@gmickel/gno 1.21.0 → 1.22.0

package/README.md

@@ -94,7 +94,7 @@ gno daemon --detach  # headless continuous indexing (background; --status / --st
 
 <!-- public-truth:current-version -->
 
-> Current release: **v1.21.0** — see [CHANGELOG.md](./CHANGELOG.md)
+> Current release: **v1.22.0** — see [CHANGELOG.md](./CHANGELOG.md)
 
 <!-- /public-truth -->
 
@@ -710,7 +710,7 @@ GNO is local-first, but sometimes you want a URL to send someone. [**gno.sh**](h
 
 ![gno.sh publish reader](./assets/screenshots/publish-reader.jpg)
 
-The workflow is deliberately explicit: **export locally → upload artifact → share URL**. Your private notes and metadata stay on your machine. Only what you export leaves.
+The workflow is deliberately explicit: **export locally → upload artifact → share URL**. Private and `publish: false` notes stay on your machine. Exported artifacts omit local collection paths and source URIs.
 
 ```bash
 # Export a single note
@@ -745,6 +745,15 @@ Upload the artifact at [gno.sh/studio](https://gno.sh/studio) and pick a visibil
 
 **Reader experience**: editorial serif typography, drop caps, hanging punctuation, table of contents, keyboard shortcuts (`j/k`, `/`), scoped Pagefind-style search, and backlinks restricted to the published subset. Nothing leaks that you didn't publish.
 
+Public exports also carry a deterministic agent manifest. It lists only the
+sanitized published Markdown projection, with relative Markdown locators,
+content hashes, exact line spans, and Capsule-compatible evidence identities.
+The projection revision is stable while those published bytes and reader
+metadata are unchanged. Secret-link and invite-only exports do not receive
+agent capabilities or manifests. Encrypted exports remain ciphertext-only.
+Reader metadata drops embedded local path or GNO/file URI tokens; canonical
+and image fields accept only uncredentialed public HTTP(S) targets.
+
 Republishing a public, secret-link, or invite-only artifact updates the same URL. Encrypted shares should be replaced from a fresh local export so the server never needs your plaintext.
 
 Encrypted source-backed publish on `gno.sh` is intentionally disabled. For encrypted shares, use:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gmickel/gno",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "description": "Local semantic search for your documents. Index Markdown, PDF, and Office files with hybrid BM25 + vector search.",
   "keywords": [
     "embeddings",
@@ -83,6 +83,7 @@
     "eval:retrieval-candidates": "bun scripts/retrieval-candidate-benchmark.ts",
     "eval:retrieval-candidates:write": "bun scripts/retrieval-candidate-benchmark.ts --write",
     "eval:agentic": "bun evals/agentic/cli.ts",
+    "eval:agentic:demo": "bun evals/agentic/demos/generate-context-capsule.ts",
     "eval:watch": "bun --bun evalite watch",
     "research:finetune:bootstrap": "bun research/finetune/scripts/bootstrap-promotion-fixtures.ts",
     "research:finetune:autonomous:noop": "bun research/finetune/autonomous/scripts/noop-run.ts",

package/spec/cli.md

@@ -95,6 +95,7 @@ equivalent files fail closed as ambiguous.
 | models pull        | no     | no      | no    | no   | no    | terminal |
 | models clear       | no     | no      | no    | no   | no    | terminal |
 | models path        | yes    | no      | no    | no   | no    | terminal |
+| publish export     | yes    | no      | no    | no   | no    | terminal |
 | cleanup            | no     | no      | no    | no   | no    | terminal |
 | doctor             | yes    | no      | no    | yes  | no    | terminal |
 | mcp                | no     | no      | no    | no   | no    | stdio    |
@@ -1558,6 +1559,49 @@ gno models path [--json]
 
 ---
 
+### gno publish export
+
+Build a reader-safe gno.sh artifact from one active collection or document.
+
+**Synopsis:**
+
+```bash
+gno publish export <target> \
+  [--out <path>] \
+  [--visibility public|secret-link|invite-only|encrypted] \
+  [--passphrase <value>] \
+  [--slug <slug>] \
+  [--title <title>] \
+  [--summary <summary>] \
+  [--preview] \
+  [--json]
+```
+
+Public V1 spaces MUST carry a `manifest` conforming to
+[`publish-artifact.schema.json`](./output-schemas/publish-artifact.schema.json).
+The manifest contains schema version `1.0`, a deterministic projection
+revision, generated time, closed public capabilities, sorted published
+documents, relative Markdown locators, SHA-256 content hashes, and
+Capsule-compatible evidence identities. Manifest hashes and revisions MUST be
+derived only from sanitized notes and metadata present in the published
+projection. Local collection paths, document source URIs, unpublished
+documents, and filtered metadata MUST NOT enter artifact bytes or revision
+inputs. Reader metadata values containing embedded local path or GNO/file URI
+tokens MUST be filtered. Canonical and image metadata MUST contain
+uncredentialed public HTTP(S) targets; local hostnames and literal loopback,
+private, or link-local addresses MUST be filtered.
+
+Secret-link and invite-only V1 spaces MUST NOT contain a manifest or agent
+capability field. Encrypted V2 spaces MUST contain only ciphertext parameters,
+the opaque secret token, route slug, source type, and encrypted visibility; no
+plaintext manifest or evidence may appear outside the ciphertext. V2 builders
+MUST emit a closed projection, validate payload strings as non-empty bounded
+base64, require a positive safe-integer KDF iteration count, and bound the
+non-blank opaque token. Caller-supplied extension fields MUST NOT enter the
+artifact.
+
+---
+
 ### gno cleanup
 
 Remove orphaned content, chunks, and vectors not referenced by active documents.

package/spec/evals-agentic.md

@@ -24,6 +24,7 @@ evals/agentic/
   promotion.ts
   verified-ask-outcome.ts
   verified-ask-promotion.ts
+  demos/context-capsule.ts
   registry.ts
   report.ts
   report-artifacts.ts
@@ -44,6 +45,7 @@ evals/agentic/
     final-envelope.schema.json
     trajectory-receipt.schema.json
     benchmark-report.schema.json
+    context-capsule-demo.schema.json
 
 evals/fixtures/agentic-retrieval/
   manifest.json
@@ -61,6 +63,9 @@ evals/fixtures/agentic-retrieval/
       verified-ask-promotion.json
       verified-ask-promotion.md
     optional/{qmd,local-model}/     # local opt-in evidence; not authoritative
+  demos/
+    context-capsule.json
+    context-capsule.md
 ```
 
 The first fixture version contains 24 original synthetic tasks and 34 Markdown
@@ -412,6 +417,48 @@ summary. The six files are staged and directory-renamed as one baseline set.
 The verified Ask files are a separate attributable outcome lane; they do not
 rename the Capsule retrieval promotion in `report.json`.
 
+## Reproducible Context Capsule demo
+
+`demos/context-capsule.json` is a closed, canonically fingerprinted projection
+of one frozen exact-identifier task from the authoritative fixture-agent
+report. It contains exactly three lanes in fixed order: the lexical-only
+no-GNO baseline, shipped GNO MCP query/get primitives, and the Context Capsule.
+Every lane retains its complete normalized trajectory receipt, score, exact
+evidence coordinates and hashes, final stop outcome, agent/backend call counts,
+model-visible UTF-8 bytes, token availability, and matching-lifecycle latency.
+
+All three lanes must share the task, outer agent, trial, seed, lifecycle,
+corpus, prompt, tool, model, runtime, and canonical effective-index
+fingerprints. The generator selects exactly one receipt and score per full
+identity and rejects ambiguous multi-trial input. Adapter configuration
+fingerprints may differ. The Capsule projection additionally retains its
+normalized `retrieval.request`, effective index fingerprint, capability states,
+fallback list, and complete model-visible payload. Validation parses the
+delivered evidence bundle and compares those values, then recomputes every
+displayed lane metric from the embedded receipt and score.
+
+Source provenance distinguishes each source run's clean `runGitCommit` from
+the later Git commit that contains the generated demo artifact. The artifact
+does not attempt to embed its own containing commit. Its report and Verified
+Ask fingerprints and projected fields must match the canonical linked source
+artifacts.
+
+The readable `context-capsule.md` is generated from the JSON contract. It
+states the single-trial variance limitation, reports tokens as unavailable
+without one pinned comparable tokenizer, and limits its claim to the measured
+controlled task. It discloses that the chosen task is the sole cold
+current-GNO-failure / Capsule-success case in the 24-task authoritative cohort,
+that the Capsule lane is an evaluation-only lexical prototype, and that its
+latency is not shipped-product latency. It cannot be used as a general
+product-superiority claim.
+
+The adjacent Verified Ask block is an attributable but separate
+`answer_enforcement` proof. It binds the clean-Git canonical fingerprint of the
+frozen 22-pair `raw_ask`/`verified_ask` artifact, retains the two declared
+missing-evidence exclusions, and exposes only answer-accuracy and unsupported-
+substantive-claim metrics. Those metrics are never merged into or labeled as
+retrieval metrics.
+
 ## Deterministic scoring
 
 The scorer compares typed claims and exact citations with the hidden oracle. It
@@ -551,6 +598,7 @@ Contract tests are ordinary offline tests:
 
 ```bash
 bun test test/eval/agentic
+bun run eval:agentic:demo
 ```
 
 The runner is local and opt-in:

package/spec/output-schemas/publish-artifact.schema.json

@@ -0,0 +1,284 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "gno://schemas/publish-artifact@1.0",
+  "title": "GNO publish artifact",
+  "oneOf": [
+    { "$ref": "#/definitions/artifactV1" },
+    { "$ref": "#/definitions/artifactV2" }
+  ],
+  "definitions": {
+    "artifactV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["version", "source", "exportedAt", "spaces"],
+      "properties": {
+        "version": { "const": 1 },
+        "source": { "$ref": "#/definitions/slug" },
+        "exportedAt": { "type": "string", "format": "date-time" },
+        "spaces": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "oneOf": [
+              { "$ref": "#/definitions/publicSpace" },
+              { "$ref": "#/definitions/restrictedSpace" }
+            ]
+          }
+        }
+      }
+    },
+    "artifactV2": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["version", "source", "exportedAt", "spaces"],
+      "properties": {
+        "version": { "const": 2 },
+        "source": { "$ref": "#/definitions/slug" },
+        "exportedAt": { "type": "string", "format": "date-time" },
+        "spaces": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/definitions/encryptedSpace" }
+        }
+      }
+    },
+    "slug": {
+      "type": "string",
+      "pattern": "^[a-z0-9](?:[a-z0-9-]{0,78}[a-z0-9])?$",
+      "maxLength": 80
+    },
+    "hash": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "docid": {
+      "type": "string",
+      "pattern": "^#[a-f0-9]{8}$"
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": {
+        "oneOf": [
+          { "type": "string" },
+          {
+            "type": "array",
+            "items": { "type": "string" }
+          }
+        ]
+      }
+    },
+    "note": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["markdown", "slug", "summary", "title"],
+      "properties": {
+        "markdown": { "type": "string" },
+        "metadata": { "$ref": "#/definitions/metadata" },
+        "slug": { "$ref": "#/definitions/slug" },
+        "summary": { "type": "string" },
+        "title": { "type": "string", "minLength": 1 }
+      }
+    },
+    "publicSpace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "notes",
+        "routeSlug",
+        "sourceType",
+        "summary",
+        "title",
+        "visibility",
+        "manifest"
+      ],
+      "properties": {
+        "homeNoteSlug": { "$ref": "#/definitions/slug" },
+        "notes": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/definitions/note" }
+        },
+        "routeSlug": { "$ref": "#/definitions/slug" },
+        "sourceType": { "enum": ["note", "collection"] },
+        "summary": { "type": "string" },
+        "title": { "type": "string", "minLength": 1 },
+        "visibility": { "const": "public" },
+        "manifest": { "$ref": "#/definitions/publicManifest" }
+      }
+    },
+    "restrictedSpace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "notes",
+        "routeSlug",
+        "sourceType",
+        "summary",
+        "title",
+        "visibility"
+      ],
+      "properties": {
+        "homeNoteSlug": { "$ref": "#/definitions/slug" },
+        "notes": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/definitions/note" }
+        },
+        "routeSlug": { "$ref": "#/definitions/slug" },
+        "sourceType": { "enum": ["note", "collection"] },
+        "summary": { "type": "string" },
+        "title": { "type": "string", "minLength": 1 },
+        "visibility": { "enum": ["secret-link", "invite-only"] }
+      }
+    },
+    "publicManifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "projectionRevision",
+        "generatedAt",
+        "visibility",
+        "capabilities",
+        "documents"
+      ],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "projectionRevision": { "$ref": "#/definitions/hash" },
+        "generatedAt": { "type": "string", "format": "date-time" },
+        "visibility": { "const": "public" },
+        "capabilities": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "capsuleEvidence",
+            "exactLineCitations",
+            "llmsTxt",
+            "markdownDocuments"
+          ],
+          "properties": {
+            "capsuleEvidence": { "const": true },
+            "exactLineCitations": { "const": true },
+            "llmsTxt": { "const": true },
+            "markdownDocuments": { "const": true }
+          }
+        },
+        "documents": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/definitions/publicDocument" }
+        }
+      }
+    },
+    "publicDocument": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "slug",
+        "title",
+        "summary",
+        "markdownPath",
+        "contentHash",
+        "byteLength",
+        "lineCount",
+        "evidence"
+      ],
+      "properties": {
+        "slug": { "$ref": "#/definitions/slug" },
+        "title": { "type": "string", "minLength": 1 },
+        "summary": { "type": "string" },
+        "markdownPath": {
+          "type": "string",
+          "pattern": "^\\./[a-z0-9](?:[a-z0-9-]{0,78}[a-z0-9])?\\.md$"
+        },
+        "contentHash": { "$ref": "#/definitions/hash" },
+        "byteLength": { "type": "integer", "minimum": 0 },
+        "lineCount": { "type": "integer", "minimum": 1 },
+        "evidence": { "$ref": "#/definitions/publicEvidence" }
+      }
+    },
+    "publicEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "evidenceId",
+        "uri",
+        "docid",
+        "startLine",
+        "endLine",
+        "sourceHash",
+        "mirrorHash",
+        "passageHash",
+        "locator"
+      ],
+      "properties": {
+        "evidenceId": { "$ref": "#/definitions/hash" },
+        "uri": {
+          "type": "string",
+          "pattern": "^gno://public/[a-z0-9][a-z0-9-]{0,79}/[a-z0-9][a-z0-9-]{0,79}\\.md$"
+        },
+        "docid": { "$ref": "#/definitions/docid" },
+        "startLine": { "const": 1 },
+        "endLine": { "type": "integer", "minimum": 1 },
+        "sourceHash": { "$ref": "#/definitions/hash" },
+        "mirrorHash": { "$ref": "#/definitions/hash" },
+        "passageHash": { "$ref": "#/definitions/hash" },
+        "locator": {
+          "type": "string",
+          "pattern": "^\\./[a-z0-9][a-z0-9-]{0,79}\\.md#L1-L[1-9][0-9]*$"
+        }
+      }
+    },
+    "encryptedSpace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "encryptedPayload",
+        "routeSlug",
+        "secretToken",
+        "sourceType",
+        "visibility"
+      ],
+      "properties": {
+        "encryptedPayload": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["ciphertext", "iterations", "iv", "salt"],
+          "properties": {
+            "ciphertext": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 67108864,
+              "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+            },
+            "iterations": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 9007199254740991
+            },
+            "iv": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 1024,
+              "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+            },
+            "salt": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 1024,
+              "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+            }
+          }
+        },
+        "routeSlug": { "$ref": "#/definitions/slug" },
+        "secretToken": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512
+        },
+        "sourceType": { "enum": ["note", "collection"] },
+        "visibility": { "const": "encrypted" }
+      }
+    }
+  }
+}