@aikdna/kdna-cli 0.26.2 → 0.26.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aikdna/kdna-cli",
-  "version": "0.26.2",
+  "version": "0.26.3",
   "description": "KDNA CLI — runtime control plane for verifying, installing, loading, comparing, publishing, and auditing existing .kdna assets.",
   "type": "commonjs",
   "bin": {

package/src/cmds/domain.js

@@ -314,21 +314,9 @@ function cmdPack(dir, outputDir) {
   if (!core) error('KDNA_Core.json not found or invalid');
   if (!pat) error('KDNA_Patterns.json not found or invalid');
 
-  console.warn('Warning: kdna dev pack creates a dev-only non-trusted .kdna bundle.');
-  console.warn('Use KDNA Studio compile/export to create a trusted canonical .kdna asset.');
-
-  // Human Lock Gate — check judgment-class cards before packing
-  const { checkHumanLock } = require('../publish');
-  const hl = checkHumanLock(abs);
-  if (!hl.passed) {
-    console.error('Human Lock Gate: BLOCKED');
-    for (const issue of hl.issues) {
-      console.error(`  ✗ ${issue}`);
-    }
-    console.error('Judgment-class cards must be locked with valid Human Lock before packing.');
-    console.error('Use kdna publish --check for details.');
-    process.exit(EXIT.HUMAN_LOCK_REQUIRED);
-  }
+  console.warn('Warning: kdna dev pack creates a dev-only .kdna bundle.');
+  console.warn('Use KDNA Studio compile/export for release-grade authoring evidence.');
+  console.warn('Human Lock is optional provenance and is not required for format validity.');
 
   const domainName = core.meta?.domain || path.basename(abs);
 

package/src/publish.js

@@ -710,12 +710,6 @@ function validateAuthoringProvenance(manifest) {
   const badge = manifest.quality_badge || 'untested';
   const highTrust = (badgeRank[badge] || 0) >= badgeRank.tested;
   const authoring = manifest.authoring;
-  const studioCompatible = new Set([
-    'kdna-studio',
-    'kdna-studio-cli',
-    'kdna-studio-sdk',
-    'third-party-studio-compatible',
-  ]);
 
   if (!authoring) {
     if (highTrust) issues.push(`quality_badge "${badge}" requires authoring provenance`);
@@ -724,8 +718,18 @@ function validateAuthoringProvenance(manifest) {
   if (authoring.created_by === 'manual-dev-source' && highTrust) {
     issues.push('manual-dev-source assets cannot claim tested or higher quality');
   }
-  if (highTrust && !studioCompatible.has(authoring.created_by)) {
-    issues.push(`quality_badge "${badge}" requires Studio-compatible created_by`);
+  // Conformance-based check: any tool that passes the official validator is compatible.
+  // The authoring.conformance block records validator identity and pass status.
+  if (highTrust) {
+    const conformance = authoring.conformance;
+    if (!conformance || !conformance.passed) {
+      issues.push(
+        `quality_badge "${badge}" requires conformance validation (authoring.conformance.passed = true)`,
+      );
+    }
+    if (!conformance || !conformance.spec_version) {
+      issues.push('trusted assets require authoring.conformance.spec_version');
+    }
   }
   if (highTrust && !authoring.compiler) issues.push('trusted assets require authoring.compiler');
   if (highTrust && !authoring.compiler_version) {

package/src/verify.js

@@ -20,6 +20,7 @@ const path = require('path');
 const { RegistryResolver, parseName, registryTrustIssues, isEntryRevoked } = require('./registry');
 const { EXIT, isYesNoSelfCheck } = require('./cmds/_common');
 const { licenseDecryptOptionsForManifest } = require('./cmds/license');
+const { validateAuthoringProvenance } = require('./publish');
 
 const {
   getInstalled,
@@ -515,71 +516,24 @@ function checkJudgment(input, options = {}) {
   };
   const badge = manifest?.quality_badge || 'untested';
   const highTrust = (badgeRank[badge] || 0) >= badgeRank.tested;
-  const authoring = manifest?.authoring;
-  const studioCompatible = new Set([
-    'kdna-studio',
-    'kdna-studio-cli',
-    'kdna-studio-sdk',
-    'third-party-studio-compatible',
-  ]);
   if (highTrust) {
-    if (!authoring) {
-      score.max += 2;
+    const provenanceIssues = validateAuthoringProvenance(manifest || {});
+    score.max += 1;
+    if (provenanceIssues.length) {
       issues.push({
         severity: 'error',
-        msg: `quality_badge ${badge} requires authoring provenance`,
+        msg: `quality_badge ${badge} authoring provenance gate failed: ${provenanceIssues.join('; ')}`,
       });
     } else {
-      const okSource = studioCompatible.has(authoring.created_by);
-      bump(1, okSource ? 1 : 0, `authoring.created_by: ${authoring.created_by || '?'}`);
-      if (!okSource) {
-        issues.push({
-          severity: 'error',
-          msg: 'trusted quality requires Studio-compatible authoring.created_by',
-        });
-      }
-      const hasCompiler = !!(
-        authoring.compiler &&
-        authoring.compiler_version &&
-        authoring.compiled_at
-      );
-      bump(1, hasCompiler ? 1 : 0, 'authoring compiler metadata present');
-      if (!hasCompiler) {
-        issues.push({
-          severity: 'error',
-          msg: 'trusted quality requires compiler, compiler_version, and compiled_at',
-        });
-      }
-      const hasIdentity = [
-        'asset_uid',
-        'project_uid',
-        'build_id',
-        'domain_id',
-        'content_digest',
-      ].every((field) => !!(authoring[field] || manifest[field]));
-      bump(1, hasIdentity ? 1 : 0, 'authoring asset identity present');
-      if (!hasIdentity) {
-        issues.push({
-          severity: 'error',
-          msg: 'trusted quality requires asset_uid, project_uid, build_id, domain_id, and content_digest',
-        });
-      }
-      const humanConfirmed =
-        authoring.human_confirmed === true && Number(authoring.human_lock_count) > 0;
-      bump(1, humanConfirmed ? 1 : 0, `Human Lock provenance (${authoring.human_lock_count || 0})`);
-      if (!humanConfirmed) {
-        issues.push({
-          severity: 'error',
-          msg: 'trusted quality requires human_confirmed=true and human_lock_count > 0',
-        });
-      }
+      score.total += 1;
+      passed.push('✓ authoring provenance satisfies trusted quality gate');
     }
-  } else if (!authoring) {
+  } else if (!manifest?.authoring) {
     issues.push({
       severity: 'warn',
       msg: 'authoring provenance missing; asset cannot be promoted above untested',
     });
-  } else if (authoring.created_by === 'manual-dev-source') {
+  } else if (manifest.authoring.created_by === 'manual-dev-source') {
     passed.push('authoring provenance: manual-dev-source (untested ceiling)');
   }