mindforge-cc 11.9.0 → 11.9.2

package/changelogs/README.md

@@ -0,0 +1,109 @@
+# MindForge Changelog Archive
+
+Complete, unabridged version history for MindForge — every release from [v0.1.0](./v0.1.0.md) through [v11.9.1](./v11.9.1.md), one file per version.
+
+The root [CHANGELOG.md](../CHANGELOG.md) keeps only the newest versions inline as a rolling-window aggregator (for `bin/updater/changelog-fetcher.js` regex compatibility); this index is the full historical record.
+
+## All versions (newest first)
+
+| Version | Summary |
+|---|---|
+| [v11.9.1](./v11.9.1.md) | Packaging Fix: Restore Missing Workflow Commands |
+| [v11.9.0](./v11.9.0.md) | Bedrock Provider + Full Dry-Run Audit |
+| [v11.8.3](./v11.8.3.md) | Autopsy Fixes Stable Release |
+| [v11.8.2](./v11.8.2.md) | Clean Stable Release |
+| [v11.8.1](./v11.8.1.md) | First Stable Release |
+| [v11.8.0](./v11.8.0.md) | Workflow Forge II |
+| [v11.7.1](./v11.7.1.md) | Workflow Forge (patch) |
+| [v11.7.0](./v11.7.0.md) | Workflow Forge |
+| [v11.6.0](./v11.6.0.md) | Skill Forge |
+| [v11.5.1](./v11.5.1.md) | Robustness + governance-gate patch (Wave 8) |
+| [v11.5.0](./v11.5.0.md) | Governance hardening + autonomous-engine repair (Waves 4–7) |
+| [v11.4.0](./v11.4.0.md) | Claude Code plugin distribution |
+| [v11.3.1](./v11.3.1.md) | Packaging hotfix (commands, skills & framework now ship) |
+| [v11.3.0](./v11.3.0.md) | "Legion" (154-subagent expansion) |
+| [v11.2.1](./v11.2.1.md) | "Hardening" (security & integrity audit remediation) |
+| [v11.2.0](./v11.2.0.md) | "Verification & Trust" |
+| [v11.1.0](./v11.1.0.md) | "Beast Mode" |
+| [v11.0.1](./v11.0.1.md) | "Stability Patch" |
+| [v11.0.0](./v11.0.0.md) | "Sovereign Stability" |
+| [v10.7.0](./v10.7.0.md) | "Platform Sovereign" |
+| [v10.6.0](./v10.6.0.md) | "Data Alchemy" |
+| [v10.5.0](./v10.5.0.md) | "AI Frontier" |
+| [v10.4.0](./v10.4.0.md) | "Cross-Platform" |
+| [v10.3.0](./v10.3.0.md) | "Leader's Edge" |
+| [v10.2.0](./v10.2.0.md) | "Industry Forge" |
+| [v10.1.1](./v10.1.1.md) | "Scale & Edge" |
+| [v10.1.0](./v10.1.0.md) | "Strategic Intelligence" |
+| [v10.0.9](./v10.0.9.md) | "Full Spectrum" |
+| [v10.0.8](./v10.0.8.md) | "Deep Patterns" |
+| [v10.0.7](./v10.0.7.md) | "Meta Engineer" |
+| [v10.0.6](./v10.0.6.md) | "Complete Arsenal" |
+| [v10.0.5](./v10.0.5.md) | "Forge Master" |
+| [v10.0.4](./v10.0.4.md) | "Santa's Eval" |
+| [v10.0.3](./v10.0.3.md) | "Council Awakens" |
+| [v10.0.2](./v10.0.2.md) | "Persona Expansion" |
+| [v10.0.0](./v10.0.0.md) | "Bedrock Fortified" |
+| [v9.0.0](./v9.0.0.md) | Bedrock Meridian — Pillars XXIV-XXVIII |
+| [v8.2.1](./v8.2.1.md) | Stability & Cleanup |
+| [v8.2.0](./v8.2.0.md) | Autonomous SRE Layer — Pillars XX-XXIII |
+| [v8.1.0](./v8.1.0.md) | Sovereign Identity — Pillar XIX |
+| [v8.0.0](./v8.0.0.md) | Celestial Orchestration - SQLite & FMS |
+| [v7.0.0](./v7.0.0.md) | Sovereign Intelligence - Post-Quantum & Homing |
+| [v6.7.0](./v6.7.0.md) | Federated Intelligence Mesh - FIM Expansion |
+| [v6.6.0](./v6.6.0.md) | Self-Corrective Synthesis - SCS |
+| [v6.5.0](./v6.5.0.md) | Reason-Source Alignment - RSA |
+| [v6.4.0](./v6.4.0.md) | Context Entropy Guard - CEG |
+| [v6.3.0](./v6.3.0.md) | Intelligence-Drift Coupling - IDC |
+| [v6.2.0](./v6.2.0.md) | Sovereign Enterprise Stable |
+| [v6.2.0-alpha](./v6.2.0-alpha.md) | Sovereign Pillars XI & XII |
+| [v6.1.0-alpha](./v6.1.0-alpha.md) | Sovereign Intelligence |
+| [v6.0.0-alpha](./v6.0.0-alpha.md) | The v6.0.0-alpha release introduces the final pillar of the MindForge Enterprise architect |
+| [v5.9.0](./v5.9.0.md) | - Pillar VII: Nexus Steering (Hierarchical Intent Orchestration). |
