monomind 1.11.13 → 1.12.0

package/.claude/helpers/handlers/task-handler.cjs

@@ -172,7 +172,7 @@ module.exports = {
         const remaining = fs.readdirSync(regDir).filter(f => f.endsWith('.json')).length;
         const _actPath = path.join(CWD, '.monomind', 'metrics', 'swarm-activity.json');
         let _prevLastActive = 0;
-        try { _prevLastActive = (JSON.parse(fs.readFileSync(_actPath, 'utf-8'))?.swarm?.lastActive) || 0; } catch { /* ignore */ }
+        try { var _actSt = fs.statSync(_actPath); if (_actSt.size < 65536) { _prevLastActive = (JSON.parse(fs.readFileSync(_actPath, 'utf-8'))?.swarm?.lastActive) || 0; } } catch { /* ignore */ }
         fs.writeFileSync(_actPath, JSON.stringify({
           timestamp: new Date().toISOString(),
           swarm: {
@@ -217,7 +217,8 @@ module.exports = {
       try {
         var haltFile = path.join(CWD, 'data', 'halt-signals.jsonl');
         if (fs.existsSync(haltFile)) {
-          var haltLines = fs.readFileSync(haltFile, 'utf-8').trim().split('\n').filter(Boolean);
+          var haltSt = fs.statSync(haltFile);
+          var haltLines = haltSt.size < 1048576 ? fs.readFileSync(haltFile, 'utf-8').trim().split('\n').filter(Boolean) : [];
           if (haltLines.length > 0) {
             console.warn('[HALT_DETECTED] ' + haltLines.length + ' halt signal(s) present');
           }
@@ -298,8 +299,11 @@ module.exports = {
       var settingsPath = path.join(CWD, '.claude', 'settings.json');
       var adrCfg = {};
       if (fs.existsSync(settingsPath)) {
-        var s = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-        adrCfg = (s.monomind && s.monomind.adr) || {};
+        var settingsSt = fs.statSync(settingsPath);
+        if (settingsSt.size < 524288) {
+          var s = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
+          adrCfg = (s.monomind && s.monomind.adr) || {};
+        }
       }
       if (adrCfg.autoGenerate) {
         var taskAgent = hookInput.agentSlug || hookInput.agent_slug || '';
@@ -307,7 +311,11 @@ module.exports = {
         var isArchitectLevel = ['architect', 'system-architect', 'software-architect'].includes(taskAgent)
           || /\b(architecture|design decision|adr|trade-?off|migration strategy)\b/.test(taskDescAdr);
         if (isArchitectLevel && taskDescAdr.length > 30) {
-          var adrDir = path.join(CWD, adrCfg.directory || 'docs/adrs');
+          // Guard adrCfg.directory against path traversal outside CWD
+          var rawAdrDir = typeof adrCfg.directory === 'string' ? adrCfg.directory : 'docs/adrs';
+          var resolvedAdrDir = path.resolve(CWD, rawAdrDir);
+          if (!resolvedAdrDir.startsWith(CWD + path.sep) && resolvedAdrDir !== CWD) { throw new Error('adr.directory outside project'); }
+          var adrDir = resolvedAdrDir;
           fs.mkdirSync(adrDir, { recursive: true });
           var adrNum = (fs.readdirSync(adrDir).filter(function(f) { return f.endsWith('.md'); }).length + 1)
             .toString().padStart(4, '0');

package/.claude/helpers/intelligence.cjs

@@ -20,9 +20,13 @@ function ensureDir() {
   try { fs.mkdirSync(INTEL_DIR, { recursive: true }); } catch (_) {}
 }
 
+var MAX_PATTERNS_SIZE = 10 * 1024 * 1024; // 10 MiB guard
+
 function loadPatterns() {
   try {
     if (fs.existsSync(PATTERNS_FILE)) {
+      var st = fs.statSync(PATTERNS_FILE);
+      if (st.size > MAX_PATTERNS_SIZE) { _patterns = []; return; }
       _patterns = JSON.parse(fs.readFileSync(PATTERNS_FILE, 'utf-8'));
     }
   } catch (_) { _patterns = []; }
@@ -77,8 +81,9 @@ function feedback(success) {
 function storePattern(pattern) {
   ensureDir();
   loadPatterns();
-  _patterns = _patterns.filter(function(p) { return p.id !== pattern.id; });
-  _patterns.push(Object.assign({ storedAt: new Date().toISOString() }, pattern));
+  var safeId = String(pattern.id || '').slice(0, 256);
+  _patterns = _patterns.filter(function(p) { return p.id !== safeId; });
+  _patterns.push(Object.assign({ storedAt: new Date().toISOString() }, pattern, { id: safeId }));
   try {
     fs.writeFileSync(PATTERNS_FILE, JSON.stringify(_patterns.slice(-500), null, 2), 'utf-8');
   } catch (_) {}

