From 0a2d57624c4d9b47711f2a6915c8ca4fadde699a Mon Sep 17 00:00:00 2001
From: Shantur Rathore <i@shantur.com>
Date: Fri, 21 Nov 2025 18:38:37 +0000
Subject: [PATCH] Enable trusted npm publish for server

---
 .github/workflows/dev-release.yml | 5 +++++
 .github/workflows/release.yml     | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
index a1ea85dc..187e3d46 100644
--- a/.github/workflows/dev-release.yml
+++ b/.github/workflows/dev-release.yml
@@ -73,6 +73,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: npm
+          registry-url: https://registry.npmjs.org
 
       - name: Set workspace versions
         run: npm version ${VERSION} --workspaces --include-workspace-root --no-git-tag-version --allow-same-version
@@ -87,4 +88,8 @@ jobs:
         run: npm run build --workspace @neuralnomads/codenomad
 
       - name: Publish server package to dev tag
+        env:
+          NPM_CONFIG_PROVENANCE: true
+          NPM_CONFIG_REGISTRY: https://registry.npmjs.org
+          NPM_CONFIG_ALWAYS_AUTH: true
         run: npm publish --workspace @neuralnomads/codenomad --access public --tag dev --provenance
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8f2ab5d3..1a2cd26b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -89,6 +89,7 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: npm
+          registry-url: https://registry.npmjs.org
 
       - name: Install dependencies
         run: npm ci --workspaces
@@ -100,4 +101,8 @@ jobs:
         run: npm run build --workspace @neuralnomads/codenomad
 
       - name: Publish server package
+        env:
+          NPM_CONFIG_PROVENANCE: true
+          NPM_CONFIG_REGISTRY: https://registry.npmjs.org
+          NPM_CONFIG_ALWAYS_AUTH: true
         run: npm publish --workspace @neuralnomads/codenomad --access public --tag latest --provenance