@plumbus/core 0.8.0-beta.4 → 0.8.0-beta.6

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @plumbus/core changelog
 
+## 0.8.0-beta.6 — 2026-09-23
+
+Carries core 0.7.2 and 0.7.4 from `main` into the beta family (0.7.4 absorbed the unpublished 0.7.3).
+
+### Added
+
+- **Typed decisions through `ctx.ai.decide()`.** Capabilities and flows call decision adapters over the shared `@plumbus/ai-decision` contract, with security checks over state and questions, request bounds, budgets, cancellation forwarding and per-call cost/usage records attributed to tenant and actor. Register providers with `export const decisions = { providers, defaultProvider }` in `app/server.ts` (API and worker processes share it); named definitions are discovered under `app/decisions/`. Successful and failed decision calls reach `onAICostRecorded`, keeping known billed metadata after an invalid provider answer and recording unknown cost as `null`. `mockAI({ decide })` returns decision results in tests. Core now depends on `@plumbus/ai-decision` `~0.3.0-beta.0`; the TypeSafe and Laya adapters stay optional installs. Docs: [Decision providers](../../docs/ai/decision-providers.md).
+- **`ctx.ai.classify()` selects a provider per call.** Optional `provider` and `model` pick a registered text provider or a TypeSafe/Laya decision adapter. Decision classification batches one probability question per label and returns the labels at or above `threshold` (default 0.5), with the same validation, security, budgets, cancellation and a single `classify` cost record; a name registered in both registries is refused. Calls without `provider` keep the default text provider and the `string[]` result. Text classification keeps provider admission and cost context. Recipe: `instructions/ai-classification.md`.
+- **Agent wiring v17.** `plumbus init` links the classification recipe and the decision provider instruction indexes from every agent format; refresh existing apps with `plumbus init --patch --agent all`.
+- **Structured final answers with native tools.** `generateWithUsage({ tools, outputValidation: 'prompt' })` validates a final answer against the prompt output schema once and records the usage of a failed validation; a malformed answer is not retried because a retry could repeat tool effects, and `tool_calls` results bypass validation. The OpenAI adapter forwards the schema beside native tools (Chat Completions `response_format`, Responses `text.format`). Pair with `@plumbus/chat` 0.3.0-beta.1 for structured custom-agent output. Docs: [AI integration](../../docs/ai/ai-integration.md#structured-answers-with-native-tools).
+- **Pricing.** `claude-opus-5-5`: $4 input, $0.20 cached input, $5 five-minute cache writes, $20 output per million tokens, no long-context surcharge. `gpt-6-sol` ($2 / $0.20 / $10) and `gpt-6-luna` ($0.10 / $0.01 / $0.50), including cache writes and the full-request long-context premium above 272K input tokens.
+
+### Fixed
+
+- **Generated OpenAPI documents a capability's declared `api.method`.** `plumbus generate` used the kind default (`get` for queries, `post` otherwise), so a capability the server routes as `PATCH` was documented as `post` and generated clients got a 404. The declared method now wins; the kind default applies only when none is declared.
+
+## 0.8.0-beta.5 — 2026-09-20
+
+### Fixed
+
+- Polling flow workers acquire one lease at a time, bound each cycle by the configured batch limit, and prevent overlapping polls from reclaiming waiting work.
+- Static capability and HTTP queued-job access checks precede input parsing, preventing unauthorized schema disclosures. Input-aware hooks still receive parsed input.
+- `migrate apply` exits unsuccessfully on migration, preflight, database-selection, creation, and connection errors while preserving connection cleanup and JSON diagnostics.
+
 ## 0.8.0-beta.4 — 2026-09-17
 
 Repository tag `v0.8.0-beta.3` already pointed at the format-only commit and no `0.8.0-beta.3` package was published, so this increment is `beta.4`.
@@ -76,6 +100,28 @@ Repository tag `v0.8.0-beta.3` already pointed at the format-only commit and no
 - `WorkerPoolConfig.schedulePlanes` and `app/server.ts` `export const schedulePlanes`: tenant planes for the scheduler alone, for hosts that route tenant data themselves; flows, events and the outbox keep the pool plane.
 - The scheduler syncs and polls the pool only when a registered flow is scheduled on the spine, tolerates a plane it cannot resolve or read, and reports the driver's cause.
 
+## 0.7.4 — Unreleased
+
+- Bump agent wiring to v17 and add a packaged classification recipe covering explicit provider/model selection, defaults, thresholds, and cost recording. All agent formats link the recipe and decision provider instruction indexes; refresh existing apps with `plumbus init --patch --agent all`.
+
+- Let `ctx.ai.classify()` select a registered text or decision provider with optional `provider`/`model`. TypeSafe/Laya classification batches probability questions and returns labels meeting `threshold` (default 0.5), sharing decision validation, security, budgets, cancellation, and one `classify` cost record. Existing calls keep their generative default.
+
+- Audit 20 decision integration failure scenarios with 30 unit/integration/real-HTTP regression cases. Snapshot billing context and isolate ledger observers from caller results. Share one cost-record ID/timestamp between the tracker and persistence hook.
+
+- Add `ctx.ai.decide()` over the shared decision contract, with per-call cost/usage records, tenant/actor attribution, named definitions, security checks over state and questions, budgets, and cancellation forwarding.
+- Wire explicit `app/server.ts` decision registration and `app/decisions/` discovery into API and workers. Preserve decision feature flags through service wrappers and add decision responses to `mockAI`.
+- Reuse `onAICostRecorded` for successful and failed decision calls, preserving unknown cost as null and retaining known billed metadata after invalid provider answers.
+- Depend on `@plumbus/ai-decision@~0.2.2`; vendor adapters remain optional. Keep typecheck fixtures out of production compilation.
+
+## 0.7.2 — 2026-09-23
+
+- Add `claude-opus-5-5` standard pricing: $4 input, $0.20 cached input, $5 five-minute cache writes, and $20 output per million tokens, with no long-context surcharge. Rechecked earlier Opus rates against Anthropic's pricing on 2026-09-23.
+
+- Add standard pricing for `gpt-6-sol` ($2 input / $0.20 cached input / $10 output per MTok) and `gpt-6-luna` ($0.10 / $0.01 / $0.50), including cache writes and the full-request long-context premium above 272K input tokens. Verified against OpenAI documentation on 2026-09-23.
+
+- Support explicit same-call final-answer schema validation with native tools and forward the schema on OpenAI Chat Completions/Responses; malformed output is not retried.
+- Install alongside `@plumbus/chat@0.2.2` to use prompt-schema validation for structured custom-agent output. Existing core `0.7.x` peer ranges are unchanged.
+
 ## 0.7.1 — 2026-09-10
 
 ### Fixed

package/README.md

@@ -1,5 +1,7 @@
 # @plumbus/core
 
+Release notes: [changelog](./CHANGELOG.md) and [0.8 upgrade notes](../../docs/upgrading-core-0.8.md).
+
 **AI-native, contract-driven TypeScript application framework.**
 
 Define your application through six composable primitives — Capabilities, Entities, Events, Flows, Prompts, and Translations — and get deny-by-default security, advisory governance, audit trails, and managed AI integration out of the box. Optional companion packages extend the surface for partner APIs, MCP agents, chat, knowledge, UI generation, and browser extensions — install only what you need.
@@ -151,6 +153,7 @@ node_modules/@plumbus/core/instructions/
 ├── flows.md                       # Workflow steps and retry logic
 ├── prompts.md                     # Prompt content, system/description, model config
 ├── ai.md                          # ctx.ai operations, RAG, cost tracking
+├── ai-classification.md           # Provider/model selection, TypeSafe/Jev, Laya
 ├── translations.md                # i18n catalogs and ctx.translations
 ├── security.md                    # Access policies and tenant isolation
 ├── governance.md                  # Advisory rules and compliance
@@ -164,7 +167,9 @@ node_modules/@plumbus/core/instructions/
 └── upgrading-0.5-capabilities.md  # 0.5.x capability invocation migration
 ```
 
-Wire them up with `plumbus init --agent all`.
+Wire them up with `plumbus init --agent all`. After upgrading to core 0.7.4+ (0.8.0-beta.6+ in the 0.8 family), run
+`plumbus init --patch --agent all` for wiring v17. For classification, provider/model
+selection, or TypeSafe/Jev and Laya, start with [the classification recipe](instructions/ai-classification.md).
 
 ## Documentation