Merge pull request #2 from codebase/codex/release-provenance

Fix npm provenance and prepare pre.75

Author: halfaipg

.github/workflows/release.yml

@@ -41,6 +41,15 @@ jobs:
             exit 1
           fi
 
+      - name: Verify npm provenance repository
+        run: |
+          REPOSITORY_URL="$(node -p "require('./package.json').repository.url")"
+          EXPECTED="git+https://github.com/${GITHUB_REPOSITORY}.git"
+          if [ "$REPOSITORY_URL" != "$EXPECTED" ]; then
+            echo "::error::package.json repository.url is $REPOSITORY_URL; expected $EXPECTED for npm provenance"
+            exit 1
+          fi
+
       - name: Determine npm dist-tag
         id: disttag
         run: |

README.md

@@ -7,7 +7,7 @@
 
 <p align="center">
   <a href="https://www.npmjs.com/package/codebase-cli"><img alt="npm" src="https://img.shields.io/npm/v/codebase-cli?style=flat-square" /></a>
-  <a href="https://github.com/codebase-foundation/codebase-cli/blob/master/LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" /></a>
+  <a href="https://github.com/codebase/codebase-cli/blob/main/LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" /></a>
 </p>
 
 ## Install

docs/DISTRIBUTION.md

@@ -211,7 +211,7 @@ deployed last.
 (If you'd rather avoid the manual sync, two safe alternatives are: a
 prebuild step in `web/package.json` that runs the sync script, or a
 302 redirect from `/install.sh` to
-`https://raw.githubusercontent.com/codebase-foundation/codebase-cli/main/install.sh` —
+`https://raw.githubusercontent.com/codebase/codebase-cli/main/install.sh` —
 quickest, but loses caching and the GitHub repo must be public.)
 
 ---

install.ps1

@@ -2,7 +2,7 @@
 #
 # Usage:
 #   irm https://codebase.design/install.ps1 | iex
-#   irm https://raw.githubusercontent.com/codebase-foundation/codebase-cli/main/install.ps1 | iex
+#   irm https://raw.githubusercontent.com/codebase/codebase-cli/main/install.ps1 | iex
 #
 # What this does:
 #   1. Detects an existing v1 (Go) binary at ~\.codebase\bin\codebase.exe

install.sh

@@ -4,7 +4,7 @@ set -e
 # Codebase CLI installer (Linux / macOS).
 # Usage:
 #   curl -fsSL https://codebase.design/install.sh | sh
-#   curl -fsSL https://raw.githubusercontent.com/codebase-foundation/codebase-cli/main/install.sh | sh
+#   curl -fsSL https://raw.githubusercontent.com/codebase/codebase-cli/main/install.sh | sh
 #
 # What this does:
 #   1. Detects an existing v1 (Go) binary and offers to remove it.

package-lock.json

@@ -1,6 +1,6 @@
 {
 	"name": "codebase-cli",
-	"version": "2.0.0-pre.74",
+	"version": "2.0.0-pre.75",
 	"description": "Codebase CLI — a TypeScript coding agent on the pi-mono runtime. OAuth-aware, any LLM provider, single install.",
 	"keywords": [
 		"ai",
@@ -16,11 +16,11 @@
 	],
 	"homepage": "https://codebase.design",
 	"bugs": {
-		"url": "https://github.com/codebase-foundation/codebase-cli/issues"
+		"url": "https://github.com/codebase/codebase-cli/issues"
 	},
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/codebase-foundation/codebase-cli.git"
+		"url": "git+https://github.com/codebase/codebase-cli.git"
 	},
 	"license": "MIT",
 	"author": "Codebase Foundation",

package.json

@@ -77,6 +77,11 @@ try {
 			console.error(`FAIL ${label}: references retired codebase.foundation domain\n${output.trim()}`);
 			continue;
 		}
+		if (output.includes("github.com/codebase-foundation/codebase-cli")) {
+			failures++;
+			console.error(`FAIL ${label}: references retired GitHub repository\n${output.trim()}`);
+			continue;
+		}
 		console.log(`ok ${label}`);
 	}
 } finally {

scripts/help-smoke.mjs

@@ -375,7 +375,7 @@ function printHelp(): void {
 			"  --debug-input                log every keystroke to ~/.codebase/logs/input.log",
 			"                               (use when reporting a keyboard/terminal issue)",
 			"",
-			"More: https://github.com/codebase-foundation/codebase-cli",
+			"More: https://github.com/codebase/codebase-cli",
 			"",
 		].join("\n"),
 	);

src/cli.tsx

@@ -1,6 +1,6 @@
 # Codebase — VS Code / Cursor / Windsurf extension
 
-A sidebar chat panel powered by [codebase-cli](https://github.com/codebase-foundation/codebase-cli).
+A sidebar chat panel powered by [codebase-cli](https://github.com/codebase/codebase-cli).
 Spawns `codebase app-server` as a child process and renders the agent's
 events into a webview. Works in any VS Code-API-compatible editor —
 verified in **VS Code**, **Cursor**, and **Windsurf**.