owlrunkit 0.15.0 → 0.15.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.15.1
+
+- Treats preserved active lease bytes in trusted `blocked` or `rejected`
+  history as non-active during upgrade safety checks.
+- Validates closeout hashes, decisions, authorization boundaries, accepted
+  evidence, and execution pins before trusting historical closeout state.
+- Keeps active executions, invalid closeouts, and accepted closeouts with an
+  inconsistent active lease fail-closed.
+
 ## 0.15.0
 
 - Makes detected npm launchers resolve to absolute regular files that Formal

package/README.md

@@ -11,7 +11,7 @@ release authority.
 ## Install
 
 ```bash
-npm install --save-exact owlrunkit@0.15.0
+npm install --save-exact owlrunkit@0.15.1
 ```
 
 Check the ordinary CLI surface, then initialize a project:
@@ -22,7 +22,7 @@ owlrunkit --version
 owlrunkit init --workspace /absolute/path/to/project
 owlrunkit doctor --workspace /absolute/path/to/project
 owlrunkit profiles detect --workspace /absolute/path/to/project --dry-run
-owlrunkit adopt --workspace /absolute/path/to/project --exact owlrunkit@0.15.0
+owlrunkit adopt --workspace /absolute/path/to/project --exact owlrunkit@0.15.1
 ```
 
 `doctor` is read-only and distinguishes offline/DNS timeout, registry

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,8 +7,8 @@ description: Run receipt-backed, project-owned software execution with OwlCoda R
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Current release: standalone `owlrunkit@0.15.0`, bundling Contract `0.2` and
-Core `0.15.0`. The root `owlcoda` package has a separate version lifecycle.
+Current release: standalone `owlrunkit@0.15.1`, bundling Contract `0.2` and
+Core `0.15.1`. The root `owlcoda` package has a separate version lifecycle.
 
 The session is an execution interface. Project artifacts are the system of record.
 
@@ -159,7 +159,7 @@ not grant Git, npm, release, deploy, or foreign-project authority.
 ## Core v0.15 consolidated onboarding and compatibility
 
 Core v0.14 introduced self-service onboarding. The bundled Core is now
-`0.15.0`; new users should not need internal module calls,
+`0.15.1`; new users should not need internal module calls,
 an external schema validator, or the full Formal lifecycle merely to understand
 whether a project can adopt RunKit.
 
@@ -170,7 +170,7 @@ owlrunkit doctor --workspace "$PROJECT_ROOT"
 owlrunkit profiles detect --workspace "$PROJECT_ROOT" --dry-run
 owlrunkit profiles validate --workspace "$PROJECT_ROOT"
 owlrunkit profiles impact --workspace "$PROJECT_ROOT" --changed path/to/file
-owlrunkit adopt --workspace "$PROJECT_ROOT" --exact owlrunkit@0.15.0
+owlrunkit adopt --workspace "$PROJECT_ROOT" --exact owlrunkit@0.15.1
 ```
 
 `doctor` and `profiles detect --dry-run` are read-only. Registry diagnostics use
@@ -179,7 +179,7 @@ failures, missing versions and local-install binding mismatches without
 printing credentials. Profile detection is deterministic evidence for a human
 decision; it does not write or overwrite project configuration.
 
-`adopt` accepts only an exact `owlrunkit@0.15.0` binding from the official npm
+`adopt` accepts only an exact `owlrunkit@0.15.1` binding from the official npm
 registry. It recomputes the registry and local install/lock facts, invokes the
 strict adoption evaluator, and writes typed project evidence only after an
 eligible result. Worktrees, `file:` dependencies, local tarballs, Git sources,

