Skip to content

[codex] Add GitHub Actions CI and publish workflows#5

Merged
ejntaylor merged 5 commits into
mainfrom
codex-github-workflows-main
May 12, 2026
Merged

[codex] Add GitHub Actions CI and publish workflows#5
ejntaylor merged 5 commits into
mainfrom
codex-github-workflows-main

Conversation

@ejntaylor

Copy link
Copy Markdown
Contributor

Summary

  • Adds a CI workflow for pull requests, main pushes, and manual runs.
  • Validates on Node 18, 20, and 22 with install, typecheck, tests, build, committed dist verification, and package dry run.
  • Adds a production dependency audit job with npm audit --omit=dev --audit-level=moderate.
  • Adds a release-driven npm publish workflow using provenance and a release-tag/package-version guard.
  • Documents the release process and npm trusted publishing requirement in the README.

Notes

This PR is based on main and intentionally only contains CI/CD workflow changes plus release documentation. The publish workflow assumes npm trusted publishing is configured for this repository and package before a GitHub Release is published.

Validation

  • npm test
  • npm run typecheck
  • npm run build
  • git diff --exit-code -- dist
  • npm audit --omit=dev --audit-level=moderate
  • npm pack --dry-run
  • Release tag guard checked locally with GITHUB_REF_NAME=v0.1.0

@ejntaylor ejntaylor marked this pull request as ready for review May 12, 2026 14:52
@ejntaylor ejntaylor merged commit b115f1d into main May 12, 2026
@ejntaylor ejntaylor deleted the codex-github-workflows-main branch May 12, 2026 14:54
ejntaylor added a commit that referenced this pull request Jul 14, 2026
…t-diy-prompt-output

Conflict resolution: main's bolt-diy persona wins (the verbatim bolt.diy
system prompt with documented provenance) over this branch's hand-written
pressure reconstruction, keeping the "personas embed the actual system
prompts" table truthful; the usage comment is reworded to match. Flags
line takes main's generic `--persona <name>` form. Refusal mode #5 and
the retest-loop note from this branch are kept.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
ejntaylor added a commit that referenced this pull request Jul 14, 2026
…rt) (#63)

A real bolt.diy refusal showed that naming the checklist's steps isn't
enough for agents that stage commands for the user instead of running
them: "finish what its checklist flags" still reads as blind execution
of unseen tool output. Reword the prompt tail to "review the checklist
it prints, and make the two remaining changes yourself" — read-then-
apply, with the agent as reviewer — identically in README.md,
GETTING-STARTED.md, and field-test/prompt.txt.

Encode the pressure as field-test/personas/bolt-diy.md and record it as
refusal mode #5 in field-test/README.md. Gate on 2026-07-14: hostile
2/3 green (both refusals decisively cited the sub-hour v0.3.8 publish,
i.e. documented release-freshness noise); green rounds credited the new
wording as suspicion-lowering. Re-gate after 2026-07-16.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Mario Tarosso <mariojgt2@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants