notebook-intelligence 5.3.0a1__tar.gz → 5.3.0a2__tar.gz

{notebook_intelligence-5.3.0a1 → notebook_intelligence-5.3.0a2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: notebook_intelligence
-Version: 5.3.0a1
+Version: 5.3.0a2
 Summary: AI coding assistant for JupyterLab
 Project-URL: Homepage, https://github.com/plmbr/notebook-intelligence
 Project-URL: Bug Tracker, https://github.com/plmbr/notebook-intelligence/issues
@@ -694,20 +694,24 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.10
+Requires-Dist: aiohttp>=3.14.1
 Requires-Dist: anthropic>=0.22.1
 Requires-Dist: claude-agent-sdk
 Requires-Dist: cryptography
 Requires-Dist: fuzy-jon==0.1.0
-Requires-Dist: jupyter-server<3,>=2.18.0
+Requires-Dist: jupyter-server<3,>=2.20.0
 Requires-Dist: litellm>=1.83.7
-Requires-Dist: mcp>=1.27.0
-Requires-Dist: mistune>=3.2.1
+Requires-Dist: mcp>=1.28.1
+Requires-Dist: mistune>=3.3.0
 Requires-Dist: ollama
 Requires-Dist: openai
 Requires-Dist: psutil>=5.7
+Requires-Dist: pydantic-settings>=2.14.2
 Requires-Dist: python-multipart>=0.0.27
 Requires-Dist: sseclient-py
+Requires-Dist: starlette>=1.3.1
 Requires-Dist: tiktoken
+Requires-Dist: tornado>=6.5.7
 Requires-Dist: urllib3>=2.7.0
 Provides-Extra: test
 Requires-Dist: psutil; extra == 'test'

{notebook_intelligence-5.3.0a1 → notebook_intelligence-5.3.0a2}/notebook_intelligence/_version.py

@@ -1,4 +1,4 @@
 # This file is auto-generated by Hatchling. As such, do not:
 #   - modify
 #   - track in version control e.g. be sure to add to .gitignore
-__version__ = VERSION = '5.3.0a1'
+__version__ = VERSION = '5.3.0a2'

{notebook_intelligence-5.3.0a1 → notebook_intelligence-5.3.0a2/notebook_intelligence/labextension}/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plmbr/notebook-intelligence",
-    "version": "5.3.0-a1",
+    "version": "5.3.0-a2",
     "description": "AI coding assistant for JupyterLab",
     "keywords": [
         "AI",
@@ -121,7 +121,8 @@
     },
     "resolutions": {
         "minimatch": "^9.0.7",
-        "prismjs": "^1.30.0"
+        "prismjs": "^1.30.0",
+        "serialize-javascript@^6.0.1": "^7.0.5"
     },
     "sideEffects": [
         "style/*.css",

{notebook_intelligence-5.3.0a1 → notebook_intelligence-5.3.0a2}/notebook_intelligence/labextension/schemas/@plmbr/notebook-intelligence/package.json.orig

@@ -1,6 +1,6 @@
 {
     "name": "@plmbr/notebook-intelligence",
-    "version": "5.3.0-a1",
+    "version": "5.3.0-a2",
     "description": "AI coding assistant for JupyterLab",
     "keywords": [
         "AI",
@@ -121,7 +121,8 @@
     },
     "resolutions": {
         "minimatch": "^9.0.7",
-        "prismjs": "^1.30.0"
+        "prismjs": "^1.30.0",
+        "serialize-javascript@^6.0.1": "^7.0.5"
     },
     "sideEffects": [
         "style/*.css",

