[{"data":1,"prerenderedAt":476},["ShallowReactive",2],{"docs-navigation:en":3,"content-page:docs:r19ZFYF4Dup-C_WVNaBlP81vl1z_z6svnimbpeLLxzc":223,"content-page-surround:docs:r19ZFYF4Dup-C_WVNaBlP81vl1z_z6svnimbpeLLxzc":459,"i-lucide:terminal":470,"i-lucide:clipboard":474},[4,25,83,141,168],{"title":5,"id":6,"canonicalKey":7,"locale":8,"draft":9,"icon":10,"path":11,"children":12},"Lupinum OSS handbook","content:docs:1.get-started:1.index.md","1","en",false,"lucide:book-open","\u002Fdocs\u002Fget-started",[13,19],{"title":14,"id":15,"canonicalKey":16,"locale":8,"draft":9,"icon":17,"path":18},"Choose a repository profile","content:docs:1.get-started:2.choose-a-profile.md","1\u002F2","lucide:git-branch","\u002Fdocs\u002Fget-started\u002Fchoose-a-profile",{"title":20,"id":21,"canonicalKey":22,"locale":8,"draft":9,"icon":23,"path":24},"New project path","content:docs:1.get-started:3.new-project-path.md","1\u002F3","lucide:route","\u002Fdocs\u002Fget-started\u002Fnew-project-path",{"title":26,"page":9,"canonicalKey":27,"locale":8,"children":28},"Standards","2",[29,35,41,47,53,59,65,71,77],{"title":30,"id":31,"canonicalKey":32,"locale":8,"draft":9,"icon":33,"path":34},"Repository structure","content:docs:2.standards:1.repository-structure.md","2\u002F1","lucide:folders","\u002Fdocs\u002Fstandards\u002Frepository-structure",{"title":36,"id":37,"canonicalKey":38,"locale":8,"draft":9,"icon":39,"path":40},"Documentation ownership","content:docs:2.standards:2.documentation-ownership.md","2\u002F2","lucide:files","\u002Fdocs\u002Fstandards\u002Fdocumentation-ownership",{"title":42,"id":43,"canonicalKey":44,"locale":8,"draft":9,"icon":45,"path":46},"GitHub and contributions","content:docs:2.standards:3.github-and-contributions.md","2\u002F3","lucide:github","\u002Fdocs\u002Fstandards\u002Fgithub-and-contributions",{"title":48,"id":49,"canonicalKey":50,"locale":8,"draft":9,"icon":51,"path":52},"Dependency policy","content:docs:2.standards:4.dependencies.md","2\u002F4","lucide:package-search","\u002Fdocs\u002Fstandards\u002Fdependencies",{"title":54,"id":55,"canonicalKey":56,"locale":8,"draft":9,"icon":57,"path":58},"Release security","content:docs:2.standards:5.release-security.md","2\u002F5","lucide:shield-check","\u002Fdocs\u002Fstandards\u002Frelease-security",{"title":60,"id":61,"canonicalKey":62,"locale":8,"draft":9,"icon":63,"path":64},"Package previews","content:docs:2.standards:6.package-previews.md","2\u002F6","lucide:package-open","\u002Fdocs\u002Fstandards\u002Fpackage-previews",{"title":66,"id":67,"canonicalKey":68,"locale":8,"draft":9,"icon":69,"path":70},"Documentation sites","content:docs:2.standards:7.documentation-sites.md","2\u002F7","lucide:panel-top","\u002Fdocs\u002Fstandards\u002Fdocumentation-sites",{"title":72,"id":73,"canonicalKey":74,"locale":8,"draft":9,"icon":75,"path":76},"Analytics and feedback","content:docs:2.standards:8.analytics-and-feedback.md","2\u002F8","lucide:chart-no-axes-combined","\u002Fdocs\u002Fstandards\u002Fanalytics-and-feedback",{"title":78,"id":79,"canonicalKey":80,"locale":8,"draft":9,"icon":81,"path":82},"Security and