mindforge-cc 11.9.0 → 11.9.1

package/changelogs/v11.3.0.md

@@ -0,0 +1,45 @@
+# Changelog
+
+## [11.3.0] - 2026-06-04 — "Legion" (154-subagent expansion)
+
+Imports the full VoltAgent `awesome-claude-code-subagents` collection (154 Claude-Code-native
+subagents across 10 categories) into MindForge, fully rebranded. Additive and
+backward-compatible — no existing persona, skill, or command changed behavior.
+
+### Added
+
+- **`subagents/` tree** — 154 specialized subagent definitions in 10 categories
+  (`01-core-development` … `10-research-analysis`), kept verbatim from upstream except
+  the rebrand and collision/functional fixes below. Agent bodies are unmodified prose.
+- **`.mindforge/imported-agents.jsonl`** — generated index (name → path → category → model →
+  description) and **`scripts/build-subagent-index.js`** to regenerate it deterministically.
+- **`bin/spawn-agent.js subagent <name>`** — third loader mode that resolves an imported
+  subagent via the index. Hardened with a strict name allowlist (`[A-Za-z0-9-_]`), exact
+  index-match resolution (never builds a path from input), and a `subagents/` containment
+  check — defense-in-depth path-traversal guards consistent with `BLOCK_ON_SECURITY`.
+- **Installer delivery** — `bin/installer-core.js` now installs the 154 subagents into the
+  runtime's native agents directory (`.claude/agents/`, via the new `agentsSubdir` runtime
+  config + `installSubagents()`), flattening the category tree (READMEs excluded) so Claude
+  Code auto-discovers them. Runs for both global and local scope; mirrored to `.claude/agents/`
+  for non-claude local runtimes. Shown in `--dry-run` and the payload manifest; `--uninstall`
+  removes only the imported set, never the user's own agents. The `.mindforge/imported-agents.jsonl`
+  index ships with `.mindforge/`, so the `subagent` loader mode also works post-install.
+- **`tests/subagent-import.test.js`** — asserts 154 indexed, every path exists, all 16
+  collisions renamed, no bare-name clash with personas, and the loader's traversal guards.
+
+### Changed (rebrand — VoltAgent → MindForge)
+
+- Plugin/marketplace metadata (`subagents/.claude-plugin/marketplace.json` + 10 category
+  `plugin.json`) renamed `voltagent-*` → `mindforge-*`, author → MindForge Team, URLs →
+  `github.com/sairam0424/MindForge`. Per-plugin versions preserved for upstream re-sync.
+  No live marketplace is published — metadata only.
+- 16 name collisions with existing hand-authored MindForge personas resolved with a `-cc`
+  suffix (`api-designer-cc`, `debugger-cc`, …); the original personas remain authoritative
+  for the bare names.
+- **agent-installer** fetch URLs repointed to `sairam0424/MindForge` under `subagents/`.
+- **design-bridge** VoltAgent design-md dependency replaced with a `<DESIGN_MD_SOURCE>`
+  placeholder + a needs-configuration notice (MindForge ships no design-md repo yet).
+- Dead VoltAgent Discord/sponsor links removed (no MindForge equivalent).
+- `package.json` `files` allowlist now ships `subagents/` + the index; README capability
+  line notes the 154 subagents.
+

package/changelogs/v11.3.1.md

@@ -0,0 +1,39 @@
+# Changelog
+
+## [11.3.1] - 2026-06-05 — Packaging hotfix (commands, skills & framework now ship)
+
+Critical fix for v11.3.0, where a too-narrow npm `files` allowlist silently dropped
+most of the product from the published tarball. Users who ran `npx mindforge-cc` got
+only hooks, personas, subagents, and three `.mindforge/` folders — **no slash commands,
+no skills, and an incomplete framework** — with no error (the installer skips any source
+absent from the tarball). v11.3.1 restores the full payload and adds a regression test
+so this class of bug cannot ship silently again.
+
+### Fixed
+
+- **npm `files` allowlist** (`package.json`) widened to ship what the installer reads:
+  `.claude/commands/` (174 slash commands), `.agent/mindforge/` + `.agent/forge/`,
+  `.agent/skills/` (73 skills), the entry `.claude/CLAUDE.md`, and the full `.mindforge/`
+  framework (`governance`, `integrations`, `intelligence`, `memory`, `metrics`, `models`,
+  `org`, `plugins`, `team` — previously only `engine`/`personas`/`skills` reached users).
+  Runtime state is explicitly **excluded** (`celestial.db`, `metrics/token-usage.jsonl`,
+  `memory/pattern-library.jsonl`) — `files` overrides `.npmignore`, so these are negated
+  in the allowlist itself.
+- **`.planning/` scaffolding now ships and installs** — sourced from the clean, generic
+  `examples/starter-project/.planning/` (never the framework repo's own live `.planning/`,
+  which holds dev state: `AUDIT.jsonl`, `slack-threads.json`, `jira-sync.json`). Added the
+  four missing starter templates (`ROADMAP.md`, `REQUIREMENTS.md`, `ARCHITECTURE.md`,
+  `RELEASE-CHECKLIST.md`) so the autonomous engine (`/mindforge:auto`, `:next`) has the
+  files it expects.
+- **`docs/References` / `docs/Templates` case-sensitivity bug** — the installer read
+  lowercase `docs/references`/`templates`, which "worked" on case-insensitive macOS but
+  silently missed on case-sensitive Linux/npm (manifest showed `REFERENCES 0 / TEMPLATES 0`).
+  Installer now reads the exact on-disk case and both dirs are allowlisted.
+
+### Added
+
+- **`tests/packaging-allowlist.test.js`** — packs the real tarball (`npm pack --dry-run
+  --json`) and asserts commands, skills, subagents, entry files, the full `.mindforge/`
+  framework, and `.planning/` templates all ship, while runtime DBs/telemetry do not.
+  Proven to fail under the broken v11.3.0 allowlist. Skips loudly if npm is unavailable.
+

