ci: add release workflow (#10)

Author: yyyyaaa

.github/workflows/release.yml

@@ -0,0 +1,63 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write # to be able to publish a GitHub release
+  issues: write # to be able to comment on released issues
+  pull-requests: write # to be able to comment on released pull requests
+  id-token: write # to enable use of OIDC for npm provenance
+
+env:
+  NODE_VERSION: '20'
+  PNPM_VERSION: '10'
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Semantic-release needs the full history
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: ${{ env.PNPM_VERSION }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Verify PGP signature on git commits
+        # This step is important for semantic-release to trust the commits
+        # and is especially crucial if you have commit signature verification enabled.
+        # If you don't use PGP, you might be able to remove or adjust this.
+        # However, semantic-release often relies on git tags and history.
+        run: |
+          git config --global user.email "[email protected]"
+          git config --global user.name "GitHub Actions"
+          # The following is a placeholder and might need adjustment based on your PGP setup
+          # if you are signing commits that semantic-release needs to analyze.
+          # For basic operation without signed commits being a blocker for semantic-release itself,
+          # just setting user.email and user.name is often sufficient.
+          echo "NOTE: PGP setup for git commits in CI is a placeholder."
+
+      - name: Build
+        run: pnpm run build
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_PUBLISH_SECRET }}
+        run: pnpm run release

.gitignore

@@ -138,3 +138,6 @@ dist
 .yarn/build-state.yml
 .yarn/install-state.gz
 .pnp.*
+
+# npm credentials
+.npmrc

.npmrc

@@ -0,0 +1,32 @@
+registry=https://registry.npmjs.org/
+//registry.npmjs.org/:_authToken=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
+config_registry=https://registry.npmjs.org/
+execpath=/Users/phathag/Library/pnpm/.tools/pnpm/10.10.0/node_modules/pnpm/bin/pnpm.cjs
+config_frozen_lockfile=
+config_verify_deps_before_run=false
+package_json=/Users/phathag/workspace/cosmology/agentic-tools/package.json
+command=run-script
+lifecycle_event=release
+package_name=@hyperweb/mcp-server
+config_node_gyp=/Users/phathag/Library/pnpm/.tools/pnpm/10.10.0/node_modules/pnpm/dist/node_modules/node-gyp/bin/node-gyp.js
+package_version=0.1.0
+lifecycle_script=semantic-release --dry-run
+config_user_agent=pnpm/10.10.0 npm/? node/v22.13.1 darwin arm64
+node_execpath=/Users/phathag/.nvm/versions/node/v22.13.1/bin/node
+config_config_verify_deps_before_run=
+config_lifecycle_script=semantic-release --dry-run
+config_package_bin={"hyperweb_mcp_server":"./build/index.js"}
+config_execpath=/Users/phathag/Library/pnpm/.tools/pnpm/10.10.0/node_modules/pnpm/bin/pnpm.cjs
+config_node_execpath=/Users/phathag/.nvm/versions/node/v22.13.1/bin/node
+config_config_frozen_lockfile=
+config_config_registry=https://registry.npmjs.org/
+config_package_version=0.1.0
+config_command=run-script
+config_lifecycle_event=release
+config_package_name=@hyperweb/mcp-server
+config_config_user_agent=pnpm/10.10.0 npm/? node/v22.13.1 darwin arm64
+config_config_node_gyp=/Users/phathag/Library/pnpm/.tools/pnpm/10.10.0/node_modules/pnpm/dist/node_modules/node-gyp/bin/node-gyp.js
+config_package_json=/Users/phathag/workspace/cosmology/agentic-tools/package.json
+
+[package_bin]
+hyperweb_mcp_server=./build/index.js

.releaserc.json

@@ -0,0 +1,23 @@
+{
+    "branches": [
+        "main"
+    ],
+    "plugins": [
+        "@semantic-release/commit-analyzer",
+        "@semantic-release/release-notes-generator",
+        "@semantic-release/changelog",
+        "@anolilab/semantic-release-pnpm",
+        [
+            "@semantic-release/git",
+            {
+                "assets": [
+                    "package.json",
+                    "pnpm-lock.yaml",
+                    "CHANGELOG.md"
+                ],
+                "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
+            }
+        ],
+        "@semantic-release/github"
+    ]
+}

package.json

@@ -3,6 +3,9 @@
   "version": "0.1.3",
   "description": "Model Context Protocol Hyperweb products",
   "main": "build/index.js",
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "rm -rf build && tsc && npm run copy-assets && chmod 755 build/index.js",
     "copy-assets": "./scripts/copy-assets.sh",
@@ -14,7 +17,8 @@
     "test:coverage": "vitest --coverage",
     "inspector": "npm run build && npm exec @modelcontextprotocol/inspector node build/index.js",
     "format": "biome check --write",
-    "lint": "biome check"
+    "lint": "biome check",
+    "release": "semantic-release"
   },
   "keywords": [],
   "author": "[email protected]",
@@ -25,11 +29,16 @@
     "@hyperweb/mcp-server": "./build/index.js"
   },
   "devDependencies": {
+    "@anolilab/semantic-release-pnpm": "^1.1.11",
     "@biomejs/biome": "1.9.4",
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^11.0.2",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.13.10",
     "@types/node-fetch": "^2.6.12",
     "rimraf": "^6.0.1",
+    "semantic-release": "^24.2.3",
     "tsx": "^4.19.3",
     "typescript": "^5.8.2",
     "vitest": "^3.1.1"