PR Custody

feat(ci): publish db/lib/internal-dashboard to @composio-dashboard npm

@sarahsimionescuchecks n/achecks…claude/nice-wiles-fe571a → master12 files · +161 −115review: @acsrujanreview: @abir-taheerreview: @anshugarg15updated 5h ago

GitHub

▸Description

Summary

Replaces GitHub Packages publishing for db, lib, and internal-dashboard-openapi with auto-publishing to public npm under the @composio-dashboard org.

Removes .npmrc GHP scope guard, GHP publishConfig.registry, and the two *-ghp.yml workflows.
Adds publish-db-lib-npm.yml and publish-internal-dashboard-openapi-npm.yml.
Branch → dist-tag: master → staging, production → latest.
Virtual versions: 0.<run_number>.0 (no manual bumps).
db's internal lib dependency is rewritten to the matching @composio-dashboard/lib version at publish time.

Required before this works

Add repo secret NPM_COMPOSIO_DASHBOARD_TOKEN (publish rights on @composio-dashboard).
Seed @latest: until a production push (or manual dispatch) runs, only @staging exists — run a production publish before pointing the dashboard's prod build at @latest.

Follow-ups (separate)

Switch the dashboard repo to @composio-dashboard/* (npm) and pin by dist-tag (@staging / @latest), never ^range.
Delete the old GHP packages once the dashboard is on npm (gh api -X DELETE /orgs/ComposioHQ/packages/npm/{db,lib,internal-dashboard-openapi}).

Verification done locally

pnpm install resolves without the GHP scope guard; lib + db build cleanly.
Both new workflows parse; version/dist-tag logic and db→lib dep rewrite dry-run correct.
Final review verified scoped-public publish, workspace-protocol resolution, and specHash skip empirically.

🤖 Generated with Claude Code

loading diff…