chore(identity-webhook): npm publish CI and v0.3.0 package prep by eliteprox · Pull Request #60 · livepeer/clearinghouse

eliteprox · 2026-07-08T21:18:52Z

Summary

Publish @livepeer/clearinghouse-identity-webhook to npm on v*.*.* tags via OIDC trusted publishing (release.yml).
One-time bootstrap-publish.yml for the first scoped package create (npm OIDC cannot create a missing package).
bump-version.yml + dependabot.yml; CI npm pack --dry-run.
Package prep: public exports (./protocol, ./verifiers), TypeScript types, MIT LICENSE, RELEASING docs.

Out of scope

No legacy-env embedding helpers (deferred).
No OIDC JWKS discovery / composite token exchange (see fix(identity-webhook): resolve JWKS via OIDC discovery #62 / fix(identity-webhook): OIDC composite app_<24hex>_<secret> token exchange #63).

Test plan

cd identity-webhook && npm ci && npm test && npm pack --dry-run --ignore-scripts
Merge PR
Run bootstrap-publish once with NPM_TOKEN for v0.3.0 (or create the package on npmjs.com manually)
Configure npm trusted publishing for release.yml, then delete NPM_TOKEN
Push later v*.*.* tags and verify release publishes via OIDC

One-time npm setup (after merge)

See RELEASING.md.

Copilot

Pull request overview

This PR prepares identity-webhook/ for its first public npm release and adds CI/CD automation to publish @livepeer/clearinghouse-identity-webhook on semver tags using npm OIDC trusted publishing.

Changes:

Add GitHub Actions workflows for tag-based npm publishing (release.yml), manual semver bumps (bump-version.yml), and extend CI with npm pack --dry-run.
Update identity-webhook/package.json for v0.3.0 publishing metadata (exports map, files list, repository/homepage/keywords, public access).
Add release documentation plus legacy env helpers and tests to support embedded/legacy integration.

Reviewed changes

Copilot reviewed 10 out of 13 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
README.md	Documents npm package publishing location and links to releasing guide.
identity-webhook/protocol.d.ts	Adds public TypeScript declarations for the webhook protocol module.
identity-webhook/package.json	Prepares package for public publish (version bump, exports/files, metadata).
identity-webhook/package-lock.json	Updates lockfile version fields for v0.3.0.
identity-webhook/legacy-env.test.mjs	Adds tests for legacy env mapping + an end-to-end authorize flow.
identity-webhook/legacy-env.mjs	Introduces legacy env variable mapping helpers for OIDC verifier config.
identity-webhook/legacy-env.d.ts	Adds TypeScript declarations for legacy env helper entrypoint.
identity-webhook/docs/RELEASING.md	Documents OIDC trusted publishing setup and release process.
.github/workflows/release.yml	Implements tag-triggered npm publish via OIDC + GitHub Release creation.
.github/workflows/ci.yml	Extends CI to include `npm pack --dry-run` for identity-webhook changes.
.github/workflows/bump-version.yml	Adds manual workflow to bump version, commit, tag, and push.
.github/REPO_SETUP.md	Updates repo automation checklist to reflect new workflows.
.github/dependabot.yml	Adds weekly Dependabot updates for identity-webhook npm deps and GH Actions.

Files not reviewed (1)

identity-webhook/package-lock.json: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

eliteprox · 2026-07-08T21:46:13Z

@rickstaa I'd like to publish this to npm as @livepeer/clearinghouse-identity-webhook

Copilot

Pull request overview

Copilot reviewed 10 out of 14 changed files in this pull request and generated 2 comments.

Files not reviewed (1)

identity-webhook/package-lock.json: Generated file

eliteprox · 2026-07-10T22:03:44Z

Added a livepeer-scoped bootstrap-publish workflow for the first npm create (OIDC alone E404s on a missing package), plus RELEASING.md steps. After the first publish, configure trusted publishing and delete NPM_TOKEN.

Stacked follow-ups (coming next):

OIDC JWKS discovery
Composite app_*.pmth_* token exchange

Copilot

Pull request overview

Copilot reviewed 11 out of 15 changed files in this pull request and generated 2 comments.

