npm - @numairbaseer/scifcode - Versions diffs - 0.2.0 → 0.3.0 - Mend

@numairbaseer/scifcode 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/README.md +54 -3
package/package.json +4 -3
package/sbom/SHA256SUMS +1 -0
package/sbom/SHA256SUMS.sigstore.json +1 -0
package/sbom/scifcode-0.3.0-all-platforms.cdx.json +677 -0
package/src/cli.js +2 -8
package/src/code-usage.js +86 -0
package/src/constants.js +2 -2
package/src/run-runtime.js +34 -3

package/README.md CHANGED Viewed

@@ -2,7 +2,7 @@
 Scifcode is the user-facing configuration wrapper for the Scifcode coding agent powered by Poolside Laguna.
-This v0.1 is intentionally small: it installs one global `scifcode` command, configures the Scifcode runtime to use Laguna, and launches the coding agent with Scifcode defaults.
+It installs one global `scifcode` command, configures the Scifcode runtime to use Laguna, and launches the coding agent with Scifcode defaults.
 ## Install
@@ -21,6 +21,50 @@ Supported runtime packages cover:
 - Windows: arm64 and x64
 - baseline x64 builds for CPUs without AVX2
+## Offline install and update
+Each `v*` GitHub release includes platform archives containing a standalone
+`scifcode` launcher and its pinned `scifcode-runtime`. The target machine does
+not need Node.js, Bun, npm, or network access.
+Transfer the archive, the versioned offline `SHA256SUMS` file, and its
+`.sigstore.json` bundle through the approved media process. Verify the signed
+checksum manifest and the archive, then extract it and run the included
+installer:
+```bash
+cosign verify-blob scifcode-0.3.0-offline-SHA256SUMS \
+  --bundle scifcode-0.3.0-offline-SHA256SUMS.sigstore.json \
+  --certificate-identity \
+    https://github.com/numairbaseer/scifcode/.github/workflows/release-cli.yml@refs/tags/v0.3.0 \
+  --certificate-oidc-issuer https://token.actions.githubusercontent.com
+sha256sum -c scifcode-0.3.0-offline-SHA256SUMS
+tar -xzf scifcode-0.3.0-linux-x64-baseline.tar.gz
+cd scifcode-0.3.0-linux-x64-baseline
+./install.sh
+```
+On Windows, extract the archive and run:
+```powershell
+.\install.ps1
+```
+Installing a newer archive performs an offline update. Versions are retained
+under the installation root so an administrator can restore an earlier
+version. Unix installs default to `~/.local/share/scifcode`; Windows installs
+default to `%LOCALAPPDATA%\Programs\Scifcode`.
+The release workflow signs every offline archive and the release-level
+checksum manifest with a keyless Sigstore certificate tied to the tagged
+GitHub Actions workflow. It verifies every signature before publishing the
+release assets; no long-lived signing key is required.
+Publish the matching `runtime-vX.Y.Z` runtime release before tagging the CLI as
+`vX.Y.Z`. The CLI workflow downloads the exact platform runtime package pinned
+in `package.json`, compiles the launcher, and attaches the completed offline
+archives to the CLI release.
 ## Log in
 Authenticate once through the Scifcode control-plane portal. The CLI opens a
@@ -67,8 +111,8 @@ This happens before the runtime launches, so no separate initialization command
 | --- | ---: | --- | --- |
 | `SCIFCODE_CONTROL_PLANE_URL` | no | `http://localhost:8080` | Alternative to `login --control-plane`; useful for managed installation and automation |
 | `SCIFCODE_SESSION_TOKEN` | no | stored login session | Ephemeral process override for the control-plane session |
-| `SCIFCODE_CONTEXT_WINDOW` | no | `32768` | Context window reported for `scifcode-1.0` |
-| `SCIFCODE_MAX_TOKENS` | no | `8192` | Maximum output tokens reported for `scifcode-1.0` |
+| `SCIFCODE_CONTEXT_WINDOW` | no | `32768` | Context window reported for `scifcoder-1.0` |
+| `SCIFCODE_MAX_TOKENS` | no | `8192` | Maximum output tokens reported for `scifcoder-1.0` |
 | `SCIFCODE_RUNTIME_BIN` | no | installed platform package | Override path to a compiled Scifcode runtime binary |
 | `SCIFCODE_SOURCE_DIR` | no | adjacent `../scifcode` | Development-only path to the Scifcode source fork |
 | `SCIFCODE_BUN_BIN` | no | auto-detected | Development-only Bun executable used to run the fork from source |
@@ -126,6 +170,13 @@ Scifcode launches the installed platform runtime directly with argument arrays
 and does not use shell string execution. Bun/source execution remains available
 only as a local-development fallback.
+For usage analytics, Scifcode snapshots the Git working tree when an agent
+session starts and reports the aggregate number of added and deleted lines when
+the session ends. The snapshot uses an isolated temporary Git index, so staged,
+unstaged, and untracked work that existed before the session is preserved and
+excluded from the count. Source code and file names are never sent to the
+control plane.
 ## Third-party notices
 Scifcode uses third-party open-source software internally. See `THIRD_PARTY_NOTICES.md`.

