AgentContextKit 1.0.0-rc.1

AgentContextKit 1.0.0-rc.1

AgentContextKit 1.0.0-rc.1 is the first contract-frozen V100 release candidate. It is a prerelease for validation and feedback, not a 1.0.0 GA declaration.

Highlights

• Frozen CLI command, option, exit-code, config, baseline, JSON, SARIF, generated-file, and offline-safety contracts.
• Read-only config diagnostics with schema 1, no automatic migration, and exact 0.2.0-alpha.4 predecessor compatibility evidence.
• Deterministic baseline-aware CI policy and machine-readable JSON schema 2 / SARIF 2.1.0 assets.
• English/Turkish parity for help, known errors, exit behavior, and language-independent JSON semantics.
• Expanded 2,000-file mixed-corpus time and peak-memory evidence plus interruption and unreadable-file regression coverage.
• Recorded primary/backup security notification and package recovery ownership.

Compatibility

The package ID remains AgentContextKit, the global tool command remains ackit, and the reviewed alpha4 command surface is preserved. Candidate validation upgrades from published predecessor 0.2.0-alpha.4 without rewriting .ackit/config.yml.

Known Limitations

• This is a release candidate, not a 1.0.0 GA claim.
• Author signing and SBOM publication remain documented bounded accepted risks.
• Publish-path provenance is not part of RC evidence; it must be created and verified for the exact release nupkg during the authorized OIDC publish workflow.
• External adoption evidence remains limited, and GitHub Pages/hosted documentation remains deferred.

Safety

Default commands remain offline-first: no repository upload, remote AI call, telemetry, automatic redaction, or publishing action. Generated .ackit/ reports remain local until reviewed.

Validation Boundary

The accepted source/workflow/test/package-metadata candidate is TASK-0239 commit 548b6affd0da25cb379ec1b153b1064fd5ff6f0b. TASK-0240 hosted run 29118452246 passed Windows, Ubuntu, and macOS with 431/431 tests per runner, predecessor upgrade/config immutability, frozen contract gates, SARIF parsing, and resource thresholds. TASK-0241 recorded conditional publication GO with zero open P0 gaps.

The release is published only through the existing exact-SHA OIDC workflow. The tag, GitHub prerelease, NuGet repository metadata, release assets, digests, and GitHub artifact attestation remain authoritative for the exact publication commit. The workflow must verify the exact nupkg attestation before the release task is complete.

AgentContextKit 0.2.0-alpha.4

AgentContextKit v0.2.0-alpha.4

v0.2.0-alpha.4 is a prerelease update for the offline-first ackit .NET global tool.

Highlights

• Ships the dedicated NuGet package README via README.nuget.md.
• Fixes the nuget.org README rendering path without weakening the GitHub README.
• Preserves alpha3 CLI behavior while updating the packaged prerelease version to 0.2.0-alpha.4.
• Fixes the Windows test-created Unicode temp directory issue identified during validation.
• Keeps release validation, package metadata checks, and cross-platform source smoke coverage green.

Install

dotnet tool install --global AgentContextKit --version 0.2.0-alpha.4

Update

dotnet tool update --global AgentContextKit --version 0.2.0-alpha.4

Verify

ackit --version
ackit doctor
ackit scan --ci

Expected version:

AgentContextKit 0.2.0-alpha.4

Notes

• Predecessor: 0.2.0-alpha.3.
• Package README metadata points to README.nuget.md.
• This release was published through the authorized OIDC release workflow.
• No API-key publish was used.

AgentContextKit 0.2.0-alpha.3

AgentContextKit v0.2.0-alpha.3

v0.2.0-alpha.3 is a prerelease update for the offline-first ackit .NET global tool.

Highlights

• Ships the published package for MCP stdio transport, ackit.rules, ackit watch, ackit diff, ackit trim, and scan include/exclude filters.
• Adds release-hardening scripts and release blocker evidence cleanup accumulated after 0.2.0-alpha.2.
• Release build and 428 automated tests pass cleanly.
• Cross-platform published-package and source-package smoke verified on Windows, Ubuntu, and macOS.

Install

dotnet tool install --global AgentContextKit --version 0.2.0-alpha.3

Verify

ackit --version
ackit doctor
ackit scan --ci

Expected version:

AgentContextKit 0.2.0-alpha.3

Notes

• Predecessor: 0.2.0-alpha.2.
• Published through the authorized OIDC release workflow.

AgentContextKit 0.2.0-alpha.2

AgentContextKit v0.2.0-alpha.2

v0.2.0-alpha.2 is a compatibility-preserving hardening pre-release for the offline-first ackit .NET global tool.

Highlights

• Scanner rules evaluate all distinct email, phone, and IP candidates while preserving Critical secret detection.
• Narrow token, path, and phone boundaries reduce technical false positives without broad allowlists.
• Human, JSON, and Web UI findings omit raw sensitive matches; the compatible JSON match field remains nullable.
• Suppression audit records are deduplicated and sanitized.
• Baseline-aware CI treats severity escalation as a new finding without changing baseline fingerprints or schemas.
• Config diagnostics report unmatched quotes through sanitized ACKITCFG006 output.
• Local Markdown links are validated by the documentation release gate.
• Manual release automation validates an exact commit and publishes through NuGet OIDC Trusted Publishing.

