Skip to content

v0.3.0b9

Pre-release
Pre-release

Choose a tag to compare

View all tags
@star-ga star-ga released this 15 Aug 16:35
· 18 commits to main since this release
v0.3.0b9
2dfa995

mind-nerve v0.3.0b9

The final Python-series beta: vetted external skill acquisition, the per-prompt routing hook, the installer verify verb, and the complete pure-MIND port of the front-end tree.

Highlights

  • mind-nerve acquire — find skills/agents/MCP servers in curated external sources (Anthropic's skills repo, the official MCP servers repo, the MCP registry API, GitHub search), vet them with a deterministic fail-closed static scanner, and install the clean ones into the hub with per-file SHA-256 manifests and a live daemon reindex. Fetches land in a capped quarantine first; a FAIL verdict never reaches the hub. Threat model: docs/acquisition.md.
  • Per-prompt routing hook + installer subsystem — a 1,300+ skill hub becomes reachable for ~2k tokens of announce instead of ~95k, across the 20-CLI installer matrix. Ranked route table with absolute SKILL.md paths injected per prompt; atomic symlink-flip projection.
  • Installer verify + --mcp-launcher venv|uvx — per-client verification of every wired surface (config, hooks, env pins, fail-open probe, MCP entry/command, daemon socket), legacy mcp-facade dead entries FAIL, runtime-dir pin when a populated local route table exists.
  • Pure-MIND migration: core surface COMPLETE — the entire .mind tree now compiles AND executes under mindc 0.10.2: 17/17 kernel-tree modules in project mode plus all 13 previously-dormant front-end files (sha256, q16_16, lib, top_k, tokenizer, chain_log, runtime_ffi, clock, evidence, encoder_kernels, model, loader, inference) — 267 executing tests wired as exact-count gate legs, plus a native-ELF end-to-end harness byte-verified against CPython hashlib. The fail-closed tests/mindc_gate.sh gates all of it (manifest completeness, compile, 0-tests-run traps, exact counts). See audits/2026-08-10-ci-mirror-audit.md and ROADMAP.md.
  • Hook hardening — malformed catalog rows can no longer kill a prompt's entire routing (ENAMETOOLONG crash fixed, regression-tested); SessionStart banner throttled to once per 12 h; acquired agents route via daemon-provided kind/source_path.

Security — three independent pre-release audits, all findings fixed

grok, claude (fable), and codex each audited the full changeset; all returned BLOCK. 24 distinct findings fixed with red-first regression tests, including:

  • directory-symlink exfiltration into the hub (reproduced by all three auditors) — now fail-closed at vet, links preserved at install
  • skipped-dir (dist/, node_modules/, …) payloads installing unscanned via tarball/git-clone fetch paths
  • NUL-byte scan bypasses (prefix and mid-buffer) and Windows drive-qualified tar members
  • --register-mcp executing unvetted registry artifacts (now local, path-checked entry points only)
  • shell-pipe dropper variants (| python, eval $(curl …), bash <(…), …), 3+-line prompt-injection splits, extension-vs-magic-bytes archive dispatch, archive/clone DoS caps, credential redaction in manifests and errors, mode-preserving atomic config writes

Verification

  • 611 pytest (python + integration) + 41 bit-identity + corpus determinism check — green
  • 366 vitest + tsc --noEmit clean (installer/hook, incl. ENAMETOOLONG, banner-throttle, and all audit regressions driven against the real hook subprocess)
  • tests/mindc_gate.sh: 16 legs PASS on mindc 0.10.2 (17/17 project-mode modules, LUT smoke, 13 front-end files with exact-count tests, native e2e harness)
  • ruff 0.16.2 check + format clean; wheel builds; twine check PASSED

Notes

  • PyTorch reference path unchanged; native Q16.16 encoder remains bundled in the wheel.
  • This is the final Python-series beta: the pure-MIND line ships as binary releases (see ROADMAP.md "Pure-MIND Self-Hosting Migration").
  • Full details: CHANGELOG.md [0.3.0b9]. Upgrade: pip install -U mind-nerve; weights auto-download on first use.
Assets 4
Loading