bareloop 0.25.0 → 0.25.1

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to bareloop are documented here. Format:
 [SemVer](https://semver.org/spec/v2.0.0.html). Pre-1.0: **minor** = a ladder rung or
 feature lands, **patch** = docs, fixes, scaffolding.
 
+## [0.25.1] — 2026-09-13
+
+### Fixed
+
+- **Package-root export gap (PRD item 33/M2 follow-up):** `bareloop.context.md` documents
+  `datedDestination(destination, now, n)` and `pickDelivery(destination, now?)` as exported
+  from the package root, but `src/index.js`'s `./source.js` re-export only carried
+  `prepareSource`, `proveDestination`, `copyOut`, `readSourceManifest`,
+  `frontDoorFromManifest` — both helpers existed in `src/source.js` but were `undefined`
+  when imported as `import { datedDestination, pickDelivery } from 'bareloop'`. Caught by a
+  clean-consumer import check of the published v0.25.0 package. Both names are now
+  re-exported from `src/index.js`; `tests/index.test.js` pins them against `src/source.js`
+  identity.
+
 ## [0.25.0] — 2026-09-12
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bareloop",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Workflows that earn their own design, with receipts — agent-authored workflows for repeated, long, verifiable jobs that improve across runs under an un-gameable gate.",
   "type": "module",
   "main": "./src/index.js",

package/src/index.js

@@ -293,4 +293,7 @@ export { main as cliMain } from './cli.js';
 // source.mjs` and `scripts/run-u.mjs` are two separate call sites reaching
 // for the SAME functions — an adopter building a third has to reach the same
 // module, not a re-derivation of it.
-export { prepareSource, proveDestination, copyOut, readSourceManifest, frontDoorFromManifest } from './source.js';
+export {
+  prepareSource, proveDestination, copyOut, readSourceManifest, frontDoorFromManifest,
+  datedDestination, pickDelivery,
+} from './source.js';

package/src/kinds.js

@@ -483,12 +483,14 @@ async function sh(cmd, args, { cwd, env: declared = {}, timeoutMs = DEFAULT_TIME
 }
 
 /**
- * git, read-only, in a repository. Faults come back as `ok:false` with the
- * stderr — a caller decides whether that is a stop.
+ * git, in a repository (reads by every caller in this file; `src/source.js`
+ * also uses it for the hidden-git seed's `init`/`add`/`commit`). Faults come
+ * back as `ok:false` with the stderr — a caller decides whether that is a
+ * stop.
  *
  * Exported (PRD item 33/M2, `src/source.js`) so the hidden-git seed a plain
  * folder/file/URL job runs against goes through the SAME spawn primitive as
- * every other git read in this file — a second `spawn('git', …)` for the
+ * every other git call in this file — a second `spawn('git', …)` for the
  * source front door would be a second instrument with its own timeout and
  * buffer ceiling to keep in sync with this one.
  * @param {string} cwd @param {string[]} args

package/types/index.d.ts

@@ -29,4 +29,4 @@ export { runInterview, authorCloseForJob, assembleSpec, prepareSigning, refusalE
 export { PROMPT_REGISTERS, isPromptFile } from "./promptregisters.js";
 export { exportBundle, bundleHash, readBundle, resolveBundleSpec, checkEnvelope, bless, verifyBlessing, appendHistory, checkBundleDeps } from "./bundle.js";
 export { readCloseScripts, checkCloseAbsolutePaths, absolutePathLiteralsOf, hashCloseScriptBytes, checkCloseByteSignature, checkStageByteSignature, signCloseScripts } from "./close-integrity.js";
-export { prepareSource, proveDestination, copyOut, readSourceManifest, frontDoorFromManifest } from "./source.js";
+export { prepareSource, proveDestination, copyOut, readSourceManifest, frontDoorFromManifest, datedDestination, pickDelivery } from "./source.js";

package/types/kinds.d.ts

@@ -50,12 +50,14 @@ export function doorOpens(job: any, reviewDoor?: boolean | null): boolean;
  */
 export function mechanicalStages(stages: any[] | null | undefined): any[];
 /**
- * git, read-only, in a repository. Faults come back as `ok:false` with the
- * stderr — a caller decides whether that is a stop.
+ * git, in a repository (reads by every caller in this file; `src/source.js`
+ * also uses it for the hidden-git seed's `init`/`add`/`commit`). Faults come
+ * back as `ok:false` with the stderr — a caller decides whether that is a
+ * stop.
  *
  * Exported (PRD item 33/M2, `src/source.js`) so the hidden-git seed a plain
  * folder/file/URL job runs against goes through the SAME spawn primitive as
- * every other git read in this file — a second `spawn('git', …)` for the
+ * every other git call in this file — a second `spawn('git', …)` for the
  * source front door would be a second instrument with its own timeout and
  * buffer ceiling to keep in sync with this one.
  * @param {string} cwd @param {string[]} args