chore(release): 0.9.2

[devin-ai-integration]

What and why

Release 0.9.2, cut from main (v0.9.1 plus the Windows-MSI hotfixes #752/#753) by cherry-picking the merges from develop that #908 asks for, together with the Python-client fixes and enhancements since v0.9.1. Closes #908.

From #908 — API JSON and Convert fixes:

• feat(export): name the standard library elements a converted model references (#731) #746 (Convert: name the standard-library elements a converted model references #731) a converted model names the standard-library elements it references
• feat(grpc): Convert takes the id form, as sysml -id does (#732) #749 (Convert RPC: choose the id form, as sysml -id does #732) Convert takes the id form
• feat(query): report the elementId Convert writes (#733) #747, fix(query): report each scoped element's own elementId (#793) #794 (Query: report the elementId Convert writes, so results join a converted graph #733) a query reports elementId, by declaration
• fix(export): first a then b owns its connector ends (#760) #761, fix(export): a bare assume, require or assert names its constraint by reference (#760) #789, fix: variant x is a VariantReference to x (#760) #790 (API JSON: first/then successions, assume/require references and variant references use other shapes than the grammar #760) succession ends, requirement-constraint references, variant references
• fix(check): conformance of an implicit subsetting (#726) #748 (Subsetting uniqueness conformance is not checked for an implicit subsetting #726) uniqueness and constancy conformance of implicit subsettings
• fix(export): a transition owns its source member and parameters; chained ends stay chains (#803) #805 (API JSON: a named transition omits its source member and parameter, and flattens a chained target #803) transition source member and parameter members
• fix(grpc): report the parser's warnings as the workspace does #751 the gRPC service reports parser warnings as the CLI does

Python client:

• fix(clients): download the release a client was built against when none is named #846 clients download and verify the release they were built against by default
• feat(rust): stamp each release's service digests into the published crate #849 Rust release digests stamped into the published crate
• feat(python): stamp the release's sysml-grpc digests into the wheel #860 a released opensysml wheel ships the digests of its own sysml-grpc binaries (pin_release_checksums.py --from-binaries in build-python-package)
• feat(python): generated metaclass classes and a standalone metamodel JSON reader #873 opensysml.metamodel generated metaclasses and opensysml.read_json
• docs(python): make the PyPI description a short readable introduction #905, folded by hand: the README PyPI renders is now the short install/quickstart page, and the full walkthrough moved to client/python/DEVELOPING.md. docs(clients): getting-started pages for every client and a generated Python API reference #854/docs(clients): address the client-docs review findings #866 (the docs/clients/python/ tree) are built on work not in this release, so the metamodel guide lands as docs/reference/python-metamodel.md and the README links point at the pages the site publishes from main.

Further fixes from develop that belong in a patch release (standalone, no feature coupling):

• fix(quantity): absorb MeasurementReferences::one as the identity of the unit product #756 0.7 [one] * 800 [W] keeps its unit: the dimension-one identity in quantity arithmetic
• fix(migrate): write an initial into an orthogonal region as that region's entry #763, fix(migrate): write no nonunique where the v2 usage must be unique; messages demo validates clean #795 SysML v1 migration: an orthogonal region's initial entry, and nonunique only where v2 allows it (the examples corpus digest in docs/project/pilot-differential-baseline.json updated accordingly)
• fix(repl): exit on Ctrl-C at an empty prompt, discard the continuation otherwise #802 Ctrl-C at an empty REPL prompt exits
• the four fix(export) commits of fix(export): load sysml-toolkit API JSON exports and accept JSON model files #876 (load sysml-toolkit api-json exports, preserve toolkit API JSON round trips, refuse named flow ends in a flow head, preserve kindless API JSON returns), completing feat(export): name the standard library elements a converted model references (#731) #746's library-reference work on the import side; the .json-model loading feature in the same PR is not taken

Fixed on the branch (both bugs exist on develop too; the hunks are self-contained so a main → develop back-merge carries them, otherwise they want a follow-up PR against develop):

• initialEndsAgree (internal/translate/export/behavior.go) accepted a succession whose connector end has no ReferenceSubsetting/sysml:references target, so first a then b could be reconstructed from the source/target feature alone; it now refuses with an UnsupportedError. Regression test TestFirstThenWithAnUntargetedEndIsRefused.
• The metamodel reader's _convert (client/python/opensysml/metamodel/_runtime.py) followed an @id reference on a property whose range is a primitive or an enumeration and returned the referenced element where a str/bool/enum was declared; it now raises MalformedValue. Regression tests in test_metamodel_reader.py.

SonarCloud scrub of the findings that develop's inventory places in code this release carries (the release branch itself is not scanned — the scan runs in CircleCI on main/develop only): cognitive complexity in tools/gen/pymetamodel/main.go (helpers index, computeEffective, c3Merge, …) and in binary.py (_cached_binary, _unavailable_details), duplicated literals in tools/gen/ontology/main.go and pin_release_checksums.py, seven pytest.raises blocks narrowed to one raising statement. Two triaged in sonar-project.properties with rationale: the generated metamodel/_generated.py joins the generated-code exclusions, and python:S8495 on binary.py (one candidate tag for a stable release, two spellings for a prerelease — deliberate). The Makefile also gained the ontology-table-check/python-metamodel-check recipes CI calls, which the cherry-picks had left behind.

Performance record: docs/project/performance-release-0.9.2-vs-0.9.1.md — every benchmark package on both revisions (six counts each, benchstat), rows left in doubt re-run interleaved, and whole-binary wall time/RSS on the generated, example and Apollo 11 models. Parity: no row regresses once interleaved; the model loader allocates +0.4–0.7% bytes per element; the binary is 128 KiB larger.

Release mechanics, per docs/project/releasing.md: VERSION = "0.9.2", @openmbee/opensysml and its five platform packages, the Java poms, editors/cameo/editors/syson/editors/vscode, and the Rust crate all at 0.9.2 with lockfiles regenerated; the 26 changelog fragments folded into the 0.9.2 — 2026-10-05 entry.

Not included, and why: develop features that only touch the Python surface in passing (#768 migrate, #773 explore, #777 unbounded ints, #906 ExecuteState trace); the spec-tightening rules (#750, #771, #817, #818, #868, #891, #897, #898), each of which makes previously accepted models error; the runtime fixes that sit on explore (#776, #784, #808, #811, #826, #831, #852, #864); #769 (migrator HTML cross-references, +1856 lines of new machinery and a stdlib-snapshot change); the Rust/Java/Julia/Node/MATLAB client hardening (#778, #779, #780, #785, #786), which conflicts throughout because it sits on client work absent from 0.9.1; and #810, whose JSON-RPC and Java fixes target code (internal/frontend/jsonrpc, the Connection.checked path) this release does not have — Sonar's analyzer reports no S2095 on the release's Connection.java.

How it was verified

After the added fixes: gofmt -l ., go build ./..., go vet ./..., make lint, go test -count=1 ./..., the corpus gates with all four corpora required (OPENSYSML_REQUIRE_TRAINING_CORPUS, _PILOT_CORPORA, _PSSM_SUITE, _PILOT_LIBRARY_XMI) over tests/corpus, tests/identity, tests/export and internal/translate/export, the pilot-differential provenance test in tools, make ontology-table-check python-metamodel-check, pytest client/python/tests/ (1317 passed, 123 skipped), scripts/check-doc-links.py, scripts/check-doc-ids.py, mkdocs build --strict.

Before them, on the first revision: On the branch: gofmt -l ., go build ./..., go vet ./..., make lint, go test -race -count=1 ./... (internal/exec/runtime and tests/model re-run with -timeout 40m, as CI's 30m budget allows; both pass), go test ./tests/corpus -run 'TestTrainingExamples|TestPilotCorpora|TestCorpusGates', make ontology-table-check python-metamodel-check, pytest client/python/tests/ against a make build-grpc service (1317 passed, 123 skipped after the reader fix), mypy on the client, cargo check --tests in client/rust, check_version.py --tag v0.9.2 --editors, scripts/check-doc-links.py (0 broken), mkdocs build --strict. Python release packaging rehearsed with the exact CircleCI build-python-package step bodies: the wheel pins the five service digests, an installed wheel downloads and verifies its own release without sigstore, tampered and unpinned downloads are refused.

After merge: wait for the main SonarCloud scan's quality gate, then tag v0.9.2 on main, then merge main back into develop. Note that CircleCI has run no pipeline on main since 2026-09-17 (the v0.9.1 merge did not start one; tag pipelines do run), so the main scan needs the project's branch-build setting changed or a pipeline triggered by hand.

Checklist

• make test and make lint pass locally
• Tests added or updated for the change
• Documentation extended where it already covers the surface (see CONTRIBUTING.md)
• Changelog entry added as changes/unreleased/<slug>.<section>.md, not as an edit to CHANGELOG.md — release branch: fragments folded with scripts/changelog.py release 0.9.2
• baselines regenerated and make docs-counts run if a gate count moved (compliance rows need nothing: the census is counted at docs build)
• No internal work-item labels (waves, slices, F4, K5) in the body, docs, or changelog

Link to Devin session: https://nasa-jpl-demo.devinenterprise.com/sessions/46106c5b519c430188ace045438d71b0
Open in Devin Desktop: https://nasa-jpl-demo.devinenterprise.com/desktop/session/46106c5b519c430188ace045438d71b0?variant=devin
Requested by: @HuiJun

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring