Publish TypeScript edge signing package

Author: terion-labs

.github/workflows/release.yml

@@ -31,8 +31,11 @@ jobs:
         with:
           node-version: '24'
 
-      - name: Run TypeScript package tests
-        run: npm --prefix packages/ts test
+      - name: Validate TypeScript package
+        run: |
+          npm --prefix packages/ts ci
+          npm --prefix packages/ts test
+          npm --prefix packages/ts run build
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -119,6 +122,62 @@ jobs:
             gh release create "${TAG_NAME}" dist/* --title "${TAG_NAME}" --notes "Release ${TAG_NAME}"
           fi
 
+  npm-package:
+    name: Publish TypeScript package
+    runs-on: ubuntu-latest
+    needs: release
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js for GitHub Packages
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: https://npm.pkg.github.com
+          scope: '@terion-name'
+          cache: npm
+          cache-dependency-path: packages/ts/package-lock.json
+
+      - name: Install TypeScript package dependencies
+        run: npm --prefix packages/ts ci
+
+      - name: Test and build TypeScript package
+        run: |
+          npm --prefix packages/ts test
+          npm --prefix packages/ts run build
+
+      - name: Check whether npm package version already exists
+        id: npm_version
+        working-directory: packages/ts
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAG_NAME: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          package_name="$(node -p "require('./package.json').name")"
+          if npm view "${package_name}@${TAG_NAME}" version --registry=https://npm.pkg.github.com >/dev/null 2>&1; then
+            echo "exists=true" >> "${GITHUB_OUTPUT}"
+            echo "${package_name}@${TAG_NAME} already exists; skipping publish."
+          else
+            echo "exists=false" >> "${GITHUB_OUTPUT}"
+          fi
+
+      - name: Set TypeScript package version from tag
+        if: steps.npm_version.outputs.exists != 'true'
+        working-directory: packages/ts
+        env:
+          TAG_NAME: ${{ github.ref_name }}
+        run: npm version "${TAG_NAME}" --no-git-tag-version
+
+      - name: Publish TypeScript package to GitHub Packages
+        if: steps.npm_version.outputs.exists != 'true'
+        working-directory: packages/ts
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npm publish
+
   docker-images:
     name: Build and publish ${{ matrix.app }} image
     runs-on: ubuntu-latest

.gitignore

@@ -5,3 +5,5 @@ __pycache__/
 *.py[cod]
 node_modules/
 /deploy/certs/generated/
+packages/ts/dist/
+*.tgz

Makefile

@@ -13,7 +13,9 @@ test:
 	go test $(GO_PACKAGES)
 
 ts-test:
+	npm --prefix packages/ts ci
 	npm --prefix packages/ts test
+	npm --prefix packages/ts run build
 
 python-test:
 	PYTHONPATH=packages/python python3 -m unittest discover -s packages/python/tests

packages/ts/README.md

@@ -0,0 +1,13 @@
+# @terion-name/air3-edgesign
+
+TypeScript helpers for signing and verifying air3 edge gateway URLs.
+
+```sh
+npm install @terion-name/air3-edgesign --registry=https://npm.pkg.github.com
+```
+
+```ts
+import { signUrl, verifyUrl } from '@terion-name/air3-edgesign';
+```
+
+This package is published to GitHub Packages by the tag release workflow. The published runtime entry point is built JavaScript in `dist/` with TypeScript declarations.

packages/ts/package-lock.json

@@ -1,14 +1,38 @@
 {
-  "name": "@air3/edgesign",
-  "private": true,
+  "name": "@terion-name/air3-edgesign",
+  "version": "0.0.0",
+  "description": "TypeScript helpers for signing and verifying air3 edge gateway URLs.",
+  "license": "UNLICENSED",
   "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/terion-name/air3.git",
+    "directory": "packages/ts"
+  },
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com"
   },
   "scripts": {
-    "test": "node --test --experimental-strip-types test/*.test.ts"
+    "test": "node --test --experimental-strip-types test/*.test.ts",
+    "build": "tsc -p tsconfig.build.json"
   },
   "engines": {
     "node": ">=22.6"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "typescript": "^5.8.0"
   }
 }

packages/ts/package.json

@@ -0,0 +1,12 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "declaration": true,
+    "emitDeclarationOnly": false,
+    "noEmit": false,
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["test/**/*.ts"]
+}