P1: NPM publish pipeline + package contents control #23

Activity

1. Kinin-Code-Offical

   added

   Priority: P1

   Type: chore

   Area: npm

   P1

   npm

   release

   enhancementNew feature or requestNew feature or request

   on Dec 21, 2025
2. Kinin-Code-Offical

   added this to the P1 – Operations & Supportability milestone on Dec 21, 2025
3. Kinin-Code-Offical commented on Dec 22, 2025

   

   Kinin-Code-Offical

   on Dec 22, 2025

   OwnerAuthor

   More actions

   Plan:

   • Add npm publish GitHub Actions workflow triggered by GitHub Release (and workflow_dispatch) to publish the CLI package.
   • Constrain npm package contents via package.json files whitelist.
   • Ensure publish uses the release tag version and runs build before publish.

   Risks:

   • Missing NPM_TOKEN secret will cause publish to fail; document requirement in workflow.

   Tests:

   • npm ci
   • npm run lint
   • npm test
   • npm run build
4. Kinin-Code-Offical

   closed this as completedin #40on Dec 22, 2025
5. Kinin-Code-Offical commented on Dec 22, 2025

   

   Kinin-Code-Offical

   on Dec 22, 2025

   OwnerAuthor

   More actions

   PR merged: #40
   Merge commit: 1acadcd
   Tests: npm ci, npm run lint, npm test, npm run build