Merge branch 'master' into dependabot/npm_and_yarn/mcp-server/hono-4.12.26

Author: OgeonX-Ai

.github/workflows/ci.yml

@@ -65,6 +65,8 @@ jobs:
           PROMPT_REFINER_PRIMARY_MODEL: ${{ matrix.model-order == 'primary' && 'gemma3:12b' || 'gemma3:1b' }}
           PROMPT_REFINER_FALLBACK_MODEL: ${{ matrix.model-order == 'primary' && 'gemma3:1b' || 'gemma3:12b' }}
         run: npm run acceptance:semantic
+      - name: Run tracked-turn acceptance
+        run: npm run acceptance:tracked-turn
 
   stress:
     runs-on: ubuntu-latest
@@ -89,6 +91,10 @@ jobs:
           PROMPT_REFINER_STRESS_WORKERS: '4'
           PROMPT_REFINER_STRESS_WRITES: '100'
         run: npm run stress:event-store
+      - name: Run abrupt recovery proof
+        run: npm run recovery:event-store:abrupt
+      - name: Run EventStore soak
+        run: npm run stress:event-store:soak
 
   windows:
     runs-on: windows-latest
@@ -108,7 +114,13 @@ jobs:
       - run: npm run build
       - run: npm run test:coverage
       - run: npm run test:acceptance
+      - run: npm run acceptance:semantic
+      - run: npm run acceptance:tracked-turn
       - run: npm run test:stress
+      - run: npm run stress:event-store
+      - run: npm run recovery:event-store:abrupt
+      - run: npm run stress:event-store:soak
+      - run: npm run acceptance:package-runtime
 
   supply-chain:
     runs-on: ubuntu-latest
@@ -125,9 +137,11 @@ jobs:
           cache-dependency-path: universal-refiner/package-lock.json
       - run: npm ci --no-fund
       - run: npm run security:audit
+      - run: npm run security:audit:all
       - run: npm run security:secrets
       - run: npm run build
       - run: npm run package:check
+      - run: npm run acceptance:package-runtime
 
   release-gate:
     if: always()

CLAUDE.md

@@ -0,0 +1,97 @@
+# PromptImprover
+
+MCP server middleware for prompt governance. The active implementation is the Universal Refiner package, which provides prompt refinement, local memory, commit-correlated learning, dashboard review workflows, and evidence capture for agent runs.
+
+## Project Hierarchy
+
+This project has a `context.md` tree. Always read the nearest context file before changing files in a directory.
+
+- Root: `context.md` - project-wide mandates and submodule index.
+- `universal-refiner/context.md` - active MCP server, refinement engine, history, learning, hooks, and dashboard.
+- `gemini-extension/context.md` - Gemini CLI integration.
+- `mcp-server/context.md` - legacy standalone MCP server.
+- `docs/context.md` - architecture specs, roadmaps, and release-gate documentation.
+- `archive/context.md` - deprecated code and historical experiments.
+
+## Tech Stack
+
+| Layer | Technology |
+|---|---|
+| Language | TypeScript, strict mode |
+| Runtime | Node.js >= 22 |
+| MCP transport | stdio via `@modelcontextprotocol/sdk` |
+| Storage | SQLite via `better-sqlite3` |
+| Build | `tsc` plus dashboard asset copy |
+| Test | Vitest |
+
+## Active Entry Points
+
+| Path | Purpose |
+|---|---|
+| `universal-refiner/src/` | Active source code |
+| `universal-refiner/dist/src/index.js` | Built MCP server used by global CLI registrations |
+| `universal-refiner/hooks/` | Claude/Gemini hook runtime and fragments |
+| `universal-refiner/scripts/operations/register-global.ps1` | Global Codex, Claude, and Gemini registration doctor |
+| `universal-refiner/scripts/acceptance/` | Real-process and package-runtime acceptance gates |
+
+## Standard Workflow
+
+1. Read the relevant `context.md`, `AGENTS.md`, `GEMINI.md`, and this file before changing behavior.
+2. Prefer the active `universal-refiner` package for new work. Avoid expanding legacy `mcp-server` unless the task explicitly targets it.
+3. Keep changes scoped and preserve unrelated user work.
+4. After code or package changes in `universal-refiner`, run the strongest proportionate gate. For broad hardening, use:
+
+```powershell
+cd C:\PersonalRepo\portfolio\Promptimprover\universal-refiner
+npm.cmd run release:verify
+```
+
+5. Restart the local background runtime after rebuilding:
+
+```powershell
+$repo = 'C:\PersonalRepo\portfolio\Promptimprover\universal-refiner'
+$env:PROMPT_REFINER_BACKGROUND = 'true'
+Start-Process -WindowStyle Hidden -FilePath node -ArgumentList (Join-Path $repo 'dist\src\index.js') -WorkingDirectory $repo
+```
+
+6. Smoke-test runtime health:
+
+```powershell
+Invoke-RestMethod http://127.0.0.1:3000/api/health
+```
+
+## Release Gates
+
+The authoritative local gate is:
+
+```powershell
+npm.cmd run release:verify
+```
+
+It includes build, 100% coverage, MCP acceptance, semantic fallback, tracked-turn acceptance, stress/recovery/soak, production and full audit checks, secret scanning, package dry-run, and packaged runtime startup smoke.
+
+## Global Registration
+
+Use the registration doctor after changes that affect global MCP wiring:
+
+```powershell
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\register-global.ps1 -Check
+```
+
+Apply only when the check reports real drift:
+
+```powershell
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\register-global.ps1 -Apply
+```
+
+The expected global MCP registrations are:
+
+- Codex: `prompt-refiner`, `obsidian`
+- Claude Code: `prompt-refiner`, `obsidian`, plus PromptImprover hooks
+- Gemini: `prompt-refiner`, `obsidian`
+
+## Security
+
+- Never commit secrets, tokens, credentials, private prompts, or raw sensitive payloads.
+- Treat `npm audit` failures as defects. Production audit is mandatory; full audit is also part of the release gate.
+- If a plaintext token was ever present in local configuration, remove it and rotate it externally.

