@pulsehub/runner 0.1.0 → 0.1.2

package/.github/workflows/ci.yml

@@ -13,8 +13,8 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 20
       - run: npm test

package/.github/workflows/publish.yml

@@ -1,26 +1,83 @@
-name: Publish Pulse Runner to npm
+name: Version and publish Pulse Runner
 
 on:
-  release:
-    types: [published]
+  push:
+    branches: [main]
+
+concurrency:
+  group: pulse-runner-release-${{ github.ref }}
+  queue: max
 
 permissions:
   contents: read
 
 jobs:
+  version:
+    name: Test and bump patch version
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    outputs:
+      version: ${{ steps.bump.outputs.version }}
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: main
+          fetch-depth: 0
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 24
+          package-manager-cache: false
+      - run: npm test
+      - run: node src/index.js --help
+      - name: Bump patch version and tag the release
+        id: bump
+        shell: bash
+        run: |
+          version="$(node -p 'require("./package.json").version')"
+          published_version="$(npm view @pulsehub/runner version)"
+
+          if [ "${version}" = "${published_version}" ]; then
+            npm version patch --no-git-tag-version
+            version="$(node -p 'require("./package.json").version')"
+            tag="v${version}"
+
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git add package.json
+            git commit -m "chore(release): ${tag} [skip ci]"
+            git tag "${tag}"
+            git push origin HEAD:main
+            git push origin "${tag}"
+          else
+            tag="v${version}"
+            echo "npm latest is ${published_version}; retrying unpublished repository version ${version}."
+            if ! git rev-parse --verify "refs/tags/${tag}" >/dev/null 2>&1; then
+              git tag "${tag}"
+              git push origin "${tag}"
+            fi
+          fi
+
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+
   publish:
+    name: Publish to npm
+    needs: version
     runs-on: ubuntu-latest
     permissions:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+        with:
+          ref: v${{ needs.version.outputs.version }}
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           registry-url: https://registry.npmjs.org
-      - name: Verify release tag matches package version
-        run: test "v$(node -p 'require("./package.json").version')" = "$GITHUB_REF_NAME"
-      - run: npm test
-      - run: node src/index.js --help
+          package-manager-cache: false
+      - name: Show Node and npm versions
+        run: node --version && npm --version
+      - name: Verify version tag
+        run: test "v$(node -p 'require("./package.json").version')" = "v${{ needs.version.outputs.version }}"
       - run: npm publish --access public

package/README.md

@@ -4,7 +4,7 @@ Install with Node 20+: `npm install -g @pulsehub/runner`.
 
 To update an existing installation after a new release, run `npm update -g @pulsehub/runner`, then restart the background service with `pulse-runner service stop` followed by `pulse-runner service start`.
 
-Releases are published to npm from GitHub Actions when a GitHub release is published. The release tag (for example, `v0.2.0`) must match the version in `package.json` (`0.2.0`).
+Every push to `main` (including a merged pull request) runs the release workflow. It tests the Runner, increments the patch version, commits the version and a matching `vX.Y.Z` tag to `main`, then publishes that version to npm. The npm publisher uses GitHub Actions OIDC; no npm token is stored in GitHub. Development-channel releases can be added separately when a `dev` branch is introduced.
 
 Initialize the local machine with its workspace and agent identifiers plus the release signing public key, then paste the public key printed by `init` into Pulse Settings. The current release key is [`keys/runner-job-v1-public.pem`](keys/runner-job-v1-public.pem). Pulse returns a one-time device credential; `pair` derives and stores the Runner ID and credential with owner-only permissions. Use `diagnose` before `start`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulsehub/runner",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local, credential-safe Pulse Runner",
   "repository": {
     "type": "git",
@@ -10,7 +10,14 @@
     "access": "public"
   },
   "type": "module",
-  "bin": { "pulse-runner": "./src/index.js" },
-  "engines": { "node": ">=20" },
-  "scripts": { "test": "node --test", "smoke": "node src/index.js --help" }
+  "bin": {
+    "pulse-runner": "src/index.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "test": "node --test",
+    "smoke": "node src/index.js --help"
+  }
 }