diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9358d25e..0a3d2ace 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.9.5
+
+### Fixes
+
+- Include `deprecation.js` and `deprecation.d.ts` in npm package bundle (was missing from `files` in package.json)
+
 ## 0.9.4
 
 ### API and core
diff --git a/README.md b/README.md
index 5bdbea94..89506bc1 100644
--- a/README.md
+++ b/README.md
@@ -234,4 +234,4 @@ Framework adapters for signing AI outputs with zero infrastructure:
 
 ---
 
-v0.9.4 | [Apache-2.0 OR MIT](./LICENSE-APACHE) | [Third-Party Notices](./THIRD-PARTY-NOTICES)
+v0.9.5 | [Apache-2.0 OR MIT](./LICENSE-APACHE) | [Third-Party Notices](./THIRD-PARTY-NOTICES)
diff --git a/binding-core/Cargo.toml b/binding-core/Cargo.toml
index 55bc9868..63cda914 100644
--- a/binding-core/Cargo.toml
+++ b/binding-core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacs-binding-core"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 resolver = "3"
@@ -19,7 +19,7 @@ attestation = ["jacs/attestation"]
 pq-tests = []
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs" }
+jacs = { version = "0.9.5", path = "../jacs" }
 serde_json = "1.0"
 base64 = "0.22.1"
 serde = { version = "1.0", features = ["derive"] }
diff --git a/jacs-cli/Cargo.toml b/jacs-cli/Cargo.toml
index ecfd29e6..734f1cd7 100644
--- a/jacs-cli/Cargo.toml
+++ b/jacs-cli/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacs-cli"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 description = "JACS CLI: command-line interface for JSON AI Communication Standard"
@@ -22,8 +22,8 @@ mcp = ["dep:jacs-mcp"]
 attestation = ["jacs/attestation"]
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs" }
-jacs-mcp = { version = "0.9.4", path = "../jacs-mcp", features = ["mcp", "full-tools"], optional = true }
+jacs = { version = "0.9.5", path = "../jacs" }
+jacs-mcp = { version = "0.9.5", path = "../jacs-mcp", features = ["mcp", "full-tools"], optional = true }
 clap = { version = "4.5.4", features = ["derive", "cargo"] }
 rpassword = "7.3.1"
 reqwest = { version = "0.13.2", default-features = false, features = ["blocking", "json", "rustls"] }
diff --git a/jacs-cli/README.md b/jacs-cli/README.md
index 8c29cadd..7e8b1e2e 100644
--- a/jacs-cli/README.md
+++ b/jacs-cli/README.md
@@ -71,4 +71,4 @@ The MCP server uses stdio transport only (no HTTP) for security.
 - [MCP Integration](https://humanassisted.github.io/JACS/integrations/mcp.html)
 - [JACS core library on crates.io](https://crates.io/crates/jacs)
 
-v0.9.4 | [Apache 2.0 with Common Clause](../LICENSE)
+v0.9.5 | [Apache 2.0 with Common Clause](../LICENSE)
diff --git a/jacs-duckdb/Cargo.toml b/jacs-duckdb/Cargo.toml
index 130b9a2d..ecbff111 100644
--- a/jacs-duckdb/Cargo.toml
+++ b/jacs-duckdb/Cargo.toml
@@ -13,7 +13,7 @@ keywords = ["cryptography", "json", "duckdb", "storage"]
 categories = ["database", "data-structures"]
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs", default-features = false }
+jacs = { version = "0.9.5", path = "../jacs", default-features = false }
 duckdb = { version = "1.4", features = ["bundled", "json"] }
 serde_json = "1.0"
 
diff --git a/jacs-mcp/Cargo.toml b/jacs-mcp/Cargo.toml
index 27f31709..f028bb74 100644
--- a/jacs-mcp/Cargo.toml
+++ b/jacs-mcp/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacs-mcp"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 description = "MCP server for JACS: data provenance and cryptographic signing of agent state"
@@ -45,8 +45,8 @@ tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["fmt", "env-filter"] }
 rmcp = { version = "0.12", features = ["client", "server", "transport-io", "transport-child-process", "macros"], optional = true }
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "process", "time"], optional = true }
-jacs = { version = "0.9.4", path = "../jacs", default-features = true }
-jacs-binding-core = { version = "0.9.4", path = "../binding-core", features = ["a2a"] }
+jacs = { version = "0.9.5", path = "../jacs", default-features = true }
+jacs-binding-core = { version = "0.9.5", path = "../binding-core", features = ["a2a"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 schemars = "1.0"
diff --git a/jacs-mcp/contract/jacs-mcp-contract.json b/jacs-mcp/contract/jacs-mcp-contract.json
index 38ef15a4..6fceca6d 100644
--- a/jacs-mcp/contract/jacs-mcp-contract.json
+++ b/jacs-mcp/contract/jacs-mcp-contract.json
@@ -3,7 +3,7 @@
   "server": {
     "name": "jacs-mcp",
     "title": "JACS MCP Server",
-    "version": "0.9.4",
+    "version": "0.9.5",
     "website_url": "https://humanassisted.github.io/JACS/",
     "instructions": "This MCP server provides data provenance and cryptographic signing for agent state files and agent-to-agent messaging. Agent state tools: jacs_sign_state (sign files), jacs_verify_state (verify integrity), jacs_load_state (load with verification), jacs_update_state (update and re-sign), jacs_list_state (list signed docs), jacs_adopt_state (adopt external files). Memory tools: jacs_memory_save (save a memory), jacs_memory_recall (search memories by query), jacs_memory_list (list all memories), jacs_memory_forget (soft-delete a memory), jacs_memory_update (update an existing memory). Messaging tools: jacs_message_send (create and sign a message), jacs_message_update (update and re-sign a message), jacs_message_agree (co-sign/agree to a message), jacs_message_receive (verify and extract a received message). Agent management: jacs_create_agent (create new agent with keys), jacs_reencrypt_key (rotate private key password). A2A artifacts: jacs_wrap_a2a_artifact (sign artifact with provenance), jacs_verify_a2a_artifact (verify wrapped artifact), jacs_assess_a2a_agent (assess remote agent trust level). A2A discovery: jacs_export_agent_card (export Agent Card), jacs_generate_well_known (generate .well-known documents), jacs_export_agent (export full agent JSON). Trust store: jacs_trust_agent (add agent to trust store), jacs_untrust_agent (remove from trust store, requires JACS_MCP_ALLOW_UNTRUST=true), jacs_list_trusted_agents (list all trusted agent IDs), jacs_is_trusted (check if agent is trusted), jacs_get_trusted_agent (get trusted agent JSON). Attestation: jacs_attest_create (create signed attestation with claims), jacs_attest_verify (verify attestation, optionally with evidence checks), jacs_attest_lift (lift signed document into attestation), jacs_attest_export_dsse (export attestation as DSSE envelope). Security: jacs_audit (read-only security audit and health checks). Audit trail: jacs_audit_log (record events as signed audit entries), jacs_audit_query (search audit trail by action, target, time range), jacs_audit_export (export audit trail as signed bundle). Search: jacs_search (unified search across all signed documents)."
   },
diff --git a/jacs-postgresql/Cargo.toml b/jacs-postgresql/Cargo.toml
index 2375e5ed..1eef876d 100644
--- a/jacs-postgresql/Cargo.toml
+++ b/jacs-postgresql/Cargo.toml
@@ -13,7 +13,7 @@ keywords = ["cryptography", "json", "postgresql", "storage"]
 categories = ["database", "data-structures"]
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs", default-features = false }
+jacs = { version = "0.9.5", path = "../jacs", default-features = false }
 sqlx = { version = "0.8.6", default-features = false, features = ["runtime-tokio-rustls", "postgres"] }
 tokio = { version = "1.0", features = ["rt-multi-thread"] }
 serde_json = "1.0"
diff --git a/jacs-redb/Cargo.toml b/jacs-redb/Cargo.toml
index 7c691eca..c7ad0b46 100644
--- a/jacs-redb/Cargo.toml
+++ b/jacs-redb/Cargo.toml
@@ -13,7 +13,7 @@ categories.workspace = true
 description = "Redb (pure-Rust embedded KV) storage backend for JACS documents"
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs", default-features = false }
+jacs = { version = "0.9.5", path = "../jacs", default-features = false }
 redb = "3.1"
 chrono = "0.4.40"
 serde_json = "1.0"
diff --git a/jacs-surrealdb/Cargo.toml b/jacs-surrealdb/Cargo.toml
index 1e1a62fa..17173705 100644
--- a/jacs-surrealdb/Cargo.toml
+++ b/jacs-surrealdb/Cargo.toml
@@ -13,7 +13,7 @@ keywords = ["cryptography", "json", "surrealdb", "storage"]
 categories = ["database", "data-structures"]
 
 [dependencies]
-jacs = { version = "0.9.4", path = "../jacs", default-features = false }
+jacs = { version = "0.9.5", path = "../jacs", default-features = false }
 surrealdb = { version = "3.0.2", default-features = false, features = ["kv-mem"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
diff --git a/jacs/Cargo.toml b/jacs/Cargo.toml
index 1a27aa55..e29f152c 100644
--- a/jacs/Cargo.toml
+++ b/jacs/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacs"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 resolver = "3"
diff --git a/jacs/README.md b/jacs/README.md
index 32d96ff5..3e878b0b 100644
--- a/jacs/README.md
+++ b/jacs/README.md
@@ -91,4 +91,4 @@ jacs verify doc.json     # Verify a document
 - [Python](https://pypi.org/project/jacs/)
 - [Crates.io](https://crates.io/crates/jacs)
 
-**Version**: 0.9.4 | [HAI.AI](https://hai.ai)
+**Version**: 0.9.5 | [HAI.AI](https://hai.ai)
diff --git a/jacsgo/lib/Cargo.toml b/jacsgo/lib/Cargo.toml
index b3c4e236..7e35b90d 100644
--- a/jacsgo/lib/Cargo.toml
+++ b/jacsgo/lib/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacsgo"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 resolver = "3"
diff --git a/jacsnpm/Cargo.toml b/jacsnpm/Cargo.toml
index b759ff41..cca696ed 100644
--- a/jacsnpm/Cargo.toml
+++ b/jacsnpm/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacsnpm"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 resolver = "3"
diff --git a/jacsnpm/package.json b/jacsnpm/package.json
index 088bf28a..957faf32 100644
--- a/jacsnpm/package.json
+++ b/jacsnpm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hai.ai/jacs",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "description": "JACS (JSON Agent Communication Standard) - Data provenance and cryptographic signing for AI agents",
   "main": "index.js",
   "types": "index.d.ts",
@@ -194,6 +194,8 @@
     "langchain.js",
     "langchain.d.ts",
     "langchain.js.map",
+    "deprecation.js",
+    "deprecation.d.ts",
     "jacs.*.node",
     "scripts/install-cli.js",
     "bin/"
diff --git a/jacspy/Cargo.toml b/jacspy/Cargo.toml
index af488f9f..758eadaf 100644
--- a/jacspy/Cargo.toml
+++ b/jacspy/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jacspy"
-version = "0.9.4"
+version = "0.9.5"
 edition = "2024"
 rust-version = "1.93"
 resolver = "3"
diff --git a/jacspy/pyproject.toml b/jacspy/pyproject.toml
index 26b0a284..c2a7dbc9 100644
--- a/jacspy/pyproject.toml
+++ b/jacspy/pyproject.toml
@@ -3,7 +3,7 @@ requires = ["maturin>=1.0,<2.0"]
 build-backend = "maturin"       
 [project]
 name = "jacs"
-version = "0.9.4"
+version = "0.9.5"
 description = "JACS - JSON AI Communication Standard: Cryptographic signing and verification for AI agents."
 readme = "README.md"
 requires-python = ">=3.10"