@functional-systems/srcx 0.1.0-dev.4 → 0.1.0-dev.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/CHANGELOG.md +179 -0
  2. package/CONTRIBUTING.md +4 -0
  3. package/DESIGN.md +378 -58
  4. package/README.md +628 -35
  5. package/RELEASING.md +15 -3
  6. package/VALIDATION.md +1120 -16
  7. package/dist/artifact.d.ts +31 -0
  8. package/dist/artifact.js +237 -0
  9. package/dist/artifact.js.map +1 -0
  10. package/dist/build.d.ts +86 -3
  11. package/dist/build.js +233 -71
  12. package/dist/build.js.map +1 -1
  13. package/dist/chunk.d.ts +9 -3
  14. package/dist/chunk.js +341 -14
  15. package/dist/chunk.js.map +1 -1
  16. package/dist/cli.js +130 -21
  17. package/dist/cli.js.map +1 -1
  18. package/dist/file-policy.d.ts +20 -0
  19. package/dist/file-policy.js +103 -0
  20. package/dist/file-policy.js.map +1 -0
  21. package/dist/implementation.d.ts +11 -0
  22. package/dist/implementation.js +191 -0
  23. package/dist/implementation.js.map +1 -0
  24. package/dist/publish.d.ts +18 -0
  25. package/dist/publish.js +224 -46
  26. package/dist/publish.js.map +1 -1
  27. package/dist/releases.js +21 -3
  28. package/dist/releases.js.map +1 -1
  29. package/dist/remote.d.ts +1 -0
  30. package/dist/remote.js +50 -9
  31. package/dist/remote.js.map +1 -1
  32. package/dist/repository.d.ts +4 -1
  33. package/dist/repository.js +26 -11
  34. package/dist/repository.js.map +1 -1
  35. package/dist/rerank.d.ts +16 -0
  36. package/dist/rerank.js +87 -0
  37. package/dist/rerank.js.map +1 -0
  38. package/dist/search.d.ts +18 -3
  39. package/dist/search.js +143 -23
  40. package/dist/search.js.map +1 -1
  41. package/dist/skills.d.ts +24 -0
  42. package/dist/skills.js +155 -0
  43. package/dist/skills.js.map +1 -0
  44. package/package.json +17 -6
  45. package/runtime/grammars/README.md +50 -0
  46. package/runtime/grammars/tree-sitter-bash.LICENSE +21 -0
  47. package/runtime/grammars/tree-sitter-bash.wasm +0 -0
  48. package/runtime/grammars/tree-sitter-sql.LICENSE +21 -0
  49. package/runtime/grammars/tree-sitter-sql.wasm +0 -0
  50. package/runtime/grammars/tree-sitter-wasm.LICENSE +21 -0
  51. package/runtime/qwen.py +132 -0
  52. package/runtime/requirements.txt +34 -0
  53. package/skills/srcx-search/SKILL.md +103 -0
  54. package/src/artifact.ts +303 -0
  55. package/src/build.ts +313 -84
  56. package/src/chunk.ts +360 -12
  57. package/src/cli.ts +263 -23
  58. package/src/file-policy.ts +166 -0
  59. package/src/implementation.ts +253 -0
  60. package/src/publish.ts +321 -47
  61. package/src/releases.ts +36 -3
  62. package/src/remote.ts +70 -13
  63. package/src/repository.ts +40 -11
  64. package/src/rerank.ts +131 -0
  65. package/src/search.ts +229 -28
  66. package/src/skills.ts +205 -0
package/RELEASING.md CHANGED
@@ -2,6 +2,18 @@
2
2
 
3
3
  ## Current state
4
4
 
5
+ As of 2026-09-26, the verified `dev` package is `0.1.0-dev.17`, built from
6
+ `98be125d45128a9395544b0925df591c0da08b39` by the successful
7
+ [develop publication](https://github.com/lambdadb/srcx/actions/runs/36178586841).
8
+ The downloaded registry tarball matches its SHA-512 integrity and installed
9
+ `gitHead`. The npm provenance statement identifies the same commit, workflow
10
+ and run; inspecting that statement is separate from cryptographic verification
11
+ of its signature. See [first-use validation](VALIDATION.md#installed-dev-package-first-use)
12
+ for the clean consumer and live CLI checks. `dev` is mutable; these claims apply
13
+ to the exact version above, not future publications.
14
+
15
+ Bootstrap history:
16
+
5
17
  The initial `@functional-systems/srcx@0.1.0-dev.1` package was published publicly
6
18
  from reviewed commit `f94f947bf593b2f8498c07e130933b0ab444f868`. Its exact tarball
7
19
  passed clean-install and live LambdaDB checks. The local bootstrap has no GitHub
@@ -12,8 +24,8 @@ The package-specific Trusted Publisher is configured for `lambdadb/srcx` and
12
24
  `publish.yaml`, with direct publication allowed. `NPM_DEV_PUBLISH_ENABLED=true`.
13
25
  The first successful [OIDC publication](https://github.com/lambdadb/srcx/actions/runs/36035063463/attempts/3)
14
26
  produced `0.1.0-dev.3` from the same commit and moved `dev` to that version.
15
- Provenance identifies this repository, workflow, commit, and run. The current
16
- `latest` remains the bootstrap prerelease `0.1.0-dev.1`; it is not a stable release.
27
+ Provenance identifies this repository, workflow, commit, and run. At the September 26 registry check,
28
+ `latest` remained the bootstrap prerelease `0.1.0-dev.1`; it is not a stable release.
17
29
  See [VALIDATION.md](VALIDATION.md) for registry and consumer verification.
18
30
 
19
31
  This workflow follows [LambdaDB CLI](https://github.com/lambdadb/lambdadb-cli/blob/develop/RELEASING.md).
@@ -54,7 +66,7 @@ GitHub permissions and no LambdaDB service keys.
54
66
  Publication packs once, tests that exact tarball through a clean installation,
55
67
  and publishes the same file with provenance. Do not replace it with a repacked
56
68
  artifact after testing. The package includes runtime JavaScript, source maps and
57
- their source files, and public docs/license; it excludes tests, workflows,
69
+ their source files, the optional Qwen worker/requirements, and public docs/license; it excludes tests, workflows,
58
70
  scripts, `.env`, and `.srcx` state. Production dependencies supply the parser
59
71
  WASM assets; package tests exercise parsing with install scripts disabled.
60
72