@aikdna/kdna-core 0.15.9 → 0.15.10

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+
+## v0.15.10 (2026-06-30)
+
+**API**: export `parseSemver`, `compareSemver`, `satisfies` from public module.
+
+These semver utilities were already used internally by kdna-core (Story 6 dependency
+resolution) but were not part of the public API. Exporting them allows consumers
+(e.g. `@aikdna/kdna-cli`) to use the canonical implementation rather than maintaining
+a parallel copy.
+
+- **`parseSemver(v)`** — parse a semver string into `{major, minor, patch}` or `null`
+- **`compareSemver(a, b)`** — compare two version strings, returns `< 0 | 0 | > 0`
+- **`satisfies(version, range)`** — test a version against a range (`^`, `~`, `>=`, etc.)
+
+No breaking changes. Purely additive.
+
 ## v0.15.9 (2026-06-28)
 
 Story 12 — Asset inheritance (`extends` field, RFC #148 v2.x Phase 3).

package/package.json

@@ -1,70 +1,70 @@
 {
-  "name": "@aikdna/kdna-core",
-  "version": "0.15.9",
-  "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "type": "commonjs",
-  "main": "src/index.js",
-  "module": "src/index.mjs",
-  "exports": {
-    ".": {
-      "import": "./src/index.mjs",
-      "require": "./src/index.js",
-      "types": "./src/types.d.ts"
+    "name": "@aikdna/kdna-core",
+    "version": "0.15.10",
+    "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
+    "engines": {
+        "node": ">=18.0.0"
     },
-    "./package.json": "./package.json",
-    "./schema/*": "./schema/*",
-    "./v1": {
-      "import": "./src/v1/index.mjs",
-      "require": "./src/v1/index.js",
-      "types": "./src/types.d.ts"
-    }
-  },
-  "types": "src/types.d.ts",
-  "scripts": {
-    "test": "node ../../scripts/run-node-tests.js test/*.test.js && node -e \"const m = require('./src/index.js'); console.log('kdna-core exports:', Object.keys(m).join(', '));\"",
-    "prepublishOnly": "npm run release:check",
-    "release:check": "node scripts/check-release-readiness.js"
-  },
-  "files": [
-    "src/",
-    "schema/",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "NOTICE"
-  ],
-  "keywords": [
-    "kdna",
-    "kdna-core",
-    "ai-agent",
-    "judgment-assets"
-  ],
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/aikdna/kdna.git",
-    "directory": "packages/kdna-core"
-  },
-  "homepage": "https://aikdna.com",
-  "peerDependencies": {
-    "ajv": "^8.17.1",
-    "ajv-formats": "^3.0.1"
-  },
-  "peerDependenciesMeta": {
-    "ajv": {
-      "optional": true
+    "type": "commonjs",
+    "main": "src/index.js",
+    "module": "src/index.mjs",
+    "exports": {
+        ".": {
+            "import": "./src/index.mjs",
+            "require": "./src/index.js",
+            "types": "./src/types.d.ts"
+        },
+        "./package.json": "./package.json",
+        "./schema/*": "./schema/*",
+        "./v1": {
+            "import": "./src/v1/index.mjs",
+            "require": "./src/v1/index.js",
+            "types": "./src/types.d.ts"
+        }
+    },
+    "types": "src/types.d.ts",
+    "scripts": {
+        "test": "node ../../scripts/run-node-tests.js test/*.test.js && node -e \"const m = require('./src/index.js'); console.log('kdna-core exports:', Object.keys(m).join(', '));\"",
+        "prepublishOnly": "npm run release:check",
+        "release:check": "node scripts/check-release-readiness.js"
+    },
+    "files": [
+        "src/",
+        "schema/",
+        "README.md",
+        "CHANGELOG.md",
+        "LICENSE",
+        "NOTICE"
+    ],
+    "keywords": [
+        "kdna",
+        "kdna-core",
+        "ai-agent",
+        "judgment-assets"
+    ],
+    "license": "Apache-2.0",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/aikdna/kdna.git",
+        "directory": "packages/kdna-core"
+    },
+    "homepage": "https://aikdna.com",
+    "peerDependencies": {
+        "ajv": "^8.17.1",
+        "ajv-formats": "^3.0.1"
+    },
+    "peerDependenciesMeta": {
+        "ajv": {
+            "optional": true
+        },
+        "ajv-formats": {
+            "optional": true
+        }
     },
-    "ajv-formats": {
-      "optional": true
+    "dependencies": {
+        "@noble/hashes": "^1.8.0",
+        "cbor-x": "^1.6.4",
+        "ajv": "^8.20.0",
+        "ajv-formats": "^3.0.1"
     }
-  },
-  "dependencies": {
-    "@noble/hashes": "^1.8.0",
-    "cbor-x": "^1.6.4",
-    "ajv": "^8.20.0",
-    "ajv-formats": "^3.0.1"
-  }
 }

