v1.3.3-beta

Workbench v1.3.3-beta

This is a public prerelease snapshot of Workbench v1.3.3-beta.

What's included

• IDE MCP adapters (VS Code, JetBrains, Cursor, Windsurf, Zed)
• Universal MCP release validation
• External delegation protocol and adapter
• SLO health, runtime tunnel telemetry, conversation efficiency
• Execution selection and executor parity improvements
• Handoff projection and prompt packet compiler
• Run budget and resume workflow improvements
• Various CLI and web stability improvements

Notes

• This is a prerelease. Production use is not recommended.
• See CHANGELOG and commits for full details.

ProChat Workbench Local v1.3.1-beta

ProChat Workbench v1.3.1-beta

Release channel: public prerelease. Publication uses the deterministic public
snapshot in a separate checkout of prochattools/workbench; private repository
history is never pushed to the public repository.

Overview

v1.3.1-beta adds the generic controlled n8n workflow migration capability to the existing five-operation Custom GPT surface. The capability is product-agnostic and keeps its policy, confirmation, persistence, and execution boundaries portable for a future native host.

Added

• Controlled migration requests support prepare, execute, and status phases for both apply and rollback modes.
• Workbench-owned grants bind the source, workflow, wrapper, approved artifact roots, limits, and maximum policy.
• Prepare returns an expiring, single-use confirmation token; execute requires the persisted operation ID and that token.
• Source/workflow leases, replay-safe candidate and rollback dispatch reservation, durable outcomes, readback reconciliation, and bounded automatic rollback prevent blind mutation retry.
• The existing runWorkbenchCommand GPT Action and generated OpenAPI schema expose only the strict nested migration contract and synthetic examples.
• The capability architecture is product-agnostic and native_ready_with_adapter_replacement.

Security

• No mutation authority is enabled by default, and this release includes no installation grant.
• Unknown request fields fail strict validation.
• Callers cannot supply an executable, argv, shell, environment, HTTP method, endpoint, credentials, wrapper operation, confirmation digest, dispatch authorization, or lease proof.
• Corrupt operation and dispatch persistence fails closed.
• Public results omit workflow payloads, credentials, confirmation digests, lease proofs, and dispatch authorization.

Release stabilization

• Expired migration leases now enter reconciliation without releasing mutation
  exclusivity or authorizing a second candidate or rollback invocation.
• Candidate and rollback recovery use one executor-compatible readback effect
  while preserving phase-specific evidence and deterministic terminal handling.
• MCP credentials authenticate only the five admitted MCP-forwarded action
  routes; unrelated action routes retain their existing GPT/device boundary.
• Mutation cancellation is treated as ambiguous_transport after dispatch or
  whenever dispatch timing cannot be proven, and mutation-capable calls are not
  retried automatically.
• Project-scoped MCP registration compares canonical command, working directory,
  arguments, and real entrypoint identity, including relative and symlinked
  forms, while preserving unrelated servers.
• The public snapshot includes every runtime or verifier dependency referenced by
  its exported package scripts. Provenance is commit-derived, file ordering is
  stable, and repeated exports from one commit are byte-identical.
• Full type, test, lint, build, contract, authentication, migration, lifecycle,
  public-scope, source-boundary, and frozen-install gates passed. Independent
  pre-landing review closed with no unresolved actionable findings.
• A clean isolated checkout of the generated public snapshot also passed frozen
  installation, Web build, workspace type-check, the exported test suite,
  noninteractive lint, lifecycle verification, and public-boundary validation.

Compatibility

• Existing n8n_workflow_export behavior is unchanged.
• Existing Workbench command kinds retain their behavior; the migration capability is the new strict n8n_workflow_migration command kind.
• Installations without a controlled migration grant remain safe and inactive.
• The Custom GPT surface remains exactly five operations; imported schemas should be refreshed from docs/openapi.chatgpt.json.

Activation note

The controlled migration capability is included but inactive by default. Each installation must explicitly configure a registered source, approved wrapper contract, and Workbench-owned capability grant before any mutation can occur.

Workbench MCP local release cutoff

The Codex-facing Workbench MCP bridge passed its local release cutoff on
2026-07-15. The detached-runtime defect was caused by agent and web inheriting
the restart shell's process group despite nohup and redirected output. Commit
d310604 replaces that path with fixed direct Node entrypoints, independent
process groups, atomic ownership metadata, PID-reuse-safe status/stop behavior,
bounded append logs, attempt-scoped cleanup, launch locking, and sustained
startup health.

The single authorized restart succeeded and the agent, relay, web, and unified
health remained healthy for four checks across 60 seconds with stable process
identities. Runtime version was 1.3.1-beta. Exactly one enabled
project-scoped stdio server named workbench was registered without changing
global Codex configuration or the existing guarded B1.0a server. MCP
initialization listed exactly five tools: getWorkbenchStatus,
readWorkbenchContext, applyWorkbenchFileChange,
commitWorkbenchChanges, and runWorkbenchCommand. The authenticated status
smoke test succeeded and produced caller-attributed audit evidence.

The result remains native_ready_with_adapter_replacement for a future native
macOS supervisor. Brain and Mind were unchanged and require no implementation
dependency for this cutoff. No controlled migration operation or confirmation
was created during stabilization, and no B1.0a, n8n, webhook, or fixture
operation was invoked. A fresh Workbench-dependent Codex task is required to
load the released MCP surface before any separately authorized follow-up work.

Upgrade instructions

Install with the repository lockfile, then run pnpm type-check, pnpm lint, pnpm test, pnpm verify:gpt-actions, and the migration capability verifiers. Re-import docs/openapi.chatgpt.json and apply the current Custom GPT instructions. Activation is a separate installation-controlled procedure and is not part of this release.

ProChat Workbench Local 1.2.13-beta

ProChat Workbench Local 1.2.13-beta

This is the first public prerelease of ProChat Workbench Local.

Licensing

ProChat Workbench Local is published under AGPL-3.0-only.

The public repository includes:

• LICENSE with the full GNU Affero General Public License v3 text;
• NOTICE.md with copyright and attribution notices;
• COMMERCIAL-LICENSING.md describing separate commercial/OEM licensing boundaries;
• TRADEMARKS.md describing trademark boundaries;
• SECURITY.md for vulnerability reporting.

Provenance

This release was generated from the private authoritative source using the deterministic public snapshot exporter.

• Public base before release: 8230c738ab00bb15533193ad09a357264c8d551c
• Public release commit: 901763eb385cb1b6ae18ecb4bea4fec5d206eaee
• Public tag: v1.2.13-beta
• Snapshot source commit: d2d0a0de2d99eee8487aabad842ff406fb2c0a70
• Public snapshot size: 245 files
• Public license: AGPL-3.0-only
• Automatic publishing: disabled

The repository includes PUBLIC-SOURCE.json and PUBLIC-FILES.json for source provenance and SHA-256 file hashes.

What changed

This release replaces the previous public tree with the validated public snapshot for Workbench Local.

• 10 files added
• 24 files modified
• 122 files removed
• 156 changed paths total

The cleanup removes private/internal reports, generated Graphify output, environment files, generated Shared artifacts, internal roadmap material, and legacy operational scripts that are not part of the Workbench Local public scope.

Installation and local use

Clone the repository and install dependencies with pnpm:

git clone https://github.com/prochattools/prochat-workbench.git
cd prochat-workbench
pnpm install --frozen-lockfile

Useful validation commands:

pnpm type-check
pnpm verify:command-runner
pnpm verify:packet-lifecycle
pnpm verify:gpt-actions
pnpm test:workbench-response-size

The package manifests remain private: true; this prerelease is a source release, not an npm package publication.

Validation evidence

Before publication, the release was validated in an isolated checkout:

• all public JSON files validated;
• public-scope audit passed;
• offline frozen-lockfile install passed;
• Shared package build passed;
• full workspace type checks passed;
• command-runner regression suite passed;
• packet lifecycle suite passed;
• Custom GPT/OpenAPI contract validation passed;
• response-size regression passed;
• snapshot provenance, forbidden-content rules, required licensing files, and SHA-256 hashes passed.

Upgrade notes

Existing clones of the earlier public repository will see a large tree cleanup. Pulling this prerelease removes files that were intentionally excluded from the public Workbench Local scope.

No repository settings, branch protections, collaborators, secrets, or visibility settings were changed as part of this release.