notebook_intelligence-5.3.0a2/package.json

@@ -0,0 +1,265 @@
+{
+    "name": "@plmbr/notebook-intelligence",
+    "version": "5.3.0-a2",
+    "description": "AI coding assistant for JupyterLab",
+    "keywords": [
+        "AI",
+        "notebook",
+        "intelligence",
+        "jupyter",
+        "jupyterlab",
+        "jupyterlab-extension"
+    ],
+    "homepage": "https://github.com/plmbr/notebook-intelligence",
+    "bugs": {
+        "url": "https://github.com/plmbr/notebook-intelligence/issues"
+    },
+    "license": "GPL-3.0",
+    "author": {
+        "name": "Mehmet Bektas",
+        "email": "mbektasgh@outlook.com"
+    },
+    "files": [
+        "lib/**/*.{d.ts,eot,gif,html,jpg,js,js.map,json,png,svg,woff2,ttf}",
+        "style/**/*.{css,js,eot,gif,html,jpg,json,png,svg,woff2,ttf}",
+        "src/**/*.{ts,tsx}",
+        "schema/*.json"
+    ],
+    "main": "lib/index.js",
+    "types": "lib/index.d.ts",
+    "style": "style/index.css",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/plmbr/notebook-intelligence.git"
+    },
+    "scripts": {
+        "build": "jlpm build:lib && jlpm build:labextension:dev",
+        "build:prod": "jlpm clean && jlpm build:lib:prod && jlpm build:labextension",
+        "build:labextension": "jupyter labextension build .",
+        "build:labextension:dev": "jupyter labextension build --development True .",
+        "build:lib": "tsc --sourceMap",
+        "build:lib:prod": "tsc",
+        "clean": "jlpm clean:lib",
+        "clean:lib": "rimraf lib tsconfig.tsbuildinfo",
+        "clean:lintcache": "rimraf .eslintcache .stylelintcache",
+        "clean:labextension": "rimraf notebook_intelligence/labextension notebook_intelligence/_version.py",
+        "clean:all": "jlpm clean:lib && jlpm clean:labextension && jlpm clean:lintcache",
+        "eslint": "jlpm eslint:check --fix",
+        "eslint:check": "eslint . --cache --ext .ts,.tsx",
+        "install:extension": "jlpm build",
+        "lint": "jlpm stylelint && jlpm prettier && jlpm eslint",
+        "lint:check": "jlpm stylelint:check && jlpm prettier:check && jlpm eslint:check",
+        "postinstall": "husky || exit 0",
+        "prettier": "jlpm prettier:base --write --list-different",
+        "prettier:base": "prettier \"**/*{.ts,.tsx,.js,.jsx,.css,.json,.md}\"",
+        "prettier:check": "jlpm prettier:base --check",
+        "stylelint": "jlpm stylelint:check --fix",
+        "stylelint:check": "stylelint --cache \"style/**/*.css\"",
+        "test": "jest",
+        "test:watch": "jest --watch",
+        "test:coverage": "jest --coverage",
+        "watch": "run-p watch:src watch:labextension",
+        "watch:src": "tsc -w --sourceMap",
+        "watch:labextension": "jupyter labextension watch ."
+    },
+    "dependencies": {
+        "@codemirror/state": "^6.4.1",
+        "@codemirror/view": "^6.26.0",
+        "@jupyterlab/application": "^4.0.0",
+        "@jupyterlab/completer": "^4.0.0",
+        "@jupyterlab/coreutils": "^6.0.0",
+        "@jupyterlab/fileeditor": "^4.0.0",
+        "@jupyterlab/launcher": "~4.2.0",
+        "@jupyterlab/mainmenu": "^4.0.0",
+        "@jupyterlab/notebook": "^4.0.0",
+        "@jupyterlab/services": "^7.0.0",
+        "@jupyterlab/settingregistry": "^4.0.0",
+        "@jupyterlab/terminal": "^4.0.0",
+        "monaco-editor": "0.21.3",
+        "react-icons": "~5.6.0",
+        "react-markdown": "^9.0.1",
+        "react-syntax-highlighter": "^15.4.4",
+        "remark-gfm": "4.0.0",
+        "strip-ansi": "7.0.1",
+        "tiktoken": "1.0.18"
+    },
+    "devDependencies": {
+        "@jupyterlab/builder": "^4.0.0",
+        "@testing-library/jest-dom": "^6.4.0",
+        "@testing-library/react": "^14.2.0",
+        "@types/jest": "^29.5.12",
+        "@types/json-schema": "^7.0.11",
+        "@types/node": "~20.0.0",
+        "@types/react": "^18.0.26",
+        "@types/react-addons-linked-state-mixin": "^0.14.22",
+        "@types/react-syntax-highlighter": "^15.5.13",
+        "@typescript-eslint/eslint-plugin": "^6.1.0",
+        "@typescript-eslint/parser": "^6.1.0",
+        "css-loader": "^6.7.1",
+        "eslint": "^8.36.0",
+        "eslint-config-prettier": "^8.8.0",
+        "eslint-plugin-prettier": "^5.0.0",
+        "husky": "^9.1.7",
+        "jest": "^29.7.0",
+        "jest-environment-jsdom": "^29.7.0",
+        "lint-staged": "^15.2.10",
+        "mkdirp": "^1.0.3",
+        "monaco-editor-webpack-plugin": "^2.0.0",
+        "npm-run-all": "^4.1.5",
+        "prettier": "^3.0.0",
