bluera-knowledge 0.13.3 → 0.14.1

package/.github/workflows/auto-release.yml

@@ -1,64 +0,0 @@
-name: Auto Release
-
-on:
-  push:
-    branches: [main]
-  workflow_dispatch:
-
-# Prevent parallel tag creation - queue instead of cancel
-concurrency:
-  group: auto-release
-  cancel-in-progress: false
-
-jobs:
-  auto-release:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write  # Required to push tags
-    # Only run after CI completes successfully
-    needs: []
-
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.MARKETPLACE_PAT }}  # Use PAT to trigger Release workflow
-
-      - name: Get version from package.json
-        id: package_version
-        run: |
-          VERSION=$(node -p "require('./package.json').version")
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
-
-      - name: Check if tag exists
-        id: check_tag
-        run: |
-          if git rev-parse "v${{ steps.package_version.outputs.version }}" >/dev/null 2>&1; then
-            echo "exists=true" >> $GITHUB_OUTPUT
-          else
-            echo "exists=false" >> $GITHUB_OUTPUT
-          fi
-
-      # CRITICAL: This is the quality gate for releases.
-      # CI workflow does NOT run on tags (to avoid redundant ~3 min test runs).
-      # This step ensures all CI checks pass on main BEFORE creating a tag.
-      # The Release workflow trusts this guarantee and publishes immediately.
-      # See ci.yml header comment for the full quality guarantee chain.
-      - name: Wait for CI to complete
-        if: steps.check_tag.outputs.exists == 'false'
-        uses: lewagon/wait-on-check-action@v1.3.4
-        with:
-          ref: ${{ github.sha }}
-          check-regexp: '^(lint-and-typecheck|test|build)$'
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          wait-interval: 10
-          allowed-conclusions: success
-
-      - name: Create and push tag
-        if: steps.check_tag.outputs.exists == 'false'
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git tag ${{ steps.package_version.outputs.tag }}
-          git push origin ${{ steps.package_version.outputs.tag }}

package/.github/workflows/ci.yml

@@ -1,168 +0,0 @@
-name: CI
-
-# CI runs on branch pushes and PRs, but NOT on tags.
-#
-# Why no tag trigger?
-# - Auto Release workflow (auto-release.yml) waits for CI to pass on main
-#   before creating a tag (uses wait-on-check-action with lint-and-typecheck,
-#   test, build checks)
-# - The tag contains the exact same code that just passed CI on main
-# - Running CI again on the tag is redundant and wastes ~3 minutes per release
-# - Release workflow (release.yml) trusts this guarantee and publishes immediately
-#
-# Quality guarantee chain:
-#   push to main → CI passes → Auto Release creates tag → Release publishes
-#
-on:
-  push:
-    branches: ['**']
-    # Note: tags intentionally excluded - see comment above
-  pull_request:
-    branches: [main]
-
-# Prevent duplicate runs: cancel in-progress runs for same branch
-# When a PR is open, only run the pull_request event (skip the push)
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  # Fast checks that don't need Python/models (runs in ~30s)
-  lint-and-typecheck:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
-      - name: Cache Bun dependencies
-        uses: actions/cache@v4
-        with:
-          path: ~/.bun/install/cache
-          key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
-          restore-keys: |
-            bun-${{ runner.os }}-
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Lint
-        run: bun run lint
-
-      - name: Type check
-        run: bun run typecheck
-
-  # Tests with Python dependencies (slower, runs in parallel)
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: '3.11'
-
-      - name: Cache pip dependencies
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/pip
-          key: pip-${{ runner.os }}-crawl4ai
-          restore-keys: |
-            pip-${{ runner.os }}-
-
-      - name: Cache Playwright browsers
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-chromium
-          restore-keys: |
-            playwright-${{ runner.os }}-
-
-      - name: Install crawl4ai
-        run: |
-          pip install crawl4ai
-          # Only run setup if Playwright not cached (checks for chromium)
-          if [ ! -d ~/.cache/ms-playwright/chromium-* ]; then
-            crawl4ai-setup
-          else
-            echo "Playwright browsers already cached, skipping setup"
-          fi
-
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
-      - name: Cache Bun dependencies
-        uses: actions/cache@v4
-        with:
-          path: ~/.bun/install/cache
-          key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
-          restore-keys: |
-            bun-${{ runner.os }}-
-
-      - name: Cache Hugging Face models
-        uses: actions/cache@v4
-        with:
-          path: ~/.cache/huggingface-transformers
-          key: huggingface-transformers-${{ runner.os }}-all-MiniLM-L6-v2
-          restore-keys: |
-            huggingface-transformers-${{ runner.os }}-
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Warm up embedding model
-        run: |
-          # Download embedding model before tests to prevent race conditions
-          # Multiple test files use embeddings - this ensures model is fully cached
-          node -e "
-            import('@huggingface/transformers').then(async ({ pipeline, env }) => {
-              const { homedir } = await import('node:os');
-              const { join } = await import('node:path');
-              env.cacheDir = join(homedir(), '.cache', 'huggingface-transformers');
-              console.log('Downloading embedding model to:', env.cacheDir);
-              await pipeline('feature-extraction', 'Xenova/all-MiniLM-L6-v2', { dtype: 'fp32' });
-              console.log('Model downloaded successfully');
-            });
-          "
-
-      - name: Run tests with coverage
-        run: bun run test:coverage
-
-  # Build (lightweight, runs in parallel)
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
-      - name: Cache Bun dependencies
-        uses: actions/cache@v4
-        with:
-          path: ~/.bun/install/cache
-          key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
-          restore-keys: |
-            bun-${{ runner.os }}-
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Build
-        run: bun run build
-
-  # Success job - only runs if all parallel jobs pass
-  ci-success:
-    runs-on: ubuntu-latest
-    needs: [lint-and-typecheck, test, build]
-    steps:
-      - name: CI passed
-        run: echo "All CI checks passed!"

