publish 0.1.20, bump yarn to 4.12 (#1011)

and set up OIDC publishing via NPM.

(NPM_TOKEN usage being deprecated)

Author: NiloCK

.github/workflows/ci-pkg-platform-ui.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Enable Corepack
         run: |
           corepack enable
-          corepack prepare yarn@4.6.0 --activate
+          corepack prepare yarn@4.12.0 --activate
 
       - name: Install dependencies
         run: |

.github/workflows/publish-npm.yml

@@ -4,6 +4,12 @@ on:
   push:
     tags:
       - 'v*'
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Dry run mode (test without publishing)'
+        type: boolean
+        default: true
 
 jobs:
   publish:
@@ -31,25 +37,34 @@ jobs:
       - name: Extract version from tag
         id: extract_version
         run: |
-          # Remove 'v' prefix from tag
-          VERSION=${GITHUB_REF_NAME#v}
-          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
-          echo "📌 Expected version: $VERSION"
-          
-          # Determine npm tag based on version format
-          if [[ "$VERSION" =~ -[0-9]+$ ]]; then
-            NPM_TAG="alpha"
-            echo "🚨 Decorated version detected, using --tag alpha"
+          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
+            # Manual trigger - use version from package.json
+            VERSION=$(cd packages/common && node -p "require('./package.json').version")
+            echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+            echo "NPM_TAG=test" >> $GITHUB_OUTPUT
+            echo "📌 Manual run - version: $VERSION, tag: test"
           else
-            NPM_TAG="latest"
-            echo "✅ Stable version, using --tag latest"
+            # Tag trigger - extract from tag name
+            VERSION=${GITHUB_REF_NAME#v}
+            echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+            echo "📌 Expected version: $VERSION"
+
+            # Determine npm tag based on version format
+            if [[ "$VERSION" =~ -[0-9]+$ ]]; then
+              NPM_TAG="alpha"
+              echo "🚨 Decorated version detected, using --tag alpha"
+            else
+              NPM_TAG="latest"
+              echo "✅ Stable version, using --tag latest"
+            fi
+            echo "NPM_TAG=$NPM_TAG" >> $GITHUB_OUTPUT
           fi
-          echo "NPM_TAG=$NPM_TAG" >> $GITHUB_OUTPUT
 
       - name: Verify package versions match tag
+        if: github.event_name == 'push'
         run: |
           VERSION=${{ steps.extract_version.outputs.VERSION }}
-          
+
           # Verify all packages have the correct version
           for package in common db common-ui courseware edit-ui client platform-ui standalone-ui express mcp cli; do
             PACKAGE_VERSION=$(cd packages/$package && node -p "require('./package.json').version")
@@ -59,7 +74,7 @@ jobs:
             fi
             echo "✅ packages/$package version $PACKAGE_VERSION matches tag"
           done
-          
+
           echo "✅ All package versions verified"
 
       - name: Lint packages
@@ -73,37 +88,37 @@ jobs:
         run: |
           echo "Building common package..."
           yarn workspace @vue-skuilder/common build
-          
+
           echo "Building db package..."
           yarn workspace @vue-skuilder/db build
-          
+
           echo "Building common-ui package..."
           yarn workspace @vue-skuilder/common-ui build
-          
+
           echo "Building courseware package..."
           yarn workspace @vue-skuilder/courseware build
 
           echo "Building edit-ui package..."
           yarn workspace @vue-skuilder/edit-ui build
-          
+
           echo "Building client package..."
           yarn workspace @vue-skuilder/client build
-          
+
           echo "Building platform-ui package..."
           yarn workspace @vue-skuilder/platform-ui build
-          
+
           echo "Building standalone-ui package..."
           yarn workspace @vue-skuilder/standalone-ui build
-          
+
           echo "Building express package..."
           yarn workspace @vue-skuilder/express build
-          
+
           # echo "Building tuilder package..."
           # yarn workspace @vue-skuilder/tuilder build
-          
+
           echo "Building mcp package..."
           yarn workspace @vue-skuilder/mcp build
-          
+
           echo "Building cli package..."
           yarn workspace @vue-skuilder/cli build
 
@@ -118,45 +133,46 @@ jobs:
           done
 
       - name: Publish packages in dependency order
+        if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.dry_run == 'false')
         run: |
           set -e
           NPM_TAG="${{ steps.extract_version.outputs.NPM_TAG }}"
 
           echo "Publishing @vue-skuilder/common..."
-          cd packages/common && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/common && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/db..."
-          cd packages/db && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/db && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/common-ui..."
-          cd packages/common-ui && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/common-ui && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/edit-ui..."
-          cd packages/edit-ui && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/edit-ui && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/courseware..."
-          cd packages/courseware && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/courseware && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/client..."
-          cd packages/client && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/client && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/platform-ui..."
-          cd packages/platform-ui && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/platform-ui && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/standalone-ui..."
-          cd packages/standalone-ui && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/standalone-ui && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/mcp..."
-          cd packages/mcp && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/mcp && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           # echo "Publishing @vue-skuilder/tuilder..."
-          # cd packages/tuilder && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          # cd packages/tuilder && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/express..."
-          cd packages/express && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/express && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           echo "Publishing @vue-skuilder/cli (scoped)..."
-          cd packages/cli && yarn npm publish --access public --tag $NPM_TAG --provenance && cd ../..
+          cd packages/cli && yarn npm publish --access public --tag $NPM_TAG && cd ../..
 
           # Dual-publish CLI as unscoped 'skuilder' package
           echo "Publishing CLI as 'skuilder'..."
@@ -173,17 +189,20 @@ jobs:
           "
 
           # Use yarn npm publish to maintain workspace dependency resolution
-          yarn npm publish --access public --tag $NPM_TAG --provenance
+          yarn npm publish --access public --tag $NPM_TAG
           cd ../..
-          
           echo "All packages published successfully!"
+        env:
+          YARN_NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: NPM publish completed
+        if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.dry_run == 'false')
         run: |
           echo "✅ All vue-skuilder packages published to NPM registry"
           echo "📦 Packages published:"
           echo "   - @vue-skuilder/common"
-          echo "   - @vue-skuilder/db" 
+          echo "   - @vue-skuilder/db"
           echo "   - @vue-skuilder/common-ui"
           echo "   - @vue-skuilder/courseware"
           echo "   - @vue-skuilder/edit-ui"
@@ -195,4 +214,4 @@ jobs:
           echo "   - @vue-skuilder/cli"
           echo "   - skuilder (CLI unscoped)"
           echo ""
-          echo "🚀 GitHub release will be created by the 'Publish GitHub Release' workflow"
+          echo "🚀 GitHub release will be created by the 'Publish GitHub Release' workflow"