agentic-qe 3.15.11 → 3.15.12

package/dist/cli/chunks/witness-chain-5FAFCQKP.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a as h,b as i,c as j,d as k}from"./chunk-SUX5XB2Z.js";import"./chunk-IETBWYHW.js";import{a,b,c,d,e,f,g}from"./chunk-2IVE5AR3.js";import"./chunk-L7NGKANW.js";import"./chunk-66PXR3NI.js";import"./chunk-WTAUF6O4.js";import"./chunk-SPC4RBLF.js";import"./chunk-WGTEZT7G.js";import"./chunk-IPA7K556.js";import"./chunk-ZROAMFX2.js";import"./chunk-YUA6ZKKY.js";import"./chunk-3IU4LDZR.js";import"./chunk-YVJEUX3I.js";import"./chunk-6QRI3JVE.js";import"./chunk-YWWMNTBF.js";import"./chunk-UJNGGFGX.js";import"./chunk-ADUAJIAU.js";import"./chunk-7OEFBWAG.js";import"./chunk-QCPVUNN3.js";import"./chunk-35MIUSXQ.js";import"./chunk-DZGPUGUG.js";import"./chunk-4LWMAAWK.js";import"./chunk-IA55PFLG.js";import"./chunk-W4II6SIH.js";import"./chunk-O3IM4WRZ.js";import"./chunk-WDEXOLK2.js";export{g as CHAIN_REANCHOR_ACTION,a as GENESIS_PREV_HASH,h as WitnessChain,k as _resetWitnessChainForTests,j as createWitnessChain,i as getWitnessChain,d as hashWith,e as serializeEntry,b as sha256,c as shake256,f as signaturePayload};

package/dist/cli/chunks/witness-chain-V2M32W5D.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a,b,c,d,e,f,g}from"./chunk-VUR5THML.js";import"./chunk-UJNGGFGX.js";import"./chunk-ADUAJIAU.js";import"./chunk-7OEFBWAG.js";import"./chunk-QCPVUNN3.js";import"./chunk-35MIUSXQ.js";import"./chunk-WDEXOLK2.js";export{c as PersistentWitnessChain,a as SPRTAccumulator,b as WitnessChain,f as createPersistentWitnessChain,e as createWitnessChain,d as createWitnessChainSQLitePersistence,g as isWitnessChainFeatureEnabled};

