mindforge-cc 11.9.0 → 11.9.1

package/RELEASENOTES.md

@@ -1,5 +1,27 @@
 # Release Notes
 
+## v11.9.0 — 2026-07-27 — Bedrock Provider + Full Dry-Run Audit
+
+### What's New
+Added an AWS Bedrock provider and completed a full exhaustive dry-run audit of all 224 commands, 216 personas, and 355 skills.
+
+### Fixes
+- `bin/models/bedrock-provider.js`: AWS Bedrock provider with Anthropic/Bedrock config switch and base64 credential decoding
+- Resolved phantom-tool references ported unmodified from a different agent harness across 40 personas and ~40 skills (`Context7`/`search_web`/`read_url_content` → `WebFetch`/`WebSearch`; `CommandStatus`/`ReadTerminal`/`terminal`/`read_file`/`write_file`/`search_files`/`patch` → real Claude Code tool names; `delegate_task` → `Agent`; `kanban_create` → `TaskCreate`)
+- Repointed 21 broken `@.agent/references/` and `@.agent/templates/` path references to their real `docs/References/` and `docs/Templates/*/` locations
+- Copied in missing companion `scripts/`/`references/`/`templates/` assets for 17 skills that referenced files never carried over during porting
+- Fixed hardcoded broken paths (`~/.hermes/skills`, `/home/teknium/...`, `HERMES_HOME`)
+- Fixed a markdown fence-nesting bug in `code-tour` and 4 truncated heredoc strings in `github-code-review`
+- Removed banned single-word triggers (`test`, `tests`) from `testing-standards`
+- CI: build SDK before test suite; run Verification before Health Check in execution-plane
+- Security: patched hono and picomatch HIGH-severity vulnerabilities
+
+### Stats
+- Dry-run audit: 224 commands, 216 personas, 355 skills reviewed
+- Phantom-tool references resolved: 40 personas, ~40 skills
+
+---
+
 ## v11.8.3 — 2026-07-01 — Autopsy Fixes Stable Release
 
 ### What's New

package/SECURITY.md

@@ -1,6 +1,6 @@
 # Security Policy
 
-> **Current version:** 11.8.3 | **npm audit:** 0 vulnerabilities across root, sdk, mcp-server
+> **Current version:** 11.9.0 | **npm audit:** 0 vulnerabilities across root, sdk, mcp-server
 
 ## Supported Versions
 

package/bin/install.js

@@ -123,7 +123,7 @@ function printHelp() {
     npx mindforge-cc@latest --all --global        Global install for all runtimes
 
   ${c.bold('DOCUMENTATION')}
-    ${c.dim('https://github.com/mindforge-dev/mindforge')}
+    ${c.dim('https://github.com/sairam0424/MindForge')}
     ${c.dim('docs/enterprise-setup.md (after install)')}
 \n`);
 }

package/bin/updater/changelog-fetcher.js

@@ -7,7 +7,15 @@
 
 const { compareSemver } = require('./version-comparator');
 
-const CHANGELOG_URL = 'https://raw.githubusercontent.com/mindforge-dev/mindforge/main/CHANGELOG.md';
+const REPO = 'sairam0424/MindForge';
+const CHANGELOG_URL = `https://raw.githubusercontent.com/${REPO}/main/CHANGELOG.md`;
+const CHANGELOGS_ARCHIVE_BASE = `https://raw.githubusercontent.com/${REPO}/main/changelogs`;
+
+// Root CHANGELOG.md ships as a rolling-window aggregator (newest ~10 versions,
+// full '## [x.y.z]' headers). Older versions live one-per-file under changelogs/.
+// Cap the per-version fallback fetch loop so an ancient fromVersion can't trigger
+// unbounded GitHub requests.
+const MAX_ARCHIVE_FETCHES = 20;
 
 /**
  * Fetch CHANGELOG.md and extract entries between fromVersion and toVersion.
@@ -16,13 +24,36 @@ const CHANGELOG_URL = 'https://raw.githubusercontent.com/mindforge-dev/mindforge
 async function fetchChangelog(fromVersion, toVersion) {
   const raw = await fetchRaw();
   if (!raw) return null;
-  return extractEntries(raw, fromVersion, toVersion);
+
+  const sections = extractSections(raw, fromVersion, toVersion);
+  if (sections.length) {
+    return sections.map(s => s.lines.join('\n').trimEnd()).join('\n\n');
+  }
+
+  // Empty result can mean either "nothing changed" or "fromVersion predates the
+  // rolling window now kept in root CHANGELOG.md". Only fall back to the
+  // per-version archive when fromVersion is genuinely older than the oldest
+  // version still present in the fetched root file.
+  const oldestInWindow = oldestVersionIn(raw);
+  if (oldestInWindow && compareSemver(fromVersion, oldestInWindow) < 0) {
+    return fetchFromArchive(fromVersion, toVersion);
+  }
+
+  return null;
 }
 
 async function fetchRaw() {
+  return fetchUrl(CHANGELOG_URL);
+}
+
+async function fetchVersionFile(version) {
+  return fetchUrl(`${CHANGELOGS_ARCHIVE_BASE}/v${version}.md`);
+}
+
+function fetchUrl(url) {
   const https = require('https');
   return new Promise(resolve => {
-    const req = https.get(CHANGELOG_URL, { timeout: 8000 }, res => {
+    const req = https.get(url, { timeout: 8000 }, res => {
       if (res.statusCode !== 200) { resolve(null); return; }
       let body = '';
       res.setEncoding('utf8');
@@ -34,10 +65,62 @@ async function fetchRaw() {
   });
 }
 
+/**
+ * Fallback path: fromVersion predates the rolling window kept in root
+ * CHANGELOG.md. Fetch the archive's version index (the authoritative list of
+ * every released version — avoids guessing nonexistent versions by walking
+ * semver digits), select the versions in range, fetch each one's
+ * changelogs/vX.Y.Z.md, and concatenate the ones that exist. Capped at
+ * MAX_ARCHIVE_FETCHES, newest-first-trimmed (closest to toVersion kept).
+ */
+async function fetchFromArchive(fromVersion, toVersion) {
+  const versions = await enumerateVersions(fromVersion, toVersion);
+  if (!versions.length) return null;
+
+  const results = await Promise.all(versions.map(v => fetchVersionFile(v)));
+  const parts = results.filter(Boolean).map(body => body.replace(/^# Changelog\s*\n+/, '').trimEnd());
+  return parts.length ? parts.join('\n\n') : null;
+}
+
+/**
+ * Fetch changelogs/index.json (authoritative version list) and return every
+ * version strictly after fromVersion and up to and including toVersion,
+ * oldest-first, capped at MAX_ARCHIVE_FETCHES (keeping the versions nearest
+ * toVersion when the range exceeds the cap, since those are most relevant to
+ * the user's update).
+ */
+async function enumerateVersions(fromVersion, toVersion) {
+  const indexRaw = await fetchUrl(`${CHANGELOGS_ARCHIVE_BASE}/index.json`);
+  if (!indexRaw) return [];
+
+  let versions;
+  try { versions = JSON.parse(indexRaw).versions; } catch { return []; }
+  if (!Array.isArray(versions)) return [];
+
+  const inRange = versions.filter(
+    v => compareSemver(v, fromVersion) > 0 && compareSemver(v, toVersion) <= 0
+  );
+  // index.json is newest-first; keep the newest MAX_ARCHIVE_FETCHES, then
+  // restore oldest-first order for chronological concatenation.
+  return inRange.slice(0, MAX_ARCHIVE_FETCHES).reverse();
+}
+
+function oldestVersionIn(changelog) {
+  let oldest = null;
+  for (const line of changelog.split('\n')) {
+    const vMatch = line.match(/^## \[?v?(\d+\.\d+\.\d+)/);
+    if (vMatch) {
+      const v = vMatch[1];
+      if (!oldest || compareSemver(v, oldest) < 0) oldest = v;
+    }
+  }
+  return oldest;
+}
+
 /**
  * Parse CHANGELOG.md and extract version sections in range (from, to].
  */
-function extractEntries(changelog, fromVersion, toVersion) {
+function extractSections(changelog, fromVersion, toVersion) {
   const sections = [];
   let current = null;
 
@@ -54,9 +137,16 @@ function extractEntries(changelog, fromVersion, toVersion) {
   }
   if (current) sections.push(current);
 
+  return sections;
+}
+
+// Back-compat named export: some callers/tests may reference extractEntries
+// directly with the original (string | null) return contract.
+function extractEntries(changelog, fromVersion, toVersion) {
+  const sections = extractSections(changelog, fromVersion, toVersion);
   return sections.length
     ? sections.map(s => s.lines.join('\n').trimEnd()).join('\n\n')
     : null;
 }
 
