knodin 0.7.4 → 0.7.6

package/docs/releases/0.7.2.md

@@ -1,21 +0,0 @@
-# knodin 0.7.2
-
-This is the first normally published 0.7 release of knodin. It provides local,
-opt-in diagnostics that users can collect and deliberately share when they
-need troubleshooting help; it is not a special dogfood build or prerelease.
-
-- Adds `knodin diagnostics enable|status|collect|inspect|clear|disable` with a
-  private, bounded local failure journal and redacted support bundles. Nothing
-  is uploaded automatically.
-- Captures sanitized CLI and MCP failure correlation IDs without retaining
-  source, queries, arguments, environment values, credentials, or raw paths.
-- Adds contained execution profiles, structural cold-start routing, lifecycle
-  refresh improvements, tighter freshness proof, and truthful response-budget
-  accounting.
-- Makes release verification deterministic across macOS and Linux, both with
-  and without Bun, including foreground execution of lifecycle-hook fixtures.
-
-This ordinary 0.x release is suitable for installation through npm,
-Artifactory, and Homebrew, including use by Docusign employees. The external
-evidence and signed-release gates recorded in `roadmap/competitive-roadmap.md`
-remain open and continue to block GA and trusted-distribution claims.

package/docs/releases/0.7.3.md

@@ -1,23 +0,0 @@
-# knodin 0.7.3
-
-This is the first normally published 0.7 release of knodin. It provides local,
-opt-in diagnostics that users can collect and deliberately share when they
-need troubleshooting help; it is not a special dogfood build or prerelease.
-
-- Adds `knodin diagnostics enable|status|collect|inspect|clear|disable` with a
-  private, bounded local failure journal and redacted support bundles. Nothing
-  is uploaded automatically.
-- Captures sanitized CLI and MCP failure correlation IDs without retaining
-  source, queries, arguments, environment values, credentials, or raw paths.
-- Adds contained execution profiles, structural cold-start routing, lifecycle
-  refresh improvements, tighter freshness proof, and truthful response-budget
-  accounting.
-- Makes release verification deterministic across macOS and Linux, both with
-  and without Bun, including foreground execution of lifecycle-hook fixtures.
-- Ensures `configure --scope cli-only` removes repository-detected Knodin MCP
-  configuration even when that agent's CLI is not installed locally.
-
-This ordinary 0.x release is suitable for installation through npm,
-Artifactory, and Homebrew, including use by Docusign employees. The external
-evidence and signed-release gates recorded in `roadmap/competitive-roadmap.md`
-remain open and continue to block GA and trusted-distribution claims.

package/docs/releases/0.7.4.md

@@ -1,17 +0,0 @@
-# knodin 0.7.4
-
-This patch release preserves the opt-in diagnostics and support-bundle workflow
-introduced in 0.7.3 while hardening the structural cold-start parser.
-
-- Replaces a potentially super-linear declaration-matching expression with a
-  bounded, linear parser for typed function declarations.
-- Handles balanced parameter lists without mistaking calls or control-flow
-  statements for declarations.
-- Adds regression coverage for typed declarations, nested calls, and negative
-  structural matches.
-
-Diagnostics remain local and disabled until a user enables them. Knodin never
-uploads a diagnostics bundle automatically; the user must inspect and
-deliberately share it for troubleshooting.
-
-This remains an ordinary 0.x release, not a dogfood-only build and not GA.

package/schemas/release-attestation-v1.schema.json

@@ -1,210 +0,0 @@
-{
-	"$schema": "https://json-schema.org/draft/2020-12/schema",
-	"$id": "https://raw.githubusercontent.com/knodin/knodin/main/schemas/release-attestation-v1.schema.json",
-	"title": "knodin release attestation",
-	"type": "object",
-	"additionalProperties": false,
-	"required": [
-		"schemaVersion",
-		"status",
-		"version",
-		"tag",
-		"sourceCommit",
-		"generatedAt",
-		"build",
-		"artifact",
-		"provenance",
-		"sbom",
-		"channels",
-		"rollback",
-		"failures"
-	],
-	"properties": {
-		"schemaVersion": { "const": 1 },
-		"status": { "enum": ["verified", "incomplete", "quarantined"] },
-		"version": { "$ref": "#/$defs/semver" },
-		"tag": { "type": "string", "pattern": "^v[0-9]", "maxLength": 129 },
-		"sourceCommit": { "$ref": "#/$defs/commit" },
-		"generatedAt": { "$ref": "#/$defs/instant" },
-		"build": { "$ref": "#/$defs/build" },
-		"artifact": { "$ref": "#/$defs/artifact" },
-		"provenance": { "$ref": "#/$defs/provenance" },
-		"sbom": { "$ref": "#/$defs/sbom" },
-		"channels": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": ["public-npm", "docusign-artifactory", "github-saas", "homebrew", "ghes"],
-			"properties": {
-				"public-npm": { "$ref": "#/$defs/channel" },
-				"docusign-artifactory": { "$ref": "#/$defs/channel" },
-				"github-saas": { "$ref": "#/$defs/channel" },
-				"homebrew": { "$ref": "#/$defs/channel" },
-				"ghes": { "$ref": "#/$defs/channel" }
-			}
-		},
-		"rollback": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": ["version", "targetPath", "artifactSha256"],
-			"properties": {
-				"version": { "$ref": "#/$defs/semver" },
-				"targetPath": { "$ref": "#/$defs/file" },
-				"artifactSha256": { "$ref": "#/$defs/sha256" }
-			}
-		},
-		"failures": {
-			"type": "array",
-			"maxItems": 100,
-			"items": { "type": "string", "minLength": 1, "maxLength": 512 }
-		}
-	},
-	"$defs": {
-		"semver": {
-			"type": "string",
-			"maxLength": 128,
-			"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
-		},
-		"commit": {
-			"type": "string",
-			"pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$"
-		},
-		"instant": {
-			"type": "string",
-			"maxLength": 64,
-			"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$"
-		},
-		"sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
-		"sha512": { "type": "string", "pattern": "^[a-f0-9]{128}$" },
-		"file": {
-			"type": "string",
-			"minLength": 1,
-			"maxLength": 256,
-			"pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,255}$"
-		},
-		"https": {
-			"type": "string",
-			"minLength": 1,
-			"maxLength": 2048,
-			"pattern": "^https://"
-		},
-		"build": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": ["repository", "workflow", "workflowRef", "runId", "runAttempt"],
-			"properties": {
-				"repository": {
-					"type": "string",
-					"pattern": "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
-				},
-				"workflow": {
-					"type": "string",
-					"pattern": "^\\.github/workflows/[A-Za-z0-9][A-Za-z0-9._-]{0,127}\\.ya?ml$"
-				},
-				"workflowRef": { "type": "string", "pattern": "^refs/tags/v", "maxLength": 256 },
-				"runId": { "type": "string", "pattern": "^[0-9]{1,32}$" },
-				"runAttempt": { "type": "integer", "minimum": 1, "maximum": 1000 }
-			}
-		},
-		"artifact": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": ["name", "length", "sha256", "sha512", "npmIntegrity"],
-			"properties": {
-				"name": { "$ref": "#/$defs/file" },
-				"length": { "type": "integer", "minimum": 1, "maximum": 536870912 },
-				"sha256": { "$ref": "#/$defs/sha256" },
-				"sha512": { "$ref": "#/$defs/sha512" },
-				"npmIntegrity": { "type": "string", "pattern": "^sha512-[A-Za-z0-9+/]+={0,2}$" }
-			}
-		},
-		"verification": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": [
-				"verified",
-				"attestationId",
-				"attestationUrl",
-				"issuer",
-				"identity",
-				"verifiedAt"
-			],
-			"properties": {
-				"verified": { "type": "boolean" },
-				"attestationId": { "type": "string", "minLength": 1, "maxLength": 256 },
-				"attestationUrl": { "$ref": "#/$defs/https" },
-				"issuer": { "const": "https://token.actions.githubusercontent.com" },
-				"identity": { "$ref": "#/$defs/https" },
-				"verifiedAt": { "$ref": "#/$defs/instant" }
-			}
-		},
-		"provenance": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": ["path", "length", "sha256", "verification"],
-			"properties": {
-				"path": { "$ref": "#/$defs/file" },
-				"length": { "type": "integer", "minimum": 1, "maximum": 16777216 },
-				"sha256": { "$ref": "#/$defs/sha256" },
-				"verification": { "$ref": "#/$defs/verification" }
-			}
-		},
-		"sbom": {
-			"type": "object",
-			"additionalProperties": false,
-			"required": [
-				"format",
-				"specVersion",
-				"path",
-				"length",
-				"sha256",
-				"attestationPath",
-				"attestationLength",
-				"attestationSha256",
-				"verification"
-			],
-			"properties": {
-				"format": { "const": "CycloneDX" },
-				"specVersion": { "type": "string", "minLength": 1, "maxLength": 16 },
-				"path": { "$ref": "#/$defs/file" },
-				"length": { "type": "integer", "minimum": 1, "maximum": 16777216 },
-				"sha256": { "$ref": "#/$defs/sha256" },
-				"attestationPath": { "$ref": "#/$defs/file" },
-				"attestationLength": { "type": "integer", "minimum": 1, "maximum": 16777216 },
-				"attestationSha256": { "$ref": "#/$defs/sha256" },
-				"verification": { "$ref": "#/$defs/verification" }
-			}
-		},
-		"channel": {
-			"oneOf": [
-				{
-					"type": "object",
-					"additionalProperties": false,
-					"required": ["status"],
-					"properties": { "status": { "const": "missing" } }
-				},
-				{
-					"type": "object",
-					"additionalProperties": false,
-					"required": [
-						"status",
-						"artifactLength",
-						"artifactSha256",
-						"version",
-						"sourceCommit",
-						"publishedAt",
-						"location"
-					],
-					"properties": {
-						"status": { "enum": ["verified", "mismatch"] },
-						"artifactLength": { "type": "integer", "minimum": 1, "maximum": 536870912 },
-						"artifactSha256": { "$ref": "#/$defs/sha256" },
-						"version": { "$ref": "#/$defs/semver" },
-						"sourceCommit": { "$ref": "#/$defs/commit" },
-						"publishedAt": { "$ref": "#/$defs/instant" },
-						"location": { "$ref": "#/$defs/https" }
-					}
-				}
-			]
-		}
-	}
-}