From 783d2b921ac153ea930f4629b43491cc97f7f43f Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Sun, 14 Dec 2025 22:37:28 +0100
Subject: [PATCH] fix(publish): store PyPI token per user

https://chatgpt.com/share/693f2e20-b94c-800f-9d8e-0c88187f7be6
---
 src/pkgmgr/actions/publish/workflow.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/pkgmgr/actions/publish/workflow.py b/src/pkgmgr/actions/publish/workflow.py
index b35aca8..3fe4dd9 100644
--- a/src/pkgmgr/actions/publish/workflow.py
+++ b/src/pkgmgr/actions/publish/workflow.py
@@ -84,10 +84,13 @@ def publish(
         raise RuntimeError("No build artifacts found in dist/.")
 
     resolver = TokenResolver()
+
+    # Store PyPI token per OS user (keyring is already user-scoped).
+    # Do NOT scope by project name.
     token = resolver.get_token(
         provider_kind="pypi",
         host=target.host,
-        owner=target.project,
+        owner=None,
         options=ResolutionOptions(
             interactive=interactive,
             allow_prompt=allow_prompt,