release.yml

name: Release

on:
  push:
    tags:
      - 'v*.*.*'
  workflow_dispatch:
    inputs:
      tag:
        description: Existing release tag to rebuild/upload assets for
        required: true

permissions:
  contents: write

env:
  RELEASE_REPO: ${{ github.repository }}
  RELEASE_TAG: ${{ github.ref_type == 'tag' && github.ref_name || inputs.tag }}

jobs:
  ensure-release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Ensure GitHub release exists
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        shell: bash
        run: |
          git fetch --tags --force
          if ! git rev-parse -q --verify "refs/tags/$RELEASE_TAG" >/dev/null; then
            echo "Tag $RELEASE_TAG does not exist. Push the tag first or run npm run release:*."
            exit 1
          fi

          if gh release view "$RELEASE_TAG" --repo "$RELEASE_REPO" >/dev/null 2>&1; then
            echo "Release $RELEASE_TAG already exists."
          else
            gh release create "$RELEASE_TAG" --repo "$RELEASE_REPO" --title "$RELEASE_TAG" --notes "Release $RELEASE_TAG"
          fi

  build-release-assets:
    needs: ensure-release
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: node20-linux-x64
            asset_name: ship-linux-x64
            upload_name: ship-linux-x64
          - os: ubuntu-latest
            target: node20-linux-arm64
            asset_name: ship-linux-arm64
            upload_name: ship-linux-arm64
          - os: macos-latest
            target: node20-macos-x64
            asset_name: ship-darwin-x64
            upload_name: ship-darwin-x64
          - os: macos-latest
            target: node20-macos-arm64
            asset_name: ship-darwin-arm64
            upload_name: ship-darwin-arm64
          - os: windows-latest
            target: node20-win-x64
            asset_name: ship-windows-x64
            upload_name: ship-windows-x64.exe
    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ env.RELEASE_TAG }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Build standalone binary
        shell: bash
        run: |
          npm run build
          mkdir -p release-assets
          npx pkg dist/index.js --targets ${{ matrix.target }} --output release-assets/${{ matrix.asset_name }}
          if [ "${{ matrix.os }}" != "windows-latest" ] && [ "${{ matrix.asset_name }}" != "${{ matrix.upload_name }}" ]; then
            cp "release-assets/${{ matrix.asset_name }}" "release-assets/${{ matrix.upload_name }}"
          fi

      - name: Upload binary to release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        shell: bash
        run: gh release upload "$RELEASE_TAG" "release-assets/${{ matrix.upload_name }}" --repo "$RELEASE_REPO" --clobber

  upload-package:
    needs: ensure-release
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ env.RELEASE_TAG }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Build package tarballs
        shell: bash
        run: |
          npm run build
          PACKAGE_TGZ="$(npm pack | tail -n 1)"
          cp "$PACKAGE_TGZ" ship-latest.tgz
          echo "PACKAGE_TGZ=$PACKAGE_TGZ" >> "$GITHUB_ENV"

      - name: Upload tarballs to release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        shell: bash
        run: |
          gh release upload "$RELEASE_TAG" "$PACKAGE_TGZ" --repo "$RELEASE_REPO" --clobber
          gh release upload "$RELEASE_TAG" ship-latest.tgz --repo "$RELEASE_REPO" --clobber

  publish-npm:
    needs:
      - ensure-release
      - build-release-assets
      - upload-package
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ env.RELEASE_TAG }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: npm ci

      - name: Publish package to npm if needed
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        shell: bash
        run: |
          if [ -z "${NODE_AUTH_TOKEN:-}" ]; then
            echo "NPM_TOKEN is not configured. Skipping npm publish."
            exit 0
          fi

          PACKAGE_NAME="$(node -p "require('./package.json').name")"
          PACKAGE_VERSION="$(node -p "require('./package.json').version")"

          if npm view "$PACKAGE_NAME@$PACKAGE_VERSION" version >/dev/null 2>&1; then
            echo "$PACKAGE_NAME@$PACKAGE_VERSION is already published. Skipping npm publish."
            exit 0
          fi

          npm publish --access public