@aikdna/kdna-core 0.15.9 → 0.15.11

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## v0.15.11 (2026-07-03)
+
+**Fix**: repair Core v1 container dispatcher module resolution in the
+published package layout.
+
+- Corrects internal `src/container-dispatcher.js` imports so the dispatcher can
+  load sibling `asset-reader` and `v1` modules after npm packaging.
+- Loads v1 JSON schemas through package-relative static imports before falling
+  back to disk discovery, so bundled server environments do not look for
+  KDNA schemas in the host application directory.
+- Adds regression coverage for loading a v1 source asset through the dispatcher
+  from the package `src/` layout and for validating from a non-repository cwd.
+- Fix webpack bundler warning: use `eval('require')` for ajv meta-schema import
+  so webpack does not try to statically resolve the JSON file at build time.
+
+No public API changes.
+
+## v0.15.10 (2026-06-30)
+
+**API**: export `parseSemver`, `compareSemver`, `satisfies` from public module.
+
+These semver utilities were already used internally by kdna-core (Story 6 dependency
+resolution) but were not part of the public API. Exporting them allows consumers
+(e.g. `@aikdna/kdna-cli`) to use the canonical implementation rather than maintaining
+a parallel copy.
+
+- **`parseSemver(v)`** — parse a semver string into `{major, minor, patch}` or `null`
+- **`compareSemver(a, b)`** — compare two version strings, returns `< 0 | 0 | > 0`
+- **`satisfies(version, range)`** — test a version against a range (`^`, `~`, `>=`, etc.)
+
+No breaking changes. Purely additive.
+
 ## v0.15.9 (2026-06-28)
 
 Story 12 — Asset inheritance (`extends` field, RFC #148 v2.x Phase 3).

package/package.json

@@ -1,70 +1,70 @@
 {
-  "name": "@aikdna/kdna-core",
-  "version": "0.15.9",
-  "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "type": "commonjs",
-  "main": "src/index.js",
-  "module": "src/index.mjs",
-  "exports": {
-    ".": {
-      "import": "./src/index.mjs",
-      "require": "./src/index.js",
-      "types": "./src/types.d.ts"
+    "name": "@aikdna/kdna-core",
+    "version": "0.15.11",
+    "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
+    "engines": {
+        "node": ">=18.0.0"
     },
-    "./package.json": "./package.json",
-    "./schema/*": "./schema/*",
-    "./v1": {
-      "import": "./src/v1/index.mjs",
-      "require": "./src/v1/index.js",
-      "types": "./src/types.d.ts"
-    }
-  },
-  "types": "src/types.d.ts",
-  "scripts": {
-    "test": "node ../../scripts/run-node-tests.js test/*.test.js && node -e \"const m = require('./src/index.js'); console.log('kdna-core exports:', Object.keys(m).join(', '));\"",
-    "prepublishOnly": "npm run release:check",
-    "release:check": "node scripts/check-release-readiness.js"
-  },
-  "files": [
-    "src/",
-    "schema/",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "NOTICE"
-  ],
-  "keywords": [
-    "kdna",
-    "kdna-core",
-    "ai-agent",
-    "judgment-assets"
-  ],
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/aikdna/kdna.git",
-    "directory": "packages/kdna-core"
-  },
-  "homepage": "https://aikdna.com",
-  "peerDependencies": {
-    "ajv": "^8.17.1",
-    "ajv-formats": "^3.0.1"
-  },
-  "peerDependenciesMeta": {
-    "ajv": {
-      "optional": true
+    "type": "commonjs",
+    "main": "src/index.js",
+    "module": "src/index.mjs",
+    "exports": {
+        ".": {
+            "import": "./src/index.mjs",
+            "require": "./src/index.js",
+            "types": "./src/types.d.ts"
+        },
+        "./package.json": "./package.json",
+        "./schema/*": "./schema/*",
+        "./v1": {
+            "import": "./src/v1/index.mjs",
+            "require": "./src/v1/index.js",
+            "types": "./src/types.d.ts"
+        }
+    },
+    "types": "src/types.d.ts",
+    "scripts": {
+        "test": "node ../../scripts/run-node-tests.js test/*.test.js && node -e \"const m = require('./src/index.js'); console.log('kdna-core exports:', Object.keys(m).join(', '));\"",
+        "prepublishOnly": "npm run release:check",
+        "release:check": "node scripts/check-release-readiness.js"
+    },
+    "files": [
+        "src/",
+        "schema/",
+        "README.md",
+        "CHANGELOG.md",
+        "LICENSE",
+        "NOTICE"
+    ],
+    "keywords": [
+        "kdna",
+        "kdna-core",
+        "ai-agent",
+        "judgment-assets"
+    ],
+    "license": "Apache-2.0",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/aikdna/kdna.git",
+        "directory": "packages/kdna-core"
+    },
+    "homepage": "https://aikdna.com",
+    "peerDependencies": {
+        "ajv": "^8.17.1",
+        "ajv-formats": "^3.0.1"
+    },
+    "peerDependenciesMeta": {
+        "ajv": {
+            "optional": true
+        },
+        "ajv-formats": {
+            "optional": true
+        }
     },
-    "ajv-formats": {
-      "optional": true
+    "dependencies": {
+        "@noble/hashes": "^1.8.0",
+        "cbor-x": "^1.6.4",
+        "ajv": "^8.20.0",
+        "ajv-formats": "^3.0.1"
     }
-  },
-  "dependencies": {
-    "@noble/hashes": "^1.8.0",
-    "cbor-x": "^1.6.4",
-    "ajv": "^8.20.0",
-    "ajv-formats": "^3.0.1"
-  }
 }

