agentic-qe 3.8.13 → 3.9.0

package/dist/context/compaction/tier4-reactive.js

@@ -0,0 +1,129 @@
+/**
+ * Agentic QE v3 - Tier 4: Reactive Compaction (IMP-08)
+ *
+ * Last-resort compaction triggered by 413 errors or context overflow
+ * detection. Aggressively peels the oldest conversation rounds until
+ * the estimated token count drops below the recovery target.
+ *
+ * This tier is destructive — it drops messages entirely (no summary).
+ * It exists to recover from situations where the context window is
+ * critically full and the session would otherwise fail.
+ */
+import { estimateTokensPadded } from '../../mcp/middleware/microcompact';
+// ============================================================================
+// Defaults
+// ============================================================================
+const DEFAULT_RECOVERY_TARGET = 30_000;
+const DEFAULT_MIN_PRESERVED = 4;
+// ============================================================================
+// Tier4Reactive
+// ============================================================================
+export class Tier4Reactive {
+    recoveryTarget;
+    minPreserved;
+    constructor(options = {}) {
+        this.recoveryTarget = options.recoveryTarget ?? DEFAULT_RECOVERY_TARGET;
+        this.minPreserved = options.minPreservedMessages ?? DEFAULT_MIN_PRESERVED;
+    }
+    /**
+     * Aggressively peel oldest messages until under the recovery target.
+     *
+     * Algorithm:
+     *   1. Compute total tokens.
+     *   2. If already under target, return early.
+     *   3. Walk forward from the oldest message, dropping messages until
+     *      remaining tokens are at or below recoveryTarget.
+     *   4. Never drop below minPreservedMessages from the tail.
+     *   5. When dropping a tool_result, also drop its paired tool_use (and vice versa).
+     */
+    compact(messages, trigger = 'context_overflow') {
+        if (messages.length === 0) {
+            return {
+                tier: 4,
+                survivingMessages: [],
+                survivingTokens: 0,
+                droppedCount: 0,
+                tokensSaved: 0,
+                trigger,
+            };
+        }
+        // Annotate tokens
+        const annotated = messages.map(m => ({
+            ...m,
+            estimatedTokens: m.estimatedTokens ?? estimateTokensPadded(m.content),
+        }));
+        const totalTokens = annotated.reduce((s, m) => s + m.estimatedTokens, 0);
+        // Already under target?
+        if (totalTokens <= this.recoveryTarget) {
+            return {
+                tier: 4,
+                survivingMessages: messages,
+                survivingTokens: totalTokens,
+                droppedCount: 0,
+                tokensSaved: 0,
+                trigger,
+            };
+        }
+        // Build pair map: toolUseId -> indices of both tool_use and tool_result
+        const pairMap = new Map();
+        for (let i = 0; i < annotated.length; i++) {
+            const m = annotated[i];
+            if (m.toolUseId) {
+                const existing = pairMap.get(m.toolUseId) ?? [];
+                existing.push(i);
+                pairMap.set(m.toolUseId, existing);
+            }
+        }
+        // Mark messages for dropping
+        const dropped = new Set();
+        let remainingTokens = totalTokens;
+        // The tail we must preserve
+        const preserveFrom = Math.max(0, annotated.length - this.minPreserved);
+        for (let i = 0; i < annotated.length; i++) {
+            if (remainingTokens <= this.recoveryTarget)
+                break;
+            if (i >= preserveFrom)
+                break; // Don't touch the preserved tail
+            if (dropped.has(i))
+                continue;
+            // Drop this message
+            dropped.add(i);
+            remainingTokens -= annotated[i].estimatedTokens;
+            // If part of a pair, drop the partner too
+            if (annotated[i].toolUseId) {
+                const partners = pairMap.get(annotated[i].toolUseId) ?? [];
+                for (const partnerIdx of partners) {
+                    if (!dropped.has(partnerIdx) && partnerIdx < preserveFrom) {
+                        dropped.add(partnerIdx);
+                        remainingTokens -= annotated[partnerIdx].estimatedTokens;
+                    }
+                }
+            }
+        }
+        const surviving = annotated.filter((_, i) => !dropped.has(i));
+        const survivingTokens = surviving.reduce((s, m) => s + m.estimatedTokens, 0);
+        return {
+            tier: 4,
+            survivingMessages: surviving,
+            survivingTokens,
+            droppedCount: dropped.size,
+            tokensSaved: totalTokens - survivingTokens,
+            trigger,
+        };
+    }
+    /**
+     * Convenience: check if a given HTTP status or error message indicates
+     * a context overflow that should trigger reactive compaction.
+     */
+    static isContextOverflow(statusOrMessage) {
+        if (typeof statusOrMessage === 'number') {
+            return statusOrMessage === 413;
+        }
+        const lower = statusOrMessage.toLowerCase();
+        return lower.includes('context_length_exceeded')
+            || lower.includes('maximum context length')
+            || lower.includes('too many tokens')
+            || lower.includes('413');
+    }
+}
+//# sourceMappingURL=tier4-reactive.js.map

