@nm-lang/cli 0.6.0 → 0.7.1

package/README.md

@@ -3,7 +3,31 @@
 N/M 0.2.0 Preview command-line tools for running, formatting, linting, testing,
 exporting and managing local N/M workspaces.
 
-Package **0.6.0** targets the N/M **0.2.0** language contract.
+CLI package **0.7.1** retains Core **0.7.0** and the N/M **0.2.0** language contract.
+
+## 0.7.1 Python build security / Python üretim güvenliği
+
+This CLI patch ships the Python source build-backend correction to setuptools
+84.1.0. The repository's isolated wheel tooling uses wheel 0.46.2. Python 3.10+,
+runtime dependencies, permissions, scientific limits and licenses are unchanged.
+`nm --version --json` reports `cliPackageVersion` separately; `packageVersion`
+and `corePackageVersion` retain the Core runtime identity. `nm doctor` accepts
+a same-train CLI patch while still rejecting Core/language/protocol drift.
+
+Bu CLI yaması Python kaynak build backend'ini setuptools 84.1.0'a günceller;
+deponun izole wheel araçları wheel 0.46.2 kullanır. Python 3.10+, çalışma zamanı
+bağımlılıkları, izinler, bilimsel sınırlar ve lisanslar korunur. JSON sürüm
+çıktısında `cliPackageVersion` CLI'yi; `packageVersion` ve `corePackageVersion`
+Core'u gösterir. Doctor, aynı seride CLI yamasını kabul eder; Core/dil/protokol
+uyuşmazlıklarını reddetmeye devam eder.
+
+## 0.7.0 training numerics / Eğitim sayısal işlemleri
+
+Core 0.7.0 adds first-order Hermitian exponential H/time derivatives, finite/analytic block QNG, shared-evaluation gradient covariance, deterministic stateful GD/momentum/Adam/QNG checkpoints and past-covariance shot allocation. Language 0.2.0, explicit permissions and scientific limits remain. Analytic QNG is initially flat/noiseless; sampled checkpoint continuation is rejected. Covariance allocation is a heuristic within the existing total budget.
+
+Türkçe: Matris üstel türevi, blok/analitik QNG, gradyan kovaryansı, deterministik durumlu devam ve önceki kovaryansla ölçüm dağılımı eklendi. İzinler ve sınırlar korunur; kayıt izin vermez, sonlu ölçümle devam desteklenmez ve daha düşük hata garantisi yoktur. Normal editör Run ayrı kalır.
+
+See [Quantum AI](https://quantumsoftware.tech/en/quantum-ai) and the [public documentation](https://quantumsoftware.tech/en/docs/nm-language). Registry availability is separate from this package version.
 
 ## Install / Kurulum
 
@@ -21,12 +45,12 @@ npx --package=@nm-lang/cli nm --version
 ```
 
 An untagged install selects npm's `latest` channel. To pin this version,
-append `@0.6.0` to the package name. The N/M language remains
+append `@0.7.1` to the package name. The N/M language remains
 Preview independently of the npm channel. npm installs the matching Core dependency.
 No repository checkout or TypeScript build is needed to use a published package.
 
 Türkçe: Etiketsiz kurulum npm'in `latest` kanalını seçer.
-`@0.6.0` ile sürümü sabitleyebilirsiniz. N/M dili, npm kanalından bağımsız
+`@0.7.1` ile sürümü sabitleyebilirsiniz. N/M dili, npm kanalından bağımsız
 olarak Önizleme durumundadır. Core bağımlılığı otomatik kurulur; depoyu
 indirmeniz gerekmez.
 

package/bin/nm.mjs

@@ -32,7 +32,7 @@ if (cliArgs[0] === "bridge") {
   const { nmVersionManifest } = await import("../dist/version.js");
   process.stdout.write(
     cliArgs.includes("--json")
-      ? `${JSON.stringify(nmVersionManifest, null, 2)}\n`
+      ? `${JSON.stringify(cliVersionReport(nmVersionManifest), null, 2)}\n`
       : `N/M ${nmVersionManifest.languageVersion} (${nmVersionManifest.stability})\n`,
   );
 } else {
@@ -130,12 +130,25 @@ if (cliArgs[0] === "bridge") {
     });
   } else {
     const result = runNMCLI(cliArgs, runOptions);
+    if ((cliArgs[0] === "--version" || cliArgs[0] === "version") && cliArgs.includes("--json") && result.exitCode === 0) {
+      result.stdout = [JSON.stringify(cliVersionReport(JSON.parse(result.stdout.join("\n"))), null, 2)];
+    }
     if (result.stdout.length > 0) process.stdout.write(`${result.stdout.join("\n")}\n`);
     if (result.stderr.length > 0) process.stderr.write(`${result.stderr.join("\n")}\n`);
     process.exitCode = result.exitCode;
   }
 }
 
+// Core's packageVersion keeps its existing meaning. Read this executable's own
+// distribution metadata, never a package.json supplied by the working directory.
+function cliVersionReport(manifest) {
+  const cli = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+  if (cli.name !== "@nm-lang/cli" || typeof cli.version !== "string" || !/^\d+\.\d+\.\d+(?:-[\da-zA-Z.-]+)?$/.test(cli.version)) {
+    throw new Error("Invalid N/M CLI distribution metadata.");
+  }
+  return { ...manifest, cliPackageVersion: cli.version, corePackageVersion: manifest.packageVersion };
+}
+
 function getWorkspaceIndex(entryPath) {
   const cacheKey = path.resolve(entryPath);
   const cached = workspaceCache.get(cacheKey);