package/dist/cli/chunks/{witness-chain-repair-K7YX2AO6.js → witness-chain-repair-VWBO4NXE.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.11");process.exit(0)}
-import{a as E}from"./chunk-CO3DX2AX.js";import"./chunk-KDI5JOYZ.js";import{b as R,c as b,e as A,h as y,k as C}from"./chunk-NT7JRHMH.js";import"./chunk-LD5CFK53.js";import"./chunk-XGPTZUKQ.js";import"./chunk-JFLU7L3W.js";import"./chunk-WM3SRRA6.js";import"./chunk-XGBU3KEM.js";import"./chunk-G2IJFNZS.js";import"./chunk-M5XYIQYZ.js";import"./chunk-NQZNMCZU.js";import"./chunk-5N25I53C.js";import"./chunk-OYJC3YON.js";import"./chunk-EJPK7OTR.js";import"./chunk-QDESWOZP.js";import"./chunk-IO5537OM.js";import"./chunk-FZHSG75I.js";import"./chunk-VO3DRK4P.js";import"./chunk-HJ3XNTTJ.js";import"./chunk-76SNL7GU.js";import"./chunk-EH2S6AOR.js";import"./chunk-XNLIWQYE.js";import{d as g,e as _}from"./chunk-4MUBW4RT.js";import"./chunk-DDEOZPWJ.js";import"./chunk-XJKZ7FTR.js";import"./chunk-CFWGGRE7.js";_();import{existsSync as v}from"node:fs";import{basename as I}from"node:path";var w={includeArchive:!0};function l(e){let r=n=>C(e,n)?e.prepare(`SELECT COUNT(*) AS n FROM ${n}`).get().n:0;return{live:r("witness_chain"),archive:r("witness_chain_archive")}}function O(e){return{status:e.status,entriesChecked:e.entriesChecked,forks:e.forks.length,unacknowledgedForks:e.forks.length-e.acknowledgedForks.length,...e.tamperedAt!==void 0?{tamperedAt:e.tamperedAt}:{},...e.tamperReason?{tamperReason:e.tamperReason}:{}}}function $(e){return e.forkDetails.filter(r=>!r.acknowledged).map(({id:r,parentId:n,prevHash:s,actionHash:c})=>({id:r,parentId:n,prevHash:s,actionHash:c}))}function x(e,r){let n=new Set,s=e.prepare("SELECT prev_hash FROM witness_chain UNION ALL SELECT prev_hash FROM witness_chain_archive").pluck().iterate();for(let t of s)n.add(t);let c=[],a=new Set;for(let t of["witness_chain","witness_chain_archive"]){let f=e.prepare(`SELECT * FROM ${t} ORDER BY id ASC`).iterate();for(let o of f){if(o.id===r||a.has(o.id))continue;a.add(o.id);let i=A(o);!n.has(b(i))&&!n.has(R(i))&&c.push({id:o.id,hash:y(o)})}}return c.sort((t,f)=>t.id-f.id)}function S(e){return`Refusing to repair: tampering detected at id=${e.tamperedAt} (${e.tamperReason}). Only accidental forks can be re-anchored; restore from a backup and investigate.`}function M(e){let r=`${e}.bak-${Math.floor(Date.now()/1e3)}`;if(!v(r))return r;let n=1;for(;v(`${r}-${n}`);)n++;return`${r}-${n}`}function W(e,r){let n=M(e),s=g(e,{readonly:!0,fileMustExist:!0});try{s.prepare("VACUUM INTO ?").run(n)}finally{s.close()}let c=g(n,{readonly:!0,fileMustExist:!0});try{let a=c.pragma("integrity_check",{simple:!0});if(a!=="ok")throw new Error(`backup integrity_check failed: ${String(a)}`);let t=l(c);if(t.live!==r.live||t.archive!==r.archive)throw new Error(`backup holds ${JSON.stringify(t)} witness rows, expected ${JSON.stringify(r)}`)}finally{c.close()}return n}async function L(e,r){let n=r.dryRun===!0,s=new E(e,r.keyManager??void 0);await s.initialize();let c=l(e),a=s.verify(w),t={dryRun:n,before:O(a),rowsBefore:c,rowsAfter:c};if(a.tampered)return{...t,action:"refused",message:S(a),forksAcknowledged:[]};let f=$(a);if(f.length===0){let d=a.forks.length>0?`Nothing to repair: all ${a.forks.length} fork(s) are already re-anchored.`:"Nothing to repair: the audit chain has no forks.";return{...t,action:"none",message:d,forksAcknowledged:[]}}if(n)return{...t,action:"would-reanchor",forksAcknowledged:f.map(d=>d.id),message:`Dry run: would back up the database and append a CHAIN_REANCHOR entry acknowledging ${f.length} fork(s). Nothing was written.`};let o,i=e.transaction(()=>{let d=l(e),p=s.verify(w);if(p.tampered)return{kind:"refused",check:p};let h=$(p);if(h.length===0)return{kind:"noop"};o=W(r.dbPath,d);let m=e.prepare("SELECT * FROM witness_chain ORDER BY id DESC LIMIT 1").get(),T=s.append("CHAIN_REANCHOR",{reason:"fork-repair",issue:"https://github.com/proffesor-for-testing/agentic-qe/issues/753",note:"Acknowledges accidental forks from pre-3.14.5 concurrent appends; no rows were changed.",forkCount:h.length,forks:h,pins:x(e,m.id),verifiedTipId:m.id,verifiedTipHash:y(m),entriesChecked:p.entriesChecked,rows:d,backup:I(o)},r.actor??"aqe-audit-repair"),k=l(e);if(k.live!==d.live+1||k.archive!==d.archive)throw new Error(`row-count check failed: before ${JSON.stringify(d)}, after ${JSON.stringify(k)}`);return{kind:"reanchored",entry:T,forks:h,txAfter:k}}).immediate();if(i.kind==="refused")return{...t,action:"refused",message:S(i.check),forksAcknowledged:[]};if(i.kind==="noop")return{...t,action:"none",message:"Nothing to repair (another process re-anchored first).",forksAcknowledged:[]};let u=s.verify(w),N=u.valid&&!u.tampered;return{...t,action:"reanchored",after:O(u),rowsAfter:i.txAfter,forksAcknowledged:i.forks.map(d=>d.id),reanchorId:i.entry.id,backupPath:o,message:N?`Re-anchored ${i.forks.length} fork(s) with CHAIN_REANCHOR id=${i.entry.id}; chain now ${u.status}. Backup: ${o}`:`Appended CHAIN_REANCHOR id=${i.entry.id}, but the chain still verifies as ${u.status}. Backup: ${o}`}}export{L as repairWitnessChainForks};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a as E}from"./chunk-SUX5XB2Z.js";import"./chunk-IETBWYHW.js";import{b as R,c as b,e as A,h as y,k as C}from"./chunk-2IVE5AR3.js";import"./chunk-L7NGKANW.js";import"./chunk-66PXR3NI.js";import"./chunk-WTAUF6O4.js";import"./chunk-SPC4RBLF.js";import"./chunk-WGTEZT7G.js";import"./chunk-IPA7K556.js";import"./chunk-ZROAMFX2.js";import"./chunk-YUA6ZKKY.js";import"./chunk-3IU4LDZR.js";import"./chunk-YVJEUX3I.js";import"./chunk-6QRI3JVE.js";import"./chunk-YWWMNTBF.js";import"./chunk-UJNGGFGX.js";import"./chunk-ADUAJIAU.js";import"./chunk-7OEFBWAG.js";import"./chunk-QCPVUNN3.js";import"./chunk-35MIUSXQ.js";import"./chunk-DZGPUGUG.js";import"./chunk-4LWMAAWK.js";import{d as g,e as _}from"./chunk-IA55PFLG.js";import"./chunk-W4II6SIH.js";import"./chunk-O3IM4WRZ.js";import"./chunk-WDEXOLK2.js";_();import{existsSync as v}from"node:fs";import{basename as I}from"node:path";var w={includeArchive:!0};function l(e){let r=n=>C(e,n)?e.prepare(`SELECT COUNT(*) AS n FROM ${n}`).get().n:0;return{live:r("witness_chain"),archive:r("witness_chain_archive")}}function O(e){return{status:e.status,entriesChecked:e.entriesChecked,forks:e.forks.length,unacknowledgedForks:e.forks.length-e.acknowledgedForks.length,...e.tamperedAt!==void 0?{tamperedAt:e.tamperedAt}:{},...e.tamperReason?{tamperReason:e.tamperReason}:{}}}function $(e){return e.forkDetails.filter(r=>!r.acknowledged).map(({id:r,parentId:n,prevHash:s,actionHash:c})=>({id:r,parentId:n,prevHash:s,actionHash:c}))}function x(e,r){let n=new Set,s=e.prepare("SELECT prev_hash FROM witness_chain UNION ALL SELECT prev_hash FROM witness_chain_archive").pluck().iterate();for(let t of s)n.add(t);let c=[],a=new Set;for(let t of["witness_chain","witness_chain_archive"]){let f=e.prepare(`SELECT * FROM ${t} ORDER BY id ASC`).iterate();for(let o of f){if(o.id===r||a.has(o.id))continue;a.add(o.id);let i=A(o);!n.has(b(i))&&!n.has(R(i))&&c.push({id:o.id,hash:y(o)})}}return c.sort((t,f)=>t.id-f.id)}function S(e){return`Refusing to repair: tampering detected at id=${e.tamperedAt} (${e.tamperReason}). Only accidental forks can be re-anchored; restore from a backup and investigate.`}function M(e){let r=`${e}.bak-${Math.floor(Date.now()/1e3)}`;if(!v(r))return r;let n=1;for(;v(`${r}-${n}`);)n++;return`${r}-${n}`}function W(e,r){let n=M(e),s=g(e,{readonly:!0,fileMustExist:!0});try{s.prepare("VACUUM INTO ?").run(n)}finally{s.close()}let c=g(n,{readonly:!0,fileMustExist:!0});try{let a=c.pragma("integrity_check",{simple:!0});if(a!=="ok")throw new Error(`backup integrity_check failed: ${String(a)}`);let t=l(c);if(t.live!==r.live||t.archive!==r.archive)throw new Error(`backup holds ${JSON.stringify(t)} witness rows, expected ${JSON.stringify(r)}`)}finally{c.close()}return n}async function L(e,r){let n=r.dryRun===!0,s=new E(e,r.keyManager??void 0);await s.initialize();let c=l(e),a=s.verify(w),t={dryRun:n,before:O(a),rowsBefore:c,rowsAfter:c};if(a.tampered)return{...t,action:"refused",message:S(a),forksAcknowledged:[]};let f=$(a);if(f.length===0){let d=a.forks.length>0?`Nothing to repair: all ${a.forks.length} fork(s) are already re-anchored.`:"Nothing to repair: the audit chain has no forks.";return{...t,action:"none",message:d,forksAcknowledged:[]}}if(n)return{...t,action:"would-reanchor",forksAcknowledged:f.map(d=>d.id),message:`Dry run: would back up the database and append a CHAIN_REANCHOR entry acknowledging ${f.length} fork(s). Nothing was written.`};let o,i=e.transaction(()=>{let d=l(e),p=s.verify(w);if(p.tampered)return{kind:"refused",check:p};let h=$(p);if(h.length===0)return{kind:"noop"};o=W(r.dbPath,d);let m=e.prepare("SELECT * FROM witness_chain ORDER BY id DESC LIMIT 1").get(),T=s.append("CHAIN_REANCHOR",{reason:"fork-repair",issue:"https://github.com/proffesor-for-testing/agentic-qe/issues/753",note:"Acknowledges accidental forks from pre-3.14.5 concurrent appends; no rows were changed.",forkCount:h.length,forks:h,pins:x(e,m.id),verifiedTipId:m.id,verifiedTipHash:y(m),entriesChecked:p.entriesChecked,rows:d,backup:I(o)},r.actor??"aqe-audit-repair"),k=l(e);if(k.live!==d.live+1||k.archive!==d.archive)throw new Error(`row-count check failed: before ${JSON.stringify(d)}, after ${JSON.stringify(k)}`);return{kind:"reanchored",entry:T,forks:h,txAfter:k}}).immediate();if(i.kind==="refused")return{...t,action:"refused",message:S(i.check),forksAcknowledged:[]};if(i.kind==="noop")return{...t,action:"none",message:"Nothing to repair (another process re-anchored first).",forksAcknowledged:[]};let u=s.verify(w),N=u.valid&&!u.tampered;return{...t,action:"reanchored",after:O(u),rowsAfter:i.txAfter,forksAcknowledged:i.forks.map(d=>d.id),reanchorId:i.entry.id,backupPath:o,message:N?`Re-anchored ${i.forks.length} fork(s) with CHAIN_REANCHOR id=${i.entry.id}; chain now ${u.status}. Backup: ${o}`:`Appended CHAIN_REANCHOR id=${i.entry.id}, but the chain still verifies as ${u.status}. Backup: ${o}`}}export{L as repairWitnessChainForks};