package/changelogs/v11.4.0.md

@@ -0,0 +1,38 @@
+# Changelog
+
+## [11.4.0] - 2026-06-06 — Claude Code plugin distribution
+
+MindForge is now installable as a native **Claude Code plugin** from a marketplace, in
+addition to the `npx mindforge-cc` installer. This release ships the plugin tooling so
+both the GitHub plugin channel and the npm tarball stay coherent.
+
+### Added
+
+- **Plugin marketplace** (`.claude-plugin/marketplace.json` at the repo root) — users run
+  `/plugin marketplace add sairam0424/MindForge` then `/plugin install mindforge@mindforge`.
+  Lists 11 plugins: the comprehensive `mindforge` plugin + 10 à-la-carte subagent packs.
+- **Comprehensive `mindforge` plugin** (`plugins/mindforge/`) bundling the full surface:
+  174 commands, 154 subagents, 73 skills + a synthesized `mindforge-protocol` skill (the
+  CLAUDE.md operating directive, since a plugin-root CLAUDE.md isn't loaded as context),
+  and governance hooks (translated to Claude `PreToolUse`/`PostToolUse` events with
+  `${CLAUDE_PLUGIN_ROOT}`-relative paths).
+- **Bundled MindForge MCP server** — a self-contained esbuild single-file build
+  (`mcp/dist/index.js`, all deps inlined, no runtime `node_modules`) exposing 7 tools over
+  stdio: `mindforge_health`, `mindforge_status`, `mindforge_memory_query`,
+  `mindforge_memory_stats`, `mindforge_memory_find_related`, `mindforge_audit_log`
+  (read-only), and append-only `mindforge_memory_remember`. Scoped to the user's project
+  via `${CLAUDE_PROJECT_DIR}`; degrades gracefully when MindForge isn't set up.
+- **Generators** (single source of truth, drift-guarded): `build-plugin-marketplace.js`,
+  `build-subagent-plugins.js`, `build-mindforge-plugin.js`, `vendor-sdk-into-mcp.js`,
+  `fix-command-frontmatter.js`; new `mcp-server/` package with esbuild build.
+- **`tests/plugin-packaging.test.js`** (in `npm test`) — guards the generated plugin tree,
+  frontmatter validity, and MCP-bundle self-containment.
+
+### Fixed
+
+- Quoted YAML-unsafe `name`/`description` frontmatter across commands/agents/skills that
+  the plugin validator flagged (leading `-`/`@`, embedded `: `, trailing `:`) — these
+  silently loaded empty metadata. The npx installer inherits the fix.
+- Per-category subagent `plugin.json` `agents[]` now derived from on-disk files, fixing
+  stale bare names for the 16 collision-renamed (`-cc`) agents.
+