package/.claude/helpers/loop-tracker.cjs

@@ -15,13 +15,20 @@ const path = require('path');
 const CWD = process.env.CLAUDE_PROJECT_DIR || process.cwd();
 const LOOPS_DIR = path.join(CWD, '.monomind', 'loops');
 
+const STDIN_MAX_BYTES = 1 * 1024 * 1024; // 1 MiB cap to prevent OOM
+
 async function readStdin() {
   if (process.stdin.isTTY) return '';
   return new Promise((resolve) => {
     let data = '';
+    let bytesRead = 0;
     const timer = setTimeout(() => { process.stdin.removeAllListeners(); resolve(data); }, 3000);
     process.stdin.setEncoding('utf8');
-    process.stdin.on('data', chunk => { data += chunk; });
+    process.stdin.on('data', chunk => {
+      bytesRead += Buffer.byteLength(chunk, 'utf8');
+      if (bytesRead > STDIN_MAX_BYTES) { clearTimeout(timer); resolve(''); return; }
+      data += chunk;
+    });
     process.stdin.on('end', () => { clearTimeout(timer); resolve(data); });
     process.stdin.on('error', () => { clearTimeout(timer); resolve(data); });
     process.stdin.resume();
@@ -60,7 +67,9 @@ async function main() {
   try { hookInput = JSON.parse(raw); } catch { process.exit(0); }
 
   const toolInput = hookInput.tool_input || hookInput.toolInput || {};
-  const sessionId = hookInput.session_id || hookInput.sessionId || hookInput.id || '';
+  const rawSessionId = hookInput.session_id || hookInput.sessionId || hookInput.id || '';
+  // Sanitize sessionId to prevent path traversal — allow only alphanumeric, dash, underscore, dot
+  const sessionId = String(rawSessionId).replace(/[^a-zA-Z0-9_.\-]/g, '').slice(0, 128);
 
   if (!sessionId) { process.exit(0); }
 
@@ -75,7 +84,10 @@ async function main() {
   let existing = {};
   try {
     if (fs.existsSync(loopFile)) {
-      existing = JSON.parse(fs.readFileSync(loopFile, 'utf-8'));
+      const stat = fs.statSync(loopFile);
+      if (stat.size <= 512 * 1024) { // 512 KiB guard to prevent OOM
+        existing = JSON.parse(fs.readFileSync(loopFile, 'utf-8'));
+      }
     }
   } catch { /* start fresh */ }
 

package/.claude/helpers/memory.cjs

@@ -16,9 +16,13 @@ function ensureDir() {
   try { fs.mkdirSync(MEMORY_DIR, { recursive: true }); } catch (_) {}
 }
 
+var MAX_INDEX_SIZE = 50 * 1024 * 1024; // 50 MiB guard
+
 function loadIndex() {
   try {
     if (!fs.existsSync(MEMORY_INDEX)) return [];
+    var st = fs.statSync(MEMORY_INDEX);
+    if (st.size > MAX_INDEX_SIZE) return [];
     return JSON.parse(fs.readFileSync(MEMORY_INDEX, 'utf-8'));
   } catch (_) {
     return [];
@@ -36,7 +40,8 @@ function saveIndex(entries) {
 
 function store(key, value, namespace) {
   var entries = loadIndex();
-  var ns = namespace || 'default';
+  var ns = String(namespace || 'default').slice(0, 128);
+  key = String(key || '').slice(0, 512);
   // Remove existing entry with same key+namespace
   entries = entries.filter(function(e) { return !(e.key === key && e.namespace === ns); });
   entries.push({ key: key, value: value, namespace: ns, storedAt: new Date().toISOString() });

package/.claude/helpers/router.cjs

@@ -35,13 +35,16 @@ const DEFAULT_RESULT = {
   extrasMatches: [],
 };
 
+var MAX_PROMPT = 2000;
+
 function routeTask(prompt) {
   if (!prompt || typeof prompt !== 'string') return DEFAULT_RESULT;
+  var safePrompt = prompt.slice(0, MAX_PROMPT);
 
   var best = null;
   for (var i = 0; i < KEYWORD_ROUTES.length; i++) {
     var rule = KEYWORD_ROUTES[i];
-    if (rule.pattern.test(prompt)) {
+    if (rule.pattern.test(safePrompt)) {
       if (!best || rule.confidence > best.confidence) {
         best = rule;
       }
@@ -54,7 +57,7 @@ function routeTask(prompt) {
     agent: best.agent,
     agentSlug: best.agent.toLowerCase().replace(/\s+/g, '-'),
     confidence: best.confidence,
-    reason: 'Keyword match: ' + best.pattern.toString().slice(1, 40),
+    reason: ('Keyword match: ' + best.pattern.toString()).slice(0, 80),
     semanticRouting: false,
     specificAgents: [],
     skillMatches: [],

package/.claude/helpers/session.cjs

@@ -17,6 +17,8 @@ function ensureDir() {
 function restore() {
   try {
     if (!fs.existsSync(SESSION_FILE)) return null;
+    var st = fs.statSync(SESSION_FILE);
+    if (st.size > 1 * 1024 * 1024) return null; // 1 MiB guard
     var raw = fs.readFileSync(SESSION_FILE, 'utf-8');
     var data = JSON.parse(raw);
     if (!data || !data.sessionId) return null;

package/.claude/helpers/statusline.cjs

@@ -16,7 +16,7 @@
 /* eslint-disable @typescript-eslint/no-var-requires */
 const fs = require('fs');
 const path = require('path');
-const { execSync } = require('child_process');
+const { execSync, spawnSync } = require('child_process');
 const os = require('os');
 
 // Configuration
@@ -204,6 +204,8 @@ function getModelFromSessionJSONL() {
     if (files.length === 0) return null;
 
     const sessionFile = path.join(projectsDir, files[0].f);
+    // Guard against OOM: skip session files larger than 10 MB
+    try { if (fs.statSync(sessionFile).size > 10 * 1024 * 1024) return null; } catch { return null; }
     const raw = fs.readFileSync(sessionFile, 'utf-8');
     const lines = raw.split('\n').filter(Boolean);
 
@@ -922,7 +924,13 @@ function getGraphifyStats() {
 
   try {
     if (fs.existsSync(dbPath)) {
-      const out = safeExec(`sqlite3 "${dbPath}" "SELECT (SELECT COUNT(*) FROM nodes), (SELECT COUNT(*) FROM edges);"`, 1000);
+      // Use spawnSync array args to prevent shell injection via dbPath (CWD-derived)
+      const result = spawnSync(
+        'sqlite3',
+        [dbPath, 'SELECT (SELECT COUNT(*) FROM nodes), (SELECT COUNT(*) FROM edges);'],
+        { encoding: 'utf-8', timeout: 1000 }
+      );
+      const out = (result.stdout || '').trim();
       if (out) {
         const [n, e] = out.split('|').map(v => parseInt(v, 10) || 0);
         if (n > 0) return { nodes: n, edges: e, exists: true };

package/.claude/helpers/utils/micro-agents.cjs

@@ -77,15 +77,18 @@ function _triggerExtractFromFrontmatter(content, agentSlug) {
   return triggers;
 }
 
