Vendor tarballs

Pack the kit into vendor/*.tgz — no Azure feed required.

Portal workflow

cd sumx-client-portal
pnpm run sumx:vendor
pnpm install --force
pnpm dev

sumx:vendor runs pack-sumx-ssr-auth-vendor.mjs (builds kit, copies tarballs) then set-sumx-deps.mjs vendor.

Stable names:

• vendor/sumx-ssr-auth-core.tgz
• vendor/sumx-ui.tgz
• vendor/sumx-ssr-auth-react.tgz
• vendor/sumx-ssr-pdf.tgz

Optional kit path:

SUMX_KIT_ROOT=/path/to/sumx-ssr-kit pnpm run sumx:vendor

CI: pipeline artifacts

1. Kit pipeline publishes sumx-kit-npm-tarballs artifact.
2. App pipeline downloads and copies into vendor/ with stable names.
3. pnpm install --force && pnpm run build

vendor/*.tgz is typically gitignored — CI must populate every build.

package.json example

{
  "@sumx/ssr-auth-core": "file:vendor/sumx-ssr-auth-core.tgz",
  "@sumx/ui": "file:vendor/sumx-ui.tgz",
  "@sumx/ssr-auth-react": "file:vendor/sumx-ssr-auth-react.tgz",
  "@sumx/ssr-pdf": "file:vendor/sumx-ssr-pdf.tgz"
}