@excitedjs/dreamux 0.22.0-beta.175 → 0.22.0

package/CHANGELOG.json

@@ -1,6 +1,99 @@
 {
   "name": "@excitedjs/dreamux",
   "entries": [
+    {
+      "version": "0.22.0",
+      "tag": "@excitedjs/dreamux_v0.22.0",
+      "date": "Tue, 25 Aug 2026 11:45:34 GMT",
+      "comments": {
+        "minor": [
+          {
+            "comment": "BREAKING: Review: completion push-back now equals the number of logical completions the provider actually produced instead of the number of accepted sends. The new completion-router delivers at-most-once per producer, completion token, and recipient while preserving provider order: folded sends deliver one push-back, queued sends deliver ordered distinct push-backs even when their text is identical, duplicate terminal notifications never deliver twice, and close before an observed final result settles as stopped with zero push-backs. Review consumers that assumed one push-back per send. No rebuild is required because delivery relationships are in-process facts, not persisted Dreamux state."
+          },
+          {
+            "comment": "BREAKING: Remove the manual cron run-now capability and its full call chain with no compatibility alias. The model-facing `cron_run_now` MCP tool is removed from the cron MCP tool surface (cron exposes exactly `cron_create`, `cron_list`, `cron_update`, `cron_delete`), and the direct admin control-plane method `scheduler.cron.run_now` is removed and now returns UNKNOWN_METHOD. Timer-driven cron dispatch collapses to a single path: held-fire collapse and dispatch-error re-arm are unconditional, and the load-bearing lifecycle-generation stop-race fence is preserved. No rebuild is required: cron job format, scheduler timing, defer-until-idle, persistence, and state shape are unchanged. Callers, scripts, or prompts that invoked `cron_run_now` or `scheduler.cron.run_now` must stop using them; adjust a job's schedule with `cron_update` instead."
+          },
+          {
+            "comment": "Refactor the bundled Dreamux maintenance skill into a concise progressive-disclosure entry point with seven single-owner references, and add a staged, restart-safe managed-daemon self-upgrade SOP with private recovery ownership and original-Channel reporting."
+          },
+          {
+            "comment": "BREAKING: Add Dynamic Workflow orchestration with admin and MCP tools, durable run records, and a required bundled workflow skill. Rebuild: remove or rename any custom workflow skill before restarting existing Dispatcher or TeamLeader identities."
+          },
+          {
+            "comment": "Wire workflow agent outputSchema through the teammate spawn path into the AgentRuntimeCreateContext so runtimes that apply schema at spawn time (e.g. claude-code --json-schema) receive it."
+          },
+          {
+            "comment": "Add scoped TeamLeader dissolve and durable server-owned Team dissolve and target-handoff state. Existing Team records normalize an absent dissolve fact to null, so no rebuild is required; accepted and cleanup-pending work resumes after restart."
+          },
+          {
+            "comment": "Add scriptPath support to workflow_run so scripts can be loaded from files instead of inline. Validate workflow meta before exposing agent() to top-level code, and propagate spawnOwned unsupported-capability errors back to the workflow as failed agent results."
+          },
+          {
+            "comment": "BREAKING: Add ultracode-compatible top-level Workflow scripts and metadata, three-argument pipeline stages, runtime-native structured-output enforcement, and higher bounded Workflow concurrency and call limits. workflow_run.max_concurrency now accepts only integers from 1 through 16 and rejects invalid values before run creation instead of clamping them. A directly awaited schema-constrained agent call now rejects when a runtime reports successful completion with empty or invalid JSON instead of returning null. Review: confirm callers pass an in-range max_concurrency and Workflow scripts that directly await schema calls handle this fail-loud result where partial failure is intended; no persisted state or config rebuild is needed."
+          },
+          {
+            "comment": "BREAKING: Review: before deploying, inspect every existing non-empty group.allow_chats entry under both group.policy=allowlist and group.policy=follow-user; keep only groups whose human membership should be trusted and whose passive known-bot observation should remain enabled. Previously, follow-user ignored allow_chats for ordinary human delivery, while allowlist still applied dm_policy and allow_users after the chat check. Now either non-block policy trusts every exactly classified human in a listed chat after the global mention gate. access.json remains V3 and needs no rebuild; the new authorization meaning takes effect in place when the new server starts. Dreamux now publishes the complete current host, built-in provider, and mixed-ownership V3 access maintenance guidance."
+          },
+          {
+            "comment": "BREAKING: Review: remove default-export Workflow entry functions and place executable bodies directly after export const meta; pass object and array workflow_run.args values directly instead of JSON.stringify. No rebuild is required; persisted state and config remain compatible."