-function _triggerCollectMdFiles(dir) {
+function _triggerCollectMdFiles(dir, _depth) {
+  var depth = (_depth === undefined) ? 0 : _depth;
+  if (depth > 5) return []; // cap recursion depth to prevent stack overflow DoS
   var results = [];
   try {
     var entries = fs.readdirSync(dir);
     for (var i = 0; i < entries.length; i++) {
+      if (results.length >= 200) break; // cap total file count to prevent DoS
       var full = path.join(dir, entries[i]);
       try {
         var st = fs.lstatSync(full);
-        if (st.isDirectory()) results = results.concat(_triggerCollectMdFiles(full));
+        if (st.isDirectory()) results = results.concat(_triggerCollectMdFiles(full, depth + 1));
         else if (entries[i].endsWith('.md')) results.push(full);
       } catch (e) {}
     }
@@ -98,7 +101,11 @@ function _triggerBuildIndex(agentDir) {
   var files = _triggerCollectMdFiles(agentDir);
   for (var i = 0; i < files.length; i++) {
     var content;
-    try { content = fs.readFileSync(files[i], 'utf-8'); } catch (e) { continue; }
+    try {
+      var _fst = fs.statSync(files[i]);
+      if (_fst.size > 256 * 1024) continue; // skip files > 256 KiB to prevent OOM
+      content = fs.readFileSync(files[i], 'utf-8');
+    } catch (e) { continue; }
     var slug = files[i].split('/').pop().replace(/\.md$/i, '').toLowerCase().replace(/[^a-z0-9-]/g, '-');
     patterns = patterns.concat(_triggerExtractFromFrontmatter(content, slug));
   }
@@ -114,6 +121,8 @@ function scanMicroAgentTriggers(prompt) {
 
   try {
     if (fs.existsSync(indexPath)) {
+      var _idxSt = fs.statSync(indexPath);
+      if (_idxSt.size > 512 * 1024) { throw new Error('trigger-index.json exceeds 512 KiB'); }
       var idx = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
       var age = Date.now() - new Date(idx.builtAt || 0).getTime();
       if (age < 3600000 && Array.isArray(idx.patterns)) {
@@ -140,6 +149,7 @@ function scanMicroAgentTriggers(prompt) {
     if (p.mode !== 'inject' && p.mode !== 'takeover') continue;
     if (seen[p.agentSlug]) continue;
     try {
+      if (typeof p.pattern !== 'string' || p.pattern.length > 500) continue; // cap pattern length to prevent ReDoS
       var re = new RegExp(p.pattern, 'i');
       var m = re.exec(prompt);
       if (m) {
@@ -164,6 +174,8 @@ function _buildKnowledgeSearchFn(knowledgeDir) {
     if (!fs.existsSync(chunksFile)) return [];
     var lines;
     try {
+      var _cSt = fs.statSync(chunksFile);
+      if (_cSt.size > 4 * 1024 * 1024) return []; // skip > 4 MiB to prevent OOM
       lines = fs.readFileSync(chunksFile, 'utf-8').trim().split('\n').filter(Boolean);
     } catch (e) { return []; }
 
@@ -209,6 +221,8 @@ function _autoIndexKnowledge(knowledgeDir) {
     } catch (e) {}
   }
   try {
+    var _sSt = fs.statSync(path.join(CWD, '.monomind', 'graph', 'stats.json'));
+    if (_sSt.size > 256 * 1024) { throw new Error('stats.json exceeds 256 KiB'); }
     var statsForHash = JSON.parse(fs.readFileSync(path.join(CWD, '.monomind', 'graph', 'stats.json'), 'utf-8'));
     hashInput += 'monograph:' + (statsForHash.builtAt || 0) + ';';
   } catch(e) {}
@@ -220,7 +234,7 @@ function _autoIndexKnowledge(knowledgeDir) {
   try { existingHash = fs.readFileSync(hashFile, 'utf-8').trim(); } catch (e) {}
 
   var existingChunkCount = 0;
-  try { if (fs.existsSync(chunksFile)) { existingChunkCount = fs.readFileSync(chunksFile, 'utf-8').trim().split('\n').filter(Boolean).length; } } catch (e) {}
+  try { if (fs.existsSync(chunksFile)) { var _ecSt = fs.statSync(chunksFile); if (_ecSt.size <= 4 * 1024 * 1024) { existingChunkCount = fs.readFileSync(chunksFile, 'utf-8').trim().split('\n').filter(Boolean).length; } } } catch (e) {}
   if (existingHash === contentHash && existingChunkCount > 0) return 0;
 
   var newLines = [];
@@ -228,6 +242,8 @@ function _autoIndexKnowledge(knowledgeDir) {
     var src = sources[si];
     try {
       if (!fs.existsSync(src.filePath)) continue;
+      var _srcSt = fs.statSync(src.filePath);
+      if (_srcSt.size > 512 * 1024) continue; // skip > 512 KiB to prevent OOM
       var content = fs.readFileSync(src.filePath, 'utf-8');
       var sections = content.split(/\n{2,}|\n(?=#{1,3} )/);
       for (var ci = 0; ci < sections.length; ci++) {

