atomadic-forge 0.3.5__tar.gz → 0.5.2__tar.gz

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/.github/workflows/ci.yml

@@ -24,10 +24,10 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -63,7 +63,7 @@ jobs:
 
       - name: Upload self-certify report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: forge-certify-self-${{ matrix.python-version }}
           path: certify_self.json
@@ -74,10 +74,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: pip
@@ -90,7 +90,7 @@ jobs:
           python -m twine check dist/*
 
       - name: Upload distributions
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: atomadic-forge-dist
           path: dist/*

atomadic_forge-0.5.2/.github/workflows/customer-refactor.yml

@@ -0,0 +1,302 @@
+# Customer Refactor — fully automated $499 forge.atomadic.tech fulfillment.
+#
+# Triggered by Atomadic's REFACTOR_REPO action via the GitHub
+# repository_dispatch API. The cognition worker POSTs:
+#
+#   curl -X POST -H "Authorization: token $GH_TOKEN" \
+#     https://api.github.com/repos/atomadictech/atomadic-forge/dispatches \
+#     -d '{"event_type":"forge-refactor","client_payload":{...}}'
+#
+# Required client_payload fields:
+#   order_id        — opaque string, Stripe-session-derived (forge-refactor-cs_…)
+#   session_id      — Stripe session id, also used for tracing
+#   repo            — full URL to the customer's public GitHub repo
+#   email           — customer email (where the PR-ready notification goes)
+#   amount_cents    — amount paid, just for record-keeping
+#
+# The workflow:
+#   1. Clones the customer's repo into ./target/
+#   2. Installs atomadic-forge from PyPI
+#   3. Runs `forge auto` to produce a re-tiered package under ./forged/
+#   4. Forks the customer's repo to the bot account, pushes the refactor
+#      branch, and opens a PR back to the customer's main branch.
+#   5. POSTs the PR url + state to atomadic-cognition's /refactor-completed
+#      endpoint with the same shared bearer token used by /refactor-purchased.
+#
+# Failure handling: any step that fails is captured by the final
+# notify-cognition step and reported to the customer as `status=failed`.
+# The cognition endpoint emails the customer (apology + refund offer) and
+# pings Dad on Discord so the order can be retried manually.
+
+name: Customer Refactor (forge.atomadic.tech $499 fulfillment)
+
+on:
+  repository_dispatch:
+    types: [forge-refactor]
+  workflow_dispatch:
+    inputs:
+      order_id:
+        description: "Order id (forge-refactor-cs_...)"
+        required: true
+        type: string
+      session_id:
+        description: "Stripe session id"
+        required: false
+        type: string
+      repo:
+        description: "Customer repo URL (full https://github.com/...)"
+        required: true
+        type: string
+      email:
+        description: "Customer email"
+        required: true
+        type: string
+      amount_cents:
+        description: "Amount paid (cents)"
+        required: false
+        type: string
+        default: "49900"
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  refactor:
+    name: forge auto + open PR
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    env:
+      ORDER_ID:     ${{ github.event.client_payload.order_id     || inputs.order_id }}
+      SESSION_ID:   ${{ github.event.client_payload.session_id   || inputs.session_id }}
+      CUSTOMER_REPO: ${{ github.event.client_payload.repo        || inputs.repo }}
+      CUSTOMER_EMAIL: ${{ github.event.client_payload.email      || inputs.email }}
+      AMOUNT_CENTS: ${{ github.event.client_payload.amount_cents || inputs.amount_cents }}
