ATape v0.5.11

ATape v0.5.11: Automatic update bridge

This coordinated bridge contains the CLI and seven official Adapters at 0.5.11,
with matching Web, Server and container metadata. Authentication remains
auth-v1, including the 180 days absolute Web Session lifetime. Release and
minimum CLI metadata are 0.5.11. Implementation, integration, npm publication
and Server deployment are separate actions.

Target-owned automatic updates

The new atape.update-target.v1 Interface hands preparation, Adapter decoding,
server admission, capture migration and recovery to the verified target CLI.
The parent verifies immutable executable identity and exchanges bounded durable
requests/receipts. An interrupted handoff delegates to its exact recorded
target before the parent reads any target-specific capture state. Existing
maintenance, forward-only fences, Stop intent and automatic-update preferences
remain part of activation and recovery.

Target-owned execution handoff completes through the stable public control
Interface before private migration begins. Collector readiness waits for the
durable handoff to settle. Existing private scheduled launchers are refreshed
without changing their OS registration. The global npm entry remains unchanged;
normal updates do not require write permission to its installation prefix.

The published 0.5.10 parent cannot decode v5 Adapter manifests before target
handoff. This release therefore retains genuine Codex Canonical v3/projection 5
and Claude publication v4/source active-path.2 behavior. Those implementations
match their capability declarations; they do not emit the later file-activity
facts. New Host, Server and reader support for richer data remains available.

The explicit publication channel is legacy-bridge. The release advertises
v1/v2/v3 metadata and remains the legacy npm/GitHub Latest target. Subsequent
v5 feature packages use the target-owned channel and catalog v3. Legacy routes
remain on this bridge so a long-offline 0.5.10 client can automatically traverse
both stages. This is independent of private journal migration plans.

This automatic bridge starts at genuine 0.5.10. The historical 0.5.9 Codex
clock transition still requires its documented stopped entry replacement;
this release cannot change that already-published parent's decoder. Installed
automatic-transition acceptance uses POSIX process and PTY contracts and does
not establish the same lifecycle on Windows.

See target-owned updates,
publication policy and
ADR-0126.

Session Analytics and compatibility

The Server and Web include stable tool identity and Analytics v4 file-activity
support from the integrated feature increment. Exact paths, read/edit/search
counts and conditional original-record jumps require explicitly captured
file-activity facts. The bridge's official providers do not produce those
facts. Missing coverage is reported as unavailable/unknown, not inferred from
text, shell commands or search results. Cursor's controlled capture scope is
unchanged; live account acceptance remains outstanding.

The SQL schema remains version 24. Accepting Canonical/publication v5 creates a
durable format boundary even without a new SQL migration: a pre-v5 Server must
not be restored using only an image switch after v5 writes. Keep paired database
and Raw backups and use compatible forward recovery.

Acceptance and remaining limits

Installed acceptance passed with authentic npm-published 0.5.10, the actual
0.5.11 bridge artifacts and actual-source 0.5.12 feature artifacts. The unchanged
global 0.5.10 entry automatically traversed both stages with a read-only npm
prefix, then replayed native-format file-activity facts and continued capture.
Conversation/event identity, acknowledged progress, Raw receipts, credentials,
Projects, tools, Stop intent and updates-off preference were checked.

Four installed SIGKILL scenarios also passed: after public control sync, after
the first private authorization ledger write, before Collector readiness, and
while an orphan retained the migration apply lock. Recovery through the unchanged
old public entry selected the exact recorded target. A genuine queued old worker
could not cross the orphan's apply lock or resume stopped collection. Native
service-manager probes were rejected by the external Test Adapter; no OS job was
registered. These tests use constructed Codex native source and an authenticated
HTTP Test Adapter. They do not establish live Claude/Cursor, native login or
production acceptance. A stopped manual npm replacement is separate evidence.

The candidate acceptance record binds
the exact tested artifacts, source identities, completed checks, recovered
verification failures and remaining limits. Local verification and exact-head
CI evidence remain distinct.

The local full PostgreSQL run failed one authentication maintenance expiry
assertion; its complete installed HTTP/provider corpus passed. An unchanged
isolated rerun passed after diagnostics observed Docker database wall-clock
reversals. The initial full-run cause remains unproven. Complete exact-head
Linux integration and Security CI must pass before publication; no automated
gate is waived.

The user's explicit request to publish npm authorizes the incomplete manual
staging waiver under ADR-0048. Automated CI, integration and security gates
remain mandatory. The following manual checks remain unverified:

• candidate-artifacts
• official-topology
• github-provider-staging-smoke
• official-domain-egress-deny-smoke
• two-user-two-team
• waf-tls-callback
• backup-restore
• observability-secret-sample
• rollback
• release-signoff

The staging record deliberately remains pending.
Candidate-bound publication and deployment evidence is recorded only after the
corresponding actions occur.

