imperal-sdk 6.2.0__tar.gz → 6.3.1__tar.gz

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable changes to `imperal-sdk` are documented here.
 
+## 6.3.1 — 2026-10-20
+
+### Security
+- The SFTP reads never follow a link: `sftp_read_many` and `sftp_read_meta` skip a symlinked file and a
+  path whose server-resolved location leaves the root (a linked directory); a symlinked `.git` or config
+  is not read.
+- `sftp_read_meta` no longer ships the raw `.git/config`: only the origin URL, without credentials.
+
+## 6.3.0 — 2026-10-20 (tagged, not published: its CI failed -- everything below ships in 6.3.1)
+
+### Added
+- **One sync for every source** (code graph phases 2-7): `sync_source(plan, apply, meta, listing, read)`
+  — the vault plans what changed, only those files are read, normalised, hashed, extracted and sent
+  in size-bounded batches (`apply_batches`); an unchanged repo refreshes its copy with a meta-only apply.
+- The SFTP walk shared by the gateway broker and the client: `sftp_repo_root`, `sftp_list_tree`
+  (`.gitignore`, secrets, dependency dirs and symlinks leaving the root skipped; Windows SFTP paths),
+  `sftp_read_many`, `sftp_read_meta` — reads only, no exec channel, nothing written.
+- `git_identity(meta)`: remote, branch and commit from `.git/HEAD`, `config`, loose refs and
+  packed-refs bytes (no git binary).
+- Chunks and vectors moved from the Webbee Code client: `Chunk`, `chunk_text`, `chunk_file`,
+  `chunk_index`, `chunk_blob`, `chunks_for`, `embed`, `embed_query`, `load_backend`
+  (model2vec `potion-base-8M`, else fastembed).
+- New optional extra `code-index-embed` (model2vec, numpy).
+
 ## 6.2.0 — 2026-10-20
 
 ### Added

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: imperal-sdk
-Version: 6.2.0
+Version: 6.3.1
 Summary: SDK for building Imperal Cloud extensions
 Author: Valentin Scerbacov, Imperal, Inc.
 License-Expression: Apache-2.0
@@ -32,6 +32,9 @@ Requires-Dist: tree-sitter-javascript>=0.23; (sys_platform != 'darwin' or platfo
 Requires-Dist: tree-sitter-python>=0.23; (sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13') and extra == 'code-index'
 Requires-Dist: tree-sitter-typescript>=0.23; (sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13') and extra == 'code-index'
 Requires-Dist: tree-sitter>=0.23; (sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13') and extra == 'code-index'
+Provides-Extra: code-index-embed
+Requires-Dist: model2vec>=0.8.2; (sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13') and extra == 'code-index-embed'
+Requires-Dist: numpy>=2; (sys_platform != 'darwin' or platform_machine != 'x86_64' or python_version < '3.13') and extra == 'code-index-embed'
 Provides-Extra: contract
 Requires-Dist: schemathesis>=3.30.0; extra == 'contract'
 Provides-Extra: db

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/pyproject.toml

@@ -69,6 +69,11 @@ code-index = [
     'tree-sitter-typescript>=0.23; sys_platform != "darwin" or platform_machine != "x86_64" or python_version < "3.13"',
     'tree-sitter-javascript>=0.23; sys_platform != "darwin" or platform_machine != "x86_64" or python_version < "3.13"',
 ]
+# imperal_sdk.code_index.embed / embed_query: the code index's vectors (model2vec, pure numpy).
+code-index-embed = [
+    'model2vec>=0.8.2; sys_platform != "darwin" or platform_machine != "x86_64" or python_version < "3.13"',
+    'numpy>=2; sys_platform != "darwin" or platform_machine != "x86_64" or python_version < "3.13"',
+]
 
 [project.scripts]
 imperal = "imperal_sdk.cli.main:cli"

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/sdk-reference.json

@@ -1,5 +1,5 @@
 {
-  "sdk_version": "6.2.0",
+  "sdk_version": "6.3.1",
   "symbols": {
     "ActionResult": {
       "action_vocab_safe": false,

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/sdk_claims.json

@@ -1,5 +1,5 @@
 {
-  "_sdk_version": "6.2.0",
+  "_sdk_version": "6.3.1",
   "constants": {
     "max_call_depth": {
       "counts_root": true,

{imperal_sdk-6.2.0 → imperal_sdk-6.3.1}/src/imperal_sdk/__init__.py

@@ -1,7 +1,7 @@
 """Imperal Cloud SDK — build extensions for the Imperal platform."""
 from typing import TYPE_CHECKING
 
-__version__ = "6.2.0"
+__version__ = "6.3.1"
 
 # 5.2.2 (2026-06-11): the package root resolves its public surface lazily
 # (PEP 562). The eager imports pulled the HTTP transport (Context / client