v0.7.2

Built against Peter-N91/hve-squad@0.16.2 (see host/cast/package-pin.json).

Fixed

• The bundled researcher cited an instruction path that does not exist. Re-pinned the cast to HVE Squad 0.16.2 and regenerated it so the researcher resolves the root-level untrusted-content boundary instruction (host/cast/package-pin.json, host/cast/.github/).

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.7.2"

v0.7.1

Built against Peter-N91/hve-squad@0.16.1 (see host/cast/package-pin.json).

Changed

• The bundled cast lagged behind HVE Squad 0.16.1. Re-pinned and regenerated the cast so autopilot derives multi-artifact fan-out from artifact-owning roster entries and records a Scribe handoff for every stage (host/cast/package-pin.json, host/cast/.github/).

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.7.1"

v0.7.0

Built against Peter-N91/hve-squad@0.16.0 (see host/cast/package-pin.json).

Added

• The package is ready to publish to the npm registry. Removed
  "private": true from package.json, added a prepublishOnly build hook so
  a stale dist/ can never ship, and added a manual-only
  .github/workflows/publish.yml (npm ci && npm run build && npm publish --access public, authenticated via an NODE_AUTH_TOKEN secret, gated on the
  release tag already existing) that a maintainer runs explicitly — it never
  fires from a version-bump commit or a cut release. npm pack --dry-run
  confirms the tarball carries dist/src/server.js. The README's Status table
  no longer describes the package as private/unpublished.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.7.0"

v0.6.3

Built against Peter-N91/hve-squad@0.15.3 (see host/cast/package-pin.json).

Changed

• Bumped the bundled cast pin from 0.15.2 to Peter-N91/hve-squad@0.15.3 and refreshed host/cast/ from that release's apm.yml. This tracks a patch release upstream, so it carries the same level here.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.6.3"

v0.6.2

Built against Peter-N91/hve-squad@0.15.2 (see host/cast/package-pin.json).

Fixed

• The cast snapshot could have been resolved from the package's default branch
  rather than from the release it claims. host/snapshot-cast.ts already took
  the tag's own commit for every Peter-N91/hve-squad entry, but it ignored
  whatever ref the manifest declared, so a tag whose self-references named a
  different release would have been snapshotted silently. The resolver now
  rejects a self-reference pointing anywhere other than the tag being resolved,
  which makes "the bundle is the tagged release, never main" a checked
  invariant instead of an implicit one (host/snapshot-cast.ts).
• The bundled cast is re-pinned to hve-squad v0.15.2 (commit c1a3947),
  which carries the upstream hve-core pin 594ee84 and the package-side fix that
  makes a release tag serve its own squad files. The pre-release sitting on the
  package's main is deliberately not picked up (host/cast/package-pin.json,
  host/cast/manifest.json, host/cast/.github).

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.6.2"

v0.6.1

Built against Peter-N91/hve-squad@0.15.1 (see host/cast/package-pin.json).

Changed

• Bumped the bundled cast pin from 0.15.0 to Peter-N91/hve-squad@0.15.1 and refreshed host/cast/ from that release's apm.yml. This tracks a patch release upstream, so it carries the same level here.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.6.1"

v0.6.0

Built against Peter-N91/hve-squad@0.15.0 (see host/cast/package-pin.json).

