Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@semantask/db@3.3.0

Minor Changes

• 293f039: ADR-005 S0.2 — default workspace executionMode (suggest_only | require_approval | auto_execute) with shadow→enforce flags.

  Added

  • ExecutionMode type and OrganizationPolicy.executionMode (+ updatedAt/By)
  • getEffectiveExecutionMode / EXECUTION_MODE_ENFORCE / DEFAULT_EXECUTION_MODE / GRANDFATHER_AUTO_TENANTS
  • Policy GET/PUT surfaces executionMode; logs policy.execution_mode.changed
  • Worker policy gate: enforce + suggest_only blocks tools (EXECUTION_MODE_DENIED); require_approval caps auto-execute; shadow logs; tool-executor fail-closed

• 4de730c: Phase 1 PR1 — WorkSuggestion domain types and Mongoose model (reviewable proposed work, distinct from MessageIntent facts and Task committed work).

  Added

  • WORK_SUGGESTION_STATUSES / WorkSuggestionRecord under packages/types/work/
  • WorkSuggestion model with org/conversation indexes and partial-unique messageId while status=proposed

• 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (ACCEPT_CREATES_EXECUTION=0 rail, Task.suggestionId linkage).

Patch Changes

• 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
• eb2ed2b: Phase 2 hardening — emit work.suggestion.accepted|dismissed outbox events, triage accept/dismiss metrics + latency, and accept→execution-while-disabled safety signal. AuthZ matrix documented as conversation participant OR org owner/admin (no behavior change; no conversation manager role).

@semantask/services@3.3.0

Minor Changes

• 293f039: ADR-005 S0.2 — default workspace executionMode (suggest_only | require_approval | auto_execute) with shadow→enforce flags.

  Added

  • ExecutionMode type and OrganizationPolicy.executionMode (+ updatedAt/By)
  • getEffectiveExecutionMode / EXECUTION_MODE_ENFORCE / DEFAULT_EXECUTION_MODE / GRANDFATHER_AUTO_TENANTS
  • Policy GET/PUT surfaces executionMode; logs policy.execution_mode.changed
  • Worker policy gate: enforce + suggest_only blocks tools (EXECUTION_MODE_DENIED); require_approval caps auto-execute; shadow logs; tool-executor fail-closed

• d63de76: Harden classifier shadow metrics/isolation, add assignee/due heuristics, and ship a labeled evaluation harness. Production default remains TASK_CLASSIFIER_MODE=regex.

  Added

  • classifier_classifications_total{mode,source}; disagreement counter labels {regex_type,llm_type}
  • Failure-isolated disagreement hooks; shadow LLM failures cannot break classification
  • Deterministic assignee (@mention/email) + due-date heuristics → MessageIntent / WorkSuggestion candidates
  • Extractor version intelligent-v7-entity-heuristics
  • Seed gold eval harness (packages/services/eval/) with CI gate (≥0.7 type accuracy)

  Compatibility

  • regex remains default authority; shadow never alters product path or execution

• 5049ff5: Classifier ingress creates reviewable WorkSuggestions under suggest_only without enqueueing execution.

  Added

  • SUGGESTION_INGRESS / SUGGESTION_BLOCK_EXEC flags and shouldBlockExecutionEnqueue
  • Dual-write: actionable classify → MessageIntent + idempotent WorkSuggestion (SUGGESTION_INGRESS=1)
  • Shared enqueue guard: refuse task.execution.requested at the worker/enqueue boundary under suggest_only
  • Worker defense-in-depth for leaked execution events; classifier_disagreement_total hook
  • Metrics: suggestions_created_total, suggestion_latency_ms, execution_enqueue_attempted_while_suggest_only_total + P0 alert

  Compatibility

  • SUGGESTION_INGRESS=0 (default) preserves legacy classify → Task → enqueue behavior

• 78a9a0a: Expose WorkSuggestion create/get/list service and read-only APIs so proposed work can be fetched under conversation or org authz, without implying Task creation or tool execution.

• 24955f9: Phase 2 PR5 — Explicit manager “Allow AI tools” / request-execution path, distinct from WorkSuggestion accept, reusing TaskAction approvals.

• eb2ed2b: Phase 2 hardening — emit work.suggestion.accepted|dismissed outbox events, triage accept/dismiss metrics + latency, and accept→execution-while-disabled safety signal. AuthZ matrix documented as conversation participant OR org owner/admin (no behavior change; no conversation manager role).

• 0e84316: Feature-flagged read-only /inbox Work Inbox (WORK_INBOX_UI) listing authorized WorkSuggestions with server-side pagination.

• 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (ACCEPT_CREATES_EXECUTION=0 rail, Task.suggestionId linkage).

