@tera-system/pro 0.2.15 → 0.2.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/MANIFEST.json +7 -7
- package/RELEASES.md +28 -0
- package/package.json +1 -1
- package/scripts/lib/public-key.pem +1 -1
package/MANIFEST.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tera-system/pro",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.17",
|
|
4
4
|
"description": "Build manifest for the Tera System Pro commercial plugin component (THIN mode — content served from teranoo.com signed bundle).",
|
|
5
5
|
"compatibleEnvironments": [
|
|
6
6
|
"opencode"
|
|
@@ -8,20 +8,20 @@
|
|
|
8
8
|
"minOpencodeVersion": "1.18.16",
|
|
9
9
|
"mode": "thin",
|
|
10
10
|
"content": {
|
|
11
|
-
"agents":
|
|
11
|
+
"agents": 23,
|
|
12
12
|
"commands": 11,
|
|
13
13
|
"coreFiles": 112,
|
|
14
14
|
"tools": 8,
|
|
15
15
|
"projectControlTemplates": 1,
|
|
16
16
|
"assets": 49
|
|
17
17
|
},
|
|
18
|
-
"bundleRef": "core-bundle-v0.2.
|
|
19
|
-
"builtAt": "2026-
|
|
18
|
+
"bundleRef": "core-bundle-v0.2.16.signed.json (203 files, contentSha256 6118552c35d8ddb6b57731441322a33d7cb7beb98977a94069b771e3ab23dc24)",
|
|
19
|
+
"builtAt": "2026-09-02",
|
|
20
20
|
"sha256": {
|
|
21
|
-
"agents": "
|
|
21
|
+
"agents": "a90160e2ee05a0b10c0786450045326f6647b14cf9b81b345cdb6e9675cc8258",
|
|
22
22
|
"commands": "f8c91dab42e41d1f8362edfd816964ceabdbd95e8ebdd02e83ea36f7f805a259",
|
|
23
|
-
"core/tera-system": "
|
|
24
|
-
"tools": "
|
|
23
|
+
"core/tera-system": "3dbb64268b62c5247cdf25a52d004465c63d0bcfb0d1b31b16c93646e4cd78c2",
|
|
24
|
+
"tools": "cea993304a3664ceac13685fbfd0bb0e51936236661689fa1fe603a14537ce5e",
|
|
25
25
|
"core/project-control": "cb979181d50e54c9b9b9173ffc890ca021bfaefe9678b1cad4a2f67ceac3dfdd"
|
|
26
26
|
}
|
|
27
27
|
}
|
package/RELEASES.md
CHANGED
|
@@ -4,6 +4,34 @@
|
|
|
4
4
|
|
|
5
5
|
---
|
|
6
6
|
|
|
7
|
+
## 0.2.17 (2026-09-02)
|
|
8
|
+
|
|
9
|
+
### New Production signing key + signed bundle v0.2.16 (SCP-2026-09-02-002 cont.)
|
|
10
|
+
|
|
11
|
+
**What changed:**
|
|
12
|
+
- **New Ed25519 production keypair generated** — private key stored ONLY at `~/.tera/keys/production-private-key.pem` (never in any repo); public key shipped in all 4 package locations (`packages/core`, `packages/pro`, `scripts/lib`, `Teranoo-system/scripts/lib`)
|
|
13
|
+
- **Signed bundle `core-bundle-v0.2.16.signed.json`** — 203 files, contentSha256 `6118552c35d8ddb6b57731441322a33d7cb7beb98977a94069b771e3ab23dc24`, 8.08MB — ready for teranoo.com deployment via Coolify
|
|
14
|
+
- **Why patch bump:** npm forbids republishing the same version (0.2.16 already on registry) — 0.2.17 ships the same content + the new public key so buyers can verify the new bundle
|
|
15
|
+
|
|
16
|
+
**Deployment order:** publish npm `0.2.17` FIRST, then update the server bundle `core-bundle-v0.2.16.signed.json` (same rule as 0.2.15/0.2.16).
|
|
17
|
+
|
|
18
|
+
## 0.2.16 (2026-09-02)
|
|
19
|
+
|
|
20
|
+
### Security Team — 3 hacker-persona agents + Phase 7 security gate (SCP-2026-09-02-001)
|
|
21
|
+
|
|
22
|
+
**What changed:**
|
|
23
|
+
- **3 new agents** — `red-team-agent` (الشبح — offensive Red Team), `security-observer` (العين — concurrent observer), `security-auditor` (القاضي — independent auditor issuing the final gate decision: PASS / CONDITIONAL PASS / FAIL / INCOMPLETE)
|
|
24
|
+
- **`SecurityAgent` (الدرع) upgraded** — defensive team member: prepares `defense-handoff.md` + reviews fixes `fix-review.md`
|
|
25
|
+
- **Adversarial Protocol v2.0** — OWASP ASVS 5.0 Level 2 + WSTG + API Top 10: 13 mandatory attack campaigns + strict role separation (attacker ≠ auditor, observer ≠ judge)
|
|
26
|
+
- **Offensive toolkit** — TOOLING_AND_MCP_POLICY §3.7 (Burp/ZAP/Nmap/ffuf/Nuclei/sqlmap/dalfox/Metasploit/John/Hydra/Wireshark/k6) + §3.8 Cloud reference (DigitalOcean — deferred)
|
|
27
|
+
- **Phase 7 Security Gate** — no application delivery without the judge's decision (open Critical/High = no delivery)
|
|
28
|
+
- **Standardized outputs** — `security-reports/` (outside app folder): authorization + attack surface + test log + findings + observer report + audit decision + retest + evidence
|
|
29
|
+
- **Intellectual Honesty Rule §20** — mandatory information classification [Verified]/[Inferred]/[Speculative]/[Unknown]/[Needs Decision]
|
|
30
|
+
|
|
31
|
+
**Bundle:** pending signed bundle `core-bundle-v0.2.16.signed.json` (requires TERA_PRIVATE_KEY_PATH — production key at Majed).
|
|
32
|
+
|
|
33
|
+
**Deployment order:** publish npm `0.2.16` FIRST, then update the server bundle (same rule as 0.2.14/0.2.15).
|
|
34
|
+
|
|
7
35
|
## 0.2.15 (2026-08-31)
|
|
8
36
|
|
|
9
37
|
### Research library + package info persistence + website deployment info (SCP-2026-08-31-001/002/003)
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tera-system/pro",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.17",
|
|
4
4
|
"description": "Tera System Pro — commercial edition (thin): system files are fetched from teranoo.com as a signed bundle; enforced license gate + heartbeat",
|
|
5
5
|
"license": "SEE LICENSE IN LICENSE.md",
|
|
6
6
|
"type": "module",
|