@xgen-ai/cli-linux-x64-musl 0.0.0-bootstrap.0 → 0.1.0-rc.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/NATIVE_RUNTIME_PROVENANCE.md +51 -0
  2. package/README.md +4 -2
  3. package/THIRD_PARTY_LICENSES.txt +8981 -0
  4. package/bin/xgen +0 -0
  5. package/package.json +10 -3
package/NATIVE_RUNTIME_PROVENANCE.md ADDED
@@ -0,0 +1,51 @@
1
+ # Native runtime notice provenance
2
+
3
+ This inventory records the exact native runtime notice inputs audited for the prototype binaries.
4
+ The build script verifies the embedded files by byte length and SHA-256. Any toolchain bump must
5
+ repeat the target-specific binary audit and update this inventory in the same reviewed change.
6
+
7
+ ## Rust standard library
8
+
9
+ - Toolchain: `rustc 1.98.0 (88d9e12ae 2026-08-18)`
10
+ - Source: `$(rustc --print sysroot)/share/doc/rust/COPYRIGHT-library.html`
11
+ - Size: 1,512,520 bytes
12
+ - SHA-256: `68129500b616d5838629e68f55ff3aed5e096dacf60ce9eb41bbe599a563afa6`
13
+
14
+ ## Linux musl runtime
15
+
16
+ - Upstream: `https://musl.libc.org/releases/musl-1.2.5.tar.gz`
17
+ - Archive SHA-256: `a9a118bbe84d8764da0ea0d28b3ab3fae8477fc7e4085d90102b8596fc7c75e4`
18
+ - Embedded file: `musl-1.2.5-COPYRIGHT`
19
+ - Size: 6,204 bytes
20
+ - SHA-256: `f9bc4423732350eb0b3f7ed7e91d530298476f8fec0c6c427a1c04ade22655af`
21
+
22
+ ## Linux LLVM libunwind runtime
23
+
24
+ - Upstream: `https://raw.githubusercontent.com/llvm/llvm-project/52ed14fcd56afc30f9cccd8ca8ce237c2eef7e04/libunwind/LICENSE.TXT`
25
+ - LLVM commit: `52ed14fcd56afc30f9cccd8ca8ce237c2eef7e04`
26
+ - Embedded file: `llvm-libunwind-52ed14f-LICENSE.TXT`
27
+ - Size: 16,706 bytes
28
+ - SHA-256: `b5efebcaca80879234098e52d1725e6d9eb8fb96a19fce625d39184b705f7b6d`
29
+
30
+ ## GCC startup objects
31
+
32
+ The audited musl target may include GCC startup/runtime objects covered by GPLv3 plus the GCC
33
+ Runtime Library Exception 3.1. The exception permits distribution of an eligible executable under
34
+ the executable's chosen terms and does not require bundling the GCC GPL text with that executable.
35
+ The audited exception source is GCC 9.2.0 `COPYING.RUNTIME` from
36
+ `https://raw.githubusercontent.com/gcc-mirror/gcc/releases/gcc-9.2.0/COPYING.RUNTIME`
37
+ (3,324 bytes), SHA-256
38
+ `9d6b43ce4d8de0c878bf16b54d8e7a10d9bd42b75178153e3af6a815bdc90f74`.
39
+ Every GCC or linker/toolchain bump must re-audit the final imported symbols and exception coverage.
40
+
41
+ ## Windows and macOS platform runtimes
42
+
43
+ Windows builds use `/MT`. Release CI inspects PE imports and rejects dynamic Visual C++ or Universal
44
+ CRT dependencies; Microsoft platform DLLs are used under the applicable Windows SDK/runtime terms
45
+ and their license text is not embedded in the XGEN binary. Release CI selects the
46
+ `windows-2025-vs2026` runner label and records its concrete image and MSVC tool version during the
47
+ import audit.
48
+
49
+ macOS builds use the pinned Xcode 16.4 toolchain and macOS 15.5 SDK. Release CI inspects Mach-O
50
+ dependencies and permits only Apple system-library paths. Apple SDK/runtime license text is not
51
+ redistributed inside the XGEN binary.
package/README.md CHANGED
@@ -1,3 +1,5 @@
1
- # `@xgen-ai/cli-linux-x64-musl` bootstrap
1
+ # `@xgen-ai/cli-linux-x64-musl`
2
2
 
3
- This non-executable version only creates the public package name before the first XGEN npm release. Install a later Developer Preview version instead.
3
+ Native XGEN CLI 0.1.0-rc.4 binary for `x86_64-unknown-linux-musl`.
4
+
5
+ This package is an exact-version optional dependency of `@xgen-ai/cli`. Install the launcher package instead of installing this package directly. It contains no install lifecycle scripts and performs no network download.