SEMAPRAX v0.10.1

SEMAPRAX v0.10.1 is beta software.

Install

SEMAPRAX v0.10.1 (beta).

Download the archive for your computer:

Your computer	Download
Linux, x86_64, glibc 2.35+ (Ubuntu 22.04+)	semaprax-v0.10.1-x86_64-unknown-linux-gnu.tar.gz
Linux, arm64, glibc 2.35+ (Ubuntu 22.04+)	semaprax-v0.10.1-aarch64-unknown-linux-gnu.tar.gz
macOS, Apple Silicon (arm64), macOS 11+	semaprax-v0.10.1-aarch64-apple-darwin.tar.gz
macOS, Intel (x86_64), macOS 10.12+	semaprax-v0.10.1-x86_64-apple-darwin.tar.gz
Windows, x64, Windows 10 1809+ / Server 2019+	semaprax-v0.10.1-x86_64-pc-windows-msvc.zip

Or install with one command:

macOS and Linux:

curl -fsSL https://github.com/wavect/semaprax/releases/download/v0.10.1/install.sh | sh -s -- --version v0.10.1

Always the latest stable release:

curl -fsSL https://github.com/wavect/semaprax/releases/latest/download/install.sh | sh

Windows PowerShell:

powershell -ExecutionPolicy Bypass -c "& ([scriptblock]::Create((irm https://github.com/wavect/semaprax/releases/download/v0.10.1/install.ps1))) -Version v0.10.1"

Always the latest stable release:

powershell -ExecutionPolicy Bypass -c "irm https://github.com/wavect/semaprax/releases/latest/download/install.ps1 | iex"

Full instructions, the first-project walkthrough and uninstall steps: Install SEMAPRAX.

After installation, open a new terminal and run:

semaprax new first-semaprax
semaprax check first-semaprax/semaprax.toml
semaprax test first-semaprax/semaprax.toml
semaprax run first-semaprax/semaprax.toml

The last command prints 42. The same commands work in PowerShell.

Only the semaprax-<tag>-<target> archives are runnable programs. GitHub's "Source code" downloads are automatic repository snapshots, and SHA256SUMS, release-*.json, *.bundle and trusted_root.jsonl are verification metadata.

To verify a download, compare it with SHA256SUMS and check its attestation as described in the release process.

Full changelog for v0.10.1

Changes

• Replace the stalled Azure Ubuntu APT mirror in hosted CI with the canonical
  HTTPS mirror, bound network waits, and cap dependency-provisioning steps.

• Merge the v0.10.1 development work and prepare matching compiler, toolchain,
  consumer manifests, lockfiles, and CLI version contracts.

• Repair cross-platform source-history authentication, path handling, closed
  scalar purity, and host-profile controls while retaining their original
  rejection tests and historical evidence.

• Refresh the generated agent skill bundle and make read-only custody checks
  detect stale source-authority manifests and derived domain hashes.

• Add an explicit hash-bound current reference-qualification input to the matched webapp v2 campaign, preserving historical qualification and all 912 obligations; live execution remains pending.

• Add a smaller paid no-growth sequencing header while preserving the first work frontier and complete predecessor controls (#858). Private source-only candidate; paid/heap gains and unfavorable cases await scoped qualification.

• Share complete cleanup inventory validation with the ordinary schema summary receiver, avoiding discarded inventory storage while retaining the original materializer as an executable control. Source-only candidate; scoped runtime qualification remains pending.

• Bind dependent invalid owned-record pattern recovery to the original declaration diagnostic, preserving independent body/mode/declaration errors. Source-only #859 candidate; focused qualification pending.

• Source-only #808 moves an owned prefix into the sole HIR suffix or final
  two-edge plan sibling when its existing buffer has spare capacity. Original
  logical work, multiplicities and failure selection remain; complete old
  receivers and the earlier inline-fusion footprint claim stay independent.
  New whole-owner/capacity/removed-buffer and refusal/Drop controls are pending
  execution. Full-capacity plan growth remains unchanged; no application-fit,
  allocation-total or peak-memory improvement is claimed.

• Source-only #836 adds consuming vec_update_field<Row>(rows,index,value,"field")
  for exact Copy scalar slots of invariant-free flat owned-leaf records, with
  independent source/HIR/graph/cache checks, ordinary sticky preflight cleanup,
  interpreter/native/Wasm paths, typed ShiftSim Worker adoption and an unrelated
  inventory example. Owning gates remain pending; no efficiency result is claimed.

• Source correction for #780: ordinary and retained loan candidate discovery use the paid contextual byte slot before plan selection; preserve complete strict v1 candidate controls, typed child-ledger refusal, external setup observations and unreachable-fixture diagnostics. Executable qualification remains pending.

• Source-only nested record-pattern validation now streams exact binding paths
  from its existing depth-first continuation indices, removing owned root/field/
  record labels without another directory or quota. The complete old receiver
  remains saved for both full main oracles; Copy/Own/Borrow diagnostic, scope,
  decimal/depth and actual complete-drop controls are authored but unexecuted.

• Source-only HIR expected child labels now borrow authenticated parent text and
  stream static suffixes/indices into exact identity comparison. Saved full
  owned iterative and recursive oracles, frame bounds and forecasts remain;
  new byte/debit/allocation/hostile parity controls are authored but unexecuted.

