@tiangong-lca/pcr 0.2.0 → 0.3.0

package/README.md

@@ -15,7 +15,7 @@ x64, and macOS ARM64.
 In a project directory:
 
 ```sh
-npm install @tiangong-lca/pcr @tiangong-lca/pcr-library
+npm install @tiangong-lca/pcr@0.3.0 @tiangong-lca/pcr-library@0.3.0
 ./node_modules/.bin/tiangong-pcr library verify --format json
 ./node_modules/.bin/tiangong-pcr list --format json
 ```
@@ -72,21 +72,21 @@ package is optional; legacy `validate-model` only checks qualifier text and
 On a connected machine, download both packages:
 
 ```sh
-npm pack @tiangong-lca/pcr@0.2.0
-npm pack @tiangong-lca/pcr-library@0.1.2
+npm pack @tiangong-lca/pcr@0.3.0
+npm pack @tiangong-lca/pcr-library@0.3.0
 ```
 
 Transfer the two tarballs and a suitable Node.js runtime to the offline machine.
 In the destination directory:
 
 ```sh
-npm install --offline --ignore-scripts --no-audit --no-fund ./tiangong-lca-pcr-0.2.0.tgz ./tiangong-lca-pcr-library-0.1.2.tgz
+npm install --offline --ignore-scripts --no-audit --no-fund ./tiangong-lca-pcr-0.3.0.tgz ./tiangong-lca-pcr-library-0.3.0.tgz
 ./node_modules/.bin/tiangong-pcr library verify --format json
 ```
 
 Runtime dependencies are bundled. No install scripts, runtime downloads, or
-network connection are required. Tool and content versions are independent;
-record both versions and the snapshot hash for reproducible work. Use
+network connection are required. Unified releases pair the same tool/content product version;
+record the bundled `product-release.json` identity and the snapshot hash for reproducible work. Use
 `--library-sha256 sha256:<digest>` to require a specific trusted snapshot hash.
 The CLI does not include an LLM. Fully offline semantic review requires an
 offline-capable Agent/model supplied by the caller.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiangong-lca/pcr",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "description": "Offline PCR consumer CLI and agent Skill",
   "license": "MIT",
@@ -15,7 +15,8 @@
     "skills",
     "README.md",
     "LICENSE",
-    "NOTICE.md"
+    "NOTICE.md",
+    "product-release.json"
   ],
   "dependencies": {
     "ajv": "8.20.0"
@@ -27,7 +28,7 @@
     "type": "git",
     "url": "git+https://github.com/tiangong-lca/pcr.git"
   },
-  "gitHead": "f70d735639de9d21a24ff8959f0330880f969631",
+  "gitHead": "fbbaf93a661c844a0f8d37e14e32f323e36e3ea9",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"

package/product-release.json

@@ -0,0 +1,7 @@
+{
+  "schema": 1,
+  "version": "0.3.0",
+  "tag": "v0.3.0",
+  "sourceCommit": "fbbaf93a661c844a0f8d37e14e32f323e36e3ea9",
+  "sourceFingerprint": "sha256:3f267da4e67ccb0be0b900d4416be11ebaaddb9e60f2f6390f9c85f2e0a893de"
+}