mindforge-cc 11.9.6 → 11.9.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,19 +1,22 @@
1
1
  ---
2
2
  name: "mindforge-join-discord"
3
- description: "Join the MindForge Discord community"
3
+ description: "Find the current MindForge community/support channel"
4
4
  ---
5
5
 
6
6
 
7
7
  <objective>
8
- Display the Discord invite link for the MindForge community server.
8
+ Display the current, working channel for MindForge community discussion and support.
9
9
  </objective>
10
10
 
11
11
  <output>
12
- # Join the MindForge Discord
12
+ # MindForge community & support
13
13
 
14
- Connect with other MindForge users, get help, share what you're building, and stay updated.
14
+ The `discord.gg/mindforge` invite that used to be linked here is no longer valid (verified
15
+ against Discord's own invite API, not just an HTTP redirect check). GitHub Discussions is the
16
+ current, working channel:
15
17
 
16
- **Invite link:** https://discord.gg/mindforge
18
+ **https://github.com/sairam0424/MindForge/discussions**
17
19
 
18
- Click the link or paste it into your browser to join.
20
+ For a specific bug or feature request, use the issue templates instead:
21
+ https://github.com/sairam0424/MindForge/issues/new/choose
19
22
  </output>
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "11.9.6",
2
+ "version": "11.9.8",
3
3
  "environment": "development",
4
4
  "governance": {
5
5
  "drift_threshold": 0.75,
package/CHANGELOG.md CHANGED
@@ -1,5 +1,89 @@
1
1
  # Changelog
2
2
 
3
+ ## [11.9.8] — 2026-09-21 — What the README claims, verified line by line
4
+
5
+ Patch release. v11.9.7's README rewrite got a literal, end-to-end audit: every command it
6
+ documents actually run — real `npx` installs, a real Homebrew install/uninstall cycle, a
7
+ real `npm i mindforge-sdk`, live registry checks — instead of re-reading the prose. 113
8
+ claims checked: 98 held up, 14 didn't, 1 couldn't be verified either way. All 14 confirmed
9
+ failures are fixed here.
10
+
11
+ ### Fixed
12
+
13
+ **Two real bugs, not just docs**
14
+
15
+ - `--runtime claude,cursor` (or any comma-separated runtime list) crashed the installer
16
+ outright ("Cannot read properties of undefined (reading 'localDir')"). `--all` already
17
+ expanded into a real multi-runtime loop; a comma-separated `--runtime` value was never
18
+ split into it, so it was looked up as the literal key `RUNTIMES['claude,cursor']`, which
19
+ doesn't exist. Fixed, plus a graceful "Unknown runtime(s)" exit for typos instead of a raw
20
+ crash.
21
+ - `--minimal` claimed "no persona library" but shipped all 216 personas anyway — the
22
+ `minimalEntries` allowlist in `bin/installer-core.js` explicitly included `'personas'`.
23
+ Removed.
24
+
25
+ **Twelve documentation inaccuracies**
26
+
27
+ - Removed a `[--ads]` flag hint on `/mindforge:plan-phase` that was never wired into the
28
+ live command spec — it only exists in a much larger, never-ported legacy workflow file.
29
+ - Reworded the bare `npx mindforge-cc@latest` "auto-detects your runtime" claim: real
30
+ detection only runs inside the interactive TTY wizard (and even there it's a pre-selected
31
+ default you still confirm); every non-interactive invocation (CI, piped stdin, scripted)
32
+ hardcodes `--claude`.
33
+ - Disclosed that `/mindforge:health --repair` is documented in the command spec but not
34
+ wired into the CLI backing path — the flag is silently dropped, output is byte-identical
35
+ to plain `health`.
36
+ - Fixed `/mindforge:tokens --profile` — that flag doesn't exist; swapped in a real one
37
+ (`--optimise`) and listed the actual flag set.
38
+ - Disclosed that `node bin/mindforge-cli.js spawn <persona>` is a v1.0 stub that exits 1
39
+ with "NOT IMPLEMENTED", not a working scripted path.
40
+ - Corrected the License section's copyright holder to match `LICENSE` exactly.
41
+ - Fixed the architecture diagram's skill count: only 232 of the 355 skills live under
42
+ `.mindforge/` (engine tier); the other 123 are under `.agent/skills/` (extended tier).
43
+ - Corrected `bin/`'s "~22K LOC" claim to the measured ~32K raw / ~25K stripped-of-comments.
44
+ - Narrowed the Config reference doc-table row — that doc never mentions
45
+ `.mindforge/config.json`.
46
+ - Reworded the Threat model doc-table row — that file is explicitly historical (v1.0.0-era),
47
+ not re-reviewed against v11.x, and redirects to `SECURITY.md`.
48
+ - Reworded the USP-features doc-table row — that file has zero competitor comparison
49
+ content; it's the same honesty pass applied to MindForge's own features.
50
+ - Disclosed that the `mindforge-plugin-*` namespace has zero packages published under it
51
+ today.
52
+
53
+ ## [11.9.7] — 2026-09-20 — The install banner stops contradicting itself
54
+
55
+ Patch release. Found by actually running the documented install command
56
+ (`npx mindforge-cc@latest --claude --local`) in a clean project instead of stopping at
57
+ `--version` — the check that should have caught the v11.9.6 regressions below before they
58
+ shipped.
59
+
60
+ ### Fixed
61
+
62
+ **Two real bugs in the install banner itself, both live in every v11.9.6 install**
63
+
64
+ - **Version self-contradiction.** The top banner (`bin/wizard/theme.js`'s
65
+ `printBrandManifest()`) hardcoded `SOVEREIGN INTELLIGENCE v8.1.1`, while the install
66
+ activation line two screens later (`bin/installer-core.js`) prints `v8.2.0` for the same
67
+ subsystem — one command, two version numbers. Standardized on `v8.2.0`.
68
+ - **False "Enabled" claim.** The same top banner said `PQAS & Proactive Homing Enabled`
69
+ unconditionally, directly contradicting the accurate disclosure a few lines later in the
70
+ same run: "available in simulated/experimental mode (inactive by default)". Changed to
71
+ `PQAS (simulated) & Proactive Homing`. `bin/engine/learning-manager.js` carried the
72
+ identical string; fixed there too.
73
+ - **Dead docs link.** The banner's `Docs: https://docs.mindforge.cc` fails TLS handshake —
74
+ DNS resolves but no site was ever deployed there. Repointed to the real, verified-live
75
+ `https://github.com/sairam0424/MindForge#documentation`.
76
+
77
+ **Doc regression from the v11.9.6 pass, self-inflicted**
78
+
79
+ - The persona-count reconciliation in v11.9.6 used a naive
80
+ `find .mindforge/personas -type f | wc -l` (218), which silently swept in
81
+ `swarm-templates.json` and `overrides/README.md` — neither is a persona. The installer's
82
+ own `collectManifestStats()` counts top-level `.md` files only: **216**, matching the
83
+ preserved 2026-08-16 codebase-index snapshot. Reverted `README.md`,
84
+ `docs/CAPABILITIES-MANIFEST.md`, `docs/user-guide.md`, `docs/PERSONAS.md`,
85
+ `docs/registry/PERSONAS.md`, and `docs/registry/README.md`.
86
+
3
87
  ## [11.9.6] — 2026-09-20 — The docs stop overselling what the code discloses about itself
4
88
 
