publish-socketbin.yml

name: 📦 Publish @socketbin packages to npm registry

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to publish (datetime format: 2025.01.22.143052, auto-generated if omitted)'
        required: false
        type: string
      method:
        description: 'Build method to use'
        required: false
        type: choice
        options:
          - smol
          - sea
          - smol-sea
        default: smol
      dry-run:
        description: 'Dry run (build but do not publish)'
        required: false
        type: boolean
        default: false

jobs:
  build-binaries:
    name: Build ${{ matrix.platform }}-${{ matrix.arch }}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          # Linux builds
          - os: ubuntu-latest
            platform: linux
            arch: x64
          - os: ubuntu-latest
            platform: linux
            arch: arm64

          # Alpine Linux builds
          - os: ubuntu-latest
            platform: alpine
            arch: x64
          - os: ubuntu-latest
            platform: alpine
            arch: arm64

          # macOS builds
          - os: macos-latest
            platform: darwin
            arch: x64
          - os: macos-latest
            platform: darwin
            arch: arm64

          # Windows builds
          - os: windows-latest
            platform: win32
            arch: x64
          - os: windows-latest
            platform: win32
            arch: arm64

    steps:
      - name: Checkout
        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
        with:
          autocrlf: false

      - name: Setup Node.js
        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
        with:
          node-version: 22
          registry-url: 'https://registry.npmjs.org'

      - name: Setup pnpm
        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v3.0.0
        with:
          version: 8

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build stub
        run: pnpm run build:sea:stub

      - name: Build binary
        id: build-binary
        continue-on-error: true
        run: |
          pnpm run build --sea -- \
            --platform=${{ matrix.platform }} \
            --arch=${{ matrix.arch }}

      - name: Build binary (fallback with clean rebuild)
        if: steps.build-binary.outcome == 'failure'
        run: |
          echo "Initial build failed, attempting clean rebuild with Node.js..."
          node packages/node-smol-builder/scripts/build.mjs --clean
          pnpm run build --sea -- \
            --platform=${{ matrix.platform }} \
            --arch=${{ matrix.arch }}

      - name: Verify binary
        run: |
          ls -la dist/sea/socket-*
          file dist/sea/socket-* || true

      - name: Upload binary artifact
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: binary-${{ matrix.platform }}-${{ matrix.arch }}
          path: dist/sea/socket-*
          retention-days: 1

  publish-packages:
    name: Publish to npm
    needs: build-binaries
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write  # For provenance

    steps:
      - name: Checkout
        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
        with:
          autocrlf: false

      - name: Setup Node.js
        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
        with:
          node-version: 22
          registry-url: 'https://registry.npmjs.org'

      - name: Determine version
        id: version
        run: |
          VERSION="${{ inputs.version }}"
          if [ -z "$VERSION" ]; then
            # Auto-generate version in datetime format: YYYY.MM.DD.HHmmss
            VERSION=$(date -u +'%Y.%m.%d.%H%M%S')
            echo "Generated version: $VERSION"
          else
            # Remove 'v' prefix if present
            VERSION="${VERSION#v}"
            echo "Using provided version: $VERSION"
          fi
          echo "version=${VERSION}" >> $GITHUB_OUTPUT

      - name: Check version consistency
        run: |
          echo "🔍 Checking version consistency for v${{ steps.version.outputs.version }}..."
          node scripts/check-version-consistency.mjs ${{ steps.version.outputs.version }}

      - name: Download all binaries
        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
        with:
          path: dist/sea
          pattern: binary-*

      - name: Organize binaries
        run: |
          # Flatten directory structure from artifacts
          for dir in dist/sea/binary-*; do
            if [ -d "$dir" ]; then
              mv "$dir"/* dist/sea/
              rmdir "$dir"
            fi
          done

          # List all binaries
          echo "Downloaded binaries:"
          ls -la dist/sea/

      - name: Generate and validate Linux x64
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=linux --arch=x64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

      - name: Publish Linux x64
        if: ${{ !inputs.dry-run }}
        run: |
          cd packages/binaries/cli-linux-x64
          npm publish --provenance --access public

      - name: Generate and publish Linux ARM64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=linux --arch=arm64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-linux-arm64
          npm publish --provenance --access public

      - name: Generate and publish Alpine x64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=alpine --arch=x64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-alpine-x64
          npm publish --provenance --access public

      - name: Generate and publish Alpine ARM64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=alpine --arch=arm64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-alpine-arm64
          npm publish --provenance --access public

      - name: Generate and publish macOS x64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=darwin --arch=x64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-darwin-x64
          npm publish --provenance --access public

      - name: Generate and publish macOS ARM64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=darwin --arch=arm64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-darwin-arm64
          npm publish --provenance --access public

      - name: Generate and publish Windows x64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=win32 --arch=x64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-win32-x64
          npm publish --provenance --access public

      - name: Generate and publish Windows ARM64
        if: ${{ !inputs.dry-run }}
        run: |
          node scripts/generate-binary-package.mjs \
            --platform=win32 --arch=arm64 \
            --version=${{ steps.version.outputs.version }} \
            --method=${{ inputs.method }}

          cd packages/binaries/cli-win32-arm64
          npm publish --provenance --access public

      - name: Dry run summary
        if: ${{ inputs.dry-run }}
        run: |
          echo "🚫 Dry run mode - packages were NOT published"
          echo ""
          echo "Generated packages:"
          find packages/binaries -name package.json -exec echo {} \; -exec jq -r '.name + "@" + .version' {} \;

  publish-main:
    name: Publish main socket package
    needs: publish-packages
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write

    steps:
      - name: Checkout
        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
        with:
          autocrlf: false

      - name: Setup Node.js
        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
        with:
          node-version: 22
          registry-url: 'https://registry.npmjs.org'

      - name: Determine version
        id: version
        run: |
          VERSION="${{ inputs.version }}"
          if [ -z "$VERSION" ]; then
            # Auto-generate version in datetime format: YYYY.MM.DD.HHmmss
            VERSION=$(date -u +'%Y.%m.%d.%H%M%S')
            echo "Generated version: $VERSION"
          else
            # Remove 'v' prefix if present
            VERSION="${VERSION#v}"
            echo "Using provided version: $VERSION"
          fi
          echo "version=${VERSION}" >> $GITHUB_OUTPUT

      - name: Update package.json for @socketbin
        run: |
          cd src/sea/npm-package

          # Update version
          npm version ${{ steps.version.outputs.version }} --no-git-tag-version

          # Update package.json to use optionalDependencies
          node -e "
          const fs = require('fs');
          const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));

          // Remove old postinstall script
          delete pkg.scripts?.postinstall;

          // Add dispatcher script to bin
          pkg.bin = { socket: 'bin/socket.js' };

          // Add optionalDependencies
          pkg.optionalDependencies = {
            '@socketbin/cli-alpine-arm64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-alpine-x64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-darwin-arm64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-darwin-x64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-linux-arm64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-linux-x64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-win32-arm64': '${{ steps.version.outputs.version }}',
            '@socketbin/cli-win32-x64': '${{ steps.version.outputs.version }}'
          };

          // Update files list
          pkg.files = ['bin', 'README.md'];

          fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2) + '\n');
          "

          # Show the updated package.json
          cat package.json

      - name: Validate main package
        run: |
          cd src/sea/npm-package
          # Basic validation
          test -f package.json || exit 1
          test -f bin/socket.js || exit 1
          test -f README.md || exit 1
          echo "✓ Package structure validated"

      - name: Publish main package
        if: ${{ !inputs.dry-run }}
        working-directory: src/sea/npm-package
        run: npm publish --provenance --access public

      - name: Dry run summary
        if: ${{ inputs.dry-run }}
        run: |
          echo "🚫 Dry run mode - main package was NOT published"
          echo ""
          echo "Would have published:"
          cd src/sea/npm-package
          echo "socket@$(jq -r .version package.json)"