+      BOT_TOKEN:    ${{ secrets.FORGE_BOT_TOKEN }}
+      FORGE_API_KEY: ${{ secrets.FORGE_API_KEY }}
+      PURCHASE_TOKEN: ${{ secrets.PURCHASE_WEBHOOK_TOKEN }}
+      COGNITION_URL: https://atomadic-cognition.atomadictech.workers.dev
+    outputs:
+      pr_url: ${{ steps.open_pr.outputs.pr_url }}
+      status: ${{ steps.open_pr.outputs.status }}
+
+    steps:
+      - name: Validate inputs
+        run: |
+          if [ -z "$CUSTOMER_REPO" ] || [ -z "$CUSTOMER_EMAIL" ] || [ -z "$ORDER_ID" ]; then
+            echo "::error::Missing required client_payload fields (repo, email, order_id)"
+            exit 1
+          fi
+          echo "Order:    $ORDER_ID"
+          echo "Repo:     $CUSTOMER_REPO"
+          echo "Customer: $CUSTOMER_EMAIL"
+
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install atomadic-forge from PyPI
+        run: |
+          python -m pip install --upgrade pip
+          pip install atomadic-forge==0.3.5
+          forge --version
+
+      - name: Clone customer repo
+        id: clone
+        run: |
+          mkdir -p target
+          git clone --depth 50 "$CUSTOMER_REPO" target/repo
+          cd target/repo
+          DEFAULT_BRANCH=$(git symbolic-ref --short HEAD)
+          REPO_OWNER=$(echo "$CUSTOMER_REPO" | sed -E 's|https://github.com/([^/]+)/.*|\1|')
+          REPO_NAME=$(echo "$CUSTOMER_REPO" | sed -E 's|https://github.com/[^/]+/([^/.]+).*|\1|')
+          echo "default_branch=$DEFAULT_BRANCH" >> "$GITHUB_OUTPUT"
+          echo "repo_owner=$REPO_OWNER"         >> "$GITHUB_OUTPUT"
+          echo "repo_name=$REPO_NAME"           >> "$GITHUB_OUTPUT"
+
+      - name: Run forge auto on the customer repo
+        id: forge_auto
+        continue-on-error: true
+        run: |
+          set -e
+          cd target/repo
+          # Sanitize the order id for use as a directory name. Some
+          # session ids contain `_` which is fine, but the package name
+          # cannot contain `-`; we keep them separate (output dir vs
+          # --package).
+          PKG=$(echo "$ORDER_ID" | tr '-' '_' | tr '/' '_')
+          echo "pkg=$PKG" >> "$GITHUB_OUTPUT"
+          OUT_DIR="forged/$PKG"
+          # Capture certify-before for the PR body. These are best-effort
+          # — some repos don't have an obvious src/ root for wire.
+          forge certify . --json > /tmp/certify-before.json 2>/dev/null || echo '{}' > /tmp/certify-before.json
+          forge wire . --json    > /tmp/wire-before.json    2>/dev/null || echo '{}' > /tmp/wire-before.json
+          # Run the flagship: scout → cherry-pick → assimilate → wire →
+          # certify → emergent. Real failures fail the step (no `|| true`).
+          forge auto . "$OUT_DIR" --apply --package absorbed
+          ls -la "$OUT_DIR" "$OUT_DIR/src" 2>&1 || true
+          forge certify "$OUT_DIR" --json > /tmp/certify-after.json 2>/dev/null || echo '{}' > /tmp/certify-after.json
+          forge wire    "$OUT_DIR/src" --json > /tmp/wire-after.json    2>/dev/null || echo '{}' > /tmp/wire-after.json
+          echo "forge_auto succeeded; output at target/repo/$OUT_DIR"
+
+      - name: Fork customer repo to bot account
+        id: fork
+        if: steps.forge_auto.outcome == 'success'
+        run: |
+          # POST /repos/{owner}/{repo}/forks creates a fork under the
+          # authenticated user (the bot). Idempotent — if already forked,
+          # returns the existing fork.
+          curl -sS -X POST \
+            -H "Authorization: token $BOT_TOKEN" \
+            -H "Accept: application/vnd.github+json" \
