@aikdna/kdna-core 0.15.10 → 0.15.11

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## v0.15.11 (2026-07-03)
+
+**Fix**: repair Core v1 container dispatcher module resolution in the
+published package layout.
+
+- Corrects internal `src/container-dispatcher.js` imports so the dispatcher can
+  load sibling `asset-reader` and `v1` modules after npm packaging.
+- Loads v1 JSON schemas through package-relative static imports before falling
+  back to disk discovery, so bundled server environments do not look for
+  KDNA schemas in the host application directory.
+- Adds regression coverage for loading a v1 source asset through the dispatcher
+  from the package `src/` layout and for validating from a non-repository cwd.
+- Fix webpack bundler warning: use `eval('require')` for ajv meta-schema import
+  so webpack does not try to statically resolve the JSON file at build time.
+
+No public API changes.
 
 ## v0.15.10 (2026-06-30)
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aikdna/kdna-core",
-    "version": "0.15.10",
+    "version": "0.15.11",
     "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
     "engines": {
         "node": ">=18.0.0"

package/src/asset-reader.js

@@ -47,7 +47,7 @@ function parseJson(buf, entryName) {
   try {
     return JSON.parse(Buffer.isBuffer(buf) ? buf.toString('utf8') : String(buf));
   } catch (e) {
-    throw new Error(`${entryName}: invalid JSON: ${e.message}`);
+    throw new Error(`${entryName}: invalid JSON: ${e.message}`, { cause: e });
   }
 }
 
@@ -325,7 +325,7 @@ function verifyHumanLockSignatures(coreData, manifest, errors, warnings) {
   ];
 
   let verified = 0, missing = 0, invalid = 0;
-  for (const [arrayName, _cardType] of CORE_CARD_ARRAYS) {
+  for (const [arrayName] of CORE_CARD_ARRAYS) {
     const cards = coreData?.[arrayName];
     if (!Array.isArray(cards) || cards.length === 0) continue;
 

package/src/container-dispatcher.js

@@ -4,7 +4,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const crypto = require('node:crypto');
 
-const { createKdnaAssetReader } = require('../asset-reader.js');
+const { createKdnaAssetReader } = require('./asset-reader.js');
 
 const MIMETYPE_V1 = 'application/vnd.kdna.asset';
 const MIMETYPE_V2 = 'application/vnd.aikdna.kdna+zip';
@@ -220,7 +220,7 @@ function readSourceDirectory(absPath, _opts) {
  */
 function readV1Container(absPath, _opts) {
   // Delegate to the existing v1 layout reader for validation
-  const v1Layout = require('../v1/index.js').readV1Layout(absPath);
+  const v1Layout = require('./v1/index.js').readV1Layout(absPath);
 
   const containerBuf = fs.readFileSync(absPath);
   const assetDigest = crypto.createHash('sha256').update(containerBuf).digest();

package/src/crypto-profile.js

@@ -102,7 +102,6 @@ function hkdfSha256(ikm, salt = null, info = '', length = 32) {
 
 // ── AES-256-KW (RFC 3394) ─────────────────────────────────────────
 
-const AES_BLOCK = 16;
 const KW_IV = Buffer.from('a6a6a6a6a6a6a6a6', 'hex'); // RFC 3394 default IV
 
 function aesWrap(key, plaintext) {

package/src/public-api.js

@@ -110,7 +110,7 @@ async function validateKDNA(input, options = {}) {
   const reader = readerFrom(options);
   const asset = await asAsset(input, { ...options, reader });
   const assetResult = await reader.verify(asset, options);
-  let dataMap = null;
+  let dataMap;
   let lintResult = { errors: [], warnings: [] };
   let schemaResult = { errors: [], warnings: [] };
   let crossFileResult = { errors: [], warnings: [] };

package/src/v1/index.js

@@ -91,6 +91,16 @@ const FORBIDDEN_OUTPUT_TERMS = Object.freeze([
 let _ajv = null;
 let _validators = null;
 
+function loadPackagedSchemas() {
+  return {
+    manifestSchema: require('../../schema/manifest.schema.json'),
+    payloadSchema: require('../../schema/payload-profile-v1.schema.json'),
+    bundlePayloadSchema: require('../../schema/bundle-profile-v1.schema.json'),
+    checksumsSchema: require('../../schema/checksums.schema.json'),
+    loadContractSchema: require('../../schema/load-contract.schema.json'),
+  };
+}
+
 function getRepoRoot() {
   // Walk up from this file to find the repo root (where schema/ lives).
   // Works whether this module is loaded from packages/kdna/src/ or
@@ -106,6 +116,26 @@ function getRepoRoot() {
   return process.cwd();
 }
 
