chore(release): prepare v3.14.2

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-qe",
-  "version": "3.14.1",
+  "version": "3.14.2",
   "description": "Agentic Quality Engineering — AI-powered QE platform with 60 specialized agents, 75+ skills, sublinear coverage analysis, ReasoningBank pattern learning, and deep MCP integration for Claude Code and 11 coding agent platforms",
   "author": {
     "name": "Agentic QE Team",
@@ -54,7 +54,7 @@
     "agentic-qe": {
       "command": "npx",
       "args": ["-y", "agentic-qe@latest", "mcp"],
-      "description": "Agentic QE MCP server — 86 tools for test generation, coverage analysis, quality assessment, chaos testing, security scanning, and fleet coordination",
+      "description": "Agentic QE MCP server — 88 tools for test generation, coverage analysis, quality assessment, chaos testing, security scanning, and fleet coordination",
       "optional": false
     }
   }

.claude/skills/skills-manifest.json

@@ -940,7 +940,7 @@
   },
   "metadata": {
     "generatedBy": "Agentic QE Fleet",
-    "fleetVersion": "3.14.1",
+    "fleetVersion": "3.14.2",
     "manifestVersion": "1.4.0",
     "lastUpdated": "2026-04-13T00:00:00.000Z",
     "contributors": [

CHANGELOG.md

@@ -5,6 +5,43 @@ All notable changes to the Agentic QE project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.2] - 2026-09-13
+
+This patch keeps the quality daemon alive in foreground mode, publishes the
+first conservative MCP tool-safety annotation increment, and refreshes
+dependency trees with patched Hono and Sharp releases.
+
+### Added
+
+- Added typed MCP safety annotations across the registry, bridge, protocol
+  registry, and live `tools/list` responses. The deterministic 88-tool
+  inventory starts every built-in with a conservative disposition; unknown and
+  plugin-supplied tools cannot self-assert optimistic hints. Evidence-backed
+  read-only or idempotent classifications remain deferred ([#681], [#684]).
+
+### Fixed
+
+- Kept `aqe daemon start` running after successful startup instead of exiting
+  immediately, while preserving cleanup for non-foreground commands and
+  graceful `SIGTERM` shutdown ([#678], [#683]).
+- Raised managed Hono dependency floors to 4.13.5 and resolved Hono 4.13.7,
+  closing the dot-notation body-parsing denial-of-service exposure. Raised
+  managed Sharp floors and resolved Sharp 0.35.4 to include the patched libheif
+  dependency set ([#685]).
+
+### Changed
+
+- Refreshed dependency snapshots across the root project and development-time
+  Ruflo, RuVocal, and Goal UI trees, including `fast-uri`, `qs`, Faker,
+  `postcss-selector-parser`, and `@humanfs/node` ([#675]).
+
+[#675]: https://github.com/proffesor-for-testing/agentic-qe/pull/675
+[#678]: https://github.com/proffesor-for-testing/agentic-qe/issues/678
+[#681]: https://github.com/proffesor-for-testing/agentic-qe/issues/681
+[#683]: https://github.com/proffesor-for-testing/agentic-qe/pull/683
+[#684]: https://github.com/proffesor-for-testing/agentic-qe/pull/684
+[#685]: https://github.com/proffesor-for-testing/agentic-qe/pull/685
+
 ## [3.14.1] - 2026-09-07
 
 This release moves AQE to maintained Node.js runtimes and strengthens the

assets/skills/skills-manifest.json

@@ -940,7 +940,7 @@
   },
   "metadata": {
     "generatedBy": "Agentic QE Fleet",
-    "fleetVersion": "3.14.1",
+    "fleetVersion": "3.14.2",
     "manifestVersion": "1.4.0",
     "lastUpdated": "2026-04-13T00:00:00.000Z",
     "contributors": [

docs/releases/README.md

@@ -4,6 +4,7 @@ All Agentic QE release notes organized by version.
 
 | Version | Date | Highlights |
 |---------|------|------------|
+| [v3.14.2](v3.14.2.md) | 2026-09-13 | Reliable foreground daemon lifetime, conservative MCP safety metadata, and patched Hono/Sharp dependencies. |
 | [v3.14.1](v3.14.1.md) | 2026-09-07 | Node 22+ support and stronger verification, recovery, and learning evidence. |
 | [v3.14.0](v3.14.0.md) | 2026-08-30 | Qualified learning evidence, embedding provenance, fail-closed RVF recovery, and packaged QE Court. |
 | [v3.13.12](v3.13.12.md) | 2026-08-21 | External LLM provider registration for downstream hosts. |

docs/releases/v3.14.2.md

@@ -0,0 +1,43 @@
+# v3.14.2 Release Notes
+
+**Release Date:** 2026-09-13
+
+## Highlights
+
+Agentic QE 3.14.2 fixes foreground daemon lifetime, adds a conservative MCP
+tool-safety metadata foundation, and updates managed Hono and Sharp dependency
+trees to patched releases.
+
+## CLI lifecycle
+
+- `aqe daemon start` remains alive after reporting successful startup.
+- Existing cleanup for non-foreground commands and graceful `SIGTERM` shutdown
+  are preserved.
+
+## MCP tool safety
+
+- Typed safety annotations are preserved through the QE registry, bridge,
+  protocol registry, and live `tools/list` response.
+- The deterministic reviewed inventory contains 88 tools. Current built-ins
+  begin with the conservative disposition, and unknown or plugin-supplied names
+  cannot provide optimistic hints.
+- This is annotation infrastructure and a safe first increment. Individual
+  read-only or idempotent classifications remain deferred pending side-effect
+  and repeat-call evidence under issue #681.
+
+## Dependency and security maintenance
+
+- Hono resolves to 4.13.7 in managed lock trees, above the 4.13.5 security
+  floor for the dot-notation body-parsing denial-of-service advisory.
+- Sharp resolves to 0.35.4 with the patched libheif dependency set.
+- Dependency snapshots were refreshed across the root project and
+  development-time Ruflo, RuVocal, and Goal UI trees.
+
+## Upgrade notes
+
+No database migration is required. MCP metadata is additive. Operators running
+the quality daemon should expect `aqe daemon start` to retain the foreground
+process until it receives a shutdown signal.
+
+Production packages are published only from merged `main` through the GitHub
+release workflow and its pre-publish corpus gate.

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "agentic-qe",
-  "version": "3.14.1",
+  "version": "3.14.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "agentic-qe",
-      "version": "3.14.1",
+      "version": "3.14.2",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-qe",
-  "version": "3.14.1",
+  "version": "3.14.2",
   "description": "Agentic Quality Engineering V3 - Domain-Driven Design Architecture with 13 Bounded Contexts, O(log n) coverage analysis, ReasoningBank learning, 60 specialized QE agents, mathematical Coherence verification, deep Claude Flow integration",
   "type": "module",
   "main": "./dist/index.js",