Skip to content

README: what adding a plugin actually takes - #28

Merged
navbytes merged 1 commit into
mainfrom
docs-adding-a-plugin
Sep 10, 2026
Merged

README: what adding a plugin actually takes#28
navbytes merged 1 commit into
mainfrom
docs-adding-a-plugin

Conversation

@navbytes

Copy link
Copy Markdown
Owner

The old two-line note covered step one and stopped, which is roughly where this
repo's second plugin ran into trouble.

Publishing opencode-git-stats turned up three things the instructions did not
mention, each of which cost a release attempt:

  • npm trusted publishing cannot be set up before the package exists. The record
    fails to attach and the exchange reports "package not found", so the first version
    has to go out by hand.
  • That manual publish needs --ignore-scripts, because npm aborts with
    EUNSUPPORTEDPROTOCOL on the workspace:* specifiers inside @opentui's own
    published metadata — which is also why the build has to be explicit rather than left
    to prepack.
  • The trust record binds to the package, not the repo, so each plugin needs its
    own, and it must name the npm environment the publish job declares or the OIDC
    claims will not match.

Also records two things worth knowing before the next release: bump= computes off
the newest tag ignoring any prerelease suffix, so it skips the version a beta already
claimed; and neither workflow going green means anything actually reached npm.

The old two-line note covered the first step and stopped, which is roughly where
this repo's second plugin ran into trouble. Publishing opencode-git-stats turned
up three things the instructions did not mention, each of which cost a release
attempt:

- npm trusted publishing cannot be set up before the package exists; the record
  fails to attach and the exchange says "package not found". The first version has
  to go out by hand.
- that manual publish needs --ignore-scripts, because npm aborts with
  EUNSUPPORTED PROTOCOL on the `workspace:*` specifiers inside @OpenTui's own
  published metadata — which is also why the build has to be explicit rather than
  left to prepack.
- the trust record binds to the package, not the repo, so each plugin needs its
  own, and it has to name the `npm` environment the publish job declares or the
  OIDC claims do not match.

Also records that `bump=` ignores a prerelease suffix and so skips the version a
beta already claimed, and that neither workflow going green means anything
reached npm.
@navbytes
navbytes merged commit 7193adb into main Sep 10, 2026
1 check passed
@navbytes
navbytes deleted the docs-adding-a-plugin branch September 10, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant