@aikdna/kdna-core 0.21.0 → 0.22.0

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## Unreleased
 
+## 0.22.0 (2026-08-17)
+
+### Added
+
+- RFC-0021 M1 asset signatures (`kdsig.ed25519`): sign and verify packaged
+  `.kdna` assets with Ed25519 signature bundles — `signKDNA`,
+  `verifyKDNASignature`, `composeKDNA`, signing-payload builders, key-pair
+  generation, key fingerprints, and signature-bundle parse/serialize —
+  mirrored byte-for-byte in the Python Core, with cross-language signature
+  conformance vectors. M1 is bound as a pre-release candidate; M2–M6 are not
+  implemented and remain non-binding.
+- RFC-0020 minimal projection profile: a fifth load profile for small local
+  models, a strict subset of compact carrying the highest-question and
+  boundary-friendly axioms plus full boundaries (~0.8–1.1k tokens vs compact
+  ~5.4k on the reference assets). Availability follows the manifest
+  declaration; assets without a minimal declaration fail closed.
+
+### Fixed
+
 - Validate decrypted external-grant and password payload plaintext against the
   same declared Payload schema used for ordinary assets. Correct credentials
   can no longer load schema-invalid judgment bytes.

package/README.md

@@ -1,8 +1,10 @@
 # @aikdna/kdna-core
 
-> **Status:** Pre-release. This source tree contains the unreleased `0.21.0`
-> corrective candidate; the published incumbent is `0.20.0`. Candidate source,
-> APIs, and evidence must not be described as already published.
+> **Status:** Pre-release. This source tree contains unreleased work beyond
+> the published incumbent `0.22.0` (RFC-0021 M1 asset signatures and the
+> RFC-0020 minimal projection profile); the next release coordinate is not
+> finalized. The older `0.21.0` line predates the signature track. Candidate
+> source, APIs, and evidence must not be described as already published.
 
 Core library for packaged `.kdna` judgment assets. It implements one current
 container contract, authorization planning, integrity evidence, Runtime Capsule
@@ -11,11 +13,11 @@ projection, and the correlated Agent Host execution boundary.
 ## Install
 
 ```bash
-npm install @aikdna/kdna-core@0.20.0
+npm install @aikdna/kdna-core@0.22.0
 ```
 
 That command installs the published incumbent. Use its release notes for the
-exact `0.20.0` contract. The examples below describe the current source
+exact `0.22.0` contract. The examples below describe the current source
 candidate and require its final release coordinate before registry use.
 
 ## Pack, validate, plan, and load

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aikdna/kdna-core",
-    "version": "0.21.0",
+    "version": "0.22.0",
     "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
     "engines": {
         "node": ">=18.0.0"
@@ -64,7 +64,7 @@
     },
     "dependencies": {
         "@noble/hashes": "^1.8.0",
-        "cbor-x": "^1.6.4",
+        "cbor-x": "^1.6.5",
         "ajv": "^8.20.0",
         "ajv-formats": "^3.0.1"
     }

package/schema/load-contract.schema.json

@@ -9,7 +9,7 @@
   "properties": {
     "default_profile": {
       "type": "string",
-      "enum": ["index", "compact", "scenario", "full"]
+      "enum": ["index", "compact", "scenario", "full", "minimal"]
     },
     "profiles": {
       "type": "object",
@@ -19,7 +19,8 @@
         "index": { "$ref": "#/$defs/profile" },
         "compact": { "$ref": "#/$defs/profile" },
         "scenario": { "$ref": "#/$defs/profile" },
-        "full": { "$ref": "#/$defs/profile" }
+        "full": { "$ref": "#/$defs/profile" },
+        "minimal": { "$ref": "#/$defs/profile" }
       }
     }
   },

package/schema/load-plan.schema.json

@@ -15,6 +15,7 @@
     "can_load_now",
     "projection_policy",
     "checks",
+    "signature_state",
     "issues",
     "source",
     "input_fingerprint"
@@ -87,6 +88,7 @@
         "schema_valid",
         "payload_valid",
         "checksums_valid",
+        "signature_valid",
         "load_contract_valid",
         "overall_valid"
       ],
@@ -96,10 +98,15 @@
         "schema_valid": { "type": "boolean" },
         "payload_valid": { "type": "boolean" },
         "checksums_valid": { "type": "boolean" },
+        "signature_valid": { "type": "boolean" },
         "load_contract_valid": { "type": "boolean" },
         "overall_valid": { "type": "boolean" }
       }
     },
+    "signature_state": {
+      "description": "RFC-0021 M1 signature evidence state: absent (unsigned), verified (signature.kdsig verified), or invalid (present but rejected).",
+      "enum": ["absent", "verified", "invalid"]
+    },
     "issues": {
       "type": "array",
       "items": {

