feat: add ECMA-426 scopes support and publish WASM packages

- New srcmap-scopes crate: full encode/decode for the ECMA-426 scopes
  proposal (original scope trees, generated ranges, bindings, call sites)
- Unsigned VLQ primitives added to srcmap-codec
- Integration with srcmap-sourcemap (scopes field parsed automatically)
- Integration with srcmap-generator (set_scopes + scopes in JSON output)
- Published @srcmap/generator-wasm and @srcmap/remapping-wasm to npm
- Updated release workflow for new crates and WASM packages
- Fixed repository.url across all package.json files
- Added pkg/ to .gitignore for wasm-pack build output

Author: BartWaardenburg

.github/workflows/release.yml

@@ -31,6 +31,14 @@ jobs:
       - name: Wait for crates.io index
         run: sleep 30
 
+      - name: Publish srcmap-scopes
+        run: cargo publish -p srcmap-scopes || echo "Already published, skipping"
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+      - name: Wait for crates.io index
+        run: sleep 30
+
       - name: Publish srcmap-sourcemap
         run: cargo publish -p srcmap-sourcemap || echo "Already published, skipping"
         env:
@@ -159,17 +167,42 @@ jobs:
       - name: Install wasm-pack
         run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
 
-      - name: Build WASM package
+      - name: Build sourcemap-wasm
         run: wasm-pack build --target nodejs --release
         working-directory: packages/sourcemap-wasm
 
-      - name: Upload WASM artifact
+      - name: Build generator-wasm
+        run: wasm-pack build --target nodejs --release
+        working-directory: packages/generator-wasm
+
+      - name: Build remapping-wasm
+        run: wasm-pack build --target nodejs --release
+        working-directory: packages/remapping-wasm
+
+      - name: Remove wasm-pack .gitignore files
+        run: rm -f packages/sourcemap-wasm/pkg/.gitignore packages/generator-wasm/pkg/.gitignore packages/remapping-wasm/pkg/.gitignore
+
+      - name: Upload sourcemap-wasm artifact
         uses: actions/upload-artifact@v4
         with:
-          name: wasm-package
+          name: wasm-sourcemap-package
           path: packages/sourcemap-wasm/pkg/
           if-no-files-found: error
 
+      - name: Upload generator-wasm artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: wasm-generator-package
+          path: packages/generator-wasm/pkg/
+          if-no-files-found: error
+
+      - name: Upload remapping-wasm artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: wasm-remapping-package
+          path: packages/remapping-wasm/pkg/
+          if-no-files-found: error
+
   publish-npm:
     name: Publish npm packages
     runs-on: ubuntu-latest
@@ -204,12 +237,24 @@ jobs:
           pattern: sourcemap-bindings-*
           merge-multiple: false
 
-      - name: Download WASM artifact
+      - name: Download sourcemap-wasm artifact
         uses: actions/download-artifact@v4
         with:
-          name: wasm-package
+          name: wasm-sourcemap-package
           path: packages/sourcemap-wasm/pkg
 
+      - name: Download generator-wasm artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: wasm-generator-package
+          path: packages/generator-wasm/pkg
+
+      - name: Download remapping-wasm artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: wasm-remapping-package
+          path: packages/remapping-wasm/pkg
+
       - name: Move codec artifacts
         run: napi artifacts -d artifacts
         working-directory: packages/codec
@@ -244,6 +289,14 @@ jobs:
         run: npm publish --access public --provenance --ignore-scripts || echo "Already published, skipping"
         working-directory: packages/sourcemap-wasm
 
+      - name: Publish @srcmap/generator-wasm
+        run: npm publish --access public --provenance --ignore-scripts || echo "Already published, skipping"
+        working-directory: packages/generator-wasm
+
+      - name: Publish @srcmap/remapping-wasm
+        run: npm publish --access public --provenance --ignore-scripts || echo "Already published, skipping"
+        working-directory: packages/remapping-wasm
+
   create-release:
     name: Create GitHub Release
     runs-on: ubuntu-latest

.gitignore

@@ -6,5 +6,8 @@ node_modules/
 # Coverage reports
 coverage/
 
+# wasm-pack build output (rebuilt on publish)
+packages/*/pkg/
+
 # napi-rs native binaries (rebuilt on publish)
 # Note: index.js and index.d.ts are tracked — they're hand-written loaders

