monomind 1.8.0 → 1.9.1

package/packages/@monomind/cli/dist/src/commands/embeddings.js

@@ -16,7 +16,7 @@ import { output } from '../output.js';
 // Dynamic imports for embeddings package
 async function getEmbeddings() {
     try {
-        return await import('@monoes/embeddings');
+        return await import('@monomind/embeddings');
     }
     catch {
         return null;
@@ -127,6 +127,21 @@ const searchCommand = {
             const fs = await import('fs');
             const path = await import('path');
             const fullDbPath = path.resolve(process.cwd(), dbPath);
+            // Containment + sanity checks. Without these, --db-path /etc/shadow,
+            // /proc/self/environ, or /dev/zero would all be loaded into memory and
+            // handed to the sql.js parser — info disclosure / parser-CVE surface /
+            // OOM hang.
+            const projectRoot = path.resolve(process.cwd());
+            if (!fullDbPath.startsWith(projectRoot + path.sep) && fullDbPath !== projectRoot) {
+                spinner.fail('Invalid db-path');
+                output.printError(`db-path must resolve within the project directory: ${projectRoot}`);
+                return { success: false, exitCode: 1 };
+            }
+            if (!/\.(db|sqlite)$/i.test(fullDbPath)) {
+                spinner.fail('Invalid db-path');
+                output.printError('db-path must end in .db or .sqlite');
+                return { success: false, exitCode: 1 };
+            }
             // Check if database exists
             if (!fs.existsSync(fullDbPath)) {
                 spinner.fail('Database not found');
@@ -134,6 +149,12 @@ const searchCommand = {
                 output.printInfo('Run: monomind memory init');
                 return { success: false, exitCode: 1 };
             }
+            const stat = fs.statSync(fullDbPath);
+            if (stat.size > 500 * 1024 * 1024) {
+                spinner.fail('Database too large');
+                output.printError(`Database exceeds 500MB cap: ${stat.size} bytes`);
+                return { success: false, exitCode: 1 };
+            }
             // Load sql.js
             const initSqlJs = (await import('sql.js')).default;
             const SQL = await initSqlJs();
@@ -145,14 +166,13 @@ const searchCommand = {
             const queryResult = await generateEmbedding(query);
             const queryEmbedding = queryResult.embedding;
             // Get all entries with embeddings from database
-            const entries = db.exec(`
-        SELECT id, key, namespace, content, embedding, embedding_dimensions
-        FROM memory_entries
-        WHERE status = 'active'
-          AND embedding IS NOT NULL
-          ${namespace !== 'all' ? `AND namespace = '${namespace}'` : ''}
-        LIMIT 1000
-      `);
+            let entries;
+            if (namespace !== 'all') {
+                entries = db.exec('SELECT id, key, namespace, content, embedding, embedding_dimensions FROM memory_entries WHERE status = \'active\' AND embedding IS NOT NULL AND namespace = ? LIMIT 1000', [namespace]);
+            }
+            else {
+                entries = db.exec('SELECT id, key, namespace, content, embedding, embedding_dimensions FROM memory_entries WHERE status = \'active\' AND embedding IS NOT NULL LIMIT 1000');
+            }
             const results = [];
             if (entries[0]?.values) {
                 for (const row of entries[0].values) {
@@ -160,7 +180,11 @@ const searchCommand = {
                     if (!embeddingJson)
                         continue;
                     try {
-                        const embedding = JSON.parse(embeddingJson);
+                        const parsed = JSON.parse(embeddingJson);
+                        if (!Array.isArray(parsed) || parsed.some((v) => typeof v !== 'number')) {
+                            continue;
+                        }
+                        const embedding = parsed;
                         // Calculate cosine similarity
                         const similarity = cosineSimilarity(queryEmbedding, embedding);
                         if (similarity >= threshold) {
@@ -180,27 +204,26 @@ const searchCommand = {
             }
             // Also search entries without embeddings using keyword match
             if (results.length < limit) {
-                const keywordEntries = db.exec(`
-          SELECT id, key, namespace, content
-          FROM memory_entries
-          WHERE status = 'active'
-            AND (content LIKE '%${query.replace(/'/g, "''")}%' OR key LIKE '%${query.replace(/'/g, "''")}%')
-            ${namespace !== 'all' ? `AND namespace = '${namespace}'` : ''}
-          LIMIT ${limit - results.length}
-        `);
-                if (keywordEntries[0]?.values) {
-                    for (const row of keywordEntries[0].values) {
-                        const [id, key, ns, content] = row;
-                        // Avoid duplicates
-                        if (!results.some(r => r.id === id.substring(0, 10))) {
-                            results.push({
-                                score: 0.5, // Keyword match base score
-                                id: id.substring(0, 10),
-                                key: key || id.substring(0, 15),
-                                content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
-                                namespace: ns || 'default'
-                            });
-                        }
+                const remaining = limit - results.length;
+                let keywordResult;
+                if (namespace !== 'all') {
+                    keywordResult = db.exec("SELECT id, key, namespace, content FROM memory_entries WHERE status = 'active' AND (content LIKE ? OR key LIKE ?) AND namespace = ? LIMIT ?", [`%${query}%`, `%${query}%`, namespace, remaining]);
+                }
+                else {
+                    keywordResult = db.exec("SELECT id, key, namespace, content FROM memory_entries WHERE status = 'active' AND (content LIKE ? OR key LIKE ?) LIMIT ?", [`%${query}%`, `%${query}%`, remaining]);
+                }
+                const keywordRows = keywordResult[0]?.values ?? [];
+                for (const row of keywordRows) {
+                    const [id, key, ns, content] = row;
+                    // Avoid duplicates (keyword fallback is unconditional — threshold applies to semantic results)
+                    if (!results.some(r => r.id === id.substring(0, 10))) {
+                        results.push({
+                            score: 0.5,
+                            id: id.substring(0, 10),
+                            key: key || id.substring(0, 15),
+                            content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
+                            namespace: ns || 'default'
+                        });
                     }
                 }
             }
@@ -247,7 +270,9 @@ const searchCommand = {
  * V8 JIT-friendly - ~0.5μs per 384-dim vector comparison
  */
 function cosineSimilarity(a, b) {
-    const len = Math.min(a.length, b.length);
+    if (a.length !== b.length)
+        return 0;
+    const len = a.length;
     if (len === 0)
         return 0;
     let dot = 0, normA = 0, normB = 0;
@@ -369,6 +394,16 @@ const collectionsCommand = {
             const fs = await import('fs');
             const path = await import('path');
             const fullDbPath = path.resolve(process.cwd(), dbPath);
+            // Containment check (mirrors the search handler above).
+            const projectRoot = path.resolve(process.cwd());
+            if (!fullDbPath.startsWith(projectRoot + path.sep) && fullDbPath !== projectRoot) {
+                output.printError(`db-path must resolve within the project directory: ${projectRoot}`);
+                return { success: false, exitCode: 1 };
+            }
+            if (!/\.(db|sqlite)$/i.test(fullDbPath)) {
+                output.printError('db-path must end in .db or .sqlite');
+                return { success: false, exitCode: 1 };
+            }
             // Check if database exists
             if (!fs.existsSync(fullDbPath)) {
                 output.printWarning('No database found');
@@ -377,6 +412,11 @@ const collectionsCommand = {
                 output.writeln(output.dim('No collections yet - initialize memory first'));
                 return { success: true, data: [] };
             }
+            const stat2 = fs.statSync(fullDbPath);
+            if (stat2.size > 500 * 1024 * 1024) {
+                output.printError(`Database exceeds 500MB cap: ${stat2.size} bytes`);
+                return { success: false, exitCode: 1 };
+            }
             // Load sql.js and query real data
             const initSqlJs = (await import('sql.js')).default;
             const SQL = await initSqlJs();
@@ -616,6 +656,14 @@ const initCommand = {
                 output.writeln(output.dim('Use --force to overwrite existing configuration'));
                 return { success: false, exitCode: 1 };
             }
+            // Validate model id against HuggingFace-style shape before any path-derived
+            // operation. Without this, `--model "Xenova/../../etc/foo"` could collapse
+            // into a path-traversal sink inside the embeddings package's downloader.
+            const MODEL_ID_RE = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/;
+            if (!MODEL_ID_RE.test(model)) {
+                output.printError(`Invalid model id: must match ${MODEL_ID_RE} (HuggingFace org/name)`);
+                return { success: false, exitCode: 1 };
+            }
             const spinner = output.createSpinner({ text: 'Initializing...', spinner: 'dots' });
             spinner.start();
             if (!fs.existsSync(configDir)) {
@@ -636,7 +684,7 @@ const initCommand = {
                 else {
                     // Embeddings package not available — skip download
                     await new Promise(r => setTimeout(r, 500));
-                    output.writeln(output.dim('  (Skipped — @monoes/embeddings not installed)'));
+                    output.writeln(output.dim('  (Skipped — @monomind/embeddings not installed)'));
                 }
             }
             // Write embeddings config
@@ -660,7 +708,14 @@ const initCommand = {
                 },
                 initialized: new Date().toISOString(),
             };
-            fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+            // Atomic write with restrictive mode — embeddings.json content is not
+            // secret today but the helper pattern guards against partial writes from
+            // SIGINT during init.
+            {
+                const tmp = `${configPath}.${process.pid}.tmp`;
+                fs.writeFileSync(tmp, JSON.stringify(config, null, 2), { mode: 0o644 });
+                fs.renameSync(tmp, configPath);
+            }
             spinner.succeed('Embedding subsystem initialized');
             output.writeln();
             output.printTable({
@@ -762,7 +817,7 @@ const chunkCommand = {
         output.writeln(output.bold('Document Chunking'));
         output.writeln(output.dim('─'.repeat(50)));
         if (!embeddings) {
-            output.printWarning('@monoes/embeddings not installed, showing preview');
+            output.printWarning('@monomind/embeddings not installed, showing preview');
             output.writeln();
             output.printBox([
                 `Strategy: ${strategy}`,
@@ -855,10 +910,10 @@ const hyperbolicCommand = {
         output.writeln(output.dim('─'.repeat(50)));
         // Try to import hyperbolic functions from embeddings package
         try {
-            const hyperbolic = await import('@monoes/embeddings').then(m => m).catch(() => null);
+            const hyperbolic = await import('@monomind/embeddings').then(m => m).catch(() => null);
             if (!hyperbolic || !hyperbolic.euclideanToPoincare) {
-                output.printWarning('@monoes/embeddings hyperbolic module not available');
-                output.printInfo('Install with: npm install @monoes/embeddings');
+                output.printWarning('@monomind/embeddings hyperbolic module not available');
+                output.printInfo('Install with: npm install @monomind/embeddings');
                 return { success: false, exitCode: 1 };
             }
             if (!inputJson) {
@@ -1005,7 +1060,14 @@ const neuralCommand = {
                 },
                 initializedAt: new Date().toISOString(),
             };
-            fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+            // Atomic write with restrictive mode — embeddings.json content is not
+            // secret today but the helper pattern guards against partial writes from
+            // SIGINT during init.