-module.exports = { fetchChangelog };
+module.exports = { fetchChangelog, extractEntries };

package/bin/utils/readiness-gate.js

@@ -109,10 +109,10 @@ function releaseReadinessChecks(root) {
     },
     {
       id: 'changelog',
-      label: 'CHANGELOG.md present',
+      label: 'CHANGELOG.md present and has an entry for the current version',
       points: 2,
-      pass: fileExists(root, 'CHANGELOG.md'),
-      fix: 'Add/update CHANGELOG.md.',
+      pass: fileExists(root, 'CHANGELOG.md') && Boolean(pkgVersion) && safeRead(root, 'CHANGELOG.md').includes(pkgVersion),
+      fix: `Add/update CHANGELOG.md — no entry found for version ${pkgVersion || '?'} in its rolling window. If this version has aged out of the root file, ensure changelogs/v${pkgVersion || '?'}.md exists and was prepended to CHANGELOG.md's rolling window before release.`,
     },
     {
       id: 'security-policy',

package/changelogs/README.md

@@ -0,0 +1,109 @@
+# MindForge Changelog Archive
+
+Complete, unabridged version history for MindForge — every release from [v0.1.0](./v0.1.0.md) through [v11.9.1](./v11.9.1.md), one file per version.
+
+The root [CHANGELOG.md](../CHANGELOG.md) keeps only the newest versions inline as a rolling-window aggregator (for `bin/updater/changelog-fetcher.js` regex compatibility); this index is the full historical record.
+
+## All versions (newest first)
+
+| Version | Summary |
+|---|---|
+| [v11.9.1](./v11.9.1.md) | Packaging Fix: Restore Missing Workflow Commands |
+| [v11.9.0](./v11.9.0.md) | Bedrock Provider + Full Dry-Run Audit |
+| [v11.8.3](./v11.8.3.md) | Autopsy Fixes Stable Release |
+| [v11.8.2](./v11.8.2.md) | Clean Stable Release |
+| [v11.8.1](./v11.8.1.md) | First Stable Release |
+| [v11.8.0](./v11.8.0.md) | Workflow Forge II |
+| [v11.7.1](./v11.7.1.md) | Workflow Forge (patch) |
+| [v11.7.0](./v11.7.0.md) | Workflow Forge |
+| [v11.6.0](./v11.6.0.md) | Skill Forge |
+| [v11.5.1](./v11.5.1.md) | Robustness + governance-gate patch (Wave 8) |
+| [v11.5.0](./v11.5.0.md) | Governance hardening + autonomous-engine repair (Waves 4–7) |
+| [v11.4.0](./v11.4.0.md) | Claude Code plugin distribution |
+| [v11.3.1](./v11.3.1.md) | Packaging hotfix (commands, skills & framework now ship) |
+| [v11.3.0](./v11.3.0.md) | "Legion" (154-subagent expansion) |
+| [v11.2.1](./v11.2.1.md) | "Hardening" (security & integrity audit remediation) |
+| [v11.2.0](./v11.2.0.md) | "Verification & Trust" |
+| [v11.1.0](./v11.1.0.md) | "Beast Mode" |
+| [v11.0.1](./v11.0.1.md) | "Stability Patch" |
+| [v11.0.0](./v11.0.0.md) | "Sovereign Stability" |
+| [v10.7.0](./v10.7.0.md) | "Platform Sovereign" |
+| [v10.6.0](./v10.6.0.md) | "Data Alchemy" |
+| [v10.5.0](./v10.5.0.md) | "AI Frontier" |
+| [v10.4.0](./v10.4.0.md) | "Cross-Platform" |
+| [v10.3.0](./v10.3.0.md) | "Leader's Edge" |
+| [v10.2.0](./v10.2.0.md) | "Industry Forge" |
+| [v10.1.1](./v10.1.1.md) | "Scale & Edge" |
+| [v10.1.0](./v10.1.0.md) | "Strategic Intelligence" |
+| [v10.0.9](./v10.0.9.md) | "Full Spectrum" |
+| [v10.0.8](./v10.0.8.md) | "Deep Patterns" |
+| [v10.0.7](./v10.0.7.md) | "Meta Engineer" |
+| [v10.0.6](./v10.0.6.md) | "Complete Arsenal" |
+| [v10.0.5](./v10.0.5.md) | "Forge Master" |
+| [v10.0.4](./v10.0.4.md) | "Santa's Eval" |
+| [v10.0.3](./v10.0.3.md) | "Council Awakens" |
+| [v10.0.2](./v10.0.2.md) | "Persona Expansion" |
+| [v10.0.0](./v10.0.0.md) | "Bedrock Fortified" |
+| [v9.0.0](./v9.0.0.md) | Bedrock Meridian — Pillars XXIV-XXVIII |
+| [v8.2.1](./v8.2.1.md) | Stability & Cleanup |
+| [v8.2.0](./v8.2.0.md) | Autonomous SRE Layer — Pillars XX-XXIII |
+| [v8.1.0](./v8.1.0.md) | Sovereign Identity — Pillar XIX |
+| [v8.0.0](./v8.0.0.md) | Celestial Orchestration - SQLite & FMS |
+| [v7.0.0](./v7.0.0.md) | Sovereign Intelligence - Post-Quantum & Homing |
+| [v6.7.0](./v6.7.0.md) | Federated Intelligence Mesh - FIM Expansion |
+| [v6.6.0](./v6.6.0.md) | Self-Corrective Synthesis - SCS |
+| [v6.5.0](./v6.5.0.md) | Reason-Source Alignment - RSA |
+| [v6.4.0](./v6.4.0.md) | Context Entropy Guard - CEG |
+| [v6.3.0](./v6.3.0.md) | Intelligence-Drift Coupling - IDC |
+| [v6.2.0](./v6.2.0.md) | Sovereign Enterprise Stable |
+| [v6.2.0-alpha](./v6.2.0-alpha.md) | Sovereign Pillars XI & XII |
+| [v6.1.0-alpha](./v6.1.0-alpha.md) | Sovereign Intelligence |
+| [v6.0.0-alpha](./v6.0.0-alpha.md) | The v6.0.0-alpha release introduces the final pillar of the MindForge Enterprise architect |
+| [v5.9.0](./v5.9.0.md) | - Pillar VII: Nexus Steering (Hierarchical Intent Orchestration). |
+| [v5.8.0](./v5.8.0.md) | - Pillar VI: Sovereign Reason Enclaves (ZK-Proof Audit Trails). |
+| [v5.7.0](./v5.7.0.md) | - Pillar V: Multi-Cloud Arbitrage (Task-to-Model Affinity Routing). |
+| [v5.6.0](./v5.6.0.md) | - Pillar IV: Supply Chain Trust (Binary Runtime Attestation). |
+| [v5.5.0](./v5.5.0.md) | - Pillar III: Predictive Agentic Reliability (Reasoning Entropy Monitoring). |
+| [v5.4.0](./v5.4.0.md) | Enterprise-Grade Hardening — 2026-03-28 |
+| [v5.3.0](./v5.3.0.md) | Dynamic Blast Radius — 2026-03-28 |
+| [v5.2.0](./v5.2.0.md) | Semantic Vector Consensus — 2026-03-28 |
+| [v5.1.0](./v5.1.0.md) | The Enterprise Expansion — 2026-03-28 |
+| [v5.0.0-alpha.2](./v5.0.0-alpha.2.md) | Predictive Reliability & Supply Chain Trust — 2026-03-28 |
+| [v5.0.0-alpha.1](./v5.0.0-alpha.1.md) | Federated Intelligence & Policy Orchestration — 2026-03-28 |
+| [v4.3.0](./v4.3.0.md) | Enterprise Mesh & Proactive Equilibrium — 2026-03-28 |
+| [v4.1.0](./v4.1.0.md) | MindForge Nexus (Observability & Tracing) — 2026-03-27 |
+| [v4.0.0](./v4.0.0.md) | Dynamic Multi-Agent Swarms (Agentic Mesh) — 2026-03-27 |
+| [v3.0.0](./v3.0.0.md) | Reactive Autonomous Intelligence — 2026-03-27 |
+| [v2.6.0](./v2.6.0.md) | Temporal Vision (Time-Travel Debugging) — 2026-03-27 |
+| [v2.5.0](./v2.5.0.md) | Local-First Knowledge Graph (RAG 2.0) — 2026-03-27 |
+| [v2.4.0](./v2.4.0.md) | The Core Pillars Optimization — 2026-03-27 |
+| [v2.3.5](./v2.3.5.md) | Intelligent Asset Sync & Merge — 2026-03-26 |
+| [v2.3.4](./v2.3.4.md) | Architectural Sync & Zero-GSD Purge — 2026-03-25 |
+| [v2.3.3](./v2.3.3.md) | Payload Cleanup & Enterprise Pruning — 2026-03-25 |
+| [v2.3.2](./v2.3.2.md) | Asset Sync Repair — 2026-03-25 |
+| [v2.1.2](./v2.1.2.md) | *Status: V5.2.0 Semantic Consensus Implemented & Verified (2026-03-28)* |
+| [v2.1.1](./v2.1.1.md) | Core Migration Finalization — 2026-03-25 |
+| [v2.1.0](./v2.1.0.md) | The Specialized Expansion — 2026-03-24 |
+| [v2.0.0](./v2.0.0.md) | The Autonomous Enterprise — 2026-03-24 |
+| [v2.0.0-alpha.12](./v2.0.0-alpha.12.md) | Self-Building Skills Platform — 2026-03-24 |
+| [v2.0.0-alpha.11](./v2.0.0-alpha.11.md) | Persistent Knowledge Graph — 2026-03-24 |
+| [v2.0.0-alpha.10](./v2.0.0-alpha.10.md) | Skill Installation & Validation CLI — 2026-03-24 |
+| [v2.0.0-alpha.9](./v2.0.0-alpha.9.md) | Verified Antigravity Compatibility — 2026-03-23 |
+| [v2.0.0-alpha.8](./v2.0.0-alpha.8.md) | Antigravity Visibility Fix — 2026-03-23 |
+| [v2.0.0-alpha.7](./v2.0.0-alpha.7.md) | Day 12: Real-time Observability Dashboard — 2026-03-22 |
+| [v2.0.0-alpha.4](./v2.0.0-alpha.4.md) | Day 11: Persistent Knowledge Graph (Long-Term Memory) — 2026-03-22 |
+| [v2.0.0-alpha.3](./v2.0.0-alpha.3.md) | Day 10: Multi-Model Intelligence Layer — 2026-03-22 |
+| [v2.0.0-alpha.2](./v2.0.0-alpha.2.md) | Day 9: Visual QA Engine (Browser Runtime Engine) — 2026-03-22 |
+| [v2.0.0-alpha.1](./v2.0.0-alpha.1.md) | Day 8: Autonomous Execution Engine — 2026-03-22 |
+| [v1.0.5](./v1.0.5.md) | v1.0.5 Minimal Install Option — 2026-03-22 |
+| [v1.0.4](./v1.0.4.md) | v1.0.4 Antigravity Install Fix — 2026-03-22 |
+| [v1.0.3](./v1.0.3.md) | v1.0.3 Antigravity Agents Folder — 2026-03-22 |
+| [v1.0.2](./v1.0.2.md) | v1.0.2 CLI Bin Fix — 2026-03-22 |
+| [v1.0.1](./v1.0.1.md) | v1.0.1 Installer and Packaging Fixes — 2026-03-22 |
+| [v1.0.0](./v1.0.0.md) | v1.0.0 First Stable Public Release — 2026-03-22 |
+| [v0.6.0](./v0.6.0.md) | Day 6 Distribution Platform |
+| [v0.5.0](./v0.5.0.md) | Day 5 Intelligence Layer |
+| [v0.4.0](./v0.4.0.md) | Day 4 Enterprise Integrations and Governance |
+| [v0.3.0](./v0.3.0.md) | Day 3 Skills Platform |
+| [v0.2.0](./v0.2.0.md) | Day 2 Wave Engine |
+| [v0.1.0](./v0.1.0.md) | Day 1 Foundation |