{
"protocol": "atape.release-bundle.v1",
"version": "0.5.11",
"captureStateContract": "atape.client.v3-capture.v2",
"updateControlProtocol": "atape.update-control.v1",
"packages": [
{
"name": "@atape/adapter-claude",
"integrity": "sha512-fgkgFrNltDa6+Vq/0+SE4xmqvCyPL1SdYgP0KIDu/uas2Oz5OyLly/562zzMkfKfymuFCZUGALqzMMbQ8BLw9Q==",
"tarball": "https://registry.npmjs.org/@atape/adapter-claude/-/adapter-claude-0.5.11.tgz"
},
{
"name": "@atape/adapter-codebuddy",
"integrity": "sha512-3BbggtxinR210yLzqk1GKaRxbT1aWnnv9Xe6/NWDvzkBh5lWnawva6azCGeF9gKjr7UjZgEUKxihzRgQ9eBqKA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codebuddy/-/adapter-codebuddy-0.5.11.tgz"
},
{
"name": "@atape/adapter-codex",
"integrity": "sha512-b3h4/RBl8GbNUN/M2IxkjnV/IujJqOLl1z99C9w6mzP499fENSU08SQbjXRmEephe05J92JmcfkPZEcd6wlLDw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codex/-/adapter-codex-0.5.11.tgz"
},
{
"name": "@atape/adapter-cursor",
"integrity": "sha512-Ggc3vy7laTb2imRSjK6YvbLqKkSbF1Yl7I5v+yI5BxuwzBe4t8DnQg3Yqn9zs2oQi7X9SsxH7HhyrBqy2UAfSA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-cursor/-/adapter-cursor-0.5.11.tgz"
},
{
"name": "@atape/adapter-grok",
"integrity": "sha512-sKY39aSPOt55XWtHZ6jrLZvcukIMdtfdfjqv+c0p3G1L6EqMZD6ai9mHigy1xcms17Xp/tB5BShPWrvw/PNICw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-grok/-/adapter-grok-0.5.11.tgz"
},
{
"name": "@atape/adapter-kimi",
"integrity": "sha512-y8iAqWqBT+I2E22ofgjVgATIFE9GrMGkCbpSpNw8UwtDx13GyUkijb0YmktcB0sQ7TWr8gmThL9wWeuLlKXacA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-kimi/-/adapter-kimi-0.5.11.tgz"
},
{
"name": "@atape/adapter-opencode",
"integrity": "sha512-WD05HLDZyZg+24SAm9MAjk0Ob+tMoyuzI5Kk/teESNzWNX5aN7X8sCLAcls7NyaQg4uOmRfWAkclvKAR5CW4YQ==",
"tarball": "https://registry.npmjs.org/@atape/adapter-opencode/-/adapter-opencode-0.5.11.tgz"
},
{
"name": "@atape/cli",
"integrity": "sha512-SYZQnSmI9QSKnzEWumIIE22saB919cA2ebGJzCGfnaI4lDLiGLA4rW9c605464B7SBhNfY8zUV0C6Gvsj2rCZA==",
"tarball": "https://registry.npmjs.org/@atape/cli/-/cli-0.5.11.tgz"
}
]
}

{
"protocol": "atape.release-bundle.v2",
"version": "0.5.11",
"captureStateContract": "atape.client.v3-capture.v2",
"updateControlProtocol": "atape.update-control.v1",
"packages": [
{
"name": "@atape/adapter-claude",
"integrity": "sha512-fgkgFrNltDa6+Vq/0+SE4xmqvCyPL1SdYgP0KIDu/uas2Oz5OyLly/562zzMkfKfymuFCZUGALqzMMbQ8BLw9Q==",
"tarball": "https://registry.npmjs.org/@atape/adapter-claude/-/adapter-claude-0.5.11.tgz"
},
{
"name": "@atape/adapter-codebuddy",
"integrity": "sha512-3BbggtxinR210yLzqk1GKaRxbT1aWnnv9Xe6/NWDvzkBh5lWnawva6azCGeF9gKjr7UjZgEUKxihzRgQ9eBqKA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codebuddy/-/adapter-codebuddy-0.5.11.tgz"
},
{
"name": "@atape/adapter-codex",
"integrity": "sha512-b3h4/RBl8GbNUN/M2IxkjnV/IujJqOLl1z99C9w6mzP499fENSU08SQbjXRmEephe05J92JmcfkPZEcd6wlLDw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codex/-/adapter-codex-0.5.11.tgz"
},
{
"name": "@atape/adapter-cursor",
"integrity": "sha512-Ggc3vy7laTb2imRSjK6YvbLqKkSbF1Yl7I5v+yI5BxuwzBe4t8DnQg3Yqn9zs2oQi7X9SsxH7HhyrBqy2UAfSA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-cursor/-/adapter-cursor-0.5.11.tgz"
},
{
"name": "@atape/adapter-grok",
"integrity": "sha512-sKY39aSPOt55XWtHZ6jrLZvcukIMdtfdfjqv+c0p3G1L6EqMZD6ai9mHigy1xcms17Xp/tB5BShPWrvw/PNICw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-grok/-/adapter-grok-0.5.11.tgz"
},
{
"name": "@atape/adapter-kimi",
"integrity": "sha512-y8iAqWqBT+I2E22ofgjVgATIFE9GrMGkCbpSpNw8UwtDx13GyUkijb0YmktcB0sQ7TWr8gmThL9wWeuLlKXacA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-kimi/-/adapter-kimi-0.5.11.tgz"
},
{
"name": "@atape/adapter-opencode",
"integrity": "sha512-WD05HLDZyZg+24SAm9MAjk0Ob+tMoyuzI5Kk/teESNzWNX5aN7X8sCLAcls7NyaQg4uOmRfWAkclvKAR5CW4YQ==",
"tarball": "https://registry.npmjs.org/@atape/adapter-opencode/-/adapter-opencode-0.5.11.tgz"
},
{
"name": "@atape/cli",
"integrity": "sha512-SYZQnSmI9QSKnzEWumIIE22saB919cA2ebGJzCGfnaI4lDLiGLA4rW9c605464B7SBhNfY8zUV0C6Gvsj2rCZA==",
"tarball": "https://registry.npmjs.org/@atape/cli/-/cli-0.5.11.tgz"
}
],
"migration": {
"protocol": "atape.capture-migration.v1",
"id": "journal-v7-to-v8",
"fromCaptureStateContracts": [
"atape.client.v3-capture.v1",
"atape.client.v3-capture.v2"
]
}
}

{
"protocol": "atape.release-bundle.v3",
"version": "0.5.11",
"captureStateContract": "atape.client.v3-capture.v2",
"updateControlProtocol": "atape.update-control.v1",
"packages": [
{
"name": "@atape/adapter-claude",
"integrity": "sha512-fgkgFrNltDa6+Vq/0+SE4xmqvCyPL1SdYgP0KIDu/uas2Oz5OyLly/562zzMkfKfymuFCZUGALqzMMbQ8BLw9Q==",
"tarball": "https://registry.npmjs.org/@atape/adapter-claude/-/adapter-claude-0.5.11.tgz"
},
{
"name": "@atape/adapter-codebuddy",
"integrity": "sha512-3BbggtxinR210yLzqk1GKaRxbT1aWnnv9Xe6/NWDvzkBh5lWnawva6azCGeF9gKjr7UjZgEUKxihzRgQ9eBqKA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codebuddy/-/adapter-codebuddy-0.5.11.tgz"
},
{
"name": "@atape/adapter-codex",
"integrity": "sha512-b3h4/RBl8GbNUN/M2IxkjnV/IujJqOLl1z99C9w6mzP499fENSU08SQbjXRmEephe05J92JmcfkPZEcd6wlLDw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codex/-/adapter-codex-0.5.11.tgz"
},
{
"name": "@atape/adapter-cursor",
"integrity": "sha512-Ggc3vy7laTb2imRSjK6YvbLqKkSbF1Yl7I5v+yI5BxuwzBe4t8DnQg3Yqn9zs2oQi7X9SsxH7HhyrBqy2UAfSA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-cursor/-/adapter-cursor-0.5.11.tgz"
},
{
"name": "@atape/adapter-grok",
"integrity": "sha512-sKY39aSPOt55XWtHZ6jrLZvcukIMdtfdfjqv+c0p3G1L6EqMZD6ai9mHigy1xcms17Xp/tB5BShPWrvw/PNICw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-grok/-/adapter-grok-0.5.11.tgz"
},
{
"name": "@atape/adapter-kimi",
"integrity": "sha512-y8iAqWqBT+I2E22ofgjVgATIFE9GrMGkCbpSpNw8UwtDx13GyUkijb0YmktcB0sQ7TWr8gmThL9wWeuLlKXacA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-kimi/-/adapter-kimi-0.5.11.tgz"
},
{
"name": "@atape/adapter-opencode",
"integrity": "sha512-WD05HLDZyZg+24SAm9MAjk0Ob+tMoyuzI5Kk/teESNzWNX5aN7X8sCLAcls7NyaQg4uOmRfWAkclvKAR5CW4YQ==",
"tarball": "https://registry.npmjs.org/@atape/adapter-opencode/-/adapter-opencode-0.5.11.tgz"
},
{
"name": "@atape/cli",
"integrity": "sha512-SYZQnSmI9QSKnzEWumIIE22saB919cA2ebGJzCGfnaI4lDLiGLA4rW9c605464B7SBhNfY8zUV0C6Gvsj2rCZA==",
"tarball": "https://registry.npmjs.org/@atape/cli/-/cli-0.5.11.tgz"
}
],
"updateTargetProtocol": "atape.update-target.v1",
"fromCaptureStateContracts": [
"atape.client.v3-capture.v1",
"atape.client.v3-capture.v2"
]
}