publish.yml

name: Publish to npm

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: read
  id-token: write

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm
          registry-url: https://registry.npmjs.org

      - name: Extract and validate version from tag
        id: version
        run: |
          # Extract version from tag (remove 'v' prefix)
          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
          echo "Tag version: $TAG_VERSION"

          # Validate semver format (MAJOR.MINOR.PATCH with optional pre-release)
          if [[ ! "$TAG_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$ ]]; then
            echo "Error: Invalid semver format '$TAG_VERSION'"
            echo "Version must be in format: MAJOR.MINOR.PATCH (e.g., 0.2.0, 1.0.0)"
            echo ""
            echo "Examples of valid tags:"
            echo "  v0.2.0"
            echo "  v1.0.0"
            echo "  v1.0.0-beta.1"
            exit 1
          fi

          echo "version=$TAG_VERSION" >> $GITHUB_OUTPUT
          echo "Valid version: $TAG_VERSION"

      - name: Update package.json version
        run: |
          npm version ${{ steps.version.outputs.version }} --no-git-tag-version --allow-same-version

      - name: Install dependencies
        run: npm ci

      - name: Build
        run: npm run build

      - name: Publish
        run: npm publish --provenance --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}