package/changelogs/v11.5.0.md

@@ -0,0 +1,77 @@
+# Changelog
+
+## [11.5.0] - 2026-06-11 — Governance hardening + autonomous-engine repair (Waves 4–7)
+
+This release bundles four waves of work: orchestration primitives, an **inert** manifest
+engine + the new instinct CLI + GAN harness personas, governance/security hardening, and a
+repair that makes the autonomous engine (`/mindforge:auto`) actually functional. Several
+items ship deliberately **inert** (scaffolding present, not wired into any live path) and
+are flagged as such below — they introduce **no behavior change yet**.
+
+### Added
+
+- **Instinct CLI** (`/mindforge:instinct`, `bin/learning/instinct-cli.js`) — deterministic,
+  no-LLM management of the JSONL instinct store: `list`, `export`, `import`,
+  `promote-candidates` (list + flag), and `prune`.
+- **Typed Inter-Agent Message Protocol** (`bin/autonomous/handoff-schema.js`) — five message
+  kinds (`task_handoff`, `query`, `response`, `completed`, `conflict`) with priority levels
+  (`low`/`normal`/`high`/`critical`) and message validation. Internal orchestration primitive.
+- **Manifest-driven install resolver** (`bin/installer/install-manifests.js`,
+  `.mindforge/manifests/install-*.json`) — profile-to-module expansion and dependency
+  detection. Ships **INERT**: the adapter wiring it into `bin/installer-core.js`'s live
+  `install()` path is deferred to a future PR. No behavior change.
+- **GAN-style harness personas** (`.mindforge/personas/gan-evaluator.md`, `gan-generator.md`,
+  `gan-planner.md`) — fully scoped and documented. Ships **INERT**: not wired to any live
+  command or automated workflow. No behavior change.
+- **Governance test coverage** — `tests/trust-verifier.test.js` (7 tests) and
+  `tests/rbac-manager.test.js` (8 tests) lock the fail-closed contracts for future
+  safety-critical governance changes.
+
+### Fixed
+
+- **SSRF import-URL guard** (`bin/learning/lib/ssrf-guard.js`) — closed an IPv6 link-local
+  bypass (`fe81`–`fe8f` reachable via string-prefix check) and a symlink path-traversal
+  bypass, using numeric bitmask validation and canonical-path checking before system-dir
+  validation.
+- **Federated EIS sync** (`bin/memory/eis-client.js`) — `getAuthHeader` no longer throws on
+  every call; it now registers a node identity via `ZTAI.registerAgent` and signs with
+  `ZTAI.signData`, restoring sync to non-localhost EIS endpoints.
+- **RBAC tier elevation** (`bin/governance/rbac-manager.js`) — `getRolesByTier` now fails
+  safely for unregistered agents (no thrown exception) and resolves agent tier via the
+  correct ZTAI API.
+- **Autonomous engine — wave crash** (`bin/autonomous/auto-runner.js`) — replaced ZTAI
+  singleton misuse (`getIdentity()`, non-existent) with `_getRunnerIdentity()` using the
+  real `registerAgent` API; `/mindforge:auto` no longer crashes on every wave.
+- **Autonomous policy gate — fail-open** (`bin/autonomous/auto-runner.js`) — the async
+  policy verdict is now `await`ed (`this.policyEngine.evaluate(intent)`); the per-wave gate
+  previously always allowed.
+- **Autonomous engine — fail-closed identity** (`bin/autonomous/auto-runner.js`) — if runner
+  identity cannot be established, the policy gate now denies and audits (`auto_mode_denied`)
+  instead of proceeding ungoverned.
+
+### Changed
+
+- **Instinct store schema** (`.mindforge/engine/instincts/instinct-schema.md`) — added
+  `project_id` (stable scope key) and `source` (`auto-capture`/`manual`/`imported`/
+  `observer`), plus origin-based confidence scoring: auto-capture starts at `0.3`, manual
+  at `0.7`.
+- **Cost-routing shadow mode** (`bin/revops/router-steering-v2.js`) — arbitrage steering now
+  respects `cost_routing.shadow_mode` (default `true`); in observe-only mode `steer()`
+  returns `{ shadow, authoritative: false }` with SHADOW vs LIVE logging.
+
+### Security
+
+- **Tier-3 approvals now fail closed** (`bin/governance/approve.js`) — approvals require GPG
+  verification and **throw before writing any record** when no GPG key is configured, unless
+  `MINDFORGE_ALLOW_UNVERIFIED_APPROVAL=1` is set; unverified approvals are marked
+  `verified: false`.
+- **Persona supply-chain scan** (`scripts/ci/validate-assets.js`) — persona asset validation
+  now detects dangerous invisible unicode (zero-width, bidi overrides, Unicode tags) across
+  `.mindforge/personas` to prevent ASCII-smuggling injection.
+- **Destructive-command detector** (`bin/security/trust-boundaries.js`) — `normalizeShell`
+  now strips bare `#` tokens after quote-stripping, blocking quoted-hash evasion (e.g.
+  `rm "#" -rf /`).
+- **Instinct import port allowlist** (`bin/learning/lib/ssrf-guard.js`) — `validateImportUrl`
+  enforces an `ALLOWED_IMPORT_PORTS` allowlist (`{'', '443'}`), blocking attempts to reach
+  internal services (Redis `:6379`, Mongo `:27017`, etc.) on otherwise-allowed public hosts.
+

