chore: wip

Author: glennmichael123

.github/workflows/publish.yml

@@ -0,0 +1,75 @@
+name: Publish to NPM
+
+on:
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Dry run (do not actually publish)'
+        required: false
+        default: true
+        type: boolean
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write  # Required for OIDC provenance
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install Dependencies
+        run: bun install
+
+      - name: Build
+        run: bun run build
+        working-directory: packages/headwind
+
+      - name: Setup Zig
+        uses: goto-bus-stop/setup-zig@v2
+        with:
+          version: master
+
+      - name: Setup pantry
+        uses: home-lang/pantry/packages/action@main
+        with:
+          setup-only: 'true'
+
+      - name: Verify OIDC Token Available
+        run: |
+          if [ -n "$ACTIONS_ID_TOKEN_REQUEST_URL" ]; then
+            echo "OIDC token endpoint available"
+          else
+            echo "ERROR: OIDC token endpoint not available"
+            exit 1
+          fi
+
+      - name: Verify pantry installed
+        run: pantry --version
+
+      - name: Publish (Dry Run)
+        if: ${{ inputs.dry_run == true }}
+        run: pantry publish --dry-run --access public
+        working-directory: packages/headwind
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Publish
+        if: ${{ inputs.dry_run == false }}
+        run: pantry publish --access public
+        working-directory: packages/headwind
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}