ci: Add @graphprotocol/gnd npm wrapper package

Add a wrapper package that installs the correct platform-specific gnd
binary via optionalDependencies. This enables `npm install -g
@graphprotocol/gnd` and `npx @graphprotocol/gnd`.

The workflow now has a publish-npm-wrapper job that runs after the
platform packages are published.

Author: lutter

.github/workflows/gnd-binary-build.yml

@@ -260,6 +260,64 @@ jobs:
           }
           EOF
 
+      - name: Publish
+        run: npm publish --provenance --access public ${{ inputs.dry_run && '--dry-run' || '' }}
+        working-directory: pkg
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GRAPHPROTOCOL_NPM_TOKEN }}
+
+  publish-npm-wrapper:
+    name: Publish @graphprotocol/gnd wrapper
+    needs: publish-npm
+    if: startsWith(github.ref, 'refs/tags/')
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+
+      - name: Create wrapper package
+        shell: bash
+        run: |
+          VERSION="${{ github.ref_name }}"
+          VERSION="${VERSION#v}"
+
+          mkdir -p pkg/bin
+          cp gnd/npm/bin/gnd.js pkg/bin/gnd.js
+
+          cat > pkg/package.json << EOF
+          {
+            "name": "@graphprotocol/gnd",
+            "version": "${VERSION}",
+            "description": "Graph Node Development CLI",
+            "bin": {
+              "gnd": "./bin/gnd.js"
+            },
+            "optionalDependencies": {
+              "@graphprotocol/gnd-darwin-arm64": "${VERSION}",
+              "@graphprotocol/gnd-darwin-x64": "${VERSION}",
+              "@graphprotocol/gnd-linux-arm64": "${VERSION}",
+              "@graphprotocol/gnd-linux-x64": "${VERSION}",
+              "@graphprotocol/gnd-win32-x64": "${VERSION}"
+            },
+            "publishConfig": {
+              "access": "public",
+              "provenance": true
+            },
+            "license": "(Apache-2.0 OR MIT)",
+            "repository": {
+              "type": "git",
+              "url": "https://github.com/graphprotocol/graph-node.git"
+            }
+          }
+          EOF
+
       - name: Publish
         run: npm publish --provenance --access public ${{ inputs.dry_run && '--dry-run' || '' }}
         working-directory: pkg

gnd/npm/README.md

@@ -0,0 +1,30 @@
+# gnd npm wrapper
+
+This directory contains the files used to publish the `@graphprotocol/gnd`
+npm wrapper package. The wrapper package enables installing gnd via npm:
+
+```bash
+npm install -g @graphprotocol/gnd
+npx @graphprotocol/gnd
+```
+
+## How it works
+
+The wrapper declares platform-specific packages as `optionalDependencies`.
+npm only installs the one matching the user's OS and architecture. The
+`bin/gnd.js` script resolves and executes the correct platform binary.
+
+Platform packages:
+
+- `@graphprotocol/gnd-linux-x64`
+- `@graphprotocol/gnd-linux-arm64`
+- `@graphprotocol/gnd-darwin-x64`
+- `@graphprotocol/gnd-darwin-arm64`
+- `@graphprotocol/gnd-win32-x64`
+
+## Publishing
+
+All packages are published automatically by the `Build gnd Binaries`
+GitHub Actions workflow (`.github/workflows/gnd-binary-build.yml`) when
+dispatched on a tag. Platform packages are published first, then the
+wrapper.

gnd/npm/bin/gnd.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+
+const { execFileSync } = require("child_process");
+const path = require("path");
+
+const PLATFORMS = {
+  "darwin-arm64": "@graphprotocol/gnd-darwin-arm64",
+  "darwin-x64": "@graphprotocol/gnd-darwin-x64",
+  "linux-arm64": "@graphprotocol/gnd-linux-arm64",
+  "linux-x64": "@graphprotocol/gnd-linux-x64",
+  "win32-x64": "@graphprotocol/gnd-win32-x64",
+};
+
+const key = `${process.platform}-${process.arch}`;
+const pkg = PLATFORMS[key];
+if (!pkg) {
+  console.error(`Unsupported platform: ${key}`);
+  process.exit(1);
+}
+
+const bin = process.platform === "win32" ? "gnd.exe" : "gnd";
+const binPath = path.join(
+  require.resolve(`${pkg}/package.json`),
+  "..",
+  "bin",
+  bin
+);
+
+try {
+  execFileSync(binPath, process.argv.slice(2), { stdio: "inherit" });
+} catch (e) {
+  process.exit(e.status ?? 1);
+}