package/changelogs/v11.5.1.md

@@ -0,0 +1,47 @@
+# Changelog
+
+## [11.5.1] - 2026-06-11 — Robustness + governance-gate patch (Wave 8)
+
+A fast-follow patch from a fresh adversarial audit of the shipped v11.5.0 tree.
+Hardens crash-prone JSON parsing in the autonomous/memory pipelines, closes a
+CI governance-gate gap, and tightens two security surfaces. No new features.
+
+### Fixed
+
+- **Crash-proof AUDIT.jsonl parsing** (`bin/memory/pillar-health-tracker.js`) —
+  `summarizePhase()` parsed every audit line with an unguarded `JSON.parse`, so a
+  single malformed/torn line crashed the knowledge-capture pipeline. Now parses
+  per-line in try/catch and skips bad lines.
+- **Crash-proof compaction capture** (`bin/memory/knowledge-capture.js`) — a
+  malformed `handoff.json` no longer throws out of `captureFromCompaction()`; it
+  logs and returns `[]`, mirroring the missing-file path.
+- **Resilient federated-sync stats** (`bin/memory/federated-sync.js`) — the two
+  unguarded `JSON.parse` calls on `sync-stats.json` (`handleSyncFailure`,
+  `resetFailures`) now fall back to `{failures:0}` on corruption, matching the
+  sibling `getLastSyncTimestamp` pattern.
+
+### Security
+
+- **CI Tier-3 governance gate now validates content** (`.github/workflows/control-plane.yml`)
+  — the gate counted approval files but never checked them; it now requires at
+  least one approval with `identity_verification.verified === true` and a
+  signature, and rejects any unverified/empty file. Completes the Wave-6
+  fail-closed `approve.js` work (a hand-committed empty approval no longer passes).
+- **Dashboard approval attribution** (`bin/dashboard/api-router.js`) —
+  `POST /api/approve/:id` no longer records the client-supplied `approver`
+  (forgeable audit identity); it attributes the action to a fixed authenticated
+  actor. The dashboard remains localhost-bound + token-gated.
+- **Destructive-command detector blocks Unix `truncate`** (`bin/security/trust-boundaries.js`)
+  — the SQL-only `truncate table` pattern missed `truncate -s 0 <path>` (in-place
+  file zeroing). Added a size-flag pattern so it is gated; benign uses stay allowed.
+- **CI Tier-3 gate accepts an explicitly-acknowledged unverified approval**
+  (`.github/workflows/control-plane.yml`, `bin/governance/approve.js`) — since this
+  repo has no GPG signing infra, the gate accepts an approval that is either
+  GPG-verified OR an opted-in `unverified_ack` record (`approve.js` under
+  `MINDFORGE_ALLOW_UNVERIFIED_APPROVAL=1`), while still rejecting bare/stale
+  `verified:false` files. Replaced the stale v11.4.0 approval with a fresh one.
+- **`uuid` dependency removed from `ads-engine`** (`bin/review/ads-engine.js`) — it
+  required the uninstalled `uuid` package, making `ads-engine` and (transitively)
+  `federated-sync` un-loadable in a clean install. Swapped to the built-in
+  `crypto.randomUUID()` (zero-native-deps); both modules now load.
+

package/changelogs/v11.6.0.md

@@ -0,0 +1,45 @@
+# Changelog
+
+## [11.6.0] - 2026-06-17 — Skill Forge
+
+Largest single skill expansion in MindForge's history. Adds 80 community-sourced skills across 8 engineering domains with zero external attribution in any committed file. 30 skills are promoted to the engine tier for automatic trigger-matching; 50 live in the extended tier for explicit activation. Three new slash commands complete the discovery surface.
+
+### Added
+
+- **Engine-tier skills (auto-trigger, `.mindforge/skills/`)** — 30 new skills activated automatically when task description matches trigger phrases:
+  - *Software development:* `systematic-debugging` (4-phase root-cause methodology), `test-driven-development` (RED-GREEN-REFACTOR), `plan` (implementation planning), `simplify-code`, `requesting-code-review`, `spike`, `subagent-driven-development`, `code-wiki`
+  - *DevOps & orchestration:* `kanban-orchestrator`, `kanban-worker` (multi-agent task routing)
+  - *GitHub workflows:* `github-code-review`, `github-pr-workflow`, `github-issues`, `codebase-inspection`
+  - *Research & intelligence:* `research-paper-writing`, `arxiv`, `osint-investigation`, `domain-intel`, `duckduckgo-search`, `scrapling`, `blogwatcher`
+  - *Creative:* `concept-diagrams` (SVG educational visuals), `creative-ideation`, `pixel-art`, `meme-generation`
+  - *Security:* `web-pentest` (authorized penetration testing), `oss-forensics`, `sherlock`
+  - *Data-science & note-taking:* `jupyter-live-kernel`, `obsidian`
+
+- **Extended-tier skills (explicit activation, `.agent/skills/`)** — 20 additional skills beyond the promoted 30:
+  - *Software development:* `node-inspect-debugger`, `python-debugpy`, `skill-authoring`, `rest-graphql-debug`
+  - *GitHub:* `github-auth`, `github-repo-management`
+  - *DevOps:* `docker-management`, `devops-cli`, `devops-watchers`, `pinggy-tunnel`, `s6-container-supervision`
+  - *Research:* `llm-wiki`, `polymarket`, `parallel-cli`
+  - *Security:* `godmode`, `1password-skill`
+  - *Creative:* `hyperframes`, `article-illustrator`, `comic-creator`, `video-orchestrator`
+
+- **3 new slash commands:**
+  - `/mindforge:systematic-debug` — 4-phase root-cause debugging (no fixes without RCA)
+  - `/mindforge:skill-tdd` — strict RED-GREEN-REFACTOR TDD enforcement
+  - `/mindforge:skills-index` — browseable catalog of all 153 skills grouped by category
+
+### Changed
+
+- `tests/install.test.js` — added `hermes-agent` to secret-scanner skip list (gitignored donor directory)
+- `CLAUDE.md` — new **Extended Skill Library** section documents both skill tiers, trigger mechanics, and bulk import pattern
+
+### Skill counts
+
+| Tier | Before | After |
+|---|---|---|
+| Engine tier (`.mindforge/skills/`) | 202 | 232 |
+| Extended tier (`.agent/skills/`) | 73 | 123 |
+| Slash commands | 174 | 177 |
+
+---
+

