name: Publish Extension

on:
  push:
    tags:
      - 'v*.*.*'

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: https://github.com/actions/checkout@v4

      - name: Install Node.js
        uses: https://github.com/actions/setup-node@v4
        with:
          node-version: 22.x

      - name: Install dependencies
        run: npm ci

      - name: Audit dependencies
        run: npm audit --audit-level=high

      - name: Lint
        run: npm run lint

      - name: Publish to VS Code Marketplace
        env:
          VSCE_PAT: ${{ secrets.VSCE_PAT }}
        run: npm run publish

      - name: Cleanup workspace
        if: always()
        run: |
          rm -rf node_modules
          rm -rf out
          rm -rf coverage
          rm -rf .nyc_output