fix lib build to follow the utils dual output pattern, fixes package.… (#43)

* fix lib build to follow the utils dual output pattern, fixes package.json to include proper exports mapping, adds github registry publishing config

* fix workflows

* syncpack

* lockfile

* search client

* lockfile

Author: TomWoodward

.github/workflows/ci.yml

@@ -16,6 +16,9 @@ jobs:
   test:
     name: checks
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     strategy:
       fail-fast: false
       matrix:
@@ -30,7 +33,10 @@ jobs:
       with:
         node-version-file: .nvmrc
         cache: npm
+    - run: echo '//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}' >> ~/.npmrc
     - run: npm ci
+      env:
+        NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - run: npm run build
     - run: npm run ci
       working-directory: packages/${{ matrix.module }}

.github/workflows/lint.yml

@@ -26,6 +26,9 @@ jobs:
   spelling:
     name: spelling
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     env:
       CI: true
     steps:
@@ -36,11 +39,17 @@ jobs:
       with:
         node-version-file: .nvmrc
         cache: npm
+    - run: echo '//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}' >> ~/.npmrc
     - run: npm ci
+      env:
+        NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - run: npm run ci:spelling
   syncpack:
     name: versions
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     env:
       CI: true
     steps:
@@ -51,5 +60,8 @@ jobs:
       with:
         node-version-file: .nvmrc
         cache: npm
+    - run: echo '//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}' >> ~/.npmrc
     - run: npm ci
+      env:
+        NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - run: npm run ci:versions

.github/workflows/sbom-pr-check.yml

@@ -9,6 +9,9 @@ permissions:
 jobs:
   check:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     steps:
       - uses: actions/checkout@v4
         with:
@@ -19,7 +22,10 @@ jobs:
           node-version-file: .nvmrc
           cache: npm
 
+      - run: echo '//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}' >> ~/.npmrc
       - run: npm ci
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - run: npm sbom --sbom-format=cyclonedx > /tmp/head-sbom.json
 
       - name: Generate base SBOM

.github/workflows/sbom.yml

@@ -25,6 +25,9 @@ permissions:
 jobs:
   emit:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     env:
       INVENTORY_REF: ${{ github.event.inputs.ref || 'main' }}
     steps:
@@ -38,7 +41,10 @@ jobs:
           node-version-file: .nvmrc
           cache: npm
 
+      - run: echo '//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}' >> ~/.npmrc
       - run: npm ci
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - run: npm sbom --sbom-format=cyclonedx > /tmp/sbom.json
 
       # birder is private and this repo is public, so the run's GITHUB_TOKEN

.npmrc

@@ -0,0 +1 @@
+@openstax:registry=https://npm.pkg.github.com

package-lock.json

@@ -2,7 +2,7 @@
   "name": "@project/frontend",
   "version": "0.1.0",
   "dependencies": {
-    "@openstax/orn-locator": "^1.4.1",
+    "@openstax/orn-locator": "^1.5.0",
     "@openstax/ts-utils": "1.50.2",
     "@openstax/ui-components": "github:openstax/ui-components#1.23.0",
     "@testing-library/jest-dom": "^6.4.7",

packages/frontend/package.json

@@ -2,8 +2,8 @@
   "name": "@project/lambdas",
   "version": "1.0.0",
   "dependencies": {
-    "@openstax/open-search-client": "^0.1.0-build.8",
-    "@openstax/orn-locator": "^1.4.1",
+    "@openstax/open-search-client": "^0.1.1",
+    "@openstax/orn-locator": "^1.5.0",
     "@openstax/ts-utils": "1.50.2",
     "aws-xray-sdk": "^3.6.0",
     "body-parser": "^1.19.2",