Skip to content

Scout v0.2.91

Choose a tag to compare

@arach arach released this 26 Aug 02:26
· 694 commits to main since this release
d09c0c4

Scout v0.2.91 is the first supported public package pair released from the canonical oscout/scout source through npm trusted publishing.

Published to latest:

Both packages carry npm provenance for public merge commit d09c0c4459727a68b7fb90c2e9ad1f8f81e70b0a, built by the canonical release workflow. The attached receipt records the exact retained tarball integrity for the complete pair.

Highlights:

  • Establishes Scout as the canonical public core: strong public primitives plus a complete baseline web control plane.
  • Defines the sustainable product boundary: private products consume exact released public packages and add native apps, hosted services, advanced operations, and product-specific UI through trusted build-time composition—without copied public packages, source mirrors, synchronization jobs, or reverse dependencies.
  • Publishes directly to latest through GitHub OIDC, with the exact candidate bundle uploaded before the first npm mutation.
  • Adds fail-closed recovery bound to the exact workflow, public main SHA, release tag, and retained candidate bytes.
  • Preserves the broker-owned bounded-working-set direction: large registry state belongs behind the broker and can be rehydrated through a reasonable cache TTL.

This is deliberately the two-package transition release. Public publication of @openscout/agent-sessions, @openscout/runtime, and @openscout/web remains deferred until their standalone exports, pack/install checks, and zero-extension composition contract are ready.

Historical note: 0.2.88 was partial, 0.2.89 produced no npm artifacts, and 0.2.90 was complete only under unpromoted staging tags. Those versions are unsupported and superseded by 0.2.91; they should not be manually completed or promoted.