diff --git a/.github/workflows/bank_feeds_generate.yaml b/.github/workflows/bank_feeds_generate.yaml
index ef99328c0..348b686a3 100644
--- a/.github/workflows/bank_feeds_generate.yaml
+++ b/.github/workflows/bank_feeds_generate.yaml
@@ -1,3 +1,7 @@
+# Written by sdk-codegen; do not edit by hand.
+# Generation no longer runs in this repo: Codat SDK Codegen generates this SDK
+# and opens a versioned PR here, dispatched by the oas pipeline. This stub only
+# says so.
 name: Generate Bank Feeds library
 'on':
   workflow_dispatch:
@@ -7,18 +11,16 @@ name: Generate Bank Feeds library
         type: boolean
         default: false
       set_version:
-        description: optionally set a specific SDK version
+        description: Optionally set a specific SDK version.
         type: string
 jobs:
   generate:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
-    with:
-      force: ${{ github.event.inputs.force }}
-      mode: pr
-      speakeasy_version: latest
-      set_version: ${{ github.event.inputs.set_version }}
-      target: bank-feeds-library
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generation moved to Codat SDK Codegen
+        run: |
+          echo "::warning::This workflow no longer generates anything. bank-feeds is generated by Codat SDK Codegen, dispatched by the oas pipeline, which opens a versioned PR on this repo."
+          # Exits 0 because the oas pipeline still runs this workflow on every OAS
+          # merge; flip to exit 1 in the same change that switches the oas trigger
+          # to the repository dispatch, so stray runs become loud.
+          exit 0
diff --git a/.github/workflows/bank_feeds_release.yaml b/.github/workflows/bank_feeds_release.yaml
index e92efb991..e44aacce3 100644
--- a/.github/workflows/bank_feeds_release.yaml
+++ b/.github/workflows/bank_feeds_release.yaml
@@ -1,3 +1,11 @@
+# Written by sdk-codegen; do not edit by hand.
+# The upload to NuGet, the packaging checks, the tag and the GitHub release run
+# centrally in Codat SDK Codegen. This stub only forwards the release trigger
+# there.
+#
+# Set the PUBLISH_PRERELEASE Actions variable on this repo to rc1 to make the
+# next merge publish <version>-rc1 rather than <version>. Clear it once the
+# real version has gone out.
 name: Release Bank Feeds library
 'on':
   push:
@@ -5,11 +13,34 @@ name: Release Bank Feeds library
     - bank-feeds/RELEASES.md
     branches:
     - main
+  workflow_dispatch: {}
+concurrency: publish-bank-feeds-csharp
 jobs:
   publish:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the App secrets are set
+        env:
+          APP_ID_SET: ${{ secrets.PUBLISH_TRIGGER_APP_ID != '' }}
+          APP_KEY_SET: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY != '' }}
+        run: |
+          if [ "$APP_ID_SET" != "true" ] || [ "$APP_KEY_SET" != "true" ]; then
+            echo "::error::PUBLISH_TRIGGER_APP_ID / PUBLISH_TRIGGER_APP_PRIVATE_KEY secrets are not set - needed to mint the token that sends the publish-csharp repository dispatch to codat-internal/sdk-codegen"
+            exit 1
+          fi
+      - name: Mint a token from the GitHub App
+        id: app_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.PUBLISH_TRIGGER_APP_ID }}
+          private-key: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY }}
+          owner: codat-internal
+          repositories: sdk-codegen
+      - name: Hand the release to the central publish pipeline
+        run: |
+          curl --fail-with-body --silent --show-error -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ steps.app_token.outputs.token }}" \
+            https://api.github.com/repos/codat-internal/sdk-codegen/dispatches \
+            -d '{"event_type": "publish-csharp", "client_payload": {"product": "bank-feeds", "sha": "${{ github.sha }}", "sdk_repo": "${{ github.repository }}", "prerelease": "${{ vars.PUBLISH_PRERELEASE }}"}}'
+          echo "publish-csharp dispatch sent to codat-internal/sdk-codegen for bank-feeds @ ${{ github.sha }}${{ vars.PUBLISH_PRERELEASE && format(' as a {0} pre-release', vars.PUBLISH_PRERELEASE) || '' }}"
diff --git a/.github/workflows/lending_generate.yaml b/.github/workflows/lending_generate.yaml
index 1e5e7dda0..65758b800 100644
--- a/.github/workflows/lending_generate.yaml
+++ b/.github/workflows/lending_generate.yaml
@@ -1,3 +1,7 @@
+# Written by sdk-codegen; do not edit by hand.
+# Generation no longer runs in this repo: Codat SDK Codegen generates this SDK
+# and opens a versioned PR here, dispatched by the oas pipeline. This stub only
+# says so.
 name: Generate Lending library
 'on':
   workflow_dispatch:
@@ -7,18 +11,16 @@ name: Generate Lending library
         type: boolean
         default: false
       set_version:
-        description: optionally set a specific SDK version
+        description: Optionally set a specific SDK version.
         type: string
 jobs:
   generate:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
-    with:
-      force: ${{ github.event.inputs.force }}
-      mode: pr
-      speakeasy_version: latest
-      set_version: ${{ github.event.inputs.set_version }}
-      target: lending-library
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generation moved to Codat SDK Codegen
+        run: |
+          echo "::warning::This workflow no longer generates anything. lending is generated by Codat SDK Codegen, dispatched by the oas pipeline, which opens a versioned PR on this repo."
+          # Exits 0 because the oas pipeline still runs this workflow on every OAS
+          # merge; flip to exit 1 in the same change that switches the oas trigger
+          # to the repository dispatch, so stray runs become loud.
+          exit 0
diff --git a/.github/workflows/lending_release.yaml b/.github/workflows/lending_release.yaml
index 67ac3fe66..d91ae7869 100644
--- a/.github/workflows/lending_release.yaml
+++ b/.github/workflows/lending_release.yaml
@@ -1,3 +1,11 @@
+# Written by sdk-codegen; do not edit by hand.
+# The upload to NuGet, the packaging checks, the tag and the GitHub release run
+# centrally in Codat SDK Codegen. This stub only forwards the release trigger
+# there.
+#
+# Set the PUBLISH_PRERELEASE Actions variable on this repo to rc1 to make the
+# next merge publish <version>-rc1 rather than <version>. Clear it once the
+# real version has gone out.
 name: Release Lending library
 'on':
   push:
@@ -5,11 +13,34 @@ name: Release Lending library
     - lending/RELEASES.md
     branches:
     - main
+  workflow_dispatch: {}
+concurrency: publish-lending-csharp
 jobs:
   publish:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the App secrets are set
+        env:
+          APP_ID_SET: ${{ secrets.PUBLISH_TRIGGER_APP_ID != '' }}
+          APP_KEY_SET: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY != '' }}
+        run: |
+          if [ "$APP_ID_SET" != "true" ] || [ "$APP_KEY_SET" != "true" ]; then
+            echo "::error::PUBLISH_TRIGGER_APP_ID / PUBLISH_TRIGGER_APP_PRIVATE_KEY secrets are not set - needed to mint the token that sends the publish-csharp repository dispatch to codat-internal/sdk-codegen"
+            exit 1
+          fi
+      - name: Mint a token from the GitHub App
+        id: app_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.PUBLISH_TRIGGER_APP_ID }}
+          private-key: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY }}
+          owner: codat-internal
+          repositories: sdk-codegen
+      - name: Hand the release to the central publish pipeline
+        run: |
+          curl --fail-with-body --silent --show-error -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ steps.app_token.outputs.token }}" \
+            https://api.github.com/repos/codat-internal/sdk-codegen/dispatches \
+            -d '{"event_type": "publish-csharp", "client_payload": {"product": "lending", "sha": "${{ github.sha }}", "sdk_repo": "${{ github.repository }}", "prerelease": "${{ vars.PUBLISH_PRERELEASE }}"}}'
+          echo "publish-csharp dispatch sent to codat-internal/sdk-codegen for lending @ ${{ github.sha }}${{ vars.PUBLISH_PRERELEASE && format(' as a {0} pre-release', vars.PUBLISH_PRERELEASE) || '' }}"
diff --git a/.github/workflows/platform_generate.yaml b/.github/workflows/platform_generate.yaml
index d240c903a..1dbd05188 100644
--- a/.github/workflows/platform_generate.yaml
+++ b/.github/workflows/platform_generate.yaml
@@ -1,3 +1,7 @@
+# Written by sdk-codegen; do not edit by hand.
