Version Packages

CHANGELOG.md

@@ -1,5 +1,11 @@
 # semantask
 
+## 2.0.13
+
+### Patch Changes
+
+- Workspace release: @semantask/auth, @semantask/db, @semantask/observability, @semantask/services, @semantask/socket, @semantask/task-worker, @semantask/types, @semantask/web (see package changelogs for details)
+
 ## 2.0.12
 
 ### Patch Changes

apps/socket/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @semantask/socket
 
+## 4.2.1
+
+### Patch Changes
+
+- 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
+- Updated dependencies [293f039]
+- Updated dependencies [d63de76]
+- Updated dependencies [5049ff5]
+- Updated dependencies [4de730c]
+- Updated dependencies [eb2ed2b]
+- Updated dependencies [5bcff34]
+  - @semantask/types@2.2.0
+  - @semantask/observability@1.2.0
+
 ## 4.2.0
 
 ### Minor Changes

apps/socket/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@semantask/socket",
-    "version": "4.2.0",
+    "version": "4.2.1",
     "private": true,
     "type": "module",
     "scripts": {

apps/task-worker/CHANGELOG.md

@@ -1,5 +1,59 @@
 # @semantask/task-worker
 
+## 3.3.0
+
+### Minor Changes
+
+- 293f039: ADR-005 S0.2 — default workspace `executionMode` (`suggest_only` | `require_approval` | `auto_execute`) with shadow→enforce flags.
+
+  ### Added
+  - `ExecutionMode` type and `OrganizationPolicy.executionMode` (+ updatedAt/By)
+  - `getEffectiveExecutionMode` / `EXECUTION_MODE_ENFORCE` / `DEFAULT_EXECUTION_MODE` / `GRANDFATHER_AUTO_TENANTS`
+  - Policy GET/PUT surfaces `executionMode`; logs `policy.execution_mode.changed`
+  - Worker policy gate: enforce + `suggest_only` blocks tools (`EXECUTION_MODE_DENIED`); `require_approval` caps auto-execute; shadow logs; tool-executor fail-closed
+
+### Patch Changes
+
+- d63de76: Harden classifier shadow metrics/isolation, add assignee/due heuristics, and ship a labeled evaluation harness. Production default remains `TASK_CLASSIFIER_MODE=regex`.
+
+  ### Added
+  - `classifier_classifications_total{mode,source}`; disagreement counter labels `{regex_type,llm_type}`
+  - Failure-isolated disagreement hooks; shadow LLM failures cannot break classification
+  - Deterministic assignee (@mention/email) + due-date heuristics → MessageIntent / WorkSuggestion candidates
+  - Extractor version `intelligent-v7-entity-heuristics`
+  - Seed gold eval harness (`packages/services/eval/`) with CI gate (≥0.7 type accuracy)
+
+  ### Compatibility
+  - `regex` remains default authority; shadow never alters product path or execution
+
+- 5049ff5: Classifier ingress creates reviewable WorkSuggestions under `suggest_only` without enqueueing execution.
+
+  ### Added
+  - `SUGGESTION_INGRESS` / `SUGGESTION_BLOCK_EXEC` flags and `shouldBlockExecutionEnqueue`
+  - Dual-write: actionable classify → MessageIntent + idempotent WorkSuggestion (`SUGGESTION_INGRESS=1`)
+  - Shared enqueue guard: refuse `task.execution.requested` at the worker/enqueue boundary under suggest_only
+  - Worker defense-in-depth for leaked execution events; `classifier_disagreement_total` hook
+  - Metrics: `suggestions_created_total`, `suggestion_latency_ms`, `execution_enqueue_attempted_while_suggest_only_total` + P0 alert
+
+  ### Compatibility
+  - `SUGGESTION_INGRESS=0` (default) preserves legacy classify → Task → enqueue behavior
+
+- 24955f9: Phase 2 PR5 — Explicit manager “Allow AI tools” / request-execution path, distinct from WorkSuggestion accept, reusing TaskAction approvals.
+- Updated dependencies [45d3e43]
+- Updated dependencies [293f039]
+- Updated dependencies [d63de76]
+- Updated dependencies [5049ff5]
+- Updated dependencies [78a9a0a]
+- Updated dependencies [4de730c]
+- Updated dependencies [24955f9]
+- Updated dependencies [eb2ed2b]
+- Updated dependencies [0e84316]
+- Updated dependencies [5bcff34]
+  - @semantask/db@3.3.0
+  - @semantask/types@2.2.0
+  - @semantask/services@3.3.0
+  - @semantask/observability@1.2.0
+
 ## 3.2.0
 
 ### Minor Changes

apps/task-worker/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@semantask/task-worker",
-    "version": "3.2.0",
+    "version": "3.3.0",
     "private": true,
     "type": "module",
     "scripts": {

