rc: 0.3.0 Trusted Effects candidate (do not publish)

.claude-plugin/marketplace.json

@@ -10,14 +10,14 @@
   "plugins": [
     {
       "name": "taskflow",
-      "description": "Multi-phase subagent orchestration for Codex: 19 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (codex-taskflow).",
+      "description": "Multi-phase subagent orchestration for Codex: 20 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/why_effect/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (codex-taskflow).",
       "source": "./packages/codex-taskflow/plugin",
       "category": "developer-tools",
       "homepage": "https://github.com/heggria/taskflow"
     },
     {
       "name": "claude-taskflow",
-      "description": "Multi-phase subagent orchestration for Claude Code: 19 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (claude-taskflow).",
+      "description": "Multi-phase subagent orchestration for Claude Code: 20 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/why_effect/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (claude-taskflow).",
       "source": "./packages/claude-taskflow/plugin",
       "category": "developer-tools",
       "homepage": "https://github.com/heggria/taskflow"

.github/workflows/ci.yml

@@ -34,6 +34,8 @@ jobs:
         run: pnpm install --frozen-lockfile --registry https://registry.npmjs.org/
       - name: Shared completion and process-tree tests
         run: node --conditions=development --experimental-strip-types --test packages/taskflow-core/test/runner-process.test.ts
+      - name: Project storage boundary tests
+        run: node --conditions=development --experimental-strip-types --test packages/taskflow-core/test/store.test.ts
 
   test:
     name: test (node ${{ matrix.node }})

.github/workflows/publish.yml

@@ -3,8 +3,9 @@ name: Publish & Release
 # Publishes all ten packages (taskflow-core, taskflow-mcp-core, taskflow-hosts,
 # taskflow-dsl, pi-taskflow, codex-taskflow, claude-taskflow, opencode-taskflow,
 # grok-taskflow, hermes-taskflow) to npmjs.com and creates a GitHub Release when a v* tag is
-# pushed (e.g. `git tag v0.2.0 && git push origin v0.2.0`). All ten workspace
-# versions must equal the tag.
+# pushed (e.g. `git tag v0.3.0-beta.1 && git push origin v0.3.0-beta.1`). All ten
+# publishable workspace versions must equal the tag. Stable tags use npm's
+# `latest` channel; prerelease tags such as `v0.3.0-beta.1` use `beta`.
 
 on:
   push:
@@ -87,6 +88,10 @@ jobs:
             exit 1
           fi
           VERSION="${TAG#v}"
+          if [[ "$VERSION" == *-* && "$VERSION" != 0.3.0-beta.* ]]; then
+            echo "::error::Only 0.3.0-beta.* prereleases are supported by this beta workflow (got $VERSION)"
+            exit 1
+          fi
           if grep -Fqx "## [$VERSION] — Unreleased" CHANGELOG.md; then
             echo "::error::CHANGELOG.md still marks $VERSION as Unreleased"
             exit 1
@@ -145,7 +150,7 @@ jobs:
           HERMES_PINNED="v$(node -e '
             const fs = require("fs");
             const text = fs.readFileSync("packages/hermes-taskflow/plugin/hermes.config.snippet.yaml", "utf8");
-            const match = text.match(/hermes-taskflow@(\d+\.\d+\.\d+)/);
+            const match = text.match(/hermes-taskflow@(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)/);
             if (!match) process.exit(2);
             process.stdout.write(match[1]);
           ')"
@@ -162,6 +167,19 @@ jobs:
         # pre-publishing name@version must never be mistaken for our release.
         run: |
           set -euo pipefail
+          VERSION="${GITHUB_REF_NAME#v}"
+          if [[ "$VERSION" == *-* ]]; then
+            NPM_TAG="${VERSION#*-}"
+            NPM_TAG="${NPM_TAG%%.*}"
+            RELEASE_PRERELEASE=true
+            if [ "$NPM_TAG" != "beta" ]; then
+              echo "::error::Prerelease $VERSION must publish with npm dist-tag beta, not $NPM_TAG"
+              exit 1
+            fi
+          else
+            NPM_TAG="latest"
+            RELEASE_PRERELEASE=false
+          fi
           tarball_for() {
             node -e '
               const fs = require("fs");
@@ -183,7 +201,7 @@ jobs:
               echo "::notice::$name@$version already published and verified — skipping"
             else
               echo "Publishing $name@$version"
-              npm publish "$tarball" --provenance --access public
+              npm publish "$tarball" --provenance --access public --tag "$NPM_TAG"
             fi
           }
           publish_one taskflow-core
@@ -280,8 +298,10 @@ jobs:
                 exit 1
                 ;;
             esac
-            if [ "$RELEASE_DRAFT" != "false" ] || [ "$RELEASE_PRERELEASE" != "false" ]; then
-              echo "::error::Existing release must be published and non-prerelease (draft=$RELEASE_DRAFT, prerelease=$RELEASE_PRERELEASE)"
+            EXPECTED_PRERELEASE="false"
+            if [[ "$VERSION" == *-* ]]; then EXPECTED_PRERELEASE="true"; fi
+            if [ "$RELEASE_DRAFT" != "false" ] || [ "$RELEASE_PRERELEASE" != "$EXPECTED_PRERELEASE" ]; then
+              echo "::error::Existing release has wrong draft/prerelease state (draft=$RELEASE_DRAFT, prerelease=$RELEASE_PRERELEASE, expected prerelease=$EXPECTED_PRERELEASE)"
               exit 1
             fi
             echo "::notice::Release $GITHUB_REF_NAME already exists with a verified target; skipping creation"
@@ -294,10 +314,14 @@ jobs:
             exit 1
           fi
 
