clone

nostr relays on demand at <name>.bind.ws: claim one with your key, pay in zaps past the free allowance

grasp: ntig 0.3.0 supplies bounded read-only inventory with preserved source and package provenance

Dami committed c2b5817
commit
c2b58176f2346d8ea7517e85916579d16a51881e
parent
3367ad20993073b6c84b940acb24b360d02a41be
author
Dami <dami.etoile@gmail.com>
5 files changed, +19 -13
Mpackage-lock.json8++++----
Mpackage.json2+-
Mvendor/README.md22++++++++++++++--------
Avendor/ntig-0.3.0.tgzbin
Avendor/ntig-source-0.3.0.tar.gzbin
M package-lock.json +4 -4
M package.json +1 -1
M vendor/README.md +14 -8
@@ -1,15 +1,15 @@
11 # Vendored dependencies22 3-`ntig-0.2.1.tgz` is the Git engine and conditional R2 WAL used by GRASP.4-The lockfile pins the archive integrity. `ntig-source.tar.gz` preserves3+`ntig-0.3.0.tgz` is the Git engine and conditional R2 WAL used by GRASP.4+The lockfile pins the archive integrity. `ntig-source-0.3.0.tar.gz` preserves55 the complete source and tests for the same build; neither artifact depends66 on a sibling checkout or a public package registry publication.77 88 | Fact | Value |99 |---|---|10-| Source commit | `de3dc0b2a9151973d555658f3e75b0c5669426e8` |11-| Package SHA-256 | `0f2ceab406cd40935ec96ba53a0a03835de2e8611792f4a0c137d596c81a2f05` |12-| Source archive SHA-256 | `24d9b27856d034e88662168a156f7ff01302012e85809381ff98fb7f373021d1` |10+| Source commit | `caa8258e6cf6ec3220b89312d66860258e096f0f` |11+| Package SHA-256 | `c210d4f864d85fdb1fd3f371e4af48eeb2d2803e00dacaac7014ce84019dbe45` |12+| Source archive SHA-256 | `326e41622649dc020b068f621453d7ba4da525f43e9af7b8005a588ce119dc9f` |1313 | Source branch | `main` in [FelineStateMachine/ntig](https://github.com/FelineStateMachine/ntig) |1414 | License | MIT, included in both archives |1515 | Supplied package toolchain | Node 22.22.3, npm 10.9.8 |
@@ -19,20 +19,26 @@ on a sibling checkout or a public package registry publication.
1919 2020 Rebuilding the preserved source with Node 26.8.1 and npm 11.19.0 produces2121 identical tar entries and metadata. The uncompressed tar SHA-256 is22-`f1ad28f92b7ac0ebad4487d3cdd6cabb1a7477f965e3ce883dae47c00a4f9804`;22+`b26512be07bd0dce30d69b290365ed138f7a56059be105dc4c9c1e7081734eba`;2323 gzip bytes can differ across toolchains. The supplied package checksum above2424 and the lockfile pin the exact installed archive.2525 2626 The source's `docs/INTEGRATION.md` describes the exported contracts, failure2727 semantics, cost counters and current limits. Backend work stays in that28-repository; a dependency update replaces both archives and the lockfile28+repository; a dependency update records versioned archives and the lockfile2929 integrity after its checks and bindws's integration checks pass.3030 3131 New and existing repositories remain in format 1, whose 128-transaction3232 limit also stops timed ref deletion. Bindws hides expired unknown PR refs33-even when physical cleanup cannot advance. Installing 0.2.1 does not migrate33+even when physical cleanup cannot advance. Installing 0.3.0 does not migrate3434 roots. The source's `docs/CHECKPOINTS.md` describes the explicit one-way3535 `checkpoint()` upgrade: every reader and writer must be upgraded first,3636 and 0.1.x cannot read a format-2 root. Bindws exposes no migration endpoint3737 or scheduled migration. Retained packs, receipts, manifests and orphan3838 writes remain charged until relay teardown.39+40+The prior `ntig-0.2.1.tgz` and `ntig-source.tar.gz` remain as the preserved41+0.2.1 package and source. The 0.3.0 release adds bounded read-only inventory42+and an R2 listing adapter; it does not migrate repositories or collect data.43+Its `docs/INVENTORY.md` defines report classes, limits and the distinction44+between current-root references and deletion authority.
A vendor/ntig-0.3.0.tgz +0 -0

Binary file.

A vendor/ntig-source-0.3.0.tar.gz +0 -0

Binary file.