+            "https://api.github.com/repos/${{ steps.clone.outputs.repo_owner }}/${{ steps.clone.outputs.repo_name }}/forks" \
+            > /tmp/fork.json
+          BOT_OWNER=$(jq -r '.owner.login' /tmp/fork.json)
+          BOT_FORK_URL=$(jq -r '.clone_url' /tmp/fork.json)
+          if [ -z "$BOT_OWNER" ] || [ "$BOT_OWNER" = "null" ]; then
+            echo "::error::Fork API did not return an owner; check FORGE_BOT_TOKEN"
+            cat /tmp/fork.json
+            exit 1
+          fi
+          echo "bot_owner=$BOT_OWNER"         >> "$GITHUB_OUTPUT"
+          echo "bot_fork_url=$BOT_FORK_URL"   >> "$GITHUB_OUTPUT"
+          # Wait for fork to be available (forks are async)
+          for i in $(seq 1 12); do
+            curl -sS -H "Authorization: token $BOT_TOKEN" \
+              "https://api.github.com/repos/$BOT_OWNER/${{ steps.clone.outputs.repo_name }}" \
+              | jq -e '.id' >/dev/null 2>&1 && break
+            sleep 5
+          done
+
+      - name: Push refactored branch to bot fork
+        id: push
+        if: steps.fork.outcome == 'success'
+        run: |
+          set -e
+          BRANCH="forge/refactor-$ORDER_ID"
+          PKG="${{ steps.forge_auto.outputs.pkg }}"
+          OUT_DIR="forged/$PKG"
+          cd target/repo
+          # Replace src/ with the forge auto output. forge auto writes
+          # forged/<pkg>/src/<package>/aN_*/... — we lift the inner
+          # src/ wholesale into the customer's repo root.
+          rm -rf src
+          if [ -d "$OUT_DIR/src" ]; then
+            mv "$OUT_DIR/src" src
+          else
+            echo "::warning::forge auto did not produce $OUT_DIR/src; copying whole $OUT_DIR"
+            cp -R "$OUT_DIR" src
+          fi
+          # Drop the now-empty forged/ scratch dir from the PR.
+          rm -rf forged
+          git config user.name  "Atomadic Forge"
+          git config user.email "atomadic-forge@atomadictech.com"
+          git checkout -b "$BRANCH"
+          git add -A
+          git commit -m "Forge refactor — 5-tier monadic layout (order $ORDER_ID)" || echo "nothing to commit"
+          git remote add bot "https://x-access-token:$BOT_TOKEN@github.com/${{ steps.fork.outputs.bot_owner }}/${{ steps.clone.outputs.repo_name }}.git"
+          git push -u bot "$BRANCH" --force
+          echo "branch=$BRANCH" >> "$GITHUB_OUTPUT"
+
+      - name: Compose PR body
+        id: pr_body
+        if: steps.push.outcome == 'success'
+        run: |
+          CB=$(jq -r '.score // "?"' /tmp/certify-before.json 2>/dev/null || echo "?")
+          CA=$(jq -r '.score // "?"' /tmp/certify-after.json 2>/dev/null || echo "?")
+          WB=$(jq -r '.violation_count // "?"' /tmp/wire-before.json 2>/dev/null || echo "?")
+          WA=$(jq -r '.violation_count // "?"' /tmp/wire-after.json 2>/dev/null || echo "?")
+          {
+            echo "## Forge refactor — order \`$ORDER_ID\`"
+            echo ""
+            echo "This PR applies a full Forge pass against your repo:"
+            echo "**recon → cherry → wire → certify → emergent**."
+            echo ""
+            echo "### Scorecard"
+            echo "| Metric | Before | After |"
+            echo "|---|---|---|"
+            echo "| Certify | $CB | $CA |"
+            echo "| Wire violations | $WB | $WA |"
+            echo ""
+            echo "### What changed"
+            echo "- Every public symbol classified into the 5-tier monadic"
+            echo "  layout (a0 constants → a1 functions → a2 composites →"
+            echo "  a3 features → a4 orchestration)."
+            echo "- Upward imports rewritten down-tier or split."
