feat: prepare OpenBackpack 0.1.0 and governed OIDC releases

.changeset/README.md

@@ -0,0 +1,12 @@
+# Changesets
+
+Create a changeset for every consumer-visible change to a published package:
+
+```sh
+pnpm changeset
+```
+
+Select the affected packages, choose the semantic version bump, and describe the user-visible change. Documentation,
+tests, CI, and internal refactors that do not change a published package may omit a changeset.
+
+The three public packages are kept in a fixed group and release with the same version.

.changeset/config.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [["@openbackpack/core", "openbackpack", "@openbackpack/ai"]],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [],
+  "privatePackages": {
+    "version": false,
+    "tag": false
+  }
+}

.changeset/initial-public-release.md

@@ -0,0 +1,7 @@
+---
+"@openbackpack/core": minor
+"openbackpack": minor
+"@openbackpack/ai": minor
+---
+
+Publish the first supported OpenBackpack CLI, core library, and AI SDK adapter.

.github/CODEOWNERS

@@ -0,0 +1,10 @@
+* @GrahamQuan
+
+/.github/workflows/ @GrahamQuan
+/.github/CODEOWNERS @GrahamQuan
+/.changeset/ @GrahamQuan
+/package.json @GrahamQuan
+/pnpm-lock.yaml @GrahamQuan
+/pnpm-workspace.yaml @GrahamQuan
+/packages/*/package.json @GrahamQuan
+/scripts/check-release.ts @GrahamQuan

.github/workflows/ci.yml

@@ -0,0 +1,45 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  quality:
+    name: quality
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
+        with:
+          version: 10.33.0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Validate Changesets
+        if: github.event_name == 'pull_request' && github.head_ref != 'changeset-release/main'
+        run: pnpm exec changeset status --since="origin/${{ github.base_ref }}"
+
+      - name: Run quality gate
+        run: pnpm check

.github/workflows/release.yml

@@ -0,0 +1,66 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+concurrency:
+  group: release-main
+  cancel-in-progress: false
+
+permissions: {}
+
+jobs:
+  release:
+    name: release
+    if: vars.NPM_RELEASE_ENABLED == 'true'
+    runs-on: ubuntu-latest
+    environment: npm
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
+        with:
+          version: 10.33.0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version-file: .nvmrc
+          registry-url: https://registry.npmjs.org
+          package-manager-cache: false
+
+      - name: Verify npm trusted publishing support
+        run: |
+          node --version
+          npm_version="$(npm --version)"
+          echo "npm ${npm_version}"
+          node -e "const [major, minor] = process.argv[1].split('.').map(Number); if (major < 11 || (major === 11 && minor < 5)) process.exit(1)" "${npm_version}"
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run quality gate
+        run: pnpm check
+
+      - name: Create version pull request or publish
+        id: changesets
+        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
+        with:
+          publish: pnpm release
+          version: pnpm version-packages
+          title: "chore: release packages"
+          commit: "chore: release packages"
+          commitMode: github-api
+        env:
+          GITHUB_TOKEN: ${{ github.token }}

package.json

@@ -19,7 +19,8 @@
   "type": "module",
   "scripts": {
     "build": "turbo run build",
-    "check": "pnpm format:check && pnpm lint && pnpm knip && pnpm typecheck",
+    "changeset": "changeset",
+    "check": "pnpm format:check && pnpm lint && pnpm knip && pnpm typecheck && pnpm test && pnpm build && pnpm release:check",
     "clean": "turbo run clean",
     "dev": "pnpm --filter openbackpack dev",
     "format": "oxfmt --write .",
@@ -30,12 +31,16 @@
     "knip": "knip",
     "prepare": "husky",
     "precommit": "lint-staged && pnpm typecheck",
+    "release": "pnpm clean && pnpm build && pnpm release:check && changeset publish",
+    "release:check": "node --experimental-strip-types scripts/check-release.ts",
     "start": "pnpm --filter openbackpack dev",
     "test": "vitest run",
     "test:watch": "vitest",
-    "typecheck": "turbo run typecheck"
+    "typecheck": "turbo run typecheck",
+    "version-packages": "changeset version && pnpm install --lockfile-only && pnpm format"
   },
   "devDependencies": {
+    "@changesets/cli": "2.31.1",
     "@types/node": "catalog:",
     "husky": "catalog:",
     "knip": "catalog:",

packages/ai/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GrahamQuan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

packages/ai/README.md

@@ -0,0 +1,7 @@
+# @openbackpack/ai
+
+AI SDK tools for [OpenBackpack](https://github.com/GrahamQuan/openbackpack).
+
+```ts
+import { openBackpackTool } from "@openbackpack/ai";
+```

packages/ai/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@openbackpack/ai",
-  "version": "0.1.0",
+  "version": "0.0.0",
   "description": "AI SDK tools for OpenBackpack.",
   "license": "MIT",
   "author": "GrahamQuan",
   "repository": {
     "type": "git",
-    "url": "https://github.com/GrahamQuan/openbackpack"
+    "url": "https://github.com/GrahamQuan/openbackpack",
+    "directory": "packages/ai"
   },
   "files": [
     "dist"
@@ -18,13 +19,16 @@
       "import": "./dist/index.js"
     }
   },
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "clean": "rm -rf dist",
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@openbackpack/core": "workspace:*",
+    "@openbackpack/core": "workspace:^",
     "ai": "catalog:",
     "zod": "catalog:"
   }

packages/cli/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GrahamQuan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

packages/cli/README.md

@@ -0,0 +1,10 @@
+# openbackpack
+
+The command-line interface for [OpenBackpack](https://github.com/GrahamQuan/openbackpack).
+
+```sh
+npm install --global openbackpack
+openbackpack --help
+```
+
+`openbp` is provided as a short command alias.

packages/cli/package.json

@@ -1,12 +1,13 @@
 {
   "name": "openbackpack",
-  "version": "0.1.0",
+  "version": "0.0.1",
   "description": "OpenBackpack command line interface.",
   "license": "MIT",
   "author": "GrahamQuan",
   "repository": {
     "type": "git",
-    "url": "https://github.com/GrahamQuan/openbackpack"
+    "url": "https://github.com/GrahamQuan/openbackpack",
+    "directory": "packages/cli"
   },
   "bin": {
     "openbackpack": "./dist/index.js",
@@ -16,14 +17,17 @@
     "dist"
   ],
   "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "clean": "rm -rf dist",
     "dev": "pnpm --filter @openbackpack/core build && tsx src/index.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@openbackpack/core": "workspace:*",
+    "@openbackpack/core": "workspace:^",
     "effect": "catalog:"
   }
 }

packages/core/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GrahamQuan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

packages/core/README.md

@@ -0,0 +1,5 @@
+# @openbackpack/core
+
+Core capability storage, validation, and installation operations for [OpenBackpack](https://github.com/GrahamQuan/openbackpack).
+
+Most users should install the `openbackpack` CLI instead of depending on this package directly.

packages/core/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@openbackpack/core",
-  "version": "0.1.0",
+  "version": "0.0.0",
   "description": "Core skill folder sync operations for OpenBackpack.",
   "license": "MIT",
   "author": "GrahamQuan",
   "repository": {
     "type": "git",
-    "url": "https://github.com/GrahamQuan/openbackpack"
+    "url": "https://github.com/GrahamQuan/openbackpack",
+    "directory": "packages/core"
   },
   "files": [
     "dist"
@@ -18,6 +19,9 @@
       "import": "./dist/index.js"
     }
   },
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "clean": "rm -rf dist",