pi-career 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 # Changelog
 
+## Unreleased
+
+## 0.3.0 - 2026-08-14
+
+### Breaking
+
+- Removed Windows support. Package metadata now permits installation only on macOS/Linux, and direct local/Git extension initialization registers no command/tool and fails with stable payload-free `unsupported_platform` guidance before runtime route work, acquisition, compatibility probing, or private stdin.
+
+### Changed
+
+- Updated the exact external runtime and managed compatibility boundary to `@revazi/career@0.2.0` / Core 0.2.0 after reviewing the six-target package, registry integrity, SLSA provenance, and unchanged v1 operation/schema semantics. Pi-career validates the exact ordered six-package v2 launcher manifest while delegating native selection and integrity algorithms to the launcher.
+- Decoupled immutable `7ed36c4…` after-study evidence from later source: frozen bytes/trees/deltas remain exact, while current measurements may improve only with unchanged shape/invariants/budgets and no workflow regression relative to that snapshot.
+- Consolidated the model-visible Career Skill while preserving safety invariants and avoiding workflow regressions; the frozen before/after evidence records an aggregate reduction from 25,652 to 21,552 workflow tokens (15.98%).
+- Added a Git-history/source-tree/hash-bound before/optimizing/after token-optimization benchmark phase with Pi Skill discovery/full-load context, actual managed serialization parity, direct tool-call/result/detail/editor surfaces, and independent workflows; semantic/privacy gates prevent savings by dropping required context.
+- Added user-only TUI/RPC `/career-save` for exact preview and separately confirmed no-clobber saving of current Markdown/text materializations on supported macOS/Linux systems, with private managed-directory markers, strict assisted/non-authoritative v2 sidecars, in-memory idempotency, and immediate exclusion-verifying rescan; PDF saves fail closed.
+- Changed assisted-sidecar scanning to quarantine malformed, missing-in-managed-root, duplicate-key, edited, or hash-mismatched artifacts instead of allowing fallback to original analysis/matching eligibility.
+- Expanded the frozen synthetic token benchmark across managed match, suggestion/replacement review, materialization, and evidence/change/document detail hydration outputs, all under explicit common-output budgets.
+- Added mocked release-automation regressions for checked-in hosted-gate invocation, bounded registry propagation, exact npm publish/SLSA attestation formats, fail-closed responses, and publication-to-release ordering.
+- Generalized the trusted-publishing checklist and recorded immutable `v0.2.0` coordinates, incident boundaries, and no-blind-rerun recovery guidance.
+- Expanded synthetic PDF compatibility coverage with pinned Chromium 150 tagged/untagged fixtures, an embedded OFL-licensed Lato subset, a CSS multi-column layout, and fail-closed image-only/malformed/oversized inputs without OCR.
+- Added a reproducible two-page ReportLab 4.4.10 searchable-PDF fixture with pinned generator-wheel provenance, exact extracted text, compressed content, and an embedded Lato subset.
+- Added turn-terminating non-PDF variant review and a bounded TUI `/career-review` flow that requires warning/discard acknowledgment, exact per-change inspection, explicit inclusion, and a later handle/ID-only editor handoff; PDF handles fail closed before selection or materialization.
+- Added a final paged cross-change review and separate prepare choice before `/career-review` can place selected canonical IDs in the editor, with a back path that preserves the in-memory selection for revision.
+- Replaced the final selected-change JSON object with compact labeled records that keep exact IDs, sections, line bounds, before/after text, and both evidence sets visible.
+- Added constant-state final-review navigation that can reopen any selected exact record directly before the separate prepare-or-back decision.
+
+## 0.2.0 - 2026-08-10
+
+### Added
+
+- Primary compact `career_run` tool with internal Career Core operation/schema discovery, ephemeral resume/result/review/variant handles, complete bounded in-memory results, compact analysis/match/review/materialization projections, and section/item detail hydration without nested `input_json`.
+- `/career-tools` keeps the three raw Career Core compatibility tools available for explicit advanced use while removing them from normal active model context.
+- Frozen synthetic `o200k_base` context benchmark: the active `career_run` contract is 302 tokens against the recorded 1,041-token prior raw-tool surface, with common synthetic managed results below 250 tokens.
+- Local searchable-PDF résumé ingestion through a bounded, network-disabled worker, with explicit library notices for encrypted, image-only, malformed, oversized, or otherwise unextractable PDFs.
+- `/career-workbench` prepares a bounded, visibly reviewable ordinary Pi editor prompt for complete score explanation, reviewed improvement suggestions, a question-led factual interview before reviewed replacements, direct reviewed exact replacements, or vacancy-specific variant review while keeping originals immutable. The command makes no provider/model call; only the user's later ordinary Pi submission invokes the selected provider. Non-PDF materialization requires explicit canonical change-ID selection in a later turn; PDFs stop at manual targeted changes.
+- `/career-application` adds branch-aware company/role/status identity, scopes vacancies and result cards by immutable application ID, and names otherwise unnamed Pi sessions without creating workspace files.
+- `/career-analyze` and `/career-match` expose complete successful Core results plus focused sections through a transient read-only pager, without storing or exporting full result JSON.
+- `/career-setup` records or derives a suggestion-only preferred resume-variation directory. Workbench prompts recommend that privacy-reduced destination first after a separate user request, while creating no directory or file and granting no automatic write authority.
+
+### Changed
+
+- Replaced package-owned native artifacts with a local-first external resolver: bounded absolute `CAREER_CLI_PATH`, PATH `career`, package-local `@revazi/career`, then bounded acquisition of exact `@revazi/career@0.1.1` unless `PI_OFFLINE=1`.
+- Expanded the reviewed external-runtime acquisition boundary through exact `@revazi/career@0.1.1`, deriving npm and its command shell from validated real installation/system paths, executing no PATH-selected shim, and cancelling the detached npm process group.
+- Exact managed Core 0.1.1 operation-catalog/schema-bundle compatibility now completes before private stdin opens. The reviewed Career package launcher owns native target/libc/provenance/mode/size/format/SHA-256 verification; pi-career caches routes only in memory and never retries an already-started operation on another route.
+- Removed `runtime/` from source/package artifacts and replaced bundled-runtime/package checks with runtime-resolution, exact Career package, offline failure, and native-free tarball coverage.
+- Workbench prompts now use `career_run` handles and native proposal payloads rather than model-visible schema discovery and manually reconstructed Core envelopes.
+- Setup and library flows now rescan immediately, display indexed PDFs and actionable scan notices, and explain the searchable PDF/Markdown/text success path instead of silently showing an empty library.
+- Reorganized the README around the recommended first-run flow, exact slash-command behavior, release-version boundaries, runtime acquisition, and privacy/persistence expectations.
+- Streamlined post-release documentation, added npm/CI/license badges, and recorded immutable `v0.1.0` package coordinates.
+- Workbench review prompts now require verbatim preferably single-line source targets, avoid automatic discard-repair retries, reuse unchanged discovery/schema results, and keep prose concise instead of repeating complete review-embedded baselines.
+
 ## 0.1.0 - 2026-08-06
 