+| [v5.8.0](./v5.8.0.md) | - Pillar VI: Sovereign Reason Enclaves (ZK-Proof Audit Trails). |
+| [v5.7.0](./v5.7.0.md) | - Pillar V: Multi-Cloud Arbitrage (Task-to-Model Affinity Routing). |
+| [v5.6.0](./v5.6.0.md) | - Pillar IV: Supply Chain Trust (Binary Runtime Attestation). |
+| [v5.5.0](./v5.5.0.md) | - Pillar III: Predictive Agentic Reliability (Reasoning Entropy Monitoring). |
+| [v5.4.0](./v5.4.0.md) | Enterprise-Grade Hardening — 2026-03-28 |
+| [v5.3.0](./v5.3.0.md) | Dynamic Blast Radius — 2026-03-28 |
+| [v5.2.0](./v5.2.0.md) | Semantic Vector Consensus — 2026-03-28 |
+| [v5.1.0](./v5.1.0.md) | The Enterprise Expansion — 2026-03-28 |
+| [v5.0.0-alpha.2](./v5.0.0-alpha.2.md) | Predictive Reliability & Supply Chain Trust — 2026-03-28 |
+| [v5.0.0-alpha.1](./v5.0.0-alpha.1.md) | Federated Intelligence & Policy Orchestration — 2026-03-28 |
+| [v4.3.0](./v4.3.0.md) | Enterprise Mesh & Proactive Equilibrium — 2026-03-28 |
+| [v4.1.0](./v4.1.0.md) | MindForge Nexus (Observability & Tracing) — 2026-03-27 |
+| [v4.0.0](./v4.0.0.md) | Dynamic Multi-Agent Swarms (Agentic Mesh) — 2026-03-27 |
+| [v3.0.0](./v3.0.0.md) | Reactive Autonomous Intelligence — 2026-03-27 |
+| [v2.6.0](./v2.6.0.md) | Temporal Vision (Time-Travel Debugging) — 2026-03-27 |
+| [v2.5.0](./v2.5.0.md) | Local-First Knowledge Graph (RAG 2.0) — 2026-03-27 |
+| [v2.4.0](./v2.4.0.md) | The Core Pillars Optimization — 2026-03-27 |
+| [v2.3.5](./v2.3.5.md) | Intelligent Asset Sync & Merge — 2026-03-26 |
+| [v2.3.4](./v2.3.4.md) | Architectural Sync & Zero-GSD Purge — 2026-03-25 |
+| [v2.3.3](./v2.3.3.md) | Payload Cleanup & Enterprise Pruning — 2026-03-25 |
+| [v2.3.2](./v2.3.2.md) | Asset Sync Repair — 2026-03-25 |
+| [v2.1.2](./v2.1.2.md) | *Status: V5.2.0 Semantic Consensus Implemented & Verified (2026-03-28)* |
+| [v2.1.1](./v2.1.1.md) | Core Migration Finalization — 2026-03-25 |
+| [v2.1.0](./v2.1.0.md) | The Specialized Expansion — 2026-03-24 |
+| [v2.0.0](./v2.0.0.md) | The Autonomous Enterprise — 2026-03-24 |
+| [v2.0.0-alpha.12](./v2.0.0-alpha.12.md) | Self-Building Skills Platform — 2026-03-24 |
+| [v2.0.0-alpha.11](./v2.0.0-alpha.11.md) | Persistent Knowledge Graph — 2026-03-24 |
+| [v2.0.0-alpha.10](./v2.0.0-alpha.10.md) | Skill Installation & Validation CLI — 2026-03-24 |
+| [v2.0.0-alpha.9](./v2.0.0-alpha.9.md) | Verified Antigravity Compatibility — 2026-03-23 |
+| [v2.0.0-alpha.8](./v2.0.0-alpha.8.md) | Antigravity Visibility Fix — 2026-03-23 |
+| [v2.0.0-alpha.7](./v2.0.0-alpha.7.md) | Day 12: Real-time Observability Dashboard — 2026-03-22 |
+| [v2.0.0-alpha.4](./v2.0.0-alpha.4.md) | Day 11: Persistent Knowledge Graph (Long-Term Memory) — 2026-03-22 |
+| [v2.0.0-alpha.3](./v2.0.0-alpha.3.md) | Day 10: Multi-Model Intelligence Layer — 2026-03-22 |
+| [v2.0.0-alpha.2](./v2.0.0-alpha.2.md) | Day 9: Visual QA Engine (Browser Runtime Engine) — 2026-03-22 |
+| [v2.0.0-alpha.1](./v2.0.0-alpha.1.md) | Day 8: Autonomous Execution Engine — 2026-03-22 |
+| [v1.0.5](./v1.0.5.md) | v1.0.5 Minimal Install Option — 2026-03-22 |
+| [v1.0.4](./v1.0.4.md) | v1.0.4 Antigravity Install Fix — 2026-03-22 |
+| [v1.0.3](./v1.0.3.md) | v1.0.3 Antigravity Agents Folder — 2026-03-22 |
+| [v1.0.2](./v1.0.2.md) | v1.0.2 CLI Bin Fix — 2026-03-22 |
+| [v1.0.1](./v1.0.1.md) | v1.0.1 Installer and Packaging Fixes — 2026-03-22 |
+| [v1.0.0](./v1.0.0.md) | v1.0.0 First Stable Public Release — 2026-03-22 |
+| [v0.6.0](./v0.6.0.md) | Day 6 Distribution Platform |
+| [v0.5.0](./v0.5.0.md) | Day 5 Intelligence Layer |
+| [v0.4.0](./v0.4.0.md) | Day 4 Enterprise Integrations and Governance |
+| [v0.3.0](./v0.3.0.md) | Day 3 Skills Platform |
+| [v0.2.0](./v0.2.0.md) | Day 2 Wave Engine |
+| [v0.1.0](./v0.1.0.md) | Day 1 Foundation |

