Add trusted gem publishing

.github/workflows/release.yml

@@ -0,0 +1,23 @@
+name: Push gem
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    environment: release
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          bundler-cache: true
+      - uses: rubygems/release-gem@v1

CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 0.0.1.alpha6 - 2026-07-18
+
+### Bumped
+
+- Runtime dependency `opencode-ruby` pinned to `= 0.0.1.alpha6`. Rails turns
+  now establish and validate the OpenCode SSE subscription before submitting
+  `prompt_async`, and automatic SSE reconnects reopen only the subscription
+  without replaying the user prompt.
+
+## 0.0.1.alpha5 - 2026-07-15
+
+### Bumped
+
+- Runtime dependency `opencode-ruby` pinned to `= 0.0.1.alpha5`, exposing
+  native parent-linked and configured session creation to Rails hosts.
+
+## 0.0.1.alpha4 - 2026-07-12
+
+### Bumped
+
+- Runtime dependency `opencode-ruby` pinned to `= 0.0.1.alpha4`, adding
+  current `session.status` idle handling and correct multi-assistant tool-loop
+  finalization for Rails turns.
+
+## 0.0.1.alpha3 - 2026-07-10
+
+### Bumped
+
+- Runtime dependency `opencode-ruby` pinned to `= 0.0.1.alpha3`, exposing
+  the session permission PATCH primitive to Rails host applications while
+  leaving reconciliation policy in each host.
+
 ## 0.0.1.alpha2 — 2026-05-20
 
 ### Changed

README.md

@@ -29,6 +29,14 @@ bundle install
 
 Runtime deps: `activerecord`, `activestorage`, `activesupport` (>= 7.1). Depends on `opencode-ruby` for the underlying HTTP/SSE primitives.
 
+During the alpha series both gems are pinned in lockstep. Version 0.0.1.alpha6
+uses a subscribe-ready-before-prompt transport contract and reconnects an
+accepted turn without posting its prompt again.
+
+Releases use RubyGems trusted publishing. Register `release.yml` as the gem's
+trusted publisher (using the `release` environment); after that, a `v*` tag
+publishes without a long-lived RubyGems API key.
+
 ## Quickstart
 
 ```ruby

lib/opencode/rails_version.rb

@@ -11,5 +11,5 @@
 # We can't reuse the same constant from a second gem, so we use a
 # distinct, non-namespaced constant.
 module Opencode
-  RAILS_VERSION = "0.0.1.alpha2"
+  RAILS_VERSION = "0.0.1.alpha6"
 end

opencode-rails.gemspec

@@ -36,8 +36,8 @@ Gem::Specification.new do |spec|
   # The opencode-ruby gem provides the wire-level Client + Reply primitives
   # this gem builds on. During alpha both gems evolve in lockstep — we pin
   # exactly (= not ~>) so that consumers always pick the version this gem
-  # was tested against. Bump to alpha2 when the paired release ships.
-  spec.add_runtime_dependency "opencode-ruby", "= 0.0.1.alpha2"
+  # was tested against.
+  spec.add_runtime_dependency "opencode-ruby", "= 0.0.1.alpha6"
 
   # Rails sub-libraries used at runtime. Depending on these individually
   # (instead of the `rails` umbrella) avoids forcing host apps to load