From b7822cd3b4c2fadc5c536d2df8cd4a8b47271954 Mon Sep 17 00:00:00 2001
From: Jonathan Gan <jonathang132298@gmail.com>
Date: Fri, 14 Aug 2026 14:33:47 -0400
Subject: [PATCH] Separate package build and publish

Validate every integration change without attempting to republish an existing production version.
---
 .github/workflows/deploy.yml  | 15 ++++++---------
 .github/workflows/publish.yml | 27 +++++++++++++++++++++++++++
 2 files changed, 33 insertions(+), 9 deletions(-)
 create mode 100644 .github/workflows/publish.yml

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 901a5ef..4dcc727 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -1,21 +1,20 @@
-name: Publish Python 🐍 distribution 📦 to PyPI
+name: Python package CI
 
 on:
   push:
-    branches: [main]
-  workflow_dispatch:
+    branches: [main, dev]
+  pull_request:
+    branches: [main, dev]
 
 permissions:
-  id-token: write
   contents: read
 
 env:
   PYTHON_VERSION: '3.x'
 
 jobs:
-  build-and-publish:
+  build:
     runs-on: ubuntu-latest
-    environment: pypi
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
@@ -25,6 +24,4 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
       - run: pip install build
       - run: python -m build
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
-        with:
-          password: ${{ secrets.PYPI_API_KEY }}
+      - run: python -m pip install dist/*.whl
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..533ac56
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,27 @@
+name: Publish Python distribution to PyPI
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  PYTHON_VERSION: '3.x'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+      - run: pip install build
+      - run: python -m build
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        with:
+          password: ${{ secrets.PYPI_API_KEY }}