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@numairbaseer/scifcode",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Scifcode: a coding CLI agent powered by Poolside Laguna.",
   "type": "module",
   "repository": {
@@ -18,17 +18,18 @@
     "bin",
     "src",
     "assets",
+    "sbom",
     "README.md",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md"
   ],
   "scripts": {
     "test": "node --test",
-    "lint": "node --check bin/scifcode.js && node --check src/cli.js && node --check src/constants.js && node --check src/control-plane-auth.js && node --check src/env-config.js && node --check src/ensure-scifcode-config.js && node --check src/paths.js && node --check src/run-runtime.js",
+    "lint": "node --check bin/scifcode.js && node --check src/cli.js && node --check src/code-usage.js && node --check src/constants.js && node --check src/control-plane-auth.js && node --check src/env-config.js && node --check src/ensure-scifcode-config.js && node --check src/paths.js && node --check src/run-runtime.js",
     "prepack": "npm test && npm run lint"
   },
   "dependencies": {
-    "@numairbaseer/scifcode-runtime": "0.2.0"
+    "@numairbaseer/scifcode-runtime": "0.3.0"
   },
   "engines": {
     "node": ">=22.19.0"

package/sbom/SHA256SUMS ADDED Viewed

	@@ -0,0 +1 @@
1	+ 0cffa66b37db6ac57f8674c4333a7d7538f1fa8c1290073b53f5daaf5e45bc78 scifcode-0.3.0-all-platforms.cdx.json

