feat: add CI/CD workflows and version check script

Author: tim-hm

.github/workflows/cd.yaml

@@ -0,0 +1,46 @@
+name: CD
+
+on:
+  push:
+    branches: [ "main" ]
+  workflow_dispatch:
+
+concurrency:
+  group: "publish"
+  cancel-in-progress: true
+
+jobs:
+  check-version:
+    runs-on: ubuntu-latest
+    outputs:
+      should_publish: ${{ steps.check-version.outputs.local_version_is_higher }}
+      tag: ${{ steps.check-version.outputs.tag }}
+      version: ${{ steps.check-version.outputs.local_version }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+      - uses: pnpm/action-setup@v4
+      - run: pnpm install
+      - id: check-version
+        run: pnpm exec tsx bin/check-version.ts
+
+  publish:
+    needs: check-version
+    if: needs.check-version.outputs.should_publish == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "23"
+          registry-url: "https://registry.npmjs.org"
+      - uses: pnpm/action-setup@v4
+      - run: pnpm install
+      - run: pnpm build
+      - run: pnpm exec biome ci
+      - run: tsc
+      - env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm publish --tag ${{ needs.check-version.outputs.tag }} --no-git-checks

.github/workflows/ci.yaml

@@ -0,0 +1,37 @@
+name: CI
+
+on: [push, pull_request]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "23"
+      - uses: pnpm/action-setup@v4
+      - run: pnpm install
+      - run: pnpm build
+      - run: pnpm exec biome ci
+      - run: tsc
+
+  test:
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "23"
+      - uses: pnpm/action-setup@v4
+      - run: pnpm install
+      - run: pnpm vitest --coverage
+      - uses: davelosert/vitest-coverage-report-action@v2
+        if: always()
+        with:
+          comment-on: "pr"

bin/check-version.ts

@@ -0,0 +1,53 @@
+#!/usr/bin/env tsx
+
+import { appendFileSync } from "node:fs";
+import semver from "semver";
+import packageJson from "../package.json";
+
+interface NpmRegistryResponse {
+  "dist-tags": Record<string, string>;
+}
+
+async function getNpmVersion(
+  packageName: string,
+  distTag: string,
+): Promise<string> {
+  const response = await fetch(`https://registry.npmjs.org/${packageName}`);
+  if (response.ok) {
+    const data = (await response.json()) as NpmRegistryResponse;
+    return data["dist-tags"][distTag] || "0.0.0";
+  }
+  return "0.0.0";
+}
+
+function writeGitHubOutput(key: string, value: string): void {
+  const githubOutput = process.env.GITHUB_OUTPUT;
+  if (githubOutput) {
+    appendFileSync(githubOutput, `${key}=${value}\n`);
+  }
+  console.log(`${key}=${value}`);
+}
+
+async function main(): Promise<void> {
+  // Validate version format
+  if (!semver.valid(packageJson.version)) {
+    throw new Error(`Invalid version format: ${packageJson.version}`);
+  }
+
+  // Determine tag based on pre-release status
+  const distTag = semver.prerelease(packageJson.version) ? "next" : "latest";
+  const localVersion = packageJson.version;
+  const publicVersion = await getNpmVersion(packageJson.name, distTag);
+  const localVersionIsHigher = semver.gt(localVersion, publicVersion);
+
+  // Write outputs
+  writeGitHubOutput("local_version_is_higher", localVersionIsHigher.toString());
+  writeGitHubOutput("local_version", localVersion);
+  writeGitHubOutput("published_version", publicVersion);
+  writeGitHubOutput("tag", distTag);
+}
+
+// E.g. if this file is the entry point
+if (import.meta.url === `file://${process.argv[1]}`) {
+  main().catch(console.error);
+}

package.json

@@ -34,7 +34,9 @@
     "@biomejs/biome": "2.3.5",
     "@nillion/nuc": "link:../nuc-ts",
     "@types/node": "^24.10.1",
+    "@types/semver": "^7.7.1",
     "pino": "^10.1.0",
+    "semver": "^7.7.3",
     "tsdown": "^0.16.8",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",