+# Generation no longer runs in this repo: Codat SDK Codegen generates this SDK
+# and opens a versioned PR here, dispatched by the oas pipeline. This stub only
+# says so.
 name: Generate Platform library
 'on':
   workflow_dispatch:
@@ -7,18 +11,16 @@ name: Generate Platform library
         type: boolean
         default: false
       set_version:
-        description: optionally set a specific SDK version
+        description: Optionally set a specific SDK version.
         type: string
 jobs:
   generate:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
-    with:
-      force: ${{ github.event.inputs.force }}
-      mode: pr
-      speakeasy_version: latest
-      set_version: ${{ github.event.inputs.set_version }}
-      target: platform-library
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generation moved to Codat SDK Codegen
+        run: |
+          echo "::warning::This workflow no longer generates anything. platform is generated by Codat SDK Codegen, dispatched by the oas pipeline, which opens a versioned PR on this repo."
+          # Exits 0 because the oas pipeline still runs this workflow on every OAS
+          # merge; flip to exit 1 in the same change that switches the oas trigger
+          # to the repository dispatch, so stray runs become loud.
+          exit 0
diff --git a/.github/workflows/platform_release.yaml b/.github/workflows/platform_release.yaml
index 54421051f..537ff70dd 100644
--- a/.github/workflows/platform_release.yaml
+++ b/.github/workflows/platform_release.yaml
@@ -1,3 +1,11 @@
+# Written by sdk-codegen; do not edit by hand.
+# The upload to NuGet, the packaging checks, the tag and the GitHub release run
+# centrally in Codat SDK Codegen. This stub only forwards the release trigger
+# there.
+#
+# Set the PUBLISH_PRERELEASE Actions variable on this repo to rc1 to make the
+# next merge publish <version>-rc1 rather than <version>. Clear it once the
+# real version has gone out.
 name: Release Platform library
 'on':
   push:
@@ -5,11 +13,34 @@ name: Release Platform library
     - platform/RELEASES.md
     branches:
     - main
+  workflow_dispatch: {}
+concurrency: publish-platform-csharp
 jobs:
   publish:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the App secrets are set
+        env:
+          APP_ID_SET: ${{ secrets.PUBLISH_TRIGGER_APP_ID != '' }}
+          APP_KEY_SET: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY != '' }}
+        run: |
+          if [ "$APP_ID_SET" != "true" ] || [ "$APP_KEY_SET" != "true" ]; then
+            echo "::error::PUBLISH_TRIGGER_APP_ID / PUBLISH_TRIGGER_APP_PRIVATE_KEY secrets are not set - needed to mint the token that sends the publish-csharp repository dispatch to codat-internal/sdk-codegen"
+            exit 1
+          fi
+      - name: Mint a token from the GitHub App
+        id: app_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.PUBLISH_TRIGGER_APP_ID }}
+          private-key: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY }}
+          owner: codat-internal
+          repositories: sdk-codegen
+      - name: Hand the release to the central publish pipeline
+        run: |
+          curl --fail-with-body --silent --show-error -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ steps.app_token.outputs.token }}" \
+            https://api.github.com/repos/codat-internal/sdk-codegen/dispatches \
+            -d '{"event_type": "publish-csharp", "client_payload": {"product": "platform", "sha": "${{ github.sha }}", "sdk_repo": "${{ github.repository }}", "prerelease": "${{ vars.PUBLISH_PRERELEASE }}"}}'
+          echo "publish-csharp dispatch sent to codat-internal/sdk-codegen for platform @ ${{ github.sha }}${{ vars.PUBLISH_PRERELEASE && format(' as a {0} pre-release', vars.PUBLISH_PRERELEASE) || '' }}"
diff --git a/.github/workflows/sync_for_expenses_generate.yaml b/.github/workflows/sync_for_expenses_generate.yaml
index 85a355d05..85392ed5b 100644
--- a/.github/workflows/sync_for_expenses_generate.yaml
+++ b/.github/workflows/sync_for_expenses_generate.yaml
@@ -1,3 +1,7 @@
+# Written by sdk-codegen; do not edit by hand.
