agentic-pi 0.1.0 → 0.1.2

package/README.md

@@ -376,6 +376,48 @@ which walks `test/` for `*.test.ts`.
 Unit tests run in ~170 ms. Integration tests cost about $0.001 per run on
 `gpt-5.4-nano`.
 
+## Releasing
+
+agentic-pi publishes to npm via a GitHub Actions workflow using **npm
+trusted publishing** (OIDC) — no `NPM_TOKEN` secret is needed in the
+repo.
+
+To cut a release (recommended path):
+
+1. Bump `version` in `package.json` — `npm version patch` does this, plus
+   commit and tag, in one step.
+2. Push the commit and tag: `git push --follow-tags`.
+3. Create a GitHub Release on the new tag, e.g.
+   `gh release create v0.2.0 --generate-notes` or via the GitHub web UI.
+4. The `publish.yml` workflow runs on the `release: published` event.
+
+The workflow also triggers on bare `v*.*.*` tag pushes and on manual
+`workflow_dispatch`. The `release` event is the preferred path because
+tag-push events get suppressed when a tag is pushed in the same `git
+push` invocation as branch commits — a real GitHub Actions quirk.
+
+The publish step fails if the tag (or the dispatch `ref` input) doesn't
+match `package.json` version — there is no path that publishes a version
+not represented in the repo at that exact commit.
+
+### One-time setup (trusted publisher)
+
+The first publish of a package needs to be done manually; subsequent
+ones go through the workflow. To enable OIDC for this repo's publishes:
+
+1. Visit the package's "Trusted Publishers" page on
+   <https://www.npmjs.com/package/agentic-pi/settings>.
+2. Add a GitHub Actions trusted publisher with:
+   - Organization: `cliftonc`
+   - Repository: `agentic-pi`
+   - Workflow filename: `publish.yml`
+   - Environment: leave empty (the workflow doesn't use one)
+
+After that, every tag push triggers a workflow that mints an OIDC token,
+npm verifies it against the configured publisher, and the publish goes
+through with a [provenance statement](https://docs.npmjs.com/generating-provenance-statements)
+attached.
+
 Project layout:
 
 ```

package/package.json

@@ -1,8 +1,27 @@
 {
   "name": "agentic-pi",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "A drop-in coding-agent harness built on earendil-works/pi, designed to replace opencode in workflow-driven systems like lastlight.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cliftonc/agentic-pi.git"
+  },
+  "homepage": "https://github.com/cliftonc/agentic-pi#readme",
+  "bugs": {
+    "url": "https://github.com/cliftonc/agentic-pi/issues"
+  },
+  "keywords": [
+    "agent",
+    "ai",
+    "coding-agent",
+    "pi",
+    "earendil-works",
+    "opencode",
+    "lastlight",
+    "llm",
+    "workflow"
+  ],
   "type": "module",
   "bin": {
     "agentic-pi": "./dist/cli.js"