feat: add claude-code llm backend with runtime port (#115)

* docs: revise claude-code ingest backend spec

* docs: keep claude-code spec focused on ingest

* docs: expand claude-code spec to full llm parity

* Refine claude-code backend spec after adversarial review iteration 1

* Refine claude-code backend spec after adversarial review iteration 2

* Refine claude-code backend spec after adversarial review iteration 3

* feat: recognize claude-code llm backend

* feat: add ktx llm runtime port

* feat: add claude-code llm runtime

* feat: route non-agent llm calls through runtime

* feat: run ingest agents through llm runtime

* feat: support claude-code setup and status

* test: verify claude-code backend runtime

* docs: add claude-code backend v1 runtime plan

* fix: close claude-code runtime isolation checks

* fix: warn on claude-code prompt caching during setup

* chore: verify claude-code v1 closure

* docs: add claude-code backend v1 isolation closure plan

* fix: update claude-code ingest setup guidance

* docs: add claude-code backend v1 ingest guidance closure plan

* docs: align claude-code isolation spec with sdk metadata

* test: cover claude-code host discovery metadata

* fix: tolerate claude-code host discovery metadata

* docs: clarify claude-code host discovery metadata

* docs: add claude-code auth-probe isolation fix plan

* chore: prepare kaelio ktx rc1 release

* chore: add semantic release workflow

* fix: unblock ci checks

* chore(release): 0.1.0-rc.1

* feat: add Claude Code model selection to setup

* fix: keep git maintenance attached in local repos

scripts/update-public-release-version.mjs

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+
+import { readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+import {
+  PUBLIC_NPM_PACKAGE_NAME,
+  assertPublicNpmPackageVersion,
+  assertPublicNpmReleaseTag,
+  releasePolicyPath,
+} from './public-npm-release-metadata.mjs';
+
+function scriptRootDir() {
+  return resolve(dirname(fileURLToPath(import.meta.url)), '..');
+}
+
+async function readJson(path) {
+  return JSON.parse(await readFile(path, 'utf8'));
+}
+
+async function writeJson(path, value) {
+  await writeFile(path, `${JSON.stringify(value, null, 2)}\n`);
+}
+
+export async function updatePublicReleaseVersion(rootDir, version, tag) {
+  const safeVersion = assertPublicNpmPackageVersion(version);
+  const safeTag = assertPublicNpmReleaseTag(tag);
+
+  const packageJsonPath = join(rootDir, 'package.json');
+  const packageJson = await readJson(packageJsonPath);
+  packageJson.version = safeVersion;
+  await writeJson(packageJsonPath, packageJson);
+
+  const policyPath = releasePolicyPath(rootDir);
+  const policy = await readJson(policyPath);
+  policy.publicNpmPackageVersion = safeVersion;
+  policy.releaseMode = 'npm-public-release-ready';
+  policy.requiredBeforePublishing = [];
+  policy.npm = {
+    ...policy.npm,
+    publish: true,
+    registry: policy.npm?.registry ?? null,
+    access: 'public',
+    tag: safeTag,
+    packages: [PUBLIC_NPM_PACKAGE_NAME],
+  };
+  policy.publishedPackageSmoke = {
+    ...policy.publishedPackageSmoke,
+    packageName: PUBLIC_NPM_PACKAGE_NAME,
+    version: safeVersion,
+  };
+  await writeJson(policyPath, policy);
+
+  return {
+    version: safeVersion,
+    tag: safeTag,
+  };
+}
+
+async function main() {
+  const [version, tag] = process.argv.slice(2);
+  if (!version || !tag) {
+    throw new Error('Usage: node scripts/update-public-release-version.mjs <version> <latest|next>');
+  }
+
+  const result = await updatePublicReleaseVersion(scriptRootDir(), version, tag);
+  process.stdout.write(`Updated ${PUBLIC_NPM_PACKAGE_NAME} release metadata to ${result.version} (${result.tag})\n`);
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  try {
+    await main();
+  } catch (error) {
+    process.stderr.write(`${error instanceof Error ? error.stack : String(error)}\n`);
+    process.exitCode = 1;
+  }
+}