mindforge-cc 11.8.0 → 11.8.2

package/.mindforge/memory/sync-manifest.json

@@ -1,6 +1,6 @@
 {
   "pattern-library.jsonl": {
-    "lastSync": "2026-06-24T05:48:11.891Z",
+    "lastSync": "2026-07-01T06:53:59.643Z",
     "localCount": 1
   }
 }

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # Changelog
 
+## [11.8.2] — 2026-07-01 — Clean Stable Release
+
+### Fixes
+- `bin/installer-core.js`: Added main-guard — `health` command now produces full diagnostic output
+- `bin/mindforge-cli.js:185`: Fixed null-status bug — signal-killed child processes now exit with code 1 instead of 0
+- `bin/change-classifier.js`: Tier 2 branch now pushes descriptive reasons to reasons[] array
+- `sdk/tests/sdk.test.js:30`: Replaced hardcoded version "11.8.0" with dynamic package.json read
+- `tests/sdk-exports.test.js`: Fixed MODULE_NOT_FOUND path resolution
+- `README.md:7`: Updated "Latest: v11.8.0" header to "Latest: v11.8.1"
+
+### Improvements
+- `bin/spawn-agent.js --help`: Added v1.0 stub disclosure note to usage text
+- `bin/governance/ztai-manager.js`: Lazy-instantiate SecureEnclaveProvider — eliminates spurious Tier-3 warning on commands that do not use Tier-3 trust
+- `bin/review/cross-review-engine.js`: Added CLI entry point with --help, --diff, --phase, --context args
+- `tests/worktree-engine.test.js`: Added 90-second timeout override to prevent false parallel-runner timeout
+- ESLint: Resolved auto-fixable errors, lint stage now clean
+- Test coverage: Added tests/errors.test.js and tests/file-io.test.js to improve coverage toward 80% target
+
+---
+
+## [11.8.1] — 2026-07-01 — First Stable Release
+
+### Security
+- **mcp-server:** Patched hono to >=4.12.25 — fixes CORS credential reflection, path traversal (Windows), body-limit bypass, Set-Cookie merging, Lambda@Edge header drop
+- **sdk:** Patched picomatch — fixes ReDoS via extglob quantifiers and Method Injection via POSIX character classes
+- **ztai:** Added SECURITY_TIER_3_SIMULATED disclosure constant and startup warning for in-process key simulation
+
+### Fixes
+- `bin/sre/sli-verifier.js`: `simulateShadowWave()` now throws in non-simulate mode — gate with `MINDFORGE_SRE_SIMULATE=true`
+- `bin/spawn-agent.js`: spawn stub now exits 1 with actionable error instead of silently succeeding
+- `bin/memory/eis-client.js`: `resolveRemoteNode()` now throws explicitly instead of returning null
+- `bin/browser/session-manager.js`: added `capabilities.importFromBrowser=false` export
+- `.mindforge/config.json`: `mesh.node_id` changed from "beta-node" placeholder to "auto"
+
+### Docs
+- README: fixed stale version refs (11.5.1→11.8.1), corrected workflow count to 32, added Node.js >=18 prerequisite and Hello World section
+- SECURITY.md: documented Tier-3 simulation scope, audit-hash replay boundary, spawn dispatch status
+- docs/troubleshooting.md: added spawn stub, importFromBrowser, and test cwd entries
+- docs/sdk-reference.md: updated version to 11.8.1, marked unimplemented methods
+- docs/enterprise-setup.md: documented mesh.node_id configuration requirement
+
+### Tests
+- install.test.js + production.test.js: added cwd guard, scoped secrets scan to MindForge root only
+
+---
+
 ## [11.8.0] - 2026-06-24 — Workflow Forge II
 
 Expands the Dynamic Workflow Library from 12 to 33 workflows across 5 tiers, adding a new **Beast tier** for compound multi-phase multi-agent workflows with adversarial verification. 21 new workflows added. 92/92 tests pass.

package/MINDFORGE.md

@@ -3,10 +3,10 @@
 ## 1. IDENTITY & VERSIONING
 
 [NAME]    = MindForge
-[VERSION] = 11.8.0
+[VERSION] = 11.8.2
 [STABLE]  = true
 [MODE]    = "Platform Sovereign"
-[REQUIRED_CORE_VERSION] = 11.8.0
+[REQUIRED_CORE_VERSION] = 11.8.2
 [SOVEREIGN_IDENTITY] = true
 [SRE_LAYER_ENABLED]  = true
 

package/README.md

@@ -4,9 +4,9 @@
 
 ---
 
-## Latest: v11.8.0
+## Latest: v11.8.1
 
-- **v11.8.0 — "Workflow Forge II".** Expands the Dynamic Workflow Library from 12 to 33 workflows across 5 tiers — adds a new **Beast tier** for compound 5-phase adversarial workflows (security-hardening, accessibility-audit, security-threat-model), plus 18 more across Dev/Ops/Intelligence/Research. 21 new `/mindforge:wf-*` commands. Total: 219 commands.
+- **v11.8.0 — "Workflow Forge II".** Expands the Dynamic Workflow Library from 12 to 32 workflows across 5 tiers — adds a new **Beast tier** for compound 5-phase adversarial workflows (security-hardening, accessibility-audit, security-threat-model), plus 18 more across Dev/Ops/Intelligence/Research. 21 new `/mindforge:wf-*` commands. Total: 219 commands.
 - **v11.7.0 — "Workflow Forge".** Ships the first Dynamic Workflow Library — 12 pre-built multi-agent workflow scripts that run via Claude Code's `Workflow` tool with true parallel agent execution. Four tiers: Research (deep-research, competitive-analysis, tech-evaluation), Dev (code-audit, feature-planner, pr-review, tdd-sprint, refactor-plan), Ops (incident-response, release-prep), Intelligence (onboard-codebase, perf-optimize). 13 new `/mindforge:wf-*` commands. Total: 198 commands.
 - **v11.6.0 — "Skill Forge".** Adds 80 community-sourced skills across 8 domains (software-development, github, devops, research, security, creative, data-science, note-taking) — 30 promoted to engine tier for automatic trigger-matching, 50 in the extended tier for explicit activation. Three new slash commands: `/mindforge:systematic-debug`, `/mindforge:skill-tdd`, `/mindforge:skills-index`. Total: 153 skills, 232 engine-tier entries, 185 commands.
 - **v11.5.1 — Standalone MCP server.** The MindForge MCP server now ships as its own npm package, `mindforge-mcp-server@11.5.1`, listed on the official MCP Registry as `io.github.sairam0424/mindforge`. Add it to Claude Code with one command (see [Use the MCP server](#-use-the-mcp-server-standalone)); it exposes 7 tools over stdio (6 read-only + 1 guarded write).
@@ -14,6 +14,9 @@
 
 See [CHANGELOG.md](./CHANGELOG.md) for full release history.
 
+<details>
+<summary>v11.0.0 — Sovereign Stability highlights</summary>
+
 ## v11.0.0 — Sovereign Stability
 
 MindForge v11.0.0 "Sovereign Stability" is a production-hardening release focused on reliability, performance, and real-world deployment readiness. Key highlights:
@@ -27,6 +30,8 @@ MindForge v11.0.0 "Sovereign Stability" is a production-hardening release focuse
 
 This release ships 211 personas, 153 skills, 154 specialized subagents, 198 commands, 18 pillars, and 49 swarm templates across 12 engineering domains.
 
+</details>
+
 
 ## Installation & Setup
 
@@ -46,6 +51,8 @@ for all 11 plugins, token-budget guidance, and team setup.
 
 ### 🚀 Quick Start (npx — full framework engine)
 
+**Prerequisites:** Node.js >= 18.0.0
+
 The npx installer also writes the complete `.mindforge/` engine (governance, memory,
 planning) into your project:
 
@@ -80,7 +87,7 @@ npx mindforge-cc@latest --antigravity --local
 ### 🔗 Use the MCP server (standalone)
 
 The MindForge MCP server is published as its own npm package,
-**`mindforge-mcp-server`** (`11.5.1`), and is listed on the official
+**`mindforge-mcp-server`** (`11.8.1`), and is listed on the official
 [MCP Registry](https://registry.modelcontextprotocol.io) as
 `io.github.sairam0424/mindforge`. Wire it into Claude Code with one command:
 
@@ -102,6 +109,14 @@ It exposes **7 tools over stdio** — 6 read-only plus 1 guarded write:
 
 ---
 
+## Quick Verification
+
+After install, open Claude Code and type:
+- `/mindforge:status` — verify installation and show project health
+- `/mindforge:next` — auto-discover your first task
+
+---
+
 - **Production Hardening (v11.0.0)** — LRU caches, atomic JSON writes, log rotation, HANDOFF validation, and temporal snapshot GC for crash-safe long-running sessions.
 - **True Wave Parallelism (v11.0.0)** — Semaphore-based concurrent wave execution with configurable max concurrency replaces sequential dispatch.
 - **Streaming SDK (v11.0.0)** — WebSocket event streaming, `streamExecution()` AsyncIterable, `batchExecute()`, model streaming across Anthropic/OpenAI/Gemini providers.
@@ -383,7 +398,7 @@ See `.mindforge/production/token-optimiser.md`.
 
 ## 🚀 Dynamic Workflow Library
 
-33 pre-built multi-agent workflow scripts that run via Claude Code's `Workflow` tool. Each workflow fans out concurrent agents, synthesizes results, and returns structured output.
+32 pre-built multi-agent workflow scripts that run via Claude Code's `Workflow` tool. Each workflow fans out concurrent agents, synthesizes results, and returns structured output.
 
 **Discover:** `/mindforge:wf-catalog` or `node bin/mindforge-cli.js workflow list`
 

package/SECURITY.md

@@ -136,3 +136,12 @@ narrow disposable memory · scan skills/hooks/MCP/agents as supply-chain artifac
 ## Contact
 
 For security questions that are not vulnerability reports, open a GitHub Discussion with the "security" label.
+
+## Tier-3 Trust (ZTAI Secure Enclave)
+Tier-3 trust in v1.0 uses **in-process key simulation** (`bin/governance/ztai-manager.js` `SecureEnclaveProvider`). Key material resides in the Node.js heap — it is NOT hardware-isolated. A real TPM/HSM provider is planned for v1.2. **Do not use Tier-3 trust for production credential workflows in v1.0.**
+
+## Audit Log Tamper Evidence
+The Merkle chain (`bin/governance/audit-hash.js`) provides tamper-evidence for content and ordering but does not prevent replay of identical entries. Restrict OS-level write access to `.planning/AUDIT.jsonl` to prevent replay attacks.
+
+## Agent Dispatch (spawn mode)
+`bin/spawn-agent.js` spawn mode exits with an error in v1.0 — real agent dispatch is not yet implemented at the shell level. Use Claude Code slash commands (`/mindforge:auto`, `/mindforge:next`) to dispatch agents. Direct shell-level dispatch is planned for v1.1.

package/bin/autonomous/auto-runner.js

@@ -776,8 +776,14 @@ class AutoRunner {
       const mirrorPath = await this.mirror.replicate(incident);
       const decision = await this.adversary.runDebate(incident, mirrorPath);
       if (decision.verdict === 'APPROVED' || decision.verdict === 'AMENDED') {
-        const baseline = this.verifier.simulateShadowWave(false);
-        const postFix = this.verifier.simulateShadowWave(true);
+        let baseline, postFix;
+        try {
+          baseline = this.verifier.simulateShadowWave(false);
+          postFix  = this.verifier.simulateShadowWave(true);
+        } catch (e) {
+          this.writeAudit({ event: 'sre_sli_unavailable', rid: incident.remediation_id, reason: e.message });
+          return;
+        }
         const verification = await this.verifier.verify(baseline, postFix);
         if (verification.isHealthy) {
           this.writeAudit({ event: 'sre_remediation_applied', rid: incident.remediation_id, verdict: decision.verdict });

