orch-code 0.1.2 → 0.1.3

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 All notable changes to this project will be documented in this file.
 
+## v0.1.3 - 2026-04-03
+
+- ci: harden npm install and release flow
 ## v0.1.2 - 2026-04-03
 
 - fix: send instructions for OpenAI account chat

package/README.md

@@ -247,6 +247,9 @@ go run . <command>
 
 `npm i -g orch-code` becomes zero-Go for end users once GitHub Releases and npm publish are both live.
 
+Canonical GitHub repo:
+- `https://github.com/beydemirfurkan/orch`
+
 Repo automation now expects:
 - GitHub Actions secret: `NPM_TOKEN`
 - a git tag in the form `vX.Y.Z`
@@ -276,7 +279,13 @@ The release workflow will:
 - verify the tag matches package metadata
 - build darwin/linux/windows binaries with GoReleaser
 - publish a GitHub Release with raw binary assets
-- publish the npm package
+- publish the npm package if that version is not already on npm
+- run clean install smoke tests on macOS and Linux using `npm install -g orch-code`
+
+Recommended publish path:
+- treat tag push as the canonical release path
+- avoid manual `npm publish` during normal releases
+- keep manual npm publish only as a recovery path if CI is unavailable
 
 `release:prepare` updates these files together:
 - `package.json`

package/cmd/version.go

@@ -1,4 +1,4 @@
 package cmd
 
 // version is overridden in release builds via GoReleaser ldflags.
-var version = "0.1.2"
+var version = "0.1.3"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orch-code",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Local-first control plane for deterministic AI coding",
   "license": "MIT",
   "bin": {
@@ -29,12 +29,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/furkanbeydemir/orch.git"
+    "url": "git+https://github.com/beydemirfurkan/orch.git"
   },
   "bugs": {
-    "url": "https://github.com/furkanbeydemir/orch/issues"
+    "url": "https://github.com/beydemirfurkan/orch/issues"
   },
-  "homepage": "https://github.com/furkanbeydemir/orch#readme",
+  "homepage": "https://github.com/beydemirfurkan/orch#readme",
   "engines": {
     "node": ">=18"
   }

package/scripts/check-npm-published.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+
+const https = require('node:https');
+const path = require('node:path');
+
+const packageRoot = path.resolve(__dirname, '..');
+const pkg = require(path.join(packageRoot, 'package.json'));
+
+const version = process.argv[2] || pkg.version;
+const encodedName = encodeURIComponent(pkg.name);
+const url = `https://registry.npmjs.org/${encodedName}/${encodeURIComponent(version)}`;
+
+https
+  .get(url, (response) => {
+    response.resume();
+
+    if (response.statusCode === 200) {
+      console.log('true');
+      process.exit(0);
+    }
+
+    if (response.statusCode === 404) {
+      console.log('false');
+      process.exit(0);
+    }
+
+    console.error(`[orch] unexpected npm registry status: ${response.statusCode || 'unknown'}`);
+    process.exit(1);
+  })
+  .on('error', (error) => {
+    console.error(`[orch] failed to query npm registry: ${error.message}`);
+    process.exit(1);
+  });

package/scripts/postinstall.js

@@ -45,7 +45,7 @@ function main() {
 
 async function install() {
   const assetName = resolveAssetName();
-  const baseUrl = process.env.ORCH_BINARY_BASE_URL || `https://github.com/furkanbeydemir/orch/releases/download/v${pkg.version}`;
+  const baseUrl = process.env.ORCH_BINARY_BASE_URL || `https://github.com/beydemirfurkan/orch/releases/download/v${pkg.version}`;
   const assetUrl = `${baseUrl}/${assetName}`;
 
   try {