+            echo "- All file moves preserve git history via \`forge auto\`."
+            echo ""
+            echo "### How to review"
+            echo "1. Skim the file-tree diff — every file is now in exactly"
+            echo "   one tier directory."
+            echo "2. Run \`forge wire src\` locally — should be PASS."
+            echo "3. Run \`forge certify .\` — should match the After number"
+            echo "   above."
+            echo "4. Run your own test suite — Forge does not touch behavior."
+            echo ""
+            echo "One round of revisions is included with your $499 order."
+            echo "Reply to the email you received from Atomadic with anything"
+            echo "you want changed."
+            echo ""
+            echo "— Atomadic Forge · powered by [forge.atomadic.tech](https://forge.atomadic.tech)"
+          } > /tmp/pr_body.md
+          # GitHub Output multiline
+          {
+            echo 'body<<EOF'
+            cat /tmp/pr_body.md
+            echo 'EOF'
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Open PR from bot fork → customer repo
+        id: open_pr
+        if: steps.push.outcome == 'success'
+        run: |
+          PAYLOAD=$(jq -nR \
+            --arg title "Forge refactor — 5-tier monadic layout" \
+            --arg body  "${{ steps.pr_body.outputs.body }}" \
+            --arg head  "${{ steps.fork.outputs.bot_owner }}:${{ steps.push.outputs.branch }}" \
+            --arg base  "${{ steps.clone.outputs.default_branch }}" \
+            '{title:$title, body:$body, head:$head, base:$base, maintainer_can_modify:true, draft:false}')
+          curl -sS -X POST \
+            -H "Authorization: token $BOT_TOKEN" \
+            -H "Accept: application/vnd.github+json" \
+            "https://api.github.com/repos/${{ steps.clone.outputs.repo_owner }}/${{ steps.clone.outputs.repo_name }}/pulls" \
+            -d "$PAYLOAD" \
+            > /tmp/pr.json
+          PR_URL=$(jq -r '.html_url // empty' /tmp/pr.json)
+          PR_NUM=$(jq -r '.number  // empty' /tmp/pr.json)
+          if [ -z "$PR_URL" ]; then
+            echo "::error::Failed to open PR"
+            jq . /tmp/pr.json || cat /tmp/pr.json
+            echo "status=failed"  >> "$GITHUB_OUTPUT"
+            echo "pr_url="         >> "$GITHUB_OUTPUT"
+            exit 1
+          fi
+          echo "PR opened: $PR_URL"
+          echo "pr_url=$PR_URL"   >> "$GITHUB_OUTPUT"
+          echo "pr_number=$PR_NUM" >> "$GITHUB_OUTPUT"
+          echo "status=opened"     >> "$GITHUB_OUTPUT"
+
+      - name: Notify atomadic-cognition (success or failure)
+        if: always()
+        run: |
+          STATUS="${{ steps.open_pr.outputs.status }}"
+          PR_URL="${{ steps.open_pr.outputs.pr_url }}"
+          if [ "${{ steps.forge_auto.outcome }}" != "success" ]; then
+            STATUS="forge_auto_failed"
+          elif [ "${{ steps.push.outcome }}" != "success" ]; then
+            STATUS="push_failed"
+          fi
+          STATUS="${STATUS:-failed}"
+          PAYLOAD=$(jq -n \
+            --arg order_id "$ORDER_ID" \
+            --arg session_id "$SESSION_ID" \
+            --arg pr_url "${PR_URL:-}" \
+            --arg status "$STATUS" \
+            --arg run_url "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
+            '{order_id:$order_id, session_id:$session_id, pr_url:$pr_url, status:$status, run_url:$run_url}')
+          curl -sS -X POST \
+            -H "Authorization: Bearer $PURCHASE_TOKEN" \
+            -H "Content-Type: application/json" \
+            "$COGNITION_URL/refactor-completed" \
+            -d "$PAYLOAD" || true

