@awebai/oats 0.25.6 → 0.25.7

package/docs/configuration.md

@@ -50,7 +50,12 @@ refused (`E_WORKSPACE_SCHEMA`).
 Every `oats` command that needs the workspace (`sync`, `workspace status`,
 `capabilities`, `souls`, `spawn`, `status` drift) walks **up** from the current
 directory (or `--dir`) to the nearest `oats-local.yaml`; its directory is the
-deployment. Not found → `E_LOCAL_MISSING`. Beside it:
+deployment. Not found → `E_LOCAL_MISSING`. The deployment is also a
+**configuration boundary**: nothing above the directory holding
+`oats-local.yaml` composes into it (a deployment created inside another
+scope — a scratch deployment under a repository, a fixture under an operator
+workspace — sees only its own files; `oats inspect` reports it, not the outer
+scope, as the workspace). Beside it:
 
 ```
 ~/acme-workspace/

package/docs/design/2026-09-20-redesign-program-board.md

@@ -2,7 +2,7 @@
 
 **Purpose:** the one accurate view of every work stream in the redesign, what is on main, what is in flight, who owns it, and what blocks it. Lead: `oats-expert` (redesign lead). Updated whenever anything merges, is returned, or reality changes. Older per-lane boards are superseded by this file.
 
-**Last update:** 2026-09-23 20:00Z · **0.25.0–0.25.5 PUBLISHED** (workspace model A–C; team-review fixes; operator-rebuild round; OATS_SOUL_ID; quarantine-retry fix; launch meta + catalog pins) · **OKF v2.1.4 + oats.aweb v1.12.0 TAGGED and pinned** · **decision 27 accepted; K1′/K1″/K2 kernel PR next** · **oats.aweb 1.13.0 (#110) queued** · **Desktop 10B-0 resumed** · Phase D plan next · **Desktop engineer paused by the human** (10B-0 uncommitted foundation preserved; resume is the human's call; 0.24.14 to be cut from a maintenance branch off `e5cdaf95` when its PR lands) · parity pipeline ⏸.
+**Last update:** 2026-09-24 13:30Z · **0.25.0–0.25.6 PUBLISHED** (0.25.6 = decision 27 kernel half + Desktop 10B-0 terminal owner leases, native gate 23/23) (workspace model A–C; team-review fixes; operator-rebuild round; OATS_SOUL_ID; quarantine-retry fix; launch meta + catalog pins) · **OKF v2.1.4 + oats.aweb v1.12.0 TAGGED and pinned** · **decision 27 accepted; K1′/K1″/K2 kernel PR next** · **oats.aweb 1.13.0 (#110) queued** · **Desktop 10B-0 resumed** · Phase D plan next · **Desktop engineer paused by the human** (10B-0 uncommitted foundation preserved; resume is the human's call; 0.24.14 to be cut from a maintenance branch off `e5cdaf95` when its PR lands) · parity pipeline ⏸.
 
 Legend: ✅ on main/published · 🔄 in flight (PR/branch) · 🟡 preserved, not adopted · ⬜ not started · ⛔ blocked
 

package/docs/design/2026-09-24-phase-d-plan.md

@@ -7,6 +7,41 @@ instances retire"). Mailed to the human and the OSS coordinator before the
 first swarm. Method per standing instruction: write → swarm build →
 adversarial-review swarm → PR → main; releases under delegated authority.
 
+## Co-leads and lanes (human, 2026-09-24)
+
+The human made the two `oats-expert` instances — the redesign lead
+(`oats-expert-knowledge-reworks`) and the maintainer of the second deployment
+(`oats-expert-antares`) — **co-leads with equivalent authority**, who agree on
+pushes. Agreed by both on 2026-09-24:
+
+| Lane | Owner | Status |
+|---|---|---|
+| Desktop Phase F (engineer PRs, native gates) | lead | assigned |
+| Kernel (`lib/`, `bin/`; kernel gaps raised by anyone) | lead | assigned |
+| Releases 0.25.7 and D5 (catalog + 0.26.0) | lead | assigned |
+| oats.aweb 1.13.0 re-land end to end | Antares | assigned |
+| D1 operator node + integrations node | Antares | assigned (draft PR `d1/operator-node` handed over) |
+| aweb and okf package-expert seams | Antares | assigned |
+| D2, D3, D4, desktop + kernel bundle migrations (D1 remainder) | Antares | assigned (both humans agreed, 2026-09-24). D2's machine-bound onboard of the lead's deployment is run by the lead on Antares' word; kernel gaps come to the lead as asks. |
+
+**Push protocol.**
+- **Class A** — notify after, one line: stewardship, docs and knowledge inside
+  one's own lane or node; merging a PR the other co-lead approved in writing;
+  merging one's own lane's PR after the other co-lead's review; the bump PR of
+  an agreed release.
+- **Class B** — `PUSH INTENT: <what> @ <commit/PR>` → `ACK <message-id>` before
+  acting: tags, releases, npm publishes, catalog pins; framework-behaviour
+  changes (kernel semantics, OKF/memory contracts, workspace config semantics,
+  published skills); merges into the other's lane; reverts, force-anything,
+  branch or tag deletion. A blocking intent unanswered for about 45 minutes goes
+  to the human, never to action.
+- Every PR is reviewed by the co-lead who did not author it (a helper's PR is
+  reviewed by its own lead, inside that lead's lane). A disagreement not settled
+  in two mails goes to the human. Standing rules unchanged: PR CI is the full
+  gate; published tags never move; no destructive git on shared checkouts.
+- `main` on these repositories carries no branch or tag protection: the parity
+  gate and the cross-review are the only things between a merge and `main`.
+
 ## Slices, in order
 
 ### D1 — Knowledge centralisation (IN PROGRESS)

package/docs/release-notes/v0.25.7.md

@@ -0,0 +1,11 @@
+# OATS 0.25.7
+
+## Fixed
+
+- **A v2 deployment is a configuration boundary.** The ancestor walk that
+  composes legacy `oats-config.yaml` levels now stops at the directory holding
+  `oats-local.yaml`. A deployment created inside another scope (a scratch
+  deployment under an operator's workspace, a fixture under a repository) no
+  longer inherits the outer scope's files, and `oats inspect` no longer names
+  the outer checkout as its `scope.workspace` or lists the outer files in
+  `scope.chain`. Found by the Desktop engineer's Phase F study.

package/lib/core.mjs

@@ -781,6 +781,13 @@ export function configChain(startDir) {
   while (true) {
     const cfg = loadLevelConfig(d);
     if (cfg) chain.push(cfg);
+    // A v2 deployment root (the directory holding oats-local.yaml) is a
+    // configuration boundary: nothing above it composes into it. Without this
+    // stop, a deployment created under another scope (a scratch deployment
+    // inside an operator's workspace, a fixture under a repo) inherited the
+    // ancestors' oats-config.yaml and `oats inspect` reported the outer scope
+    // as its workspace (Desktop Phase F study, 2026-09-24).
+    if (existsSync(join(d, "oats-local.yaml"))) break;
     const parent = dirname(d);
     if (parent === d) break;
     d = parent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awebai/oats",
-  "version": "0.25.6",
+  "version": "0.25.7",
   "description": "OATS (Open Agent Team Specification) — durable souls, disposable instances, targetable capability packages, and the runtime-neutral oats CLI/kernel.",
   "keywords": [
     "agents",