package/changelogs/index.json

@@ -0,0 +1,103 @@
+{
+  "versions": [
+    "11.9.1",
+    "11.9.0",
+    "11.8.3",
+    "11.8.2",
+    "11.8.1",
+    "11.8.0",
+    "11.7.1",
+    "11.7.0",
+    "11.6.0",
+    "11.5.1",
+    "11.5.0",
+    "11.4.0",
+    "11.3.1",
+    "11.3.0",
+    "11.2.1",
+    "11.2.0",
+    "11.1.0",
+    "11.0.1",
+    "11.0.0",
+    "10.7.0",
+    "10.6.0",
+    "10.5.0",
+    "10.4.0",
+    "10.3.0",
+    "10.2.0",
+    "10.1.1",
+    "10.1.0",
+    "10.0.9",
+    "10.0.8",
+    "10.0.7",
+    "10.0.6",
+    "10.0.5",
+    "10.0.4",
+    "10.0.3",
+    "10.0.2",
+    "10.0.0",
+    "9.0.0",
+    "8.2.1",
+    "8.2.0",
+    "8.1.0",
+    "8.0.0",
+    "7.0.0",
+    "6.7.0",
+    "6.6.0",
+    "6.5.0",
+    "6.4.0",
+    "6.3.0",
+    "6.2.0",
+    "6.2.0-alpha",
+    "6.1.0-alpha",
+    "6.0.0-alpha",
+    "5.9.0",
+    "5.8.0",
+    "5.7.0",
+    "5.6.0",
+    "5.5.0",
+    "5.4.0",
+    "5.3.0",
+    "5.2.0",
+    "5.1.0",
+    "5.0.0-alpha.2",
+    "5.0.0-alpha.1",
+    "4.3.0",
+    "4.1.0",
+    "4.0.0",
+    "3.0.0",
+    "2.6.0",
+    "2.5.0",
+    "2.4.0",
+    "2.3.5",
+    "2.3.4",
+    "2.3.3",
+    "2.3.2",
+    "2.1.2",
+    "2.1.1",
+    "2.1.0",
+    "2.0.0",
+    "2.0.0-alpha.12",
+    "2.0.0-alpha.11",
+    "2.0.0-alpha.10",
+    "2.0.0-alpha.9",
+    "2.0.0-alpha.8",
+    "2.0.0-alpha.7",
+    "2.0.0-alpha.4",
+    "2.0.0-alpha.3",
+    "2.0.0-alpha.2",
+    "2.0.0-alpha.1",
+    "1.0.5",
+    "1.0.4",
+    "1.0.3",
+    "1.0.2",
+    "1.0.1",
+    "1.0.0",
+    "0.6.0",
+    "0.5.0",
+    "0.4.0",
+    "0.3.0",
+    "0.2.0",
+    "0.1.0"
+  ]
+}

package/changelogs/v0.1.0.md

@@ -0,0 +1,21 @@
+# Changelog
+
+## [0.1.0] — Day 1 Foundation
+
+### Added (v0.1.0)
+
+- Core directory scaffold
+- CLAUDE.md agent entry point
+- 8 agent persona definitions
+- 5 initial core skill packs
+- 6 slash commands: help, init-project, plan-phase, execute-phase, verify-phase, ship
+- npm installer (npx mindforge-cc)
+- State management: STATE.md, HANDOFF.json
+- Org context templates: ORG.md, CONVENTIONS.md, SECURITY.md, TOOLS.md
+persona definitions
+- 5 initial core skill packs
+- 6 slash commands: help, init-project, plan-phase, execute-phase, verify-phase, ship
+- npm installer (npx mindforge-cc)
+- State management: STATE.md, HANDOFF.json
+- Org context templates: ORG.md, CONVENTIONS.md, SECURITY.md, TOOLS.md
+

package/changelogs/v0.2.0.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [0.2.0] — Day 2 Wave Engine
+
+### Added (v0.2.0)
+
+- Wave-based parallel execution engine
+- Dependency parser and wave grouper
+- Context injector with minimum-context principle
+- Compaction protocol (automated at 70% context)
+- AUDIT.jsonl append-only pipeline with full schema
+- 4 new commands: /mindforge:next, /mindforge:quick, /mindforge:status, /mindforge:debug
+
+---
+

package/changelogs/v0.3.0.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## [0.3.0] — Day 3 Skills Platform
+
+### Added (v0.3.0)
+
+- 5 new core skill packs: performance, accessibility, data-privacy,
+  incident-response, database-patterns
+- Skills distribution engine: registry, loader, versioning, conflict resolver
+- 5 new commands: /mindforge:skills, /mindforge:review, /mindforge:security-scan,
+  /mindforge:map-codebase, /mindforge:discuss-phase
+- Persona customisation override system (project and phase level)
+- Skills Manifest (MANIFEST.md) with tier-based registration
+- Skills Authoring Guide for creating org and project skills
+- Injection guard for Tier 2/3 skill validation
+
+### Changed (v0.3.0)
+
+- execute-phase now uses multi-tier skills loading
+- plan-phase now reads CONTEXT.md from discuss-phase if available
+- CLAUDE.md updated with skills platform and new command awareness
+
+### Fixed (v0.3.0)
+
+- cursor pagination correctness in database-patterns skill (compound cursor)
+
+---
+

