@jstn-sdk/ma 0.1.13 → 0.14.1

package/.codex/agents/Architect.toml

@@ -1,2 +1,3 @@
 name = "Architect"
 description = "Produces blueprint architecture, stack rationale, tradeoffs, and subsystem design."
+developer_instructions = "Use repository evidence, preserve boundaries, and state verification gaps explicitly."

package/.codex/agents/Auditor.toml

@@ -1,2 +1,3 @@
 name = "Auditor"
 description = "Evaluates security posture, CVE signals, and safer alternatives."
+developer_instructions = "Audit trust boundaries, fail closed on unsafe behavior, and report concrete evidence."

package/.codex/agents/Builder.toml

@@ -1,2 +1,3 @@
 name = "Builder"
 description = "Checks gates, splits bounded work, and proposes branch/worktree execution paths."
+developer_instructions = "Implement only verified scope, keep changes reviewable, and run the required checks."

package/.codex/agents/Flow.toml

@@ -1,2 +1,3 @@
 name = "Flow"
 description = "Validates business logic, state transitions, and unresolved blockers."
+developer_instructions = "Trace state transitions end to end and identify blockers with reproducible evidence."

package/.codex/agents/Sage.toml

@@ -1,2 +1,3 @@
 name = "Sage"
 description = "Maps architectural choices to approved OSS sources through GitMCP-backed collections."
+developer_instructions = "Prefer authoritative sources and keep external claims versioned and cited."

package/.codex/agents/Vibe.toml

@@ -1,2 +1,3 @@
 name = "Vibe"
 description = "Reviews developer and user experience risks before implementation."
+developer_instructions = "Review workflows for clarity, accessibility, and regressions using concrete checks."

package/.codex/hooks.json

@@ -1,12 +1,22 @@
 {
   "hooks": {
-    "Stop": [
+    "SessionStart": [
       {
         "type": "command",
-        "command": "node ./scripts/active-autonomy-hook.mjs"
+        "command": "ma hook context-hydration"
       }
     ],
     "UserPromptSubmit": [
+      {
+        "type": "command",
+        "command": "ma hook context-hydration"
+      },
+      {
+        "type": "command",
+        "command": "ma hook active-autonomy"
+      }
+    ],
+    "Stop": [
       {
         "type": "command",
         "command": "node ./scripts/active-autonomy-hook.mjs"

package/.codex/prompts/onboarding.md

@@ -5,6 +5,7 @@ Meta-Architect is a skills-first system for Codex with a strict kernel.
 ## What is implemented
 
 The primary product surface is the in-session skill flow:
+- `$maestro` (the umbrella manager and recommended first step)
 - `$arch`
 - `$sage`
 - `$flow`
@@ -13,6 +14,10 @@ The primary product surface is the in-session skill flow:
 - `$build`
 
 Secondary helper commands remain available through:
+- `ma setup`
+- `ma doctor`
+- `ma welcome`
+- `ma context refresh`
 - `ma init`
 - `ma idea`
 - `ma skills`
@@ -32,7 +37,7 @@ Secondary helper commands remain available through:
 2. Read `docs/getting-started.md`
 3. Read `docs/release-spec.md`
 4. Read `docs/skills.md`
-5. Start Codex context if needed, then use `$arch` before assuming the workflow is ready
+5. Start Codex context if needed, then use `$maestro` to select the next safe lane
 
 ## What not to do
 

package/COVERAGE.md

@@ -1,8 +1,8 @@
 # Meta-Architect Coverage Matrix
 
-Target release: `v0.1.13`
+Target release: `v0.14.1`
 Last verified: 2026-06-03
-Package: `@jstn-sdk/ma@0.1.13`
+Package: `@jstn-sdk/ma@0.14.1`
 
 This file is the canonical operator-facing coverage map for the current release line.
 It records what MA can prove today through repository tests, runtime artifacts, package dry-runs, and release gates.
@@ -21,7 +21,7 @@ It records what MA can prove today through repository tests, runtime artifacts,
 | Core skill surface | DONE | `skills/`, `skills/index.json`, `npm run skills:validate` |
 | Helper skill surface | DONE | `$align`, `$diagnose`, `$tdd`, `$cleanup` contracts in `skills/`, plugin mirror, and Helper Orchestration Core |
 | Build gate enforcement | DONE | `src/build-gate.js`, `test/build-gate.test.js`, `test/cli-smoke.test.js` |
-| Release issue gates | DONE | `src/release-issue-gates.js`, `docs/qa/release-issue-gates-0.1.13.json`, `test/release-issue-gates.test.js` |
+| Release issue gates | DONE | `src/release-issue-gates.js`, `docs/qa/release-issue-gates-0.14.1.json`, `test/release-issue-gates.test.js` |
 | Live GitMCP probe support | DONE | `src/mcp-live-client.js`, `src/skills.js`, `test/mcp-config.test.js` |
 | MCP policy and exposure control | DONE | `src/runtime/mcp-policy.js`, `src/runtime/exposure-catalog.js`, `test/mcp-policy.test.js`, `test/exposure-catalog.test.js` |
 | Plugin mirror discipline | DONE | `scripts/plugin-sync.js`, `npm run plugin:verify`, package dry-run |
@@ -105,7 +105,7 @@ Coverage state:
 - source skill contracts in `skills/`: DONE
 - generated manifest in `skills/index.json`: DONE
 - plugin-mirrored skill contracts in `plugins/meta-architect/skills/`: DONE
-- installable package skill surface via `postinstall`: DONE
+- installable package skill surface via first-launch host selection: DONE
 
 ## Test coverage actually present
 
@@ -130,7 +130,7 @@ Coverage state:
 | `test/obsidian-integration-core.test.js` | vault-context indexing and graph-link behavior |
 | `test/obsidian-plugin-bridge.test.js` | in-app plugin bridge, metadata, queue, frontmatter, attachments, protocol helpers |
 | `test/package-exports.test.js` | public package API exports core runtime capabilities |
-| `test/package-install-smoke.test.js` | packed npm install, postinstall skill installation, launcher behavior, helper flow |
+| `test/package-install-smoke.test.js` | packed npm install, first-launch skill installation, launcher behavior, helper flow |
 | `test/policy.test.js` | merge/release branch policy enforcement |
 | `test/prompt-strategy-core.test.js` | prompt strategy policy and high-risk preservation |
 | `test/quorum-review.test.js` | review vote confidence and minority reports |
@@ -154,7 +154,7 @@ Current automated verification count:
 
 | Surface | Status | Mechanism |
 | --- | --- | --- |
-| npm package identity | DONE | `@jstn-sdk/ma@0.1.13` |
+| npm package identity | DONE | `@jstn-sdk/ma@0.14.1` |
 | public scoped package config | DONE | `publishConfig.access = public` |
 | package files allowlist | DONE | `package.json > files` |
 | production ignore policy | DONE | `.npmignore` plus `npm pack --dry-run` |
@@ -176,8 +176,8 @@ Current automated verification count:
 | `docs/getting-started.md` onboarding | DONE | source checkout, helper path, gates, runtime artifacts |
 | `docs/skills.md` skill reference | DONE | trigger-by-trigger contract guide |
 | `docs/mcp-setup.md` evidence policy | DONE | GitMCP endpoint semantics and bridge guidance |
-| `docs/release-spec.md` release policy | DONE | `v0.1.13` aligned |
-| `docs/qa/release-readiness-0.1.13.md` | DONE | current QA evidence |
+| `docs/release-spec.md` release policy | DONE | `v0.14.1` aligned |
+| `docs/qa/release-readiness-0.14.1.md` | DONE | current QA evidence |
 | `scripts/release-verify.js` | DONE | checks install docs, demo doc, issue gates, package metadata, `.npmignore` |
 
