release-version-alignment.yml

name: Release Version Alignment

on:
  push:
    tags:
      - "v*.*.*"
  workflow_dispatch:

permissions:
  contents: write

jobs:
  publish-and-label:
    if: github.actor != 'github-actions[bot]'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup Node
        uses: actions/setup-node@v6
        with:
          node-version: 20
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: npm ci

      - name: Run lint checks
        run: npm run lint

      - name: Build dist assets
        run: npm run build

      - name: Run unit tests
        run: npm run test:unit

      - name: Install Playwright browser
        run: npm run test:e2e:install:ci

      - name: Run Playwright tests
        run: npm run test:e2e

      - name: Run curated visual checks
        run: npm run test:visual

      - name: Run full UI matrix
        run: npm run test:matrix

      - name: Resolve immutable ecosystem fixture sources
        id: ecosystem_sources
        shell: bash
        run: node scripts/write-ecosystem-workflow-outputs.mjs

      - name: Checkout Layout Style CSS contract fixture
        uses: actions/checkout@v6
        with:
          repository: ${{ steps.ecosystem_sources.outputs.layout_repository }}
          ref: ${{ steps.ecosystem_sources.outputs.layout_revision }}
          path: _ecosystem/Layout-Style-CSS

      - name: Checkout Interactive Surface CSS contract fixture
        uses: actions/checkout@v6
        with:
          repository: ${{ steps.ecosystem_sources.outputs.interactive_repository }}
          ref: ${{ steps.ecosystem_sources.outputs.interactive_revision }}
          path: _ecosystem/Interactive-Surface-CSS

      - name: Install Layout Style CSS fixture dependencies
        working-directory: _ecosystem/Layout-Style-CSS
        run: npm ci

      - name: Install Interactive Surface CSS fixture dependencies
        working-directory: _ecosystem/Interactive-Surface-CSS
        run: npm ci

      # Explicit candidate mode exempts only the UI tag under review while retaining every published companion check.
      - name: Run ecosystem release preflight
        run: npm run release:preflight -- --candidate-package ui-style-kit-css --layout-repo $GITHUB_WORKSPACE/_ecosystem/Layout-Style-CSS --interactive-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS --layout-docs-repo $GITHUB_WORKSPACE/_ecosystem/Layout-Style-CSS --interactive-docs-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS

      - name: Restrict manual runs to main
        if: github.event_name == 'workflow_dispatch' && github.ref != 'refs/heads/main'
        shell: bash
        run: |
          echo "::error::workflow_dispatch is only allowed from refs/heads/main."
          exit 1

      - name: Resolve release version
        id: version
        shell: bash
        run: |
          set -euo pipefail
          PACKAGE_NAME="$(node -p "require('./package.json').name")"
          PACKAGE_VERSION="$(node -p "require('./package.json').version")"
          EXPECTED_TAG="v${PACKAGE_VERSION}"

          if [[ "${GITHUB_REF_TYPE:-}" == "tag" && "${GITHUB_REF_NAME}" != "${EXPECTED_TAG}" ]]; then
            echo "::error::Tag '${GITHUB_REF_NAME}' must match package version tag '${EXPECTED_TAG}'."
            exit 1
          fi

          if ! grep -qE "^## \\[${PACKAGE_VERSION//./\\.}\\] - " CHANGELOG.md; then
            echo "::error::CHANGELOG.md is missing an entry for version ${PACKAGE_VERSION}."
            exit 1
          fi

          echo "package_name=${PACKAGE_NAME}" >> "$GITHUB_OUTPUT"
          echo "package_version=${PACKAGE_VERSION}" >> "$GITHUB_OUTPUT"
          echo "expected_tag=${EXPECTED_TAG}" >> "$GITHUB_OUTPUT"

      - name: Create tag on manual run
        if: github.event_name == 'workflow_dispatch'
        shell: bash
        env:
          EXPECTED_TAG: ${{ steps.version.outputs.expected_tag }}
        run: |
          set -euo pipefail
          if git rev-parse -q --verify "refs/tags/${EXPECTED_TAG}" >/dev/null; then
            echo "Tag ${EXPECTED_TAG} already exists."
          else
            git config user.name "github-actions[bot]"
            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
            git tag "${EXPECTED_TAG}"
            git push origin "${EXPECTED_TAG}"
            echo "Created and pushed tag ${EXPECTED_TAG}."
          fi

      - name: Create GitHub release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ steps.version.outputs.expected_tag }}
          name: ${{ steps.version.outputs.expected_tag }}
          generate_release_notes: true