Published as @profullstack/sh1pt@0.3.0.
This is the first release you can actually install. 0.2.0 could not be: the cli declared a dependency on @profullstack/sh1pt-openapi, which had never been published, so npm i @profullstack/sh1pt ended in a 404 before it got anywhere.
The cause was a gap between two lists. The cli depends on six workspace packages, and pnpm rewrites workspace: into a real semver range when it publishes — but release.yml only ever published three of them. Every dep outside that three resolved to a version that existed nowhere but this repo. Since 0.2.0 the cli had picked up three more such deps, so the gap was widening.
All seven packages now publish together, in dependency order, and share one version number — a 0.3.0 cli always pairs with 0.3.0 core, policy, openapi, action-packs, actions-fleet-core and secrets-env-updater. scripts/version.mjs bumps that same set, so the publish list and the version list can't drift apart and strand a dependency again.
Also in this release: 384 commits since v0.2.0, including the duplicate packages/bot tree removed in favour of packages/bots (#944) and out-of-range message timestamps no longer throwing in the telegram bot (#947).