[codex] Publish unified Ghost as @anarchitecture/ghost

.changeset/anarchitecture-ghost.md

@@ -0,0 +1,5 @@
+---
+"@anarchitecture/ghost": minor
+---
+
+Publish Ghost as one scoped package with the `ghost` CLI, unified scan and drift workflows, and one installed skill bundle.

.changeset/config.json

@@ -7,5 +7,11 @@
   "access": "public",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
-  "ignore": ["ghost-ui", "ghost-docs", "@ghost/core", "ghost-fleet"]
+  "ignore": [
+    "ghost-ui",
+    "ghost-docs",
+    "@ghost/core",
+    "ghost-scan",
+    "ghost-fleet"
+  ]
 }

.github/workflows/deploy-pages.yml

@@ -2,7 +2,7 @@ name: Deploy to GitHub Pages
 
 # Builds apps/docs with DEPLOY_BASE=/ghost/ and uploads the dist as the
 # Pages artifact. apps/docs is the one deployed site — it owns the home,
-# the design language catalogue (/ui/*), and the drift tooling docs
+# the design language catalogue (/ui/*), and the Ghost tooling docs
 # (/tools/drift/*) under a single aesthetic.
 
 on:
@@ -32,8 +32,8 @@ jobs:
           cache: pnpm
       - run: pnpm install --frozen-lockfile
 
-      - name: Build ghost-drift library
-        run: pnpm --filter ghost-drift build
+      - name: Build Ghost CLI package
+        run: pnpm --filter @anarchitecture/ghost build
 
       - name: Build ghost-ui library
         run: pnpm --filter ghost-ui build:lib

.github/workflows/release-tarball.yml

@@ -1,21 +1,21 @@
 name: Publish tarball to GitHub Release
 
 # Temporary distribution channel while npm publish is blocked. Packs
-# ghost-drift and attaches the .tgz to a GitHub Release, so consumers can:
+# @anarchitecture/ghost and attaches the .tgz to a GitHub Release, so consumers can:
 #
 #   npm install https://github.com/block/ghost/releases/download/<tag>/<file>.tgz
 #
-# Triggered by pushing a tag of the form `ghost-drift@<version>` or by
+# Triggered by pushing a tag of the form `anarchitecture-ghost@<version>` or by
 # manual workflow_dispatch.
 
 on:
   push:
     tags:
-      - "ghost-drift@*"
+      - "anarchitecture-ghost@*"
   workflow_dispatch:
     inputs:
       version:
-        description: "Version to release (must match packages/ghost-drift/package.json)"
+        description: "Version to release (must match packages/ghost/package.json)"
         required: true
 
 permissions:
@@ -45,15 +45,15 @@ jobs:
       - run: pnpm install --frozen-lockfile
 
       - name: Build
-        run: pnpm --filter ghost-drift build
+        run: pnpm --filter @anarchitecture/ghost build
 
       # `pnpm --filter <pkg> pack` writes the tarball to the workspace root,
       # not the package dir, in pnpm 10. Force it into a known staging dir so
       # the release step can glob a single location deterministically.
       - name: Pack
         run: |
           mkdir -p dist-tarball
-          pnpm --filter ghost-drift pack --pack-destination "$GITHUB_WORKSPACE/dist-tarball"
+          pnpm --filter @anarchitecture/ghost pack --pack-destination "$GITHUB_WORKSPACE/dist-tarball"
           ls -la dist-tarball
 
       # Resolve the release tag. Inputs from workflow_dispatch are attacker-
@@ -69,7 +69,7 @@ jobs:
           if [ "$EVENT_NAME" = "push" ]; then
             TAG="$GITHUB_REF_NAME"
           else
-            TAG="ghost-drift@$INPUT_VERSION"
+            TAG="anarchitecture-ghost@$INPUT_VERSION"
           fi
           echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
@@ -81,4 +81,4 @@ jobs:
           gh release create "$TAG" \
             --title "$TAG" \
             --generate-notes \
-            dist-tarball/ghost-drift-*.tgz
+            dist-tarball/*.tgz