v0.42.2 — WASM + Publish Pipeline

What's new

yana-rt WebAssembly (yana-rt@1.3.1 on npm + crates.io)

Yana AI's destructive command guard now runs in the browser and VS Code extensions via WebAssembly.

import init, { check_command } from 'https://cdn.jsdelivr.net/npm/yana-rt/yana_rt.js'
await init()

JSON.parse(check_command('rm -rf /'))
// → { allowed: false, reason: "Blocked: 'rm -rf' is irreversible..." }

JSON.parse(check_command('git status'))
// → { allowed: true, reason: null }

Install:

npm install yana-rt      # browser / Node.js / VS Code extension
cargo add yana-rt        # Rust

Exported functions:

• check_command(cmd) — check a single shell command
• check_commands(json) — batch check an array of commands
• version() — library version string

Publish pipeline fixes

• ✅ PyPI publish switched to API token (OIDC trusted publishing was misconfigured)
• ✅ npm publish skips gracefully if version already exists
• ✅ workflow_dispatch added to publish workflow for manual testing
• ✅ All 3 registries (npm, PyPI, crates.io) now publish reliably on tag push

Agent count reconciliation

Agent count corrected to 162 across all surfaces (README, MANIFEST, badges).

---

Full changelog: v0.42.1...v0.42.2