@williambeto/ai-workflow 2.9.0 → 2.9.2

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 ## [unreleased]
 
+## [2.9.2] - 2026-07-16
+
+### 🐛 Bug Fixes
+
+- Stop injecting agent-level `deny` and `ask` permissions into consumer
+  `opencode.jsonc` files, preserving the consumer's OpenCode permission defaults
+- Keep agent ownership and routing boundaries in AIWK instructions without
+  causing repeated per-project approval prompts
+
+### 🧪 Testing
+
+- Add regression coverage that rejects generated AIWK agent permission
+  overrides while preserving the managed agent registry
+
+## [2.9.1] - 2026-07-15
+
+### 🐛 Bug Fixes
+
+- Accept persisted Playwright snapshots from the scoped delivery as valid UI
+  evidence, regardless of their test-directory location
+- Recognize screenshots generated under `.evidence/visual/` and evaluate them
+  in the same `collect-evidence` execution that captured them
+- Avoid repeating `NOT_DELIVERED` as a second blocking diagnostic when an
+  earlier validation or quality gate already explains the failure
+
+### 🧪 Testing
+
+- Add regression coverage for Playwright snapshot discovery, generated visual
+  evidence ordering, missing required screenshots, and non-duplicated finalizer
+  diagnostics
+
 ## [2.9.0] - 2026-07-15
 
 ### 🚀 Features

package/bin/ai-workflow.js

@@ -34,7 +34,7 @@ import {
   QualityGuard,
   ValidationPlanner,
   parseDeliveryOutcomeClaim
-} from "../chunk-GLYX3HEY.js";
+} from "../chunk-PP42PB7M.js";
 import {
   DeliveryDecisionEngine
 } from "../chunk-H7GIKXFO.js";
@@ -779,36 +779,18 @@ var COMMANDS = {
 };
 function buildManagedConfig() {
   const agent = {};
-  const coreTaskPermissions = Object.fromEntries([
-    ["*", "deny"],
-    ...Object.keys(AGENTS).filter((name) => name !== "Atlas").map((name) => [name, "allow"])
-  ]);
-  const capabilityTaskPermissions = Object.fromEntries([
-    ["*", "deny"],
-    ...Object.keys(SUBAGENTS).map((name) => [name, "allow"])
-  ]);
   for (const [name, def] of Object.entries(AGENTS)) {
     agent[name] = {
       mode: def.mode,
       description: def.description,
-      prompt: `{file:./.ai-workflow/opencode/agents/${name.toLowerCase()}.md}`,
-      permission: {
-        ...name === "Atlas" ? { edit: "deny", bash: "ask" } : {},
-        ...name === "Astra" ? { edit: "allow" } : {},
-        task: name === "Atlas" ? coreTaskPermissions : capabilityTaskPermissions
-      }
+      prompt: `{file:./.ai-workflow/opencode/agents/${name.toLowerCase()}.md}`
     };
   }
   for (const [name, def] of Object.entries(SUBAGENTS)) {
     agent[name] = {
       mode: "subagent",
       description: def.description,
-      prompt: `{file:./.ai-workflow/opencode/skills/${def.skill}/SKILL.md}`,
-      permission: {
-        edit: "deny",
-        bash: "ask",
-        task: { "*": "deny" }
-      }
+      prompt: `{file:./.ai-workflow/opencode/skills/${def.skill}/SKILL.md}`
     };
   }
   const command = {};
@@ -3697,7 +3679,7 @@ var commandMap = {
     });
   },
   validate: async (_, flags) => {
-    const { runValidate } = await import("../validate-DDKN6ORS.js");
+    const { runValidate } = await import("../validate-7G3HBE2K.js");
     await runValidate({
       cwd: process.cwd(),
       taskSlug: flags.taskSlug,