+          },
+          {
+            "comment": "BREAKING: Review: delete-on-close no longer checks Git ref reachability and removes only the linked worktree with non-forced git worktree remove, preserving its managed branch and commits. No rebuild is required. Startup resumes cleanup only for the exact closed managed delete-on-close record with cleanup_state retained-unique-commits, dissolve phase failed, and last_error worktree-unique-commits; normal dirty/unmerged assessment and worktree-only removal then continue."
+          },
+          {
+            "comment": "BREAKING: Review: Verify supported MCP hosts consume object structuredContent; no rebuild is needed. Serve the channel, Team, TeamMate, cron, and collaboration-space MCP entries through the official SDK at protocol revisions 2026-07-28, 2025-11-25, and 2025-06-18. Tool discovery includes canonical metadata and schemas, ordinary successful calls return exact empty content plus canonical structured objects without duplicate JSON text, accepted asynchronous Team, TeamMate, and workflow submissions add one operation-local no-poll reminder, older legacy offers are counter-offered with a supported revision, and unsupported modern revisions are rejected."
+          },
+          {
+            "comment": "BREAKING: Review: TeamMate last now reads provider-native transcripts with turns 1..50, opaque backward cursors, optional tool blocks, and a fixed 262144-byte budget; direct spawn/send receipts add nullable transcript_path, while history uses identity updated_at and no rolling conversation fields. Dreamux no longer creates or reads per-entity turn.jsonl archives, public Turn IDs are removed, ambiguous admission is never retried, completion delivery is deadline-bounded, and Workflow/Team/shutdown close waits for entity-owned Turn and delivery convergence. No rebuild is required: every existing Dreamux turn.jsonl is inert ignored residue, retired identity projection keys are accepted as unknown extras, and provider-native sessions are rediscovered when needed."
+          }
+        ],
+        "none": [
+          {
+            "comment": "Isolate the collaboration provisioning test Git fixture so repeated runs cannot leave stale worktree registrations in the host checkout."
+          },
+          {
+            "comment": "Add a real Codex model gate for portable structured-output schema admission and restoration, plus isolated live-test diagnostics; test-only, no Dreamux release change."
+          }
+        ],
+        "patch": [
+          {
+            "comment": "Expose every active Team channel binding in bound_targets while preserving bound_target as the first binding for compatibility."
+          },
+          {
+            "comment": "Tell agents in successful workflow_run results to await Dreamux's automatic completion push instead of polling workflow status."
+          },
+          {
+            "comment": "Enforce direct-receipt-only native transcript paths, preserve established paths across every TeamMate admission outcome, and reject provider tool names above the shared cap. No rebuild is required because persisted Dreamux state is unchanged."
+          },
+          {
+            "comment": "Rework the bundled workflow code-review reference onto the angle-partitioned method: a schema'd scope stage that resolves the exact diff command and carries it into every later prompt, one finder per correctness angle plus a single merged finder covering all five cleanup angles, recall-biased finding with all suppression moved to verify, one verifier per source location returning a three-state CONFIRMED/PLAUSIBLE/REFUTED verdict per candidate under an unconditional recall override, a bounded gap sweep at the higher gear, index-based synthesis under a per-gear reported-findings cap, and the user's verbatim review target riding along to every subagent under a scope-only framing; realign the ultracode review archetype, scout-stage citation, and staged-escalation example to the same shape, and retitle the SKILL.md references row. Documentation-only bundled skill content; no runtime behavior change."
+          },
+          {
+            "comment": "Rework the bundled workflow code-review reference into a method-first recipe (flow, verbatim scoring rubric, false-positive discipline, effort scaling, cumulative-range guidance) with a compact adaptation sketch instead of a paste-ready script, and add an ultracode orchestration techniques reference (archetypes, scouting, run chaining, compact worked compositions). Documentation-only bundled skill content; no runtime behavior change."
+          },
+          {
+            "comment": "Add two bundled references to the shared workflow skill: a code-review recipe (gate, multi-lens find with explicit coverage accounting, three-vote confidence scoring, one synthesized report) and an orchestration/prompt patterns guide (output contract, pipeline-versus-parallel rules, adversarial-verify and loop-until-dry patterns), linked from a new SKILL.md References table. Documentation-only bundled skill content; no runtime behavior change."
+          }
+        ],
+        "dependency": [
+          {
+            "comment": "Updating dependency \"@excitedjs/agent-runtime-claude-code\" to `0.5.0`"
+          },
+          {
+            "comment": "Updating dependency \"@excitedjs/agent-runtime-codex\" to `0.4.0`"
+          },
+          {
+            "comment": "Updating dependency \"@excitedjs/dreamux-types\" to `0.8.0`"
+          },
+          {
+            "comment": "Updating dependency \"@excitedjs/dreamux-utils\" to `0.4.0`"
+          },
+          {
+            "comment": "Updating dependency \"@excitedjs/feishu-channel\" to `5.0.0`"
+          }
+        ]
+      }
+    },
     {
       "version": "0.21.0",
       "tag": "@excitedjs/dreamux_v0.21.0",

package/CHANGELOG.md

@@ -1,6 +1,34 @@
 # Change Log - @excitedjs/dreamux
 
-This log was last generated on Mon, 27 Jul 2026 08:35:50 GMT and should not be manually modified.
