@hypercarrier/rarebit 0.5.0 → 0.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/AGENTS.md CHANGED
@@ -7,7 +7,7 @@ must not replace it or claim Task, Project, runtime, or delivery truth.
7
7
  Keep the public surface small. Test CLI behavior, package boundaries, and Pi
8
8
  installation paths. Do not add private-helper mocks, export-count tests,
9
9
  coverage targets, or tautological snapshots. Run `npm ci`, `npm test`, and
10
- `npm run verify:package` before a release candidate.
10
+ `npm run verify:package` before a release.
11
11
 
12
12
  Do not record Session prose, provider credentials, Recall bundles, or private
13
13
  paths in issues, fixtures, logs, or release records. `README.md` owns user
package/CHANGELOG.md CHANGED
@@ -1,5 +1,11 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.5.1 — 2026-10-12
4
+
5
+ - Document the release privacy gate as the baseline range scan in `RUNBOOK.md`
6
+ and `AGENTS.md`. A change outside the npm `files` list ships on `main`
7
+ without a version.
8
+
3
9
  ## 0.5.0 — 2026-10-07
4
10
 
5
11
  - Add `/rarebit btw [--rarebits] [--readonly] [question]`. It opens a
package/RUNBOOK.md CHANGED
@@ -1,12 +1,16 @@
1
1
  # Rarebit runbook
2
2
 
3
3
  To release, merge the version bump and its [CHANGELOG.md](CHANGELOG.md) entry
4
- to `main`, run `git-privacy-scan --ref HEAD history`, then push tag
5
- `v<version>`. The tag push runs
4
+ to `main`, run
5
+ `git-privacy-scan --ref HEAD --base "$(git config privacy.baseline)" range`,
6
+ then push tag `v<version>`. Any finding blocks the release; the pre-push hook
7
+ runs the same scan. The tag push runs
6
8
  [`.github/workflows/publish.yml`](.github/workflows/publish.yml). It runs the
7
9
  package gates, publishes one verified packed artifact with npm provenance, and
8
10
  creates the GitHub Release. A prerelease version goes to npm `next`; any other
9
- version goes to `latest`. Publication adds no commit.
11
+ version goes to `latest`. Publication adds no commit. A change outside the npm
12
+ `files` list, such as `claude-code/`, changes no package bytes: push it to
13
+ `main` without a version.
10
14
 
11
15
  Set `rarebit.model` in global Pi settings or in a trusted Project's
12
16
  `.pi/settings.json`. It must be `provider/model` or an object with `provider`
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@hypercarrier/rarebit",
3
- "version": "0.5.0",
3
+ "version": "0.5.1",
4
4
  "description": "Sparse, provenance-bearing conversational evidence recovery for Pi sessions.",
5
5
  "license": "MIT",
6
6
  "author": "HyperCarrier contributors",