agentic-qe 3.15.9 → 3.15.11

package/dist/mcp/tools/mincut/index.js

@@ -39,10 +39,12 @@ export class MinCutHealthTool extends MCPToolBase {
                 agents: {
                     type: 'array',
                     description: 'Agent vertices to add to the graph before analysis',
+                    items: { type: 'object', description: 'Agent vertex { id, domain, weight? }' },
                 },
                 edges: {
                     type: 'array',
                     description: 'Edges to add between agents',
+                    items: { type: 'object', description: 'Edge { source, target, weight? }' },
                 },
                 includeWeakVertices: {
                     type: 'boolean',
@@ -210,6 +212,7 @@ export class MinCutStrengthenTool extends MCPToolBase {
                 targetVertices: {
                     type: 'array',
                     description: 'Specific vertices to strengthen',
+                    items: { type: 'string', description: 'Vertex ID' },
                 },
                 apply: {
                     type: 'boolean',

package/dist/mcp/tools/quality-assessment/gate.js

@@ -11,6 +11,10 @@
  */
 import { MCPToolBase } from '../base.js';
 import { toErrorMessage } from '../../../shared/error-utils.js';
+import { MAX_PAYLOAD_FILE_BYTES, requirePayloadPath } from '../../../shared/io/payload-path-guard.js';
+import { findProjectRoot } from '../../../kernel/project-root.js';
+import { readConfinedText } from '../../../shared/io/confined-read.js';
+import { parseAnchorSet } from '../../../validation/anchor-set.js';
 import { getLLMRouter } from '../base.js';
 import { runQualityGate, } from '../../../validation/quality-gate-runner.js';
 import { createRouterFrontierJudge, createUnavailableJudge, } from '../../../validation/frontier-judge.js';
@@ -32,6 +36,19 @@ export class QualityGateTool extends MCPToolBase {
             if (typeof params.artifact !== 'string' || params.artifact.length === 0) {
                 return { success: false, error: 'artifact (non-empty string) is required' };
             }
+            // #1126: a caller-named anchor must be a regular file inside the project
+            // (relative paths resolve against the project root, as the runner does).
+            let anchorPath;
+            let anchor;
+            if (params.anchorPath !== undefined) {
+                const confined = await requirePayloadPath('qe/quality/gate', 'anchorPath', params.anchorPath, { basePath: findProjectRoot(), maxBytes: MAX_PAYLOAD_FILE_BYTES });
+                if (!confined.success)
+                    return { success: false, error: confined.error.message };
+                anchorPath = confined.value;
+                // #1161: the runner gets the anchor read from the validated descriptor,
+                // so a file swapped after the check is never read by name.
+                anchor = parseAnchorSet(await readConfinedText(anchorPath, { maxBytes: MAX_PAYLOAD_FILE_BYTES }), params.anchorPath);
+            }
             const router = await getLLMRouter(context);
             const judge = router
                 ? createRouterFrontierJudge(router, {
@@ -47,7 +64,8 @@ export class QualityGateTool extends MCPToolBase {
                 artifact: params.artifact,
                 checklistId: params.checklistId,
                 judge,
-                anchorPath: params.anchorPath,
+                anchorPath,
+                anchor,
                 verificationManifest: params.verificationManifest,
             });
             return { success: true, data: result };

package/dist/mcp/tools/qx-analysis/analyze.js

@@ -37,6 +37,7 @@ const QX_ANALYZE_SCHEMA = {
         heuristics: {
             type: 'array',
             description: 'Specific heuristics to apply (default: all)',
+            items: { type: 'string', description: 'Heuristic name' },
         },
         minOracleSeverity: {
             type: 'string',

