workspai 0.78.0 → 0.79.0

package/docs/ci-workflows.md

@@ -13,7 +13,7 @@ Map of GitHub Actions workflows in this repository. Use this when editing CI to
 | Official generator smoke  | `.github/workflows/frontend-generator-smoke.yml`          | Contract-driven official-generator drift gate                                             |
 | Agent Framework matrix    | `.github/workflows/agent-framework-conformance.yml`       | Affected-family Linux PR gate plus manual twelve-lane release qualification and admission |
 | Agent Framework discovery | `.github/workflows/agent-framework-version-discovery.yml` | Weekly PyPI/NuGet candidate report; no commit, PR, or contract rewrite                    |
-| Model Gateway matrix      | `.github/workflows/model-gateway-qualification.yml`       | Three-OS generated-project and lifecycle qualification; manual fast mode stays on Linux |
+| Model Gateway matrix      | `.github/workflows/model-gateway-qualification.yml`       | Three-OS generated-project and lifecycle qualification; manual fast mode stays on Linux   |
 | Model Gateway discovery   | `.github/workflows/model-gateway-version-discovery.yml`   | Weekly npm/PyPI/GitHub candidate report; no baseline write, commit, or PR                 |
 | Security                  | `.github/workflows/security.yml`                          | Path-aware scanning plus the always-resolved `Security Gate`                              |
 | Manual npm release        | `.github/workflows/release-npm-manual.yml`                | Maintainer-only release gate and publish workflow                                         |
@@ -139,7 +139,7 @@ Validate or preview the current CLI announcement locally:
 npm --workspace workspai run check:release-announcement
 npm --workspace workspai run release:announcement -- \
   --product workspai-cli \
-  --tag v0.78.0 \
+  --tag v0.79.0 \
   --markdown-output /tmp/workspai-discord-announcement.md
 ```
 

package/docs/commands-reference.md

@@ -278,11 +278,12 @@ See [Canonical-first agent entry](./agent-entry.md).
 
 `agent framework` is the governed bridge between Workspai evidence and an
 agent runtime. `list` exposes every built-in adapter and its release-admission
-state. In this CLI version Microsoft Python `1.18.0` and .NET `1.21.0` remain
-`preview`. OpenAI Agents SDK Python `0.22.2` and TypeScript `0.18.0` are
-labeled `stable`. Google ADK Python `2.9.2` and TypeScript `2.1.0` remain
-labeled `preview` and are admitted for Create and Attach by their complete
-Linux, macOS, and Windows evidence. Create and Attach require the reviewed v2 release inventory,
+state. In this CLI version Microsoft Python `1.19.0` and .NET `1.22.0` remain
+`preview`. OpenAI Agents SDK Python `0.22.3` and TypeScript `0.18.0` are
+labeled `stable`. Google ADK Python `2.10.0` and TypeScript `2.1.0` remain
+labeled `preview`. All six current baselines are admitted by the complete
+Linux, macOS, and Windows evidence from Agent Framework Adapter Matrix run 88.
+Create and Attach require the reviewed v2 release inventory,
 whose manifest, framework baseline, runtime, and platform claims were promoted
 from the Linux, macOS, and Windows release matrix. Semantic implementation
 digests remain audit provenance rather than runtime authorization. `plan`
@@ -292,13 +293,13 @@ selects `python`, `dotnet`, or `node`. `--framework` selects the independent
 framework id when more than one admitted adapter shares that runtime.
