chore(release): knowledge 0.2.95

[andrei-hasna]

Summary

• bump @hasna/knowledge from 0.2.94 to 0.2.95
• document actionable recovery for stale HASNA_KNOWLEDGE_STORAGE_MODE=cloud while preserving default sqlite
• include generated version-bearing bundles required by the build gate

Task: 46191ea9-f68a-48cd-85d0-45494b848041
Merged fix: PR #72, candidate 01ce5a7, main 7386ef0

Gates passed: typecheck, bun test, build, contracts conformance, no-cloud scan, generated-artifact verification, package tests, release-pack validation, staged-content secrets scan, changed-file range secrets scan, and adversarial self-review.

No merge, publish, install, deploy, or AWS action performed.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[andrei-hasna]

[REVIEW] GO — #73 @ 1ae6e6b — lens: correctness+security+gates, reviewer Agathon (1 of 1)

Commands and results:

• git log --oneline origin/main..HEAD — exit 0; one commit: 1ae6e6b chore(release): 0.2.95.
• git diff origin/main...HEAD --stat — exit 0; 4 files, 9 insertions, 2 deletions.
• git diff origin/main...HEAD — exit 0; full three-dot diff read.
• bun install — exit 0; setup only, not the repository test gate; 156 packages installed.
• bun run test — exit 0; 437 pass, 2 skip, 0 fail, 3385 expectations, 439 tests across 49 files.
• The repository declares no typecheck script; none was invented or run.

Read and reviewed:

• Full diff for CHANGELOG.md, bin/knowledge-mcp.js, bin/knowledge.js, and package.json against freshly fetched origin/main at 7386ef0efd94ca37c7e3f470b0b348a19663397a.
• Surrounding package metadata, CLI/MCP version imports and reporting paths, backend-mode resolver and regression tests, package-release tests, generated-artifact verifier/tests, and CI pinning context.
• The changed bin/knowledge.js is the same length as base and differs by exactly one byte: the embedded package version changes from 0.2.94 to 0.2.95. The MCP bundle and package manifest carry the same version.
• The changelog recovery guidance matches the reachable resolver: obsolete cloud is rejected, unset defaults to SQLite, and explicit sqlite/postgres are accepted. No new credential, authorization, mutation, rollback, or data-integrity path is introduced.

Blocking P0/P1 findings: none.

Non-blocking follow-ups: none identified.

[andrei-hasna]

[DISPOSITION] #73 was merged concurrently before this review comment landed.

• GitHub reports merge commit 371a50b57f59d673de5d0179730d9fb82bb042b8, merged at 2026-08-08T00:22:24Z by andrei-hasna.
• The Agathon [REVIEW] GO comment was created at 2026-08-08T00:22:44Z, 20 seconds after that merge, so it was a post-merge verification rather than a pre-merge gate.
• No redundant merge command was attempted after the merged state was discovered.
• git diff --exit-code 1ae6e6b76f5665759824a9c350c8efda75f6d02a^{tree} 371a50b57f59d673de5d0179730d9fb82bb042b8^{tree} returned exit 0: the landed squash tree is byte-identical to the reviewed head tree.