<?xml version="1.0"?>

<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"

xmlns="http://maven.apache.org/POM/4.0.0"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<modelVersion>4.0.0</modelVersion>

<groupId>ai.labs</groupId>

<artifactId>eddi</artifactId>

<version>6.6.0</version>

<properties>

<compiler-plugin.version>3.16.0</compiler-plugin.version>

<maven.compiler.source>25</maven.compiler.source>

<maven.compiler.target>25</maven.compiler.target>

<maven.compiler.release>25</maven.compiler.release>

<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>

<quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>

<quarkus.platform.group-id>io.quarkus.platform</quarkus.platform.group-id>

<quarkus.platform.version>3.40.1</quarkus.platform.version>

<!-- langchain4j ships two release lines from the same reactor. Every

<langchain4j.version>1.20.2</langchain4j.version>

<langchain4j-beta.version>1.20.2-beta30</langchain4j-beta.version>

<!-- langchain4j-community-oci-genai is published on its own schedule: its newest release is

<langchain4j-community-oci.version>1.20.0-beta30</langchain4j-community-oci.version>

<jandex-maven-plugin.version>3.6.0</jandex-maven-plugin.version>

<maven.compiler.parameters>true</maven.compiler.parameters>

<surefire-plugin.version>3.6.0</surefire-plugin.version>

<failsafe-plugin.version>3.6.0</failsafe-plugin.version>

<failsafe.useModulePath>false</failsafe.useModulePath>

<quarkus-mcp-server.version>2.0.1</quarkus-mcp-server.version>

<skipITs>true</skipITs>

<!-- skipUTs skips surefire alone, so CI's Integration Tests job can reuse the

<skipTests>false</skipTests>

<skipUTs>${skipTests}</skipUTs>

<!-- The Manager and Chat UIs (ui/manager, ui/chat) are built by Maven in

<skipUi>false</skipUi>

<!-- 2.x needs Java 17 and Maven 3.6 (both far below this build) and changes no

<frontend-maven-plugin.version>2.0.2</frontend-maven-plugin.version>

<!-- Node 24 (LTS "Krypton") matches CI (ci.yml NODE_VERSION) and mise.toml;

<node.version>v24.21.0</node.version>

<!-- Pinned: Maven only warns when a declared plugin carries no version, then

<maven-resources-plugin.version>3.5.0</maven-resources-plugin.version>

<maven-clean-plugin.version>3.5.0</maven-clean-plugin.version>

</properties>

<dependencyManagement>

<dependencies>

<dependency>

<groupId>${quarkus.platform.group-id}</groupId>

<artifactId>${quarkus.platform.artifact-id}</artifactId>

<version>${quarkus.platform.version}</version>

<type>pom</type>

<scope>import</scope>

</dependency>

<dependency>

<groupId>io.github.classgraph</groupId>

<artifactId>classgraph</artifactId>

<version>4.8.196</version>

</dependency>

<!-- Override jinjava to fix CVE-2026-25526 (pulled by jlama-core via jlama) -->

<dependency>

<groupId>com.hubspot.jinjava</groupId>

<artifactId>jinjava</artifactId>

<version>2.8.4</version>

</dependency>

<!-- Override jackson-core to fix GHSA-r7wm-3cxj-wff9 (async parser DoS, <2.22.1).

<dependency>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-core</artifactId>

<version>2.22.3</version>

</dependency>

<!-- Override jackson-databind to fix GHSA-5gvw-p9qm-jgwh (@JsonView bypassed for

<dependency>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-databind</artifactId>

<version>2.22.3</version>

</dependency>

<!-- Keep the two jackson-dataformat modules we declare on the same patch

<dependency>

<groupId>com.fasterxml.jackson.dataformat</groupId>

<artifactId>jackson-dataformat-csv</artifactId>

<version>2.22.3</version>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.dataformat</groupId>

<artifactId>jackson-dataformat-xml</artifactId>

<version>2.22.3</version>

</dependency>

<!-- Override reactor-netty-http to fix CVE-2025-22227 (pulled by langchain4j-azure-open-ai).

