feat: re-vendor KDNA Core 0.21.0 schema closure + web-client 0.3.0 (0.4.0)

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
       - run: npm ci --ignore-scripts --no-audit --no-fund
       - run: node scripts/check-ci-boundary.js
       - run: npm run ci
-      - name: Exercise React, Web Client 0.2.2, Web Server 0.3.0, and Activation 0.2.0
+      - name: Exercise React, Web Client 0.3.0, Web Server 0.3.0, and Activation 0.2.0
         env:
           KDNA_REACT_ASSET: public-assets/references/public/laozi-wuwei/laozi-wuwei-0.1.1.kdna
         run: npm run test:web-stack-integration

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.4.0 (2026-08-08)
+
+- Re-vendor the KDNA Core schema closure to the published 0.21.0 authority
+  (`32aa3ff`) and upgrade `@aikdna/kdna-web-client` to 0.3.0 (the 0.21.0
+  Runtime Capsule contract with `projection_report` now validates end to end).
+- Regenerate browser validators from the 0.21.0 closure.
+
 ## 0.3.0 (2026-07-18)
 
 - Reuse the exact `@aikdna/kdna-web-client@0.2.2` runtime for bounded HTTP,

SECURITY.md

@@ -20,7 +20,7 @@ coordinates.
 
 | Component | Supported Versions |
 |-----------|-------------------|
-| KDNA Core schema authority | 0.20.0 (`1e77e3e0d486c330fe9f9262b514ef24c859d469`) |
+| KDNA Core schema authority | 0.21.0 (`32aa3ff8e633291d4bb9e01de5a70181c8415d93`) |
 | KDNA Web Client runtime | 0.2.2 |
 | KDNA Web Server integration | 0.3.0 |
 | KDNA Activation integration | 0.2.0 |

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aikdna/kdna-react",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "React components and hooks for building KDNA-integrated web applications — file dropzone, load-plan gate, password unlock, license activation, and asset inspector.",
   "type": "module",
   "exports": {
@@ -74,6 +74,6 @@
     "judgment-asset"
   ],
   "dependencies": {
-    "@aikdna/kdna-web-client": "0.2.2"
+    "@aikdna/kdna-web-client": "0.3.0"
   }
 }

scripts/check-ci-boundary.js

@@ -63,7 +63,7 @@ export const EXPECTED_CI_WORKFLOW = [
   '      - run: npm ci --ignore-scripts --no-audit --no-fund',
   '      - run: node scripts/check-ci-boundary.js',
   '      - run: npm run ci',
-  '      - name: Exercise React, Web Client 0.2.2, Web Server 0.3.0, and Activation 0.2.0',
+  '      - name: Exercise React, Web Client 0.3.0, Web Server 0.3.0, and Activation 0.2.0',
   '        env:',
   '          KDNA_REACT_ASSET: public-assets/references/public/laozi-wuwei/laozi-wuwei-0.1.1.kdna',
   '        run: npm run test:web-stack-integration',
@@ -103,7 +103,7 @@ export function assertCiBoundary({ workflow, dcoWorkflow, pkg, lock, allowlist }
     'real web-stack integration command drifted',
   );
   const exactDependencies = [
-    ['dependencies', '@aikdna/kdna-web-client', '0.2.2'],
+    ['dependencies', '@aikdna/kdna-web-client', '0.3.0'],
     ['devDependencies', '@aikdna/kdna-core', '0.20.0'],
     ['devDependencies', '@aikdna/kdna-web-server', '0.3.0'],
     ['devDependencies', '@aikdna/kdna-activation-server', '0.2.0'],

scripts/check-packed-runtime-boundary.js

@@ -115,9 +115,9 @@ try {
   const packedManifest = JSON.parse(fs.readFileSync(path.join(temp, 'package/package.json'), 'utf8'));
   const exactCoordinates = {
     name: '@aikdna/kdna-react',
-    version: '0.3.0',
+    version: '0.4.0',
     engine: '>=20',
-    webClient: '0.2.2',
+    webClient: '0.3.0',
     reactPeer: '>=18 <20',
     reactDomPeer: '>=18 <20',
   };
@@ -260,7 +260,7 @@ try {
     stdio: ['ignore', 'pipe', 'pipe'],
   });
   const golden = JSON.parse(fs.readFileSync(
-    path.join(root, 'vendor/core-1e77e3e/runtime-contract-golden.json'),
+    path.join(root, 'vendor/core-32aa3ff/runtime-contract-golden.json'),
     'utf8',
   )).trace;
 

