forgehive 0.7.4 → 0.7.6

package/README.md

@@ -14,8 +14,8 @@
 <p align="center">
   <img src="https://img.shields.io/badge/node-%3E%3D18-brightgreen" alt="Node.js ≥ 18">
   <img src="https://img.shields.io/badge/typescript-5.8-blue" alt="TypeScript">
-  <img src="https://img.shields.io/badge/tests-267%20passing-success" alt="267 tests">
-  <img src="https://img.shields.io/badge/bundle-247KB-lightgrey" alt="247KB bundle">
+  <img src="https://img.shields.io/badge/tests-273%20passing-success" alt="273 tests">
+  <img src="https://img.shields.io/badge/bundle-259KB-lightgrey" alt="259KB bundle">
   <img src="https://img.shields.io/badge/license-MIT-green" alt="MIT">
 </p>
 
@@ -45,9 +45,9 @@ Claude loses all project knowledge between sessions. forgehive solves this by wr
 
 ---
 
-## Status: v0.7 — Stable
+## Status: v0.7.5 — Stable
 
-267 passing tests back the commands listed below. The v0.7 feature set has been validated end-to-end.
+273 passing tests back the commands listed below. The v0.7 feature set has been validated end-to-end.
 
 **Stable — use with confidence:**
 
@@ -109,14 +109,14 @@ This makes both `fh` and `forgehive` available globally.
 git clone https://github.com/matharnica/forgehive
 cd forgehive
 npm install
-npm run build      # compiles to dist/cli.js (~247 KB)
+npm run build      # compiles to dist/cli.js (~259 KB)
 npm link           # makes 'fh' available globally
 ```
 
 Verify the installation:
 
 ```bash
-fh --version       # should print 0.7.2
+fh --version       # should print 0.7.5
 fh --help          # lists all available commands
 ```
 
@@ -332,6 +332,23 @@ Parses conventional commits (`feat:`, `fix:`, `chore:`, `docs:`, etc.) and group
 
 ---
 
+### Docs
+
+```bash
+fh docs                                        # list existing documentation
+fh docs user [--output path]                   # generate user guide → docs/user-guide.md
+fh docs api  [--output path]                   # generate API reference → docs/api.md
+fh docs onboard [--output path]                # generate onboarding doc → ONBOARDING.md
+fh docs changelog [--since tag] [--output path] # generate changelog → CHANGELOG.md
+fh docs adr "<title>"                          # create Architecture Decision Record
+```
+
+Generates documentation from your project's stack, memory, and git history. Each subcommand writes to a default path inside `docs/` (created if missing) or to the path given via `--output`. `fh docs user` and `fh docs api` write to `docs/user-guide.md` and `docs/api.md` respectively. `fh docs adr` creates a numbered ADR file in `.forgehive/memory/adrs/`.
+
+> `fh docs onboard` and `fh onboard` both generate onboarding documentation — they share the same generator. `fh docs onboard` allows specifying a custom `--output` path; `fh onboard` writes to stdout by default.
+
+---
+
 ### Developer Metrics
 
 ```bash
@@ -847,9 +864,9 @@ Global credential store (chmod 600). Managed exclusively via `fh mcp auth` comma
 |---|---|
 | Runtime | Node.js ≥ 18, ESM |
 | Language | TypeScript |
-| Build | esbuild -> `dist/cli.js` (~247 KB, single bundle) |
+| Build | esbuild -> `dist/cli.js` (~259 KB, single bundle) |
 | Type check | `tsc --noEmit` |
-| Tests | `node:test` (native) + tsx ESM loader, 267 tests |
+| Tests | `node:test` (native) + tsx ESM loader, 273 tests |
 | Dependencies | `js-yaml` (sole runtime dependency) |
 
 ```bash
@@ -860,6 +877,19 @@ npm test            # node --import tsx/esm --test test/*.test.ts
 
 ---
 
+## Changelog
+
+| Version | What's new |
+|---|---|
+| **0.7.5** | `fh --version` reads from `package.json` (no longer hardcoded) |
+| **0.7.4** | Party slash commands installed by `fh init` (`/party`, `/review-party`, `/design-party`, `/full-party`, `/security-party`) |
+| **0.7.3** | User Docs generation (`fh docs user`, `fh docs api`, `fh docs list`) |
+| **0.7.2** | `fh --help`, `fh init --force`, `fh story sprint`, `fh velocity show` fixes |
+| **0.7.1** | Story Cards, Epics, Velocity tracking |
+| **0.7.0** | CI, Map, Onboard, Changelog, Metrics, Sync, Background agents |
+
+---
+
 ## License
 
 MIT

package/dist/cli.js

@@ -5915,10 +5915,10 @@ function groupByType(commits) {
   }
   return groups;
 }
-function formatChangelog(commits, version) {
+function formatChangelog(commits, version2) {
   const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const lines = [];
-  lines.push(`## [${version}] \u2014 ${date}`);
+  lines.push(`## [${version2}] \u2014 ${date}`);
   lines.push("");
   if (commits.length === 0) {
     lines.push("No changes.");
@@ -6460,7 +6460,7 @@ import fs30 from "node:fs";
 import path31 from "node:path";
 import { spawnSync as spawnSync11 } from "node:child_process";
 var SOURCE_EXTS = [".ts", ".tsx", ".js", ".jsx", ".py", ".go"];
-var IGNORE_DIRS3 = ["node_modules", ".git", "dist", ".forgehive", "coverage", ".next", "build", "test"];
+var IGNORE_DIRS3 = ["node_modules", ".git", "dist", ".forgehive", "coverage", ".next", "build", "test", "__tests__", "spec"];
 var EXPORT_PATTERNS = [
   /^export\s+(?:async\s+)?function\s+(\w+)/gm,
   /^export\s+(?:const|let|var)\s+(\w+)/gm,
@@ -6476,6 +6476,27 @@ function readCapabilities2(forgehiveDir2) {
     return {};
   }
 }
+function extractCapabilityInfo(caps) {
+  if (typeof caps.language === "string") {
+    return {
+      language: caps.language,
+      packageManager: typeof caps.packageManager === "string" ? caps.packageManager : void 0,
+      entryPoints: Array.isArray(caps.entryPoints) ? caps.entryPoints : void 0
+    };
+  }
+  const confirmed = caps.capabilities?.confirmed ?? [];
+  const ids = confirmed.map((c) => c.id ?? "").filter(Boolean);
+  let language;
+  if (ids.includes("typescript")) language = "typescript";
+  else if (ids.includes("javascript")) language = "javascript";
+  else if (ids.includes("python")) language = "python";
+  else if (ids.includes("go")) language = "go";
+  let packageManager;
+  if (ids.includes("pnpm")) packageManager = "pnpm";
+  else if (ids.includes("yarn")) packageManager = "yarn";
+  else if (ids.includes("npm")) packageManager = "npm";
+  return { language, packageManager };
+}
 function readMemoryFiles2(forgehiveDir2) {
   const memDir = path31.join(forgehiveDir2, "memory");
   if (!fs30.existsSync(memDir)) return {};
@@ -6518,6 +6539,7 @@ function walkSourceFiles(dir) {
 function generateUserGuide(projectRoot2, forgehiveDir2) {
   const projectName = path31.basename(projectRoot2);
   const caps = readCapabilities2(forgehiveDir2);
+  const { language: lang, packageManager, entryPoints } = extractCapabilityInfo(caps);
   const memFiles = readMemoryFiles2(forgehiveDir2);
   const commits = getRecentCommits2(projectRoot2);
   const lines = [];
@@ -6528,16 +6550,15 @@ function generateUserGuide(projectRoot2, forgehiveDir2) {
   lines.push("## Overview");
   lines.push("");
   if (memFiles["project.md"]) {
-    const content = memFiles["project.md"].replace(/^---[\s\S]*?---\n/m, "").trim();
+    const content = memFiles["project.md"].replace(/^---[\s\S]*?---\n/, "").trim();
     lines.push(content);
   } else {
-    lines.push(`${projectName} is a ${caps.language ?? "software"} application.`);
+    lines.push(`${projectName} is a ${lang ?? "software"} application.`);
   }
   lines.push("");
   lines.push("## Requirements");
   lines.push("");
-  const pm = caps.packageManager ?? "npm";
-  const lang = caps.language;
+  const pm = packageManager ?? "npm";
   if (lang === "typescript" || lang === "javascript") {
     lines.push("- **Node.js** \u2265 18");
     lines.push(`- **${pm}** (package manager)`);
@@ -6564,7 +6585,6 @@ function generateUserGuide(projectRoot2, forgehiveDir2) {
   }
   lines.push("```");
   lines.push("");
-  const entryPoints = caps.entryPoints;
   if (Array.isArray(entryPoints) && entryPoints.length > 0) {
     lines.push("## Getting Started");
     lines.push("");
@@ -6576,7 +6596,7 @@ function generateUserGuide(projectRoot2, forgehiveDir2) {
   if (memFiles["stack.md"]) {
     lines.push("## Configuration");
     lines.push("");
-    const content = memFiles["stack.md"].replace(/^---[\s\S]*?---\n/m, "").trim();
+    const content = memFiles["stack.md"].replace(/^---[\s\S]*?---\n/, "").trim();
     lines.push(content);
     lines.push("");
   }
@@ -6644,16 +6664,19 @@ function listExistingDocs(projectRoot2) {
 }
 
 // src/cli.ts
+import { createRequire } from "node:module";
+var require2 = createRequire(import.meta.url);
