agentic-qe 3.14.7 → 3.14.8

package/dist/mcp/connection-pool.d.ts

@@ -56,6 +56,7 @@ declare class ConnectionPoolImpl {
     private readonly config;
     private healthCheckInterval;
     private initialized;
+    private initializationPromise;
     private totalRequests;
     private cacheHits;
     private acquisitionTimes;
@@ -67,6 +68,7 @@ declare class ConnectionPoolImpl {
      * Initialize the connection pool with minConnections
      */
     initialize(): Promise<void>;
+    private initializeOnce;
     /**
      * Acquire a connection from the pool (O(1) operation)
      * Uses semaphore pattern to prevent race conditions

package/dist/mcp/connection-pool.js

@@ -27,6 +27,7 @@ class ConnectionPoolImpl {
     config;
     healthCheckInterval = null;
     initialized = false;
+    initializationPromise = null;
     // Performance tracking
     totalRequests = 0;
     cacheHits = 0;
@@ -45,6 +46,14 @@ class ConnectionPoolImpl {
         if (this.initialized) {
             return;
         }
+        if (!this.initializationPromise) {
+            this.initializationPromise = this.initializeOnce().finally(() => {
+                this.initializationPromise = null;
+            });
+        }
+        return this.initializationPromise;
+    }
+    async initializeOnce() {
         // Pre-warm minimum connections
         const warmupPromises = [];
         for (let i = 0; i < this.config.minConnections; i++) {
@@ -115,7 +124,7 @@ class ConnectionPoolImpl {
         // O(1) acquisition from idle set
         for (const connId of this.idleConnections) {
             const conn = this.connections.get(connId);
-            if (conn && conn.isHealthy) {
+            if (conn && conn.isHealthy && !conn.inUse) {
                 // Mark as in use and remove from idle set
                 conn.inUse = true;
                 conn.lastUsedAt = Date.now();
@@ -134,6 +143,7 @@ class ConnectionPoolImpl {
             const newConn = this.createConnectionSync();
             if (newConn) {
                 newConn.inUse = true;
+                this.idleConnections.delete(newConn.id);
                 this.cacheHits++;
                 const elapsed = performance.now() - startTime;
                 this.trackAcquisitionTime(elapsed);
@@ -224,7 +234,7 @@ class ConnectionPoolImpl {
         const pruned = [];
         for (const [id, conn] of this.connections.entries()) {
             // Prune if unhealthy or idle for too long
-            if (!conn.isHealthy || (now - conn.lastUsedAt > this.config.idleTimeoutMs)) {
+            if (!conn.inUse && (!conn.isHealthy || (now - conn.lastUsedAt > this.config.idleTimeoutMs))) {
                 pruned.push(id);
             }
         }
@@ -252,6 +262,7 @@ class ConnectionPoolImpl {
      * Shutdown the pool
      */
     async shutdown() {
+        await this.initializationPromise;
         if (this.healthCheckInterval) {
             clearInterval(this.healthCheckInterval);
             this.healthCheckInterval = null;

package/dist/mcp/handlers/memory-handlers.d.ts

@@ -21,6 +21,7 @@ interface MemoryQueryResult {
         score?: number;
         timestamp?: string;
     }>;
+    /** Matching candidates fetched, including the look-ahead; not a corpus-wide count. */
     total: number;
     hasMore: boolean;
     searchType: 'pattern' | 'semantic';

package/dist/mcp/handlers/memory-handlers.js

@@ -5,6 +5,7 @@
  * ADR-058: Integrated with MemoryWriteGate for contradiction detection
  * and ComplianceReporter for violation tracking.
  */
+import { randomUUID } from 'node:crypto';
 import { getFleetState, isFleetInitialized } from './core-handlers.js';
 // ADR-058: Governance integration for memory writes
 import { toErrorMessage } from '../../shared/error-utils.js';
@@ -199,8 +200,15 @@ export async function handleMemoryQuery(params) {
     }
     try {
         const namespace = params.namespace || 'default';
-        const limit = params.limit || 100;
-        const offset = params.offset || 0;
+        const limit = params.limit ?? 100;
+        const offset = params.offset ?? 0;
+        if (!Number.isSafeInteger(limit) || limit < 0 ||
+            !Number.isSafeInteger(offset) || offset < 0 ||
+            !Number.isSafeInteger(limit + offset + 1)) {
+            return { success: false, error: 'Memory query limit and offset must be non-negative safe integers with a safe combined page size.' };
+        }
+        // One extra candidate proves whether another page exists without scanning all memory.
+        const fetchLimit = limit + offset + 1;
         // Determine if we should use semantic (HNSW vector) search
         const useSemantic = params.semantic === true ||
             (params.semantic !== false && params.pattern && isNaturalLanguageQuery(params.pattern));
@@ -209,8 +217,9 @@ export async function handleMemoryQuery(params) {
             try {
                 // Generate real 384-dim transformer embedding for accurate cosine similarity search
                 const embedding = await computeRealEmbedding(params.pattern);
-                const keyPrefix = namespace !== 'default' ? `${namespace}:` : undefined;
-                const filtered = await memory.vectorSearch(embedding, limit + offset, keyPrefix);
+                // Semantic queries have the same namespace boundary as pattern queries.
+                const keyPrefix = `${namespace}:`;
+                const filtered = await memory.vectorSearch(embedding, fetchLimit, keyPrefix);
                 const paginatedResults = filtered.slice(offset, offset + limit);
                 const entries = paginatedResults.map(r => {
                     const parts = r.key.split(':');
@@ -240,7 +249,7 @@ export async function handleMemoryQuery(params) {
         const pattern = params.pattern
             ? `${namespace}:${params.pattern}`
             : `${namespace}:*`;
-        const keys = await memory.search(pattern, limit + offset);
+        const keys = await memory.search(pattern, fetchLimit);
         // Apply pagination
         const paginatedKeys = keys.slice(offset, offset + limit);
         const entries = paginatedKeys.map((key) => {
@@ -353,7 +362,8 @@ export async function handleMemoryShare(params) {
     }
     try {
         // Store shared knowledge for each target agent
-        const sharedKey = `shared:${params.knowledgeDomain}:${Date.now()}`;
+        // Concurrent agents can publish several findings within the same millisecond.
+        const sharedKey = `shared:${params.knowledgeDomain}:${Date.now()}:${randomUUID()}`;
         const sharedContent = {
             source: params.sourceAgentId,
             targets: params.targetAgentIds,

package/dist/mcp/protocol-server.js

@@ -417,6 +417,7 @@ export class MCPProtocolServer {
         const startTime = performance.now();
         let success = false;
         let cacheable;
+        let invalidatesCache = false;
         // Emit AG-UI progress event for tool start
         const stepId = `${name}-${Date.now()}`;
         this.eventAdapter.adapt({
@@ -461,14 +462,13 @@ export class MCPProtocolServer {
             // IMP-00: Execute pre-tool-call middleware
             const processedCtx = await this.middlewareChain.executePreHooks(ctx);
             // Issue #473: Session-cache lookup for read-only tools.
-            // Concurrency-safe tools are idempotent in practice — same input yields
-            // the same output, so we can short-circuit repeated calls with an O(1)
-            // fingerprint lookup. Tools without isConcurrencySafe (writes, scans,
-            // executions) always re-run.
-            // Explicit quality gates depend on current measured evidence and its age,
-            // not just arguments. A cached approval can outlive or contradict evidence.
+            // Concurrency safety does not imply stable output: status and metrics
+            // can change in the background without another MCP mutation. Live reads
+            // opt out of reuse while retaining their concurrency-safe scheduling hint.
+            // Explicit quality gates also depend on current measured evidence/age.
             const measuredQualityGate = name === 'quality_assess' && processedCtx.params?.runGate === true;
-            cacheable = tool.definition.isConcurrencySafe === true && !measuredQualityGate;
+            invalidatesCache = tool.definition.isConcurrencySafe !== true || measuredQualityGate;
+            cacheable = !invalidatesCache && tool.definition.isCacheable !== false;
             let cacheFingerprint = null;
             let cacheGeneration = null;
             if (cacheable && process.env.AQE_SESSION_CACHE !== 'off') {
@@ -592,7 +592,7 @@ export class MCPProtocolServer {
             // Tool names and success flags do not prove whether state changed.
             // Unknown cross-domain effects require a global flush, including after
             // a handler throws or reports failure following a partial effect.
-            if (cacheable === false && process.env.AQE_SESSION_CACHE !== 'off') {
+            if (invalidatesCache && process.env.AQE_SESSION_CACHE !== 'off') {
                 try {
                     const { getSessionCache } = await import('../optimization/session-cache.js');
                     getSessionCache().invalidateAll();
@@ -631,6 +631,7 @@ export class MCPProtocolServer {
                 description: 'Get fleet status: agents, tasks, health, and learning stats. Example: fleet_status({ verbose: true })',
                 category: 'core',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'verbose', type: 'boolean', description: 'Include detailed information', default: false },
                 ],
@@ -643,6 +644,7 @@ export class MCPProtocolServer {
                 description: 'Check fleet and per-domain health status with load metrics. Example: fleet_health({ domain: "test-generation" })',
                 category: 'core',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'domain', type: 'string', description: 'Specific domain to check' },
                 ],
@@ -670,6 +672,7 @@ export class MCPProtocolServer {
                 description: 'List tasks with optional status/limit filtering. Example: task_list({ status: "running", limit: 10 })',
                 category: 'task',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'status', type: 'string', description: 'Filter by status' },
                     { name: 'limit', type: 'number', description: 'Maximum results', default: 50 },
@@ -683,6 +686,7 @@ export class MCPProtocolServer {
                 description: 'Get detailed status, progress, and result of a specific task. Example: task_status({ taskId: "abc-123" })',
                 category: 'task',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'taskId', type: 'string', description: 'Task ID', required: true },
                 ],
@@ -719,6 +723,7 @@ export class MCPProtocolServer {
                 description: 'List all active agents, optionally filtered by domain. Example: agent_list({ domain: "test-generation" })',
                 category: 'agent',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'domain', type: 'string', description: 'Filter by domain' },
                 ],
@@ -743,6 +748,7 @@ export class MCPProtocolServer {
                 description: 'Get CPU, memory, and task performance metrics for agents. Example: agent_metrics({ agentId: "agent-1" })',
                 category: 'agent',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'agentId', type: 'string', description: 'Specific agent ID', required: true },
                 ],
@@ -755,6 +761,7 @@ export class MCPProtocolServer {
                 description: 'Get detailed status and current task of a specific agent. Example: agent_status({ agentId: "agent-1" })',
                 category: 'agent',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'agentId', type: 'string', description: 'Agent ID', required: true },
                 ],
@@ -768,6 +775,7 @@ export class MCPProtocolServer {
                 description: 'List all active domain teams and their agent counts. Example: team_list({ domain: "coverage-analysis" })',
                 category: 'agent',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'domain', type: 'string', description: 'Filter by domain' },
                 ],
@@ -780,6 +788,7 @@ export class MCPProtocolServer {
                 description: 'Get team health, agent utilization, and consensus status for a domain. Example: team_health({ domain: "security-compliance" })',
                 category: 'agent',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'domain', type: 'string', description: 'Domain to check', required: true },
                 ],
@@ -1024,6 +1033,8 @@ export class MCPProtocolServer {
                     { name: 'pattern', type: 'string', description: 'Key pattern (glob) or natural language query (for semantic search)' },
                     { name: 'namespace', type: 'string', description: 'Memory namespace' },
                     { name: 'semantic', type: 'boolean', description: 'Use HNSW vector search instead of pattern matching. Auto-detected when pattern contains spaces and no wildcards.' },
+                    { name: 'limit', type: 'number', description: 'Maximum entries in the page (non-negative safe integer)', default: 100 },
+                    { name: 'offset', type: 'number', description: 'Number of entries to skip (non-negative safe integer)', default: 0 },
                 ],
             },
             handler: (params) => handleMemoryQuery(params),
@@ -1046,6 +1057,7 @@ export class MCPProtocolServer {
                 description: 'Get memory usage statistics: entry counts, namespaces, and storage size. Example: memory_usage({})',
                 category: 'memory',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: () => handleMemoryUsage(),
@@ -1089,6 +1101,7 @@ export class MCPProtocolServer {
                 description: 'Get model routing statistics: tier distribution, cost savings, and routing log. Example: routing_metrics({ includeLog: true, logLimit: 20 })',
                 category: 'routing',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'includeLog', type: 'boolean', description: 'Include routing log entries', default: false },
                     { name: 'logLimit', type: 'number', description: 'Max log entries to return', default: 100 },
@@ -1102,6 +1115,7 @@ export class MCPProtocolServer {
                 description: 'Get economic routing report: tier efficiency, budget status, cost-per-quality analysis, and savings opportunities. Example: routing_economics({ taskComplexity: 0.5 })',
                 category: 'routing',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'taskComplexity', type: 'number', description: 'Task complexity score 0-1 for tier scoring (default: 0.5)', default: 0.5 },
                 ],
@@ -1115,6 +1129,7 @@ export class MCPProtocolServer {
                 description: 'Get infrastructure self-healing status: detected failures, recovery stats, and failing services. Example: infra_healing_status({ verbose: true })',
                 category: 'infra-healing',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [
                     { name: 'verbose', type: 'boolean', description: 'Include detailed observation data', default: false },
                 ],
@@ -1215,6 +1230,7 @@ export class MCPProtocolServer {
                 description: 'Get cross-phase memory statistics (total signals, by loop, by namespace)',
                 category: 'cross-phase',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: () => handleCrossPhaseStats(),
@@ -1307,6 +1323,7 @@ export class MCPProtocolServer {
                 description: 'List all loaded YAML pipelines. Example: pipeline_list({})',
                 category: 'coordination',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: (params) => handlePipelineList(params),
@@ -1346,6 +1363,7 @@ export class MCPProtocolServer {
                 description: 'Get session operation cache statistics: hit rate, cache size, tokens saved via O(1) fingerprint reuse. Example: session_cache_stats({})',
                 category: 'learning',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: async () => {
@@ -1380,6 +1398,7 @@ export class MCPProtocolServer {
                 description: 'Check AQE server health: returns status, loaded domains, memory stats, HNSW index status, and pattern count. Example: aqe_health({})',
                 category: 'core',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: () => handleAQEHealth(),
@@ -1391,6 +1410,7 @@ export class MCPProtocolServer {
                 description: 'Get RVF migration status: current stage, metrics, consistency, and gate evaluation. Example: migration_status({})',
                 category: 'persistence',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: () => handleMigrationStatus(),
@@ -1401,6 +1421,7 @@ export class MCPProtocolServer {
                 description: 'Run a consistency check comparing SQLite and RVF search results. Samples random patterns and reports divergences. Example: migration_check({})',
                 category: 'persistence',
                 isConcurrencySafe: true,
+                isCacheable: false,
                 parameters: [],
             },
             handler: () => handleMigrationCheck(),