+This log was last generated on Tue, 25 Aug 2026 11:45:34 GMT and should not be manually modified.
+
+## 0.22.0
+Tue, 25 Aug 2026 11:45:34 GMT
+
+### Minor changes
+
+- BREAKING: Review: completion push-back now equals the number of logical completions the provider actually produced instead of the number of accepted sends. The new completion-router delivers at-most-once per producer, completion token, and recipient while preserving provider order: folded sends deliver one push-back, queued sends deliver ordered distinct push-backs even when their text is identical, duplicate terminal notifications never deliver twice, and close before an observed final result settles as stopped with zero push-backs. Review consumers that assumed one push-back per send. No rebuild is required because delivery relationships are in-process facts, not persisted Dreamux state.
+- BREAKING: Remove the manual cron run-now capability and its full call chain with no compatibility alias. The model-facing `cron_run_now` MCP tool is removed from the cron MCP tool surface (cron exposes exactly `cron_create`, `cron_list`, `cron_update`, `cron_delete`), and the direct admin control-plane method `scheduler.cron.run_now` is removed and now returns UNKNOWN_METHOD. Timer-driven cron dispatch collapses to a single path: held-fire collapse and dispatch-error re-arm are unconditional, and the load-bearing lifecycle-generation stop-race fence is preserved. No rebuild is required: cron job format, scheduler timing, defer-until-idle, persistence, and state shape are unchanged. Callers, scripts, or prompts that invoked `cron_run_now` or `scheduler.cron.run_now` must stop using them; adjust a job's schedule with `cron_update` instead.
+- Refactor the bundled Dreamux maintenance skill into a concise progressive-disclosure entry point with seven single-owner references, and add a staged, restart-safe managed-daemon self-upgrade SOP with private recovery ownership and original-Channel reporting.
+- BREAKING: Add Dynamic Workflow orchestration with admin and MCP tools, durable run records, and a required bundled workflow skill. Rebuild: remove or rename any custom workflow skill before restarting existing Dispatcher or TeamLeader identities.
+- Wire workflow agent outputSchema through the teammate spawn path into the AgentRuntimeCreateContext so runtimes that apply schema at spawn time (e.g. claude-code --json-schema) receive it.
+- Add scoped TeamLeader dissolve and durable server-owned Team dissolve and target-handoff state. Existing Team records normalize an absent dissolve fact to null, so no rebuild is required; accepted and cleanup-pending work resumes after restart.
+- Add scriptPath support to workflow_run so scripts can be loaded from files instead of inline. Validate workflow meta before exposing agent() to top-level code, and propagate spawnOwned unsupported-capability errors back to the workflow as failed agent results.
+- BREAKING: Add ultracode-compatible top-level Workflow scripts and metadata, three-argument pipeline stages, runtime-native structured-output enforcement, and higher bounded Workflow concurrency and call limits. workflow_run.max_concurrency now accepts only integers from 1 through 16 and rejects invalid values before run creation instead of clamping them. A directly awaited schema-constrained agent call now rejects when a runtime reports successful completion with empty or invalid JSON instead of returning null. Review: confirm callers pass an in-range max_concurrency and Workflow scripts that directly await schema calls handle this fail-loud result where partial failure is intended; no persisted state or config rebuild is needed.
+- BREAKING: Review: before deploying, inspect every existing non-empty group.allow_chats entry under both group.policy=allowlist and group.policy=follow-user; keep only groups whose human membership should be trusted and whose passive known-bot observation should remain enabled. Previously, follow-user ignored allow_chats for ordinary human delivery, while allowlist still applied dm_policy and allow_users after the chat check. Now either non-block policy trusts every exactly classified human in a listed chat after the global mention gate. access.json remains V3 and needs no rebuild; the new authorization meaning takes effect in place when the new server starts. Dreamux now publishes the complete current host, built-in provider, and mixed-ownership V3 access maintenance guidance.
+- BREAKING: Review: remove default-export Workflow entry functions and place executable bodies directly after export const meta; pass object and array workflow_run.args values directly instead of JSON.stringify. No rebuild is required; persisted state and config remain compatible.
+- BREAKING: Review: delete-on-close no longer checks Git ref reachability and removes only the linked worktree with non-forced git worktree remove, preserving its managed branch and commits. No rebuild is required. Startup resumes cleanup only for the exact closed managed delete-on-close record with cleanup_state retained-unique-commits, dissolve phase failed, and last_error worktree-unique-commits; normal dirty/unmerged assessment and worktree-only removal then continue.
