@scopebond/verify@0.6.9

Patch Changes

• Updated dependencies [e4ba261]
  • @scopebond/policy-schema@0.10.0

@scopebond/verify@0.6.8

Patch Changes

• Updated dependencies [a71186a]
• Updated dependencies [1af329c]
  • @scopebond/policy-schema@0.9.0

@scopebond/verify@0.6.10

Patch Changes

• Updated dependencies [40270e7]
  • @scopebond/policy-schema@0.11.0

@scopebond/sdk@0.1.9

Patch Changes

• Updated dependencies [a71186a]
• Updated dependencies [1af329c]
  • @scopebond/policy-schema@0.9.0

@scopebond/sdk@0.1.11

Patch Changes

• Updated dependencies [40270e7]
  • @scopebond/policy-schema@0.11.0

@scopebond/sdk@0.1.10

Patch Changes

• Updated dependencies [e4ba261]
  • @scopebond/policy-schema@0.10.0

@scopebond/policy-schema@0.9.0

Minor Changes

• a71186a: Add the rule-pack format, scopebond:pack/v1: signed data (never code) that carries command grammars, MCP profiles, action_allowlist rules and conformance vectors. schema/pack.schema.json is the closed schema, and the new ./pack subpath exports validatePack, packSigningInput (Ed25519 over scopebond:pack/v1 plus LF and the RFC 8785 canonical pack without its signature), packRef and comparePackVersions. vectors/example-pack.json is a public pack built from made-up tools and signed with a test-only key, and vectors/pack-format.json holds valid and invalid documents.
• 1af329c: Action Taxonomy 1.2 adds software.install: software a coding agent installs or runs from outside the project, by any route (package managers and runners, a script piped to a shell, a downloaded program, a cloned repository whose scripts run, a container image, an MCP server added to a tool's settings). It carries the route, ecosystem, verb, name, version, source URL and domain, and no verdict. vectors/install-detection.json holds the conformance cases for every route.

@scopebond/policy-schema@0.11.1

Patch Changes

• ca359b2: Package names and versions in an install are recorded as written. A long scoped name such as @a-long-scope-name-20-lite/archetype was masked as @***, so Safe Install could not check it by name, and a long repository path in an install URL broke the URL's host. Token shapes, URL credentials and parts that read like a key are still masked. New install-detection vectors cover long names, a key-like name and a URL with credentials.

@scopebond/policy-schema@0.11.0

Minor Changes

• 40270e7: Safe Install: before a detected install runs, a hook connected to a workspace that offers the check asks it for a verdict (block, ask or allow, with reason codes and plain words) within the hook's deadline. A block denies with what was blocked and why; an ask uses the coding agent's own prompt (Claude Code in a mode that prompts, Cursor, GitHub Copilot) or, where the agent cannot ask, denies with how to go ahead; an allow goes on to the rules. Offline or late, the signed block list kept on the computer blocks what it names, earlier answers and a 7-day age gate apply, and anything else is asked about. The verdict, its reason codes and where it came from are signed into the install's receipt (software.install gains the optional verdict, verdict_reasons and verdict_source parameters). The gateway's dispatch reasons gain install_refused.

@scopebond/policy-schema@0.10.0

Minor Changes

• e4ba261: Rule packs are delivered from a workspace: a rules check answer may name the packs a computer should hold, signed beside the rules, and the hook fetches each one from /v1/packs/<id>@<version>, checks its digest, signature and vectors, and keeps exactly the named packs (an empty list leaves none). The pack format gains grammar options for reading a command line the way a tool does (path_options, strict_unknown, fallback_on_any_option, fallback_only_unread, double_dash), the unknown_option condition and positionals past an unknown option. The first MCP profile whose words name a server owns its calls. setBuiltinReaders turns the built-in readers off for parity checks, decomposeShell is exported, and the built-in readers find tools through the shared launcher reader.