package/dist/coordination/consensus/providers/claude-provider.d.ts

@@ -61,6 +61,7 @@ export declare class ClaudeModelProvider extends BaseModelProvider {
     private readonly config;
     private readonly apiKey;
     private readonly baseUrl;
+    private readonly cacheLatch;
     /**
      * Create a new Claude provider
      *

package/dist/coordination/consensus/providers/claude-provider.js

@@ -9,6 +9,7 @@
  */
 import { toErrorMessage, toError } from '../../../shared/error-utils.js';
 import { BaseModelProvider, } from '../model-provider';
+import { PromptCacheLatch } from '../../../shared/prompt-cache-latch.js';
 // ============================================================================
 // Claude Model Provider Implementation
 // ============================================================================
@@ -49,6 +50,8 @@ export class ClaudeModelProvider extends BaseModelProvider {
     config;
     apiKey;
     baseUrl;
+    // IMP-05: Prompt cache latch — stabilizes API params to maximize cache hits
+    cacheLatch = new PromptCacheLatch();
     /**
      * Create a new Claude provider
      *
@@ -87,11 +90,28 @@ export class ClaudeModelProvider extends BaseModelProvider {
         if (this.disposed) {
             throw new Error('Provider has been disposed');
         }
-        const model = options?.model || this.config.defaultModel;
-        const maxTokens = options?.maxTokens || 4096;
+        const requestedModel = options?.model || this.config.defaultModel;
+        const requestedMaxTokens = options?.maxTokens || 4096;
         const temperature = options?.temperature ?? 0.7;
         const timeout = options?.timeout || this.config.defaultTimeout;
-        const systemPrompt = options?.systemPrompt || this.getDefaultSystemPrompt();
+        const requestedSystem = options?.systemPrompt || this.getDefaultSystemPrompt();
+        // IMP-05: Latch stable params to prevent prompt cache busting.
+        // If caller explicitly overrides, reset and re-latch.
+        if (this.cacheLatch.has('model') && this.cacheLatch.get('model') !== requestedModel) {
+            this.cacheLatch.reset('model');
+        }
+        if (this.cacheLatch.has('max_tokens') && this.cacheLatch.get('max_tokens') !== requestedMaxTokens) {
+            this.cacheLatch.reset('max_tokens');
+        }
+        if (this.cacheLatch.has('system') && this.cacheLatch.get('system') !== requestedSystem) {
+            this.cacheLatch.reset('system');
+        }
+        this.cacheLatch.latch('model', requestedModel);
+        this.cacheLatch.latch('max_tokens', requestedMaxTokens);
+        this.cacheLatch.latch('system', requestedSystem);
+        const model = this.cacheLatch.get('model');
+        const maxTokens = this.cacheLatch.get('max_tokens');
+        const systemPrompt = this.cacheLatch.get('system');
         const request = {
             model,
             max_tokens: maxTokens,

package/dist/domains/test-generation/generators/base-test-generator.d.ts

@@ -43,7 +43,7 @@ export declare abstract class BaseTestGenerator implements ITestGenerator {
     private static readonly TYPE_VALUE_TABLE;
     /**
      * Generate a test value for a parameter based on its type and name
-     * Uses @faker-js/faker for realistic test data
+     * Uses lightweight test value helpers for realistic test data
      *
      * @param param - Parameter information
      * @returns Generated test value as a string

