From 53c31c0f31af55608c4ba42e48b66ebc136ba9b8 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Tue, 27 Oct 2026 05:34:34 +0000
Subject: [PATCH] chore: document why .speakeasy/workflow.yaml keeps npm token
 placeholder

---
 .speakeasy/workflow.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.speakeasy/workflow.yaml b/.speakeasy/workflow.yaml
index 4d6fac3a7..850f103e2 100644
--- a/.speakeasy/workflow.yaml
+++ b/.speakeasy/workflow.yaml
@@ -22,6 +22,8 @@ targets:
         source: OpenRouter API
         publish:
             npm:
+                # Keep this line: Speakeasy publishes only when npm.token is non-empty, and it does not expand $npm_token.
+                # Publishing authenticates with npm trusted publishing (OIDC); no NPM_TOKEN secret is passed.
                 token: $npm_token
         codeSamples:
             registry: