diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 8c09b9f..30966bd 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -91,6 +91,24 @@ jobs:
           # Needed for the tag lookup below.
           fetch-depth: 0
 
+      # TEMPORARY: triage for the npm E401 on publish. Prints lengths and
+      # status codes only, never a token value.
+      - name: Triage the publish token
+        env:
+          TOKEN: ${{ secrets.GITEA_TOKEN }}
+        run: |
+          echo "token length: ${#TOKEN}"
+          echo -n "GET /api/v1/user           -> "
+          curl -s -o /dev/null -w '%{http_code}\n' \
+            -H "Authorization: token $TOKEN" "https://${GITEA_HOST}/api/v1/user"
+          echo -n "GET /api/v1/packages/owner -> "
+          curl -s -o /dev/null -w '%{http_code}\n' \
+            -H "Authorization: token $TOKEN" "https://${GITEA_HOST}/api/v1/packages/${GITEA_OWNER}?limit=1"
+          echo -n "npm registry GET (basic)   -> "
+          curl -s -o /dev/null -w '%{http_code}\n' \
+            -u "${GITEA_OWNER}:$TOKEN" \
+            "https://${GITEA_HOST}/api/packages/${GITEA_OWNER}/npm/@maxvojtkov%2Fpulumi-dokploy"
+
       - uses: actions/checkout@v4
         with:
           repository: ${{ env.UPSTREAM_REPO }}