[aniketmaurya]

Summary

• make @celestoai/smolfs publishable as a public scoped npm package
• add a tag-driven publish-node.yml workflow using npm trusted publishing/OIDC
• build Linux/macOS x64 and arm64 native bindings before publishing one npm package
• add npm package README and release setup docs

npm trusted publisher setup

Configure npm trusted publishing for @celestoai/smolfs with:

• Publisher: GitHub Actions
• Organization/user: CelestoAI
• Repository: smolfs
• Workflow filename: publish-node.yml
• Environment: npm
• Allowed action: npm publish

Validation

• checked official npm trusted-publishing docs for current OIDC requirements
• actionlint .github/workflows/*.yml
• ruby -e 'require "yaml"; Dir[".github/workflows/*.yml"].each { |f| YAML.load_file(f); puts "ok #{f}" }'
• git diff --check
• cd bindings/node && NPM_CONFIG_CACHE=/tmp/smolfs-npm-cache npm test
• cd bindings/node && NPM_CONFIG_CACHE=/tmp/smolfs-npm-cache npm run build -- --target aarch64-apple-darwin
• cd bindings/node && NPM_CONFIG_CACHE=/tmp/smolfs-npm-cache npm pack --dry-run --json

Note: npm publish --dry-run printed the expected package contents locally, then hung while contacting npm auth/registry, so I stopped it and used npm pack --dry-run for the local package-content validation.