package/bin/autonomous/dependency-dag.js

@@ -4,7 +4,7 @@
  * Kahn topological sort + cycle detection.
  * Ported from the previously test-only implementation into the real engine.
  *
- * TODO(UC-xx): same-wave file-conflict detection once tasks carry file lists.
+ * TODO(UC-xx): same-wave file-conflict detection — deferred until handoff schema carries per-task file lists. See docs/architecture/ for scope.
  *   Handoff tasks (see normalizeTask in wave-executor.js and validateHandoff in
  *   state-manager.js) currently expose only id/name/plan/depends_on — there is
  *   no `files` field to compare. A `findFileConflicts(plans)` check (two tasks

package/bin/browser/session-manager.js

@@ -94,4 +94,6 @@ function importFromBrowser(source) {
   );
 }
 
-module.exports = { saveSession, loadSession, importFromBrowser };
+const capabilities = { importFromBrowser: false };
+
+module.exports = { saveSession, loadSession, importFromBrowser, capabilities };

package/bin/change-classifier.js

@@ -75,6 +75,12 @@ function classify() {
     if (tier < 3) {
       if (diffFiles.length > 10 || diffFiles.some(f => f.endsWith('.js') || f.endsWith('.ts'))) {
         tier = 2; // Significant logic change
+        if (diffFiles.length > 10) {
+          reasons.push(`Large changeset: ${diffFiles.length} files modified`);
+        } else {
+          const jsFile = diffFiles.find(f => f.endsWith('.js') || f.endsWith('.ts'));
+          if (jsFile) reasons.push(`JavaScript/TypeScript file modified: ${jsFile}`);
+        }
       }
     }
 

package/bin/governance/ztai-manager.js

@@ -9,6 +9,8 @@ const configManager = require('./config-manager');
 
 const generateKeyPair = promisify(crypto.generateKeyPair);
 
+const SECURITY_TIER_3_SIMULATED = true;
+
 /**
  * Abstract Base Class for Key Providers
  */
@@ -61,6 +63,9 @@ class LocalKeyProvider extends KeyProvider {
 class SecureEnclaveProvider extends KeyProvider {
   constructor() {
     super();
+    console.warn('[ZTAI] WARNING: Tier-3 trust using simulated in-process key storage. ' +
+      'Key material resides in the Node.js heap — not hardware-isolated. ' +
+      'Do not use Tier-3 trust for production credential workflows in v1.0.');
     this.enclaveStore = new Map(); // DID -> { privateKey, metadata }
   }
 
@@ -141,11 +146,32 @@ class QuantumSafeKeyProvider extends KeyProvider {
 class ZTAIManager {
   constructor() {
     this.agentRegistry = new Map(); // DID -> { publicKey, persona, tier, providerType }
-    this.providers = {
-      local: new LocalKeyProvider(),
-      enclave: new SecureEnclaveProvider(),
-      quantum: new QuantumSafeKeyProvider()
-    };
+    this._providers = {}; // lazily populated — see _getProvider()
+  }
+
+  /**
+   * Returns the key provider for the given providerType, constructing it on
+   * first use.  This defers SecureEnclaveProvider (and its Tier-3 console
+   * warning) until a Tier-3+ agent is actually registered, and defers
+   * QuantumSafeKeyProvider (and its `require('./quantum-crypto')`) until PQC
+   * is explicitly requested — so unrelated commands stay warning-free.
+   *
+   * @param {'local'|'enclave'|'quantum'} providerType
+   * @returns {KeyProvider}
+   */
+  _getProvider(providerType) {
+    if (!this._providers[providerType]) {
+      if (providerType === 'local') {
+        this._providers[providerType] = new LocalKeyProvider();
+      } else if (providerType === 'enclave') {
+        this._providers[providerType] = new SecureEnclaveProvider();
+      } else if (providerType === 'quantum') {
+        this._providers[providerType] = new QuantumSafeKeyProvider();
+      } else {
+        throw new Error(`Unknown provider type: ${providerType}`);
+      }
+    }
+    return this._providers[providerType];
   }
 
