publication.yml

name: Publication 📦

on:
  release:
    types: [published]

jobs:
  release:
    runs-on: ubuntu-latest
    environment: npm
    permissions:
      contents: read
      id-token: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          ref: ${{ github.event.release.tag_name }}

      - name: Verify tag matches package.json
        run: |
          TAG_NAME="${{ github.event.release.tag_name }}"
          TAG_VERSION="${TAG_NAME#v}"
          PKG_VERSION=$(jq -r .version package.json)

          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
            echo "Error: 태그 버전과 package.json 버전이 일치하지 않습니다."
            echo "tag version: ${TAG_VERSION}"
            echo "package.json version: ${PKG_VERSION}"
            exit 1
          fi
          echo "✅ 버전 일치 확인: ${TAG_VERSION}"

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2

      - name: Build package
        run: |
          bun install --frozen-lockfile
          bun run prepare
          bun run build:lib

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: "24"
          registry-url: https://registry.npmjs.org

      - name: Publish to npm
        run: npm publish --provenance --ignore-scripts # --provenance: OIDC 인증 및 출처 증명, --ignore-scripts: skip prepare script (already ran in Build package step)