From 0fd8656090ac9b23903a2a67d5c5c6bfac3036af Mon Sep 17 00:00:00 2001
From: Anton Pascal <anton-pascal@users.noreply.github.com>
Date: Wed, 18 Feb 2026 21:56:06 +0000
Subject: [PATCH] chore: clean up release workflow

Use bypass-2FA token via NPM_TOKEN secret. No --provenance
(causes npm CLI crash on GH runners).
---
 .github/workflows/release.yml | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa67ff57..4931058c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -31,7 +31,6 @@ jobs:
     environment: npm
     permissions:
       contents: write
-      id-token: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -68,17 +67,8 @@ jobs:
             echo "🏜️ Dry run — would publish @pascal-app/core@$VERSION"
             npm publish --dry-run --access public
           else
-            npm publish --access public --provenance --loglevel verbose 2>&1 || true
-            echo "📋 npm debug logs:"
-            cat ~/.npm/_logs/*debug*.log 2>/dev/null || echo "No debug logs found"
-            # Check if publish actually succeeded
-            PUBLISHED=$(npm view @pascal-app/core version 2>/dev/null)
-            if [ "$PUBLISHED" = "$VERSION" ]; then
-              echo "📦 Published @pascal-app/core@$VERSION"
-            else
-              echo "❌ Publish failed — expected $VERSION, found $PUBLISHED on registry"
-              exit 1
-            fi
+            npm publish --access public
+            echo "📦 Published @pascal-app/core@$VERSION"
           fi
 
       - name: Bump & publish viewer
@@ -97,7 +87,7 @@ jobs:
             echo "🏜️ Dry run — would publish @pascal-app/viewer@$VERSION"
             npm publish --dry-run --access public
           else
-            npm publish --access public --provenance
+            npm publish --access public
             echo "📦 Published @pascal-app/viewer@$VERSION"
           fi