alpha-npm.yml

name: Alpha to NPM Registry

on:
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# Allow only one concurrent deployment,but do NOT cancel in-progress runs as
# we want to allow these alpha deployments to complete.
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read
  id-token: write # necessary for NPM provenance

jobs:
  publish-alpha-npm:
    name: NPM Publish
    runs-on: ubuntu-latest

    env:
      # Packages not listed here will be excluded from publishing
      PACKAGES: "agent api common credentials crypto dids identity-agent proxy-agent user-agent"

    steps:
      - name: Checkout source
        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2

      - name: Set up Node.js
        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
        with:
          node-version: 18
          registry-url: https://registry.npmjs.org/

      - name: Install latest npm
        run: npm install -g npm@latest

      # Note - this is not required but it gives a clean failure prior to attempting a release if
      # the GH workflow runner is not authenticated with NPMjs.com
      - name: Verify NPM token is authenticated with NPMjs.com
        env:
          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
        run: npm whoami

      - name: Install dependencies
        run: npm ci

      - name: Generate alpha prerelease and bump package.json @web5/* versions
        env:
          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
        run: |
          SHORT_COMMIT_SHA=$(git rev-parse --short HEAD)
          YYYYMMDD=$(date +'%Y%m%d')
          ALPHA_PRERELEASE="alpha-$YYYYMMDD-$SHORT_COMMIT_SHA"
          node ./scripts/bump-workspace.mjs --prerelease=$ALPHA_PRERELEASE
        shell: bash

      - name: Build all workspace packages
        run: npm run build

      - name: Publish selected @web5/* packages
        env:
          NODE_AUTH_TOKEN: ${{secrets.npm_token}}
        run: |
          for package in $PACKAGES; do
            cd packages/$package
            npm publish --tag alpha --no-git-tag-version --access public --provenance
            cd ../..
          done
        shell: bash