docs/enterprise-release-gates.md

@@ -19,8 +19,8 @@ Passing unit tests alone does not prove that PromptImprover is operationally rea
 6. SQLite restart, migration, backup/restore, contention, and multi-process tests pass.
 7. Claude and Gemini hook pre/post flows pass; Codex MCP-first flow passes.
 8. Dashboard API security, review mutation, health telemetry, and browser smoke flows pass.
-9. Dependency audit reports no known production vulnerabilities.
-10. Package dry-run, global installation, runtime startup, and post-restart smoke tests pass.
+9. Dependency audit reports no known production or development vulnerabilities at high severity or above.
+10. Package dry-run plus `acceptance:package-runtime` global installation, runtime startup, and health smoke tests pass.
 11. Secret scanning finds no committed credentials.
 12. Linux and Windows CI jobs pass before merge.
 

docs/operator-testing.md

@@ -0,0 +1,153 @@
+# Operator Testing Guide
+
+Use this guide to verify PromptImprover from a clean Windows operator session.
+
+## 1. Enter The Active Package
+
+```powershell
+cd C:\PersonalRepo\portfolio\Promptimprover\universal-refiner
+```
+
+## 2. Run The Full Release Gate
+
+```powershell
+npm.cmd run release:verify
+```
+
+Expected result:
+
+- TypeScript build passes.
+- Vitest coverage reports 100% statements, branches, functions, and lines.
+- MCP tool acceptance passes.
+- Semantic fallback acceptance passes.
+- Tracked-turn acceptance links a `prm_...` prompt ID in SQLite.
+- EventStore stress, abrupt recovery, and soak pass.
+- Production and full dependency audits report zero high-or-higher vulnerabilities.
+- Secret scan passes.
+- Package dry-run passes.
+- `acceptance:package-runtime` installs the packed tarball into a temporary global prefix and serves `/api/health`.
+
+## 3. Check Global MCP Registration
+
+```powershell
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\register-global.ps1 -Check -ProfileRoot C:\Users\KimHarjamaki -CodexHome C:\codex-home
+```
+
+Expected result:
+
+```text
+OK      Codex
+OK      Claude Code MCP
+OK      Claude Code hooks
+OK      Gemini
+```
+
+If any row reports `DRIFT`, run `-Apply` only after confirming the drift is expected:
+
+```powershell
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\register-global.ps1 -Apply -ProfileRoot C:\Users\KimHarjamaki -CodexHome C:\codex-home
+```
+
+## 4. List MCP Servers In Each CLI
+
+Use the canonical Windows profile when testing global CLI configuration. This avoids the accented-profile drift that can make a CLI read stale user-level settings:
+
+```powershell
+$env:USERPROFILE = 'C:\Users\KimHarjamaki'
+$env:HOME = 'C:\Users\KimHarjamaki'
+$env:AZURE_CONFIG_DIR = 'C:\Users\KimHarjamaki\.azure'
+```
+
+```powershell
+codex.cmd mcp list | Select-String -Pattern 'prompt-refiner|obsidian|Connected|enabled'
+claude.cmd mcp list | Select-String -Pattern 'prompt-refiner|obsidian|Connected|Configured'
+gemini.cmd mcp list | Select-String -Pattern 'prompt-refiner|obsidian|Connected|Configured'
+```
+
+Expected result:
+
+- Codex lists `prompt-refiner` and `obsidian` as enabled.
