Skip to content

Bluetape Skills 1.1.0

Choose a tag to compare

View all tags
@debop debop released this 14 Jul 08:02
v1.1.0
a63c19e

Highlights

Bluetape Skills 1.1.0 is a feature and maintenance release that adds the Phase 2 native workflow runtime to the canonical public bundle. It keeps all 14 Bluetape skills aligned on one manifest-driven coordination contract while preserving the boundary between reusable skills and private Codex runtime state.

Native workflow runtime

  • Adds guarded run and lane lifecycle commands through bluetape-flow.py, the only supported writer for .bluetape workflow state.
  • Adds topology-based completion, liveness decisions, receipt-backed recovery and handoff, immutable live reports, and bounded evidence handling.
  • Ships manifest 1.1 together with receipt, topology, and liveness contracts plus regression coverage for lifecycle, recovery, locking, scale, and rendered layouts.

The runtime records observed Codex coordination; it does not replace Codex agent spawn, messaging, waiting, or interruption tools.

Security and distribution boundary

  • Hardens owner fencing, filesystem containment, permission checks, stale-lock recovery, receipt verification, and recovery-run provenance.
  • Keeps user memory, local rules and hooks, configuration, plugin caches, secrets, private runtime state, and retired aliases outside the public bundle.
  • Declares code-review and self-audit as external companion skills. They remain separate installations and are not bundled here.

Upgrade

Clone the immutable release tag, validate it, and install with backup-preserving replacement:

git clone --branch v1.1.0 --depth 1 https://github.com/bluetape4k/bluetape-skills.git bluetape-skills-v1.1.0
cd bluetape-skills-v1.1.0
./scripts/validate.sh
./scripts/install.sh --force

Validation requires Bash, rg, Python 3, and uv. Restart Codex after installation so the updated skills are discovered.

Verification

The release candidate passed the complete bundle validator with 14 canonical skills, 133 tests, and 151 subtests. The canonical source and public bundle matched across 83 files with no missing, extra, or changed payloads. Both tar.gz and zip archives passed validation and fresh installation of all 14 skills; SHA-256 manifests, secret scanning, private-path boundary checks, and SSH signing readiness also passed.

Related: tracking issue #5, release candidate PR #6

Full Changelog: v1.0.0...v1.1.0

Assets 5
Loading