From 5cb341959f08fecbd7511ed0928d418bbf54dcac Mon Sep 17 00:00:00 2001 From: Binay <150876063+bkd-dotcom@users.noreply.github.com> Date: Tue, 1 Sep 2026 11:17:50 -0400 Subject: [PATCH] release: v0.3.0 (Apache-2.0, core@v0.8.0, reviewer@v0.3.0, 404 install path) --- .claude-plugin/marketplace.json | 2 +- .github/workflows/reviewer.yml | 2 +- .pre-commit-hooks.yaml | 4 ++-- CHANGELOG.md | 8 ++++---- CONTRIBUTING.md | 2 +- README.md | 2 +- claude-code/README.md | 2 +- claude-code/signetry/.claude-plugin/plugin.json | 2 +- claude-code/signetry/hooks/signetry-lib.sh | 2 +- claude-code/signetry/hooks/signetry-session-start.sh | 4 ++-- claude-code/signetry/scripts/signetry-mcp.sh | 2 +- claude-code/signetry/skills/admit/SKILL.md | 2 +- codex/README.md | 2 +- codex/config.toml | 2 +- cursor/README.md | 2 +- universal/README.md | 4 ++-- universal/signetry-guard.sh | 4 ++-- 17 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index aa8f026..c74562c 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -6,7 +6,7 @@ }, "metadata": { "description": "Signetry — govern coding-agent changes in your editor and CI. Real-time contract enforcement with signed receipts.", - "version": "0.2.2" + "version": "0.3.0" }, "plugins": [ { diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml index 43a14b6..9371af3 100644 --- a/.github/workflows/reviewer.yml +++ b/.github/workflows/reviewer.yml @@ -34,7 +34,7 @@ jobs: with: python-version: "3.12" - name: Install signetry-reviewer - run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.2.0" + run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.3.0" - name: Compute the PR diff env: BASE_SHA: ${{ github.event.pull_request.base.sha }} diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml index c5fc659..36a623f 100644 --- a/.pre-commit-hooks.yaml +++ b/.pre-commit-hooks.yaml @@ -2,11 +2,11 @@ # # repos: # - repo: https://github.com/Signetry/plugins -# rev: v0.2.2 +# rev: v0.3.0 # hooks: # - id: signetry-guard # -# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" - id: signetry-guard name: Signetry guard (contract scope check) description: Block staged changes that fall outside .signetry/admission.yaml scope. diff --git a/CHANGELOG.md b/CHANGELOG.md index 610cfeb..39b8f0e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog — Signetry plugins -## [Unreleased] +## [0.3.0] — 2026-09-01 ### Changed — Signetry is now open core; this repo is Apache-2.0 @@ -62,12 +62,12 @@ ### Fixed — stale version pins -- `signetry-core` pins move `v0.6.0` → `v0.7.0` across the READMEs, hooks, scripts, +- `signetry-core` pins move `v0.6.0` → `v0.8.0` across the READMEs, hooks, scripts, the MCP launcher, `codex/config.toml`, the universal guard and the admit skill. - The pre-commit `rev:` in `.pre-commit-hooks.yaml` said `v0.2.0` while `v0.2.2` is - released; it and the new universal README now reference `v0.2.2`. + released; it and the new universal README now reference `v0.3.0`, this release. -### Changed — rebranded Signetry → Signetry +### Changed — rebranded Umbra → Signetry - Platform kernel dependency `signetry-core` (installed from the git tag `git+https://github.com/Signetry/core@v0.6.0`), including the `[mcp]` extra used diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 4a0e970..6541630 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -16,7 +16,7 @@ Every integration here is a thin, deterministic wrapper around the `signetry` CL you need the kernel installed first (it is not on PyPI — install from the git tag): ```bash -pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" ``` Then clone this repo and scaffold a contract in a scratch repo to test against: diff --git a/README.md b/README.md index 3dde050..6490001 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ Signetry decides how much authority an agent's change has earned and proves it. plugins bring that governance *into the tools where agents work* — enforced by deterministic code, never by the model itself (an agent can't approve its own change). -> Prerequisite for all integrations: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"` and a +> Prerequisite for all integrations: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"` and a > `.signetry/admission.yaml` in your repo (a conservative default applies without one). ## Claude Code plugin (deepest integration) diff --git a/claude-code/README.md b/claude-code/README.md index 98545f2..1fdb446 100644 --- a/claude-code/README.md +++ b/claude-code/README.md @@ -11,7 +11,7 @@ blocked by code before it happens, not merely discouraged in a prompt. ```bash # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI) -pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" # 2. scaffold a contract in your repo cd /path/to/your/repo diff --git a/claude-code/signetry/.claude-plugin/plugin.json b/claude-code/signetry/.claude-plugin/plugin.json index 23afa28..5254699 100644 --- a/claude-code/signetry/.claude-plugin/plugin.json +++ b/claude-code/signetry/.claude-plugin/plugin.json @@ -1,7 +1,7 @@ { "name": "signetry", "description": "Govern coding-agent edits in real time: block out-of-scope or forbidden file writes and dangerous commands before they happen, using your repo's .signetry/admission.yaml. Deterministic (not the model). From signetry-core.", - "version": "0.2.2", + "version": "0.3.0", "author": { "name": "Signetry", "url": "https://github.com/Signetry" diff --git a/claude-code/signetry/hooks/signetry-lib.sh b/claude-code/signetry/hooks/signetry-lib.sh index f052d80..5ef604a 100755 --- a/claude-code/signetry/hooks/signetry-lib.sh +++ b/claude-code/signetry/hooks/signetry-lib.sh @@ -66,7 +66,7 @@ signetry_provision() { venv_py="$venv/bin/python" { "$py" -m venv "$venv" \ - && "$venv_py" -m pip install --quiet --disable-pip-version-check "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" + && "$venv_py" -m pip install --quiet --disable-pip-version-check "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" } >/dev/null 2>&1 || true [ -x "$venv_py" ] && "$venv_py" -c "import signetry_core" >/dev/null 2>&1 } diff --git a/claude-code/signetry/hooks/signetry-session-start.sh b/claude-code/signetry/hooks/signetry-session-start.sh index 43bbcb3..aaaaf41 100755 --- a/claude-code/signetry/hooks/signetry-session-start.sh +++ b/claude-code/signetry/hooks/signetry-session-start.sh @@ -22,8 +22,8 @@ fi # Could not activate. Say so LOUDLY and specifically — do not pretend to protect. if signetry_py311plus >/dev/null 2>&1; then - echo "Signetry plugin loaded but INACTIVE: could not install signetry-core (offline?). The guard is NOT enforcing anything. Fix with: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'" + echo "Signetry plugin loaded but INACTIVE: could not install signetry-core (offline?). The guard is NOT enforcing anything. Fix with: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'" else - echo "Signetry plugin loaded but INACTIVE: needs Python >=3.11, which was not found (your default python3 may be older). The guard is NOT enforcing anything. Install Python 3.11+ and: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'" + echo "Signetry plugin loaded but INACTIVE: needs Python >=3.11, which was not found (your default python3 may be older). The guard is NOT enforcing anything. Install Python 3.11+ and: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'" fi exit 0 diff --git a/claude-code/signetry/scripts/signetry-mcp.sh b/claude-code/signetry/scripts/signetry-mcp.sh index 05520b8..13b5142 100755 --- a/claude-code/signetry/scripts/signetry-mcp.sh +++ b/claude-code/signetry/scripts/signetry-mcp.sh @@ -15,5 +15,5 @@ for PY in python3.13 python3.12 python3.11 python3 python; do exec "$PY" -m signetry_core.mcp_server fi done -echo "signetry-core[mcp] not available on a Python >=3.11; run: pip install 'signetry-core[mcp] @ git+https://github.com/Signetry/core@v0.7.0'" >&2 +echo "signetry-core[mcp] not available on a Python >=3.11; run: pip install 'signetry-core[mcp] @ git+https://github.com/Signetry/core@v0.8.0'" >&2 exit 1 diff --git a/claude-code/signetry/skills/admit/SKILL.md b/claude-code/signetry/skills/admit/SKILL.md index 275563d..5dd9bea 100644 --- a/claude-code/signetry/skills/admit/SKILL.md +++ b/claude-code/signetry/skills/admit/SKILL.md @@ -10,7 +10,7 @@ report the result to the user. Steps: 1. Confirm `signetry` is available: run `signetry --help`. If it is not installed, tell - the user to run `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"` and stop. + the user to run `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"` and stop. 2. Run admission over the change already present in the working tree (no agent is re-invoked — the change being governed is what's on disk): diff --git a/codex/README.md b/codex/README.md index e22df9f..48639f0 100644 --- a/codex/README.md +++ b/codex/README.md @@ -7,7 +7,7 @@ with [signetry-core](https://github.com/Signetry/core). ```bash # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI) -pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" # 2. scaffold a contract in your repo cd /path/to/your/repo diff --git a/codex/config.toml b/codex/config.toml index f208bee..15c367f 100644 --- a/codex/config.toml +++ b/codex/config.toml @@ -1,5 +1,5 @@ # Signetry MCP server for Codex — add to ~/.codex/config.toml -# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" [mcp_servers.signetry] command = "python" diff --git a/cursor/README.md b/cursor/README.md index 24dd65c..76f554a 100644 --- a/cursor/README.md +++ b/cursor/README.md @@ -7,7 +7,7 @@ Two ways to govern coding-agent changes in Cursor with ```bash # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI) -pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" # 2. scaffold a contract in your repo cd /path/to/your/repo diff --git a/universal/README.md b/universal/README.md index 12a06f7..760666e 100644 --- a/universal/README.md +++ b/universal/README.md @@ -12,7 +12,7 @@ at commit time regardless of which tool produced the change. ```bash # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI) -pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" # 2. scaffold a contract in your repo cd /path/to/your/repo @@ -26,7 +26,7 @@ With [pre-commit](https://pre-commit.com/) — add to `.pre-commit-config.yaml`: ```yaml repos: - repo: https://github.com/Signetry/plugins - rev: v0.2.2 + rev: v0.3.0 hooks: - id: signetry-guard ``` diff --git a/universal/signetry-guard.sh b/universal/signetry-guard.sh index 68b927c..a38d197 100755 --- a/universal/signetry-guard.sh +++ b/universal/signetry-guard.sh @@ -6,7 +6,7 @@ # or manually. It checks proposed file paths and/or a command against the repo's # .signetry/admission.yaml and exits non-zero (blocking) on a violation. # -# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" +# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0" # # Usage: # signetry-guard.sh --path src/app.py @@ -17,7 +17,7 @@ set -euo pipefail if ! command -v signetry >/dev/null 2>&1; then - echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'" >&2 + echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'" >&2 # Fail open by default so this never blocks a commit unexpectedly; set # SIGNETRY_GUARD_STRICT=1 to fail closed when signetry is missing. [ "${SIGNETRY_GUARD_STRICT:-0}" = "1" ] && exit 1 || exit 0