index-graph 1.0.0__tar.gz

index_graph-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,16 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install -e ".[test]"
+      - run: python -m pytest

index_graph-1.0.0/.github/workflows/release-artifacts.yml

@@ -0,0 +1,41 @@
+name: Release Artifacts
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+      - name: Build and check the package
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install build twine
+          python -m build
+          python -m twine check dist/*
+      - uses: actions/upload-artifact@v5
+        with:
+          name: index-graph-dist
+          path: dist/*
+
+  pypi-publish:
+    name: Publish to PyPI
+    needs: build
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/download-artifact@v5
+        with:
+          name: index-graph-dist
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}

index_graph-1.0.0/.gitignore

@@ -0,0 +1,17 @@
+__pycache__/
+.pytest_cache/
+.venv/
+env/
+*.pyc
+.idea/
+dist/
+build/
+.ruff_cache/
+.mypy_cache/
+
+# local safe-io cache (runtime artifact, never committed)
+.warden-safe-cache/
+.superpowers/
+
+# viz dogfood output (runtime artifact, never committed)
+.viz-dogfood-out/

index_graph-1.0.0/AUTHORS.md

@@ -0,0 +1 @@
+Zain Dana Harper

index_graph-1.0.0/CHANGELOG.md

@@ -0,0 +1,51 @@
+# Changelog
+
+## 1.0.0
+
+Renamed to **index** (`pip install index-graph`, command `index`); flagship release. (Was `workspace-repo-map`.)
+
+## 0.4.0
+
+- Add `viz` subcommand: render the dependency graph as a self-contained interactive
+  HTML dashboard (default), a standalone SVG network graph, or a Mermaid flowchart.
+- `viz --format all` also emits `context.json` and a `context-manifest.json` handoff
+  (artifact paths + content hashes) for downstream consumers.
+- Renders are deterministic (byte-identical for identical input) and self-contained
+  (no external URLs, no runtime dependencies).
+
+## 0.3.0
+
+### Added
+- `graph` subcommand: infer a repo→repo dependency graph from Python and
+  JavaScript/TypeScript manifests and source imports. Every edge carries its
+  evidence (witnessing file/line + signal kind) and a confidence grade.
+- `context` subcommand: render a synthesis context pack (structural roles +
+  relations + extracted prose) with a salience-faithfulness audit and a
+  `--focus <repo>` neighborhood closure.
+
+### Changed
+- The CLI now uses subcommands (`map`, `graph`, `context`). The previous flat
+  invocation (`workspace-repo-map --root ...`) is preserved and dispatches to `map`.
+- Makes generated repository maps portable by default.
+- Replaces absolute local root paths with a root hash prefix.
+- Omits protected remotes and redacts credential-shaped remote URL material.
+
+## 0.2.0 - 2026-06-18
+
+- Config-driven classification via optional `.repomap.toml` (ordered path-glob rules,
+  neutral remote-host fallback). Personal taxonomy moves to user config.
+- Unifies the CLI into a single argument parser; removes the duplicate.
+- Adds a stable public API (`__all__`, `__version__`) and a versioned output
+  (`schema_version: 1`); drops the duplicated `relative` field and protected-specific
+  counts in favor of generic `class_counts`.
+- Parallelizes per-repo git calls; output remains deterministic.
+- Adds a portable (default) / local output mode and an `annotations` passthrough.
+- Raises the Python floor to 3.11 (stdlib `tomllib`); runtime dependencies stay empty.
+
+## 0.1.0 - 2026-06-13
+
+- Initial public release candidate.
+- Ships compact JSON repository inventory mapping for multi-repo local
+  workspaces.
+- Adds Python package metadata, CI, license, authorship, and contribution
+  boundary files.

index_graph-1.0.0/CONTRIBUTING.md

@@ -0,0 +1,12 @@
+# Contributing
+
+## Success Criteria
+
+- Public docs and scripts include explicit references to known limitations.
+- No secrets and no em-dash characters in public markdown.
+- Release artifacts are deterministic and reproducible.
+- Tests cover core behavior.
+
+## How to Contribute
+
+Open PRs with targeted changes and include test coverage for behavior changes.

