@ccdd/core 6.0.2 → 6.2.0

package/README.md

@@ -40,10 +40,11 @@ These relationships define required input, verification and default dependency-G
 Use Node.js 22 LTS, version 22.19.0 or later.
 
 ```sh
-npm install --ignore-scripts @ccdd/core@6.0.2 @ccdd/project@6.0.2
+npm install --ignore-scripts @ccdd/ccdd
+# or: pnpm add --ignore-scripts @ccdd/ccdd
 ```
 
-This single command installs the definitions and Project runtime, including their dependencies. Common view tools are optional and installed separately; see [installation choices](docs/getting-started.md#installation-choices).
+The single public package installs exact matching core, Project and default-tools modules as normal dependencies. Its `ccdd`, `ccdd-project` and `ccdd-view` commands delegate to those modules. Use `@ccdd/ccdd/core`, `/project` and `/tools` imports; see [installation choices](docs/getting-started.md#installation-choices).
 
 Inside an Artifact folder, create `ccdd.json`:
 
@@ -92,6 +93,7 @@ The optional local monitor shows folders, relationships, cycles, review progress
 
 | Package | Responsibility |
 | --- | --- |
+| `@ccdd/ccdd` | Single-install entrypoint, public module subpaths and CLI delegates. |
 | `@ccdd/core` | Public definitions and logical path resolution. |
 | `@ccdd/project` | Validation, CLI, Broker, Executors and monitor. |
 | `@ccdd/default-tools` | Optional common view scripts; no automatic registration. |
@@ -102,4 +104,26 @@ See [Contributing](CONTRIBUTING.md), [the context map](CONTEXT-MAP.md), [detaile
 
 [MIT](LICENSE).
 
-**CCDD 6.0.2:** corrects installation guides and npm package READMEs to use matching current packages. Runtime behavior, identity rules and state format are unchanged. See the [release notes](docs/releases/v6.0.2.md); upgrades from before 6.0 still require the [6.0 migration guide](docs/migration-v6.md).
+**CCDD 6.2.0:** install `@ccdd/ccdd` once for the existing CCDD modules and use unchanged Pi AI APIs through public subpaths. See the [release notes](docs/releases/v6.2.0.md). This release adds no new authentication CLI, store or policy; existing review behavior and format-6 evidence remain unchanged.
+
+
+### Existing Pi AI API
+
+`@ccdd/ccdd/pi` re-exports Pi AI unchanged; `@ccdd/ccdd/pi/providers/all`
+re-exports its public `builtinModels` and `builtinProviders` catalog API. These
+are ESM and type forwards, not a new authentication manager or coding agent.
+The umbrella declares Pi AI directly, so both paths work under strict pnpm.
+
+The existing official CLI remains `npx @earendil-works/pi-ai@0.87.1 list` and
+`npx @earendil-works/pi-ai@0.87.1 login [provider]`. Its current CLI lists/logs
+in OAuth providers and saves `auth.json` in the current directory; use it only
+from an appropriate private directory outside reviewed input. API-key login
+is available through Pi's library API, not that OAuth-only CLI. These exports
+do not create new CCDD login commands, persistence or credential precedence.
+
+## Review resources and budgets
+
+Machine-wide provider pools, weighted owner identities, submission execution
+budgets, original runtime provenance and guarded offline load checks share one
+review-management contract. See [the guide](docs/review-management.md), including
+the required old-worker shutdown and option migration.

package/dist/src/definitions.d.ts

@@ -39,12 +39,18 @@ export type StaleStrategy = {
     script: ScriptDefinition;
     inputs?: string[];
     timeoutMs?: number;
+    weight?: number;
 };
+export interface ReviewPolicy {
+    dependencyGates?: 'green' | 'ignore';
+    maxConcurrentExecutors?: number;
+}
 export interface ArtifactManifest {
     name: string;
     critics?: CriticDefinition[];
     views?: ArtifactViews;
     mounts?: Record<string, string>;
+    reviewPolicy?: ReviewPolicy;
     basis?: boolean;
     stale?: StaleStrategy;
     envRequirements?: Record<string, EnvironmentRequirement>;
@@ -56,6 +62,7 @@ export interface ArtifactDefinition {
     mounts: Record<string, string>;
     /** Nearest marked descendants, indexed by their physical relative paths. */
     children: Record<string, string>;
+    reviewPolicy?: ReviewPolicy;
     basis?: boolean;
     stale?: StaleStrategy;
     envRequirements?: Record<string, EnvironmentRequirement>;