package/sbom/SHA256SUMS.sigstore.json ADDED Viewed

@@ -0,0 +1 @@

+ {"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2670340931","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1788228290","inclusionPromise":{"signedEntryTimestamp":"MEYCIQCNThOoX9+RP8aK+xIGZCAig0S90RsmalBfsMzZ9xtLuAIhALwurxlXxal0mHGdmIi4VXbddgFPwPkStcaOrMQGZfFF"},"inclusionProof":{"logIndex":"2548436669","rootHash":"YoAnB5VLJUYhx8XLqMqhUBIj2NCaSWnDxbCJW0WMcwA=","treeSize":"2548436688","hashes":["MHpRHAfk9ew2epuavTPtp55QwT/aYkHD4O+1VMyhekY=","uEK78hAhOJYtxzGucUdhvLIcru8aTSgt2Pvr/ocsOPo=","WKMTJCh9xSA0JlvsC2pkxsROsyTLrXOkTFJRxhF/Ml4=","xCEM/MXK/TMOydPcTPTi3HN1C/k22ZuniihkVskaoGk=","VIGKZ4THxvJ0K+6Jzw75JVxxUWl+mDau2BjSC/yRjg8=","fwEheFWEE6If6/2zr00OBc47rcn5x7UK5o/iY2kgDbY=","Dg3J/nrjcbfDFZ95U3E2k+MigcpD0rTYzyIIUzvmKxg=","DfYNZ8ZruiXAOuQwlMedsYnaK8/QftEZ+XdioF06AkI=","yxm1n7WV1D9Ocx/PAatNvrH4sPbKRT7G2fC1Tk/KuI0=","iDGA2apU6OrdVY64HuuevCjq1OLTD0dTNjzpAHUzjIE=","teOA0aoFI4b4vp2Yey4S54m0vCXTtmwt4iFnHHiCKNg=","p07sZPiNhS3OKedAe6eZnpNiY4alN/6vFHSwmzD+XeM=","0x+NthETNYNp/FuWTune0hSsB75R/jw5TVMLuguVBt0=","xyOt2GKNFZJCSWNl1S4wKoCid/PFKOYR1XcNE/ZPkJ8=","zY/PhpISrIBFRZyHncbk1o+GE9n0L8P+0JwBnaBs+FM=","88k9bhVfFtycpvkQKEbIw1Ql9DnXkT/cvWFa/NEgXeQ=","fABv5KbTDQGTSJg+5k8zHZQKwnOUQHo6srePRzgEpf8=","ddECIA46kQzLbMwjR1L9WCHUWrsqVGYIgRiw6XlG1xs=","0HfdxDt/zGugZLIuHasrdLEW9s8OaTykSSqBEDFQXdw=","SndbMKVtcTenAkwi2JBfGzD+mhexp1qJbRIY+A1JRIU=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2548436688\nYoAnB5VLJUYhx8XLqMqhUBIj2NCaSWnDxbCJW0WMcwA=\n\n— rekor.sigstore.dev wNI9ajBEAiB+YTa7sjFBaarIcZvV7b36/lJ0nwj/myPeMUdBCSjhnQIgMuZQ1wTHTz4vCb/hvbTruX7javMh4EvWa754FbK3MvA=\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJmNmZhODJkZjE4Zjg3ZGJkOWFlOTY4MWQxMGQxNjI5ZjA5NGE1M2ZiNmMzOWQzNGUyNWMyMWYxMTAxMzQ3OWMzIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJUURqblppcWF3L1hTS0VoSlEvNmQ2bUJqaEJnTWx2R1piOWhWWWVGdVh0SnJRSWdOazBZUEVMbGRyQ1o3amdjVXpjSmJ5b0RzMURqeVd0RzQrS0lzdGlORUxnPSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVaFNla05EUW5NeVowRjNTVUpCWjBsVlRuSTBhRmRJYnpaVUwyUkRjRkF4TkhBdlVDOVdia3RWUkdSWmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDlVUVhoTlJFbDNUa1JSTlZkb1kwNU5hbGwzVDFSQmVFMUVTWGhPUkZFMVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZpWW5aS2IxRlVRMmQ2TUZOa2NEaERTWFJCVFVoR2F6UlVaV3BLUVVKWk9XMUxWWFlLYTBkcmJUaFdZM2d3Tm0xNU1EZERNelFyVUVjeVJ6WTBOVkVyV0d4R01IUjVWMEp1WTJocVFsQnVSMlZCVTFsUll6WlBRMEpsZDNkbloxaHZUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlZzT1dwSENtZG5NVzVOWTBKUGNsa3ZUemRwU0hkd05tNXdZVGRKZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJGUldVUldVakJTUVZGSUwwSkdPSGRZV1ZwaVlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERJMU1XSlhSbkJqYlVwb1l6SldiQXBqYVRsNldUSnNiVmt5T1d0YVV6aDFXakpzTUdGSVZtbE1NMlIyWTIxMGJXSkhPVE5qZVRsNVdsZDRiRmxZVG14TVYwNXpZVk0xTldKWGVFRmpiVlp0Q21ONU9UQlpWMlI2VEROWmQweHFUWFZOUkVFMVFtZHZja0puUlVWQldVOHZUVUZGUWtKRGRHOWtTRkozWTNwdmRrd3pVblpoTWxaMVRHMUdhbVJIYkhZS1ltNU5kVm95YkRCaFNGWnBaRmhPYkdOdFRuWmlibEpzWW01UmRWa3lPWFJOUWtsSFEybHpSMEZSVVVKbk56aDNRVkZKUlVKSVFqRmpNbWQzVG1kWlN3cExkMWxDUWtGSFJIWjZRVUpCZDFGdlQxZFNhRTlFVFRWTlYxVXlXV3BOZDFwcVZYcGFhbFpxV2tkTk5GcEVaR2xOTWxKb1dXcEdiVmt5UlRSTk1scHRDazVIVFROTmVrRnFRbWR2Y2tKblJVVkJXVTh2VFVGRlJVSkNWbE5hVjNoc1dWaE9iRWxHVGtSVFZWbG5VVEk1YTFwVFFrUlVSV3QzU1hkWlMwdDNXVUlLUWtGSFJIWjZRVUpDVVZGV1ltNVdkRmxYYkhsWmJVWjZXbGRXZVV3elRtcGhWMXBxWWpKU2JFMUNORWREYVhOSFFWRlJRbWMzT0hkQlVWbEZSVWhLYkFwYWJrMTJaRWRHYm1ONU9USk5RelI2VEdwQmQwOTNXVXRMZDFsQ1FrRkhSSFo2UVVKRFFWRjBSRU4wYjJSSVVuZGplbTkyVEROU2RtRXlWblZNYlVacUNtUkhiSFppYmsxMVdqSnNNR0ZJVm1sa1dFNXNZMjFPZG1KdVVteGlibEYxV1RJNWRFMUhjMGREYVhOSFFWRlJRbWMzT0hkQlVXdEZXRkY0WW1GSVVqQUtZMGhOTmt4NU9XNWhXRkp2WkZkSmRWa3lPWFJNTWpVeFlsZEdjR050U21oak1sWnNZMms1ZWxreWJHMVpNamxyV2xNNGRWb3liREJoU0ZacFRETmtkZ3BqYlhSdFlrYzVNMk41T1hsYVYzaHNXVmhPYkV4WFRuTmhVelUxWWxkNFFXTnRWbTFqZVRrd1dWZGtla3d6V1hkTWFrMTFUVVJCTkVKbmIzSkNaMFZGQ2tGWlR5OU5RVVZMUWtOdlRVdEViR3RaVkdkNlQxUkdiRTV0U1hwTlIxa3hUVEpaTVZreVVtcFBSMUV6V1dwT2ExbFhTWGhhYlU1b1QwUk9iVnBxVW1vS1RucE5kMGhSV1V0TGQxbENRa0ZIUkhaNlFVSkRkMUZRUkVFeGJtRllVbTlrVjBsMFlVYzVlbVJIVm10TlJHZEhRMmx6UjBGUlVVSm5OemgzUVZGM1JRcExaM2R2WVVoU01HTklUVFpNZVRsdVlWaFNiMlJYU1hWWk1qbDBUREkxTVdKWFJuQmpiVXBvWXpKV2JHTnBPWHBaTW14dFdUSTVhMXBVUVRSQ1oyOXlDa0puUlVWQldVOHZUVUZGVGtKRGIwMUxSR3hyV1ZSbmVrOVVSbXhPYlVsNlRVZFpNVTB5V1RGWk1sSnFUMGRSTTFscVRtdFpWMGw0V20xT2FFOUVUbTBLV21wU2FrNTZUWGRKUVZsTFMzZFpRa0pCUjBSMmVrRkNSR2RSVTBSQ1FubGFWMXA2VEROU2FGb3pUWFprYWtGMVRYazBkMDFDYjBkRGFYTkhRVkZSUWdwbk56aDNRVkU0UlVSQmQwdE5WRTB3VG1wVk1VMVVWWGxPUkVGMlFtZHZja0puUlVWQldVOHZUVUZGVVVKRFJVMUlNbWd3WkVoQ2VrOXBPSFphTW13d0NtRklWbWxNYlU1MllsTTVkV1JYTVdoaFdFcHBXVmhPYkZwWVNYZEhRVmxMUzNkWlFrSkJSMFIyZWtGQ1JWRlJTMFJCWjNoTmFsa3pUMFJCTWs5RVFuSUtRbWR2Y2tKblJVVkJXVTh2VFVGRlUwSkdNRTFYTW1nd1pFaENlazlwT0haYU1td3dZVWhXYVV4dFRuWmlVemwxWkZjeGFHRllTbWxaV0U1c1dsaEpkZ3BqTWs1d1dtMU9kbHBIVlhaTWJXUndaRWRvTVZscE9UTmlNMHB5V20xNGRtUXpUWFpqYlZaeldsZEdlbHBUTVdwaVIydDFaVmN4YzFGSVNteGFiazEyQ21SSFJtNWplVGt5VFVNMGVreHFRWGRQUVZsTFMzZFpRa0pCUjBSMmVrRkNSWGRSY1VSRFp6VmFSMFUwVFhwcmVGcFVXbWxOZWtKdFRsUk9iVTVYVG1zS1dYcG9hMDR5U1hwYVIwWnBUVmRhYWxsVVozcGFiVmt3V1hwamVrMUNVVWREYVhOSFFWRlJRbWMzT0hkQlVsRkZRbWQzUldOSVZucGhSRUpqUW1kdmNncENaMFZGUVZsUEwwMUJSVlpDUlRSTlZFZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZtbE1iVTUyWWxNNWRXUlhNV2hoV0VwcFdWaE9iRnBZU1haak1rNXdDbHB0VG5aYVIxVjJXVmRPTUdGWE9YVmplVGw1WkZjMWVreDZUWHBPUkZsNFRWUlZlRTFFU1hsTU1rWXdaRWRXZEdOSVVucE1la1YzUm5kWlMwdDNXVUlLUWtGSFJIWjZRVUpHWjFGS1JFRmtkMk50YkRKWldGSnNUVUpOUjBOcGMwZEJVVkZDWnpjNGQwRlNZMFZDVVhkRVltNUNkRTFGTkVkRGFYTkhRVkZSUWdwbk56aDNRVkpuUlZGQmR5dGpiVlozWW5wd2RXUlhNV2hoV0VwcFdWaE9iRnBZU2tGTlZFa3lUbnBuZDA1cVozWmpNazV3V20xT2RscEhWa0ZOVkUwd0NrNXFWVEZOVkZWNVRrUndiR0p1V25CamJUbDFZbGRXZFdSRWNIVmpSekIzWjFselIwTnBjMGRCVVZGQ01XNXJRMEpCU1VWbVVWSTNRVWhyUVdSM1JHUUtVRlJDY1hoelkxSk5iVTFhU0doNVdscDZZME52YTNCbGRVNDBPSEptSzBocGJrdEJUSGx1ZFdwblFVRkJZVUpoZEd0U1VVRkJRVVZCZDBKSlRVVlpRd3BKVVVRMlUyTnRWVFZPWmtsRWJGUndUM0YwVDJSTloxRklZVGhyTldVdlFUYzFOMWR1VERsaFdFZEhjbkJCU1doQlRraHBNVVIzWm1kRVVWbHZaVVI0Q2xWQk1IZFNORmRSY0c5cGFGTkZSVEY2VERST2FETmFaWFozTm1WTlFXOUhRME54UjFOTk5EbENRVTFFUVRKblFVMUhWVU5OUnpSb1drbE5ZWGxITlU4S2QxbEVPVGt6VGtZM1ltTkJWV2t4VGk5blFsWlJVRWxOSzNKT2FHOWxValZ0Y1ZNNVNIcDFibHBtUmpSVFJuRnlXamw0VFhGUlNYaEJTelZ5YUZkRFFncG1OREJrT1Zsd1JYQnlZMFpPUkVodEswTXZVWGxGUlZSR2RFRTBZMGgzV0hjNU4zSm5iVWRrVW5ZdmExSk5lVnBuZWxwU1EwUmFPVVZSUFQwS0xTMHRMUzFGVGtRZ1EwVlNWRWxHU1VOQlZFVXRMUzB0TFFvPSJ9fX19"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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"}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"9vqC3xj4fb2a6WgdENFinwlKU/tsOdNOJcIfEQE0ecM="},"signature":"MEUCIQDjnZiqaw/XSKEhJQ/6d6mBjhBgMlvGZb9hVYeFuXtJrQIgNk0YPELldrCZ7jgcUzcJbyoDs1DjyWtG4+KIstiNELg="}}

