TheGreatAxios · Sep 17, 2026 · Sep 17, 2026 · Sep 17, 2026 · Sep 17, 2026 · Sep 17, 2026
@@ -0,0 +1,71 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.0.0/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependents": "always",
+  "ignore": [
+    "@corbits/agent-directory",
+    "@corbits/agent-events",
+    "@corbits/agent-lifecycle",
+    "@corbits/agent-runtime",
+    "@corbits/api-query",
+    "@corbits/approvals",
+    "@corbits/artifact-ui",
+    "@corbits/artifacts-hub",
+    "@corbits/bench",
+    "@corbits/bench-ui",
+    "@corbits/chat",
+    "@corbits/chat-ui",
+    "@corbits/client-log",
+    "@corbits/codex-provider",
+    "@corbits/collections",
+    "@corbits/command-palette",
+    "@corbits/commands",
+    "@corbits/connections",
+    "@corbits/context-menu",
+    "@corbits/credential-providers",
+    "@corbits/docker-provisioner",
+    "@corbits/e2b-sandbox-sidecar",
+    "@corbits/evals",
+    "@corbits/gotenberg-render",
+    "@corbits/hub-api-client",
+    "@corbits/icons",
+    "@corbits/inbox",
+    "@corbits/inference-catalog",
+    "@corbits/inference-settings",
+    "@corbits/insights",
+    "@corbits/jimmy-agent",
+    "@corbits/longevity-sim",
+    "@corbits/memory-hub",
+    "@corbits/migration-runner",
+    "@corbits/mocks",
+    "@corbits/notify",
+    "@corbits/ollama-adapter",
+    "@corbits/plugins-ui",
+    "@corbits/presence",
+    "@corbits/process-provisioner",
+    "@corbits/provider-pricing",
+    "@corbits/sandbox-sidecar",
+    "@corbits/scout-agent",
+    "@corbits/settings-ui",
+    "@corbits/shell-layout",
+    "@corbits/skills",
+    "@corbits/slug",
+    "@corbits/text-diff",
+    "@corbits/tool-registry-publish",
+    "@corbits/turn-artifacts",
+    "@corbits/url-path",
+    "@corbits/webhook-triggers",
+    "@corbits/workflow-schedule",
+    "@corbits/workflows",
+    "@corbits/xai-provider",
+    "@workbench/hub",
+    "@workbench/onboarding",
+    "@workbench/sidecar",
+    "@workbench/web"
+  ]
+}
@@ -0,0 +1,45 @@
+---
+"@corbits/access-tools": minor
+"@corbits/agent-directory-tools": minor
+"@corbits/assistant-workflow": minor
+"@corbits/attio-task-agent-workflow": minor
+"@corbits/capability-tools": minor
+"@corbits/catalog-tools": minor
+"@corbits/code-review": minor
+"@corbits/code-review-workflow": minor
+"@corbits/collateral-generation-workflow": minor
+"@corbits/connections-tools": minor
+"@corbits/diligence-brief-workflow": minor
+"@corbits/echo-workflow": minor
+"@corbits/error-sink": minor
+"@corbits/exa-topic-watch-workflow": minor
+"@corbits/github-tools": minor
+"@corbits/granola-call-workflow": minor
+"@corbits/granola-tools": minor
+"@corbits/heartbeat-workflow": minor
+"@corbits/interaction-tools": minor
+"@corbits/last-30-days-research-workflow": minor
+"@corbits/linear-tools": minor
+"@corbits/manus-tools": minor
+"@corbits/mcp-tools": minor
+"@corbits/memory-tools": minor
+"@corbits/morning-brief-workflow": minor
+"@corbits/pain-point-collateral-workflow": minor
+"@corbits/process-granola-call-workflow": minor
+"@corbits/reddit-opportunity-scanner-workflow": minor
+"@corbits/reddit-tools": minor
+"@corbits/skills-tools": minor
+"@corbits/tools-skills": minor
+"@corbits/web-search-tools": minor
+"@corbits/workbench-digest-workflow": minor
+"@corbits/workflow-authoring-tools": minor
+---
+
+First publishable release: every @corbits workflow and tool package
+publishes to npm.
+
+CL-8167 wires up the changesets-driven publish pipeline (a version PR on
+push to main, a provenance-signed `npm publish` after that version PR
+merges, and a dry-run pack + `npm publish --dry-run` on every pull
+request). This changeset gives the pipeline something to release: a
+minor bump for every package CL-8157 made publishable.
@@ -0,0 +1,51 @@
+name: Publish
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+concurrency:
+  group: publish-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  # Every PR gets a cheap correctness signal: pack and dry-run publish
+  # every publishable package, no token required.
+  publish-dry-run:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-workbench
+      - run: bun run release -- --dry-run
+
+  # On push to main: changesets/action opens or updates the "Version
+  # Packages" PR when unreleased changesets exist. When there are none
+  # left to release (that PR just merged), it instead reports
+  # hasChangesets: false and this job runs the real release.
+  version-or-publish:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: ./.github/actions/setup-workbench
+      - name: Configure npm registry auth
+        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Create version PR or publish
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          version: bun run version-packages
+          publish: bun run release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -35,3 +35,7 @@ scripts/e2e/browser/shots/
 
 # Lint caches — local only; CI installs fresh and rebuilds them.
 .eslintcache
+
+# `bun pm pack` / `bun run release` tarballs — built on demand, never
+# committed (CL-8167).
+*.tgz
@@ -39,5 +39,14 @@ Thanks for your interest in Corbits Workbench.
    a package-owned ledger table, applied transactionally.
 8. Security issues go through [SECURITY.md](SECURITY.md), never a public
    issue.
+9. Changed a publishable `workflows/*` or `packages/*-tools` package?
+   Run `bun run changeset`, describe the change, and commit the
+   generated `.changeset/*.md` file alongside it — that's what the
+   tool-package-freshness check now expects instead of a hand-bumped
+   version. A "Version Packages" PR opened automatically off `main`
+   applies every pending changeset's version bump and changelog; merging
+   it is what actually ships the release to npm. See
+   [.changeset/config.json](.changeset/config.json) for which packages
+   are still `private` and excluded from this.
 
 This document will grow as the project does.