publish.yml

name: Publish to npm

on:
  push:
    branches:
      - main
    paths-ignore:
      - '**.md'
      - '.gitignore'

jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install

      - name: Build
        run: bun run build

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '24'
          registry-url: 'https://registry.npmjs.org'

      # Check if version already published
      - name: Check if version exists
        id: version-check
        run: |
          PACKAGE_NAME=$(node -p "require('./package.json').name")
          PACKAGE_VERSION=$(node -p "require('./package.json').version")
          if npm view "${PACKAGE_NAME}@${PACKAGE_VERSION}" version 2>/dev/null; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "Version ${PACKAGE_VERSION} already published, skipping..."
          else
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "Version ${PACKAGE_VERSION} not found, will publish..."
          fi

      # Trusted Publishing via OIDC - no token needed!
      # See: https://docs.npmjs.com/trusted-publishers/
      - name: Publish to npm
        if: steps.version-check.outputs.exists == 'false'
        run: npm publish --access public --provenance