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.15.0",
+    "coreVersion": "0.15.1",
     "coreManifestSha256": "sha256:replace-with-installed-core-manifest",
     "coreSourceRef": "artifact:sha256:replace-with-content-addressed-source"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Project-owned execution, evidence, verification, and recovery for coding agents.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -36,6 +36,11 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.15.1",
+      "coreManifestSha256": "sha256:e8ca57522a8e473da356ceb3768bb650267894638d450d5e49463ab6f51c752b"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.15.0",

package/packages/attest/src/quick.mjs

@@ -18,6 +18,11 @@ import { captureWorkspaceSnapshot } from "./workspace-snapshot.mjs";
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.15.1",
+    coreManifestSha256: "sha256:e8ca57522a8e473da356ceb3768bb650267894638d450d5e49463ab6f51c752b",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.15.0",

package/registry-release-policy-v1.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV1",
   "status": "release_candidate_unpublished",
   "packageName": "owlrunkit",
-  "candidateVersion": "0.15.0",
+  "candidateVersion": "0.15.1",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.15.0",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.15.0",
+  "name": "owlrunkit-0.15.1",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.15.1",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,8 +14,8 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.15.0",
-      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.15.0.tgz",
+      "versionInfo": "0.15.1",
+      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.15.1.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
       "licenseDeclared": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.15.0"
+          "referenceLocator": "pkg:npm/owlrunkit@0.15.1"
         }
       ]
     }

package/scripts/runkit-contract/core-contract.mjs

@@ -14,7 +14,7 @@ import { isAbsolute, relative, resolve, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.15.0";
+export const CORE_VERSION = "0.15.1";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [
@@ -234,9 +234,15 @@ export function validateLeaseOwnedPaths(paths) {
 
 export function validateExecutionPin({ expected, actual } = {}) {
   const fields = ["contractVersion", "coreVersion", "coreManifestSha256", "coreSourceRef"];
-  const malformed = fields.filter((field) => typeof expected?.[field] !== "string" || typeof actual?.[field] !== "string");
-  if (malformed.length > 0) {
-    return { status: "invalid_input", exitCode: 3, issues: malformed.map((field) => `missing engine pin field: ${field}`) };
+  try {
+    validateCoreIdentity(expected, { requireSourceBinding: false });
+    validateCoreIdentity(actual, { requireSourceBinding: false });
+  } catch (error) {
+    return {
+      status: "invalid_input",
+      exitCode: 3,
+      issues: [error instanceof Error ? `invalid engine pin: ${error.message}` : String(error)],
+    };
   }
   const issues = fields.filter((field) => expected[field] !== actual[field]).map((field) => `${field} changed during execution`);
   return issues.length === 0
@@ -244,11 +250,27 @@ export function validateExecutionPin({ expected, actual } = {}) {
     : { status: "engine_changed_during_execution", exitCode: 2, issues };
 }
 
-function validateCoreIdentity(core) {
+function validateCoreIdentity(core, { requireSourceBinding = true } = {}) {
   if (!isRecord(core)) throw new Error("Core identity must be an object.");
+  const coreKeys = ["contractVersion", "coreManifestSha256", "coreSourceRef", "coreVersion"];
+  const unsupportedCoreKeys = Object.keys(core).filter(key => !coreKeys.includes(key));
+  if (unsupportedCoreKeys.length > 0) {
+    throw new Error(`Core identity contains unsupported field: ${unsupportedCoreKeys[0]}`);
+  }
   if (typeof core.contractVersion !== "string" || typeof core.coreVersion !== "string") throw new Error("Core identity requires contractVersion and coreVersion.");
+  if (!new Set(["0.1", CONTRACT_VERSION]).has(core.contractVersion)) {
+    throw new Error("Core identity contractVersion must be a supported RunKit contract version.");
+  }
+  if (!/^\d+\.\d+\.\d+$/u.test(core.coreVersion)) {
+    throw new Error("Core identity coreVersion must be a three-part semantic version.");
+  }
   if (!isSha256Ref(core.coreManifestSha256)) throw new Error("Core identity requires coreManifestSha256.");
-  if (typeof core.coreSourceRef !== "string" || core.coreSourceRef.length === 0) throw new Error("Core identity requires coreSourceRef.");
+  if (typeof core.coreSourceRef !== "string" || core.coreSourceRef.length === 0) {
+    throw new Error("Core identity coreSourceRef must be a non-empty string.");
+  }
+  if (requireSourceBinding && core.coreSourceRef !== `artifact:${core.coreManifestSha256}`) {
+    throw new Error("Core identity coreSourceRef must bind coreManifestSha256.");
+  }
 }
 