package/changelogs/v11.7.0.md

@@ -0,0 +1,30 @@
+# Changelog
+
+## [11.7.0] - 2026-06-23 — Workflow Forge
+
+First Dynamic Workflow Library for MindForge. Adds 12 pre-built multi-agent workflow scripts that users trigger via `/mindforge:wf-*` commands. Each workflow uses Claude Code's `Workflow` tool primitives (`parallel()`, `pipeline()`, `phase()`, `agent()`) for true fan-out concurrent agent execution with structured synthesis. Architecture follows adversarially-verified best practices: three-tier progressive disclosure, one-workflow-per-domain, predefined (not open-ended) patterns.
+
+### Added
+
+- **Dynamic Workflow Library (`.mindforge/dynamic-workflows/`)** — 12 self-contained multi-agent workflow scripts:
+  - *Research tier:* `deep-research` (5× parallel searches → 3-vote adversarial verify → cited synthesis), `competitive-analysis` (5× parallel angles → SWOT → positioning), `tech-evaluation` (5× dimension agents → scored matrix → recommendation)
+  - *Dev tier:* `code-audit` (3× parallel auditors → adversarial verify → risk report), `feature-planner` (brief → PRD → architecture → user stories pipeline), `pr-review` (4× parallel reviewers → consensus verdict), `tdd-sprint` (Spec → Red → Green → Refactor loop), `refactor-plan` (debt scan → risk-sort → safe sequence → plan)
+  - *Ops tier:* `incident-response` (4× parallel investigation → mitigation → RCA → postmortem), `release-prep` (tests → changelog → version bump → PR → announcement)
+  - *Intelligence tier:* `onboard-codebase` (map → domain → architecture → guided tour), `perf-optimize` (profile → 4× parallel bottleneck hunt → fix plan → benchmarks)
+- **13 new slash commands** — `/mindforge:wf-catalog` (browseable index) + 12 `/mindforge:wf-<name>` workflow commands
+- **CLI workflow subcommand** — `node bin/mindforge-cli.js workflow list|info|run <name>` for discovery and metadata access
+- **Workflow registry** — `index.json` (machine-readable) + `REGISTRY.md` (human-readable catalog) with tier, description, phases, and command for each workflow
+- **`tests/workflow-registry.test.js`** — validates registry consistency, script meta exports, command mirror parity, and frontmatter schema for all workflow commands
+
+### Summary
+
+| Tier | Workflows | Commands |
+|------|-----------|----------|
+| Research | 3 | `wf-deep-research`, `wf-competitive-analysis`, `wf-tech-evaluation` |
+| Dev | 4 | `wf-code-audit`, `wf-feature-planner`, `wf-pr-review`, `wf-tdd-sprint`, `wf-refactor-plan` |
+| Ops | 2 | `wf-incident-response`, `wf-release-prep` |
+| Intelligence | 2 | `wf-onboard-codebase`, `wf-perf-optimize` |
+| **Total** | **12** | **13 (including wf-catalog)** |
+
+---
+

package/changelogs/v11.7.1.md

@@ -0,0 +1,8 @@
+# Changelog
+
+## [11.7.1] - 2026-06-23 — Workflow Forge (patch)
+
+Patch release: adds `bin/parse-workflow-args.js` (slash command argument splitter, produced by the tdd-sprint E2E run) and resolves 2 high-severity npm vulnerabilities in the tmp/inquirer dependency chain. No feature changes; all 94 tests pass.
+
+---
+

package/changelogs/v11.8.0.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## [11.8.0] - 2026-06-24 — Workflow Forge II
+
+Expands the Dynamic Workflow Library from 12 to 33 workflows across 5 tiers, adding a new **Beast tier** for compound multi-phase multi-agent workflows with adversarial verification. 21 new workflows added. 92/92 tests pass.
+
+### Added
+
+- **Beast tier** (3 compound workflows, 5 phases, 8+ agents): `security-hardening` (5-angle OWASP parallel scout + 3-vote adversarial verify + STRIDE threat model + remediation roadmap), `accessibility-audit` (WCAG 2.2 6-principle parallel audit + 3-vote verify + remediation spec), `security-threat-model` (asset inventory + 6-parallel STRIDE + mitigations + CVSS scoring)
+- **Dev tier additions** (7): `test-coverage-gap`, `api-contract-test`, `mutation-testing`, `debug-detective`, `writer-reviewer`, `code-explainer`, `design-system-audit`
+- **Ops tier additions** (4): `database-migration`, `dependency-health`, `multi-repo-sync`, `cost-analysis`
+- **Intelligence tier additions** (3): `architecture-modernization`, `documentation-gen`, `api-migration`, `data-pipeline-validate` (4 total)
+- **Research tier additions** (3): `ai-model-eval`, `ux-heuristic-audit`, `competitive-teardown`
+- 21 new `/mindforge:wf-*` slash command pairs
+- Updated `wf-catalog` listing all 33 workflows across 5 tiers
+- `tests/workflow-registry.test.js` — `beast` added to valid tier allowlist
+
+---
+

