simplevecdb 2.2.0__tar.gz

simplevecdb-2.2.0/.bandit

@@ -0,0 +1,9 @@
+exclude_dirs:
+
+- /tests
+- /examples
+
+skips:
+
+- B104
+- B608  # SQL injection false positive: table names are validated via _validate_table_name()

simplevecdb-2.2.0/.env.example

@@ -0,0 +1,32 @@
+# SimpleVecDB Configuration
+
+# Embedding Model
+# Options: Any HuggingFace model ID compatible with SentenceTransformers
+
+# Default: Snowflake/snowflake-arctic-embed-xs (384-dim, best balance, fast)
+# Alternative: TaylorAI/bge-micro-v2 (384-dim, tiny, fast)
+
+# Note: All models converted to ONNX format for performance.
+
+EMBEDDING_MODEL=Snowflake/snowflake-arctic-embed-xs
+EMBEDDING_CACHE_DIR=~/.cache/simplevecdb  # Model cache directory
+# Optional: alias registry for allowed models (alias=repo_id,comma-separated)
+# EMBEDDING_MODEL_REGISTRY=default=Snowflake/snowflake-arctic-embed-xs,local-bge=TaylorAI/bge-micro-v2
+# Set to 0 to allow arbitrary repo IDs (default is locked)
+# EMBEDDING_MODEL_REGISTRY_LOCKED=1
+
+# Batch size for embedding inference (optional - auto-detected if not set)
+# Auto-detection considers: GPU VRAM, Apple Silicon, CPU cores, architecture
+# Override only if you need specific batch size for your use case
+# EMBEDDING_BATCH_SIZE=256
+
+# Embedding server controls
+# EMBEDDING_SERVER_MAX_REQUEST_ITEMS=128  # Max prompts per /v1/embeddings call
+# EMBEDDING_SERVER_API_KEYS=local-dev-token
+
+# Database
+DATABASE_PATH=./data/simplevecdb.db
+
+# Server Configuration
+SERVER_HOST=0.0.0.0
+SERVER_PORT=53287

simplevecdb-2.2.0/.github/FUNDING.yml

@@ -0,0 +1,6 @@
+github: [coderdayton]
+custom:
+  [
+    "https://simplevecdb.lemonsqueezy.com/",
+    "https://buymeacoffee.com/coderdayton",
+  ]

simplevecdb-2.2.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,82 @@
+name: Bug Report
+description: Report a bug in SimpleVecDB
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a bug. Please fill out the sections below.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Describe the bug
+      description: A clear and concise description of what the bug is.
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction steps
+      description: Minimal code to reproduce the issue.
+      placeholder: |
+        ```python
+        from simplevecdb import VectorDB
+        db = VectorDB(":memory:")
+        # ... code that triggers bug
+        ```
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What you expected to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: What actually happened. Include error messages if applicable.
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: SimpleVecDB version
+      placeholder: "2.0.0"
+    validations:
+      required: true
+
+  - type: input
+    id: python-version
+    attributes:
+      label: Python version
+      placeholder: "3.11"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: os
+    attributes:
+      label: Operating System
+      options:
+        - Linux
+        - macOS
+        - Windows
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: additional
+    attributes:
+      label: Additional context
+      description: Any other context about the problem (logs, screenshots, etc.)
+    validations:
+      required: false

simplevecdb-2.2.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Documentation
+    url: https://simplevecdb.dev
+    about: Check the docs before opening an issue
+  - name: Discussions
+    url: https://github.com/coderdayton/simplevecdb/discussions
+    about: Ask questions and share ideas

simplevecdb-2.2.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,58 @@
+name: Feature Request
+description: Suggest a new feature or enhancement
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting a feature! Please describe what you'd like to see.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem or motivation
+      description: What problem does this feature solve? Why do you need it?
+      placeholder: "I'm trying to do X but currently have to..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: How would you like this to work?
+      placeholder: |
+        ```python
+        # Example API usage
+        db = VectorDB("my.db")
+        db.new_feature(...)
+        ```
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or workarounds you've tried.
+    validations:
+      required: false
+
+  - type: dropdown
+    id: scope
+    attributes:
+      label: Scope
+      description: How big is this change?
+      options:
+        - Small (docs, minor tweak)
+        - Medium (new method, config option)
+        - Large (new module, breaking change)
+    validations:
+      required: true
+
+  - type: checkboxes
+    id: contribution
+    attributes:
+      label: Contribution
+      options:
+        - label: I'm willing to submit a PR for this feature

simplevecdb-2.2.0/.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5

simplevecdb-2.2.0/.github/workflows/ci.yml

@@ -0,0 +1,36 @@
+name: CI
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: uv sync --all-extras --dev
+
+      - name: Test with pytest
+        run: uv run pytest tests/ -vv --cov=src/simplevecdb
+
+      - name: Check coverage
+        run: |
+          uv run coverage report -m --fail-under=90