5
89
  Patch release. No new features — this is the release-readiness pass before pointing real
package/MINDFORGE.md CHANGED
@@ -1,9 +1,9 @@
1
- # MINDFORGE.md — Parameter Registry (v11.9.6)
1
+ # MINDFORGE.md — Parameter Registry (v11.9.8)
2
2
 
3
3
  ## 1. IDENTITY & VERSIONING
4
4
 
5
5
  [NAME] = MindForge
6
- [VERSION] = 11.9.6
6
+ [VERSION] = 11.9.8
7
7
  [STABLE] = true
8
8
  [MODE] = "Platform Sovereign"
9
9
  [REQUIRED_CORE_VERSION] = 11.9.1
package/README.md CHANGED
@@ -4,43 +4,208 @@
4
4
  [![npm downloads](https://img.shields.io/npm/dm/mindforge-cc.svg)](https://www.npmjs.com/package/mindforge-cc)
5
5
  [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
6
6
  [![Node >=18](https://img.shields.io/badge/node-%3E%3D18-brightgreen.svg)](package.json)
7
+ [![CI](https://github.com/sairam0424/MindForge/actions/workflows/mindforge-ci.yml/badge.svg)](https://github.com/sairam0424/MindForge/actions/workflows/mindforge-ci.yml)
7
8
 
8
- **An agentic intelligence framework for Claude Code** — orchestrates multi-agent workflows with governance, memory, and autonomous execution. Production-hardened with true parallelism, streaming SDK, and zero-trust security. Install once, get structured AI-driven development with built-in quality gates.
9
+ **A governance and orchestration layer for Claude Code.**
9
10
 
10
- **At a glance:** 221 slash commands · 355 skills (232 auto-triggered + 123 explicit) · 218 personas · 164 installable subagents · 35 pre-built multi-agent dynamic workflows · a tamper-evident audit hash-chain · cost-aware routing across Anthropic/OpenAI/Gemini/Bedrock/Ollama · a local-first knowledge graph on zero-native-dependency SQLite (sql.js) · a live Express+SSE dashboard. Ships as an npm package, a Claude Code plugin, and an MCP server.
11
+ Claude Code alone runs one agent in one context. MindForge adds the parts that don't fit in a
12
+ single context window: skills that auto-load by trigger, personas you can call by name, a
13
+ wave-based executor that fans work out to fresh-context subagents and commits per task, a
14
+ tamper-evident audit chain, and cost-aware routing across providers. Install it once and get
15
+ `/mindforge:plan-phase` → `/mindforge:execute-phase` → `/mindforge:verify-phase` → `/mindforge:ship`
16
+ as your actual working loop, not a slogan.
11
17
 
12
- **Jump to:** [Latest release](#latest-release) · [What is actually enforced](#what-is-actually-enforced) · [Install](#install) · [Quick start](#quick-start-new-project) · [Documentation](#documentation) · [Core workflow](#core-workflow) · [Dynamic workflows](#dynamic-workflow-library)
18
+ <!-- TODO: record a ~30s terminal cast of one real /mindforge:plan-phase -> /mindforge:execute-phase
19
+ run (asciinema or GIF) and embed it here. Every comparable README in this space leads with a
20
+ visual in the first 15 lines; this is currently the single biggest gap. -->
21
+
22
+ **Jump to:** [Latest release](#latest-release) · [What you get](#what-you-get) · [What is actually enforced](#what-is-actually-enforced) · [Install](#install) · [Quick start](#quick-start-new-project) · [Documentation](#documentation) · [Core workflow](#core-workflow) · [Dynamic workflows](#dynamic-workflow-library)
23
+
24
+ ---
25
+
26
+ ## What you get
27
+
28
+ | | Capability | Detail |
29
+ |---|---|---|
30
+ | 🧩 | **221 slash commands** | `/mindforge:plan-phase`, `/mindforge:execute-phase`, `/mindforge:ship`, and 218 more — [full reference](docs/commands-reference.md) |
31
+ | 🛠️ | **355 skills** | 232 auto-triggered by keyword match (engine tier) + 123 explicit, invoked by name (extended tier) |
32
+ | 🎭 | **216 personas** | In-session role overlays via `/mindforge:agent <name>` — same context, different behavioral spec |
33
+ | 🤖 | **164 subagents** | Genuine isolated-context Claude-Code-native subagent definitions — a separate mechanism from personas, see [docs/PERSONAS.md](docs/PERSONAS.md) |
34
+ | 🔀 | **35 dynamic workflows** | Multi-agent fan-out scripts across 5 tiers (Research, Dev, Ops, Intelligence, Beast) — [workflow atlas](docs/workflow-atlas.md) |
35
+ | 🔒 | **Tamper-evident audit chain** | SHA-256 hash-linked `.planning/AUDIT.jsonl`; verify independently with `node bin/verify-audit.js` |
36
+ | 💸 | **Cost-aware model routing** | Anthropic / OpenAI / Gemini / Bedrock / Ollama, routed by task difficulty tier |
37
+ | 🧠 | **Local-first knowledge graph** | Zero-native-dependency SQLite (`sql.js` / WASM) — no native build step |
38
+ | 📊 | **Live dashboard** | Express + SSE at `localhost:7339` |
39
+
40
+ Ships three ways: an npm package (`npx mindforge-cc@latest`), a Claude Code plugin marketplace
41
+ entry, and an MCP server.
42
+
43
+ ---
44
+
45
+ ## Install
46
+
47
+ Pick whichever matches how you work — all of these are real, live channels.
48
+
49
+ ### `npx` (recommended)
50
+
51
+ Writes `.mindforge/` governance, memory, and planning into your project:
52
+
53
+ ```bash
54
+ npx mindforge-cc@latest --claude --local # Claude Code, this project only
55
+ npx mindforge-cc@latest --antigravity --local # Antigravity, this project only
56
+ npx mindforge-cc@latest # interactive wizard, pre-selects a detected runtime
57
+ ```
58
+
59
+ The bare form only detects anything inside an interactive TTY wizard session, where it pre-selects
60
+ — you still confirm — whichever runtime it finds. Run it non-interactively (CI, piped, scripted,
61
+ or anywhere `stdin` isn't a TTY) and it skips the wizard entirely and installs `--claude` by
62
+ default, regardless of what's actually on the machine.
63
+
64
+ **Global** (system-wide, for your primary AI coding runtime):
65
+
66
+ ```bash
67
+ npx mindforge-cc@latest --claude --global
68
+ ```
69
+
70
+ (`npm install -g mindforge-cc@latest` only puts the `mindforge-cc`/`mindforge` binaries on your
71
+ PATH — it doesn't select a runtime or write anything. Run the command above, or the equivalent
72
+ `mindforge-cc --claude --global` once installed, to actually scaffold a global setup.)
73
+
74
+ **Other runtimes** — same flag pattern, swap `--global`/`--local`:
75
+
76
+ | Runtime | Flag |
77
+ |---|---|
78
+ | Claude Code | `--claude` |
79
+ | Antigravity | `--antigravity` |
80
+ | Cursor | `--cursor` |
81
+ | GitHub Copilot | `--copilot` |
82
+ | Gemini CLI | `--gemini` |
83
+
84
+ **Advanced:** `--runtime claude,cursor` (combined runtimes) · `--with-utils` (installs local `bin/` utilities) · `--minimal` (essential scaffolding only, no persona library) · `--force` (rewrite an existing `.mindforge/MINDFORGE-SCHEMA.json` with the current, stricter schema)
85
+
86
+ ### Claude Code plugin marketplace
87
+
88
+ No project files written — the plugin's hooks fire, see [What is actually enforced](#what-is-actually-enforced) for what that does and does not cover.
89
+
90
+ ```bash
91
+ /plugin marketplace add sairam0424/MindForge
92
+ /plugin install mindforge@mindforge
93
+ ```
94
+
95
+ Prefer just a slice (e.g. Python agents)? `mindforge-lang@mindforge` and 9 other focused packs exist — see [docs/plugin-installation.md](docs/plugin-installation.md) for all 10, token-budget guidance, and team setup.
96
+
97
+ ### Standalone MCP server
98
+
99
+ ```bash
100
+ claude mcp add mindforge -- npx -y mindforge-mcp-server
101
+ ```
102
+
103
+ Exposes 8 tools over stdio (6 read-only, 1 guarded write, 1 guarded browse proxy). Also listed on
104
+ the [MCP Registry](https://registry.modelcontextprotocol.io) as `io.github.sairam0424/mindforge`
105
+ — that entry is republished manually and can lag; check what it actually serves before relying on
106
+ it, or install `mindforge-mcp-server` from npm directly to pin a version.
107
+
108
+ ### Homebrew
109
+
110
+ ```bash
111
+ brew install sairam0424/tap/mindforge
112
+ ```
113
+
114
+ ### SDK
115
+
116
+ Build on MindForge programmatically:
117
+
118
+ ```bash
119
+ npm i mindforge-sdk
120
+ ```
121
+
122
+ **Upgrading from 11.9.x?** The installer does not overwrite an existing
123
+ `.mindforge/MINDFORGE-SCHEMA.json`, so 11.9.2's armed config validator keeps the older
124
+ permissive schema on a plain upgrade — run with `--force` for the stricter gate. The daily cost
125
+ cap declared as `[COST_HARD_LIMIT_USD]` in `MINDFORGE.md` was **not enforced** in 11.9.2 (11.9.3
126
+ arms it), and an upgrade never rewrites an existing `MINDFORGE.md` — add
127
+ `[COST_HARD_LIMIT_USD] = 25.00` yourself if yours predates the key.
128
+
129
+ Full install matrix, plugin packs, and team-setup guidance: [docs/getting-started.md](docs/getting-started.md).
130
+
131
+ ---
132
+
133
+ ## Verify
134
+
135
+ These `/mindforge:*` commands require the Claude Code plugin or an `npx`/Homebrew framework
136
+ install — the standalone MCP server exposes MCP tools instead, and `mindforge-sdk` exposes a
137
+ programmatic API; neither installs these slash commands.
138
+
139
+ ```bash
140
+ /mindforge:health # framework + installation health check
141
+ /mindforge:health --repair # documented in the command spec, but NOT wired into the CLI
142
+ # backing path — silently ignored, output is byte-identical to plain health
143
+ /mindforge:status # project status snapshot
144
+ /mindforge:next # auto-discover your first task
145
+ ```
146
+
147
+ Full verification walkthrough: [docs/quick-verify.md](docs/quick-verify.md).
148
+
149
+ ---
150
+
151
+ ## Quick start (new project)
152
+
153
+ ```bash
154
+ /mindforge:init-project
155
+ /mindforge:plan-phase 1
156
+ /mindforge:execute-phase 1
157
+ /mindforge:verify-phase 1
158
+ /mindforge:ship 1
159
+ ```
160
+
161
+ ## Quick start (existing codebase)
162
+
163
+ ```bash
164
+ /mindforge:map-codebase
165
+ /mindforge:do I want to plan the next phase
166
+ /mindforge:plan-phase 1
167
+ ```
13
168
 
14
169
  ---
15
170
 
16
171
  ## Latest release
17
172
 
18
- **v11.9.6** (2026-09-20) — The docs stop overselling what the code discloses about itself.
19
- The release-readiness pass before pointing real, external users at the project: fixed a
20
- crash in `/mindforge:learn` (wrong argument shape into `skill-registrar.js`), a token-leak
21
- and inconsistent auth in the browser daemon, three dashboard panels that silently rendered
22
- nothing, a stale Homebrew formula, and a long-running pattern of docs describing
23
- PQAS/ZTAI/"Pillar"-numbered subsystems as live security guarantees when the code that
24
- implements them already self-labels them simulated and off-by-default. No new features.
25
- See [RELEASENOTES.md](./RELEASENOTES.md) for the human-readable summary, or
26
- [CHANGELOG.md](./CHANGELOG.md) for the complete, file-by-file list.
27
-
28
- The previous release, **v11.9.5**, fixed a release pipeline that could strand itself
29
- mid-publish and shipped `mindforge-sdk` for the first time since 11.8.0, with provenance.
30
- **v11.9.4**, before that, is where the hook gates started actually registering: 11.9.3
31
- shipped the code and then declined to run it on essentially every project. Measured against
32
- the published tarballs — 11.9.3: **11 hook scripts installed, 0 registered**; 11.9.4:
33
- **8 registered, 3 deny-class verified blocking**. That **behaviour change under a patch
34
- bump** still applies — the installer writes `.claude/settings.json` where it previously
35
- declined, merging append-only and backing up first. See the BREAKING section in
36
- [CHANGELOG.md](./CHANGELOG.md).
173
+ **v11.9.8** (2026-09-21) — What the README claims, verified line by line. v11.9.7's README
174
+ rewrite got a literal, end-to-end audit: every command it documents actually run — real
175
+ `npx` installs, a real Homebrew install/uninstall cycle, a real `npm i mindforge-sdk`, live
176
+ registry checks — instead of re-read for plausibility. 113 claims checked, 98 held up, 14
177
+ didn't, 1 couldn't be verified either way. Two of the 14 were real bugs:
178
+ `--runtime claude,cursor` crashed the installer outright, and `--minimal` claimed "no
179
+ persona library" but shipped all 216 anyway. Both fixed. The other twelve were
180
+ documentation catching up to what the code actually does — a removed `[--ads]` hint that
181
+ was never real, the auto-detect claim, `--repair`, `--profile`, the CLI `spawn` stub, the
182
+ License holder, the skill-tier split, the `bin/` line count, three Documentation-table rows
183
+ that overstated their linked docs, and the `mindforge-plugin-*` namespace's empty catalog.
184
+ See [RELEASENOTES.md](./RELEASENOTES.md) or [CHANGELOG.md](./CHANGELOG.md).
185
+
186
+ The previous release, **v11.9.7**, fixed a version self-contradiction and a false "Enabled"
187
+ claim in the install banner, a dead `docs.mindforge.cc` link, and a persona-count doc
188
+ regression (218 → back to the correct 216) introduced by v11.9.6's own honesty pass.
189
+ **v11.9.6** was the release-readiness pass before pointing real, external users at the
190
+ project for the first time: fixed a crash in `/mindforge:learn`, a token-leak in the
191
+ browser daemon, three dashboard panels that silently rendered nothing, a stale Homebrew
192
+ formula, and docs describing PQAS/ZTAI/"Pillar"-numbered subsystems as live guarantees when
193
+ the code already self-labels them simulated. **v11.9.5** fixed a release pipeline that
194
+ could strand itself mid-publish and shipped `mindforge-sdk` for the first time since
195
+ 11.8.0, with provenance. **v11.9.4**, before that, is where the hook gates started actually
196
+ registering: 11.9.3 shipped the code and then declined to run it on essentially every
197
+ project. Measured against the published tarballs — 11.9.3: **11 hook scripts installed, 0
198
+ registered**; 11.9.4: **8 registered, 3 deny-class verified blocking**. That **behaviour
199
+ change under a patch bump** still applies — the installer writes `.claude/settings.json`
200
+ where it previously declined, merging append-only and backing up first. See the BREAKING
201
+ section in [CHANGELOG.md](./CHANGELOG.md).
37
202
 
