Skip to content

Theme Forge Stellar Loom v0.1.0

Choose a tag to compare

View all tags
@lair001 lair001 released this 08 Sep 19:21
v0.1.0
0bd72d6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Theme Forge Stellar Loom 0.1.0 is the deterministic Starlight theme compiler, JavaScript library and CLI. It validates theme specifications, compiles CSS and descriptors, generates standalone private-by-default theme packages, and exchanges human-agent briefs, candidates and reviews.

Requires Node.js >=22. Install from npm with scripts disabled:

npm install --ignore-scripts @knowledge-forge-ai/theme-forge-stellar-loom@0.1.0
npx tfsl --version
npx tfsl --help
npx tfsl validate node_modules/@knowledge-forge-ai/theme-forge-stellar-loom/examples/stellar-cyan.theme.json
npx tfsl compile node_modules/@knowledge-forge-ai/theme-forge-stellar-loom/examples/stellar-cyan.theme.json --out ./compiled-theme
import { compileTheme, STELLAR_CYAN_EXAMPLE } from '@knowledge-forge-ai/theme-forge-stellar-loom';
const { css, descriptor } = compileTheme(STELLAR_CYAN_EXAMPLE);

Public subpaths include /batch, /cli and /protocol/*. Generated Starlight adapter compatibility is demonstrated with Astro 7.3.1 / Starlight 0.42.0; this is not a compatibility claim for other major versions. Fresh registry-installed CLI, library/batch, fresh-output generation and brief/candidate/review canonical roundtrips passed. Contrast diagnostics and tested interactions do not establish universal WCAG conformance.

Software is AGPL-3.0-or-later, with separate commercial terms; see LICENSE and COMMERCIAL-LICENSE.md. No hosted npm provenance is claimed. The immutable npm README retains pre-publication local-candidate wording; the package is now publicly available at the exact version above. Its bytes are preserved to retain the tested artifact identity.

Released source is durable main commit 0bd72d6be18c6c1e0e23e6cb29f1e6c738c575dc, tree 8b90a43c9960a8bea94ae9dc6ab1d0c835e80ffa. Tested producer is PR #1 merge candidate 58ee2de48fd77c6a0d47cdb8c85e5e79bc78a299, run 34247384527 attempt 1. The commits differ; their content trees are equal. npm tarball SHA-256: c3a21cdd2b47eee0e125522e0f80deb63fd2571e559f6922a72d112b53846ea8.

Attached CI ZIPs were authenticated against GitHub artifact digests; nested manifests were verified. They include npm audit, SBOM/Grype results, workflow checks and qualification evidence. Scanner catalogs are scoped evidence, not proof of complete vulnerability coverage. Historical source-specific CodeQL dispositions remain bounded to stable inputs; this release does not assert that every potential security issue was excluded. SHA256SUMS.txt covers all other uploaded assets (a checksum manifest cannot hash itself).

Documentation follow-up: the bundled COMMERCIAL-LICENSE.md opening retains the Stellar Burst product name. Refer to the bundled terms and contact the licensor for product-specific commercial terms; no expanded rights are implied.

Assets 10
Loading