publish.yml

name: Publish Package

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version bump type'
        required: true
        type: choice
        options: [patch, minor, major, prepatch, preminor, premajor, prerelease]
      custom_version:
        description: 'Custom version (optional, overrides version type)'
        required: false
        type: string
      preid:
        description: 'Prerelease identifier'
        required: false
        type: choice
        options: [beta, alpha, rc, next]
        default: 'beta'
      dry_run:
        description: 'Dry run (do not actually publish)'
        required: false
        type: boolean
        default: false
      tag:
        description: 'NPM dist-tag'
        required: false
        type: choice
        options: [latest, next, beta, alpha]
        default: 'latest'

concurrency:
  group: publish-package
  cancel-in-progress: false

permissions:
  contents: write
  id-token: write

env:
  NPM_CONFIG_FUND: false

jobs:
  build:
    name: Build & Version
    runs-on: ubuntu-latest
    outputs:
      new_version: ${{ steps.bump.outputs.new_version }}

    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

      - uses: actions/setup-node@v4
        with:
          node-version: '22.14.0'
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'

      - run: npm ci

      - name: Version package
        id: bump
        run: |
          CUSTOM="${{ github.event.inputs.custom_version }}"
          if [ -n "$CUSTOM" ]; then
            npm version "$CUSTOM" --no-git-tag-version --allow-same-version
          else
            npm version "${{ github.event.inputs.version }}" --no-git-tag-version --preid="${{ github.event.inputs.preid }}"
          fi
          NEW_VERSION=$(node -p "require('./package.json').version")
          echo "new_version=$NEW_VERSION" >> "$GITHUB_OUTPUT"

      - run: npm run build

      - uses: actions/upload-artifact@v4
        with:
          name: build-output
          path: |
            package.json
            package-lock.json
            dist/
          retention-days: 1

  publish:
    name: Publish to NPM
    needs: build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '22.14.0'
          registry-url: 'https://registry.npmjs.org'
      - run: npm install -g npm@latest

      - uses: actions/download-artifact@v4
        with:
          name: build-output
          path: .

      - name: Dry run
        if: github.event.inputs.dry_run == 'true'
        run: npm publish --dry-run --access public --tag ${{ github.event.inputs.tag }} --ignore-scripts

      - name: Publish
        if: github.event.inputs.dry_run != 'true'
        run: npm publish --access public --provenance --tag ${{ github.event.inputs.tag }} --ignore-scripts
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

  release:
    name: Create Release
    needs: [build, publish]
    runs-on: ubuntu-latest
    if: github.event.inputs.dry_run != 'true'
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}
      - uses: actions/download-artifact@v4
        with:
          name: build-output
          path: .
      - name: Tag and push
        env:
          NEW_VERSION: ${{ needs.build.outputs.new_version }}
        run: |
          git config user.name "GitHub Actions"
          git config user.email "actions@github.com"
          git add package.json package-lock.json
          git diff --staged --quiet || git commit -m "chore(release): v${NEW_VERSION}"
          git push
          git tag -a "v${NEW_VERSION}" -m "Release v${NEW_VERSION}"
          git push origin "v${NEW_VERSION}"
      - uses: softprops/action-gh-release@v2
        with:
          tag_name: v${{ needs.build.outputs.new_version }}
          generate_release_notes: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}