simplevecdb-2.2.0/.github/workflows/publish.yml

@@ -0,0 +1,121 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  # Verify version matches before publishing
+  verify:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.VERSION }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Extract version from tag
+        id: version
+        run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+
+      - name: Set up Python
+        run: uv python install 3.11
+
+      - name: Verify __version__ matches tag
+        run: |
+          PACKAGE_VERSION=$(uv run python -c "from simplevecdb import __version__; print(__version__)")
+          TAG_VERSION="${{ steps.version.outputs.VERSION }}"
+          if [ "$PACKAGE_VERSION" != "$TAG_VERSION" ]; then
+            echo "❌ Version mismatch!"
+            echo "   Tag version:     $TAG_VERSION"
+            echo "   Package version: $PACKAGE_VERSION"
+            echo ""
+            echo "Update __version__ in src/simplevecdb/__init__.py to match the tag."
+            exit 1
+          fi
+          echo "✅ Version match: $PACKAGE_VERSION"
+
+  release:
+    needs: verify
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Extract changelog for release
+        id: changelog
+        run: |
+          VERSION="${{ needs.verify.outputs.version }}"
+          # Extract section for this version from CHANGELOG.md
+          # Matches from "## [VERSION]" until the next "## [" or end of file
+          awk -v ver="$VERSION" '
+            /^## \[/ {
+              if (found) exit
+              if (index($0, "## [" ver "]") == 1) found=1
+            }
+            found
+          ' CHANGELOG.md > release_notes.md
+
+          # If empty, provide a fallback
+          if [ ! -s release_notes.md ]; then
+            echo "## Release v$VERSION" > release_notes.md
+            echo "" >> release_notes.md
+            echo "See [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/main/CHANGELOG.md) for details." >> release_notes.md
+          fi
+
+          echo "📋 Release notes:"
+          cat release_notes.md
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          body_path: release_notes.md
+          draft: false
+          prerelease: ${{ contains(needs.verify.outputs.version, 'rc') || contains(needs.verify.outputs.version, 'beta') || contains(needs.verify.outputs.version, 'alpha') }}
+          generate_release_notes: false
+
+  publish:
+    needs: [verify, release]
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+
+      - name: Set up Python
+        run: uv python install 3.11
+
+      - name: Build package
+        run: uv build
+
+      - name: Verify build artifacts
+        run: |
+          echo "📦 Built packages:"
+          ls -la dist/
+          # Verify version in built package
+          uv run python -c "
+          import zipfile
+          import glob
+          whl = glob.glob('dist/*.whl')[0]
+          with zipfile.ZipFile(whl) as z:
+              for name in z.namelist():
+                  if name.endswith('METADATA'):
+                      content = z.read(name).decode()
+                      for line in content.split('\n'):
+                          if line.startswith('Version:'):
+                              print(f'✅ Package version: {line}')
+                              break
+          "
+
+      - name: Publish to PyPI
+        run: uv publish --token ${{ secrets.PYPI_API_TOKEN }}

simplevecdb-2.2.0/.github/workflows/security.yml

@@ -0,0 +1,52 @@
+name: Security Scan
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: "0 0 * * 0" # Weekly
+
+jobs:
+  dependency-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+
+      - name: Set up Python
+        run: uv python install 3.11
+
+      - name: Create venv and install dependencies
+        run: |
+          uv venv
+          uv pip install pip-audit
+          uv pip install ".[dev,server]"
+
+      - name: Scan dependencies with pip-audit
+        run: |
+          uv run pip-audit --strict --ignore-vuln PYSEC-2024-142 || true
+
+  code-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+
+      - name: Set up Python
+        run: uv python install 3.11
+
+      - name: Create venv and install Bandit
+        run: |
+          uv venv
+          uv pip install bandit
+
+      - name: Run Bandit
+        run: uv run bandit -r src/ -ll -c .bandit
+
+      - name: Run Semgrep
+        uses: returntocorp/semgrep-action@v1

simplevecdb-2.2.0/.github/workflows/update-sponsors.yml

@@ -0,0 +1,27 @@
+name: Update Sponsors
+on:
+  schedule:
+    - cron: "0 0 * * *" # daily
+  workflow_dispatch:
+permissions:
+  contents: write
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout 🛎️
+        uses: actions/checkout@v4
+
+      - name: Update Sponsors ❤️
+        uses: JamesIves/github-sponsors-readme-action@v1
+        with:
+          file: README.md
+          token: ${{ secrets.GH_PAT }}
+
+      - name: Commit changes 📝
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git add README.md
+          git commit -m "Update sponsors list" || echo "No changes to commit"
+          git push origin HEAD:main

simplevecdb-2.2.0/.gitignore

@@ -0,0 +1,36 @@
+# Python / uv
+.venv/
+__pycache__/
+*.pyc
+.env
+dist/
+build/
+*.egg-info/
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+
+# IDE
+.vscode/
+.idea/
+
+# Jupyter
+.ipynb_checkpoints
+
+# Databases
+*.db
+*.sqlite
+
+# OpenCode
+.opencode/
+opencode.json
+
+# Project specific
+simplevecdb_plan.md
+AGENTS.md
+htmlcov/
+site/
+scripts
+.coverage
+NEXT_UPDATES.md
+pro_pack/

simplevecdb-2.2.0/.pre-commit-config.yaml

@@ -0,0 +1,30 @@
+repos:
+  - repo: local
+    hooks:
+      - id: ruff
+        name: ruff
+        entry: uv run ruff check . --fix
+        language: system
+        types: [python]
+        pass_filenames: false
+
+      - id: mypy
+        name: mypy
+        entry: uv run mypy .
+        language: system
+        types: [python]
+        pass_filenames: false
+
+      - id: bandit
+        name: bandit
+        entry: uv run bandit -r src/ -ll -c .bandit
+        language: system
+        types: [python]
+        pass_filenames: false
+
+      - id: pytest-cov
+        name: pytest coverage
+        entry: uv run pytest tests/ -vv --cov=src/simplevecdb
+        language: system
+        types: [python]
+        pass_filenames: false

simplevecdb-2.2.0/.python-version

@@ -0,0 +1 @@
+3.10