release.yml

# Manual fallback — automated publishing happens in ci.yml (publish_npmjs job).
# Use this workflow only to re-promote a specific SHA if the automated publish fails.
name: Release

on:
  workflow_dispatch:
    inputs:
      sha:
        description: 'Commit SHA to promote (must have passed the CI build job)'
        required: true
        type: string

permissions:
  packages: read
  contents: read

jobs:
  npm:
    name: Promote npm packages to npmjs.org
    runs-on: ubuntu-24.04

    steps:
      - uses: actions/checkout@v5
        with:
          ref: ${{ inputs.sha }}
          sparse-checkout: scripts/promote-to-npmjs.sh

      - name: Promote to npmjs.org
        run: bash scripts/promote-to-npmjs.sh
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          GITHUB_REPO_OWNER: ${{ github.repository_owner }}
          GITHUB_REPO_NAME: ${{ github.event.repository.name }}