mindforge-cc 11.9.2 → 11.9.3

package/docs/user-guide.md

@@ -1,8 +1,8 @@
-# MindForge User Guide (v11.9.0)
+# MindForge User Guide (v11.9.3)
 
 This guide gets you from install to productive, with the minimum needed to run MindForge in a real project.
 
-> **v11.9.0 Stats:** 35 workflows · 221 slash commands · 232 engine skills · 216 personas · 0 CVEs · 258/258 IQ200 checks passing
+> **v11.9.3 Stats:** 35 workflows · 221 slash commands · 232 engine skills · 216 personas · 0 CVEs · 258/258 IQ200 checks passing
 
 ## Prerequisites
 
@@ -44,7 +44,7 @@ mindforge health          # Verify project integrity
 mindforge security-scan   # Run security checks
 mindforge headless        # Run agent in non-interactive mode
 mindforge --verbose ...   # Enable verbose output for debugging
-mindforge --version       # Print installed version (e.g. 11.9.0) and exit 0
+mindforge --version       # Print installed version (e.g. 11.9.3) and exit 0
 ```
 
 Use `--verbose` (or `-v`) on any command for detailed diagnostic output. Use `--version` (or `-V`) to print the installed version and exit.
@@ -127,7 +127,7 @@ MindForge features 211 specialized personas. Each persona is optimized for a spe
 To switch personas or see the full list:
 
 ```bash
-/mindforge:personas --list
+ls .mindforge/personas/            # 216 persona briefs; there is no personas command
 ```
 
 ---
@@ -137,7 +137,7 @@ To switch personas or see the full list:
 For complex tasks that require minimal intervention:
 
 ```bash
-/mindforge:autonomous --phase [N]
+/mindforge:auto --phase [N]
 ```
 
 Use the **Steer** command to guide logic without stopping execution:
@@ -153,7 +153,7 @@ Use the **Steer** command to guide logic without stopping execution:
 Observe your agent waves, token spend, and milestone progress in real-time.
 
 ```bash
-/mindforge:dashboard --start --open
+/mindforge:dashboard --open
 ```
 
 The dashboard provides a premium web interface at `http://localhost:7339`.
@@ -179,7 +179,7 @@ Extend MindForge by learning from documentation or authoring custom protocols.
 
 ```bash
 /mindforge:learn https://docs.nextjs.org "nextjs-mastery"
-/mindforge:skill-creation # Author a new high-fidelity protocol
+/mindforge:skills-index   # browse the catalogue; author new skills per the guide in CLAUDE.md
 ```
 
 ---
@@ -189,7 +189,7 @@ Extend MindForge by learning from documentation or authoring custom protocols.
 MindForge features automated PR creation and commit management.
 