 ### Added

package/NOTICE

@@ -8,24 +8,15 @@ Zakalashvili, under the MIT OR Apache-2.0 dual license.
 This repository preserves those dual-license terms. See LICENSE-MIT and
 LICENSE-APACHE.
 
-Unsigned package-owned native runtime binaries and exact per-target provenance
-were imported from the independently verified Career Core workflow run
-30953471793 at commit a3cdb4c6d7f966397e93ea4664071975bca7228c,
-Copyright (c) 2026 Revaz Zakalashvili. They are tracked package inputs from a
-Career Core workflow marked not_a_public_release, not standalone/custom release
-assets, signed artifacts, or a notarized distribution. Version 0.1.0 distributes
-them inside the public npm package and tracked Git tree; no custom release asset,
-signature, or notarization is claimed.
+pi-career packages no native Career Core binary. Runtime distribution,
+platform provenance, native integrity verification, and native third-party
+notices belong to the separately installed or acquired exact
+@revazi/career@0.2.0 distribution. Historical evidence for the native binaries
+bundled by pi-career v0.1.0 remains in docs/native-dependency-inventory.md and
+docs/releasing.md but is not part of the current runtime boundary.
 
-The reviewed runtime license copies and third-party notice are preserved under
-runtime/. docs/native-dependency-inventory.md records the exact locked
-normal/build career-cli graph, selected MIT texts for every reachable crate,
-Rust 1.97.1 Standard Library evidence, target dynamic imports, and exclusions
-for both distributed targets. unicode-ident 1.0.24 and Rust Unicode data require
-the Unicode License V3; the exact selected license/copyright payload is
-preserved under docs/licenses/.
-
-The dependency inventory is evidence, not legal advice or legal approval. For
-version 0.1.0, docs/releasing.md records sole-maintainer license sign-off rather
-than independent legal review, the artifact-provenance decision, and clean
-production and full development audits.
+Searchable PDF text extraction bundles unpdf 1.8.0, Copyright (c) 2023-PRESENT
+Johann Schopplich, under the MIT License preserved at
+docs/unpdf-LICENSE-MIT.txt. Its bundled serverless PDF.js implementation is
+derived from Mozilla PDF.js and is distributed under the Apache License 2.0,
+preserved at LICENSE-APACHE.