moltmarkets-api/.github/workflows/publish-sdk.yml at main · dylanduyvu/moltmarkets-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
name: Publish SDK

on:
  push:
    tags:
      - "sdk-v*"      # e.g. sdk-v0.1.0
  workflow_dispatch:   # manual trigger for testing

permissions:
  contents: read
  id-token: write     # npm provenance

defaults:
  run:
    working-directory: sdk

jobs:
  build:
    name: Build & Typecheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: npm
          cache-dependency-path: sdk/package-lock.json
      - run: npm ci
      - run: npm run typecheck
      - run: npm run build
      - name: Verify dist contents
        run: |
          test -f dist/index.js   || (echo "Missing ESM build" && exit 1)
          test -f dist/index.cjs  || (echo "Missing CJS build" && exit 1)
          test -f dist/index.d.ts || (echo "Missing declarations" && exit 1)
          echo "✅ All build artifacts present"

  publish:
    name: Publish to npm
    needs: build
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags/sdk-v')
    environment: npm-publish
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: npm
          cache-dependency-path: sdk/package-lock.json
          registry-url: "https://registry.npmjs.org"
      - run: npm ci
      - run: npm run build
      - run: npm publish --provenance --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}