@williambeto/ai-workflow 2.7.1 → 2.8.1

package/CHANGELOG.md

@@ -1,5 +1,74 @@
 ## [unreleased]
 
+## [2.8.1] - 2026-07-14
+
+### 🐛 Bug Fixes
+
+- Route natural workspace mutations to Astra instead of stopping after a
+  specialist prints code
+- Keep Phoenix limited to bounded remediation of observed findings
+- Require execution-scoped repository changes and proportional validation for
+  successful workspace delivery
+- Preserve explicit read-only, preview, already-satisfied, clarification, and
+  non-delivery outcomes without manufacturing changes
+- Prevent natural phrases such as `next step` from being interpreted as a
+  Next.js stack request
+- Propagate observed OpenCode commands to the evidence ledger and derive test
+  actions from the delivered diff
+- Prevent duplicate finalization and require exactly one observed Astra
+  delegation in the OpenCode fallback path
+- Route mixed inspection-and-change requests to Astra whenever the request has
+  write intent
+- Allow read-only Git, `sed`, and `awk` inspection while continuing to block
+  mutations, and exclude ignored build artifacts from delivery deltas
+- Keep validation proportional for documentation, simple code, backend scripts,
+  and React applications while retaining blocking build requirements for UI
+
+### 🧪 Testing
+
+- Cover routing ownership, delivery outcomes, answer-only confinement, project
+  context compatibility, execution delta attribution, and generated OpenCode
+  permissions through reusable invariants
+- Keep pre-existing dirty work from satisfying delivery or test-action evidence
+- Validate the corrected workflow with a real GPT-5.6 Sol OpenCode delivery and
+  record GPT-5.3 Codex Spark medium as experimental after observed incomplete
+  delivery was correctly blocked
+
+### 📚 Documentation
+
+- Align Atlas, quickstart, ownership, runtime-flow, evidence, and skill
+  governance documentation with the natural-request delivery contract
+- Document the distinction between CLI-enforced gates and model-qualified
+  direct Atlas sessions
+
+## [2.8.0] - 2026-07-14
+
+### 🚀 Features
+
+- Add governed skill scaffolding, frontmatter linting, and contract tests
+- Introduce executable DEEP SDD checkpoints with hash-bound approval receipts
+- Add Orion technical-plan validation and Astra file-scope enforcement
+- Confirm high-risk OpenCode actor identity through machine-readable runtime evidence
+
+### 🐛 Bug Fixes
+
+- Preserve low- and medium-risk OpenCode graceful degradation behavior
+- Resolve packaged evidence schemas from the installed package root
+- Prevent metadata sentinels from being treated as Astra file mutations
+
+### 🧪 Testing
+
+- Cover external, missing, incompatible, duplicate, and concurrent workflow ledgers
+- Add real OpenCode consumer smoke coverage and actor-confirmation adapter tests
+- Enforce Node 20 consumer compatibility and Node 22 contributor validation
+
+### ⚙️ Miscellaneous Tasks
+
+- Add sequential release verification across build, tests, validation, packaging, and runtime smoke
+- Align CI quality gates with the supported Node toolchain
+
+## [2.7.1] - 2026-07-07
+
 ### 🚀 Features
 
 - *(adapters)* Harden Codex adapter with robust system boundaries

package/README.md

@@ -148,6 +148,7 @@ Agents are installed as prompts in your `.ai-workflow/agents/` directory. You ca
 | `npx aw collect-evidence` | Collect and compile delivery evidence to `EVIDENCE.json` |
 | `npx aw doctor` | Diagnose installation health |
 | `npx aw clean` | Remove all AIWK configuration from the project |
+| `npx aw skill create <name>` | Scaffold a workspace-local skill with valid frontmatter |
 
 ---
 
@@ -200,7 +201,7 @@ Everything is plain text — readable, auditable, and version-controlled.
 Beyond the 6 core agents, AIWK ships 25 domain skills that agents activate as context lenses when the request profile warrants it. You can also author your own:
 
 ```
-.ai-workflow/skills/
+.agents/skills/
 ├── architecture/
 ├── backend-development/
 ├── cyber-security/       # activated by Sage on audit tasks
@@ -246,7 +247,7 @@ Run the full validation suite before submitting a pull request:
 npm run validate
 ```
 
-All 22 quality gates must pass.
+All 23 quality gates must pass.
 
 ---