🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP →
@rag-rat/bin
Advanced tools
@rag-rat/bin - npm Package Compare versions
+31
-0
@@ -10,2 +10,33 @@ # Changelog | ||
| ## [0.22.0](https://github.com/cq27-dev/rag-rat/compare/rag-rat-base-v0.21.1...rag-rat-base-v0.22.0) - 2026-08-02 | ||
| ### Added | ||
| - *(sync)* account-keyed peer discovery ([#1078](https://github.com/cq27-dev/rag-rat/pull/1078)) | ||
| - *(oracle)* give each checkout its own live oracle sessions and worklist ([#1054](https://github.com/cq27-dev/rag-rat/pull/1054)) | ||
| - *(languages)* add Go language support ([#994](https://github.com/cq27-dev/rag-rat/pull/994)) | ||
| - *(lens)* add authenticated VS Code repository lens ([#985](https://github.com/cq27-dev/rag-rat/pull/985)) | ||
| - *(oracle)* add a live TypeScript LSP backend ([#536](https://github.com/cq27-dev/rag-rat/pull/536)) ([#992](https://github.com/cq27-dev/rag-rat/pull/992)) | ||
| - *(oracle)* live LSP watcher wiring — phase 6 slice 2 ([#534](https://github.com/cq27-dev/rag-rat/pull/534)) ([#972](https://github.com/cq27-dev/rag-rat/pull/972)) | ||
| - *(sync)* device-side account-log sync to configured server peers ([#922](https://github.com/cq27-dev/rag-rat/pull/922)) | ||
| - *(sync)* [sync] config + `rag-rat sync serve` headless peer ([#909](https://github.com/cq27-dev/rag-rat/pull/909)) | ||
| ### Fixed | ||
| - *(index)* treat a literal backslash in a Unix filename as part of the name ([#1052](https://github.com/cq27-dev/rag-rat/pull/1052)) | ||
| - *(paths)* resolve filesystem paths off the Windows verbatim spelling ([#1055](https://github.com/cq27-dev/rag-rat/pull/1055)) | ||
| - *(index)* canonicalize fixture config roots so the suite matches Config::load ([#1047](https://github.com/cq27-dev/rag-rat/pull/1047)) | ||
| - *(oracle)* separate the checkout ceiling, the index root, and the indexed corpus (#1008, #1011) ([#1031](https://github.com/cq27-dev/rag-rat/pull/1031)) | ||
| - *(tests)* isolate fixture git invocations from the ambient environment ([#975](https://github.com/cq27-dev/rag-rat/pull/975)) | ||
| - *(tests)* retain satellite-crate scratch cleanup guards ([#973](https://github.com/cq27-dev/rag-rat/pull/973)) | ||
| - *(tests)* retain core unit-test scratch cleanup guards ([#968](https://github.com/cq27-dev/rag-rat/pull/968)) | ||
| - *(tests)* retain config scratch cleanup guards ([#967](https://github.com/cq27-dev/rag-rat/pull/967)) | ||
| - *(tests)* clean high-volume scratch fixtures ([#963](https://github.com/cq27-dev/rag-rat/pull/963)) | ||
| ### Other | ||
| - derive schema recognizers from the ladder and reuse shared helpers ([#1098](https://github.com/cq27-dev/rag-rat/pull/1098)) | ||
| - document Go language support ([#1061](https://github.com/cq27-dev/rag-rat/pull/1061)) | ||
| - *(deps)* upgrade Rust dependencies ([#933](https://github.com/cq27-dev/rag-rat/pull/933)) | ||
| ## [0.21.1](https://github.com/cq27-dev/rag-rat/compare/rag-rat-base-v0.21.0...rag-rat-base-v0.21.1) - 2026-07-24 | ||
@@ -12,0 +43,0 @@ |
| { | ||
| "name": "@rag-rat/bin", | ||
| "version": "0.21.1", | ||
| "version": "0.22.0", | ||
| "lockfileVersion": 3, | ||
@@ -9,3 +9,3 @@ "requires": true, | ||
| "name": "@rag-rat/bin", | ||
| "version": "0.21.1", | ||
| "version": "0.22.0", | ||
| "hasInstallScript": true, | ||
@@ -12,0 +12,0 @@ "license": "MIT", |
+5
-3
| { | ||
| "artifactDownloadUrls": [ | ||
| "https://github.com/cq27-dev/rag-rat/releases/download/v0.21.1" | ||
| "https://github.com/cq27-dev/rag-rat/releases/download/v0.22.0" | ||
| ], | ||