package/src/asset-reader.js

@@ -311,28 +311,42 @@ function verifyHumanLockSignatures(coreData, manifest, errors, warnings) {
     // Skip if no public key available (unsigned assets are valid)
     return;
   }
-  const axioms = coreData?.axioms || [];
-  if (!Array.isArray(axioms) || axioms.length === 0) return;
+
+  // All card-type arrays in KDNA_Core.json that may carry human_lock.
+  // Ordered by how they appear in the compiled payload (compileCore in
+  // kdna-studio-core/src/compile/index.js).
+  const CORE_CARD_ARRAYS = [
+    ['axioms', 'axiom'],
+    ['ontology', 'ontology'],
+    ['frameworks', 'framework'],
+    ['boundaries', 'boundary'],
+    ['risks', 'risk'],
+    ['stances', 'stance'],
+  ];
 
   let verified = 0, missing = 0, invalid = 0;
-  for (const ax of axioms) {
-    const hl = ax.human_lock;
-    if (!hl || !hl.signature) {
-      // Only warn for locked cards without signature
-      if (ax.status === 'locked' || ax.status === 'tested' || ax.status === 'published') {
-        missing++;
+  for (const [arrayName, _cardType] of CORE_CARD_ARRAYS) {
+    const cards = coreData?.[arrayName];
+    if (!Array.isArray(cards) || cards.length === 0) continue;
+
+    for (const card of cards) {
+      const hl = card.human_lock;
+      if (!hl || !hl.signature) {
+        if (card.status === 'locked' || card.status === 'tested' || card.status === 'published') {
+          missing++;
+        }
+        continue;
+      }
+      try {
+        const payload = [card.id, hl.statement || '', hl.judgment_fingerprint || ''].join('\n');
+        const sig = Buffer.from(String(hl.signature).replace(/^ed25519:/, ''), 'hex');
+        const key = crypto.createPublicKey(publicKeyPEM);
+        const ok = crypto.verify(null, Buffer.from(payload), key, sig);
+        if (ok) { verified++; }
+        else { invalid++; }
+      } catch {
+        invalid++;
       }
-      continue;
-    }
-    try {
-      const payload = [ax.id, hl.statement || '', hl.judgment_fingerprint || ''].join('\n');
-      const sig = Buffer.from(String(hl.signature).replace(/^ed25519:/, ''), 'hex');
-      const key = crypto.createPublicKey(publicKeyPEM);
-      const ok = crypto.verify(null, Buffer.from(payload), key, sig);
-      if (ok) { verified++; }
-      else { invalid++; }
-    } catch {
-      invalid++;
     }
   }
 

package/src/v1/index.js

@@ -1616,6 +1616,12 @@ module.exports = {
   unpack,
   loadV1,
   FORBIDDEN_OUTPUT_TERMS,
+  // Semver utilities (Story 6 / Story 13) — exported so consumers
+  // (e.g. kdna-cli) can use the canonical implementation instead of
+  // duplicating it.
+  parseSemver,
+  compareSemver,
+  satisfies,
 };
 
 // ─── loadV1 — v1 runtime loading / load contract ──────────────────────