@zvec/zvec-grep 0.2.1 → 0.3.0-rc.1

package/platforms.json

@@ -0,0 +1,92 @@
+[
+  {
+    "target": "darwin-arm64",
+    "package": "@zvec/zvec-grep-darwin-arm64",
+    "os": "darwin",
+    "cpu": "arm64",
+    "binary": "zg"
+  },
+  {
+    "target": "darwin-x64",
+    "package": "@zvec/zvec-grep-darwin-x64",
+    "os": "darwin",
+    "cpu": "x64",
+    "binary": "zg"
+  },
+  {
+    "target": "linux-x64-gnu",
+    "package": "@zvec/zvec-grep-linux-x64-gnu",
+    "os": "linux",
+    "cpu": "x64",
+    "libc": "glibc",
+    "binary": "zg",
+    "defaultVariant": "cuda",
+    "components": [
+      {
+        "package": "@zvec/zvec-grep-linux-x64-gnu-ggml-cuda13",
+        "file": "lib/libggml-cuda.so",
+        "payload": "lib/libggml-cuda.so"
+      },
+      {
+        "package": "@zvec/zvec-grep-linux-x64-gnu-ggml-cuda12",
+        "file": "lib/cuda12/libggml-cuda.so",
+        "payload": "lib/cuda12/libggml-cuda.so"
+      },
+      {
+        "package": "@zvec/zvec-grep-linux-x64-gnu-ort-cuda-part1",
+        "file": "lib/libonnxruntime_providers_cuda.so",
+        "payload": "parts/ort-cuda.part1"
+      },
+      {
+        "package": "@zvec/zvec-grep-linux-x64-gnu-ort-cuda-part2",
+        "file": "lib/libonnxruntime_providers_cuda.so",
+        "payload": "parts/ort-cuda.part2"
+      }
+    ]
+  },
+  {
+    "target": "linux-arm64-gnu",
+    "package": "@zvec/zvec-grep-linux-arm64-gnu",
+    "os": "linux",
+    "cpu": "arm64",
+    "libc": "glibc",
+    "binary": "zg"
+  },
+  {
+    "target": "win32-x64-msvc",
+    "package": "@zvec/zvec-grep-win32-x64-msvc",
+    "os": "win32",
+    "cpu": "x64",
+    "binary": "zg.exe",
+    "defaultVariant": "cuda",
+    "components": [
+      {
+        "package": "@zvec/zvec-grep-win32-x64-msvc-ggml-cuda13",
+        "file": "lib/ggml-cuda.dll",
+        "payload": "lib/ggml-cuda.dll"
+      },
+      {
+        "package": "@zvec/zvec-grep-win32-x64-msvc-ggml-cuda12",
+        "file": "lib/cuda12/ggml-cuda.dll",
+        "payload": "lib/cuda12/ggml-cuda.dll"
+      },
+      {
+        "package": "@zvec/zvec-grep-win32-x64-msvc-ort-cuda-part1",
+        "file": "lib/onnxruntime_providers_cuda.dll",
+        "payload": "parts/ort-cuda.part1"
+      },
+      {
+        "package": "@zvec/zvec-grep-win32-x64-msvc-ort-cuda-part2",
+        "file": "lib/onnxruntime_providers_cuda.dll",
+        "payload": "parts/ort-cuda.part2"
+      }
+    ]
+  },
+  {
+    "target": "win32-arm64-msvc",
+    "package": "@zvec/zvec-grep-win32-arm64-msvc",
+    "os": "win32",
+    "cpu": "arm64",
+    "binary": "zg.exe"
+  }
+]

