@aikdna/kdna-core 0.8.0 → 0.9.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aikdna/kdna-core",
-  "version": "0.8.0",
-  "description": "KDNA core library — pure logic for loading, validating, linting, and rendering KDNA domain cognition packages. Zero Node.js dependencies.",
+  "version": "0.9.1",
+  "description": "KDNA core library — load, validate, lint, and render KDNA domain judgment assets. Supports KDNA Container format (payload.kdnab via CBOR).",
   "type": "commonjs",
   "main": "src/index.js",
   "module": "src/index.mjs",

package/src/asset-reader.js

@@ -1,8 +1,5 @@
 /**
  * KDNA Asset Reader — direct .kdna container access.
- *
- * Supports KDNA Container v2 (payload.kdnab via CBOR).
- * V1 plaintext containers (KDNA_Core.json etc. as ZIP entries) are rejected.
  */
 
 const fs = require('fs');
@@ -11,28 +8,25 @@ const zlib = require('zlib');
 const cbor = require('cbor-x');
 const { loadDomainFromFiles, formatContext } = require('./loader');
 
-const STANDARD_ENTRIES = [
-  'kdna.json',
-  'payload.kdnab',
-  'KDNA_Core.json',
-  'KDNA_Patterns.json',
-  'KDNA_Scenarios.json',
-  'KDNA_Cases.json',
-  'KDNA_Reasoning.json',
-  'KDNA_Evolution.json',
-];
+const KDNA_MEDIA_TYPE = 'application/vnd.aikdna.kdna+zip';
 
-const V1_ENTRIES = [
+// Standard KDNA domain data entries — kept in lockstep with loader.FILE_MAP.
+// Asset reader pre-loads these so callers don't have to enumerate entry names.
+// NOTE: kdna.json / manifest.json are read separately via readManifest(); do not
+// add them here. KDNA_Cluster is intentionally omitted — its schema exists but
+// is not yet wired into the loader contract.
+const STANDARD_ENTRIES = Object.freeze([
   'KDNA_Core.json',
   'KDNA_Patterns.json',
   'KDNA_Scenarios.json',
   'KDNA_Cases.json',
   'KDNA_Reasoning.json',
   'KDNA_Evolution.json',
-];
+]);
 
+// Matches any entry that holds JSON content (used to canonicalize the entry
+// before hashing/signing so digests are stable across re-serialization).
 const JSON_ENTRY_RE = /\.json$/i;
-const KDNA_MEDIA_TYPE = 'application/vnd.aikdna.kdna+zip';
 
 function sha256Hex(buf) {
   return crypto.createHash('sha256').update(buf).digest('hex');
@@ -338,9 +332,9 @@ function validateManifestIdentity(manifest, errors, _warnings) {
   if (manifest.format && manifest.format !== 'kdna') {
     errors.push(`kdna.json.format: invalid value "${manifest.format}". Expected "kdna".`);
   }
-  if (manifest.format_version && manifest.format_version !== '1.0') {
+  if (manifest.format_version && manifest.format_version !== '2.0') {
     errors.push(
-      `kdna.json.format_version: invalid value "${manifest.format_version}". Expected "1.0".`,
+      `kdna.json.format_version: invalid value "${manifest.format_version}". Expected "2.0".`,
     );
   }
   if (!manifest.spec_version) errors.push('kdna.json: missing required field "spec_version"');
@@ -380,11 +374,10 @@ function readManifest(asset) {
   return parseJson(asset.readEntry('kdna.json'), 'kdna.json');
 }
 
-function readDataMapSync(asset, entries = STANDARD_ENTRIES, options = {}) {
+function readDataMapSync(asset, options = {}) {
   const dataMap = {};
   const manifest = readManifest(asset);
 
-  // ── KDNA Container v2: decode CBOR payload ──
   if (asset.entries.has('payload.kdnab')) {
     const payloadBuf = asset.readEntry('payload.kdnab');
     const payload = cbor.decode(payloadBuf);
@@ -396,19 +389,15 @@ function readDataMapSync(asset, entries = STANDARD_ENTRIES, options = {}) {
       if (payload.judgment.reasoning) dataMap['KDNA_Reasoning.json'] = payload.judgment.reasoning;
       if (payload.judgment.evolution) dataMap['KDNA_Evolution.json'] = payload.judgment.evolution;
     }
+
+    const encrypted = encryptedEntries(manifest);
+    if (encrypted.length && typeof options.decryptEntry !== 'function') {
+      throw new Error(`encrypted entries require decryptEntry hook: ${encrypted.join(', ')}`);
+    }
     return dataMap;
   }
 