package/dist/mcp/tools/requirements-validation/quality-criteria.js

@@ -13,8 +13,9 @@
  */
 import { MCPToolBase } from '../base.js';
 import { createQualityCriteriaService, HTSM_CATEGORIES, NEVER_OMIT_CATEGORIES, } from '../../../domains/requirements-validation/index.js';
-import { existsSync, readFileSync } from 'fs';
 import { toErrorMessage } from '../../../shared/error-utils.js';
+import { MAX_PAYLOAD_FILE_BYTES, requirePayloadPath } from '../../../shared/io/payload-path-guard.js';
+import { ConfinedReadError, readConfinedText } from '../../../shared/io/confined-read.js';
 // ============================================================================
 // Tool Implementation
 // ============================================================================
@@ -121,8 +122,21 @@ export class QualityCriteriaTool extends MCPToolBase {
             });
             // Load epic content
             let content = epicContent || '';
-            if (epicPath && existsSync(epicPath)) {
-                content = readFileSync(epicPath, 'utf-8');
+            // #1126: the epic is returned verbatim in the agent prompt, so read it
+            // only from a regular file inside the project.
+            if (epicPath) {
+                const confined = await requirePayloadPath('quality-criteria', 'epicPath', epicPath, { allowMissing: true, maxBytes: MAX_PAYLOAD_FILE_BYTES });
+                if (!confined.success)
+                    return { success: false, error: confined.error.message };
+                // #1161: read from the validated descriptor; a missing file stays empty.
+                try {
+                    content = await readConfinedText(confined.value, { maxBytes: MAX_PAYLOAD_FILE_BYTES });
+                }
+                catch (readErr) {
+                    if (!(readErr instanceof ConfinedReadError) || readErr.reason !== 'not-found') {
+                        return { success: false, error: toErrorMessage(readErr) };
+                    }
+                }
             }
             if (!content && !epicPath) {
                 return {

package/dist/mcp/tools/security-compliance/scan.js

@@ -10,6 +10,7 @@
 import { MCPToolBase, getMemoryBackend } from '../base.js';
 import { toErrorMessage } from '../../../shared/error-utils.js';
 import { safeJsonParse } from '../../../shared/safe-json.js';
+import { getOwn } from '../../../shared/utils/safe-record.js';
 import { ALL_SECURITY_PATTERNS, SECRET_PATTERNS, } from '../../../domains/security-compliance/services/scanners/security-patterns.js';
 import { writeQualityEvidence } from '../../../domains/quality-assessment/quality-evidence.js';
 // ============================================================================
@@ -460,7 +461,8 @@ const KNOWN_VULNERABLE_NPM = {
 function checkKnownVulnerableDeps(deps, manifest) {
     const vulns = [];
     for (const [name, version] of Object.entries(deps)) {
-        const known = KNOWN_VULNERABLE_NPM[name];
+        // #1157: a dependency named `constructor` is a package, not a table entry.
+        const known = getOwn(KNOWN_VULNERABLE_NPM, name);
         if (known) {
             const cleanVersion = version.replace(/^[\^~>=<]+/, '');
             if (compareVersions(cleanVersion, known.maxSafe) < 0) {
@@ -512,7 +514,7 @@ function extractRequirementsTxtDeps(content) {
 function checkKnownVulnerablePythonDeps(deps, manifest) {
     const vulns = [];
     for (const dep of deps) {
-        const known = KNOWN_VULNERABLE_PYTHON[dep];
+        const known = getOwn(KNOWN_VULNERABLE_PYTHON, dep);
         if (known) {
             vulns.push({
                 id: `DEP-py-${dep}-${known.cve}`,