package/dist/mcp/types.d.ts

@@ -42,6 +42,8 @@ export interface ToolDefinition {
     domain?: DomainName;
     lazyLoad?: boolean;
     isConcurrencySafe?: boolean;
+    /** False for live reads whose results must not be reused by the session cache. */
+    isCacheable?: boolean;
     annotations?: ToolAnnotations;
 }
 /**

package/dist/optimization/session-cache.js

@@ -40,17 +40,19 @@ export const DEFAULT_SESSION_CACHE_CONFIG = {
  * Ensures identical logical objects always produce the same fingerprint.
  */
 function canonicalStringify(value) {
-    if (value === null || value === undefined)
-        return JSON.stringify(value);
-    if (typeof value !== 'object')
-        return JSON.stringify(value);
-    if (Array.isArray(value)) {
-        return '[' + value.map(v => canonicalStringify(v)).join(',') + ']';
+    // Honor JSON's array holes, undefined fields and toJSON (for example Date)
+    // before ordering keys. Hand-built fragments can conflate distinct inputs.
+    const normalized = JSON.parse(JSON.stringify(value));
+    function encode(item) {
+        if (item === null || typeof item !== 'object')
+            return JSON.stringify(item);
+        if (Array.isArray(item))
+            return '[' + item.map(encode).join(',') + ']';
+        const obj = item;
+        return '{' + Object.keys(obj).sort()
+            .map(key => JSON.stringify(key) + ':' + encode(obj[key])).join(',') + '}';
     }
-    const obj = value;
-    const sortedKeys = Object.keys(obj).sort();
-    const pairs = sortedKeys.map(k => JSON.stringify(k) + ':' + canonicalStringify(obj[k]));
-    return '{' + pairs.join(',') + '}';
+    return encode(normalized);
 }
 // ============================================================================
 // Implementation
@@ -114,7 +116,7 @@ export class SessionOperationCache {
         if (!this.config.enabled)
             return;
         // Evict oldest if at capacity
-        if (this.cache.size >= this.config.maxEntries) {
+        if (!this.cache.has(fingerprint) && this.cache.size >= this.config.maxEntries) {
             this.evictOldest();
         }
         const entry = {