package/.github/workflows/release.yml

@@ -1,74 +0,0 @@
-name: Release
-
-# Publishes to npm when a tag is pushed.
-#
-# Quality assumption: Tags are only created by Auto Release workflow AFTER
-# CI passes on main. This workflow trusts that guarantee and does not re-run
-# tests. See ci.yml and auto-release.yml for the full quality chain.
-#
-on:
-  push:
-    tags:
-      - 'v*'
-  workflow_dispatch:
-
-# Prevent parallel releases - queue instead of cancel
-concurrency:
-  group: release
-  cancel-in-progress: false
-
-jobs:
-  release:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write  # Required for npm trusted publishing (OIDC)
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Generate release notes
-        id: notes
-        run: |
-          # Get commits since last tag
-          PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
-          if [ -n "$PREV_TAG" ]; then
-            NOTES=$(git log --pretty=format:"- %s" $PREV_TAG..HEAD)
-          else
-            NOTES=$(git log --pretty=format:"- %s" -20)
-          fi
-          echo "notes<<EOF" >> $GITHUB_OUTPUT
-          echo "$NOTES" >> $GITHUB_OUTPUT
-          echo "EOF" >> $GITHUB_OUTPUT
-
-      - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
-        with:
-          generate_release_notes: true
-          body: |
-            ## Changes
-            ${{ steps.notes.outputs.notes }}
-
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-
-      - name: Setup Node.js (for npm publish)
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Update npm for trusted publishing
-        run: npm install -g npm@latest
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Build
-        run: bun run build
-
-      - name: Publish to npm
-        run: npm publish --provenance --access public