package/sbom/scifcode-0.3.0-all-platforms.cdx.json ADDED Viewed

@@ -0,0 +1,677 @@
+{
+  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.6",
+  "version": 1,
+  "metadata": {
+    "tools": {
+      "components": [
+        {
+          "type": "application",
+          "name": "npm",
+          "version": "12.0.2"
+        },
+        {
+          "type": "library",
+          "name": "cyclonedx-library",
+          "group": "@cyclonedx",
+          "version": "10.2.0",
+          "author": "Jan Kowalleck",
+          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
+          "licenses": [
+            {
+              "license": {
+                "id": "Apache-2.0"
+              }
+            }
+          ],
+          "externalReferences": [
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
+              "type": "issue-tracker",
+              "comment": "as detected from PackageJson property \"bugs.url\""
+            },
+            {
+              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
+              "type": "vcs",
+              "comment": "as detected from PackageJson property \"repository.url\""
+            },
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
+              "type": "website",
+              "comment": "as detected from PackageJson property \"homepage\""
+            }
+          ],
+          "properties": [
+            {
+              "name": "cdx:npm:package:constraint:engine:node",
+              "value": ">=20.18.0"
+            }
+          ]
+        },
+        {
+          "type": "application",
+          "name": "cyclonedx-npm",
+          "group": "@cyclonedx",
+          "version": "6.0.0",
+          "author": "Jan Kowalleck",
+          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
+          "licenses": [
+            {
+              "license": {
+                "id": "Apache-2.0"
+              }
+            }
+          ],
+          "externalReferences": [
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
+              "type": "issue-tracker",
+              "comment": "as detected from PackageJson property \"bugs.url\""
+            },
+            {
+              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
+              "type": "vcs",
+              "comment": "as detected from PackageJson property \"repository.url\""
+            },
+            {
+              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
+              "type": "website",
+              "comment": "as detected from PackageJson property \"homepage\""
+            }
+          ],
+          "properties": [
+            {
+              "name": "cdx:npm:package:constraint:engine:node",
+              "value": ">=20.18.0"
+            },
+            {
+              "name": "cdx:npm:package:constraint:engine:npm",
+              "value": ">=9"
+            }
+          ]
+        }
+      ]
+    },
+    "component": {
+      "type": "application",
+      "name": "scifcode",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0",
+      "description": "Scifcode: a coding CLI agent powered by Poolside Laguna.",
+      "licenses": [
+        {
+          "license": {
+            "name": "Proprietary",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode@0.3.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fnumairbaseer%2Fscifcode.git",
+      "externalReferences": [
+        {
+          "url": "https://github.com/numairbaseer/scifcode/issues",
+          "type": "issue-tracker",
+          "comment": "as detected from PackageJson property \"bugs.url\""
+        },
+        {
+          "url": "git+https://github.com/numairbaseer/scifcode.git",
+          "type": "vcs",
+          "comment": "as detected from PackageJson property \"repository.url\""
+        },
+        {
+          "url": "https://github.com/numairbaseer/scifcode#readme",
+          "type": "website",
+          "comment": "as detected from PackageJson property \"homepage\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:constraint:engine:node",
+          "value": ">=22.19.0"
+        },
+        {
+          "name": "cdx:npm:package:path",
+          "value": ""
+        }
+      ]
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ]
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "scifcode-runtime-darwin-arm64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-arm64/-/scifcode-runtime-darwin-arm64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "cc4b0857e0e62538c0c9ce34560685159db5ec69ca5b9ad25e98c30729ab24569c0aeff2b4df37eaa919a7c3509313fe86b93fde9682c401fc9e08311762c3d5"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-darwin-arm64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-darwin-x64-baseline",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64-baseline/-/scifcode-runtime-darwin-x64-baseline-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "e55ec7e050f6a4f6a2868ee51140409e66f3a8c0383ad32db95f841771e3f9ca08313529c9d8b764b6ed00f64ea35b9c03a2e7f599a34f4192b0b8c09ebde120"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-darwin-x64-baseline"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-darwin-x64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64/-/scifcode-runtime-darwin-x64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "d7f72ddbd03fb0516b14e96a42a9b8ccb9ac7c20a01184e8e7ec7591bab18e41a7b174375437917ba07a84eb9118801bc75b932dc755d1b2ac436970b7568b71"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-darwin-x64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-arm64-musl",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64-musl/-/scifcode-runtime-linux-arm64-musl-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "af627809b8f33bff762606a36669a0c1ce5f093292be497bcd05400d8d81de8ba7eb49c0a13a1ee25063eabf71f3eee70073832e616fd5cef2d7b535aeb28d54"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-arm64-musl"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-arm64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64/-/scifcode-runtime-linux-arm64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "8f89ed9a7f37e3227041f28eb84973eeced9e06d72b596d82aa6fe1ad1726ca85d75056f186cce8c6d43f2f6173ce5e5874ecf42e73c9edf204c465dfbe6cca0"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-arm64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-x64-baseline-musl",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline-musl/-/scifcode-runtime-linux-x64-baseline-musl-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "e72ebb235bb27a5f7831843a4c9dc2074a87cb8272193f191b4a10be932100744441a200df1f43300b2f21a57fe0aa943d155efd78dd5db0e0e76f9793bd9096"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-x64-baseline-musl"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-x64-baseline",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline/-/scifcode-runtime-linux-x64-baseline-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "630587b514cdb40bc2d985366da7cd111098a36690eb159eafec1855b89cf54c0b78bce43032b3f520485382a5b476554eae3b9acc2bf810865736e9101b40fa"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-x64-baseline"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-x64-musl",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-musl/-/scifcode-runtime-linux-x64-musl-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "0c5157cf534e1a2dabe508e0802306a00a264d05da3294e6b577e76976d782f78e447bba1d2a63e8442dfb0e824c020f5be3fcfd27e76848a872712a0de44a5d"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-x64-musl"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-linux-x64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64/-/scifcode-runtime-linux-x64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "9af6c05e64e6466a09405b7225953f25475a26f4adac7919b57311f8acaf5d2ccd610510ef6be8e32f529cf51ac4e684dfb027764a19548940e9b8fa9dd04a15"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-linux-x64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-windows-arm64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-arm64/-/scifcode-runtime-windows-arm64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "72ccf3a6301c8dbb89db7c3c1b830516774fcc37af907c15e4f7aa0932bf07c3579c33e09775ffd8d431579e79ae0e1d1484485083b605f4a5f1f4e654edb40c"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-windows-arm64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-windows-x64-baseline",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64-baseline/-/scifcode-runtime-windows-x64-baseline-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "24a9128da5b85709eb94f6ea6c728eb557aefee65221ac13891b68e312c39c0f61abb5d835d95614bd804c6424d11daebe9a13098befa2d57e8857cc452f1bb3"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-windows-x64-baseline"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime-windows-x64",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0",
+      "scope": "optional",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64/-/scifcode-runtime-windows-x64-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "532aa3e20824a694c764827b93e28103f6b0ea4c795800e78e1f64815b186be367f341616436ad24b576d7550f7b1d71d379476f0d8c9da78febb8acd4ba97a5"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime-windows-x64"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "scifcode-runtime",
+      "group": "@numairbaseer",
+      "version": "0.3.0",
+      "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0",
+      "licenses": [
+        {
+          "license": {
+            "id": "MIT",
+            "acknowledgement": "declared"
+          }
+        }
+      ],
+      "purl": "pkg:npm/%40numairbaseer/scifcode-runtime@0.3.0",
+      "externalReferences": [
+        {
+          "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime/-/scifcode-runtime-0.3.0.tgz",
+          "type": "distribution",
+          "hashes": [
+            {
+              "alg": "SHA-512",
+              "content": "808cf270df03cd8cca0b0755ef12680f2e31ee56e4621bbdef0ad600973783c81f25fdd59c4223dac99c7c59e481b2a5116304cbd166496b3108eefc52425571"
+            }
+          ],
+          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
+        }
+      ],
+      "properties": [
+        {
+          "name": "cdx:npm:package:path",
+          "value": "node_modules/@numairbaseer/scifcode-runtime"
+        }
+      ]
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0",
+      "dependsOn": [
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0"
+      ]
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0"
+    },
+    {
+      "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0",
+      "dependsOn": [
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
+        "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0"
+      ]
+    }
+  ]
+}

package/src/cli.js CHANGED Viewed

@@ -1,10 +1,8 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
 import { ensureScifcodeConfig } from "./ensure-scifcode-config.js";
 import { loadScifcodeEnv } from "./env-config.js";
 import { runRuntime } from "./run-runtime.js";
 import { login, logout, whoami } from "./control-plane-auth.js";
+import packageJson from "../package.json" with { type: "json" };
 export function printHelp(stdout = console.log) {
   stdout(`Scifcode - coding CLI agent powered by Poolside Laguna
@@ -30,11 +28,7 @@ Private config files:
 }
 export function getPackageVersion() {
-  const currentFile = fileURLToPath(import.meta.url);
-  const srcDir = path.dirname(currentFile);
-  const packagePath = path.join(srcDir, "..", "package.json");
-  const pkg = JSON.parse(fs.readFileSync(packagePath, "utf8"));
-  return pkg.version;
+  return packageJson.version;
 }
 function createConsoleWriters(stdout, stderr) {

package/src/code-usage.js ADDED Viewed

@@ -0,0 +1,86 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+function runGit(args, options = {}) {
+  const result = (options.spawnSyncFn || spawnSync)("git", args, {
+    cwd: options.cwd,
+    env: options.env,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    throw new Error(String(result.stderr || "Git command failed.").trim());
+  }
+  return String(result.stdout || "").trim();
+}
+function snapshotWorkingTree(repoDir, options = {}) {
+  const temporaryDir = fs.mkdtempSync(path.join(options.tmpDir || os.tmpdir(), "scifcode-git-index-"));
+  const indexPath = path.join(temporaryDir, "index");
+  const env = { ...(options.env || process.env), GIT_INDEX_FILE: indexPath };
+  try {
+    try {
+      runGit(["read-tree", "HEAD"], { ...options, cwd: repoDir, env });
+    } catch {
+      runGit(["read-tree", "--empty"], { ...options, cwd: repoDir, env });
+    }
+    runGit(["add", "-A"], { ...options, cwd: repoDir, env });
+    return runGit(["write-tree"], { ...options, cwd: repoDir, env });
+  } finally {
+    fs.rmSync(temporaryDir, { recursive: true, force: true });
+  }
+}
+function countChangedLines(numstat) {
+  return numstat.split("\n").reduce((total, line) => {
+    if (!line) return total;
+    const [added, deleted] = line.split("\t");
+    const additions = Number.parseInt(added, 10);
+    const deletions = Number.parseInt(deleted, 10);
+    return total
+      + (Number.isNaN(additions) ? 0 : additions)
+      + (Number.isNaN(deletions) ? 0 : deletions);
+  }, 0);
+}
+export function createCodeUsageReporter(options = {}) {
+  const cwd = options.cwd || process.cwd();
+  let repoDir;
+  let startingTree;
+  try {
+    repoDir = runGit(["rev-parse", "--show-toplevel"], { ...options, cwd });
+    startingTree = snapshotWorkingTree(repoDir, options);
+  } catch {
+    return null;
+  }
+  const eventId = (options.randomUUIDFn || crypto.randomUUID)();
+  return {
+    eventId,
+    async report() {
+      const endingTree = snapshotWorkingTree(repoDir, options);
+      const numstat = runGit(["diff", "--no-ext-diff", "--numstat", startingTree, endingTree], {
+        ...options,
+        cwd: repoDir,
+        env: options.env || process.env
+      });
+      const linesChanged = countChangedLines(numstat);
+      const response = await (options.fetchFn || fetch)(`${options.controlPlaneUrl}/usage/code`, {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${options.sessionToken}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({ eventId, linesChanged })
+      });
+      if (!response.ok) {
+        throw new Error(`Control-plane request failed: HTTP ${response.status}`);
+      }
+      return { eventId, linesChanged };
+    }
+  };
+}

package/src/constants.js CHANGED Viewed

@@ -1,7 +1,7 @@
 export const DEFAULT_PROVIDER_NAME = "scifcode";
 export const DEFAULT_CONTROL_PLANE_URL = "http://localhost:8080";
-export const DEFAULT_MODEL = "scifcode-1.0";
-export const DEFAULT_MODEL_NAME = "scifcode-1.0";
+export const DEFAULT_MODEL = "scifcoder-1.0";
+export const DEFAULT_MODEL_NAME = "scifcoder-1.0";
 export const DEFAULT_CONTEXT_WINDOW = 32768;
 export const DEFAULT_MAX_TOKENS = 8192;
 export const SESSION_TOKEN_ENV_NAME = "SCIFCODE_SESSION_TOKEN";