apps/web/CHANGELOG.md

@@ -1,5 +1,48 @@
 # @semantask/web
 
+## 5.2.1
+
+### Patch Changes
+
+- 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
+- 293f039: ADR-005 S0.2 — default workspace `executionMode` (`suggest_only` | `require_approval` | `auto_execute`) with shadow→enforce flags.
+
+  ### Added
+  - `ExecutionMode` type and `OrganizationPolicy.executionMode` (+ updatedAt/By)
+  - `getEffectiveExecutionMode` / `EXECUTION_MODE_ENFORCE` / `DEFAULT_EXECUTION_MODE` / `GRANDFATHER_AUTO_TENANTS`
+  - Policy GET/PUT surfaces `executionMode`; logs `policy.execution_mode.changed`
+  - Worker policy gate: enforce + `suggest_only` blocks tools (`EXECUTION_MODE_DENIED`); `require_approval` caps auto-execute; shadow logs; tool-executor fail-closed
+
+- 293f039: ADR-005 S0.3 — language pass: Suggested work / Approval queue labels in task panel and admin (copy only).
+- 2b614f9: Intent badge “Review suggestion” CTA deep-links to a read-only WorkSuggestion detail stub when a suggestion exists for the message.
+
+  ### Added
+  - Client helpers `listWorkSuggestions` / `getWorkSuggestion`
+  - Conversation suggestion index (refresh on `message:semantic_updated`)
+  - Intent badge CTA → `/work-suggestions/[id]` (no accept/dismiss)
+
+- 78a9a0a: Expose WorkSuggestion create/get/list service and read-only APIs so proposed work can be fetched under conversation or org authz, without implying Task creation or tool execution.
+- 7c10441: Feature-flagged `/inbox/approvals` product surface reusing the existing task-approvals API inside Work Inbox IA.
+- 24955f9: Phase 2 PR5 — Explicit manager “Allow AI tools” / request-execution path, distinct from WorkSuggestion accept, reusing TaskAction approvals.
+- 0e84316: Feature-flagged read-only `/inbox` Work Inbox (`WORK_INBOX_UI`) listing authorized WorkSuggestions with server-side pagination.
+- 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (`ACCEPT_CREATES_EXECUTION=0` rail, `Task.suggestionId` linkage).
+- 46ed62c: Phase 2 PR4 — Make Work Inbox suggestions actionable with Accept / Assign / Dismiss triage using existing mutation APIs.
+- 5b18ffa: Adopt TanStack Query on web for work inbox, execution approvals, and organizations server state.
+- Updated dependencies [45d3e43]
+- Updated dependencies [293f039]
+- Updated dependencies [d63de76]
+- Updated dependencies [5049ff5]
+- Updated dependencies [78a9a0a]
+- Updated dependencies [4de730c]
+- Updated dependencies [24955f9]
+- Updated dependencies [eb2ed2b]
+- Updated dependencies [0e84316]
+- Updated dependencies [5bcff34]
+  - @semantask/auth@3.0.2
+  - @semantask/types@2.2.0
+  - @semantask/services@3.3.0
+  - @semantask/observability@1.2.0
+
 ## 5.2.0
 
 ### Minor Changes

apps/web/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@semantask/web",
-    "version": "5.2.0",
+    "version": "5.2.1",
     "private": true,
     "scripts": {
         "dev": "next dev",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "semantask",
-  "version": "2.0.12",
+  "version": "2.0.13",
   "private": true,
   "type": "module",
   "packageManager": "pnpm@11.13.1",

packages/auth/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @semantask/auth
 
+## 3.0.2
+
+### Patch Changes
+
+- 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
+
 ## 3.0.1
 
 ### Patch Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@semantask/auth",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "private": true,
   "type": "module",
   "main": "./index.ts",

packages/db/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @semantask/db
 
+## 3.3.0
+
+### Minor Changes
+
+- 293f039: ADR-005 S0.2 — default workspace `executionMode` (`suggest_only` | `require_approval` | `auto_execute`) with shadow→enforce flags.
+
+  ### Added
+  - `ExecutionMode` type and `OrganizationPolicy.executionMode` (+ updatedAt/By)
+  - `getEffectiveExecutionMode` / `EXECUTION_MODE_ENFORCE` / `DEFAULT_EXECUTION_MODE` / `GRANDFATHER_AUTO_TENANTS`
+  - Policy GET/PUT surfaces `executionMode`; logs `policy.execution_mode.changed`
+  - Worker policy gate: enforce + `suggest_only` blocks tools (`EXECUTION_MODE_DENIED`); `require_approval` caps auto-execute; shadow logs; tool-executor fail-closed
+
+- 4de730c: Phase 1 PR1 — WorkSuggestion domain types and Mongoose model (reviewable proposed work, distinct from MessageIntent facts and Task committed work).
+
+  ### Added
+  - `WORK_SUGGESTION_STATUSES` / `WorkSuggestionRecord` under `packages/types/work/`
+  - `WorkSuggestion` model with org/conversation indexes and partial-unique `messageId` while `status=proposed`
+
+- 5bcff34: Phase 2 PR1 — Accept/dismiss/assign WorkSuggestion mutations create coordination Tasks without enqueueing execution (`ACCEPT_CREATES_EXECUTION=0` rail, `Task.suggestionId` linkage).
+
+### Patch Changes
+
+- 45d3e43: Remove automatic step-up OTP challenges from normal session refresh and bootstrap. Access-token refresh rotates tokens without creating challenges; challenge UI/API and StepUpChallenge model are removed as dead code. Docs updated to the MVP session contract (silent refresh; login/register OTP remains account verification only).
+- eb2ed2b: Phase 2 hardening — emit `work.suggestion.accepted|dismissed` outbox events, triage accept/dismiss metrics + latency, and accept→execution-while-disabled safety signal. AuthZ matrix documented as conversation participant OR org owner/admin (no behavior change; no conversation manager role).
+
 ## 3.2.0
 
 ### Minor Changes

packages/db/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@semantask/db",
-    "version": "3.2.0",
+    "version": "3.3.0",
     "type": "module",
     "main": "./dist/db.js",
     "types": "./dist/db.d.ts",