deepbom 1.102.0 → 1.103.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.md +6 -6
  2. package/bin/deepbom.mjs +4 -4
  3. package/package.json +1 -1
  4. package/pkg/release-manifest.json +2 -2
  5. package/skills/deepbom/SKILL.md +1 -1
  6. package/skills/deepbom/scripts/verify-deepbom.mjs +1 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "deepbom",
3
- "version": "1.102.0",
3
+ "version": "1.103.0",
4
4
  "mcpName": "io.github.JunHwan-Kwon/deepbom",
5
5
  "description": "Local multi-format deployment-artifact analysis for on-device AI models",
6
6
  "type": "module",
package/pkg/release-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schema": "deepbom.npm_release.v1",
3
- "version": "1.102.0",
3
+ "version": "1.103.0",
4
4
  "source": {
5
- "git_commit": "41a1d789924e9ff15285ce1279e7dab0fc4f56cb",
5
+ "git_commit": "133860b79b941aff0c327fa95813e13fb03c4ce6",
6
6
  "git_state": "clean",
7
7
  "distribution": "public_channel"
8
8
  },
package/skills/deepbom/SKILL.md CHANGED
@@ -17,7 +17,7 @@ If no compatible local installation is available, ask before running:
17
17
  node "<skill-root>/scripts/verify-deepbom.mjs" --allow-download
18
18
  ```
19
19
 
20
- That explicit fallback may download `deepbom@latest` through npm. The resolver accepts it only when it declares Agent contract `deepbom.agent_contract.v1` version `1.0.1` and evidence contract `deepbom.artifact_evidence_envelope.v1` version `1.0.0`. Use the returned `invocation.command` and `invocation.prefix_args` for subsequent commands. Do not silently replace a contract mismatch or network failure with an unverified executable.
20
+ That explicit fallback may download `deepbom@latest` through npm. The resolver accepts it only when it declares Agent contract `deepbom.agent_contract.v1` version `1.0.2` and evidence contract `deepbom.artifact_evidence_envelope.v1` version `1.0.0`. Use the returned `invocation.command` and `invocation.prefix_args` for subsequent commands. Do not silently replace a contract mismatch or network failure with an unverified executable.
21
21
 
22
22
  ## Start with discovery
23
23
 
package/skills/deepbom/scripts/verify-deepbom.mjs CHANGED
@@ -6,7 +6,7 @@ import path from "node:path";
6
6
  import process from "node:process";
7
7
  import { fileURLToPath } from "node:url";
8
8
 
9
- const AGENT_CONTRACT = {"id":"deepbom.agent_contract.v1","version":"1.0.1","compatibility":"backward_compatible_within_v1"};
9
+ const AGENT_CONTRACT = {"id":"deepbom.agent_contract.v1","version":"1.0.2","compatibility":"backward_compatible_within_v1"};
10
10
  const EVIDENCE_CONTRACT = {"id":"deepbom.artifact_evidence_envelope.v1","version":"1.0.0","compatibility":"additive_fields_only_within_v1","required_top_level_fields":["schema","generated_at","identity","artifact_set","conversion_receipt","cpu_cost_target_binding","accelerator_profile_binding","accelerator_bindings","policy_identity","capabilities","interfaces","graph","external_files","metadata","findings","format_extensions","provenance","evidence_boundary","envelope_sha256"],"conditional_top_level_fields":["llm_token_budget_scenario","structured_details"],"semantic_boundaries":["artifact_defects_cautions_and_evidence_gaps_remain_distinct","static_predictions_are_not_runtime_observations","unknown_and_not_assessable_are_not_coerced_to_absence_or_zero"]};
11
11
  const REGISTRY_PACKAGE = "deepbom@latest";
12
12
  const allowDownload = process.argv.slice(2).includes("--allow-download");