38
203
  ---
39
204
 
40
205
  ## What is actually enforced
41
206
 
42
- Read this before the install instructions. MindForge ships a large corpus of agent
43
- instructions — commands, skills, personas, protocols — and those are advisory: they work by
207
+ Read this before you rely on anything below blocking a bad command. MindForge ships a large
208
+ corpus of agent instructions — commands, skills, personas, protocols — and those are advisory: they work by
44
209
  being in the model's context, and a model can decline them. The parts that would *block* an
45
210
  action are hooks. Through 11.9.2 **no channel registered them.** 11.9.3 added the registration code
46
211
  but it declined to run on almost every project, so in practice nothing was enforced there either.
@@ -90,91 +255,64 @@ instructions — review what you install. The audit chain is verifiable today
90
255
 
91
256
  ---
92
257
 
93
- ## Install
94
-
95
- Claude Code plugin marketplace (no project files written). The plugin's hooks now fire — see
96
- *What is actually enforced* above for what that does and does not cover.
97
-
98
- ```bash
99
- /plugin marketplace add sairam0424/MindForge
100
- /plugin install mindforge@mindforge
101
- ```
102
-
103
- Or the full framework engine via `npx` (writes `.mindforge/` governance, memory, and planning into your project):
104
-
105
- ```bash
106
- npx mindforge-cc@latest --claude --local
107
- ```
108
-
109
- All install channels (global, local, Antigravity, Cursor, Copilot, Gemini CLI, MCP server, combined runtimes, `--minimal`): see [docs/getting-started.md](docs/getting-started.md).
110
-
111
- **Upgrading from 11.9.x?** The installer does not overwrite an existing
112
- `.mindforge/MINDFORGE-SCHEMA.json`, so 11.9.2's armed config validator keeps the older
113
- permissive schema on a plain upgrade. Run with `--force` if you want the stricter gate. The
114
- daily cost cap declared as `[COST_HARD_LIMIT_USD]` in `MINDFORGE.md` was **not enforced** in
115
- 11.9.2; 11.9.3 arms it. An upgrade never rewrites an existing `MINDFORGE.md`, so if yours
116
- predates the key the cap stays off — add `[COST_HARD_LIMIT_USD] = 25.00` to turn it on.
117
-
118
- ---
119
-
120
- ## Verify
258
+ ## How it fits together
121
259
 
122
- ```bash
123
- /mindforge:health # framework + installation health check
124
- /mindforge:health --repair # fix anything the health check flags
125
- /mindforge:status # project status snapshot
126
- /mindforge:next # auto-discover your first task
127
260
  ```
128
-
129
- Full verification walkthrough: [docs/quick-verify.md](docs/quick-verify.md).
130
-
131
- ---
132
-
133
- ## Quick start (new project)
134
-
135
- ```bash
136
- /mindforge:init-project
137
- /mindforge:plan-phase 1
138
- /mindforge:execute-phase 1
139
- /mindforge:verify-phase 1
140
- /mindforge:ship 1
261
+ /mindforge:plan-phase N
262
+ |
263
+ v
264
+ Skill Loader (trigger-match, tier: Project > Org > Core)
265
+ |
266
+ v
267
+ Context Injector (<=60K tokens) --> Cost Router
268
+ | (Haiku / Sonnet / Opus / Gemini,
269
+ v by task difficulty)
270
+ Fresh-context Subagent (implement -> self-verify -> commit)
271
+ |
272
+ v
273
+ Verification (build / typecheck / lint / test / security / diff)
274
+ |
275
+ v
276
+ Handoff (.planning/HANDOFF.json + AUDIT.jsonl)
141
277
  ```
142
278
 
143
- ## Quick start (existing codebase)
144
-
145
- ```bash
146
- /mindforge:map-codebase
147
- /mindforge:do I want to plan the next phase
148
- /mindforge:plan-phase 1
149
- ```
279
+ Four layers underlie this, top to bottom: **Interface** (`.claude/`, `.agent/` — the 221 slash
280
+ commands and hooks), **Engine specs** (`.mindforge/` — 232 of the 355 skills plus 216 personas and
281
+ `config.json` runtime knobs; the other 123 skills are extended-tier, under `.agent/skills/`),
282
+ **Execution** (`bin/`, ~32K raw / ~25K stripped-of-comments LOC — the wave executor, governance,
283
+ memory, and dashboard code that actually runs), and **Persistence** (`.planning/` — `STATE.md`,
284
+ the audit chain, resumable `HANDOFF.json`). Edit behavior in layer 2 where possible; layer 3 is
285
+ the only place with real enforcement, per *What is actually enforced* above.
150
286
 
