[derekbar90]

Summary

• Add Panoptic token ID method constants, DTOs, and typed host wrappers for the app-loader token-id runtime surface.
• Provide build-by-legs and build-by-operations request DTOs for the shared token-id build method.
• Extend the Panoptic consumer compile fixture to cover the new wrapper exports.
• Configure npm publishing for GitHub Actions OIDC by granting id-token: write, removing the npm token secret, loading @semantic-release/npm, and upgrading the release plugin stack.
• Limit release and docs deployment to pushes on master.

Validation

• yarn asbuild
• yarn jest --coverage=false
• npx semantic-release --dry-run --no-ci
• env npm_config_cache=/private/tmp/strategy-utils-npm-cache npx --yes npm@11.18.0 trust github @steerprotocol/strategy-utils --repo SteerProtocol/strategy-utils-assemblyscript --file nodejs.yml --allow-publish --dry-run --json

Registry setup

• The npm trusted-publisher dry-run succeeded for package @steerprotocol/strategy-utils, workflow nodejs.yml, and repo SteerProtocol/strategy-utils-assemblyscript.
• The real npm trust github ... --allow-publish --yes request reached npm but returned E401 because this machine is not logged in to npm. npm also reported that two-factor authentication is required for this operation.

Notes

• Left the existing local package.json version change unstaged because it was already present before this work.

[github-actions]

🎉 This PR is included in version 3.3.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