package/dist/mcp/tools/test-execution/e2e-execute.js

@@ -130,7 +130,7 @@ const E2E_EXECUTE_SCHEMA = {
                 name: { type: 'string', description: 'Test case name' },
                 description: { type: 'string', description: 'Test case description' },
                 baseUrl: { type: 'string', description: 'Base URL for the test' },
-                steps: { type: 'array', description: 'Test steps to execute' },
+                steps: { type: 'array', description: 'Test steps to execute', items: { type: 'object', description: 'Test step' } },
                 viewport: {
                     type: 'object',
                     description: 'Browser viewport configuration',
@@ -149,7 +149,7 @@ const E2E_EXECUTE_SCHEMA = {
                 id: { type: 'string', description: 'Test suite ID' },
                 name: { type: 'string', description: 'Test suite name' },
                 description: { type: 'string', description: 'Test suite description' },
-                testCases: { type: 'array', description: 'Test cases in the suite' },
+                testCases: { type: 'array', description: 'Test cases in the suite', items: { type: 'object', description: 'Test case' } },
                 parallel: { type: 'boolean', description: 'Run tests in parallel' },
                 maxWorkers: { type: 'number', description: 'Maximum parallel workers' },
             },

package/dist/mcp/tools/test-execution/execute.js

@@ -9,6 +9,7 @@
 import { MCPToolBase } from '../base.js';
 import { toErrorMessage } from '../../../shared/error-utils.js';
 import { secureRandom, secureRandomFloat } from '../../../shared/utils/crypto-random.js';
+import { DEFAULT_TEST_RETRY_COUNT } from '../../../domains/test-execution/services/retry-outcome.js';
 // ============================================================================
 // Tool Implementation
 // ============================================================================
@@ -22,7 +23,7 @@ export class TestExecuteTool extends MCPToolBase {
         timeout: 300000,
     };
     async execute(params, context) {
-        const { testFiles = [], testSuites = [], pattern, parallel = true, parallelism = 4, retryCount = 3, timeout = 60000, collectCoverage = false, reportFormat = 'json', failFast = false, } = params;
+        const { testFiles = [], testSuites = [], pattern, parallel = true, parallelism = 4, retryCount = DEFAULT_TEST_RETRY_COUNT, collectCoverage = false, failFast = false, } = params;
         const startTime = Date.now();
         try {
             // Determine files to test
@@ -164,7 +165,7 @@ const TEST_EXECUTE_SCHEMA = {
             description: 'Number of retries for failed tests',
             minimum: 0,
             maximum: 5,
-            default: 3,
+            default: DEFAULT_TEST_RETRY_COUNT,
         },
         timeout: {
             type: 'number',

package/dist/memory/crdt/crdt-store.js

@@ -309,6 +309,9 @@ export function createCRDTStore(config) {
         applyState(incoming) {
             // Apply registers
             for (const [key, state] of Object.entries(incoming.registers)) {
+                // One malformed peer entry must not block unrelated state from converging.
+                if (typeof state?.timestamp !== 'number' || !Number.isFinite(state.timestamp))
+                    continue;
                 if (!registers.has(key)) {
                     registers.set(key, createLWWRegisterFromState(nodeId, state));
                 }
@@ -431,6 +434,8 @@ export function createCRDTStore(config) {
             // Apply delta similar to full state, but only for included keys
             if (delta.registers) {
                 for (const [key, state] of Object.entries(delta.registers)) {
+                    if (typeof state?.timestamp !== 'number' || !Number.isFinite(state.timestamp))
+                        continue;
                     if (!registers.has(key)) {
                         registers.set(key, createLWWRegisterFromState(nodeId, state));
                     }