package/schema/runtime-capsule.schema.json

@@ -36,7 +36,7 @@
     },
     "signature": { "$ref": "#/$defs/signature" },
     "access": { "enum": ["public", "licensed", "remote"] },
-    "profile": { "enum": ["index", "compact", "scenario", "full"] },
+    "profile": { "enum": ["index", "compact", "scenario", "full", "minimal"] },
     "context": { "type": "object" },
     "trace": { "$ref": "#/$defs/trace" }
   },
@@ -78,12 +78,28 @@
       }
     },
     "signature": {
-      "type": "object",
-      "required": ["state"],
-      "additionalProperties": false,
-      "properties": {
-        "state": { "const": "absent" }
-      }
+      "oneOf": [
+        {
+          "type": "object",
+          "required": ["state"],
+          "additionalProperties": false,
+          "properties": {
+            "state": { "const": "absent" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["state", "profile", "profile_version", "key_fingerprint", "content_digest"],
+          "additionalProperties": false,
+          "properties": {
+            "state": { "const": "verified" },
+            "profile": { "const": "kdsig.ed25519" },
+            "profile_version": { "const": "0.1.0" },
+            "key_fingerprint": { "$ref": "#/$defs/sha256" },
+            "content_digest": { "$ref": "#/$defs/sha256" }
+          }
+        }
+      ]
     },
     "trace": {
       "type": "object",
@@ -105,8 +121,8 @@
         "input_kind": { "enum": ["packaged_file", "packaged_bytes"] },
         "runtime_eligible": { "const": true },
         "schema_valid": { "const": true },
-        "signature_state": { "const": "absent" },
-        "profile": { "enum": ["index", "compact", "scenario", "full"] },
+        "signature_state": { "enum": ["absent", "verified"] },
+        "profile": { "enum": ["index", "compact", "scenario", "full", "minimal"] },
         "projection_report": { "$ref": "#/$defs/projectionReport" }
       }
     },

package/src/asset-reader.js

@@ -7,6 +7,7 @@ const crypto = require('crypto');
 const zlib = require('zlib');
 const cbor = require('cbor-x');
 const { loaderVersionUnsupportedMessage } = require('./loader-compatibility');
+const { SIGNATURE_ENTRY_NAME } = require('./signature');
 
 const KDNA_MEDIA_TYPE = 'application/vnd.kdna.asset';
 const ASSET_SOURCE_BYTES = Symbol.for('@aikdna/kdna-core.asset-source-bytes');
@@ -46,10 +47,6 @@ function compareEntryNamesByUtf8(left, right) {
   return Buffer.compare(Buffer.from(left, 'utf8'), Buffer.from(right, 'utf8'));
 }
 
-function sortedEntryNames(entries) {
-  return [...entries.keys()].sort(compareEntryNamesByUtf8);
-}
-
 function parseJson(buf, entryName) {
   try {
     return JSON.parse(Buffer.isBuffer(buf) ? buf.toString('utf8') : String(buf));
@@ -202,13 +199,23 @@ function manifestForDigest(manifest) {
   return copy;
 }
 
-function buildContentDigest(asset) {
+// Entries excluded from the canonical content tree (docs/CANONICALIZATION.md).
+// signature.kdsig can never be part of the content it signs.
+const CONTENT_DIGEST_EXCLUDED_ENTRIES = new Set(['.DS_Store', 'build-receipt.json', 'signature.kdsig']);
+
+/**
+ * Compute the canonical content digest over a map of entry name → Buffer.
+ * Shared by the asset reader and the container signature gate so both always
+ * hash the same canonical bytes.
+ */
+function contentDigestFromEntryBuffers(buffers) {
+  const names = buffers instanceof Map ? [...buffers.keys()] : Object.keys(buffers);
+  const readBuffer = (name) => (buffers instanceof Map ? buffers.get(name) : buffers[name]);
   const parts = [];
-  const excluded = new Set(['.DS_Store', 'build-receipt.json']);
-  for (const entryName of sortedEntryNames(asset.entries)) {
-    if (excluded.has(entryName)) continue;
+  for (const entryName of names.sort(compareEntryNamesByUtf8)) {
+    if (CONTENT_DIGEST_EXCLUDED_ENTRIES.has(entryName)) continue;
     if (entryName.startsWith('reports/')) continue;
-    const entryBuf = asset.readEntry(entryName);
+    const entryBuf = readBuffer(entryName);
     let digestBuf = entryBuf;
     if (JSON_ENTRY_RE.test(entryName)) {
       const parsed = parseJson(entryBuf, entryName);
@@ -220,6 +227,14 @@ function buildContentDigest(asset) {
   return `sha256:${sha256Hex(Buffer.from(parts.join('\n')))}`;
 }
 
+function buildContentDigest(asset) {
+  const buffers = new Map();
+  for (const entryName of asset.entries.keys()) {
+    buffers.set(entryName, asset.readEntry(entryName));
+  }
+  return contentDigestFromEntryBuffers(buffers);
+}
+
 function verifyMediaType(asset, errors) {
   if (!asset.entries.has('mimetype')) {
     errors.push('required entry missing: mimetype');
@@ -380,8 +395,8 @@ function verifySync(asset, options = {}) {
   // adds transport identity; it must not maintain a second manifest or payload
   // dialect.
   appendCurrentValidationErrors(asset, errors);
-  if (options.requireSignature === true) {
-    errors.push('asset signatures are outside the current Preview contract');
+  if (options.requireSignature === true && !asset.entries.has(SIGNATURE_ENTRY_NAME)) {
+    errors.push(`required asset signature is absent: missing entry ${SIGNATURE_ENTRY_NAME}`);
   }
 
   if (!asset.entries.has('kdna.json')) errors.push('required entry missing: kdna.json');
@@ -541,8 +556,8 @@ function createKdnaAssetReader() {
       const entries = [...asset.entries.keys()].sort();
 
       appendCurrentValidationErrors(asset, errors);
-      if (options.requireSignature === true) {
-        errors.push('asset signatures are outside the current Preview contract');
+      if (options.requireSignature === true && !asset.entries.has(SIGNATURE_ENTRY_NAME)) {
+        errors.push(`required asset signature is absent: missing entry ${SIGNATURE_ENTRY_NAME}`);
       }
 
       if (!asset.entries.has('kdna.json')) errors.push('required entry missing: kdna.json');
@@ -617,5 +632,6 @@ function createKdnaAssetReader() {
 
 module.exports = {
   STANDARD_ENTRIES,
+  contentDigestFromEntryBuffers,
   createKdnaAssetReader,
 };