[codex] Address PR 48 review comments

.github/workflows/ci.yml

@@ -1,5 +1,8 @@
 name: CI
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [main, develop]
@@ -50,9 +53,7 @@ jobs:
         run: pnpm audit --audit-level=moderate
 
       - name: Validate packaging
-        run: |
-          pnpm exec publint --strict
-          pnpm exec attw --pack . --exclude-entrypoints styles.css
+        run: pnpm run validate:packaging
 
   compatibility:
     name: Check AI SDK Compatibility

.github/workflows/publish.yml

@@ -55,9 +55,7 @@ jobs:
         run: pnpm run build
 
       - name: Validate packaging
-        run: |
-          pnpm exec publint --strict
-          pnpm exec attw --pack . --exclude-entrypoints styles.css
+        run: pnpm run validate:packaging
 
       - name: Check package contents
         run: pnpm pack

README.md

@@ -34,7 +34,7 @@ Install the AI SDK providers you plan to use:
 
 ```bash
 # Core (always needed, React 19 is required)
-npm install react react-dom react-hook-form
+npm install react@^19 react-dom@^19 react-hook-form
 
 # AI SDK providers (install as needed)
 npm install @ai-sdk/openai @ai-sdk/anthropic @ai-sdk/google
@@ -224,7 +224,7 @@ See guides for type-accurate props and APIs:
 Manages all available providers.
 
 ```tsx
-import { ProviderRegistry } from 'ai-sdk-react-model-picker';
+import { AnthropicProvider, OpenAIProvider, ProviderRegistry } from 'ai-sdk-react-model-picker';
 
 const registry = new ProviderRegistry();
 

docs/basics.md

@@ -12,7 +12,7 @@ Peer deps you’ll likely need:
 
 ```bash
 # React 19 is required
-npm install react react-dom react-hook-form
+npm install react@^19 react-dom@^19 react-hook-form
 # Add only the AI SDK providers you use
 npm install @ai-sdk/openai @ai-sdk/anthropic @ai-sdk/google
 npm install @ai-sdk/azure @ai-sdk/mistral @ai-sdk/cohere @ai-sdk/amazon-bedrock

package.json

@@ -79,6 +79,7 @@
     "lint": "eslint .",
     "lint:fix": "tsc --noEmit && eslint . --fix",
     "typecheck": "tsc --noEmit",
+    "validate:packaging": "publint --strict && attw --pack . --exclude-entrypoints styles.css",
     "format": "prettier --write \"src/**/*.{ts,tsx,js,jsx,json,css,md}\"",
     "format:check": "prettier --check \"src/**/*.{ts,tsx,js,jsx,json,css,md}\"",
     "test": "vitest --run",