package/src/asset-reader.js

@@ -47,7 +47,7 @@ function parseJson(buf, entryName) {
   try {
     return JSON.parse(Buffer.isBuffer(buf) ? buf.toString('utf8') : String(buf));
   } catch (e) {
-    throw new Error(`${entryName}: invalid JSON: ${e.message}`);
+    throw new Error(`${entryName}: invalid JSON: ${e.message}`, { cause: e });
   }
 }
 
@@ -311,28 +311,42 @@ function verifyHumanLockSignatures(coreData, manifest, errors, warnings) {
     // Skip if no public key available (unsigned assets are valid)
     return;
   }
-  const axioms = coreData?.axioms || [];
-  if (!Array.isArray(axioms) || axioms.length === 0) return;
+
+  // All card-type arrays in KDNA_Core.json that may carry human_lock.
+  // Ordered by how they appear in the compiled payload (compileCore in
+  // kdna-studio-core/src/compile/index.js).
+  const CORE_CARD_ARRAYS = [
+    ['axioms', 'axiom'],
+    ['ontology', 'ontology'],
+    ['frameworks', 'framework'],
+    ['boundaries', 'boundary'],
+    ['risks', 'risk'],
+    ['stances', 'stance'],
+  ];
 
   let verified = 0, missing = 0, invalid = 0;
-  for (const ax of axioms) {
-    const hl = ax.human_lock;
-    if (!hl || !hl.signature) {
-      // Only warn for locked cards without signature
-      if (ax.status === 'locked' || ax.status === 'tested' || ax.status === 'published') {
-        missing++;
+  for (const [arrayName] of CORE_CARD_ARRAYS) {
+    const cards = coreData?.[arrayName];
+    if (!Array.isArray(cards) || cards.length === 0) continue;
+
+    for (const card of cards) {
+      const hl = card.human_lock;
+      if (!hl || !hl.signature) {
+        if (card.status === 'locked' || card.status === 'tested' || card.status === 'published') {
+          missing++;
+        }
+        continue;
+      }
+      try {
+        const payload = [card.id, hl.statement || '', hl.judgment_fingerprint || ''].join('\n');
+        const sig = Buffer.from(String(hl.signature).replace(/^ed25519:/, ''), 'hex');
+        const key = crypto.createPublicKey(publicKeyPEM);
+        const ok = crypto.verify(null, Buffer.from(payload), key, sig);
+        if (ok) { verified++; }
+        else { invalid++; }
+      } catch {
+        invalid++;
       }
-      continue;
-    }
-    try {
-      const payload = [ax.id, hl.statement || '', hl.judgment_fingerprint || ''].join('\n');
-      const sig = Buffer.from(String(hl.signature).replace(/^ed25519:/, ''), 'hex');
-      const key = crypto.createPublicKey(publicKeyPEM);
-      const ok = crypto.verify(null, Buffer.from(payload), key, sig);
-      if (ok) { verified++; }
-      else { invalid++; }
-    } catch {
-      invalid++;
     }
   }
 

package/src/container-dispatcher.js

@@ -4,7 +4,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const crypto = require('node:crypto');
 
