release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      package:
        description: "Package to release"
        required: true
        type: choice
        options:
          - capture-protocol
          - capture-viewer
          - core
          - viewer
          - editor
          - nodes
          - mcp
          - ifc-converter
          - cli
          - all
      bump:
        description: "Version bump (beta publishes a prerelease on the beta dist-tag)"
        required: true
        type: choice
        options:
          - patch
          - minor
          - major
          - beta
          - none
      dry-run:
        description: "Dry run (no publish)"
        required: false
        type: boolean
        default: false

jobs:
  cli-smoke:
    if: inputs.package == 'cli' || inputs.package == 'all'
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.14

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Smoke-test the packed CLI and editor runtime
        env:
          PASCAL_PORTABLE_BUILD: "1"
        run: |
          bun run build --filter editor
          cd packages/cli
          bun run build
          bun run stage-runtime
          bun run smoke-runtime

  release:
    needs: cli-smoke
    if: ${{ !cancelled() && (needs.cli-smoke.result == 'success' || needs.cli-smoke.result == 'skipped') }}
    runs-on: ubuntu-latest
    environment: npm
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.14

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          registry-url: "https://registry.npmjs.org"

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Configure git
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"

      - name: Bump versions and sync inter-package references
        run: |
          BUMP=${{ inputs.bump }}
          TARGET=${{ inputs.package }}

          bump_version() {
            local v=$1
            if [ "$BUMP" = "beta" ]; then
              if [[ "$v" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+)-beta\.([0-9]+)$ ]]; then
                echo "${BASH_REMATCH[1]}.${BASH_REMATCH[2]}.${BASH_REMATCH[3]}-beta.$((BASH_REMATCH[4]+1))"
                return
              fi
              IFS='.' read -r MAJ _ _ <<< "${v%%-*}"
              if [ "$MAJ" -lt 1 ]; then
                echo "1.0.0-beta.1"
              else
                echo "$((MAJ+1)).0.0-beta.1"
              fi
              return
            fi
            IFS='.' read -r MAJ MIN PAT <<< "$v"
            if [ "$BUMP" = "major" ]; then MAJ=$((MAJ+1)); MIN=0; PAT=0; fi
            if [ "$BUMP" = "minor" ]; then MIN=$((MIN+1)); PAT=0; fi
            if [ "$BUMP" = "patch" ]; then PAT=$((PAT+1)); fi
            if [ "$BUMP" = "none" ]; then echo "$v"; return; fi
            echo "$MAJ.$MIN.$PAT"
          }

          if [ "$BUMP" = "beta" ]; then
            echo "NPM_TAG=beta" >> "$GITHUB_ENV"
          else
            echo "NPM_TAG=latest" >> "$GITHUB_ENV"
          fi

          # Track new versions in shell-local vars.
          # NOTE: $GITHUB_ENV writes don't surface within the same step, so the
          # peerDeps sync below must use shell vars, not env indirection.
          declare -A NEW_VERSIONS

          for pkg in capture-protocol core viewer capture-viewer editor nodes mcp ifc-converter cli; do
            if [ "$TARGET" = "$pkg" ] || [ "$TARGET" = "all" ]; then
              CUR=$(jq -r '.version' packages/$pkg/package.json)
              NEW=$(bump_version "$CUR")
              jq --arg v "$NEW" '.version = $v' packages/$pkg/package.json > tmp.json && mv tmp.json packages/$pkg/package.json
              NEW_VERSIONS[$pkg]=$NEW
              UPPER=$(echo "$pkg" | tr '[:lower:]' '[:upper:]' | tr '-' '_')
              # Also export for the publish/commit/tag steps that follow.
              echo "${UPPER}_VERSION=$NEW" >> $GITHUB_ENV
              echo "Bumped @pascal-app/$pkg: $CUR → $NEW"
            fi
          done

          # Sync inter-package references in dependencies, peerDependencies, and devDependencies.
          # Anything that references a bumped @pascal-app/* package is updated to ^NEW.
          for pkg in capture-protocol core viewer capture-viewer editor nodes mcp ifc-converter cli; do
            FILE=packages/$pkg/package.json
            for dep in capture-protocol core viewer capture-viewer editor nodes mcp ifc-converter cli; do
              VAL="${NEW_VERSIONS[$dep]}"
              [ -z "$VAL" ] && continue
              jq --arg name "@pascal-app/$dep" --arg v "^$VAL" '
                if .dependencies[$name] then .dependencies[$name] = $v else . end
                | if .peerDependencies[$name] then .peerDependencies[$name] = $v else . end
                | if .devDependencies[$name] then .devDependencies[$name] = $v else . end
              ' "$FILE" > tmp.json && mv tmp.json "$FILE"
            done
          done

          echo "=== @pascal-app/* refs after sync ==="
          for pkg in capture-protocol core viewer capture-viewer editor nodes mcp ifc-converter cli; do
            echo "--- packages/$pkg/package.json ---"
            jq '{ dependencies: (.dependencies // {} | with_entries(select(.key | startswith("@pascal-app/")))), peerDependencies: (.peerDependencies // {} | with_entries(select(.key | startswith("@pascal-app/")))), devDependencies: (.devDependencies // {} | with_entries(select(.key | startswith("@pascal-app/")))) }' packages/$pkg/package.json
          done

          # Version and dependency ranges changed after the frozen install.
          # Refresh the lockfile so the release commit remains reproducible.
          bun install

          # A single-package release may depend on another package introduced
          # by this monorepo. Refuse to publish an uninstallable package when
          # that dependency is not part of this run and is absent from npm.
          RELEASE_PACKAGES="capture-protocol core viewer capture-viewer editor nodes mcp ifc-converter cli"
          if [ "$TARGET" != "all" ]; then
            FILE="packages/$TARGET/package.json"
            while IFS=$'\t' read -r DEP RANGE; do
              SLUG="${DEP#@pascal-app/}"
              case " $RELEASE_PACKAGES " in
                *" $SLUG "*)
                  if ! npm view "$DEP@$RANGE" version >/dev/null 2>&1; then
                    echo "Missing required published dependency: $DEP@$RANGE"
                    echo "Release $SLUG first or use the all-package release."
                    exit 1
                  fi
                  ;;
              esac
            done < <(
              jq -r '
                [(.dependencies // {}), (.peerDependencies // {})]
                | add
                | to_entries[]
                | select(.key | startswith("@pascal-app/"))
                | [.key, .value]
                | @tsv
              ' "$FILE"
            )
          fi

      - name: Build & publish capture protocol
        if: inputs.package == 'capture-protocol' || inputs.package == 'all'
        working-directory: packages/capture-protocol
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION"
          fi

      - name: Validate portable editor runtime
        if: inputs.package == 'cli' || inputs.package == 'all'
        env:
          PASCAL_PORTABLE_BUILD: "1"
        run: |
          bun run build --filter editor
          cd packages/cli
          bun run build
          bun run stage-runtime
          bun run smoke-runtime

      - name: Build & publish core
        if: inputs.package == 'core' || inputs.package == 'all'
        working-directory: packages/core
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/core@$CORE_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/core@$CORE_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/core@$CORE_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/core@$CORE_VERSION"
          fi

      - name: Build & publish viewer
        if: inputs.package == 'viewer' || inputs.package == 'all'
        working-directory: packages/viewer
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/viewer@$VIEWER_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/viewer@$VIEWER_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/viewer@$VIEWER_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/viewer@$VIEWER_VERSION"
          fi

      - name: Build & publish capture viewer
        if: inputs.package == 'capture-viewer' || inputs.package == 'all'
        working-directory: packages/capture-viewer
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION"
          fi

      - name: Publish editor
        if: inputs.package == 'editor' || inputs.package == 'all'
        working-directory: packages/editor
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/editor@$EDITOR_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/editor@$EDITOR_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/editor@$EDITOR_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/editor@$EDITOR_VERSION"
          fi

      - name: Build & publish nodes
        if: inputs.package == 'nodes' || inputs.package == 'all'
        working-directory: packages/nodes
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/nodes@$NODES_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/nodes@$NODES_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/nodes@$NODES_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/nodes@$NODES_VERSION"
          fi