 `attach` shows that plan and requires an
 interactive confirmation or explicit `--yes` before granting the filesystem
-effect and writing an isolated `agents/<name>` directory. `create project
-agent.microsoft.python|dotnet` uses the same admitted lifecycle for a new
-project: it registers the project, plans against a Model baseline, writes the
-nested runtime, then re-observes Model/Graph before it claims Intelligence is
-sealed. `create project agent.openai.python|typescript` uses the same admitted
-lifecycle. `create project agent.google-adk.python|typescript` uses the same
-admitted lifecycle. Dependency installation, credentials, generated-code execution, and
+effect and writing an isolated `agents/<name>` directory. When its selected
+baseline is admitted, `create project agent.microsoft.python|dotnet` uses the
+same governed lifecycle for a new project: it registers the project, plans
+against a Model baseline, writes the nested runtime, then re-observes
+Model/Graph before it claims Intelligence is sealed. The OpenAI and Google ADK
+Create kits use the same admission-governed lifecycle. Dependency installation,
+credentials, generated-code execution, and
 model provider calls are never implied by that approval. `apply` is the
 automation counterpart for a plan that was separately authorized with
 `change authorize`. Any adapter, version, manifest, runtime, or platform drift

package/docs/create-planner-capabilities.md

@@ -45,7 +45,7 @@ by Workspai and then registered in Workspace Intelligence:
 - Astro: `npm create astro@latest <name>`
 - SvelteKit: `npx sv@latest create <name>`
 - Tauri: `npm create tauri-app@latest <name> -- --template vanilla-ts`
-- Electron Forge: `npx create-electron-app@latest <name> --template=vite-typescript`
+- Electron Forge: `npx create-electron-app@latest <name> --template vite --typescript`
 - VS Code Extension: `npx --package yo@latest --package generator-code@latest -- yo code <name> ...`
 - Laravel: `composer create-project --no-interaction --prefer-dist --stability=stable laravel/laravel <name>`
 

package/docs/creating-workspaces-and-projects.md

@@ -391,22 +391,24 @@ project metadata and performs the selected workspace registration.
 
 ## Agent Framework kits
 
-| Kit                      | Runtime | Tested baseline | Layout |
-| ------------------------ | ------- | --------------- | ------ |
-| `agent.microsoft.python` | Python  | `agent-framework-core` `1.18.0`, Foundry `1.13.0`, `azure-identity` `1.25.3` | Isolated `agents/<instance>/` with `pyproject.toml`, credentialless `unittest`, and `.env.example` |
-| `agent.microsoft.dotnet` | .NET    | `Microsoft.Agents.AI` `1.21.0`, Foundry `1.21.0-preview.260911.1` | Isolated `agents/<instance>/` with the executable project plus a dedicated test project |
-| `agent.openai.python` | Python | `openai-agents` `0.22.2` | Isolated `agents/<instance>/` with pip-editable `pyproject.toml`, credentialless `unittest`, and `.env.example` |
-| `agent.openai.typescript` | Node.js | `@openai/agents` `0.18.0`, `zod` `4.6.5` | Isolated `agents/<instance>/` with `package.json`, credentialless `node:test`, and `.env.example` |
-| `agent.google-adk.python` | Python | `google-adk` `2.9.2` | Isolated `agents/<instance>/` with pip-editable `pyproject.toml`, credentialless `unittest`, and provider profiles `gemini-api` / `vertex-ai`. Preview and release-admitted. |
-| `agent.google-adk.typescript` | Node.js | `@google/adk` `2.1.0`, `zod` `4.6.5` | Isolated `agents/<instance>/` with `package.json`, credentialless `node:test`, and provider profiles `gemini-api` / `vertex-ai`. Preview, release-admitted, and independent from the Python runtime. |
-
-Interactive `workspai create` shows these kits under **AI Agent** after
-reviewed release admission. Agent kits require Workspace governance and therefore do not
-accept `--no-workspace`. Optional `--agent-name` names the instance directory
-(default `primary`). They do not install dependencies, call a model, or store
-credentials. Exact versions are promoted only after the full Linux, macOS, and
-Windows conformance matrix passes. Weekly registry discovery is report-only; it
-cannot rewrite these pins.
+| Kit                           | Runtime | Tested baseline                                                              | Layout                                                                                                                                                                                               |
+| ----------------------------- | ------- | ---------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `agent.microsoft.python`      | Python  | `agent-framework-core` `1.19.0`, Foundry `1.13.1`, `azure-identity` `1.25.3` | Isolated `agents/<instance>/` with `pyproject.toml`, credentialless `unittest`, and `.env.example`. Preview and release-admitted.                                                                    |
+| `agent.microsoft.dotnet`      | .NET    | `Microsoft.Agents.AI` `1.22.0`, Foundry `1.22.0-preview.260918.1`            | Isolated `agents/<instance>/` with the executable project plus a dedicated test project. Preview and release-admitted.                                                                               |
+| `agent.openai.python`         | Python  | `openai-agents` `0.22.3`                                                     | Isolated `agents/<instance>/` with pip-editable `pyproject.toml`, credentialless `unittest`, and `.env.example`. Stable and release-admitted.                                                        |
+| `agent.openai.typescript`     | Node.js | `@openai/agents` `0.18.0`, `zod` `4.6.5`                                     | Isolated `agents/<instance>/` with `package.json`, credentialless `node:test`, and `.env.example`                                                                                                    |
+| `agent.google-adk.python`     | Python  | `google-adk` `2.10.0`                                                        | Isolated `agents/<instance>/` with pip-editable `pyproject.toml`, credentialless `unittest`, and provider profiles `gemini-api` / `vertex-ai`. Preview and release-admitted.                         |
+| `agent.google-adk.typescript` | Node.js | `@google/adk` `2.1.0`, `zod` `4.6.5`                                         | Isolated `agents/<instance>/` with `package.json`, credentialless `node:test`, and provider profiles `gemini-api` / `vertex-ai`. Preview, release-admitted, and independent from the Python runtime. |
+
+Interactive `workspai create` shows every published kit under **AI Agent** and
+labels kits whose current baseline awaits release admission. Visibility is not
+authorization: scaffolding remains blocked until the exact baseline has
+reviewed evidence. Agent kits require Workspace governance and therefore do
+not accept `--no-workspace`. Optional `--agent-name` names the instance
+directory (default `primary`). They do not install dependencies, call a model,
+or store credentials. Exact versions are promoted only after the full Linux,
+macOS, and Windows conformance matrix passes. Weekly registry discovery is
+report-only; it cannot rewrite these pins.
 
 Create does not emit an empty root `pyproject.toml` or `.csproj`. The nested
 instance is the only Workspace Run unit. After Create, Model and Graph already
@@ -423,17 +425,17 @@ independent proof for this scaffold. See
 
 ## AI Gateway kits
 
-| Kit | Runtime | Tested baseline | Layout |
-| --- | --- | --- | --- |
-| `gateway.openrouter.typescript` | Node.js | `@openrouter/sdk` `1.3.11`, TypeScript `5.9.3`, `@types/node` `22.20.3` | Server-owned OpenRouter Client SDK starter with `gateway.policy.json`, credentialless `node:test`, and `.env.example` |
-| `gateway.openrouter.python` | Python | `openrouter` `1.2.11` | Server-owned OpenRouter Client SDK starter with `gateway.policy.json`, credentialless `unittest`, and `.env.example` |
+| Kit                             | Runtime | Tested baseline                                                         | Layout                                                                                                                |
+| ------------------------------- | ------- | ----------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| `gateway.openrouter.typescript` | Node.js | `@openrouter/sdk` `1.3.33`, TypeScript `5.9.3`, `@types/node` `22.20.3` | Server-owned OpenRouter Client SDK starter with `gateway.policy.json`, credentialless `node:test`, and `.env.example` |
+| `gateway.openrouter.python`     | Python  | `openrouter` `1.2.32`                                                   | Server-owned OpenRouter Client SDK starter with `gateway.policy.json`, credentialless `unittest`, and `.env.example`  |
 
 Interactive `workspai create` shows these kits under **AI Gateway** with the
 hint **Unified model access and routing**. A model identifier is runtime
 configuration, not a kit. Create does not install dependencies, call a model,
 or store credentials. Attach is not supported for Gateway in this release.
-The official Go Client SDK remains beta (`v0.8.11` on
-2026-09-21) and is not admitted. See
+The official Go Client SDK remains beta (`v0.8.32` on
+2026-09-28) and is not admitted. See
 [AI Gateway](./model-gateways.md).
 
 ## Desktop, extension, and additional backend generators

package/docs/model-gateways.md

@@ -23,10 +23,10 @@ These kits ship as source-ready. That is not Workspai release admission and
 does not label them `stable` or `qualified`. SDK `1.x` stability is an upstream
 classification, not a Workspai release gate.
 
-| Kit | Runtime | Official Client SDK | Reviewed |
-| --- | --- | --- | --- |
-| `gateway.openrouter.typescript` | Node.js `>=20` | `@openrouter/sdk` `1.3.11` | 2026-09-21 |
-| `gateway.openrouter.python` | Python `>=3.10` | `openrouter` `1.2.11` | 2026-09-21 |
+| Kit                             | Runtime         | Official Client SDK        | Reviewed   |
+| ------------------------------- | --------------- | -------------------------- | ---------- |
+| `gateway.openrouter.typescript` | Node.js `>=20`  | `@openrouter/sdk` `1.3.33` | 2026-09-28 |
+| `gateway.openrouter.python`     | Python `>=3.10` | `openrouter` `1.2.32`      | 2026-09-28 |
 
 Aliases: `openrouter.typescript`, `gateway.openrouter.ts`, `openrouter-typescript`,
 and the matching Python aliases. Bare `openrouter` is not an alias.
@@ -78,9 +78,9 @@ same commit before a Workspai release can present these kits as qualified.
 ## Intentionally unsupported languages
 
 The official Go SDK (`github.com/OpenRouterTeam/go-sdk`) was evaluated on
-2026-09-21. The upstream README classifies the current `0.x` line as beta and
+2026-09-28. The upstream README classifies the current `0.x` line as beta and
 warns that breaking changes may ship in minor releases. proxy.golang.org
-reported `v0.8.11`. Go is excluded from the stable Create surface until
+reported `v0.8.32`. Go is excluded from the stable Create surface until
 upstream classifies a release line as stable.
 
 The OpenRouter Agent SDK (`@openrouter/agent`) belongs to the agent-runtime
@@ -106,22 +106,22 @@ Routing and privacy policy live in source-controlled `gateway.policy.json`.
 Field names match the pinned SDK for that language. Unknown fields are rejected
 fail-closed in both languages. Supported controls:
 
-| Official field | TypeScript policy | Python policy | Validation |
-| --- | --- | --- | --- |
-| model fallbacks | `models` | `models` | unique non-empty strings; must not repeat `OPENROUTER_MODEL` |
-| `allowFallbacks` | `allowFallbacks` | `allow_fallbacks` | boolean when present |
-| `order` / `only` / `ignore` | same camelCase | same snake_case | unique non-empty strings; `only`∩`ignore` empty; `order` must not include ignored providers |
-| `sort` | string or `{ by, partition }` | string or `{ by, partition }` | `price`/`throughput`/`latency`/`exacto`; `partition` is `model` or `none` |
-| `quantizations` | camelCase list | snake_case list | pinned SDK enum values |
-| `requireParameters` | `requireParameters` | `require_parameters` | boolean when present |
-| `zdr` | `zdr` | `zdr` | boolean; cannot combine with `dataCollection`/`data_collection` `allow` |
-| `dataCollection` | `dataCollection` | `data_collection` | `allow` or `deny` |
-| `enforceDistillableText` | `enforceDistillableText` | `enforce_distillable_text` | boolean when present; both pinned SDKs expose this field |
-| `maxPrice` | `maxPrice` | `max_price` | object with `prompt`/`completion`/`request`/`image`/`audio` as non-negative numeric strings that remain finite after numeric interpretation |
-| `preferredMinThroughput` | number or `{ p50, p75, p90, p99 }` | same | finite non-negative numbers |
-| `preferredMaxLatency` | number or `{ p50, p75, p90, p99 }` | same | finite non-negative numbers |
-| timeout | `timeoutMs` | `timeout_ms` | integer 1–600000; env overrides with a digit string |
-| attribution | `httpReferer`, `appTitle` | `http_referer`, `x_open_router_title` | strings when present |
+| Official field              | TypeScript policy                  | Python policy                         | Validation                                                                                                                                  |
+| --------------------------- | ---------------------------------- | ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
+| model fallbacks             | `models`                           | `models`                              | unique non-empty strings; must not repeat `OPENROUTER_MODEL`                                                                                |
+| `allowFallbacks`            | `allowFallbacks`                   | `allow_fallbacks`                     | boolean when present                                                                                                                        |
+| `order` / `only` / `ignore` | same camelCase                     | same snake_case                       | unique non-empty strings; `only`∩`ignore` empty; `order` must not include ignored providers                                                 |
