agentic-qe 3.8.5 → 3.8.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (32) hide show
  1. package/.claude/skills/skills-manifest.json +1 -1
  2. package/dist/cli/bundle.js +543 -543
  3. package/dist/coordination/mincut/phase-executor.d.ts +27 -0
  4. package/dist/coordination/mincut/phase-executor.js +70 -0
  5. package/dist/coordination/mincut/time-crystal-analysis.d.ts +35 -0
  6. package/dist/coordination/mincut/time-crystal-analysis.js +237 -0
  7. package/dist/coordination/mincut/time-crystal-persistence.d.ts +35 -0
  8. package/dist/coordination/mincut/time-crystal-persistence.js +81 -0
  9. package/dist/coordination/mincut/time-crystal-scheduling.d.ts +34 -0
  10. package/dist/coordination/mincut/time-crystal-scheduling.js +213 -0
  11. package/dist/coordination/mincut/time-crystal-types.d.ts +278 -0
  12. package/dist/coordination/mincut/time-crystal-types.js +67 -0
  13. package/dist/coordination/mincut/time-crystal.d.ts +8 -438
  14. package/dist/coordination/mincut/time-crystal.js +87 -905
  15. package/dist/learning/agent-routing.d.ts +53 -0
  16. package/dist/learning/agent-routing.js +142 -0
  17. package/dist/learning/embedding-utils.d.ts +34 -0
  18. package/dist/learning/embedding-utils.js +95 -0
  19. package/dist/learning/pattern-promotion.d.ts +63 -0
  20. package/dist/learning/pattern-promotion.js +187 -0
  21. package/dist/learning/pretrained-patterns.d.ts +14 -0
  22. package/dist/learning/pretrained-patterns.js +726 -0
  23. package/dist/learning/qe-reasoning-bank-types.d.ts +174 -0
  24. package/dist/learning/qe-reasoning-bank-types.js +24 -0
  25. package/dist/learning/qe-reasoning-bank.d.ts +9 -192
  26. package/dist/learning/qe-reasoning-bank.js +48 -1093
  27. package/dist/mcp/bundle.js +320 -320
  28. package/dist/shared/security/command-validator.js +2 -2
  29. package/dist/shared/security/input-sanitizer.js +1 -1
  30. package/dist/shared/security/path-traversal-validator.js +1 -1
  31. package/dist/shared/security/regex-safety-validator.js +7 -7
  32. package/package.json +1 -1
@@ -24,8 +24,8 @@ export const BLOCKED_COMMAND_PATTERNS = [
24
24
  /&&/, // Command chaining with AND
25
25
  /\|\|/, // Command chaining with OR
26
26
  /\|/, // Piping
27
- /`.*`/, // Backtick command substitution
28
- /\$\(.*\)/, // $() command substitution
27
+ /`[^`]*`/, // Backtick command substitution
28
+ /\$\([^)]*\)/, // $() command substitution
29
29
  />\s*\/dev\/sd/i, // Writing to block devices
30
30
  />\s*\/etc\//i, // Writing to /etc
31
31
  ];
@@ -32,7 +32,7 @@ export const SQL_INJECTION_PATTERNS = [
32
32
  /INSERT\s+INTO/i,
33
33
  /DROP\s+TABLE/i,
34
34
  /DELETE\s+FROM/i,
35
- /UPDATE\s+.*\s+SET/i,
35
+ /UPDATE\s+[^\s.!]+(?:\.[^\s.!]+)*\s+SET/i,
36
36
  /EXEC(\s+|\()sp_/i,
37
37
  /xp_cmdshell/i,
38
38
  ];
@@ -197,7 +197,7 @@ export class PathTraversalValidator {
197
197
  if (paths.length === 0)
198
198
  return '';
199
199
  return paths
200
- .map(p => p.replace(/^\/+|\/+$/g, ''))
200
+ .map(p => p.replace(/^\/+/, '').replace(/\/+$/, ''))
201
201
  .filter(Boolean)
202
202
  .join('/');
203
203
  }
@@ -14,13 +14,13 @@
14
14
  export const REDOS_PATTERNS = [
15
15
  /\(\.\*\)\+/, // (.*)+
16
16
  /\(\.\+\)\+/, // (.+)+
17
- /\([^)]*\?\)\+/, // (...?)+
18
- /\([^)]*\*\)\+/, // (...*)+
19
- /\([^)]*\+\)\+/, // (...+)+
20
- /\(\[.*?\]\+\)\+/, // ([...]+)+
21
- /\(\[.*?\]\*\)\+/, // ([...]*)+
22
- /\(\[.*?\]\?\)\+/, // ([...]?)+
23
- /\(\[.*?\]\*\)\*/, // ([...]*)*
17
+ /\([^)]*?\?\)\+/, // (...?)+
18
+ /\([^)]*?\*\)\+/, // (...*)+
19
+ /\([^)]*?\+\)\+/, // (...+)+
20
+ /\(\[[^\]]*\]\+\)\+/, // ([...]+)+
21
+ /\(\[[^\]]*\]\*\)\+/, // ([...]*)+
22
+ /\(\[[^\]]*\]\?\)\+/, // ([...]?)+
23
+ /\(\[[^\]]*\]\*\)\*/, // ([...]*)*
24
24
  /\.\*\.\*/, // .*.*
25
25
  /\.\+\.\+/, // .+.+
26
26
  /\(\.\|\.\)/, // (.|.)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agentic-qe",
3
- "version": "3.8.5",
3
+ "version": "3.8.6",
4
4
  "description": "Agentic Quality Engineering V3 - Domain-Driven Design Architecture with 13 Bounded Contexts, O(log n) coverage analysis, ReasoningBank learning, 60 specialized QE agents, mathematical Coherence verification, deep Claude Flow integration",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",