@gmickel/gno 1.29.2 → 1.29.3

package/assets/skill/README.md

@@ -38,7 +38,8 @@ gno skill install --target claude       # Claude Code (default)
 gno skill install --target codex        # OpenAI Codex CLI
 gno skill install --target opencode     # OpenCode
 gno skill install --target openclaw     # OpenClaw
-gno skill install --target all          # All four
+gno skill install --target hermes       # Hermes
+gno skill install --target all          # All supported agents
 ```
 
 Scope is configurable:
@@ -81,19 +82,25 @@ commands from the workspace. The skill docs (see [SKILL.md](SKILL.md))
 walk the model through:
 
 - initialising a new index and adding collections
+- retrieval-proven `setup` and portable project profiles
 - keyword (`search`), vector (`vsearch`), hybrid (`query`) and
   AI-answer (`ask`) search modes
+- deterministic Context Capsules and fail-closed verified answers
 - document retrieval (`get`, `multi-get`) including line ranges
 - link graph traversal (`links`, `backlinks`, `similar`, `graph`)
+- private retrieval traces/replay and Knowledge Delta inspection
+- project affinity, explainable content boosts, and collection egress policy
+- JSONL, mail, calendar, transcript, and browser-export source adapters
+- provenance-aware browser clipping and typed second-brain capture recipes
 - tagging, contexts, and per-collection embedding models
 - publishing notes as gno.sh reader snapshots (`publish export`)
-- MCP server setup for persistent agent access
+- stdio and resident Streamable HTTP MCP access
 
 The reference docs in this folder are discoverable by the agent via
 progressive disclosure — the model only pulls them when it needs them:
 
 - [SKILL.md](SKILL.md) — core instructions + frontmatter
-- [cli-reference.md](cli-reference.md) — every CLI command, option and flag
+- [cli-reference.md](cli-reference.md) — concise CLI command reference
 - [mcp-reference.md](mcp-reference.md) — MCP tool and resource contract
 - [examples.md](examples.md) — end-to-end usage patterns
 - [recipes/](recipes/) — task-shaped second-brain workflows for lookup,

package/assets/skill/cli-reference.md

@@ -24,6 +24,27 @@ punctuation. NFC/case-equivalent spellings share one identity. See
 
 ## Initialization
 
+### gno setup
+
+Preferred activation path: add one folder, prove a real exact lexical result,
+then continue semantic indexing in the background.
+
+```bash
+gno setup <folder> --name <collection> [options]
+```
+
+| Option                    | Description                                               |
+| ------------------------- | --------------------------------------------------------- |
+| `--exclude <pattern>`     | Repeatable literal exclusion                              |
+| `--authorize-secret-risk` | Explicitly allow likely-secret files                      |
+| `--connector <id>`        | Install and smoke-test a connector; repeatable            |
+| `--apply-profile`         | Apply a valid `.gno/index.yml` before setup               |
+| `--no-semantic`           | Stop after lexical retrieval proof; start no model worker |
+| `--json`                  | Structured activation receipt                             |
+
+Setup is idempotent. Success means a corpus-derived BM25 query returned a
+cited result; it does not imply that background semantic work already finished.
+
 ### gno init
 
 ```bash
@@ -116,6 +137,25 @@ Generate embeddings only.
 gno embed [--force] [--model <uri>] [--batch-size <n>] [--dry-run]
 ```
 
+## Project Profiles
+
+Project-local `.gno/index.yml` files describe portable collection, context,
+content-type, source-metadata, and retrieval-default intent. They never relocate
+the database into the repository and are never applied implicitly.
+
+```bash
+gno profile check [path]
+gno profile show [path]
+gno profile diff [path]
+gno profile apply [path]
+gno setup . --apply-profile
+```
+
+`check` validates only. `show` emits normalized state. `diff` compares the
+profile with local configuration. `apply` is additive/update-oriented and does
+not infer deletions. Profile project roots are trusted local affinity inputs;
+MCP/SDK/REST hints remain opaque and cannot become filesystem paths.
+
 ## Capture
 
 ### gno capture
@@ -220,10 +260,19 @@ gno ask <question> [options]
 | `--fast`                  | Skip expansion and reranking (fastest) |
 | `--thorough`              | Enable query expansion (better recall) |
 | `--answer`                | Generate grounded answer               |
+| `--verify`                | Closed-Capsule answer or abstention    |
 | `--no-answer`             | Retrieval only                         |
 | `--max-answer-tokens <n>` | Cap answer length                      |
+| `--context-budget-tokens` | Global verified-Capsule token budget   |
+| `--context-budget-bytes`  | Global verified-Capsule byte budget    |
 | `--show-sources`          | Show all sources                       |
 
+`--verify` is distinct from `--answer`: generation receives only a closed
+Context Capsule, every substantive claim is checked against exact retained
+spans, and GNO releases the answer only at 100% support coverage. Failed or
+unavailable semantic verification forces an explicit abstention. This proves
+support against retained evidence, not corpus completeness or source truth.
+
 ## Document Retrieval
 
 ### gno get
@@ -292,6 +341,113 @@ Validate context configuration.
 gno context check [--json]
 ```
 
+### gno context build
+
+Compile one deterministic, extractive evidence bundle under global token and
+byte budgets:
+
+```bash
+gno context build "<goal>" --budget 12000 --json --output capsule.json
+gno context build "compare proposals" --budget 16000 --collection work --md
+gno context build "release evidence" --budget 12000 --fast --json
+```
+
+The Capsule retains exact URI/heading/line spans, source/mirror/passage hashes,
+normalized retrieval inputs, fingerprints, capability outcomes, omissions,
+coverage, and explicit gaps. Selection collapses overlaps and rewards uncovered
+facets. `--fast` avoids model loading; `--thorough` widens retrieval. GNO writes
+only to stdout or an explicit `--output`; it never persists Capsules implicitly.
+
+### gno context verify
+
+Recheck a saved canonical JSON Capsule without rebuilding or mutating it:
+
+```bash
+gno context verify capsule.json --json
+cat capsule.json | gno context verify - --md
+```
+
+The receipt classifies evidence as unchanged, stale, or missing; ranking as
+unchanged, reranked, or unavailable; and reports fingerprint drift separately.
+Verification uses the Capsule's index and refuses an explicitly mismatched
+global `--index`.
+
+### Saved Capsule watches
+
+Register a caller-owned Capsule file for evidence-triggered reverification:
+
+```bash
+gno context watch capsule.json --question "Who owns launch?" --notify --json
+gno context watches --json
+gno context reverify <registration-id> --json
+gno context unwatch <registration-id> --json
+```
+
+GNO stores only bounded registration metadata and evidence hashes—not Capsule
+or passage bytes. `serve`/`daemon` reverify after relevant settled index
+changes. Watch lifecycle operations are CLI-only. Reverification never rebuilds
+or overwrites the saved Capsule.
+
+## Knowledge Delta
+
+Inspect retained metadata-only change history and bounded dependency impact:
+
+```bash
+gno changes --since 2026-07-20T00:00:00Z --json
+gno diff gno://notes/plan.md --json
+gno impact gno://notes/plan.md --max-depth 3 --json
+```
+
+`changes` accepts an ISO time or opaque cursor and optional collection/limit.
+`diff` reports structural headings, links, and typed-relationship changes for
+one retained change. `impact` follows inbound evidence edges with explicit
+depth/node/edge/frontier/visited bounds. Expired journal history is reported,
+not reconstructed.
+
+## Private Retrieval Traces
+
+Trace recording is local and off by default. Metadata mode excludes raw
+query/goal/filter values; replay mode is separate explicit consent.
+
+```bash
+gno trace list --json
+gno trace show <trace-id> --json
+gno trace label <trace-id> --label relevant --target <uri> \
+  --target-kind document
+gno trace export <trace-id> --format qrels --output qrels.json
+gno trace replay <export-id> --candidate hybrid --md
+gno trace delete <trace-id>
+gno trace purge
+```
+
+Only append relevance labels the user explicitly supplied. Export, delete, and
+purge are explicit mutations. Replay compares one candidate with an immutable
+local baseline and always reports `applied: false`; it never changes live
+ranking.
+
+## Collection Egress
+
+Collections can be restricted to `local_only`, `lan`, or `remote`. Egress is
+checked before non-loopback serving, remote model calls, network export, or
+publishing and remains separate from authentication or write permission.
+
+```bash
+gno collection policy get work
+gno collection policy check --action remote_model \
+  --destination remote --content-class internal -c work --explain-egress
+gno collection policy set work remote --confirm-relaxation <revision>
+gno egress-audit list
+gno egress-audit show <audit-id>
+gno egress-audit status
+gno egress-audit delete <audit-id>
+gno egress-audit purge
+```
+
+Denied egress is terminal for that route; do not retry through another network
+surface. Relaxing policy requires the current revision; tightening to
+`local_only` does not. Audit receipts are local and content-free.
+Deletion/purge must remain explicit.
+
 ## Note Linking
 
 ### gno links

package/assets/skill/examples.md

@@ -7,14 +7,11 @@ Real-world examples for common tasks.
 ### Index a folder of docs
 
 ```bash
-# Initialize
-gno init
-
-# Add your docs folder
-gno collection add ~/Documents/work --name work
+# Preferred path: add folder, index, and prove exact retrieval
+gno setup ~/Documents/work --name work
 
-# Build index
-gno index
+# Skip the background semantic worker when BM25 is sufficient
+gno setup ~/Documents/contracts --name contracts --no-semantic
 ```
 
 ### Index multiple folders
@@ -71,6 +68,9 @@ gno ask "what are the payment terms"
 
 # Get an AI-generated answer
 gno ask "what are the payment terms" --answer
+
+# Fail closed unless every substantive claim has retained evidence
+gno ask "what are the payment terms" --verify --show-sources
 ```
 
 ### Scoped answers
@@ -83,6 +83,67 @@ gno ask "termination clause" -c contracts --answer
 gno ask "summarize project goals" --answer --max-answer-tokens 200
 ```
 
+## Context Capsules
+
+### Build one bounded evidence handoff
+
+```bash
+gno context build "What changed in the launch plan?" \
+  --budget 12000 --json --output launch-capsule.json
+```
+
+The saved JSON contains exact evidence spans, hashes, coverage gaps, omissions,
+and the frozen retrieval plan. GNO does not save it unless `--output` is
+explicit.
+
+### Verify or watch saved evidence
+
+```bash
+# Check the old evidence without rebuilding it
+gno context verify launch-capsule.json --json
+
+# Reverify automatically when relevant indexed evidence changes
+gno context watch launch-capsule.json \
+  --question "What changed in the launch plan?" --notify --json
+gno context watches --json
+```
+
+`verify` and `reverify` never overwrite or silently rebuild the Capsule. Run
+`context build` again when a fresh evidence selection is required.
+
+## Project-Aware Retrieval
+
+```bash
+# Inspect portable repository intent before applying it
+gno profile check
+gno profile diff
+gno setup . --apply-profile
+
+# Override or disable trusted local project affinity for one request
+gno query "release plan" --project-root ~/work/product
+gno query "release plan" --no-project-affinity
+```
+
+Configured `contentTypes[].searchBoost` is bounded and visible with
+`--explain`; hard collection/tag/date/exclude/egress filters still win.
+
+## Changes and Retrieval Learning
+
+```bash
+# What changed, and what depends on it?
+gno changes --since 2026-07-20T00:00:00Z --json
+gno diff gno://work/launch.md --json
+gno impact gno://work/launch.md --max-depth 3 --json
+
+# Explicit local judgment -> immutable qrels -> offline comparison
+gno trace label <trace-id> --label relevant \
+  --target gno://work/launch.md --target-kind document
+gno trace export <trace-id> --format qrels --output launch-qrels.json
+gno trace replay <export-id> --candidate hybrid --md
+```
+
+Replay is advisory and never changes live ranking.
+
 ## Reading Documents
 
 ### Get full document

package/assets/skill/mcp-reference.md

@@ -119,6 +119,19 @@ Read-only MCP graph/query diagnostics include `gno_graph_query` and
 `gno_query_diagnose`. In `gno_query_diagnose`, pass `fast: true` for a BM25-only
 diagnosis that avoids embedding/rerank model initialization.
 
+Before reusing caller-saved Capsule JSON, pass the complete canonical object to
+`gno_context_verify`. It reports evidence, ranking, and fingerprint drift
+without rebuilding or persisting the Capsule. The complete `gno_context` result
+lives in `structuredContent`; its text projection is deliberately compact and
+should not be expanded back into duplicate model context.
+
+Use `gno_changes`, `gno_diff`, and `gno_impact` for retained metadata history
+and bounded dependency questions. Use `gno_trace_list` and `gno_trace_show` for
+private local diagnostics. Invoke `gno_trace_label` only when the user
+explicitly provides a relevant, irrelevant, or missing-expected judgment.
+Trace export/replay/delete/purge and saved-Capsule watch lifecycle remain
+CLI-only.
+
 ## Capture
 
 `gno_capture` is available only when MCP starts with `--enable-write` or

package/browser-extension/artifacts/gno-browser-clipper-v1.29.3.zip.sha256

@@ -0,0 +1 @@
+82fd879ec5de4a00710dc4dc60a358947b4b19444f2a4780b5f502d1f5652d25  gno-browser-clipper-v1.29.3.zip

package/browser-extension/dist/manifest.json

@@ -21,5 +21,5 @@
   "content_security_policy": {
     "extension_pages": "script-src 'self'; object-src 'none'; connect-src http://127.0.0.1:*"
   },
-  "version": "1.29.2"
+  "version": "1.29.3"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gmickel/gno",
-  "version": "1.29.2",
+  "version": "1.29.3",
   "description": "Local semantic search for your documents. Index Markdown, PDF, and Office files with hybrid BM25 + vector search.",
   "keywords": [
     "embeddings",

package/browser-extension/artifacts/gno-browser-clipper-v1.29.2.zip.sha256

@@ -1 +0,0 @@
-d693cf38e03cf3d016ac982d1ec1658e9d7b6fb8e57d83f0a051e43569a58247  gno-browser-clipper-v1.29.2.zip