feat(setup): publish standalone self-hosting package

[TheodoreSpeaks]

Summary

• Publish @sim/setup as a standalone self-hosting CLI that ships the production Docker Compose configuration without cloning the repository
• Share generated deployment capability and integration metadata between the installer and application while preserving source-checkout development modes
• Add npm release automation and update the documentation, skills, and repository CLI commands

Type of Change

• New feature

Testing

• bun run lint
• bun run check:audits — 30 audits passed
• bun run apps/sim/scripts/check-block-registry.ts origin/staging
• bun run --cwd packages/sim-setup test — 90 tests passed
• App compatibility suite — 154 tests passed
• Package and application type checks
• Frozen lockfile install
• Packed-package smoke test through npx

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Screenshots/Videos

Not applicable — no visual UI changes.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Aug 19, 2026 11:53pm

[cursor]

PR Summary

Medium Risk
Changes the primary self-hosting and OAuth deployment-metadata paths; risk is mitigated by compatibility re-exports, CI checks, and publish smoke tests, but operators must adopt the new CLI and regenerated artifacts.

Overview
Self-hosting no longer requires cloning the monorepo: npx @sim/setup creates a ./sim directory, writes .env, and runs published Docker Compose images. Repo contributors use bun run sim-setup for local dev and Kubernetes modes.

@sim/deployment-config is the new home for OAuth capability rules, integrations.json, integration availability, and service-account deployment policy. The app keeps thin re-exports; setup commands in errors and docs now use npx @sim/setup add … instead of bun run setup …. Service-account provider IDs are generated (deployment-config:generate / check); preview/oauth-client policy stays handwritten in service-account-metadata.ts.

Root scripts/setup and the sim bin are removed. publish-sim-setup.yml publishes @sim/setup on main/staging/dev with version tags and a packed-bundle smoke test. docker-compose.prod.yml drops the cron service’s local build fallback so production compose relies on published images only.

^{Reviewed by Cursor Bugbot for commit da603e9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

The PR introduces the standalone @sim/setup self-hosting CLI and shares deployment capability metadata between the installer and application.

• Packages the production Docker Compose configuration for repository-free installation and updates.
• Adds lifecycle, configuration, capability, and compatibility coverage for standalone and source-checkout modes.
• Adds npm publication automation and updates public self-hosting documentation and repository commands.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains; the previously reported remote-install update issue is fixed at current HEAD, and the public npx invocation was explicitly accepted as intentional.

Important Files Changed

Filename	Overview
packages/sim-setup/src/lifecycle.ts	Updates discovered standalone installations using the packaged Compose asset while retaining source-checkout behavior and rejecting unmanaged modifications.
packages/sim-setup/src/compose-asset.ts	Materializes and tracks the bundled production Compose asset with managed-file integrity checks.
packages/sim-setup/src/lifecycle.test.ts	Covers refreshing a discovered standalone installation outside the current setup context.
packages/deployment-config/src/env-capabilities.ts	Centralizes deployment capability metadata shared by the application and setup package.
.github/workflows/publish-sim-setup.yml	Adds release automation for publishing the standalone setup package.

_{Reviews (5): Last reviewed commit: "fix(setup): restore default stopped inst..." | Re-trigger Greptile}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit dc2dd65. Configure here.}

[TheodoreSpeaks]

@cursor review

[TheodoreSpeaks]

@greptile

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 99441fd. Configure here.}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit da603e9. Configure here.}