cdeust/Cortex

• release: v3.14.2 — native AST CALLS chains + humanized panel + Dijkstra compliance
• refactor(compliance): Dijkstra YELLOW items — all UI files under 300 LOC
• fix(ci+compliance): ruff format + Dijkstra RED items (panel split, dead param)
• fix(ui): humanization corrections from Eco + Vygotsky + Feynman audits
• feat(ui): humanize workflow-graph detail panel for non-technical users
• fix(ci): install [codebase] extra + skip tree-sitter tests without it
• fix(graph): CALLS edges were silently dropped — cross-verified by Wu + Feynman
• feat(graph): caller-qualified CALLS — full method-to-method dependency chain
• refactor(ap): remove legacy CORTEX_ENABLE_AP env var — single source of truth
• feat(ap): flip default to ON, make user-overridable via MCP config
• feat(graph): native AST source — L6 depth without automatised-pipeline
• docs: GitNexus competitive analysis + 5-move science-grounded plan
• docs: gap analysis v2 — CORRECTED after reading AP source + web search
• docs: gap analysis — codebase analysis as first-class Cortex core
• docs(darval): reply draft for issue #14 OB4 fix + O1 resolution
• refactor(homeostatic): tighten OB4 fix — fold clips, flag estimate
• fix(homeostatic): issue #14 OB4 — emit bimodality_after on scale-invariant paths
• test(main): bump tool-count assertion to 46 for Gap 1 (query_workflow_graph)
• feat(graph): Gap 1 — query_workflow_graph MCP tool + README refresh
• feat(graph): Gap 6 — confidence + reason on WorkflowEdge
• fix(graph): populate Calls_* / Imports_* rel tables via AP resolve pass
• fix(security): replace ancestor-walk loop with Path.is_relative_to
• fix(security): werkzeug-style whitelist + Path.is_relative_to for CWE-22
• fix(security): apply CodeQL's exact canonical sanitizer patterns
• test(invariants): bump I2 allowlist for handlers/anchor.py after ruff format
• fix(security): satisfy CodeQL on response-splitting + path-injection
• feat(mcp): add title + annotations + outputSchema to every tool
• fix(security): clear remaining CodeQL path-injection + response-splitting alerts
• fix(security): add explicit path-containment checks (CWE-22)
• docs: bump test count to 2500+ across README, CLAUDE.md, linkedin post
• docs(readme): document L6 AST-symbol layer in Graph View
• docs(readme): correct companion project name to automatised-pipeline
• docs(readme): add ai-architect automated pipeline to companion projects
• style: ruff format workflow_graph_source_ast

Full Changelog: https://github.com/cdeust/Cortex/compare/v3.14.1...v3.14.2