Install

dotnet tool install --global AgentContextKit --version 0.2.0-alpha.2

Validation

• Release build: zero warnings and zero errors.
• Automated tests: 186 passed.
• Repository scan: no risk findings.
• Doctor: PASS.
• JSON and SARIF outputs parsed successfully.
• Sample, package, installed-tool, contract, localization, security, readiness, and documentation gates passed.
• Synthetic 2,000-file performance tripwire remained below the unchanged 30-second limit.

Compatibility

CLI commands and exit codes, JSON schema 2, config schema 1, baseline schema 1, SARIF 2.1.0, rule IDs, package ID AgentContextKit, and tool command ackit remain compatible.

Generated .ackit reports, Web UI files, SARIF files, and local paths remain local-only unless explicitly reviewed and sanitized.

v0.2.0-alpha.1

AgentContextKit v0.2.0-alpha.1

This alpha release adds the first SARIF-capable source package candidate and expands AgentContextKit's scanner/reporting foundation.

Added

• Added ackit sarif --output <repo-relative.sarif> for SARIF 2.1.0 output.
• Added scanner rule catalog with stable ACKIT rule IDs.
• Added additive JSON ruleId metadata.
• Added configurable allowlist fields:
  • safeDomains
  • ignoredPaths
  • ignoredFindingIds
• Added expanded scanner patterns for package artifacts, provider-token-like values, bearer-like values, Unix home paths, and file URI leakage.
• Added sample gallery, demo scenarios, and sample smoke helper.
• Added Web UI preview and visual asset guidance.

Changed

• SARIF rule metadata now comes from the centralized scanner rule catalog.
• Source package smoke now validates the 0.2.0-alpha.1 candidate package.
• Documentation now distinguishes the published 0.1.0-alpha.2 package from the 0.2.0-alpha.1 release candidate.

Security

• Critical findings cannot be silently suppressed by config allowlists.
• SARIF output avoids raw secret matches and absolute local paths.
• Local .ackit reports, Web UI output, SARIF files, and generated artifacts remain local-only by default.

Validation

• dotnet build -c Release: passed.
• dotnet test -c Release: 83/83 passed.
• ackit scan --ci: passed with no risk findings.
• ackit doctor: PASS.
• Local package smoke: passed.
• NuGet global tool install verified.
• ackit version: AgentContextKit 0.2.0-alpha.1.
• ackit --help: includes sarif.

Install

dotnet tool install --global AgentContextKit --version 0.2.0-alpha.1
Notes

This is a pre-release alpha package. APIs, output shape, and scanner behavior may continue to evolve before 1.0.0.

AgentContextKit v0.1.0-alpha.2

AgentContextKit v0.1.0-alpha.2

Added

• Added cross-platform source package smoke workflow.
• Added local source package validation for Windows, Ubuntu, and macOS.
• Added safer scanner handling for known technical domains and fixture-like placeholders.

Changed

• Prepared GitHub Actions for Node 24 runtime by updating workflow action versions.
• Switched Windows source smoke runner to windows-2025.
• Improved Turkish CLI output text.
• Updated package metadata and runtime version to 0.1.0-alpha.2.

Verified

• dotnet build passed with 0 warnings and 0 errors.
• dotnet test passed: 67/67.
• Local alpha.2 package smoke test passed.
• NuGet publish completed.

AgentContextKit v0.1.0-alpha.1

Added

• Initial offline-first .NET CLI tool package with command name ackit.
• CLI commands: init, scan, scan --ci, report, webui, prompt-pack, context-export, generate, task, redact-check, doctor, version, and help.
• Repository scanner for docs, tests, CI, Docker, generated agent files, package metadata, and stack signals.
• Sample-aware main stack detection for .NET, .NET CLI / .NET Tool, and GitHub Actions without treating samples/ stacks as the main product stack.
• Pattern-based secret, PII, brand, risky path, and risky extension scanning.
• JSON output with schema/tool metadata, generated timestamps, repository metadata, summaries, and CI mode fields.
• Task-first development document generation under docs/tasks.
• Agent instruction generation for Codex, Claude, Cursor, and GitHub Copilot.
• Offline static HTML report generation with safe repository-relative output handling.
• Offline static Web UI prototype generation for local scan review.
• Local-only dry-run prompt pack generation and explicit-approval context export manifests.
• English and Turkish output/template foundation.
• Config schema documentation and generated-file conventions.
• Focused xUnit test coverage and GitHub Actions CI.
• Local release verification, package metadata, public release audit, release blocker, public gate, and v1.0 readiness scripts.
• v1.0 final local readiness review documentation and gate script.
• Source archive hygiene docs and WinRAR exclude guidance for local ZIP/RAR sharing.
• OSS readiness, governance, privacy, support, security, package, release, and maintainer handoff documentation.

Changed

• Public package and docs metadata use the Cynrath persona.
• Package URLs point to https://github.com/Cynrath/agent-context-kit.
• Public release blockers track post-push follow-up actions such as GitHub Release page creation and NuGet publish.

Fixed

• Added NuGet package README metadata for local pack readiness.
• Refined self-scan stack accuracy so sample ASP.NET Core, Minimal API, TypeScript, and Tailwind CSS signals are not reported as the main repository stack.