bun-typescript-starter

Authenticate to npmjs.com using credentials from 1Password via op CLI. Automates username/password login, then triggers passkey 2FA via 1Password browser extension (single human click to approve). Handles Cloudflare challenges.

Set up npm publishing for a bun-typescript-starter repo. Automates token creation, first publish, OIDC trusted publishing, and GitHub secrets via npm-browser-agent. Use when a new repo needs publishing configured.

Sync governed hardening changes from a template repo into downstream repositories. Use when uplifting repos after starter-template changes, propagating workflow/release hardening, or preparing a sync PR from a known template commit range.