full package

.github/workflows/cd-release.yml

@@ -1,48 +1,36 @@
-name: CD - Release
+name: Publish to npm
 
 on:
   push:
-    tags:
-      - 'v*'
-
-permissions:
-  contents: read
-  id-token: write
+    branches:
+      - "master" # Triggers on pushes to the master branch
+  workflow_dispatch: # Allows manual trigger from GitHub UI
 
 jobs:
-  release:
-    name: CD - Release
+  publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # Required for npm provenance
 
     steps:
-      - name: Checkout
+      - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Setup Node
+      - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
-          cache: npm
-          registry-url: 'https://registry.npmjs.org'
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
+          cache: "npm"
 
-      - name: Install
+      - name: Install dependencies
         run: npm ci
 
-      - name: Format (check)
-        run: npm run format
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Typecheck
-        run: npm run typecheck
-
-      - name: Test
-        run: npm test
-
-      - name: Build
+      - name: Build package
         run: npm run build
 
-      # Trusted Publishing (OIDC) – requires npm package configured for GitHub OIDC
-      - name: Publish to npm (OIDC)
-        run: npx changeset publish
+      - name: Publish to npm
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.npmrc

@@ -1,2 +1,5 @@
-fund=false
-audit=false
+registry=https://registry.npmjs.org/
+
+# scoped registry only for @ciscode-apps and let npmjs be default
+@ciscode-template-model:registry=https://pkgs.dev.azure.com/CISCODEAPPS/Templates/_packaging/packages-fe/npm/registry/
+always-auth=true