release: prepare tokmd v1.13.1

Prepare the v1.13.1 correction release after the v1.13.0 installed artifact missed the syntax command due to feature defaults. Updates version metadata, changelog/release docs, readiness notes, and CycloneDX snapshots.\n\nValidation before merge:\n- version-consistency\n- docs/doc-artifacts/proof-policy/ci-lane-whitelist\n- publish-surface verify\n- affected proof plan and required proof\n- tokmd-format CycloneDX snapshot regressions\n- installed local tokmd smoke for syntax/evidence-packet

Author: EffortlessSteven

CHANGELOG.md

@@ -7,6 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.13.1] - 2026-06-11
+
+1.13.1 is a correction release for the syntax-aware evidence packet surface
+introduced in 1.13.0. The 1.13.0 crate and release assets were published, but a
+default `cargo install tokmd --version 1.13.0` binary did not include the
+feature-gated `tokmd syntax` command that the release notes and packet workflow
+documented. This patch release makes the documented packet flow installable from
+the default published artifact and tightens bounded complexity evidence status.
+
+### Fixed
+
+- Default `tokmd` installs now include the `ast` feature so `tokmd syntax` and
+  syntax-aware evidence packet workflows are available from the published crate
+  without custom feature flags.
+- File-backed complexity scans that are bounded by the default
+  `max_file_bytes` content window now emit explicit `complexity scan bounded`
+  warnings and mark the analysis receipt `partial` instead of looking complete
+  with silently clipped input.
+- The `tokmd analyze --max-file-bytes` help and generated CLI reference now
+  state the default file-backed scan cap.
+
+### Tests
+
+- Added an installed-binary smoke during release prep proving `tokmd syntax
+  --help` and `tokmd evidence-packet --help` are available from the default
+  install surface.
+- Added a capped-complexity integration regression proving a large scoped Rust
+  file reports `status=partial` with bounded-evidence warnings.
+- Re-ran affected proof for analysis complexity, analysis orchestration, CLI,
+  and workspace dependency graph scopes before publication import.
+
 ## [1.13.0] - 2026-06-11
 
 1.13 is the syntax-aware evidence packet release. It turns the Bun UB evidence

Cargo.lock

@@ -44,7 +44,7 @@ default-members = [
 # xtask is a workspace member but excluded from default-members
 
 [workspace.package]
-version = "1.13.0"
+version = "1.13.1"
 edition = "2024"
 rust-version = "1.95"
 license = "MIT OR Apache-2.0"
@@ -194,22 +194,22 @@ name = "tokmd-workspace"
 
 [workspace.dependencies]
 # Internal crates - centralized for "bump once" version management
-tokmd = { path = "crates/tokmd", version = "1.13.0" }
-tokmd-analysis = { path = "crates/tokmd-analysis", version = "1.13.0" }
-tokmd-analysis-types = { path = "crates/tokmd-analysis-types", version = "1.13.0" }
-tokmd-envelope = { path = "crates/tokmd-envelope", version = "1.13.0" }
-tokmd-core = { path = "crates/tokmd-core", version = "1.13.0" }
-tokmd-format = { path = "crates/tokmd-format", version = "1.13.0" }
-tokmd-git = { path = "crates/tokmd-git", version = "1.13.0" }
-tokmd-model = { path = "crates/tokmd-model", version = "1.13.0" }
-tokmd-wasm = { path = "crates/tokmd-wasm", version = "1.13.0" }
-tokmd-scan = { path = "crates/tokmd-scan", version = "1.13.0" }
-tokmd-sensor = { path = "crates/tokmd-sensor", version = "1.13.0" }
-tokmd-settings = { path = "crates/tokmd-settings", version = "1.13.0" }
-tokmd-types = { path = "crates/tokmd-types", version = "1.13.0" }
-tokmd-io-port = { path = "crates/tokmd-io-port", version = "1.13.0" }
-tokmd-gate = { path = "crates/tokmd-gate", version = "1.13.0" }
-tokmd-cockpit = { path = "crates/tokmd-cockpit", version = "1.13.0" }
+tokmd = { path = "crates/tokmd", version = "1.13.1" }
+tokmd-analysis = { path = "crates/tokmd-analysis", version = "1.13.1" }
+tokmd-analysis-types = { path = "crates/tokmd-analysis-types", version = "1.13.1" }
+tokmd-envelope = { path = "crates/tokmd-envelope", version = "1.13.1" }
+tokmd-core = { path = "crates/tokmd-core", version = "1.13.1" }
+tokmd-format = { path = "crates/tokmd-format", version = "1.13.1" }
+tokmd-git = { path = "crates/tokmd-git", version = "1.13.1" }
+tokmd-model = { path = "crates/tokmd-model", version = "1.13.1" }
+tokmd-wasm = { path = "crates/tokmd-wasm", version = "1.13.1" }
+tokmd-scan = { path = "crates/tokmd-scan", version = "1.13.1" }
+tokmd-sensor = { path = "crates/tokmd-sensor", version = "1.13.1" }
+tokmd-settings = { path = "crates/tokmd-settings", version = "1.13.1" }
+tokmd-types = { path = "crates/tokmd-types", version = "1.13.1" }
+tokmd-io-port = { path = "crates/tokmd-io-port", version = "1.13.1" }
+tokmd-gate = { path = "crates/tokmd-gate", version = "1.13.1" }
+tokmd-cockpit = { path = "crates/tokmd-cockpit", version = "1.13.1" }
 
 # External crates - centralized for consistent versioning
 anyhow = "1.0.102"

Cargo.toml

@@ -14,7 +14,7 @@ expression: "String::from_utf8(buf).unwrap()"
       {
         "vendor": "tokmd",
         "name": "tokmd",
-        "version": "1.13.0"
+        "version": "1.13.1"
       }
     ]
   },

crates/tokmd-format/tests/snapshots/deep_format_w47__snapshot_cyclonedx_multi_file.snap

@@ -13,7 +13,7 @@ expression: out
       {
         "vendor": "tokmd",
         "name": "tokmd",
-        "version": "1.13.0"
+        "version": "1.13.1"
       }
     ]
   },

crates/tokmd-format/tests/snapshots/format_depth_w63__snapshot_w63_cyclonedx_basic.snap

@@ -47,7 +47,7 @@ expression: pretty
       {
         "name": "tokmd",
         "vendor": "tokmd",
-        "version": "1.13.0"
+        "version": "1.13.1"
       }
     ]
   },

crates/tokmd-format/tests/snapshots/format_tests__cyclonedx_snapshot_deterministic.snap

@@ -13,7 +13,7 @@ expression: "String::from_utf8(buf).unwrap()"
       {
         "vendor": "tokmd",
         "name": "tokmd",
-        "version": "1.13.0"
+        "version": "1.13.1"
       }
     ]
   },

crates/tokmd-format/tests/snapshots/snapshot_w45__snapshot_export_cyclonedx_single_file.snap

@@ -117,7 +117,7 @@ expression: "serde_json::to_string_pretty(&pretty).unwrap()"
       {
         "name": "tokmd",
         "vendor": "tokmd",
-        "version": "1.13.0"
+        "version": "1.13.1"
       }
     ]
   },

crates/tokmd-format/tests/snapshots/snapshot_w74__w74_export_cyclonedx.snap

@@ -1,6 +1,6 @@
 {
   "name": "@tokmd/core",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Code inventory receipts and analytics - Node.js bindings",
   "main": "index.js",
   "types": "index.d.ts",
@@ -19,11 +19,11 @@
     "index.d.ts"
   ],
   "optionalDependencies": {
-    "@tokmd/core-darwin-arm64": "1.13.0",
-    "@tokmd/core-darwin-x64": "1.13.0",
-    "@tokmd/core-linux-arm64-gnu": "1.13.0",
-    "@tokmd/core-linux-x64-gnu": "1.13.0",
-    "@tokmd/core-win32-x64-msvc": "1.13.0"
+    "@tokmd/core-darwin-arm64": "1.13.1",
+    "@tokmd/core-darwin-x64": "1.13.1",
+    "@tokmd/core-linux-arm64-gnu": "1.13.1",
+    "@tokmd/core-linux-x64-gnu": "1.13.1",
+    "@tokmd/core-win32-x64-msvc": "1.13.1"
   },
   "repository": {
     "type": "git",

crates/tokmd-node/npm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokmd/core",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Node.js bindings for tokmd - code inventory and analytics",
   "main": "index.js",
   "types": "index.d.ts",
@@ -60,13 +60,13 @@
     "@napi-rs/cli": "^3.6.2"
   },
   "optionalDependencies": {
-    "@tokmd/core-win32-x64-msvc": "1.13.0",
-    "@tokmd/core-darwin-x64": "1.13.0",
-    "@tokmd/core-darwin-arm64": "1.13.0",
-    "@tokmd/core-linux-x64-gnu": "1.13.0",
-    "@tokmd/core-linux-x64-musl": "1.13.0",
-    "@tokmd/core-linux-arm64-gnu": "1.13.0",
-    "@tokmd/core-linux-arm64-musl": "1.13.0",
-    "@tokmd/core-win32-arm64-msvc": "1.13.0"
+    "@tokmd/core-win32-x64-msvc": "1.13.1",
+    "@tokmd/core-darwin-x64": "1.13.1",
+    "@tokmd/core-darwin-arm64": "1.13.1",
+    "@tokmd/core-linux-x64-gnu": "1.13.1",
+    "@tokmd/core-linux-x64-musl": "1.13.1",
+    "@tokmd/core-linux-arm64-gnu": "1.13.1",
+    "@tokmd/core-linux-arm64-musl": "1.13.1",
+    "@tokmd/core-win32-arm64-msvc": "1.13.1"
   }
 }