+var { version } = require2("../package.json");
 var [, , command, subcommand, ...rest] = process.argv;
 var projectRoot = process.cwd();
 var forgehiveDir = path32.join(projectRoot, ".forgehive");
 if (command === "--version" || command === "-v") {
-  console.log("0.7.3");
+  console.log(version);
   process.exit(0);
 }
 if (command === "--help" || command === "-h" || command === "help") {
   console.log(`
-forgehive v0.7.3 \u2014 Context-aware AI development environment
+forgehive v${version} \u2014 Context-aware AI development environment
 
 USAGE
   fh <command> [subcommand] [options]
@@ -7440,16 +7463,16 @@ Setze diese Umgebungsvariablen:`);
   const since = sinceArg ?? getLatestTag(projectRoot) ?? void 0;
   const rawLog = getGitLogSince(projectRoot, since);
   const commits = parseGitLog(rawLog);
-  let version = "unreleased";
+  let version2 = "unreleased";
   try {
     const pkgPath = path32.join(projectRoot, "package.json");
     if (fs31.existsSync(pkgPath)) {
       const pkg = JSON.parse(fs31.readFileSync(pkgPath, "utf8").replace(/^\s*\/\/.*$/gm, ""));
-      version = pkg.version ?? "unreleased";
+      version2 = pkg.version ?? "unreleased";
     }
   } catch {
   }
-  const md = formatChangelog(commits, version);
+  const md = formatChangelog(commits, version2);
   const outputPath = outputArg ?? path32.join(projectRoot, "CHANGELOG.md");
   let existing = "";
   if (fs31.existsSync(outputPath)) existing = fs31.readFileSync(outputPath, "utf8");
@@ -7662,8 +7685,8 @@ Setze diese Umgebungsvariablen:`);
       pkg = JSON.parse(fs31.readFileSync(path32.join(projectRoot, "package.json"), "utf8"));
     } catch {
     }
-    const version = pkg.version ?? "unreleased";
-    const md = formatChangelog(commits, version);
+    const pkgVersion = pkg.version ?? "unreleased";
+    const md = formatChangelog(commits, pkgVersion);
     const outputPath = outputArg ?? path32.join(projectRoot, "CHANGELOG.md");
     let existing = "";
     if (fs31.existsSync(outputPath)) existing = fs31.readFileSync(outputPath, "utf8");
@@ -7677,7 +7700,7 @@ Setze diese Umgebungsvariablen:`);
     }
     const adrsDir = path32.join(forgehiveDir, "memory", "adrs");
     fs31.mkdirSync(adrsDir, { recursive: true });
-    const existing = fs31.existsSync(adrsDir) ? fs31.readdirSync(adrsDir).filter((f) => f.endsWith(".md")).length : 0;
+    const existing = fs31.readdirSync(adrsDir).filter((f) => f.endsWith(".md")).length;
     const adrId = String(existing + 1).padStart(4, "0");
     const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
     const filename = `${adrId}-${slug}.md`;

package/forgehive/commands/fh-docs.md

@@ -20,12 +20,22 @@ For interactive generation with editing, continue below.
 Ask the user: **"Was soll ich dokumentieren?"**
 
 Options:
-1. **README update** — reflect recent features/changes
-2. **API reference** — document endpoints or exported functions
-3. **CHANGELOG** — run `fh changelog` and review the output
-4. **ADR** — document an architecture decision (`fh memory adr "<title>"`)
-5. **Inline docs** — add JSDoc/docstrings to changed functions
-6. **ONBOARDING** — run `fh onboard` and review
+1. **User Guide** — write or update `docs/user-guide.md` for end users
+2. **README update** — reflect recent features/changes
+3. **API reference** — document endpoints or exported functions (`docs/api.md`)
+4. **CHANGELOG** — run `fh docs changelog` and review the output
+5. **ADR** — document an architecture decision (`fh docs adr "<title>"`)
+6. **Inline docs** — add JSDoc/docstrings to changed functions
+7. **ONBOARDING** — run `fh docs onboard` and review
+
+### For User Guide
+
+1. Run `fh docs user` to generate a baseline → `docs/user-guide.md`
+2. Read the generated file
+3. Read `.forgehive/memory/project.md` for additional context
+4. Expand sections that are thin: add real usage examples, explain non-obvious behavior, describe common workflows
+5. Remove or correct any placeholder text or auto-generated boilerplate that doesn't match the actual project
+6. Ensure the guide covers: installation, first run, core commands, configuration, troubleshooting
 
 ### For README updates
 

package/forgehive/commands/full-party.md

@@ -2,11 +2,11 @@ You are running a Full Party using ForgeHive.
 
 ## Full Party
 
-**Agents:** Nora (Senior Research Analyst), Eli (Documentation Architect), Remy (Product Strategist), Suki (Experience Designer), Viktor (Systems Architect), Kai (Principal Engineer), Sam (Quality Architect)
+**Agents:** Nora (Senior Research Analyst), Eli (Documentation Architect), Remy (Product Strategist), Suki (Experience Designer), Viktor (Systems Architect), Kai (Principal Engineer), Sam (Quality Architect), Vera (Security Architect)
 
-**Mission:** Comprehensive multi-discipline review of a major feature or release — all seven specialists working in parallel on their domain.
+**Mission:** Comprehensive multi-discipline review of a major feature or release — all eight specialists working in parallel on their domain.
 
-> **Warning:** This party spins up 7 worktrees simultaneously. Reserve this for major milestones, release candidates, and significant architectural changes. For smaller reviews, use `/review-party` or `/design-party` instead.
+> **Warning:** This party spins up 8 worktrees simultaneously. Reserve this for major milestones, release candidates, and significant architectural changes. For smaller reviews, use `/review-party` or `/design-party` instead.
 
 ## Protocol
 
@@ -17,7 +17,7 @@ Run:
 fh party run --set full
 ```
 