151
287
  ---
152
288
 
153
289
  ## Documentation
154
290
 
155
- - **User Guide:** [docs/user-guide.md](docs/user-guide.md)
156
- - **Getting started:** [docs/getting-started.md](docs/getting-started.md)
157
- - **Quick verify:** [docs/quick-verify.md](docs/quick-verify.md)
158
- - **Troubleshooting:** [docs/troubleshooting.md](docs/troubleshooting.md)
159
- - **FAQ:** [docs/faq.md](docs/faq.md)
160
- - **Full tutorial:** [docs/tutorial.md](docs/tutorial.md)
161
- - **Commands reference (full):** [docs/commands-reference.md](docs/commands-reference.md)
162
- - **Commands (quick):** [docs/References/commands.md](docs/References/commands.md)
163
- - **Config reference:** [docs/References/config-reference.md](docs/References/config-reference.md)
164
- - **SDK:** [docs/References/sdk-api.md](docs/References/sdk-api.md)
165
- - **Skills:** [docs/References/skills-api.md](docs/References/skills-api.md)
166
- - **Audit events:** [docs/References/audit-events.md](docs/References/audit-events.md)
167
- - **Upgrade guide:** [docs/upgrade.md](docs/upgrade.md)
168
- - **Workflow atlas:** [docs/workflow-atlas.md](docs/workflow-atlas.md)
169
- - **Security:** [SECURITY.md](SECURITY.md) (credentials are read from env vars and never committed to the repository)
170
- - **Threat model:** [docs/security/threat-model.md](docs/security/threat-model.md)
171
- - **Architecture:** [docs/architecture/README.md](docs/architecture/README.md)
172
- - **Contributing:** [docs/contributing/CONTRIBUTING.md](docs/contributing/CONTRIBUTING.md)
173
- - **Release notes:** [RELEASENOTES.md](RELEASENOTES.md)
174
- - **CI quickstart:** [docs/ci-quickstart.md](docs/ci-quickstart.md)
175
- - **Requirements:** [docs/requirements.md](docs/requirements.md)
176
- - **Release checklist guide:** [docs/release-checklist-guide.md](docs/release-checklist-guide.md)
177
- - **USPs and features:** [docs/usp-features.md](docs/usp-features.md)
291
+ Six categories, read in this order the first time:
292
+
293
+ | Category | Doc | Read this when |
294
+ |---|---|---|
295
+ | Start here | [Getting started](docs/getting-started.md) | Installing for the first time |
296
+ | Start here | [Quick verify](docs/quick-verify.md) | Right after install — confirm it actually works |
297
+ | Start here | [User guide](docs/user-guide.md) | Learning the day-to-day command loop |
298
+ | Start here | [Full tutorial](docs/tutorial.md) | Want a guided walkthrough instead of reference docs |
299
+ | Reference | [Commands (full)](docs/commands-reference.md) / [Commands (quick)](docs/References/commands.md) | Looking up a specific `/mindforge:*` command |
300
+ | Reference | [Config reference](docs/References/config-reference.md) | Editing `MINDFORGE.md` — this doc doesn't cover `.mindforge/config.json` |
301
+ | Reference | [SDK API](docs/References/sdk-api.md) / [Skills API](docs/References/skills-api.md) | Building on `mindforge-sdk` or authoring a new skill |
302
+ | Reference | [Audit events](docs/References/audit-events.md) | Parsing `.planning/AUDIT.jsonl` |
303
+ | Reference | [Workflow atlas](docs/workflow-atlas.md) | Choosing one of the 35 dynamic workflows |
304
+ | Reference | [Requirements](docs/requirements.md) | Checking supported Node/OS versions before install |
305
+ | When something's wrong | [Troubleshooting](docs/troubleshooting.md) | A command or hook isn't behaving as documented |
306
+ | When something's wrong | [FAQ](docs/faq.md) | Common questions before filing an issue |
307
+ | When something's wrong | [Upgrade guide](docs/upgrade.md) | Moving between major/minor versions |
308
+ | Security | [SECURITY.md](SECURITY.md) | Reporting a vulnerability; credentials are read from env vars and never committed |
309
+ | Security | [Threat model](docs/security/threat-model.md) | Historical only — scoped to the v1.0.0 predecessor, not re-reviewed against v11.x; see [SECURITY.md](SECURITY.md) for what's actually enforced today |
310
+ | Contributing | [Architecture](docs/architecture/README.md) | Understanding the codebase before sending a PR |
311
+ | Contributing | [Contributing guide](docs/contributing/CONTRIBUTING.md) | Sending a PR |
312
+ | Contributing | [CI quickstart](docs/ci-quickstart.md) | Understanding what CI checks before you push |
313
+ | Contributing | [Release checklist](docs/release-checklist-guide.md) | Cutting a release |
314
+ | Reference | [USPs and features](docs/usp-features.md) | The same "measured, not asserted" honesty pass applied to what's actually shipped — no competitor comparison |
315
+ | Release notes | [RELEASENOTES.md](RELEASENOTES.md) | What changed, in prose, per version |
178
316
 
179
317
  ---
180
318
 
@@ -183,7 +321,7 @@ Full verification walkthrough: [docs/quick-verify.md](docs/quick-verify.md).
183
321
  | Command | What it does |
184
322
  | :--- | :--- |
185
323
  | `/mindforge:init-project` | Requirements interview → creates `PROJECT.md`, `REQUIREMENTS.md`, `STATE.md` |
186
- | `/mindforge:plan-phase 1 [--ads]` | Discuss scope, research the domain in parallel, create atomic XML task plans |
324
+ | `/mindforge:plan-phase 1` | Discuss scope, research the domain in parallel, create atomic XML task plans |
187
325
  | `/mindforge:execute-phase 1` | Wave-based parallel execution, one commit per task, automated verification |
188
326
  | `/mindforge:verify-phase 1` | Human acceptance testing, debug agent on failures, UAT sign-off |
189
327
  | `/mindforge:ship 1` | Changelog generation, final quality gates, PR creation |
@@ -203,13 +341,18 @@ Full, verified 35-workflow table by tier: [docs/workflow-atlas.md](docs/workflow
203
341
 
204
342
  ---
205
343
 
206
- ## Execution Modes
344
+ <details>
345
+ <summary><strong>Execution modes</strong></summary>
207
346
 
208
347
  MindForge supports multiple interaction models to fit your engineering workflow:
209
348
 
210
349
  - **In-IDE Orchestration**: Use `/mindforge:agent <persona>` for real-time delegation.
211
350
  - **Enterprise Workflows**: Specialized commands like `/mindforge:wf-tdd-sprint` and `/mindforge:plan-phase`.
212
- - **CLI Automation**: Run `node bin/mindforge-cli.js spawn <persona>` for scripted tasks.
351
+ - **CLI Automation**: `node bin/mindforge-cli.js spawn <persona>` exists but is a v1.0 stub — it
352
+ prints "NOT IMPLEMENTED in v1.0" and exits 1, redirecting you to `/mindforge:auto` or
353
+ `/mindforge:next` instead.
354
+
355
+ </details>
213
356
 
214
357
  ---
215
358
 
@@ -219,27 +362,32 @@ Run `/mindforge:update` (add `--apply` to install) — see [docs/upgrade.md](doc
219
362
 
220
363
  ---
221
364
 
222
- ## Plugin system (v1.0.0)
365
+ <details>
366
+ <summary><strong>Plugin system (v1.0.0)</strong></summary>
223
367
 
224
- Plugins extend MindForge via the `mindforge-plugin-*` namespace.
368
+ Plugins extend MindForge via the `mindforge-plugin-*` namespace. No packages are currently
369
+ published under it — this is the mechanism, not a catalog.
225
370
 
