@hraness/oh 0.2.3 → 0.2.7

package/README.md

@@ -37,13 +37,20 @@ indexes derived and replaceable.
 [Bun 1.3.14 or newer](https://bun.sh/docs/installation) is required for the
 CLI, local SDK, and SQLite authority. The runtime-neutral store contracts and
 direct libSQL authority also support Node 24 serverless runtimes. Install the
-current immutable release directly from GitHub:
+exact current release from npm:
 
 ```sh
-bun add --global github:hraness/oh#v0.2.3
+bun add --global @hraness/oh@0.2.7
 oh --help
 ```
 
+The identical package bytes and their checksum are available from the
+[immutable GitHub Release](https://github.com/hraness/oh/releases/tag/v0.2.7),
+including the mirrored
+[`hraness-oh-0.2.7.tgz`](https://github.com/hraness/oh/releases/download/v0.2.7/hraness-oh-0.2.7.tgz)
+and
+[`SHA256SUMS`](https://github.com/hraness/oh/releases/download/v0.2.7/SHA256SUMS).
+
 Oh writes to `.oh/oh.sqlite` and the `default` space unless you select another
 path or space. Keep `.oh/` out of source control.
 
@@ -100,7 +107,7 @@ For a project dependency, pin the same immutable release in `package.json`:
 ```json
 {
   "dependencies": {
-    "@hraness/oh": "github:hraness/oh#v0.2.3"
+    "@hraness/oh": "0.2.7"
   }
 }
 ```
@@ -538,8 +545,10 @@ keep remote sync explicit.
 You can also give an agent this prompt:
 
 ```text
-Install hraness/oh and its Oh Agent Skill from the immutable v0.2.3 tag at
-https://github.com/hraness/oh. Verify the CLI with `oh --help` and `oh version`.
+Install @hraness/oh@0.2.7 from npm and use its packaged Oh Agent Skill. The
+exact npm tarball and SHA256SUMS are mirrored by the immutable v0.2.7 Release at
+https://github.com/hraness/oh/releases/tag/v0.2.7. Verify the CLI with
+`oh --help` and `oh version`.
 Do not create or modify an Oh database until I name its path and ask you to.
 ```
 

package/dist/cli.d.ts

@@ -1,4 +1,4 @@
 #!/usr/bin/env bun
-export declare const OH_PACKAGE_VERSION: "0.2.3";
+export declare const OH_PACKAGE_VERSION: "0.2.7";
 export declare function runOhCli(arguments_: readonly string[]): Promise<number>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.js

@@ -3072,7 +3072,7 @@ class Oh {
 
 // src/cli.ts
 import { readFile } from "fs/promises";
-var OH_PACKAGE_VERSION = "0.2.3";
+var OH_PACKAGE_VERSION = "0.2.7";
 var KNOWN_OPTIONS = new Set([
   "actor",
   "after",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hraness/oh",
-  "version": "0.2.3",
+  "version": "0.2.7",
   "description": "open-source tools for agentic research",
   "type": "module",
   "license": "MIT",
@@ -83,23 +83,29 @@
     "LICENSE"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org"
   },
   "scripts": {
     "build": "bun run build:js && bun run build:portable && bun run build:types",
     "build:js": "bun build ./src/index.ts ./src/sdk.ts ./src/sqlite/index.ts ./src/sync.ts ./src/semantic.ts ./src/cli.ts --outdir ./dist --target bun --format esm --external bun:sqlite",
     "build:portable": "bun build ./src/store.ts ./src/libsql.ts ./src/projection-public.ts ./src/projection-suss.ts ./src/memory.ts --outdir ./dist --target node --format esm --external @suss/datalog",
     "build:types": "tsc -p tsconfig.build.json",
-    "check": "bun run typecheck && bun run test && bun run build && bun run test:types:node && bun run test:node && bun run test:node-projection",
+    "check": "bun run typecheck && bun run typecheck:scripts && bun run test && bun run build && bun run test:types:node && bun run test:node && bun run test:node-projection && bun run test:package",
     "test:node": "node ./tests/node-portable.mjs",
     "test:types:node": "tsc -p tsconfig.node-portable.json --noEmit",
+    "test:package": "bun run ./scripts/package-smoke.ts",
+    "release:preflight": "bun run ./scripts/check-release-provider-preflight.ts",
     "test": "bun test ./src ./tests ./site/tests/source.test.ts",
     "test:node-projection": "node --test ./scripts/projection-node.test.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:scripts": "tsc -p tsconfig.scripts.json --noEmit"
   },
   "devDependencies": {
     "@suss/datalog": "0.20.0",
     "@types/bun": "1.3.14",
+    "sigstore": "4.1.1",
     "typescript": "5.9.3"
   },
   "peerDependencies": {

package/skills/oh/SKILL.md

@@ -30,8 +30,9 @@ oh --help
 oh version
 ```
 
-The supported CLI is `@hraness/oh@0.2.3` from the immutable `v0.2.3` GitHub
-tag. It requires Bun 1.3.14 or newer. The versioned contract is published at
+The supported CLI is the exact npm release `@hraness/oh@0.2.7`. Its identical
+tarball and checksum are mirrored by the immutable GitHub Release `v0.2.7`.
+It requires Bun 1.3.14 or newer. The versioned contract is published at
 <https://oh.computer/spec/>.
 
 ## Open an existing space

package/src/cli.ts

@@ -9,7 +9,7 @@ import { Oh } from "./sdk";
 import { OH_SQLITE_SCHEMA_VERSION } from "./sqlite/migrations";
 import { createOhSyncBundleV1, parseOhSyncBundleV1 } from "./sync";
 
-export const OH_PACKAGE_VERSION = "0.2.3" as const;
+export const OH_PACKAGE_VERSION = "0.2.7" as const;
 
 type ParsedArguments = { options: Map<string, string[]>; positionals: string[] };
 type ValidatedInvocation = Readonly<{