-const { createKdnaAssetReader } = require('../asset-reader.js');
+const { createKdnaAssetReader } = require('./asset-reader.js');
 
 const MIMETYPE_V1 = 'application/vnd.kdna.asset';
 const MIMETYPE_V2 = 'application/vnd.aikdna.kdna+zip';
@@ -220,7 +220,7 @@ function readSourceDirectory(absPath, _opts) {
  */
 function readV1Container(absPath, _opts) {
   // Delegate to the existing v1 layout reader for validation
-  const v1Layout = require('../v1/index.js').readV1Layout(absPath);
+  const v1Layout = require('./v1/index.js').readV1Layout(absPath);
 
   const containerBuf = fs.readFileSync(absPath);
   const assetDigest = crypto.createHash('sha256').update(containerBuf).digest();

package/src/crypto-profile.js

@@ -102,7 +102,6 @@ function hkdfSha256(ikm, salt = null, info = '', length = 32) {
 
 // ── AES-256-KW (RFC 3394) ─────────────────────────────────────────
 
-const AES_BLOCK = 16;
 const KW_IV = Buffer.from('a6a6a6a6a6a6a6a6', 'hex'); // RFC 3394 default IV
 
 function aesWrap(key, plaintext) {

package/src/public-api.js

@@ -110,7 +110,7 @@ async function validateKDNA(input, options = {}) {
   const reader = readerFrom(options);
   const asset = await asAsset(input, { ...options, reader });
   const assetResult = await reader.verify(asset, options);
-  let dataMap = null;
+  let dataMap;
   let lintResult = { errors: [], warnings: [] };
   let schemaResult = { errors: [], warnings: [] };
   let crossFileResult = { errors: [], warnings: [] };

package/src/v1/index.js

@@ -91,6 +91,16 @@ const FORBIDDEN_OUTPUT_TERMS = Object.freeze([
 let _ajv = null;
 let _validators = null;
 
+function loadPackagedSchemas() {
+  return {
+    manifestSchema: require('../../schema/manifest.schema.json'),
+    payloadSchema: require('../../schema/payload-profile-v1.schema.json'),
+    bundlePayloadSchema: require('../../schema/bundle-profile-v1.schema.json'),
+    checksumsSchema: require('../../schema/checksums.schema.json'),
+    loadContractSchema: require('../../schema/load-contract.schema.json'),
+  };
+}
+
 function getRepoRoot() {
   // Walk up from this file to find the repo root (where schema/ lives).
   // Works whether this module is loaded from packages/kdna/src/ or
@@ -106,6 +116,26 @@ function getRepoRoot() {
   return process.cwd();
 }
 
+function loadSchemasFromDisk() {
+  const repoRoot = getRepoRoot();
+  const schemaDir = path.join(repoRoot, 'schema');
+  return {
+    manifestSchema: JSON.parse(fs.readFileSync(path.join(schemaDir, 'manifest.schema.json'), 'utf8')),
+    payloadSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'payload-profile-v1.schema.json'), 'utf8'),
+    ),
+    bundlePayloadSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'bundle-profile-v1.schema.json'), 'utf8'),
+    ),
+    checksumsSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'checksums.schema.json'), 'utf8'),
+    ),
+    loadContractSchema: JSON.parse(
+      fs.readFileSync(path.join(schemaDir, 'load-contract.schema.json'), 'utf8'),
+    ),
+  };
+}
+
 function loadSchemas() {
   if (_validators) return _validators;
   let Ajv;
@@ -119,21 +149,13 @@ function loadSchemas() {
     // to structural checks (no JSON-schema enforcement).
     return null;
   }
-  const repoRoot = getRepoRoot();
-  const schemaDir = path.join(repoRoot, 'schema');
-  const manifestSchema = JSON.parse(fs.readFileSync(path.join(schemaDir, 'manifest.schema.json'), 'utf8'));
-  const payloadSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'payload-profile-v1.schema.json'), 'utf8'),
-  );
-  const bundlePayloadSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'bundle-profile-v1.schema.json'), 'utf8'),
-  );
-  const checksumsSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'checksums.schema.json'), 'utf8'),
-  );
-  const loadContractSchema = JSON.parse(
-    fs.readFileSync(path.join(schemaDir, 'load-contract.schema.json'), 'utf8'),
-  );
+  let schemas;
+  try {
+    schemas = loadPackagedSchemas();
+  } catch {
+    schemas = loadSchemasFromDisk();
+  }
+  const { manifestSchema, payloadSchema, bundlePayloadSchema, checksumsSchema, loadContractSchema } = schemas;
   const ajv = new Ajv({ allErrors: true, strict: false });
   addFormats(ajv);
   ajv.addSchema(loadContractSchema, 'load-contract.schema.json');
@@ -521,7 +543,7 @@ function readV1Layout(absPath) {
 