package/changelogs/v11.8.1.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## [11.8.1] — 2026-07-01 — First Stable Release
+
+### Security
+- **mcp-server:** Patched hono to >=4.12.25 — fixes CORS credential reflection, path traversal (Windows), body-limit bypass, Set-Cookie merging, Lambda@Edge header drop
+- **sdk:** Patched picomatch — fixes ReDoS via extglob quantifiers and Method Injection via POSIX character classes
+- **ztai:** Added SECURITY_TIER_3_SIMULATED disclosure constant and startup warning for in-process key simulation
+
+### Fixes
+- `bin/sre/sli-verifier.js`: `simulateShadowWave()` now throws in non-simulate mode — gate with `MINDFORGE_SRE_SIMULATE=true`
+- `bin/spawn-agent.js`: spawn stub now exits 1 with actionable error instead of silently succeeding
+- `bin/memory/eis-client.js`: `resolveRemoteNode()` now throws explicitly instead of returning null
+- `bin/browser/session-manager.js`: added `capabilities.importFromBrowser=false` export
+- `.mindforge/config.json`: `mesh.node_id` changed from "beta-node" placeholder to "auto"
+
+### Docs
+- README: fixed stale version refs (11.5.1→11.8.1), corrected workflow count to 32, added Node.js >=18 prerequisite and Hello World section
+- SECURITY.md: documented Tier-3 simulation scope, audit-hash replay boundary, spawn dispatch status
+- docs/troubleshooting.md: added spawn stub, importFromBrowser, and test cwd entries
+- docs/sdk-reference.md: updated version to 11.8.1, marked unimplemented methods
+- docs/enterprise-setup.md: documented mesh.node_id configuration requirement
+
+### Tests
+- install.test.js + production.test.js: added cwd guard, scoped secrets scan to MindForge root only
+
+---
+

package/changelogs/v11.8.2.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## [11.8.2] — 2026-07-01 — Clean Stable Release
+
+### Fixes
+- `bin/installer-core.js`: Added main-guard — `health` command now produces full diagnostic output
+- `bin/mindforge-cli.js:185`: Fixed null-status bug — signal-killed child processes now exit with code 1 instead of 0
+- `bin/change-classifier.js`: Tier 2 branch now pushes descriptive reasons to reasons[] array
+- `sdk/tests/sdk.test.js:30`: Replaced hardcoded version "11.8.0" with dynamic package.json read
+- `tests/sdk-exports.test.js`: Fixed MODULE_NOT_FOUND path resolution
+- `README.md:7`: Updated "Latest: v11.8.0" header to "Latest: v11.8.1"
+
+### Improvements
+- `bin/spawn-agent.js --help`: Added v1.0 stub disclosure note to usage text
+- `bin/governance/ztai-manager.js`: Lazy-instantiate SecureEnclaveProvider — eliminates spurious Tier-3 warning on commands that do not use Tier-3 trust
+- `bin/review/cross-review-engine.js`: Added CLI entry point with --help, --diff, --phase, --context args
+- `tests/worktree-engine.test.js`: Added 90-second timeout override to prevent false parallel-runner timeout
+- ESLint: Resolved auto-fixable errors, lint stage now clean
+- Test coverage: Added tests/errors.test.js and tests/file-io.test.js to improve coverage toward 80% target
+
+---
+

package/changelogs/v11.8.3.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## [11.8.3] — 2026-07-01 — Autopsy Fixes Stable Release
+
+### Fixes (all confirmed by IQ200 deep audit)
+- `bin/mindforge-cli.js`: Added `--version` / `-V` flag — now prints version and exits 0
+- `bin/spawn-agent.js`: Marked spawn/identity as `[NOT IMPLEMENTED in v1.0]` in help text; added `assertSafeName()` path-containment guard to spawn branch
+- `.mindforge/config.json`: `mesh.node_id` confirmed `"auto"` (not "beta-node")
+- `bin/governance/rbac.js`: Created re-export shim → `rbac-manager.js`
+- `bin/engine/skill-loader.js`: Created stub module with `loadSkill`, `matchTriggers`, `VERSION` exports
+- `bin/memory/eis-client.js`: Added `module.exports.EISClient = EISClient` — named import now works
+- `sdk/`: Added `@types/node` dev dependency; 24 TypeScript typecheck errors resolved
+- `bin/autonomous/auto-runner.js`: `null` phase now throws `TypeError` instead of silently coercing to `"0"`
+- `.mindforge/skills/`: Resolved 12 duplicate trigger strings — skill routing is now deterministic
+
+### Health Score
+- IQ200 audit: 248/258 → 258/258 checks passing (100%)
+- Test suite: 95/97 → 95/97 (2 env-skipped, 0 failures)
+- 0 CVEs across all 3 packages
+
+---
+