<dependency>

<groupId>io.projectreactor.netty</groupId>

<artifactId>reactor-netty-http</artifactId>

<version>1.2.18</version>

</dependency>

<!-- Override postgresql to fix CVE-2026-42198 (SCRAM iteration count DoS, ≤42.7.10)

<dependency>

<groupId>org.postgresql</groupId>

<artifactId>postgresql</artifactId>

<version>42.7.13</version>

</dependency>

<!-- Override bcprov-lts8on to fix GHSA-mx76-r943-rf8g (native GCM chunking can throw

<dependency>

<groupId>org.bouncycastle</groupId>

<artifactId>bcprov-lts8on</artifactId>

<version>2.73.13</version>

</dependency>

<!-- swagger-annotations is a VERSION PIN, not a usage. No source imports

<dependency>

<groupId>io.swagger.core.v3</groupId>

<artifactId>swagger-annotations</artifactId>

<version>2.2.55</version>

</dependency>

</dependencies>

</dependencyManagement>

<dependencies>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-container-image-docker</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-rest</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-rest-jackson</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-rest-client</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-rest-client-jackson</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-jackson</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-smallrye-openapi</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-smallrye-context-propagation</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-swagger-ui</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-arc</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-scheduler</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-smallrye-health</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-micrometer-registry-prometheus</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-opentelemetry</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-oidc</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-cache</artifactId>

</dependency>

<!-- Caffeine is used DIRECTLY (Caffeine.newBuilder()) by ten classes — the

<dependency>

<groupId>com.github.ben-manes.caffeine</groupId>

<artifactId>caffeine</artifactId>

</dependency>

<!-- Bean Validation (Jakarta Validation / Hibernate Validator). Enables

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-hibernate-validator</artifactId>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-open-ai</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-anthropic</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-ollama</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-vertex-ai-gemini</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-hugging-face</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-google-ai-gemini</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-http-client-jdk</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-jlama</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-mcp</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-agentic-a2a</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-pgvector</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<!-- LLM Provider Expansion: Mistral AI, Azure OpenAI, Amazon Bedrock, Oracle GenAI -->

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-mistral-ai</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-azure-open-ai</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-bedrock</artifactId>

<version>${langchain4j.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-community-oci-genai</artifactId>

<version>${langchain4j-community-oci.version}</version>

</dependency>

<!-- RAG Provider Expansion: additional embedding stores + models -->

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-mongodb-atlas</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-elasticsearch</artifactId>

<version>${langchain4j-beta.version}</version>

<exclusions>

<!-- Exclude Jackson 3.x (tools.jackson namespace) to fix WS-2026-0003 / CVE-2026-29062.

<exclusion>

<groupId>tools.jackson.core</groupId>

<artifactId>jackson-core</artifactId>

</exclusion>

<exclusion>

<groupId>tools.jackson.core</groupId>

<artifactId>jackson-databind</artifactId>

</exclusion>

<exclusion>

<groupId>tools.jackson.core</groupId>

<artifactId>jackson-annotations</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-qdrant</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-chroma</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-cohere</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>dev.langchain4j</groupId>

<artifactId>langchain4j-vertex-ai</artifactId>

<version>${langchain4j-beta.version}</version>

</dependency>

<dependency>

<groupId>org.apache.pdfbox</groupId>

<artifactId>pdfbox</artifactId>

<version>3.0.8</version>

</dependency>

<dependency>

<groupId>org.jsoup</groupId>

<artifactId>jsoup</artifactId>

<version>1.23.2</version>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.dataformat</groupId>

<artifactId>jackson-dataformat-csv</artifactId>

</dependency>

<dependency>

<groupId>com.fasterxml.jackson.dataformat</groupId>

<artifactId>jackson-dataformat-xml</artifactId>

</dependency>

<!-- YAML: ComposeStackTest and InfrastructureIT parse docker-compose*.yml

<dependency>

<groupId>com.fasterxml.jackson.dataformat</groupId>

<artifactId>jackson-dataformat-yaml</artifactId>

</dependency>

<dependency>

<groupId>de.undercouch</groupId>

<artifactId>bson4jackson</artifactId>

<version>2.18.0</version>

<exclusions>

<exclusion>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-core</artifactId>

</exclusion>

<exclusion>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-annotations</artifactId>

</exclusion>

<exclusion>

<groupId>com.fasterxml.jackson.core</groupId>

<artifactId>jackson-databind</artifactId>

</exclusion>

</exclusions>

</dependency>

<dependency>

<groupId>com.github.victools</groupId>

<artifactId>jsonschema-generator</artifactId>

<version>4.38.0</version>

</dependency>

<dependency>

<groupId>com.github.victools</groupId>

<artifactId>jsonschema-module-jackson</artifactId>

<version>4.38.0</version>

</dependency>

<!-- JSON Schema VALIDATION (victools above only GENERATES schemas) — used

<dependency>

<groupId>com.networknt</groupId>

<artifactId>json-schema-validator</artifactId>

<version>1.5.9</version>

</dependency>

<dependency>

<groupId>jakarta.annotation</groupId>

<artifactId>jakarta.annotation-api</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-mongodb-client</artifactId>

