diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 44f4ff7..f895ad8 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -153,13 +153,14 @@ published and anonymously verified, a pnpm workspace can route the exact version ```yaml overrides: - '@inkcre/ui-web@2.3.0': https://github.com/InKCre/ui/releases/download/%40inkcre%2Fui-web%402.3.0/inkcre-ui-web-2.3.0.tgz + "@inkcre/ui-web@2.6.0": https://github.com/InKCre/ui/releases/download/%40inkcre%2Fui-web%402.6.0/inkcre-ui-web-2.6.0.tgz ``` Regenerate and review the lockfile, then verify a fresh `pnpm install --frozen-lockfile` with an empty store and no GitHub token, plus consumer builds. Never activate an override before its attachment -exists. The initial 2.3.0 attachment and `impl-ts` consumer cutover are pending release approval; -the current consumer lockfile still requires GitHub Packages access. +exists. Original 2.3.0, 2.5.0, and 2.6.0 tarballs are public. The `impl-ts` consumer cutover is +[merged and verified](https://github.com/InKCre/impl-ts/pull/171), including cold installs, consumer +builds, and real fork CI. Future UI upgrades must adopt their own verified exact-version override. ## GitHub Packages authentication diff --git a/README.md b/README.md index 9836d7b..6b68044 100644 --- a/README.md +++ b/README.md @@ -21,12 +21,13 @@ Web 消费者从 `@inkcre/ui-web/logo/*` 导入,Swift 消费者依赖本仓库 ### Use the package -The current GitHub Packages path requires package read access and npm authentication. A public -Release-tarball path is being prepared; see the [delivery and cutover contract](CONTRIBUTING.md#public-package-delivery) -before selecting an installation path. +Original packages are available through public Release assets without a token. Configure the +exact-version override in the [public delivery guide](CONTRIBUTING.md#public-package-delivery) +before adding the package, and keep the dependency version as semver for Module Federation. +The GitHub Packages registry path still requires package access and npm authentication. ```bash -pnpm add @inkcre/ui-web +pnpm add --save-exact @inkcre/ui-web@2.6.0 ``` See [`packages/web/README.md`](packages/web/README.md) for installation, public entries, and the Skills shipped with the package. Browse the live component catalog at [design.inkcre.dev](https://design.inkcre.dev).