1.4.0 through the npm latest
dist-tag. The standard package installs the matching supporting packages
automatically. Use matching versions when evaluating built tarballs.
Supported entry point
Applications, including external coordinators, should install and importllm-wiki-compiler.
The scoped packages below are publicly downloadable implementation dependencies,
not separately supported consumer APIs. Direct exports are for compiler maintainers.
Scoping does not make them private or establish a security boundary.
Internal package responsibilities
The standard package requires both core and the local engine at exact matching
versions. Existing users do not need to select or construct a host. The engine
can be omitted in internal core-only composition, but is not an optional dependency of the standard
distribution. No existing CLI command is removed by choosing the standard package.
Engine-free implementation
For compiler maintainers, internal composition uses:WikiCore does not
offer startWorkflow or the other execution methods of the standard Wiki facade.
An external coordinator owns process state and decisions. Retaining data or
preparing a change does not approve or apply that change. See the
SDK authority boundary.
Local workflow composition
The local engine requires an explicit host supplied by trusted application code. Core’s host enforces confinement, locks, retained-state integrity and compiler mutation authority. The engine cannot manufacture a default host or extra grants. Host composition is an in-process trust boundary, not a sandbox for untrusted code. Applications should use the standard package. For internal composition, import the host and contracts through@atomicstrata/llmwiki-core/local-workflow-host and
@atomicstrata/llmwiki-core/local-workflow-contracts, rather than private source paths. Use a
single core module instance: duplicate-core composition is rejected before I/O.
The compiler-cli, compiler-sdk and compiler-legacy-workflows subpaths support
the standard package’s composition and compatibility. They are not the recommended
application entry points. In particular, legacy locked-start composition assumes
the caller already holds the required lock; it does not establish that lock.
Product boundaries
Built-in AutoSci and Newsroom profile templates describe schemas and declarations; they do not install full research or editorial applications. Those applications own providers, domain policy, process UX and product-specific exports. External research or creative-asset modules likewise do not belong in compiler core. New reusable record, verification and authority mechanisms belong in core. Product sequencing, human decisions and revision strategy belong in the external coordinator. Existing compiler-local workflows remain supported on their experimental terms; they are not silently rerouted through an external coordinator. The two are tiers, not a migration path. The local engine executes locally per invocation and retains run state and pending human gates between sessions. Reach for an external coordinator for automatic scheduling, worker recovery, distributed execution, managed approval routing or cross-project coordination; see When to use the local engine.Distribution requirements
The release workflow publishes a matching set from one commit: core, then the engine, then the standard facade, so the facade is never on the registry while a version it requires is missing. It verifies each package’s version, exact internal pins and source commit, and finishes with a fresh installation. Prerelease versions publish to a non-latest dist-tag (next by default).
Scope ownership and trusted publishing access are release prerequisites; the
naming change does not establish them. First publications of new package names
require authenticated bootstrap;
subsequent workflow releases require a trusted publisher for each package.
Contributing across packages
Use one repository and one PR, including for cross-package changes. Root-levelnpm ci links workspace packages; npm run build builds core, engine and facade
in order. Local development requires no publishing. Source directory names are
unchanged. No new public core subpath is introduced.
- Knowledge and authority changes belong in the relevant
src/subsystem. - Local workflow execution belongs in
src/local-workflows/. - Public SDK composition belongs in
src/sdk/andsrc/index.ts. - Shared engine contracts belong in
src/local-workflow-host/.
npm run test:pack
checks fresh installation and TypeScript consumption without workspace aliases.
Package-boundary tests prevent the engine from embedding compiler implementation.