name: Release

on:
  push:
    branches: [main]

permissions:
  contents: write
  pull-requests: write
  id-token: write

jobs:
  release-please:
    name: Release Please
    runs-on: ubuntu-latest
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
      tag_name: ${{ steps.release.outputs.tag_name }}
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

  publish:
    name: Publish to npm
    needs: release-please
    if: needs.release-please.outputs.release_created == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
          package-manager-cache: false
          registry-url: https://registry.npmjs.org

      - run: npm ci

      - name: Verify packaged release before publishing
        run: npm run verify:package

      - name: Publish
        run: npm publish --access public

      - name: Verify published CLI from npm
        shell: bash
        run: |
          version="$(node --input-type=module -e 'import packageJson from "./package.json" with { type: "json" }; process.stdout.write(packageJson.version)')"
          verification_root="$(mktemp -d)"
          trap 'rm -rf -- "${verification_root}"' EXIT
          cd "${verification_root}"
          for attempt in 1 2 3 4 5 6; do
            if npm view "rea-agents@${version}" version --json >/dev/null 2>&1 \
              && npm exec --yes --package="rea-agents@${version}" -- rea --help \
              && npm exec --yes --package="rea-agents@${version}" -- rea --llms \
              && node "${GITHUB_WORKSPACE}/scripts/verify-published-package.mjs" "${version}"; then
              exit 0
            fi
            if [ "${attempt}" -lt 6 ]; then
              echo "Published package verification attempt ${attempt} failed; retrying in 10 seconds" >&2
              sleep 10
            fi
          done
          echo "Published rea-agents@${version} failed registry and CLI verification" >&2
          exit 1