package/dist/cli/chunks/{witness-chain-verifier-GUTC3W7N.js → witness-chain-verifier-BHJ3ZAEK.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.11");process.exit(0)}
-import{g as a,h as b,i as c,j as d,k as e}from"./chunk-NT7JRHMH.js";import"./chunk-CFWGGRE7.js";export{a as CHAIN_REANCHOR_ACTION,c as WitnessChainVerifier,b as ownHash,e as tableExists,d as verifyWitnessChain};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{g as a,h as b,i as c,j as d,k as e}from"./chunk-2IVE5AR3.js";import"./chunk-WDEXOLK2.js";export{a as CHAIN_REANCHOR_ACTION,c as WitnessChainVerifier,b as ownHash,e as tableExists,d as verifyWitnessChain};

package/dist/cli/chunks/{witness-key-manager-YBNKMOP6.js → witness-key-manager-WNVPH2Z3.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.11");process.exit(0)}
-import{a,b,c}from"./chunk-KDI5JOYZ.js";import"./chunk-EH2S6AOR.js";import"./chunk-XNLIWQYE.js";import"./chunk-CFWGGRE7.js";export{a as WitnessKeyManager,c as _resetDefaultWitnessKeyManagerForTests,b as getDefaultWitnessKeyManager};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a,b,c}from"./chunk-IETBWYHW.js";import"./chunk-DZGPUGUG.js";import"./chunk-4LWMAAWK.js";import"./chunk-WDEXOLK2.js";export{a as WitnessKeyManager,c as _resetDefaultWitnessKeyManagerForTests,b as getDefaultWitnessKeyManager};