-          gh release create "$GITHUB_REF_NAME" \
-            --notes-file /tmp/release-notes.md \
-            --title "v$VERSION" \
-            --target "$TAG_COMMIT" \
+          RELEASE_ARGS=(
+            "$GITHUB_REF_NAME"
+            --notes-file /tmp/release-notes.md
+            --title "v$VERSION"
+            --target "$TAG_COMMIT"
             --verify-tag
+          )
+          if [[ "$VERSION" == *-* ]]; then RELEASE_ARGS+=(--prerelease); fi
+          gh release create "${RELEASE_ARGS[@]}"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.grok-plugin/marketplace.json

@@ -8,7 +8,7 @@
   "plugins": [
     {
       "name": "taskflow",
-      "description": "Multi-phase subagent orchestration for Grok Build: 19 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (grok-taskflow).",
+      "description": "Multi-phase subagent orchestration for Grok Build: 20 taskflow_* MCP tools (run/runs/resume/version/list/show/verify/compile/lint/plan/analytics/peek/trace/replay/why_stale/why_effect/recompute/reconcile_workspace/save/search) plus a routing skill. Background runs support status/wait/cancel; compile returns SVG + text outline. The server runs via npx (grok-taskflow).",
       "source": {
         "type": "local",
         "path": "./packages/grok-taskflow/plugin"

CHANGELOG.md

@@ -2,7 +2,38 @@
 
 All notable changes to taskflow are documented here. This project follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
 
-## [Unreleased]
+## [0.3.0-beta.1] — 2026-08-13
+
+> **Pre-release candidate:** `0.3.0-beta.1` is prepared for npm's `beta` dist-tag. It is **not GA**. The 0.3-C Control Plane remains a follow-on candidate track, not part of this beta's shipped product definition.
+
+### Added
+
+- **Trusted Effects MVP** (`packages/taskflow-core/src/effects/`):
+  - EffectIR (`EFFECT_KINDS`), PathRef reuse, SecretRef/ServiceRef (type-only fail-closed)
+  - closed TypeBox EffectIR + confidentiality/integrity source-to-sink validation
+  - resource-controlled FS transaction: durable snapshot → persistent lease → journal intent/permit → stage → Commit or Restore+Reject
+  - declaration-only bridge in `effects/runtime-apply.ts`; no second changeset/gateway authority
+  - ledger-backed `whyAuthorized` / `whyContext` / `whyEffect`
+- Optional phase `effects[]`; FlowIR translate/compile/hash include effects
+- Built-in `detectEffectsIssues` (category `effects`) + `effectsLintVerifier`
+- Every imperative phase fast path finalizes declared `fs.write` through the resource transaction; event-kernel-enabled runs use the same safe imperative path
+- Honest host baseline: `conformance/workspace/host-support-baseline.json`
+- Docs: `docs/internal/0.3.0-trusted-effects-mvp.md`, `0.3.0-agent-goal.md`, `0.3.0-ga-scoreboard.md`
+- Example: `examples/trusted-effects-write.json`
+- Tests: `test/effects*.test.ts`, `test/verify-effects.test.ts`
+
+### Fixed
+
+- Resource-bearing inline/saved/expanded/`ctx_spawn` children can no longer be skipped by parent cache or resume reuse.
+- Information-flow labels compose across nested flow boundaries; unresolved dynamic definitions remain tainted, malformed non-array `effects` fail admission/compile, and `why-effect` follows DAG dependencies.
+- Durable commit/abort results survive staging/lease cleanup faults, activation double faults release leases, and clean-terminal/aged-orphan before-images are garbage-collected.
+
+### Notes
+
+- SecretRef/ServiceRef have **no** vault/network backends in this cut.
+- Resolve-only is not an OS sandbox. Direct writes to declared targets are detected and restored; writes outside declared targets remain host-policy dependent.
+- Historical Control Plane (`feat/0.3.0`) is **not** this release definition.
+- **Beta release; not GA.**
 
 ## [0.2.10] — 2026-08-12