feat(ci): add npm publishing with OIDC trusted publishing

.github/workflows/ci.yml

@@ -11,6 +11,7 @@ on:
 permissions:
   contents: read
   packages: write
+  id-token: write
 
 jobs:
   build:
@@ -24,6 +25,26 @@ jobs:
       - run: npm ci
       - run: npm run build
 
+  npm-publish:
+    runs-on: ubuntu-latest
+    needs: build
+    if: github.event_name == 'release'
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          registry-url: 'https://registry.npmjs.org'
+
+      - run: npm ci
+
+      - run: npm publish --provenance --access public
+
   docker:
     runs-on: ubuntu-latest
     needs: build

package.json

@@ -2,6 +2,14 @@
   "name": "@fullstackhouse/agentloop",
   "version": "0.4.1",
   "description": "AI agent that monitors chat platforms and responds using Claude Code",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fullstackhouse/agentloop.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "type": "module",
   "engines": { "node": ">=22" },
   "bin": {