monomind 2.0.0 → 2.0.1

package/packages/@monomind/cli/dist/src/ui/server.mjs

@@ -171,11 +171,12 @@ function pathToSections(filename) {
   if (f.includes('registry') || f.includes('registrations')) return ['agents'];
   if (f.includes('route') || f.includes('worker-dispatch'))  return ['hooks'];
   if (f.includes('chunk') || f.includes('skills')) return ['knowledge'];
-  if (f.includes('memory.db') || f.includes('memory.graph') || f.includes('hnsw.index') ||
-      f.includes('monovector.db') || f.includes('ranked-context') ||
+  if (f.includes('auto-memory-store') || f.includes('episodes.jsonl') ||
       (f.includes('/memory/') && f.endsWith('.md'))) return ['memory', 'sessions'];
   if (f.includes('palace') || f.includes('drawers') || f.includes('identity')) return ['memory', 'sessions'];
-  if (f.includes('ddd') || f.includes('learning') || f.includes('audit')) return ['metrics'];
+  if (f.includes('consolidation')) return ['metrics', 'memory'];
+  if (f.includes('ddd') || f.includes('audit') || f.includes('codebase-map') ||
+      f.includes('security-audit') || f.includes('performance')) return ['metrics'];
   if (f.endsWith('.jsonl') || f.includes('sessions')) return ['sessions'];
   return ['sessions', 'swarm', 'agents', 'tokens', 'hooks'];
 }
@@ -1403,7 +1404,8 @@ export async function startServer({ port = 4242, projectDir, openBrowser = true
         const adrs = [];
         for (const { path: adrDir, group } of adrDirs) {
           if (!fs.existsSync(adrDir)) continue;
-          const files = fs.readdirSync(adrDir).filter(f => f.endsWith('.md') && f !== 'README.md' && f !== 'v3-adrs.md' && f !== 'SECURITY-REVIEW-SUMMARY.md');
+          // Skip AppleDouble junk ('._*') — exFAT volumes litter these and they aren't real ADRs
+          const files = fs.readdirSync(adrDir).filter(f => f.endsWith('.md') && !f.startsWith('._') && f !== 'README.md' && f !== 'v3-adrs.md' && f !== 'SECURITY-REVIEW-SUMMARY.md');
           for (const fname of files.sort()) {
             const resolvedGroup = /^ADR-G/i.test(fname) ? 'guidance' : 'implementation';
             try {
@@ -1621,10 +1623,26 @@ export async function startServer({ port = 4242, projectDir, openBrowser = true
           });
         }
 
-        // Check for AgentDB / HNSW / RVF backends
-        const dbPath     = path.join(d, '.monomind', 'agentdb.db');
-        const hnswPath   = path.join(d, '.monomind', 'hnsw.index');
-        const rvfPath    = path.join(d, '.monomind', 'memory.rvf');
+        // Real v2 memory sources: auto-memory pattern store + episodic log
+        let patterns = 0, patternsUpdated = null;
+        try {
+          const store = JSON.parse(fs.readFileSync(path.join(d, '.monomind', 'data', 'auto-memory-store.json'), 'utf8'));
+          if (Array.isArray(store)) {
+            patterns = store.length;
+            for (const e of store) {
+              if (e && typeof e.ts === 'number' && (!patternsUpdated || e.ts > patternsUpdated)) patternsUpdated = e.ts;
+            }
+          }
+        } catch {}
+
+        let episodes = 0, lastEpisode = null;
+        try {
+          const lines = fs.readFileSync(path.join(d, '.monomind', 'episodic', 'episodes.jsonl'), 'utf8').split('\n').filter(Boolean);
+          episodes = lines.length;
+          if (lines.length) {
+            try { const last = JSON.parse(lines[lines.length - 1]); lastEpisode = last.ts || last.timestamp || null; } catch {}
+          }
+        } catch {}
 
         const stats = {
           total,
@@ -1633,9 +1651,15 @@ export async function startServer({ port = 4242, projectDir, openBrowser = true
           ns: Object.keys(byType).length,
           size,
           byType,
-          hnsw: fs.existsSync(hnswPath),
-          agentdb: fs.existsSync(dbPath),
-          rvf: fs.existsSync(rvfPath),
+          patterns,
+          patternsUpdated,
+          episodes,
+          lastEpisode,
+          memoryFiles: total,
+          // Legacy keys (v1 backends removed in v2) — kept false for frontend backward-safety
+          hnsw: false,
+          agentdb: false,
+          rvf: false,
           lastWrite,
           memDir,
         };
@@ -3476,7 +3500,9 @@ new Sigma(g,document.getElementById('g'),{renderEdgeLabels:false,labelColor:{col
     if (req.method === 'GET' && url.startsWith('/api/token-usage')) {
       try {
         const qs = new URL(req.url, 'http://localhost').searchParams;
-        const period = ['today','week','30days','month'].includes(qs.get('period')) ? qs.get('period') : 'today';
+        // Frontend sends ?range=..., older callers use ?period=... — accept both
+        const _periodRaw = qs.get('period') || qs.get('range');
+        const period = ['today','week','30days','month'].includes(_periodRaw) ? _periodRaw : 'today';
         const dir = path.resolve(qs.get('dir') || projectDir || process.cwd());
         const trackerPath = path.join(dir, '.claude', 'helpers', 'token-tracker.cjs');
         const fallback = () => {
@@ -5625,6 +5651,33 @@ new Sigma(g,document.getElementById('g'),{renderEdgeLabels:false,labelColor:{col
       return;
     }
 
