Move npm auth config to .npmrc with env vars (#214)

* Move npm auth config to .npmrc with env vars

Centralize npm registry authentication by configuring auth tokens in .npmrc using environment variable substitution instead of manually setting npm config in CI/CD workflows. This simplifies the build pipeline and removes hardcoded auth steps while maintaining security through secrets management. Also added .claude and .vscode to .gitignore.

* Downgrade uuid to v8.3.2 and simplify npm config

Changed uuid dependency from v9.0.0 to v8.3.2 to match the version used by azure-pipelines-task-lib dependencies. Removed --loglevel=http flag from npm ci commands in CI workflows to use default logging.

Author: cx-atish-jadhav

.github/workflows/ci.yml

@@ -24,12 +24,6 @@ jobs:
       with:
         node-version: 22.11.0
         registry-url: https://npm.echohq.com/
-    - name: Configure echohq auth (both hosts)
-      env:
-        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
-      run: |
-        npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
-        npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
     - run: npm ci --ignore-scripts
       env:
         ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
@@ -55,12 +49,6 @@ jobs:
       with:
         node-version: 22.11.0
         registry-url: https://npm.echohq.com/
-    - name: Configure echohq auth (both hosts)
-      env:
-        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
-      run: |
-        npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
-        npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
     - run: npm ci --ignore-scripts
       env:
         ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}

.github/workflows/release.yml

@@ -149,8 +149,6 @@ jobs:
         env:
           ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
         run: |
-          npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
-          npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
           npm ci --ignore-scripts
           npm run build
 

.gitignore

@@ -5,3 +5,5 @@ dist
 .DS_Store
 .npmrc
 .idea
+/.claude
+/.vscode

.npmrc

@@ -1,5 +1,6 @@
 # Default registry for most packages
 registry=https://npm.echohq.com/
-//packages.echohq.com/:_authToken=
+//npm.echohq.com/:_authToken=${ECHO_LIBRARIES_ACCESS_KEY}
+//packages.echohq.com/:_authToken=${ECHO_LIBRARIES_ACCESS_KEY}
 always-auth=true
 ignore-scripts=true

package-lock.json

@@ -64,7 +64,7 @@
     "underscore": "^1.13.8",
     "picomatch": "^2.3.2",
     "brace-expansion": "^2.1.2",
-    "uuid": "^9.0.0"
+    "uuid": "^8.3.2"
   },
   "publishConfig": {
     "registry": "https://npm.pkg.github.com"