+            {
+                const tmp = `${configPath}.${process.pid}.tmp`;
+                fs.writeFileSync(tmp, JSON.stringify(config, null, 2), { mode: 0o644 });
+                fs.renameSync(tmp, configPath);
+            }
             output.printSuccess('Neural substrate initialized');
             output.writeln();
         }
@@ -1123,7 +1185,7 @@ const modelsCommand = {
             }
             else {
                 await new Promise(r => setTimeout(r, 500));
-                spinner.succeed(`Download skipped — @monoes/embeddings not installed`);
+                spinner.succeed(`Download skipped — @monomind/embeddings not installed`);
             }
             return { success: true };
         }
@@ -1180,6 +1242,15 @@ const cacheCommand = {
         const path = await import('path');
         // Get real cache stats
         const resolvedDbPath = path.resolve(dbPath);
+        const projectRoot = path.resolve(process.cwd());
+        if (!resolvedDbPath.startsWith(projectRoot + path.sep) && resolvedDbPath !== projectRoot) {
+            output.printError(`db-path must resolve within the project directory: ${projectRoot}`);
+            return { success: false, exitCode: 1 };
+        }
+        if (!/\.(db|sqlite)$/i.test(resolvedDbPath)) {
+            output.printError('db-path must end in .db or .sqlite');
+            return { success: false, exitCode: 1 };
+        }
         let sqliteEntries = 0;
         let sqliteSize = '0 B';
         let sqliteExists = false;
@@ -1200,15 +1271,20 @@ const cacheCommand = {
                 }
                 // Try to count real entries via sql.js
                 try {
-                    const initSqlJs = (await import('sql.js')).default;
-                    const SQL = await initSqlJs();
-                    const fileBuffer = fs.readFileSync(resolvedDbPath);
-                    const db = new SQL.Database(fileBuffer);
-                    const result = db.exec('SELECT COUNT(*) as count FROM embeddings');
-                    if (result.length > 0 && result[0].values.length > 0) {
-                        sqliteEntries = result[0].values[0][0];
+                    if (stats.size > 500 * 1024 * 1024) {
+                        sqliteEntries = Math.floor(stats.size / 1600);
+                    }
+                    else {
+                        const initSqlJs = (await import('sql.js')).default;
+                        const SQL = await initSqlJs();
+                        const fileBuffer = fs.readFileSync(resolvedDbPath);
+                        const db = new SQL.Database(fileBuffer);
+                        const result = db.exec('SELECT COUNT(*) as count FROM embeddings');
+                        if (result.length > 0 && result[0].values.length > 0) {
+                            sqliteEntries = result[0].values[0][0];
+                        }
+                        db.close();
                     }
-                    db.close();
                 }
                 catch {
                     // Estimate entries from file size (~1600 bytes per entry for 384-dim embeddings)

package/packages/@monomind/cli/dist/src/commands/hive-mind.js

@@ -180,7 +180,8 @@ async function spawnClaudeCodeInstance(swarmId, swarmName, objective, workers, f
         // Ensure sessions directory exists
         const sessionsDir = join('.hive-mind', 'sessions');
         await mkdir(sessionsDir, { recursive: true });
-        const promptFile = join(sessionsDir, `hive-mind-prompt-${swarmId}.txt`);
+        const safeSwarmId = swarmId.replace(/[^a-zA-Z0-9_-]/g, '_');
+        const promptFile = join(sessionsDir, `hive-mind-prompt-${safeSwarmId}.txt`);
         await writeFile(promptFile, hiveMindPrompt, 'utf8');
         output.writeln();
         output.printSuccess(`Hive Mind prompt saved to: ${promptFile}`);
@@ -208,15 +209,14 @@ async function spawnClaudeCodeInstance(swarmId, swarmName, objective, workers, f
                 claudeArgs.push('--verbose');
                 output.printInfo('Running in non-interactive mode');
             }
-            // Add auto-permission flag unless explicitly disabled
-            const skipPermissions = flags['dangerously-skip-permissions'] !== false && !flags['no-auto-permissions'];
