owlrunkit 0.22.1 → 0.23.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 0.23.0
+
+- Adds Project Status V5 with a separate completion-continuity projection.
+  Completed ledgers now distinguish an exact source-baseline match, missing
+  baseline evidence, an unverifiable modeled target, and later unmodeled
+  workspace drift instead of inventing more project work from absent release
+  authority.
+- Reuses the latest matching verified external-delivery target snapshot as the
+  source baseline and reports a bounded committed, dirty-overlay, dependency,
+  and submodule delta when the current source workspace changes.
+- Adds read-only `project successor scaffold --from-workspace <git-root>
+  --dry-run`. It groups changed paths against historical WorkItem ownership,
+  reports unmatched and overlapping scopes, and leaves project identity,
+  objective, owners, titles, and acceptance unset for human confirmation.
+- Keeps Project Status V1-V4 callable, preserves Compact V2 and Hook Recovery
+  V1 shapes, and advances only the current CLI status surface to V5. Explicit
+  external Gates and delivery-lifecycle facts retain their meanings.
+- Keeps status and scaffold deterministic and zero-write. No surface creates a
+  successor project, dispatches an Agent, changes assurance, or grants Git,
+  release, deployment, production, business, automation, or money authority.
+
 ## 0.22.1
 
 - Makes process-wide Codex Skill activation require every discovered project

package/README.md

@@ -111,6 +111,14 @@ the project matches its current chat goal. It does not infer chat intent, emit
 full execution or event history, change project state, dispatch an Agent, or
 raise assurance.
 
+RunKit 0.23 closes the continuity gap after a Project Driver ledger completes.
+Project Status V5 distinguishes an exactly terminal source workspace from a
+missing source baseline, an unavailable modeled target, and later unmodeled
+workspace drift. A read-only `project successor scaffold` can project the
+bounded delta and mechanically possible lanes for human review; it never
+creates a project, infers the next objective, dispatches an Agent, or grants
+authority.
+
 The 0.18 Project Driver is a bounded surface for new projects and controlled
 dogfood. Its product name does not claim to be a general long-running,
 multi-phase, or enterprise control plane. Version 0.18 adds one bounded
@@ -124,7 +132,7 @@ separate authority boundaries.
 
 ## Install
 
-This package is the lifecycle-stable, registry-gated `owlrunkit@0.22.1`
+This package is the lifecycle-stable, registry-gated `owlrunkit@0.23.0`
 artifact. Registry adoption remains fail-closed until its exact official npm
 version, shasum, integrity, and tarball URL are independently verified. Local
 tarballs remain candidate-test inputs and are never adoption provenance. Until
@@ -132,7 +140,7 @@ that registry evidence exists, use the package only for isolated candidate
 verification; do not treat the command below as available release truth.
 
 ```bash
-npm install --save-exact owlrunkit@0.22.1
+npm install --save-exact owlrunkit@0.23.0
 ```
 
