@surlymochan/evalid 0.5.7 → 0.5.8

package/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project are documented here. Detailed notes live in
 
 ## [Unreleased]
 
+## [0.5.8] - 2026-11-08
+
+### Added
+- **README Commands section (#54)**: README had no single command reference; top-level commands were only scattered through prose examples. A Commands section after "3 Minute Start" now lists all 31 top-level commands with a one-line description each, and states explicitly that the installed binary is `xflow` (there is no `evalid` binary). Every entry was checked against live `--help` output (`node bin/xflow.js --help` plus `xflow <command> --help` for all 31 commands, including subcommand lists for spec/qa/visual/launch/adoption/package/demo/goal/atom/host/compare). No CLI behaviour changed; docs only. Test evidence: `npm test` 46 files / 373 tests / 372 pass / 0 fail / 1 skipped (pre-existing).
+
+### Changed
+- **CI actions bumped to v7 (#55)**: `actions/checkout` v4 → v7.0.1 and `actions/setup-node` v4 → v7.1.0, in both workflows (ci.yml, npm-publish.yml — 4 pin sites). Both v4 actions ran on the Node 20 runtime and CI reported Node 20 deprecation warnings; v7 runs on node24 (`runs.using: node24`, read from the action.yml files), so the warnings go away. No behaviour change for this repo: the only trigger events are push / pull_request / release / workflow_dispatch, so checkout v7's fork-PR guard for pull_request_target / workflow_run does not apply; setup-node v7's removal of the dummy NODE_AUTH_TOKEN export does not affect npm Trusted Publishing (OIDC), which npm-publish.yml uses and which never sets NODE_AUTH_TOKEN; node-version stays '22' with cache: npm unchanged. Test evidence: `npm run verify` exit 0 on the merged tree.
+
+Acceptance debt, stated plainly: the bench-number acceptance for P1-2 / P1-3 / P2-1 / P2-3 still awaits the MiniMax full-matrix batch (15 instances × 4 arms × reps 3), which is stopped on MiniMax Token Plan quota exhaustion. No bench numbers are claimed in this release.
+
 ## [0.5.7] - 2026-11-08
 
 ### Added

package/README.md

@@ -149,6 +149,46 @@ node bin/xflow.js compare codex-goal
 node bin/xflow.js launch copy
 ```
 
+## Commands
+
+The installed binary is `xflow` (`npm install -g evalid` installs the `xflow` CLI). Every
+top-level command below was verified against `xflow <command> --help` at v0.5.7; run
+`xflow --help` for the full list with examples, or `xflow <command> --help` for one command.
+
+| Command | What it does |
+| --- | --- |
+| `xflow workflow run \| validate <yaml>` | Run a workflow (`yolo` / `corps` / a YAML path), or validate its YAML as preflight |
+| `xflow corps` | Run the heavy product/multi-agent workflow through its governed entry point |
+| `xflow proof` | Verify workflow completion evidence and write the proof file |
+| `xflow doctor` | Check local xflow readiness: package scripts, workflow YAMLs, skill topology |
+| `xflow init` | Create project-local `.as-xflow/config.json` with portable defaults |
+| `xflow goal show \| set \| audit \| clear` | Manage the project-level `.xflow/GOAL.md` anchor |
+| `xflow profile show \| set` | Manage the personal/team execution profile |
+| `xflow policy validate` | Validate the effective policy overlay |
+| `xflow intake recommend` | Recommend a workflow track and gate overlays from a demand profile |
+| `xflow evaluate` | One-shot external evaluator brief: quality score, blockers, next actions |
+| `xflow release status` | Release-owner publish status: current blocker, package evidence, next action |
+| `xflow assess` | Public quality assessment for goal, yolo, corps and the skill family |
+| `xflow demo launch \| clean` | Show launch demo paths, or run the clean-project adoption smoke |
+| `xflow launch audit \| dossier \| claims \| copy` | Audit launch readiness, or print the dossier, claimable statements, or safe launch copy |
+| `xflow adoption validate \| init \| kit \| trial \| brief \| status` | Validate real adoption evidence records, or guide an external trial |
+| `xflow package audit \| preflight \| status` | Validate npm package evidence; preflight checks publish prerequisites without publishing |
+| `xflow score` | Print the competitive readiness score |
+| `xflow objective` | Audit the top-level product objective against proof from source checkout |
+| `xflow compare <system>` | Evidence-backed comparison against `superpowers`, `codex-goal`, `super-assistant`, `openspec`, `gstack`, or `spec-kit` |
+| `xflow adapter import-file` | Import a generic tracker item JSON into `specs/changes/<change-id>/` |
+| `xflow spec start \| delta \| openspec-map` | Scaffold specs, generate a spec delta review, or map an OpenSpec layout |
+| `xflow qa capture \| review \| ship \| benchmark` | Browser-QA capture with QA-focused defaults, packaged as review, ship-gate, or benchmark |
+| `xflow host status \| sync \| diff` | Show or maintain installed xflow skill copies across host roots |
+| `xflow coach <topic>` | Concise execution checklist (`bugfix`, `feature`, `review`, `qa`, `ship`, `tdd`, `debug`, `red`, `green`, `verify`) |
+| `xflow role <role>` | Named specialist operator surface (`developer`, `reviewer`, `qa`, `release`, `product`) |
+| `xflow visual capture-page-evidence \| export-dom-rects \| export-visual-tokens \| diff-images \| render-report` | Screenshot/DOM capture and visual-token / image-diff tooling |
+| `xflow quickstart` | Copy-paste-safe first-run commands |
+| `xflow guide` | The human-facing delivery loop in one screen |
+| `xflow gate ack <phase>` | Approve a pending human gate so a run can resume |
+| `xflow atom list \| show \| run` | List, inspect, or run a single registered atom directly |
+| `xflow serve` | Start the HTTP control plane for heavy-track workflows |
+
 ## Run a change
 
 ```bash

package/RELEASE_NOTES.md

@@ -1,5 +1,15 @@
 # Release Notes
 
+## 0.5.8 - README command reference; CI actions to v7
+
+Patch release. One docs addition and one CI maintenance bump since 0.5.7, both verified by the full test suite.
+
+**README Commands section (#54).** README now has a single command reference after "3 Minute Start": all 31 top-level xflow commands with a one-line description each, verified against live `--help` output, and an explicit note that the installed binary is `xflow` (there is no `evalid` binary). Docs only — no CLI behaviour changed. Test evidence: `npm test` 373 tests / 372 pass / 0 fail / 1 skipped.
+
+**CI actions bumped to v7 (#55).** `actions/checkout` v4 → v7.0.1 and `actions/setup-node` v4 → v7.1.0 across both workflows (4 pin sites). Both v7 actions run on node24, clearing the Node 20 deprecation warnings CI reported under v4. No behaviour change for this repo: the fork-PR guard in checkout v7 does not apply to this repo's trigger events, and setup-node v7's removal of the dummy NODE_AUTH_TOKEN export does not affect the OIDC Trusted Publishing flow in npm-publish.yml. Test evidence: `npm run verify` exit 0 on the merged tree.
+
+Acceptance debt, stated plainly: the bench-number acceptance for P1-2, P1-3, P2-1 and P2-3 — the wall-clock/token/resolved lines from issue #5 — still awaits the MiniMax full-matrix batch (15 instances × 4 arms × reps 3), which is stopped on MiniMax Token Plan quota exhaustion. No bench numbers are claimed in this release.
+
 ## 0.5.7 - Coverage config (c8)
 
 Patch release. One addition since 0.5.6, verified by the full test suite.

package/docs/launch-dossier.md

@@ -1,6 +1,6 @@
 # evalid Launch Dossier
 
-Generated: 2026-11-07T17:29:14.617Z
+Generated: 2026-11-07T21:23:51.607Z
 Mode: post_publish
 Verdict: conditionally ready: engine and adoption evidence are strong, registry publication remains required for a splash launch
 Launch ready: not yet
@@ -117,7 +117,7 @@ Evidence:
 - Adoption records: 1; status: pass
 - Goal audit: pass; goal: Keep evalid credible as an open-source agent delivery runtime: repo-owned workflow contracts, executable verification gates, durable project context, and honest benchmark evidence.
 - Package evidence: missing; source: registry_json
-- Package name/version: @surlymochan/evalid@0.5.7
+- Package name/version: @surlymochan/evalid@0.5.8
 
 ## Passing Evidence
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@surlymochan/evalid",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "Claimed != verified: a runtime verification layer for coding agents. It seals each test run and replays it from a clean snapshot, with a zero-judge gate pipeline (spec clarification, code review, TDD proof) and the xflow CLI.",
   "keywords": [
     "ai-agents",