Fix #1055, address #1088, action outputs and pipeline issues

Fixes #1055, restore custom artifacts path argument to allow environments like
  action.yml to make and reuse their own artifacts path value in environments
  where it's hard to pass around return values. Closes
  [#1055](#1055).

Addresses #1088, new issues with puppeteer installs in GitHub actions being
  unable to find Chrome executables.

Author: plocket

.npmrc

@@ -0,0 +1,2 @@
+ignore-scripts=true
+min-release-age=7

CHANGELOG.md

@@ -43,6 +43,16 @@ Format:
 - 
 -->
 
+## [Unreleased]
+
+### Fixed
+
+- Restore custom artifacts path argument to allow environments like action.yml to make and reuse their own artifacts path value in environments where it's hard to pass around return values. Closes [#1055](https://github.com/suffolkLITLab/aLKiln/issues/1055).
+
+### Security
+
+- Moved responsibility for security measures to ALKiln internal development by automating internal security measures with `.npmrc`. Closes [#1088](https://github.com/suffolkLITLab/aLKiln/issues/1088).
+
 ## [5.16.0] - 2026-05-14
 
 ### Added

action.yml

@@ -120,9 +120,7 @@ runs:
       run: |
         log="💡 ALK0026 INFO: Install ALKiln directly from npm"
         echo -e "\n$log" >> "${{ env.DEBUG_PATH }}"
-        npm install --ignore-scripts --min-release-age=7 -g "@suffolklitlab/alkiln@$ALKILN_VERSION"
-        npm rebuild -g puppeteer --update-binary
-
+        npm install -g "@suffolklitlab/alkiln@$ALKILN_VERSION"
 
     # Files prep
     - shell: bash

lib/setup/artifacts.js

@@ -11,7 +11,12 @@ const Log = require(`../utils/Log.js`);
 
 session_vars.delete_artifacts_path_name();
 
-const artifacts_path = files.make_artifacts_folder();
+// process.argv is a list of strings of commands and args.
+// If using `npm run artifacts` (as opposed to the bin commands),
+// use `--` before, for example, `--sources=./foo`
+// Envs like action.yml reuse their own .path when return vals are hard to get
+const forced_path = require(`minimist`)( process.argv.slice(2) )?.path;
+const artifacts_path = files.make_artifacts_folder( forced_path );
 session_vars.save_artifacts_path_name( artifacts_path );
 
 const log = new Log({ path: artifacts_path, context: `artifacts` });

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suffolklitlab/alkiln",
-  "version": "5.16.0",
+  "version": "5.16.0-fix-artifacts-n-pipeline",
   "description": "Integrated automated end-to-end testing with docassemble, puppeteer, and cucumber.",
   "main": "lib/index.js",
   "scripts": {