package/changelogs/index.json

@@ -0,0 +1,103 @@
+{
+  "versions": [
+    "11.9.1",
+    "11.9.0",
+    "11.8.3",
+    "11.8.2",
+    "11.8.1",
+    "11.8.0",
+    "11.7.1",
+    "11.7.0",
+    "11.6.0",
+    "11.5.1",
+    "11.5.0",
+    "11.4.0",
+    "11.3.1",
+    "11.3.0",
+    "11.2.1",
+    "11.2.0",
+    "11.1.0",
+    "11.0.1",
+    "11.0.0",
+    "10.7.0",
+    "10.6.0",
+    "10.5.0",
+    "10.4.0",
+    "10.3.0",
+    "10.2.0",
+    "10.1.1",
+    "10.1.0",
+    "10.0.9",
+    "10.0.8",
+    "10.0.7",
+    "10.0.6",
+    "10.0.5",
+    "10.0.4",
+    "10.0.3",
+    "10.0.2",
+    "10.0.0",
+    "9.0.0",
+    "8.2.1",
+    "8.2.0",
+    "8.1.0",
+    "8.0.0",
+    "7.0.0",
+    "6.7.0",
+    "6.6.0",
+    "6.5.0",
+    "6.4.0",
+    "6.3.0",
+    "6.2.0",
+    "6.2.0-alpha",
+    "6.1.0-alpha",
+    "6.0.0-alpha",
+    "5.9.0",
+    "5.8.0",
+    "5.7.0",
+    "5.6.0",
+    "5.5.0",
+    "5.4.0",
+    "5.3.0",
+    "5.2.0",
+    "5.1.0",
+    "5.0.0-alpha.2",
+    "5.0.0-alpha.1",
+    "4.3.0",
+    "4.1.0",
+    "4.0.0",
+    "3.0.0",
+    "2.6.0",
+    "2.5.0",
+    "2.4.0",
+    "2.3.5",
+    "2.3.4",
+    "2.3.3",
+    "2.3.2",
+    "2.1.2",
+    "2.1.1",
+    "2.1.0",
+    "2.0.0",
+    "2.0.0-alpha.12",
+    "2.0.0-alpha.11",
+    "2.0.0-alpha.10",
+    "2.0.0-alpha.9",
+    "2.0.0-alpha.8",
+    "2.0.0-alpha.7",
+    "2.0.0-alpha.4",
+    "2.0.0-alpha.3",
+    "2.0.0-alpha.2",
+    "2.0.0-alpha.1",
+    "1.0.5",
+    "1.0.4",
+    "1.0.3",
+    "1.0.2",
+    "1.0.1",
+    "1.0.0",
+    "0.6.0",
+    "0.5.0",
+    "0.4.0",
+    "0.3.0",
+    "0.2.0",
+    "0.1.0"
+  ]
+}

