# @owlstronaut-test-org/circleci-trust-publish-test

Org-scoped test package for validating CircleCI OIDC trusted publishing against the **real npm registry**.

## Purpose

Used for bug-bashing the CircleCI trusted publisher UI flows on wubwub (org-scoped scenarios). This package is connected to CircleCI and publishes via OIDC token exchange — no long-lived npm tokens.

## Setup

### 1. CircleCI

Connect this repo to CircleCI and run the `debug-workflow` to get claim values.

| Field | Value |
|-------|-------|
| Org ID | _TBD — run debug-workflow_ |
| Project ID | _TBD — run debug-workflow_ |
| Pipeline Definition ID | _TBD — run debug-workflow_ |

### 2. npm Trusted Publishing

Configure the trusted publisher on [npmjs.com](https://www.npmjs.com/package/@owlstronaut-test-org/circleci-trust-publish-test/access) with the org-id and project-id from the debug workflow.

## Workflows

### `publish-workflow`
Publishes to the real npm registry. Only runs on `main`.

### `debug-workflow`
Decodes and prints OIDC token claims — use to get the values needed for trusted publisher configuration.

## Related

- [circleci-trust-publish-test](../circleci-trust-publish-test) — user-scoped version (`@owlstronaut`)
- Bug bash tasks: #14717, #14719