+    // ------------------------------------------------- GET /api/playbooks
+    // List playbook definitions from <dir>/.monomind/playbooks/*.json.
+    // (Previously only POST was registered, so GET /api/playbooks?dir=... fell
+    // through to the 404 handler.)
+    if (req.method === 'GET' && url === '/api/playbooks') {
+      try {
+        const qp = new URL(req.url, 'http://localhost').searchParams;
+        const dir = qp.get('dir') || projectDir || process.cwd();
+        const playbookDir = path.join(path.resolve(dir), '.monomind', 'playbooks');
+        const result = [];
+        if (fs.existsSync(playbookDir)) {
+          const files = fs.readdirSync(playbookDir).filter(f => f.endsWith('.json') && !f.startsWith('._'));
+          for (const file of files) {
+            try {
+              const fpath = path.join(playbookDir, file);
+              const def = JSON.parse(fs.readFileSync(fpath, 'utf8'));
+              const stat = fs.statSync(fpath);
+              result.push({ ...def, id: def.id || file.replace('.json', ''), file, modifiedAt: stat.mtimeMs });
+            } catch (_) {}
+          }
+        }
+        res.writeHead(200, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-cache' });
+        res.end(JSON.stringify(result));
+      } catch (e) { res.writeHead(500, { 'Content-Type': 'application/json' }); res.end(JSON.stringify({ error: e.message })); }
+      return;
+    }
+
     // ------------------------------------------------- POST /api/playbooks
     // Save a playbook definition to .monomind/playbooks/<id>.json
     if (req.method === 'POST' && url === '/api/playbooks') {
@@ -5685,6 +5738,28 @@ new Sigma(g,document.getElementById('g'),{renderEdgeLabels:false,labelColor:{col
       return;
     }
 
+    // ------------------------------------------------- GET /api/org-coverage
+    // Audit coverage report written by the audit loop to .monomind/audit/coverage.json
+    if (req.method === 'GET' && url === '/api/org-coverage') {
+      try {
+        const qp = new URL(req.url, 'http://localhost').searchParams;
+        const dir = path.resolve(qp.get('dir') || projectDir || process.cwd());
+        const covPath = path.join(dir, '.monomind', 'audit', 'coverage.json');
+        if (!fs.existsSync(covPath)) {
+          res.writeHead(404, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' });
+          res.end('{}');
+          return;
+        }
+        const coverage = JSON.parse(fs.readFileSync(covPath, 'utf8'));
+        res.writeHead(200, { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-cache' });
+        res.end(JSON.stringify(coverage));
+      } catch (e) {
+        res.writeHead(500, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: e.message }));
+      }
+      return;
+    }
+
     // ------------------------------------------------- GET /api/workflow-runs
     if (req.method === 'GET' && url === '/api/workflow-runs') {
       // Reads from ~/.monomind/browse-runs.json written by the monobrowse dashboard server.

package/packages/@monomind/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monoes/monomindcli",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "type": "module",
   "description": "Monomind CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -92,7 +92,8 @@
     "vitest": "^4.1.4"
   },
   "dependencies": {
-    "@monoes/monobrowse": "^1.0.2",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.207",
+    "@monoes/monobrowse": "^1.0.3",
     "@monoes/monograph": "^1.4.0",
     "@noble/ed25519": "^2.1.0",
     "mammoth": "^1.12.0",

package/packages/@monomind/cli/dist/src/consensus/vote-signer.d.ts

@@ -1,36 +0,0 @@
-/**
- * VoteSigner (Task 36)
- *
- * HMAC-SHA256 signing and verification for consensus votes.
- */
-/**
- * Derive a signing key from a swarmId and session secret using HMAC-SHA256.
- */
-export declare function deriveSigningKey(swarmId: string, sessionSecret: string): Buffer;
-export declare function signVote(agentId: string, vote: unknown, decisionId: string, key: Buffer): string;
-/**
- * CP-WBFT: Compute confidence-weighted vote tally.
- *
- * Each agent's vote is scaled by its confidence score (derived from a probe query)
- * before tallying. Agents that fail the probe receive weight 0.
- * Tolerates up to 85.7% Byzantine fault rate across topologies.
- *
- * Source: https://arxiv.org/abs/2511.10400 (CP-WBFT — AAAI 2026)
- */
-export declare function weightedTally(votes: Array<{
-    agentId: string;
-    vote: boolean;
-    confidence: number;
-}>): {
-    approved: number;
-    rejected: number;
-    weightedApproval: number;
-    weightedRejection: number;
-    quorum: boolean;
-};
-/**
- * Verify a vote signature using constant-time comparison.
- * Returns true when the signature is valid.
- */
-export declare function verifyVote(agentId: string, vote: unknown, decisionId: string, signature: string, key: Buffer): boolean;
-//# sourceMappingURL=vote-signer.d.ts.map

