@gmickel/gno 1.28.0 → 1.29.0

package/README.md

@@ -112,12 +112,22 @@ gno daemon --detach  # headless continuous indexing (background; --status / --st
 
 <!-- public-truth:current-version -->
 
-> Current release: **v1.27.1** — see [CHANGELOG.md](./CHANGELOG.md)
+> Current release: **v1.29.0** — see [CHANGELOG.md](./CHANGELOG.md)
 
 <!-- /public-truth -->
 
 > Full release history: [CHANGELOG.md](./CHANGELOG.md)
 
+- **Trustworthy local context compiler**: deterministic Context Capsules replace
+  repeated agent `query → get → multi-get` orchestration with one bounded,
+  citation-complete evidence handoff. The promoted benchmark retained 100%
+  completion accuracy while reducing retrieval calls by 48.94% and
+  model-visible context by 44.12%, with 100% exact claim-span linkage.
+- **Verified answers and private quality learning**: opt-in verified Ask checks
+  every substantive claim against one closed Capsule and abstains below complete
+  support. Local traces, explicit judgments, content-free qrels export, and
+  read-only replay turn real misses into regression evidence without automatic
+  personalization.
 - **Project-aware retrieval affinity**: trusted local CLI searches can use the
   current workspace or explicit `--project-root` values as a transparent,
   explainable `+0.03` soft ranking signal. Filters remain hard, and untrusted
@@ -147,6 +157,18 @@ gno daemon --detach  # headless continuous indexing (background; --status / --st
   capture. A loopback `gno serve` pairing, server-owned preview, exact
   provenance, and idempotent recovery protect every write; no history, cookies,
   remote fetch, store listing, or Firefox parity is claimed.
+- **Verified setup and portable project profiles**: `gno setup <folder>` proves
+  an exact lexical result before success; optional `.gno/index.yml` profiles
+  carry explicit collection, context, model, content-type, and project-affinity
+  intent without storing the index in the repository.
+- **Portable export adapters**: JSONL/NDJSON, EML/MBOX, ICS, WebVTT/SRT,
+  explicit browser exports, and configured transcript exports become bounded,
+  read-only logical records with exact file provenance—never live-account
+  connectors.
+- **Collection-owned egress policy**: every collection has an effective
+  `local_only`, `lan`, or `remote` boundary that follows mixed and derived
+  evidence through resident serving, inference, publishing, exports, Capsules,
+  and traces. Authentication never overrides policy.
 - **Schema-lite content types**: optional `contentTypes` rules map configured
   frontmatter `type` values or path prefixes to canonical `contentType` metadata
   in JSON search/query results and can apply one bounded, explainable
@@ -898,25 +920,29 @@ graph TD
 
 ## Features
 
-| Feature              | Description                                                                    |
-| :------------------- | :----------------------------------------------------------------------------- |
-| **Hybrid Search**    | BM25 + vector + RRF fusion + cross-encoder reranking                           |
-| **Document Editor**  | Create, edit, delete docs with live markdown preview                           |
-| **Web UI**           | Visual dashboard for search, browse, edit, and AI Q&A                          |
-| **REST API**         | HTTP API for custom tools and integrations                                     |
-| **Multi-Format**     | Markdown, PDF, Office, JSONL, EML/MBOX, ICS, transcript, and browser exports   |
-| **Local LLM**        | AI answers via llama.cpp, no API keys                                          |
-| **Remote Inference** | Optional HTTP endpoints for embedding, reranking, expansion, and generation    |
-| **Privacy First**    | Local by default; no telemetry; network use is explicit or model provisioning  |
-| **MCP Server**       | 10 automatic client targets; 25 read-only tools, 40 with writes enabled        |
-| **Knowledge Delta**  | Bounded metadata history, structural diffs, and dependency impact paths        |
-| **Context Capsules** | Deterministic evidence bundles plus saved-file freshness reverification        |
-| **Collections**      | Organize sources with patterns, excludes, contexts                             |
-| **Tag Filtering**    | Frontmatter tags with hierarchical paths, filter via `--tags-any`/`--tags-all` |
-| **Note Linking**     | Wiki links, backlinks, related notes, cross-collection navigation              |
-| **Multilingual**     | Query classification, 7-language document detection, multilingual embeddings   |
-| **Incremental**      | SHA-256 tracking, only changed files re-indexed                                |
-| **Keyboard First**   | ⌘N capture, ⌘K search, ⌘/ shortcuts, ⌘S save                                   |
+| Feature              | Description                                                                                 |
+| :------------------- | :------------------------------------------------------------------------------------------ |
+| **Hybrid Search**    | BM25 + vector + RRF fusion + cross-encoder reranking                                        |
+| **Document Editor**  | Create, edit, delete docs with live markdown preview                                        |
+| **Web UI**           | Visual dashboard for search, browse, edit, and AI Q&A                                       |
+| **REST API**         | HTTP API for custom tools and integrations                                                  |
+| **Multi-Format**     | Markdown, PDF, Office, JSONL, EML/MBOX, ICS, transcript, and browser exports                |
+| **Local LLM**        | AI answers via llama.cpp, no API keys                                                       |
+| **Remote Inference** | Optional HTTP endpoints for embedding, reranking, expansion, and generation                 |
+| **Privacy First**    | Fail-closed per-collection egress policy; no telemetry; explicit network use                |
+| **MCP Server**       | 10 automatic client targets; 25 read-only tools, 40 with writes enabled                     |
+| **Knowledge Delta**  | Bounded metadata history, structural diffs, and dependency impact paths                     |
+| **Context Capsules** | Deterministic evidence bundles plus saved-file freshness reverification                     |
+| **Verified Ask**     | Claim-by-claim evidence checks with explicit abstention                                     |
+| **Private Replay**   | Opt-in local traces, explicit qrels, and read-only ranking comparison                       |
+| **Verified Setup**   | Exact lexical activation proof plus portable project-local profiles                         |
+| **Browser Clipper**  | Explicit selection/Reader capture through visible loopback pairing                          |
+| **Collections**      | Organize sources with patterns, contexts, and <code>local_only / lan / remote</code> policy |
+| **Tag Filtering**    | Frontmatter tags with hierarchical paths, filter via `--tags-any`/`--tags-all`              |
+| **Note Linking**     | Wiki links, backlinks, related notes, cross-collection navigation                           |
+| **Multilingual**     | Query classification, 7-language document detection, multilingual embeddings                |
+| **Incremental**      | SHA-256 tracking, only changed files re-indexed                                             |
+| **Keyboard First**   | ⌘N capture, ⌘K search, ⌘/ shortcuts, ⌘S save                                                |
 
 ---
 

package/assets/skill/SKILL.md

@@ -269,6 +269,39 @@ Treat replay as evidence for a human promotion decision. It always reports
 `applied: false`; never claim that replay changed boosts, prompts, models,
 configuration, traces, or source files.
 
+## Collection Egress Boundaries
+
+Before any non-loopback serving, remote model call, network export, or publish
+handoff, inspect the participating collections instead of inferring permission
+from authentication:
+
+```bash
+gno collection policy get <collection>
+gno collection policy check --action <action> \
+  --destination <local_process|loopback|lan|remote> \
+  --content-class <class> -c <collection> --explain-egress
+```
+
+Absent and migrated policies are `local_only`. Mixed evidence and derived
+artifacts inherit the most restrictive source policy. Do not silently omit a
+restricted collection; use explicit partial mode only when the user asks for
+it, then report every omitted collection and reason.
+
+Relaxing to `lan` or `remote` is a visible user-authorized write. Read the
+current revision with `get`, then use
+`gno collection policy set <collection> <policy> --confirm-relaxation <revision>`.
+Never invent or reuse a revision. Tightening to `local_only` needs no
+confirmation and invalidates active sessions, streams, and queued work.
+
+Bearer authentication, MCP write enablement, and collection policy are
+independent gates. `EGRESS_DENIED` is not permission to retry through another
+surface. Audit output is local and content-free via
+`gno egress-audit list|show|status`; deletion/purge must be explicit. A local
+policy change cannot retract data already uploaded—tell the user to remove it
+at the remote service. For gno.sh, supported private links can be revoked or
+expired in Studio; public-space deletion is not yet self-service, so request
+takedown. Encrypted gno.sh shares are client-encrypted and never server-decrypted.
+
 ## MCP Retrieval Strategy
 
 For a long-lived client that supports Streamable HTTP, start one resident owner

package/browser-extension/artifacts/gno-browser-clipper-v1.29.0.zip.sha256

@@ -0,0 +1 @@
+3ea69fe6de5e72a28f8e7f500edc351c53802639ac320806ca5588070cb7e1c1  gno-browser-clipper-v1.29.0.zip