</dependency>

<dependency>

<groupId>org.apache.commons</groupId>

<artifactId>commons-lang3</artifactId>

<version>3.21.0</version>

<scope>compile</scope>

</dependency>

<dependency>

<groupId>com.jayway.jsonpath</groupId>

<artifactId>json-path</artifactId>

<version>3.0.0</version>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-qute</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-vertx</artifactId>

</dependency>

<dependency>

<groupId>io.vertx</groupId>

<artifactId>vertx-web-client</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-junit</artifactId>

<scope>test</scope>

</dependency>

<!-- quarkus-jacoco: Quarkus-native JaCoCo instrumentation for @QuarkusTest ITs.

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-jacoco</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>io.rest-assured</groupId>

<artifactId>rest-assured</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>org.mockito</groupId>

<artifactId>mockito-core</artifactId>

<scope>test</scope>

</dependency>

<!-- WireMock: embedded HTTP mock server for LlmTask and ApiCallsTask integration tests -->

<dependency>

<groupId>org.wiremock</groupId>

<artifactId>wiremock-standalone</artifactId>

<version>3.13.2</version>

<scope>test</scope>

</dependency>

<!-- Jazzer: coverage-guided fuzz testing for security-critical parsers -->

<dependency>

<groupId>com.code-intelligence</groupId>

<artifactId>jazzer-junit</artifactId>

<version>0.30.0</version>

<scope>test</scope>

</dependency>

<!-- Testcontainers: container-based integration testing for E2E agent tests.

<dependency>

<groupId>org.testcontainers</groupId>

<artifactId>testcontainers</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>org.testcontainers</groupId>

<artifactId>testcontainers-junit-jupiter</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>org.testcontainers</groupId>

<artifactId>testcontainers-mongodb</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>org.testcontainers</groupId>

<artifactId>testcontainers-postgresql</artifactId>

<scope>test</scope>

</dependency>

<!-- NATS JetStream client for async conversation processing (Phase 5) -->

<dependency>

<groupId>io.nats</groupId>

<artifactId>jnats</artifactId>

<version>2.26.3</version>

</dependency>

<!-- PostgreSQL JDBC driver + Agroal connection pool (Phase 6.31) -->

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-jdbc-postgresql</artifactId>

