feat: restructure local npm registry setup and update publish scripts

Author: nasdan

.github/workflows/pkg-publish.yml

@@ -36,4 +36,5 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
           VSCE_PAT: ${{ secrets.VSCE_TOKEN }}

local-npm-registry/.gitignore

@@ -1,2 +1 @@
-storage/
-htpasswd
+storage

local-npm-registry/config.yaml

@@ -0,0 +1,14 @@
+storage: ./storage
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@lemoncode/*':
+    access: $anonymous
+    publish: $anonymous
+  '**':
+    access: $anonymous
+    publish: $anonymous
+    proxy: npmjs

local-npm-registry/config/config.yaml

@@ -0,0 +1,9 @@
+services:
+  local-npm-registry:
+    image: verdaccio/verdaccio
+    ports:
+      - '4873:4873'
+    volumes:
+      - ./config:/verdaccio/conf
+volumes:
+  config:

local-npm-registry/docker-compose.yaml

@@ -3,9 +3,8 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "start": "verdaccio --config ./config.yaml --listen 4873"
-  },
-  "devDependencies": {
-    "verdaccio": "6.5.0"
+    "prestart": "npm stop",
+    "start": "docker compose up -d",
+    "stop": "docker compose down --remove-orphans"
   }
 }

local-npm-registry/package.json

@@ -1,58 +1,26 @@
-import { execSync, spawn } from 'node:child_process';
-import { resolve } from 'node:path';
+import childProcess from 'node:child_process';
+import fs from 'node:fs/promises';
+import path from 'node:path';
 
-const REGISTRY_URL = 'http://localhost:4873';
-const ROOT = resolve(import.meta.dirname, '..');
-const CONFIG = resolve(import.meta.dirname, 'config.yaml');
+const [...publishCommandArgs] = process.argv.slice(2);
+const localRegistryConfig = `registry=http://localhost:4873
+//localhost:4873/:_authToken="local-token"
+@lemoncode:registry=http://localhost:4873
+`;
+const publishCommand = publishCommandArgs.join(' ');
+const NPMRC_FILE_PATH = path.resolve(process.cwd(), '.npmrc');
 
-const command = process.argv[2];
-
-const startVerdaccio = () =>
-  spawn('npx', ['verdaccio', '--config', CONFIG, '--listen', '4873'], {
-    cwd: import.meta.dirname,
-    stdio: 'inherit',
-    shell: true,
-  });
-
-const waitForRegistry = async (url, retries = 30, delay = 1000) => {
-  for (let i = 0; i < retries; i++) {
-    try {
-      const res = await fetch(url);
-      if (res.ok) return;
-    } catch {}
-    await new Promise(r => setTimeout(r, delay));
-  }
-  throw new Error(`Registry at ${url} did not start in time`);
-};
-
-const run = (cmd, opts = {}) =>
-  execSync(cmd, {
-    stdio: 'inherit',
-    cwd: ROOT,
-    env: { ...process.env, npm_config_registry: REGISTRY_URL },
-    ...opts,
-  });
-
-if (command === 'start') {
-  // Just start Verdaccio (foreground)
-  const child = startVerdaccio();
-  child.on('exit', code => process.exit(code ?? 0));
-} else if (command === 'publish') {
-  // Full flow: start Verdaccio → changeset version → changeset publish → stop
-  const child = startVerdaccio();
+let originalContent = '';
+try {
+  originalContent = await fs.readFile(NPMRC_FILE_PATH, 'utf-8');
+} catch {
+  originalContent = '';
+}
 
-  try {
-    console.log('Waiting for Verdaccio to start...');
-    await waitForRegistry(REGISTRY_URL);
-    console.log('Verdaccio ready. Running changeset version...');
-    run('npx changeset version');
-    console.log('Publishing to local registry...');
-    run('npx changeset publish');
-    console.log('Done! Packages published to local Verdaccio.');
-  } finally {
-    child.kill();
-  }
-} else {
-  console.error('Usage: node publish.js <start|publish>');
-  process.exit(1);
+try {
+  const newContent = originalContent.trimEnd() + '\n' + localRegistryConfig;
+  await fs.writeFile(NPMRC_FILE_PATH, newContent);
+  childProcess.execSync(`${publishCommand}`, { stdio: 'inherit', shell: true });
+} finally {
+  await fs.writeFile(NPMRC_FILE_PATH, originalContent);
 }

local-npm-registry/publish.js

@@ -10,8 +10,7 @@
   "workspaces": [
     "apps/*",
     "packages/*",
-    "tooling/*",
-    "local-npm-registry"
+    "tooling/*"
   ],
   "scripts": {
     "start": "node --run dev",
@@ -30,8 +29,9 @@
     "format:check": "prettier --check .",
     "changeset": "changeset",
     "publish-packages": "changeset publish",
-    "start:local-npm-registry": "node local-npm-registry/publish.js start",
-    "local:publish": "node --run build && node local-npm-registry/publish.js publish",
+    "start:local-npm-registry": "npm run build && cd ./local-npm-registry && npm start",
+    "stop:local-npm-registry": "cd ./local-npm-registry && npm stop",
+    "local:publish": "node --run start:local-npm-registry && changeset version && node local-npm-registry/publish.js changeset publish",
     "prepare": "husky || \"No need to install husky\""
   },
   "lint-staged": {

package.json

@@ -14,9 +14,6 @@
   "files": [
     "dist"
   ],
-  "publishConfig": {
-    "provenance": true
-  },
   "scripts": {
     "build": "tsdown",
     "check-types": "tsc --noEmit",

packages/mcp/package.json

@@ -9,9 +9,6 @@
   "files": [
     "dist"
   ],
-  "publishConfig": {
-    "provenance": true
-  },
   "scripts": {
     "dev": "node --run build -- --watch --sourcemap",
     "build": "tsdown",