codemble 0.5.2__tar.gz → 0.5.3__tar.gz

{codemble-0.5.2 → codemble-0.5.3}/CHANGELOG.md

@@ -5,6 +5,27 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) · Versioning:
 
 ## [Unreleased]
 
+## [0.5.3] - 2026-07-21
+
+### Fixed
+- **A fresh install crashed on every JavaScript/TypeScript project.** The
+  dependency range allowed `tree-sitter` 0.26.0, which is ABI-incompatible with
+  the newest published grammar wheels (`tree-sitter-javascript` 0.25.0,
+  `tree-sitter-typescript` 0.23.2 — the only ones that exist). Partway through a
+  real project the parser died with a SIGSEGV inside `node_get_named_children`,
+  taking the whole process down with it: `codemble <path>` exited with no
+  traceback, and the app's local server vanished mid-parse, so the loading
+  screen reported "Lost contact with the local server" and stopped there.
+  Bisected on one machine, one project, one Python: 0.26.0 crashes every run,
+  0.25.2 is clean. The core is now pinned `<0.26`.
+  An install that already had 0.25.x kept working, which is why this stayed
+  invisible from a developer checkout — it only reached people installing
+  fresh, including through the documented `uvx codemble` path.
+- A dependency guard now asserts the resolved `tree-sitter` version stays below
+  the segfaulting release. A behavioural test cannot catch this: a small snippet
+  parses and walks fine on 0.26.0, and every fixture in the suite is small,
+  which is exactly how it reached a release.
+
 ## [0.5.2] - 2026-07-20
 
 ### Fixed

{codemble-0.5.2 → codemble-0.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codemble
-Version: 0.5.2
+Version: 0.5.3
 Summary: A learning game that turns the code AI wrote for you into a galaxy you light up by understanding it.
 Project-URL: Homepage, https://udhawan97.github.io/Codemble/
 Project-URL: Repository, https://github.com/udhawan97/Codemble
@@ -22,7 +22,7 @@ Requires-Python: >=3.11
 Requires-Dist: fastapi>=0.115
 Requires-Dist: tree-sitter-javascript<0.26,>=0.25
 Requires-Dist: tree-sitter-typescript<0.24,>=0.23.2
-Requires-Dist: tree-sitter<0.27,>=0.25
+Requires-Dist: tree-sitter<0.26,>=0.25
 Requires-Dist: uvicorn>=0.30
 Provides-Extra: dev
 Requires-Dist: httpx>=0.27; extra == 'dev'

{codemble-0.5.2 → codemble-0.5.3}/codemble/__init__.py

@@ -1,4 +1,4 @@
 """Codemble — a learning game that turns the code AI wrote for you into a galaxy
 you light up by understanding it. See CLAUDE.md for the agent brief and roadmap."""
 
-__version__ = "0.5.2"
+__version__ = "0.5.3"

codemble-0.5.3/docs/releases/v0.5.3.md

@@ -0,0 +1,50 @@
+# Codemble v0.5.3 — fixes a crash on every fresh install
+
+**If you installed Codemble recently and it died on a JavaScript or TypeScript
+project, this is why. Please upgrade.**
+
+Codemble's dependency range allowed `tree-sitter` 0.26.0, which is
+ABI-incompatible with the newest published grammar wheels
+(`tree-sitter-javascript` 0.25.0 and `tree-sitter-typescript` 0.23.2 — the only
+ones that exist). Partway through parsing a real project the parser died with a
+segmentation fault inside `node_get_named_children`, taking the whole process
+down with it.
+
+What that looked like:
+
+- `codemble ./my-project` exited partway through with no traceback.
+- In the app, the local server vanished mid-parse, so the loading screen stopped
+  on *"Lost contact with the local server"* and never recovered.
+
+The core is now pinned `<0.26`.
+
+## Why it escaped every check
+
+An environment that already had `tree-sitter` 0.25.x kept working, so it was
+invisible from a developer checkout and from CI's cache. It only hit people
+installing **fresh** — including through `uvx codemble`, the documented install
+path, which resolves the newest permitted version.
+
+It also could not be caught by a behavioural test. A small snippet parses and
+walks its children perfectly well on 0.26.0; the crash needs a corpus of real
+size, and every fixture in the suite is small. That is precisely how it reached
+a release.
+
+So the guard added here asserts the **resolved dependency version** rather than
+the behaviour: the suite now fails if `tree-sitter` resolves to the segfaulting
+release. Verified both ways — it passes on 0.25.2 and fails on 0.26.0.
+
+## Upgrading
+
+```
+uvx codemble@latest        # or: uv tool upgrade codemble
+```
+
+No breaking changes: the CLI, the graph/checks API, and the on-disk progress
+format are unchanged, and existing progress in `~/.codemble/` is read as-is.
+
+## Honest note
+
+The upper bound is deliberate, not caution. It should be raised only once a
+grammar release has been verified against the newer core **on a project of real
+size** — a snippet test will not tell you anything useful here.

{codemble-0.5.2 → codemble-0.5.3}/docs-site/package.json

@@ -1,7 +1,7 @@
 {
   "name": "codemble-docs",
   "type": "module",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "private": true,
   "scripts": {
     "dev": "astro dev",

{codemble-0.5.2 → codemble-0.5.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "codemble"
-version = "0.5.2"
+version = "0.5.3"
 description = "A learning game that turns the code AI wrote for you into a galaxy you light up by understanding it."
 readme = "README.md"
 license = "Apache-2.0"
@@ -26,7 +26,12 @@ classifiers = [
 ]
 dependencies = [
   "fastapi>=0.115",
-  "tree-sitter>=0.25,<0.27",
+  # Hard upper bound, not caution: tree-sitter 0.26.0 segfaults (SIGSEGV in
+  # node_get_named_children) against the newest published grammar wheels
+  # (javascript 0.25.0, typescript 0.23.2), which are the only ones available.
+  # Bisected on one env, one project: 0.26.0 crashes every run, 0.25.2 is clean.
+  # Raise this only once a grammar release is verified against the newer core.
+  "tree-sitter>=0.25,<0.26",
   "tree-sitter-javascript>=0.25,<0.26",
   "tree-sitter-typescript>=0.23.2,<0.24",
   "uvicorn>=0.30",

codemble-0.5.3/tests/test_dependency_compatibility.py

@@ -0,0 +1,43 @@
+"""Guard the tree-sitter core/grammar pairing that the parser segfaults without.
+
+tree-sitter 0.26.0 is ABI-incompatible with the newest published grammar wheels
+(``tree-sitter-javascript`` 0.25.0, ``tree-sitter-typescript`` 0.23.2 — the only
+ones that exist). Paired with 0.26.0 the parser dies with SIGSEGV inside
+``node_get_named_children`` partway through a real project, taking the whole
+process — and, in the app, the local server — down with it.
+
+A behavioural test cannot catch this: a small snippet parses and walks fine on
+0.26.0, and every fixture in this suite is small. It only trips on a corpus of
+real size, which is exactly why it reached a release. So the guard asserts the
+resolved version instead of the behaviour.
+
+Raise the ceiling only after verifying a grammar release against the newer core
+on a project of real size.
+"""
+
+from __future__ import annotations
+
+import importlib.metadata as metadata
+
+
+def _version_tuple(distribution: str) -> tuple[int, ...]:
+    raw = metadata.version(distribution)
+    return tuple(int(part) for part in raw.split(".")[:3] if part.isdigit())
+
+
+def test_tree_sitter_core_stays_below_the_segfaulting_release() -> None:
+    assert _version_tuple("tree-sitter") < (0, 26), (
+        "tree-sitter >= 0.26 segfaults against the published grammar wheels; "
+        "pyproject pins <0.26 deliberately."
+    )
+
+
+def test_tree_sitter_core_is_new_enough_for_the_grammars() -> None:
+    assert _version_tuple("tree-sitter") >= (0, 25), (
+        "the JS/TS adapter is written against the 0.25 Language/Parser API."
+    )
+
+
+def test_grammar_wheels_are_the_pinned_pairing() -> None:
+    assert _version_tuple("tree-sitter-javascript") >= (0, 25)
+    assert _version_tuple("tree-sitter-typescript") >= (0, 23, 2)

{codemble-0.5.2 → codemble-0.5.3}/web/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "codemble-web",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codemble-web",
-      "version": "0.5.2",
+      "version": "0.5.3",
       "dependencies": {
         "@fontsource/jetbrains-mono": "5.2.8",
         "@fontsource/shippori-mincho": "^5.3.0",

{codemble-0.5.2 → codemble-0.5.3}/web/package.json

@@ -1,7 +1,7 @@
 {
   "name": "codemble-web",
   "private": true,
-  "version": "0.5.2",
+  "version": "0.5.3",
   "type": "module",
   "scripts": {
     "dev": "vite",