improvement(cli): automate npm package version bumps

[TheodoreSpeaks]

Summary

• Auto-bump sim and sim-setup from the highest published stable npm version
• Preserve deliberate higher release versions and fail on registry or lockfile inconsistencies
• Wire both publish workflows and regression coverage to the shared script

Type of Change

• Improvement

Testing

• bun run test:npm-package-versions
• bun run lint
• bun run apps/sim/scripts/check-block-registry.ts origin/staging
• bun run check:audits
• Verified both package selectors against the public npm registry

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 26, 2026 9:29pm

[greptile-apps]

Greptile Summary

The PR automates stable npm version selection for the sim and sim-setup packages and integrates the shared bump script into both publication workflows.

• Adds registry-aware stable version resolution and coordinated manifest/lockfile updates.
• Makes duplicate published versions fail publication rather than silently skipping.
• Adds regression tests and includes them in the root test command.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
scripts/bump-npm-package-versions.ts	Adds validated registry version selection and targeted package manifest and lockfile updates.
scripts/bump-npm-package-versions.test.ts	Covers stable version resolution, deliberate higher versions, prerelease rejection, and lockfile consistency.
.github/workflows/publish-sim-cli.yml	Runs automatic version bumping before validation and publishing while serializing releases.
.github/workflows/publish-sim-setup.yml	Runs the shared automatic version bump before setup-package validation and publishing.
package.json	Exposes the version-bump command and includes its regression suite in the root test chain.

_{Reviews (2): Last reviewed commit: "improvement(cli): automate npm package v..." | Re-trigger Greptile}

[TheodoreSpeaks]

@greptile

[cubic-dev-ai]

No issues found across 5 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}