scripts/generate-runtime-validators.js

@@ -8,12 +8,12 @@ import addFormats from 'ajv-formats';
 import standaloneCode from 'ajv/dist/standalone/index.js';
 import { build } from 'esbuild';
 
-const EXPECTED_CORE_COMMIT = '1e77e3e0d486c330fe9f9262b514ef24c859d469';
-const EXPECTED_AGGREGATE = '8c38138e18ac5b465d779aeaf9fadcdd846236b0f96e7b144a6cc5c228ad480d';
-const EXPECTED_GOLDEN = '92b9dc94128bf00a0f92d346030cb8a78256e20ed6ad7231117f2ee4c5d2740f';
+const EXPECTED_CORE_COMMIT = '32aa3ff8e633291d4bb9e01de5a70181c8415d93';
+const EXPECTED_AGGREGATE = 'd568dd7a588a6e76bfc240950e16418216430626353734f5c1bde691fdd0b0fe';
+const EXPECTED_GOLDEN = 'f88a92d0641f55d1ff1bf0b51fee2a7f4932b727fd312c07c4f7b5d0d2db5884';
 const JUDGMENT_TRACE_ID = 'https://github.com/aikdna/kdna/specs/judgment-trace.schema.json';
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const vendor = path.join(root, 'vendor/core-1e77e3e');
+const vendor = path.join(root, 'vendor/core-32aa3ff');
 const outputPath = path.join(root, 'src/generated/runtime-validators.js');
 
 function sha256(bytes) {

scripts/test-ci-boundary-hostile.js

@@ -107,7 +107,7 @@ const noIntegration = structuredClone(valid.pkg);
 delete noIntegration.scripts['test:web-stack-integration'];
 packageMutations.set('real integration omitted', noIntegration);
 const rangedClient = structuredClone(valid.pkg);
-rangedClient.dependencies['@aikdna/kdna-web-client'] = '^0.2.2';
+rangedClient.dependencies['@aikdna/kdna-web-client'] = '^0.3.0';
 packageMutations.set('Web Client range dependency', rangedClient);
 const olderEngine = structuredClone(valid.pkg);
 olderEngine.engines.node = '>=18';

scripts/verify-release-context.cjs

@@ -74,7 +74,7 @@ function verifyReleaseEvent({ action, isDraft, isPrerelease }) {
 
 function verifyDependencies(packageJson, packageLock) {
   const expected = [
-    ['dependencies', '@aikdna/kdna-web-client', '0.2.2'],
+    ['dependencies', '@aikdna/kdna-web-client', '0.3.0'],
     ['devDependencies', '@aikdna/kdna-core', '0.20.0'],
     ['devDependencies', '@aikdna/kdna-web-server', '0.3.0'],
     ['devDependencies', '@aikdna/kdna-activation-server', '0.2.0'],

src/index.d.ts

@@ -45,8 +45,8 @@ export class KDNAActivationError extends Error {
 }
 
 export declare const KDNA_SCHEMA_AUTHORITY: Readonly<{
-  core_commit: '1e77e3e0d486c330fe9f9262b514ef24c859d469';
-  aggregate_sha256: '8c38138e18ac5b465d779aeaf9fadcdd846236b0f96e7b144a6cc5c228ad480d';
+  core_commit: '32aa3ff8e633291d4bb9e01de5a70181c8415d93';
+  aggregate_sha256: 'd568dd7a588a6e76bfc240950e16418216430626353734f5c1bde691fdd0b0fe';
   judgment_trace_sha256: 'a260e5abbcc68bf8df11ba738b5d475901b2950668c4718e415355adc723c7b0';
 }>;
 

tests/components.test.js

@@ -17,7 +17,7 @@ const { create } = TestRenderer;
 const FileCtor = globalThis.File || NodeFile;
 const originalFetch = globalThis.fetch;
 const golden = JSON.parse(fs.readFileSync(
-  new URL('../vendor/core-1e77e3e/runtime-contract-golden.json', import.meta.url),
+  new URL('../vendor/core-32aa3ff/runtime-contract-golden.json', import.meta.url),
   'utf8',
 ));
 

tests/react.test.js

@@ -158,7 +158,7 @@ test('package peers only include React runtime dependencies', () => {
   });
   assert.equal(pkg.peerDependenciesMeta, undefined);
   assert.deepEqual(pkg.dependencies, {
-    '@aikdna/kdna-web-client': '0.2.2',
+    '@aikdna/kdna-web-client': '0.3.0',
   });
 });
 
@@ -183,7 +183,7 @@ test('public docs bind React networking to Web Client and render object content
 });
 
 const golden = JSON.parse(fs.readFileSync(
-  new URL('../vendor/core-1e77e3e/runtime-contract-golden.json', import.meta.url),
+  new URL('../vendor/core-32aa3ff/runtime-contract-golden.json', import.meta.url),
   'utf8',
 ));
 const fixture = golden.trace;
@@ -249,8 +249,8 @@ test('all public trace boundaries reject hostile nested mutations', () => {
 
 test('validator authority is pinned to the audited Core schema closure', () => {
   assert.deepEqual(KDNA_SCHEMA_AUTHORITY, {
-    core_commit: '1e77e3e0d486c330fe9f9262b514ef24c859d469',
-    aggregate_sha256: '8c38138e18ac5b465d779aeaf9fadcdd846236b0f96e7b144a6cc5c228ad480d',
+    core_commit: '32aa3ff8e633291d4bb9e01de5a70181c8415d93',
+    aggregate_sha256: 'd568dd7a588a6e76bfc240950e16418216430626353734f5c1bde691fdd0b0fe',
     judgment_trace_sha256: 'a260e5abbcc68bf8df11ba738b5d475901b2950668c4718e415355adc723c7b0',
   });
 });

vendor/core-1e77e3e/runtime-capsule.schema.json → vendor/core-32aa3ff/runtime-capsule.schema.json

@@ -82,8 +82,7 @@
       "required": ["state"],
       "additionalProperties": false,
       "properties": {
-        "state": { "enum": ["verified", "not_checked", "absent"] },
-        "issuer": { "type": "string", "minLength": 1 }
+        "state": { "const": "absent" }
       }
     },
     "trace": {
@@ -106,9 +105,51 @@
         "input_kind": { "enum": ["packaged_file", "packaged_bytes"] },
         "runtime_eligible": { "const": true },
         "schema_valid": { "const": true },
-        "signature_state": { "enum": ["verified", "not_checked", "absent"] },
-        "profile": { "enum": ["index", "compact", "scenario", "full"] }
+        "signature_state": { "const": "absent" },
+        "profile": { "enum": ["index", "compact", "scenario", "full"] },
+        "projection_report": { "$ref": "#/$defs/projectionReport" }
       }
+    },
+    "projectionReport": {
+      "type": "object",
+      "required": ["status", "omitted", "omitted_total"],
+      "additionalProperties": false,
+      "properties": {
+        "status": { "enum": ["complete", "partial"] },
+        "omitted": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["path", "count"],
+            "additionalProperties": false,
+            "properties": {
+              "path": { "type": "string", "pattern": "^/" },
+              "count": { "type": "integer", "minimum": 1 }
+            }
+          }
+        },
+        "omitted_total": { "type": "integer", "minimum": 0 }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "status": { "const": "complete" } } },
+          "then": {
+            "properties": {
+              "omitted": { "maxItems": 0 },
+              "omitted_total": { "const": 0 }
+            }
+          }
+        },
+        {
+          "if": { "properties": { "status": { "const": "partial" } } },
+          "then": {
+            "properties": {
+              "omitted": { "minItems": 1 },
+              "omitted_total": { "minimum": 1 }
+            }
+          }
+        }
+      ]
     }
   }
 }