chore(release): prepare @hasna/contracts 0.10.6

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `@hasna/contracts` are documented here.
 
+## [0.10.6] - 2026-08-11
+
+- Adds the fail-closed `safe-read` collection helper, including complete
+  pagination across numeric cursors.
+- Adds the metadata-only `verify-write` command for checking stored writes
+  without rendering capability-bearing content.
+
+PATCH, not minor. This ships additive operational verification helpers without
+changing existing contract shapes.
+
 ## [0.10.5] - 2026-08-10
 
 - Generated SDK request builders serialize array-valued OpenAPI query

hasna.contract.json

@@ -4,7 +4,7 @@
   "name": "contracts",
   "class": "library",
   "contractVersion": "v1",
-  "kitVersion": "0.10.5",
+  "kitVersion": "0.10.6",
   "description": "Shared schemas, validators, and conformance kit for Hasna open-source agent infrastructure. Ships types and CLI checks only; no store.",
   "bins": [
     "contracts",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/contracts",
-  "version": "0.10.5",
+  "version": "0.10.6",
   "description": "Shared schemas and validators for Hasna open-source agent infrastructure contracts.",
   "type": "module",
   "license": "Apache-2.0",

src/schemas.ts

@@ -6,7 +6,7 @@ import {
 import { z } from "zod";
 
 export const CONTRACTS_PACKAGE_NAME = "@hasna/contracts";
-export const CONTRACTS_PACKAGE_VERSION = "0.10.5";
+export const CONTRACTS_PACKAGE_VERSION = "0.10.6";
 
 export const SCHEMA_IDS = {
   actorRef: "hasna.actor_ref.v1",

tests/published-package-security.test.ts

@@ -20,7 +20,7 @@ import { CONTRACTS_PACKAGE_VERSION } from "../src/schemas.js";
 import { scanNoCloudTarget } from "../src/no-cloud.js";
 
 const root = join(import.meta.dir, "..");
-const expectedUnreleasedVersion = "0.10.5";
+const expectedUnreleasedVersion = "0.10.6";
 const forbiddenInternalDomains = [["hasna", "xyz"].join(".")];
 
 function commandText(bytes: Uint8Array): string {