 Use `npx --no-install owlrunkit` for project commands. The package bootstrap
@@ -148,9 +156,9 @@ the project Config must independently bind the same Core.
 ```bash
 npx --no-install owlrunkit --version
 npx --no-install owlrunkit bootstrap --workspace /absolute/path/to/project \
-  --exact owlrunkit@0.22.1 --dry-run
+  --exact owlrunkit@0.23.0 --dry-run
 npx --no-install owlrunkit bootstrap --workspace /absolute/path/to/project \
-  --exact owlrunkit@0.22.1 --apply
+  --exact owlrunkit@0.23.0 --apply
 npx --no-install owlrunkit init --workspace /absolute/path/to/project
 npx --no-install owlrunkit doctor --workspace /absolute/path/to/project
 npx --no-install owlrunkit inspect --workspace /absolute/path/to/project --json --compact
@@ -299,6 +307,8 @@ npx --no-install owlrunkit project integrate --workspace . --gate integration-re
   --evidence evidence/integration.txt
 npx --no-install owlrunkit project status --workspace .
 npx --no-install owlrunkit project takeover --workspace . --agent agent-successor
+npx --no-install owlrunkit project successor scaffold --workspace . \
+  --from-workspace /absolute/source/worktree --dry-run
 npx --no-install owlrunkit project successor --workspace . --transition-id project-next-001 \
   --at 2026-08-09T00:16:00.000Z --definition ./next-project-definition.json \
   --reason 'Archive the completed project and begin the next bounded project'
@@ -404,6 +414,23 @@ successor; `project status` and `project takeover` remain active-truth
 projections and do not perform a broad historical archive scan. The receipt
 always keeps Git, release, publish, deploy, and adoption authority false.
 
+Project Status V5 separately inspects source continuity after the WorkItem
+ledger completes. It reuses the latest matching verified external-delivery
+snapshot as the source baseline. A matching workspace is terminal against that
+baseline; no baseline is reported as missing rather than guessed; an
+unavailable or non-canonical target is unverifiable; and a changed target is
+reported as unmodeled workspace drift. Explicit external Gates and delivery
+lifecycle records keep their own meanings. Git, release, deployment,
+production, product, and business authority remain external even when source
+continuity is terminal.
+
+`project successor scaffold --from-workspace <git-root> --dry-run` is a
+zero-write review surface for a completed project. It reports the bounded
+baseline-to-current delta, paths that match historical WorkItem ownership,
+unmatched paths, and overlapping historical scopes. Its project ID, objective,
+titles, owners, and acceptance remain deliberately unset for human review. It
+has no apply form and never invokes `project successor`.
+
 `project status` reports every Agent's active, waiting, completed, and failed
 work; unresolved dependencies and decisions; the ready queue; critical work;
 and integration gates. It does not accept a guessed completion percentage.
@@ -412,11 +439,12 @@ WorkItem. An assignment may bind an exact RunKit execution and lease; in that
 case, the WorkItem cannot complete until the execution has a trusted accepted
 closeout and its lease is released.
 
-In Status/Takeover V3, `overall=completed` is explicitly the WorkItem-ledger
-state. Because Project Driver never grants repository or runtime authority, that
-state is paired with `deliveryDisposition=code_complete_without_release_authority`,
-`dominantGap.kind=release_authority`, a non-empty external-authority next action,
-and `authorizationGranted=false`.
+Status/Takeover V3 retain their published completion projection. Status V4
+adds explicit delivery stages, and current Status V5 adds source-continuity
+truth. `overall=completed` still means only that the WorkItem ledger is
+complete. Missing release authority stays visible through the all-false
+authority boundary; it is not fabricated as project work or used to hide a
+missing baseline or later source drift.
 
 `project takeover` adds the current candidate, its exact added/changed/removed
 path delta from the previous imported delivery, and handoffs that are stale

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,14 +7,14 @@ description: Run receipt-backed, project-owned work with OwlCoda RunKit. Use whe
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Bundled registry-gated artifact: standalone `owlrunkit@0.22.1`, bundling Contract
-`0.2` and Core `0.22.1` with manifest
-`sha256:41447517f78b74a070802bd67c8b066a833eedde72e2606e3127fa1258c289a4`.
+Bundled registry-gated artifact: standalone `owlrunkit@0.23.0`, bundling Contract
+`0.2` and Core `0.23.0` with manifest
+`sha256:cf9c1c5985cd0e960640f13fba66f92f0135449b6bc5036bc68ee9021053b9e4`.
 Registry adoption remains fail-closed until exact official npm registry
-provenance for `owlrunkit@0.22.1` is independently verified. The published
-rollback baseline for this artifact is `owlrunkit@0.22.0`, with SHA-1
-`23fb305f24b2487a2a1de3c8e407d7e4606a3b86` and canonical npm tarball URL
-`https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.22.0.tgz`.
+provenance for `owlrunkit@0.23.0` is independently verified. The published
+rollback baseline for this artifact is `owlrunkit@0.22.1`, with SHA-1
+`675b417134825e876e6e2b7c2e8d2aea4045e59f` and canonical npm tarball URL
+`https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.22.1.tgz`.
 The root `owlcoda` package has a separate version lifecycle.
 
 The session is an execution interface. Project artifacts are the system of record.
@@ -166,9 +166,14 @@ remains available for existing automation and compatibility.
   entry snapshot, report `candidate_only`; never claim an entry-to-candidate
   overlay proof that was not captured.
 - "Start the next project": only after status derives `overall=completed`,
-  invoke `project successor` with a different V1 definition and explicit
-  transition ID. Preserve the content-addressed archive and journal; never
-  use handoff, takeover, install, or publication as successor authority.
+  first inspect Status V5 completion continuity. If the source workspace has
+  unmodeled drift, use read-only `project successor scaffold --from-workspace
+  <git-root> --dry-run` to review the bounded delta and mechanical historical
+  lanes. A human must still choose the new objective, WorkItems, owners, and
+  acceptance before invoking `project successor` with a different V1
+  definition and explicit transition ID. Preserve the content-addressed
+  archive and journal; never use handoff, takeover, install, or publication as
+  successor authority.
 - "Capture this as data": append a data candidate only. Never call it a dataset
   member without a separate admission decision.
 - "Do not run that check yet": append one deferred verification with stable
@@ -230,6 +235,8 @@ npx --no-install owlrunkit project integrate --workspace "$PROJECT_ROOT" --gate
   --at "$OCCURRED_AT" --summary "$SUMMARY" --evidence "$EVIDENCE_REF"
 npx --no-install owlrunkit project status --workspace "$PROJECT_ROOT" --json
 npx --no-install owlrunkit project takeover --workspace "$PROJECT_ROOT" --agent "$AGENT_ID" --json
+npx --no-install owlrunkit project successor scaffold --workspace "$PROJECT_ROOT" \
+  --from-workspace "$TARGET_WORKTREE" --dry-run --json
 npx --no-install owlrunkit project successor --workspace "$PROJECT_ROOT" \
   --transition-id "$TRANSITION_ID" --at "$OCCURRED_AT" \
   --definition "$NEXT_PROJECT_JSON" --reason "$SUCCESSOR_REASON" --json
@@ -260,6 +267,21 @@ journal. Do not infer a historical archive scan from `status` or `takeover`;
 those remain active-truth projections. The receipt never grants Git, release,
 publication, deployment, package-adoption, or writer authority.
 
+Current `project status` emits Project Status V5. For a completed WorkItem
+ledger, `completionContinuity` distinguishes an exactly matching imported
+source-delivery baseline, a missing baseline, an unverifiable modeled target,
+and later unmodeled workspace drift. A matching source baseline means only that
+no unmodeled source continuation was observed; it does not imply integration,
+release, deployment, product acceptance, or business completion.
+
+`project successor scaffold` is strictly read-only and requires `--dry-run`.
+It may use historical `ownedPaths` to group changed paths mechanically, but it
+must leave project identity, objective, titles, owners, and acceptance unset
+for human confirmation. Never treat its lane suggestions as a successor
+decision or invoke the mutating successor automatically. It writes no project
+truth, execution, lease, receipt, archive, or Git state and keeps every
+authority field false.
+
 ## Batch verification around a small explainable closure
 
 Use a verification micro-batch when two or three related changes share one
@@ -315,9 +337,9 @@ below has no CLI entry.
 