-This spins up isolated worktrees for all 7 agents. Each works their specialization in parallel.
+This spins up isolated worktrees for all 8 agents. Each works their specialization in parallel.
 
 ### Step 2: Define the milestone
 
@@ -63,6 +63,11 @@ Before the party starts, describe what is being reviewed — be specific:
 - Identifies high-risk paths with insufficient coverage
 - Produces: a test coverage and risk report
 
+**Vera** (Security Architect) — threat modeling, attack surface analysis:
+- Reviews authentication, authorization, and input handling
+- Flags injection risks, insecure defaults, and data exposure
+- Produces: a security review with severity-labeled findings
+
 ### Step 4: Check status
 
 After all agents complete:

package/package.json

@@ -1,15 +1,29 @@
 {
   "name": "forgehive",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "description": "Context-aware AI development environment — one binary, your stack.",
   "type": "module",
   "bin": {
-    "forgehive": "./dist/cli.js",
-    "fh": "./dist/cli.js"
+    "forgehive": "dist/cli.js",
+    "fh": "dist/cli.js"
+  },
+  "files": [
+    "dist/",
+    "forgehive/"
+  ],
+  "keywords": [
+    "claude",
+    "claude-code",
+    "ai",
+    "mcp",
+    "agents",
+    "context",
+    "forgehive",
+    "development"
+  ],
+  "engines": {
+    "node": ">=18"
   },
-  "files": ["dist/", "forgehive/"],
-  "keywords": ["claude", "claude-code", "ai", "mcp", "agents", "context", "forgehive", "development"],
-  "engines": { "node": ">=18" },
   "scripts": {
     "build": "esbuild src/cli.ts --bundle --platform=node --format=esm --outfile=dist/cli.js && chmod +x dist/cli.js",
     "prepublishOnly": "npm run build",