package/dist/plugins/cache.js

@@ -51,9 +51,16 @@ export class PluginCache {
         }
         // Copy source to cache
         fs.mkdirSync(dir, { recursive: true });
-        this.copyDir(sourceDir, dir);
-        // Write the manifest (ensure it's present even if source didn't have it at root)
-        fs.writeFileSync(path.join(dir, 'qe-plugin.json'), JSON.stringify(manifest, null, 2));
+        try {
+            this.copyDir(sourceDir, dir);
+            // Write the manifest (ensure it's present even if source didn't have it at root)
+            fs.writeFileSync(path.join(dir, 'qe-plugin.json'), JSON.stringify(manifest, null, 2));
+        }
+        catch (error) {
+            // A partial directory must not satisfy the immutable-cache fast path on retry.
+            fs.rmSync(dir, { recursive: true, force: true });
+            throw error;
+        }
         // Cleanup old versions
         this.pruneOldVersions(manifest.name);
         return dir;

package/dist/shared/embeddings/embedding-cache.js

@@ -36,7 +36,7 @@ export class EmbeddingCache {
             // Move to end (LRU update)
             this.cache.delete(key);
             this.cache.set(key, entry);
-            return entry.embedding;
+            return [...entry.embedding];
         }
         this.misses++;
         return null;
@@ -54,7 +54,7 @@ export class EmbeddingCache {
             }
         }
         const entry = {
-            embedding,
+            embedding: [...embedding],
             timestamp: Date.now(),
             model,
         };
@@ -118,7 +118,7 @@ export class EmbeddingCache {
     export() {
         return Array.from(this.cache.entries()).map(([key, entry]) => ({
             key,
-            entry,
+            entry: { ...entry, embedding: [...entry.embedding] },
         }));
     }
     /**
@@ -128,7 +128,7 @@ export class EmbeddingCache {
         this.cache.clear();
         for (const { key, entry } of data) {
             if (this.cache.size < this.maxSize) {
-                this.cache.set(key, entry);
+                this.cache.set(key, { ...entry, embedding: [...entry.embedding] });
             }
         }
     }

package/dist/shared/llm/cache.js

@@ -5,6 +5,7 @@
  * Provides efficient caching of LLM responses to reduce costs and latency
  * for repeated queries. Uses LRU (Least Recently Used) eviction policy.
  */
+import { createHash } from 'node:crypto';
 /**
  * Default cache configuration
  */
@@ -41,15 +42,9 @@ export class LLMCache {
             options?.systemPrompt ?? '',
             input,
         ];
-        // Simple hash function
-        const str = parts.join('|');
-        let hash = 0;
-        for (let i = 0; i < str.length; i++) {
-            const char = str.charCodeAt(i);
-            hash = ((hash << 5) - hash) + char;
-            hash = hash & hash;
-        }
-        return `${type}:${Math.abs(hash).toString(36)}`;
+        // Encode field boundaries before hashing: prompt text may contain delimiters.
+        const hash = createHash('sha256').update(JSON.stringify(parts)).digest('hex');
+        return `${type}:${hash}`;
     }
     /**
      * Get a cached value
@@ -182,7 +177,9 @@ export class LLMCache {
             entry.createdAt = new Date(entry.createdAt);
             entry.lastAccessedAt = new Date(entry.lastAccessedAt);
             this.cache.set(key, entry);
-            this.accessOrder.push(key);
+            if (this.config.enableLRU) {
+                this.updateAccessOrder(key);
+            }
         }
         // Evict if over capacity
         while (this.cache.size > this.config.maxSize) {

package/dist/shared/retry-engine.js

@@ -142,6 +142,10 @@ function delay(ms, signal) {
  * promise rejects with an `AbortError`.
  */
 export async function withRetry(fn, options) {
+    // Disabling retries must not bypass the caller's cancellation boundary.
+    if (options?.abortSignal?.aborted) {
+        throw options.abortSignal.reason ?? new DOMException('The operation was aborted.', 'AbortError');
+    }
     // Kill switch: bypass retry entirely when disabled
     if (process.env.AQE_RETRY_DISABLED === 'true') {
         const result = await fn();

package/dist/shared/test-runner-process.d.ts

@@ -0,0 +1,10 @@
+import { type ChildProcess } from 'node:child_process';
+/** Keep detached runners subject to the CLI's synchronous exit handling. */
+export declare function trackTestRunnerExit(proc: ChildProcess): () => void;
+/**
+ * Stop a test runner spawned in its own POSIX process group. The returned
+ * promise waits for the group to stop before report files may be removed.
+ * Windows uses taskkill's tree operation while the root PID still exists.
+ */
+export declare function terminateTestRunner(proc: ChildProcess): Promise<void>;
+//# sourceMappingURL=test-runner-process.d.ts.map