index_graph-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zain Dana Harper
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

index_graph-1.0.0/PKG-INFO

@@ -0,0 +1,148 @@
+Metadata-Version: 2.4
+Name: index-graph
+Version: 1.0.0
+Summary: Compact JSON repository inventory maps for multi-repo workspaces.
+Project-URL: Homepage, https://github.com/HarperZ9/index
+Project-URL: Repository, https://github.com/HarperZ9/index
+Project-URL: Issues, https://github.com/HarperZ9/index/issues
+Author: Zain Dana Harper
+License: MIT
+License-File: AUTHORS.md
+License-File: LICENSE
+Keywords: cli,git,inventory,workspace
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.11
+Provides-Extra: test
+Requires-Dist: pytest>=8; extra == 'test'
+Description-Content-Type: text/markdown
+
+# index
+
+> **See the shape of any codebase**: a repo-dependency graph + an interactive HTML dashboard, built from real code evidence — zero dependencies.
+
+[![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+![python](https://img.shields.io/badge/python-3.11%2B-blue.svg)
+![version](https://img.shields.io/badge/version-1.0.0-informational.svg)
+[![CI](https://github.com/HarperZ9/index-graph/actions/workflows/ci.yml/badge.svg)](https://github.com/HarperZ9/index-graph/actions/workflows/ci.yml)
+![deps: none](https://img.shields.io/badge/deps-none-success.svg)
+
+`index` scans a workspace for Git repositories and renders a **dependency and topology graph** of them — as an interactive self-contained HTML dashboard, layered SVG, Mermaid, and a JSON context manifest. Every edge in the graph carries its own evidence (the file and line that witnesses it, plus a confidence grade). Output is deterministic; nothing to install beyond Python.
+
+## 30-second quickstart
+
+```bash
+pip install index-graph
+index viz --root /path/to/your/workspace --format html --out graph.html
+open graph.html   # or: start graph.html on Windows
+```
+
+That produces a self-contained HTML file with an interactive dashboard: clickable nodes, layered layout, dependency lanes, and summary charts — no server, no assets, nothing to host.
+
+To also write the raw JSON manifest:
+
+```bash
+index map --root /path/to/your/workspace --output INDEX.json
+```
+
+## What you get
+
+| Output | Command | Description |
+|--------|---------|-------------|
+| **Interactive HTML dashboard** | `index viz --format html` | Self-contained; click nodes, explore layers and charts |
+| **Layered SVG** | `index viz --format svg` | Static vector graph suitable for docs/CI artifacts |
+| **Mermaid diagram** | `index viz --format mermaid` | Paste into GitHub markdown or any Mermaid renderer |
+| **All three at once** | `index viz --format all --out-dir ./out` | Writes `graph.html`, `graph.svg`, `graph.mmd` |
+| **JSON context manifest** | `index map` | Machine-readable inventory: remotes, branches, dirty counts, classification |
+| **Dependency graph (text/JSON)** | `index graph` | Repo→repo edges with evidence; each edge carries its witness |
+| **Context pack (prose + relations)** | `index context` | Synthesis pack: roles, relations, narrative summary |
+
+## CLI reference
+
+```
+index map     [--root ROOT] [--output FILE] [--json] [--config CFG]
+index graph   [--root ROOT] [--json]
+index context [--root ROOT] [--focus REPO]
+index viz     [--root ROOT] [--format {html,svg,mermaid,all}]
+              [--focus REPO] [--no-external] [--out FILE] [--out-dir DIR]
+```
+
+`--focus REPO` narrows any render to a single repo's bidirectional dependency neighborhood.
+`--no-external` hides stdlib/third-party nodes, keeping the graph to workspace repos only.
+
+## Dependency graph example
+
+Running `index viz --root ./my-workspace --format mermaid` produces a Mermaid flowchart where
+workspace repos are rectangular nodes and external dependencies are rounded nodes:
+
+```mermaid
+flowchart TD
+    n_api["api"]
+    n_core["core"]
+    n_cli["cli"]
+    n_pathlib(("pathlib"))
+    n_requests(("requests"))
+    n_core --> n_pathlib
+    n_api --> n_core
+    n_cli --> n_api
+    n_cli --> n_requests
+```
+
+Every `-->` edge in the real output carries the file (and line) that witnesses it.
+
+## Configuration
+
+Place an optional `.index.toml` at your workspace root to control classification rules,
+which remotes to drop, and parallel worker count:
+
+```toml
+# .index.toml — at your workspace root
+[[rule]]                  # classify repos by workspace-relative path; first match wins
+pattern = "oss/**"
+class   = "public"
+
+[[rule]]
+pattern = "work/**"
+class   = "internal"
+
+[scan]
+jobs  = 16                    # parallel workers
+prune = ["vendor", "target"]  # extra dirs to skip (added to the built-in safety set)
+
+[privacy]
+omit_origin_classes = ["internal"]   # drop remote URLs for repos in these classes
+
+[output]
+portable = true               # root-relative paths + hashed root (default on)
+```
+
+See [`example.index.toml`](example.index.toml) for the full schema and [`USAGE.md`](USAGE.md) for the
+complete flag reference, the importable Python API, and worked examples with expected output.
+
+## Guarantees
+
+- **Evidence on every edge.** No edge appears in the graph without a file (and line) that witnesses it and a confidence grade (`high` when both a declared dependency and an observed import agree).
+- **Deterministic output.** The same workspace produces the same JSON and renders every time.
+- **Zero runtime dependencies.** Pure Python stdlib; nothing to install beyond Python 3.11+.
+- **Portable maps.** Repository paths are root-relative; the local root is represented by a short hash; credential-shaped strings in remote URLs are always redacted.
+
+## Install
+
+```bash
+pip install index-graph
+```
+
+Or from a checkout:
+
+```bash
+pip install -e .
+```
+
+---
+**Zain Dana Harper** — small tools with explicit edges.
+[Portfolio](https://harperz9.github.io) · [HarperZ9](https://github.com/HarperZ9)
+<sub>Built with Claude Code; reviewed, tested, and owned by me.</sub>

index_graph-1.0.0/README.md

@@ -0,0 +1,125 @@
+# index
+
+> **See the shape of any codebase**: a repo-dependency graph + an interactive HTML dashboard, built from real code evidence — zero dependencies.
+
+[![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+![python](https://img.shields.io/badge/python-3.11%2B-blue.svg)
+![version](https://img.shields.io/badge/version-1.0.0-informational.svg)
+[![CI](https://github.com/HarperZ9/index-graph/actions/workflows/ci.yml/badge.svg)](https://github.com/HarperZ9/index-graph/actions/workflows/ci.yml)
+![deps: none](https://img.shields.io/badge/deps-none-success.svg)
+
+`index` scans a workspace for Git repositories and renders a **dependency and topology graph** of them — as an interactive self-contained HTML dashboard, layered SVG, Mermaid, and a JSON context manifest. Every edge in the graph carries its own evidence (the file and line that witnesses it, plus a confidence grade). Output is deterministic; nothing to install beyond Python.
+
+## 30-second quickstart
+
+```bash
+pip install index-graph
+index viz --root /path/to/your/workspace --format html --out graph.html
+open graph.html   # or: start graph.html on Windows
+```
+
+That produces a self-contained HTML file with an interactive dashboard: clickable nodes, layered layout, dependency lanes, and summary charts — no server, no assets, nothing to host.
+
+To also write the raw JSON manifest:
+
+```bash
+index map --root /path/to/your/workspace --output INDEX.json
+```
+
+## What you get
+
+| Output | Command | Description |
+|--------|---------|-------------|
+| **Interactive HTML dashboard** | `index viz --format html` | Self-contained; click nodes, explore layers and charts |
+| **Layered SVG** | `index viz --format svg` | Static vector graph suitable for docs/CI artifacts |
+| **Mermaid diagram** | `index viz --format mermaid` | Paste into GitHub markdown or any Mermaid renderer |
+| **All three at once** | `index viz --format all --out-dir ./out` | Writes `graph.html`, `graph.svg`, `graph.mmd` |
+| **JSON context manifest** | `index map` | Machine-readable inventory: remotes, branches, dirty counts, classification |
+| **Dependency graph (text/JSON)** | `index graph` | Repo→repo edges with evidence; each edge carries its witness |
+| **Context pack (prose + relations)** | `index context` | Synthesis pack: roles, relations, narrative summary |
+
+## CLI reference
+
+```
+index map     [--root ROOT] [--output FILE] [--json] [--config CFG]
+index graph   [--root ROOT] [--json]
+index context [--root ROOT] [--focus REPO]
+index viz     [--root ROOT] [--format {html,svg,mermaid,all}]
+              [--focus REPO] [--no-external] [--out FILE] [--out-dir DIR]
+```
+
+`--focus REPO` narrows any render to a single repo's bidirectional dependency neighborhood.
+`--no-external` hides stdlib/third-party nodes, keeping the graph to workspace repos only.
+
+## Dependency graph example
+
