publish-pypi.yml

name: Publish to PyPI

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      confirm:
        description: 'Confirm production PyPI publishing'
        required: true
        type: choice
        options:
          - 'No'
          - 'Yes'
        default: 'No'

jobs:
  build:
    name: Build distributions
    runs-on: ubuntu-latest
    if: github.event_name == 'release' || github.event.inputs.confirm == 'Yes'
    steps:
      - uses: actions/checkout@v4
      
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.10'
      
      - name: Install build tools
        run: pip install --upgrade build
      
      - name: Build all packages
        run: |
          for pkg_dir in packages/*/; do
            echo "Building $(basename $pkg_dir)..."
            cd "$pkg_dir"
            python -m build --wheel --sdist
            cd ../..
          done
      
      - name: Collect distributions
        run: |
          mkdir -p dist-all
          find packages -name '*.whl' -o -name '*.tar.gz' | while read file; do
            cp "$file" dist-all/
          done
      
      - name: Upload distributions
        uses: actions/upload-artifact@v4
        with:
          name: distributions
          path: dist-all/

  publish-pypi:
    name: Publish to PyPI
    needs: build
    runs-on: ubuntu-latest
    environment: pypi
    permissions:
      id-token: write
    steps:
      - name: Download distributions
        uses: actions/download-artifact@v4
        with:
          name: distributions
          path: dist/
      
      - name: Check for version changes vs PyPI
        run: |
          pip install requests packaging
          
          python << 'EOF'
          import os
          import json
          import requests
          from pathlib import Path
          from packaging import version
          
          dist_dir = Path('dist')
          errors = []
          
          print("=" * 70)
          print("CHECKING: Built versions vs PyPI published versions")
          print("=" * 70)
          
          for wheel in dist_dir.glob('*.whl'):
              # Extract package name and version from wheel filename
              # Format: {distribution}-{version}(-{build tag})?-{python tag}-{abi tag}-{platform tag}.whl
              parts = wheel.name.split('-')
              pkg_name = parts[0].replace('_', '-').lower()
              pkg_version = parts[1]
              
              print(f"\nChecking {pkg_name} (built: {pkg_version})...")
              
              # Check PyPI API
              try:
                  response = requests.get(
                      f'https://pypi.org/pypi/{pkg_name}/json',
                      timeout=10
                  )
                  
                  if response.status_code == 404:
                      print(f"  [NEW] Not on PyPI yet (will publish)")
                      continue
                  elif response.status_code != 200:
                      print(f"  [WARN] PyPI API error: {response.status_code}")
                      continue
                  
                  pypi_data = response.json()
                  pypi_versions = list(pypi_data['releases'].keys())
                  latest_pypi = max(pypi_versions, key=version.parse) if pypi_versions else None
                  
                  if pkg_version in pypi_versions:
                      # Version exists on PyPI - check if code changed
                      print(f"  [EXISTS] Version {pkg_version} already on PyPI")
                      
                      # Get git commit hash for this package
                      import subprocess
                      try:
                          result = subprocess.run(
                              ['git', 'log', '-1', '--format=%h', '--', f'packages/{pkg_name.replace("-", "_")}'],
                              capture_output=True, text=True, timeout=10
                          )
                          current_commit = result.stdout.strip()
                          
                          if current_commit:
                              print(f"  Current commit: {current_commit}")
                              print(f"  [ERROR] Code changed but version not bumped!")
                              errors.append(
                                  f"{pkg_name}: Built version {pkg_version} already on PyPI "
                                  f"but code has changed (commit {current_commit}). "
                                  f"Bump version in pyproject.toml"
                              )
                          else:
                              print(f"  [WARN] Cannot determine git changes")
                      except Exception as e:
                          print(f"  [WARN] Could not check git history: {e}")
                  else:
                      print(f"  [NEW VERSION] {pkg_version} (will publish)")
                      if latest_pypi:
                          print(f"    Latest on PyPI: {latest_pypi}")
                  
              except requests.RequestException as e:
                  print(f"  [WARN] Could not check PyPI: {e}")
          
          print("\n" + "=" * 70)
          
          if errors:
              print("[FAILED] VERSION CHECK FAILED")
              print("\nErrors:")
              for error in errors:
                  print(f"  - {error}")
              print("\nAction required:")
              print("  1. Bump version in package's pyproject.toml")
              print("  2. Commit the version change")
              print("  3. Re-run this workflow")
              exit(1)
          else:
              print("[PASSED] VERSION CHECK PASSED")
              print("\nAll packages either:")
              print("  - Are new (not on PyPI yet)")
              print("  - Have new versions not yet published")
              print("\nProceeding with publication...")
          EOF
      
      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          skip-existing: true