package/dist/domains/test-generation/generators/base-test-generator.js

@@ -7,7 +7,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 /**
  * BaseTestGenerator - Abstract base class for test generators
  *
@@ -33,21 +33,21 @@ export class BaseTestGenerator {
      * Checked in order; first match wins.
      */
     static NAME_VALUE_TABLE = [
-        ['id', () => `'${faker.string.uuid()}'`],
-        ['email', () => `'${faker.internet.email()}'`],
-        ['name', () => `'${faker.person.fullName()}'`],
-        ['url', () => `'${faker.internet.url()}'`],
-        ['date', () => `new Date('${faker.date.recent().toISOString()}')`],
-        ['phone', () => `'${faker.phone.number()}'`],
-        ['address', () => `'${faker.location.streetAddress()}'`],
+        ['id', () => `'${testValues.uuid()}'`],
+        ['email', () => `'${testValues.email()}'`],
+        ['name', () => `'${testValues.fullName()}'`],
+        ['url', () => `'${testValues.url()}'`],
+        ['date', () => `new Date('${testValues.recentDate()}')`],
+        ['phone', () => `'${testValues.phone()}'`],
+        ['address', () => `'${testValues.streetAddress()}'`],
     ];
     /**
      * Type-based value generators. Each entry is [typeSubstring, generatorFn].
      * Checked in order; first match wins.
      */
     static TYPE_VALUE_TABLE = [
-        ['string', () => `'${faker.lorem.word()}'`],
-        ['number', () => String(faker.number.int({ min: 1, max: 100 }))],
+        ['string', () => `'${testValues.word()}'`],
+        ['number', () => String(testValues.int(1, 100))],
         ['boolean', () => 'true'],
         ['[]', () => '[]'],
         ['array', () => '[]'],
@@ -59,7 +59,7 @@ export class BaseTestGenerator {
     ];
     /**
      * Generate a test value for a parameter based on its type and name
-     * Uses @faker-js/faker for realistic test data
+     * Uses lightweight test value helpers for realistic test data
      *
      * @param param - Parameter information
      * @returns Generated test value as a string

package/dist/domains/test-generation/generators/go-test-generator.js

@@ -14,7 +14,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 /**
  * GoTestGenerator - Test generator for Go's testing package
@@ -496,28 +496,28 @@ func Test${funcName}_Cover_${lines[0]}_${lines[lines.length - 1]}(t *testing.T)
         // Infer from param name
         if (name.includes('id') && !name.includes('valid')) {
             if (type.includes('int'))
-                return String(faker.number.int({ min: 1, max: 1000 }));
-            return `"${faker.string.uuid()}"`;
+                return String(testValues.int(1, 1000));
+            return `"${testValues.uuid()}"`;
         }
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (type.includes('string') || type === 'str')
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (type.includes('int64'))
-            return `int64(${faker.number.int({ min: 1, max: 100 })})`;
+            return `int64(${testValues.int(1, 100)})`;
         if (type.includes('int32'))
-            return `int32(${faker.number.int({ min: 1, max: 100 })})`;
+            return `int32(${testValues.int(1, 100)})`;
         if (type.includes('int'))
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         if (type.includes('float64'))
-            return `${faker.number.float({ min: 1, max: 100, fractionDigits: 2 })}`;
+            return `${testValues.float(1, 100, 2)}`;
         if (type.includes('float32'))
-            return `float32(${faker.number.float({ min: 1, max: 100, fractionDigits: 2 })})`;
+            return `float32(${testValues.float(1, 100, 2)})`;
         if (type.includes('bool'))
             return 'true';
         if (type.includes('[]byte'))

package/dist/domains/test-generation/generators/junit5-generator.js

@@ -11,7 +11,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 import { detectSpringAnnotations } from '../detectors/spring-detector.js';
 /**
@@ -488,24 +488,24 @@ class ${moduleName}CoverageTest {
         const name = param.name.toLowerCase();
         // Infer from param name
         if (name.includes('id'))
-            return `${faker.number.int({ min: 1, max: 1000 })}L`;
+            return `${testValues.int(1, 1000)}L`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (type === 'long' || type === 'Long')
-            return `${faker.number.int({ min: 1, max: 1000 })}L`;
+            return `${testValues.int(1, 1000)}L`;
         if (type === 'int' || type === 'integer' || type === 'Integer')
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         if (type === 'double' || type === 'Double' || type === 'float' || type === 'Float')
-            return `${faker.number.float({ min: 0, max: 100 })}`;
+            return `${testValues.float(0, 100)}`;
         if (type === 'boolean' || type === 'Boolean')
             return 'true';
         if (type.includes('string'))
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (type.includes('list'))
             return 'List.of()';
         if (type.includes('map'))

package/dist/domains/test-generation/generators/kotlin-junit-generator.js

@@ -11,7 +11,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 /**
  * KotlinJUnitGenerator - Test generator for Kotlin's JUnit 5 + MockK framework
@@ -493,26 +493,26 @@ class ${moduleName}CoverageTest {
         const name = param.name.toLowerCase();
         // Infer from param name
         if (name.includes('id'))
-            return `${faker.number.int({ min: 1, max: 1000 })}L`;
+            return `${testValues.int(1, 1000)}L`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (type === 'long')
-            return `${faker.number.int({ min: 1, max: 1000 })}L`;
+            return `${testValues.int(1, 1000)}L`;
         if (type === 'int')
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         if (type === 'double')
-            return `${faker.number.float({ min: 0, max: 100 })}`;
+            return `${testValues.float(0, 100)}`;
         if (type === 'float')
-            return `${faker.number.float({ min: 0, max: 100 })}f`;
+            return `${testValues.float(0, 100)}f`;
         if (type === 'boolean')
             return 'true';
         if (type === 'string')
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (type.includes('list'))
             return 'emptyList()';
         if (type.includes('map'))

package/dist/domains/test-generation/generators/pytest-generator.js

@@ -10,7 +10,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 /**
  * PytestGenerator - Test generator for Python's pytest framework
@@ -412,18 +412,18 @@ class Test${this.pascalCase(moduleName)}Coverage:
         const name = param.name.toLowerCase();
         // Infer from param name
         if (name.includes('id'))
-            return `"${faker.string.uuid()}"`;
+            return `"${testValues.uuid()}"`;
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (type.includes('str'))
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (type.includes('int') || type.includes('number')) {
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         }
         if (type.includes('bool'))
             return 'True';
@@ -432,7 +432,7 @@ class Test${this.pascalCase(moduleName)}Coverage:
         if (type.includes('dict') || type.includes('{}'))
             return '{}';
         if (type.includes('float'))
-            return String(faker.number.float({ min: 0, max: 100 }));
+            return String(testValues.float(0, 100));
         return 'None';
     }
 }

package/dist/domains/test-generation/generators/swift-testing-generator.js

@@ -13,7 +13,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 /**
  * SwiftTestingGenerator - Test generator for Apple's Swift Testing framework
@@ -425,20 +425,20 @@ struct ${moduleName}CoverageTests {
         const lower = type.toLowerCase();
         // Infer from param name
         if (name.includes('id'))
-            return `"${faker.string.uuid()}"`;
+            return `"${testValues.uuid()}"`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (lower === 'string')
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (lower === 'int')
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         if (lower === 'double' || lower === 'float' || lower === 'cgfloat')
-            return String(faker.number.float({ min: 0, max: 100, fractionDigits: 2 }));
+            return String(testValues.float(0, 100, 2));
         if (lower === 'bool')
             return 'true';
         if (lower.startsWith('[') && lower.endsWith(']'))

package/dist/domains/test-generation/generators/test-value-helpers.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Lightweight test value generators — replaces @faker-js/faker in generators.
+ *
+ * These produce plausible string literals for generated test code.
+ * They do NOT need cryptographic randomness or statistical distributions —
+ * they only produce placeholder values embedded in source code output.
+ */
+export declare const testValues: {
+    uuid: () => string;
+    email: () => string;
+    fullName: () => string;
+    url: () => string;
+    recentDate: () => string;
+    phone: () => string;
+    streetAddress: () => string;
+    word: () => string;
+    int: (min?: number, max?: number) => number;
+    float: (min?: number, max?: number, fractionDigits?: number) => number;
+};
+//# sourceMappingURL=test-value-helpers.d.ts.map

