@dzhechkov/cloudru-hub 0.1.5 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.dz-manifest.json +4 -4
- package/CHANGELOG.md +6 -0
- package/README.md +2 -2
- package/package.json +1 -1
- package/sbom.json +3 -3
package/.dz-manifest.json
CHANGED
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
"files": [
|
|
6
6
|
{
|
|
7
7
|
"path": "CHANGELOG.md",
|
|
8
|
-
"sha256": "
|
|
8
|
+
"sha256": "edc0f1b076a22dc14b863bef8b287c1b9d8618a12b7ecf9f6eb0c497f74361f3"
|
|
9
9
|
},
|
|
10
10
|
{
|
|
11
11
|
"path": "LICENSE",
|
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
},
|
|
14
14
|
{
|
|
15
15
|
"path": "README.md",
|
|
16
|
-
"sha256": "
|
|
16
|
+
"sha256": "504ce5cd5b6293b3606f861f31406ae89aa6fee45a03c9099d793aa5a456ced1"
|
|
17
17
|
},
|
|
18
18
|
{
|
|
19
19
|
"path": "THIRD_PARTY_NOTICES.md",
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
},
|
|
46
46
|
{
|
|
47
47
|
"path": "package.json",
|
|
48
|
-
"sha256": "
|
|
48
|
+
"sha256": "97855099bc4e9f1254a689708048b8ed6b83ac946e0602268335b1faa6bd53dd"
|
|
49
49
|
},
|
|
50
50
|
{
|
|
51
51
|
"path": "src/classification.js",
|
|
@@ -101,5 +101,5 @@
|
|
|
101
101
|
}
|
|
102
102
|
]
|
|
103
103
|
},
|
|
104
|
-
"signature": "
|
|
104
|
+
"signature": "syeUdC1euaKTZLQIjI1nSGWVlJvcdiQYwSJ5RFtAIUOfn3HbxOJtbBs7Qu9N2rYGKlmO/TBqeSJdtU75q6X9BA=="
|
|
105
105
|
}
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,11 @@
|
|
|
1
1
|
# Changelog — @dzhechkov/cloudru-hub
|
|
2
2
|
|
|
3
|
+
## 0.1.6
|
|
4
|
+
|
|
5
|
+
Corrects the link added in 0.1.5: the Тимур credit now points at his about page
|
|
6
|
+
(https://shkrbkv.ru/about/), not at a single note. The 0.1.5 entry below is left as written — it
|
|
7
|
+
records what that release actually shipped, and a dated entry is not rewritten to hide a wrong link.
|
|
8
|
+
|
|
3
9
|
## 0.1.5
|
|
4
10
|
|
|
5
11
|
Attribution only, no code change. Both README mentions of Тимур — the Hermes engine author whose
|
package/README.md
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
# @dzhechkov/cloudru-hub
|
|
2
2
|
|
|
3
3
|
> **STATUS: published — the ADR-001 licence hold is SATISFIED (AM-2, 2026-08-12).**
|
|
4
|
-
> [Тимур](https://shkrbkv.ru/
|
|
4
|
+
> [Тимур](https://shkrbkv.ru/about/), the author of the Hermes engine additions, approved publication (owner-reported
|
|
5
5
|
> 2026-08-12 — the grant record is linked from the `Grant-Confirmation:` line in LICENSE
|
|
6
6
|
> Part 2; archiving the author's written confirmation is a recorded owner follow-up).
|
|
7
7
|
> The `dz guard` `licence-hold` rule stays armed and keeps verifying
|
|
@@ -23,7 +23,7 @@ docker-compose deploy wizard.
|
|
|
23
23
|
tests): **Dmitry Zhechkov** (MIT — LICENSE Part 1). Per ADR-001 AM-1 the original Go
|
|
24
24
|
CLI on which the engine builds is the owner's work; the Hermes engine is a derivative
|
|
25
25
|
of it.
|
|
26
|
-
- **Hermes engine additions** (the ~144-tool MCP layer): **[Тимур](https://shkrbkv.ru/
|
|
26
|
+
- **Hermes engine additions** (the ~144-tool MCP layer): **[Тимур](https://shkrbkv.ru/about/)**, the Hermes author.
|
|
27
27
|
**Zero bytes of those additions ship in this package** — no binary, no Go sources, no
|
|
28
28
|
skill corpus. Publication of this package was approved by the author (grant recorded
|
|
29
29
|
2026-08-12 — LICENSE Part 2, `Grant-Confirmation:` link). The author designated no
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dzhechkov/cloudru-hub",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.7",
|
|
4
4
|
"licenseHold": {
|
|
5
5
|
"adr": "features/hermes-claude-adaptation/03_adr/001-licence-and-provenance-precondition.md",
|
|
6
6
|
"note": "SATISFIED hold (ADR-001 AM-2, grant recorded 2026-08-12 — see grant-record-2026-08-12.md). The field deliberately STAYS: the dz guard `licence-hold` rule passes a satisfied hold with the trigger in place and keeps verifying LICENSE (no PENDING placeholder, Grant-Confirmation URL), THIRD_PARTY_NOTICES and the SPDX license field on every publish. test/pack-holds.test.mjs goes RED if this field is dropped or the LICENSE grant record is degraded."
|
package/sbom.json
CHANGED
|
@@ -15,7 +15,7 @@
|
|
|
15
15
|
"hashes": [
|
|
16
16
|
{
|
|
17
17
|
"alg": "SHA-256",
|
|
18
|
-
"content": "
|
|
18
|
+
"content": "edc0f1b076a22dc14b863bef8b287c1b9d8618a12b7ecf9f6eb0c497f74361f3"
|
|
19
19
|
}
|
|
20
20
|
]
|
|
21
21
|
},
|
|
@@ -35,7 +35,7 @@
|
|
|
35
35
|
"hashes": [
|
|
36
36
|
{
|
|
37
37
|
"alg": "SHA-256",
|
|
38
|
-
"content": "
|
|
38
|
+
"content": "504ce5cd5b6293b3606f861f31406ae89aa6fee45a03c9099d793aa5a456ced1"
|
|
39
39
|
}
|
|
40
40
|
]
|
|
41
41
|
},
|
|
@@ -115,7 +115,7 @@
|
|
|
115
115
|
"hashes": [
|
|
116
116
|
{
|
|
117
117
|
"alg": "SHA-256",
|
|
118
|
-
"content": "
|
|
118
|
+
"content": "97855099bc4e9f1254a689708048b8ed6b83ac946e0602268335b1faa6bd53dd"
|
|
119
119
|
}
|
|
120
120
|
]
|
|
121
121
|
},
|