nativesoul 0.1.2 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +55 -0
- package/README.md +2 -2
- package/dist/package.json +1 -1
- package/dist/packages/cli/src/index.js +164 -162
- package/dist/packages/mcp-server/src/index.js +53 -52
- package/docs/adr/ADR-043-versioning-and-release-policy.md +1 -1
- package/docs/adr/ADR-046-central-policy-gate-and-path-safety.md +35 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -15,6 +15,61 @@ product after ADR-045; there is no Free/Pro split.
|
|
|
15
15
|
### Product
|
|
16
16
|
- _Nothing yet._
|
|
17
17
|
|
|
18
|
+
## [1.0.0] — 2026-07-06
|
|
19
|
+
|
|
20
|
+
First stable major. NativeSoul now commits to SemVer stability on its CLI, MCP,
|
|
21
|
+
and on-disk schema surface. Feature-complete relative to the 0.1.x line — this
|
|
22
|
+
release **declares the product stable and paid-GA**, it is not a rewrite. This
|
|
23
|
+
is the major your purchase covers (ADR-043 §2).
|
|
24
|
+
|
|
25
|
+
### Product
|
|
26
|
+
- **Local-first continuity for coding agents** — CLI (`nativesoul`) + MCP stdio
|
|
27
|
+
server (`nativesoul-mcp`), workspace at `~/.nativesoul/`. Zero runtime
|
|
28
|
+
dependencies (`dependencies: {}`), no daemon, no usage telemetry, never copies
|
|
29
|
+
credentials between hosts.
|
|
30
|
+
- **Identity + memory + policy** — identity bootstrap (with the auditable
|
|
31
|
+
read-only `bootstrap --plan`), project-scoped memory (recall / propose /
|
|
32
|
+
promote / reflect), hybrid lexical recall (FTS5 + local hash-BoW ranking — not
|
|
33
|
+
embeddings), policy evaluation + standing orders, and an approval gate.
|
|
34
|
+
- **Operations** — heartbeat, capability scan, work items/board, static
|
|
35
|
+
dashboard viewer, and host-reported cost — across every supported host
|
|
36
|
+
(Claude, Codex, Gemini, Grok, Antigravity) via reversible managed-block
|
|
37
|
+
installs.
|
|
38
|
+
- **Safety** — every sensitive mutation passes a central fail-closed policy gate,
|
|
39
|
+
and every managed write passes a path-safety check (ADR-046).
|
|
40
|
+
- **Paid-only** — single **$29**, Dodo Payments (Merchant of Record). Buy once:
|
|
41
|
+
**1 year of updates**, **keep the build forever** (perpetual fallback),
|
|
42
|
+
**30-day money-back**, no subscription (ADR-045).
|
|
43
|
+
- Help center published at the official domain **`docs.nativesoul.dev`**; the CLI
|
|
44
|
+
activation URL (`ACTIVATE_URL`) points there.
|
|
45
|
+
|
|
46
|
+
### Distribution
|
|
47
|
+
- Published to `@beta`, then promoted to `@latest` — the first legitimate
|
|
48
|
+
`@latest` per ADR-043 (`@latest` reserved for `≥1.0.0`); this supersedes the
|
|
49
|
+
0.1.3 latest-promotion exception recorded in ADR-043 §5.
|
|
50
|
+
|
|
51
|
+
## [0.1.3] — 2026-07-06
|
|
52
|
+
|
|
53
|
+
### Product
|
|
54
|
+
- **Auditable bootstrap** — `nativesoul bootstrap --plan [--json]`: a read-only
|
|
55
|
+
diagnostic that shows exactly which files/memories were injected, which were
|
|
56
|
+
omitted (and why), per-file hash/chars/truncation, the memory-recall summary,
|
|
57
|
+
budget usage, cache hit, and warnings — so context assembly is verifiable
|
|
58
|
+
instead of a black box. Read-only; no behavior change when the flag is absent.
|
|
59
|
+
(EPIC-025 · 25.1)
|
|
60
|
+
- **Central fail-closed policy gate** (ADR-046) — sensitive mutations now pass a
|
|
61
|
+
single shared policy gate before they run: `life_memory_promote/forget/reject`
|
|
62
|
+
and `life_work_item_create/claim/complete` at the MCP boundary, and
|
|
63
|
+
`policy packs apply` at the CLI boundary. `POLICY.md` / standing orders can
|
|
64
|
+
deny or require approval for any of them; ambiguity or a gate error **fails
|
|
65
|
+
closed** and is written to the local audit log. Default behavior is unchanged
|
|
66
|
+
(additive) — the gate adds control, not new friction. (EPIC-025 · 25.2 Layer A)
|
|
67
|
+
- **Path-safety at the write boundary** (ADR-046) — managed-block writes, MCP
|
|
68
|
+
config writes, plugin installs, policy-change proposals, and policy-pack apply
|
|
69
|
+
now validate the resolved target before writing and refuse path-escape,
|
|
70
|
+
world-writable parents, unsafe symlinks, suspicious ownership, or a direct
|
|
71
|
+
write to a protected file. Dependency-free; POSIX-guarded. (EPIC-025 · 25.2 Layer B)
|
|
72
|
+
|
|
18
73
|
## [0.1.2] — 2026-07-02
|
|
19
74
|
|
|
20
75
|
### Product
|
package/README.md
CHANGED
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
<a href="#mcp-tools">MCP Tools</a> ·
|
|
12
12
|
<a href="#pricing">Pricing</a> ·
|
|
13
13
|
<a href="#dont-trust-us-check-us">Verify It</a> ·
|
|
14
|
-
<a href="https://
|
|
14
|
+
<a href="https://docs.nativesoul.dev/">Help Center</a>
|
|
15
15
|
</p>
|
|
16
16
|
|
|
17
17
|
<p align="center">
|
|
@@ -357,7 +357,7 @@ npm run release:provenance:dry-run
|
|
|
357
357
|
|
|
358
358
|
## Documentation
|
|
359
359
|
|
|
360
|
-
**Help center (customers):** [
|
|
360
|
+
**Help center (customers):** [docs.nativesoul.dev](https://docs.nativesoul.dev/) — published from [`docs/help/`](docs/help/) via Mintlify. Install, hosts, commands, FAQ, pricing & licensing.
|
|
361
361
|
|
|
362
362
|
**Internal map (contributors):**
|
|
363
363
|
|