@neilberkman/sidereon 0.29.0 → 0.29.2

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 ## Unreleased
 
+## 0.29.2 - 2026-07-16
+
+- Adds `GnssExactProductSet`, a fail-closed gate for a declared exact identity
+  inventory. Empty declarations, duplicates, missing products, and undeclared
+  products are rejected.
+- Preserves prediction-tier identity during exact-set comparison. SP3
+  observed/predicted timing remains available from the parser's authoritative
+  record-flag summary.
+- Builds against `sidereon` and `sidereon-core` 0.29.2.
+
+## 0.29.1 - 2026-07-15
+
+- Derives CODE predicted IONEX P1 and P2 direct locations from their current
+  official tier-specific HTTPS directories, including identity-year rollover.
+- Keeps same-filename P1 and P2 exact product cache keys distinct.
+- Builds against `sidereon` and `sidereon-core` 0.29.1.
+
 ## 0.29.0 - 2026-07-15
 
 - Adds pure exact GNSS product identity and explicit distribution-location

package/README.md

@@ -108,7 +108,11 @@ Product identity and distribution are separate. The pure derivation functions
 perform no network or file IO:
 
 ```js
-import { distributionLocation, productIdentity } from "@neilberkman/sidereon";
+import {
+  distributionLocation,
+  GnssExactProductSet,
+  productIdentity,
+} from "@neilberkman/sidereon";
 
 const identity = productIdentity("cod", "sp3", 2026, 7, 12);
 console.log(identity.officialFilename);
@@ -126,6 +130,11 @@ const cddis = distributionLocation(
 );
 console.log(cddis.originalUrl);
 console.log(cddis.compression); // gzip
+
+const exactSet = new GnssExactProductSet();
+exactSet.addExpected(identity);
+exactSet.addAvailable(identity); // add only after content validation
+exactSet.validate();
 ```
 
 `productIdentity` returns publisher, solution class, campaign, date, issue,
@@ -136,6 +145,13 @@ Changing the source cannot change the exact product. Unsupported combinations
 throw instead of selecting another center, tier, issue, date, cadence, or
 family.
 
+`GnssExactProductSet.validate()` rejects an empty declaration, duplicates,
+missing products, undeclared products, and same-filename identities with
+different prediction metadata. Start dependent processing only after it
+returns successfully. For SP3 observed/predicted timing, use
+`sp3.predictionSummary()`; do not infer the boundary from issue times or catalog
+fields.
+
 Browser and Node callers retain control of `fetch`, Earthdata credentials,
 retries, and cache policy. Send credentials only to NASA's documented hosts;
 remove URL queries from diagnostics; reject HTML success bodies; validate

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neilberkman/sidereon",
-  "version": "0.29.0",
+  "version": "0.29.2",
   "description": "WebAssembly / JavaScript interface over the sidereon GNSS + astrodynamics engine: SP3 loading and multi-product merge, SPP / RTK (float + fixed) / PPP (float + fixed) positioning, IONEX slant delay, SGP4 and numerical orbit propagation, RINEX observation/navigation/clock parsing, CRINEX (Hatanaka) decoding, observable-domain math (carrier combinations, cycle slips, Hatch smoothing, weighting, velocity, GPS C/A signal), and the astro domain (scale-tagged time, frame transforms, Sun/Moon ephemerides, eclipse / body angles, DOP, passes / visibility, conjunction + collision probability, CDM / OMM / ANTEX parsing, RF link budget)",
   "type": "module",
   "license": "MIT",