+# Generation no longer runs in this repo: Codat SDK Codegen generates this SDK
+# and opens a versioned PR here, dispatched by the oas pipeline. This stub only
+# says so.
 name: Generate Sync for Expenses library
 'on':
   workflow_dispatch:
@@ -7,18 +11,16 @@ name: Generate Sync for Expenses library
         type: boolean
         default: false
       set_version:
-        description: optionally set a specific SDK version
+        description: Optionally set a specific SDK version.
         type: string
 jobs:
   generate:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
-    with:
-      force: ${{ github.event.inputs.force }}
-      mode: pr
-      speakeasy_version: latest
-      set_version: ${{ github.event.inputs.set_version }}
-      target: sync-for-expenses-library
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generation moved to Codat SDK Codegen
+        run: |
+          echo "::warning::This workflow no longer generates anything. sync-for-expenses is generated by Codat SDK Codegen, dispatched by the oas pipeline, which opens a versioned PR on this repo."
+          # Exits 0 because the oas pipeline still runs this workflow on every OAS
+          # merge; flip to exit 1 in the same change that switches the oas trigger
+          # to the repository dispatch, so stray runs become loud.
+          exit 0
diff --git a/.github/workflows/sync_for_expenses_release.yaml b/.github/workflows/sync_for_expenses_release.yaml
index f61275f96..ee7e3f933 100644
--- a/.github/workflows/sync_for_expenses_release.yaml
+++ b/.github/workflows/sync_for_expenses_release.yaml
@@ -1,3 +1,11 @@
+# Written by sdk-codegen; do not edit by hand.
+# The upload to NuGet, the packaging checks, the tag and the GitHub release run
+# centrally in Codat SDK Codegen. This stub only forwards the release trigger
+# there.
+#
+# Set the PUBLISH_PRERELEASE Actions variable on this repo to rc1 to make the
+# next merge publish <version>-rc1 rather than <version>. Clear it once the
+# real version has gone out.
 name: Release Sync for Expenses library
 'on':
   push:
@@ -5,11 +13,34 @@ name: Release Sync for Expenses library
     - sync-for-expenses/RELEASES.md
     branches:
     - main
+  workflow_dispatch: {}
+concurrency: publish-sync-for-expenses-csharp
 jobs:
   publish:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the App secrets are set
+        env:
+          APP_ID_SET: ${{ secrets.PUBLISH_TRIGGER_APP_ID != '' }}
+          APP_KEY_SET: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY != '' }}
+        run: |
+          if [ "$APP_ID_SET" != "true" ] || [ "$APP_KEY_SET" != "true" ]; then
+            echo "::error::PUBLISH_TRIGGER_APP_ID / PUBLISH_TRIGGER_APP_PRIVATE_KEY secrets are not set - needed to mint the token that sends the publish-csharp repository dispatch to codat-internal/sdk-codegen"
+            exit 1
+          fi
+      - name: Mint a token from the GitHub App
+        id: app_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.PUBLISH_TRIGGER_APP_ID }}
+          private-key: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY }}
+          owner: codat-internal
+          repositories: sdk-codegen
+      - name: Hand the release to the central publish pipeline
+        run: |
+          curl --fail-with-body --silent --show-error -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ steps.app_token.outputs.token }}" \
+            https://api.github.com/repos/codat-internal/sdk-codegen/dispatches \
+            -d '{"event_type": "publish-csharp", "client_payload": {"product": "sync-for-expenses", "sha": "${{ github.sha }}", "sdk_repo": "${{ github.repository }}", "prerelease": "${{ vars.PUBLISH_PRERELEASE }}"}}'
+          echo "publish-csharp dispatch sent to codat-internal/sdk-codegen for sync-for-expenses @ ${{ github.sha }}${{ vars.PUBLISH_PRERELEASE && format(' as a {0} pre-release', vars.PUBLISH_PRERELEASE) || '' }}"
diff --git a/.github/workflows/sync_for_payables_generate.yaml b/.github/workflows/sync_for_payables_generate.yaml
index 171e0de10..d6b70eab3 100644
--- a/.github/workflows/sync_for_payables_generate.yaml
+++ b/.github/workflows/sync_for_payables_generate.yaml
@@ -1,3 +1,7 @@
+# Written by sdk-codegen; do not edit by hand.
