chore(release): prepare v0.20.0

[mbeacom]

What and why

Prepares the v0.20.0 lockstep release (docs/RELEASING.md, steps 1–4). It mirrors v0.19.0's release commit and adds one ADR tick.

• Versions. The four manifests, CLI_VERSION, SERVER_INFO, and both server.json fields move to 0.20.0, along with the color test and the root package.json.
  • bun.lock changes in exactly four lines, and --frozen-lockfile is clean.
  • The badges pin is bumped.
  • The current-release narrative is updated, and README's Project status gains a row for the REST server.
• Not bumped: spec-kit (0.1.5), the agent plugin, and the private sdk, portal, server, and ci packages.
• CHANGELOG [0.20.0]:
  • Headline: the read-only REST server in the image (ADR-0055), the portal on adrkit.dev, and the portal Action's datetime as-of, icon, and server path hint.
  • One non-additive CLI JSON change, called out explicitly: a log-qualified relatesTo/conflictsWith is now federated-ref-unresolved (info), so adr lint and adr explain can go from exit 1 to 0 (ADR-0059 clause 5, which amends ADR-0031 clause 5). Qualified supersession stays an error, and adr evaluate now fails it.
  • Also included: the repo-qualified matcher advisory, and core's new public exports (todayUtcDate and the explain/lint/new formatters, with byte-identical output).
  • The SDK: its gates are closed, but it's still unpublished.
• ADR-0030 item 6 records https://github.com/mbeacom/adrkit-backstage.

Checklist

• DCO signed off.
• Checks:
  • typecheck, lint, check:doc-pins, check:changelog, check:stale-refs, check:deps, and emit:manifest (no diff) pass.
  • adr lint: 59 records, clean.
  • release:pack -- --tag v0.20.0 prepared 5 packages.
  • The Node smoke passes on both 22.22.2 and 24.16.0.
  • release:publish -- --dry-run exits 0.
  • Full bun test: 4542 pass.
  • packages/ci/dist is unchanged.

After merge

My steps:

1. Push the annotated v0.20.0 tag.
2. Approve npm.
3. Check that the draft's notes start at v0.19.0, then publish with the Marketplace selection.
4. Run mcp-publisher publish with the DER key extraction in docs/DISTRIBUTION.md.

After that, mbeacom/adrkit-azure#5 pins v0.20.0.

[Copilot]

🟢 Approval recommended

The lockstep version surfaces and release documentation are consistently aligned with the repository’s release checklist.

0 open findings

What changed in this PR

Prepares the coordinated v0.20.0 release by aligning package versions, release documentation, and public-facing references.

Changes:

• Bumps four public packages and embedded version metadata to 0.20.0.
• Finalizes the v0.20.0 changelog and updates release-facing documentation.
• Records completion of ADR-0030’s downstream-repository action item.

Decision-context MCP lookup was unavailable; repository guidance and release contracts were reviewed directly.

File	Description
site/​src/​content/​docs/​quickstart.mdx	Updates the published npm version.
site/​src/​content/​docs/​index.mdx	Updates the site status version.
site/​src/​content/​docs/​ci.mdx	Updates immutable Action examples.
site/​src/​content/​docs/​badges.mdx	Updates pinned CLI commands.
site/​src/​components/​Hero.astro	Updates the hero version.
README.md	Updates Action pins and release status.
packages/​mcp/​src/​server.ts	Updates MCP server metadata.
packages/​mcp/​server.json	Updates MCP registry versions.
packages/​mcp/​package.json	Bumps @adrkit/mcp.
packages/​evaluator/​package.json	Bumps @adrkit/evaluator.
packages/​core/​package.json	Bumps @adrkit/core.
packages/​cli/​test/​color.test.ts	Updates the expected CLI version.
packages/​cli/​src/​index.ts	Updates CLI_VERSION.
packages/​cli/​package.json	Bumps @adrkit/cli.
package.json	Updates the lockstep root version.
docs/​RELEASING.md	Updates current-release references.
docs/​adr/​0030-keep-extension-surfaces-that-carry-a-dependency-tree-outside-this-repository.md	Records the downstream repository.
CHANGELOG.md	Finalizes v0.20.0 release notes.
bun.lock	Aligns four workspace versions.
AGENTS.md	Updates current release guidance.
.github/​ISSUE_TEMPLATE/​bug_report.yml	Updates the version placeholder.

