npm publish tarballs

Author: Saadnajmi

.ado/azure-pipelines.publish.yml

@@ -118,7 +118,8 @@ extends:
                   yarn config set npmPublishAccess public
                   yarn config set npmPublishRegistry "https://registry.npmjs.org"
                   yarn config set npmAuthToken $(npmAuth)
-                displayName: 'Configure yarn for npm publishing'
+                  npm config set //registry.npmjs.org/:_authToken $(npmAuth)
+                displayName: 'Configure npm publishing auth'
 
               - script: |
                   # https://github.com/changesets/changesets/issues/432
@@ -130,7 +131,8 @@ extends:
                   yarn config unset npmPublishAccess
                   yarn config unset npmAuthToken
                   yarn config unset npmPublishRegistry
-                displayName: 'Cleanup yarn npm config'
+                  npm config delete //registry.npmjs.org/:_authToken
+                displayName: 'Cleanup npm publishing auth'
                 condition: always()
 
               - script: |

.github/workflows/pr.yml

@@ -320,6 +320,9 @@ jobs:
       - name: Build packages
         run: yarn build
 
+      - name: Pack packages
+        run: yarn lage pack --verbose --grouped
+
       - name: Simulate publish
         run: yarn lage publish-dry-run --verbose --grouped
 

lage.config.js

@@ -60,6 +60,7 @@ const config = {
       type: 'worker',
       options: {
         worker: 'scripts/src/worker/publish.mts',
+        outputDir: '_packed',
       },
       cache: false,
     },
@@ -68,6 +69,7 @@ const config = {
       type: 'worker',
       options: {
         worker: 'scripts/src/worker/publish.mts',
+        outputDir: '_packed',
         dryRun: true,
       },
       cache: false,

scripts/src/worker/publish.mts

@@ -1,7 +1,33 @@
 import type { WorkerRunnerFunction } from 'lage';
 
 import { $, fs } from 'zx';
-import { join } from 'node:path';
+import { join, resolve } from 'node:path';
+
+/**
+ * Find the tarball for a package in the output directory.
+ * Returns the full path if found, undefined otherwise.
+ */
+async function findTarball(pkg: { name: string; version: string }, outputDir: string): Promise<string | undefined> {
+  const stagingDir = resolve(outputDir);
+  const safeName = (pkg.name as string).replace(/@/g, '').replace(/\//g, '-');
+  const tgzFilename = `${safeName}-${pkg.version}.tgz`;
+  const tgzPath = join(stagingDir, tgzFilename);
+
+  if (await fs.pathExists(tgzPath)) {
+    return tgzPath;
+  }
+
+  // Fallback: match by package name prefix in case version format differs
+  if (await fs.pathExists(stagingDir)) {
+    const files = await fs.readdir(stagingDir);
+    const match = files.find((f: string) => f.startsWith(`${safeName}-`) && f.endsWith('.tgz'));
+    if (match) {
+      return join(stagingDir, match);
+    }
+  }
+
+  return undefined;
+}
 
 export const run: WorkerRunnerFunction = async ({ target }) => {
   const pkg = await fs.readJson(join(target.cwd, 'package.json'));
@@ -11,7 +37,18 @@ export const run: WorkerRunnerFunction = async ({ target }) => {
   }
 
   const dryRun = target.options?.dryRun ?? false;
-  const args = ['--tolerate-republish', ...(dryRun ? ['--dry-run'] : [])];
+  const outputDir = target.options?.outputDir as string | undefined;
 
-  await $({ cwd: target.cwd, verbose: true })`yarn npm publish ${args}`;
+  // If an outputDir is configured, look for a pre-packed tarball
+  const tarball = outputDir ? await findTarball(pkg, outputDir) : undefined;
+
+  if (tarball) {
+    // yarn npm publish doesn't support tarballs, so use npm directly
+    const args = ['publish', tarball, '--access', 'public', ...(dryRun ? ['--dry-run'] : [])];
+    await $({ cwd: target.cwd, verbose: true })`npm ${args}`;
+  } else {
+    // No tarball found — publish from source (local dev / dry-run)
+    const args = ['--tolerate-republish', ...(dryRun ? ['--dry-run'] : [])];
+    await $({ cwd: target.cwd, verbose: true })`yarn npm publish ${args}`;
+  }
 };