# v0.1.1 — CI Pipeline Test + Infra Polish

## TL;DR

Patch release to validate the OIDC npm publish pipeline. Adds the GitHub Actions workflow for automated releases and wires up the Traefik route for external browser access.

## What Changed

| Change | Why |
|--------|-----|
| `.github/workflows/publish.yml` | Automated npm publish via OIDC Trusted Publisher — zero secrets, provenance attestation |
| `releases/` directory + narrative notes | Per-file release notes pattern, CI reads from `releases/$TAG.md` |
| Traefik route for `firefox.kenluu.org` | External HTTPS access to the shared browser (TLS at pi, proxied to thinkpad noVNC) |
| Display canvas bumped to 1920x1080 | Accommodates all viewport sizes — agent switches at runtime via `set_viewport_size` |

## Infrastructure

```
firefox.kenluu.org → Cloudflare CDN → Pi Traefik (TLS) → Thinkpad :5800 (noVNC)
```

Protected by basic auth (`auth-simple` middleware). WebSocket-friendly with `flushInterval: -1`.

## Publish Pipeline

```
git tag vX.Y.Z → push → GitHub Actions:
  build (verify tag matches package.json)
  → release (read releases/vX.Y.Z.md, create GitHub Release)
  → publish (npm OIDC provenance)
```

This release is the first to go through this pipeline.