-  const encrypted = encryptedEntries(manifest).filter((entryName) => entries.includes(entryName));
-  if (encrypted.length && typeof options.decryptEntry !== 'function') {
-    throw new Error(`encrypted entries require decryptEntry hook: ${encrypted.join(', ')}`);
-  }
-  for (const entryName of entries) {
-    if (!asset.entries.has(entryName)) continue;
-    const buf = maybeDecryptEntrySync(asset, manifest, entryName, asset.readEntry(entryName), options);
-    dataMap[entryName] = parseJson(buf, entryName);
-  }
-  return dataMap;
+  throw new Error('Not a KDNA asset: missing payload.kdnab');
 }
 
 function verifySync(asset, options = {}) {
@@ -418,10 +407,7 @@ function verifySync(asset, options = {}) {
 
   if (!asset.entries.has('kdna.json')) errors.push('required entry missing: kdna.json');
   verifyMediaType(asset, errors);
-  if (!asset.entries.has('KDNA_Core.json')) errors.push('required entry missing: KDNA_Core.json');
-  if (!asset.entries.has('KDNA_Patterns.json')) {
-    errors.push('required entry missing: KDNA_Patterns.json');
-  }
+  if (!asset.entries.has('payload.kdnab')) errors.push('required entry missing: payload.kdnab');
 
   const content_digest = buildContentDigest(asset);
   const asset_digest = asset.asset_digest;

package/src/lint-pure.js

@@ -258,7 +258,7 @@ function lintDomain(dataMap) {
  */
 const VALID_STATUS = new Set(['draft', 'experimental', 'stable', 'deprecated', 'staging']);
 const VALID_BADGE = new Set(['untested', 'tested', 'validated', 'expert_reviewed', 'production_ready']);
-const VALID_ACCESS = new Set(['open', 'licensed', 'runtime']);
+const VALID_ACCESS = new Set(['public', 'licensed', 'remote']);
 const VALID_RISK = new Set(['R0', 'R1', 'R2', 'R3']);
 const VALID_I18N = new Set(['L0', 'L1', 'L2', 'L3']);
 const VALID_PRIVACY = new Set(['public', 'private', 'sensitive', 'regulated']);
@@ -318,9 +318,9 @@ function validateManifest(manifest) {
   if (manifest.format && manifest.format !== 'kdna') {
     errors.push(`kdna.json.format: invalid value "${manifest.format}". Expected "kdna".`);
   }
-  if (manifest.format_version && manifest.format_version !== '1.0') {
+  if (manifest.format_version && manifest.format_version !== '2.0') {
     errors.push(
-      `kdna.json.format_version: invalid value "${manifest.format_version}". Expected "1.0".`,
+      `kdna.json.format_version: invalid value "${manifest.format_version}". Expected "2.0".`,
     );
   }
   if (manifest.status && !VALID_STATUS.has(manifest.status)) {

package/src/types.d.ts

@@ -204,14 +204,14 @@ export interface KDNAFileDataMap {
 
 export interface KDNAManifest {
   format: 'kdna';
-  format_version: '1.0';
+  format_version: '2.0';
   spec_version: string;
   name: string;
   version: string;
   judgment_version: string;
   status: 'draft' | 'experimental' | 'stable' | 'deprecated' | 'staging';
   quality_badge: 'untested' | 'tested' | 'validated' | 'expert_reviewed' | 'production_ready';
-  access: 'open' | 'licensed' | 'runtime';
+  access: 'public' | 'licensed' | 'remote';
   language?: string;
   default_language: string;
   languages: string[];

package/src/workpack-pure.js

@@ -25,7 +25,7 @@ const WORK_PACK_SCHEMA = {
     version: { type: 'string', pattern: '^\\d+\\.\\d+\\.\\d+(-[a-zA-Z0-9.]+)?(\\+[a-zA-Z0-9.]+)?$' },
     description: { type: 'string', maxLength: 280 },
     status: { type: 'string', enum: ['draft', 'experimental', 'stable', 'deprecated'] },
-    access: { type: 'string', enum: ['open', 'licensed', 'runtime', 'enterprise', 'partner'], default: 'open' },
+    access: { type: 'string', enum: ['public', 'licensed', 'remote', 'enterprise', 'partner'], default: 'public' },
     license: { type: 'string', default: 'Apache-2.0' },
     kdna: {
       type: 'object',
@@ -179,7 +179,7 @@ function inspectWorkPack(manifest, rootDir) {
     version: manifest.version,
     description: manifest.description,
     status: manifest.status,
-    access: manifest.access || 'open',
+    access: manifest.access || 'public',
     license: manifest.license || 'Apache-2.0',
     format_version: manifest.format_version,
     kdna: {