@@ -93,7 +93,9 @@ "author": "Kristaps Karlsons", | ||
| }, | ||
| "version": "0.21.1", | ||
| "version": "0.22.0", | ||
| "volta": { | ||
| "node": "18.14.1", | ||
| "npm": "9.5.0" | ||
| } | ||
| }, | ||
| "mcpName": "io.github.cq27-dev/rag-rat", | ||
| "homepage": "https://rag-rat.cq27.dev/" | ||
| } |
+24
-3
@@ -42,3 +42,3 @@ # rag-rat | ||
| - **A real code graph.** tree-sitter callers/callees/imports across Rust, TypeScript/TSX, Kotlin, | ||
| C/C++, Python, and Swift — with an optional [compiler-grade SCIP oracle](docs/oracle.md) for | ||
| C/C++, Python, Swift, and Go — with an optional [compiler-grade SCIP oracle](docs/oracle.md) for | ||
| configured toolchains that upgrades edges to `Compiler` confidence and ranks the load-bearing | ||
@@ -388,2 +388,22 @@ symbols. | ||
| ## Editor Lens HTTP API | ||
| An active `rag-rat mcp` process also elects one authenticated Lens HTTP server per worktree. It | ||
| publishes the loopback URL and bearer token to `.rag-rat/sockets/lens.json`; the credential file is | ||
| owner-readable only on Unix. Set `RAG_RAT_NO_LENS=1` to disable this embedded server, or set | ||
| `RAG_RAT_LENS_ORIGINS` to a comma-separated exact browser-origin allowlist. | ||
| Run `rag-rat serve` when the HTTP API needs its own lifecycle. Loopback serving generates a token; | ||
| clients read it from the discovery file. A non-loopback bind requires both an explicit token | ||
| environment variable and at least one trusted browser origin: | ||
| ```bash | ||
| LENS_TOKEN="$(openssl rand -hex 32)" rag-rat serve \ | ||
| --bind 0.0.0.0 --token-env LENS_TOKEN --allow-origin https://lens.example.com | ||
| ``` | ||
| Every non-preflight request uses `Authorization: Bearer <token>`. Allowed origins are matched | ||
| exactly; wildcard CORS is never emitted. The built-in listener is plain HTTP, so terminate TLS in a | ||
| trusted reverse proxy or tunnel before exposing a non-loopback server across an untrusted network. | ||
| By default every repo's index and memories live in **one consolidated database per machine** | ||
@@ -478,4 +498,4 @@ (`$XDG_DATA_HOME/rag-rat/rag-rat.sqlite`; override with `RAG_RAT_DATA_DIR`), so a deleted checkout or | ||
| Tools (`xcode-select --install`); on Windows install the Visual Studio Build Tools with the C++ | ||
| workload (MSVC). Requires **Rust 1.95+** (the bundled SQLite build uses the `cfg_select!` macro, | ||
| stabilized in 1.95). | ||
| workload (MSVC). Requires **Rust 1.96+**; the workspace tracks that stable baseline for its | ||
| dependencies (the bundled SQLite build itself requires at least Rust 1.95 for `cfg_select!`). | ||
@@ -513,2 +533,3 @@ A few maintenance conveniences are Unix- or Linux-only by design and degrade quietly elsewhere — no | ||
| rag-rat eval [--json|--update-baseline] # CI search-quality gate; requires a `--features eval` build (absent from the released binary) | ||
| rag-rat serve # authenticated editor Lens HTTP API | ||
| rag-rat mcp # start the STDIO server | ||
@@ -515,0 +536,0 @@ ``` |
New alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Fixed alerts
AI-detected potential malware
Supply chain riskAI has identified this package as malware. This is a strong signal that the package may be malicious.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
No website
QualityPackage does not have a website.
Improved metrics
- Total package byte prevSize
95223
4.25%- Number of low quality alerts
2
-33.33%- Number of lines in readme file
545
4.01%- Number of high supply chain risk alerts
2
-33.33%No dependency changes