first commit

.npmrc

@@ -0,0 +1,16 @@
+# Default registry stays npmjs on purpose.
+#
+# nexus.pireon.dev/repository/npm-releases is a *hosted* release repo, not a
+# proxy: it answers 404 for anything published on npmjs (verified with tslib).
+# Pointing `registry` at it would break every install in this workspace.
+registry=https://registry.npmjs.org/
+
+# Pireon's own packages (@pi/*) come from Nexus.
+@pi:registry=https://nexus.pireon.dev/repository/npm-releases/
+//nexus.pireon.dev/repository/npm-releases/:always-auth=true
+
+# The token is deliberately not here. Locally it already lives in ~/.npmrc; in
+# CI, write it before installing:
+#   npm config set //nexus.pireon.dev/repository/npm-releases/:_authToken "$NEXUS_TOKEN"
+# Putting `${NEXUS_TOKEN}` in this file instead would make npm fail outright on
+# any machine where the variable is unset — including this one.