package/changelogs/v0.1.0.md

@@ -0,0 +1,21 @@
+# Changelog
+
+## [0.1.0] — Day 1 Foundation
+
+### Added (v0.1.0)
+
+- Core directory scaffold
+- CLAUDE.md agent entry point
+- 8 agent persona definitions
+- 5 initial core skill packs
+- 6 slash commands: help, init-project, plan-phase, execute-phase, verify-phase, ship
+- npm installer (npx mindforge-cc)
+- State management: STATE.md, HANDOFF.json
+- Org context templates: ORG.md, CONVENTIONS.md, SECURITY.md, TOOLS.md
+persona definitions
+- 5 initial core skill packs
+- 6 slash commands: help, init-project, plan-phase, execute-phase, verify-phase, ship
+- npm installer (npx mindforge-cc)
+- State management: STATE.md, HANDOFF.json
+- Org context templates: ORG.md, CONVENTIONS.md, SECURITY.md, TOOLS.md
+

package/changelogs/v0.2.0.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [0.2.0] — Day 2 Wave Engine
+
+### Added (v0.2.0)
+
+- Wave-based parallel execution engine
+- Dependency parser and wave grouper
+- Context injector with minimum-context principle
+- Compaction protocol (automated at 70% context)
+- AUDIT.jsonl append-only pipeline with full schema
+- 4 new commands: /mindforge:next, /mindforge:quick, /mindforge:status, /mindforge:debug
+
+---
+

package/changelogs/v0.3.0.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## [0.3.0] — Day 3 Skills Platform
+
+### Added (v0.3.0)
+
+- 5 new core skill packs: performance, accessibility, data-privacy,
+  incident-response, database-patterns
+- Skills distribution engine: registry, loader, versioning, conflict resolver
+- 5 new commands: /mindforge:skills, /mindforge:review, /mindforge:security-scan,
+  /mindforge:map-codebase, /mindforge:discuss-phase
+- Persona customisation override system (project and phase level)
+- Skills Manifest (MANIFEST.md) with tier-based registration
+- Skills Authoring Guide for creating org and project skills
+- Injection guard for Tier 2/3 skill validation
+
+### Changed (v0.3.0)
+
+- execute-phase now uses multi-tier skills loading
+- plan-phase now reads CONTEXT.md from discuss-phase if available
+- CLAUDE.md updated with skills platform and new command awareness
+
+### Fixed (v0.3.0)
+
+- cursor pagination correctness in database-patterns skill (compound cursor)
+
+---
+

package/changelogs/v0.4.0.md

@@ -0,0 +1,29 @@
+# Changelog
+
+## [0.4.0] — Day 4 Enterprise Integrations and Governance
+
+### Added (v0.4.0)
+
+- enterprise integration specs for Jira, Confluence, Slack, GitHub, and GitLab
+- integration connection manager with credential hygiene and retry guidance
+- governance layer: change classification, approvals, and compliance gates
+- multi-developer handoff and session merger protocols
+- 6 new commands: `/mindforge:audit`, `/mindforge:milestone`,
+  `/mindforge:complete-milestone`, `/mindforge:approve`,
+  `/mindforge:sync-jira`, `/mindforge:sync-confluence`
+- Day 4 test suites: `tests/integrations.test.js`, `tests/governance.test.js`
+- enterprise setup and governance guide docs
+
+### Changed (v0.4.0)
+
+- README and CLAUDE entrypoint updated for enterprise governance workflows
+- audit schema expanded for integration and governance events
+
+### Fixed (v0.4.0)
+
+- Jira transition handling now documents dynamic transition lookup instead of
+  hardcoded IDs
+- governance tiering now covers code-content matches and audit-history escalation
+
+---
+

package/changelogs/v0.5.0.md

@@ -0,0 +1,34 @@
+# Changelog
+
+## [0.5.0] — Day 5 Intelligence Layer
+
+### Added (v0.5.0)
+
+- framework health engine with 7-category diagnostics and safe auto-repair guidance
+- smart context compaction with Level 1/2/3 protocols and structured handoff extraction
+- phase difficulty scorer with weighted composite and task-granularity feedback
+- anti-pattern detection engine with false-positive controls for C01/B03/D01
+- skill gap analyzer for pre-planning capability coverage checks
+- team profile system and per-developer profile templates
+- metrics schema and quality tracker (`session`, `phase`, `skill usage`, `compaction quality`)
+- project constitution file: `MINDFORGE.md`
+- setup wizard modules: environment detection, idempotent config generation, interactive flow
+- 4 new commands: `/mindforge:health`, `/mindforge:retrospective`,
+  `/mindforge:profile-team`, `/mindforge:metrics`
+- 3 ADRs: ADR-012, ADR-013, ADR-014
+- new Day 5 test suites: `tests/intelligence.test.js`, `tests/metrics.test.js`
+
+### Changed (v0.5.0)
+
+- CLAUDE runtime contract now includes Day 5 intelligence behavior and
+  non-overridable MINDFORGE enforcement
+- package entrypoint now points to setup wizard
+
+### Fixed (v0.5.0)
+
+- AUDIT corruption handling now quarantines invalid lines instead of deleting entries
+- wizard reliability improvements: stdin TTY fallback, end-of-flow credential guidance,
+  and idempotent config replacement behavior
+
+---
+

