@aikdna/kdna-core 0.15.3 → 0.15.4

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## v0.15.4 (2026-06-28)
+
+Audit follow-ups (2026-06-28 round-trip verification). This release
+keeps the canonicalisation paths in sync across producers (studio-cli
+`manifestForSigning`, kdna-cli `publish.js#manifestForSigning`,
+kdna-studio-core `buildPayload`, kdna-core's own verifier) so a
+signature generated by one tool is accepted by every other.
+
+- **manifestForSignature now recursively strips `authoring.content_digest`.**
+  Prior version only stripped the top-level content_digest. The digest
+  builder (`manifestForDigest`) has always stripped the nested field
+  too, so a manifest that contained an `authoring` block with a
+  `content_digest` would hash differently for signing vs. digest and
+  report a false-positive verification failure.
+- **asset-reader canonicalisation is now the single source of truth**
+  for the list of fields the signing payload excludes. Documented
+  in `docs/CANONICALIZATION.md`.
+
 ## v0.15.3 (2026-06-27)
 - Fix (PC-2, real): `renderPromptItem` now actually ships the
   boundary card branch. The previous v0.15.2 release (ee20c5e)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aikdna/kdna-core",
-  "version": "0.15.3",
+  "version": "0.15.4",
   "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
   "engines": {
     "node": ">=18.0.0"

package/src/asset-reader.js

@@ -204,6 +204,14 @@ function buildContentDigest(asset) {
 }
 
 function manifestForSignature(manifest, { stripDigestFields = true } = {}) {
+  // Mirrors manifestForDigest above. The two must agree on every field
+  // they strip, or the signing and digest paths will hash different
+  // representations of the same manifest and verifiers will report a
+  // mismatch on otherwise-valid assets.
+  //
+  // Bug: prior version omitted the `authoring.content_digest` strip
+  // that manifestForDigest performs, so the signing payload included
+  // a digest field that the digest payload did not.
   const copy = { ...(manifest || {}) };
   delete copy.signature;
   delete copy._source;
@@ -211,6 +219,11 @@ function manifestForSignature(manifest, { stripDigestFields = true } = {}) {
     delete copy.asset_digest;
     delete copy.container_sha256;
     delete copy.content_digest;
+    if (copy.authoring && typeof copy.authoring === 'object') {
+      const auth = { ...copy.authoring };
+      delete auth.content_digest;
+      copy.authoring = auth;
+    }
   }
   return copy;
 }