Add deployment pipelines

[eacet]

This PR adds ci & package publishing pipelines.

[linear]

ENG-1210 Setup CI/CD for `post-quantum-packages`

Implement a generic CI/CD pipeline for post-quantum-packages

• npmjs
• crate.io
• pypi

[greptile-apps]

Greptile Overview

Greptile Summary

This PR introduces comprehensive CI/CD infrastructure for the monorepo, including change detection, multi-language testing, and automated package publishing across npm, crates.io, and PyPI.

Key Changes

• CI Pipeline: Change detection identifies modified packages per language, running tests only for affected packages across TypeScript (Bun), Rust (stable/beta/1.75), and Python (3.8-3.12)
• Publishing Workflows: Tag-triggered publishing for all three languages (<package>/<lang>@<version> pattern) with version verification
• Version Script: Automated version bumping tool that updates config files, creates commits, and tags for CI publishing
• Documentation: Comprehensive CLAUDE.md and updated README with workflow instructions

Issues Found

• Critical: bun ci used in CI and npm publish workflows but bun.lockb doesn't exist - will fail on first run
• Critical: TypeScript build/test failures in CI won't propagate due to subshell exit code handling

Confidence Score: 3/5

• This PR has critical issues that will cause CI failures on first run
• Missing bun.lockb will cause bun ci to fail immediately in both CI and npm publish workflows. Additionally, exit code propagation bug in TypeScript testing could mask test failures. These are blocking issues that must be fixed before merge.
• .github/workflows/ci.yml and .github/workflows/publish-npm.yml require immediate fixes for lockfile and error handling

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Adds comprehensive CI with change detection, multi-language testing (TypeScript/Rust/Python), and conditional job execution
.github/workflows/publish-npm.yml	npm publish workflow triggered by */ts@* tags with version verification
scripts/version.ts	Version bumping script that updates config files, creates commits, and tags for CI publishing

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant Script as version.ts
    participant Git as Git Repository
    participant CI as GitHub Actions
    participant npm as npm Registry
    participant cargo as crates.io
    participant pypi as PyPI

    Dev->>Script: bun run scripts/version <pkg>/<lang> <bump>
    Script->>Script: Read current version from config
    Script->>Script: Bump version (major/minor/patch)
    Script->>Git: Update config file (package.json/Cargo.toml/pyproject.toml)
    Script->>Git: git commit -m "chore(...)"
    Script->>Git: git tag <pkg>/<lang>@<version>
    Script-->>Dev: Instructions to push

    Dev->>Git: git push origin HEAD <tag>
    Git->>CI: Trigger workflow based on tag pattern

    alt TypeScript (*/ts@*)
        CI->>CI: Parse tag for package & version
        CI->>CI: bun ci & build
        CI->>CI: Verify package.json version matches tag
        CI->>npm: bun publish --access public
    else Rust (*/rust@*)
        CI->>CI: Parse tag for package & version
        CI->>CI: Verify Cargo.toml version matches tag
        CI->>cargo: cargo publish
    else Python (*/python@*)
        CI->>CI: Parse tag for package & version
        CI->>CI: Verify pyproject.toml version matches tag
        CI->>CI: python -m build
        CI->>pypi: twine upload dist/*
    end

Loading

[greptile-apps]

_{5 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

[eacet]

@greptile review

[greptile-apps]

_{5 files reviewed, 7 comments}

_{Edit Code Review Agent Settings | Greptile}

[eacet]

@greptile review

[greptile-apps]

_{3 files reviewed, 3 comments}

_{Edit Code Review Agent Settings | Greptile}