package/changelogs/v0.6.0.md

@@ -0,0 +1,34 @@
+# Changelog
+
+## [0.6.0] — Day 6 Distribution Platform
+
+### Added (v0.6.0)
+
+- Public skills registry: `npx mindforge-skills install/publish/search` (npm-based)
+- Skill validator: 3-level validation schema (schema, content, quality)
+- MINDFORGE.md JSON Schema: validation with non-overridable field markers
+- MindForge CI mode: GitHub Actions / GitLab CI / Jenkins integration
+- GitHub Actions workflow: health, security, quality, AI review jobs
+- AI PR Review Engine: Claude API-powered code review with context loading
+- Monorepo/workspace support: npm/pnpm/Nx/Turborepo/Lerna detection
+- Cross-package planner: topological execution order for monorepo phases
+- @mindforge/sdk: TypeScript SDK with client, event stream, and command builders
+- SSE event stream: real-time progress events via Server-Sent Events
+- /mindforge:init-org — organisation-wide MindForge setup command
+- /mindforge:install-skill — install skill from public/private registry
+- /mindforge:publish-skill — publish skill to npm registry
+- /mindforge:pr-review — AI code review powered by Claude API
+- /mindforge:workspace — monorepo workspace management
+- /mindforge:benchmark — skill effectiveness benchmarking
+- 3 new ADRs: ADR-015 npm registry, ADR-016 CI timeout, ADR-017 localhost SDK
+
+### Hardened (v0.6.0)
+
+- Registry: TOCTOU-safe temp directory (chmod 700), tarball size verification
+- CI: timeout exits with code 0 (soft stop), clear Tier 3 block messages
+- SDK: localhost-only SSE binding, Linux inotify fallback
+- AI review: robust daily limit (parse error tolerant), file-based diff truncation
+- Monorepo: affected package detection uses manifest paths (not depth assumption)
+
+---
+

package/changelogs/v1.0.0.md

@@ -0,0 +1,60 @@
+# Changelog
+
+## [1.0.0] — v1.0.0 First Stable Public Release — 2026-03-22
+
+🎉 **MindForge v1.0.0 — Enterprise Agentic Framework — First Stable Release**
+
+Release published: v1.0.0 (GitHub Releases).
+
+Built over 7 focused sprints, MindForge transforms Claude Code and Antigravity
+from powerful-but-unstructured AI tools into production-grade engineering
+partners with full governance, observability, and enterprise integration.
+
+### What ships in v1.0.0
+
+- **36 commands** across 7 workflow categories
+- **10 core skill packs** with three-tier registry (Core/Org/Project)
+- **8 specialised agent personas** covering all engineering roles
+- **Wave-based parallel execution** with dependency graph and automatic compaction
+- **Enterprise integrations**: Jira, Confluence, Slack, GitHub, GitLab
+- **Three-tier governance**: Tier 1 (auto) / Tier 2 (peer review) / Tier 3 (compliance)
+- **Five non-bypassable compliance gates** (secret detection, CRITICAL findings, tests, CVEs, GDPR)
+- **Intelligence layer**: health engine, difficulty scorer, anti-pattern detector, team profiling
+- **Public skills registry**: npm-based `mindforge-skill-*` ecosystem
+- **CI/CD integration**: GitHub Actions, GitLab CI, Jenkins adapters
+- **@mindforge/sdk**: TypeScript SDK with client, event stream, and command builders
+- **Monorepo support**: npm/pnpm/Nx/Turborepo/Lerna workspace detection
+- **AI PR Review**: Claude API-powered code review with context loading
+- **Self-update mechanism**: version check, changelog diff, scope-preserving apply
+- **Version migration engine**: schema migration from v0.1.0 through v1.0.0
+- **Plugin system**: extensible via `mindforge-plugin-*` npm namespace
+- **Token usage optimiser**: profiling and efficiency strategies
+- **50-point production readiness checklist**: fully verified before this release
+
+**20 Architecture Decision Records** documenting every major design choice
+
+- **15 test suites** with 3× consecutive run requirement
+- **Complete reference documentation**: commands, security, ADR index, threat model
+
+### Stable interface contract (v1.0.0)
+
+See ADR-020. All 36 commands, HANDOFF.json schema, AUDIT event types,
+@mindforge/sdk exports, and plugin.json format are stable in 1.x.x.
+
+### Breaking changes from 0.6.0 (v1.0.0)
+
+- VERIFY_PASS_RATE_WARNING_THRESHOLD in MINDFORGE.md is now 0.0-1.0 (was 0-100)
+  Run `/mindforge:migrate` to auto-convert
+- AUDIT.jsonl session_id field is now required (auto-backfilled by migration)
+- HANDOFF.json plugin_api_version field required for plugin compatibility
+
+### Installation (v1.0.0)
+
+```bash
+npx mindforge-cc@latest
+# or
+npx mindforge-cc@1.0.0 --claude --global
+```
+
+---
+