package/plugins.cjs

@@ -0,0 +1,183 @@
+"use strict";
+
+// Installation-only transport. Normal zg execution never invokes Node or npm.
+const { createHash } = require("crypto");
+const { spawnSync } = require("child_process");
+const { closeSync, existsSync, lstatSync, mkdirSync, mkdtempSync,
+  openSync, readSync, renameSync, rmSync } = require("fs");
+const { homedir } = require("os");
+const { join, resolve } = require("path");
+
+// Shared by packaging, publication preflight and plugin validation. npm sends
+// tarballs as base64 in JSON: 180 MiB becomes 240 MiB before metadata/provenance.
+// This is a conservative project budget, not a documented registry maximum;
+// npm rejected our 202.4 MB Windows ORT archive with HTTP 413.
+const MAX_NPM_TARBALL_BYTES = 180 * 1024 * 1024;
+
+function hashFile(path, algorithm = "sha256", encoding = "hex") {
+  const hash = createHash(algorithm);
+  const fd = openSync(path, "r");
+  const buffer = Buffer.allocUnsafe(1024 * 1024);
+  try {
+    let count;
+    while ((count = readSync(fd, buffer, 0, buffer.length, null))) hash.update(buffer.subarray(0, count));
+  } finally { closeSync(fd); }
+  return hash.digest(encoding);
+}
+
+function coreIdentity(target, version, files) {
+  return createHash("sha256").update(JSON.stringify({ target, version,
+    files: Object.fromEntries(Object.entries(files).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) })).digest("hex");
+}
+
+function packageFilename(name, version) {
+  return `${name.replace(/^@/, "").replace(/\//g, "-")}-${version}.tgz`;
+}
+
+function validHash(value) {
+  return value && Number.isSafeInteger(value.bytes) && value.bytes >= 0 && /^[a-f0-9]{64}$/.test(value.sha256);
+}
+
+function validatePlugins(manifest, entry, version, coreId) {
+  if (manifest.schemaVersion !== 1 || manifest.target !== entry.target || manifest.version !== version ||
+      manifest.coreId !== coreId || !/^[a-f0-9]{64}$/.test(coreId) ||
+      !Array.isArray(manifest.components) || !entry.components?.length ||
+      manifest.components.length !== entry.components.length || !manifest.files) {
+    throw new Error("invalid plugin manifest identity/core ABI");
+  }
+  for (const [index, expected] of entry.components.entries()) {
+    const component = manifest.components[index];
+    if (component.package !== expected.package || component.version !== version ||
+        component.file !== expected.file || component.payload !== expected.payload ||
+        component.tarball !== packageFilename(expected.package, version) ||
+        !/^sha512-[A-Za-z0-9+/]{86}==$/.test(component.integrity) ||
+        !Number.isSafeInteger(component.archiveBytes) || component.archiveBytes <= 0 ||
+        component.archiveBytes > MAX_NPM_TARBALL_BYTES || !validHash(component.checksum) ||
+        !validHash(manifest.files[expected.file])) {
+      throw new Error(`invalid pinned plugin: ${expected.package}`);
+    }
+  }
+  if (JSON.stringify(Object.keys(manifest.files).sort()) !==
+      JSON.stringify([...new Set(entry.components.map((component) => component.file))].sort())) {
+    throw new Error("plugin manifest contains unexpected runtime files");
+  }
+  return manifest;
+}
+
+function settings(env = process.env) {
+  const mode = env.ZG_INSTALL_ACCELERATOR || "auto";
+  if (!["auto", "cpu", "cuda"].includes(mode)) throw new Error("ZG_INSTALL_ACCELERATOR must be auto, cpu or cuda");
+  return { mode,
+    directory: env.ZG_PLUGIN_DIR ? resolve(env.ZG_PLUGIN_DIR) : undefined,
+    cache: resolve(env.ZG_PLUGIN_CACHE || join(env.npm_config_cache || join(homedir(), ".npm"), "zg-plugins")),
+    offline: [env.ZG_INSTALL_OFFLINE, env.npm_config_offline].some((value) => /^(true|1)$/i.test(value || "")),
+  };
+}
+
+function detectNvidia() {
+  const result = spawnSync("nvidia-smi", ["--query-gpu=name,driver_version", "--format=csv,noheader"], {
+    encoding: "utf8", timeout: 5000, maxBuffer: 64 * 1024, windowsHide: true,
+  });
+  // A download hint, never proof that CUDA/cuDNN or a particular plugin works.
+  return result.status === 0 && Boolean(result.stdout?.trim());
+}
+
+function verifyArchive(path, component) {
+  const metadata = lstatSync(path);
+  if (!metadata.isFile() || metadata.size !== component.archiveBytes ||
+      `sha512-${hashFile(path, "sha512", "base64")}` !== component.integrity) {
+    throw new Error(`plugin archive integrity mismatch: ${component.package}`);
+  }
+}
+
+function download(component, directory, env = process.env) {
+  const args = ["pack", `${component.package}@${component.version}`, "--ignore-scripts", "--json",
+    "--pack-destination", directory, "--fetch-retries=1", "--fetch-timeout=60000"];
+  // Use npm itself for registry, proxy, authentication, CA and cache handling.
