v0.7.0 — authorship claim

Adds CommitOptions.authorship and the keeper commit CLI sink-reading ($KEEPER_AUTHORSHIP_SINK) — the box-side of GitAI authorship provenance (keeperd reconciles the claim into the signed L3). See bounded-systems/door-keeper#12 and claude-box GITAI-PROVENANCE.md.

v0.6.0

fix: importAndPush requires repo (path-translated, like commit/push) — the wire path was incomplete (door-keeper requires repo). Surfaced by a live daemon e2e. Breaking for importAndPush callers.

v0.5.0

importAndPush forwards l2LaunchDigest — the L3 write links back to the box L2 launch attestation (capability chain). Pairs with door-keeper #10.

v0.4.0

Add attestLaunch(subject, manifest) — forward the attest-launch door method (L2 launch attestation over a room + its held doors). Pairs with door-keeper's attest-launch handler.

v0.3.0

Add optional notesRef to importAndPush — project the signed L3 onto the pushed commit as a git note (refs/notes/provenance). Pairs with door-keeper's note-writing handler.

v0.2.0

Adds the importAndPush keeper client (model-A: host-built bundle → keeperd imports + signed-pushes), so consumers like prx can use door-kit while keeping the host-keyless-commit / daemon-only-signed-push trust model. Complements the existing commit/push clients.

v0.1.0

First JSR publish of @bounded-systems/door-kit — the in-box door-client SDK (keeper/scout/concierge/spawn) over the guest-room protocol. Lets prx and other consumers depend on the published door clients instead of re-implementing them.