publish.yml

name: Publish to npm

# Auto-trigger disabled — the `instanode-mcp` package isn't claimed on
# npmjs.org so every `npm publish` fails with 404 PUT. Parked per
# operator decision. Once the npm package is claimed (npm owner add
# from authorised account, or first manual publish), restore the
# push trigger by uncommenting the lines below.
on:
  # push:
  #   branches: [master]
  #   paths: [package.json]
  workflow_dispatch: {}

permissions:
  contents: write
  id-token: write

jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: '20'
          registry-url: 'https://registry.npmjs.org'

      - name: Skip if version unchanged
        id: check
        run: |
          LOCAL=$(node -p "require('./package.json').version")
          REMOTE=$(npm view "$(node -p "require('./package.json').name")" version 2>/dev/null || echo none)
          echo "local=$LOCAL remote=$REMOTE"
          if [ "$LOCAL" = "$REMOTE" ]; then
            echo "publish=false" >> "$GITHUB_OUTPUT"
          else
            echo "publish=true" >> "$GITHUB_OUTPUT"
            echo "version=$LOCAL" >> "$GITHUB_OUTPUT"
          fi

      - if: steps.check.outputs.publish == 'true'
        run: npm ci

      - if: steps.check.outputs.publish == 'true'
        run: npm run build

      - if: steps.check.outputs.publish == 'true'
        run: npm publish --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - if: steps.check.outputs.publish == 'true'
        run: |
          git tag "v${{ steps.check.outputs.version }}"
          git push origin "v${{ steps.check.outputs.version }}"