 ```bash
 npx --no-install owlrunkit bootstrap --workspace "$PROJECT_ROOT" \
-  --exact owlrunkit@0.22.1 --dry-run
+  --exact owlrunkit@0.23.0 --dry-run
 npx --no-install owlrunkit bootstrap --workspace "$PROJECT_ROOT" \
-  --exact owlrunkit@0.22.1 --apply
+  --exact owlrunkit@0.23.0 --apply
 npx --no-install owlrunkit init --workspace "$PROJECT_ROOT"
 npx --no-install owlrunkit inspect --json --workspace "$PROJECT_ROOT"
 npx --no-install owlrunkit inspect --json --compact --workspace "$PROJECT_ROOT"

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,9 +2,9 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.22.1",
-    "coreManifestSha256": "sha256:41447517f78b74a070802bd67c8b066a833eedde72e2606e3127fa1258c289a4",
-    "coreSourceRef": "artifact:sha256:41447517f78b74a070802bd67c8b066a833eedde72e2606e3127fa1258c289a4"
+    "coreVersion": "0.23.0",
+    "coreManifestSha256": "sha256:cf9c1c5985cd0e960640f13fba66f92f0135449b6bc5036bc68ee9021053b9e4",
+    "coreSourceRef": "artifact:sha256:cf9c1c5985cd0e960640f13fba66f92f0135449b6bc5036bc68ee9021053b9e4"
   },
   "authorizationPolicy": "external_explicit_authority_required"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "description": "Project Driver for cross-Agent project continuity and progression; execution, evidence, verification, and recovery are the underlying trust substrate.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -42,6 +42,11 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.23.0",
+      "coreManifestSha256": "sha256:cf9c1c5985cd0e960640f13fba66f92f0135449b6bc5036bc68ee9021053b9e4"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.22.1",

package/packages/attest/src/quick.mjs

@@ -23,6 +23,11 @@ import {
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.23.0",
+    coreManifestSha256: "sha256:cf9c1c5985cd0e960640f13fba66f92f0135449b6bc5036bc68ee9021053b9e4",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.22.1",

package/registry-release-policy-v2.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV2",
   "status": "release_artifact_registry_gated",
   "packageName": "owlrunkit",
-  "artifactVersion": "0.22.1",
+  "artifactVersion": "0.23.0",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,
@@ -23,10 +23,10 @@
   ],
   "rollbackRelease": {
     "packageName": "owlrunkit",
-    "version": "0.22.0",
-    "shasum": "23fb305f24b2487a2a1de3c8e407d7e4606a3b86",
-    "integrity": "sha512-sQVFAOvOT7/qLWj5xwLkTvx2g2CGXT3JtRgQDK5Ku2okHGXN6FsgERYKv21IYOxRbEjABamhUwENTflw8ipeSQ==",
-    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.22.0.tgz"
+    "version": "0.22.1",
+    "shasum": "675b417134825e876e6e2b7c2e8d2aea4045e59f",
+    "integrity": "sha512-Vp+o6u00Di18fuPFcbEzdBpRd79e8P4yZq77RF2wuJG5ITjUGf/pAzOb5sOOVzj8P/MXcnhKcnRQKT70kUyZuA==",
+    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.22.1.tgz"
   },
   "registryEvidenceMustBeExternal": true,
   "registryEvidenceSchemaVersion": "OwlCodaRunKitRegistryReleaseEvidenceV1",

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.22.1",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.22.1",
+  "name": "owlrunkit-0.23.0",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.23.0",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,7 +14,7 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.22.1",
+      "versionInfo": "0.23.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.22.1"
+          "referenceLocator": "pkg:npm/owlrunkit@0.23.0"
         }
       ]
     }

package/scripts/runkit-contract/core-contract.mjs

@@ -14,7 +14,7 @@ import { fileURLToPath } from "node:url";
 import { parseProjectControlState } from "./project-control-parser.mjs";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.22.1";
+export const CORE_VERSION = "0.23.0";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [
@@ -50,6 +50,7 @@ const CORE_FILES = [
   "project-cli-resolver.mjs",
   "project-control-parser.mjs",
   "project-control-state.mjs",
+  "project-completion-continuity.mjs",
   "project-external-delivery.mjs",
   "provenance-common.mjs",
   "quick-attest.mjs",
@@ -134,6 +135,7 @@ const CORE_FILES = [
   "schemas/profile-reconcile-receipt-v1.schema.json",
   "schemas/project-config.schema.json",
   "schemas/project-config-v2.schema.json",
+  "schemas/project-completion-continuity-v1.schema.json",
   "schemas/profiles.schema.json",
   "schemas/remote-deployment-manifest-v1.schema.json",
   "schemas/remote-deployment-result-v1.schema.json",
@@ -178,6 +180,8 @@ const CORE_FILES = [
   "schemas/team-project-status-v2.schema.json",
   "schemas/team-project-status-v3.schema.json",
   "schemas/team-project-status-v4.schema.json",
+  "schemas/team-project-status-v5.schema.json",
+  "schemas/successor-scaffold-v1.schema.json",
   "schemas/external-gate-v1.schema.json",
   "schemas/delivery-lifecycle-v1.schema.json",
   "schemas/usage-mode-recommendation-v1.schema.json",

package/scripts/runkit-contract/formal-workflow.mjs

@@ -1394,7 +1394,7 @@ export function resumeCompletedFormalFinishV1({
     };
   }
   if (
-    new Set(["0.19.2", "0.20.0", "0.20.1", "0.21.0", "0.21.1", "0.22.0", "0.22.1"]).has(
+    new Set(["0.19.2", "0.20.0", "0.20.1", "0.21.0", "0.21.1", "0.22.0", "0.22.1", "0.23.0"]).has(
       closeout.artifact.core?.coreVersion,
     )
     && (

package/scripts/runkit-contract/project-cli-resolver.mjs

@@ -23,10 +23,14 @@ const SELF_NORMALIZED_QUICK_CORE_VERSIONS = new Set([
   "0.21.1",
   "0.22.0",
   "0.22.1",
+  "0.23.0",
 ]);
 const EXACT_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?$/;
 const SHA256_REF = /^sha256:[a-f0-9]{64}$/;
 const TRUSTED_PRIOR_CORE_IDENTITIES = new Map([
+  ["0.22.1", new Set([
+    "sha256:41447517f78b74a070802bd67c8b066a833eedde72e2606e3127fa1258c289a4",
+  ])],
   ["0.22.0", new Set([
     "sha256:e79d2123d88ada0e2e31f62fabee83b1d661ca02e93a383691a502f721ae1e7e",
   ])],