nativesoul 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -15,6 +15,28 @@ product after ADR-045; there is no Free/Pro split.
15
15
  ### Product
16
16
  - _Nothing yet._
17
17
 
18
+ ## [0.1.3] — 2026-07-06
19
+
20
+ ### Product
21
+ - **Auditable bootstrap** — `nativesoul bootstrap --plan [--json]`: a read-only
22
+ diagnostic that shows exactly which files/memories were injected, which were
23
+ omitted (and why), per-file hash/chars/truncation, the memory-recall summary,
24
+ budget usage, cache hit, and warnings — so context assembly is verifiable
25
+ instead of a black box. Read-only; no behavior change when the flag is absent.
26
+ (EPIC-025 · 25.1)
27
+ - **Central fail-closed policy gate** (ADR-046) — sensitive mutations now pass a
28
+ single shared policy gate before they run: `life_memory_promote/forget/reject`
29
+ and `life_work_item_create/claim/complete` at the MCP boundary, and
30
+ `policy packs apply` at the CLI boundary. `POLICY.md` / standing orders can
31
+ deny or require approval for any of them; ambiguity or a gate error **fails
32
+ closed** and is written to the local audit log. Default behavior is unchanged
33
+ (additive) — the gate adds control, not new friction. (EPIC-025 · 25.2 Layer A)
34
+ - **Path-safety at the write boundary** (ADR-046) — managed-block writes, MCP
35
+ config writes, plugin installs, policy-change proposals, and policy-pack apply
36
+ now validate the resolved target before writing and refuse path-escape,
37
+ world-writable parents, unsafe symlinks, suspicious ownership, or a direct
38
+ write to a protected file. Dependency-free; POSIX-guarded. (EPIC-025 · 25.2 Layer B)
39
+
18
40
  ## [0.1.2] — 2026-07-02
19
41
 
20
42
  ### Product
package/dist/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nativesoul",
3
- "version": "0.1.2",
3
+ "version": "0.1.3",
4
4
  "description": "Local-first continuity layer for coding agents.",
5
5
  "type": "module",
6
6
  "license": "UNLICENSED",