226
- ```
371
+ ```bash
227
372
  /mindforge:plugins list
228
373
  /mindforge:plugins install mindforge-plugin-<name>
229
374
  /mindforge:plugins validate
230
375
  ```
231
376
 
377
+ </details>
378
+
232
379
  ---
233
380
 
234
381
  ## Token usage profiling
235
382
 
236
383
  ```
237
- /mindforge:tokens --profile
384
+ /mindforge:tokens --optimise
238
385
  ```
239
- See `.mindforge/production/token-optimiser.md`.
386
+ (`--profile` doesn't exist; real flags are `--phase N`, `--session ID`, `--window short|medium|long`,
387
+ and `--optimise`.) See `.mindforge/production/token-optimiser.md`.
240
388
 
241
389
  ---
242
390
 
243
391
  ## License
244
392
 
245
- MIT © 2026 MindForge Team
393
+ MIT © 2026 Sairam Ugge (GitHub: Sairam0000)
package/RELEASENOTES.md CHANGED
@@ -1,5 +1,53 @@
1
1
  # Release Notes
2
2
 
3
+ ## v11.9.8 — 2026-09-21 — What the README claims, verified line by line
4
+
5
+ ### Why this release exists
6
+
7
+ v11.9.7 shipped a full README rewrite. This release is what happened when that rewrite got
8
+ a literal, end-to-end audit — every command it documents actually run in a real environment
9
+ (real `npx` installs, a real Homebrew install/uninstall cycle, a real `npm i mindforge-sdk`,
10
+ live registry checks) rather than re-read for plausibility. Of 113 claims checked, 98 held
11
+ up, 14 didn't, and 1 couldn't be verified either way.
12
+
13
+ ### The user-visible part
14
+
15
+ **Two of the 14 were real bugs, not just wording.** `--runtime claude,cursor` — or any
16
+ comma-separated runtime list — crashed the installer outright; it's fixed, and an unknown
17
+ runtime name now exits cleanly with a clear message instead of a raw crash. `--minimal`
18
+ claimed "no persona library" but silently installed all 216 personas anyway; it now
19
+ installs none, as documented.
20
+
21
+ **The other twelve are documentation catching up to what the code actually does:** the
22
+ bare `npx mindforge-cc@latest` "auto-detects your runtime" claim (real detection only
23
+ happens inside the interactive wizard, and even there you still confirm it — every
24
+ non-interactive run defaults to `--claude`), an `--ads` flag on `/mindforge:plan-phase`
25
+ that was never real, `/mindforge:health --repair` silently doing nothing, a `--profile`
26
+ flag on `/mindforge:tokens` that doesn't exist, a CLI `spawn` command that's a v1.0 stub,
27
+ the License section's copyright holder, the skill-tier split in the architecture diagram,
28
+ the `bin/` line-count figure, three Documentation-table rows that overstated what their
29
+ linked docs actually cover, and the `mindforge-plugin-*` namespace, which has zero
30
+ packages published under it today.
31
+
32
+ ## v11.9.7 — 2026-09-20 — The install banner stops contradicting itself
33
+
34
+ ### Why this release exists
35
+
36
+ Running v11.9.6's own documented install command in a clean project (instead of stopping
37
+ at `--version`) surfaced two real bugs in the install banner itself, plus a persona-count
38
+ regression introduced by v11.9.6's own doc-honesty pass.
39
+
40
+ ### The user-visible part
41
+
42
+ **The install banner no longer contradicts itself.** It used to print `SOVEREIGN
43
+ INTELLIGENCE v8.1.1` at the top and `v8.2.0` for the same subsystem two screens later, and
44
+ claim `PQAS ... Enabled` right before accurately disclosing it's simulated and off by
45
+ default. Both fixed. The banner's `Docs:` link no longer points at a domain with no site
46
+ deployed on it.
47
+
48
+ **Docs say 216 personas again, not 218.** v11.9.6's own persona-count fix used a count that
49
+ accidentally included two non-persona files; reverted to the verified real number.
50
+
3
51
  ## v11.9.6 — 2026-09-20 — The docs stop overselling what the code discloses about itself
4
52
 
5
53
  ### Why this release exists
package/SECURITY.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Security Policy
2
2
 
3
- > **Current version:** 11.9.6 | **npm audit:** 0 vulnerabilities across root, sdk, mcp-server
3
+ > **Current version:** 11.9.8 | **npm audit:** 0 vulnerabilities across root, sdk, mcp-server
4
4
 
5
5
  ## Supported Versions
6
6
 
@@ -90,7 +90,8 @@ We follow responsible disclosure practices. We will credit reporters in the rele
90
90
  ### Supply Chain
91
91
 
92
92
  - **Zero native dependencies** — The removal of `better-sqlite3` eliminates the entire native compilation toolchain (node-gyp, Python, C++ compiler) from the install process, reducing the attack surface.
93
- - **Dependabot enabled** — Automated weekly scans for vulnerable npm dependencies and monthly GitHub Actions version updates.
93
+ - **Dependabot enabled** — Automated weekly scans for vulnerable npm dependencies (root, `sdk/`, and `mcp-server/` each tracked independently) and monthly GitHub Actions version updates.
94
+ - **SBOM available** — GitHub generates a full SPDX software bill of materials from the dependency graph; export it from the repo's Insights tab, or via the API: `gh api repos/sairam0424/MindForge/dependency-graph/sbom/generate-report` returns an `sbom_url`, poll it until it 302s to a download. (The older single-call `.../dependency-graph/sbom` endpoint still works today but GitHub is retiring it on 2026-11-13 — use the generate/fetch flow above for anything meant to keep working past that date.)
94
95
  - **CODEOWNERS enforcement** — Changes to `bin/governance/`, `bin/engine/`, and the SDK require review from designated security owners.
95
96
  - **.npmignore** — Prevents accidental publication of secrets, test fixtures, planning state, and intelligence logs.
96
97
 
@@ -169,7 +169,7 @@ if (require.main === module) {
169
169
  context: 'CLI Manual Test',
170
170
  category: 'Architecture'
171
171
  });
172
- console.log(' │ 🛡️ SOVEREIGN INTELLIGENCE v8.2.0 — PQAS & Proactive Homing Enabled');
172
+ console.log(' │ 🛡️ SOVEREIGN INTELLIGENCE v8.2.0 — PQAS (simulated) & Proactive Homing');
173
173
  const status = await manager.getStatus();
174
174
  console.log('📊 Learning System Status:', status);
175
175
  } else {
@@ -882,7 +882,10 @@ async function install(runtime, scope, options = {}) {
882
882
  if (minimal) {
883
883
  const minimalEntries = new Set([
884
884
  'MINDFORGE-SCHEMA.json',
885
- 'engine', 'org', 'governance', 'integrations', 'personas', 'skills', 'team'
885
+ // 'personas' deliberately excluded: --minimal's whole point is "no persona library"
886
+ // (README.md, docs/getting-started.md). It was accidentally left in this allowlist,
887
+ // so a --minimal install shipped the full 216-persona set anyway.
888
+ 'engine', 'org', 'governance', 'integrations', 'skills', 'team'
886
889
  ]);
887
890
  fsu.ensureDir(forgeDst);
888
891
  for (const entry of fs.readdirSync(forgeSrc, { withFileTypes: true })) {
@@ -1338,7 +1341,17 @@ async function run(args) {
1338
1341
  return;
1339
1342
  }
1340
1343
 
1341
- const runtimes = runtime === 'all' ? Object.keys(RUNTIMES) : [runtime];
1344
+ const runtimes = runtime === 'all'
1345
+ ? Object.keys(RUNTIMES)
1346
+ : runtime.split(',').map((r) => r.trim()).filter(Boolean);
1347
+
1348
+ const unknownRuntimes = runtimes.filter((rt) => !RUNTIMES[rt]);
1349
+ if (unknownRuntimes.length) {
1350
+ console.error(
1351
+ `Unknown runtime(s): ${unknownRuntimes.join(', ')}. Valid: ${Object.keys(RUNTIMES).join(', ')}, all`
1352
+ );
1353
+ process.exit(1);
1354
+ }
1342
1355
 
1343
1356
  for (const rt of runtimes) {
1344
1357
  if (isUninstall) await uninstall(rt, scope, options);
@@ -61,7 +61,7 @@ const Theme = {
61
61
  */
62
62
  printBrandManifest() {
63
63
  console.log(` ${this.colors.dim('│')}`);
64
- console.log(` ${this.colors.dim('│')} ${this.colors.magenta('🛡️ SOVEREIGN INTELLIGENCE v8.1.1')} — PQAS & Proactive Homing Enabled`);
64
+ console.log(` ${this.colors.dim('│')} ${this.colors.magenta('🛡️ SOVEREIGN INTELLIGENCE v8.2.0')} — PQAS (simulated) & Proactive Homing`);
65
65
  console.log(` ${this.colors.dim('│')}`);
66
66
  console.log(` ${this.colors.dim('│')} ${this.colors.bold('THE PLATFORM VISION:')}`);
67
67
  console.log(` ${this.colors.dim('│')} - Unified Enterprise Agentic Ecosystem`);
@@ -76,8 +76,8 @@ const Theme = {
76
76
  console.log(` ${this.colors.dim('│')}`);
77
77
  console.log(` ${this.colors.dim('│')} ${this.colors.cyan('⭐ HELP US GROW:')}`);
78
78
  console.log(` ${this.colors.dim('│')} - GitHub: ${this.colors.dim('https://github.com/sairam0424/MindForge')}`);
79
- console.log(` ${this.colors.dim('│')} - Discord: ${this.colors.dim('https://discord.gg/mindforge')}`);
80
- console.log(` ${this.colors.dim('│')} - Docs: ${this.colors.dim('https://docs.mindforge.cc')}`);
79
+ console.log(` ${this.colors.dim('│')} - Discussions: ${this.colors.dim('https://github.com/sairam0424/MindForge/discussions')}`);
80
+ console.log(` ${this.colors.dim('│')} - Docs: ${this.colors.dim('https://github.com/sairam0424/MindForge#documentation')}`);
81
81
  console.log(` ${this.colors.dim('│')}`);
82
82
  console.log(` ${this.colors.dim('—'.repeat(80))}\n`);
83
83
  },
@@ -0,0 +1,35 @@
1
+ # Changelog
2
+
3
+ ## [11.9.7] — 2026-09-20 — The install banner stops contradicting itself
4
+
5
+ Patch release. Found by actually running the documented install command
6
+ (`npx mindforge-cc@latest --claude --local`) in a clean project instead of stopping at
7
+ `--version` — the check that should have caught the v11.9.6 regressions below before they
8
+ shipped.
9
+
10
+ ### Fixed
11
+
12
+ **Two real bugs in the install banner itself, both live in every v11.9.6 install**
13
+
14
+ - **Version self-contradiction.** The top banner (`bin/wizard/theme.js`'s
15
+ `printBrandManifest()`) hardcoded `SOVEREIGN INTELLIGENCE v8.1.1`, while the install
16
+ activation line two screens later (`bin/installer-core.js`) prints `v8.2.0` for the same
17
+ subsystem — one command, two version numbers. Standardized on `v8.2.0`.
18
+ - **False "Enabled" claim.** The same top banner said `PQAS & Proactive Homing Enabled`
19
+ unconditionally, directly contradicting the accurate disclosure a few lines later in the
20
+ same run: "available in simulated/experimental mode (inactive by default)". Changed to
21
+ `PQAS (simulated) & Proactive Homing`. `bin/engine/learning-manager.js` carried the
22
+ identical string; fixed there too.
23
+ - **Dead docs link.** The banner's `Docs: https://docs.mindforge.cc` fails TLS handshake —
24
+ DNS resolves but no site was ever deployed there. Repointed to the real, verified-live
25
+ `https://github.com/sairam0424/MindForge#documentation`.
26
+
27
+ **Doc regression from the v11.9.6 pass, self-inflicted**
28
+
29
+ - The persona-count reconciliation in v11.9.6 used a naive
30
+ `find .mindforge/personas -type f | wc -l` (218), which silently swept in
31
+ `swarm-templates.json` and `overrides/README.md` — neither is a persona. The installer's
32
+ own `collectManifestStats()` counts top-level `.md` files only: **216**, matching the
33
+ preserved 2026-08-16 codebase-index snapshot. Reverted `README.md`,
34
+ `docs/CAPABILITIES-MANIFEST.md`, `docs/user-guide.md`, `docs/PERSONAS.md`,
35
+ `docs/registry/PERSONAS.md`, and `docs/registry/README.md`.
@@ -0,0 +1,51 @@
1
+ # Changelog
2
+
3
+ ## [11.9.8] — 2026-09-21 — What the README claims, verified line by line
4
+
5
+ Patch release. v11.9.7's README rewrite got a literal, end-to-end audit: every command it
6
+ documents actually run — real `npx` installs, a real Homebrew install/uninstall cycle, a
7
+ real `npm i mindforge-sdk`, live registry checks — instead of re-reading the prose. 113
8
+ claims checked: 98 held up, 14 didn't, 1 couldn't be verified either way. All 14 confirmed
9
+ failures are fixed here.
10
+
11
+ ### Fixed
12
+
13
+ **Two real bugs, not just docs**
14
+
15
+ - `--runtime claude,cursor` (or any comma-separated runtime list) crashed the installer
16
+ outright ("Cannot read properties of undefined (reading 'localDir')"). `--all` already
17
+ expanded into a real multi-runtime loop; a comma-separated `--runtime` value was never
18
+ split into it, so it was looked up as the literal key `RUNTIMES['claude,cursor']`, which
19
+ doesn't exist. Fixed, plus a graceful "Unknown runtime(s)" exit for typos instead of a raw
20
+ crash.
21
+ - `--minimal` claimed "no persona library" but shipped all 216 personas anyway — the
22
+ `minimalEntries` allowlist in `bin/installer-core.js` explicitly included `'personas'`.
23
+ Removed.
24
+
25
+ **Twelve documentation inaccuracies**
26
+
27
+ - Removed a `[--ads]` flag hint on `/mindforge:plan-phase` that was never wired into the
28
+ live command spec — it only exists in a much larger, never-ported legacy workflow file.
29
+ - Reworded the bare `npx mindforge-cc@latest` "auto-detects your runtime" claim: real
30
+ detection only runs inside the interactive TTY wizard (and even there it's a pre-selected
31
+ default you still confirm); every non-interactive invocation (CI, piped stdin, scripted)
32
+ hardcodes `--claude`.
33
+ - Disclosed that `/mindforge:health --repair` is documented in the command spec but not
34
+ wired into the CLI backing path — the flag is silently dropped, output is byte-identical
35
+ to plain `health`.
36
+ - Fixed `/mindforge:tokens --profile` — that flag doesn't exist; swapped in a real one
37
+ (`--optimise`) and listed the actual flag set.
38
+ - Disclosed that `node bin/mindforge-cli.js spawn <persona>` is a v1.0 stub that exits 1
39
+ with "NOT IMPLEMENTED", not a working scripted path.
40
+ - Corrected the License section's copyright holder to match `LICENSE` exactly.
41
+ - Fixed the architecture diagram's skill count: only 232 of the 355 skills live under
42
+ `.mindforge/` (engine tier); the other 123 are under `.agent/skills/` (extended tier).
43
+ - Corrected `bin/`'s "~22K LOC" claim to the measured ~32K raw / ~25K stripped-of-comments.
44
+ - Narrowed the Config reference doc-table row — that doc never mentions
45
+ `.mindforge/config.json`.
46
+ - Reworded the Threat model doc-table row — that file is explicitly historical (v1.0.0-era),
47
+ not re-reviewed against v11.x, and redirects to `SECURITY.md`.
48
+ - Reworded the USP-features doc-table row — that file has zero competitor comparison
49
+ content; it's the same honesty pass applied to MindForge's own features.
50
+ - Disclosed that the `mindforge-plugin-*` namespace has zero packages published under it
51
+ today.
package/docs/faq.md CHANGED
@@ -1,4 +1,4 @@
1
- # MindForge FAQ (v11.9.6)
1
+ # MindForge FAQ (v11.9.8)
2
2
 
3
3
  ## Is MindForge tied to Claude only?
4
4
  No. MindForge supports Claude Code and Antigravity. Install with `--claude`,
@@ -39,7 +39,7 @@ Plugins are preferred for sharing and versioning.
39
39
 
40
40
  ## Dynamic Workflows
41
41
 
42
- **Q: How many workflows does MindForge v11.9.0 include?**
42
+ **Q: How many workflows does MindForge include?**
43
43
  35 pre-built multi-agent workflows across 5 tiers: Research (5), Dev (14), Ops (6), Intelligence (7), Beast (3).
44
44
 
45
45
  **Q: How do I run a workflow?**
@@ -55,10 +55,13 @@ The `deep-research` workflow was removed before the v11.8.0 release (the superpo
55
55
  ## Version & Stability
56
56
 
57
57
  **Q: What version is current?**
58
- v11.9.6 — verify with `node bin/mindforge-cli.js --version`
58
+ v11.9.8 — verify with `node bin/mindforge-cli.js --version`
59
59
 
60
- **Q: Is v11.9.0 production-stable?**
61
- Yes. The IQ200 deep-audit (258 discrete checks across 14 dimensions) shows 258/258 passing. 0 CVEs, 0 test failures, 0 ESLint errors, 0 TypeScript errors.
60
+ **Q: Was v11.9.0 production-stable?**
61
+ At that release: yes, by the IQ200 deep-audit (258 discrete checks across 14 dimensions),
62
+ 258/258 passing, 0 CVEs, 0 test failures, 0 ESLint errors, 0 TypeScript errors. That was a
63
+ one-time, point-in-time audit rather than a repeated gate, so it is not re-run per release —
64
+ see "What is the test coverage?" below for the number that is.
62
65
 
63
66
  **Q: Which npm dist-tag should I install?**
64
67
  `latest` is every published release, including patches. `stable` tracks the newest
@@ -74,10 +77,10 @@ release behind. Check what each points at right now with `npm dist-tag ls mindfo
74
77
  ## Known Limitations
75
78
 
76
79
  **Q: Why does `spawn architect` exit with an error?**
77
- Spawn dispatch is not yet implemented in v11.9.0. Use `/mindforge:auto` or `/mindforge:next` from Claude Code instead.
80
+ Spawn dispatch is a v1.0 stub — still not implemented as of v11.9.8. Use `/mindforge:auto` or `/mindforge:next` from Claude Code instead.
78
81
 
79
82
  **Q: Why does ZTAI show a Tier-3 warning?**
80
- Tier-3 trust uses in-process key simulation in v11.9.0 — this is intentional and safe. `SECURITY_TIER_3_SIMULATED = true` is the documented v11.x behavior. Hardware TPM/HSM is planned for v12.x.
83
+ Tier-3 trust uses in-process key simulation in v11.x. `bin/governance/ztai-manager.js` warns on this itself: key material resides in the Node.js heap, not hardware-isolated — do not use Tier-3 trust for production credential workflows. `SECURITY_TIER_3_SIMULATED = true` is the documented v11.x behavior. Hardware TPM/HSM is planned for v12.x.
81
84
 
82
85
  **Q: What is the test coverage?**
83
86
  140 test files: 137 pass, 0 failures, 3 env-dependent skips (`browser.test.js` and
@@ -1,4 +1,4 @@
1
- # MindForge — Getting Started (v11.9.6)
1
+ # MindForge — Getting Started (v11.9.8)
2
2
 
3
3
  This guide gets you from zero to a working MindForge project in under five minutes.
4
4
 
@@ -106,7 +106,7 @@ MindForge adapts to your existing engineering environment via runtime flags:
106
106
 
107
107
  **Run any workflow:**
108
108
  ```bash
109
- node bin/mindforge-cli.js workflow list # browse all 32
109
+ node bin/mindforge-cli.js workflow list # browse all 35
110
110
  node bin/mindforge-cli.js workflow info code-audit # details + phases
111
111
  ```
112
112
  Or use slash commands: `/mindforge:wf-code-audit`
@@ -114,7 +114,7 @@ Or use slash commands: `/mindforge:wf-code-audit`
114
114
  ## Your First 5 Minutes with MindForge
115
115
 
116
116
  1. **Verify install:** `node bin/mindforge-cli.js health`
117
- 2. **Check version:** `node bin/mindforge-cli.js --version` (should print `11.9.6`)
117
+ 2. **Check version:** `node bin/mindforge-cli.js --version` (should print `11.9.8`)
118
118
  3. **List workflows:** `node bin/mindforge-cli.js workflow list`
119
119
  4. **Run first slash command:** Open Claude Code → `/mindforge:status`
120
120
  5. **Onboard your codebase:** Open Claude Code → `/mindforge:wf-onboard-codebase`
@@ -14,11 +14,11 @@ import {
14
14
  } from 'mindforge-sdk';
15
15
  ```
16
16
 