 export function validateProjectConfigV2(config) {
@@ -281,6 +303,110 @@ export function validateProjectConfigV2(config) {
   }
 }
 
+function inspectTrustedCloseout(executionRoot, runId) {
+  const closeoutPath = resolve(executionRoot, "closeout-receipt.json");
+  try {
+    const closeoutStat = lstatSync(closeoutPath);
+    if (closeoutStat.isSymbolicLink() || !closeoutStat.isFile()) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [`Closeout receipt must be a regular file: ${runId}`],
+      };
+    }
+    const closeout = JSON.parse(readFileSync(closeoutPath, "utf8"));
+    if (closeout?.artifact?.payload?.runId !== runId) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [`Closeout receipt runId mismatch: ${runId}`],
+      };
+    }
+    const artifactGate = validateCoreArtifact(closeout.artifact);
+    if (!artifactGate.valid) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: artifactGate.issues.map(issue => `Closeout receipt is invalid: ${runId}: ${issue}`),
+      };
+    }
+    if (closeout.acceptanceSha256 !== artifactGate.acceptanceSha256
+      || closeout.artifactSha256 !== artifactGate.artifactSha256) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [`Closeout receipt hash mismatch: ${runId}`],
+      };
+    }
+    const payload = closeout.artifact.payload;
+    if (!new Set(["accepted", "rejected", "blocked"]).has(payload.decision)
+      || payload.authorizationGranted !== false) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [`Closeout receipt decision or authorization is invalid: ${runId}`],
+      };
+    }
+    const expectedPayloadKeys = payload.decision === "accepted"
+      ? ["authorizationGranted", "decision", "runId", "verification"]
+      : ["authorizationGranted", "decision", "runId"];
+    const unsupportedPayloadKeys = Object.keys(payload)
+      .filter(key => !expectedPayloadKeys.includes(key));
+    if (unsupportedPayloadKeys.length > 0) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [
+          `Closeout receipt payload contains unsupported field: ${runId}: ${unsupportedPayloadKeys[0]}`,
+        ],
+      };
+    }
+    const verificationIssues = acceptedCloseoutVerificationIssues(closeout.artifact);
+    if (verificationIssues.length > 0) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: verificationIssues.map(issue => `Closeout receipt is invalid: ${runId}: ${issue}`),
+      };
+    }
+    const pinPath = resolve(executionRoot, "engine-pin.json");
+    const pinStat = lstatSync(pinPath);
+    if (pinStat.isSymbolicLink() || !pinStat.isFile()) {
+      return {
+        trusted: false,
+        decision: null,
+        issues: [`Execution engine pin must be a regular file: ${runId}`],
+      };
+    }
+    const pinGate = validateExecutionPin({
+      expected: JSON.parse(readFileSync(pinPath, "utf8")),
+      actual: closeout.artifact.core,
+    });
+    if (pinGate.status !== "valid") {
+      return {
+        trusted: false,
+        decision: null,
+        issues: pinGate.issues.map(issue => `Closeout engine pin mismatch: ${runId}: ${issue}`),
+      };
+    }
+    return {
+      trusted: true,
+      decision: payload.decision,
+      issues: [],
+    };
+  } catch (error) {
+    return {
+      trusted: false,
+      decision: null,
+      issues: [
+        `Closeout receipt or engine pin is invalid: ${runId}: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      ],
+    };
+  }
+}
+
 export function inspectProjectUpgradeSafety({ workspaceRoot } = {}) {
   if (typeof workspaceRoot !== "string" || workspaceRoot.length === 0) {
     throw new Error("workspaceRoot is required.");
@@ -317,23 +443,16 @@ export function inspectProjectUpgradeSafety({ workspaceRoot } = {}) {
     if (!entry.isDirectory()) continue;
     const executionRoot = resolve(executionsRoot, entry.name);
     const closeoutPath = resolve(executionRoot, "closeout-receipt.json");
+    let skipHistoricalLeases = false;
     if (!existsSync(closeoutPath)) {
       activeRunIds.push(entry.name);
     } else {
-      const closeoutStat = lstatSync(closeoutPath);
-      if (closeoutStat.isSymbolicLink() || !closeoutStat.isFile()) {
-        issues.push(`Closeout receipt must be a regular file: ${entry.name}`);
-      } else {
-        try {
-          const closeout = JSON.parse(readFileSync(closeoutPath, "utf8"));
-          if (closeout?.artifact?.payload?.runId !== entry.name) {
-            issues.push(`Closeout receipt runId mismatch: ${entry.name}`);
-          }
-        } catch {
-          issues.push(`Closeout receipt is invalid JSON: ${entry.name}`);
-        }
-      }
+      const closeout = inspectTrustedCloseout(executionRoot, entry.name);
+      issues.push(...closeout.issues);
+      skipHistoricalLeases = closeout.trusted
+        && new Set(["rejected", "blocked"]).has(closeout.decision);
     }
+    if (skipHistoricalLeases) continue;
     const leasesRoot = resolve(executionRoot, "leases");
     if (!existsSync(leasesRoot)) continue;
     const leasesStat = lstatSync(leasesRoot);
@@ -377,6 +496,14 @@ function validateProducer(producer) {
   if (!isRecord(producer) || typeof producer.adapterKind !== "string" || typeof producer.adapterVersion !== "string") {
     throw new Error("Producer requires adapterKind and adapterVersion.");
   }
+  if (producer.adapterKind.length === 0 || producer.adapterVersion.length === 0) {
+    throw new Error("Producer adapterKind and adapterVersion must be non-empty strings.");
+  }
+  const producerKeys = ["adapterKind", "adapterVersion"];
+  const unsupportedProducerKeys = Object.keys(producer).filter(key => !producerKeys.includes(key));
+  if (unsupportedProducerKeys.length > 0) {
+    throw new Error(`Producer contains unsupported field: ${unsupportedProducerKeys[0]}`);
+  }
 }
 