+  // Keeping the invocation's cwd also preserves its project .npmrc. Never run a
+  // nested npm install or mutate the caller's node_modules/package-lock.
+  const npmCli = env.npm_execpath;
+  if (!npmCli || !existsSync(npmCli)) throw new Error("online plugin installation must run through npm install/rebuild");
+  const version = spawnSync(process.execPath, [npmCli, "--version"], {
+    encoding: "utf8", timeout: 10000, maxBuffer: 64 * 1024, windowsHide: true,
+  });
+  if (version.status !== 0 || !(Number(version.stdout.trim().split(".")[0]) >= 7)) {
+    throw new Error("online plugin downloads require npm 7+ (--pack-destination); use ZG_PLUGIN_DIR for offline installation");
+  }
+  const result = spawnSync(process.execPath, [npmCli, ...args], {
+    cwd: env.INIT_CWD || process.cwd(), env: { ...env, npm_config_ignore_scripts: "true" },
+    encoding: "utf8", maxBuffer: 1024 * 1024, timeout: 180000, windowsHide: true,
+  });
+  if (result.error || result.status !== 0) {
+    // Do not echo registry credentials or arbitrary npm configuration.
+    throw new Error(`npm pack failed for ${component.package} (status ${result.status ?? result.error?.code}); check npm registry/network settings`);
+  }
+  return join(directory, component.tarball);
+}
+
+function componentArchive(component, manifest, config, fetch = download) {
+  // An explicit local artifact directory is authoritative: no registry/cache
+  // fallback may hide missing files in CI or an incomplete offline release.
+  if (config.directory) {
+    const path = join(config.directory, component.tarball);
+    verifyArchive(path, component);
+    return path;
+  }
+  // Hash the full identity into one path segment rather than nesting two long
+  // hashes and an npm filename (important for Windows tool path limits).
+  const directory = join(config.cache, createHash("sha256").update(JSON.stringify([
+    manifest.target, manifest.version, manifest.coreId, component.integrity,
+  ])).digest("hex"));
+  mkdirSync(directory, { recursive: true });
+  const cached = join(directory, "archive.tgz");
+  if (existsSync(cached)) { verifyArchive(cached, component); return cached; }
+  if (config.offline) throw new Error(`offline plugin cache miss: ${component.package}`);
+  const temporary = mkdtempSync(join(directory, ".download-"));
+  try {
+    const path = fetch(component, temporary);
+    verifyArchive(path, component);
+    // Concurrent installs can share the immutable content-addressed archive.
+    if (!existsSync(cached)) {
+      try { renameSync(path, cached); }
+      catch (error) { if (!existsSync(cached)) throw error; }
+    }
+    verifyArchive(cached, component);
+    return cached;
+  } finally { rmSync(temporary, { recursive: true, force: true }); }
+}
+
+function archiveJson(archive, name) {
+  const result = spawnSync("tar", ["-xOf", archive, `package/${name}`], {
+    encoding: "utf8", timeout: 60000, maxBuffer: 1024 * 1024, windowsHide: true,
+  });
+  if (result.error || result.status !== 0) throw new Error(`cannot read ${name} from plugin archive`);
+  return JSON.parse(result.stdout);
+}
+
+function extractPayload(archive, component, manifest, destination) {
+  // Only read the pinned regular payload into our own destination; never
+  // extract archive paths, links, permissions or lifecycle scripts onto disk.
+  const metadata = archiveJson(archive, "package.json");
+  const checksums = archiveJson(archive, "checksums.json");
+  if (metadata.name !== component.package || metadata.version !== manifest.version ||
+      checksums.schemaVersion !== 1 || checksums.target !== manifest.target ||
+      checksums.component !== component.package ||
+      JSON.stringify(Object.keys(checksums.files || {})) !== JSON.stringify([component.payload]) ||
+      checksums.files[component.payload].sha256 !== component.checksum.sha256 ||
+      checksums.files[component.payload].bytes !== component.checksum.bytes) {
+    throw new Error(`plugin payload metadata mismatch: ${component.package}`);
+  }
+  const fd = openSync(destination, "wx", 0o644);
+  try {
+    const result = spawnSync("tar", ["-xOf", archive, `package/${component.payload}`], {
+      stdio: ["ignore", fd, "pipe"], timeout: 180000, maxBuffer: 64 * 1024, windowsHide: true,
+    });
+    if (result.error || result.status !== 0) throw new Error(`cannot extract plugin payload: ${component.package}`);
+  } finally { closeSync(fd); }
+  if (lstatSync(destination).size !== component.checksum.bytes || hashFile(destination) !== component.checksum.sha256) {
+    throw new Error(`plugin payload checksum mismatch: ${component.package}`);
+  }
+}
+
+module.exports = { MAX_NPM_TARBALL_BYTES, coreIdentity, packageFilename, validHash, validatePlugins, settings,
+  detectNvidia, componentArchive, extractPayload, hashFile, verifyArchive };