package/changelogs/v1.0.1.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [1.0.1] — v1.0.1 Installer and Packaging Fixes — 2026-03-22
+
+### Fixed (v1.0.1)
+
+- Interactive setup now uses installer-core directly (no recursive wizard call).
+- Package bin entry corrected to use `mindforge-cc` → `bin/install.js`.
+
+### Changed (v1.0.1)
+
+- Added publish whitelist to reduce package size and exclude build-only files.
+
+---
+

package/changelogs/v1.0.2.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [1.0.2] — v1.0.2 CLI Bin Fix — 2026-03-22
+
+### Fixed (v1.0.2)
+
+- npm bin entry now uses a path format accepted by npm publish.
+
+---
+

package/changelogs/v1.0.3.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [1.0.3] — v1.0.3 Antigravity Agents Folder — 2026-03-22
+
+### Changed (v1.0.3)
+
+- Local Antigravity installs now target `agents/` by default (legacy `.agent/` detected and supported).
+
+---
+

package/changelogs/v1.0.4.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [1.0.4] — v1.0.4 Antigravity Install Fix — 2026-03-22
+
+### Fixed (v1.0.4)
+
+- Antigravity local install now correctly copies commands and CLAUDE.md into `agents/`.
+
+---
+

package/changelogs/v1.0.5.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [1.0.5] — v1.0.5 Minimal Install Option — 2026-03-22
+
+### Added (v1.0.5)
+
+- `--minimal` flag to install only essential project scaffolding.
+
+---
+

