publish.yml

name: Publish

on:
  workflow_run:
    workflows: ["Release"]
    types: [completed]
  workflow_dispatch:
    inputs:
      action:
        description: "Action to perform"
        required: true
        type: choice
        options:
          - publish-next
          - publish-latest
        default: publish-next

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read
  id-token: write

jobs:
  publish:
    if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: "24"
          registry-url: "https://registry.npmjs.org"

      - name: Upgrade npm
        run: npm install -g npm@latest

      - uses: oven-sh/setup-bun@v2

      - name: Install dependencies
        run: bun install

      - name: Detect channel
        id: channel
        run: |
          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            echo "action=${{ inputs.action }}" >> $GITHUB_OUTPUT
          else
            VERSION=$(node -p "require('./package.json').version")
            if [[ "$VERSION" == *"-next."* ]]; then
              echo "action=publish-next" >> $GITHUB_OUTPUT
            else
              echo "action=publish-latest" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Publish to npm
        run: |
          if [ "${{ steps.channel.outputs.action }}" = "publish-next" ]; then
            bun run publish:next
          else
            bun run publish:latest
          fi
        env:
          NPM_CONFIG_PROVENANCE: true