mindforge-cc 11.8.1 → 11.8.2

package/.mindforge/config.json

@@ -1,11 +1,11 @@
 {
-  "version": "11.8.1",
+  "version": "11.8.2",
   "environment": "development",
   "governance": {
     "drift_threshold": 0.75,
     "critical_drift_threshold": 0.5,
     "res_threshold": 0.8,
-    "active_did": "did:mindforge:2666a4d8-1d9c-4736-b157-c75564ff9ef8"
+    "active_did": "did:mindforge:12d03f93-4306-463a-aa40-c82832a11f43"
   },
   "revops": {
     "market_registry": {

package/.mindforge/memory/sync-manifest.json

@@ -1,6 +1,6 @@
 {
   "pattern-library.jsonl": {
-    "lastSync": "2026-07-01T05:23:03.053Z",
+    "lastSync": "2026-07-01T06:53:59.643Z",
     "localCount": 1
   }
 }

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [11.8.2] — 2026-07-01 — Clean Stable Release
+
+### Fixes
+- `bin/installer-core.js`: Added main-guard — `health` command now produces full diagnostic output
+- `bin/mindforge-cli.js:185`: Fixed null-status bug — signal-killed child processes now exit with code 1 instead of 0
+- `bin/change-classifier.js`: Tier 2 branch now pushes descriptive reasons to reasons[] array
+- `sdk/tests/sdk.test.js:30`: Replaced hardcoded version "11.8.0" with dynamic package.json read
+- `tests/sdk-exports.test.js`: Fixed MODULE_NOT_FOUND path resolution
+- `README.md:7`: Updated "Latest: v11.8.0" header to "Latest: v11.8.1"
+
+### Improvements
+- `bin/spawn-agent.js --help`: Added v1.0 stub disclosure note to usage text
+- `bin/governance/ztai-manager.js`: Lazy-instantiate SecureEnclaveProvider — eliminates spurious Tier-3 warning on commands that do not use Tier-3 trust
+- `bin/review/cross-review-engine.js`: Added CLI entry point with --help, --diff, --phase, --context args
+- `tests/worktree-engine.test.js`: Added 90-second timeout override to prevent false parallel-runner timeout
+- ESLint: Resolved auto-fixable errors, lint stage now clean
+- Test coverage: Added tests/errors.test.js and tests/file-io.test.js to improve coverage toward 80% target
+
+---
+
 ## [11.8.1] — 2026-07-01 — First Stable Release
 
 ### Security

package/MINDFORGE.md

@@ -3,10 +3,10 @@
 ## 1. IDENTITY & VERSIONING
 
 [NAME]    = MindForge
-[VERSION] = 11.8.1
+[VERSION] = 11.8.2
 [STABLE]  = true
 [MODE]    = "Platform Sovereign"
-[REQUIRED_CORE_VERSION] = 11.8.1
+[REQUIRED_CORE_VERSION] = 11.8.2
 [SOVEREIGN_IDENTITY] = true
 [SRE_LAYER_ENABLED]  = true
 

package/README.md

@@ -4,7 +4,7 @@
 
 ---
 
-## Latest: v11.8.0
+## Latest: v11.8.1
 
 - **v11.8.0 — "Workflow Forge II".** Expands the Dynamic Workflow Library from 12 to 32 workflows across 5 tiers — adds a new **Beast tier** for compound 5-phase adversarial workflows (security-hardening, accessibility-audit, security-threat-model), plus 18 more across Dev/Ops/Intelligence/Research. 21 new `/mindforge:wf-*` commands. Total: 219 commands.
 - **v11.7.0 — "Workflow Forge".** Ships the first Dynamic Workflow Library — 12 pre-built multi-agent workflow scripts that run via Claude Code's `Workflow` tool with true parallel agent execution. Four tiers: Research (deep-research, competitive-analysis, tech-evaluation), Dev (code-audit, feature-planner, pr-review, tdd-sprint, refactor-plan), Ops (incident-response, release-prep), Intelligence (onboard-codebase, perf-optimize). 13 new `/mindforge:wf-*` commands. Total: 198 commands.

package/bin/change-classifier.js

@@ -75,6 +75,12 @@ function classify() {
     if (tier < 3) {
       if (diffFiles.length > 10 || diffFiles.some(f => f.endsWith('.js') || f.endsWith('.ts'))) {
         tier = 2; // Significant logic change
+        if (diffFiles.length > 10) {
+          reasons.push(`Large changeset: ${diffFiles.length} files modified`);
+        } else {
+          const jsFile = diffFiles.find(f => f.endsWith('.js') || f.endsWith('.ts'));
+          if (jsFile) reasons.push(`JavaScript/TypeScript file modified: ${jsFile}`);
+        }
       }
     }
 

package/bin/governance/ztai-manager.js

@@ -146,11 +146,32 @@ class QuantumSafeKeyProvider extends KeyProvider {
 class ZTAIManager {
   constructor() {
     this.agentRegistry = new Map(); // DID -> { publicKey, persona, tier, providerType }
-    this.providers = {
-      local: new LocalKeyProvider(),
-      enclave: new SecureEnclaveProvider(),
-      quantum: new QuantumSafeKeyProvider()
-    };
+    this._providers = {}; // lazily populated — see _getProvider()
+  }
+
+  /**
+   * Returns the key provider for the given providerType, constructing it on
+   * first use.  This defers SecureEnclaveProvider (and its Tier-3 console
+   * warning) until a Tier-3+ agent is actually registered, and defers
+   * QuantumSafeKeyProvider (and its `require('./quantum-crypto')`) until PQC
+   * is explicitly requested — so unrelated commands stay warning-free.
+   *
+   * @param {'local'|'enclave'|'quantum'} providerType
+   * @returns {KeyProvider}
+   */
+  _getProvider(providerType) {
+    if (!this._providers[providerType]) {
+      if (providerType === 'local') {
+        this._providers[providerType] = new LocalKeyProvider();
+      } else if (providerType === 'enclave') {
+        this._providers[providerType] = new SecureEnclaveProvider();
+      } else if (providerType === 'quantum') {
+        this._providers[providerType] = new QuantumSafeKeyProvider();
+      } else {
+        throw new Error(`Unknown provider type: ${providerType}`);
+      }
+    }
+    return this._providers[providerType];
   }
 
   /**
@@ -192,7 +213,7 @@ class ZTAIManager {
     const did = `did:mindforge:${uuid}`;
 
     const providerType = this._selectProvider(tier);
-    const provider = this.providers[providerType];
+    const provider = this._getProvider(providerType);
 
     const publicKeyPEM = await provider.generate(did);
 
@@ -221,7 +242,7 @@ class ZTAIManager {
     const agent = this.agentRegistry.get(did);
     if (!agent) throw new Error(`Agent not registered: ${did}`);
     
-    const provider = this.providers[agent.providerType];
+    const provider = this._getProvider(agent.providerType);
     return await provider.sign(did, data);
   }
 
@@ -245,7 +266,7 @@ class ZTAIManager {
     const agent = this.agentRegistry.get(did);
     if (!agent) throw new Error(`Agent not found: ${did}`);
     
-    const provider = this.providers[agent.providerType];
+    const provider = this._getProvider(agent.providerType);
     agent.publicKey = await provider.rotate(did);
     agent.rotatedAt = new Date().toISOString();
     return true;
@@ -254,7 +275,7 @@ class ZTAIManager {
   revokeAgent(did) {
     const agent = this.agentRegistry.get(did);
     if (agent) {
-      this.providers[agent.providerType].delete(did);
+      this._getProvider(agent.providerType).delete(did);
       this.agentRegistry.delete(did);
     }
   }

package/bin/installer-core.js

@@ -952,3 +952,8 @@ async function run(args) {
 }
 
 module.exports = { run, install, uninstall, RUNTIMES, generateEntryContent, SENSITIVE_EXCLUDE, MINDFORGE_DEV_EXCLUDE };
+
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  run(args).catch(err => { console.error(err.message); process.exit(1); });
+}

package/bin/mindforge-cli.js

@@ -182,7 +182,7 @@ const result = spawnSync('node', [scriptPath, ...finalArgs], {
   env: { ...process.env, MINDFORGE_CLI: 'true' }
 });
 
-process.exit(result.status || 0);
+process.exit(result.status != null ? result.status : (result.signal ? 1 : 0));
 
 /**
  * Levenshtein distance — dynamic programming edit distance between two strings.

package/bin/review/cross-review-engine.js

@@ -90,3 +90,22 @@ async function runCrossReview(params) {
 }
 
 module.exports = { runCrossReview, parseFindings: synthesizeFindings.parseFindings, extractVerdict };
+
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  const phase = args.find(a => a.startsWith('--phase='))?.split('=')[1] || 'full';
+  const diff = args.find(a => a.startsWith('--diff='))?.split('=')[1] || 'HEAD';
+  const context = args.find(a => a.startsWith('--context='))?.split('=')[1] || '';
+  if (args.includes('--help') || args.length === 0) {
+    console.log('MindForge PR Review — Cross-model review engine');
+    console.log('Usage: node bin/review/cross-review-engine.js [--diff=HEAD] [--phase=full] [--context=...]');
+    console.log('  --diff     Git ref or diff target (default: HEAD)');
+    console.log('  --phase    Review phase: full|security|quality|performance (default: full)');
+    console.log('  --context  Additional context string for the review');
+    process.exit(0);
+  }
+  console.log(`[MindForge PR Review] Starting ${phase} review of ${diff}...`);
+  runCrossReview({ phaseNum: phase, diff, context })
+    .then(result => { console.log(JSON.stringify(result, null, 2)); process.exit(0); })
+    .catch(err => { console.error('Review failed:', err.message); process.exit(1); });
+}

package/bin/spawn-agent.js

@@ -26,6 +26,7 @@ const SAFE_NAME_PATTERN = /^[A-Za-z0-9-_]+$/;
 if (!MODE || !TARGET) {
   console.error('❌ Usage: node bin/spawn-agent.js <mode> <target> [--dry-run]');
   console.error('   modes: identity | spawn | subagent');
+  console.error('   Note: spawn mode performs persona resolution only in v1.0 — actual agent dispatch requires Claude Code slash commands (/mindforge:auto or /mindforge:next)');
   process.exit(1);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mindforge-cc",
-  "version": "11.8.1",
+  "version": "11.8.2",
   "description": "MindForge \u2014 Sovereign Agentic Intelligence Framework. Sovereign Stability: Production-Hardened Agentic Intelligence (v11)",
   "bin": {
     "mindforge-cc": "bin/install.js",