+- BREAKING: Review: Verify supported MCP hosts consume object structuredContent; no rebuild is needed. Serve the channel, Team, TeamMate, cron, and collaboration-space MCP entries through the official SDK at protocol revisions 2026-07-28, 2025-11-25, and 2025-06-18. Tool discovery includes canonical metadata and schemas, ordinary successful calls return exact empty content plus canonical structured objects without duplicate JSON text, accepted asynchronous Team, TeamMate, and workflow submissions add one operation-local no-poll reminder, older legacy offers are counter-offered with a supported revision, and unsupported modern revisions are rejected.
+- BREAKING: Review: TeamMate last now reads provider-native transcripts with turns 1..50, opaque backward cursors, optional tool blocks, and a fixed 262144-byte budget; direct spawn/send receipts add nullable transcript_path, while history uses identity updated_at and no rolling conversation fields. Dreamux no longer creates or reads per-entity turn.jsonl archives, public Turn IDs are removed, ambiguous admission is never retried, completion delivery is deadline-bounded, and Workflow/Team/shutdown close waits for entity-owned Turn and delivery convergence. No rebuild is required: every existing Dreamux turn.jsonl is inert ignored residue, retired identity projection keys are accepted as unknown extras, and provider-native sessions are rediscovered when needed.
+
+### Patches
+
+- Expose every active Team channel binding in bound_targets while preserving bound_target as the first binding for compatibility.
+- Tell agents in successful workflow_run results to await Dreamux's automatic completion push instead of polling workflow status.
+- Enforce direct-receipt-only native transcript paths, preserve established paths across every TeamMate admission outcome, and reject provider tool names above the shared cap. No rebuild is required because persisted Dreamux state is unchanged.
+- Rework the bundled workflow code-review reference onto the angle-partitioned method: a schema'd scope stage that resolves the exact diff command and carries it into every later prompt, one finder per correctness angle plus a single merged finder covering all five cleanup angles, recall-biased finding with all suppression moved to verify, one verifier per source location returning a three-state CONFIRMED/PLAUSIBLE/REFUTED verdict per candidate under an unconditional recall override, a bounded gap sweep at the higher gear, index-based synthesis under a per-gear reported-findings cap, and the user's verbatim review target riding along to every subagent under a scope-only framing; realign the ultracode review archetype, scout-stage citation, and staged-escalation example to the same shape, and retitle the SKILL.md references row. Documentation-only bundled skill content; no runtime behavior change.
+- Rework the bundled workflow code-review reference into a method-first recipe (flow, verbatim scoring rubric, false-positive discipline, effort scaling, cumulative-range guidance) with a compact adaptation sketch instead of a paste-ready script, and add an ultracode orchestration techniques reference (archetypes, scouting, run chaining, compact worked compositions). Documentation-only bundled skill content; no runtime behavior change.
+- Add two bundled references to the shared workflow skill: a code-review recipe (gate, multi-lens find with explicit coverage accounting, three-vote confidence scoring, one synthesized report) and an orchestration/prompt patterns guide (output contract, pipeline-versus-parallel rules, adversarial-verify and loop-until-dry patterns), linked from a new SKILL.md References table. Documentation-only bundled skill content; no runtime behavior change.
 
 ## 0.21.0
 Mon, 27 Jul 2026 08:35:50 GMT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@excitedjs/dreamux",
-  "version": "0.22.0-beta.175",
+  "version": "0.22.0",
   "description": "Dreamux core host for multi-dispatcher agent orchestration through provider interfaces.",
   "license": "MIT",
   "repository": {
@@ -26,11 +26,6 @@
     "CHANGELOG.json"
   ],
   "dependencies": {
-    "@excitedjs/agent-runtime-claude-code": "0.5.0-beta.175",
-    "@excitedjs/agent-runtime-codex": "0.4.0-beta.175",
-    "@excitedjs/dreamux-types": "0.8.0-beta.175",
-    "@excitedjs/dreamux-utils": "0.4.0-beta.175",
-    "@excitedjs/feishu-channel": "5.0.0-beta.175",
     "@modelcontextprotocol/server": "2.0.0",
     "acorn": "^8.16.0",
     "croner": "^10.0.1",
@@ -39,7 +34,12 @@
     "@clack/prompts": "^1.5.0",
     "execa": "^9.6.1",
     "pino": "^9.5.0",
-    "plist": "^5.0.0"
+    "plist": "^5.0.0",
+    "@excitedjs/agent-runtime-claude-code": "0.5.0",
+    "@excitedjs/agent-runtime-codex": "0.4.0",
+    "@excitedjs/dreamux-utils": "0.4.0",
+    "@excitedjs/dreamux-types": "0.8.0",
+    "@excitedjs/feishu-channel": "5.0.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.0.0",