mop-flow v1.4.4

1.4.4 - TUI Navigation Fix

• Fixed duplicate keypress listeners after returning from TUI actions such as Status.
• Menu navigation now moves one item at a time instead of jumping after repeated actions.
• Disabled menu items remain visible and selectable, while Enter stays blocked for those actions.
• Keeps the 1.4.x compact menu: Install, Update, Doctor, Status, Link, Delete, Skills, Exit.

Verification:

• npm run validate
• npm test
• npm run doctor
• npm pack --dry-run

mop-flow v1.4.3

1.4.3 - TUI Link Flow

• Fixed npx mop-flow menu to the requested set: Install, Update, Doctor, Status, Link, Delete, Skills, Exit.
• Install stays visible but disabled when MOP is already installed.
• Update stays visible but disabled when the installed version is already current.
• Link is all-in-one in the TUI: paste the Brain URL, link the project, then install/start background relay.
• Removed standalone Relay, Service, and GUI menu entries from the TUI.
• Fixed TUI keyboard handling so returning from actions like Status does not duplicate key listeners or make the menu jump.
• Disabled menu items remain visible/selectable, but Enter will not run them.

Verification:

• npm run validate
• npm test
• npm run doctor
• npm pack --dry-run

mop-flow v1.4.2

1.4.2 - Background Brain Relay

• Added mop-flow service for per-machine background relay management.
• mop-flow link now registers linked projects into a local service registry.
• Added Windows Startup autostart and Linux systemd user autostart.
• Added compact TUI Control Center actions for Link, Relay, and Service.
• Removed the Pixel Office GUI item from the TUI menu.
• Added --menu-json for non-interactive menu verification.
• Kept link tokens private in each project's gitignored .MOP/link.json; the service registry stores only paths and public relay metadata.
• Added smoke coverage for the service registry and token-safety behavior.

Verification:

• npm run validate
• npm test
• npm run doctor
• npm pack --dry-run

v1.2.0

What's New in v1.2.0

🔐 Auth — Per-Session Login Gate

• Real session model in STATE.json (session + sessionPolicy), schema bumped 1.1.0 → 1.2.0
• enforceSession: idle timeout (default 60m) clears activeMember/activeAgents/session and refuses stale or wrong-actor sessions across all mop-core commands
• login starts a fresh session; setup seeds one; new logout + whoami/session verify
• autosycn refuses commit/push unless the actor holds a valid, matching session
• Gate docs updated (PROTOCOL / CLAUDE / AGENTS / GEMINI): every new chat = unauthenticated; activeMember is only a hint, never proof; re-login on idle; verify before push

🔄 Update — STATE Migration on --force

• install --force now migrates STATE.json instead of overwriting it
• Preserves user data: members, ledger, agentRoster, identities, deployment, workflow progress
• Refreshes system config: agentCatalog, workflow phases, policies, sessionPolicy, schema
• Backup written to .MOP/STATE.json.bak before migration
• Copy filter also protects team.json, config/members, and memory from --force

✅ Verified

• validate --strict ✓
• Smoke tests 6/6 ✓
• doctor ready ✓
• Migration test: schema 1.1.0 → 1.2.0, agentCatalog 3 → 37, user data intact ✓

Upgrade

npx burhan-mop install --force

v1.1.0

MOP Flow v1.1.0 — Upgrade v2

Apa Yang Baharu

⚙️ Fasa 0 — Fix Kritikal

• cmd /c dihapuskan — semua hook dalam .claude/settings.json, .codex/config.toml, .gemini/settings.json kini guna
  ode secara langsung
• �in/mop-run.mjs — cross-platform hook runner baharu (no more cmd/c on Windows)
• Ghost ratio fix — package.json files[] kini spesifik (bukan .claude semua), npm publish lebih bersih
• CI Node.js 24 — quality.yml kini test Node 20/22/24 + FORCE_JAVASCRIPT_ACTIONS_TO_NODE24

🧠 Fasa 1 — BM25 Semantic Memory

• BM25 zero-dependency ranking engine dalam mop-core.mjs
• 3-tier memory: working.jsonl → episodic (monthly) → facts.json (auto-promoted)
• memory brief --query kini returns ranked results dengan BM25 scoring

🔄 Fasa 2 — Workflow Engine

• 3 Workflow Profiles: quick, product, engineering dalam STATE.json
• �ctiveProfile field dalam workflow — default: product
• checkArtifactStaleness() — detect artifacts > 7 hari lama
• checkWorkflowDrift() — detect implementation tanpa readiness gate
• Gate readiness kini block jika artifact stale dalam phase implementation

🔐 Fasa 3 — Federation PII Scrubber + Hash Chain

• piiScrub() — redact 5 jenis PII: email, phone-MY, API key, IC-MY, credit card
• Hash chain verification untuk shared-ledger integrity

🛠️ Fasa 4 — Kemaskini Smoke Test

• Suite 5 (profile) — test 3 workflow profiles + �ctiveProfile field
• Suite 6 (pii) — test 5 jenis PII redaction
• Semua 6 suite lulus: core memory workflow ederation profile pii

🏢 Fasa 5 — MOP Pixel Office Dashboard (BARU)

• .MOP/dashboard/pixel-office.html — standalone dashboard dengan pixel art emoji characters
• Auto-refresh setiap 5 saat dari /api/state
• Tunjuk semua agents, workflow phases, federation status, memory count
• Jalankan:
  pm run dashboard → buka http://127.0.0.1:3131

---

Cara Upgrade

\\�ash
npx mop-flow
\\

Quality Gate

\
npm run quality → LULUS
[suite:core] OK
[suite:memory] OK
[suite:workflow] OK
[suite:federation] OK
[suite:profile] OK
[suite:pii] OK
\\

Breaking Changes

• Tiada breaking changes — semua backward-compatible

v1.0.0

Release v1.0.0: MOP Flow Ecosystem Upgrade

v0.2.0

Full Changelog: v0.1.9...v0.2.0

BURHAN-MOP v0.1.9

Full Changelog: v0.1.8...v0.1.9

BURHAN-MOP v0.1.8

Fixes Party Mode missing-agent prompts and browser/scraping preflight.

• Party Mode now auto-activates for explicit party/multi-agent requests and browser-risk workflows.
• When Party Mode needs unnamed agents, MOP asks for all missing agent names before proceeding.
• Browser/scraping routes now run browser preflight, detect default browser, and use chrome-direct guidance for Brave/Edge/Opera instead of rushing into default Chrome.
• Scraping website tasks stay routed to Browser Automation Agent instead of being overridden as broad website architecture work.

Validation:

• node --check .MOP/scripts/mop-core.mjs
• npm run validate
• npm run doctor
• npm run pack:dry
• smoke tested Party Mode missing-agent prompts and Brave chrome-direct preflight

BURHAN-MOP v0.1.7

Changes

• Enforced active GitHub user identity for autosycn member commits.
• Derived member commit email from gh api user as ID+USERNAME@users.noreply.github.com by default.
• Refused commit/push when active gh account does not match member githubUsername.
• Kept BURHAN-MOP identity reserved for merge guardian commits only.
• Updated setup/member git identity commands to support --git-email github-noreply / --email github-noreply.
• Updated provider docs and protocol to document user-account commit attribution.

Validation

• node --check .MOP/scripts/mop-core.mjs
• node --check .MOP/scripts/mop-autosycn.mjs
• npm run validate
• npm run doctor
• npm run pack:dry
• Smoke tested setup identity derivation from gh api user.
• Smoke tested autosycn git commit author/committer as 168633207+MoonWIRaja@users.noreply.github.com.

Commit

• 6badc5d