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/.github/workflows/forge-self-certify.yml

@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run Atomadic Forge
         id: forge

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/.github/workflows/release.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
           cache: pip
@@ -31,7 +31,7 @@ jobs:
           python -m twine check dist/*
 
       - name: Upload distributions
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-dist
           path: dist/*
@@ -46,7 +46,7 @@ jobs:
     if: github.event_name == 'release' && !github.event.release.prerelease
     steps:
       - name: Download distributions
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: release-dist
           path: dist

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/CHANGELOG.md

@@ -1,5 +1,79 @@
 # Changelog
 
+## 0.5.2 - Agent ergonomics and language-aware guidance
+
+Implements the first round of quality-of-life improvements from the
+Forge agent review. This release makes Forge friendlier when an agent
+uses it on JavaScript repos, documentation/research patches, or live
+MCP connections.
+
+### Added
+
+- `forge mcp doctor` smoke-tests MCP stdio with framed `initialize`,
+  `tools/list`, and `shutdown` requests. It reports version, project
+  root, tool count, framed-stdio status, server exit code, and a
+  recovery hint.
+- `tools/list` entries now include a `cli_command` fallback so agents
+  can switch from MCP to shell without guessing command names.
+- Shared validation heuristics now detect `package.json` scripts,
+  JS/TS tests, tier roots, and release-gate commands.
+
+### Improved
+
+- `context-pack` prefers `npm run verify` / `npm test` for JavaScript
+  projects and derives `forge wire` gates from real tier roots.
+- `preflight` recognizes non-code artifacts such as `docs/`,
+  `research/`, `.github/`, and `cognition/guides/` as valid project
+  memory instead of misplaced source.
+- `select-tests` discovers JS/TS test files and avoids mirror pytest
+  requirements for documentation-only changes.
+- `score-patch` no longer treats docs/research-only diffs as code
+  changes without tests, and emits language-aware validation commands
+  when a project root is provided.
+- `compose-tools verify_patch` now maps to
+  `score_patch -> select_tests -> wire -> certify`.
+- Hidden worktrees, experiment directories, build output, and
+  `node_modules` are skipped when deriving release-gate wire roots.
+
+### Tests
+
+- Added regression tests for JavaScript validation selection,
+  non-code artifact preflight, docs-only patch scoring, exact
+  `verify_patch` recipe matching, MCP CLI fallback metadata, and
+  `forge mcp doctor`.
+
+---
+
+## 0.5.1 — MCP stdio framing compatibility
+
+Fixes `forge mcp serve` for MCP hosts that use LSP-style
+`Content-Length` framing over stdio instead of newline-delimited JSON.
+Modern Codex / VS Code MCP bridges can spawn the server, list tools,
+and then send framed `tools/call` requests; before this patch Forge
+could misread the frame header as JSON and leave the host waiting until
+its tool-call timeout.
+
+### Fixed
+
+- `forge mcp serve` now accepts both newline-delimited JSON-RPC and
+  `Content-Length` framed JSON-RPC on stdin.
+- MCP responses are written in the same framing style as the request
+  that triggered them, preserving compatibility with shell smoke tests
+  and stricter MCP clients.
+- The dispatcher now treats both `notifications/initialized` and
+  `initialized` as no-response initialization notifications.
+- The VS Code extension manifest version now tracks the `0.5.1`
+  package release.
+
+### Tests
+
+- Added a framed stdio regression test for initialize → initialized →
+  ping → shutdown.
+- Verified framed `tools/call list_recipes` against the real
+  `forge mcp serve` command.
+
+---
+
 ## 0.3.5 — Copilot's Copilot CLI parity + GUI version sync
 
 The MCP exposes 21 tools. Until 0.3.5, only 12 of them had CLI

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atomadic-forge
-Version: 0.3.5
+Version: 0.5.2
 Summary: Atomadic Forge — absorb, enforce, emerge. Polyglot (Python + JavaScript/TypeScript) architecture guardian for AI-generated code.
 Author: Atomadic
 License-Expression: BUSL-1.1
@@ -16,7 +16,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: click<9,>=8.1
 Requires-Dist: typer<1,>=0.15
-Requires-Dist: rich<15,>=14
+Requires-Dist: rich<16,>=14
 Requires-Dist: pyyaml<7,>=6
 Provides-Extra: dev
 Requires-Dist: pytest>=7; extra == "dev"
@@ -41,6 +41,7 @@ Dynamic: license-file
 [![License: BSL-1.1](https://img.shields.io/badge/License-BSL--1.1-yellow.svg)](LICENSE)
 [![CI](https://github.com/atomadictech/atomadic-forge/actions/workflows/ci.yml/badge.svg)](https://github.com/atomadictech/atomadic-forge/actions/workflows/ci.yml)
 [![Forge certify](https://img.shields.io/badge/forge_certify-100%2F100-brightgreen)](docs/SHOWCASE.md)
+[![Product Hunt](https://api.producthunt.com/widgets/embed-image/v1/featured.svg?post_id=1136405&theme=light&t=1777661664916)](https://www.producthunt.com/products/atomadic-forge-mcp-architecture-copilot)
 
 > **Absorb. Enforce. Emerge.** The architecture substrate for AI-generated code — now polyglot (Python, JavaScript, TypeScript).
 
@@ -215,14 +216,21 @@ Forge ships a **Model Context Protocol server** — add it to Cursor, Claude Cod
 }
 ```
 
-**21 tools exposed:** `recon` · `wire` · `certify` · `enforce` · `audit_list` · `auto_plan` · `auto_step` · `auto_apply` · `context_pack` · `preflight_change` · `score_patch` · `select_tests` · `rollback_plan` · `explain_repo` · `adapt_plan` · `compose_tools` · `load_policy` · `why_did_this_change` · `what_failed_last_time` · `list_recipes` · `get_recipe`
+**23 tools exposed:** `recon` · `wire` · `certify` · `enforce` · `audit_list` · `auto_plan` · `auto_step` · `auto_apply` · `context_pack` · `preflight_change` · `score_patch` · `select_tests` · `rollback_plan` · `explain_repo` · `adapt_plan` · `compose_tools` · `load_policy` · `why_did_this_change` · `what_failed_last_time` · `list_recipes` · `get_recipe` · `trust_gate_response` · `exported_api_check`
 
 **5 resources:** Receipt schema · formalization docs · lineage chain · blocker summary · verdicts
 
