fix: resolve semantic-release and publish auth issues in build workflow (#20)

* fix: resolve build errors by ensuring repterm-api is built before dependent packages

- Add repterm-api build step before repterm and plugin-kubectl builds in release jobs
- This ensures the dist/ directory exists before downstream packages try to import repterm-api
- Fix npm auth configuration in release jobs to properly expand NPM_TOKEN environment variable
- Simplify .npmrc configuration using echo instead of heredoc for consistent variable expansion

Fixes the "Cannot find module 'repterm-api'" errors in build workflow.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

* fix: resolve workspace protocol incompatibility with npm in semantic-release

The semantic-release action uses npm (not bun) to run `npm version`, which
cannot parse bun's `workspace:*` protocol in package.json dependencies.
This adds a step to replace `workspace:*` with the actual semver range
(e.g. `^0.1.0`) before semantic-release runs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: write .npmrc to project root for bun publish authentication

bun publish may not reliably read ~/.npmrc for authentication. Writing
the .npmrc to the project root directory ensures bun can find it during
publish steps.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>

Author: cnbailian

.github/workflows/build.yml

@@ -112,6 +112,11 @@ jobs:
       - name: Build repterm package
         run: bun run build:repterm
 
+      - name: Resolve workspace protocol for npm compatibility
+        run: |
+          API_VERSION=$(jq -r .version packages/plugin-api/package.json)
+          sed -i "s/\"workspace:\*\"/\"^${API_VERSION}\"/g" packages/repterm/package.json
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
@@ -227,7 +232,7 @@ jobs:
         run: bun install --frozen-lockfile
 
       - name: Configure npm auth
-        run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
+        run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -239,8 +244,6 @@ jobs:
 
       - name: Publish plugin package
         run: bun run publish:plugin-kubectl
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   release-repterm-api:
     name: Release repterm-api
@@ -260,7 +263,7 @@ jobs:
         run: bun install --frozen-lockfile
 
       - name: Configure npm auth
-        run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ~/.npmrc
+        run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -269,5 +272,3 @@ jobs:
 
       - name: Publish repterm-api package
         run: bun run publish:plugin-api
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}