chore(REL-03): prepare compiler and browser APIs for 0.2.0 (#39)

Author: ellainng

.github/workflows/ci.yaml

@@ -33,6 +33,8 @@ jobs:
         run: python -m pip install --upgrade build twine
       - name: Build sdist and wheel from sdist
         run: python -m build
+      - name: Verify distribution file allowlists
+        run: python scripts/check_distribution_files.py
       - name: Check distribution metadata
         run: python -m twine check --strict dist/*
       - name: Install wheel with published dependencies

.github/workflows/release.yaml

@@ -45,6 +45,8 @@ jobs:
         run: python -m pip install --upgrade build twine
       - name: Build sdist and wheel from the sdist
         run: python -m build
+      - name: Verify distribution file allowlists
+        run: python scripts/check_distribution_files.py
       - name: Check distribution metadata
         run: python -m twine check --strict dist/*
       - name: Install the wheel

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.2.0
+
+- Add the binding-aware source compiler, deterministic ES module emitter and original-source diagnostics/maps.
+- Compile explicitly supplied local modules and re-exports with selected helper and notice closure.
+- Add lazy coroutine/Promise awaits and named browser worker/host capabilities with stop/restart.
+- Verify the approved corpus across CPython, Node and Chromium and record scoped payload/startup/memory measurements.
+- Preserve the JavaScript runtime namespace and existing Fetch/JSON dependency ranges.
+
 ## 0.1.0
 
 - Introduce the case-sensitive `JavaScript` namespace with Object, sparse Array,

IMPLEMENTATION_PLAN.md

@@ -489,3 +489,13 @@ helpers, maps, notices, metadata/harness and compressed payloads, with raw warm
 build, fresh/warm context startup and separate dedicated-worker V8 heap samples.
 These synchronous compiler fixtures do not include the browser-host/PWA shell;
 complete application and future interpreter measurements remain separate scopes.
+
+## 0.2.0 publication plan
+
+[REL-03](https://github.com/outside-labs/Python-JavaScript/issues/38) publishes
+the merged compiler, module/async/browser profiles, conformance and measurements.
+See the [release contract](docs/release-0.2.0.md). Runtime companion dependency
+ranges remain unchanged; compiler and browser assets are in the distributions.
+Strict artifact allowlists, installed-wheel/sdist and browser checks, passing
+final main CI, PyPI/workflow hash comparison and a fresh PyPI install are gates.
+The independent browser source interpreter remains a separate pocket-python task.

