diff --git a/.env.example b/.env.example
index 77b32ab..0443bd5 100644
--- a/.env.example
+++ b/.env.example
@@ -1,3 +1,5 @@
+# Canonical public site URL (used for CoinPay redirect/webhook URLs and secure cookies)
+PUBLIC_URL=https://logicsrc.com
 COMMANDBOARD_API_URL=http://localhost:4010
 COMMANDBOARD_TOKEN=
 COMMANDBOARD_DID=
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6ab5961..d9a5da3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,6 +22,10 @@ jobs:
 
       - run: npm ci
 
+      # Workspace packages (e.g. @logicsrc/plugin-core, @logicsrc/validators)
+      # publish from dist/, so dependents can't resolve them until built.
+      - run: npm run build
+
       - run: npm test
         env:
           CI: true