From 0755a628ee0f4885b398e6c41277eeb8d3f3d107 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 16 Jun 2026 13:16:07 +0000
Subject: [PATCH 1/3] Initial plan


From cc846185bdc56573d42ceec1e20fb813cc70d586 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 16 Jun 2026 13:20:14 +0000
Subject: [PATCH 2/3] Fix npm auth token in publish workflow

---
 .github/workflows/publish.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1e34385..f0d52fd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,4 +36,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package on NPM 📦
-        run: npm publish --provenance --access public
\ No newline at end of file
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
\ No newline at end of file

From e094a21a4af773dd6ff9031fca3bd97c1934e2f7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 16 Jun 2026 14:31:34 +0000
Subject: [PATCH 3/3] Use OIDC trusted publishing: add environment and remove
 NODE_AUTH_TOKEN

---
 .github/workflows/publish.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f0d52fd..4dc8786 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -22,6 +22,7 @@ jobs:
   publish:
     needs: test
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: read
       id-token: write
@@ -36,6 +37,4 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package on NPM 📦
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
\ No newline at end of file
+        run: npm publish --provenance --access public
\ No newline at end of file