Add npm publish flow with DK CI

Author: ernestosbarbosa

.github/workflows/publish-npm.yml

@@ -0,0 +1,75 @@
+name: Publish from CodeArtifact to npm
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Package Version (ex: 1.2.3)'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+  id-token: write   # required for Trusted Publishing
+
+env:
+  CODEARTIFACT_DOMAIN: main
+  CODEARTIFACT_REPOSITORY: vtex-npm
+  NPM_PACKAGE_NAME: "vtex"
+  AWS_REGION: us-east-1
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    env:
+      CODEARTIFACT_TOKEN: ${{ secrets.CODEARTIFACT_TOKEN }}
+      CODEARTIFACT_DOMAIN_OWNER: ${{ secrets.CODEARTIFACT_DOMAIN_OWNER_MAIN }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Configure npm for CodeArtifact
+        run: |
+          set -euo pipefail
+
+          if [ -z "${CODEARTIFACT_TOKEN:-}" ]; then
+            echo "CODEARTIFACT_TOKEN not set"; exit 1
+          fi
+
+          CODEARTIFACT_URL="https://${CODEARTIFACT_DOMAIN}-${CODEARTIFACT_DOMAIN_OWNER}.d.codeartifact.${AWS_REGION}.amazonaws.com/npm/${CODEARTIFACT_REPOSITORY}/"
+
+          echo "Configuring npm to use ${CODEARTIFACT_URL}"
+
+          npm config set registry "${CODEARTIFACT_URL}"
+          npm config set "//${CODEARTIFACT_DOMAIN}-${CODEARTIFACT_DOMAIN_OWNER}.d.codeartifact.${AWS_REGION}.amazonaws.com/npm/${CODEARTIFACT_REPOSITORY}/:_authToken" "${CODEARTIFACT_TOKEN}"
+          npm config set "//${CODEARTIFACT_DOMAIN}-${CODEARTIFACT_DOMAIN_OWNER}.d.codeartifact.${AWS_REGION}.amazonaws.com/npm/${CODEARTIFACT_REPOSITORY}/:always-auth" true
+
+      - name: Download package from CodeArtifact
+        run: |
+          set -euo pipefail
+          VERSION="${{ inputs.version }}"
+
+          echo "Downloading ${NPM_PACKAGE_NAME}@${VERSION} from CodeArtifact..."
+          npm pack "${NPM_PACKAGE_NAME}@${VERSION}"
+
+          echo "Generated files:"
+          ls -1 *.tgz
+
+      - name: Set npm registry to npmjs
+        run: |
+          set -euo pipefail
+          npm config set registry https://registry.npmjs.org
+
+      - name: Publish tarball to npmjs
+        run: |
+          set -euo pipefail
+          TARBALL=$(ls -1 *.tgz | head -n 1)
+          echo "Publishing ${TARBALL} to npmjs..."
+          npm publish "${TARBALL}" --provenance --access public

.vtex/deployment.yaml

@@ -3,6 +3,34 @@
   build:
     provider: dkcicd
     pipelines:
+      - name: node-ci-v2
+        parameters:
+          nodeVersion: "22-bookworm"
+          packageManager: yarn
+          skipInstall: true
+          nodeCommands:
+            - yarn install --ignore-scripts
+            - yarn run lint
+            - yarn run ci:test
+        when:
+          - event: push
+            source: branch
+
+      - name: npm-publish-v1
+        parameters:
+          nodeVersion: "22-bookworm"
+          packageManager: yarn
+          skipInstall: true
+          nodeCommands:
+            - yarn install --ignore-scripts
+            - yarn ci:build
+          publishViaGithubWorkflow: true
+          workflowFile: publish-npm.yml
+          workflowVersion: '{{ ref_name }}'
+        when:
+          - event: push
+            source: tag
+
       - name: techdocs-v1
         parameters:
           entityReference: default/component/node-vtex-api
@@ -14,4 +42,4 @@
             path:
               - "docs/**"
               - README.md
-              - .vtex/deployment.yaml
+              - .vtex/deployment.yaml