ci-cd.yaml

name: CI and Publish

on:
  push:
    branches:
      - master
    tags:
      - '*'
  pull_request:
    branches:
      - master

permissions:
  id-token: write # Required for OIDC (https://docs.npmjs.com/trusted-publishers)
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '24'

      - name: Install dependencies
        run: npm ci

      - name: Run tests
        run: npm run test

  publish:
    runs-on: ubuntu-latest
    needs: test
    if: startsWith(github.ref, 'refs/tags/')

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '24'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: npm ci

      - name: Check tag is beta
        id: is_tag_beta
        run: |
          if [[ "${{ github.ref }}" == "refs/tags/"* ]]; then
            tags_name="${{ github.ref }}"
            tags_name="${tags_name#refs/tags/}"
            if [[ $tags_name == *"beta"* ]]; then
              echo "is_beta=true" >> $GITHUB_OUTPUT
            else
              echo "is_beta=false" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Publish to npm (beta)
        if: steps.is_tag_beta.outputs.is_beta == 'true'
        run: npm publish --tag beta
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Publish to npm
        if: steps.is_tag_beta.outputs.is_beta == 'false'
        run: npm publish
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}