agents","content:docs:2.standards:9.security-and-agents.md","2\u002F9","lucide:bot-message-square","\u002Fdocs\u002Fstandards\u002Fsecurity-and-agents",{"title":84,"page":9,"canonicalKey":85,"locale":8,"children":86},"Procedures","3",[87,93,99,105,111,117,123,129,135],{"title":88,"id":89,"canonicalKey":90,"locale":8,"draft":9,"icon":91,"path":92},"Create a repository","content:docs:3.procedures:1.create-a-repository.md","3\u002F1","lucide:folder-plus","\u002Fdocs\u002Fprocedures\u002Fcreate-a-repository",{"title":94,"id":95,"canonicalKey":96,"locale":8,"draft":9,"icon":97,"path":98},"First npm release","content:docs:3.procedures:2.first-npm-release.md","3\u002F2","lucide:package-plus","\u002Fdocs\u002Fprocedures\u002Ffirst-npm-release",{"title":100,"id":101,"canonicalKey":102,"locale":8,"draft":9,"icon":103,"path":104},"Normal release","content:docs:3.procedures:3.normal-release.md","3\u002F3","lucide:package-check","\u002Fdocs\u002Fprocedures\u002Fnormal-release",{"title":106,"id":107,"canonicalKey":108,"locale":8,"draft":9,"icon":109,"path":110},"Prerelease","content:docs:3.procedures:4.prerelease.md","3\u002F4","lucide:flask-conical","\u002Fdocs\u002Fprocedures\u002Fprerelease",{"title":112,"id":113,"canonicalKey":114,"locale":8,"draft":9,"icon":115,"path":116},"Hotfix","content:docs:3.procedures:5.hotfix.md","3\u002F5","lucide:ambulance","\u002Fdocs\u002Fprocedures\u002Fhotfix",{"title":118,"id":119,"canonicalKey":120,"locale":8,"draft":9,"icon":121,"path":122},"Rollback","content:docs:3.procedures:6.rollback.md","3\u002F6","lucide:undo-2","\u002Fdocs\u002Fprocedures\u002Frollback",{"title":124,"id":125,"canonicalKey":126,"locale":8,"draft":9,"icon":127,"path":128},"Dependency update","content:docs:3.procedures:7.dependency-update.md","3\u002F7","lucide:refresh-cw","\u002Fdocs\u002Fprocedures\u002Fdependency-update",{"title":130,"id":131,"canonicalKey":132,"locale":8,"draft":9,"icon":133,"path":134},"Documentation change","content:docs:3.procedures:8.documentation-change.md","3\u002F8","lucide:file-pen-line","\u002Fdocs\u002Fprocedures\u002Fdocumentation-change",{"title":136,"id":137,"canonicalKey":138,"locale":8,"draft":9,"icon":139,"path":140},"Credential incident","content:docs:3.procedures:9.credential-incident.md","3\u002F9","lucide:key-round","\u002Fdocs\u002Fprocedures\u002Fcredential-incident",{"title":142,"page":9,"canonicalKey":143,"locale":8,"children":144},"Checklists","4",[145,151,156,162],{"title":146,"id":147,"canonicalKey":148,"locale":8,"draft":9,"icon":149,"path":150},"Repository launch checklist","content:docs:4.checklists:1.repository-launch.md","4\u002F1","lucide:list-checks","\u002Fdocs\u002Fchecklists\u002Frepository-launch",{"title":152,"id":153,"canonicalKey":154,"locale":8,"draft":9,"icon":97,"path":155},"First release checklist","content:docs:4.checklists:2.first-release.md","4\u002F2","\u002Fdocs\u002Fchecklists\u002Ffirst-release",{"title":157,"id":158,"canonicalKey":159,"locale":8,"draft":9,"icon":160,"path":161},"Production acceptance checklist","content:docs:4.checklists:3.production-acceptance.md","4\u002F3","lucide:monitor-check","\u002Fdocs\u002Fchecklists\u002Fproduction-acceptance",{"title":163,"id":164,"canonicalKey":165,"locale":8,"draft":9,"icon":166,"path":167},"Quarterly audit