bmad-dashboard 1.0.10 → 1.0.11

package/README.md

@@ -159,9 +159,9 @@ On every **push to `main`**, GitHub Actions:
 1. Runs tests and build in the `dashboard/` directory.
 2. If tests pass, bumps the **patch** version (e.g. `1.0.9` → `1.0.10`), publishes to npm via **Trusted Publishers (OIDC)**, and commits the version bump back to `main` (with message `chore(release): 1.0.10 [skip ci]` so the release commit does not trigger another publish).
 
-**Setup (one-time):** Use [npm Trusted Publishers](https://docs.npmjs.com/trusted-publishers). Your **npm account must be linked to your GitHub account** (npm → profile/Account → link GitHub). Then on [npmjs.com](https://www.npmjs.com/) go to **Packages** → **bmad-dashboard** → **Settings** → **Trusted publishing**, choose **GitHub Actions**, set **Workflow filename** to `release.yml`, and save. The workflow file is `.github/workflows/release.yml`.
+**Setup (one-time), either:** **Option A — Granular token (recommended):** Create a [Granular access token](https://docs.npmjs.com/about-access-tokens) on npm with **read and write** access for this package and **Bypass 2FA** enabled. Add it as repo secret **`NPM_TOKEN`** under **Settings** → **Secrets and variables** → **Actions**. **Option B — Trusted Publishers (OIDC):** Link npm to GitHub and set Trusted publishing for this package (workflow `release.yml`) on npmjs.com; leave `NPM_TOKEN` unset. The workflow file is `.github/workflows/release.yml`.
 
-**If you get 404 on publish:** The package must exist on npm before you can add a Trusted Publisher (you configure it in the package’s Settings). If [npmjs.com/package/bmad-dashboard](https://www.npmjs.com/package/bmad-dashboard) returns 404, do **one manual publish** from your machine: `cd dashboard && npm login && npm publish --access public` (enter OTP when prompted). After that, add the Trusted Publisher for `release.yml` in the package settings; then CI can publish future versions.
+**If OIDC gives 404 on publish:** The package must exist on npm before you can add a Trusted Publisher (you configure it in the package’s Settings). If [npmjs.com/package/bmad-dashboard](https://www.npmjs.com/package/bmad-dashboard) returns 404, do **one manual publish** from your machine: `cd dashboard && npm login && npm publish --access public` (enter OTP when prompted). After that, add the Trusted Publisher for `release.yml` in the package settings; then CI can publish future versions.
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bmad-dashboard",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "Local dashboard to view BMAD project state (phase, artifacts, stories, sprint) in real time",
   "type": "module",
   "bin": {