@aphrody/yolo-core 0.0.0-stage → 1.0.0

package/README.md

@@ -1,3 +1,79 @@
-# Temporary Holding Version
+# YOLO Core Library (`@aphrody/yolo-core`)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Native Bun owners shared by the Yolo CLI, MCP server and HTTP API. Public subpaths
+cover `sys`, `vfs`, `vendor`, `runtime`, `verify`, `server`, `mcp`, `fleet`,
+`scaffold`, `curation`, `coord`, `distribution`, `host`, `units`, `ledger`,
+`monitor`, `redis`, `gemma4` and `pm`.
+
+## Unified dependency synchronization
+
+The `pm` owner implements the first dependency-acquisition tranche of the
+Bun/uv/Cargo manager requested in [GOAL](../../GOAL.md). It detects manifests,
+requires existing locks and installed global binaries, and returns a read-only
+preflight by default. Applying a ready plan runs each manager sequentially under
+the existing native runtime supervisor. Cargo uses Aphrody's serialization wrapper.
+
+```ts
+import { planPackageSync, syncPackages } from "@aphrody/yolo-core/pm";
+
+const controller = new AbortController();
+const plan = await planPackageSync({ root: "/path/to/project", offline: true });
+const result = await syncPackages({
+  root: plan.root,
+  offline: true,
+  apply: true,
+  signal: controller.signal,
+});
+```
+
+The same operation is available through `yolo mcp` as `yolo_package_sync` and
+through `POST /api/tools/call` on `yolo api`:
+
+```json
+{
+  "name": "yolo_package_sync",
+  "arguments": { "path": ".", "managers": "bun,uv,cargo", "offline": true, "apply": false }
+}
+```
+
+Bun uses `--frozen-lockfile --ignore-scripts`; uv uses `--locked` and disables
+Python downloads; Cargo uses `fetch --locked`. Authentication and shared caches
+remain with their existing owners. Failed preflight applies nothing; a failed
+manager stops subsequent managers. Native process ownership handles timeout and
+cancellation. Apply needs an installed compatible native runtime. The initial
+qualified platform is Linux x64; Windows descendant ownership remains open.
+
+Add/remove/update operations, tool installation, engine selection, builds and
+publication are outside this tranche. Lock creation belongs to the native manager;
+missing or stale locks are reported instead of silently regenerated.
+
+## Transport and persistence contracts
+
+MCP and HTTP share tool definitions and argument validation; OpenAPI comes from
+one owner. Each transport retains its Redis stores. HTTP file operations contain
+both resolved paths and symlink targets within the workspace. HTTP mutation
+requests honor configured tokens and reject untrusted browser origins.
+
+`RedisVectorStore` persists copied Float32 vectors with validated dimensions,
+metadata and cosine KNN filtering. Its exact search reads candidates in O(N);
+it does not implement a Redis Search ANN index. `RedisTrainDb` persists validated
+instruction/triple records and reports type/split counts. Pending offline writes,
+deletes and clears reconcile on reconnect; the memory overlay is volatile across
+process restarts. `persistenceState` and `sync()` expose that distinction.
+
+Gemma profiles and memory estimates are explicitly unverified repository profiles.
+Formatting is a text template, not a numeric tokenizer. `UnifiedInferenceEngine`
+uses configured OpenAI-compatible providers for inference, incremental SSE and
+`/embeddings`; errors propagate without simulated success. Local/OpenAI backends
+require an endpoint, and mock inference requires explicit injection. No model
+weights, tokenizer, native numerical inference or training are qualified here.
+Text vector search requires an injected real embedder; callers can also supply
+`queryVector` directly. The deterministic embedding utility is synthetic.
+
+Monitors honor configured intervals, serialize cycles/probes and drain on stop.
+Tests use explicit beacon paths, disposable repositories and isolated Redis/HTTP
+servers. Scan fingerprints cover raw bytes in stable order; ledger fingerprints
+cover file content. Vendor status reads complete refs, including packed refs and
+worktrees; generated catalogs distinguish source and host-runtime revisions.
+
+Evidence: [package-manager qualification](../../docs/package-manager-2026-10-04.json).

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "@aphrody/yolo-core",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Unified core library for YOLO, modeled directly after Bun's core library architecture",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aphrody-labs/aphrody.git",
+    "directory": "packages/engine/core"
+  },
+  "files": [
+    "src"
+  ],
+  "type": "module",
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./sys": "./src/sys/index.ts",
+    "./vfs": "./src/vfs/index.ts",
+    "./vendor": "./src/vendor/index.ts",
+    "./runtime": "./src/runtime/index.ts",
+    "./verify": "./src/verify/index.ts",
+    "./server": "./src/server/index.ts",
+    "./edge-proxy": "./src/server/edge-proxy.ts",
+    "./mcp": "./src/mcp/index.ts",
+    "./fleet": "./src/fleet/index.ts",
+    "./scaffold": "./src/scaffold/index.ts",
+    "./curation": "./src/curation/index.ts",
+    "./coord": "./src/coord/index.ts",
+    "./distribution": "./src/distribution/index.ts",
+    "./units": "./src/units/index.ts",
+    "./gemma4": "./src/gemma4/index.ts",
+    "./redis": "./src/redis/index.ts",
+    "./host": "./src/host/index.ts",
+    "./ledger": "./src/ledger/index.ts",
+    "./monitor": "./src/monitor/index.ts",
+    "./pm": "./src/pm/index.ts",
+    "./compiler": "./src/compiler/index.ts",
+    "./python": "./src/python/index.ts",
+    "./workspace": "./src/workspace/index.ts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "bun test test/core.test.ts test/units.test.ts test/ledger.test.ts test/host-config.test.ts test/redis_monitor.test.ts test/startup.test.ts test/gemma4.test.ts test/gemma4-inference.test.ts test/redis_vector.test.ts test/redis_native.test.ts test/core-transport.test.ts test/vfs-consistency.test.ts test/ledger-content.test.ts test/vendor-status.test.ts test/vendor-catalog.test.ts test/package-manager.test.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@aphrody/runtime-sdk": "0.1.0",
+    "@oxc-project/types": "0.152.0"
+  },
+  "engines": {
+    "bun": ">=1.4.2"
+  }
+}

package/src/compiler/index.ts

@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: MIT
+export * from "./oxc.ts";
+export {
+  NativeTooling,
+  scanNodeProject,
+  findNewlinesUtf16,
+  probeNativeTooling,
+  closeNativeTooling,
+  type NativeToolingOptions,
+  type NativeToolingProbe,
+  type ScanNodeProjectOptions,
+  type NodeProjectFinding,
+  type NodeProjectReport,
+} from "./native.ts";

package/src/compiler/native.ts

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: MIT
+export * from "@aphrody/runtime-sdk/tooling";

package/src/compiler/oxc.ts

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: MIT
+import type { Program } from "@oxc-project/types";
+import { parseProgram as nativeParseProgram } from "./native.ts";
+
+/** Oxc runs only in the shared native provider. Bun owns ordinary transformation/bundling. */
+export { analyzeModule, formatSource, minifySource, lintSource } from "./native.ts";
+export type { ModuleAnalysis } from "./native.ts";
+export type * from "@oxc-project/types";
+
+/** Oxc's official JSON representation leaves runtime BigInt/RegExp values null. */
+export type ESTreeJson<T> = T extends bigint | RegExp
+  ? null
+  : T extends readonly (infer Item)[]
+    ? ESTreeJson<Item>[]
+    : T extends object
+      ? { [Key in keyof T]: ESTreeJson<T[Key]> }
+      : T;
+export type ESTreeProgram = ESTreeJson<Program>;
+
+/** Official ESTree JSON, without a second N-API parser instance. */
+export function parseProgram(source: string, filename = "input.js"): ESTreeProgram {
+  return nativeParseProgram<ESTreeProgram>(source, filename);
+}