 function validateExtensions(extensions) {
@@ -416,7 +543,18 @@ export function createCoreArtifact({ core = currentCoreIdentity(), producer, pay
 export function validateCoreArtifact(artifact) {
   try {
     if (!isRecord(artifact) || !new Set(["RunKitCoreArtifactV1", "RunKitCoreArtifactV2"]).has(artifact.schemaVersion)) throw new Error("Unsupported core artifact schemaVersion.");
+    const artifactKeys = ["core", "extensions", "payload", "producer", "schemaVersion"];
+    const unsupportedArtifactKeys = Object.keys(artifact).filter(key => !artifactKeys.includes(key));
+    if (unsupportedArtifactKeys.length > 0) {
+      throw new Error(`Core artifact contains unsupported field: ${unsupportedArtifactKeys[0]}`);
+    }
     validateCoreIdentity(artifact.core);
+    const expectedContractVersion = artifact.schemaVersion === "RunKitCoreArtifactV1"
+      ? "0.1"
+      : CONTRACT_VERSION;
+    if (artifact.core.contractVersion !== expectedContractVersion) {
+      throw new Error(`Core artifact ${artifact.schemaVersion} requires contractVersion ${expectedContractVersion}.`);
+    }
     validateProducer(artifact.producer);
     if (!isRecord(artifact.payload)) throw new Error("Core artifact payload must be an object.");
     validateExtensions(artifact.extensions);