codex-taskflow 0.2.8 → 0.2.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +31 -12
  2. package/package.json +5 -5
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  <div align="center">
2
2
 
3
- <img src="https://raw.githubusercontent.com/heggria/taskflow/main/assets/hero.png" alt="taskflow: compile, verify, and run multi-agent DAGs across five coding-agent hosts" width="100%">
3
+ <img src="https://raw.githubusercontent.com/heggria/taskflow/main/assets/hero.png" alt="taskflow: compile, verify, and run multi-agent DAGs across six coding-agent hosts" width="100%">
4
4
 
5
5
  <br />
6
6
 
@@ -8,12 +8,12 @@
8
8
  [![CI](https://img.shields.io/github/actions/workflow/status/heggria/taskflow/ci.yml?branch=main&style=flat-square&label=CI)](https://github.com/heggria/taskflow/actions/workflows/ci.yml)
9
9
  [![Node](https://img.shields.io/badge/node-%E2%89%A522.19-35C99A?style=flat-square)](https://nodejs.org)
10
10
  [![License](https://img.shields.io/badge/license-MIT-35C99A?style=flat-square)](https://github.com/heggria/taskflow/blob/main/LICENSE)
11
- [![Hosts](https://img.shields.io/badge/hosts-5-7775FF?style=flat-square)](#install-on-your-host)
11
+ [![Hosts](https://img.shields.io/badge/hosts-6-7775FF?style=flat-square)](#install-on-your-host)
12
12
  [![Tests](https://img.shields.io/badge/tests-1%2C500%2B-7775FF?style=flat-square)](#built-to-survive-real-work)
13
13
 
14
14
  **English** · [简体中文](https://github.com/heggria/taskflow/blob/main/README.zh-CN.md)
15
15
 
16
- [Install](#install-on-your-host) · [Quickstart](#60-second-start) · [What's new in 0.2.8](#028-review-then-confirm) · [0.2 compiler turn](#02-is-the-compiler-turn) · [Docs](https://heggria.github.io/taskflow/en/docs) · [Examples](https://github.com/heggria/taskflow/blob/main/examples)
16
+ [Install](#install-on-your-host) · [Quickstart](#60-second-start) · [What's new in 0.2.9](#029-hermes-agent--verify-parity) · [0.2 compiler turn](#02-is-the-compiler-turn) · [Docs](https://heggria.github.io/taskflow/en/docs) · [Examples](https://github.com/heggria/taskflow/blob/main/examples)
17
17
 
18
18
  </div>
19
19
 
@@ -25,7 +25,7 @@
25
25
 
26
26
  It runs on the coding agent you already use:
27
27
 
28
- **Pi · Codex · Claude Code · OpenCode · Grok Build**
28
+ **Pi · Codex · Claude Code · OpenCode · Grok Build · Hermes Agent**
29
29
 
30
30
  ```text
31
31
  JSON or .tf.ts
@@ -54,7 +54,7 @@ Built-in subagent tools are excellent for one turn. The moment the work branches
54
54
  | **Intermediate output** | Floods the host context | **Stays isolated in the runtime** |
55
55
  | **Failure** | Start over or reconstruct state | **Resume from persisted phase state** |
56
56
  | **Changed input** | Re-run broadly | **Explain staleness and re-run the affected frontier** |
57
- | **Portability** | Coupled to one agent | **One JSON contract across five hosts** |
57
+ | **Portability** | Coupled to one agent | **One JSON contract across six hosts** |
58
58
 
59
59
  The trade is deliberate: less arbitrary orchestration code, more **verifiability, observability, recovery, and reuse**.
60
60
 
@@ -131,7 +131,7 @@ Save it as `.pi/taskflows/audit-api.json`, then run:
131
131
  /tf:audit-api dir=src/api
132
132
  ```
133
133
 
134
- On Codex, Claude Code, OpenCode, and Grok Build, run the same saved definition by name through `taskflow_run`. For long DAGs, use `mode: "background"`, then manage the durable run with `taskflow_runs` (`list` / `status` / `wait` / `cancel`); list output reports active concurrency and can filter `running` or `terminal` runs.
134
+ On Codex, Claude Code, OpenCode, Grok Build, and Hermes Agent, run the same saved definition by name through `taskflow_run`. For long DAGs, use `mode: "background"`, then manage the durable run with `taskflow_runs` (`list` / `status` / `wait` / `cancel`); list output reports active concurrency and can filter `running` or `terminal` runs.
135
135
 
136
136
  [Follow the full quickstart →](https://heggria.github.io/taskflow/en/docs/getting-started)
137
137
 
@@ -152,6 +152,12 @@ This is real output from a Pi run—not a mock dashboard:
152
152
 
153
153
  The layout **is** the DAG. Parallel rails expose concurrency; long edges expose dependencies; the gate explains why downstream work stopped. No separate control plane is required to understand the run.
154
154
 
155
+ ## 0.2.9: Hermes Agent + verify parity
156
+
157
+ Taskflow now ships on **Hermes Agent** as `hermes-taskflow`, bringing the same MCP control plane to a sixth host. Hermes children run with an ephemeral home, explicit toolsets, cwd-confined local reads, provider-only credential material, and an explicit opt-in for mutating `--yolo` phases.
158
+
159
+ Pi's advertised `/tf verify <name>` command now matches the tool surface, including saved flow names containing spaces. Project discovery also stops at canonical home/temp boundaries, so ambient `/tmp/.pi` state cannot become a project by accident. [Full 0.2.9 notes →](https://github.com/heggria/taskflow/blob/main/CHANGELOG.md#029--2026-08-11)
160
+
155
161
  ## 0.2.8: review, then confirm
156
162
 
157
163
  Pi approvals now separate **selection** from **commit**. Choose Reject, Edit guidance, or Approve with `R` / `E` / `A`, arrows, or Tab; press Enter to confirm. The safe default is Reject, and Escape or Ctrl-C still rejects immediately.
@@ -349,7 +355,7 @@ claude plugin install claude-taskflow@taskflow
349
355
 
350
356
  ```bash
351
357
  opencode mcp add taskflow -- \
352
- npx -y -p opencode-taskflow@0.2.8 opencode-taskflow-mcp
358
+ npx -y -p opencode-taskflow@0.2.9 opencode-taskflow-mcp
353
359
  ```
354
360
 
355
361
  [OpenCode guide →](https://heggria.github.io/taskflow/en/docs/guides/opencode)
@@ -358,18 +364,31 @@ opencode mcp add taskflow -- \
358
364
 
359
365
  ```bash
360
366
  grok mcp add taskflow -- \
361
- npx -y -p grok-taskflow@0.2.8 grok-taskflow-mcp
367
+ npx -y -p grok-taskflow@0.2.9 grok-taskflow-mcp
362
368
  ```
363
369
 
364
370
  Grok Build support is new in 0.2. Its CLI stream does not report token/cost usage, so budget-declaring flows are rejected rather than silently running without enforcement.
365
371
 
366
372
  [Grok Build guide →](https://heggria.github.io/taskflow/en/docs/guides/grok-build)
367
373
 
374
+ ### Hermes Agent
375
+
376
+ ```bash
377
+ hermes mcp add taskflow --command npx --args -y -p hermes-taskflow@0.2.9 hermes-taskflow-mcp
378
+ # Prefer env in config.yaml (not CLI --env after args — can be stuffed into argv):
379
+ # mcp_servers.taskflow.env.PI_TASKFLOW_HERMES_UNSAFE_YOLO: "1" # mutating only
380
+ ```
381
+
382
+ Hermes quiet mode does not report token/cost usage, so budget-declaring flows are rejected rather than silently running without enforcement. Child agents use an ephemeral HERMES_HOME with only non-secret model/fallback routing, a routed-provider-only inference `auth.json`, and provider-allowlisted dotenv keys; parent MCP, skills, memory, sessions, and rules are not inherited. RO local-read → `taskflow_readonly_files`; else `taskflow_model_only` (never omit `-t`).
383
+
384
+ [Hermes guide →](https://github.com/heggria/taskflow/blob/main/docs/hermes-mcp.md)
385
+
386
+
368
387
  ## Built to survive real work
369
388
 
