From e2f6032766d8965804e1b00e9232f48c4c71bd47 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 21:33:10 +0000
Subject: [PATCH 1/2] Initial plan


From d69c1fdbf2a5ce864764e9d46ea43a573794c5f2 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 21:56:23 +0000
Subject: [PATCH 2/2] fix: fix npm publishing errors in release workflow

- Remove --provenance from preliminary release to avoid OIDC E404 bug
  (npm/cli#8678, #8730, #8976: OIDC token exchange for new scoped
  packages returns 404 when trusted publisher is not configured)
- Fix jreleaser.yml artifact path from {{projectName}}-{{projectVersion}}.tgz
  to operaton-operaton-mcp-{{projectVersion}}.tgz (npm pack for
  @operaton/operaton-mcp creates operaton-operaton-mcp-*.tgz)
- Add npm pack step before JReleaser for both preliminary and final
  releases (JReleaser FLAT_BINARY needs the tarball to exist on disk)

Co-authored-by: kthoms <265597+kthoms@users.noreply.github.com>
---
 .github/workflows/release.yml | 10 +++++++++-
 jreleaser.yml                 |  2 +-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a97f2e7..d0dc43f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,10 +48,14 @@ jobs:
 
       - name: Publish to NPM (next dist-tag)
         if: inputs.release_type == 'preliminary' && !inputs.dry_run
-        run: npm publish --tag next --provenance --access public
+        run: npm publish --tag next --access public
         env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_DEPLOY_TOKEN }}
 
+      - name: Pack npm tarball
+        if: inputs.release_type == 'preliminary' && !inputs.dry_run
+        run: npm pack
+
       - name: Create pre-release via JReleaser
         if: inputs.release_type == 'preliminary' && !inputs.dry_run
         uses: jreleaser/release-action@v2
@@ -94,6 +98,10 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_DEPLOY_TOKEN }}
 
+      - name: Pack npm tarball
+        if: inputs.release_type == 'final' && !inputs.dry_run
+        run: npm pack
+
       - name: Create release via JReleaser
         if: inputs.release_type == 'final' && !inputs.dry_run
         uses: jreleaser/release-action@v2
diff --git a/jreleaser.yml b/jreleaser.yml
index 2411eb4..436df4e 100644
--- a/jreleaser.yml
+++ b/jreleaser.yml
@@ -19,4 +19,4 @@ distributions:
   operaton-mcp:
     type: FLAT_BINARY
     artifacts:
-      - path: '{{projectName}}-{{projectVersion}}.tgz'
+      - path: 'operaton-operaton-mcp-{{projectVersion}}.tgz'