chore: prepare v0.3.1 release

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kahea",
       "source": "./plugins/kahea",
       "description": "Seal, test, and invoke HTTP and finite WebSocket APIs with exact capability grants.",
-      "version": "0.3.0",
+      "version": "0.3.1",
       "author": {
         "name": "copyleftdev",
         "url": "https://github.com/copyleftdev"

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.3.1 - 2026-08-13
+
+- Fixed YAML ingestion for OpenAPI documents that use unquoted numeric response status keys.
+  Finite numeric mapping keys are normalized to strings before indexing, while unsupported keys
+  such as booleans still fail closed ([#42](https://github.com/copyleftdev/kahea/issues/42)).
+
 ## 0.3.0 - 2026-08-13
 
 - **Breaking (`kahea/k1`):** a close frame the plan does not accept is reported as

Cargo.toml

@@ -14,7 +14,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.3.0"
+version = "0.3.1"
 edition = "2024"
 rust-version = "1.95"
 license = "Apache-2.0"

crates/kahea-plan/src/lib.rs

@@ -2424,7 +2424,7 @@ paths:
         assert!(first.verify_seal().unwrap());
         assert_eq!(
             first.fingerprint,
-            "b3:354cca8ac7a2629abc42d2c9c1eee927c2d7f466b8394bd410c5058239deac2e"
+            "b3:d05ec0d1dc22b085d9415d1cff04d36db5ae7dc037d85d4a60f4513f3e820497"
         );
         assert_eq!(first.target, "wss://socket.example.test/v1/events");
         assert_eq!(first.risk, kahea_core::RiskClass::Write);

fixtures/golden/create-invoice.plan.json

@@ -1 +1 @@
-{"protocol":"kahea/k1","kind":"plan","version":"0.3.0","config_fingerprint":"b3:c801e7cd2a1b600d46b6abb6f855e6228135357f6a3541dc4b65465e33e9ad84","policy_fingerprint":"b3:9da0a9fe6ff93b35071e2e144fd5ee7cab39a837dc89f6137565d96fab434d3d","source_fingerprints":["b3:674b6af9c25af432babcf6db15693a4ad7de0b92df5f86066ccf2d433a2655f6"],"id":"plan:14b2e23060c8","operation":"op:86dc9c5c3f68","target":"https://sandbox.example.test/v1/invoices","method":"POST","risk":"write","required_grants":["http:POST","net:sandbox.example.test:443"],"secret_refs":[],"headers":[{"name":"Content-Type","value":"application/json"}],"auth":null,"body":{"media_type":"application/json","bytes":44,"blake3":"b3:a20ef0153c1bc8574adf10ee074c7d765dca13af98034ae3e24b0862be190e61","encoding":"utf-8","inline":"{\"amount\":125.5,\"customer_id\":\"cus_01KAHEA\"}"},"checks":["response-schema:openapi","status:any(201)"],"response_contract":{"components":{},"responses":{"201":{"description":"Invoice created"}}},"sensitive_headers":[],"redact_response_json_pointers":[],"derivations":[{"field":"body","source":"explicit-input","source_location":"input:/body","logical_value":{"amount":125.5,"customer_id":"cus_01KAHEA"},"wire_value":"{\"amount\":125.5,\"customer_id\":\"cus_01KAHEA\"}","transformations":["canonical-json"]}],"valid":true,"fingerprint":"b3:ba0466304332b7bc2a423d4916d602b85fd18c181bf4563fb4a8b65d28a0db25","exit":0}
+{"protocol":"kahea/k1","kind":"plan","version":"0.3.1","config_fingerprint":"b3:c801e7cd2a1b600d46b6abb6f855e6228135357f6a3541dc4b65465e33e9ad84","policy_fingerprint":"b3:9da0a9fe6ff93b35071e2e144fd5ee7cab39a837dc89f6137565d96fab434d3d","source_fingerprints":["b3:674b6af9c25af432babcf6db15693a4ad7de0b92df5f86066ccf2d433a2655f6"],"id":"plan:ae2e16d2a2a9","operation":"op:86dc9c5c3f68","target":"https://sandbox.example.test/v1/invoices","method":"POST","risk":"write","required_grants":["http:POST","net:sandbox.example.test:443"],"secret_refs":[],"headers":[{"name":"Content-Type","value":"application/json"}],"auth":null,"body":{"media_type":"application/json","bytes":44,"blake3":"b3:a20ef0153c1bc8574adf10ee074c7d765dca13af98034ae3e24b0862be190e61","encoding":"utf-8","inline":"{\"amount\":125.5,\"customer_id\":\"cus_01KAHEA\"}"},"checks":["response-schema:openapi","status:any(201)"],"response_contract":{"components":{},"responses":{"201":{"description":"Invoice created"}}},"sensitive_headers":[],"redact_response_json_pointers":[],"derivations":[{"field":"body","source":"explicit-input","source_location":"input:/body","logical_value":{"amount":125.5,"customer_id":"cus_01KAHEA"},"wire_value":"{\"amount\":125.5,\"customer_id\":\"cus_01KAHEA\"}","transformations":["canonical-json"]}],"valid":true,"fingerprint":"b3:04d9a1186177329afc611aad8cfca76ad92ac7014c8e82affa111294aeee688d","exit":0}