370
389
  <div align="center">
371
390
 
372
- **9 packages** · **5 hosts** · **12 phase types** · **18 built-in agents** · **1,500+ tests** · **MIT**
391
+ **10 packages** · **6 hosts** · **12 phase types** · **18 built-in agents** · **1,500+ tests** · **MIT**
373
392
 
374
393
  </div>
375
394
 
@@ -381,10 +400,10 @@ Grok Build support is new in 0.2. Its CLI stream does not report token/cost usag
381
400
  taskflow-hosts ─────┼─ codex-taskflow
382
401
  ├─ claude-taskflow
383
402
  ├─ opencode-taskflow
384
- └─ grok-taskflow
403
+ └─ grok-taskflow / hermes-taskflow
385
404
  ```
386
405
 
387
- `taskflow-core` is host-neutral and imports no host SDK. `taskflow-mcp-core` implements stdio JSON-RPC without an MCP SDK dependency; `taskflow-hosts` owns the shared host process runners. The four MCP delivery packages bind both layers (and core), while Pi keeps its native adapter.
406
+ `taskflow-core` is host-neutral and imports no host SDK. `taskflow-mcp-core` implements stdio JSON-RPC without an MCP SDK dependency; `taskflow-hosts` owns the shared host process runners. The five MCP delivery packages bind both layers (and core), while Pi keeps its native adapter.
388
407
 
389
408
  The test suite covers orchestration semantics, persistence and file-lock races, cache freshness, path traversal, dynamic graph hardening, cancellation, budgets, all 12 phase kinds, FlowIR/replay/recompute, TypeScript DSL erasure, host argv contracts, MCP servers, and packed consumer imports.
390
409
 
@@ -396,7 +415,7 @@ The test suite covers orchestration semantics, persistence and file-lock races,
396
415
  | [Concepts](https://heggria.github.io/taskflow/en/docs/concepts/) | DAGs, isolation, verification, resume, shared context |
397
416
  | [Syntax](https://heggria.github.io/taskflow/en/docs/syntax/) | Phase fields, control flow, budgets, caching, scorers |
398
417
  | [Compiler & Runtime](https://heggria.github.io/taskflow/en/docs/compiler-runtime/) | TypeScript DSL, FlowIR, replay, recompute, background runs |
399
- | [Host Guides](https://heggria.github.io/taskflow/en/docs/guides/) | Pi, Codex, Claude Code, OpenCode, and Grok setup |
418
+ | [Host Guides](https://heggria.github.io/taskflow/en/docs/guides/) | Pi, Codex, Claude Code, OpenCode, Grok, and Hermes setup |
400
419
  | [Reference](https://heggria.github.io/taskflow/en/docs/reference/) | Commands, shorthand, and exact tool surfaces |
401
420
  | [Showcase](https://heggria.github.io/taskflow/en/docs/showcase/) | Real flows and case studies |
402
421
  | [0.2.0 Frontier Assessment](https://github.com/heggria/taskflow/blob/main/docs/taskflow-0.2.0-frontier-assessment.zh-CN.md) | Independent, evidence-based technical assessment (Chinese) |
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "codex-taskflow",
3
- "version": "0.2.8",
4
- "description": "Run taskflow on OpenAI Codex: a Codex subagent runner plus an MCP server (and a plug-and-play Codex plugin) that exposes the taskflow_* tools to Codex users.",
3
+ "version": "0.2.9",
4
+ "description": "Run taskflow on OpenAI Codex: the npm tarball provides the Codex subagent runner and MCP server; the plugin is distributed through the repository marketplace.",
5
5
  "keywords": [
6
6
  "codex",
7
7
  "codex-cli",
@@ -48,9 +48,9 @@
48
48
  "access": "public"
49
49
  },
50
50
  "dependencies": {
51
- "taskflow-core": "0.2.8",
52
- "taskflow-hosts": "0.2.8",
53
- "taskflow-mcp-core": "0.2.8"
51
+ "taskflow-core": "0.2.9",
52
+ "taskflow-hosts": "0.2.9",
53
+ "taskflow-mcp-core": "0.2.9"
54
54
  },
55
55
  "scripts": {
56
56
  "build": "rm -rf dist && tsc -p tsconfig.build.json && node ../../scripts/copy-readme.mjs codex-taskflow"