Merge scalar-generated into scalar-next (build 8qvJkmCu0mOKSP6Tk7o0o)

Author: scalarbot

.github/workflows/release-please.yml

@@ -51,3 +51,12 @@ jobs:
           git checkout -B scalar-next origin/scalar-next
           git merge --no-edit -m "Sync release ${{ steps.release.outputs.tag_name }} back to scalar-next" "${{ steps.release.outputs.sha }}"
           git push origin scalar-next
+  publish:
+    needs: release-please
+    if: ${{ !cancelled() && needs.release-please.outputs.release_created == 'true' }}
+    permissions:
+      contents: write
+      id-token: write
+      packages: write
+    uses: ./.github/workflows/sdk-release.yml
+    secrets: inherit

.github/workflows/sdk-release.yml

@@ -0,0 +1,73 @@
+name: CLI SDK Release
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+  # Called by release-please.yml at the released commit; the trigger the default
+  # GITHUB_TOKEN can actually reach (token-created releases never fire `release`).
+  workflow_call:
+
+permissions:
+  contents: write
+  id-token: write
+  packages: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    env:
+      VERSIONING_POLICY: manual
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: "20"
+      - run: npm install
+      - run: npm run build
+      # The version is owned by release tooling in this repository, never by the SDK generator,
+      # so every release step reads it from package.json at run time.
+      - name: Read package version
+        run: echo "PKG_VERSION=$(node -p 'require("./package.json").version')" >> "$GITHUB_ENV"
+      - name: Package release tarball
+        run: npm pack --pack-destination . && mv "$(ls *.tgz | head -n1)" "scalarapi-${PKG_VERSION}.tgz"
+      - name: Attach binary to the release
+        run: gh release upload "v${PKG_VERSION}" "scalarapi-${PKG_VERSION}.tgz" --clobber
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Update Homebrew tap
+        env:
+          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+        run: |
+          ASSET_URL="https://github.com/scalar/scalar-cli/releases/download/v${PKG_VERSION}/scalarapi-${PKG_VERSION}.tgz"
+          curl -fsSL "$ASSET_URL" -o release.tgz
+          SHA256="$(shasum -a 256 release.tgz | cut -d" " -f1)"
+          git clone "https://x-access-token:${HOMEBREW_TAP_TOKEN}@github.com/scalar/scalar-cli-homebrew.git" tap
+          mkdir -p tap/Formula
+          cat > "tap/Formula/scalarapi.rb" <<'EOF'
+          class Scalarapi < Formula
+            desc "scalarapi command-line interface"
+            homepage "https://github.com/scalar/scalar-cli"
+            url "__ASSET_URL__"
+            sha256 "__SHA256__"
+            version "__VERSION__"
+            depends_on "node"
+
+            def install
+              system "npm", "install", *std_npm_args
+              bin.install_symlink Dir["#{libexec}/bin/*"]
+            end
+
+            test do
+              system "#{bin}/scalarapi", "--help"
+            end
+          end
+          EOF
+          sed -e "s|__SHA256__|$SHA256|" -e "s|__ASSET_URL__|$ASSET_URL|" -e "s|__VERSION__|$PKG_VERSION|" "tap/Formula/scalarapi.rb" > "tap/Formula/scalarapi.rb.tmp"
+          mv "tap/Formula/scalarapi.rb.tmp" "tap/Formula/scalarapi.rb"
+          cd tap
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add "Formula/scalarapi.rb"
+          git commit -m "scalarapi ${PKG_VERSION}" || { echo "formula unchanged, skipping"; exit 0; }
+          git push