package/dist/cli/chunks/{workflow-UAJUILFQ.js → workflow-6QR5MQTO.js}

@@ -1,5 +1,5 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.11");process.exit(0)}
-import{b as $}from"./chunk-VWUZSNVC.js";import"./chunk-WCVCOT4E.js";import{a as k,b as W,c as b,g as C}from"./chunk-BZPE3LDO.js";import"./chunk-TCYSBC7Y.js";import{c as v}from"./chunk-JFLU7L3W.js";import"./chunk-IW6WDGHM.js";import"./chunk-DDEOZPWJ.js";import"./chunk-CFWGGRE7.js";import{Command as D}from"commander";import o from"chalk";function O(f,i){let h=f.indexOf("=");return h>0&&(i[f.substring(0,h)]=f.substring(h+1)),i}function V(f,i,h){let m=new D("workflow").description("Manage QE workflows and pipelines (ADR-041)");return m.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(n,t)=>{if(!await h())return;let c=(await import("path")).resolve(n);try{console.log(o.blue(`
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{b as $}from"./chunk-4SA7M34P.js";import"./chunk-UREDS662.js";import{a as k,b as W,c as b,g as C}from"./chunk-3EWQN37E.js";import"./chunk-MCPEC6OO.js";import{c as v}from"./chunk-WTAUF6O4.js";import"./chunk-VZBC6DP7.js";import"./chunk-W4II6SIH.js";import"./chunk-WDEXOLK2.js";import{Command as D}from"commander";import o from"chalk";function O(f,i){let h=f.indexOf("=");return h>0&&(i[f.substring(0,h)]=f.substring(h+1)),i}function V(f,i,h){let m=new D("workflow").description("Manage QE workflows and pipelines (ADR-041)");return m.command("run <file>").description("Execute a QE pipeline from YAML file").option("-w, --watch","Watch execution progress").option("-v, --verbose","Show detailed output").option("--params <json>","Additional parameters as JSON","{}").action(async(n,t)=>{if(!await h())return;let c=(await import("path")).resolve(n);try{console.log(o.blue(`
  Running workflow from: ${n}
 `));let l=k(c);if(!l.success||!l.workflow){console.log(o.red("Failed to parse pipeline:"));for(let d of l.errors)console.log(o.red(`   ${d}`));await i(1)}let u={...v(t.params,"params")};if(l.pipeline){for(let d of l.pipeline.stages)if(d.params)for(let[y,p]of Object.entries(d.params))u[y]=p}if(!f.workflowOrchestrator.getWorkflow(l.workflow.id)){let d=f.workflowOrchestrator.registerWorkflow(l.workflow);d.success||(console.log(o.red(`Failed to register workflow: ${d.error.message}`)),await i(1))}let g=await f.workflowOrchestrator.executeWorkflow(l.workflow.id,u);if(!g.success){console.log(o.red(`Failed to start workflow: ${g.error.message}`)),await i(1);return}let a=g.value;if(console.log(o.cyan(`  Execution ID: ${a}`)),console.log(o.gray(`  Workflow: ${l.workflow.name}`)),console.log(o.gray(`  Stages: ${l.workflow.steps.length}`)),console.log(""),t.watch){console.log(o.blue(`Workflow Progress:
 `));let d,y=Date.now();for(;;){let w=f.workflowOrchestrator.getWorkflowStatus(a);if(!w)break;if(!d||d.progress!==w.progress||d.status!==w.status||JSON.stringify(d.currentSteps)!==JSON.stringify(w.currentSteps)){process.stdout.write("\r\x1B[K");let S="\u2588".repeat(Math.floor(w.progress/5))+"\u2591".repeat(20-Math.floor(w.progress/5)),R=w.status==="completed"?o.green:w.status==="failed"?o.red:w.status==="running"?o.yellow:o.gray;console.log(`  [${S}] ${w.progress}% - ${R(w.status)}`),w.currentSteps.length>0&&t.verbose&&console.log(o.gray(`    Running: ${w.currentSteps.join(", ")}`)),d=w}if(w.status==="completed"||w.status==="failed"||w.status==="cancelled")break;await new Promise(S=>setTimeout(S,500))}let p=f.workflowOrchestrator.getWorkflowStatus(a);if(p){console.log("");let w=p.duration||Date.now()-y;p.status==="completed"?(console.log(o.green("Workflow completed successfully")),console.log(o.gray(`   Duration: ${$(w)}`)),console.log(o.gray(`   Completed: ${p.completedSteps.length} stages`)),p.skippedSteps.length>0&&console.log(o.yellow(`   Skipped: ${p.skippedSteps.length} stages`))):p.status==="failed"?(console.log(o.red("Workflow failed")),console.log(o.red(`   Error: ${p.error}`)),console.log(o.gray(`   Failed stages: ${p.failedSteps.join(", ")}`))):console.log(o.yellow(`Workflow ${p.status}`))}console.log(""),await i(p?.status==="completed"?0:1);return}else console.log(o.green("Workflow execution started")),console.log(o.gray(`   Use 'aqe workflow status ${a}' to check progress`));console.log(""),await i(0)}catch(l){console.error(o.red(`
@@ -35,10 +35,10 @@ Workflow cancelled: ${n}
 `)):console.log(o.red(`
 Failed to cancel workflow: ${t.error.message}
 `)),await i(t.success?0:1)}catch(t){console.error(o.red(`
-Failed to cancel workflow:`),t),await i(1)}}),m.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:n}=await import("./browser-workflow-VTDFBW7T.js"),e=await new n().invoke({});if(e.success&&e.data){console.log(o.blue(`
+Failed to cancel workflow:`),t),await i(1)}}),m.command("browser-list").description("List available browser workflow templates").action(async()=>{try{let{BrowserWorkflowTool:n}=await import("./browser-workflow-QRKCFVR3.js"),e=await new n().invoke({});if(e.success&&e.data){console.log(o.blue(`
  Browser Workflow Templates:
 `));for(let c of e.data.availableTemplates)console.log(`  ${o.cyan(c)}`);console.log("")}else console.log(o.red(`Failed: ${e.error||"Unknown error"}`));await i(0)}catch(n){console.error(o.red(`
-Failed:`),n),await i(1)}}),m.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",O,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(n,t)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-VTDFBW7T.js"),{writeOutput:c,toJSON:l}=await import("./ci-output-PEQQQWVD.js"),s=new e,u={variables:t.var||{}};if(t.yaml)u.workflowYaml=t.yaml;else if(n)if(n.endsWith(".yaml")||n.endsWith(".yml")){let g=await import("fs"),d=(await import("path")).resolve(n);g.existsSync(d)||(console.log(o.red(`
+Failed:`),n),await i(1)}}),m.command("browser-load [template]").description("Load and validate a browser workflow template or inline YAML").option("--yaml <yaml>","Inline YAML workflow definition").option("-v, --var <key=value>","Variable override (repeatable)",O,{}).option("-F, --format <format>","Output format (text|json)","text").option("-o, --output <path>","Write output to file").action(async(n,t)=>{try{let{BrowserWorkflowTool:e}=await import("./browser-workflow-QRKCFVR3.js"),{writeOutput:c,toJSON:l}=await import("./ci-output-LCOQBSJL.js"),s=new e,u={variables:t.var||{}};if(t.yaml)u.workflowYaml=t.yaml;else if(n)if(n.endsWith(".yaml")||n.endsWith(".yml")){let g=await import("fs"),d=(await import("path")).resolve(n);g.existsSync(d)||(console.log(o.red(`
 File not found: ${d}
 `)),await i(1)),u.workflowYaml=g.readFileSync(d,"utf-8")}else u.templateName=n;else console.log(o.red(`
 Provide a template name or --yaml. Use "workflow browser-list" to see templates.

package/dist/cli/chunks/workflow-orchestrator-3JLF3IX7.js

@@ -0,0 +1,2 @@
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a,b,d as c,e as d}from"./chunk-4KUOYDY2.js";import"./chunk-INZARYUD.js";import"./chunk-L7NGKANW.js";import"./chunk-66PXR3NI.js";import"./chunk-WTAUF6O4.js";import"./chunk-SPC4RBLF.js";import"./chunk-WGTEZT7G.js";import"./chunk-IPA7K556.js";import"./chunk-ZROAMFX2.js";import"./chunk-YUA6ZKKY.js";import"./chunk-3IU4LDZR.js";import"./chunk-YVJEUX3I.js";import"./chunk-6QRI3JVE.js";import"./chunk-7TA5MUPW.js";import"./chunk-VZBC6DP7.js";import"./chunk-YWWMNTBF.js";import"./chunk-UJNGGFGX.js";import"./chunk-ADUAJIAU.js";import"./chunk-7OEFBWAG.js";import"./chunk-QCPVUNN3.js";import"./chunk-35MIUSXQ.js";import"./chunk-DZGPUGUG.js";import"./chunk-4LWMAAWK.js";import"./chunk-IA55PFLG.js";import"./chunk-W4II6SIH.js";import"./chunk-O3IM4WRZ.js";import"./chunk-WDEXOLK2.js";export{b as DEFAULT_WORKFLOW_CONFIG,a as WorkflowEvents,c as WorkflowOrchestrator,d as createWorkflowOrchestrator};