+            // Add auto-permission flag only when explicitly requested
+            const skipPermissions = flags['dangerously-skip-permissions'] === true && !flags['no-auto-permissions'];
             if (skipPermissions) {
                 claudeArgs.push('--dangerously-skip-permissions');
-                if (!isNonInteractive) {
-                    output.printWarning('Using --dangerously-skip-permissions for seamless hive-mind execution');
-                }
+                output.writeln(output.warning('WARNING: Running with --dangerously-skip-permissions: all file and shell operations will execute without prompts.'));
             }
-            // Add the prompt as the LAST argument
+            // '--' ends option parsing so the prompt cannot be interpreted as a flag
+            claudeArgs.push('--');
             claudeArgs.push(hiveMindPrompt);
             output.writeln();
             output.printInfo('Launching Claude Code...');
@@ -297,7 +297,8 @@ async function spawnClaudeCodeInstance(swarmId, swarmName, objective, workers, f
         output.printError(`Error: ${errorMessage}`);
         // Try to save prompt as fallback
         try {
-            const promptFile = `hive-mind-prompt-${swarmId}-fallback.txt`;
+            const safeSwarmIdFallback = swarmId.replace(/[^a-zA-Z0-9_-]/g, '_');
+            const promptFile = `hive-mind-prompt-${safeSwarmIdFallback}-fallback.txt`;
             const workerGroups = groupWorkersByType(workers);
             const hiveMindPrompt = generateHiveMindPrompt(swarmId, swarmName, objective, workers, workerGroups, flags);
             await writeFile(promptFile, hiveMindPrompt, 'utf8');
@@ -377,9 +378,9 @@ const initCommand = {
         const config = {
             topology: topology || 'hierarchical-mesh',
             consensus: consensus || 'byzantine',
-            maxAgents: ctx.flags.maxAgents || 15,
+            maxAgents: ctx.flags['max-agents'] || 15,
             persist: ctx.flags.persist,
-            memoryBackend: ctx.flags.memoryBackend || 'hybrid'
+            memoryBackend: ctx.flags['memory-backend'] || 'hybrid'
         };
         output.writeln();
         output.writeln(output.bold('Initializing Hive Mind'));
@@ -471,7 +472,7 @@ const spawnCommand = {
             name: 'dangerously-skip-permissions',
             description: 'Skip permission prompts in Claude Code (use with caution)',
             type: 'boolean',
-            default: true
+            default: false
         },
         {
             name: 'no-auto-permissions',
@@ -772,7 +773,7 @@ const taskCommand = {
             return { success: false, exitCode: 1 };
         }
         const priority = ctx.flags.priority;
-        const requireConsensus = ctx.flags.requireConsensus;
+        const requireConsensus = ctx.flags['require-consensus'];
         const timeout = ctx.flags.timeout;
         output.printInfo('Submitting task to hive...');
         try {
@@ -948,7 +949,7 @@ const consensusCommand = {
     action: async (ctx) => {
         const action = ctx.flags.action || 'list';
         try {
-            const result = await callMCPTool('hive-mind_consensus', { action, proposalId: ctx.flags.proposalId, type: ctx.flags.type, value: ctx.flags.value, vote: ctx.flags.vote === 'yes', voterId: ctx.flags.voterId });
+            const result = await callMCPTool('hive-mind_consensus', { action, proposalId: ctx.flags['proposal-id'], type: ctx.flags.type, value: ctx.flags.value, vote: ctx.flags.vote === 'yes', voterId: ctx.flags['voter-id'] });
             if (ctx.flags.format === 'json') {
                 output.printJson(result);
                 return { success: true, data: result };
@@ -1080,7 +1081,7 @@ const shutdownCommand = {
     ],
     action: async (ctx) => {
         const force = ctx.flags.force;
-        const saveState = ctx.flags.saveState;
+        const saveState = ctx.flags['save-state'];
         if (!force && ctx.interactive) {
             const confirmed = await confirm({
                 message: 'Shutdown the hive mind? All agents will be terminated.',

package/packages/@monomind/cli/dist/src/commands/hooks.js

@@ -73,7 +73,7 @@ function parseCoverageSummaryJson(data, source) {
         const m = metrics;
         if (!m || typeof m !== 'object')
             continue;
-        const linePct = m.lines?.pct ?? m.lines?.covered != null ? ((m.lines?.covered ?? 0) / Math.max(m.lines?.total ?? 1, 1)) * 100 : 0;
+        const linePct = m.lines?.pct ?? (m.lines?.covered != null ? ((m.lines?.covered ?? 0) / Math.max(m.lines?.total ?? 1, 1)) * 100 : 0);
         const branchPct = m.branches?.pct ?? (m.branches?.total ? ((m.branches?.covered ?? 0) / m.branches.total) * 100 : 100);
         const funcPct = m.functions?.pct ?? (m.functions?.total ? ((m.functions?.covered ?? 0) / m.functions.total) * 100 : 100);
         const stmtPct = m.statements?.pct ?? (m.statements?.total ? ((m.statements?.covered ?? 0) / m.statements.total) * 100 : 100);
@@ -114,6 +114,10 @@ function parseLcovInfo(raw, source) {
     let linesHit = 0, linesFound = 0;
     let branchesHit = 0, branchesFound = 0;
     let functionsHit = 0, functionsFound = 0;
+    let totalLines = 0, coveredLines = 0;
+    let totalBranches = 0, coveredBranches = 0;
+    let totalFunctions = 0, coveredFunctions = 0;
+    let totalStatements = 0, coveredStatements = 0;
     const flushRecord = () => {
         if (currentFile) {
             entries.push({
@@ -123,6 +127,14 @@ function parseLcovInfo(raw, source) {
                 functions: functionsFound > 0 ? (functionsHit / functionsFound) * 100 : 100,
                 statements: linesFound > 0 ? (linesHit / linesFound) * 100 : 0,
             });
+            totalLines += linesFound;
+            coveredLines += linesHit;
+            totalBranches += branchesFound;
+            coveredBranches += branchesHit;
+            totalFunctions += functionsFound;
+            coveredFunctions += functionsHit;
+            totalStatements += linesFound;
+            coveredStatements += linesHit;
         }
     };
     for (const line of raw.split('\n')) {
@@ -161,25 +173,16 @@ function parseLcovInfo(raw, source) {
     }
     flushRecord();
     entries.sort((a, b) => a.lines - b.lines);
-    let totalLH = 0, totalLF = 0, totalBH = 0, totalBF = 0;
-    for (const e of entries) {
-        // Approximate from percentages (we lost exact counts after flush, but summaries are okay)
-        totalLH += e.lines;
-        totalLF += 100;
-        totalBH += e.branches;
-        totalBF += 100;
-    }
-    const n = entries.length || 1;
     return {
         found: true,
         source,
         entries,
         summary: {
             totalFiles: entries.length,
-            overallLineCoverage: totalLH / n,
-            overallBranchCoverage: totalBH / n,
-            overallFunctionCoverage: 0,
-            overallStatementCoverage: totalLH / n,
+            overallLineCoverage: totalLines > 0 ? (coveredLines / totalLines) * 100 : 0,
+            overallBranchCoverage: totalBranches > 0 ? (coveredBranches / totalBranches) * 100 : 100,
+            overallFunctionCoverage: totalFunctions > 0 ? (coveredFunctions / totalFunctions) * 100 : 0,
+            overallStatementCoverage: totalStatements > 0 ? (coveredStatements / totalStatements) * 100 : 0,
         },
     };
 }
@@ -570,7 +573,7 @@ const postCommandCommand = {
             const result = await callMCPTool('hooks_post-command', {
                 command,
                 success,
-                exitCode: ctx.flags.exitCode || 0,
+                exitCode: ctx.flags['exit-code'] || 0,
                 duration: ctx.flags.duration,
                 timestamp: Date.now(),
             });
@@ -630,7 +633,7 @@ const routeCommand = {
     ],
     action: async (ctx) => {
         const task = ctx.args[0] || ctx.flags.task;
-        const topK = ctx.flags.topK || 3;
+        const topK = ctx.flags['top-k'] || 3;
         if (!task) {
             output.printError('Task description is required. Use --task or -t flag.');
             return { success: false, exitCode: 1 };
@@ -892,7 +895,7 @@ const pretrainCommand = {
             const result = await callMCPTool('hooks_pretrain', {
                 path: repoPath,
                 depth,
-                skipCache: ctx.flags.skipCache || false,
+                skipCache: ctx.flags['skip-cache'] || false,
                 withEmbeddings,
                 embeddingModel,
                 fileTypes: fileTypes.split(',').map((t) => t.trim()),
@@ -1179,7 +1182,7 @@ const transferFromProjectCommand = {
     ],
     action: async (ctx) => {
         const sourcePath = ctx.args[0] || ctx.flags.source;
-        const minConfidence = ctx.flags.minConfidence || 0.7;
+        const minConfidence = ctx.flags['min-confidence'] || 0.7;
         if (!sourcePath) {
             output.printError('Source project path is required. Use --source or -s flag.');
             return { success: false, exitCode: 1 };
@@ -1375,7 +1378,7 @@ const preTaskCommand = {
         { command: 'monomind hooks pre-task -i task-456 -d "Implement feature" --auto-spawn', description: 'With auto-spawn' }
     ],
     action: async (ctx) => {
-        const taskId = ctx.flags.taskId || `task-${Date.now().toString(36)}`;
+        const taskId = ctx.flags['task-id'] || `task-${Date.now().toString(36)}`;
         const description = ctx.args[0] || ctx.flags.description;
         if (!description) {
             output.printError('Description is required: --description "your task"');
@@ -1386,7 +1389,7 @@ const preTaskCommand = {
             const result = await callMCPTool('hooks_pre-task', {
                 taskId,
                 description,
-                autoSpawn: ctx.flags.autoSpawn || false,
+                autoSpawn: ctx.flags['auto-spawn'] || false,
                 timestamp: Date.now(),
             });
             if (ctx.flags.format === 'json') {
@@ -1520,7 +1523,7 @@ const postTaskCommand = {
     ],
     action: async (ctx) => {
         // Auto-generate task ID if not provided
-        const taskId = ctx.flags.taskId || `task_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+        const taskId = ctx.flags['task-id'] || `task_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
         // Default success to true for backward compatibility
         const success = ctx.flags.success !== undefined ? ctx.flags.success : true;
         output.printInfo(`Recording outcome for task: ${output.highlight(taskId)}`);
@@ -1586,7 +1589,7 @@ const sessionEndCommand = {
         output.printInfo('Ending session...');
         try {
             const result = await callMCPTool('hooks_session-end', {
-                saveState: ctx.flags.saveState ?? true,
+                saveState: ctx.flags['save-state'] ?? true,
                 timestamp: Date.now(),
             });
             if (ctx.flags.format === 'json') {
@@ -1661,13 +1664,13 @@ const sessionRestoreCommand = {
         { command: 'monomind hooks session-restore -i session-12345', description: 'Restore specific session' }
     ],
     action: async (ctx) => {
-        const sessionId = ctx.args[0] || ctx.flags.sessionId || 'latest';
+        const sessionId = ctx.args[0] || ctx.flags['session-id'] || 'latest';
         output.printInfo(`Restoring session: ${output.highlight(sessionId)}`);
         try {
             const result = await callMCPTool('hooks_session-restore', {
                 sessionId,
-                restoreAgents: ctx.flags.restoreAgents ?? true,
-                restoreTasks: ctx.flags.restoreTasks ?? true,
+                restoreAgents: ctx.flags['restore-agents'] ?? true,
+                restoreTasks: ctx.flags['restore-tasks'] ?? true,
                 timestamp: Date.now(),
             });
             if (ctx.flags.format === 'json') {
@@ -1778,10 +1781,10 @@ const intelligenceCommand = {
         const showStatus = ctx.flags.status;
         const forceTraining = ctx.flags.train;
         const reset = ctx.flags.reset;
-        const enableSona = ctx.flags.enableSona ?? true;
-        const enableMoe = ctx.flags.enableMoe ?? true;
-        const enableHnsw = ctx.flags.enableHnsw ?? true;
-        const embeddingProvider = ctx.flags.embeddingProvider || 'transformers';
+        const enableSona = ctx.flags['enable-sona'] ?? true;
+        const enableMoe = ctx.flags['enable-moe'] ?? true;
+        const enableHnsw = ctx.flags['enable-hnsw'] ?? true;
+        const embeddingProvider = ctx.flags['embedding-provider'] || 'transformers';
         output.writeln();
         output.writeln(output.bold('RuVector Intelligence System'));
         output.writeln();
@@ -1926,9 +1929,9 @@ const intelligenceCommand = {
