Merge pull request #87 from vouchdev/release/0.1.0

Release/0.1.0

Author: plind-junior

.github/workflows/release.yml

@@ -0,0 +1,42 @@
+name: release
+
+# Publish to PyPI on a version tag (e.g. v0.1.0).
+# Uses PyPI Trusted Publishing (OIDC) — no API token stored.
+# One-time setup on PyPI: add a trusted publisher for project `vouch-kb`
+# pointing at vouchdev/vouch, workflow `release.yml`, environment `pypi`.
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install --upgrade build
+      - run: python -m build
+      - uses: actions/upload-artifact@v7
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write  # required for trusted publishing
+    steps:
+      - uses: actions/download-artifact@v7
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1

CHANGELOG.md

@@ -6,6 +6,14 @@ All notable changes to vouch are documented here. Format follows
 
 ## [Unreleased]
 
+## [0.1.0] — 2026-05-26
+
+### Packaging
+- Published to PyPI as `vouch-kb` (the `vouch` name was already taken by an
+  unrelated project); the installed command is still `vouch`. Install with
+  `pipx install vouch-kb`. A tag-triggered release workflow publishes via PyPI
+  Trusted Publishing (OIDC).
+
 ### Added
 - Seed a cited starter source and claim during `vouch init`, print first-run
   next steps, and document a 30-second onboarding tour (#54).
@@ -72,5 +80,6 @@ Initial alpha. Surface intentionally small; expect breaking changes pre-1.0.
 - Claim validation: at least one source/evidence citation required.
 - Per-agent attribution via `VOUCH_AGENT` env var.
 
-[Unreleased]: https://github.com/plind-junior/vouch/compare/v0.0.1...HEAD
-[0.0.1]: https://github.com/plind-junior/vouch/releases/tag/v0.0.1
+[Unreleased]: https://github.com/vouchdev/vouch/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/vouchdev/vouch/compare/v0.0.1...v0.1.0
+[0.0.1]: https://github.com/vouchdev/vouch/releases/tag/v0.0.1

README.md

@@ -40,7 +40,10 @@ Skip it if:
 ## Install
 
 ```bash
-# from the cloned repo, in a venv
+# from PyPI (published as vouch-kb; the command is still `vouch`)
+pipx install vouch-kb
+
+# …or from the cloned repo, in a venv
 pip install -e '.[dev]'
 ```
 

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
-name = "vouch"
-version = "0.0.1"
+name = "vouch-kb"
+version = "0.1.0"
 description = "Git-native, review-gated knowledge base for LLM agents. MCP server + CLI."
 readme = "README.md"
 requires-python = ">=3.11"

src/vouch/__init__.py

@@ -1,3 +1,3 @@
 """vouch — git-native, review-gated knowledge base for LLM agents."""
 
-__version__ = "0.0.1"
+__version__ = "0.1.0"

tests/test_cli.py

@@ -139,9 +139,16 @@ def test_crystallize_cli_all_failures_exits_1(store: KBStore) -> None:
     assert "all 2 proposal(s) failed" in result.stderr
 
 
-def test_crystallize_cli_partial_failures_shows_warning(store: KBStore) -> None:
+def test_crystallize_cli_partial_failures_shows_warning(
+    store: KBStore, monkeypatch: pytest.MonkeyPatch,
+) -> None:
     from vouch.proposals import approve as real_approve
 
+    # Approve as a distinct reviewer so the second (real) approval isn't blocked
+    # by the self-approval guard. Without this the approver defaults to the OS
+    # user via _whoami(), which on a machine whose login happens to be "a"
+    # collides with the session agent and makes the test environment-dependent.
+    monkeypatch.setenv("VOUCH_AGENT", "human-reviewer")
     with patch.object(KBStore, "_embed_and_store"):
         src = store.put_source(b"e")
     sess = sess_mod.session_start(store, agent="a", task="t")