamples,
             });
             // Always clean up the temp file we created — even on failure
             if (tempPath) {
@@ -134,6 +135,8 @@ export function registerTestExecutionHandlers(ctx) {
                     type: t.type,
                     sourceFile: rewritten.sourceFile,
                     assertions: t.assertions,
+                    generationMode: t.generationMode,
+                    generationLimits: t.generationLimits,
                     testCode: rewritten.testCode,
                 };
             });
@@ -148,13 +151,15 @@ export function registerTestExecutionHandlers(ctx) {
                 patternsUsed: generatedTests.patternsUsed,
                 llmEnhanced,
                 ...(llmEnhanced ? {} : {
-                    generationMode: 'deterministic-template',
-                    note: payload.aiEnhancement === false
-                        ? 'LLM enhancement was disabled by the caller (aiEnhancement: false).'
-                        : 'No LLM provider was available, so tests are deterministic template ' +
-                            'scaffolding rather than source-aware. Configure a provider in ' +
-                            '.agentic-qe/llm-config.json (or set a provider API key) and ensure ' +
-                            'AQE_LLM_ROUTER_DISABLED is not set.',
+                    generationMode: generatedTests.tests.some(t => t.generationMode === 'behavior-examples') ? 'behavior-examples' : 'deterministic-template',
+                    note: generatedTests.tests.some(t => t.generationMode === 'behavior-examples')
+                        ? 'Assertions use caller-supplied specification examples. Coverage is unmeasured; inspect generationLimits on each test.'
+                        : payload.aiEnhancement === false
+                            ? 'LLM enhancement was disabled by the caller (aiEnhancement: false). Coverage is unmeasured; inspect generationLimits on each test.'
+                            : 'No LLM provider was available, so tests are deterministic template ' +
+                                'scaffolding rather than source-aware. Configure a provider in ' +
+                                '.agentic-qe/llm-config.json (or set a provider API key) and ensure ' +
+                                'AQE_LLM_ROUTER_DISABLED is not set.',
                 }),
             });
         }

package/dist/coordination/index.d.ts

@@ -7,7 +7,7 @@ export * from './consensus';
 export * from './claims';
 export type { Protocol, ProtocolSchedule, ProtocolAction, ProtocolExecution, ProtocolExecutionStatus, ActionExecutionResult, ActionExecutionStatus, ProtocolExecutor, WorkflowDefinition as CrossDomainWorkflowDefinition, WorkflowStep as CrossDomainWorkflowStep, WorkflowCondition, WorkflowTrigger as CrossDomainWorkflowTrigger, WorkflowHandler, WorkflowContext as CrossDomainWorkflowContext, WorkflowExecution as CrossDomainWorkflowExecution, WorkflowExecutionStatus as CrossDomainWorkflowExecutionStatus, StepExecutionResult as CrossDomainStepExecutionResult, WorkflowExecutor, CrossDomainHandler, CrossDomainHandlerConfig, DomainRoute, EventSubscription, EventCorrelation, EventAggregation, CrossDomainRouter, } from './interfaces';
 export { TaskAuditLogger, createTaskAuditLogger, } from './services';
-export type { TaskAuditEntry, TaskAuditConfig, TaskOperation, } from './services';
+export type { TaskAuditEntry, TaskAuditSequencedEntry, TaskAuditConfig, TaskAuditFilter, TaskAuditWindow, TaskAuditSnapshot, TaskOperation, } from './services';
 export { CrossDomainEventRouter, createCrossDomainRouter, } from './cross-domain-router';
 export { DefaultProtocolExecutor, createProtocolExecutor, } from './protocol-executor';
 export { WorkflowOrchestrator, createWorkflowOrchestrator, WorkflowEvents, } from './workflow-orchestrator';

package/dist/coordination/queen-event-handlers.js

@@ -162,7 +162,7 @@ export async function handleTaskCompleted(ctx, event) {
 // Task failed handler
 // ============================================================================
 export async function handleTaskFailed(ctx, event) {
-    const { taskId, error } = event.payload;
+    const { taskId, error, callerError } = event.payload;
     const cancelled = settleCancelledTask(ctx.tasks, taskId);
     if (cancelled.ignored) {
         if (cancelled.settledNow) {
@@ -177,8 +177,10 @@ export async function handleTaskFailed(ctx, event) {
         if (execution.status === 'running' || execution.status === 'assigned') {
             ctx.runningTaskCounter = Math.max(0, ctx.runningTaskCounter - 1);
         }
-        // ADR-064: Record failure in domain circuit breaker
-        if (ctx.domainBreakerRegistry && execution.assignedDomain) {
+        // ADR-064: Record failure in domain circuit breaker. A task rejected for
+        // invalid caller input says nothing about the domain's health, so it must
+        // not open the breaker for every other caller (#795).
+        if (ctx.domainBreakerRegistry && execution.assignedDomain && !callerError) {
             ctx.domainBreakerRegistry.getBreaker(execution.assignedDomain).recordFailure(new Error(error || 'Task failed'));
         }
         // ADR-064 Phase 3: Fail the trace span for this task
@@ -189,8 +191,9 @@ export async function handleTaskFailed(ctx, event) {
                 ctx.taskTraceContexts.delete(taskId);
             }
         }
-        // Check if we should retry
-        if (execution.retryCount < ctx.config.taskRetryLimit) {
+        // Check if we should retry. Caller-input errors are deterministic, so a
+        // retry would fail the same way.
+        if (!callerError && execution.retryCount < ctx.config.taskRetryLimit) {
             ctx.auditLogger.logFail(taskId, execution.assignedAgents[0], error);
             const retried = {
                 ...execution,
@@ -227,7 +230,7 @@ export async function handleTaskFailed(ctx, event) {
             }
             // ADR-064 Phase 4A: Create competing hypotheses investigation for
             // permanent failures in critical domains (p0/p1 priority)
-            if (ctx.hypothesisManager && (execution.task.priority === 'p0' || execution.task.priority === 'p1')) {
+            if (!callerError && ctx.hypothesisManager && (execution.task.priority === 'p0' || execution.task.priority === 'p1')) {
                 try {
                     const domain = execution.assignedDomain || 'test-generation';
                     const investigation = ctx.hypothesisManager.createInvestigation(taskId, domain, `Root cause analysis for ${execution.task.type} failure: ${error}`);

package/dist/coordination/result-saver.js

@@ -372,7 +372,7 @@ end_of_record
 | Metric | Value |
 |--------|-------|
 | Tests Generated | ${data.testsGenerated} |
-| Coverage Estimate | ${data.coverageEstimate}% |
+| Coverage Estimate | ${data.coverageEstimate == null ? 'Unmeasured' : data.coverageEstimate + '%'} |
 | Patterns Used | ${data.patternsUsed.length} |
 
 ## Patterns Applied

package/dist/coordination/services/index.d.ts

@@ -2,5 +2,5 @@
  * Agentic QE v3 - Coordination Services
  * Exports services used by coordination components
  */
-export { TaskAuditLogger, createTaskAuditLogger, type TaskAuditEntry, type TaskAuditConfig, type TaskOperation, } from './task-audit-logger';
+export { TaskAuditLogger, createTaskAuditLogger, type TaskAuditEntry, type TaskAuditSequencedEntry, type TaskAuditConfig, type TaskAuditFilter, type TaskAuditWindow, type TaskAuditSnapshot, type TaskOperation, } from './task-audit-logger';
 //# sourceMappingURL=index.d.ts.map