Cargo.lock

@@ -13,6 +13,7 @@ srcmap-codec = { version = "0.1.2", path = "crates/codec" }
 srcmap-sourcemap = { version = "0.1.2", path = "crates/sourcemap" }
 srcmap-generator = { version = "0.1.2", path = "crates/generator" }
 srcmap-remapping = { version = "0.1.2", path = "crates/remapping" }
+srcmap-scopes = { version = "0.1.2", path = "crates/scopes" }
 
 [profile.release]
 lto = true

Cargo.toml

@@ -138,12 +138,13 @@ Agent-friendly command-line interface for inspecting, validating, composing, and
 - [x] Publish `srcmap-sourcemap` to crates.io (0.1.2)
 - [x] Publish `srcmap-generator` to crates.io (0.1.2)
 - [x] Publish `srcmap-remapping` to crates.io (0.1.2)
+- [ ] Publish `srcmap-scopes` to crates.io
 - [ ] Publish `srcmap-cli` to crates.io
 - [x] Publish `@srcmap/codec` to npm (0.1.2)
 - [x] Publish `@srcmap/sourcemap` to npm (0.1.2)
 - [x] Publish `@srcmap/sourcemap-wasm` to npm (0.1.2)
-- [ ] Publish `@srcmap/generator-wasm` to npm
-- [ ] Publish `@srcmap/remapping-wasm` to npm
+- [x] Publish `@srcmap/generator-wasm` to npm (0.1.3)
+- [x] Publish `@srcmap/remapping-wasm` to npm (0.1.3)
 
 ## Phase 6: WASM Bindings for Generator + Remapping ✅
 
@@ -153,12 +154,28 @@ Node.js WASM bindings completing the full source map pipeline.
 - [x] `@srcmap/remapping-wasm` — ConcatBuilder + remap() with JS callback for upstream map loading
 - [x] Test suites for both packages (25 tests)
 
+## Phase 7: Scopes & Variables (ECMA-426 Scopes Proposal) ✅
+
+First Rust implementation of the ECMA-426 scopes proposal (Stage 3). Enables debuggers to reconstruct original scope trees, variable bindings, and inlined function call sites.
+
+- [x] New `srcmap-scopes` crate with full encode/decode
+- [x] Tag-based VLQ encoding: B (scope start), C (scope end), D (variables), E (range start), F (range end), G (bindings), H (sub-range bindings), I (call site)
+- [x] Unsigned VLQ primitives added to `srcmap-codec`
+- [x] Original scope trees with nesting, names, kinds, stack frame flags, and variable lists
+- [x] Generated ranges with nesting, definition references, bindings, sub-range bindings, and call sites
+- [x] Delta/relative encoding for positions, names, kinds, variables, and definitions
+- [x] Integration with `srcmap-sourcemap` parser (`scopes` field parsed automatically)
+- [x] Integration with `srcmap-generator` (`set_scopes()` + `scopes` field in JSON output)
+- [x] Full roundtrip encode → decode tests (14 scopes tests + 2 integration tests)
+- [x] Definition resolution helper (`original_scope_for_definition`)
+
 ## Future
 
 - [x] Debug ID support (`debugId` field, part of ECMA-426)
+- [x] Scopes & variables support (ECMA-426 scopes proposal) — **first Rust implementation**
 - [ ] NAPI bindings for generator and remapping
 - [ ] WASM build target for browser (devtools, playgrounds, edge runtimes)
-- [ ] Scopes & variables support (ECMA-426 proposal — no library supports this yet)
+- [ ] WASM bindings for scopes decode/encode
 - [ ] Streaming/lazy decode for very large source maps
 
 ## Non-goals

ROADMAP.md

@@ -43,7 +43,7 @@ pub use decode::decode;
 pub use encode::encode;
 #[cfg(feature = "parallel")]
 pub use encode::encode_parallel;
-pub use vlq::{vlq_decode, vlq_encode};
+pub use vlq::{vlq_decode, vlq_decode_unsigned, vlq_encode, vlq_encode_unsigned};
 
 use std::fmt;
 

crates/codec/src/lib.rs

@@ -123,6 +123,71 @@ pub fn vlq_decode(input: &[u8], pos: usize) -> Result<(i64, usize), DecodeError>
     Ok((value, i - pos))
 }
 
