publish-alpha.yml

name: Publish Alpha

on:
  workflow_dispatch:

concurrency: ${{ github.workflow }}

permissions:
  contents: write

jobs:
  publish-alpha:
    name: Publish Alpha
    runs-on: ubuntu-latest
    environment: npm
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v6

      - name: Setup pnpm
        uses: pnpm/action-setup@v6
        with:
          version: 10

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 24
          cache: pnpm
          registry-url: https://registry.npmjs.org

      - name: Install Dependencies
        run: pnpm install --frozen-lockfile

      - name: Validate npm token
        run: |
          if [ -z "${NPM_TOKEN:-}" ]; then
            echo "::error::NPM_TOKEN secret is required for publishing."
            exit 1
          fi
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Test
        run: pnpm test

      - name: Typecheck
        run: pnpm typecheck

      - name: Build
        run: pnpm build

      - name: Lint
        run: pnpm lint

      - name: Pack Check
        run: pnpm pack:check

      - name: Configure npm auth
        run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > "$HOME/.npmrc"
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Publish Alpha
        run: pnpm release:alpha
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Set alpha dist-tags
        run: |
          for dir in packages/core packages/dom packages/router packages/testing; do
            name=$(node -p "require('./$dir/package.json').name")
            version=$(node -p "require('./$dir/package.json').version")
            npm dist-tag add "$name@$version" alpha
            echo "Set $name alpha → $version"
          done
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Push git tags
        run: |
          for dir in packages/core packages/dom packages/router packages/testing; do
            name=$(node -p "require('./$dir/package.json').name")
            version=$(node -p "require('./$dir/package.json').version")
            tag="$name@$version"
            remote_sha=$(git ls-remote --tags origin "refs/tags/$tag" | awk '{print $1}')
            if [ -n "$remote_sha" ]; then
              local_sha=$(git rev-list -n 1 "$tag" 2>/dev/null || echo "")
              if [ "$remote_sha" = "$local_sha" ]; then
                echo "⏭️  git tag $tag already exists at $remote_sha on remote, skipping"
              else
                echo "::error::git tag $tag exists on remote at $remote_sha but local is $local_sha"
                exit 1
              fi
            else
              if ! git rev-parse "$tag" >/dev/null 2>&1; then
                git tag "$tag"
                echo "Created local tag $tag"
              fi
              git push origin "$tag"
              echo "✅ git tag $tag pushed"
            fi
          done

      - name: Verify alpha dist-tags
        run: |
          for dir in packages/core packages/dom packages/router packages/testing; do
            name=$(node -p "require('./$dir/package.json').name")
            expected=$(node -p "require('./$dir/package.json').version")
            attempt=0
            max_attempts=25
            while [ $attempt -lt $max_attempts ]; do
              attempt=$((attempt + 1))
              actual=$(npm view "$name" dist-tags.alpha --prefer-online 2>/dev/null || npm view "$name" dist-tags.alpha)
              if [ "$actual" = "$expected" ]; then
                echo "✅ $name alpha dist-tag: $actual (attempt $attempt)"
                break
              fi
              echo "Attempt $attempt: $name — expected $expected, got $actual"
              if [ $attempt -lt $max_attempts ]; then
                sleep $((RANDOM % 6 + 10))
              fi
            done
            if [ "$actual" != "$expected" ]; then
              echo "::error::alpha dist-tag for $name is $actual, expected $expected (after $max_attempts attempts)"
              exit 1
            fi
          done
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Verify git tags on remote
        run: |
          for dir in packages/core packages/dom packages/router packages/testing; do
            name=$(node -p "require('./$dir/package.json').name")
            version=$(node -p "require('./$dir/package.json').version")
            tag="$name@$version"
            attempt=0
            max_attempts=25
            while [ $attempt -lt $max_attempts ]; do
              attempt=$((attempt + 1))
              if git ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
                remote_sha=$(git ls-remote --tags origin "refs/tags/$tag" | awk '{print $1}')
                echo "✅ $tag found on remote at $remote_sha (attempt $attempt)"
                break
              fi
              echo "Attempt $attempt: $tag not yet found on remote"
              if [ $attempt -lt $max_attempts ]; then
                sleep $((RANDOM % 6 + 10))
              fi
            done
            if ! git ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
              echo "::error::git tag $tag not found on remote (after $max_attempts attempts)"
              exit 1
            fi
          done