package/changelogs/v10.0.0.md

@@ -0,0 +1,71 @@
+# Changelog
+
+## [10.0.0] - 2026-05-21 — "Bedrock Fortified"
+
+### Added (v10.0.0)
+
+- **Bearer token authentication** — All dashboard mutating endpoints now require `Authorization: Bearer <token>` header. Protects SSE, steering, and approval routes.
+- **Auth on browser daemon** — The `/evaluate` endpoint on the Playwright browser daemon now requires authentication, closing a remote code execution vector.
+- **Unified test runner** — `tests/run-all.js` discovers and executes all 43 test files with pass/fail summary and exit code propagation.
+- **Shared utilities layer** — `bin/utils/paths.js`, `file-io.js`, and `errors.js` provide consistent path resolution, safe file I/O, and typed error classes across the codebase.
+- **AuditWriter module** — Buffered async writes with Merkle hash chaining, replacing direct synchronous file append calls in the auto-runner.
+- **State manager module** — Extracted from auto-runner for clean separation of execution state persistence.
+- **Task dispatcher module** — Extracted from auto-runner for isolated task routing and repair-operator logic.
+- **Wave executor module** — Extracted from auto-runner for wave-level orchestration and progress tracking.
+- **Dependabot configuration** — Weekly npm dependency updates and monthly GitHub Actions version bumps.
+- **CODEOWNERS file** — Defines review ownership for security-sensitive paths (`bin/governance/`, `bin/engine/`, SDK).
+- **npm provenance** — Release workflow now publishes with `--provenance` for SLSA Build Level 2 supply chain attestation.
+- **CLI "Did you mean?" suggestions** — Levenshtein distance matching for mistyped commands (e.g., `mindforge statsus` suggests `status`).
+- **CLI --verbose flag** — Enables detailed execution tracing for debugging framework behavior.
+- **CLI mindforge bin entry** — Post-install accessible binary for direct invocation without `npx`.
+- **Structured action allowlist** — Replaces the regex-based prompt injection blocklist with an explicit allowlist of permitted autonomous actions.
+- **.npmignore** — Excludes runtime artifacts, test fixtures, planning state, and intelligence logs from the published package.
+- **Knowledge store O(1) index** — Hash-map index for stores exceeding 100 entries, eliminating linear scans.
+- **SSE idle detection** — Dashboard polling pauses when no clients are connected, reducing CPU and I/O overhead.
+- **Metrics TTL cache** — 5-second time-to-live cache prevents redundant metrics recomputation on rapid dashboard refreshes.
+- **Smart mtime-based polling** — File watchers skip re-reads when mtime has not changed since last poll cycle.
+- **NON-OVERRIDABLE governance** — Added non-overridable parameter section to MINDFORGE.md for security-critical settings.
+- **HANDOFF schema alignment** — Unified HANDOFF.json to v1.0.0 schema with all required fields.
+
+### Changed (v10.0.0)
+
+- **VectorHub: sql.js (WASM) replaces better-sqlite3 (native C++)** — Eliminates native compilation, node-gyp, and platform-specific build failures. Zero native dependencies.
+- **VectorHub: lazy Proxy + factory pattern** — Database connection is deferred until first query. Callers use `createVectorHub()` factory instead of direct constructor.
+- **VectorHub: WAL mode + FTS4** — Write-Ahead Logging for concurrent reads; FTS4 replaces FTS5 for sql.js compatibility.
+- **VectorHub: parameterized queries throughout** — All user-influenced values use bound parameters, closing SQL injection vectors.
+- **Auto-runner decomposition** — Reduced from 672 lines to 367 lines by extracting 4 focused modules (task-dispatcher, wave-executor, state-manager, audit-writer).
+- **NexusTracer async migration** — Moved from synchronous file appends to non-blocking writes with back-pressure handling.
+- **PolicyEngine async migration** — Governance evaluation no longer blocks the event loop during high-throughput wave execution.
+- **SDK memory.ts rewrite** — Now self-contained with no imports from `../../bin/`. Independently publishable.
+- **SDK exports field** — Package.json `exports` map enables tree-shaking and prevents deep import of internal modules.
+- **SDK files field** — Only ships compiled output and type declarations; source maps excluded from production.
+- **Real validateConfig() implementation** — Validates 5 required fields with type checking and schema enforcement (replaces no-op stub).
+- **Lazy module loading in auto-runner** — 12 heavy `require()` calls deferred to first-use, cutting cold-start time.
+- **Package size reduction** — From 3.9 MB / 866 files to 1.1 MB / 245 files (72% smaller).
+- **CI workflow** — Node 18/20/22 matrix, `npm ci`, npm caching, c8 coverage at 30% threshold.
+- **Model topology assertions** — Updated test expectations to match Claude 4.x and Gemini 2.5 model family.
+- **Skills MANIFEST** — Updated manifest to register all 10 core skills with proper paths and schema version.
+- **README rewritten** — Clear value proposition, quick-start, and architecture overview at the top.
+- **All docs version-stamped** — References updated to v10.0.0 throughout.
+- **SDK reference documentation** — Expanded from 28 lines to 230+ lines with full API surface coverage.
+
+### Fixed (v10.0.0)
+
+- **CRITICAL: Hardcoded npm token removed** — `NPM_TOKEN` was embedded in CI config; now sourced exclusively from environment variables with startup validation.
+- **CRITICAL: ZK-proof governance bypass closed** — `verifyZKProof()` previously returned `true` unconditionally; now throws `GovernanceViolationError` with fail-closed semantics.
+- **CRITICAL: Path traversal in temporal API** — `auditId` parameter accepted `../` sequences; now validated with regex allowlist and directory containment check.
+- **CRITICAL: Command injection in change-classifier** — Shell-interpreted user input replaced with argument-array invocation, eliminating shell interpretation.
+- **Runtime crash in learning-manager.js** — Null reference on empty knowledge store; added defensive initialization.
+- **4 broken test files** — Fixed `nexus-tracing.test.js`, `model-broker.test.js`, `feedback-loop.test.js`, and `security-audit.test.js` (stale mocks, missing fixtures, async race conditions).
+- **Observability workflow trigger** — Workflow `name:` field now matches the `workflow_run.workflows` reference in dependent jobs.
+- **Duplicate release-plane.yml** — Removed conflicting workflow file that caused CI confusion.
+
+### Removed (v10.0.0)
+
+- **better-sqlite3 dependency** — Native C++ addon removed in favor of sql.js (pure WASM). Eliminates `node-gyp`, Python, and platform-specific build toolchains.
+- **Dead CLI routes** — `sync-jira` and `sync-confluence` commands removed (integration stubs with no implementation).
+- **Duplicate release workflow** — `release-plane.yml` deleted; single `release.yml` is the canonical publish pipeline.
+- **Regex-based prompt injection blocklist** — Replaced by structured action allowlist (fewer false positives, auditable).
+
+---
+

package/changelogs/v10.0.2.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [10.0.2] - 2026-05-24 — "Persona Expansion"
+
+### Added (v10.0.2)
+
+- **47 new specialist personas** — Security & Compliance (6), Architecture & System Design (8), Frontend & UX (10), Performance & Reliability (5), Data & ML (4), DevOps & Infrastructure (6), Language Specialists (5), DX & Operations (8), Strategy & Review (9), Specialized Engineering (10).
+- **6 new swarm templates** — ArchitectureSwarm, PerformanceSwarm, InfrastructureSwarm, AccessibilitySwarm, ReviewSwarm, MigrationSwarm.
+- **Updated existing swarms** — UISwarm, BackendSwarm, SecuritySwarm, DeveloperExperienceSwarm, DataMeshSwarm, IncidentResponseSwarm, ComplianceSwarm, QualityAssuranceSwarm now include relevant new specialist personas.
+- **Swarm templates v5.0.0** — Bump from 4.2.0 with expanded member rosters and new specialist orchestration patterns.
+- **Persona registry documentation** — 10 new category tables in `docs/registry/PERSONAS.md`.
+- **Persona reference guide** — Updated `docs/PERSONAS.md` with all 47 entries (total: 108 personas).
+
+---
+

