@aikdna/kdna-core 0.15.12 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## v0.17.0 (2026-07-14)
+
+### Added
+
+- Structurally validate optional payload `worldview`, ordered `value_order`,
+  and `judgment_role`, then preserve their declared values in the compact
+  Runtime Capsule instead of silently dropping them. Compact prompt projection
+  renders worldview, value order, and the standard role fields `acts_as`,
+  `does_not_act_as`, and `responsibility`; role extension fields remain
+  available in the JSON Capsule without an unsupported prompt claim.
+- Add a synthetic Golden Single-Asset Core fixture. It proves schema,
+  validation, content-neutral inspect, and exact compact projection only; it
+  does not claim author quality, task applicability, model consumption, or
+  conformance.
+
+### Changed
+
+- Make Runtime `creator` provenance optional. When it is declared,
+  `creator.name` remains required and non-empty; when provenance is unavailable,
+  producers omit the block instead of inventing an anonymous or `Unknown`
+  identity. This does not weaken authoring-source identity rules or turn
+  provenance into a trust claim.
+- Keep canonical and packaged Runtime manifest/payload schemas aligned with the
+  creator and scoped-judgment contracts.
+
+### Fixed
+
+- Make ecosystem truth validation fail closed when a live component has
+  neither package/artifact evidence nor a verifiable repository checkout,
+  instead of silently accepting missing external evidence.
+- Derive web-package readiness expectations from the declared current Core
+  version rather than a stale hard-coded release number.
+
+## v0.16.0 (2026-07-13)
+
+### Added
+
+- RFC-0019 external account/device key grants, schemas, deterministic golden
+  and negative fixtures, and JS/Swift parity vectors.
+- JS Core helpers for external envelope encryption, per-device grant issuance,
+  signature/binding verification, in-memory decryption, and explicit zeroization.
+- LoadPlan accepts only a runtime-verified external entitlement for account/org
+  assets; structurally similar status objects no longer authorize loading.
+- Reject authoring source directories at the public runtime API boundary;
+  `planLoad`, `load`, `loadAsset`, and `loadAuthorized` now require a packaged
+  `.kdna` file, including resolver-provided dependencies.
+- Regenerate authorization conformance fixtures from packaged assets and keep
+  source directories available only to authoring operations such as inspect,
+  validate, pack, and unpack.
+- Remove stale public format-generation wording and local coordination-path
+  assumptions from protocol documentation and public audit scripts.
+- Make release readiness fail for dirty inputs or when the selected version
+  tag does not point to the current commit.
+
+### Security
+
+- Account/device envelopes never fall back to the password profile.
+- Revoked, expired, tampered, digest/version/account/device mismatches fail
+  closed before Runtime Capsule projection.
+
 ## v0.15.12 (2026-07-12)
 