package/src/run-runtime.js CHANGED Viewed

@@ -3,8 +3,9 @@ import os from "node:os";
 import path from "node:path";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
-import { DEFAULT_MODEL, DEFAULT_PROVIDER_NAME, SESSION_TOKEN_ENV_NAME } from "./constants.js";
+import { DEFAULT_MODEL, DEFAULT_PROVIDER_NAME, SESSION_TOKEN_ENV_NAME, getControlPlaneUrl } from "./constants.js";
 import { readSession } from "./control-plane-auth.js";
+import { createCodeUsageReporter } from "./code-usage.js";
 function executableOnPath(name, env = process.env) {
   return String(env.PATH || "").split(path.delimiter).map(dir => path.join(dir, name)).find(fs.existsSync);
@@ -25,12 +26,21 @@ function findInstalledRuntime(options = {}) {
   }
 }
+function findBundledRuntime(options = {}) {
+  const runtimePlatform = options.platform || process.platform;
+  const binaryName = runtimePlatform === "win32" ? "scifcode-runtime.exe" : "scifcode-runtime";
+  const candidate = path.join(path.dirname(options.execPath || process.execPath), binaryName);
+  return fs.existsSync(candidate) ? candidate : undefined;
+}
 export function resolveRuntime(options = {}) {
   const env = options.env || process.env;
   if (env.SCIFCODE_RUNTIME_BIN) {
     if (!fs.existsSync(env.SCIFCODE_RUNTIME_BIN)) throw new Error(`SCIFCODE_RUNTIME_BIN does not exist: ${env.SCIFCODE_RUNTIME_BIN}`);
     return { command: env.SCIFCODE_RUNTIME_BIN, argsPrefix: [], source: "binary" };
   }
+  const bundledBin = findBundledRuntime(options);
+  if (bundledBin) return { command: bundledBin, argsPrefix: [], source: "binary" };
   const installedBin = findInstalledRuntime(options);
   if (installedBin) return { command: installedBin, argsPrefix: [], source: "package" };
   const sourceDir = env.SCIFCODE_SOURCE_DIR || defaultSourceDir();
@@ -86,6 +96,7 @@ export function buildRuntimeEnv(env = process.env, options = {}) {
   const runtimeEnv = { ...env };
   if (!runtimeEnv[SESSION_TOKEN_ENV_NAME]) {
     const session = (options.readSessionFn || readSession)({ homeDir: options.homeDir });
+    options.onSession?.(session);
     const expiresAt = session?.expiresAt ? Date.parse(session.expiresAt) : Number.POSITIVE_INFINITY;
     if (session?.sessionToken && expiresAt > Date.now()) {
       runtimeEnv[SESSION_TOKEN_ENV_NAME] = session.sessionToken;
@@ -105,18 +116,38 @@ export function runRuntime(userArgs = [], options = {}) {
   const env = options.env || process.env;
   const stderr = options.stderr || console.error;
   const exit = options.exit || process.exit;
-  const runtimeEnv = buildRuntimeEnv(env, options);
+  let storedSession;
+  const runtimeEnv = buildRuntimeEnv(env, {
+    ...options,
+    onSession: session => { storedSession = session; }
+  });
   if (!validateSession(runtimeEnv)) { printMissingSession(stderr); exit(1); return null; }
   let runtime;
   try { runtime = (options.resolveRuntimeFn || resolveRuntime)({ env }); }
   catch (error) { stderr("Failed to resolve the Scifcode agent runtime."); stderr(error.message); exit(1); return null; }
   const projectDir = options.cwd || process.cwd();
+  let codeUsageReporter;
+  try {
+    codeUsageReporter = (options.createCodeUsageReporterFn || createCodeUsageReporter)({
+      cwd: projectDir,
+      env: runtimeEnv,
+      sessionToken: runtimeEnv[SESSION_TOKEN_ENV_NAME],
+      controlPlaneUrl: storedSession?.controlPlaneUrl || getControlPlaneUrl(env),
+      fetchFn: options.fetchFn
+    });
+  } catch (error) {
+    stderr(`Could not start Git diff tracking: ${error.message}`);
+  }
   const child = (options.spawnFn || spawn)(runtime.command, buildRuntimeArgs(userArgs, runtimeEnv, runtime, projectDir), {
     stdio: "inherit",
     env: runtimeEnv,
     cwd: runtime.cwd || projectDir
   });
-  child.on("exit", code => exit(code ?? 0));
+  child.on("exit", code => {
+    Promise.resolve(codeUsageReporter?.report())
+      .catch(error => stderr(`Could not report code usage: ${error.message}`))
+      .finally(() => exit(code ?? 0));
+  });
   child.on("error", error => { stderr("Failed to launch Scifcode."); stderr(error.message); exit(1); });
   return child;
 }