+- Claude lists `prompt-refiner` and `obsidian` as connected.
+- Gemini lists `prompt-refiner` and `obsidian` as connected.
+
+Codex may show `Unsupported` in the status column for stdio MCP entries. Treat the registration doctor as the authoritative config drift check.
+
+On Windows, Obsidian MCP must be registered with `npx.cmd`, not `npx`. `npx` can resolve to the PowerShell shim (`npx.ps1`) and fail under the default execution policy.
+
+Gemini can report MCP servers as disabled when the current folder is untrusted. Start Gemini from the repo once with `--skip-trust` or accept the workspace trust prompt. Gemini also requires its own auth setup (`GEMINI_API_KEY`, Vertex AI, or Gemini Code Assist) before a trusted full CLI session can start.
+
+## 5. Verify Dashboard Runtime Health
+
+Start or restart the local background runtime:
+
+```powershell
+$repo = 'C:\PersonalRepo\portfolio\Promptimprover\universal-refiner'
+Get-CimInstance Win32_Process |
+  Where-Object { $_.Name -eq 'node.exe' -and ($_.CommandLine -match 'universal-refiner.*dist/src/index.js' -or $_.CommandLine -match 'universal-refiner.*dist\\src\\index.js') } |
+  ForEach-Object { Stop-Process -Id $_.ProcessId -Force }
+
+$env:PROMPT_REFINER_BACKGROUND = 'true'
+Start-Process -WindowStyle Hidden -FilePath node -ArgumentList (Join-Path $repo 'dist\src\index.js') -WorkingDirectory $repo
+```
+
+Check health:
+
+```powershell
+Invoke-RestMethod http://127.0.0.1:3000/api/health | ConvertTo-Json -Depth 6
+```
+
+Expected result:
+
+- `runtime.status` is `online`.
+- `semantic.local.enabled` is `true`.
+- `semantic.local.models` includes `gemma3:12b` and `gemma3:1b`.
+
+## 6. Verify Live Gemma Integration
+
+```powershell
+$env:PROMPT_REFINER_ACCEPTANCE_BASE_URL = 'http://localhost:9000/v1'
+npm.cmd run acceptance:gemma:live
+```
+
+Expected result:
+
+```text
+Live semantic acceptance passed for gemma3:12b and gemma3:1b at http://localhost:9000/v1.
+Semantic acceptance passed: gemma3:12b -> gemma3:1b and outage provider fallback.
+```
+
+Warnings such as `HTTP 503` for `gemma3:12b` and `fetch failed` during the outage section are expected. They prove fallback and outage paths are being exercised. The command must still exit successfully.
+
+## 7. Verify Packaged Runtime Directly
+
+```powershell
+npm.cmd run acceptance:package-runtime
+```
+
+Expected result:
+
+```text
+Package runtime smoke passed: installed gemini-prompt-refiner-8.0.0 and served /api/health on <port>.
+```
+
+This catches missing production dependencies that are hidden by the local workspace.
+
+## 8. Confirm GitHub CI
+
+After pushing a branch and opening a pull request:
+
+```powershell
+gh pr checks <PR_NUMBER> --repo Coding-Autopilot-System/Promptimprover
+gh run list --repo Coding-Autopilot-System/Promptimprover --branch <BRANCH_NAME> --limit 10
+```
+
+Expected result:
+
+- `build-and-test` passes.
+- Both acceptance matrix jobs pass.
+- `stress` passes.
+- `windows` passes.
+- `supply-chain` passes.
+- `release-gate` passes.
+
+Remote CI is the authoritative proof for Linux and Windows clean-checkout behavior.