skill-family-engineering-kit 0.8.3 → 0.9.0

package/package.json

@@ -8,8 +8,8 @@
     "url": "https://github.com/ifoohoo/skill-family-engineering-kit/issues"
   },
   "dependencies": {
-    "skill-family-contracts": "0.8.3",
-    "skill-family-harness-node": "0.8.3"
+    "skill-family-contracts": "0.9.0",
+    "skill-family-harness-node": "0.9.0"
   },
   "description": "Build-time scaffold, adoption planning, projection, and checks.",
   "engines": {
@@ -48,7 +48,7 @@
     "url": "https://github.com/ifoohoo/skill-family-engineering-kit.git"
   },
   "type": "module",
-  "version": "0.8.3",
+  "version": "0.9.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/profile-spi/extension-spi.json

@@ -4,7 +4,7 @@
   "spiVersion": 3,
   "status": "stable",
   "description": "Stable extension SPI for Skill Family profiles and project adoption declarations. A profile may only DECLARE its finite differences from the common core; a project profile declares its adopting workspace. Enforcement is mechanical with stable result codes.",
-  "baseContracts": "1.7.0",
+  "baseContracts": "1.9.0",
   "descriptor": {
     "schemaId": "https://contracts.skill-family.example/v1/profile-descriptor.json",
     "object": "profile-descriptor",

package/release-notes/0.8.4.yaml

@@ -0,0 +1,19 @@
+version: 0.8.4
+date: 2026-08-24
+locales:
+  en:
+    summary: Lockstep Foundation 0.8.4 update documents validated external source authority without changing Kit commands or Profile SPI.
+    changes:
+      changed:
+        - Moves the package version to 0.8.4 together with Contracts and Harness.
+        - Documents that consumers validate a source-authority receipt through Contracts before passing the returned coordinates through the existing sourceRepository and sourceBaseCommit fields.
+        - Keeps the four stable top-level Kit commands, builder, Profile SPI, and public exports unchanged.
+    upgradeNotes: Pin all three Foundation packages to exactly 0.8.4. A provider Profile descriptor upgrading from 0.8.3 and Contracts 1.7.0 must mechanically update its base.contractsVersion field to 1.8.0. Existing functions and Schema shapes, Profile SPI v3, and the four Kit commands require no migration; source-authority consumers only add the Contracts validation step before invoking the existing builder surface.
+  zh-CN:
+    summary: 随 Foundation 0.8.4 锁步升版，补充外置 source authority 校验用法；Kit 命令与 Profile SPI 不变。
+    changes:
+      changed:
+        - 包版本与 Contracts、Harness 一同升至 0.8.4。
+        - 说明消费者先经 Contracts 校验 source-authority receipt，再把返回坐标传入既有 sourceRepository 与 sourceBaseCommit 字段。
+        - 四个稳定顶层命令、builder、Profile SPI 与公共导出保持不变。
+    upgradeNotes: 消费者必须把三个 Foundation 包精确锁定到 0.8.4。provider Profile descriptor 从 0.8.3 与 Contracts 1.7.0 升级时，必须把自身的 base.contractsVersion 字段机械更新为 1.8.0。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令均不需要迁移；需要 source authority 的消费者只增加调用 builder 前的 Contracts 校验步骤。

package/release-notes/0.9.0.yaml

@@ -0,0 +1,21 @@
+version: 0.9.0
+date: 2026-08-24
+locales:
+  en:
+    summary: Engineering Kit 0.9.0 projects the stable filesystem schemas, bound-read Harness closure, and candidate ordered batch validation into the existing Quickstart Bundle.
+    changes:
+      added:
+        - Projects the three stable filesystem schemas and two candidate batch schemas from Contracts authorities.
+        - Projects the stable bound-read entry and its exact native prebuild closure without adding a Kit command.
+      changed:
+        - Keeps the four top-level Kit commands and Profile SPI candidate boundary unchanged.
+    upgradeNotes: Pin all three Foundation packages to exactly 0.9.0 and rebuild managed Bundles. Batch validation is available only through the existing candidate Bundle and mechanisms CLI.
+  zh-CN:
+    summary: Engineering Kit 0.9.0 将稳定文件系统 Schema、绑定读取 Harness 闭包与有序批量校验 candidate 投影到既有 Quickstart Bundle。
+    changes:
+      added:
+        - 从 Contracts 权威源投影三个稳定文件系统 Schema 与两个批量校验 candidate Schema。
+        - 投影稳定绑定读取入口及其精确原生预构建闭包，不新增 Kit 命令。
+      changed:
+        - 四个顶层 Kit 命令与 Profile SPI 的 candidate 边界保持不变。
+    upgradeNotes: 三个 Foundation 包必须精确锁定 0.9.0 并重新构建 managed Bundle；批量校验只能通过既有 candidate Bundle 与 mechanisms CLI 使用。