[VickyXAI]

Before npm publish, npm is upgraded to >= 11.5.1. Once this package has a Trusted Publisher configured on npmjs.com (repo BlockRunAI/ClawRouter, workflow publish.yml), publishing goes through OIDC and no long-lived NPM_TOKEN is needed. NODE_AUTH_TOKEN stays as a fallback for now, so this is safe to merge before the npm side is configured. Merging does not publish a new version.

Summary by CodeRabbit

• Chores
  • Updated the package publishing process to support trusted publishing.
  • Retained token-based publishing as a fallback.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Repository: BlockRunAI/ClawRouter/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: c65c420d-2d58-48bc-9cc5-37a20f11a0b3

📥 Commits

Reviewing files that changed from the base of the PR and between 7e470dc and 4e568c0.

📒 Files selected for processing: 1

• .github/workflows/publish.yml

+----------------+
| CSI: Git Diff. |
+----------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}