 ```bash
-/mindforge:pr-branch "feature/auth-refactor"
+git switch -c feature/auth-refactor   # no pr-branch command; use git, then /mindforge:pr-review
 /mindforge:ship --auto-pr
 ```
 
@@ -202,7 +202,7 @@ MindForge provides mission-critical resilience and sovereign reasoning for enter
 ### Multi-Cloud Arbitrage
 MindForge automatically hedges against provider outages and optimizes for cost/latency.
 ```bash
-/mindforge:settings --cloud-arbitrage on
+# settings live in MINDFORGE.md as [KEY] = value; edit it, then run `mindforge security-scan`
 ```
 
 ### Sovereign Reason Enclaves (SRE)
@@ -214,8 +214,8 @@ Tier 3 (Principal) agents execute reasoning in isolated enclaves to protect sens
 ### Dynamic Human-Agent Handover & Temporal Steering (Pillar VII)
 NEXUS enables sub-second state reconstruction and **Hindsight Injection**. When an agent drifts, roll back its logic via the Dashboard's **Temporal Slider** and inject a steering vector to re-orient the wave.
 ```bash
-/mindforge:temporal status     # View active reasoning snapshots
-/mindforge:temporal inject [ID] # Manual CLI-based hindsight
+mindforge temporal status      # View active reasoning snapshots (a CLI command)
+mindforge temporal inject [ID] # Manual CLI-based hindsight
 ```
 
 ### Agentic Revenue Operations (AgRevOps) (Pillar VIII)
@@ -239,7 +239,7 @@ The **Enterprise Expansion** introduces 14 hardened protocols from the Superpowe
 
 Activate the mesh for any session:
 ```bash
-/mindforge:neural-orchestrator
+# the orchestrator layer is a protocol in .mindforge/engine/, not a command
 ```
 
 ---
@@ -260,7 +260,7 @@ Keep your framework current with the latest personas and library updates:
 
 MindForge allows you to "time-travel" through your agent's reasoning.
 
-1.  **Launch the Dashboard**: `/mindforge:dashboard --start --open`
+1.  **Launch the Dashboard**: `/mindforge:dashboard --open`
 2.  **Navigate to 'Temporal'**: Use the horizontal slider to scrub through reasoning snapshots.
 3.  **Inspect State**: View the exact memory, file diffs, and thought chain at that point in space-time.
 4.  **Inject Hindsight**: If you see a logic error, use the **Hindsight Injector** form to roll back and provide a corrective "Steering Vector."
@@ -283,4 +283,4 @@ Monitor your project's economic performance in real-time via the **RevOps Hub**.
 - **USP & Roadmap**: `docs/usp-features.md`
 - **Commands**: `docs/commands-reference.md`
 - **Troubleshooting**: `docs/troubleshooting.md`
-- **Discord**: `/mindforge:join-discord`
+- **Issues**: https://github.com/sairam0424/MindForge/issues

package/examples/sdk-integration/README.md

@@ -1,6 +1,6 @@
 # SDK Integration Example
 
-Demonstrates basic usage of the `@mindforge/sdk` package.
+Demonstrates basic usage of the `mindforge-sdk` package.
 
 ## Prerequisites
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mindforge-cc",
-  "version": "11.9.2",
-  "description": "MindForge \u2014 Sovereign Agentic Intelligence Framework. Sovereign Stability: Production-Hardened Agentic Intelligence (v11)",
+  "version": "11.9.3",
+  "description": "MindForge — Sovereign Agentic Intelligence Framework. Sovereign Stability: Production-Hardened Agentic Intelligence (v11)",
   "bin": {
     "mindforge-cc": "bin/install.js",
     "mindforge": "bin/mindforge-cli.js"
@@ -62,12 +62,16 @@
     "coverage": "npx c8 node tests/run-all.js",
     "lint": "eslint .",
     "harness:audit": "node bin/harness-audit.js",
+    "harness:gate": "node bin/harness-audit.js --min-score 76 --fail-on-findings",
+    "harness:gate:install": "node scripts/ci/harness-gate-install.js",
     "harness:compliance": "node bin/installer/harness-adapter-compliance.js --check",
     "release:ready": "node bin/utils/readiness-gate.js release",
+    "version:check": "node scripts/sync-version.js --check",
     "validate:assets": "node scripts/ci/validate-assets.js",
     "eval:retrieval": "node bin/eval/eval-harness.js --set golden-set-retrieval.json --min-recall 0.55",
     "commit": "cz",
-    "prepare": "husky"
+    "prepare": "husky",
+    "verify:pinning": "node scripts/ci/verify-action-pinning.js"
   },
   "keywords": [
     "claude-code",

package/subagents/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "version": "1.0.3",
-    "description": "Curated collection of 154 specialized Claude Code subagents organized into 10 focused categories"
+    "description": "Curated collection of 164 specialized Claude Code subagents organized into 10 focused categories"
   },
   "plugins": [
     {

package/bin/dashboard/approval-handler.js

@@ -1,136 +0,0 @@
-/**
- * MindForge v2 — Approval Handler
- * Handles POST /api/approve/:id — approve or reject governance requests.