package/dist/cli/chunks/{wrappers-AVZ3GPAL.js → wrappers-EHOL62TS.js}

@@ -1,2 +1,2 @@
-import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.11");process.exit(0)}
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-VEEYL2CZ.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-JUMICXM6.js";import"./chunk-LD5CFK53.js";import"./chunk-XGPTZUKQ.js";import"./chunk-JFLU7L3W.js";import"./chunk-WM3SRRA6.js";import"./chunk-XGBU3KEM.js";import"./chunk-G2IJFNZS.js";import"./chunk-M5XYIQYZ.js";import"./chunk-NQZNMCZU.js";import"./chunk-5N25I53C.js";import"./chunk-OYJC3YON.js";import"./chunk-EJPK7OTR.js";import"./chunk-QDESWOZP.js";import"./chunk-IO5537OM.js";import"./chunk-FZHSG75I.js";import"./chunk-VO3DRK4P.js";import"./chunk-HJ3XNTTJ.js";import"./chunk-76SNL7GU.js";import"./chunk-EH2S6AOR.js";import"./chunk-XNLIWQYE.js";import"./chunk-4MUBW4RT.js";import"./chunk-DDEOZPWJ.js";import"./chunk-XJKZ7FTR.js";import"./chunk-CFWGGRE7.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};
+import{createRequire as __cr}from"module";const require=__cr(import.meta.url);if(process.argv.includes('--version')||process.argv.includes('-v')){console.log("3.15.12");process.exit(0)}
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v as L,w as M,x as N}from"./chunk-G3AABG4Q.js";import{a as v,b as w,c as x,d as y,e as z,f as A,g as B,h as C,i as D,j as E,k as F,l as G,m as H,n as I,o as J,p as K}from"./chunk-A5Y7DAVQ.js";import"./chunk-L7NGKANW.js";import"./chunk-66PXR3NI.js";import"./chunk-WTAUF6O4.js";import"./chunk-SPC4RBLF.js";import"./chunk-WGTEZT7G.js";import"./chunk-IPA7K556.js";import"./chunk-ZROAMFX2.js";import"./chunk-YUA6ZKKY.js";import"./chunk-3IU4LDZR.js";import"./chunk-YVJEUX3I.js";import"./chunk-6QRI3JVE.js";import"./chunk-YWWMNTBF.js";import"./chunk-UJNGGFGX.js";import"./chunk-ADUAJIAU.js";import"./chunk-7OEFBWAG.js";import"./chunk-QCPVUNN3.js";import"./chunk-35MIUSXQ.js";import"./chunk-DZGPUGUG.js";import"./chunk-4LWMAAWK.js";import"./chunk-IA55PFLG.js";import"./chunk-W4II6SIH.js";import"./chunk-O3IM4WRZ.js";import"./chunk-WDEXOLK2.js";export{z as GNNLayerFactory,i as QEFlashAttention,x as QEGNNEmbeddingIndex,y as QEGNNIndexFactory,a as QESONA,e as QE_FLASH_ATTENTION_CONFIG,g as QE_PERFORMANCE_TARGETS,f as QE_SONA_CONFIG,A as TensorCompressionFactory,u as batchComputeAttention,K as batchDifferentiableSearch,M as checkRuvectorPackagesAvailable,c as createDomainQESONA,j as createQEFlashAttention,b as createQESONA,D as getDifferentiableSearch,F as getGetCompressionLevel,E as getHierarchicalForward,G as getInit,h as getOptimalBlockConfig,k as getQEFlashAttentionConfig,n as getRuvectorDotProductAttention,m as getRuvectorFlashAttention,p as getRuvectorHyperbolicAttention,B as getRuvectorLayer,q as getRuvectorLinearAttention,r as getRuvectorMoEAttention,o as getRuvectorMultiHeadAttention,L as getRuvectorPackageVersions,C as getTensorCompress,l as getWorkloadTypes,N as initAllRuvectorPackages,w as initGNN,d as isAttentionAvailable,v as isGNNAvailable,s as toFloat32Array,H as toFloat32ArrayGNN,J as toIEmbedding,t as toNumberArrayAttn,I as toNumberArrayGNN};

package/dist/cli/commands/ci.js

@@ -86,6 +86,13 @@ async function executePhase(phase, context, outputDir, phaseIndex, coverageThres
                 const pct = (v) => (v === null || v === undefined ? 'n/a' : `${Math.round(v * 10) / 10}%`);
                 switch (outcome.kind) {
                     case 'measured': {
+                        if (outcome.insufficientEvidence.length > 0) {
+                            // #1154: target files missing from the report, or a stale report.
+                            status = 'warning';
+                            phaseExitCode = coverageExitCode(outcome, threshold);
+                            summary = `INSUFFICIENT EVIDENCE — ${outcome.insufficientEvidence.join('; ')}`;
+                            break;
+                        }
                         status = outcome.verdict.meetsThreshold ? 'passed' : 'warning';
                         summary = `Line: ${pct(outcome.summary.line)}, Branch: ${pct(outcome.summary.branch)} — ` +
                             `${outcome.verdict.meetsThreshold ? 'meets' : 'below'} ${threshold}% threshold (measured)`;

package/dist/cli/commands/coverage.js

@@ -149,7 +149,13 @@ missing coverage evidence.`)
                     console.log(`    Branches:   ${color(summary.branch)(fmt(summary.branch))}`);
                     console.log(`    Functions:  ${color(summary.function)(fmt(summary.function))}`);
                     console.log(`    Statements: ${color(summary.statement)(fmt(summary.statement))}`);
-                    if (outcome.kind === 'measured') {
+                    if (outcome.kind === 'measured' && outcome.insufficientEvidence.length > 0) {
+                        // #1154: figures over part of the target, or from a stale report, are not a pass.
+                        console.log(`\n    Threshold: ${chalk.red(`Not met (${threshold}%) — INSUFFICIENT EVIDENCE`)}`);
+                        for (const reason of outcome.insufficientEvidence)
+                            console.log(chalk.yellow(`    - ${reason}`));
+                    }
+                    else if (outcome.kind === 'measured') {
                         console.log(`\n    Threshold: ${outcome.verdict.meetsThreshold ? chalk.green(`Met (${threshold}%)`) : chalk.red(`Not met (${threshold}%)`)}`);
                     }
                     else {

package/dist/cli/commands/fleet.js

@@ -309,7 +309,7 @@ export function createFleetCommand(context, cleanupAndExit, ensureInitialized, r
             }));
             // #1168: a completed agent is not a passed check, so the completion
             // line only says "successfully" when the verdict passes.
-            const verdictPassed = reportFleetVerdict(operation, results, () => { });
+            const verdictPassed = reportFleetVerdict(operation, results, () => { }, plan.task.insufficientEvidence);
             progress.stop({ verdictFailed: !verdictPassed });
             const successful = results.filter(r => r.success).length;
             const failed = results.filter(r => !r.success).length;
@@ -321,7 +321,7 @@ export function createFleetCommand(context, cleanupAndExit, ensureInitialized, r
                 console.log(chalk.red(`   Failed: ${failed}`));
             }
             // #1125 review: a completed task is not a passed check.
-            const passed = reportFleetVerdict(operation, results);
+            const passed = reportFleetVerdict(operation, results, undefined, plan.task.insufficientEvidence);
             console.log('');
             await cleanupAndExit(passed ? 0 : 1);
         }

package/dist/cli/commands/hooks-handlers/stats-hooks.d.ts

@@ -11,12 +11,13 @@ import { Command } from 'commander';
  * - `sqlite`: an embedder produced the vector and SQLite holds it (vector
  *   search uses it now); only the ANN index (patterns.rvf) was not open in
  *   this process. It is ingested automatically the next time the index opens.
- * - `pending`: no vector (no embedding runtime); text search only until an
- *   embedder is configured and `aqe learning backfill-embeddings` runs.
+ * - `pending`: no vector (no embedding runtime, or #1204: the configured
+ *   embedder failed); text search only until an embedder works and
+ *   `aqe learning backfill-embeddings` runs.
  */
 export declare function describeVectorIndexState(pattern: {
     embedding?: ArrayLike<number>;
-}, indexUnavailableCause?: string): {
+}, indexUnavailableCause?: string, embedderFailure?: string | null): {
     vectorIndex: 'indexed' | 'sqlite' | 'pending';
     notice?: string;
 };

