feat: v0.1.0–v0.1.3 — Business platform, real-world hardening, production stability

.dockerignore

@@ -0,0 +1,67 @@
+# Dependencies — installed fresh inside the image
+node_modules/
+
+# Git history
+.git/
+.github/
+
+# TypeScript build output — rebuilt inside the image
+dist/
+build/
+*.tsbuildinfo
+
+# Test artifacts
+coverage/
+tests/
+benchmarks/
+
+# Logs and runtime data
+logs/
+*.log
+
+# SQLite databases — created at runtime via volume mounts
+*.db
+*.db-wal
+*.db-shm
+
+# WhatsApp session data — mounted as a volume
+.wwebjs_auth/
+.wwebjs_cache/
+
+# OpenBridge runtime state
+.openbridge/
+
+# Config with secrets — passed via ENV vars in Docker
+config.json
+config.local.json
+config.production.json
+
+# Environment files
+.env
+.env.local
+.env.*.local
+
+# Development files
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# npm pack artifacts
+*.tgz
+
+# Smoke test directory
+ob-smoke-test/
+
+# Test workspace directories
+test-workspace-*/
+
+# Docs (not needed at runtime)
+docs/
+
+# Scripts (not needed at runtime)
+scripts/

.env.example

@@ -12,3 +12,10 @@ CONFIG_PATH=./config.json
 
 # Claude Code provider options
 # CLAUDE_CODE_WORKSPACE=~/projects/my-project
+
+# OpenAI API key — optional, shared with Codex
+# Used for two features:
+#   1. Voice message transcription via OpenAI Whisper API ($0.006/min, zero local setup)
+#   2. Codex AI provider (if you use Codex as your AI tool instead of Claude Code)
+# If unset, voice transcription falls back to local whisper CLI, then a placeholder message.
+# OPENAI_API_KEY=sk-...

.github/dependabot.yml

@@ -0,0 +1,33 @@
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    target-branch: 'develop'
+    schedule:
+      interval: 'monthly'
+    open-pull-requests-limit: 5
+    reviewers:
+      - 'medomar'
+    groups:
+      minor-and-patch:
+        update-types:
+          - 'minor'
+          - 'patch'
+      major:
+        update-types:
+          - 'major'
+    ignore:
+      # @types/node major must match our engines.node (>=22) — don't auto-bump
+      - dependency-name: '@types/node'
+        update-types: ['version-update:semver-major']
+      # @vitest/coverage-v8 must stay in sync with vitest — upgrade together manually
+      - dependency-name: '@vitest/coverage-v8'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'vitest'
+        update-types: ['version-update:semver-major']
+      # Zod 4 requires dedicated migration — don't auto-bump
+      - dependency-name: 'zod'
+        update-types: ['version-update:semver-major']
+      # ESLint 10 needs typescript-eslint compatibility — don't auto-bump
+      - dependency-name: 'eslint'
+        update-types: ['version-update:semver-major']

.github/workflows/release.yml

@@ -0,0 +1,174 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: Run ESLint
+        run: npm run lint
+
+      - name: Check formatting
+        run: npm run format:check
+
+  typecheck:
+    name: Type Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: TypeScript type check
+        run: npm run typecheck
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: Run tests
+        run: npm run test
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    needs: [lint, typecheck, test]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Verify dist output
+        run: ls -la dist/
+
+      - name: Upload dist artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          retention-days: 1
+
+  publish:
+    name: Publish to npm + GitHub Release
+    runs-on: ubuntu-latest
+    needs: [build]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+          registry-url: 'https://registry.npmjs.org'
+
+      - run: npm ci
+
+      - name: Download dist artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to npm
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Extract version from tag
+        id: version
+        run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+
+      - name: Generate release notes
+        id: changelog
+        run: |
+          version="${{ steps.version.outputs.version }}"
+          tag="${{ github.ref_name }}"
+
+          # Try CHANGELOG.md first (hand-curated notes take priority)
+          notes=$(awk "/^## \[$version\]/{found=1; next} found && /^## \[/{exit} found{print}" CHANGELOG.md)
+
+          if [ -z "$notes" ] || echo "$notes" | grep -q "No unreleased changes"; then
+            # Fall back to auto-generated notes from conventional commits
+            echo "No CHANGELOG.md entry found for $version — generating from commits" >&2
+            # Find the previous tag
+            prev_tag=$(git tag --sort=-v:refname | grep -v "^${tag}$" | head -1 || echo "")
+            if [ -n "$prev_tag" ]; then
+              range="${prev_tag}..${tag}"
+            else
+              range="${tag}"
+            fi
+
+            notes="## What's Changed"$'\n\n'
+
+            # Group by conventional commit type
+            feats=$(git log "$range" --pretty=format:"%s" --no-merges | grep "^feat" | sed 's/^feat(\([^)]*\)): /- **\1**: /' | sed 's/^feat: /- /' || true)
+            fixes=$(git log "$range" --pretty=format:"%s" --no-merges | grep "^fix" | sed 's/^fix(\([^)]*\)): /- **\1**: /' | sed 's/^fix: /- /' || true)
+            others=$(git log "$range" --pretty=format:"%s" --no-merges | grep -v "^feat\|^fix\|^Merge" | sed 's/^[a-z]*(\([^)]*\)): /- **\1**: /' | sed 's/^[a-z]*: /- /' || true)
+
+            [ -n "$feats" ] && notes+="### Added"$'\n'"${feats}"$'\n\n'
+            [ -n "$fixes" ] && notes+="### Fixed"$'\n'"${fixes}"$'\n\n'
+            [ -n "$others" ] && notes+="### Changed"$'\n'"${others}"$'\n\n'
+
+            notes+=$'\n'"**Full Changelog**: https://github.com/${{ github.repository }}/compare/${prev_tag}...${tag}"
+          fi
+
+          # Write to file to handle multiline safely
+          echo "$notes" > release-notes.txt
+
+      - name: Create GitHub Release
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            const notes = fs.readFileSync('release-notes.txt', 'utf8').trim();
+            const tag = context.ref.replace('refs/tags/', '');
+            await github.rest.repos.createRelease({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              tag_name: tag,
+              name: tag,
+              body: notes || `Release ${tag}`,
+              draft: false,
+              prerelease: tag.includes('-'),
+              generate_release_notes: notes === '',
+            });

.gitignore

@@ -43,6 +43,9 @@ npm-debug.log*
 .wwebjs_auth/
 .wwebjs_cache/
 
+# npm pack artifacts
+*.tgz
+
 # Runtime data
 pids/
 *.pid
@@ -57,5 +60,26 @@ config.json
 config.local.json
 config.production.json
 
+# OpenBridge runtime state (generated when running against itself)
+.openbridge/
+
 # Script runtime state
 docs/audit/.current_task
+
+# Test workspaces (created by integration tests)
+test-workspace-*/
+
+# Smoke test directory (created by OB-621 fresh install verification)
+ob-smoke-test/
+
+# SQLite database files
+*.db
+*.db-wal
+*.db-shm
+
+# Temporary/scratch files
+tmp_*
+*.traineddata
+
+# Demo/experiment folders (not part of open-source distribution)
+demos/