- * Reads/writes APPROVAL-*.json files in .planning/approvals/
- */
-'use strict';
-
-const fs   = require('fs');
-const path = require('path');
-
-// Paths resolved lazily for testing
-const getPaths = () => ({
-  approvals: path.join(process.cwd(), '.planning', 'approvals'),
-  audit:     path.join(process.cwd(), '.planning', 'AUDIT.jsonl'),
-});
-
-/**
- * Process an approval decision from the dashboard.
- * @param {string} approvalId - The APPROVAL UUID
- * @param {string} decision   - 'approve' or 'reject'
- * @param {string} comment    - Optional comment
- * @param {string} approver   - Approver identifier (email or name)
- * @returns {{ success, decision, message }}
- */
-function processDecision(approvalId, decision, comment, approver, confirmationId = null) {
-  // Input validation
-  if (!approvalId || typeof approvalId !== 'string') {
-    return { success: false, error: 'Invalid approval ID' };
-  }
-
-  // Sanitize approvalId — only allow UUID characters
-  if (!/^[a-f0-9-]{36}$/.test(approvalId)) {
-    return { success: false, error: 'Malformed approval ID format' };
-  }
-
-  if (!['approve', 'reject'].includes(decision)) {
-    return { success: false, error: 'Decision must be "approve" or "reject"' };
-  }
-
-  // Find the approval file
-  const paths    = getPaths();
-  const filePath = path.join(paths.approvals, `APPROVAL-${approvalId}.json`);
-  if (!fs.existsSync(filePath)) {
-    return { success: false, error: `Approval not found: ${approvalId}` };
-  }
-
-  let approval;
-  try {
-    approval = JSON.parse(fs.readFileSync(filePath, 'utf8'));
-  } catch {
-    return { success: false, error: 'Cannot parse approval file' };
-  }
-
-  // Validate approval is still pending
-  if (approval.status !== 'pending') {
-    return { success: false, error: `Approval already ${approval.status}` };
-  }
-
-  // Check expiry
-  if (approval.expires_at && new Date(approval.expires_at) < new Date()) {
-    return { success: false, error: 'Approval has expired' };
-  }
-
-  // TIER 3 CONFIRMATION — require typing the plan ID
-  if (approval.tier === 3 && decision === 'approve') {
-    const expectedConfirmation = `${approval.phase}-${approval.plan}`;
-    if (!confirmationId || confirmationId.trim() !== expectedConfirmation) {
-      return {
-        success: false,
-        error: `Tier 3 approval requires typing the plan ID "${expectedConfirmation}" to confirm.`,
-        confirmation_required: true,
-        expected: expectedConfirmation,
-        tier3_warning: 'This is a Tier 3 change (auth/payment/PII). Review the code diff before approving.',
-      };
-    }
-  }
-
-  // Write AUDIT entry FIRST (before updating file)
-  writeAuditEntry({
-    id:          require('crypto').randomBytes(8).toString('hex'),
-    timestamp:   new Date().toISOString(),
-    event:       decision === 'approve' ? 'approval_granted' : 'approval_rejected',
-    approval_id: approvalId,
-    tier:        approval.tier,
-    phase:       approval.phase,
-    plan:        approval.plan,
-    resolved_by: approver || 'dashboard',
-    comment:     comment || null,
-    agent:       'mindforge-dashboard',
-    session_id:  'dashboard',
-  });
-
-  // Update approval file
-  const updated = {
-    ...approval,
-    status:       decision === 'approve' ? 'approved' : 'rejected',
-    resolved_at:  new Date().toISOString(),
-    resolved_by:  approver || 'dashboard',
-    comment:      comment || null,
-    resolution_channel: 'mindforge-dashboard',
-  };
-
-  fs.writeFileSync(filePath, JSON.stringify(updated, null, 2));
-
-  return {
-    success:     true,
-    decision,
-    approval_id: approvalId,
-    tier:        approval.tier,
-    message:     `${approval.tier === 3 ? 'Tier 3' : 'Tier 2'} approval ${decision}d for Plan ${approval.phase}-${approval.plan}`,
-  };
-}
-
-function writeAuditEntry(entry) {
-  try {
-    const paths = getPaths();
-    if (!fs.existsSync(path.dirname(paths.audit))) return;
-    // UC-04b: unified, hash-chained, durable append into the single verifiable chain.
-    const { appendAuditEntrySync } = require('../autonomous/audit-writer');
-    appendAuditEntrySync(paths.audit, entry);
-  } catch { /* ignore AUDIT write failures */ }
-}
-
-function listApprovals() {
-  const paths = getPaths();
-  if (!fs.existsSync(paths.approvals)) return [];
-  return fs.readdirSync(paths.approvals)
-    .filter(f => f.startsWith('APPROVAL-') && f.endsWith('.json'))
-    .map(f => {
-      try { return JSON.parse(fs.readFileSync(path.join(paths.approvals, f), 'utf8')); }
-      catch { return null; }
-    })
-    .filter(Boolean);
-}
-
-module.exports = { processDecision, listApprovals };