 ## Known limits
@@ -192,7 +192,7 @@ These are explicit operating limits, not stale gaps:
 
 ## Current truth statement
 
-Meta-Architect currently covers the `v0.1.13` release bar for:
+Meta-Architect currently covers the `v0.14.1` release bar for:
 
 - canonical install and launch
 - Codex-hosted runtime entry

package/DEMO.md

@@ -1,7 +1,7 @@
 # Meta-Architect Demo Guide
 
 Last verified: 2026-06-03
-Release line: `v0.1.13`
+Release line: `v0.14.1`
 Package: `@jstn-sdk/ma`
 
 This demo uses a real existing project: this Meta-Architect repository.
@@ -30,7 +30,7 @@ It highlights how MA helps a workspace move from idea and context to gated archi
 Recommended POSIX install:
 
 ```bash
-curl -fsSL https://cdn.jsdelivr.net/gh/JustineDevs/meta-architect@main/scripts/install.sh | sh
+curl -fsSLo install.sh https://cdn.jsdelivr.net/gh/JustineDevs/meta-architect@latest/scripts/install.sh && curl -fsSLo install.sh.sha256 https://cdn.jsdelivr.net/gh/JustineDevs/meta-architect@latest/scripts/install.sh.sha256 && sed 's#scripts/install.sh#install.sh#' install.sh.sha256 | sha256sum -c - && sh install.sh
 ```
 
 Canonical npm fallback:
@@ -96,7 +96,7 @@ Scenario: make this repository release-ready without bypassing architecture, evi
 Terminal helper path:
 
 ```bash
-ma idea "Prepare Meta-Architect v0.1.13 for a production package release with real install docs, Obsidian brain-context support, learning-loop reliability, and package proof artifacts."
+ma idea "Prepare Meta-Architect v0.14.1 for a production package release with real install docs, Obsidian brain-context support, learning-loop reliability, and package proof artifacts."
 ma run '$maestro'
 ma status --maestro-view
 ```
@@ -207,6 +207,7 @@ Expected:
 ## 9. Demo production package proof
 
 ```bash
+npm run demo:smoke
 node scripts/release-verify.js
 npm run check
 npm test
@@ -216,14 +217,22 @@ npm pack --dry-run --ignore-scripts --cache ./.npm-cache
 Expected package proof:
 
 - package name is `@jstn-sdk/ma`
-- version line is `0.1.13`
+- version line is `0.14.1`
+- `npm run demo:smoke` creates a realistic Northstar Logistics workspace and Obsidian vault under `/tmp/ma-real-demo-*`
+- the smoke writes `.ma/evidence/real-demo-smoke-proof.json` in that temporary workspace
 - `DEMO.md` is included
 - `COVERAGE.md` is included
 - `data/clone-data.proof.json`, `data/clone-data.ledger.json`, and `data/clone-data.rvf` are included
-- runtime state such as `.ma/`, `.omx/`, `node_modules/`, `test/`, and local caches are excluded
+- runtime state such as canonical `.ma/` (plus legacy `.omx/` orchestration state), `node_modules/`, `test/`, and local caches are excluded
 
 ## 10. Full release demo
 
+For a buyer-facing walkthrough, use the real demo kit:
+
+- [Real Demo Runbook](./docs/demo/REAL_DEMO_RUNBOOK.md)
+- [Demo Story](./docs/demo/DEMO_STORY.md)
+- [Prospect Checklist](./docs/demo/PROSPECT_CHECKLIST.md)
+
 The strongest single command:
 
 ```bash
@@ -243,7 +252,7 @@ What it proves:
 
 | Surface | Current reality |
 | --- | --- |
-| Release line | `v0.1.13` |
+| Release line | `v0.14.1` |
 | Package | `@jstn-sdk/ma` |
 | Public skills | 11 (`maestro`, `arch`, `sage`, `flow`, `vet`, `vibe`, `build`, `align`, `diagnose`, `tdd`, `cleanup`) |
 | Runtime namespace | `.ma/` |