fix: replace package installation with files copying

[IlyaKhD]

Note

• next: fix: use string comparison in if conditions #37
• next: fix(install-internal-package): retarget replacement to node_modules/.pnpm #38

Practical Value

This is required to avoid using unsafe npm i

Before

After

[Copilot]

Pull request overview

This PR updates the install-internal-package composite GitHub Action to avoid npm i for internal packages by downloading tarballs and replacing the already-installed package contents directly from the .tgz.

Changes:

• Add a Node script that removes the current installed package directory and extracts a packed .tgz into its place.
• Update the action to call the new replacement script instead of running npm i <pkg>@<tgz>.
• Tighten the find command to only search the current directory for the downloaded tarball.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
install-internal-package/replace-package.js	New script to delete the existing package directory and extract the internal tarball into place.
install-internal-package/action.yml	Switch install steps from npm i ...@<tgz> to node replace-package.js ... <tgz> and constrain tarball discovery to -maxdepth 1.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.