Files
aitbc/.github/workflows/publish-npm-packages.yml
oib 6901e0084f docs/config/packages: add v0.1 release prep, security status, and SDK enhancements
- Add Stage 23 roadmap for v0.1 release preparation with PyPI/npm publishing, deployment automation, and security audit milestones
- Document competitive differentiators: zkML/FHE integration, hybrid TEE/ZK verification, on-chain model marketplace, and geo-low-latency matching
- Update security documentation with smart contract audit results (0 vulnerabilities, 35 OpenZeppelin warnings)
- Add security-first setup
2026-02-19 21:47:28 +01:00

70 lines
1.6 KiB
YAML

name: Publish NPM Packages
on:
push:
tags:
- 'v*'
workflow_dispatch:
inputs:
package:
description: 'Package to publish (aitbc-sdk or all)'
required: true
default: 'aitbc-sdk'
dry_run:
description: 'Dry run (build only, no publish)'
required: false
default: false
type: boolean
jobs:
publish:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Node.js
uses: actions/setup-node@v4
with:
node-version: '20'
registry-url: 'https://registry.npmjs.org'
- name: Install dependencies
run: |
cd packages/js/aitbc-sdk
npm ci
- name: Run tests
run: |
cd packages/js/aitbc-sdk
npm test
- name: Build package
run: |
cd packages/js/aitbc-sdk
npm run build
- name: Check package
run: |
cd packages/js/aitbc-sdk
npm pack --dry-run
- name: Publish to NPM
if: ${{ github.event.inputs.dry_run != 'true' }}
run: |
cd packages/js/aitbc-sdk
npm publish --access public --provenance
- name: Dry run - check only
if: ${{ github.event.inputs.dry_run == 'true' }}
run: |
cd packages/js/aitbc-sdk
echo "Dry run complete - package built and checked but not published"
npm pack --dry-run