fix(ci): improve npm authentication in GitHub Actions

- Skip npm whoami check in CI when NODE_AUTH_TOKEN is set
- Add CI environment variable to workflow
- Use bash shell explicitly and fix npmrc permissions
- Remove ${} syntax to prevent shell expansion issues

Author: moazbuilds

.github/workflows/build-binaries.yml

@@ -70,6 +70,9 @@ jobs:
         if: startsWith(github.ref, 'refs/tags/v')
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          CI: true
+        shell: bash
         run: |
-          echo "//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}" > ~/.npmrc
+          echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > ~/.npmrc
+          chmod 600 ~/.npmrc
           bun scripts/publish-platform.mjs --tag latest --access public

scripts/publish-platform.mjs

@@ -84,14 +84,20 @@ console.log(`${dim}Access:${reset} ${access}`);
 console.log(`${dim}Dry run:${reset} ${dryRun ? 'yes' : 'no'}\n`);
 
 try {
-  // Verify npm authentication
-  console.log(`${cyan}→${reset} Verifying npm authentication...`);
-  try {
-    execSync('npm whoami', { stdio: 'pipe' });
-    console.log(`${green}✓${reset} ${dim}Authenticated${reset}\n`);
-  } catch {
-    console.error(`${red}✗${reset} Not logged in to npm. Run ${bold}npm login${reset} first.`);
-    process.exit(1);
+  // Verify npm authentication (skip in CI if NODE_AUTH_TOKEN is set)
+  const isCI = process.env.CI === 'true' || process.env.NODE_AUTH_TOKEN;
+
+  if (!isCI) {
+    console.log(`${cyan}→${reset} Verifying npm authentication...`);
+    try {
+      execSync('npm whoami', { stdio: 'pipe' });
+      console.log(`${green}✓${reset} ${dim}Authenticated${reset}\n`);
+    } catch {
+      console.error(`${red}✗${reset} Not logged in to npm. Run ${bold}npm login${reset} first.`);
+      process.exit(1);
+    }
+  } else {
+    console.log(`${cyan}→${reset} Running in CI mode with NODE_AUTH_TOKEN\n`);
   }
 
   // Build publish command