QuAIA Files

v2.2.0 - A2A streaming, CALM architecture, uv migration, and dashboard/agent enhancements

New features:

• A2A live streaming of agent status and execution logs to the dashboard over SSE
• FINOS CALM architecture-as-code model with a blocking CI gate (Architecture (CALM))
• Migrated dependency management to uv (pyproject.toml + uv.lock, per-service requirements.txt removed)
• Dashboard: paginated log viewer ("Load More") and manual agent discovery endpoint/button
• Agent model settings centralized via CustomLlmWrapper.create_agent() factory
• LLM request timing logged for every request and streaming call
• Optional shared bearer token (REMOTE_EXECUTION_AGENT_AUTH_TOKEN) securing the orchestrator's calls to execution agents
• Extended Xray, Zephyr, and Allure test-management client support
• New agent skills: pr-review, run-unit-tests, software-architect

Improvements:

• RAG simplification: removed the standalone jira_rag agent, consolidated sync into rag_sync_service
• Jira write-tool race fix: add_review_feedback and set_test_case_status_to_review_complete now run sequentially to avoid clobbering concurrent read-modify-write updates
• Dashboard log-level display now falls back to scanning for an uppercase level token for non-Python log formats (e.g. the UI agent's SLF4J logs)
• A2A SDK upgrade across agent base, executor, and contract
• Restructured tests/ into proper packages; 225+ tests passing
• License updated (AGPL-3.0-only)

Bug fixes:

• Fixed missing attachments in incident creation flow
• Fixed wrong error message on dashboard during login
• Fixed agent wait/recovery handling
• Fixed log viewer scrolling
• Fixed duplicate detection prompt template
• Fixed EndpointFilter to use getMessage() for reliable dashboard path matching
• Fixed LOG_SEPARATTOR typo -> LOG_SEPARATOR

Dependencies:

• python-dotenv 1.2.1 -> 1.2.2 (CVE-2026-28684)
• requests 2.32.5 -> 2.33.0 (CVE-2026-25645)
• pytest 9.0.2 -> 9.0.3 (CVE-2025-71176)
• PyJWT 2.10.1 -> 2.12.0 (CVE-2026-32597)