@workit/core 0.4.0

Summary

@workit/core 0.4.0 is a runtime contract and evidence hardening release.

The root @workit/core import remains unchanged. New capabilities live behind explicit subpaths or existing subpath contracts.

Changes

• Add @workit/core/contracts for declared cancellable and shielded task composition.
• Add @workit/core/fault for bounded in-process lifecycle fault scenarios over the real WorkIt scope engine.
• Add declared agent tool capability checks to @workit/core/ai, including AgentCapabilityError and denial events before denied tool bodies run.
• Extend @workit/core/ledger with caller-owned SQLite and Postgres receipt ledger adapters.
• Add executable evidence for typed cancellation contracts, bounded fault scenarios, agent authority, SQL receipt ledgers, and resource audit visibility.
• Extend package-consumer coverage for ESM, CommonJS, strict TypeScript, framework fixtures, and browser/worker unsupported-runtime checks.

Boundaries

• @workit/core/contracts is a compile-time intent contract; it does not prove arbitrary task bodies observe ctx.signal.
• @workit/core/fault is not OS fault injection, process crash recovery, network chaos testing, or deterministic scheduler replay.
• SQL ledger adapters define caller-owned receipt storage ports; WorkIt is not a database framework.

Validation

• npm run test:coverage: 27 files, 354 tests, 100% statements/branches/functions/lines.
• npm run test:evidence: 22 proof files, 0 failed.
• npm run verify: passed.
• npm run check:release: passed.
• Release provenance workflow: passed and published npm package.
• npm latest: @workit/core@0.4.0.

@workit/core 0.3.0

Add the @workit/core/time-policy planning subpath for declared async time policy analysis. The root import remains unchanged.

• Add planTimePolicy() for conservative upper-bound planning across attempt, series, parallel, retry, hedge, timeout, and deadline policy trees.
• Add estimateRetry() and estimateHedge() helper planners aligned with the runtime retry delay and hedge stagger contracts.
• Add bounded correctness evidence for retry/deadline planning, the finite time-policy cost model, and nested composition rules.
• Add package-consumer coverage for the new subpath across ESM, CommonJS, and strict TypeScript fixtures.
• Document that the planner analyzes declared policy bounds before execution; it does not run task bodies or prove wall-clock scheduler behavior.

Validation before publish:

• PR #51 CI passed: package verify, site build, CodeQL.
• Release Provenance dry run passed.
• Release Provenance publish passed with npm provenance.

v0.2.0

Summary

@workit/core 0.2.0 adds the core ownership and evidence foundation as explicit package subpaths while keeping the root import stable.

Highlights

• Add replay receipts, receipt ledgers, receipt analysis, activity terminal boundaries, and resource ownership helpers as explicit subpaths.
• Improve npm discoverability with targeted package keywords and a more specific package description.
• Clarify README examples for retry policies, TaskFn invocation, renderTree(scope.status()), and work().do() fail-fast output.
• Normalize activity results before persistence so first execution and replay return the same JSON value.
• Derive OpenTelemetry instrumentation version from package metadata.
• Document the buffered work().do() contract and cooperative cancellation boundary for hedged work.

Validation

• GitHub CI passed for PR #50.
• Release workflow dry-run passed.
• Release workflow published @workit/core@0.2.0 with npm provenance.
• Published-package smoke install passed for ESM, CJS, and selected subpaths.

v0.1.5

Summary

Move @workit/core into packages/core and make the repository root a private workspace coordinator.

This is a layout/build release only:

• same npm package: @workit/core
• same imports
• same public exports
• no new runtime APIs
• no feature changes

Validation

• npm run verify
• npm run site:build
• GitHub Actions release provenance workflow

Package

• npm: https://www.npmjs.com/package/@workit/core
• live examples: https://workruntime.github.io/workit/

@workit/core v0.1.4

Changes

• Add live examples link to the README: https://workruntime.github.io/workit/
• Add npm package link to the README: https://www.npmjs.com/package/@workit/core
• Publish the GitHub Pages examples site with the optimized WorkIt wordmark and favicon.
• Bump package metadata to 0.1.4.

Runtime/API

• No runtime API changes.
• Root import bundle size remains within the existing release gate.

Verification

• Release Provenance workflow passed on signed tag v0.1.4.
• npm published @workit/core@0.1.4 with dist-tag latest.

@workit/core v0.1.3

@workit/core v0.1.3

Patch release for the published WorkIt runtime package.

Changed

• Fixed the optional OpenTelemetry subpath import path for synthetic Node eval entrypoints.
• Added regression coverage for importing @workit/core/otel from node -e.

Evidence

• GitHub Release Provenance workflow passed for v0.1.3.
• npm package published with provenance: @workit/core@0.1.3.
• Full verification and coverage gates passed before publication.

npm

npm install @workit/core@0.1.3

@workit/core v0.1.2

@workit/core v0.1.2

Published release record for the signed v0.1.2 tag.

Verification:

• npm package: https://www.npmjs.com/package/@workit/core/v/0.1.2
• commit: 1b424f0
• release provenance workflow: https://github.com/WorkRuntime/workit/actions/runs/25570038309
• local gates: npm run verify, npm run test:coverage, npm run test:evidence, npm run bench:articles

Supply-chain notes:

• npm provenance enabled
• CycloneDX SBOM generated and checked
• package dry-run inspected before publication