diff --git a/.sdk-source.json b/.sdk-source.json
index 8c3d8c3..a61a460 100644
--- a/.sdk-source.json
+++ b/.sdk-source.json
@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "sourceCommit": "650b692a8b5794e0ee6795a30bb390cd0c8798f9",
+  "sourceCommit": "90f39bd56dfea12c4b4f850d90ed181c8a4402c7",
   "contract": "contracts/2026.07/public-sdk-contract.json",
   "packages": [
     "typescript"
diff --git a/scripts/exchange-npm-oidc.ts b/scripts/exchange-npm-oidc.ts
index 7b36c36..4370366 100644
--- a/scripts/exchange-npm-oidc.ts
+++ b/scripts/exchange-npm-oidc.ts
@@ -2,6 +2,8 @@ import { appendFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 
 const PACKAGE_NAME = "@ignitionai/sdk";
+// Match npm-package-arg's escapedName format used by npm's own OIDC client.
+const ESCAPED_PACKAGE_NAME = "@ignitionai%2fsdk";
 const EXPECTED_REPOSITORY = "IgnitionAI/sdk";
 const EXPECTED_AUDIENCE = "npm:registry.npmjs.org";
 const EXPECTED_SUBJECT = `repo:${EXPECTED_REPOSITORY}:environment:npm`;
@@ -47,7 +49,7 @@ if (!workflowRef.includes(`${EXPECTED_REPOSITORY}/.github/workflows/release.yml@
 }
 
 const exchangeUrl = new URL(
-  `/-/npm/v1/oidc/token/exchange/package/${encodeURIComponent(PACKAGE_NAME)}`,
+  `/-/npm/v1/oidc/token/exchange/package/${ESCAPED_PACKAGE_NAME}`,
   "https://registry.npmjs.org",
 );
 const exchangeResponse = await fetch(exchangeUrl, {