package/dist/memory/crdt/lww-register.js

@@ -7,6 +7,11 @@
  *
  * @module memory/crdt/lww-register
  */
+function assertFiniteTimestamp(timestamp) {
+    if (!Number.isFinite(timestamp)) {
+        throw new RangeError('LWW register timestamp must be a finite number');
+    }
+}
 // =============================================================================
 // LWW Register Implementation
 // =============================================================================
@@ -26,10 +31,12 @@
  * ```
  */
 export function createLWWRegister(nodeId, initialValue, initialTimestamp) {
+    const timestamp = initialTimestamp ?? (initialValue !== undefined ? Date.now() : 0);
+    assertFiniteTimestamp(timestamp);
     // Internal state
     let state = {
         value: initialValue,
-        timestamp: initialTimestamp ?? (initialValue !== undefined ? Date.now() : 0),
+        timestamp,
         nodeId: initialValue !== undefined ? nodeId : '',
         version: initialValue !== undefined ? 1 : 0,
         lastUpdated: Date.now(),
@@ -51,6 +58,7 @@ export function createLWWRegister(nodeId, initialValue, initialTimestamp) {
         },
         set(value, timestamp) {
             let ts = timestamp ?? Date.now();
+            assertFiniteTimestamp(ts);
             // Without an explicit timestamp the write means "now": a second write by
             // this node within one clock tick (or after a backwards clock step) must
             // still supersede its own earlier write, not tie with it and be dropped.
@@ -88,6 +96,8 @@ export function createLWWRegister(nodeId, initialValue, initialTimestamp) {
             // (0) would otherwise beat a real write at a negative timestamp.
             if (incoming.version === 0)
                 return;
+            // NaN breaks total ordering; infinity would permanently outrank finite writes.
+            assertFiniteTimestamp(incoming.timestamp);
             // Only update if incoming timestamp wins
             if (state.version === 0 ||
                 compareTimestamps(incoming.timestamp, incoming.nodeId, state.timestamp, state.nodeId) > 0) {
@@ -134,7 +144,7 @@ export function isLWWRegisterState(value) {
         return false;
     }
     const state = value;
-    return (typeof state.timestamp === 'number' &&
+    return (typeof state.timestamp === 'number' && Number.isFinite(state.timestamp) &&
         typeof state.nodeId === 'string' &&
         typeof state.version === 'number' &&
         typeof state.lastUpdated === 'number' &&

package/dist/migration/agent-compat.js

@@ -7,6 +7,7 @@
  * @module migration/agent-compat
  * @see docs/adr/adr-048-agent-naming-conventions.md
  */
+import { getOwn } from '../shared/utils/safe-record.js';
 /**
  * Complete mapping of deprecated V2 agent names to their V3 equivalents with domain info.
  *
@@ -127,7 +128,8 @@ export const v2AgentMapping = Object.fromEntries(Object.entries(v2AgentMappingWi
  * ```
  */
 export function resolveAgentName(name) {
-    return v2AgentMapping[name] ?? name;
+    // #1136: own entries only; `constructor` is not a V2 agent name.
+    return getOwn(v2AgentMapping, name) ?? name;
 }
 /**
  * Checks if an agent name is a deprecated V2 agent.
@@ -146,7 +148,7 @@ export function resolveAgentName(name) {
  * ```
  */
 export function isDeprecatedAgent(name) {
-    return name in v2AgentMapping;
+    return Object.hasOwn(v2AgentMapping, name);
 }
 /**
  * Generates a deprecation warning message for a V2 agent name.
@@ -170,7 +172,7 @@ export function isDeprecatedAgent(name) {
  * ```
  */
 export function getDeprecationWarning(v2Name) {
-    const v3Name = v2AgentMapping[v2Name];
+    const v3Name = getOwn(v2AgentMapping, v2Name);
     if (!v3Name) {
         return '';
     }
@@ -211,7 +213,7 @@ export const v3Agents = [
  */
 export function getAgentDomain(agentName) {
     // Check V2 mapping
-    const v2Entry = v2AgentMappingWithDomain[agentName];
+    const v2Entry = getOwn(v2AgentMappingWithDomain, agentName);
     if (v2Entry) {
         return v2Entry.domain;
     }
@@ -261,7 +263,7 @@ export function generateMigrationReport(usedAgents) {
     const alreadyV3 = [];
     const unknown = [];
     for (const agent of usedAgents) {
-        const v2Entry = v2AgentMappingWithDomain[agent];
+        const v2Entry = getOwn(v2AgentMappingWithDomain, agent);
         if (v2Entry) {
             needsMigration.push({
                 v2Name: agent,

package/dist/migrations/20261018_add_dream_insights_archive.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Agentic QE v3 - Dream insights archive table (#1066, #1116)
+ *
+ * The dream_insights retention sweep copies each stale insight here before it
+ * deletes it (#1066). Until #1116 the sweep created the table lazily on its
+ * first run, outside the versioned schema; it is now created by the v14
+ * migration.
+ *
+ * Additive and idempotent: `CREATE ... IF NOT EXISTS` only, so a database where
+ * an earlier sweep already created the table (with its rows) is left as it
+ * is, and an older AQE that still creates it lazily with the same statement
+ * keeps working on a migrated database.
+ *
+ * Same columns as dream_insights plus archive_id and archived_at. `id` is not
+ * unique here: an insight that comes back (for example from a brain import)
+ * and is swept again gets a second row instead of replacing the first. No
+ * foreign key, so deleting a dream cycle does not cascade into the archive.
+ */
+import type { Database as DatabaseType } from 'better-sqlite3';
+export declare const MIGRATION_VERSION = "20261018_add_dream_insights_archive";
+export declare const DREAM_INSIGHTS_ARCHIVE_TABLE = "dream_insights_archive";
+/** The table, exactly as the 3.15.9 sweep created it lazily. */
+export declare const DREAM_INSIGHTS_ARCHIVE_TABLE_SQL = "\n  CREATE TABLE IF NOT EXISTS dream_insights_archive (\n    archive_id INTEGER PRIMARY KEY AUTOINCREMENT,\n    id TEXT NOT NULL,\n    cycle_id TEXT,\n    insight_type TEXT,\n    source_concepts TEXT,\n    description TEXT,\n    novelty_score REAL,\n    confidence_score REAL,\n    actionable INTEGER,\n    applied INTEGER,\n    suggested_action TEXT,\n    pattern_id TEXT,\n    created_at TEXT,\n    archived_at TEXT NOT NULL DEFAULT (datetime('now'))\n  )\n";
+export declare const DREAM_INSIGHTS_ARCHIVE_SCHEMA = "\n  \n  CREATE TABLE IF NOT EXISTS dream_insights_archive (\n    archive_id INTEGER PRIMARY KEY AUTOINCREMENT,\n    id TEXT NOT NULL,\n    cycle_id TEXT,\n    insight_type TEXT,\n    source_concepts TEXT,\n    description TEXT,\n    novelty_score REAL,\n    confidence_score REAL,\n    actionable INTEGER,\n    applied INTEGER,\n    suggested_action TEXT,\n    pattern_id TEXT,\n    created_at TEXT,\n    archived_at TEXT NOT NULL DEFAULT (datetime('now'))\n  )\n;\n  -- The sweep's read-back looks copies up by insight id.\n  CREATE INDEX IF NOT EXISTS idx_dream_insights_archive_id ON dream_insights_archive(id);\n";
+export declare function applyMigration(db: DatabaseType): void;
+export declare function isMigrationApplied(db: DatabaseType): boolean;
+//# sourceMappingURL=20261018_add_dream_insights_archive.d.ts.map

package/dist/migrations/20261018_add_dream_insights_archive.js

@@ -0,0 +1,57 @@
+/**
+ * Agentic QE v3 - Dream insights archive table (#1066, #1116)
+ *
+ * The dream_insights retention sweep copies each stale insight here before it
+ * deletes it (#1066). Until #1116 the sweep created the table lazily on its
+ * first run, outside the versioned schema; it is now created by the v14
+ * migration.
+ *
+ * Additive and idempotent: `CREATE ... IF NOT EXISTS` only, so a database where
+ * an earlier sweep already created the table (with its rows) is left as it
+ * is, and an older AQE that still creates it lazily with the same statement
+ * keeps working on a migrated database.
+ *
+ * Same columns as dream_insights plus archive_id and archived_at. `id` is not
+ * unique here: an insight that comes back (for example from a brain import)
+ * and is swept again gets a second row instead of replacing the first. No
+ * foreign key, so deleting a dream cycle does not cascade into the archive.
+ */
+export const MIGRATION_VERSION = '20261018_add_dream_insights_archive';
+export const DREAM_INSIGHTS_ARCHIVE_TABLE = 'dream_insights_archive';
+/** The table, exactly as the 3.15.9 sweep created it lazily. */
+export const DREAM_INSIGHTS_ARCHIVE_TABLE_SQL = `
+  CREATE TABLE IF NOT EXISTS ${DREAM_INSIGHTS_ARCHIVE_TABLE} (
+    archive_id INTEGER PRIMARY KEY AUTOINCREMENT,
+    id TEXT NOT NULL,
+    cycle_id TEXT,
+    insight_type TEXT,
+    source_concepts TEXT,
+    description TEXT,
+    novelty_score REAL,
+    confidence_score REAL,
+    actionable INTEGER,
+    applied INTEGER,
+    suggested_action TEXT,
+    pattern_id TEXT,
+    created_at TEXT,
+    archived_at TEXT NOT NULL DEFAULT (datetime('now'))
+  )
+`;
+export const DREAM_INSIGHTS_ARCHIVE_SCHEMA = `
+  ${DREAM_INSIGHTS_ARCHIVE_TABLE_SQL};
+  -- The sweep's read-back looks copies up by insight id.
+  CREATE INDEX IF NOT EXISTS idx_dream_insights_archive_id ON ${DREAM_INSIGHTS_ARCHIVE_TABLE}(id);
+`;
+export function applyMigration(db) {
+    db.exec(DREAM_INSIGHTS_ARCHIVE_SCHEMA);
+}
+export function isMigrationApplied(db) {
+    try {
+        const result = db.prepare(`SELECT COUNT(*) AS count FROM sqlite_master WHERE type = 'table' AND name = ?`).get(DREAM_INSIGHTS_ARCHIVE_TABLE);
+        return result.count === 1;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=20261018_add_dream_insights_archive.js.map

package/dist/optimization/early-exit-token-optimizer.js

@@ -8,6 +8,7 @@
  */
 import { detectQEDomain } from '../learning/qe-patterns.js';
 import { toErrorMessage } from '../shared/error-utils.js';
+import { createSafeRecord } from '../shared/utils/safe-record.js';
 /**
  * Default early exit configuration
  */
@@ -374,7 +375,8 @@ export class EarlyExitTokenOptimizer {
             reasonBreakdown[attempt.reason]++;
         }
         // Calculate domain breakdown
-        const domainBreakdown = {};
+        // #1157: domains come from recorded requests.
+        const domainBreakdown = createSafeRecord();
         for (const reuse of this.reuseHistory) {
             const domain = reuse.domain ?? 'unknown';
             if (!domainBreakdown[domain]) {

package/dist/planning/goap-planner.js

@@ -645,6 +645,11 @@ export class GOAPPlanner {
             if (current === null || current === undefined) {
                 return undefined;
             }
+            // #1157: goal and condition keys can come from callers; an inherited
+            // member such as `constructor` is not part of the world state.
+            if (typeof current !== 'object' || !Object.hasOwn(current, part)) {
+                return undefined;
+            }
             current = current[part];
         }
         return current;

package/dist/planning/plan-executor.js

@@ -900,6 +900,11 @@ export class PlanExecutor {
             if (current === null || current === undefined) {
                 return undefined;
             }
+            // #1157: goal and condition keys can come from callers; an inherited
+            // member such as `constructor` is not part of the world state.
+            if (typeof current !== 'object' || !Object.hasOwn(current, part)) {
+                return undefined;
+            }
             current = current[part];
         }
         return current;