package/dist/src/tools/contracts.d.ts

@@ -66,6 +66,8 @@ export interface ScriptToolContext {
     tmpDir: string;
     /** Canonical paths and logical connections for this review's allowed scope. */
     scope: ArtifactScope;
+    /** Declared workspace-relative runtime paths mapped to pinned bytes for this attempt. */
+    executionPaths?: Record<string, string>;
 }
 export interface ScriptToolRequest {
     version: 1;

package/examples/computed-views/README.md

@@ -9,4 +9,4 @@ ccdd-project verify checkout --human-inbox
 ccdd-project monitor
 ```
 
-Run these commands from this directory after installing `@ccdd/core` and `@ccdd/project`. Submit the Human verdict explicitly through the monitor. Scenario files, the manifest and the shared script determine input identity. Output belongs in `context.outputDir`, outside the supplied workspace. Parameter combinations that generate Artifact declarations are not supported in version 4.
+Run these commands from this directory after installing `@ccdd/ccdd`. Submit the Human verdict explicitly through the monitor. Scenario files, the manifest and the shared script determine input identity. Output belongs in `context.outputDir`, outside the supplied workspace. Parameter combinations that generate Artifact declarations are not supported in version 4.

package/examples/custom-text-reader/README.md

@@ -2,7 +2,7 @@
 
 `why/ccdd.json` declares an explicit basis. `spec/ccdd.json` owns its alignment Critic and reader. The instruction `{why}` derives the dependency; no `target`, `deps`, type registry or config factory is needed.
 
-Install `@ccdd/core` and `@ccdd/project` in this example directory. The custom `view.mjs` requires only Node; default tools are optional.
+Install `@ccdd/ccdd` in this example directory. The custom `view.mjs` requires only Node; default tools are optional.
 
 ```sh
 ccdd-project config check

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccdd/core",
-  "version": "6.0.2",
+  "version": "6.2.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public",
@@ -21,13 +21,14 @@
   },
   "workspaces": [
     "packages/default-tools",
-    "packages/project"
+    "packages/project",
+    "packages/ccdd"
   ],
   "engines": {
     "node": "^22.19.0"
   },
   "scripts": {
-    "build": "node scripts/clean-build.mjs && npm run build:core && npm run build:tools && node node_modules/typescript/bin/tsc -p tsconfig.json && npm run build:ui && npm run build:project",
+    "build": "node scripts/clean-build.mjs && npm run build:core && npm run build:tools && node node_modules/typescript/bin/tsc -p tsconfig.json && npm run build:ui && npm run build:project && npm run build:umbrella",
     "build:core": "node node_modules/typescript/bin/tsc -p tsconfig.runtime.json",
     "build:tools": "npm run build --workspace @ccdd/default-tools",
     "build:project": "node scripts/build-project.mjs",
@@ -41,7 +42,8 @@
     "release": "node scripts/local-release.mjs",
     "release:npm": "node scripts/local-release.mjs --npm",
     "release:npm:check": "node scripts/check-npm.mjs",
-    "demo:prepare": "npm run build && node dist/src/cli.js prepare-demo"
+    "demo:prepare": "npm run build && node dist/src/cli.js prepare-demo",
+    "build:umbrella": "npm run build --workspace @ccdd/ccdd"
   },
   "files": [
     "dist/src/sdk.*",
@@ -53,8 +55,8 @@
     "examples/"
   ],
   "devDependencies": {
-    "@earendil-works/pi-agent-core": "0.85.1",
-    "@earendil-works/pi-ai": "0.85.1",
+    "@earendil-works/pi-agent-core": "0.87.1",
+    "@earendil-works/pi-ai": "0.87.1",
     "@lucide/vue": "1.41.0",
     "@vue-flow/background": "1.3.2",
     "@vue-flow/core": "1.48.2",
@@ -66,6 +68,7 @@
     "typescript": "7.0.2",
     "typescript-ui": "npm:typescript@6.0.3",
     "vite": "8.2.2",
-    "vue-tsc": "3.3.11"
+    "vue-tsc": "3.3.11",
+    "pnpm": "10.30.2"
   }
 }