Files not reviewed (1)

identity-webhook/package-lock.json: Generated file

Add release, bump-version, bootstrap-publish, and dependabot workflows for publishing @livepeer/clearinghouse-identity-webhook via npm trusted publishing (OIDC). Prepare package exports/types and RELEASING docs; add repo MIT LICENSE. Checkout publish tags via refs/tags/ for safety.

eliteprox · 2026-07-11T00:35:35Z

Cleaned this PR to publish-only: removed legacy-env packaging, kept workflows + package exports/types + LICENSE. Tag checkouts now use refs/tags/….

Copilot

Pull request overview

Copilot reviewed 10 out of 13 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

identity-webhook/package-lock.json: Generated file

+  "files": [
+    "protocol.mjs",
+    "protocol.d.ts",
+    "verifiers.mjs",
+    "verifiers.d.ts",


…ackage Introduce MIT License and comprehensive README documentation for the @livepeer/clearinghouse-identity-webhook package, detailing installation, usage, and environment configuration for identity verification. This enhances clarity and accessibility for developers integrating the identity webhook into their projects.

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Copilot AI review requested due to automatic review settings July 8, 2026 21:18

Copilot started reviewing on behalf of eliteprox July 8, 2026 21:19 View session

Copilot AI reviewed Jul 8, 2026

View reviewed changes

Comment thread identity-webhook/package.json Outdated

Comment thread identity-webhook/package.json Outdated

Comment thread .github/workflows/ci.yml Outdated

Comment thread .github/workflows/release.yml

Copilot AI review requested due to automatic review settings July 8, 2026 21:47

Copilot started reviewing on behalf of eliteprox July 8, 2026 21:47 View session

eliteprox requested a review from rickstaa July 8, 2026 21:49

Copilot AI reviewed Jul 8, 2026

View reviewed changes

Comment thread identity-webhook/package.json Outdated

Comment thread identity-webhook/package.json

eliteprox mentioned this pull request Jul 10, 2026

Add npm publish CI and prepare v0.3.0 for @pymthouse package #61

Closed

22 tasks

Copilot AI review requested due to automatic review settings July 10, 2026 22:03

This was referenced Jul 10, 2026

fix(identity-webhook): resolve JWKS via OIDC discovery #62

Merged

fix(identity-webhook): OIDC composite app_<24hex>_<secret> token exchange #63

Merged

Copilot started reviewing on behalf of eliteprox July 10, 2026 22:04 View session

Copilot AI reviewed Jul 10, 2026

View reviewed changes

Comment thread .github/workflows/release.yml Outdated

Comment thread .github/workflows/bootstrap-publish.yml Outdated

Copilot AI review requested due to automatic review settings July 11, 2026 00:35

eliteprox force-pushed the chore/npm-publish-ci branch from e2805f8 to 6a0a865 Compare July 11, 2026 00:35

eliteprox changed the title ~~chore(identity-webhook): add npm publish CI and prepare v0.3.0~~ chore(identity-webhook): npm publish CI and v0.3.0 package prep Jul 11, 2026

Copilot started reviewing on behalf of eliteprox July 11, 2026 00:35 View session

Copilot AI reviewed Jul 11, 2026

View reviewed changes

Comment thread identity-webhook/package.json

Comment on lines +24 to +28

"files": [

"protocol.mjs",

"protocol.d.ts",

"verifiers.mjs",

"verifiers.d.ts",

eliteprox mentioned this pull request Jul 11, 2026

feat(identity-webhook): live balance gate after identity verify #64

Open

3 tasks

Copilot AI review requested due to automatic review settings July 13, 2026 19:59

Copilot started reviewing on behalf of eliteprox July 13, 2026 20:00 View session

Copilot AI reviewed Jul 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(identity-webhook): npm publish CI and v0.3.0 package prep#60

chore(identity-webhook): npm publish CI and v0.3.0 package prep#60
eliteprox wants to merge 2 commits into
mainfrom
chore/npm-publish-ci

eliteprox commented Jul 8, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 8, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 10, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 11, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

eliteprox commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Out of scope

Test plan

One-time npm setup (after merge)

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 8, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 10, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

eliteprox commented Jul 11, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

eliteprox commented Jul 8, 2026 •

edited

Loading