package/.github/workflows/update-marketplace.yml

@@ -1,96 +0,0 @@
-name: Update Marketplace
-
-on:
-  workflow_run:
-    workflows: ["Release"]
-    types: [completed]
-
-# Prevent parallel marketplace updates - queue instead of cancel
-concurrency:
-  group: update-marketplace
-  cancel-in-progress: false
-
-jobs:
-  update-marketplace:
-    runs-on: ubuntu-latest
-    # Only run if Release workflow succeeded
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-
-    steps:
-      # Wait for CI to complete successfully
-      - name: Wait for CI to complete
-        uses: lewagon/wait-on-check-action@v1.3.4
-        with:
-          ref: ${{ github.event.workflow_run.head_sha }}
-          check-regexp: '^(lint-and-typecheck|test|build)$'
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          wait-interval: 10
-          allowed-conclusions: success
-
-      # Get the tag name from the workflow run
-      - name: Get tag name
-        id: get_tag
-        env:
-          HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
-        run: |
-          # Get the tag that triggered the Release workflow
-          # head_branch could be "v0.9.15" or "refs/tags/v0.9.15"
-          TAG_NAME=$(echo "$HEAD_BRANCH" | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' || echo "")
-          if [ -z "$TAG_NAME" ]; then
-            echo "::error::Could not extract tag from head_branch: $HEAD_BRANCH"
-            exit 1
-          fi
-          echo "tag=${TAG_NAME}" >> $GITHUB_OUTPUT
-          echo "Tag: ${TAG_NAME}"
-
-      # Extract version from tag (v0.9.9 -> 0.9.9)
-      - name: Extract version
-        id: version
-        run: |
-          TAG_NAME=${{ steps.get_tag.outputs.tag }}
-          VERSION=${TAG_NAME#v}
-          echo "version=${VERSION}" >> $GITHUB_OUTPUT
-          echo "Extracted version: ${VERSION}"
-
-      # Checkout marketplace repo
-      - name: Checkout marketplace repo
-        uses: actions/checkout@v4
-        with:
-          repository: blueraai/bluera-marketplace
-          token: ${{ secrets.MARKETPLACE_PAT }}
-          path: marketplace
-
-      # Update marketplace.json
-      - name: Update marketplace version
-        working-directory: marketplace
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-
-          jq --arg version "$VERSION" \
-            '(.plugins[] | select(.name == "bluera-knowledge") | .version) = $version' \
-            .claude-plugin/marketplace.json > .claude-plugin/marketplace.json.tmp
-
-          mv .claude-plugin/marketplace.json.tmp .claude-plugin/marketplace.json
-
-          echo "Updated marketplace.json to version $VERSION"
-
-      # Commit and push
-      - name: Commit and push marketplace update
-        working-directory: marketplace
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-
-          git add .claude-plugin/marketplace.json
-
-          if git diff --staged --quiet; then
-            echo "No changes - marketplace already up to date"
-            exit 0
-          fi
-
-          git commit -m "chore: update bluera-knowledge to v$VERSION"
-          git push
-
-          echo "✅ Successfully updated marketplace to v$VERSION"

package/.husky/pre-commit

@@ -1,48 +0,0 @@
-#!/bin/sh
-
-# Get list of staged files
-STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
-
-# Categorize changes
-HAS_SRC_CHANGES=$(echo "$STAGED_FILES" | grep -E '^src/.*\.(ts|js)$' || true)
-HAS_TEST_CHANGES=$(echo "$STAGED_FILES" | grep -E '\.(test|spec)\.(ts|js)$' || true)
-HAS_CONFIG_CHANGES=$(echo "$STAGED_FILES" | grep -E '^(package\.json|tsconfig\.json|tsup\.config\.ts|vitest\.config\.ts|\.eslintrc|knip\.json|\.prettierrc|commitlint\.config\.js)' || true)
-HAS_DOC_CHANGES=$(echo "$STAGED_FILES" | grep -E '\.(md|txt)$|^LICENSE|^NOTICE' || true)
-HAS_DIST_CHANGES=$(echo "$STAGED_FILES" | grep -E '^dist/' || true)
-
-# If only documentation changed (and no code/config), skip all checks
-if [ -n "$HAS_DOC_CHANGES" ] && [ -z "$HAS_SRC_CHANGES" ] && [ -z "$HAS_TEST_CHANGES" ] && [ -z "$HAS_CONFIG_CHANGES" ]; then
-  echo "ℹ️  Only documentation changed, skipping code validation"
-  exit 0
-fi
-
-# If only dist/ changed (shouldn't happen, but handle it), skip checks
-if [ -n "$HAS_DIST_CHANGES" ] && [ -z "$HAS_SRC_CHANGES" ] && [ -z "$HAS_TEST_CHANGES" ] && [ -z "$HAS_CONFIG_CHANGES" ]; then
-  echo "ℹ️  Only dist/ changed, skipping validation"
-  exit 0
-fi
-
-# Run checks based on what changed
-echo "🔍 Running validation checks..."
-
-# Always run format check, lint and typecheck for code/config changes
-if [ -n "$HAS_SRC_CHANGES" ] || [ -n "$HAS_TEST_CHANGES" ] || [ -n "$HAS_CONFIG_CHANGES" ]; then
-  bun run format:check || exit 1
-  bun run lint || exit 1
-  bun run lint:deadcode || exit 1
-  bun run typecheck || exit 1
-fi
-
-# Run tests only if source or test files changed
-if [ -n "$HAS_SRC_CHANGES" ] || [ -n "$HAS_TEST_CHANGES" ]; then
-  bun run test:changed || exit 1
-fi
-
-# Build only if source or config changed
-if [ -n "$HAS_SRC_CHANGES" ] || [ -n "$HAS_CONFIG_CHANGES" ]; then
-  bun run build || exit 1
-  # Auto-stage dist/ after build (required for Claude Code plugin distribution)
-  git add dist/
-fi
-
-echo "✅ All checks passed"