   const map = {};
   let entries = null; // ZIP entries if container
-  let kind = null; // 'dir' | 'file'
+  let kind; // 'dir' | 'file'
 
   if (stat.isDirectory()) {
     kind = 'dir';
@@ -589,7 +611,7 @@ function readV1Layout(absPath) {
   try {
     manifest = parseJsonEntry('kdna.json', map['kdna.json']);
   } catch (e) {
-    throw new Error(`kdna.json is not valid JSON: ${e.message}`);
+    throw new Error(`kdna.json is not valid JSON: ${e.message}`, { cause: e });
   }
   if (manifest.lineage !== undefined && Array.isArray(manifest.lineage)) {
     throw new Error('kdna.json.lineage must be an object, not an array');
@@ -1616,6 +1638,12 @@ module.exports = {
   unpack,
   loadV1,
   FORBIDDEN_OUTPUT_TERMS,
+  // Semver utilities (Story 6 / Story 13) — exported so consumers
+  // (e.g. kdna-cli) can use the canonical implementation instead of
+  // duplicating it.
+  parseSemver,
+  compareSemver,
+  satisfies,
 };
 
 // ─── loadV1 — v1 runtime loading / load contract ──────────────────────
@@ -1767,7 +1795,7 @@ function loadV1Unsafe(inputPath, opts = {}) {
     const rawPayload = v1.map['payload.kdnab'];
     payload = parseJsonEntry('payload.kdnab', rawPayload);
   } catch (e) {
-    throw new Error(`payload.kdnab is not valid JSON: ${e.message}`);
+    throw new Error(`payload.kdnab is not valid JSON: ${e.message}`, { cause: e });
   }
 
   if (payload.profile && payload.ciphertext && (m.payload?.encrypted || m.encryption?.encrypted_entries?.includes('payload.kdnab'))) {
@@ -1940,7 +1968,7 @@ function loadV1Unsafe(inputPath, opts = {}) {
         }));
         result.inheritance_applied = true;
       }
-    } catch (_) {
+    } catch {
       // extends merge is best-effort — never block load
       result.inheritance_applied = false;
     }

package/src/validate-pure.js

@@ -59,7 +59,10 @@ function validateDomainSchema(dataMap, schemaMap) {
     const ajvInstance = new ajv({ allErrors: true, strict: false });
     if (addFormats) addFormats(ajvInstance);
     try {
-      ajvInstance.addMetaSchema(require('ajv/dist/refs/json-schema-2020-12.json'));
+      // Use eval('require') to avoid webpack static analysis trying to
+      // resolve this JSON file at build time (it is only needed at runtime).
+      const _require = eval('require');
+      ajvInstance.addMetaSchema(_require('ajv/dist/refs/json-schema-2020-12.json'));
     } catch {
       /* meta-schema already available or not needed */
     }

package/src/workpack-pure.js

@@ -169,9 +169,6 @@ function checkWorkPackStructure(manifest, rootDir) {
  */
 function inspectWorkPack(manifest, rootDir) {
   const kdnaMode = manifest.kdna?.mode || 'unknown';
-  const kdnaCount =
-    kdnaMode === 'single' ? 1 : (manifest.kdna?.assets || []).length;
-
   const structure = checkWorkPackStructure(manifest, rootDir);
 
   return {
@@ -240,7 +237,8 @@ function _lazyAjv() {
     return _ajvInstance;
   } catch (e) {
     throw new Error(
-      'ajv is required for Work Pack validation. Install: npm install ajv ajv-formats'
+      'ajv is required for Work Pack validation. Install: npm install ajv ajv-formats',
+      { cause: e },
     );
   }
 }