+/// Encode a single unsigned VLQ value, appending base64 chars to the output buffer.
+///
+/// Unlike signed VLQ, no sign bit is used — all 5 bits per character are data.
+/// Used by the ECMA-426 scopes proposal for tags, flags, and unsigned values.
+#[inline]
+pub fn vlq_encode_unsigned(out: &mut Vec<u8>, value: u64) {
+    let mut vlq = value;
+    loop {
+        let mut digit = vlq & VLQ_BASE_MASK;
+        vlq >>= VLQ_BASE_SHIFT;
+        if vlq > 0 {
+            digit |= VLQ_CONTINUATION_BIT;
+        }
+        out.push(BASE64_ENCODE[digit as usize]);
+        if vlq == 0 {
+            break;
+        }
+    }
+}
+
+/// Decode a single unsigned VLQ value from the input bytes starting at the given position.
+///
+/// Returns `(decoded_value, bytes_consumed)` or a [`DecodeError`].
+/// Unlike signed VLQ, no sign bit extraction is performed.
+#[inline]
+pub fn vlq_decode_unsigned(input: &[u8], pos: usize) -> Result<(u64, usize), DecodeError> {
+    let mut result: u64 = 0;
+    let mut shift: u32 = 0;
+    let mut i = pos;
+
+    loop {
+        if i >= input.len() {
+            return Err(DecodeError::UnexpectedEof { offset: i });
+        }
+
+        let byte = input[i];
+
+        if byte >= 128 {
+            return Err(DecodeError::InvalidBase64 { byte, offset: i });
+        }
+
+        let digit = BASE64_DECODE[byte as usize];
+
+        if digit == 255 {
+            return Err(DecodeError::InvalidBase64 { byte, offset: i });
+        }
+
+        let digit = digit as u64;
+        i += 1;
+
+        if shift >= VLQ_MAX_SHIFT {
+            return Err(DecodeError::VlqOverflow { offset: pos });
+        }
+
+        result += (digit & VLQ_BASE_MASK) << shift;
+        shift += VLQ_BASE_SHIFT;
+
+        if (digit & VLQ_CONTINUATION_BIT) == 0 {
+            break;
+        }
+    }
+
+    Ok((result, i - pos))
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -240,4 +305,52 @@ mod tests {
         let err = vlq_decode(b"", 0).unwrap_err();
         assert_eq!(err, DecodeError::UnexpectedEof { offset: 0 });
     }
+
+    // --- Unsigned VLQ tests ---
+
+    #[test]
+    fn unsigned_encode_zero() {
+        let mut buf = Vec::new();
+        vlq_encode_unsigned(&mut buf, 0);
+        assert_eq!(&buf, b"A");
+    }
+
+    #[test]
+    fn unsigned_encode_small_values() {
+        // Value 1 → 'B', value 2 → 'C', ..., value 31 → base64[31] = 'f'
+        let mut buf = Vec::new();
+        vlq_encode_unsigned(&mut buf, 1);
+        assert_eq!(&buf, b"B");
+
+        buf.clear();
+        vlq_encode_unsigned(&mut buf, 8);
+        assert_eq!(&buf, b"I");
+    }
+
+    #[test]
+    fn unsigned_roundtrip() {
+        let values: [u64; 10] = [0, 1, 8, 15, 16, 31, 32, 100, 1000, 100_000];
+        for &v in &values {
+            let mut buf = Vec::new();
+            vlq_encode_unsigned(&mut buf, v);
+            let (decoded, consumed) = vlq_decode_unsigned(&buf, 0).unwrap();
+            assert_eq!(decoded, v, "unsigned roundtrip failed for {v}");
+            assert_eq!(consumed, buf.len());
+        }
+    }
+
+    #[test]
+    fn unsigned_multi_char() {
+        let mut buf = Vec::new();
+        vlq_encode_unsigned(&mut buf, 500);
+        assert!(buf.len() > 1, "500 should need multiple chars");
+        let (decoded, _) = vlq_decode_unsigned(&buf, 0).unwrap();
+        assert_eq!(decoded, 500);
+    }
+
+    #[test]
+    fn unsigned_decode_empty() {
+        let err = vlq_decode_unsigned(b"", 0).unwrap_err();
+        assert_eq!(err, DecodeError::UnexpectedEof { offset: 0 });
+    }
 }

crates/codec/src/vlq.rs

@@ -18,6 +18,7 @@ crate-type = ["lib"]
 
 [dependencies]
 srcmap-codec = { workspace = true }
+srcmap-scopes = { workspace = true }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 rayon = { version = "1", optional = true }