npm-publish.yml

name: Publish npm package

on:
  workflow_dispatch:
    inputs:
      dry-run:
        description: 'Dry run'
        required: true
        type: boolean
        default: true
  schedule:
    - cron: '48 3 * * 1' # 3:48 AM UTC every Monday

jobs:
  preflight:
    name: Preflight
    runs-on: ubuntu-latest
    outputs:
      dry-run: ${{ steps.get-dry-run.outputs.dry-run }}

    steps:
      - name: Get dry run
        id: get-dry-run
        shell: pwsh
        run: |
          $IsDryRun = '${{ github.event.inputs.dry-run }}' -Eq 'true' -Or '${{ github.event_name }}' -Eq 'schedule'

          if ($IsDryRun) {
            echo "dry-run=true" >> $Env:GITHUB_OUTPUT
          } else {
            echo "dry-run=false" >> $Env:GITHUB_OUTPUT
          }

  build:
    name: Build package [${{matrix.library}}]
    runs-on: ubuntu-latest
    needs:
      - preflight

    strategy:
      fail-fast: false
      matrix:
        library:
          - iron-remote-desktop
          - iron-remote-desktop-rdp

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup wasm-pack
        shell: bash
        run: |
          curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh

      - name: Install dependencies
        shell: pwsh
        run: |
          Set-Location -Path "./web-client/${{matrix.library}}/"
          npm install

      - name: Build package
        shell: pwsh
        run: |
          Set-PSDebug -Trace 1

          Set-Location -Path "./web-client/${{matrix.library}}/"
          npm run build
          Set-Location -Path ./dist
          npm pack

      - name: Harvest package
        shell: pwsh
        run: |
          Set-PSDebug -Trace 1

          New-Item -ItemType "directory" -Path . -Name "npm-packages"
          Get-ChildItem -Path ./web-client/ -Recurse *.tgz | ForEach { Copy-Item $_ "./npm-packages" }

      - name: Upload package artifact
        uses: actions/upload-artifact@v4
        with:
          name: npm-${{matrix.library}}
          path: npm-packages/*.tgz

  npm-merge:
    name: Merge artifacts
    runs-on: ubuntu-latest
    needs: build

    steps:
      - name: Merge Artifacts
        uses: actions/upload-artifact/merge@v4
        with:
          name: npm
          pattern: npm-*
          delete-merged: true

  publish:
    name: Publish package
    runs-on: ubuntu-latest
    if: github.event_name == 'workflow_dispatch'
    environment: publish
    needs:
      - preflight
      - npm-merge

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Download NPM packages artifact
        uses: actions/download-artifact@v4
        with:
          name: npm
          path: npm-packages

      - name: Prepare npm
        shell: pwsh
        run: npm config set "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}"

      - name: Publish
        shell: pwsh
        run: |
          Set-PSDebug -Trace 1

          $isDryRun = '${{ needs.preflight.outputs.dry-run }}' -Eq 'true'

          $files = Get-ChildItem -Recurse npm-packages/*.tgz

          foreach ($file in $files) {
            Write-Host "Processing $($file.Name)..."

            $match = [regex]::Match($file.Name, '^(?<name>.+)-(?<version>\d+\.\d+\.\d+)\.tgz$')

            if (-not $match.Success) {
              Write-Host "Unable to parse package name/version from $($file.Name), skipping."
              continue
            }

            $pkgName = $match.Groups['name'].Value

            # Normalize scope for npm lookups: "devolutions-foo" => "@devolutions/foo"
            if ($pkgName -like 'devolutions-*') {
              $scopedName = "@devolutions/$($pkgName.Substring(12))"
            } else {
              $scopedName = $pkgName
            }

            $pkgVersion = $match.Groups['version'].Value

            # Check if this version exists on npm; exit code 0 means it does.
            npm view "$scopedName@$pkgVersion" | Out-Null

            if ($LASTEXITCODE -eq 0) {
              Write-Host "$scopedName@$pkgVersion already exists on npm; skipping publish."
              continue
            }

            $publishCmd = @('npm','publish',"$file",'--access=public')

            if ($isDryRun) {
              $publishCmd += '--dry-run'
            }

            $publishCmd = $publishCmd -Join ' '
            Invoke-Expression $publishCmd
          }

      - name: Create version tags
        if: ${{ needs.preflight.outputs.dry-run == 'false' }}
        shell: bash
        env:
          GIT_AUTHOR_NAME: github-actions
          GIT_AUTHOR_EMAIL: github-actions@github.com
          GIT_COMMITTER_NAME: github-actions
          GIT_COMMITTER_EMAIL: github-actions@github.com
        run: |
          set -e

          git fetch --tags

          for file in npm-packages/*.tgz; do
            base=$(basename "$file" .tgz)

            # Split base at the last hyphen to separate name and version
            pkg=${base%-*}
            # Strip the unscoped prefix introduced by `npm pack` for @devolutions/<pkg>.
            pkg=${pkg#devolutions-}

            version=${base##*-}

            tag="npm-${pkg}-v${version}"

            if git rev-parse "$tag" >/dev/null 2>&1; then
              echo "Tag $tag already exists; skipping."
              continue
            fi

            git tag "$tag" "$GITHUB_SHA"
            git push origin "$tag"
          done

      - name: Update Artifactory Cache
        if: ${{ needs.preflight.outputs.dry-run == 'false' }}
        run: |
          gh workflow run update-artifactory-cache.yml --repo Devolutions/scheduled-tasks --field package_name="iron-remote-desktop"
          gh workflow run update-artifactory-cache.yml --repo Devolutions/scheduled-tasks --field package_name="iron-remote-desktop-rdp"
        env:
          GH_TOKEN: ${{ secrets.DEVOLUTIONSBOT_WRITE_TOKEN }}

  notify:
    name: Notify failure
    runs-on: ubuntu-latest
    if: ${{ always() && contains(needs.*.result, 'failure') && github.event_name == 'schedule' }}
    needs:
      - preflight
      - build
    env:
      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_ARCHITECTURE }}
      SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
    steps:
      - name: Send slack notification
        id: slack
        uses: slackapi/slack-github-action@v1.26.0
        with:
          payload: |
            {
              "blocks": [
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "*${{ github.repository }}* :fire::fire::fire::fire::fire: \n The scheduled build for *${{ github.repository }}* is <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|broken>"
                  }
                }
              ]
            }