+function loadSchemasFromDisk() {
+  const repoRoot = getRepoRoot();
+  const schemaDir = path.join(repoRoot, 'schema');
+  return {
+    manifestSchema: JSON.parse(fs.readFileSync(path.join(schemaDir, 'manifest.schema.json'), 'utf8')),
+    payloadSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'payload-profile-v1.schema.json'), 'utf8'),
+    ),
+    bundlePayloadSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'bundle-profile-v1.schema.json'), 'utf8'),
+    ),
+    checksumsSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'checksums.schema.json'), 'utf8'),
+    ),
+    loadContractSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'load-contract.schema.json'), 'utf8'),
+    ),
+  };
+}
+
 function loadSchemas() {
   if (_validators) return _validators;
   let Ajv;
@@ -119,21 +149,13 @@ function loadSchemas() {
     // to structural checks (no JSON-schema enforcement).
     return null;
   }
-  const repoRoot = getRepoRoot();
-  const schemaDir = path.join(repoRoot, 'schema');
-  const manifestSchema = JSON.parse(fs.readFileSync(path.join(schemaDir, 'manifest.schema.json'), 'utf8'));
-  const payloadSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'payload-profile-v1.schema.json'), 'utf8'),
-  );
-  const bundlePayloadSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'bundle-profile-v1.schema.json'), 'utf8'),
-  );
-  const checksumsSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'checksums.schema.json'), 'utf8'),
-  );
-  const loadContractSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'load-contract.schema.json'), 'utf8'),
-  );
+  let schemas;
+  try {
+    schemas = loadPackagedSchemas();
+  } catch {
+    schemas = loadSchemasFromDisk();
+  }
+  const { manifestSchema, payloadSchema, bundlePayloadSchema, checksumsSchema, loadContractSchema } = schemas;
   const ajv = new Ajv({ allErrors: true, strict: false });
   addFormats(ajv);
   ajv.addSchema(loadContractSchema, 'load-contract.schema.json');
@@ -521,7 +543,7 @@ function readV1Layout(absPath) {
 
   const map = {};
   let entries = null; // ZIP entries if container
-  let kind = null; // 'dir' | 'file'
+  let kind; // 'dir' | 'file'
 
   if (stat.isDirectory()) {
     kind = 'dir';
@@ -589,7 +611,7 @@ function readV1Layout(absPath) {
   try {
     manifest = parseJsonEntry('kdna.json', map['kdna.json']);
   } catch (e) {
-    throw new Error(`kdna.json is not valid JSON: ${e.message}`);
+    throw new Error(`kdna.json is not valid JSON: ${e.message}`, { cause: e });
   }
   if (manifest.lineage !== undefined && Array.isArray(manifest.lineage)) {
     throw new Error('kdna.json.lineage must be an object, not an array');
@@ -1773,7 +1795,7 @@ function loadV1Unsafe(inputPath, opts = {}) {
     const rawPayload = v1.map['payload.kdnab'];
     payload = parseJsonEntry('payload.kdnab', rawPayload);
   } catch (e) {
-    throw new Error(`payload.kdnab is not valid JSON: ${e.message}`);
+    throw new Error(`payload.kdnab is not valid JSON: ${e.message}`, { cause: e });
   }
 
   if (payload.profile && payload.ciphertext && (m.payload?.encrypted || m.encryption?.encrypted_entries?.includes('payload.kdnab'))) {
@@ -1946,7 +1968,7 @@ function loadV1Unsafe(inputPath, opts = {}) {
         }));
         result.inheritance_applied = true;
       }
-    } catch (_) {
+    } catch {
       // extends merge is best-effort — never block load
       result.inheritance_applied = false;
     }

package/src/validate-pure.js

@@ -59,7 +59,10 @@ function validateDomainSchema(dataMap, schemaMap) {
     const ajvInstance = new ajv({ allErrors: true, strict: false });
     if (addFormats) addFormats(ajvInstance);
     try {
-      ajvInstance.addMetaSchema(require('ajv/dist/refs/json-schema-2020-12.json'));
+      // Use eval('require') to avoid webpack static analysis trying to
+      // resolve this JSON file at build time (it is only needed at runtime).
+      const _require = eval('require');
+      ajvInstance.addMetaSchema(_require('ajv/dist/refs/json-schema-2020-12.json'));
     } catch {
       /* meta-schema already available or not needed */
     }

package/src/workpack-pure.js

@@ -169,9 +169,6 @@ function checkWorkPackStructure(manifest, rootDir) {
  */
 function inspectWorkPack(manifest, rootDir) {
   const kdnaMode = manifest.kdna?.mode || 'unknown';
-  const kdnaCount =
-    kdnaMode === 'single' ? 1 : (manifest.kdna?.assets || []).length;
-
   const structure = checkWorkPackStructure(manifest, rootDir);
 
   return {
@@ -240,7 +237,8 @@ function _lazyAjv() {
     return _ajvInstance;
   } catch (e) {
     throw new Error(
-      'ajv is required for Work Pack validation. Install: npm install ajv ajv-formats'
+      'ajv is required for Work Pack validation. Install: npm install ajv ajv-formats',
+      { cause: e },
     );
   }
 }