Skip to content

refactor(deps): ai-kit comes from npm — @bitbaum/ai-kit ^0.6.2 - #887

Merged
github-actions[bot] merged 1 commit into
mainfrom
refactor/ai-kit-from-npm
Sep 4, 2026
Merged

refactor(deps): ai-kit comes from npm — @bitbaum/ai-kit ^0.6.2#887
github-actions[bot] merged 1 commit into
mainfrom
refactor/ai-kit-from-npm

Conversation

@catomean

@catomean catomean commented Sep 3, 2026

Copy link
Copy Markdown
Collaborator

What

Swaps the ai-kit dependency from the git pin (github:bitbaum/ai-kit#v0.6.2) to the freshly published npm package @bitbaum/ai-kit@^0.6.2, and renames every import path accordingly (ai-kit/grounding@bitbaum/ai-kit/grounding).

Why the scope

npm's typosquat guard blocked publishing the bare name ai-kit, so the package ships scoped as @bitbaum/ai-kit (documented in ai-kit PR #25, now merged — the npm tarball is content-identical to the v0.6.2 git tag apart from the package name).

Why retire the git pin

Git pins made the lockfile record the writer's transport and npm-major-specific resolution for this dependency — the lockfile-writer trap class that has bitten this fleet repeatedly. With a registry dependency that class dies entirely.

Changes

  • package.json: "ai-kit": "github:bitbaum/ai-kit#v0.6.2""@bitbaum/ai-kit": "^0.6.2" (same dependencies section)
  • 3 import sites renamed (all ai-kit/grounding subpath): src/services/cat/grounding.ts, src/services/cat/chat-prepare.ts, __tests__/unit/cat/agent-core-grounding.test.ts
  • 4 present-state comments updated to the new name (chat-orchestrator.ts, chat-prepare.ts, grounding.ts, test header)
  • Lockfile regenerated from the registry: resolves to https://registry.npmjs.org/@bitbaum/ai-kit/-/ai-kit-0.6.2.tgz; no node_modules/ai-kit or github: entry remains

Verification

  • npm run lint — 0 errors
  • npm run type-check — clean
  • npx vitest run282/282 test files, 2648/2648 tests passed, including the grounding suites now running against the npm package

🤖 Generated with Claude Code

https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn

The package is now published to the npm registry as @bitbaum/ai-kit
(npm's typosquat guard blocked the bare name "ai-kit", hence the scope;
ai-kit PR #25 documents the rename — content is identical to the
github:bitbaum/ai-kit#v0.6.2 tag). The git pin is retired: the lockfile
no longer records the writer's ssh transport and npm-major-specific
resolution for this dependency, so the whole lockfile-writer trap class
dies with it. All imports move from 'ai-kit/grounding' to
'@bitbaum/ai-kit/grounding'.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn
@github-actions
github-actions Bot merged commit 876ac05 into main Sep 4, 2026
6 checks passed
@github-actions
github-actions Bot deleted the refactor/ai-kit-from-npm branch September 4, 2026 00:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant