release-please.yml

name: Release Please

on:
  push:
    branches: [master]
  workflow_dispatch:
    inputs:
      tag:
        description: 'Existing release tag to publish (e.g. v1.10.0)'
        required: true

permissions:
  contents: write
  pull-requests: write
  issues: write
  id-token: write  # Required for npm Trusted Publishers (OIDC)

jobs:
  release-please:
    name: Release PR + Publish
    runs-on: ubuntu-latest
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        if: ${{ github.event_name == 'push' }}
        with:
          config-file: release-please-config.json
          manifest-file: .release-please-manifest.json

      - name: Decide publish mode
        id: mode
        run: |
          EVENT_NAME="${{ github.event_name }}"
          MANUAL_TAG="${{ github.event.inputs.tag }}"
          RELEASE_CREATED="${{ steps.release.outputs.release_created }}"

          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
            echo "should_publish=true" >> "$GITHUB_OUTPUT"
            echo "checkout_ref=$MANUAL_TAG" >> "$GITHUB_OUTPUT"
          elif [ "$RELEASE_CREATED" = "true" ]; then
            echo "should_publish=true" >> "$GITHUB_OUTPUT"
            echo "checkout_ref=${{ github.sha }}" >> "$GITHUB_OUTPUT"
          else
            echo "should_publish=false" >> "$GITHUB_OUTPUT"
          fi

      - uses: actions/checkout@v4
        if: ${{ steps.mode.outputs.should_publish == 'true' }}
        with:
          ref: ${{ steps.mode.outputs.checkout_ref }}

      - uses: pnpm/action-setup@v2
        if: ${{ steps.mode.outputs.should_publish == 'true' }}
        with:
          version: 10

      - uses: actions/setup-node@v4
        if: ${{ steps.mode.outputs.should_publish == 'true' }}
        with:
          node-version: '24'
          registry-url: 'https://registry.npmjs.org'
          cache: 'pnpm'

      - name: Install
        if: ${{ steps.mode.outputs.should_publish == 'true' }}
        run: pnpm install --frozen-lockfile

      - name: Check if version already published
        if: ${{ steps.mode.outputs.should_publish == 'true' }}
        run: |
          VERSION="$(node -e "console.log(JSON.parse(require('fs').readFileSync('package.json','utf8')).version)")"
          if npm view "codebase-context@${VERSION}" version >/dev/null 2>&1; then
            echo "Version ${VERSION} already exists on npm; skipping publish."
            echo "SKIP_PUBLISH=true" >> "$GITHUB_ENV"
          else
            echo "Version ${VERSION} not found on npm; will publish."
          fi

      - name: Quality gates
        if: ${{ steps.mode.outputs.should_publish == 'true' && env.SKIP_PUBLISH != 'true' }}
        run: |
          pnpm lint
          pnpm format:check
          pnpm type-check
          pnpm build
          pnpm test

      - name: Publish to npm with provenance
        if: ${{ steps.mode.outputs.should_publish == 'true' && env.SKIP_PUBLISH != 'true' }}
        run: pnpm publish --access public --no-git-checks --provenance