Patch Changes

• Updated dependencies [45d3e43]
• Updated dependencies [293f039]
• Updated dependencies [d63de76]
• Updated dependencies [5049ff5]
• Updated dependencies [4de730c]
• Updated dependencies [eb2ed2b]
• Updated dependencies [5bcff34]
  • @semantask/db@3.3.0
  • @semantask/types@2.2.0
  • @semantask/observability@1.2.0

@semantask/task-worker@3.3.0

Minor Changes

• 293f039: ADR-005 S0.2 — default workspace executionMode (suggest_only | require_approval | auto_execute) with shadow→enforce flags.

  Added

  • ExecutionMode type and OrganizationPolicy.executionMode (+ updatedAt/By)
  • getEffectiveExecutionMode / EXECUTION_MODE_ENFORCE / DEFAULT_EXECUTION_MODE / GRANDFATHER_AUTO_TENANTS
  • Policy GET/PUT surfaces executionMode; logs policy.execution_mode.changed
  • Worker policy gate: enforce + suggest_only blocks tools (EXECUTION_MODE_DENIED); require_approval caps auto-execute; shadow logs; tool-executor fail-closed

Patch Changes

• d63de76: Harden classifier shadow metrics/isolation, add assignee/due heuristics, and ship a labeled evaluation harness. Production default remains TASK_CLASSIFIER_MODE=regex.

  Added

  • classifier_classifications_total{mode,source}; disagreement counter labels {regex_type,llm_type}
  • Failure-isolated disagreement hooks; shadow LLM failures cannot break classification
  • Deterministic assignee (@mention/email) + due-date heuristics → MessageIntent / WorkSuggestion candidates
  • Extractor version intelligent-v7-entity-heuristics
  • Seed gold eval harness (packages/services/eval/) with CI gate (≥0.7 type accuracy)

  Compatibility

  • regex remains default authority; shadow never alters product path or execution

• 5049ff5: Classifier ingress creates reviewable WorkSuggestions under suggest_only without enqueueing execution.

  Added

  • SUGGESTION_INGRESS / SUGGESTION_BLOCK_EXEC flags and shouldBlockExecutionEnqueue
  • Dual-write: actionable classify → MessageIntent + idempotent WorkSuggestion (SUGGESTION_INGRESS=1)
  • Shared enqueue guard: refuse task.execution.requested at the worker/enqueue boundary under suggest_only
  • Worker defense-in-depth for leaked execution events; classifier_disagreement_total hook
  • Metrics: suggestions_created_total, suggestion_latency_ms, execution_enqueue_attempted_while_suggest_only_total + P0 alert

  Compatibility

  • SUGGESTION_INGRESS=0 (default) preserves legacy classify → Task → enqueue behavior

• 24955f9: Phase 2 PR5 — Explicit manager “Allow AI tools” / request-execution path, distinct from WorkSuggestion accept, reusing TaskAction approvals.

• Updated dependencies [45d3e43]

• Updated dependencies [293f039]

• Updated dependencies [d63de76]

• Updated dependencies [5049ff5]

• Updated dependencies [78a9a0a]

• Updated dependencies [4de730c]

• Updated dependencies [24955f9]

• Updated dependencies [eb2ed2b]

• Updated dependencies [0e84316]

• Updated dependencies [5bcff34]

  • @semantask/db@3.3.0
  • @semantask/types@2.2.0
  • @semantask/services@3.3.0
  • @semantask/observability@1.2.0

@semantask/observability@1.2.0

Minor Changes

• d63de76: Harden classifier shadow metrics/isolation, add assignee/due heuristics, and ship a labeled evaluation harness. Production default remains TASK_CLASSIFIER_MODE=regex.

  Added

  • classifier_classifications_total{mode,source}; disagreement counter labels {regex_type,llm_type}
  • Failure-isolated disagreement hooks; shadow LLM failures cannot break classification
  • Deterministic assignee (@mention/email) + due-date heuristics → MessageIntent / WorkSuggestion candidates
  • Extractor version intelligent-v7-entity-heuristics
  • Seed gold eval harness (packages/services/eval/) with CI gate (≥0.7 type accuracy)

  Compatibility

  • regex remains default authority; shadow never alters product path or execution

• 5049ff5: Classifier ingress creates reviewable WorkSuggestions under suggest_only without enqueueing execution.

  Added

  • SUGGESTION_INGRESS / SUGGESTION_BLOCK_EXEC flags and shouldBlockExecutionEnqueue
  • Dual-write: actionable classify → MessageIntent + idempotent WorkSuggestion (SUGGESTION_INGRESS=1)
  • Shared enqueue guard: refuse task.execution.requested at the worker/enqueue boundary under suggest_only
  • Worker defense-in-depth for leaked execution events; classifier_disagreement_total hook
  • Metrics: suggestions_created_total, suggestion_latency_ms, execution_enqueue_attempted_while_suggest_only_total + P0 alert

  Compatibility

  • SUGGESTION_INGRESS=0 (default) preserves legacy classify → Task → enqueue behavior

• eb2ed2b: Phase 2 hardening — emit work.suggestion.accepted|dismissed outbox events, triage accept/dismiss metrics + latency, and accept→execution-while-disabled safety signal. AuthZ matrix documented as conversation participant OR org owner/admin (no behavior change; no conversation manager role).