package/.claude/scheduled_tasks.lock

@@ -1 +1 @@
-{"sessionId":"64f579c5-48a4-4db0-a746-46a7f3fab6ab","pid":6041,"procStart":"Tue Jun  9 11:59:20 2026","acquiredAt":1781035942894}
+{"sessionId":"ed60b548-7aa2-4e96-bcec-4eaf8aa33732","pid":74650,"procStart":"Mon Jun  1 16:07:08 2026","acquiredAt":1780344677932}

package/.claude/settings.json

@@ -65,6 +65,16 @@
             "timeout": 3000
           }
         ]
+      },
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" pre-tool",
+            "timeout": 2000
+          }
+        ]
       }
     ],
     "PostToolUse": [
@@ -107,6 +117,27 @@
             "timeout": 2000
           }
         ]
+      },
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" post-tool",
+            "timeout": 2000
+          }
+        ]
+      }
+    ],
+    "Notification": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" notification",
+            "timeout": 2000
+          }
+        ]
       }
     ],
     "UserPromptSubmit": [
@@ -118,6 +149,15 @@
             "timeout": 10000
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" user-prompt",
+            "timeout": 2000
+          }
+        ]
       }
     ],
     "SessionStart": [
@@ -142,6 +182,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/control-start.cjs\"",
             "timeout": 5000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" session-start",
+            "timeout": 2000
           }
         ]
       }
@@ -153,6 +198,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" session-end",
             "timeout": 10000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" session-end",
+            "timeout": 2000
           }
         ]
       }
@@ -164,6 +214,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/auto-memory-hook.mjs\" sync",
             "timeout": 10000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" stop",
+            "timeout": 2000
           }
         ]
       }
@@ -180,6 +235,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" session-end",
             "timeout": 5000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" compact",
+            "timeout": 2000
           }
         ]
       },
@@ -194,6 +254,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" session-end",
             "timeout": 6000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" compact",
+            "timeout": 2000
           }
         ]
       }
@@ -210,6 +275,22 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" pre-task",
             "timeout": 3000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" subagent-start",
+            "timeout": 2000
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" subagent-stop",
+            "timeout": 2000
           }
         ]
       }
@@ -221,6 +302,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" post-task",
             "timeout": 5000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" teammate-idle",
+            "timeout": 2000
           }
         ]
       }
@@ -232,6 +318,11 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/hook-handler.cjs\" post-task",
             "timeout": 5000
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/helpers/event-logger.cjs\" task-completed",
+            "timeout": 2000
           }
         ]
       }
@@ -239,7 +330,7 @@
   },
   "attribution": {
     "commit": "Co-Authored-By: nokhodian <nokhodian@gmail.com>",
-    "pr": "\ud83e\udd16 Generated with [monomind](https://github.com/monoes/monomind)"
+    "pr": "🤖 Generated with [monomind](https://github.com/monoes/monomind)"
   },
   "monomind": {
     "version": "3.5.2",

package/.claude/skills/mastermind/_protocol.md

@@ -289,14 +289,16 @@ If the user is running across multiple repos for the same project, they MUST use
 # Compatible with macOS bash 3.2
 project_name="${project_name:-$(basename "$PWD")}"
 canonical="${project_name}-<domain>"
+board_tracking=true
 
 # Step 1 — Resolve space
 space_id=$(monotask space list 2>/dev/null | awk -F'|' '{gsub(/^ +| +$/,"",$1);gsub(/^ +| +$/,"",$2);if($2==n)print $1}' n="$project_name" | head -1)
 [ -z "$space_id" ] && space_id=$(monotask space create "$project_name" 2>/dev/null | grep -oE '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}')
-[ -z "$space_id" ] && { echo "ERROR: Could not find or create space '$project_name' — verify monotask is installed (monotask --version)"; exit 1; }
+[ -z "$space_id" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
 