      - name: Build & publish mcp
        if: inputs.package == 'mcp' || inputs.package == 'all'
        working-directory: packages/mcp
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/mcp@$MCP_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/mcp@$MCP_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/mcp@$MCP_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/mcp@$MCP_VERSION"
          fi

      - name: Build & publish ifc-converter
        if: inputs.package == 'ifc-converter' || inputs.package == 'all'
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          # ifc-converter depends on @pascal-app/core (workspace) — build it first
          bun run build --filter @pascal-app/core 2>/dev/null || (cd packages/core && bun run build)
          cd packages/ifc-converter
          bun run build
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/ifc-converter@$IFC_CONVERTER_VERSION"
            npm publish --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/ifc-converter@$IFC_CONVERTER_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/ifc-converter@$IFC_CONVERTER_VERSION is already published; continuing release recovery"
          else
            npm publish --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/ifc-converter@$IFC_CONVERTER_VERSION"
          fi

      - name: Publish CLI
        if: inputs.package == 'cli' || inputs.package == 'all'
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        run: |
          cd packages/cli
          if [ "${{ inputs.dry-run }}" = "true" ]; then
            echo "🏜️ Dry run — would publish @pascal-app/cli@$CLI_VERSION"
            npm publish --ignore-scripts --dry-run --access public --tag "$NPM_TAG"
          elif npm view "@pascal-app/cli@$CLI_VERSION" version >/dev/null 2>&1; then
            echo "📦 @pascal-app/cli@$CLI_VERSION is already published; continuing release recovery"
          else
            npm publish --ignore-scripts --access public --tag "$NPM_TAG"
            echo "📦 Published @pascal-app/cli@$CLI_VERSION"
          fi

      - name: Commit version bumps & tag
        if: inputs.dry-run == false
        run: |
          git add -A
          PKGS=""
          TAGS=""

          if [ -n "$CAPTURE_PROTOCOL_VERSION" ]; then
            PKGS="$PKGS @pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION"
            TAGS="$TAGS @pascal-app/capture-protocol@$CAPTURE_PROTOCOL_VERSION"
          fi
          if [ -n "$CORE_VERSION" ]; then
            PKGS="$PKGS @pascal-app/core@$CORE_VERSION"
            TAGS="$TAGS @pascal-app/core@$CORE_VERSION"
          fi
          if [ -n "$VIEWER_VERSION" ]; then
            PKGS="$PKGS @pascal-app/viewer@$VIEWER_VERSION"
            TAGS="$TAGS @pascal-app/viewer@$VIEWER_VERSION"
          fi
          if [ -n "$CAPTURE_VIEWER_VERSION" ]; then
            PKGS="$PKGS @pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION"
            TAGS="$TAGS @pascal-app/capture-viewer@$CAPTURE_VIEWER_VERSION"
          fi
          if [ -n "$EDITOR_VERSION" ]; then
            PKGS="$PKGS @pascal-app/editor@$EDITOR_VERSION"
            TAGS="$TAGS @pascal-app/editor@$EDITOR_VERSION"
          fi
          if [ -n "$NODES_VERSION" ]; then
            PKGS="$PKGS @pascal-app/nodes@$NODES_VERSION"
            TAGS="$TAGS @pascal-app/nodes@$NODES_VERSION"
          fi
          if [ -n "$MCP_VERSION" ]; then
            PKGS="$PKGS @pascal-app/mcp@$MCP_VERSION"
            TAGS="$TAGS @pascal-app/mcp@$MCP_VERSION"
          fi
          if [ -n "$IFC_CONVERTER_VERSION" ]; then
            PKGS="$PKGS @pascal-app/ifc-converter@$IFC_CONVERTER_VERSION"
            TAGS="$TAGS @pascal-app/ifc-converter@$IFC_CONVERTER_VERSION"
          fi
          if [ -n "$CLI_VERSION" ]; then
            PKGS="$PKGS @pascal-app/cli@$CLI_VERSION"
            TAGS="$TAGS @pascal-app/cli@$CLI_VERSION"
          fi

          if git diff --cached --quiet; then
            echo "No version-file changes; tagging the current release commit"
          else
            git commit -m "release:${PKGS}"
          fi

          for TAG in $TAGS; do
            git tag "$TAG"
          done

          git push --atomic origin HEAD:main $TAGS