package/changelogs/v10.0.3.md

@@ -0,0 +1,21 @@
+# Changelog
+
+## [10.0.3] - 2026-05-25 — "Council Awakens"
+
+### Added (v10.0.3)
+
+- **10 new core skills** — agent-loops, multi-llm-consult, continuous-learning, council, verification-loop, threat-modeling, autonomous-loops, agent-introspection-debugging, cost-aware-routing, doc-health-audit.
+- **8 new commands** — `/mindforge:council`, `/mindforge:consult`, `/mindforge:verify-loop`, `/mindforge:introspect`, `/mindforge:cost-report`, `/mindforge:threat-model`, `/mindforge:learn-instinct`, `/mindforge:evolve-skills`.
+- **9 new personas** — cost-optimizer, threat-modeler, council-architect, council-skeptic, council-pragmatist, council-critic, instinct-curator, doc-auditor, multi-model-bridge.
+- **3 new swarm templates** — CouncilSwarm (HITL decision gate), VerificationSwarm (autonomous quality gates), LearningSwarm (instinct management).
+- **Skill Composition System** — Skills can now declare dependencies on other skills via `compose:` frontmatter field. Composed skills are injected as summaries (max 2-level depth, cycle detection).
+- **Instinct Engine** — Auto-capture learned behaviors with confidence scoring. Instincts auto-promote to skills at 0.85 confidence after 5+ successful applications. Project-scoped, max 100 per project.
+- **Cost Tracking Module** — Token budgeting, 5-tier model routing (Haiku/Sonnet/Opus/Gemini/GPT-4o), spend analytics via token-ledger.jsonl.
+- **Council Framework** — 4-voice decision harness (Architect, Skeptic, Pragmatist, Critic) with weighted consensus scoring, dissent documentation, and 5 pre-built templates.
+- **Cross-Iteration Bridge** — SHARED_TASK_NOTES.md for semantic context persistence across autonomous mode iterations (complements HANDOFF.json).
+- **Swarm templates v6.0.0** — Bump from v5.0.0 with 3 new templates (total: 21 swarm templates).
+- **claude-opus-4-7** added to market_registry in config.json.
+- **Loader composition step** — New Step 4.1 in skill loader for resolving `compose:` dependencies.
+
+---
+

package/changelogs/v10.0.4.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## [10.0.4] - 2026-05-26 — "Santa's Eval"
+
+### Added (v10.0.4)
+
+- **8 new core skills** — santa-method, eval-harness, quality-audit, testing-anti-patterns, defense-in-depth, codebase-onboarding, rfc-pipeline, de-sloppify.
+- **6 new commands** — `/mindforge:santa`, `/mindforge:eval`, `/mindforge:quality-audit`, `/mindforge:rfc`, `/mindforge:onboard`, `/mindforge:de-slop`.
+- **6 new personas** — eval-judge, rfc-architect, anti-pattern-hunter, onboarding-navigator, de-sloppifier, quality-scorer.
+- **3 new swarm templates** — EvalSwarm (autonomous eval gate), OnboardingSwarm (autonomous codebase discovery), RFCSwarm (HITL spec decomposition).
+- **Proactive Skill Suggestion Engine** — Signal-based skill detection (file/error/task patterns) with confidence threshold (0.7), cooldown tracking, and debounce logic.
+- **Eval storage** — `.mindforge/evals/` directory for persisting eval configs, rubrics, and results.
+- **Swarm templates v7.0.0** — Bump from v6.0.0 with 3 new templates (total: 24 swarm templates).
+
+---
+

package/changelogs/v10.0.5.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## [10.0.5] - 2026-05-26 — "Forge Master"
+
+### Added (v10.0.5)
+
+- **5 new core skills** — skill-creator-meta, deployment-workflow, dmux-workflows, vibe-security, instinct-clustering.
+- **5 new commands** — `/mindforge:create-skill`, `/mindforge:deploy`, `/mindforge:dmux`, `/mindforge:vibe-check`, `/mindforge:cluster-instincts`.
+- **5 new personas** — skill-smith, deployment-captain, dmux-orchestrator, vibe-checker, saga-orchestrator.
+- **2 new swarm templates** — DeploymentSwarm (HITL staged rollout), ForgeSwarm (autonomous skill creation).
+- **De-slop gate** — Phase 6.5 in verification-loop: informational de-slop scan before shipping (non-blocking).
+- **Cross-model eval spec** — `.mindforge/engine/cross-model-eval.md` for routing same task to 2 models and comparing outputs.
+- **Swarm templates v8.0.0** — Bump from v7.0.0 with 2 new templates (total: 26 swarm templates).
+
+---
+