 # Step 2 — Find existing board by canonical name or create
 # board list format is "uuid: name" (colon-space separator, NOT pipe)
+if [ "$board_tracking" = "true" ]; then
 board_id=$(monotask board list 2>/dev/null | awk -F': ' '{gsub(/^ +| +$/,"",$1);gsub(/^ +| +$/,"",$2);if($2==n)print $1}' n="$canonical" | head -1)
 if [ -n "$board_id" ]; then
   # Step 3a — Fetch column IDs from existing board
@@ -307,12 +309,15 @@ if [ -n "$board_id" ]; then
 else
   # Step 3b — Create board and columns
   board_id=$(monotask board create --space "$space_id" "$canonical" --json 2>/dev/null | jq -r '.id // empty')
-  [ -z "$board_id" ] && echo "[mastermind] monotask board unavailable — board tracking skipped."
+  [ -z "$board_id" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
+  if [ "$board_tracking" = "true" ]; then
   monotask space boards add "$space_id" "$board_id" >/dev/null 2>&1 || true
-  todo_col=$(monotask column create "$board_id" "Todo"  --json | jq -r '.id // empty')
-  doing_col=$(monotask column create "$board_id" "Doing" --json | jq -r '.id // empty')
-  done_col=$(monotask column create "$board_id" "Done"  --json | jq -r '.id // empty')
-  [ -z "$todo_col" ] && { echo "ERROR: Failed to create Todo column for $canonical"; exit 1; }
+  todo_col=$(monotask column create "$board_id" "Todo"  --json 2>/dev/null | jq -r '.id // empty')
+  doing_col=$(monotask column create "$board_id" "Doing" --json 2>/dev/null | jq -r '.id // empty')
+  done_col=$(monotask column create "$board_id" "Done"  --json 2>/dev/null | jq -r '.id // empty')
+  [ -z "$todo_col" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
+  fi
+fi
 fi
 ```
 
@@ -321,15 +326,17 @@ When master.md runs multiple domains, resolve the space **once** before the loop
 ```bash
 # Compatible with macOS bash 3.2 — jq accumulation instead of declare -A
 project_name="<resolved project_name>"
+board_tracking=true
 space_id=$(monotask space list 2>/dev/null | awk -F'|' '{gsub(/^ +| +$/,"",$1);gsub(/^ +| +$/,"",$2);if($2==n)print $1}' n="$project_name" | head -1)
 [ -z "$space_id" ] && space_id=$(monotask space create "$project_name" 2>/dev/null | grep -oE '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}')
-[ -z "$space_id" ] && { echo "ERROR: Could not find or create space '$project_name'"; exit 1; }
+[ -z "$space_id" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
 
 state_patch='{}'
 for domain in build marketing ops; do   # substitute actual domain list
   canonical="${project_name}-${domain}"
+  if [ "$board_tracking" = "true" ]; then
   # board list format is "uuid: name" (colon-space separator, NOT pipe)
-board_id=$(monotask board list 2>/dev/null | awk -F': ' '{gsub(/^ +| +$/,"",$1);gsub(/^ +| +$/,"",$2);if($2==n)print $1}' n="$canonical" | head -1)
+  board_id=$(monotask board list 2>/dev/null | awk -F': ' '{gsub(/^ +| +$/,"",$1);gsub(/^ +| +$/,"",$2);if($2==n)print $1}' n="$canonical" | head -1)
   if [ -n "$board_id" ]; then
     cols_json=$(monotask column list "$board_id" --json 2>/dev/null || echo '[]')
     todo_col=$(echo "$cols_json" | jq -r '[.[] | select(.title=="Todo" or .title=="Backlog")] | .[0].id // empty')
@@ -337,12 +344,15 @@ board_id=$(monotask board list 2>/dev/null | awk -F': ' '{gsub(/^ +| +$/,"",$1);
     done_col=$(echo "$cols_json" | jq -r '[.[] | select(.title=="Done")] | .[0].id // empty')
   else
     board_id=$(monotask board create --space "$space_id" "$canonical" --json 2>/dev/null | jq -r '.id // empty')
-    [ -z "$board_id" ] && echo "[mastermind] monotask board unavailable — board tracking skipped."
+    [ -z "$board_id" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
+    if [ "$board_tracking" = "true" ]; then
     monotask space boards add "$space_id" "$board_id" >/dev/null 2>&1 || true
-    todo_col=$(monotask column create "$board_id" "Todo"  --json | jq -r '.id // empty')
-    doing_col=$(monotask column create "$board_id" "Doing" --json | jq -r '.id // empty')
-    done_col=$(monotask column create "$board_id" "Done"  --json | jq -r '.id // empty')
-    [ -z "$todo_col" ] && { echo "ERROR: Failed to create Todo column for $canonical"; exit 1; }
+    todo_col=$(monotask column create "$board_id" "Todo"  --json 2>/dev/null | jq -r '.id // empty')
+    doing_col=$(monotask column create "$board_id" "Doing" --json 2>/dev/null | jq -r '.id // empty')
+    done_col=$(monotask column create "$board_id" "Done"  --json 2>/dev/null | jq -r '.id // empty')
+    [ -z "$todo_col" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
+    fi
+  fi
   fi
   state_patch=$(echo "$state_patch" | jq \
     --arg d "$domain" --arg b "$board_id" \

package/.claude/skills/mastermind/architect.md

@@ -88,17 +88,17 @@ If this skill is invoked directly (not by master):
    ```
    After the bash above completes, apply the 60% classification rule: sum the total file count across all extensions. If any single extension group exceeds 60% of the total, set `<stack>` to that stack's name (e.g. `typescript`, `python`, `go`); otherwise set `<stack>` to `multi-stack`. Use this value for `Stack: <stack>` in all subsequent briefings.
    If `scope` was not provided by the caller, infer it from the prompt: "review"/"audit"/"check"/"assess" → `review`; "deduplicate"/"dedup"/"consolidate" → `deduplicate`; "design"/"architect"/"model"/"bounded context" → `design`; "migrate"/"migration"/"port to"/"convert" → `migrate`; no keyword match or multiple keyword matches → `all`. Use the resolved scope for all subsequent steps.
-5. If `board_id` was not provided by the caller: find or create monotask space `<project_name>`, then create board `architect` within it (optional — proceed without a board if monotask is not installed). Before executing the bash block below, substitute the resolved `project_name` (or `basename "$PWD"` if not provided) for every `<project_name>` occurrence:
+5. If `board_id` was not provided by the caller: find or create monotask space `<project_name>`, then create board `architect` within it. Before executing the bash block below, substitute the resolved `project_name` (or `basename "$PWD"` if not provided) for every `<project_name>` occurrence:
    ```bash
    space_id=$(monotask space list 2>/dev/null | awk -F' \| ' -v n="<project_name>" '$2==n{print $1}' | head -1)
    [ -z "$space_id" ] && space_id=$(monotask space create "<project_name>" 2>&1 | grep -oE '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}')
    result=$(monotask board create "architect" --json 2>/dev/null)
    board_id=$(echo "$result" | jq -r '.id // empty')
    [ -n "$board_id" ] && [ -n "$space_id" ] && monotask space boards add "$space_id" "$board_id" >/dev/null 2>&1 || true
-   [ -z "$board_id" ] && echo "[architect] monotask board unavailable — board tracking skipped. Install monotask to enable progress tracking."
-   echo "$board_id"
+   [ -z "$board_id" ] && { echo "[mastermind] monotask board unavailable — board tracking skipped."; board_tracking=false; }
+   echo "${board_id:-}"
    ```
-   If this block exits with an error (board_id is still empty), stop execution and return an error to the caller — do not proceed to complexity assessment.
+   If board_id is empty after this block, set `board_tracking=false` and continue — do not abort. Card creation steps later are skipped when `board_tracking=false`.
 6. Proceed with complexity assessment below
 7. At end: emit `session:complete` (if `caller` is `standalone`). Before executing the curl below, substitute the resolved sessionId for `<sessionId>`:
    ```bash
@@ -363,13 +363,10 @@ For each stream, identify:
 - Dependencies between streams (e.g. coupling analysis before deduplication plan)
 
 STEP 3 — CREATE TASKS
-For each architecture stream, create a monotask card on the project board if a board is available. If BOARD_ID is empty (monotask not installed), skip all monotask card operations in this step — proceed directly to STEP 4 with an in-memory task list instead.
-
-If BOARD_ID is non-empty: First resolve column IDs (slash commands are not available inside background Task agents — use bash directly):
+For each architecture stream, create a monotask card on the project board. First resolve column IDs (slash commands are not available inside background Task agents — use bash directly):
 
