v0.2.1: export fix and dependency updates

Fixed

• export_plan with format: "json" no longer returns claim tokens on tasks, findings or attempts (#71).

Changed

• Dependency updates: Npgsql 10, Octokit 14, Vite 8 and TypeScript 7 for the dashboard, and newer GitHub Actions.

v0.2.0: web dashboard

Workstream now has a web dashboard: a live board of what your agents are doing.

Try it

docker run --rm -p 127.0.0.1:8080:8080 -e WORKSTREAM_ADMIN_TOKEN=local-admin \
  ghcr.io/ahmad-codex/workstream-mcp:demo

Open http://localhost:8080/demo-insecure-token/ui/. To watch two developer agents race for tasks while a reviewer approves or sends work back, run this from a clone of the repo:

WORKSTREAM_ADMIN_TOKEN=local-admin node scripts/simulate-agents.mjs

Added

• Web dashboard at /<token>/ui/ (#46, #69): a board per plan with claim holders and TTL countdowns, dependencies, findings, stuck work, an activity feed and a timeline for every task. It is built into the API and demo images. See docs/dashboard.md.
• Read endpoints under /<token>/api/ behind the dashboard. They reuse the MCP tools, never return claim tokens, and do not count against the MCP rate limit.
• scripts/simulate-agents.mjs: three agents working a ten-task plan through the MCP endpoint.

Fixed

• A development task sent back by a reviewer could never be claimed again, and its dependents stayed blocked (#70, #72). It now returns to pending. Migration 0021 updates the development plan type and releases tasks already stuck this way.

Changed

• The design spec moved to docs/spec.md. docs/mcp-tools.md covers refresh_claim, get_finding, ping and stdio.
• CI builds the Docker image on every pull request.
• New roadmap and a public roadmap board. Issues labelled good first issue are a good place to start.

Thanks to @theworker02 for the stuck-work integration test (#36).

Full changelog: v0.1.4...v0.2.0

v0.1.4

Adds a stdio transport with a database-free discovery mode, an opt-in demo mode, and a one-command demo image (docker run -p 8080:8080 ghcr.io/ahmad-codex/workstream-mcp:demo). HTTP now answers MCP ping.

v0.1.3

Adds MCP Registry metadata (server.json) and the registry ownership label on the API image. Updates Microsoft.Extensions, test packages and GitHub Actions. Adds a Claude Code setup prompt to the README.

v0.1.2

• Align FluentMigrator.Runner with the other FluentMigrator packages (#23, @ahmad-codex)

Maintenance

• Update GitHub Actions (#24, @ahmad-codex)
• Update Microsoft.Extensions and test packages (#22, @ahmad-codex)
• Bump FluentMigrator and FluentMigrator.Runner.Postgres (#20, @dependabot[bot])
• Bump FluentAssertions from 7.0.0 to 7.2.2 (#19, @dependabot[bot])

Upgrading: the API applies new migrations on startup. Read the Breaking changes section first, if present.

Thanks to @ahmad-codex, @dependabot[bot] and dependabot[bot] for this release.

v0.1.1

• Add community and release infrastructure (#12, @ahmad-codex)

Maintenance

• Keep FluentAssertions on 7.x (#13, @ahmad-codex)
• Bump actions/checkout from 4 to 7 (#4, @dependabot[bot])
• Bump actions/upload-artifact from 4 to 6 (#3, @dependabot[bot])
• Bump actions/setup-dotnet from 4 to 6 (#2, @dependabot[bot])
• Bump Dapper from 2.1.66 to 2.1.89 (#8, @dependabot[bot])
• Bump the opentelemetry group with 6 updates (#6, @dependabot[bot])
• Bump github/codeql-action from 3 to 4 (#5, @dependabot[bot])

Upgrading: the API applies new migrations on startup. Read the Breaking changes section first, if present.

Thanks to @ahmad-codex, @dependabot[bot] and dependabot[bot] for this release.

v0.1.0

First version. Built between 2026-05-18 and 2026-05-23.

Added

• MCP server over HTTP (JSON-RPC 2.0) at /<token>/mcp, with per-user URL tokens, token
  rotation and redaction of the token from paths and logs.
• Postgres 16 schema with plain SQL migrations applied on startup, accessed through Npgsql and
  Dapper, behind PgBouncer in transaction-pool mode.
• Data-driven state machine: plan types stored as JSONB state graphs, with audit and
  development seed profiles.
• Claim primitive using SELECT ... FOR UPDATE SKIP LOCKED, role-based TTLs, refresh_claim
  and release_claim, with a concurrency test suite.
• 36 MCP tools for discovery, claiming, submission, lifecycle, forensics, project and plan setup,
  and audit dispatch.
• Task dependencies and bulk task creation (create_tasks).
• Append-only events and verdicts tables enforced by triggers.
• GitHub Projects V2 board sync through an outbox: tasks as issues on repo-backed projects,
  draft items otherwise, column and assignee sync, audit milestones, signed inbound webhooks.
• Slack notifications through an outbox: Block Kit cards, per-task threads, role personas
  selectable per call with as_agent, and a signed interactivity endpoint for the details modal.
• archive_plan with Completed or Canceled outcomes.
• Audit dispatcher sidecar: request_audit and cancel_audit queue runs that a separate
  container executes with Claude Code in tmux sessions.
• workstream-admin CLI and /admin/* endpoints.
• Docker images and compose files for production, Caddy, Grafana and Prometheus configuration.
• Unit, integration (Testcontainers) and concurrency test projects, and a GitHub Actions workflow.