Add PyPI publish workflow with duplicate version check

[jkebinger]

Summary

Backports the publish workflow from ReforgeHQ/sdk-python and adapts it for prefab-cloud-python.

This adds automated publishing to PyPI when changes are pushed to main.

Features

✅ Smart version checking - Queries PyPI API before publishing to prevent duplicate releases
✅ Trusted publishing - Uses OIDC authentication (no API tokens needed)
✅ Test before publish - Runs full test suite before building/publishing
✅ Manual trigger - Can be triggered via workflow_dispatch
✅ Conditional execution - Skips all steps if version already exists on PyPI

Workflow Triggers

• Automatic: On push to main branch
• Manual: Via GitHub Actions UI (workflow_dispatch)

How It Works

1. Version Check: Reads version from pyproject.toml and checks PyPI
2. Skip if exists: If version already on PyPI, skips all remaining steps
3. Install & Test: Sets up Poetry, installs dependencies, runs tests
4. Build: Creates distribution packages with poetry build
5. Publish: Uses PyPI's official action with trusted publishing

Differences from sdk-python

Adapted for prefab-cloud-python:

• ✅ Reads version from pyproject.toml (instead of VERSION file)
• ✅ Uses prefab-cloud-python as PyPI package name
• ✅ Uses PREFAB_INTEGRATION_TEST_API_KEY secret (instead of REFORGE_*)
• ✅ Runs tests with -k 'not integration' filter (matches CI workflow)

PyPI Configuration

Package: prefab-cloud-python

Setup Required

Before this can work, you'll need to:

1. Configure PyPI Trusted Publishing (in PyPI account settings):

   • Publisher: GitHub
   • Owner: prefab-cloud
   • Repository: prefab-cloud-python
   • Workflow: publish.yml
   • Environment: release

2. Create GitHub environment named release (optional, for extra protection)

Testing

To test without publishing:

• Bump version in pyproject.toml to a version that already exists on PyPI
• The workflow will detect it and skip publishing

🤖 Generated with Claude Code

[jdwyah]

thanks