pi-career 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.2.0 - 2026-08-10
+
+### Added
+
+- Primary compact `career_run` tool with internal Career Core operation/schema discovery, ephemeral resume/result/review/variant handles, complete bounded in-memory results, compact analysis/match/review/materialization projections, and section/item detail hydration without nested `input_json`.
+- `/career-tools` keeps the three raw Career Core compatibility tools available for explicit advanced use while removing them from normal active model context.
+- Frozen synthetic `o200k_base` context benchmark: the active `career_run` contract is 302 tokens against the recorded 1,041-token prior raw-tool surface, with common synthetic managed results below 250 tokens.
+- Local searchable-PDF résumé ingestion through a bounded, network-disabled worker, with explicit library notices for encrypted, image-only, malformed, oversized, or otherwise unextractable PDFs.
+- `/career-workbench` prepares a bounded, visibly reviewable ordinary Pi editor prompt for complete score explanation, reviewed improvement suggestions, a question-led factual interview before reviewed replacements, direct reviewed exact replacements, or vacancy-specific variant review while keeping originals immutable. The command makes no provider/model call; only the user's later ordinary Pi submission invokes the selected provider. Non-PDF materialization requires explicit canonical change-ID selection in a later turn; PDFs stop at manual targeted changes.
+- `/career-application` adds branch-aware company/role/status identity, scopes vacancies and result cards by immutable application ID, and names otherwise unnamed Pi sessions without creating workspace files.
+- `/career-analyze` and `/career-match` expose complete successful Core results plus focused sections through a transient read-only pager, without storing or exporting full result JSON.
+- `/career-setup` records or derives a suggestion-only preferred resume-variation directory. Workbench prompts recommend that privacy-reduced destination first after a separate user request, while creating no directory or file and granting no automatic write authority.
+
+### Changed
+
+- Replaced package-owned native artifacts with a local-first external resolver: bounded absolute `CAREER_CLI_PATH`, PATH `career`, package-local `@revazi/career`, then bounded acquisition of exact `@revazi/career@0.1.1` unless `PI_OFFLINE=1`.
+- Expanded the reviewed external runtime matrix to ARM64/x64 macOS, GNU and musl Linux, and MSVC Windows through the exact eight-target `@revazi/career@0.1.1` launcher. Windows acquisition derives npm and its command shell from validated real installation/system paths, executes no PATH-selected shim, and cancels the detached npm process group.
+- Exact managed Core 0.1.1 operation-catalog/schema-bundle compatibility now completes before private stdin opens. The reviewed Career package launcher owns native target/libc/provenance/mode or Windows file invariant/size/format/SHA-256 verification; pi-career caches routes only in memory and never retries an already-started operation on another route.
+- Removed `runtime/` from source/package artifacts and replaced bundled-runtime/package checks with runtime-resolution, exact Career package, offline failure, and native-free tarball coverage.
+- Workbench prompts now use `career_run` handles and native proposal payloads rather than model-visible schema discovery and manually reconstructed Core envelopes.
+- Setup and library flows now rescan immediately, display indexed PDFs and actionable scan notices, and explain the searchable PDF/Markdown/text success path instead of silently showing an empty library.
+- Reorganized the README around the recommended first-run flow, exact slash-command behavior, release-version boundaries, runtime acquisition, and privacy/persistence expectations.
+- Streamlined post-release documentation, added npm/CI/license badges, and recorded immutable `v0.1.0` package coordinates.
+- Workbench review prompts now require verbatim preferably single-line source targets, avoid automatic discard-repair retries, reuse unchanged discovery/schema results, and keep prose concise instead of repeating complete review-embedded baselines.
+
 ## 0.1.0 - 2026-08-06
 
 ### Added

package/NOTICE

@@ -8,24 +8,15 @@ Zakalashvili, under the MIT OR Apache-2.0 dual license.
 This repository preserves those dual-license terms. See LICENSE-MIT and
 LICENSE-APACHE.
 
-Unsigned package-owned native runtime binaries and exact per-target provenance
-were imported from the independently verified Career Core workflow run
-30953471793 at commit a3cdb4c6d7f966397e93ea4664071975bca7228c,
-Copyright (c) 2026 Revaz Zakalashvili. They are tracked package inputs from a
-Career Core workflow marked not_a_public_release, not standalone/custom release
-assets, signed artifacts, or a notarized distribution. Version 0.1.0 distributes
-them inside the public npm package and tracked Git tree; no custom release asset,
-signature, or notarization is claimed.
+pi-career packages no native Career Core binary. Runtime distribution,
+platform provenance, native integrity verification, and native third-party
+notices belong to the separately installed or acquired exact
+@revazi/career@0.1.1 distribution. Historical evidence for the native binaries
+bundled by pi-career v0.1.0 remains in docs/native-dependency-inventory.md and
+docs/releasing.md but is not part of the current runtime boundary.
 
-The reviewed runtime license copies and third-party notice are preserved under
-runtime/. docs/native-dependency-inventory.md records the exact locked
-normal/build career-cli graph, selected MIT texts for every reachable crate,
-Rust 1.97.1 Standard Library evidence, target dynamic imports, and exclusions
-for both distributed targets. unicode-ident 1.0.24 and Rust Unicode data require
-the Unicode License V3; the exact selected license/copyright payload is
-preserved under docs/licenses/.
-
-The dependency inventory is evidence, not legal advice or legal approval. For
-version 0.1.0, docs/releasing.md records sole-maintainer license sign-off rather
-than independent legal review, the artifact-provenance decision, and clean
-production and full development audits.
+Searchable PDF text extraction bundles unpdf 1.8.0, Copyright (c) 2023-PRESENT
+Johann Schopplich, under the MIT License preserved at
+docs/unpdf-LICENSE-MIT.txt. Its bundled serverless PDF.js implementation is
+derived from Mozilla PDF.js and is distributed under the Apache License 2.0,
+preserved at LICENSE-APACHE.