package/packages/@monomind/cli/dist/src/consensus/vote-signer.js

@@ -1,88 +0,0 @@
-/**
- * VoteSigner (Task 36)
- *
- * HMAC-SHA256 signing and verification for consensus votes.
- */
-import { createHmac, timingSafeEqual } from 'crypto';
-/** Max depth for canonicalize() to prevent stack overflow on deeply nested objects. */
-const MAX_CANONICALIZE_DEPTH = 32;
-/** Cap string inputs to prevent OOM when hashing very long strings. */
-const MAX_INPUT_LEN = 1024;
-/** Cap votes array to prevent OOM in weightedTally. */
-const MAX_VOTES = 1000;
-/**
- * Derive a signing key from a swarmId and session secret using HMAC-SHA256.
- */
-export function deriveSigningKey(swarmId, sessionSecret) {
-    return createHmac('sha256', sessionSecret.slice(0, MAX_INPUT_LEN)).update(swarmId.slice(0, MAX_INPUT_LEN)).digest();
-}
-/**
- * Sign a vote, producing a hex-encoded HMAC-SHA256 signature.
- */
-function canonicalize(val, depth = 0) {
-    // Guard against deeply-nested objects that would overflow the call stack.
-    if (depth > MAX_CANONICALIZE_DEPTH)
-        return '"[MaxDepth]"';
-    if (val === null || typeof val !== 'object')
-        return JSON.stringify(val);
-    if (Array.isArray(val))
-        return '[' + val.map(item => canonicalize(item, depth + 1)).join(',') + ']';
-    const sorted = Object.keys(val).sort().map(k => JSON.stringify(k) + ':' + canonicalize(val[k], depth + 1));
-    return '{' + sorted.join(',') + '}';
-}
-export function signVote(agentId, vote, decisionId, key) {
-    // Cap string fields to prevent OOM when hashing attacker-supplied inputs.
-    const safeAgentId = agentId.slice(0, MAX_INPUT_LEN);
-    const safeDecisionId = decisionId.slice(0, MAX_INPUT_LEN);
-    const payload = JSON.stringify({ agentId: safeAgentId, vote: canonicalize(vote), decisionId: safeDecisionId });
-    return createHmac('sha256', key).update(payload).digest('hex');
-}
-/**
- * CP-WBFT: Compute confidence-weighted vote tally.
- *
- * Each agent's vote is scaled by its confidence score (derived from a probe query)
- * before tallying. Agents that fail the probe receive weight 0.
- * Tolerates up to 85.7% Byzantine fault rate across topologies.
- *
- * Source: https://arxiv.org/abs/2511.10400 (CP-WBFT — AAAI 2026)
- */
-export function weightedTally(votes) {
-    // Cap votes array to prevent OOM from an oversized input.
-    const safeVotes = votes.length > MAX_VOTES ? votes.slice(0, MAX_VOTES) : votes;
-    let weightedApproval = 0;
-    let weightedRejection = 0;
-    let totalWeight = 0;
-    for (const { vote, confidence } of safeVotes) {
-        const w = Math.max(0, Math.min(1, confidence)); // clamp to [0,1]
-        totalWeight += w;
-        if (vote) {
-            weightedApproval += w;
-        }
-        else {
-            weightedRejection += w;
-        }
-    }
-    return {
-        approved: safeVotes.filter(v => v.vote).length,
-        rejected: safeVotes.filter(v => !v.vote).length,
-        weightedApproval,
-        weightedRejection,
-        quorum: totalWeight > 0 && weightedApproval / totalWeight > 0.5,
-    };
-}
-/**
- * Verify a vote signature using constant-time comparison.
- * Returns true when the signature is valid.
- */
-export function verifyVote(agentId, vote, decisionId, signature, key) {
-    // Guard: odd-length or non-hex signature string causes Buffer.from to throw.
-    if (!/^[0-9a-fA-F]{64}$/.test(signature))
-        return false;
-    const expected = signVote(agentId, vote, decisionId, key);
-    const sigBuf = Buffer.from(signature, 'hex');
-    const expBuf = Buffer.from(expected, 'hex');
-    if (sigBuf.length !== expBuf.length)
-        return false;
-    return timingSafeEqual(sigBuf, expBuf);
-}
-//# sourceMappingURL=vote-signer.js.map