NPM publishing

.azure-pipelines/build-npm-packages.yml

@@ -1,62 +1,145 @@
-# Dummy build pipeline for configuration validation
-# Replace with build-npm-packages.yml once ADO pipeline is configured
-
-trigger: none
-pr: none
-
-parameters:
-  - name: "debug"
-    displayName: "Enable debug output"
-    type: boolean
-    default: false
-
-variables:
-  CDP_DEFINITION_BUILD_COUNT: $[counter('', 0)]
-  system.debug: ${{ parameters.debug }}
-  WindowsContainerImage: "onebranch.azurecr.io/windows/ltsc2022/vse2022:latest"
-
-resources:
-  repositories:
-    - repository: templates
-      type: git
-      name: OneBranch.Pipelines/GovernedTemplates
-      ref: refs/heads/main
-
-extends:
-  template: v2/OneBranch.Official.CrossPlat.yml@templates
-  parameters:
-    cloudvault:
-      enabled: false
-    globalSdl:
-      asyncSdl:
-        enabled: false
-      tsa:
-        enabled: false
-      credscan:
-        suppressionsFile: $(Build.SourcesDirectory)/.azure-pipelines/compliance/CredScanSuppressions.json
-      policheck:
-        break: true
-      suppression:
-        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
-      codeql:
-        compiled:
-          enabled: false
-        tsaEnabled: false
-      componentgovernance:
-        ignoreDirectories: $(Build.SourcesDirectory)/.vscode-test
-    featureFlags:
-      linuxEsrpSigning: true
-      WindowsHostVersion:
-        Version: 2022
-
-    stages:
-      - stage: BuildStage
-        jobs:
-          - job: Main
-            pool:
-              type: windows
-            variables:
-              ob_outputDirectory: '$(Build.ArtifactStagingDirectory)\build'
-            steps:
-              - pwsh: Write-Output "Dummy build pipeline - configuration validated successfully"
-                displayName: "\U00002705 Dummy step"
+# Build pipeline for npm packages in the packages/ folder
+# Produces .tgz archives that can be published via the npm release pipeline.
+#
+# Scope: only packages in $publishablePackages (below) are packed and shipped
+# as release artifacts. Today this is just packages/vscode-ext-webview
+# (which publishes to the @microsoft scope on npm). The other workspace
+# packages are still built and tested by 'npm run build/test --workspaces'
+# so the monorepo stays healthy, but they are NOT packed - they are local-
+# only deps and not released through this pipeline.
+
+# Manual-only build. The build/test work here is already covered on every push
+# by the GitHub Actions CI (.github/workflows/main.yml) and the main extension
+# ADO pipeline (.azure-pipelines/build.yml, which also runs Component Governance
+# / CredScan / PoliCheck over the same monorepo). The ONLY unique output of this
+# pipeline is the packed .tgz release artifact, which is only ever consumed by
+# release-npm-packages.yml. So there is no reason to run it continuously.
+#
+# Release procedure: queue this pipeline manually, wait for it to succeed, then
+# queue release-npm-packages.yml (which picks up the latest successful run of
+# this pipeline via its 'npmBuild' pipeline resource).
+trigger: none
+
+# Disable PR trigger
+pr: none
+
+parameters:
+    - name: 'debug'
+      displayName: 'Enable debug output'
+      type: boolean
+      default: false
+    - name: isOfficialBuild
+      displayName: 'Official Build'
+      type: boolean
+      default: true
+
+variables:
+    CDP_DEFINITION_BUILD_COUNT: $[counter('', 0)] # needed for onebranch.pipeline.version task https://aka.ms/obpipelines/versioning
+    system.debug: ${{ parameters.debug }}
+
+    WindowsContainerImage: 'onebranch.azurecr.io/windows/ltsc2022/vse2022:latest' # Docker image which is used to build the project https://aka.ms/obpipelines/containers
+
+resources:
+    repositories:
+        - repository: templates
+          type: git
+          name: OneBranch.Pipelines/GovernedTemplates
+          ref: refs/heads/main
+
+extends:
+    ${{ if eq(parameters.isOfficialBuild, true) }}:
+        template: v2/OneBranch.Official.CrossPlat.yml@templates # https://aka.ms/obpipelines/templates
+    ${{ else }}:
+        template: v2/OneBranch.NonOfficial.CrossPlat.yml@templates # https://aka.ms/obpipelines/templates
+    parameters:
+        cloudvault: # https://aka.ms/obpipelines/cloudvault
+            enabled: false
+        globalSdl: # https://aka.ms/obpipelines/sdl
+            asyncSdl:
+                enabled: false
+            tsa:
+                enabled: false
+            credscan:
+                suppressionsFile: $(Build.SourcesDirectory)/.azure-pipelines/compliance/CredScanSuppressions.json
+            policheck:
+                break: true
+            suppression:
+                suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+            codeql:
+                compiled:
+                    enabled: false
+                tsaEnabled: false
+            componentgovernance:
+                ignoreDirectories: $(Build.SourcesDirectory)/.vscode-test
+        featureFlags:
+            linuxEsrpSigning: true
+            WindowsHostVersion:
+                Version: 2022
+
+        stages:
+            - stage: BuildStage
+              jobs:
+                  - job: Main
+                    pool:
+                        type: windows
+                    variables:
+                        ob_outputDirectory: '$(Build.ArtifactStagingDirectory)\build' # this directory is uploaded to pipeline artifacts. More info at https://aka.ms/obpipelines/artifacts
+                        ob_sdl_codeSignValidation_excludes: '-|**\*.json;-|**\*.js;-|**\node_modules\**;'
+                    steps:
+                        - task: ComponentGovernanceComponentDetection@0
+                          displayName: 'Component Governance - Component Detection'
+
+                        - task: NodeTool@0
+                          displayName: "Use Node.js"
+                          inputs:
+                              versionSource: fromFile
+                              versionFilePath: .nvmrc
+
+                        - task: npmAuthenticate@0
+                          displayName: "Authenticate to npm registry"
+                          inputs:
+                              workingFile: '$(Build.SourcesDirectory)/.azure-pipelines/.npmrc'
+
+                        - task: Npm@1
+                          displayName: "Install Dependencies"
+                          condition: succeeded()
+                          inputs:
+                              command: custom
+                              customCommand: ci --userconfig $(Build.SourcesDirectory)/.azure-pipelines/.npmrc
+                              workingDir: $(Build.SourcesDirectory)
+
+                        - task: Npm@1
+                          displayName: "Build Workspace Packages"
+                          condition: succeeded()
+                          inputs:
+                              command: custom
+                              customCommand: run build --workspaces --if-present
+                              workingDir: $(Build.SourcesDirectory)
+
+                        - task: Npm@1
+                          displayName: "Test Workspace Packages"
+                          condition: succeeded()
+                          inputs:
+                              command: custom
+                              customCommand: run test --workspaces --if-present
+                              workingDir: $(Build.SourcesDirectory)
+
+                        - task: PowerShell@2
+                          displayName: "Pack npm packages"
+                          condition: succeeded()
+                          inputs:
+                              targetType: 'filePath'
+                              filePath: '$(Build.SourcesDirectory)/.azure-pipelines/scripts/pack-npm-packages.ps1'
+                              arguments: >-
+                                  -SourcesDirectory '$(Build.SourcesDirectory)'
+                                  -OutputDirectory '$(ob_outputDirectory)'
+                                  -SummaryPath '$(Build.ArtifactStagingDirectory)\pack-summary.md'
+
+                        - task: CopyFiles@2
+                          displayName: "Copy package metadata to staging"
+                          condition: succeeded()
+                          inputs:
+                              Contents: |
+                                  packages/vscode-ext-webview/package.json
+                                  !**/node_modules/**
+                              TargetFolder: $(ob_outputDirectory)