checklist","content:docs:4.checklists:4.quarterly-audit.md","4\u002F4","lucide:calendar-check","\u002Fdocs\u002Fchecklists\u002Fquarterly-audit",{"title":169,"id":170,"canonicalKey":171,"locale":8,"draft":9,"icon":172,"path":173,"children":174},"Troubleshooting","content:docs:5.troubleshooting:1.index.md","5","lucide:wrench","\u002Fdocs\u002Ftroubleshooting",[175,181,187,193,199,205,211,217],{"title":176,"id":177,"canonicalKey":178,"locale":8,"draft":9,"icon":179,"path":180},"npm trusted publishing","content:docs:5.troubleshooting:2.npm-trusted-publishing.md","5\u002F2","lucide:shield-alert","\u002Fdocs\u002Ftroubleshooting\u002Fnpm-trusted-publishing",{"title":182,"id":183,"canonicalKey":184,"locale":8,"draft":9,"icon":185,"path":186},"GitHub Actions","content:docs:5.troubleshooting:3.github-actions.md","5\u002F3","lucide:workflow","\u002Fdocs\u002Ftroubleshooting\u002Fgithub-actions",{"title":188,"id":189,"canonicalKey":190,"locale":8,"draft":9,"icon":191,"path":192},"GitHub Action SHA errors","content:docs:5.troubleshooting:4.action-sha-errors.md","5\u002F4","lucide:git-commit-horizontal","\u002Fdocs\u002Ftroubleshooting\u002Faction-sha-errors",{"title":194,"id":195,"canonicalKey":196,"locale":8,"draft":9,"icon":197,"path":198},"Dependency quarantine","content:docs:5.troubleshooting:5.dependency-quarantine.md","5\u002F5","lucide:timer","\u002Fdocs\u002Ftroubleshooting\u002Fdependency-quarantine",{"title":200,"id":201,"canonicalKey":202,"locale":8,"draft":9,"icon":203,"path":204},"Vercel deployment","content:docs:5.troubleshooting:6.vercel.md","5\u002F6","lucide:triangle","\u002Fdocs\u002Ftroubleshooting\u002Fvercel",{"title":206,"id":207,"canonicalKey":208,"locale":8,"draft":9,"icon":209,"path":210},"Plausible analytics","content:docs:5.troubleshooting:7.plausible.md","5\u002F7","lucide:chart-no-axes-column-increasing","\u002Fdocs\u002Ftroubleshooting\u002Fplausible",{"title":212,"id":213,"canonicalKey":214,"locale":8,"draft":9,"icon":215,"path":216},"Package preview failures","content:docs:5.troubleshooting:8.package-previews.md","5\u002F8","lucide:package-x","\u002Fdocs\u002Ftroubleshooting\u002Fpackage-previews",{"title":218,"id":219,"canonicalKey":220,"locale":8,"draft":9,"icon":221,"path":222},"GitHub CLI authentication","content:docs:5.troubleshooting:9.github-cli-authentication.md","5\u002F9","lucide:terminal","\u002Fdocs\u002Ftroubleshooting\u002Fgithub-cli-authentication",{"title":176,"description":224,"icon":179,"body":225,"type":446,"id":177,"canonicalKey":178,"draft":9,"partial":9,"locale":8,"collection":447,"navigationFile":9,"file":448,"route":454,"resolution":456},"Diagnose OIDC permission denied, missing trust records, and first-package limitations.",{"type":226,"children":227,"toc":438},"root",[228,244,251,256,302,320,325,368,379,385,402,408,433],{"type":229,"tag":230,"props":231,"children":232},"element","p",{},[233,236,242],{"type":234,"value":235},"text","An npm ",{"type":229,"tag":237,"props":238,"children":239},"code",{},[240],{"type":234,"value":241},"E403 OIDC permission denied",{"type":234,"value":243}," error means the workflow identity does not\nmatch a trusted publisher with publish permission.",{"type":229,"tag":245,"props":246,"children":248},"h2",{"id":247},"check-the-exact-identity",[249],{"type":234,"value":250},"Check