+Running `index viz --root ./my-workspace --format mermaid` produces a Mermaid flowchart where
+workspace repos are rectangular nodes and external dependencies are rounded nodes:
+
+```mermaid
+flowchart TD
+    n_api["api"]
+    n_core["core"]
+    n_cli["cli"]
+    n_pathlib(("pathlib"))
+    n_requests(("requests"))
+    n_core --> n_pathlib
+    n_api --> n_core
+    n_cli --> n_api
+    n_cli --> n_requests
+```
+
+Every `-->` edge in the real output carries the file (and line) that witnesses it.
+
+## Configuration
+
+Place an optional `.index.toml` at your workspace root to control classification rules,
+which remotes to drop, and parallel worker count:
+
+```toml
+# .index.toml — at your workspace root
+[[rule]]                  # classify repos by workspace-relative path; first match wins
+pattern = "oss/**"
+class   = "public"
+
+[[rule]]
+pattern = "work/**"
+class   = "internal"
+
+[scan]
+jobs  = 16                    # parallel workers
+prune = ["vendor", "target"]  # extra dirs to skip (added to the built-in safety set)
+
+[privacy]
+omit_origin_classes = ["internal"]   # drop remote URLs for repos in these classes
+
+[output]
+portable = true               # root-relative paths + hashed root (default on)
+```
+
+See [`example.index.toml`](example.index.toml) for the full schema and [`USAGE.md`](USAGE.md) for the
+complete flag reference, the importable Python API, and worked examples with expected output.
+
+## Guarantees
+
+- **Evidence on every edge.** No edge appears in the graph without a file (and line) that witnesses it and a confidence grade (`high` when both a declared dependency and an observed import agree).
+- **Deterministic output.** The same workspace produces the same JSON and renders every time.
+- **Zero runtime dependencies.** Pure Python stdlib; nothing to install beyond Python 3.11+.
+- **Portable maps.** Repository paths are root-relative; the local root is represented by a short hash; credential-shaped strings in remote URLs are always redacted.
+
+## Install
+
+```bash
+pip install index-graph
+```
+
+Or from a checkout:
+
+```bash
+pip install -e .
+```
+
+---
+**Zain Dana Harper** — small tools with explicit edges.
+[Portfolio](https://harperz9.github.io) · [HarperZ9](https://github.com/HarperZ9)
+<sub>Built with Claude Code; reviewed, tested, and owned by me.</sub>

index_graph-1.0.0/RELEASE.md

@@ -0,0 +1,16 @@
+# Release Checklist
+
+## 0.1.0 Candidate
+
+- [ ] Confirm `README.md`, `LICENSE`, `AUTHORS.md`, `CONTRIBUTING.md`, and
+  `CHANGELOG.md` are present.
+- [ ] Run `python -m pytest -q`.
+- [ ] Run `python -m build`.
+- [ ] Run `python -m twine check dist/*`.
+- [ ] Run `public-surface-sweeper . --summary`.
+- [ ] Create a signed `v0.1.0` tag when signing is configured, or an
+  annotated `v0.1.0` tag when it is not.
+- [ ] Publish to PyPI only after account ownership, 2FA, and trusted publishing
+  configuration are confirmed.
+
+This repository does not auto-publish to a package registry.