</dependency>

<dependency>

<groupId>io.quarkus</groupId>

<artifactId>quarkus-agroal</artifactId>

</dependency>

<!-- Phase 8a: Quarkus MCP Server — expose EDDI as MCP tool provider -->

<dependency>

<groupId>io.quarkiverse.mcp</groupId>

<artifactId>quarkus-mcp-server-http</artifactId>

<version>${quarkus-mcp-server.version}</version>

</dependency>

<!-- Phase 8a+: OpenAPI spec parser for create_api_agent MCP tool -->

<dependency>

<groupId>io.swagger.parser.v3</groupId>

<artifactId>swagger-parser</artifactId>

<version>2.1.48</version>

</dependency>

</dependencies>

<build>

<resources>

<resource>

<directory>src/main/resources</directory>

<excludes>

<!-- Generated by the UI build and copied from ui/*/dist by

<exclude>META-INF/resources/assets/**</exclude>

<exclude>META-INF/resources/manage.html</exclude>

<exclude>META-INF/resources/welcome.html</exclude>

<exclude>META-INF/resources/workforce.html</exclude>

<exclude>META-INF/resources/chat.html</exclude>

<exclude>META-INF/resources/scripts/js/chat-ui*.js</exclude>

<exclude>META-INF/resources/scripts/css/chat-ui*.css</exclude>

<exclude>META-INF/resources/mockServiceWorker.js</exclude>

<exclude>META-INF/resources/eddi-icon.ico</exclude>

<exclude>META-INF/resources/eddi-icon.svg</exclude>

<exclude>META-INF/resources/logo_eddi.png</exclude>

<exclude>META-INF/resources/fonts/**</exclude>

<exclude>META-INF/resources/img/**</exclude>

</excludes>

</resource>

<!-- The Platform Operator's provisioning revision, owned by the Manager

<resource>

<directory>ui/manager/src/lib/operator</directory>

<targetPath>eddi-manager</targetPath>

<includes>

<include>operator-revision.json</include>

</includes>

</resource>

</resources>

<plugins>

<plugin>

<groupId>io.smallrye</groupId>

<artifactId>jandex-maven-plugin</artifactId>

<version>${jandex-maven-plugin.version}</version>

<executions>

<execution>

<id>make-index</id>

<goals>

<goal>jandex</goal>

</goals>

</execution>

</executions>

</plugin>

<plugin>

<groupId>${quarkus.platform.group-id}</groupId>

<artifactId>quarkus-maven-plugin</artifactId>

<version>${quarkus.platform.version}</version>

<extensions>true</extensions>

<executions>

<execution>

<goals>

<goal>build</goal>

<goal>generate-code</goal>

<goal>generate-code-tests</goal>

<goal>native-image-agent</goal>

</goals>

</execution>

</executions>

</plugin>

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-compiler-plugin</artifactId>

<version>${compiler-plugin.version}</version>

<configuration>

<compilerArgs>

<arg>-parameters</arg>

</compilerArgs>

</configuration>

</plugin>

<!-- Enforcer: ban Jackson 3.x (tools.jackson.*) from the dependency tree.

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-enforcer-plugin</artifactId>

<version>3.6.3</version>

<executions>

<execution>

<id>ban-jackson3</id>

<goals><goal>enforce</goal></goals>

<configuration>

<rules>

<bannedDependencies>

<excludes>

<exclude>tools.jackson.core:*</exclude>

</excludes>

<message>Jackson 3.x (tools.jackson.*) is banned — use com.fasterxml.jackson (2.x) managed by Quarkus BOM.</message>

</bannedDependencies>

</rules>

</configuration>

</execution>

</executions>

</plugin>

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-surefire-plugin</artifactId>

<version>${surefire-plugin.version}</version>

<configuration>

<skipTests>${skipUTs}</skipTests>

<!-- @{argLine} preserves JaCoCo's injected agent arg.

<argLine>@{argLine} -ea -XX:+EnableDynamicAgentLoading -Xshare:off --enable-native-access=ALL-UNNAMED --add-modules=jdk.incubator.vector</argLine>

<excludes>

<exclude>**/*IT.java</exclude>

</excludes>

<systemPropertyVariables>

<java.util.logging.manager>org.jboss.logmanager.LogManager</java.util.logging.manager>

<java.util.logging.config.file>${project.basedir}/src/test/resources/logging.properties</java.util.logging.config.file>

<!--suppress UnresolvedMavenProperty -->

<maven.home>${maven.home}</maven.home>

</systemPropertyVariables>

</configuration>

</plugin>

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-failsafe-plugin</artifactId>

<version>${failsafe-plugin.version}</version>

<executions>

<execution>

<goals>

<goal>integration-test</goal>

<goal>verify</goal>

</goals>

</execution>

</executions>

<configuration>

<includes>

<include>**/*IT.java</include>

</includes>

<!-- NOTE: @{argLine} for JaCoCo IT instrumentation is intentionally NOT added here.

<!-- Kill the forked test process if it hasn't completed in 15 minutes.

<forkedProcessTimeoutInSeconds>900</forkedProcessTimeoutInSeconds>

<!-- Retry container-startup failures once. Testcontainers ITs

<rerunFailingTestsCount>1</rerunFailingTestsCount>

<systemPropertyVariables>

<native.image.path>${project.build.directory}/${project.build.finalName}-runner

</native.image.path>

<java.util.logging.manager>org.jboss.logmanager.LogManager</java.util.logging.manager>

<!--suppress UnresolvedMavenProperty -->

<maven.home>${maven.home}</maven.home>

</systemPropertyVariables>

</configuration>

</plugin>

<!-- Checkstyle: code style enforcement.

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-checkstyle-plugin</artifactId>

<version>3.6.0</version>

<configuration>

<configLocation>checkstyle.xml</configLocation>

<consoleOutput>true</consoleOutput>

<!-- failOnViolation + violationSeverity IS the gate. `failsOnError`

<failOnViolation>true</failOnViolation>

<violationSeverity>error</violationSeverity>

<!-- Scope, stated rather than defaulted: the blocking import rules

<includeTestSourceDirectory>false</includeTestSourceDirectory>

<linkXRef>false</linkXRef>

</configuration>

<executions>

<execution>

<?m2e ignore?>

<id>validate</id>

<phase>validate</phase>

<goals>

<goal>check</goal>

</goals>

</execution>

</executions>

</plugin>

<!-- Code Formatter.

<plugin>

<groupId>net.revelc.code.formatter</groupId>

<artifactId>formatter-maven-plugin</artifactId>

<version>2.29.0</version>

<configuration>

<configFile>${project.basedir}/eclipse-formatter.xml</configFile>

<lineEnding>KEEP</lineEnding>

</configuration>

<executions>

<execution>

<id>validate</id>

<goals>

<goal>validate</goal>

</goals>

</execution>

</executions>

</plugin>

<!-- JaCoCo: code coverage reporting -->

<plugin>

<groupId>org.jacoco</groupId>

<artifactId>jacoco-maven-plugin</artifactId>

<version>0.8.15</version>

<!-- Plugin-level excludes: applied to report AND check goals.

<configuration>

<excludes>

<!-- CDI bootstrap producers: @Produces methods that wire beans,

<exclude>**/bootstrap/**</exclude>

<!-- Generated REST client wrappers (no logic, just JAX-RS proxy interfaces) -->

<exclude>**/runtime/client/**</exclude>

<!-- LLM provider SDK factory builders: each wraps a single external SDK

<exclude>**/llm/impl/builder/**</exclude>

<!-- Slack integration adapter: requires live Slack webhook API,

<exclude>**/integrations/slack/**</exclude>

</excludes>

</configuration>

<executions>

<execution>

<goals>

<goal>prepare-agent</goal>

</goals>

</execution>

<execution>

<id>report</id>

<phase>test</phase>

<goals>

<goal>report</goal>

</goals>

</execution>

<!-- Instrument integration tests (Failsafe) -->

<execution>

<id>prepare-agent-integration</id>

<goals>

<goal>prepare-agent-integration</goal>

</goals>

</execution>

<!-- Merge IT-only data: failsafe agent + quarkus-jacoco extension.

<execution>

<id>merge-it</id>

<phase>post-integration-test</phase>

<goals>

<goal>merge</goal>

</goals>

<configuration>

<skip>${skipITs}</skip>

<fileSets>

<fileSet>

<directory>${project.build.directory}</directory>

<includes>

<include>jacoco-it.exec</include>

<include>jacoco-quarkus.exec</include>

</includes>

</fileSet>

</fileSets>

<destFile>${project.build.directory}/jacoco-it-all.exec</destFile>

</configuration>

</execution>

<execution>

<id>report-integration</id>

<phase>post-integration-test</phase>

<goals>

<goal>report</goal>

</goals>

<configuration>

<skip>${skipITs}</skip>

<dataFile>${project.build.directory}/jacoco-it-all.exec</dataFile>

<outputDirectory>${project.reporting.outputDirectory}/jacoco-it</outputDirectory>

</configuration>

</execution>

<!-- Merge UT + IT data files for combined coverage -->

<execution>

<id>merge</id>

<phase>post-integration-test</phase>

<goals>

<goal>merge</goal>

</goals>

<configuration>

<skip>${skipITs}</skip>

<fileSets>

<fileSet>

<directory>${project.build.directory}</directory>

<includes>

<include>jacoco.exec</include>

<include>jacoco-it.exec</include>

<include>jacoco-quarkus.exec</include>

</includes>

</fileSet>

</fileSets>

<destFile>${project.build.directory}/jacoco-merged.exec</destFile>

</configuration>

</execution>

<execution>

<id>merged-report</id>

<phase>post-integration-test</phase>

<goals>

<goal>report</goal>

</goals>

<configuration>

<skip>${skipITs}</skip>

<dataFile>${project.build.directory}/jacoco-merged.exec</dataFile>

<outputDirectory>${project.reporting.outputDirectory}/jacoco-merged</outputDirectory>

</configuration>

</execution>

<!-- Coverage gate (merged UT+IT): the single authoritative threshold.

<execution>

<id>merged-check</id>

<phase>verify</phase>

<goals>

<goal>check</goal>

</goals>

<configuration>

<skip>${skipITs}</skip>

<dataFile>${project.build.directory}/jacoco-merged.exec</dataFile>

<rules>

<rule>

<element>BUNDLE</element>

<limits>

<limit>

<counter>INSTRUCTION</counter>

<value>COVEREDRATIO</value>

<minimum>0.90</minimum>

</limit>

<limit>

<counter>BRANCH</counter>

<value>COVEREDRATIO</value>

<minimum>0.80</minimum>

</limit>

</limits>

</rule>

</rules>

</configuration>

</execution>

</executions>

</plugin>

<plugin>