🧠 Review effort: Balanced

[github-actions]

Decisions governing this change

23 accepted decisions govern this change · 1 active proposal · 2 historical records

Show all 23 governing decisions and why each applies

• 0001 — Record architecture decisions as versioned markdown in git
  • via path: docs/adr/**
• 0003 — Ship as a Spec Kit extension plus a standalone CLI, not a competing harness
  • via path: packages/cli/**
• 0007 — Isolate integrations as optional adapters and build only against public surfaces
  • via path: packages/*/package.json
• 0010 — Use Bun as the package manager and test runner while publishing Node-targeted artifacts
  • via path: package.json
• 0011 — Host the canonical JSON Schema at its $id on adrkit.dev
  • via path: site/**
• 0016 — Require every check to be observed failing before it counts as coverage
  • via path: packages/*/test/**
• 0017 — Keep dependency audit scope explicit and release-scoped
  • via path: packages/*/package.json
• 0018 — Adopt MCP SDK v2 and serve protocol revision 2026-07-28 dual-era
  • via path: packages/mcp/**
• 0022 — Scan inbound markers in check and CI without giving them exit-code authority
  • via path: packages/cli/src/index.ts
• 0024 — Report the measured scan extent, not the window constant
  • via path: packages/cli/src/index.ts
• 0025 — Ship badges as recipes over existing output, not a new CLI surface
  • via path: package.json
  • via path: site/src/content/docs/badges.mdx
• 0026 — Identify the CI comment by the strongest author evidence the token allows
  • via path: site/src/content/docs/ci.mdx
• 0027 — Ratify the deterministic evaluator and bind calibration reporting to the first probabilistic pass
  • via path: packages/evaluator/**
• 0029 — Scope Backstage publication as a downstream consumer, tiered on the entity-ownership mapping
  • via path: packages/cli/src/index.ts
• 0030 — Keep extension surfaces that carry a dependency tree outside this repository
  • via path: package.json
• 0031 — Publish a narrow consumer SDK as the contract, and document the CLI JSON as its sibling
  • via path: docs/RELEASING.md
  • via path: packages/cli/src/index.ts
• 0032 — Publish one lockstep OCI image after the coordinated release succeeds
  • via path: README.md
  • via path: docs/RELEASING.md
• 0033 — Select interactive graph presentation at the CLI boundary while preserving piped DOT
  • via path: packages/cli/src/index.ts
  • via path: site/src/content/docs/**
• 0036 — Expose the governing-decisions Action through one root Marketplace entry point
  • via path: docs/RELEASING.md
• 0037 — Treat generated knowledge systems as downstream read models, not decision authorities
  • via path: README.md
  • via path: site/src/content/docs/**
• 0038 — Offer the bootstrap decision record as an offer rather than a backfill candidate
  • via path: site/src/content/docs/quickstart.mdx
• 0039 — Derive a valid-time window from date and supersession, and resolve a git ref at the CLI boundary
  • via path: packages/cli/src/index.ts
• 0040 — Keep derived surfaces in lockstep with three mechanisms matched to three classes of drift
  • via path: AGENTS.md

Active proposals touching this change (1)

These are not yet ratified and do not bind this change:

• 0051 — Record review state with adr approve, adr object, and adr resolve (proposed)
  • via path: packages/cli/src/index.ts

Historical records that once covered this change (2)

These no longer bind this change, and are listed for context only:

• 0005 — Gate proposals with a deterministic-first evaluator and declarative escalation (superseded) — superseded by 0027
  • via path: packages/evaluator/**
• 0021 — Resolve inbound source annotations without changing the schema (superseded) — superseded by 0022
  • via path: packages/cli/src/index.ts

_{Links point at 2a25e17, this run's GITHUB_SHA. Run adr explain <path> locally to see why a file is governed.}