release: v0.5.4 — docx entity-expansion DoS + negotiate exit codes

Version bump (pyproject + __version__) and CHANGELOG for the source-audit
fixes already on main (commit 41fd1f3).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: DrBaher

CHANGELOG.md

@@ -2,6 +2,23 @@
 
 ## [Unreleased]
 
+## [0.5.4] - 2026-06-03
+
+Security/robustness fixes from a follow-up source audit.
+
+### Fixed
+- **Security (P1): `.docx` entity-expansion (billion-laughs) DoS.** A malicious
+  `.docx` whose `word/document.xml` declares a `DOCTYPE`/`<!ENTITY>` is now rejected
+  before parsing via a new stdlib `_safe_xml_fromstring` (raises `ET.ParseError`, so
+  callers treat it like any other malformed XML). The package stays stdlib-only.
+- **Negotiation load now maps to the documented exit codes.** Unsupported schema
+  version → `2`, hash-chain mismatch → `3` (previously a bare `SystemExit(string)` →
+  exit 1); a valid-but-empty `rounds` list is rejected with a precise structured error
+  instead of an `IndexError`; `negotiate validate` reports a hash-chain mismatch as `3`
+  and schema/structural failures as `2`.
+- **`generate-office-script` find-replace pack** read routed through `_read_text_file`
+  so a missing file returns the documented exit `4`, not `2`.
+
 ## [0.5.3] - 2026-05-31
 
 Headline: source-level security and robustness hardening from an external source audit — eliminates a command-injection vector in the negotiation finalize hook, removes the remaining raw-traceback crash paths (with a top-level backstop so no command can leak a stack trace), and tolerates malformed/pathological playbook regex.

nda_review_cli.py

@@ -18,7 +18,7 @@
 from xml.etree import ElementTree as ET
 from rule_engine import clause_hit, red_flag_hits
 
-__version__ = "0.5.3"
+__version__ = "0.5.4"
 
 
 def _load_json_file(path, label="file"):

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nda-review-cli"
-version = "0.5.3"
+version = "0.5.4"
 description = "Local-first NDA review, drafting, and two-party negotiation CLI: deterministic rules + optional second-pass LLM adjudication via Anthropic, OpenAI, Ollama, or any OpenAI-compatible endpoint. Part of the contract-ops CLI suite."
 readme = "README.md"
 requires-python = ">=3.9"