package/dist/shared/git/git-analyzer.d.ts

@@ -57,6 +57,10 @@ export interface GitAnalyzerConfig {
     enableCache?: boolean;
     /** Cache TTL in milliseconds (default: 5 minutes) */
     cacheTtl?: number;
+    /** Deadline in milliseconds shared by the git calls of one analysis (default: 30 seconds) */
+    gitTimeoutMs?: number;
+    /** Deadline in milliseconds for all analyses of one file inside withFileDeadline() (default: 60 seconds) */
+    fileTimeoutMs?: number;
 }
 /**
  * Git Analyzer for defect prediction metrics
@@ -65,11 +69,27 @@ export declare class GitAnalyzer {
     private readonly config;
     private readonly cache;
     private isGitRepo;
+    /** After a rev-parse timeout, when to ask git again (until then: "timeout"). */
+    private repoRetryAt;
+    private readonly timedOutFiles;
+    /** Files inside withFileDeadline() and when their git time runs out. */
+    private readonly fileDeadlines;
     constructor(config?: GitAnalyzerConfig);
     /**
      * Check if current directory is a git repository
      */
     isGitRepository(): Promise<boolean>;
+    /**
+     * True when git timed out while analysing `filePath` since the last call, so
+     * the analysis returned its "git unavailable" default rather than a result.
+     */
+    consumeTimeout(filePath: string): boolean;
+    /**
+     * Run `work`, during which every analysis of `filePath` also stops at one
+     * shared `fileTimeoutMs` deadline. One file's analyses then wait for git at
+     * most that long together, rather than `gitTimeoutMs` each (#1115).
+     */
+    withFileDeadline<T>(filePath: string, work: () => Promise<T>): Promise<T>;
     /**
      * Get file change frequency (commits in last 90 days / 3)
      * Returns normalized value 0-1
@@ -98,6 +118,7 @@ export declare class GitAnalyzer {
      * Get files changed since a specific date
      * @param since - Date to check changes from (default: 24 hours ago)
      * @returns Array of changed file paths relative to repo root
+     * @throws GitTimeoutError when git does not answer within `gitTimeoutMs`
      */
     getChangedFiles(since?: Date): Promise<string[]>;
     /**
@@ -107,13 +128,41 @@ export declare class GitAnalyzer {
      * @throws Error when `commitHash` is option-shaped (starts with "-") or otherwise
      *   not a safe revision argument; git would otherwise parse it as an option
      *   (e.g. `--output=<path>` writes an arbitrary file). See issue #960.
+     * @throws GitTimeoutError when git does not answer within `gitTimeoutMs`
      */
     getCommitFiles(commitHash?: string): Promise<string[]>;
     /**
      * Get files with uncommitted changes (staged + unstaged)
      * @returns Array of modified file paths relative to repo root
+     * @throws GitTimeoutError when git does not answer within `gitTimeoutMs`
      */
     getUncommittedFiles(): Promise<string[]>;
+    /**
+     * Count commits whose message matches any bug keyword, in one `git log`
+     * (repeated --grep patterns are OR-ed). Keywords are sanitized arguments and
+     * never reach a shell.
+     */
+    private countBugFixCommits;
+    /**
+     * Run one file's analysis with every git call sharing one `gitTimeoutMs`
+     * deadline (#1115). When git is unavailable or times out, the analysis
+     * returns its default, which callers treat as "no git data", and a timeout
+     * is recorded for consumeTimeout(). A timeout never yields a measured 0.
+     */
+    private analyze;
+    /**
+     * Whether the repo root is a git work tree. A timeout is not an answer: it
+     * is remembered for `cacheTtl` so a hung git is not waited on for every
+     * file, and then git is asked again.
+     */
+    private repoState;
+    /**
+     * Git queries in the repo root that share a deadline of `gitTimeoutMs` from
+     * now, or `fileDeadline` when that comes first. Git runs asynchronously in its own process group, so a slow or hung
+     * git (a network filesystem, a credential prompt) neither blocks the MCP
+     * server's event loop nor outlives its deadline (#1115).
+     */
+    private query;
     /**
      * Get relative path from repo root
      */