 ```bash
 forge mcp serve --help   # full tool + resource listing with examples
+forge mcp doctor --project . --json
 ```
 
+As of `0.5.2`, `tools/list` includes a `cli_command` fallback for
+each MCP tool. `context-pack`, `preflight`, `select-tests`, and
+`score-patch` also use language-aware validation commands so
+JavaScript projects get `npm run verify` / `npm test` guidance and
+documentation/research paths are treated as non-code project memory.
+
 ### Subscription required for `forge mcp serve`
 
 Every `tools/call` against the MCP server is gated behind a paid Forge
@@ -369,7 +377,7 @@ Forge waits before returning a clear provider error.
 
 | Command | Purpose |
 |---------|---------|
-| `forge mcp serve` | Stdio JSON-RPC MCP server — 21 tools for Cursor / Claude Code / Aider / Devin. |
+| `forge mcp serve` | Stdio JSON-RPC MCP server — 23 tools for Cursor / Claude Code / Aider / Devin. |
 | `forge plan / plan-list / plan-show / plan-step / plan-apply` | Agent plan persistence and step-by-step apply. |
 | `forge iterate` | LLM loop: intent → code → absorb → wire → score → iterate. Single shot. |
 | `forge evolve` | Recursive improvement: N rounds, catalog grows each round. |
@@ -491,7 +499,7 @@ forge commandsmith smoke             # Smoke-test all 36+ registered verbs
 - ✓ **100/100 certify** — forge scores itself on every CI run
 - ✓ **0 wire violations** — forge passes its own import-law scan
 - ✓ **On PyPI** — `pip install atomadic-forge`
-- ✓ **MCP server** — 21 tools, 5 resources; works with Cursor, Claude Code, Aider, Devin
+- ✓ **MCP server** — 23 tools, 5 resources; works with Cursor, Claude Code, Aider, Devin
 - ✓ **Desktop GUI** — Forge Studio (Tauri 2 + React)
 - ✓ **Ed25519 signing** — `forge certify --local-sign`
 - ✓ **CycloneDX SBOM** — `forge sbom`

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/README.md

@@ -9,6 +9,7 @@
 [![License: BSL-1.1](https://img.shields.io/badge/License-BSL--1.1-yellow.svg)](LICENSE)
 [![CI](https://github.com/atomadictech/atomadic-forge/actions/workflows/ci.yml/badge.svg)](https://github.com/atomadictech/atomadic-forge/actions/workflows/ci.yml)
 [![Forge certify](https://img.shields.io/badge/forge_certify-100%2F100-brightgreen)](docs/SHOWCASE.md)
+[![Product Hunt](https://api.producthunt.com/widgets/embed-image/v1/featured.svg?post_id=1136405&theme=light&t=1777661664916)](https://www.producthunt.com/products/atomadic-forge-mcp-architecture-copilot)
 
 > **Absorb. Enforce. Emerge.** The architecture substrate for AI-generated code — now polyglot (Python, JavaScript, TypeScript).
 
@@ -183,14 +184,21 @@ Forge ships a **Model Context Protocol server** — add it to Cursor, Claude Cod
 }
 ```
 
-**21 tools exposed:** `recon` · `wire` · `certify` · `enforce` · `audit_list` · `auto_plan` · `auto_step` · `auto_apply` · `context_pack` · `preflight_change` · `score_patch` · `select_tests` · `rollback_plan` · `explain_repo` · `adapt_plan` · `compose_tools` · `load_policy` · `why_did_this_change` · `what_failed_last_time` · `list_recipes` · `get_recipe`
+**23 tools exposed:** `recon` · `wire` · `certify` · `enforce` · `audit_list` · `auto_plan` · `auto_step` · `auto_apply` · `context_pack` · `preflight_change` · `score_patch` · `select_tests` · `rollback_plan` · `explain_repo` · `adapt_plan` · `compose_tools` · `load_policy` · `why_did_this_change` · `what_failed_last_time` · `list_recipes` · `get_recipe` · `trust_gate_response` · `exported_api_check`
 
 **5 resources:** Receipt schema · formalization docs · lineage chain · blocker summary · verdicts
 
 ```bash
 forge mcp serve --help   # full tool + resource listing with examples
+forge mcp doctor --project . --json
 ```
 
+As of `0.5.2`, `tools/list` includes a `cli_command` fallback for
+each MCP tool. `context-pack`, `preflight`, `select-tests`, and
+`score-patch` also use language-aware validation commands so
+JavaScript projects get `npm run verify` / `npm test` guidance and
+documentation/research paths are treated as non-code project memory.
+
 ### Subscription required for `forge mcp serve`
 
 Every `tools/call` against the MCP server is gated behind a paid Forge
@@ -337,7 +345,7 @@ Forge waits before returning a clear provider error.
 
 | Command | Purpose |
 |---------|---------|
-| `forge mcp serve` | Stdio JSON-RPC MCP server — 21 tools for Cursor / Claude Code / Aider / Devin. |
+| `forge mcp serve` | Stdio JSON-RPC MCP server — 23 tools for Cursor / Claude Code / Aider / Devin. |
 | `forge plan / plan-list / plan-show / plan-step / plan-apply` | Agent plan persistence and step-by-step apply. |
 | `forge iterate` | LLM loop: intent → code → absorb → wire → score → iterate. Single shot. |
 | `forge evolve` | Recursive improvement: N rounds, catalog grows each round. |
@@ -459,7 +467,7 @@ forge commandsmith smoke             # Smoke-test all 36+ registered verbs
 - ✓ **100/100 certify** — forge scores itself on every CI run
 - ✓ **0 wire violations** — forge passes its own import-law scan
 - ✓ **On PyPI** — `pip install atomadic-forge`
-- ✓ **MCP server** — 21 tools, 5 resources; works with Cursor, Claude Code, Aider, Devin
+- ✓ **MCP server** — 23 tools, 5 resources; works with Cursor, Claude Code, Aider, Devin
 - ✓ **Desktop GUI** — Forge Studio (Tauri 2 + React)
 - ✓ **Ed25519 signing** — `forge certify --local-sign`
 - ✓ **CycloneDX SBOM** — `forge sbom`

{atomadic_forge-0.3.5 → atomadic_forge-0.5.2}/docs/05-faq.md

@@ -429,27 +429,31 @@ config:
 }
 ```
 
-Once registered, the agent gets **21 tools** + **5 resources** (the
-full Codex-1..5 surface as of `v0.3.0`). The 21 tools group into
+Once registered, the agent gets **23 tools** + **5 resources** (the
+full Codex-1..5 surface plus response/API trust gates). The 23 tools group into
 *inventory* (`recon` / `wire` / `certify` / `enforce` / `audit_list` /
 `agent_summary`), *action loop* (`auto_plan` / `auto_step` /
 `auto_apply`), and *Copilot's Copilot* (`context_pack` /
 `preflight_change` / `score_patch` / `select_tests` / `rollback_plan` /
 `explain_repo` / `adapt_plan` / `compose_tools` / `load_policy` /
 `why_did_this_change` / `what_failed_last_time` / `list_recipes` /
-`get_recipe`). See the full **[Agents Guide](AGENTS_GUIDE.md)** for
+`get_recipe` / `trust_gate_response` / `exported_api_check`). See the full **[Agents Guide](AGENTS_GUIDE.md)** for
 integration patterns, the agent-friendly `agent_summary` /
 `context_pack` tools, the Forge Receipt schema agents should
 consume, F-code routing for mechanical fixes, the proposal-engine
 flow, and best practices.
 
+For MCP troubleshooting, run `forge mcp doctor --project . --json`.
+As of `0.5.2`, `tools/list` also includes a `cli_command` fallback for
+each MCP tool, and validation hints are language-aware.
+
 ### What's the difference between AGENTS.md and the Agents Guide?
 
 - **`AGENTS.md`** at the repo root is for agents *building* Forge —
   the dev contract: tier discipline, F-code namespace, schema
   versioning, branch hygiene, the verification lane.
 - **`docs/AGENTS_GUIDE.md`** is for agents *using* Forge — Cursor /
-  Claude Code / Aider / etc. integrating via MCP, calling the 21
+  Claude Code / Aider / etc. integrating via MCP, calling the 23
   tools, consuming Receipts, running `preflight_change` /
   `score_patch` guardrails, applying mechanical fixes via `enforce`.