+        "rimraf": "^5.0.1",
+        "source-map-loader": "^1.0.2",
+        "style-loader": "^3.3.1",
+        "stylelint": "^15.10.1",
+        "stylelint-config-recommended": "^13.0.0",
+        "stylelint-config-standard": "^34.0.0",
+        "stylelint-csstree-validator": "^3.0.0",
+        "stylelint-prettier": "^4.0.0",
+        "ts-jest": "^29.1.2",
+        "typescript": "~5.0.2",
+        "yjs": "^13.5.0"
+    },
+    "resolutions": {
+        "minimatch": "^9.0.7",
+        "prismjs": "^1.30.0",
+        "serialize-javascript@^6.0.1": "^7.0.5"
+    },
+    "sideEffects": [
+        "style/*.css",
+        "style/index.js"
+    ],
+    "styleModule": "style/index.js",
+    "publishConfig": {
+        "access": "public"
+    },
+    "jupyterlab": {
+        "discovery": {
+            "server": {
+                "managers": [
+                    "pip"
+                ],
+                "base": {
+                    "name": "notebook_intelligence"
+                }
+            }
+        },
+        "extension": true,
+        "outputDir": "notebook_intelligence/labextension",
+        "schemaDir": "schema",
+        "webpackConfig": "./webpack.config.js",
+        "sharedPackages": {
+            "@plmbr/notebook-intelligence": {
+                "singleton": true
+            }
+        }
+    },
+    "eslintIgnore": [
+        "node_modules",
+        "dist",
+        "coverage",
+        "**/*.d.ts"
+    ],
+    "eslintConfig": {
+        "extends": [
+            "eslint:recommended",
+            "plugin:@typescript-eslint/eslint-recommended",
+            "plugin:@typescript-eslint/recommended",
+            "plugin:prettier/recommended"
+        ],
+        "parser": "@typescript-eslint/parser",
+        "parserOptions": {
+            "project": "tsconfig.json",
+            "sourceType": "module"
+        },
+        "plugins": [
+            "@typescript-eslint"
+        ],
+        "overrides": [
+            {
+                "files": [
+                    "tests/ts/**/*.ts",
+                    "tests/ts/**/*.tsx"
+                ],
+                "parserOptions": {
+                    "project": "tests/ts/tsconfig.json"
+                },
+                "env": {
+                    "jest": true
+                }
+            }
+        ],
+        "rules": {
+            "@typescript-eslint/naming-convention": [
+                "error",
+                {
+                    "selector": "interface",
+                    "format": [
+                        "PascalCase"
+                    ],
+                    "custom": {
+                        "regex": "^I[A-Z]",
+                        "match": true
+                    }
+                }
+            ],
+            "@typescript-eslint/no-unused-vars": [
+                "warn",
+                {
+                    "args": "none",
+                    "varsIgnorePattern": "^_"
+                }
+            ],
+            "@typescript-eslint/no-explicit-any": "off",
+            "@typescript-eslint/no-namespace": "off",
+            "@typescript-eslint/no-use-before-define": "off",
+            "@typescript-eslint/quotes": [
+                "error",
+                "single",
+                {
+                    "avoidEscape": true,
+                    "allowTemplateLiterals": false
+                }
+            ],
+            "curly": [
+                "error",
+                "all"
+            ],
+            "eqeqeq": "error",
+            "prefer-arrow-callback": "error"
+        }
+    },
+    "prettier": {
+        "singleQuote": true,
+        "trailingComma": "none",
+        "arrowParens": "avoid",
+        "endOfLine": "auto",
+        "overrides": [
+            {
+                "files": "package.json",
+                "options": {
+                    "tabWidth": 4
+                }
+            }
+        ]
+    },
+    "lint-staged": {
+        "*": "prettier --write --ignore-unknown"
+    },
+    "stylelint": {
+        "extends": [
+            "stylelint-config-recommended",
+            "stylelint-config-standard",
+            "stylelint-prettier/recommended"
+        ],
+        "plugins": [
+            "stylelint-csstree-validator"
+        ],
+        "rules": {
+            "csstree/validator": true,
+            "property-no-vendor-prefix": null,
+            "selector-class-pattern": "^([a-z][A-z\\d]*)(-[A-z\\d]+)*$",
+            "selector-no-vendor-prefix": null,
+            "value-no-vendor-prefix": null
+        }
+    }
+}

{notebook_intelligence-5.3.0a1 → notebook_intelligence-5.3.0a2}/pyproject.toml

@@ -21,9 +21,10 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
 ]
 dependencies = [
-    # 2.18.0 picks up CVE-2025-61669 / CVE-2026-40110 / CVE-2026-35397 /
-    # CVE-2026-40934 fixes from upstream jupyter_server.
-    "jupyter_server>=2.18.0,<3",
+    # 2.18.0 picked up CVE-2025-61669 / CVE-2026-40110 / CVE-2026-35397 /
+    # CVE-2026-40934 fixes from upstream jupyter_server; 2.20.0 adds the
+    # PYSEC-2026-366 fix.
+    "jupyter_server>=2.20.0,<3",
     "sseclient-py",
     "fuzy-jon==0.1.0",
     "tiktoken",
@@ -46,8 +47,9 @@ dependencies = [
     # subset of fastmcp's surface NBI needs against the official SDK,
     # which lists python-dotenv only as an optional ``cli`` extra and
     # is already in the dep tree via ``claude-agent-sdk``. Track
-    # BerriAI/litellm#25231 for the upstream fix.
-    "mcp>=1.27.0",
+    # BerriAI/litellm#25231 for the upstream fix. 1.28.1 picks up the
+    # CVE-2026-59950 fix.
+    "mcp>=1.28.1",
     "claude-agent-sdk",
     "anthropic>=0.22.1",
     # Used to tear down an agent subprocess and its descendants (shells, MCP
@@ -58,12 +60,21 @@ dependencies = [
     "psutil>=5.7",
     # Transitive lower bounds for known CVEs whose parents don't pin
     # tightly enough on their own.
-    "mistune>=3.2.1",  # CVE-2026-33441
+    "mistune>=3.3.0",  # CVE-2026-33441; 3.3.0 adds the PYSEC-2026-2210..2218/2652 fixes
     "python-multipart>=0.0.27",  # CVE-2026-42561
     # urllib3 reaches us via `requests` (tiktoken's dep), which doesn't
     # cap the upper bound. 2.7.0 picks up CVE-2026-44431 (cross-origin
     # redirect handling) and CVE-2026-44432 (streaming API).
     "urllib3>=2.7.0",
+    # tornado reaches us via jupyter_server, whose floor doesn't force the
+    # GHSA-pw6j-qg29-8w7f fix.
+    "tornado>=6.5.7",
+    # starlette and pydantic-settings reach us via the mcp SDK, whose pins
+    # don't force the fixed releases.
+    "starlette>=1.3.1",  # PYSEC-2026-248 / PYSEC-2026-249
+    "pydantic-settings>=2.14.2",  # GHSA-4xgf-cpjx-pc3j
+    # aiohttp reaches us via litellm.
+    "aiohttp>=3.14.1",  # PYSEC-2026-2107..2113
     # python-dotenv: ``litellm 1.83.1+`` hard-pins ``==1.0.1`` and refuses
     # to bump it (see BerriAI/litellm#25231 / #26435). NBI doesn't import
     # python-dotenv directly and no longer pulls fastmcp (which would