@matuto-ai/opencode-broker-connector 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/docs/publishing.md +10 -9
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -46,10 +46,10 @@ Optional `broker.caFile` points to a trusted private CA; public certificates nor
|
|
|
46
46
|
|
|
47
47
|
## After npm publication
|
|
48
48
|
|
|
49
|
-
The package is prepared as `@matuto-ai/opencode-broker-connector`. **A prepared package/workflow does not mean it has been published.** Once version `0.1.
|
|
49
|
+
The package is prepared as `@matuto-ai/opencode-broker-connector`. **A prepared package/workflow does not mean it has been published.** Once version `0.1.1` exists on npm, use this native OpenCode configuration instead of the local file:
|
|
50
50
|
|
|
51
51
|
```json
|
|
52
|
-
{"plugin": ["@matuto-ai/opencode-broker-connector@0.1.
|
|
52
|
+
{"plugin": ["@matuto-ai/opencode-broker-connector@0.1.1"]}
|
|
53
53
|
```
|
|
54
54
|
|
|
55
55
|
OpenCode installs npm plugins automatically using Bun. Keep the same private `PSST_CONFIG_FILE`; remove the duplicate local entry so the plugin does not load twice. See [publication](docs/publishing.md).
|
package/docs/publishing.md
CHANGED
|
@@ -5,7 +5,7 @@ Package name: `@matuto-ai/opencode-broker-connector`. The npm workflow follows t
|
|
|
5
5
|
1. Review and merge the feature PR.
|
|
6
6
|
2. Bootstrap the package under an npm account authorized for this package if it does not exist yet. Account creation, credentials and first publication are operator actions, not performed by the connector.
|
|
7
7
|
3. Configure npm's GitHub Actions trusted publisher for owner `matuto-ai`, repository `opencode-broker-connector`, workflow `npm-publish.yml`. If the repository moves, update package metadata and trusted-publisher settings together.
|
|
8
|
-
4. Create a GitHub release whose tag exactly matches `v` + package.json version (
|
|
8
|
+
4. Create a GitHub release whose tag exactly matches `v` + package.json version (next `v0.1.1`).
|
|
9
9
|
5. The action runs syntax, tests including pinned actual CLI, package inspection, then `npm publish --access public --provenance` using OIDC. No long-lived npm token is stored in the workflow.
|
|
10
10
|
6. Confirm npm has the exact version before recommending npm installation. Failed publishing is not repaired by silently changing a version or recreating a tag.
|
|
11
11
|
|
|
@@ -13,12 +13,13 @@ Package name: `@matuto-ai/opencode-broker-connector`. The npm workflow follows t
|
|
|
13
13
|
|
|
14
14
|
Before npm publication, the local-file installation in README works directly from `main` after the naming PR is reviewed and merged. No unpublished dependency is required.
|
|
15
15
|
|
|
16
|
-
##
|
|
16
|
+
## Patch release
|
|
17
17
|
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
18
|
+
This PR prepares `0.1.1`; the intended GitHub release tag is `v0.1.1`.
|
|
19
|
+
After review and merge, the maintainer can publish that release from the merged
|
|
20
|
+
commit to exercise npm Trusted Publishing. This code change does not itself
|
|
21
|
+
create a tag, release, or npm publication. Verify the workflow succeeds and the
|
|
22
|
+
scoped npm version exists before recommending it for installation.
|
|
23
|
+
|
|
24
|
+
Existing `0.1.0` npm packages and old GitHub tags remain untouched. Do not reuse
|
|
25
|
+
or move an old release tag; the new tag must exactly match the package version.
|