+# Generation no longer runs in this repo: Codat SDK Codegen generates this SDK
+# and opens a versioned PR here, dispatched by the oas pipeline. This stub only
+# says so.
 name: Generate Sync for Payables library
 'on':
   workflow_dispatch:
@@ -7,18 +11,16 @@ name: Generate Sync for Payables library
         type: boolean
         default: false
       set_version:
-        description: optionally set a specific SDK version
+        description: Optionally set a specific SDK version.
         type: string
 jobs:
   generate:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
-    with:
-      force: ${{ github.event.inputs.force }}
-      mode: pr
-      speakeasy_version: latest
-      set_version: ${{ github.event.inputs.set_version }}
-      target: sync-for-payables-library
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generation moved to Codat SDK Codegen
+        run: |
+          echo "::warning::This workflow no longer generates anything. sync-for-payables is generated by Codat SDK Codegen, dispatched by the oas pipeline, which opens a versioned PR on this repo."
+          # Exits 0 because the oas pipeline still runs this workflow on every OAS
+          # merge; flip to exit 1 in the same change that switches the oas trigger
+          # to the repository dispatch, so stray runs become loud.
+          exit 0
diff --git a/.github/workflows/sync_for_payables_release.yaml b/.github/workflows/sync_for_payables_release.yaml
index c64ac2c3d..11bafacc9 100644
--- a/.github/workflows/sync_for_payables_release.yaml
+++ b/.github/workflows/sync_for_payables_release.yaml
@@ -1,3 +1,11 @@
+# Written by sdk-codegen; do not edit by hand.
+# The upload to NuGet, the packaging checks, the tag and the GitHub release run
+# centrally in Codat SDK Codegen. This stub only forwards the release trigger
+# there.
+#
+# Set the PUBLISH_PRERELEASE Actions variable on this repo to rc1 to make the
+# next merge publish <version>-rc1 rather than <version>. Clear it once the
+# real version has gone out.
 name: Release Sync for Payables library
 'on':
   push:
@@ -5,11 +13,34 @@ name: Release Sync for Payables library
     - sync-for-payables/RELEASES.md
     branches:
     - main
+  workflow_dispatch: {}
+concurrency: publish-sync-for-payables-csharp
 jobs:
   publish:
-    uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
-    secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
-      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check the App secrets are set
+        env:
+          APP_ID_SET: ${{ secrets.PUBLISH_TRIGGER_APP_ID != '' }}
+          APP_KEY_SET: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY != '' }}
+        run: |
+          if [ "$APP_ID_SET" != "true" ] || [ "$APP_KEY_SET" != "true" ]; then
+            echo "::error::PUBLISH_TRIGGER_APP_ID / PUBLISH_TRIGGER_APP_PRIVATE_KEY secrets are not set - needed to mint the token that sends the publish-csharp repository dispatch to codat-internal/sdk-codegen"
+            exit 1
+          fi
+      - name: Mint a token from the GitHub App
+        id: app_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.PUBLISH_TRIGGER_APP_ID }}
+          private-key: ${{ secrets.PUBLISH_TRIGGER_APP_PRIVATE_KEY }}
+          owner: codat-internal
+          repositories: sdk-codegen
+      - name: Hand the release to the central publish pipeline
+        run: |
+          curl --fail-with-body --silent --show-error -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ steps.app_token.outputs.token }}" \
+            https://api.github.com/repos/codat-internal/sdk-codegen/dispatches \
+            -d '{"event_type": "publish-csharp", "client_payload": {"product": "sync-for-payables", "sha": "${{ github.sha }}", "sdk_repo": "${{ github.repository }}", "prerelease": "${{ vars.PUBLISH_PRERELEASE }}"}}'
+          echo "publish-csharp dispatch sent to codat-internal/sdk-codegen for sync-for-payables @ ${{ github.sha }}${{ vars.PUBLISH_PRERELEASE && format(' as a {0} pre-release', vars.PUBLISH_PRERELEASE) || '' }}"