AnaxiGraph 0.4.0

AnaxiGraph 0.4.0

AnaxiGraph 0.4.0 completes roadmap 4.2 by making its shared architecture model substantially more
useful to both humans and coding agents and by replacing shallow JavaScript-family analysis with
honest parser-backed evidence.

Highlights

• Adds Tree-sitter-backed JavaScript, JSX, TypeScript, and TSX analysis with explicit capability
  declarations, parser recovery diagnostics, source spans, visibility, modern module forms, and
  selected framework-level facts.
• Resolves relative imports, repository aliases, TypeScript baseUrl/paths/project references,
  workspace packages, package exports/imports, and entry points from indexed configuration evidence
  without executing target repository tooling.
• Persists IR v2 reference forms and resolution provenance while keeping old IR v1 snapshots
  readable and conservatively preserving ambiguous, unresolved, external, and computed edges.
• Delivers the shared Living Architecture Charter, actor-neutral guidance workflow, fresh-eyes
  counterfactual review, continuous post-change reassessment, and stable responsibility-map
  vocabulary completed in roadmap 4.2.
• Keeps normal deployment to one supervised service and one repository-scoped writer, with a
  bounded ten-tool MCP profile and five task-centered dashboard journeys.

Safety and compatibility

• AnaxiGraph remains read-only toward the repositories it analyzes.
• TypeScript facts are syntax evidence, not type-checker or runtime claims.
• Dynamic imports remain explicit unknowns; AnaxiGraph does not invent a target or recommend unsafe
  deletion when relationship evidence is incomplete.
• Existing indexes remain readable. A new scan records parser and IR v2 capability truth for current
  JavaScript-family files.

Validation

• 634 Python tests pass at 91.87% coverage.
• All 26 containerized browser contracts pass.
• The hardened sidecar, first-user workflow, deterministic self-analysis, release archives, clean
  wheel install, and parser-enabled container smoke pass.
• A retained 3,000-source-file JS/TS benchmark completes its cold scan in 4.825 seconds and analyzes
  exactly one source file per one-file incremental history frame on the recorded Linux runner.

Public verification

• Main CI, the
  multi-architecture container workflow,
  and the protected release workflow
  all completed successfully.
• PyPI 0.4.0 and the
  GitHub release publish matching wheel
  and source-distribution digests. The GitHub bundle also retains the dual-client plugin, SPDX SBOM,
  dependency-license inventory, checksums, release contract, and container digest.
• ghcr.io/hcekne/anaxigraph:0.4.0 supports linux/amd64 and linux/arm64 and resolves to
  sha256:3f7f3f2ed5f4bbe0b58996fe75d8fa14b7d032fe6d6d72c67133643ed1b45c3b.
  Pulling that exact digest reports AnaxiGraph 0.4.0, and its GitHub provenance verifies against
  the tagged container workflow.
• A no-cache install from public PyPI installs the exact pinned Tree-sitter dependencies and parses
  TSX with builtin-typescript-tree-sitter; release checksums and attestations verify independently.

Full comparison: v0.3.0...v0.4.0