ci: publish canary on PRs to main and publish on push to main (skip if version exists)

Author: omarsdev

.github/workflows/ci.yml

@@ -164,3 +164,75 @@ jobs:
       - name: Build example for iOS
         run: |
           yarn turbo run build:ios --cache-dir="${{ env.TURBO_CACHE_DIR }}"
+
+  publish-canary:
+    name: Publish canary to npm (PRs to main)
+    if: github.event_name == 'pull_request' && github.base_ref == 'main' && github.event.pull_request.head.repo.full_name == github.repository
+    needs: [lint, test, build-library]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Build package
+        run: yarn prepare
+
+      - name: Configure npm auth
+        run: |
+          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish canary
+        env:
+          GITHUB_SHA: ${{ github.sha }}
+        run: |
+          BASE_VERSION=$(node -p "require('./package.json').version")
+          SHORT_SHA=${GITHUB_SHA::7}
+          # Use run_number to avoid collisions on repeated pushes
+          CANARY_VERSION="$BASE_VERSION-canary.${{ github.run_number }}.$SHORT_SHA"
+          echo "Canary version: $CANARY_VERSION"
+          npm version "$CANARY_VERSION" --no-git-tag-version
+          npm publish --access public --tag canary
+
+  publish:
+    name: Publish to npm (push to main)
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    needs: [lint, test, build-library]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Configure npm auth
+        run: |
+          echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Skip if version already published
+        id: version-check
+        run: |
+          PKG=$(node -p "require('./package.json').name")
+          VER=$(node -p "require('./package.json').version")
+          echo "pkg=$PKG ver=$VER"
+          PUBLISHED=$(npm view "$PKG@$VER" version || true)
+          if [ "$PUBLISHED" = "$VER" ]; then
+            echo "already=true" >> $GITHUB_OUTPUT
+          else
+            echo "already=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Build package
+        if: steps.version-check.outputs.already == 'false'
+        run: yarn prepare
+
+      - name: Publish
+        if: steps.version-check.outputs.already == 'false'
+        run: npm publish --access public