@smartergpt/lexrunner 1.5.2 → 2.0.1

package/CHANGELOG.md

@@ -6,6 +6,56 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 ## [Unreleased]
 
+## [2.0.1] - 2026-08-29
+
+### Fixed
+
+- **Published MCP identity** - Report the installed package version from both the SDK MCP server and
+  the published `lexrunner-mcp` launcher instead of the stale pre-release `0.1.0` value. Release
+  tests now initialize the packed MCP through the official client transport and require its server
+  identity to match the installed manifest before accepting the tool inventory.
+
+## [2.0.0] - 2026-08-29
+
+### Breaking changes
+
+- **Gate execution receipts v2** - Replace `lexrunner-gate-execution-receipt/v1` with v2. Receipt
+  consumers must accept the required `binding` object for item, gate-declaration, candidate, and
+  effective-timeout identity. The receipt's top-level `attempt` identifies the execution attempt;
+  the evidence manifest separately binds the plan digest. Version-1-only parsers must migrate
+  before consuming 2.0.0 evidence.
+- **Declared containers fail closed** - A gate with a container declaration is now rejected as an
+  unsupported execution mode instead of silently running the declared command on the local host.
+
+### Added
+
+- **Plan-bound gate evidence** - Return an explicit SHA-256-bound gate evidence manifest from gate
+  execution and let CLI, SDK MCP, and published MCP status inspect that exact reference. Status
+  rejects changed plans or candidates, changed gate declarations, duplicate identities, path
+  escapes, and tampered manifests or execution receipts. Caller-supplied hashes are reported as
+  unverified observations and cannot mint merge eligibility; authoritative verification remains
+  part of the plan-pinned verifier work in #865.
+- **Owned gate evidence roots** - Write each run into a fresh unique child of the requested artifact
+  directory, exclude only that owned child from candidate freshness, and reject evidence after any
+  other tracked or untracked candidate change.
+- **Visible timeout precedence** - Allow an exact `timeoutMs` on an individual plan gate and an MCP
+  operation-default timeout. Per-gate values override the hostility-adjusted operation default and
+  the effective timeout is included in bounded gate results and evidence.
+- **Fail-closed runtime declarations** - Reject unsupported container execution instead of silently
+  running the declared command on the local host.
+
+### Fixed
+
+- Preserve stable, bounded duplicate-plan diagnostics without reflecting hostile item or gate names.
+- Validate hosted CLI evidence at its hashed, workflow-owned artifact paths.
+- Align vulnerability and flake-report fixtures with hashed item and gate identities.
+
+### Compatibility
+
+- Retain deprecated CLI, MCP IntegrationRun/`health`, environment-variable, and flat-path aliases
+  through the 2.x line. Their runtime metadata, warnings, tests, and documentation now schedule
+  removal for 3.0.0.
+
 ## [1.5.2] - 2026-08-28
 
 ### Changed

package/README.mcp.md

@@ -478,6 +478,7 @@ same frozen plan.
 - `onlyItem` (string, optional): Execute gates for this item only
 - `onlyGate` (string, optional): Execute this gate only
 - `outDir` (string, optional): Output directory for gate results
+- `timeoutMs` (integer, optional): Operation-default timeout; a gate's own `timeoutMs` overrides it
 
 **Returns:**
 
@@ -490,12 +491,21 @@ same frozen plan.
       "gates": [
         {
           "name": "test",
-          "status": "pass"
+          "status": "pass",
+          "timeoutMs": 45000
         }
       ]
     }
   ],
   "allGreen": true,
+  "artifactRefs": [
+    { "kind": "gate-results-directory", "path": "..." },
+    {
+      "kind": "gate-evidence-manifest",
+      "path": ".../gate-evidence-manifest.json",
+      "sha256": "sha256:..."
+    }
+  ],
   "planArtifact": {
     "contract": "plan-artifact-identity-v1",
     "kind": "execution-plan",
@@ -508,6 +518,13 @@ same frozen plan.
 }
 ```
 
+Pass the returned manifest `path` and `sha256` to `weave_status` as `evidenceFile` and
+`evidenceSha256`. Status does not scan the output directory or remember an active run. It validates
+the plan, candidate, gate, receipt, timeout, and hash bindings and reports the matching gate
+observations with `authority: "unverified"`. Those observations do not create merge eligibility:
+that requires the separately trusted, plan-pinned verifier receipt tracked by #865. Each execution
+uses a fresh unique child of `outDir`, and the returned artifact reference names that exact run.
+
 **Example (using repository or profile fallback):**
 
 ```json

package/README.md

@@ -115,11 +115,13 @@ The checked-in package version is the single source for `lexrunner --version` an
 
 <!-- BEGIN GENERATED PACKAGE VERSION -->
 
-Current repository package version: **1.5.2**. npm availability and dist-tags are separate
+Current repository package version: **2.0.1**. npm availability and dist-tags are separate
 release evidence; inspect the registry rather than inferring publication from source metadata.
 <!-- END GENERATED PACKAGE VERSION -->
 
-See the [1.5.2 release notes](docs/releases/1.5.2.md), the
+See the [2.0.1 MCP identity correction](docs/releases/2.0.1.md), the
+[2.0.0 plan-bound evidence release](docs/releases/2.0.0.md), the
+[1.5.2 exact Lex alignment release](docs/releases/1.5.2.md), the
 [1.5.1 release correction](docs/releases/1.5.1.md), the
 [1.4.1 canonical CLI release](docs/releases/1.4.1.md), the
 [1.4.0 native-host boundary release](docs/releases/1.4.0.md), the

package/dist/{autopilot-62Y2M2ZO.js → autopilot-3OHEUTHD.js}

@@ -16,7 +16,7 @@ import {
   hasCapability,
   parseAutopilotConfig,
   validateAutopilotConfig
-} from "./chunk-TIMHM7VL.js";
+} from "./chunk-ARDKZW7F.js";
 import "./chunk-4FFGNTAV.js";
 import "./chunk-6A4IE3TI.js";
 import "./chunk-VAGHAQT2.js";