From c6318ee2a0d2e6b32e4f1bd015abda315f9c8f9e Mon Sep 17 00:00:00 2001
From: skulidropek <66840575+skulidropek@users.noreply.github.com>
Date: Sat, 21 Mar 2026 07:43:18 +0000
Subject: [PATCH] fix(ci): fall back to NPM_TOKEN in publish workflow

---
 .github/workflows/publish.yml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8f43415..5bdec57 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -37,6 +37,16 @@ jobs:
           node-version: 22.12.0
           registry-url: https://registry.npmjs.org
 
+      - name: Verify npm auth secret
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_KEY || secrets.NPM_TOKEN }}
+        shell: bash
+        run: |
+          if [[ -z "${NODE_AUTH_TOKEN}" ]]; then
+            echo "Missing npm auth secret. Expected NPM_KEY or NPM_TOKEN." >&2
+            exit 1
+          fi
+
       - name: Determine publish version
         id: version
         shell: bash
@@ -59,10 +69,10 @@ jobs:
         if: steps.version.outputs.type == 'release'
         run: npm publish
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_KEY }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_KEY || secrets.NPM_TOKEN }}
 
       - name: Publish canary
         if: steps.version.outputs.type == 'canary'
         run: npm publish --tag canary
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_KEY }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_KEY || secrets.NPM_TOKEN }}