name: Publish to NPM

on:
  push:
    tags:
      - 'v*'  # Triggers on version tags like v2.12.10, v3.0.0, etc.

jobs:
  publish:
    runs-on: ubuntu-latest
    environment: npm-publish
    permissions:
      contents: write # Required to create GitHub releases
      id-token: write  # Required for OIDC authentication with NPM

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: npm install --legacy-peer-deps

      - name: Build package
        run: npm run build

      - name: Publish to NPM
        run: npm publish --access public

      - name: Create GitHub Release
        run: gh release create "$GITHUB_REF_NAME" --generate-notes --title "$GITHUB_REF_NAME" --verify-tag
        env:
          GH_TOKEN: ${{ github.token }}