package/changelogs/v11.9.0.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## [11.9.0] — 2026-07-27 — Bedrock Provider + Full Dry-Run Audit
+
+### Added
+- `bin/models/bedrock-provider.js`: AWS Bedrock provider with Anthropic/Bedrock config switch and base64 credential decoding
+
+### Fixes (from a full exhaustive dry-run of all 224 commands, 216 personas, and 355 skills)
+- Resolved phantom-tool references ported unmodified from a different agent harness across 40 personas and ~40 skills (`Context7`/`search_web`/`read_url_content` → `WebFetch`/`WebSearch`; `CommandStatus`/`ReadTerminal`/`terminal`/`read_file`/`write_file`/`search_files`/`patch` → real Claude Code tool names; `delegate_task` → `Agent`; `kanban_create` → `TaskCreate`)
+- Repointed 21 broken `@.agent/references/` and `@.agent/templates/` path references to their real `docs/References/` and `docs/Templates/*/` locations
+- Copied in missing companion `scripts/`/`references/`/`templates/` assets for 17 skills that referenced files never carried over during porting
+- Fixed hardcoded broken paths (`~/.hermes/skills`, `/home/teknium/...`, `HERMES_HOME`)
+- Fixed a markdown fence-nesting bug in `code-tour` and 4 truncated heredoc strings in `github-code-review`
+- Removed banned single-word triggers (`test`, `tests`) from `testing-standards`
+- CI: build SDK before test suite; run Verification before Health Check in execution-plane
+- Security: patched hono and picomatch HIGH-severity vulnerabilities
+

package/changelogs/v11.9.1.md

@@ -0,0 +1,8 @@
+# Changelog
+
+## [11.9.1] — 2026-07-29 — Packaging Fix: Restore Missing Workflow Commands
+
+### Fixed
+- A blanket `.claude/` rule in `.gitignore` (pre-existing, unrelated to the v11.9.0 work) was silently excluding 34 command files under `.claude/commands/mindforge/` from git — mostly the `wf-*` dynamic-workflow slash commands, plus `skill-tdd.md`, `skills-index.md`, and `systematic-debug.md`. Since `package.json`'s `files` array includes `.claude/commands/`, this meant **v11.9.0's published npm tarball was missing every `wf-*` slash command** even though the mirrored `.agent/mindforge/` copies shipped correctly. Removed the redundant gitignore rule (the repo's existing `*.local` pattern already covers the actual intended exclusion, `.claude/settings.local.json`) and committed all 34 files.
+- Added a regression guard to `tests/packaging-allowlist.test.js` asserting `.claude/commands/mindforge/` and `.agent/mindforge/` ship the same file count — the prior `>=150` floor check passed throughout this gap's entire lifetime since both counts already exceeded 150 independently.
+

package/changelogs/v2.0.0-alpha.1.md

@@ -0,0 +1,42 @@
+# Changelog
+
+## [2.0.0-alpha.1] — Day 8: Autonomous Execution Engine — 2026-03-22
+
+### Added (MindForge v2.0.0-alpha.1)
+
+**Autonomous execution engine:**
+
+- `/mindforge:auto` — walk-away autonomous phase/milestone execution
+- `/mindforge:steer` — mid-execution guidance injection from second terminal
+- Node repair operator: RETRY → DECOMPOSE → PRUNE → ESCALATE
+- Stuck detection engine: 5 patterns (S01-S05)
+- Headless CLI mode: `mindforge-cc headless --phase N`
+- `.planning/steering-queue.jsonl` — steering instruction queue
+- `.planning/auto-state.json` — real-time execution state
+
+**MINDFORGE.md v2 settings:**
+
+- AUTO_MODE_DEFAULT_TIMEOUT_MINUTES, AUTO_MODE_UAT
+- AUTO_NODE_REPAIR_BUDGET, AUTO_RETRY_ON_VERIFY_FAIL
+- AUTO_TASK_MAX_TOKENS, AUTO_TASK_TIMEOUT_MINUTES
+- AUTO_PUSH_ON_WAVE_COMPLETE, AUTO_NOTIFY_ON_ESCALATION
+
+### Hardened (v2.0.0-alpha.1)
+
+- Gate 3 (secret detection) now runs PRE-COMMIT in auto mode
+- Pre-flight dirty check excludes `.planning/` state files
+- DECOMPOSE:- **Deny**: The action is blocked, and the violation is logged to `AUDIT.jsonl`.
+- **Blast Radius Denial (v5.3.0)**: Action is blocked if the `Impact Score` exceeds the policy `max_impact` threshold.
+- **Escalate**: The action requires a higher-tier DID signature or explicit HITL (Human-in-the-Loop) approval.
+eserves module/package names
+- Steering injection guard validates all instructions
+- SIGTERM handler waits for task cleanup before saving state
+
+### Architecture Decisions (v2.0.0-alpha.1)
+
+- ADR-021: Autonomy Boundary
+- ADR-022: Node Repair Hierarchy
+- ADR-023: Gate 3 Timing
+
+---
+

package/changelogs/v2.0.0-alpha.10.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## [2.0.0-alpha.10] — Skill Installation & Validation CLI — 2026-03-24
+
+### Added (v2.0.0-alpha.10)
+
+- New CLI commands: `validate-skill`, `install-skill`, `register-skill`, `audit-skill`.
+- Robust skill validation logic (Level 1 & 2) in `bin/skill-validator.js`.
+- Automated manifest management and audit logging in `bin/skill-registry.js`.
+- Integrated CLI commands into the `install-skill.md` agentic workflow for higher reliability.
+
+---
+

package/changelogs/v2.0.0-alpha.11.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## [2.0.0-alpha.11] — Persistent Knowledge Graph — 2026-03-24
+
+### Added (v2.0.0-alpha.11)
+
+- **Persistent Knowledge Graph**: Core engine for long-term memory across projects.
+- **`remember` CLI**: New command for manual knowledge management and semantic search.
+- **Automated Capture**: Hooks in `AutoRunner` and `CrossReviewEngine` to ingest insights automatically from phase completions and review reports.
+- **Context Injection**: `installer-core.js` now auto-injects relevant historical context into `CLAUDE.md` during installation.
+- **`test-memory` CLI**: New command for memory suite verification.
+
+---
+

package/changelogs/v2.0.0-alpha.12.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## [2.0.0-alpha.12] — Self-Building Skills Platform — 2026-03-24
+
+### Added (v2.0.0-alpha.12)
+
+- **Self-Building Skills Platform**: Intelligent engine for automatically capturing skills from documentation, sessions, and npm packages.
+- **`/mindforge:learn`**: High-level orchestration command for 7-step skill generation pipeline.
+- **`/mindforge:marketplace`**: Seamless integration with npm registry for community skills discovery and installation.
+- **7-Dimension Quality Scorer**: Static analysis tool ensuring high-quality, injection-safe skill authoring.
+- **Auto-Capture Hook**: Automatic pattern detection from phase outputs (SUMMARY, ADR, HANDOFF).
+- **CLI Commands**: `learn-skill` and `marketplace` added to `bin/mindforge-cli.js`.
+- **ADR-036, ADR-037, ADR-038**: New architectural decisions for skill sourcing, capture thresholds, and quality gates.
+
+---
+

package/changelogs/v2.0.0-alpha.2.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## [2.0.0-alpha.2] — Day 9: Visual QA Engine (Browser Runtime Engine) — 2026-03-22
+
+### Added (v2.0.0-alpha.2)
+
+- [NEW] Persistent Browser Runtime (Playwright-powered Chromium daemon).
+- [NEW] Visual Verification Hook (`<verify-visual>`) in PLAN files.
+- [NEW] Systematic Visual QA Engine (`/mindforge:qa`).
+- [NEW] Persistent Session Management for Browser Control.
+- [NEW] ADR-024, ADR-025, ADR-026.
+
+---
+

package/changelogs/v2.0.0-alpha.3.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## [2.0.0-alpha.3] — Day 10: Multi-Model Intelligence Layer — 2026-03-22
+
+### Added (v2.0.0-alpha.3)
+
+- [NEW] Unified Multi-Model Intelligence Layer (Anthropic, OpenAI, Gemini).
+- [NEW] Dynamic Model Router with Persona and Tier-based logic.
+- [NEW] Real-time Cost Tracking and Daily Budget Enforcement.
+- [NEW] Adversarial Cross-Model Code Review Engine (`/mindforge:cross-review`).
+- [NEW] Deep Research Engine with Gemini 1.5 Pro 1M context support (`/mindforge:research`).
+- [NEW] Model usage and cost reporting (`/mindforge:costs`).
+- [NEW] Secure API handling with SSRF protection and header-based auth.
+- [NEW] ADR-027, ADR-028, ADR-029.
+
+---
+

package/changelogs/v2.0.0-alpha.4.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## [2.0.0-alpha.4] — Day 11: Persistent Knowledge Graph (Long-Term Memory) — 2026-03-22
+
+### Added (v2.0.0-alpha.4)
+
+- [NEW] Persistent Knowledge Graph for long-term memory across sessions.
+- [NEW] TF-IDF search engine with confidence-based relevance ranking.
+- [NEW] Automated Knowledge Capture from ADRs, Debug Reports, and Retrospectives.
+- [NEW] Global Knowledge Sync for machine-wide insight sharing (`~/.mindforge/global-knowledge-base.jsonl`).
+- [NEW] Skill SDK integration for programmatic memory access.
+- [NEW] Manual memory management command (`/mindforge:remember`).
+- [NEW] Append-only audit-ready storage schema for all knowledge types.
+- [NEW] ADR-030, ADR-031, ADR-032.
+
+---
+

package/changelogs/v2.0.0-alpha.7.md

@@ -0,0 +1,18 @@
+# Changelog
+
+## [2.0.0-alpha.7] — Day 12: Real-time Observability Dashboard — 2026-03-22
+
+### Added (v2.0.0-alpha.7)
+
+- [NEW] Real-time Dashboard Server (Express + SSE Bridge).
+- [NEW] Premium 5-tab UI: Activity, Metrics, Approvals, Memory, Team.
+- [NEW] Live Data Streaming for Audit Logs, Quality, Costs, and Team Activity.
+- [NEW] Hardened Tier 3 Governance: Mandatory Plan ID typing for sensitive approvals.
+- [NEW] Metrics Aggregator: Multi-source JSONL processing for observability.
+- [NEW] CLI Command: `/mindforge:dashboard` for server lifecycle management.
+- [NEW] ADR-033: Real-time Observability Architecture.
+- [HARDENED] SSE Rotation Detection (Inode-based).
+- [HARDENED] Localhost-only Security Model (Strict CORS/Binding).
+
+---
+