README.md

@@ -5,7 +5,7 @@ case-sensitive `JavaScript` namespace. An alpha compatibility layer with a
 documented subset of ECMAScript behavior.
 
 ```sh
-python -m pip install Python-JavaScript==0.1.0
+python -m pip install Python-JavaScript==0.2.0
 ```
 
 ```python
@@ -78,19 +78,26 @@ indices follow JavaScript rules: `values[-1]` is a named property, and
 `values.at(-1)` accesses the last element. `Array(3)` creates three holes;
 `Array.of(3)` creates one element containing 3.
 
-The next program adds our Python-to-JavaScript compiler, a browser target and
-CPython/client parity, coordinated with Shimify source reduction and pocket-python
-assembly. See [the implementation plan](IMPLEMENTATION_PLAN.md). A separately
-staged independent interpreter is tracked by pocket-python. v0.1.0
-provides the runtime foundation; it does not translate source or execute
-JavaScript. Prototypes, descriptors, Date, RegExp, Map/Set, typed arrays, browser
-globals and other unlisted APIs remain future work. Development is tracked in
-the [issues](https://github.com/outside-labs/Python-JavaScript/issues) and
-[Project](https://github.com/orgs/outside-labs/projects/11).
+Version 0.2.0 also includes a bounded Python-to-JavaScript compiler: a
+[binding-aware front end](docs/compiler-front-end.md), [ES module emitter](docs/compiler-emitter.md),
+[local-module compiler](docs/compiler-modules.md), [async profile](docs/compiler-async.md)
+and [browser worker/host target](docs/compiler-browser.md). Python parses source
+at build time; generated modules and selected helpers execute on the client.
+The separate pocket-python interpreter will parse newly entered Python in the browser.
+
+```python
+from JavaScript.emitter import compile_source
 
-The development checkout now includes a [binding-aware compiler front end](docs/compiler-front-end.md)
-that validates source and produces typed IR. The emitter and [local-module compiler](docs/compiler-modules.md)
-produce executable ES modules; browser adapters remain a subsequent milestone.
+artifact = compile_source("def count(text):\n    return len(text)", filename="counter.py")
+# artifact.files contains emitted JavaScript, source map and provenance notice.
+```
+
+This alpha supports the explicit [compiler language](docs/compiler-language.md),
+not arbitrary Python dependencies or complete ECMAScript. Prototypes, descriptors,
+Date, RegExp, Map/Set, typed arrays and unlisted APIs remain future work. See
+[0.2.0 release notes](docs/release-0.2.0.md), the [implementation plan](IMPLEMENTATION_PLAN.md),
+[issues](https://github.com/outside-labs/Python-JavaScript/issues) and
+[Project](https://github.com/orgs/outside-labs/projects/11).
 
 ## Development
 
@@ -105,9 +112,8 @@ when Node is absent locally; CI and release builds require it. Runtime code
 needs only Python and the two declared companions. Tests make no external
 network requests.
 
-The development [compiler emitter](docs/compiler-emitter.md) produces deterministic
-ES modules for the approved single-module Python profile. This API is not part
-of the published 0.1.0 distribution.
+The [compiler emitter](docs/compiler-emitter.md) produces deterministic
+ES modules for the approved single-module Python profile. The compiler APIs are included in the 0.2.0 distribution.
 
 The explicit [async compiler profile](docs/compiler-async.md) adds lazy coroutines,
 awaited Promise values, callbacks and context cancellation. The [browser target](docs/compiler-browser.md) adds named DOM controls, callbacks,
@@ -118,4 +124,4 @@ with `uv run python examples/browser_text_metrics.py --output build/browser-text
 It uses our emitted modules and helpers in a worker; source parsing remains the
 separate independent-interpreter milestone.
 
-The development compiler has a versioned [CPython/Node/browser parity suite](docs/compiler-conformance.md) with typed results, source-map error checks and explicit unsupported boundaries.
+The compiler has a versioned [CPython/Node/browser parity suite](docs/compiler-conformance.md) with typed results, source-map error checks and explicit unsupported boundaries.

RELEASING.md

@@ -31,5 +31,4 @@ token belongs in the repository or workflow.
    run the examples/tests, and compare published SHA256 hashes with build artifacts.
 
 Publishing a GitHub release triggers upload; a tag push alone does not. PyPI
-versions are immutable. Repository visibility stays private; published artifacts
-include package source. No open-source license has been selected for this release.
+versions are immutable. The repository is public; published artifacts include the selected package source. No open-source license has been selected; existing provenance notices grant no additional rights.

docs/compiler-async.md

@@ -1,6 +1,6 @@
 # Compiled async profile
 
-The development APIs `parse_source`, `compile_source` and `compile_modules`
+The 0.2.0 APIs `parse_source`, `compile_source` and `compile_modules`
 accept `async_enabled=True`. Without it, async syntax remains rejected. Published
 0.1.0 artifacts predate these compiler APIs. Single-module artifacts identify
 `python-browser-async/1` and ABI `python-browser-async-esm/1`; local-module artifacts

docs/compiler-browser.md

@@ -1,9 +1,9 @@
 # Compiled browser target
 
-The development checkout provides `JavaScript.browser.compile_browser`. It
+Version 0.2.0 provides `JavaScript.browser.compile_browser`. It
 compiles verified [local source modules](compiler-modules.md), enables the
 [async profile](compiler-async.md), and records the complete local worker/host
-asset closure. It is not included in the published 0.1.0 distribution.
+asset closure. It is included in 0.2.0; the published 0.1.0 distribution predates this API.
 
 The target is `python-browser-modules-host-async/1`, compiler ABI
 `python-browser-host-esm/1`, using host protocol `pocket-python-host` version 1.
@@ -31,7 +31,7 @@ The builder reads the approved text_metrics corpus, emits selected local modules
 source maps/notices, the host/worker/protocol modules, a manifest and a small HTML
 entry. It requires a new output directory and preserves existing outputs.
 The same computation can be imported under CPython in a separate server entry;
-client entrypoints and host adapters are explicit. E2E-01 owns the complete
+client entrypoints and host adapters are explicit. The pocket-python shared-application example provides the complete
 server/client packaging demonstration.
 
 ## Python namespace and entry

docs/compiler-conformance.md

@@ -1,6 +1,6 @@
 # Compiler compatibility matrix: compiler-parity/1
 
-The development compiler runs the same approved source corpus under CPython
+The 0.2.0 compiler runs the same approved source corpus under CPython
 3.14.7 and as identical emitted ES modules in Node 24.19.0 and a Chromium module
 worker. This is a bounded ahead-of-time Python profile. The independent source
 interpreter is a separate pocket-python implementation. Published 0.1.0 predates

docs/compiler-emitter.md

@@ -1,6 +1,6 @@
 # Experimental ES module emitter
 
-The development checkout exposes `JavaScript.emitter.compile_source`. It
+Version 0.2.0 exposes `JavaScript.emitter.compile_source`. It
 validates source through the python-browser/1 front end, lowers the immutable IR
 and returns a CompiledArtifact without executing input or writing files. The
 published 0.1.0 package predates this compiler implementation.
@@ -16,7 +16,7 @@ print(artifact.manifest["application_exports"])  # ['count']
 ```
 
 `files` is a tuple of immutable OutputFile(path, data, role) values. The caller
-can inspect or pass those bytes to the future pocket-python application builder.
+can inspect or pass those bytes to the pocket-python 0.2 application builder.
 The manifest bytes are separate from their own file/hash closure and can be
 saved as PYTHON-JAVASCRIPT.json. Every recorded file has exact size, SHA-256 and
 role; imports, notices and selected helper dependencies are explicit. Current
@@ -83,7 +83,7 @@ runtime is embedded. The repository has no declared code license; this notice
 does not choose or grant one. Redistribution licensing remains a release decision.
 
 Run `python -m unittest discover -s tests -p 'test_compiler*.py' -v` with the
-installed development checkout and Node 24.19.0. Tests compare CPython and emitted
+installed package and Node 24.19.0. Tests compare CPython and emitted
 Node output/errors/evaluation order, the single-module text_metrics application,
 precision/Unicode/tuple/default behavior and an independent Node source-map
 consumer. Local modules and async browser capabilities have separate adopted