fix(ci): make npm publish idempotent per version

.github/workflows/publish.yml

@@ -16,6 +16,10 @@ jobs:
   publish:
     runs-on: ubuntu-latest
 
+    concurrency:
+      group: publish-${{ github.event_name }}-${{ github.sha }}
+      cancel-in-progress: false
+
     steps:
       - uses: actions/checkout@v7
 
@@ -77,7 +81,7 @@ jobs:
 
       - name: Publish core to npm
         working-directory: ./packages/core
-        run: pnpm publish --tag ${{ steps.version.outputs.tag }} --access public --provenance --no-git-checks
+        run: ../../scripts/publish-if-new.sh ${{ steps.version.outputs.tag }}
 
       # Templates use `skybridge: workspace:*` so dev/CI build against the
       # local package. pnpm doesn't rewrite that when bundling the templates
@@ -93,11 +97,11 @@ jobs:
 
       - name: Publish create-skybridge to npm
         working-directory: ./packages/create-skybridge
-        run: pnpm publish --tag ${{ steps.version.outputs.tag }} --access public --provenance --no-git-checks
+        run: ../../scripts/publish-if-new.sh ${{ steps.version.outputs.tag }}
 
       - name: Publish devtools to npm
         working-directory: ./packages/devtools
-        run: pnpm publish --tag ${{ steps.version.outputs.tag }} --access public --provenance --no-git-checks
+        run: ../../scripts/publish-if-new.sh ${{ steps.version.outputs.tag }}
 
       - name: Restore templates workspace deps
         if: github.event_name == 'release'

scripts/publish-if-new.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+tag=$1
+name=$(node -p 'require("./package.json").name')
+version=$(node -p 'require("./package.json").version')
+
+if npm view "$name@$version" version >/dev/null 2>&1; then
+  echo "$name@$version is already published, skipping"
+  exit 0
+fi
+
+pnpm publish --tag "$tag" --access public --provenance --no-git-checks