@peterseibel/hug 0.1.7 → 0.1.9

package/.github/workflows/publish.yml

@@ -0,0 +1,21 @@
+name: Publish to npm
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+      - run: npm install -g npm@latest
+      - run: npm publish --provenance --access public

package/CLAUDE.md

@@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## What this is
 
-`hug` is a lightweight bash CLI that wraps [clasp](https://github.com/google/clasp) to provide opinionated project management for Google Apps Script projects. It handles project creation (from templates or by importing existing projects), forking projects for branch-based workflows, and a push→version→deploy workflow.
+`hug` is a bash CLI that wraps [clasp](https://github.com/google/clasp) to provide opinionated project management for Google Apps Script projects. It handles project creation (from templates or by importing existing projects), forking projects for branch-based workflows, and a push→version→deploy workflow.
 
 ## Project structure
 

package/DEVELOPMENT.md

@@ -47,29 +47,27 @@ Scoped packages are private by default. To publish as public:
 npm publish --access public
 ```
 
-### Subsequent releases
+### Automated publishing via GitHub Actions
 
-1. Bump the version in `package.json` (or use `npm version`):
+Pushing a version tag triggers a GitHub Actions workflow that publishes to npm
+automatically using [Trusted Publishing](https://docs.npmjs.com/trusted-publishers/)
+(OIDC — no npm token needed).
 
-   ```bash
-   npm version patch   # 0.1.0 -> 0.1.1
-   npm version minor   # 0.1.1 -> 0.2.0
-   npm version major   # 0.2.0 -> 1.0.0
-   ```
+**One-time setup:**
 
-   `npm version` creates a git commit and tag automatically.
+1. On npmjs.com, go to the package settings for `@peterseibel/hug`.
+2. Add a trusted publisher: your GitHub user/repo and workflow filename
+   (`publish.yml`).
 
-2. Publish:
+**To release:**
 
-   ```bash
-   npm publish
-   ```
-
-3. Push the version commit and tag:
+```bash
+npm version patch   # or minor / major
+git push --follow-tags
+```
 
-   ```bash
-   git push && git push --tags
-   ```
+`npm version` bumps `package.json`, commits, and creates a `v*` tag. Pushing
+the tag triggers the workflow in `.github/workflows/publish.yml`.
 
 ## Dependencies
 

package/README.md

@@ -1,6 +1,6 @@
 # hug
 
-A lightweight wrapper around [clasp](https://github.com/google/clasp) for managing Google Apps Script projects.
+A wrapper around [clasp](https://github.com/google/clasp) for managing Google Apps Script projects.
 
 ## Install
 

package/bin/hug

@@ -11,11 +11,11 @@ done
 HUG_ROOT="$(cd "$(dirname "$SOURCE")/.." && pwd)"
 source "$HUG_ROOT/lib/common.sh"
 
-VERSION="0.1.0"
+VERSION=$(grep '"version"' "$HUG_ROOT/package.json" | sed 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/')
 
 usage() {
   cat <<EOF
-hug $VERSION — a lightweight wrapper around clasp
+hug $VERSION — a wrapper around clasp
 
 Usage: hug <command> [options]
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@peterseibel/hug",
-  "version": "0.1.7",
-  "description": "A lightweight wrapper around clasp for managing Google Apps Script projects",
+  "version": "0.1.9",
+  "description": "A wrapper around clasp for managing Google Apps Script projects",
   "bin": {
     "hug": "bin/hug"
   },
@@ -9,6 +9,10 @@
     "google-apps-script",
     "clasp"
   ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gigamonkey/hug"
+  },
   "license": "ISC",
   "dependencies": {
     "@google/clasp": "^3.2.0"