fixtures/golden/generator-baseline.conformance.json

@@ -376,7 +376,7 @@
         "target": "https://api.example.test/surface/7777?count=40&kind=gamma&verbose=true"
       }
     ],
-    "fingerprint": "b3:9c2853190ab0d53916751f05635e7facbed87ca918bc94942e33b1d79cc07e9f",
+    "fingerprint": "b3:048e0480efda2d49de0360a5ca9341b923ed465d038416215d30cd5f6b39c522",
     "requested_cases": 6,
     "required_grants": [
       "conformance:execute:6",
@@ -558,7 +558,7 @@
         "target": "https://api.example.test/optional?trace=a"
       }
     ],
-    "fingerprint": "b3:d1e994af668e396329bfc18d7082480bbabe824f62d9cc64ed61e21ca68db401",
+    "fingerprint": "b3:20c128b11c9d836d9c8ddf5b230cea18574c96d8019693b791f50996439bbda5",
     "requested_cases": 10,
     "required_grants": [
       "conformance:execute:10",

fixtures/golden/generator-surface.conformance.json

@@ -743,7 +743,7 @@
       "target": "https://api.example.test/surface/7777?count=40&kind=alpha&verbose=true"
     }
   ],
-  "fingerprint": "b3:fef1483322c94a0866e5e2b724affabaf30c57e7751e6781ab16a1ffc59a6a07",
+  "fingerprint": "b3:ce3a5b222b5387db79c752ea267c12640d65331246ff9e3508d66b7ddee49d15",
   "requested_cases": 12,
   "required_grants": [
     "conformance:execute:12",

packaging/mcpb/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "kahea",
   "display_name": "Kāhea",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Deterministic HTTP and WebSocket testing with policy-gated execution for AI agents.",
   "long_description": "Kāhea turns API descriptions, captured requests, workflows, and finite WebSocket sessions into sealed plans, invokes only with exact capability grants, and returns typed, replayable evidence.",
   "author": {

plugins/kahea/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kahea",
   "displayName": "Kāhea",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Deterministic HTTP and finite WebSocket planning, testing, and policy-gated execution for AI agents.",
   "author": {
     "name": "copyleftdev",

plugins/kahea/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "kahea",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Deterministic HTTP and finite WebSocket planning, testing, and policy-gated execution for AI agents.",
   "author": {
     "name": "copyleftdev",

server.json

@@ -8,6 +8,6 @@
     "source": "github",
     "id": "1325401405"
   },
-  "version": "0.3.0",
+  "version": "0.3.1",
   "websiteUrl": "https://github.com/copyleftdev/kahea"
 }