From 016f58555bc37d5f5bcb9fec5599e2d6ce94a6a9 Mon Sep 17 00:00:00 2001
From: Rafal Rabenda <rafal@genlayerlabs.com>
Date: Mon, 16 Feb 2026 16:01:54 +0100
Subject: [PATCH 1/3] fix: clean up publish workflow for OIDC trusted
 publishing

- Add environment: npm for GitHub OIDC auth
- Remove sed/unset workarounds for auth token
- Add files field to package.json to limit published contents
- Add PR trigger on staging for testing
---
 .github/workflows/publish.yml | 30 +++++++++++++++---------------
 package.json                  |  1 +
 2 files changed, 16 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9f526f2e..1bc46813 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,6 +2,9 @@ name: Release & Publish Package to NPM
 
 on:
   workflow_dispatch:
+  pull_request:
+    branches:
+      - staging
   push:
     branches:
       - main
@@ -16,6 +19,7 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: npm
     steps:
       - name: Get CI Bot Token
         uses: tibdex/github-app-token@v2
@@ -28,27 +32,23 @@ jobs:
         uses: actions/checkout@v4
         with:
           token: ${{ steps.ci_bot_token.outputs.token }}
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          registry-url: "https://registry.npmjs.org"
-      - name: Upgrade npm for OIDC trusted publishing
-        run: npm install -g npm@latest
-      - name: Configure OIDC auth
-        run: |
-          sed -i '/_authToken/d' "$NPM_CONFIG_USERCONFIG"
-          unset NODE_AUTH_TOKEN
-      - name: Install the dependencies
-        run: npm ci
+
       - name: Initialize Git User
         run: |
           git config --global user.email "github-actions[bot]@genlayer.com"
           git config --global user.name "github-actions[bot]"
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          registry-url: "https://registry.npmjs.org"
+
+      - run: npm install -g npm@latest
+
+      - run: npm ci
+
       - name: Release
         run: |
-          sed -i '/_authToken/d' "$NPM_CONFIG_USERCONFIG"
-          unset NODE_AUTH_TOKEN
           if [ "${{ github.ref_name }}" = "staging" ]; then
             npm run release-beta
           else
diff --git a/package.json b/package.json
index ba821318..0c42de2f 100644
--- a/package.json
+++ b/package.json
@@ -7,6 +7,7 @@
   "bin": {
     "genlayer": "./dist/index.js"
   },
+  "files": ["dist", "scripts", "templates", ".env.example", "README.md", "LICENSE"],
   "scripts": {
     "test": "vitest",
     "test:watch": "vitest --watch",

From c212e65c089859aef88d4e4cfcac14b3b2ae9e41 Mon Sep 17 00:00:00 2001
From: Rafal Rabenda <rafal@genlayerlabs.com>
Date: Mon, 16 Feb 2026 16:07:49 +0100
Subject: [PATCH 2/3] ci: change PR trigger to main for testing

---
 .github/workflows/publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1bc46813..3cf461ed 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
   pull_request:
     branches:
-      - staging
+      - main
   push:
     branches:
       - main

From 9ae0a2129c8cb298d5f515def8161a1bb61df9ef Mon Sep 17 00:00:00 2001
From: Rafal Rabenda <rafal@genlayerlabs.com>
Date: Mon, 16 Feb 2026 16:13:24 +0100
Subject: [PATCH 3/3] ci: remove PR trigger and bump version to 0.34.2

- Remove pull_request trigger after successful OIDC publish test
- Bump version past 0.34.1 which was published during testing
---
 .github/workflows/publish.yml | 3 ---
 package.json                  | 2 +-
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3cf461ed..12c7dbdd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,9 +2,6 @@ name: Release & Publish Package to NPM
 
 on:
   workflow_dispatch:
-  pull_request:
-    branches:
-      - main
   push:
     branches:
       - main
diff --git a/package.json b/package.json
index 0c42de2f..cb42b667 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "genlayer",
-  "version": "0.34.0",
+  "version": "0.34.2",
   "description": "GenLayer Command Line Tool",
   "main": "src/index.ts",
   "type": "module",