release: switch npm publish to trusted publishing

Author: bitfalt

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
           cache: npm
       - run: npm ci
       - run: npm run build

.github/workflows/publish.yml

@@ -6,6 +6,10 @@ on:
     tags:
       - "v*"
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -14,13 +18,11 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org
           cache: npm
       - run: npm ci
       - run: npm run build
       - run: npm test
       - run: npm run pack:smoke
       - run: npm publish --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

README.md

@@ -2,6 +2,8 @@
 
 Synthetic Reality Development (SRD) for OpenCode. This package installs global commands, agents, and skills, and registers an npm-loaded OpenCode plugin that nudges teams back toward revenue-critical work after edits.
 
+This package is the OpenCode-compatible npm distribution of the upstream SRD framework in [`DojoCodingLabs/srd-framework`](https://github.com/DojoCodingLabs/srd-framework). The upstream project targets Claude Code's plugin marketplace flow, while this repo repackages the same SRD methodology and assets for OpenCode and npm-based installation.
+
 ## What SRD Is
 
 SRD is a backwards-from-success product workflow:
@@ -107,6 +109,8 @@ The npm-loaded plugin listens after edit-style tools and shows a throttled SRD r
 
 ## Compatibility Notes
 
+- The upstream SRD framework lives in `DojoCodingLabs/srd-framework`; this package exists to make that workflow installable in OpenCode.
+- The original Claude plugin is distributed through the plugin marketplace rather than npm; use this package for the npm-published OpenCode-compatible version.
 - `srd/claude-directive.yml` remains the canonical machine-readable directive path for existing SRD workflows.
 - Packaged references and schemas ship for maintenance and documentation, but runtime prompts are self-contained.
 - Claude-only packaging from `.claude-plugin/` is intentionally not migrated.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@dojocoding/opencode-srd-framework",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "OpenCode-native SRD framework with global commands, agents, skills, installer CLI, and alignment plugin.",
   "type": "module",
   "main": "./dist/index.js",