ci: automate npm publish with Release Please and OIDC trusted publishers (#38)

* ci: automate npm publish with Release Please and OIDC trusted publishers

- Add publish job to release-please.yml using GitHub OIDC (tokenless npm auth)
- Job runs on ubuntu-latest (required for OIDC) with id-token:write permission
- Triggers only when apps/work-please release is created (path-scoped output)
- Update apps/work-please/package.json: remove private, add license/repository/files/description
- Remove private flag from apps/work-please in release-please-config.json
- Update LICENSE from FSL-1.1-ALv2 to FSL-1.1-MIT (Passion Factory, Inc, change date 2028-03-13)

* fix(ci): apply review suggestions for LICENSE inclusion and OIDC condition

* fix(ci): copy LICENSE and README.md in workflow instead of prepublishOnly

* fix(ci): add prepublishOnly/postpublish scripts for local publish support

* chore: gitignore publish artifacts copied into apps/work-please

Author: amondnet

.github/workflows/release-please.yml

@@ -15,6 +15,7 @@ jobs:
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
+      app_release_created: ${{ steps.release.outputs['apps/work-please--release_created'] }}
     steps:
       - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
         id: app-token
@@ -29,3 +30,32 @@ jobs:
           release-type: node
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
+
+  publish:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.app_release_created == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+          registry-url: 'https://registry.npmjs.org'
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version-file: package.json
+
+      - run: bun install --frozen-lockfile
+
+      - run: bun run build
+
+      - name: Copy root files into package directory
+        run: cp LICENSE README.md apps/work-please/
+
+      - run: npm publish --provenance --access public
+        working-directory: apps/work-please

.gitignore

@@ -7,3 +7,7 @@ dist/
 
 # please plugin runtime state
 .please/state/
+
+# npm publish artifacts copied from root (prepublishOnly/postpublish)
+apps/work-please/LICENSE
+apps/work-please/README.md

LICENSE

@@ -1,14 +1,14 @@
-Functional Source License, Version 1.1, ALv2 Future License
+Functional Source License, Version 1.1, MIT Future License
 
-Copyright 2026 Passion Factory Inc
+Copyright 2026 Passion Factory, Inc
 
 ## Abbreviation
 
-FSL-1.1-ALv2
+FSL-1.1-MIT
 
 ## Notice
 
-Copyright 2026 Passion Factory Inc
+Copyright 2026 Passion Factory, Inc
 
 ## Terms and Conditions
 
@@ -89,19 +89,24 @@ trademarks, trade names, service marks or product names.
 ## Grant of Future License
 
 We hereby irrevocably grant you an additional license to use the Software under
-the Apache License, Version 2.0 that is effective on the second anniversary of
-the date we make the Software available. On or after that date, you may use the
-Software under the Apache License, Version 2.0, in which case the following
-will apply:
-
-Licensed under the Apache License, Version 2.0 (the "License"); you may not use
-this file except in compliance with the License.
-
-You may obtain a copy of the License at
-
-http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software distributed
-under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
-CONDITIONS OF ANY KIND, either express or implied. See the License for the
-specific language governing permissions and limitations under the License.
+the MIT License that is effective on 2028-03-13. On or after that date, you
+may use the Software under the MIT License, in which case the following will
+apply:
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

apps/work-please/package.json

@@ -2,11 +2,24 @@
   "name": "@pleaseai/work",
   "type": "module",
   "version": "0.0.0",
-  "private": true,
+  "description": "Symphony-spec orchestrator for Claude Code + Asana/GitHub Projects v2",
+  "license": "FSL-1.1-MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/chatbot-pf/work-please.git",
+    "directory": "apps/work-please"
+  },
   "bin": {
     "work-please": "./dist/index.js"
   },
+  "files": [
+    "LICENSE",
+    "README.md",
+    "dist"
+  ],
   "scripts": {
+    "prepublishOnly": "cp ../../LICENSE ../../README.md .",
+    "postpublish": "rm -f LICENSE README.md",
     "build": "bun build ./src/index.ts --outdir ./dist --target bun",
     "dev": "bun run --watch src/index.ts",
     "lint": "eslint .",

package.json

@@ -1,5 +1,5 @@
 {
-  "name": "work-please",
+  "name": "workplease",
   "private": true,
   "version": "0.0.0",
   "workspaces": [

release-please-config.json

@@ -12,8 +12,7 @@
     "apps/work-please": {
       "release-type": "node",
       "package-name": "@pleaseai/work",
-      "changelog-path": "CHANGELOG.md",
-      "private": true
+      "changelog-path": "CHANGELOG.md"
     }
   }
 }