package/dist/cli/commands/hooks-handlers/stats-hooks.js

@@ -9,6 +9,7 @@ import { QE_HOOK_EVENTS } from '../../../learning/qe-hooks.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
 import { committedPendingIndexPatternId } from '../../../learning/pattern-mutation-error.js';
 import { formatLearningOutcomes, formatPatternSuccessRate } from '../../../learning/usage-outcome.js';
+import { redactEndpoint } from '../../../learning/embedder-endpoint-client.js';
 import { getHooksSystem, printJson, printSuccess, printError, } from './hooks-shared.js';
 /**
  * How a learned pattern reached vector search, by cause (#981, review N1).
@@ -16,11 +17,28 @@ import { getHooksSystem, printJson, printSuccess, printError, } from './hooks-sh
  * - `sqlite`: an embedder produced the vector and SQLite holds it (vector
  *   search uses it now); only the ANN index (patterns.rvf) was not open in
  *   this process. It is ingested automatically the next time the index opens.
- * - `pending`: no vector (no embedding runtime); text search only until an
- *   embedder is configured and `aqe learning backfill-embeddings` runs.
+ * - `pending`: no vector (no embedding runtime, or #1204: the configured
+ *   embedder failed); text search only until an embedder works and
+ *   `aqe learning backfill-embeddings` runs.
  */
-export function describeVectorIndexState(pattern, indexUnavailableCause) {
+export function describeVectorIndexState(pattern, indexUnavailableCause, embedderFailure) {
     const hasVector = Boolean(pattern.embedding && pattern.embedding.length > 0);
+    if (!hasVector && embedderFailure) {
+        const endpoint = process.env.AQE_EMBEDDER_ENDPOINT;
+        const embedder = endpoint
+            ? `the configured embedding endpoint (AQE_EMBEDDER_ENDPOINT=${redactEndpoint(endpoint)})`
+            : 'the embedder';
+        // The embedder's own wording says "transformer" for the endpoint path too.
+        const reason = endpoint
+            ? embedderFailure.replace(/^(Transformer initialization previously failed|Failed to initialize transformer model): /, '')
+            : embedderFailure;
+        return {
+            vectorIndex: 'pending',
+            notice: `Pattern stored in SQLite without a vector: ${embedder} failed: ${reason}. ` +
+                'Text search finds it now. Once the embedder works again, run ' +
+                '`aqe learning backfill-embeddings` to enable semantic search for it.',
+        };
+    }
     if (!hasVector) {
         return {
             vectorIndex: 'pending',
@@ -212,7 +230,7 @@ export function registerStatsHooks(hooks) {
             if (!pattern) {
                 throw new Error('learn failed: no pattern returned');
             }
-            const { vectorIndex, notice: pendingWarning } = describeVectorIndexState(pattern, indexCause);
+            const { vectorIndex, notice: pendingWarning } = describeVectorIndexState(pattern, indexCause, reasoningBank.getEmbedderFailure());
             if (options.json) {
                 printJson({
                     success: true,

package/dist/cli/handlers/task-handler.js

@@ -185,6 +185,12 @@ export class TaskHandler {
     async executeList(options, context) {
         if (!await this.ensureInitialized())
             return this.cleanupAndExit(1);
+        // #1117: an unvalidated filter silently matches nothing, which reads as
+        // "no tasks" rather than "bad flag". Parity with `task submit`.
+        if (options.priority !== undefined && !isPriority(options.priority)) {
+            console.error(chalk.red(`\n  ${invalidPriorityMessage(options.priority)}\n`));
+            return this.cleanupAndExit(1);
+        }
         try {
             const tasks = context.queen.listTasks({
                 status: options.status,

package/dist/cli/utils/coverage-verdict.d.ts

@@ -8,7 +8,10 @@
  *
  *   - measured   — an instrumented report covers the target: judged on the
  *                  metrics the report collected (an uncollected metric is null,
- *                  never 0%, and is left out of the threshold);
+ *                  never 0%, and is left out of the threshold). When target
+ *                  files are missing from the report, or the report is older
+ *                  than the sources, the evidence is insufficient (#1154): the
+ *                  threshold is not met and the exit code is 3;
  *   - unmeasured — the report has no entry for the target, the runner ran 0
  *                  tests, or only test files were reported: no figure, exit 3;
  *   - estimate   — no report exists, so the CLI shows a labelled STATIC
@@ -18,6 +21,7 @@
  */
 import { type CoverageData } from './coverage-data.js';
 import { type NoDataReason } from '../../coordination/handlers/coverage-target.js';
+import { type CoverageEvidence } from '../../coordination/handlers/coverage-evidence.js';
 /** `aqe coverage` exit code when no coverage measurement exists for the target (#995). */
 export declare const EXIT_UNMEASURED = 3;
 /** Provenance labels, the same vocabulary as MCP `coverage_analyze_sublinear`. */
@@ -27,6 +31,7 @@ export type CliCoverage = {
     kind: 'data';
     data: CoverageData;
     projectRoot?: string;
+    evidence?: CoverageEvidence;
 } | {
     kind: 'no-data';
     reason: NoDataReason;
@@ -112,6 +117,9 @@ export type CliCoverageOutcome = {
         meetsThreshold: boolean;
     };
     recommendations: string[];
+    /** #1154: why the report cannot support a verdict for the target; empty when it can. */
+    insufficientEvidence: string[];
+    evidence?: CoverageEvidence;
 };
 /** Caller-facing explanation of a static estimate. */
 export declare function estimateMessage(): string;
@@ -122,7 +130,8 @@ export declare function estimateMessage(): string;
 export declare function evaluateCliCoverage(api: CoverageAnalyzeAPI, targetPath: string, threshold: number, log?: (message: string) => void): Promise<CliCoverageOutcome>;
 /**
  * Exit code: 0 meets (by more than 5%), 1 below / error, 2 within 5% above,
- * 3 UNMEASURED (not in the report, 0 tests, test-only report, or estimate only).
+ * 3 UNMEASURED (not in the report, 0 tests, test-only report, or estimate only)
+ * or insufficient evidence (target files missing from the report, stale report).
  */
 export declare function coverageExitCode(outcome: CliCoverageOutcome, threshold: number): number;
 /** The `-F json` document for an outcome (same shape in every case). */

