publish.yml

name: Publish Package

on:
  push:
    branches:
      - main

permissions:
  contents: read
  id-token: write

jobs:
  publish:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - name: Check out repository
        uses: actions/checkout@v7

      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: "24.x"
          registry-url: "https://registry.npmjs.org"
          package-manager-cache: false

      - name: Set up OIDC-capable npm
        run: npm install --global "npm@^11.15.0"

      - name: Install dependencies
        run: npm ci

      - name: Typecheck
        run: npm run typecheck

      - name: Run tests
        run: npm test

      - name: Check web application
        run: npm run check -w @pi-postbox/web

      - name: Build packages
        run: npm run build

      - name: Run packaged smoke test
        run: npm run smoke

      - name: Inspect package contents
        run: npm pack --dry-run

      - name: Publish to npm
        run: npm publish --access public