   /**
@@ -187,7 +213,7 @@ class ZTAIManager {
     const did = `did:mindforge:${uuid}`;
 
     const providerType = this._selectProvider(tier);
-    const provider = this.providers[providerType];
+    const provider = this._getProvider(providerType);
 
     const publicKeyPEM = await provider.generate(did);
 
@@ -216,7 +242,7 @@ class ZTAIManager {
     const agent = this.agentRegistry.get(did);
     if (!agent) throw new Error(`Agent not registered: ${did}`);
     
-    const provider = this.providers[agent.providerType];
+    const provider = this._getProvider(agent.providerType);
     return await provider.sign(did, data);
   }
 
@@ -240,7 +266,7 @@ class ZTAIManager {
     const agent = this.agentRegistry.get(did);
     if (!agent) throw new Error(`Agent not found: ${did}`);
     
-    const provider = this.providers[agent.providerType];
+    const provider = this._getProvider(agent.providerType);
     agent.publicKey = await provider.rotate(did);
     agent.rotatedAt = new Date().toISOString();
     return true;
@@ -249,7 +275,7 @@ class ZTAIManager {
   revokeAgent(did) {
     const agent = this.agentRegistry.get(did);
     if (agent) {
-      this.providers[agent.providerType].delete(did);
+      this._getProvider(agent.providerType).delete(did);
       this.agentRegistry.delete(did);
     }
   }
@@ -307,3 +333,4 @@ class ZTAIManager {
 }
 
 module.exports = new ZTAIManager();
+module.exports.SECURITY_TIER_3_SIMULATED = SECURITY_TIER_3_SIMULATED;

package/bin/installer-core.js

@@ -952,3 +952,8 @@ async function run(args) {
 }
 
 module.exports = { run, install, uninstall, RUNTIMES, generateEntryContent, SENSITIVE_EXCLUDE, MINDFORGE_DEV_EXCLUDE };
+
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  run(args).catch(err => { console.error(err.message); process.exit(1); });
+}

package/bin/memory/eis-client.js

@@ -144,9 +144,13 @@ class EISClient {
     }
   }
 
-  // TODO: implement when remote nodes are available
+  // TODO(EIS-remote): implement cross-node context resolution in v1.1
   async resolveRemoteNode(nodeId) {
-    return null;
+    // TODO(EIS-remote): implement cross-node context resolution in v1.1
+    throw new Error(
+      `EIS remote node resolution not implemented (nodeId: ${nodeId}). ` +
+      'Cross-node context is local-only in v1.0.'
+    );
   }
 
   /**

package/bin/mindforge-cli.js

@@ -182,7 +182,7 @@ const result = spawnSync('node', [scriptPath, ...finalArgs], {
   env: { ...process.env, MINDFORGE_CLI: 'true' }
 });
 
-process.exit(result.status || 0);
+process.exit(result.status != null ? result.status : (result.signal ? 1 : 0));
 
 /**
  * Levenshtein distance — dynamic programming edit distance between two strings.

package/bin/review/cross-review-engine.js

@@ -90,3 +90,22 @@ async function runCrossReview(params) {
 }
 
 module.exports = { runCrossReview, parseFindings: synthesizeFindings.parseFindings, extractVerdict };
+
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  const phase = args.find(a => a.startsWith('--phase='))?.split('=')[1] || 'full';
+  const diff = args.find(a => a.startsWith('--diff='))?.split('=')[1] || 'HEAD';
+  const context = args.find(a => a.startsWith('--context='))?.split('=')[1] || '';
+  if (args.includes('--help') || args.length === 0) {
+    console.log('MindForge PR Review — Cross-model review engine');
+    console.log('Usage: node bin/review/cross-review-engine.js [--diff=HEAD] [--phase=full] [--context=...]');
+    console.log('  --diff     Git ref or diff target (default: HEAD)');
+    console.log('  --phase    Review phase: full|security|quality|performance (default: full)');
+    console.log('  --context  Additional context string for the review');
+    process.exit(0);
+  }
+  console.log(`[MindForge PR Review] Starting ${phase} review of ${diff}...`);
+  runCrossReview({ phaseNum: phase, diff, context })
+    .then(result => { console.log(JSON.stringify(result, null, 2)); process.exit(0); })
+    .catch(err => { console.error('Review failed:', err.message); process.exit(1); });
+}

package/bin/spawn-agent.js

@@ -26,6 +26,7 @@ const SAFE_NAME_PATTERN = /^[A-Za-z0-9-_]+$/;
 if (!MODE || !TARGET) {
   console.error('❌ Usage: node bin/spawn-agent.js <mode> <target> [--dry-run]');
   console.error('   modes: identity | spawn | subagent');
+  console.error('   Note: spawn mode performs persona resolution only in v1.0 — actual agent dispatch requires Claude Code slash commands (/mindforge:auto or /mindforge:next)');
   process.exit(1);
 }
 
@@ -125,13 +126,16 @@ async function run() {
     process.exit(0);
   }
 
-  // Future: Integration with Antigravity / Claude Code runtime
-  console.log('🛠️ Dispatching to agent runtime...');
-  // For now, we simulate the environment preparation
-  setTimeout(() => {
-    console.log('✅ Agent environment active.');
-    process.exit(0);
-  }, 500);
+  // Agent dispatch to Claude Code runtime is not yet implemented.
+  // Use Claude Code slash commands to dispatch agents instead.
+  console.error(
+    'Agent spawn dispatch not implemented in v1.0.\n' +
+    '  Use Claude Code slash commands instead:\n' +
+    '  /mindforge:auto  — reactive engine start\n' +
+    '  /mindforge:next  — primary auto-discovery\n' +
+    '  See docs/troubleshooting.md for details.'
+  );
+  process.exit(1);
 }
 
 run().catch(err => {

package/bin/sre/sli-verifier.js

@@ -66,9 +66,17 @@ class SLIVerifier {
 
   /**
    * Heuristic simulation of a "Shadow Wave" to generate metrics.
+   * Gated behind MINDFORGE_SRE_SIMULATE=true — must not run in production
+   * without explicit opt-in.
    */
   simulateShadowWave(isFixApplied = false) {
-    // Generate jittery but realistic metrics
+    if (process.env.MINDFORGE_SRE_SIMULATE !== 'true') {
+      throw new Error(
+        '[SRE] simulateShadowWave() called outside simulate mode. ' +
+        'Set MINDFORGE_SRE_SIMULATE=true to enable SLI simulation, ' +
+        'or implement real metric collection from /api/v1/system.'
+      );
+    }
     return {
       latency: 120 + (Math.random() * 20),
       error_rate: isFixApplied ? 0.001 : 0.05,

package/docs/sdk-reference.md

@@ -14,7 +14,7 @@ import {
 } from '@mindforge/sdk';
 ```
 
-Current SDK version: `10.0.1`
+Current SDK version: `11.8.1`
 
 ---
 
@@ -93,6 +93,18 @@ Returns `true` if the unified SQLite knowledge database (`celestial.db`) exists
 
 Returns the absolute path to the project's `celestial.db` SQLite database file.
 
+#### `importFromBrowser(sessionData: unknown): Promise<void>`
+
+Imports a session snapshot captured from a browser environment into the local session store.
+
+> **[NOT IMPLEMENTED — v1.0]** This method always throws. Check `sessionManager.capabilities.importFromBrowser === false` before calling. Use `saveSession`/`loadSession` instead.
+
+#### `resolveRemoteNode(nodeId: string): Promise<unknown>`
+
+Resolves context for a node residing on a remote EIS (Edge Intelligence Shard) instance.
+
+> **[NOT IMPLEMENTED — v1.0]** `resolveRemoteNode(nodeId)` always throws. Cross-node context resolution is local-only in v1.0. Planned for v1.1.
+
 ---
 
 ## `MindForgeMemory`

package/docs/troubleshooting.md

@@ -137,3 +137,12 @@ If the above doesn’t resolve it:
 - **Architecture**: `docs/architecture/V5-ENTERPRISE.md`
 - **Commands**: `docs/commands-reference.md`
 - **Personas**: `docs/PERSONAS.md`
+
+## Agent spawn returns immediately with no action
+`spawn` mode in `bin/spawn-agent.js` exits with an error in v1.0. Real agent dispatch requires Claude Code slash commands. Use `/mindforge:auto` or `/mindforge:next` to dispatch agents.
+
+## `importFromBrowser` crashes
+Browser cookie import from native browser profiles is not implemented in v1.0. Use `saveSession`/`loadSession` instead. Check `sessionManager.capabilities.importFromBrowser` before calling.
+
+## Tests fail when run from a parent directory
+All tests must be run from the MindForge project root: `cd /path/to/MindForge && npm test`. Running from the parent workspace will produce false failures.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mindforge-cc",
-  "version": "11.8.0",
+  "version": "11.8.2",
   "description": "MindForge \u2014 Sovereign Agentic Intelligence Framework. Sovereign Stability: Production-Hardened Agentic Intelligence (v11)",
   "bin": {
     "mindforge-cc": "bin/install.js",

package/.agent/mindforge/wf-deep-research.md

@@ -1,32 +0,0 @@
----
-description: "Fan-out web research with adversarial claim verification and cited synthesis"
----
-# /mindforge:wf-deep-research
-
-Runs the **Deep Research** dynamic workflow.
-
-## Usage
-`/mindforge:wf-deep-research <your research question>`
-
-## What it does
-- **Scope**: Decomposes your question into 5 independent search angles
-- **Search**: 5 parallel web search agents, one per angle (~30s)
-- **Fetch**: Deduplicates URLs, fetches top 15 sources, extracts falsifiable claims
-- **Verify**: 3-vote adversarial verification per claim — 2/3 refutes kills a claim
-- **Synthesize**: Merges confirmed findings, ranks by confidence, cites all sources
-
-## Running
-
-Invoke via Claude Code's Workflow tool:
-
-```
-Workflow({
-  scriptPath: ".mindforge/dynamic-workflows/scripts/deep-research.js",
-  args: "<your input>"
-})
-```
-
-Or discover via CLI:
-```bash
-node bin/mindforge-cli.js workflow info deep-research
-```

package/.claude/commands/mindforge/wf-deep-research.md

@@ -1,32 +0,0 @@
----
-description: "Fan-out web research with adversarial claim verification and cited synthesis"
----
-# /mindforge:wf-deep-research
-
-Runs the **Deep Research** dynamic workflow.
-
-## Usage
-`/mindforge:wf-deep-research <your research question>`
-
-## What it does
-- **Scope**: Decomposes your question into 5 independent search angles
-- **Search**: 5 parallel web search agents, one per angle (~30s)
-- **Fetch**: Deduplicates URLs, fetches top 15 sources, extracts falsifiable claims
-- **Verify**: 3-vote adversarial verification per claim — 2/3 refutes kills a claim
-- **Synthesize**: Merges confirmed findings, ranks by confidence, cites all sources
-
-## Running
-
-Invoke via Claude Code's Workflow tool:
-
-```
-Workflow({
-  scriptPath: ".mindforge/dynamic-workflows/scripts/deep-research.js",
-  args: "<your input>"
-})
-```
-
-Or discover via CLI:
-```bash
-node bin/mindforge-cli.js workflow info deep-research
-```