 **Single-format refactor + CBOR wire contract + Runtime Capsule.**

package/README.md

@@ -64,6 +64,12 @@ if (capsule.type !== 'kdna.context.capsule') {
 → Agent/runtime context
 ```
 
+The default compact Capsule preserves the asset's scoped judgment context:
+`highest_question`, `worldview`, ordered `value_order`, `judgment_role`,
+applicability-aware axioms, boundaries, self-checks, failure modes, and a
+bounded pattern set. Core copies the three optional scoped fields without
+trimming, reordering, or treating them as facts, policy, or quality evidence.
+
 For authoring and test fixtures, `pack()` can turn a local working folder into
 a `.kdna` file before validation:
 
@@ -97,6 +103,18 @@ A `.kdna` asset contains:
 encryption envelope in the same entry; authorized plaintext is decrypted in
 memory and projected into the Runtime Capsule.
 
+### Account/device external grants
+
+RFC-0019 licensed assets can keep the encrypted container publicly available
+while an issuer grants independent account/device access. `authorizeExternalKeyGrant()`
+verifies the issuer signature, lease, revocation state, account, device, asset
+UID/version/digest, and encrypted entry before returning a branded entitlement
+and in-memory decrypt hook. A plain `{status: "active"}` object is not accepted.
+
+Device private keys belong in the platform SecretStore. The returned session
+must be disposed after loading; Agent-facing callers should receive only the
+Runtime Capsule. Account grants never fall back to the password profile.
+
 ## Load Profiles
 
 `loadAuthorized()` supports:

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aikdna/kdna-core",
-    "version": "0.15.12",
+    "version": "0.17.0",
     "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
     "engines": {
         "node": ">=18.0.0"

package/schema/kdna-envelope-external-grant-v1.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kdna.ai/specs/kdna-envelope-external-grant-v1.schema.json",
+  "title": "KDNA external grant envelope v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["profile", "alg", "cek_derivation", "key_ref", "issuer_key_id", "entry_path", "plaintext_digest", "iv", "tag", "ciphertext"],
+  "properties": {
+    "profile": { "const": "kdna-envelope-external-grant-v1" },
+    "alg": { "const": "A256GCM" },
+    "cek_derivation": { "const": "HKDF-SHA256" },
+    "key_ref": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "issuer_key_id": { "type": "string", "minLength": 1, "maxLength": 128 },
+    "entry_path": { "type": "string", "pattern": "^[^/].*[^/]$|^[^/]$", "maxLength": 256 },
+    "plaintext_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "iv": { "type": "string", "pattern": "^[A-Za-z0-9_-]{16}$" },
+    "tag": { "type": "string", "pattern": "^[A-Za-z0-9_-]{22}$" },
+    "ciphertext": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9_-]+$" }
+  }
+}

package/schema/kdna-key-grant-v1.schema.json

@@ -0,0 +1,54 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kdna.ai/specs/kdna-key-grant-v1.schema.json",
+  "title": "KDNA account/device external key grant v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["profile", "grant_id", "issuer", "signing_key_id", "entitlement_id", "account_id", "device_id", "device_public_key", "device_signing_public_key", "asset", "issued_at", "refresh_after", "offline_grace_until", "expires_at", "status", "status_version", "wrap", "signature"],
+  "properties": {
+    "profile": { "const": "kdna-key-grant-v1" },
+    "grant_id": { "$ref": "#/$defs/id" },
+    "issuer": { "type": "string", "format": "uri", "maxLength": 256 },
+    "signing_key_id": { "$ref": "#/$defs/id" },
+    "entitlement_id": { "$ref": "#/$defs/id" },
+    "account_id": { "$ref": "#/$defs/id" },
+    "device_id": { "$ref": "#/$defs/id" },
+    "device_public_key": { "type": "string", "pattern": "^x25519:[A-Za-z0-9_-]{43}$" },
+    "device_signing_public_key": { "type": "string", "pattern": "^ed25519:[A-Za-z0-9_-]{43}$" },
+    "asset": {
+      "type": "object", "additionalProperties": false,
+      "required": ["asset_id", "asset_uid", "version", "digest", "entry_path", "ciphertext_digest", "key_ref", "issuer_key_id"],
+      "properties": {
+        "asset_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "asset_uid": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "version": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "digest": { "$ref": "#/$defs/digest" },
+        "entry_path": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "ciphertext_digest": { "$ref": "#/$defs/digest" },
+        "key_ref": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "issuer_key_id": { "$ref": "#/$defs/id" }
+      }
+    },
+    "issued_at": { "type": "string", "format": "date-time" },
+    "refresh_after": { "type": "string", "format": "date-time" },
+    "offline_grace_until": { "type": "string", "format": "date-time" },
+    "expires_at": { "type": "string", "format": "date-time" },
+    "status": { "enum": ["active", "revoked", "expired"] },
+    "status_version": { "type": "integer", "minimum": 1 },
+    "wrap": {
+      "type": "object", "additionalProperties": false,
+      "required": ["alg", "ephemeral_public_key", "salt", "wrapped_cek"],
+      "properties": {
+        "alg": { "const": "X25519-HKDF-SHA256+A256KW" },
+        "ephemeral_public_key": { "type": "string", "pattern": "^x25519:[A-Za-z0-9_-]{43}$" },
+        "salt": { "type": "string", "pattern": "^[A-Za-z0-9_-]{22}$" },
+        "wrapped_cek": { "type": "string", "pattern": "^[A-Za-z0-9_-]{54}$" }
+      }
+    },
+    "signature": { "type": "string", "pattern": "^ed25519:[A-Za-z0-9_-]{86}$" }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9._:@/-]{1,256}$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}

package/schema/load-plan.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/load-plan.schema.json",
   "title": "KDNA LoadPlan v1",
-  "description": "Machine-readable pre-load authorization and runtime planning result for KDNA Core v1 assets.",
+  "description": "Machine-readable pre-load authorization and runtime planning result for packaged KDNA assets.",
   "type": "object",
   "required": [
     "kdna_version",

package/schema/manifest.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/manifest.schema.json",
-  "title": "KDNA Manifest v2",
-  "description": "Schema for kdna.json, the public metadata layer of a .kdna container.",
+  "title": "KDNA Manifest",
+  "description": "Schema for kdna.json, the public metadata layer of a .kdna container (kdna_version 1.0).",
   "type": "object",
   "required": [
     "kdna_version",
@@ -14,7 +14,6 @@
     "judgment_version",
     "created_at",
     "updated_at",
-    "creator",
     "compatibility",
     "payload"
   ],
@@ -22,7 +21,7 @@
   "properties": {
     "kdna_version": {
       "type": "string",
-      "description": "KDNA Asset Container wire discriminator.",
+      "description": "KDNA container version this manifest conforms to.",
       "enum": ["1.0"]
     },
     "asset_id": {
@@ -78,7 +77,7 @@
           "description": "Kind of creator identity represented by this record."
         }
       },
-      "description": "Who produced the asset. Provenance only; not a trust claim."
+      "description": "Optional record of who produced the asset. Provenance only; not a trust claim. Omit it when creator provenance is unavailable rather than inventing an identity."
     },
     "compatibility": {
       "type": "object",

package/schema/payload-profile-v1.schema.json

@@ -21,6 +21,31 @@
           "type": "string",
           "description": "The single most important question this judgment system answers."
         },
+        "worldview": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Scoped assumptions used at qualitative judgment forks; not general facts or deterministic policy."
+        },
+        "value_order": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Ordered qualitative priorities, highest priority first."
+        },
+        "judgment_role": {
+          "type": "object",
+          "additionalProperties": true,
+          "properties": {
+            "acts_as": { "type": "string" },
+            "does_not_act_as": {
+              "oneOf": [
+                { "type": "string" },
+                { "type": "array", "items": { "type": "string" } }
+              ]
+            },
+            "responsibility": { "type": "string" }
+          },
+          "description": "The authority this asset exercises and the responsibilities explicitly outside it."
+        },
         "axioms": {
           "type": "array",
           "description": "The list of axioms. Phase 1 accepts an empty array."