package/dist/domains/test-generation/generators/test-value-helpers.js

@@ -0,0 +1,48 @@
+/**
+ * Lightweight test value generators — replaces @faker-js/faker in generators.
+ *
+ * These produce plausible string literals for generated test code.
+ * They do NOT need cryptographic randomness or statistical distributions —
+ * they only produce placeholder values embedded in source code output.
+ */
+import { randomBytes, randomInt, randomUUID } from 'node:crypto';
+function randomHex(bytes) {
+    return randomBytes(bytes).toString('hex');
+}
+export const testValues = {
+    uuid: () => randomUUID(),
+    email: () => `user_${randomHex(3)}@example.com`,
+    fullName: () => {
+        const first = ['Alice', 'Bob', 'Carol', 'Dave', 'Eve', 'Frank'];
+        const last = ['Smith', 'Jones', 'Lee', 'Garcia', 'Chen', 'Novak'];
+        return `${first[randomInt(first.length)]} ${last[randomInt(last.length)]}`;
+    },
+    url: () => `https://example.com/${randomHex(4)}`,
+    recentDate: () => new Date(Date.now() - randomInt(7 * 86400000)).toISOString(),
+    phone: () => `+1${String(randomInt(2000000000, 9999999999))}`,
+    streetAddress: () => `${randomInt(1, 9999)} Main St`,
+    word: () => {
+        const words = ['alpha', 'bravo', 'charlie', 'delta', 'echo', 'foxtrot', 'golf', 'hotel'];
+        return words[randomInt(words.length)];
+    },
+    int: (min = 1, max = 100) => {
+        if (min > max) {
+            const t = min;
+            min = max;
+            max = t;
+        }
+        return randomInt(min, max + 1);
+    },
+    float: (min = 0, max = 100, fractionDigits = 2) => {
+        if (min > max) {
+            const t = min;
+            min = max;
+            max = t;
+        }
+        if (min === max)
+            return min;
+        const raw = min + (randomInt(0, 1_000_001) / 1_000_000) * (max - min);
+        return Number(raw.toFixed(fractionDigits));
+    },
+};
+//# sourceMappingURL=test-value-helpers.js.map

package/dist/domains/test-generation/generators/xunit-generator.js

@@ -11,7 +11,7 @@
  *
  * @module test-generation/generators
  */
-import { faker } from '@faker-js/faker';
+import { testValues } from './test-value-helpers';
 import { BaseTestGenerator } from './base-test-generator';
 /**
  * XUnitGenerator - Test generator for C#'s xUnit framework
@@ -363,25 +363,25 @@ namespace Tests.${className}.Coverage
         const name = param.name.toLowerCase();
         // Infer from param name
         if (name.includes('id') && (type.includes('int') || type === 'unknown')) {
-            return String(faker.number.int({ min: 1, max: 1000 }));
+            return String(testValues.int(1, 1000));
         }
         if (name.includes('id'))
-            return `"${faker.string.uuid()}"`;
+            return `"${testValues.uuid()}"`;
         if (name.includes('name'))
-            return `"${faker.person.fullName()}"`;
+            return `"${testValues.fullName()}"`;
         if (name.includes('email'))
-            return `"${faker.internet.email()}"`;
+            return `"${testValues.email()}"`;
         if (name.includes('url'))
-            return `"${faker.internet.url()}"`;
+            return `"${testValues.url()}"`;
         // Infer from type
         if (type === 'int' || type === 'int32' || type === 'int64' || type === 'long') {
-            return String(faker.number.int({ min: 1, max: 100 }));
+            return String(testValues.int(1, 100));
         }
         if (type === 'double' || type === 'float' || type === 'decimal') {
-            return `${faker.number.float({ min: 0, max: 100, fractionDigits: 2 })}m`;
+            return `${testValues.float(0, 100, 2)}m`;
         }
         if (type === 'string' || type.includes('string'))
-            return `"${faker.lorem.word()}"`;
+            return `"${testValues.word()}"`;
         if (type === 'bool' || type === 'boolean')
             return 'true';
         if (type.includes('list<') || type.includes('ienumerable<') || type.includes('[]')) {
@@ -467,10 +467,10 @@ namespace Tests.${className}.Coverage
             const values = params.map(p => {
                 const type = p.type?.toLowerCase() || '';
                 if (type.includes('int') || type.includes('number')) {
-                    return String(faker.number.int({ min: 1, max: 100 }));
+                    return String(testValues.int(1, 100));
                 }
                 if (type.includes('string') || type === 'unknown') {
-                    return `"${faker.lorem.word()}"`;
+                    return `"${testValues.word()}"`;
                 }
                 return 'null';
             });

package/dist/hooks/cross-phase-hooks.d.ts

@@ -26,6 +26,17 @@ export declare class CrossPhaseHookExecutor {
     private querySignalsForInjection;
     formatSignalsForInjection(signals: CrossPhaseSignal[]): string;
     private getRecommendations;
+    /**
+     * IMP-07: When AQE_HOOKS_MANAGED_ONLY is set, only hooks whose names start
+     * with "managed:" are allowed to execute.  All other hooks are filtered out.
+     */
+    private filterManagedHooks;
+    /**
+     * IMP-07: SSRF guard — if a target string looks like a URL (has a scheme),
+     * validate it against the SSRF blocklist.  Returns true when the URL is
+     * blocked and the caller should abort the action.
+     */
+    private isBlockedUrl;
     private checkConditions;
     private evaluateCondition;
     private getValueFromPath;