the exact identity",{"type":229,"tag":230,"props":252,"children":253},{},[254],{"type":234,"value":255},"Compare all four values:",{"type":229,"tag":257,"props":258,"children":259},"ul",{},[260,273,285,297],{"type":229,"tag":261,"props":262,"children":263},"li",{},[264,266,271],{"type":234,"value":265},"GitHub repository, such as ",{"type":229,"tag":237,"props":267,"children":268},{},[269],{"type":234,"value":270},"lupinum-dev\u002Fproject",{"type":234,"value":272},",",{"type":229,"tag":261,"props":274,"children":275},{},[276,278,283],{"type":234,"value":277},"workflow file name, which is ",{"type":229,"tag":237,"props":279,"children":280},{},[281],{"type":234,"value":282},"publish.yml",{"type":234,"value":284}," in the standard,",{"type":229,"tag":261,"props":286,"children":287},{},[288,290,295],{"type":234,"value":289},"GitHub environment, which is ",{"type":229,"tag":237,"props":291,"children":292},{},[293],{"type":234,"value":294},"npm",{"type":234,"value":296},", and",{"type":229,"tag":261,"props":298,"children":299},{},[300],{"type":234,"value":301},"permission, which must allow direct publication.",{"type":229,"tag":230,"props":303,"children":304},{},[305,307,312,314,318],{"type":234,"value":306},"The file name is part of the identity. A trust record for ",{"type":229,"tag":237,"props":308,"children":309},{},[310],{"type":234,"value":311},"release.yml",{"type":234,"value":313}," does\nnot authorize ",{"type":229,"tag":237,"props":315,"children":316},{},[317],{"type":234,"value":282},{"type":234,"value":319},".",{"type":229,"tag":230,"props":321,"children":322},{},[323],{"type":234,"value":324},"List the current record:",{"type":229,"tag":326,"props":327,"children":330},"pre",{"language":328,"class":329},"bash","shiki shiki-themes light-plus dark-plus dark:dark-plus",[331],{"type":229,"tag":237,"props":332,"children":334},{"class":333},"language-bash",[335],{"type":229,"tag":336,"props":337,"children":340},"span",{"class":338,"style":339},"line","display: inline",[341,346,352,357,362],{"type":229,"tag":336,"props":342,"children":344},{"style":343},"color:#795E26;--shiki-dark:#DCDCAA",[345],{"type":234,"value":294},{"type":229,"tag":336,"props":347,"children":349},{"style":348},"color:#A31515;--shiki-dark:#CE9178",[350],{"type":234,"value":351}," trust",{"type":229,"tag":336,"props":353,"children":354},{"style":348},[355],{"type":234,"value":356}," list",{"type":229,"tag":336,"props":358,"children":359},{"style":348},[360],{"type":234,"value":361}," @lupinum\u002Fpackage-name",{"type":229,"tag":336,"props":363,"children":365},{"style":364},"color:#0000FF;--shiki-dark:#569CD6",[366],{"type":234,"value":367}," --json",{"type":229,"tag":230,"props":369,"children":370},{},[371,373,378],{"type":234,"value":372},"Revoke an incorrect record by its ID. Create the correct record with\n",{"type":229,"tag":237,"props":374,"children":375},{},[376],{"type":234,"value":377},"npm trust github ... --allow-publish",{"type":234,"value":319},{"type":229,"tag":245,"props":380,"children":382},{"id":381},"recognize-first-package-behavior",[383],{"type":234,"value":384},"Recognize first-package behavior",{"type":229,"tag":230,"props":386,"children":387},{},[388,393,395,400],{"type":229,"tag":237,"props":389,"children":390},{},[391],{"type":234,"value":392},"npm