package/.husky/pre-push

@@ -1,39 +0,0 @@
-#!/bin/sh
-set -o pipefail
-
-# Get list of files changed in commits being pushed (compared to remote)
-# If remote doesn't exist yet, compare to HEAD~1
-REMOTE_BRANCH=$(git rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null || echo "")
-
-if [ -n "$REMOTE_BRANCH" ]; then
-  CHANGED_FILES=$(git diff --name-only "$REMOTE_BRANCH"...HEAD)
-else
-  # No remote tracking branch, check commits that would be pushed
-  CHANGED_FILES=$(git diff --name-only HEAD~1...HEAD 2>/dev/null || git diff --name-only --cached)
-fi
-
-# Categorize changes
-HAS_SRC_CHANGES=$(echo "$CHANGED_FILES" | grep -E '^src/.*\.(ts|js)$' || true)
-HAS_TEST_CHANGES=$(echo "$CHANGED_FILES" | grep -E '\.(test|spec)\.(ts|js)$' || true)
-HAS_CONFIG_CHANGES=$(echo "$CHANGED_FILES" | grep -E '^(package\.json|tsconfig\.json|tsup\.config\.ts|vitest\.config\.ts)' || true)
-
-# Skip coverage if no source or test files changed
-if [ -z "$HAS_SRC_CHANGES" ] && [ -z "$HAS_TEST_CHANGES" ]; then
-  echo "ℹ️  No source/test changes detected, skipping coverage tests"
-  exit 0
-fi
-
-# Run coverage tests - capture exit code before filtering output
-echo "🧪 Running coverage tests..."
-COVERAGE_OUTPUT=$(bun run test:coverage 2>&1)
-COVERAGE_EXIT=$?
-
-# Show filtered summary
-echo "$COVERAGE_OUTPUT" | grep -E '(FAIL|Test Files|passed|Coverage|threshold|ERROR)' | tail -15
-
-if [ $COVERAGE_EXIT -ne 0 ]; then
-  echo "❌ Coverage tests failed"
-  exit 1
-fi
-
-echo "✅ Coverage tests passed"

package/.mcp.json

@@ -1,11 +0,0 @@
-{
-  "bluera-knowledge": {
-    "command": "node",
-    "args": ["${CLAUDE_PLUGIN_ROOT}/dist/mcp/server.js"],
-    "env": {
-      "PROJECT_ROOT": "${PWD}",
-      "DATA_DIR": ".bluera/bluera-knowledge/data",
-      "CONFIG_PATH": ".bluera/bluera-knowledge/config.json"
-    }
-  }
-}

package/.prettierrc

@@ -1,9 +0,0 @@
-{
-  "semi": true,
-  "singleQuote": true,
-  "trailingComma": "es5",
-  "tabWidth": 2,
-  "useTabs": false,
-  "printWidth": 100,
-  "endOfLine": "lf"
-}

package/.versionrc.json

@@ -1,24 +0,0 @@
-{
-  "packageFiles": [
-    {
-      "filename": "package.json",
-      "type": "json"
-    }
-  ],
-  "bumpFiles": [
-    {
-      "filename": "package.json",
-      "type": "json"
-    },
-    {
-      "filename": ".claude-plugin/plugin.json",
-      "type": "json"
-    }
-  ],
-  "tagPrefix": "v",
-  "commitAll": true,
-  "sign": false,
-  "scripts": {
-    "postbump": "npm run build"
-  }
-}

package/CLAUDE.md

@@ -1,110 +0,0 @@
-# THIS IS CLAUDE.md - YOUR MEMORY FILE
-
-**STOP. READ THIS FIRST.**
-
-This file is YOUR (Claude's) project memory. It is NOT user documentation. It is NOT a README.
-
-| File | Purpose | Audience |
-|------|---------|----------|
-| **CLAUDE.md** (this file) | Claude Code's memory - scripts, workflows, coding rules | YOU (Claude) |
-| **README.md** | User-facing documentation - features, installation, API | HUMANS (users) |
-
-**When to update this file:** When scripts, CI/CD workflows, build processes, or coding conventions change.
-
-**Keep this file LEAN.** This entire file loads into your context every session. Be concise. No prose. No redundancy. Every line must earn its place.
-
-**CLAUDE.md is hierarchical.** Any subdirectory can have its own CLAUDE.md that auto-loads when you work in that directory. Use this pattern:
-- **Root CLAUDE.md** (this file): Project-wide info - scripts, CI/CD, general conventions
-- **Subdirectory CLAUDE.md**: Directory-specific context scoped to files below it
-- Nest as deep as needed - each level inherits from parents
-
-**Stay DRY with includes.** Use `@path/to/file` syntax to import content instead of duplicating. Not evaluated inside code blocks.
-
----
-
-## Package Manager
-
-**Use `bun`** - not npm or yarn. All scripts should be run with `bun run <script>`.
-
----
-
-## Scripts
-
-**Development:**
-- `bun run build` - Compile TypeScript
-- `bun run test:run` - Run tests once
-- `bun run precommit` - Full validation (lint, typecheck, tests, build)
-- `bun run prerelease` - Full quality checks (format, lint, deadcode, typecheck, coverage, build)
-
-**Versioning (after code changes):**
-- `bun run version:patch` - Runs `prerelease` checks, then bumps patch version
-- `bun run version:minor` - Runs `prerelease` checks, then bumps minor version
-- `bun run version:major` - Runs `prerelease` checks, then bumps major version
-
-Note: Version scripts run full quality checks BEFORE bumping to prevent broken releases.
-
-**Releasing (Fully Automated):**
-1. Bump version: `bun run version:patch` (or minor/major)
-2. Commit: `git commit -am "chore: bump version to X.Y.Z"`
-3. Push: `git push`
-4. **Done!** GitHub Actions handles the rest automatically
-
-**What happens automatically:**
-- `CI` workflow runs (lint, typecheck, tests, build)
-- `Auto Release` workflow waits for CI, then creates & pushes tag
-- `Release` workflow creates GitHub release
-- `Update Marketplace` workflow updates `blueraai/bluera-marketplace`
-
-**Manual release scripts (legacy, not needed):**
-- `bun run release:patch` - Bump + commit + tag + push
-- `bun run release:minor` - Same for minor version
-- `bun run release:major` - Same for major version
-
-## GitHub Actions Workflows
-
-**CI Workflow** (`.github/workflows/ci.yml`)
-- Triggers: Push to main, pull requests, tag pushes
-- Runs: Lint, typecheck, tests, build
-- Required to pass before auto-release creates tag
-
-**Auto Release Workflow** (`.github/workflows/auto-release.yml`) **← NEW!**
-- Triggers: Push to main
-- Waits for: CI workflow to pass
-- Checks: If version in package.json has no matching tag
-- Creates: Tag and pushes it (triggers Release workflow)
-- Uses: `MARKETPLACE_PAT` for checkout/push (GITHUB_TOKEN can't trigger other workflows)
-- **This is what makes releases fully automated**
-- **Important:** Must use PAT, not GITHUB_TOKEN, to allow tag push to trigger Release workflow
-
-**Release Workflow** (`.github/workflows/release.yml`)
-- Triggers: Tag push (v*)
-- Creates: GitHub release with auto-generated notes
-
-**Update Marketplace Workflow** (`.github/workflows/update-marketplace.yml`)
-- Triggers: After Release workflow completes (via `workflow_run`)
-- Waits for: CI workflow success (via `wait-on-check-action`)
-- Updates: `blueraai/bluera-marketplace` plugin version automatically
-- Requires: `MARKETPLACE_PAT` secret (repo-scoped PAT with write access to marketplace repo)
-- Note: Uses `workflow_run` trigger because GitHub prevents `GITHUB_TOKEN` workflows from triggering other workflows
-
-## Distribution Requirements
-
-**`dist/` MUST be committed to git** - This is intentional, not an oversight:
-
-1. **Claude Code plugins are copied to a cache during installation** - no build step runs
-   - Plugins need pre-built files ready to execute immediately
-   - Source: https://code.claude.com/docs/en/discover-plugins
-
-2. **npm publishing also uses committed dist/** - No `files` array in package.json, so npm includes whatever isn't in `.gitignore`
-
-**After any code change:**
-1. Run `bun run build` (or `bun run precommit` which includes build)
-2. Commit both source AND dist/ changes together
-
-## Project Rules
-
-Modular rules are in `.claude/rules/` and auto-load:
-
-- `code-quality.md` - Fail early/fast, strict typing, no fallback code
-- `git.md` - No --no-verify on commits
-- `versioning.md` - Use version:* commands, push to main for releases