@izagood/avcs 0.4.0 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api/repo.d.ts +17 -2
- package/dist/api/repo.d.ts.map +1 -1
- package/dist/api/repo.js +70 -13
- package/dist/api/repo.js.map +1 -1
- package/dist/core/bytes.d.ts +7 -0
- package/dist/core/bytes.d.ts.map +1 -0
- package/dist/core/bytes.js +14 -0
- package/dist/core/bytes.js.map +1 -0
- package/dist/mcp/server.d.ts +11 -1
- package/dist/mcp/server.d.ts.map +1 -1
- package/dist/mcp/server.js +32 -3
- package/dist/mcp/server.js.map +1 -1
- package/dist/merge/merge3.d.ts.map +1 -1
- package/dist/merge/merge3.js +3 -1
- package/dist/merge/merge3.js.map +1 -1
- package/dist/reducer/reducer.d.ts +5 -4
- package/dist/reducer/reducer.d.ts.map +1 -1
- package/dist/reducer/reducer.js +44 -8
- package/dist/reducer/reducer.js.map +1 -1
- package/dist/release/sbom.d.ts +1 -1
- package/dist/release/sbom.d.ts.map +1 -1
- package/dist/release/sbom.js +5 -2
- package/dist/release/sbom.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sbom.d.ts","sourceRoot":"","sources":["../../src/release/sbom.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAiB,MAAM,qBAAqB,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,
|
|
1
|
+
{"version":3,"file":"sbom.d.ts","sourceRoot":"","sources":["../../src/release/sbom.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAiB,MAAM,qBAAqB,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAyBrD"}
|
package/dist/release/sbom.js
CHANGED
|
@@ -8,11 +8,14 @@ import { sha256hex } from "../core/canonical.js";
|
|
|
8
8
|
export function generateSbom(files) {
|
|
9
9
|
const components = [];
|
|
10
10
|
for (const f of [...files].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0))) {
|
|
11
|
-
|
|
11
|
+
// Hash the raw bytes so binary files are addressed accurately. For text the
|
|
12
|
+
// utf8 byte hash equals the previous string hash, so text-only SBOMs do not
|
|
13
|
+
// regress. (sha256hex accepts Uint8Array; Buffer is a Uint8Array.)
|
|
14
|
+
components.push({ type: "file", name: f.path, hash: sha256hex(f.bytes) });
|
|
12
15
|
// Declared dependencies from a package.json count as library components.
|
|
13
16
|
if (f.path.endsWith("package.json")) {
|
|
14
17
|
try {
|
|
15
|
-
const pkg = JSON.parse(f.
|
|
18
|
+
const pkg = JSON.parse(f.bytes.toString("utf8"));
|
|
16
19
|
for (const [name, version] of Object.entries({ ...pkg.dependencies, ...pkg.devDependencies }).sort())
|
|
17
20
|
components.push({ type: "library", name, version });
|
|
18
21
|
}
|
package/dist/release/sbom.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sbom.js","sourceRoot":"","sources":["../../src/release/sbom.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,EAAE;AACF,oFAAoF;AACpF,kFAAkF;AAClF,kFAAkF;AAClF,kBAAkB;AAElB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAQjD,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,UAAU,GAAoB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,
|
|
1
|
+
{"version":3,"file":"sbom.js","sourceRoot":"","sources":["../../src/release/sbom.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,EAAE;AACF,oFAAoF;AACpF,kFAAkF;AAClF,kFAAkF;AAClF,kBAAkB;AAElB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAQjD,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,UAAU,GAAoB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,4EAA4E;QAC5E,4EAA4E;QAC5E,mEAAmE;QACnE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1E,yEAAyE;QACzE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAG9C,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE;oBAClG,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACpE,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@izagood/avcs",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.5.0",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "Agentic Version Control System — an AI-native VCS where intent, session, operation, evidence and decision are first-class objects and code is a materialized projection of an operation graph.",
|
|
6
6
|
"license": "Apache-2.0",
|