trust github",{"type":234,"value":394}," returns ",{"type":229,"tag":237,"props":396,"children":397},{},[398],{"type":234,"value":399},"E404",{"type":234,"value":401}," when the package does not exist. npm staged\npublishing also cannot create a new package. Use the documented first npm\nbootstrap. Configure trust immediately after the exact certified tarball is\npublic.",{"type":229,"tag":245,"props":403,"children":405},{"id":404},"check-the-workflow",[406],{"type":234,"value":407},"Check the workflow",{"type":229,"tag":230,"props":409,"children":410},{},[411,413,418,420,424,426,431],{"type":234,"value":412},"The publication job needs ",{"type":229,"tag":237,"props":414,"children":415},{},[416],{"type":234,"value":417},"id-token: write",{"type":234,"value":419},". It must use the protected ",{"type":229,"tag":237,"props":421,"children":422},{},[423],{"type":234,"value":294},{"type":234,"value":425},"\nenvironment and run from the authorized branch. Do not add ",{"type":229,"tag":237,"props":427,"children":428},{},[429],{"type":234,"value":430},"NPM_TOKEN",{"type":234,"value":432}," as a\nfallback.",{"type":229,"tag":230,"props":434,"children":435},{},[436],{"type":234,"value":437},"After correction, rerun the release from the same certified artifact when the\nversion was not published. If the version already exists, do not publish it\nagain.",{"title":439,"searchDepth":440,"depth":440,"links":441},"",4,[442,444,445],{"id":247,"depth":443,"text":250},2,{"id":381,"depth":443,"text":384},{"id":404,"depth":443,"text":407},"markdown","docs",{"source":449,"path":450,"stem":451,"dir":452,"extension":453},"content","docs\u002F5.troubleshooting\u002F2.npm-trusted-publishing.md","docs\u002F5.troubleshooting\u002F2.npm-trusted-publishing","troubleshooting","md",{"requestedPath":180,"resolvedPath":180,"alternates":455},[],{"requested":457,"resolved":458,"usedFallback":9},{},{"locale":8},{"previous":460,"next":463},{"title":169,"id":170,"canonicalKey":171,"locale":8,"draft":9,"path":173,"children":461},[462,463,464,465,466,467,468,469],{"title":176,"id":177,"canonicalKey":178,"locale":8,"draft":9,"path":180},{"title":182,"id":183,"canonicalKey":184,"locale":8,"draft":9,"path":186},{"title":188,"id":189,"canonicalKey":190,"locale":8,"draft":9,"path":192},{"title":194,"id":195,"canonicalKey":196,"locale":8,"draft":9,"path":198},{"title":200,"id":201,"canonicalKey":202,"locale":8,"draft":9,"path":204},{"title":206,"id":207,"canonicalKey":208,"locale":8,"draft":9,"path":210},{"title":212,"id":213,"canonicalKey":214,"locale":8,"draft":9,"path":216},{"title":218,"id":219,"canonicalKey":220,"locale":8,"draft":9,"path":222},{"left":471,"top":471,"width":472,"height":472,"rotate":471,"vFlip":9,"hFlip":9,"body":473},0,24,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 19h8M4 17l6-6l-6-6\"\u002F>",{"left":471,"top":471,"width":472,"height":472,"rotate":471,"vFlip":9,"hFlip":9,"body":475},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Crect width=\"8\" height=\"4\" x=\"8\" y=\"2\" rx=\"1\" ry=\"1\"\u002F>\u003Cpath d=\"M16 4h2a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h2\"\u002F>\u003C\u002Fg>",1786663365080]