refactor(build): consolidate publish and build scripts

- Replace publish-platform.mjs with new publish.ts script
- Update build-binaries.mjs to support multiple targets
- Add new publish.yml workflow for unified publishing
- Improve cache handling in generate-embedded-resources.mjs

Author: moazbuilds

.github/workflows/build-binaries.yml

@@ -66,20 +66,8 @@ jobs:
           name: ${{ matrix.slug }}
           path: binaries/${{ matrix.slug }}
 
-      - name: Setup npm auth
-        if: startsWith(github.ref, 'refs/tags/v')
-        run: |
-          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
-
       - name: Smoke test platform binary
         shell: bash
         run: |
           chmod +x binaries/${{ matrix.slug }}/codemachine* || true
           binaries/${{ matrix.slug }}/codemachine --version
-
-      - name: Publish platform package to npm
-        if: startsWith(github.ref, 'refs/tags/v')
-        shell: bash
-        run: |
-          cd binaries/${{ matrix.slug }}
-          npm publish --access public --tag latest

.github/workflows/publish.yml

@@ -0,0 +1,54 @@
+name: publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "npm dist-tag (default: latest)"
+        required: false
+        type: string
+      dry_run:
+        description: "Dry run (no publish)"
+        required: false
+        default: false
+        type: boolean
+  push:
+    tags:
+      - 'v*'
+
+concurrency: ${{ github.workflow }}-${{ github.ref }}
+
+permissions:
+  contents: write
+  packages: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: 1.3.0
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Publish packages
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || '' }}
+          DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.dry_run || '' }}
+        run: |
+          TAG=${NPM_TAG:-latest}
+          CMD="bun scripts/publish.ts --tag ${TAG}"
+          if [ "${DRY_RUN}" = "true" ]; then
+            CMD="${CMD} --dry-run"
+          fi
+          echo "Running: ${CMD}"
+          ${CMD}

.gitignore

@@ -13,6 +13,7 @@ package-lock.json
 .env
 .env.example
 .npmrc
+.npmrc.publish
 
 # Ignore folders starting with .tmp
 .tmp*
@@ -23,4 +24,4 @@ package-lock.json
 .codemachine/template.json
 
 # MkDocs build output
-site/
+site/

package.json

@@ -39,8 +39,8 @@
     "_comment_release": "Release: Publishing and validation",
     "prepare": "husky install",
     "validate": "bun scripts/validate.mjs",
-    "release": "bun scripts/publish.mjs --tag latest",
-    "publish:platform": "bun scripts/publish-platform.mjs"
+    "release": "bun scripts/publish.ts --tag latest",
+    "publish:all": "bun scripts/publish.ts --tag latest --dry-run"
   },
   "dependencies": {
     "1.3.0": "^1.3.0",