@polycode-projects/the-mechanical-code-talker 5.0.7 → 5.0.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +15 -0
  2. package/package.json +3 -2
package/README.md CHANGED
@@ -1,5 +1,15 @@
1
1
  # tmct — The Mechanical Code Talker
2
2
 
3
+ [![npm version](https://img.shields.io/npm/v/@polycode-projects/the-mechanical-code-talker)](https://www.npmjs.com/package/@polycode-projects/the-mechanical-code-talker)
4
+ [![npm downloads](https://img.shields.io/npm/dm/@polycode-projects/the-mechanical-code-talker)](https://www.npmjs.com/package/@polycode-projects/the-mechanical-code-talker)
5
+ [![licence](https://img.shields.io/npm/l/@polycode-projects/the-mechanical-code-talker)](https://gitlab.com/polycode-projects/the-mechanical-code-talker/-/blob/main/LICENSE)
6
+ [![live demos](https://img.shields.io/badge/demos-tmct.polycode.co.uk-blue)](https://tmct.polycode.co.uk)
7
+
8
+ > Canonical home: [GitLab](https://gitlab.com/polycode-projects/the-mechanical-code-talker).
9
+ > Installs come from [npm](https://www.npmjs.com/package/@polycode-projects/the-mechanical-code-talker).
10
+ > The [GitHub repo](https://github.com/polycode-public/the-mechanical-code-talker) is a
11
+ > read-only mirror, synced hourly. Issues and merge requests go to GitLab.
12
+
3
13
  `@polycode-projects/the-mechanical-code-talker`
4
14
 
5
15
  A pure-JS, **no-LLM**, offline, **$0** chatbot in the ELIZA/PARRY lineage.
@@ -1499,6 +1509,11 @@ hardened:
1499
1509
  - A nightly **`npm audit` + OSV-Scanner** job watches dependencies.
1500
1510
  - Releases are published with **npm provenance** (`--provenance`).
1501
1511
 
1512
+ The npm tarball carries Sigstore-signed provenance naming the GitLab pipeline
1513
+ that built it. Every published version also gets a GitLab release tag pinned to
1514
+ the exact commit that pipeline ran against. Follow both and an install traces
1515
+ back to the source it was built from.
1516
+
1502
1517
  The content-address hash is single-sourced in `src/domain/hash.mjs`, so the
1503
1518
  cross-version-stable fact-id contract has exactly one definition.
1504
1519
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@polycode-projects/the-mechanical-code-talker",
3
- "version": "5.0.7",
3
+ "version": "5.0.8",
4
4
  "private": false,
5
5
  "type": "module",
6
6
  "description": "The Mechanical Code Talker (tmct) — a tolerant, offline, $0 chat surface that guides you toward precision queries about a software repository. ELIZA/PARRY-style but domain-obsessed with code. No model calls; indexes a repo on request (tmct index) or reads any producer's graph.",
@@ -96,6 +96,7 @@
96
96
  "check:readme": "TMCT_CHECK_README=1 node --disable-warning=ExperimentalWarning --test test-e2e/readme-examples.test.mjs",
97
97
  "e2e:browsers": "playwright install chromium",
98
98
  "gen:screenshots": "node scripts/gen-screenshots.mjs",
99
+ "gen:og-images": "node scripts/gen-og-images.mjs",
99
100
  "check:links": "node scripts/check-links.mjs",
100
101
  "check:pii": "node scripts/pii-lint.mjs",
101
102
  "check:pack": "node scripts/check-pack-manifest.mjs",
@@ -153,7 +154,7 @@
153
154
  "template:coverage": "node scripts/template-coverage.mjs",
154
155
  "audit": "npm audit --audit-level=high",
155
156
  "audit:fix": "npm audit fix",
156
- "demo:build": "node scripts/build-demo-site.mjs",
157
+ "demo:build": "node scripts/build-demo-site.mjs && node scripts/gen-og-images.mjs",
157
158
  "roll": "node scripts/roll.mjs",
158
159
  "build:ask-bundle": "node scripts/build-ask-bundle.mjs",
159
160
  "build:chat-bundle": "node scripts/build-chat-bundle.mjs",