package/changelogs/v0.4.0.md

@@ -0,0 +1,29 @@
+# Changelog
+
+## [0.4.0] — Day 4 Enterprise Integrations and Governance
+
+### Added (v0.4.0)
+
+- enterprise integration specs for Jira, Confluence, Slack, GitHub, and GitLab
+- integration connection manager with credential hygiene and retry guidance
+- governance layer: change classification, approvals, and compliance gates
+- multi-developer handoff and session merger protocols
+- 6 new commands: `/mindforge:audit`, `/mindforge:milestone`,
+  `/mindforge:complete-milestone`, `/mindforge:approve`,
+  `/mindforge:sync-jira`, `/mindforge:sync-confluence`
+- Day 4 test suites: `tests/integrations.test.js`, `tests/governance.test.js`
+- enterprise setup and governance guide docs
+
+### Changed (v0.4.0)
+
+- README and CLAUDE entrypoint updated for enterprise governance workflows
+- audit schema expanded for integration and governance events
+
+### Fixed (v0.4.0)
+
+- Jira transition handling now documents dynamic transition lookup instead of
+  hardcoded IDs
+- governance tiering now covers code-content matches and audit-history escalation
+
+---
+

package/changelogs/v0.5.0.md

@@ -0,0 +1,34 @@
+# Changelog
+
+## [0.5.0] — Day 5 Intelligence Layer
+
+### Added (v0.5.0)
+
+- framework health engine with 7-category diagnostics and safe auto-repair guidance
+- smart context compaction with Level 1/2/3 protocols and structured handoff extraction
+- phase difficulty scorer with weighted composite and task-granularity feedback
+- anti-pattern detection engine with false-positive controls for C01/B03/D01
+- skill gap analyzer for pre-planning capability coverage checks
+- team profile system and per-developer profile templates
+- metrics schema and quality tracker (`session`, `phase`, `skill usage`, `compaction quality`)
+- project constitution file: `MINDFORGE.md`
+- setup wizard modules: environment detection, idempotent config generation, interactive flow
+- 4 new commands: `/mindforge:health`, `/mindforge:retrospective`,
+  `/mindforge:profile-team`, `/mindforge:metrics`
+- 3 ADRs: ADR-012, ADR-013, ADR-014
+- new Day 5 test suites: `tests/intelligence.test.js`, `tests/metrics.test.js`
+
+### Changed (v0.5.0)
+
+- CLAUDE runtime contract now includes Day 5 intelligence behavior and
+  non-overridable MINDFORGE enforcement
+- package entrypoint now points to setup wizard
+
+### Fixed (v0.5.0)
+
+- AUDIT corruption handling now quarantines invalid lines instead of deleting entries
+- wizard reliability improvements: stdin TTY fallback, end-of-flow credential guidance,
+  and idempotent config replacement behavior
+
+---
+

package/changelogs/v0.6.0.md

@@ -0,0 +1,34 @@
+# Changelog
+
+## [0.6.0] — Day 6 Distribution Platform
+
+### Added (v0.6.0)
+
+- Public skills registry: `npx mindforge-skills install/publish/search` (npm-based)
+- Skill validator: 3-level validation schema (schema, content, quality)
+- MINDFORGE.md JSON Schema: validation with non-overridable field markers
+- MindForge CI mode: GitHub Actions / GitLab CI / Jenkins integration
+- GitHub Actions workflow: health, security, quality, AI review jobs
+- AI PR Review Engine: Claude API-powered code review with context loading
+- Monorepo/workspace support: npm/pnpm/Nx/Turborepo/Lerna detection
+- Cross-package planner: topological execution order for monorepo phases
+- @mindforge/sdk: TypeScript SDK with client, event stream, and command builders
+- SSE event stream: real-time progress events via Server-Sent Events
+- /mindforge:init-org — organisation-wide MindForge setup command
+- /mindforge:install-skill — install skill from public/private registry
+- /mindforge:publish-skill — publish skill to npm registry
+- /mindforge:pr-review — AI code review powered by Claude API
+- /mindforge:workspace — monorepo workspace management
+- /mindforge:benchmark — skill effectiveness benchmarking
+- 3 new ADRs: ADR-015 npm registry, ADR-016 CI timeout, ADR-017 localhost SDK
+
+### Hardened (v0.6.0)
+
+- Registry: TOCTOU-safe temp directory (chmod 700), tarball size verification
+- CI: timeout exits with code 0 (soft stop), clear Tier 3 block messages
+- SDK: localhost-only SSE binding, Linux inotify fallback
+- AI review: robust daily limit (parse error tolerant), file-based diff truncation
+- Monorepo: affected package detection uses manifest paths (not depth assumption)
+
+---
+