@semantask/types@2.2.0

Minor Changes

• 293f039: ADR-005 S0.2 — default workspace executionMode (suggest_only | require_approval | auto_execute) with shadow→enforce flags.

  Added

  • ExecutionMode type and OrganizationPolicy.executionMode (+ updatedAt/By)
  • getEffectiveExecutionMode / EXECUTION_MODE_ENFORCE / DEFAULT_EXECUTION_MODE / GRANDFATHER_AUTO_TENANTS
  • Policy GET/PUT surfaces executionMode; logs policy.execution_mode.changed
  • Worker policy gate: enforce + suggest_only blocks tools (EXECUTION_MODE_DENIED); require_approval caps auto-execute; shadow logs; tool-executor fail-closed

• 4de730c: Phase 1 PR1 — WorkSuggestion domain types and Mongoose model (reviewable proposed work, distinct from MessageIntent facts and Task committed work).

  Added

  • WORK_SUGGESTION_STATUSES / WorkSuggestionRecord under packages/types/work/
  • WorkSuggestion model with org/conversation indexes and partial-unique messageId while status=proposed

• 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (ACCEPT_CREATES_EXECUTION=0 rail, Task.suggestionId linkage).

@semantask/socket@4.2.1

Patch Changes

• 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
• Updated dependencies [293f039]
• Updated dependencies [d63de76]
• Updated dependencies [5049ff5]
• Updated dependencies [4de730c]
• Updated dependencies [eb2ed2b]
• Updated dependencies [5bcff34]
  • @semantask/types@2.2.0
  • @semantask/observability@1.2.0

@semantask/web@5.2.1

Patch Changes

• 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).

• 293f039: ADR-005 S0.2 — default workspace executionMode (suggest_only | require_approval | auto_execute) with shadow→enforce flags.

  Added

  • ExecutionMode type and OrganizationPolicy.executionMode (+ updatedAt/By)
  • getEffectiveExecutionMode / EXECUTION_MODE_ENFORCE / DEFAULT_EXECUTION_MODE / GRANDFATHER_AUTO_TENANTS
  • Policy GET/PUT surfaces executionMode; logs policy.execution_mode.changed
  • Worker policy gate: enforce + suggest_only blocks tools (EXECUTION_MODE_DENIED); require_approval caps auto-execute; shadow logs; tool-executor fail-closed

• 293f039: ADR-005 S0.3 — language pass: Suggested work / Approval queue labels in task panel and admin (copy only).

• 2b614f9: Intent badge “Review suggestion” CTA deep-links to a read-only WorkSuggestion detail stub when a suggestion exists for the message.

  Added

  • Client helpers listWorkSuggestions / getWorkSuggestion
  • Conversation suggestion index (refresh on message:semantic_updated)
  • Intent badge CTA → /work-suggestions/[id] (no accept/dismiss)

• 78a9a0a: Expose WorkSuggestion create/get/list service and read-only APIs so proposed work can be fetched under conversation or org authz, without implying Task creation or tool execution.

• 7c10441: Feature-flagged /inbox/approvals product surface reusing the existing task-approvals API inside Work Inbox IA.

• 24955f9: Phase 2 PR5 — Explicit manager “Allow AI tools” / request-execution path, distinct from WorkSuggestion accept, reusing TaskAction approvals.

• 0e84316: Feature-flagged read-only /inbox Work Inbox (WORK_INBOX_UI) listing authorized WorkSuggestions with server-side pagination.

• 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (ACCEPT_CREATES_EXECUTION=0 rail, Task.suggestionId linkage).

• 46ed62c: Phase 2 PR4 — Make Work Inbox suggestions actionable with Accept / Assign / Dismiss triage using existing mutation APIs.

• 5b18ffa: Adopt TanStack Query on web for work inbox, execution approvals, and organizations server state.

• Updated dependencies [45d3e43]

• Updated dependencies [293f039]

• Updated dependencies [d63de76]

• Updated dependencies [5049ff5]

• Updated dependencies [78a9a0a]

• Updated dependencies [4de730c]

• Updated dependencies [24955f9]

• Updated dependencies [eb2ed2b]

• Updated dependencies [0e84316]

• Updated dependencies [5bcff34]

  • @semantask/auth@3.0.2
  • @semantask/types@2.2.0
  • @semantask/services@3.3.0
  • @semantask/observability@1.2.0

@semantask/auth@3.0.2

Patch Changes

• 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).