package/README_CN.md

@@ -1,230 +0,0 @@
-<p align="right">
-  <a href="./README.md">English</a> | 中文
-</p>
-
-<div align="center">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/zg-logo-dark.svg">
-    <img src="./.github/assets/zg-logo.svg" width="150" alt="zg logo" />
-  </picture>
-  <p><strong>Know the words—or don’t. Just zg.</strong></p>
-  <p>面向人与 Agent 的本地优先统一检索层。</p>
-
-  <p>
-    <a href="https://www.npmjs.com/package/@zvec/zvec-grep"><img src="https://img.shields.io/npm/v/@zvec/zvec-grep.svg" alt="npm 版本" /></a>
-    <a href="https://github.com/zvec-ai/zvec-grep/actions/workflows/ci.yml"><img src="https://github.com/zvec-ai/zvec-grep/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
-    <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="Apache 2.0 许可证" /></a>
-    <img src="https://img.shields.io/badge/node-%3E%3D22-blue.svg" alt="Node.js 22 或更新版本" />
-  </p>
-
-  <p>
-    <a href="#tour">🎬 <strong>功能演示</strong></a> |
-    <a href="#features">💫 <strong>核心特性</strong></a> |
-    <a href="#try-it-yourself">🚀 <strong>动手体验</strong></a> |
-    <a href="./docs/README.md">📚 <strong>文档</strong></a> |
-    <a href="#benchmarks">📊 <strong>性能测试</strong></a> |
-    <a href="#community">🤝 <strong>社区</strong></a>
-  </p>
-</div>
-
-**zg**（**z**vec-**g**rep）将 ripgrep、BM25 与向量检索统一在一个
-[本地优先的检索入口](./docs/05-architecture.md)中。既可以由人在终端中搜索，
-也可以让 Agent 根据问题选择合适的本地检索方式。
-
-<a id="tour"></a>
-
-## 🎬 功能演示
-
-<div align="center">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/zvec-grep-tour-dark.gif">
-    <img src="./.github/assets/zvec-grep-tour.gif" width="1000" alt="安装 Agent 集成、为工作区建索引并让 Agent 使用 zvec-grep 检索本地内容" />
-  </picture>
-</div>
-
-<a id="features"></a>
-
-## 💫 为什么选择 zg？
-
-- **人与 Agent 开箱即用**：安装一次、索引一次，即可在 macOS、Linux 和
-  Windows 上通过 CLI 或 Agent 复用同一个工作区。
-- **不止关键词搜索**：先按语义发现内容、按相关性排序，再在需要时使用精确文本
-  或正则完成验证。
-- **多格式检索**：搜索源代码、文档和结构化数据，同时保留有用的内容结构与
-  来源位置。
-- **更少搜索，更少上下文**：经过排序并保留来源的结果，可以减少工具调用、
-  Token 消耗与无关噪声，更快找到所需证据。
-- **默认本地运行**：文件、索引与本地模型都留在本机；只有经过你的授权，远程
-  Embedding 服务才能接收数据。
-
-<a id="try-it-yourself"></a>
-
-## 🚀 动手体验
-
-### 1. 准备示例书架
-
-```bash
-# 需要 Node.js 22 或更新版本。
-npm install -g @zvec/zvec-grep
-
-mkdir zg-mystery && cd zg-mystery
-curl --retry 3 --retry-all-errors --progress-bar -fL \
-  -o alice-in-wonderland.txt https://raw.githubusercontent.com/GITenberg/Alice-s-Adventures-in-Wonderland_11/master/11.txt \
-  -o sherlock-holmes.txt https://raw.githubusercontent.com/GITenberg/The-Memoirs-of-Sherlock-Holmes_834/master/834.txt
-
-zg index --embedding local/potion-retrieval-32m
-```
-
-### 2. 选择检索方式
-
-#### Agent：通过 OpenCode 提问
-
-配置好 [OpenCode](https://opencode.ai/) 后：
-
-```bash
-zg install --target opencode --yes
-opencode models
-opencode run --model opencode/nemotron-3-ultra-free \
-  "An unseen creature left a few marks. What did the detective infer? Cite local evidence."
-```
-
-免费模型的可用性可能变化。请通过 `opencode models` 检查，并将示例模型
-替换为当前环境中可用的模型。
-
-Prompt 中没有指定任何工具，OpenCode 会自主选择 zg。
-
-<details>
-<summary><strong>展开查看完整 Agent 调用与回答</strong></summary>
-
-```text
-⚙ zvec_grep_zvec_grep_search {"root":".../zg-mystery","query":"An unseen creature left a few marks. What did the detective infer?","fts":["marks","unseen creature","inferred","detective"],"fuse":true}
-→ Read sherlock-holmes.txt [offset=5440, limit=120]
-
-Answer:
-The detective is Sherlock Holmes in *The Adventure of the Crooked Man*.
-From the animal's foot-marks, he inferred:
-
-- It was not a dog, cat, monkey, or other familiar creature: its print had
-  five foot-pads, long nails, and was nearly as large as a dessert-spoon
-  (sherlock-holmes.txt:5479-5486).
-- It had a long body and very short legs: nearly two feet long, but with a
-  stride of only about three inches (sherlock-holmes.txt:5497-5502).
-- It was carnivorous because it climbed the curtain toward a canary's cage
-  (sherlock-holmes.txt:5509-5510).
-- It was probably from the weasel or stoat tribe, though unusually large
-  (sherlock-holmes.txt:5514-5516).
-
-Holmes also inferred that a man entered through the window with it and later
-left with the key (sherlock-holmes.txt:5464-5470, 5527-5528).
-```
-
-</details>
-
-#### 用户：直接检索
-
-不通过 Agent，直接搜索同一个书架：
-
-```bash
-zg query --human "An unseen creature left a few marks. What did the detective infer?" --limit 3
-```
-
-zg 会将 `sherlock-holmes.txt` 中的相关段落排在
-`alice-in-wonderland.txt` 前面。
-
-<a id="benchmarks"></a>
-
-## 📊 性能测试
-
-每项测试均采用配对 A/B 评测：任务、Agent/模型、Prompt、环境和
-资源限制保持一致，仅 zg 访问权限及使用说明不同。
-
-完整结果和复现细节参见[性能测试文档](./benchmarks/README_CN.md)。
-
-### 1. 跨领域 Agent Benchmark
-
-[SWE-QA-Bench](./benchmarks/swe-qa-bench/README_CN.md) 使用 Claude Code 与
-Claude Opus 5（high 推理强度）；
-[BrowseComp-Plus](./benchmarks/browse-comp-plus/README_CN.md) 使用 Codex
-gpt-5.6-sol 与 medium 推理强度。两项测试中的 zg
-Profile 均使用 Qwen3.7 Text Embedding。
-
-<p align="center">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/benchmark-overall-retrieval-indexed-v4-dark.svg">
-    <source media="(prefers-color-scheme: light)" srcset="./.github/assets/benchmark-overall-retrieval-indexed-v4-light.svg">
-    <img src="./.github/assets/benchmark-overall-retrieval-indexed-v4-light.svg" alt="zg 在 Coding 和通用文本检索场景中的整体测试结果，对比 Baseline 的答案质量、输入 Token、工具调用和 Agent 耗时" width="1200" />
-  </picture>
-</p>
-
-- **为何有效：** 语义发现先收窄搜索范围，排序后的词法检索再锚定精确标识符；
-  紧凑的证据结果减少了大范围扫描、重复工具调用和模型上下文。
-- **为何通用：** 同一检索流程可以适配不同内容：代码索引保留符号、签名和
-  层级路径，通用文本则按相关 section 与 chunk 返回证据。
-
-### 2. 真实案例分析
-
-<table align="center">
-  <tr>
-    <td align="center">
-      <picture>
-        <source media="(prefers-color-scheme: dark)" srcset="./.github/assets/benchmark-repository-top3-v2.png">
-        <source media="(prefers-color-scheme: light)" srcset="./.github/assets/benchmark-repository-top3-v2-light.png">
-        <img src="./.github/assets/benchmark-repository-top3-v2-light.png" alt="三个代码库理解任务中 Baseline 与 zg 的 Judge、输入 Token、工具调用和耗时对比" width="980" />
-      </picture>
-    </td>
-  </tr>
-</table>
-
-- **[Pylint](https://github.com/pylint-dev/pylint) — Python 静态分析器：** 任务需要理解 AST 节点处理如何区分带标注与
-  不带标注的属性初始化；由于架构入口事先未知，保留符号与层级路径的检索
-  更适合定位相关实现。
-- **[Matplotlib](https://github.com/matplotlib/matplotlib) — 绘图与渲染库：** 任务需要沿数学文本渲染的多个阶段追踪
-  `FontInfo` 与字体选择；语义与词法联合排序有助于还原跨文件的数据流和控制流。
-- **[Django](https://github.com/django/django) — Web 框架：** 任务关联 username 唯一约束、ORM 事务和 formset
-  批量操作；紧凑的排序证据便于汇集分散在多处的设计依据。
-
-<details>
-<summary><strong>测试仓库与具体问题</strong></summary>
-
-| 仓库 | 问题类型 | 具体问题 |
-| --- | --- | --- |
-| **`pylint-dev/pylint`** | What<br>架构探索 | 使用 AST 节点类型区分带类型标注和不带类型标注的实例属性初始化时，采用了什么架构模式？ |
-| **`matplotlib/matplotlib`** | Where<br>数据 / 控制流 | `FontInfo` NamedTuple 在数学文本渲染 Pipeline 中如何传递字体度量和字形数据？控制流如何决定在字符渲染的不同阶段使用 `postscript_name` 还是 `FT2Font` 对象？ |
-| **`django/django`** | Why<br>设计原理 | User 模型中 username 字段的唯一约束为什么会与 Django ORM 事务处理产生关联？如果在已有数据库中移除该约束，会对基于 formset 的批量操作产生哪些级联影响？ |
-
-</details>
-
-> zg 最适合目标位置未知、证据跨文件或模块分布的调用链、数据流和架构问题。
-> Agent 会自主决定何时及如何调用，结果因此会随模型和运行波动；多次运行均值更可靠。
-
-## 📚 文档
-
-| 指南 | 你可以完成什么 |
-| :--- | :--- |
-| [Agent 集成](./docs/01-agents.md) | 将 zg 接入 Codex、Claude Code、Qwen Code、Qoder、Cursor 或 OpenCode，并验证是否正常工作。 |
-| [CLI 指南](./docs/02-cli.md) | 在终端中搜索、索引和管理本地工作区。 |
-| [MCP 指南](./docs/03-mcp.md) | 了解 Agent 可以使用哪些 zg 工具，以及访问权限如何受到保护。 |
-| [检索 Pipeline](./docs/04-pipeline.md) | 选择索引范围、保持内容新鲜，并获得更好的检索结果。 |
-| [架构](./docs/05-architecture.md) | 了解 zg 如何处理查询，以及数据会保留在哪里。 |
-| [服务端与执行模式](./docs/06-server.md) | 在一次性命令和长期运行的本地服务之间选择。 |
-| [Embedding 模型](./docs/07-embedding.md) | 根据速度、检索质量、隐私和本机硬件选择合适的模型。 |
-| [Roadmap](./docs/08-roadmap.md) | 了解接下来的产品方向，并参与影响 zg 的优先级。 |
-
-<a id="community"></a>
-
-## 🤝 加入社区
-
-<div align="center">
-
-| 💬 钉钉群 | 📱 微信群 | 🎮 Discord | X (Twitter) |
-| :---: | :---: | :---: | :---: |
-| <img src="https://zvec.oss-cn-hongkong.aliyuncs.com/qrcode/dingding.png" width="150" alt="钉钉二维码"/> | <img src="https://zvec.oss-cn-hongkong.aliyuncs.com/qrcode/wechat.png?v4" width="150" alt="微信二维码"/> | [![Discord](https://img.shields.io/badge/Discord-Join%20Server-5865F2?style=for-the-badge&logo=discord&logoColor=white)](https://discord.gg/rKddFBBu9z) | [![X (formerly Twitter) Follow](https://img.shields.io/twitter/follow/ZvecAI)](<https://x.com/ZvecAI>) |
-| 扫码加入 | 扫码加入 | 点击加入 | 点击关注 |
-
-</div>
-
-## ❤️ 参与贡献
-
-始终欢迎社区贡献——缺陷修复、新功能和文档改进都会让 zvec-grep 变得更好。
-
-请查阅我们的[贡献指南](./CONTRIBUTING.md)开始参与！

package/dist/authorization/index.d.ts

@@ -1,7 +0,0 @@
-export { RemoteEmbeddingAuthorizationManager } from "./manager.js";
-export { createRemoteEmbeddingOperationPermit, remoteEmbeddingAuthorizationGuard, withRemoteEmbeddingOperationPermit, } from "./operation.js";
-export { RemoteEmbeddingAuthorizationStore } from "./store.js";
-export { formatRemoteEmbeddingAuthorizationPrompt, remoteEmbeddingDisclosureData, type RemoteEmbeddingAuthorizationPromptInput, } from "./prompt.js";
-export { indexStatusIsFresh, planRemoteIndexAuthorization, planRemoteSearchAuthorization, searchUsesVector, } from "./planner.js";
-export { canonicalizeWorkspaceRoots, createRemoteEmbeddingTarget, remoteEmbeddingTargetFingerprint, workspaceFingerprint, } from "./target.js";
-export type { RemoteEmbeddingAuthorizationPlan, RemoteEmbeddingAuthorizationScope, RemoteEmbeddingAuthorizationStatus, RemoteEmbeddingDataDisclosure, RemoteEmbeddingOperation, RemoteEmbeddingOperationPermit, RemoteEmbeddingTarget, RemoteEmbeddingWorkspaceGrant, } from "./types.js";

package/dist/authorization/index.js

@@ -1,7 +0,0 @@
-export { RemoteEmbeddingAuthorizationManager } from "./manager.js";
-export { createRemoteEmbeddingOperationPermit, remoteEmbeddingAuthorizationGuard, withRemoteEmbeddingOperationPermit, } from "./operation.js";
-export { RemoteEmbeddingAuthorizationStore } from "./store.js";
-export { formatRemoteEmbeddingAuthorizationPrompt, remoteEmbeddingDisclosureData, } from "./prompt.js";
-export { indexStatusIsFresh, planRemoteIndexAuthorization, planRemoteSearchAuthorization, searchUsesVector, } from "./planner.js";
-export { canonicalizeWorkspaceRoots, createRemoteEmbeddingTarget, remoteEmbeddingTargetFingerprint, workspaceFingerprint, } from "./target.js";
-//# sourceMappingURL=index.js.map

package/dist/authorization/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,wCAAwC,EACxC,6BAA6B,GAE9B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,aAAa,CAAC"}

package/dist/authorization/manager.d.ts

@@ -1,8 +0,0 @@
-import { RemoteEmbeddingAuthorizationStore } from "./store.js";
-import type { RemoteEmbeddingAuthorizationPlan, RemoteEmbeddingAuthorizationScope, RemoteEmbeddingOperationPermit } from "./types.js";
-export declare class RemoteEmbeddingAuthorizationManager {
-    readonly store: RemoteEmbeddingAuthorizationStore;
-    constructor(store?: RemoteEmbeddingAuthorizationStore);
-    existingWorkspacePermit(plan: RemoteEmbeddingAuthorizationPlan): Promise<RemoteEmbeddingOperationPermit | undefined>;
-    grant(plan: RemoteEmbeddingAuthorizationPlan, scope: RemoteEmbeddingAuthorizationScope): Promise<RemoteEmbeddingOperationPermit>;
-}

package/dist/authorization/manager.js

@@ -1,19 +0,0 @@
-import { createRemoteEmbeddingOperationPermit } from "./operation.js";
-import { RemoteEmbeddingAuthorizationStore } from "./store.js";
-export class RemoteEmbeddingAuthorizationManager {
-    store;
-    constructor(store = new RemoteEmbeddingAuthorizationStore()) {
-        this.store = store;
-    }
-    async existingWorkspacePermit(plan) {
-        if (!(await this.store.hasGrant(plan.target)))
-            return undefined;
-        return createRemoteEmbeddingOperationPermit(plan.target, "workspace");
-    }
-    async grant(plan, scope) {
-        if (scope === "workspace")
-            await this.store.grant(plan.target);
-        return createRemoteEmbeddingOperationPermit(plan.target, scope);
-    }
-}
-//# sourceMappingURL=manager.js.map

package/dist/authorization/manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/authorization/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAO/D,MAAM,OAAO,mCAAmC;IACrC,KAAK,CAAoC;IAElD,YAAY,KAAK,GAAG,IAAI,iCAAiC,EAAE;QACzD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,IAAsC;QAEtC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAChE,OAAO,oCAAoC,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAsC,EACtC,KAAwC;QAExC,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,oCAAoC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/authorization/operation.d.ts

@@ -1,7 +0,0 @@
-import { RemoteEmbeddingAuthorizationStore } from "./store.js";
-import { type RemoteEmbeddingAuthorizationScope, type RemoteEmbeddingOperationPermit, type RemoteEmbeddingRequest, type RemoteEmbeddingTarget } from "./types.js";
-export declare function createRemoteEmbeddingOperationPermit(target: RemoteEmbeddingTarget, scope: RemoteEmbeddingAuthorizationScope): RemoteEmbeddingOperationPermit;
-export declare function withRemoteEmbeddingOperationPermit<T>(permit: RemoteEmbeddingOperationPermit | undefined, operation: () => Promise<T>): Promise<T>;
-export declare function remoteEmbeddingAuthorizationGuard(options?: {
-    store?: RemoteEmbeddingAuthorizationStore;
-}): (request: RemoteEmbeddingRequest) => Promise<void>;

package/dist/authorization/operation.js

@@ -1,50 +0,0 @@
-import { AsyncLocalStorage } from "node:async_hooks";
-import { randomUUID } from "node:crypto";
-import { EngineError } from "../engine/errors.js";
-import { RemoteEmbeddingAuthorizationStore } from "./store.js";
-import { REMOTE_EMBEDDING_CAPABILITY, } from "./types.js";
-const operationPermit = new AsyncLocalStorage();
-export function createRemoteEmbeddingOperationPermit(target, scope) {
-    return {
-        capability: REMOTE_EMBEDDING_CAPABILITY,
-        scope,
-        target,
-        issuedAt: Date.now(),
-        operationId: randomUUID(),
-    };
-}
-export async function withRemoteEmbeddingOperationPermit(permit, operation) {
-    if (!permit)
-        return await operation();
-    return await operationPermit.run(permit, operation);
-}
-export function remoteEmbeddingAuthorizationGuard(options = {}) {
-    const store = options.store ?? new RemoteEmbeddingAuthorizationStore();
-    return async (request) => {
-        const permit = operationPermit.getStore();
-        if (!permit ||
-            permit.capability !== REMOTE_EMBEDDING_CAPABILITY ||
-            permit.target.provider !== request.provider ||
-            permit.target.model !== request.model ||
-            permit.target.endpoint !== request.endpoint) {
-            throw authorizationRequiredError(request);
-        }
-        if (permit.scope === "workspace" &&
-            !(await store.hasGrant(permit.target))) {
-            throw authorizationRequiredError(request, "Workspace grant is missing, invalid, or revoked.");
-        }
-    };
-}
-function authorizationRequiredError(request, detail) {
-    return new EngineError("Remote Embedding authorization is required", {
-        code: "ZVEC_GREP.ENGINE.AUTH.REMOTE_EMBEDDING_REQUIRED",
-        context: [
-            `provider=${request.provider}`,
-            `model=${request.model}`,
-            `endpoint=${request.endpoint}`,
-            `purpose=${request.purpose}`,
-            ...(detail ? [`detail=${detail}`] : []),
-        ].join(" "),
-    });
-}
-//# sourceMappingURL=operation.js.map

package/dist/authorization/operation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operation.js","sourceRoot":"","sources":["../../src/authorization/operation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,2BAA2B,GAK5B,MAAM,YAAY,CAAC;AAEpB,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAkC,CAAC;AAEhF,MAAM,UAAU,oCAAoC,CAClD,MAA6B,EAC7B,KAAwC;IAExC,OAAO;QACL,UAAU,EAAE,2BAA2B;QACvC,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;QACpB,WAAW,EAAE,UAAU,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAAkD,EAClD,SAA2B;IAE3B,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,SAAS,EAAE,CAAC;IACtC,OAAO,MAAM,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAEI,EAAE;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iCAAiC,EAAE,CAAC;IACvE,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC1C,IACE,CAAC,MAAM;YACP,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAC3C,CAAC;YACD,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IACE,MAAM,CAAC,KAAK,KAAK,WAAW;YAC5B,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACtC,CAAC;YACD,MAAM,0BAA0B,CAC9B,OAAO,EACP,kDAAkD,CACnD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA+B,EAC/B,MAAe;IAEf,OAAO,IAAI,WAAW,CAAC,4CAA4C,EAAE;QACnE,IAAI,EAAE,iDAAiD;QACvD,OAAO,EAAE;YACP,YAAY,OAAO,CAAC,QAAQ,EAAE;YAC9B,SAAS,OAAO,CAAC,KAAK,EAAE;YACxB,YAAY,OAAO,CAAC,QAAQ,EAAE;YAC9B,WAAW,OAAO,CAAC,OAAO,EAAE;YAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/authorization/planner.d.ts

@@ -1,21 +0,0 @@
-import type { NormalizedSearchInput } from "../mcp/input-normalization.js";
-import type { EmbeddingModelInfo } from "../engine/models/index.js";
-import type { ZvecGrepInfoResult } from "../engine/service/types.js";
-import { RemoteEmbeddingAuthorizationStore } from "./store.js";
-import type { RemoteEmbeddingAuthorizationPlan } from "./types.js";
-export declare function planRemoteIndexAuthorization(input: {
-    info: ZvecGrepInfoResult;
-    model: EmbeddingModelInfo;
-    rebuild?: boolean;
-    needsUpdate?: boolean;
-    store?: RemoteEmbeddingAuthorizationStore;
-}): Promise<RemoteEmbeddingAuthorizationPlan | undefined>;
-export declare function planRemoteSearchAuthorization(input: {
-    info: ZvecGrepInfoResult;
-    model: EmbeddingModelInfo;
-    search: NormalizedSearchInput;
-    runtimeNeedsReconciliation?: boolean;
-    store?: RemoteEmbeddingAuthorizationStore;
-}): Promise<RemoteEmbeddingAuthorizationPlan | undefined>;
-export declare function searchUsesVector(input: Pick<NormalizedSearchInput, "queries" | "routes">): boolean;
-export declare function indexStatusIsFresh(info: ZvecGrepInfoResult): boolean;