package/changelogs/v1.0.0.md

@@ -0,0 +1,60 @@
+# Changelog
+
+## [1.0.0] — v1.0.0 First Stable Public Release — 2026-03-22
+
+🎉 **MindForge v1.0.0 — Enterprise Agentic Framework — First Stable Release**
+
+Release published: v1.0.0 (GitHub Releases).
+
+Built over 7 focused sprints, MindForge transforms Claude Code and Antigravity
+from powerful-but-unstructured AI tools into production-grade engineering
+partners with full governance, observability, and enterprise integration.
+
+### What ships in v1.0.0
+
+- **36 commands** across 7 workflow categories
+- **10 core skill packs** with three-tier registry (Core/Org/Project)
+- **8 specialised agent personas** covering all engineering roles
+- **Wave-based parallel execution** with dependency graph and automatic compaction
+- **Enterprise integrations**: Jira, Confluence, Slack, GitHub, GitLab
+- **Three-tier governance**: Tier 1 (auto) / Tier 2 (peer review) / Tier 3 (compliance)
+- **Five non-bypassable compliance gates** (secret detection, CRITICAL findings, tests, CVEs, GDPR)
+- **Intelligence layer**: health engine, difficulty scorer, anti-pattern detector, team profiling
+- **Public skills registry**: npm-based `mindforge-skill-*` ecosystem
+- **CI/CD integration**: GitHub Actions, GitLab CI, Jenkins adapters
+- **@mindforge/sdk**: TypeScript SDK with client, event stream, and command builders
+- **Monorepo support**: npm/pnpm/Nx/Turborepo/Lerna workspace detection
+- **AI PR Review**: Claude API-powered code review with context loading
+- **Self-update mechanism**: version check, changelog diff, scope-preserving apply
+- **Version migration engine**: schema migration from v0.1.0 through v1.0.0
+- **Plugin system**: extensible via `mindforge-plugin-*` npm namespace
+- **Token usage optimiser**: profiling and efficiency strategies
+- **50-point production readiness checklist**: fully verified before this release
+
+**20 Architecture Decision Records** documenting every major design choice
+
+- **15 test suites** with 3× consecutive run requirement
+- **Complete reference documentation**: commands, security, ADR index, threat model
+
+### Stable interface contract (v1.0.0)
+
+See ADR-020. All 36 commands, HANDOFF.json schema, AUDIT event types,
+@mindforge/sdk exports, and plugin.json format are stable in 1.x.x.
+
+### Breaking changes from 0.6.0 (v1.0.0)
+
+- VERIFY_PASS_RATE_WARNING_THRESHOLD in MINDFORGE.md is now 0.0-1.0 (was 0-100)
+  Run `/mindforge:migrate` to auto-convert
+- AUDIT.jsonl session_id field is now required (auto-backfilled by migration)
+- HANDOFF.json plugin_api_version field required for plugin compatibility
+
+### Installation (v1.0.0)
+
+```bash
+npx mindforge-cc@latest
+# or
+npx mindforge-cc@1.0.0 --claude --global
+```
+
+---
+

package/changelogs/v1.0.1.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [1.0.1] — v1.0.1 Installer and Packaging Fixes — 2026-03-22
+
+### Fixed (v1.0.1)
+
+- Interactive setup now uses installer-core directly (no recursive wizard call).
+- Package bin entry corrected to use `mindforge-cc` → `bin/install.js`.
+
+### Changed (v1.0.1)
+
+- Added publish whitelist to reduce package size and exclude build-only files.
+
+---
+

package/changelogs/v1.0.2.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [1.0.2] — v1.0.2 CLI Bin Fix — 2026-03-22
+
+### Fixed (v1.0.2)
+
+- npm bin entry now uses a path format accepted by npm publish.
+
+---
+