release.yml

name: Release

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag to publish (for example v0.2.1)'
        required: true
        type: string

jobs:
  release:
    name: Publish release assets
    runs-on: ubuntu-latest
    environment: prod
    permissions:
      contents: write
      id-token: write
    env:
      RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
      CHECKOUT_REF: ${{ github.event_name == 'workflow_dispatch' && github.ref_name || github.ref_name }}
      CLAWHUB_TOKEN: ${{ secrets.CLAWHUB_TOKEN }}

    steps:
      - uses: actions/checkout@v6.0.2
        with:
          ref: ${{ env.CHECKOUT_REF }}

      - name: Validate release tag format
        run: |
          case "$RELEASE_TAG" in
            v*) ;;
            *) echo "RELEASE_TAG must start with v (got: $RELEASE_TAG)" >&2; exit 1 ;;
          esac

      - name: Use Node.js 24
        uses: actions/setup-node@v6.3.0
        with:
          node-version: 24
          cache: npm
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: npm ci

      - name: Release checks (typecheck + build + test + pack dry-run)
        run: bash scripts/release-check.sh

      - name: Ensure GitHub release exists
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh release view "$RELEASE_TAG" >/dev/null 2>&1 || \
          gh release create "$RELEASE_TAG" --generate-notes --title "$RELEASE_TAG"

      - name: Publish to npm via trusted publishing
        run: npm publish --provenance --access public

      - name: Install and authenticate ClaWHub CLI if token exists
        run: |
          if [ -z "$CLAWHUB_TOKEN" ]; then
            echo "CLAWHUB_TOKEN not set, skipping ClaWHub install/login"
            exit 0
          fi
          npm i -g clawhub
          clawhub login --token "$CLAWHUB_TOKEN" --no-browser

      - name: Publish skill to ClaWHub if token exists
        run: |
          if [ -z "$CLAWHUB_TOKEN" ]; then
            echo "CLAWHUB_TOKEN not set, skipping ClaWHub publish"
            exit 0
          fi
          VERSION="${RELEASE_TAG#v}"
          clawhub publish ./skills/agentskill \
            --slug daeva \
            --name "Daeva" \
            --version "$VERSION" \
            --changelog "Release $RELEASE_TAG" \
            --tags latest \
            --no-input