owlrunkit 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.16.1
+
+- Replaces mutable publication-state assertions in the bundled Codex Skill
+  with time-stable registry verification guidance.
+- Binds the 0.16.1 candidate and rollback path to the exact officially
+  published `owlrunkit@0.16.0` registry shasum, integrity, and tarball URL.
+- Extends the trusted prior-Core catalog and public verifier so 0.16.0 projects
+  can enter the existing fail-closed Core-successor path without hand edits.
+- Strengthens the release identity gate so both source and unpacked Skill
+  copies fail when stale publication claims or mismatched release identities
+  appear.
+- Grants no Git, publish, release, deploy, installation, global Skill update,
+  or foreign-project migration authority.
+
 ## 0.16.0
 
 - Adds a persistent coverage-root registry. After each fleet root is registered
@@ -87,9 +101,9 @@
   package. Delegation additionally requires the canonical official npm tarball
   URL, canonical SHA-512 SRI, a bootstrap-trusted Core identity, and a matching
   project Config, so a jointly forged local CLI and Config remain blocked.
-- Keeps the candidate unpublished, binds the rollback baseline to the exact
-  published `owlrunkit@0.15.1`, and grants no Git, publish, release, deploy, or
-  business authority.
+- Was published to the official npm registry with `owlrunkit@0.15.1` as its
+  release-time rollback baseline; publication did not grant Git, deployment,
+  installation, or business authority.
 
 ## 0.15.1
 

package/README.md

@@ -8,7 +8,7 @@ evidence, then close out once.
 ## Install
 
 ```bash
-npm install --save-exact owlrunkit@0.16.0
+npm install --save-exact owlrunkit@0.16.1
 ```
 
 The `owlrunkit` bootstrap uses the project's exact locally bound CLI for
@@ -138,12 +138,22 @@ commands use the persistent registry automatically:
 ```bash
 owlrunkit fleet register-root --fleet-root /absolute/projects
 owlrunkit fleet register-root --fleet-root /absolute/other-projects
+owlrunkit fleet inspect-registry
 owlrunkit fleet discover
 ```
 
-The registry lives under the user-owned OwlCoda home. RunKit recursively
-discovers projects inside every registered root, rejects an unreachable root,
-and freezes the exact workspace list before a shared Skill or Core change.
+The registry lives under the user-owned OwlCoda home. Initial discovery stops
+at each project root; nested projects require a separate coverage root or
+explicit registration. Marker, depth and filesystem failures are reported as
+typed path-level issues rather than being collapsed into an unreachable root.
+After a fleet is classified, `fleet replace-registry --dry-run` previews an
+evidence-bound active, retired, excluded and invalid membership. Applying the
+same request atomically records the exact preimage and a rollback receipt;
+coverage reduction requires explicit exclusion evidence. Retired archives stay
+auditable but are never interpreted as active writers.
+
+RunKit rejects an unreachable root and freezes the exact active workspace list
+before a shared Skill or Core change.
 Explicit `--fleet-root` and `--fleet-manifest` remain available for bounded
 one-off operations. Completeness is intentionally limited to registered roots;
 RunKit does not claim machine-wide protection for an unregistered location.

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,10 +7,14 @@ description: Run receipt-backed, project-owned software execution with OwlCoda R
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Current release candidate: standalone `owlrunkit@0.16.0`, bundling Contract
-`0.2` and Core `0.16.0` with manifest
-`sha256:320fb1d97b4459d1a14b0b67807dcf2bc6b03970492cb9fb2c6245b17912c81e`.
-It is not published. The current published release remains `owlrunkit@0.15.1`.
+Bundled release: standalone `owlrunkit@0.16.1`, bundling Contract `0.2` and
+Core `0.16.1` with manifest
+`sha256:38ac9110e328c38a81db05f1359734ca810b991c9f4de77647f9719f5e6af78b`.
+Publication and dist-tag state are mutable registry facts: verify the exact
+official npm registry provenance before adoption. The immutable rollback
+baseline for this release is `owlrunkit@0.16.0` with SHA-1
+`bab651b0e10111a7a179a3a58917a8e90e43c35f` and canonical npm tarball URL
+`https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.0.tgz`.
 The root `owlcoda` package has a separate version lifecycle.
 
 The session is an execution interface. Project artifacts are the system of record.
@@ -131,10 +135,16 @@ The install manifest binds every Skill, Core, contract and attest file.
 Unknown installed drift fails closed instead of being overwritten. A changed
 process-wide Skill requires a registered complete fleet. Register each coverage
 root once with `owlrunkit fleet register-root --fleet-root <absolute-root>`.
-Ordinary installs then scan every registered root automatically. Repeated
+Inspect and correct a broad or stale registry through the official
+`fleet inspect-registry` and evidence-bound `fleet replace-registry` workflow;
+never hand-edit the registry. Replacement is dry-runnable and append-only
+receipts preserve the exact rollback preimage. Retired archives are evidence,
+not active fleet writers. Ordinary installs use the registered active
+membership automatically. Repeated
 `--fleet-root` or a frozen `--fleet-manifest` remain explicit one-off sources.
-RunKit skips control and dependency directories, freezes the discovered
-workspace list, and fails closed if a registered root is unreachable. It cannot
+RunKit stops at each project boundary, reports damaged or incomplete markers by
+exact path, freezes the discovered workspace list, and fails closed if a
+registered root is unreachable. It cannot
 discover projects outside registered coverage and must not claim machine-wide
 safety. The installer validates every discovered project config and refuses the
 whole update before replacing the Skill or changing any project when one
@@ -193,7 +203,10 @@ Exact adoption requires the official npm registry `shasum`, `integrity` and
 tarball binding. A worktree, local tarball, `file:` dependency, Git source,
 workspace link or mutable tag is not formal adoption. Active or ambiguous work
 blocks migration before Config or Skill bytes change. Historical closed leases
-remain evidence but do not become active writers. Compatibility, onboarding,
+use their trusted immutable closeout/Core semantics only when an accepted
+closed execution exactly binds its released lease. Active, malformed,
+hash-wrong, untrusted, or inconsistently released state still fails closed.
+Compatibility, onboarding,
 rollback and recovery grant no Git, npm, release, deploy or foreign-write
 authority.
 

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,9 +2,9 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.16.0",
-    "coreManifestSha256": "sha256:320fb1d97b4459d1a14b0b67807dcf2bc6b03970492cb9fb2c6245b17912c81e",
-    "coreSourceRef": "artifact:sha256:320fb1d97b4459d1a14b0b67807dcf2bc6b03970492cb9fb2c6245b17912c81e"
+    "coreVersion": "0.16.1",
+    "coreManifestSha256": "sha256:38ac9110e328c38a81db05f1359734ca810b991c9f4de77647f9719f5e6af78b",
+    "coreSourceRef": "artifact:sha256:38ac9110e328c38a81db05f1359734ca810b991c9f4de77647f9719f5e6af78b"
   },
   "authorizationPolicy": "external_explicit_authority_required"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Project-owned execution, evidence, verification, and recovery for coding agents.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -36,6 +36,11 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.16.1",
+      "coreManifestSha256": "sha256:38ac9110e328c38a81db05f1359734ca810b991c9f4de77647f9719f5e6af78b"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.16.0",

package/packages/attest/src/quick.mjs

@@ -18,6 +18,11 @@ import { captureWorkspaceSnapshot } from "./workspace-snapshot.mjs";
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.16.1",
+    coreManifestSha256: "sha256:38ac9110e328c38a81db05f1359734ca810b991c9f4de77647f9719f5e6af78b",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.16.0",

package/registry-release-policy-v1.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV1",
   "status": "release_candidate_unpublished",
   "packageName": "owlrunkit",
-  "candidateVersion": "0.16.0",
+  "candidateVersion": "0.16.1",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,
@@ -23,10 +23,10 @@
   ],
   "currentPublishedRelease": {
     "packageName": "owlrunkit",
-    "version": "0.15.1",
-    "shasum": "efdf9900019dd3b3cd776cde35fb3817d777ff09",
-    "integrity": "sha512-39M+GWBIK5nT4B9blueOg/S839g/9YjSJ6IhVL3h99MdwbOvcLhQ0GvsWzKHeSjFyjCu1bdR0uZuyXXnev3sdA==",
-    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.15.1.tgz"
+    "version": "0.16.0",
+    "shasum": "bab651b0e10111a7a179a3a58917a8e90e43c35f",
+    "integrity": "sha512-qrlJueVypcetnFXAEHhDcYlZvpJAnTsbtLu9Rtp9SXNekAAD/rtBM8p2GqM5dOc1ERojixc3ipQkDGw6T7IR1A==",
+    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.0.tgz"
   },
   "registryRelease": null,
   "registryEvidenceMustBeExternal": true,

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.16.0",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.16.0",
+  "name": "owlrunkit-0.16.1",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.16.1",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,8 +14,8 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.16.0",
-      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.0.tgz",
+      "versionInfo": "0.16.1",
+      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.1.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
       "licenseDeclared": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.16.0"
+          "referenceLocator": "pkg:npm/owlrunkit@0.16.1"
         }
       ]
     }

package/scripts/runkit-contract/core-contract.mjs

@@ -14,7 +14,7 @@ import { fileURLToPath } from "node:url";
 import { parseProjectControlState } from "./project-control-parser.mjs";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.16.0";
+export const CORE_VERSION = "0.16.1";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [