From a0b881f08dddad4417d8d37b2e8c74a99a853fb8 Mon Sep 17 00:00:00 2001
From: Rafael Garcia <raf@onkernel.com>
Date: Sat, 28 Mar 2026 12:24:52 -0400
Subject: [PATCH] Use OIDC for Stainless npm publishing

Configure the TypeScript Stainless target to publish to npm via OIDC so releases can use npm's trusted publishing flow instead of a long-lived token.

Made-with: Cursor
---
 stainless.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/stainless.yaml b/stainless.yaml
index 55d08d8d..c88f36cc 100644
--- a/stainless.yaml
+++ b/stainless.yaml
@@ -29,7 +29,8 @@ targets:
     package_name: "@onkernel/hypeman"
     production_repo: kernel/hypeman-ts
     publish:
-      npm: true
+      npm:
+        auth_method: oidc
 
 # `environments` are a map of the name of the environment (e.g. "sandbox",
 # "production") to the corresponding url to use.