@williambeto/ai-workflow 2.9.4 → 2.9.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,20 @@
1
1
  ## [unreleased]
2
2
 
3
+ ## [2.9.5] - 2026-07-17
4
+
5
+ ### 🛡️ Hardening
6
+
7
+ - Declare the 17 required command-to-policy relationships through a
8
+ runtime-neutral canonical policy section
9
+ - Fail validation when required command policy references are missing,
10
+ duplicated, unknown, or unexpected
11
+
12
+ ### 🧪 Testing
13
+
14
+ - Add data-driven contract coverage for the complete policy reference map
15
+ - Verify referenced policies remain available in OpenCode installations and
16
+ Codex command skills
17
+
3
18
  ## [2.9.4] - 2026-07-16
4
19
 
5
20
  ### 🛡️ Hardening
@@ -31,6 +31,13 @@ Route user requests safely, proportionately, and securely according to the permi
31
31
  - Route workspace implementation to Astra, never directly to a skill-backed specialist.
32
32
  - Printed code is not a substitute for a requested repository change.
33
33
 
34
+ ## Canonical policies
35
+ Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
36
+ - `01-BRANCH_GATE.md`
37
+ - `03-QUALITY_GATE.md`
38
+ - `05-AGENT_CONTRACT.md`
39
+ - `06-FINAL_EVIDENCE_CONTRACT.md`
40
+
34
41
  ## Allowed tools
35
42
  - classify request
36
43
  - evaluate routing permissions
@@ -32,6 +32,12 @@ Execute package publication or deployment securely after passing validation chec
32
32
  - Do not deploy if any validation check fails.
33
33
  - Do not claim deploy execution without verified deploy logs.
34
34
 
35
+ ## Canonical policies
36
+ Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
37
+ - `01-BRANCH_GATE.md`
38
+ - `06-FINAL_EVIDENCE_CONTRACT.md`
39
+ - `07-RELEASE_GATE.md`
40
+
35
41
  ## Allowed tools
36
42
  - execute deployment scripts
37
43
  - run environment smoke tests
@@ -31,6 +31,13 @@ Implement a small task with defined scope, verifying changes incrementally.
31
31
  - Do not claim implementation without validation evidence.
32
32
  - Treat the finalizer exit code and public status as authoritative.
33
33
 
34
+ ## Canonical policies
35
+ Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
36
+ - `01-BRANCH_GATE.md`
37
+ - `03-QUALITY_GATE.md`
38
+ - `06-FINAL_EVIDENCE_CONTRACT.md`
39
+ - `PROCEDURE_UI_CHECKLIST.md`
40
+
34
41
  ## Allowed tools
35
42
  - read files
36
43
  - edit source files
@@ -32,6 +32,12 @@ Coordinate the release process, verifying package status and generating release
32
32
  - Do not push to remote, publish to npm, or create git tags without user approval.
33
33
  - Do not claim release readiness without release evidence document.
34
34
 
35
+ ## Canonical policies
36
+ Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
37
+ - `01-BRANCH_GATE.md`
38
+ - `06-FINAL_EVIDENCE_CONTRACT.md`
39
+ - `07-RELEASE_GATE.md`
40
+
35
41
  ## Allowed tools
36
42
  - read version configuration
37
43
  - update changelog
@@ -29,6 +29,12 @@ Execute validation checks and compile an evidence report showing quality status.
29
29
  - All validation commands must exit 0.
30
30
  - Do not claim validation success without evidence log.
31
31
 
32
+ ## Canonical policies
33
+ Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
34
+ - `03-QUALITY_GATE.md`
35
+ - `06-FINAL_EVIDENCE_CONTRACT.md`
36
+ - `PROCEDURE_UI_CHECKLIST.md`
37
+
32
38
  ## Allowed tools
33
39
  - execute test commands
34
40
  - run code linters
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@williambeto/ai-workflow",
3
- "version": "2.9.4",
3
+ "version": "2.9.5",
4
4
  "description": "AI Workflow Kit — OpenCode-first software delivery workflow with agents, commands, skills, validation, and evidence",
5
5
  "license": "MIT",
6
6
  "author": "José Willams",