Crash-safe config and self-update writes, symlink-hardened MCP reads, and paginated list_documents.

Breaking changes

• list_documents returns {documents, total, offset, returned, truncated}, no longer a bare JSON array.

Features

• list_documents pages results via limit/offset (default 100, max 500).

Improvements

• Config and self-update writes are crash-safe — no truncated settings.json or half-written binary.
• Security hardening: MCP reads and scans refuse symlinks escaping .archcore/; build moves to Go 1.25.11.
• Installing hooks and MCP config preserves unknown keys and key order in agent config files.
• Sync skips declared global sources, so read-only mounts aren't pushed as local documents.
• Document reads run off an mtime-keyed scan cache — faster on large .archcore/ trees.

Fixes

• status no longer flags CRLF/BOM (Windows-edited) documents as missing frontmatter.
• Malformed frontmatter YAML surfaces an error instead of silently parsing as empty.
• Title-only document updates preserve on-disk tag order.
• Sync marks only server-confirmed changes as synced, so failed pushes retry next run.
• Corrupt .vscode/mcp.json is left intact, not reset, preserving your other MCP servers.
• Self-update rejects oversized archive entries instead of installing a truncated binary.

Changelog

• aa561e3 fix: security updates
• f43941f fix(cmd): update returns ErrAlreadyReported; drop orphaned ErrServerUnreachable sentinel
• 2f9c19a docs(archcore): align stale rules and record audit execution
• 6c484f8 test: close the audit's coverage gaps
• b8ac522 refactor: consistency sweep — sentinels, aliases, ordering, validation, magic strings
• 6c3e01b refactor: remove dead code across api, sync, config, templates, hooks
• 6406b6d feat(mcp): list_documents pagination — limit/offset params and response envelope
• 16e0187 perf(mcp): mtime-keyed scan cache, per-call relation index, ReadDir nearby hints
• 58a63b2 fix: durability and consistency fixes across status, config, update, hooks, init
• 19da79f fix(sync): manifest records only server-confirmed changes; globals excluded from scan
• 97c0f29 fix(agents): MCP config writers — corrupt policy, JSONC exception, opencode delegation
• 4ed7a6b fix(hooks): rework installers on a RawMessage-preserving generic path
• cb39624 feat(jsonfile): add order- and content-preserving JSON config surgery package
• 856df4b fix(mcp): serialize manifest mutations via shared store; unify corrupt-manifest errors
• 7d7e682 fix(mcp): harden write-path validation with shared guardWritablePath
• c88b935 fix(mcp): sanitize OS errors in tool results — never leak absolute paths
• cdc60ef style: gofmt cmd/mcp_root.go
• 8e72afc fix(templates): surface frontmatter YAML errors from SplitDocument and strip BOM
• adf0063 docs: add full-audit fix plan (July 2026)

A new rnd research type adds an investigation gate before committing to a track.

Features

• rnd research type captures bounded investigations that end in a proceed/defer recommendation.

Improvements

• spec type covers contracts specified before code, not only documented after.

Changelog

• 076a637 feat: re-balance spec type document type
• fb27974 feat: add rnd
• 926835e docs: move local context to global
• 405601b docs: idea for writable global sources
• c79cb91 docs: drift in globals

The local/global distinction is now consistent across every read tool and at any directory depth.

Improvements

• search_documents results carry the same source and read-only labels as the other read tools.

Fixes

• Documents in any nested global/ directory are read-only, not just the top level.

Changelog

• 8f441e4 fix: bugs and improve tests

Broken global sources now fail loudly at startup, in status, and in session context.

Features

• status lists each global source with its document count and flags broken mounts.

Improvements

• MCP server refuses to start on a missing, unreadable, self-overlapping, or duplicate global source.
• Empty global sources warn at startup and in status instead of mounting nothing silently.
• Session-start context flags broken or empty global mounts.
• Agent nudge files document read-only global sources and how to surface them.

Fixes

• Misconfigured global paths no longer surface stray .md files as malformed documents.
• Global source errors no longer leak absolute filesystem paths.

Changelog

• 07388a9 fix: bugs, improves
• 06ca28d docs: bump v0.5.0 itself, configs update

Mount external read-only .archcore/ knowledge bases into any project through a new globals setting.

Features

• globals array in settings.json mounts external read-only .archcore/ knowledge bases.
• MCP read tools surface mounted globals, tagged by source id and read-only.

Improvements

• MCP server fails fast when a declared global source is missing.
• Global documents are read-only — create, update, remove, and relations are rejected.
• Unknown settings.json fields are preserved on read and write, not rejected.
• doctor, sync, and MCP startup warn on unrecognized settings.json fields.
• status tag-hygiene checks skip read-only global documents.

Changelog

• febe929 feat: globals sources

search_documents returns matched document bodies inline, removing the follow-up get_document round-trip.

Features

• search_documents returns full document bodies inline with mode=full.

Changelog

• c167bea fix: improve token usage with new full mode

Agents auto-discover Archcore's MCP tools via a usage hint written into AGENTS.md, GEMINI.md, or .claude/rules.

Features

• archcore instructions install writes a "use Archcore" hint into detected agents' config files.
• archcore instructions remove reversibly strips the hint, even after de-init.
• archcore init offers to add the hint after agent setup (opt-in, default yes).
• --agent flag targets a single host instead of all detected ones.

Improvements

• Shared files (AGENTS.md, GEMINI.md) edited non-destructively inside a managed marker block.
• Non-interactive init skips the hint and points to instructions install for automation.

For update Archcore CLI run:

archcore update

Changelog

• 8b19c54 feat: nudges for agents configs

Features

• Run archcore mcp from any directory via --project flag or ARCHCORE_PROJECT_ROOT env.

Changelog

• dc16ca7 feat(mcp): add --project flag and ARCHCORE_PROJECT_ROOT env override

Fixes

• archcore update works on Windows, where releases ship as .zip instead of .tar.gz.

Changelog

• 37a802a fix: windows bug when update

Changelog

• e26badf fix: path for windows
• 05d1af3 fix: safe token optimizations in MCP tools
• b072d44 perf: in tests, format lost code
• e3ecb86 chore: improve skill for changelogs