 \`\`\`bash
-[ -z "$BOARD_ID" ] && { echo "[architect] No board — skipping card creation, proceeding with in-memory tasks."; }
-columns=$([ -n "$BOARD_ID" ] && monotask column list "$BOARD_ID" --json || echo '[]')
+columns=$(monotask column list "$BOARD_ID" --json)
 COL_TODO_ID=$(echo "$columns" | jq -r '.[] | select(.title == "Todo" or .title == "Backlog") | .id' | head -1)
 COL_DONE_ID=$(echo "$columns" | jq -r '.[] | select(.title == "Done") | .id' | head -1)
 \`\`\`

package/.claude/skills/mastermind/build.md

@@ -52,8 +52,8 @@ If this skill is invoked directly (not by master):
    space_id=$(monotask space list 2>/dev/null | awk -F' \| ' -v n="$project_name" '$2==n{print $1}' | head -1)
    [ -z "$space_id" ] && space_id=$(monotask space create "$project_name" 2>&1 | grep -oE '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}')
    [ -z "$space_id" ] && { echo "ERROR: Could not find or create space '$project_name'"; exit 1; }
-   board_id=$(monotask board create "development" --json 2>/dev/null | jq -r '.id // empty')
-   [ -z "$board_id" ] && echo "[build] monotask board unavailable — board tracking skipped."
+   board_id=$(monotask board create "development" --json | jq -r '.id // empty')
+   [ -z "$board_id" ] && { echo "ERROR: Failed to create development board"; exit 1; }
    monotask space boards add "$space_id" "$board_id" >/dev/null 2>&1 || true
    todo_col=$(monotask column create "$board_id" "Todo"  --json | jq -r '.id')
    doing_col=$(monotask column create "$board_id" "Doing" --json | jq -r '.id')
@@ -120,7 +120,7 @@ Spawn one Task agent per task (all in parallel where dependencies allow):
 - Code review: subagent_type "reviewer"
 - TDD/SPARC work: subagent_type "sparc-coder"
 
-Tasks are saved to `docs/tasks/` by default. To execute: `/mastermind:do --file <TASK_FILE>`. With monotask: `/mastermind:do --monotask --space $SPACE_ID --board $TASK_BOARD_ID`.
+Also run /mastermind:do --board <board_id> to track execution.
 
 STEP 4 — COLLECT AND RETURN
 Collect all agent output schemas. Return to caller:

package/.claude/skills/mastermind/content.md

@@ -73,8 +73,8 @@ If this skill is invoked directly (not by master):
    space_id=$(monotask space list 2>/dev/null | awk -F' \| ' -v n="$project_name" '$2==n{print $1}' | head -1)
    [ -z "$space_id" ] && space_id=$(monotask space create "$project_name" 2>&1 | grep -oE '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}')
    [ -z "$space_id" ] && { echo "ERROR: Could not find or create space '$project_name'"; exit 1; }
-   board_id=$(monotask board create "content" --json 2>/dev/null | jq -r '.id // empty')
-   [ -z "$board_id" ] && echo "[content] monotask board unavailable — board tracking skipped."
+   board_id=$(monotask board create "content" --json | jq -r '.id // empty')
+   [ -z "$board_id" ] && { echo "ERROR: Failed to create content board"; exit 1; }
    monotask space boards add "$space_id" "$board_id" >/dev/null 2>&1 || true
    todo_col=$(monotask column create "$board_id" "Todo"  --json | jq -r '.id')
    doing_col=$(monotask column create "$board_id" "Doing" --json | jq -r '.id')
@@ -147,7 +147,7 @@ Stage 2 draft: subagent_type "Content Creator"
 Stage 3 edit: subagent_type "Technical Writer"
 Stage 4 format/publish: subagent_type "Content Creator"
 
-Tasks are saved to `docs/tasks/` by default. To execute: `/mastermind:do --file <TASK_FILE>`. With monotask: `/mastermind:do --monotask --space $SPACE_ID --board $TASK_BOARD_ID`.
+Also run /mastermind:do --board <board_id> to track execution.
 
 STEP 4 — COLLECT AND RETURN
 Collect the final formatted content. Return to caller: