owlrunkit 0.17.0 → 0.17.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.17.1
+
+- Prevents a completed checkpoint with `nextAction: null` from reviving an
+  earlier handoff action in WorkItem and per-Agent project status.
+- Prevents takeover packets for completed or failed responsibilities from
+  inventing a continuation action after the work has ended.
+- Preserves handoff recovery guidance until a later checkpoint explicitly
+  supersedes it.
+
 ## 0.17.0
 
 - Adds an Agent-native persistent project model for milestones, workstreams,

package/README.md

@@ -8,7 +8,7 @@ evidence, then close out once.
 ## Install
 
 ```bash
-npm install --save-exact owlrunkit@0.17.0
+npm install --save-exact owlrunkit@0.17.1
 ```
 
 The `owlrunkit` bootstrap uses the project's exact locally bound CLI for

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,9 +7,9 @@ description: Run receipt-backed, project-owned work with OwlCoda RunKit. Use whe
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Bundled release: standalone `owlrunkit@0.17.0`, bundling Contract `0.2` and
-Core `0.17.0` with manifest
-`sha256:0c0c52e7f6299bdd3d3ea49005c8ceef0b28831d60af25d77da65a4e4de714c9`.
+Bundled release: standalone `owlrunkit@0.17.1`, bundling Contract `0.2` and
+Core `0.17.1` with manifest
+`sha256:5376f3736dd17c07598df8b655a6bbceb3b64b44f3e6630e69f966e420d82e26`.
 Publication and dist-tag state are mutable registry facts: verify the exact
 official npm registry provenance before adoption. The immutable rollback
 baseline for this release is `owlrunkit@0.16.1` with SHA-1

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,9 +2,9 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.17.0",
-    "coreManifestSha256": "sha256:0c0c52e7f6299bdd3d3ea49005c8ceef0b28831d60af25d77da65a4e4de714c9",
-    "coreSourceRef": "artifact:sha256:0c0c52e7f6299bdd3d3ea49005c8ceef0b28831d60af25d77da65a4e4de714c9"
+    "coreVersion": "0.17.1",
+    "coreManifestSha256": "sha256:5376f3736dd17c07598df8b655a6bbceb3b64b44f3e6630e69f966e420d82e26",
+    "coreSourceRef": "artifact:sha256:5376f3736dd17c07598df8b655a6bbceb3b64b44f3e6630e69f966e420d82e26"
   },
   "authorizationPolicy": "external_explicit_authority_required"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Project-owned execution, evidence, verification, and recovery for coding agents.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -36,6 +36,11 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.17.1",
+      "coreManifestSha256": "sha256:5376f3736dd17c07598df8b655a6bbceb3b64b44f3e6630e69f966e420d82e26"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.17.0",

package/packages/attest/src/quick.mjs

@@ -18,6 +18,11 @@ import { captureWorkspaceSnapshot } from "./workspace-snapshot.mjs";
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.17.1",
+    coreManifestSha256: "sha256:5376f3736dd17c07598df8b655a6bbceb3b64b44f3e6630e69f966e420d82e26",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.17.0",

package/registry-release-policy-v1.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV1",
   "status": "release_candidate_unpublished",
   "packageName": "owlrunkit",
-  "candidateVersion": "0.17.0",
+  "candidateVersion": "0.17.1",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,
@@ -23,10 +23,10 @@
   ],
   "currentPublishedRelease": {
     "packageName": "owlrunkit",
-    "version": "0.16.1",
-    "shasum": "1bc119d24879bdd8959af16b364af55ca9d61ea9",
-    "integrity": "sha512-+DxKnADly7WIsGMiWDmo/rzG7XEsyqDtq7/1lUwqTf7aeekZJLw0qL5p7vm04YhgrTCd/rw9M0tUWihemYxyqQ==",
-    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.1.tgz"
+    "version": "0.17.0",
+    "shasum": "fa9eb5cd3ad1b168f36fdca10676a7fa8fe2f584",
+    "integrity": "sha512-ghUnQaCtxA81htdL3LqqMMaQpKnQ9kwW4ELLZ8mo3BTcbLkGJv/QhFa50JtLHdn6n/ti3sBsfQUgKvHVQZQjPA==",
+    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.17.0.tgz"
   },
   "registryRelease": null,
   "registryEvidenceMustBeExternal": true,

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.17.0",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.17.0",
+  "name": "owlrunkit-0.17.1",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.17.1",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,8 +14,8 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.17.0",
-      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.17.0.tgz",
+      "versionInfo": "0.17.1",
+      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.17.1.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
       "licenseDeclared": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.17.0"
+          "referenceLocator": "pkg:npm/owlrunkit@0.17.1"
         }
       ]
     }

package/scripts/runkit-contract/core-contract.mjs

@@ -14,7 +14,7 @@ import { fileURLToPath } from "node:url";
 import { parseProjectControlState } from "./project-control-parser.mjs";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.17.0";
+export const CORE_VERSION = "0.17.1";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [

package/scripts/runkit-contract/project-cli-resolver.mjs

@@ -18,6 +18,9 @@ const OFFICIAL_CLI_ENTRYPOINT =
 const EXACT_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?$/;
 const SHA256_REF = /^sha256:[a-f0-9]{64}$/;
 const TRUSTED_PRIOR_CORE_IDENTITIES = new Map([
+  ["0.17.0", new Set([
+    "sha256:0c0c52e7f6299bdd3d3ea49005c8ceef0b28831d60af25d77da65a4e4de714c9",
+  ])],
   ["0.16.0", new Set([
     "sha256:320fb1d97b4459d1a14b0b67807dcf2bc6b03970492cb9fb2c6245b17912c81e",
   ])],

package/scripts/runkit-contract/team-project.mjs

@@ -602,7 +602,7 @@ function projectStatus(definition, records, workspaceRoot = null) {
       decisionRefs: checkpoint?.decisionRefs ?? [],
       progress: measured,
       summary: checkpoint?.summary ?? handoff?.summary ?? null,
-      nextAction: checkpoint?.nextAction ?? handoff?.nextAction ?? null,
+      nextAction: checkpoint ? checkpoint.nextAction : (handoff?.nextAction ?? null),
       lastCheckpointAt: checkpoint?.occurredAt ?? null,
       evidenceRefs: checkpoint?.evidenceRefs ?? handoff?.evidenceRefs ?? [],
       assignmentHistory: history,
@@ -978,7 +978,9 @@ export function buildTeamProjectTakeoverV1({ workspaceRoot, agentId }) {
     dependencies: current?.unresolvedDependencies ?? [],
     evidenceRefs,
     nextAction: current?.nextAction
-      ?? (current ? `Continue ${current.workItemId}.` : status.readyQueue[0] ? `Take ${status.readyQueue[0]}.` : null),
+      ?? (current && !["completed", "failed"].includes(current.status)
+        ? `Continue ${current.workItemId}.`
+        : current ? null : status.readyQueue[0] ? `Take ${status.readyQueue[0]}.` : null),
     projectTruthHash: status.projectTruthHash,
     authorizationGranted: false,
     exitCode: 0,