package/dist/cli/utils/coverage-verdict.js

@@ -8,7 +8,10 @@
  *
  *   - measured   — an instrumented report covers the target: judged on the
  *                  metrics the report collected (an uncollected metric is null,
- *                  never 0%, and is left out of the threshold);
+ *                  never 0%, and is left out of the threshold). When target
+ *                  files are missing from the report, or the report is older
+ *                  than the sources, the evidence is insufficient (#1154): the
+ *                  threshold is not met and the exit code is 3;
  *   - unmeasured — the report has no entry for the target, the runner ran 0
  *                  tests, or only test files were reported: no figure, exit 3;
  *   - estimate   — no report exists, so the CLI shows a labelled STATIC
@@ -20,6 +23,7 @@ import chalk from 'chalk';
 import { walkSourceFiles } from './file-discovery.js';
 import { buildCoverageData, summarizeCoverage } from './coverage-data.js';
 import { describeNoData, reconcileRecommendations, resolveExistingCoverage, thresholdVerdict, } from '../../coordination/handlers/coverage-target.js';
+import { describeEvidence } from '../../coordination/handlers/coverage-evidence.js';
 /** `aqe coverage` exit code when no coverage measurement exists for the target (#995). */
 export const EXIT_UNMEASURED = 3;
 /** Provenance labels, the same vocabulary as MCP `coverage_analyze_sublinear`. */
@@ -46,8 +50,12 @@ export async function resolveCliCoverageData(targetPath, log = message => consol
     if (existing.status === 'evaluated') {
         const { evaluation, projectRoot } = existing;
         if (evaluation.status === 'measured') {
-            const files = evaluation.files;
-            return { kind: 'data', data: { files, summary: summarizeCoverage(files), instrumented: true }, projectRoot };
+            const { files, evidence } = evaluation;
+            const data = {
+                files, summary: summarizeCoverage(files), instrumented: true,
+                ...(evidence.unmeasuredFiles.length > 0 ? { unmeasuredFiles: evidence.unmeasuredFiles } : {}),
+            };
+            return { kind: 'data', data, projectRoot, evidence };
         }
         return { kind: 'no-data', reason: evaluation.reason, message: describeNoData(evaluation.reason, targetPath, projectRoot) };
     }
@@ -104,12 +112,17 @@ export async function evaluateCliCoverage(api, targetPath, threshold, log) {
     // #995 review NB5: a metric the report never collected is null — not 0 —
     // and is left out of the threshold verdict (same rule as MCP).
     const collected = metricsCollected(data);
-    const verdict = thresholdVerdict(report.summary, threshold, collected);
+    const figures = thresholdVerdict(report.summary, threshold, collected);
+    // #1154: figures over part of the target, or from a stale report, never meet the threshold.
+    const insufficientEvidence = describeEvidence(resolved.evidence, resolved.projectRoot ?? targetPath);
+    const verdict = { ...figures, meetsThreshold: figures.meetsThreshold && insufficientEvidence.length === 0 };
     return {
         kind: 'measured',
         data,
         collected,
         verdict,
+        insufficientEvidence,
+        ...(resolved.evidence ? { evidence: resolved.evidence } : {}),
         summary: {
             ...report.summary,
             branch: collected.branch ? report.summary.branch : null,
@@ -117,16 +130,19 @@ export async function evaluateCliCoverage(api, targetPath, threshold, log) {
             statement: collected.statement ? report.summary.statement : null,
         },
         // NB-A: the shortfall advice comes from the same verdict (shared with MCP).
-        recommendations: reconcileRecommendations(report.recommendations ?? [], verdict, threshold, collected),
+        recommendations: reconcileRecommendations(report.recommendations ?? [], figures, threshold, collected),
     };
 }
 /**
  * Exit code: 0 meets (by more than 5%), 1 below / error, 2 within 5% above,
- * 3 UNMEASURED (not in the report, 0 tests, test-only report, or estimate only).
+ * 3 UNMEASURED (not in the report, 0 tests, test-only report, or estimate only)
+ * or insufficient evidence (target files missing from the report, stale report).
  */
 export function coverageExitCode(outcome, threshold) {
     switch (outcome.kind) {
         case 'measured': {
+            if (outcome.insufficientEvidence.length > 0)
+                return EXIT_UNMEASURED;
             const { overall, meetsThreshold } = outcome.verdict;
             if (!meetsThreshold)
                 return 1;
@@ -158,6 +174,10 @@ export function coverageJson(outcome, threshold, target) {
                 functionDataCollected: outcome.collected.function,
                 statementDataCollected: outcome.collected.statement,
                 ...(outcome.data.unmeasuredFiles?.length ? { unmeasuredFiles: outcome.data.unmeasuredFiles } : {}),
+                ...(outcome.evidence ? { evidenceStatus: outcome.evidence.status } : {}),
+                ...(outcome.evidence?.stale ? { staleReport: outcome.evidence.stale } : {}),
+                ...(outcome.insufficientEvidence.length > 0
+                    ? { warning: `INSUFFICIENT EVIDENCE: ${outcome.insufficientEvidence.join('; ')}` } : {}),
             };
         case 'estimate':
             return {

package/dist/cli/utils/fleet-operation.d.ts

@@ -17,6 +17,11 @@ export interface FleetOperationTask {
     domain: DomainName;
     type: string;
     payload: Record<string, unknown>;
+    /**
+     * #1154: why the input cannot support a passing verdict (target files missing
+     * from the coverage report, a stale report). The verdict fails while non-empty.
+     */
+    insufficientEvidence?: string[];
 }
 export type FleetOperationPlan = {
     success: true;

package/dist/cli/utils/fleet-operation.js

@@ -15,6 +15,7 @@ import { extname, resolve } from 'node:path';
 import { walkSourceFiles } from './file-discovery.js';
 import { summarizeCoverage } from './coverage-data.js';
 import { describeNoData, resolveExistingCoverage } from '../../coordination/handlers/coverage-target.js';
+import { describeEvidence } from '../../coordination/handlers/coverage-evidence.js';
 import { MAX_SAST_FILE_BYTES } from '../../domains/security-compliance/sast-path-guard.js';
 export const FLEET_OPERATIONS = ['test', 'analyze', 'scan'];
 /** Coverage threshold `analyze` judges against, as `aqe coverage` does by default. */
@@ -61,9 +62,14 @@ export async function planFleetOperation(operation, target) {
             if (evaluation.status !== 'measured')
                 return refuse(describeNoData(evaluation.reason, target, projectRoot));
             const coverageData = { files: evaluation.files, summary: summarizeCoverage(evaluation.files) };
+            const insufficientEvidence = describeEvidence(evaluation.evidence, projectRoot);
             return {
                 success: true,
-                task: { domain: 'coverage-analysis', type: 'analyze-coverage', payload: { coverageData, threshold: FLEET_COVERAGE_THRESHOLD } },
+                task: {
+                    domain: 'coverage-analysis', type: 'analyze-coverage',
+                    payload: { coverageData, threshold: FLEET_COVERAGE_THRESHOLD },
+                    ...(insufficientEvidence.length > 0 ? { insufficientEvidence } : {}),
+                },
             };
         }
     }

