feat: add npm publishing for opencode plugin (#53)

* feat: add npm publishing for opencode plugin

- Rename package from @cloud-atlas-ai/bottle to @open-horizon-labs/bottle-opencode
- Add publish-npm job to release workflow for automated npm publishing
- Uses OIDC provenance for supply chain security

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: address superego review feedback

- Add _versionNote field to package.json explaining version is set at publish time
- Add build verification step to check dist/index.js exists before npm publish
- Add comment explaining why npm upgrade is needed (Node 22 has npm 10.x, OIDC requires 11.5.1+)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: update wm-opencode to 0.3.8

---------

Co-authored-by: Muness Castle <[email protected]>
Co-authored-by: Claude Opus 4.5 <[email protected]>

Author: 3 people

.github/workflows/release.yml

@@ -388,3 +388,59 @@ jobs:
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
         run: cargo publish --allow-dirty
+
+  # =============================================================================
+  # PUBLISH: npm (OpenCode plugin)
+  # =============================================================================
+  publish-npm:
+    name: Publish npm
+    needs: [plan, release]
+    runs-on: ubuntu-latest
+    if: needs.plan.outputs.is_release == 'true' && needs.plan.outputs.is_dry_run != 'true'
+    environment: npm
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Setup Node for npm publish
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
+      # Node 22 ships with npm 10.x, but OIDC trusted publishing requires npm 11.5.1+
+      - name: Upgrade npm for OIDC support
+        run: npm install -g npm@latest
+
+      - name: Extract version from tag
+        id: version
+        run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
+
+      - name: Update package.json version
+        working-directory: opencode-plugin
+        run: |
+          jq --arg v "${{ steps.version.outputs.VERSION }}" '.version = $v' package.json > package.json.tmp
+          mv package.json.tmp package.json
+
+      - name: Install dependencies
+        working-directory: opencode-plugin
+        run: bun install
+
+      - name: Build
+        working-directory: opencode-plugin
+        run: bun run build
+
+      - name: Verify build output
+        working-directory: opencode-plugin
+        run: test -f dist/index.js
+
+      - name: Publish to npm
+        working-directory: opencode-plugin
+        run: npm publish --access public --provenance
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

bottles/stable/manifest.json

@@ -5,7 +5,7 @@
     "@cloud-atlas-ai/bottle": "0.2.6",
     "ba-opencode": "0.2.1",
     "superego-opencode": "0.9.1",
-    "wm-opencode": "0.1.0"
+    "wm-opencode": "0.3.8"
   },
   "plugins": [
     "ba",

opencode-plugin/package.json

@@ -1,7 +1,8 @@
 {
-  "name": "@cloud-atlas-ai/bottle",
-  "version": "0.2.7",
-  "description": "Open Horizon Labs thin wrapper plugin for OpenCode - invokes bottle CLI",
+  "name": "@open-horizon-labs/bottle-opencode",
+  "_versionNote": "Version is set at publish time from git tag",
+  "version": "0.1.0",
+  "description": "Bottle snapshot manager plugin for OpenCode - CLI wrapper for the Open Horizon Labs tool stack",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -14,15 +15,16 @@
     "opencode-plugin",
     "ai",
     "bottle",
-    "cloud-atlas"
+    "open-horizon-labs"
   ],
   "author": {
     "name": "Open Horizon Labs",
     "email": "[email protected]"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/open-horizon-labs/bottle.git"
+    "url": "git+https://github.com/open-horizon-labs/bottle.git",
+    "directory": "opencode-plugin"
   },
   "license": "MIT",
   "devDependencies": {