Added

• The squad had a front door for weak inputs and none for absent ones. The intake gate this server already surfaces validates a requirement artifact when one exists; a request with nothing written down went straight into research on framing nobody examined. hve-squad@0.15.0 added the discovery gate on the inverse trigger — no input artifact, a goal rather than a settled task — and the delegated gate context now states it ahead of the Intake Gate, in the order the two actually run. They chain rather than loop: discovery produces a brief, the intake gate validates it (src/engine/persona.ts).
• A discovery depth on the two catch-all tools, mirroring the /squad and /squad-federation prompt arguments: quick dispatches analyst, standard runs designer then analyst, deep runs designer, then challenger and experimenter, then analyst, and skip records the declination. An explicit depth beats the coordinator's one-time offer and is honoured on any roster, naming in one escalation every role it must add. The four narrower per-role tools do not take it — they mirror a single routing intent, not the /squad entry point (tools.catalog.yml, src/router/router.ts, src/engine/coordinator-engine.ts).
• The embedded path refuses it rather than faking it. The gate interviews a human one question at a time, and a server-side run has nobody to ask, so per the gate's Unattended Runs rule no offer is made, an explicit depth is ignored rather than honoured (recorded as discovery_ignored_unattended), and the caller's payload becomes the intake gate's input instead. The depth is deliberately not persisted with a run, so a resumed run cannot appear to honour it. An unattended run stays gated — by validation, which it can perform honestly, rather than by ideation, which it cannot (src/engine/embedded.ts, src/engine/run-params.ts).
• Drift cover for the parts that bind to the deployed roster: every depth role is a real Cast Catalog row, DT Coach is still the designer alternate the gate's Selection Cue resolves to, analyst is still seeded by product and full alone (which is what scopes the offer), and challenger is still the one role a product squad must add for deep (test/discovery-gate.test.ts).

Changed

• Bumped the bundled cast pin from 0.14.0 to Peter-N91/hve-squad@0.15.0 and refreshed host/cast/ from that release's apm.yml. This tracks a minor release upstream, so it carries the same level here. The bundle gains a fifteenth squad instruction file, squad-discovery-gate.instructions.md — the opt-in discovery gate that fires on the inverse trigger to the intake gate (no input artifact, a goal rather than a settled task) and produces a brief the intake gate then validates. The hve-core pin moves to 26b9712. No agent was added or retired and no roster table moved, so every tool binding and every parsed profile, cast, and deliverable-root row is unchanged.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.6.0"

v0.5.0

Built against Peter-N91/hve-squad@0.14.0 (see host/cast/package-pin.json).

Changed

• Bumped the bundled cast pin from 0.13.1 to Peter-N91/hve-squad@0.14.0 and refreshed host/cast/ from that release's apm.yml. This tracks a minor release upstream, so it carries the same level here.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.5.0"

v0.4.1

Built against Peter-N91/hve-squad@0.13.1 (see host/cast/package-pin.json).

Changed

• Bumped the bundled cast pin from 0.13.0 to Peter-N91/hve-squad@0.13.1 and refreshed host/cast/ from that release's apm.yml. This tracks a patch release upstream, so it carries the same level here.

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.4.1"

v0.4.0

Built against Peter-N91/hve-squad@0.13.0 (see host/cast/package-pin.json).

Changed

• The product-owner cast this server seats no longer exists upstream. hve-squad 0.13.0 picked up hve-core 3d681c9, which retired the whole backlog cast — ADO Backlog Manager, AzDO PRD to WIT, GitHub Backlog Manager, Jira Backlog Manager, Jira PRD to WIT, Agile Coach, and Product Manager Advisor. The cast pin moves to 0.13.0 and the bundle is re-snapshotted, so product-owner now resolves to the dispatchable Functional Planner (PRD to work-item hierarchy across Azure DevOps, GitHub, and Jira) with Issue Triage Agent as its alternate, and intake-validator defaults to PRD Quality Reviewer (host/cast/package-pin.json, host/cast/).
• The squad_review council seated a retired agent. The product-owner seat moves from GitHub Backlog Manager to Functional Planner, the dispatchable Primary the new roster assigns that role; the other four seats are unchanged (tools.catalog.yml, generated/).
• Both business tools named personas that no longer ship. squad_business_plan resolves against BRD Builder and squad_backlog against Functional Planner, so each keeps loading REAL bundle bytes instead of silently degrading to its paraphrase charter. The charters are reworded to match, and both stay advisory — the tracker write is still the certified native connector's (src/engine/business-tools.ts).
• The delegated Intake Gate context no longer routes an unclassified requirements check to the retired advisory agent; it defaults to PRD Quality Reviewer, which reads the artifact for standards conformance regardless of its declared type (src/engine/persona.ts).

Consumer install

Pin to this version:

npm install "Peter-N91/hve-squad-mcp#v0.4.0"