v0.15.0 — First public npm release

v0.15.0 — First public npm release

Breaking change · 13 packages → 5 · npm-installable

Install

npm install @sffmc/safety @sffmc/memory @sffmc/runtime @sffmc/cognition

{
  "plugins": {
    "@sffmc/safety":    "npm:@sffmc/safety@^0.15.0",
    "@sffmc/memory":    "npm:@sffmc/memory@^0.15.0",
    "@sffmc/runtime":   "npm:@sffmc/runtime@^0.15.0",
    "@sffmc/cognition": "npm:@sffmc/cognition@^0.15.0"
  }
}

@sffmc/utilities is a workspace library — install it only if you import it in user-authored plugins.

What changed

Workspace consolidation (14 → 5 packages):

@sffmc/safety	composite — 5 governance features (rules, watchdog, auto-max, eos-stripper, log-whitelist)
@sffmc/memory	composite — FTS5 recall + checkpoint / judge / dream opt-ins
@sffmc/runtime	standalone — sandboxed JS workflow orchestrator (quickjs-emscripten)
@sffmc/cognition	standalone — max-mode parallel reasoning + 18 compose skills + health diagnostics
@sffmc/utilities	library — shared SDK (consumed via workspace:*, not a plugin entry)

Migration. v0.14.x users: rename in your plugin config and update import paths. Full 14-row migration table in CHANGELOG.md.

Stats

• 88 commits since v0.14.9
• 296 files changed (+11,510 / −9,259)
• 1046 tests (1045 pass / 1 skip / 0 fail) across 69 files
• bun audit: 0 known vulnerabilities in the dep graph

Verified

• 8/8 precommit gates green on CI + locally
• Security audit completed (no blocking findings)
• All 5 packages npm install cleanly from the public registry

Heads-up

• This release renames 9 standalone packages into sub-folders of composites. Old file:// paths from v0.14.x will not work directly — re-run sffmc init.
• The pre-existing v0-14-3-schema-journal.test.ts migration test is environment-sensitive in parallel runs after the consolidation; tracked separately and not blocking install.

See CHANGELOG.md for the full release notes.