@nekzus/liop 2.0.0-alpha.5 → 2.0.0-alpha.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +19 -0
  2. package/package.json +3 -5
  3. package/socket.yml +10 -0
package/README.md CHANGED
@@ -54,6 +54,25 @@ npm install @nekzus/liop@latest
54
54
 
55
55
  > **Requirements:** Node.js ≥ 20.0. The SDK uses `node:crypto`, `node:vm`, and `piscina` (worker threads) internally.
56
56
 
57
+ ### Zero-Bloat & Micro-Deployments (Opt-Out)
58
+
59
+ By default, the SDK provides out-of-the-box MCP backward compatibility (`LiopMcpBridge`) by declaring `@modelcontextprotocol/sdk` as an optional dependency (which is automatically resolved by standard installations of NPM, PNPM, or Yarn).
60
+
61
+ For constrained production environments (e.g., Docker, AWS Lambda, Edge/IoT) where every megabyte counts, you can perform a **pure, zero-bloat LIOP installation** by opting out of the optional dependencies:
62
+
63
+ ```bash
64
+ # npm
65
+ npm install @nekzus/liop@latest --no-optional
66
+
67
+ # pnpm
68
+ pnpm add @nekzus/liop@latest --without optional
69
+
70
+ # yarn
71
+ yarn add @nekzus/liop@latest --ignore-optional
72
+ ```
73
+
74
+ The SDK uses dynamic `import()` statements under the hood to ensure that MCP translator modules are only loaded if they are actually instantiated, guaranteeing a lightweight memory footprint.
75
+
57
76
  ---
58
77
 
59
78
  ## LIOP Agent (CLI)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nekzus/liop",
3
- "version": "2.0.0-alpha.5",
3
+ "version": "2.0.0-alpha.7",
4
4
  "description": "Official SDK for Logic-Injection-on-Origin Protocol (LIOP). Deploy Logic-on-Origin with WebAssembly at gRPC speed and bidirectional MCP compatibility.",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -11,7 +11,8 @@
11
11
  "files": [
12
12
  "dist",
13
13
  "README.md",
14
- "LICENSE"
14
+ "LICENSE",
15
+ "socket.yml"
15
16
  ],
16
17
  "exports": {
17
18
  ".": {
@@ -123,9 +124,7 @@
123
124
  "@libp2p/crypto": "^5.1.14",
124
125
  "@libp2p/identify": "^4.0.14",
125
126
  "@libp2p/kad-dht": "^16.1.7",
126
- "@libp2p/mplex": "^12.0.11",
127
127
  "@libp2p/peer-id": "^4.0.10",
128
- "@libp2p/peer-id-factory": "^4.0.10",
129
128
  "@libp2p/ping": "^3.0.12",
130
129
  "@libp2p/tcp": "^11.0.14",
131
130
  "@libp2p/websockets": "^10.1.7",
@@ -140,7 +139,6 @@
140
139
  "multiformats": "^13.4.2",
141
140
  "p-event": "^7.1.0",
142
141
  "piscina": "^5.1.4",
143
- "uint8arraylist": "^2.4.8",
144
142
  "uint8arrays": "^3.1.1",
145
143
  "zod": "^3.23.11",
146
144
  "zod-to-json-schema": "^3.24.1"
package/socket.yml ADDED
@@ -0,0 +1,10 @@
1
+ # Socket.dev Configuration File
2
+ # https://docs.socket.dev/docs/socket-yml
3
+ version: 2
4
+
5
+ # Supply Chain Security Policies
6
+ issueRules:
7
+ # Triage: Legitimate maintenance handover of jshttp libraries (type-is, content-type)
8
+ # to Blake Embrey is safe and verified. Ignore false positives on unstable ownership.
9
+ unstable-ownership:
10
+ action: ignore