package/dist/cli/utils/fleet-result.d.ts

@@ -8,7 +8,8 @@
  *   - test    fails when no test was generated or a generated test failed
  *             the test quality gate;
  *   - analyze fails when coverage over the collected metrics is below the
- *             threshold (an uncollected metric is not counted as 0%).
+ *             threshold (an uncollected metric is not counted as 0%), or when
+ *             the report leaves target files unmeasured or is stale (#1154).
  * A result without the expected shape fails rather than passing unread.
  */
 import { type FleetOperation } from './fleet-operation.js';
@@ -22,10 +23,11 @@ export interface FleetResultSummary {
 export declare function summarizeFleetResult(operation: FleetOperation, result: unknown): FleetResultSummary;
 /**
  * Print each distinct worker result once and the verdict over all workers.
- * Returns whether the operation passed.
+ * `insufficientEvidence` (from the operation's plan) fails the verdict whatever
+ * the workers returned. Returns whether the operation passed.
  */
 export declare function reportFleetVerdict(operation: FleetOperation, workers: ReadonlyArray<{
     success: boolean;
     result: unknown;
-}>, log?: (line: string) => void): boolean;
+}>, log?: (line: string) => void, insufficientEvidence?: readonly string[]): boolean;
 //# sourceMappingURL=fleet-result.d.ts.map

package/dist/cli/utils/fleet-result.js

@@ -8,7 +8,8 @@
  *   - test    fails when no test was generated or a generated test failed
  *             the test quality gate;
  *   - analyze fails when coverage over the collected metrics is below the
- *             threshold (an uncollected metric is not counted as 0%).
+ *             threshold (an uncollected metric is not counted as 0%), or when
+ *             the report leaves target files unmeasured or is stale (#1154).
  * A result without the expected shape fails rather than passing unread.
  */
 import chalk from 'chalk';
@@ -97,9 +98,10 @@ export function summarizeFleetResult(operation, result) {
 }
 /**
  * Print each distinct worker result once and the verdict over all workers.
- * Returns whether the operation passed.
+ * `insufficientEvidence` (from the operation's plan) fails the verdict whatever
+ * the workers returned. Returns whether the operation passed.
  */
-export function reportFleetVerdict(operation, workers, log = line => console.log(line)) {
+export function reportFleetVerdict(operation, workers, log = line => console.log(line), insufficientEvidence = []) {
     const summaries = workers.filter(w => w.success).map(w => summarizeFleetResult(operation, w.result));
     const shown = new Set();
     for (const summary of summaries) {
@@ -111,8 +113,12 @@ export function reportFleetVerdict(operation, workers, log = line => console.log
         for (const line of summary.lines)
             log(`   ${line}`);
     }
+    for (const reason of insufficientEvidence)
+        log(chalk.yellow(`   Evidence: ${reason}`));
     const incomplete = workers.filter(w => !w.success).length;
     const reasons = [...new Set(summaries.flatMap(s => s.reasons))];
+    if (insufficientEvidence.length > 0)
+        reasons.push('insufficient evidence: the coverage report is incomplete or stale for the target');
     if (incomplete > 0)
         reasons.unshift(`${incomplete} of ${workers.length} workers did not complete`);
     log('');

package/dist/coordination/handlers/coverage-collection.d.ts

@@ -141,6 +141,8 @@ export declare function isRustProject(targetPath: string): boolean;
 export declare function collectRustCoverage(targetPath: string, options?: {
     timeoutMs?: number;
 }): Promise<CollectedCoverage | null>;
+/** Production source files under a directory (test, build and vendored directories skipped). */
+export declare function walkSourceFiles(targetPath: string): string[];
 /**
  * Static coverage estimate from source shape, for when no instrumentation could
  * be run.

package/dist/coordination/handlers/coverage-collection.js

@@ -502,7 +502,8 @@ function withRecomputedSummary(files) {
         },
     };
 }
-function walkSourceFiles(targetPath) {
+/** Production source files under a directory (test, build and vendored directories skipped). */
+export function walkSourceFiles(targetPath) {
     const found = [];
     // Classification is relative to the analysis root (see isTestPath).
     const rootDir = targetPath;

package/dist/coordination/handlers/coverage-evidence.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Coverage evidence: is a report complete and current for its target? (#1154)
+ *
+ * A report judged over only the files it happens to contain says nothing
+ * about the target's other files. `aqe fleet run analyze --target src` printed
+ * "100% over 1 files" and "Verdict: PASSED" from a report that listed
+ * `src/math.js` while `src/unsafe.js` had no measurement at all, and a report
+ * written before the sources last changed was judged as if it were current.
+ *
+ * This module answers two questions for every caller of the shared resolver
+ * (MCP `coverage_analyze_sublinear` / `task_orchestrate`, `aqe coverage`,
+ * `aqe ci`, `aqe fleet run analyze`):
+ *   1. Which production source files under the target are not in the report?
+ *      They are UNMEASURED: not 0%, and not left out silently.
+ *   2. Is the report older than source files it is judged against? (stale)
+ * Either one makes the evidence insufficient: no verdict may pass on it.
+ */
+import type { FileCoverage } from '../../domains/coverage-analysis/interfaces';
+/** The report is older than these source files. */
+export interface StaleReport {
+    reportPath: string;
+    reportModified: string;
+    newerFiles: string[];
+}
+export interface CoverageEvidence {
+    /** `insufficient-evidence` when any target file is unmeasured or the report is stale. */
+    status: 'complete' | 'insufficient-evidence';
+    /** Production source files under the target with no entry in the report (absolute paths). */
+    unmeasuredFiles: string[];
+    /** Production source files under the target, measured or not. */
+    targetFiles: number;
+    stale?: StaleReport;
+    /** The coverage config whose include/exclude scoped `unmeasuredFiles`, if any. */
+    coverageScope?: {
+        source: string;
+        readable: boolean;
+    };
+}
+/**
+ * Production source files under a directory `target` that the report has no
+ * entry for. Only files in a language the report covers count: a JS report
+ * does not make a Python helper script unmeasured. Files the project's coverage
+ * config leaves out (include/exclude) were never meant to be measured and do
+ * not count either.
+ */
+export declare function findUnmeasuredSourceFiles(reportFiles: FileCoverage[], projectRoot: string, target: string): {
+    targetFiles: string[];
+    unmeasured: string[];
+    coverageScope?: {
+        source: string;
+        readable: boolean;
+    };
+};
+/** Source files modified after the report was written; `undefined` when the report is current. */
+export declare function findStaleness(reportPath: string, sourceFiles: string[]): StaleReport | undefined;
+/**
+ * The evidence a report gives for `target`.
+ *
+ * `measuredFiles` are the report entries already scoped to the target.
+ * Completeness is checked only when `checkCompleteness` is set (a directory
+ * target, not a report file given as the target), staleness only when the
+ * report's path is known (not for a report the run just wrote).
+ */
+export declare function assessCoverageEvidence(report: {
+    files: FileCoverage[];
+}, measuredFiles: FileCoverage[], projectRoot: string, target: string, options?: {
+    reportPath?: string;
+    checkCompleteness?: boolean;
+}): CoverageEvidence;
+/**
+ * Why the evidence is insufficient, one sentence per problem; empty when it is
+ * complete. Shared by MCP and CLI so the wording cannot drift.
+ */
+export declare function describeEvidence(evidence: CoverageEvidence | undefined, projectRoot: string): string[];
+//# sourceMappingURL=coverage-evidence.d.ts.map