Skip to content

release: v0.1.14 — intelligent routing and platform hardening#31

Merged
ApiliumDevTeam merged 5 commits intomainfrom
dev
Mar 11, 2026
Merged

release: v0.1.14 — intelligent routing and platform hardening#31
ApiliumDevTeam merged 5 commits intomainfrom
dev

Conversation

@ApiliumDevTeam
Copy link
Collaborator

Summary

  • Eruberu: Q-Learning model routing with EMA performance tracking
  • Miteru: Task-to-agent routing with skill matching
  • Kimeru: Consensus engine with majority, weighted, arbitrate, PBFT, and Raft strategies
  • Tomeru: Rate limiting and loop breaking guard
  • Hayameru: WASM code transforms that bypass LLM for simple edits
  • Osameru: Governance control plane with policy enforcement and HMAC audit trail
  • Kakeru: Dual-platform coordination bridge
  • Response cache, budget bridge, token economy enhancements
  • Lint cleanup, vulnerability patches (tar, hono, file-type)
  • Division-by-zero fix in consensus, unhandled rejection fix in bridge init
  • Cortex dependency bumped to v0.4.2

Test plan

  • pnpm test — 11,797 tests pass
  • All lint warnings resolved
  • npm audit — 0 vulnerabilities
  • Crash path audit verified

… cross-platform coordination

Phase 1 — Intelligent Routing:
- Eruberu: Q-Learning model router with contextual bandit exploration
- Miteru: task-to-agent routing with capability scoring
- Kimeru: multi-strategy consensus engine (majority, weighted, arbitrate,
  pbft-local, leader-score)
- Tomeru: rate limiting, loop detection, and emergency stop guard
- Token economy: response cache, budget bridge, cost tracking

Phase 2 — Competitive Parity:
- Hayameru: deterministic code transforms (var-to-const, remove-console,
  sort-imports, add-semicolons, remove-comments) via before_agent_run hook
- Osameru: governance control plane with HMAC-chained audit trail,
  policy compilation from MAYROS.md, trust tiers with persistence
- Kakeru: dual-platform bridge with file locking and workflow coordination
- Vector search client wired to Cortex HNSW endpoints

Hardening (22 fixes):
- Security: timing-safe HMAC comparison, path traversal validation
- Data integrity: promise-based mutex for audit trail, ENOSPC handling,
  atomic file writes with backup
- Transforms: escaped quote handling, side-effect imports, destructuring
  detection, string-aware paren counting, expanded skip patterns
- Honesty: file-size-based token estimates, renamed consensus strategies
  to reflect local simulation, honest bridge stubs, git-diff file detection
- Governance: require-approval enforcement, dynamic trust scoring,
  dead code removal, policy file size limits

Bump REQUIRED_CORTEX_VERSION to 0.4.2 for HNSW vector search support.
Lint (19 → 0 warnings):
- Remove unused imports/variables across agent-mesh, eruberu,
  kakeru-bridge, osameru-governance, token-economy
- Fix no-base-to-string in workflow-orchestrator and loop-breaker
- Fix restrict-template-expressions for narrowed never type
- Remove useless spread on Set iteration

Dependencies (3 → 0 vulnerabilities):
- tar 7.5.10 → 7.5.11 (GHSA-9ppj-qmqm-q256, high)
- hono 4.12.4 → 4.12.7 (GHSA-v8w9-8mx6-g223, moderate)
- file-type 21.3.0 → 21.3.1 (GHSA-5v7r-6r5c-r473, moderate)
…tion in bridge init

- Guard empty votes object in confidence calculation (NaN/Infinity)
- Wrap Claude bridge connect() in try-catch to prevent plugin init crash
… cross-platform coordination (#30)

## Summary

- **Eruberu**: Q-Learning model router with contextual bandit
exploration
- **Miteru**: task-to-agent routing with capability scoring
- **Kimeru**: multi-strategy consensus engine (majority, weighted,
arbitrate, pbft-local, leader-score)
- **Tomeru**: rate limiting, loop detection, and emergency stop guard
- **Hayameru**: deterministic code transforms (var-to-const,
remove-console, sort-imports, add-semicolons, remove-comments) via
`before_agent_run` hook
- **Osameru**: governance control plane with HMAC-chained audit trail,
policy compilation, trust tiers with persistence
- **Kakeru**: dual-platform bridge with file locking and workflow
coordination
- Token economy: response cache, budget bridge, cost tracking
- Vector search client wired to Cortex HNSW endpoints
- 22 hardening fixes (security, data integrity, transforms, honesty,
governance)
- Bump `REQUIRED_CORTEX_VERSION` to 0.4.2
- Patch vulnerable deps: tar 7.5.11, hono 4.12.7, file-type 21.3.1
- Resolve all 19 lint warnings to 0

## Test plan

- [x] Full test suite: 11,797 tests pass, 0 failures
- [x] `pnpm build` — clean (322 files)
- [x] `pnpm audit` — 0 vulnerabilities
- [x] Lint: 0 warnings, 0 errors
- [ ] Smoke test: send "convert var to const in src/foo.ts" → verify
Hayameru intercepts
- [ ] Smoke test: governance audit trail HMAC chain verification
- [ ] Verify Cortex 0.4.2 compatibility with HNSW endpoints
@ApiliumDevTeam ApiliumDevTeam merged commit 44db377 into main Mar 11, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant