feat: harden fork package publishing

.github/workflows/js-tests.yaml

@@ -39,8 +39,14 @@ jobs:
         if: runner.os == 'macOS'
         run: brew install wabt; brew install make; printf '%s\n%s\n' "/usr/local/opt/make/libexec/gnubin" "$(cat $GITHUB_PATH)" > $GITHUB_PATH
 
+      - name: Install Rust Toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: nightly-2023-10-05
+          override: true
+
       - name: Install wasm-pack
-        run: cargo install wasm-pack
+        run: cargo install wasm-pack --version 0.13.1 --locked
 
       - name: Setup Node
         uses: actions/setup-node@v3

.github/workflows/publish-dev.yaml

@@ -0,0 +1,61 @@
+name: Publish dev snapshots
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - librocco/main
+
+concurrency:
+  group: publish-dev-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout vlcn-js
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+          path: js
+
+      - name: Checkout typed-sql sibling
+        uses: actions/checkout@v4
+        with:
+          path: typed-sql
+          repository: vlcn-io/typed-sql
+
+      - name: Install wabt
+        run: sudo apt-get update && sudo apt-get install -y wabt
+
+      - name: Install Rust nightly
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: nightly-2023-10-05
+          override: true
+
+      - name: Setup Node and pnpm cache
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+          cache-dependency-path: js/pnpm-lock.yaml
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+
+      - name: Configure registry auth
+        run: |
+          echo "//npm.codemyriad.io/:_authToken=${{ secrets.VERDACCIO_TOKEN }}" >> ~/.npmrc
+
+      - name: Build
+        working-directory: js
+        run: make
+
+      - name: Publish dev snapshots
+        working-directory: js
+        run: ./scripts/publish/publish.sh dev

.npmrc

@@ -0,0 +1 @@
+registry=https://npm.codemyriad.io/

README.md

@@ -112,3 +112,19 @@ git clone --recurse-submodules git@github.com:vlcn-io/workspace.git
 
 Running `make` in that directory will get you set up. Ensure you have the rust nightly toolchain installed and activated before running make.
 
+## Fork publishing
+
+The codemyriad fork publishes forked `@vlcn.io/*` packages to `https://npm.codemyriad.io/`.
+
+Development snapshot publishes use the current repo commit SHA in the prerelease version, for example `0.2.2-dev.20260313.abcd1234`. Stable fork releases use an explicit `myriad.N` suffix, for example `0.2.2-myriad.1`.
+
+From a fork checkout with `typed-sql` available as a sibling repo and registry auth configured outside the repo:
+
+```bash
+make
+DRY_RUN=true ./scripts/publish/publish.sh dev
+./scripts/publish/publish.sh dev
+MYRIAD_N=1 ./scripts/publish/publish.sh myriad
+```
+
+The publish script refuses to reuse an existing `name@version`, which prevents the same version from being republished with different contents.

package.json

@@ -1,7 +1,7 @@
 {
   "private": true,
   "version": "0.0.0",
-  "packageManager": "pnpm@7.9.0",
+  "packageManager": "pnpm@9.15.9",
   "engines": {
     "node": ">=19",
     "pnpm": ">=7"

packages/crsqlite-wasm/package.json

@@ -28,6 +28,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/browser/crsqlite"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "@vlcn.io/wa-sqlite": "workspace:*",
     "@vlcn.io/xplat-api": "workspace:*",

packages/logger-provider/package.json

@@ -19,6 +19,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/packages/logger-provider"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "winston": "^3.10.0"
   },

packages/rx-tbl/package.json

@@ -23,6 +23,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/rx-tbl"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "@vlcn.io/xplat-api": "workspace:*"
   }

packages/ws-browserdb/package.json

@@ -20,6 +20,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/packages/ws-browserdb"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "@types/throttle-debounce": "^5.0.0",
     "@vlcn.io/ws-client": "workspace:*",

packages/ws-client/package.json

@@ -24,6 +24,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/packages/ws-client"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "@types/throttle-debounce": "^5.0.0",
     "@vlcn.io/ws-common": "workspace:*"

packages/ws-common/package.json

@@ -20,6 +20,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/packages/ws-client"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "lib0": "^0.2.73"
   },

packages/ws-server/package.json

@@ -20,6 +20,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/packages/ws-server"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "@types/better-sqlite3": "^7.6.8",
     "@vlcn.io/crsqlite": "workspace:*",

packages/xplat-api/package.json

@@ -24,6 +24,9 @@
     "url": "git@github.com:vlcn-io/js.git",
     "directory": "https://github.com/vlcn-io/js/tree/main/js/xplat-api"
   },
+  "publishConfig": {
+    "registry": "https://npm.codemyriad.io/"
+  },
   "dependencies": {
     "comlink": "^4.4.1"
   }

scripts/publish/config.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# Configuration for publishing the codemyriad fork of vlcn-js.
+
+REGISTRY_URL="${REGISTRY_URL:-https://npm.codemyriad.io/}"
+DEV_DIST_TAG="${DEV_DIST_TAG:-dev}"
+MYRIAD_DIST_TAG="${MYRIAD_DIST_TAG:-myriad}"
+
+# Packages are ordered topologically so workspace protocol dependencies
+# resolve to already-published versions during the run.
+PUBLISH_PACKAGES=(
+  "@vlcn.io/xplat-api:packages/xplat-api"
+  "@vlcn.io/ws-common:packages/ws-common"
+  "@vlcn.io/wa-sqlite:deps/wa-sqlite"
+  "@vlcn.io/crsqlite:deps/cr-sqlite/core"
+  "@vlcn.io/logger-provider:packages/logger-provider"
+  "@vlcn.io/rx-tbl:packages/rx-tbl"
+  "@vlcn.io/ws-client:packages/ws-client"
+  "@vlcn.io/crsqlite-wasm:packages/crsqlite-wasm"
+  "@vlcn.io/ws-server:packages/ws-server"
+  "@vlcn.io/ws-browserdb:packages/ws-browserdb"
+)