• Compare complete canonical loan plans during their existing independent build,
  retaining an exact-program deferred mismatch for the original final validation
  boundary. Public standalone validation and diagnostic priority remain intact;
  owning qualification is pending.

• Add explicit named string_take owner transfer while preserving cloning
  reads, canonical argument staging, source move checks and backend forwarding.
  Owning qualification of this consolidated batch remains pending.

• Fund caller-owned canonical loan lookup storage before growth, borrow current
  identity keys, and reuse inserted declaration identities and closed Vec/Box
  compiler constants. Initial dynamic identity and loan-builder funding remain
  separate open work; no compiler budget or forecast is increased.

• Scope diagnostic attribution to one invocation and initialize exact byte-array
  literals directly in their binding slots. Preserve assignment/block-result
  copies and the fixed-array loop refusal, with repeated-call reinitialization
  controls. Owning qualification remains pending.

• Optimize changed HIR scope publications by cloning only changed/new bindings,
  preserving exact nested state and saved full-map publication controls.

• Author public std.pattern acceptance gates for #706: four compile-once fixtures independently exhaust ASCII bytes in header/KV key and value positions, plus four 8192-byte valid/nonmatching records under the unchanged 1,000,000-step interpreter default. The same authenticated project snapshot supplies native -O0/-O2 capture results, four-invocation physical settlement and repeated Core Wasm settlement with adjacent arena refusal. These gates are unexecuted; the full issue, long-input usefulness and performance claims remain pending.

• Add phase-owned borrowed function and exact expression-ID directories to byte
  helper ModuleIndex queries (#738), retaining independent unseen-target proof,
  original census order and pointer authority. Fixed-pass radix work avoids
  allocator-address-dependent refusal; constructor-only textual ID discovery
  retains the first linear winner with actual byte and merge-copy debits. Sparse-module parity, logarithmic
  zero-backing queries, duplicate-ID and exact/one-short controls are authored;
  execution qualification remains pending.

• Retain one callee inventory and cumulative replay work ledger across captured primitive lexical module members; reconstruct each function lease independently. Executable qualification pending.

• Factor ShiftSim Copy-state scans and metric decisions into checked helpers, retaining the original semantic path-budget refusal and all 15 wire cases; qualification pending.

• Precharge geometric selected-replay FIFO frontier growth in full before allocation, preserving wrapped order, sticky refusal and the ordinary route; actual-layout regression definitions await qualification.

• Correct Catalog sorted-owner names, preserve canonical prefixed codec-plan digests, and reuse the canonical command manifest for the full 264-value UTF-8 oracle. Source-only Bytes writer imports independently authenticate their current nonallocating provider before forwarding an owner; public export profiles are unchanged.

• Generated identifier-view JSON encoders renew one String prefix through ordinary consuming append, avoiding scope-long immutable prefix owners without changing wire bytes or limits. The codec-plan regression now authenticates unchanged dependency bytes and SHA-256 separately from canonical generated members, and checks canonical idempotence for every candidate.

• Authored finite owned-iterator Bytes scratch capacity replay (OPT741): exact immutable Vec constructor provenance, cumulative allocation bounds and selective Graph v78; owning execution remains pending.

• Preserve authored JSON codec names and stable IDs containing template-marker
  spellings through one-pass expansion. Added generator and owning Project
  regressions for exact identities, policy replay and detached nested owners;
  executable qualification remains pending.

• Add a source-only stream UTF-8 owned request selector that requires the original stdin permit and reuses the unchanged incremental grammar normalizer, with native composition regressions for empty first arrays, Unicode/NUL and large legal whitespace; execution gates remain pending.

• Add source implementation and owning regressions for opt-in bounded UTF-8 owned request codecs, with distinct Unicode scalar decoding, empty/repeated value admission and exact escaped-output preflight. Existing identifier selectors remain separate; execution and the full-bound three-backend gate are pending.

• Refresh both semantic-change integration receipt KATs after complete historical/current byte proofs; retain exact replay, fixed-point accounting, shared locks, and no-write assertions.

• Generated webapp self-tests stop their child through private parent IPC so Windows
  releases the writer claim before restart; forced-crash recovery stays explicit.
  Node preload paths are converted to file URLs on every host.

• Authored webapp v3 sign-in limits, session-bound CSRF, explicit field migrations
  and pairwise candidate constraints (#607); focused verification pending.

• Add Project v25 language-command-io.stream-text.v1: existing streaming
  input and i64 process result with length-delimited native text/local maps and
  private owned String helper boundaries. Focused native O0/O2, manifest,
  boundary/refusal, allocation and provider-settlement checks pass locally.
  Anchor optional native stream helpers so valid operation subsets build under
  -Werror.

• Admit string_len(namedString) in while conditions without cloning the owner, preserving fuel and cleanup across interpreter, native C11, and admitted Core Wasm profiles. Allocating String conditions remain outside this narrow profile.

These archives are not notarized and make no cross-host reproducible-build claim.
SHA-256 checksums alone are integrity facts, not signatures; check the published signature bundle against the release policy.