17
- Current SDK version: `11.9.6`
17
+ Current SDK version: `11.9.8`
18
18
 
19
19
  ---
20
20
 
21
- ## SDK Exports (v11.9.6)
21
+ ## SDK Exports (v11.9.8)
22
22
 
23
23
  ```javascript
24
24
  const {
@@ -28,7 +28,7 @@ const {
28
28
  commands, // Command registry
29
29
  batch, // Batch execution
30
30
  MindForgeMemory, // Memory interface
31
- VERSION // '11.9.6'
31
+ VERSION // '11.9.8'
32
32
  } = require('mindforge-sdk');
33
33
  // or: import { MindForgeClient, VERSION } from 'mindforge-sdk';
34
34
  ```
@@ -1,4 +1,4 @@
1
- # MindForge Troubleshooting (v11.9.6)
1
+ # MindForge Troubleshooting (v11.9.8)
2
2
 
3
3
  This page lists common issues and fast fixes. If you get stuck, start with
4
4
  `/mindforge:health`.
@@ -1,8 +1,8 @@
1
- # MindForge User Guide (v11.9.6)
1
+ # MindForge User Guide (v11.9.8)
2
2
 
3
3
  This guide gets you from install to productive, with the minimum needed to run MindForge in a real project.
4
4
 
5
- > **v11.9.6 Stats:** 35 workflows · 221 slash commands · 232 engine skills · 218 personas · 0 CVEs · 258/258 IQ200 checks passing
5
+ > **v11.9.8 Stats:** 35 workflows · 221 slash commands · 232 engine skills · 216 personas · 0 CVEs · 258/258 IQ200 checks passing
6
6
 
7
7
  ## Prerequisites
8
8
 
@@ -44,7 +44,7 @@ mindforge health # Verify project integrity
44
44
  mindforge security-scan # Run security checks
45
45
  mindforge headless # Run agent in non-interactive mode
46
46
  mindforge --verbose ... # Enable verbose output for debugging
47
- mindforge --version # Print installed version (e.g. 11.9.6) and exit 0
47
+ mindforge --version # Print installed version (e.g. 11.9.8) and exit 0
48
48
  ```
49
49
 
50
50
  Use `--verbose` (or `-v`) on any command for detailed diagnostic output. Use `--version` (or `-V`) to print the installed version and exit.
@@ -127,7 +127,7 @@ MindForge features 211 specialized personas. Each persona is optimized for a spe
127
127
  To switch personas or see the full list:
128
128
 
129
129
  ```bash
130
- ls .mindforge/personas/ # 218 persona briefs; there is no personas command
130
+ ls .mindforge/personas/ # 216 persona briefs; there is no personas command
131
131
  ```
132
132
 
133
133
  ---
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mindforge-cc",
3
- "version": "11.9.6",
3
+ "version": "11.9.8",
4
4
  "description": "Agentic intelligence framework for Claude Code and Antigravity: slash commands, subagents, skills, hooks, governance, memory, and cost-aware model routing for AI-driven development.",
5
5
  "bin": {
6
6
  "mindforge-cc": "bin/install.js",