publish.yml

name: Publish

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: read

jobs:
  npm:
    name: Publish to npm
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - uses: pnpm/action-setup@v2
        with:
          version: 10

      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          registry-url: 'https://registry.npmjs.org'
          cache: 'pnpm'

      - name: Install
        run: pnpm install --frozen-lockfile

      - name: Verify tag matches package.json version
        run: node scripts/ci/ensure-tag-matches-package.mjs
        env:
          GITHUB_REF_NAME: ${{ github.ref_name }}

      - name: Check if version already published
        run: |
          VERSION="$(node -e "console.log(JSON.parse(require('fs').readFileSync('package.json','utf8')).version)")"
          if npm view "codebase-context@${VERSION}" version >/dev/null 2>&1; then
            echo "Version ${VERSION} already exists on npm; skipping publish."
            echo "SKIP_PUBLISH=true" >> "$GITHUB_ENV"
          else
            echo "Version ${VERSION} not found on npm; will publish."
          fi

      - name: Quality gates
        if: env.SKIP_PUBLISH != 'true'
        run: |
          pnpm lint
          pnpm format:check
          pnpm type-check
          pnpm test
          pnpm build

      - name: Publish
        if: env.SKIP_PUBLISH != 'true'
        run: pnpm publish --access public --no-git-checks
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}