+| `sort`                      | string or `{ by, partition }`      | string or `{ by, partition }`         | `price`/`throughput`/`latency`/`exacto`; `partition` is `model` or `none`                                                                   |
+| `quantizations`             | camelCase list                     | snake_case list                       | pinned SDK enum values                                                                                                                      |
+| `requireParameters`         | `requireParameters`                | `require_parameters`                  | boolean when present                                                                                                                        |
+| `zdr`                       | `zdr`                              | `zdr`                                 | boolean; cannot combine with `dataCollection`/`data_collection` `allow`                                                                     |
+| `dataCollection`            | `dataCollection`                   | `data_collection`                     | `allow` or `deny`                                                                                                                           |
+| `enforceDistillableText`    | `enforceDistillableText`           | `enforce_distillable_text`            | boolean when present; both pinned SDKs expose this field                                                                                    |
+| `maxPrice`                  | `maxPrice`                         | `max_price`                           | object with `prompt`/`completion`/`request`/`image`/`audio` as non-negative numeric strings that remain finite after numeric interpretation |
+| `preferredMinThroughput`    | number or `{ p50, p75, p90, p99 }` | same                                  | finite non-negative numbers                                                                                                                 |
+| `preferredMaxLatency`       | number or `{ p50, p75, p90, p99 }` | same                                  | finite non-negative numbers                                                                                                                 |
+| timeout                     | `timeoutMs`                        | `timeout_ms`                          | integer 1–600000; env overrides with a digit string                                                                                         |
+| attribution                 | `httpReferer`, `appTitle`          | `http_referer`, `x_open_router_title` | strings when present                                                                                                                        |
 
 `exacto` is part of the pinned SDK `ProviderSort` enums, not a Workspai extension.
 Malformed JSON and wrong types raise `GatewayConfigurationError` before SDK
@@ -175,7 +175,7 @@ SDK `cancel()`. A cleanup failure does not replace the primary error or convert
 a successful completion into an error.
 
 The TypeScript starter forwards `AbortSignal` through `chat.send` options,
-including an already-aborted signal. Pinned `@openrouter/sdk` `1.3.11`
+including an already-aborted signal. Pinned `@openrouter/sdk` `1.3.33`
 `EventStream` extends `ReadableStream` and does not expose a dedicated `close()`.
 Cancellation is `ReadableStream` async-iterator `return()` → `cancel()`. If the
 stream has already errored, `cancel()` may be a no-op; the gateway still drops

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "workspai",
-  "version": "0.78.0",
+  "version": "0.79.0",
   "type": "module",
   "description": "Open-source workspace intelligence CLI for software systems: create, adopt, govern, verify, and align polyglot workspaces for humans, CI, IDEs, and AI agents.",
   "keywords": [

package/dist/analyze-X76YV667.js

@@ -1 +0,0 @@
-export{b as printAnalyzeReport,a as runAnalyze}from'./chunk-QMNJTI65.js';

package/dist/autopilot-release-6OV2FLRS.js

@@ -1 +0,0 @@
-export{b as AUTOPILOT_RELEASE_ALIAS_FILENAME,a as AUTOPILOT_RELEASE_LAST_RUN_FILENAME,c as runAutopilotRelease}from'./chunk-YHQK4S3H.js';

package/dist/workspace-knowledge-graph-snapshot-T6ZJGWLC.js

@@ -1 +0,0 @@
-export{a as readWorkspaceKnowledgeGraphSnapshot}from'./chunk-4AAXIWYY.js';

package/dist/workspace-run-2KBTMGG7.js

@@ -1 +0,0 @@
-export{a as resolveWorkspaceRunStageTimeoutMs,b as runWorkspaceStage}from'./chunk-QLHRGWUW.js';export{a as WORKSPACE_RUN_LAST_REPORT_FILENAME}from'./chunk-P5LI5DL3.js';