                 },
             };
             if (forceTraining) {
-                spinner.setText('Running training cycle...');
-                await new Promise(resolve => setTimeout(resolve, 500));
-                spinner.succeed('Training cycle completed');
+                output.printWarning('Training cycle is not yet wired to the intelligence system. No patterns were updated.');
+                spinner.fail('Training not implemented');
+                return { success: false, message: 'Training not implemented', exitCode: 1 };
             }
             else {
                 spinner.succeed(hasLocalData ? 'Intelligence system active (local data loaded)' : 'Intelligence system active');
@@ -3368,7 +3371,8 @@ const statuslineCommand = {
                     ? 'tasklist /FI "IMAGENAME eq node.exe" 2>NUL | findstr /I /C:"node" >NUL && echo 1 || echo 0'
                     : 'ps aux 2>/dev/null | grep -c agentic-flow || echo "0"';
                 const ps = execSync(psCmd, { encoding: 'utf-8' });
-                activeAgents = Math.max(0, parseInt(ps.trim()) - 1);
+                const raw = parseInt(ps.trim());
+                activeAgents = Math.max(0, isWindows ? raw : raw - 1);
                 coordinationActive = activeAgents > 0;
             }
             catch {
@@ -4129,10 +4133,10 @@ const teammateIdleCommand = {
         { command: 'monomind hooks teammate-idle -t worker-1 --check-task-list', description: 'Check tasks for specific teammate' }
     ],
     action: async (ctx) => {
-        const autoAssign = ctx.flags.autoAssign !== false;
-        const checkTaskList = ctx.flags.checkTaskList !== false;
-        const teammateId = ctx.flags.teammateId;
-        const teamName = ctx.flags.teamName;
+        const autoAssign = ctx.flags['auto-assign'] !== false;
+        const checkTaskList = ctx.flags['check-task-list'] !== false;
+        const teammateId = ctx.flags['teammate-id'];
+        const teamName = ctx.flags['team-name'];
         if (ctx.flags.format !== 'json') {
             output.printInfo(`Teammate idle hook triggered${teammateId ? ` for: ${output.highlight(teammateId)}` : ''}`);
         }
@@ -4228,12 +4232,12 @@ const taskCompletedCommand = {
         { command: 'monomind hooks task-completed -i task-456 --notify-lead --quality 0.95', description: 'Complete with quality score' }
     ],
     action: async (ctx) => {
-        const taskId = ctx.args[0] || ctx.flags.taskId;
-        const trainPatterns = ctx.flags.trainPatterns !== false;
-        const notifyLead = ctx.flags.notifyLead !== false;
+        const taskId = ctx.args[0] || ctx.flags['task-id'];
+        const trainPatterns = ctx.flags['train-patterns'] !== false;
+        const notifyLead = ctx.flags['notify-lead'] !== false;
         const success = ctx.flags.success !== false;
         const quality = ctx.flags.quality;
-        const teammateId = ctx.flags.teammateId;
+        const teammateId = ctx.flags['teammate-id'];
         if (!taskId) {
             output.printError('Task ID is required. Use --task-id or -i flag.');
             return { success: false, exitCode: 1 };

package/packages/@monomind/cli/dist/src/commands/index.d.ts

@@ -31,6 +31,7 @@ export { guidanceCommand } from './guidance.js';
 export { applianceCommand } from './appliance.js';
 export { cleanupCommand } from './cleanup.js';
 export { autopilotCommand } from './autopilot.js';
+export { monographCommand } from './monograph.js';
 export declare function getConfigCommand(): Promise<Command | undefined>;
 export declare function getMigrateCommand(): Promise<Command | undefined>;
 export declare function getWorkflowCommand(): Promise<Command | undefined>;
@@ -56,6 +57,7 @@ export declare function getGuidanceCommand(): Promise<Command | undefined>;
 export declare function getApplianceCommand(): Promise<Command | undefined>;
 export declare function getCleanupCommand(): Promise<Command | undefined>;
 export declare function getAutopilotCommand(): Promise<Command | undefined>;
+export declare function getMonographCommand(): Promise<Command | undefined>;
 /**
  * Core commands loaded synchronously (available immediately)
  * Advanced commands loaded on-demand for faster startup