ci(release): add release-please CD workflow with PyPI trusted publisher

Author: zurfjereluhmie

.github/workflows/release.yml

@@ -0,0 +1,63 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    name: Open / update release PR
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
+    steps:
+      - uses: googleapis/release-please-action@v4
+        id: release
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json
+
+  publish:
+    name: Build, smoke test & publish to PyPI
+    needs: release-please
+    if: needs.release-please.outputs.release_created == 'true'
+    runs-on: ubuntu-latest
+    environment: pypi
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.release-please.outputs.tag_name }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.0.0
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version-file: .python-version
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Smoke test (wheel)
+        run: uv run --isolated --no-project --with "dist/*.whl" tests/smoke_test.py
+
+      - name: Smoke test (sdist)
+        run: uv run --isolated --no-project --with "dist/*.tar.gz" tests/smoke_test.py
+
+      - name: Publish to PyPI
+        run: uv publish

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.1.0"
+}

release-please-config.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "release-type": "python",
+  "packages": {
+    ".": {}
+  }
+}

tests/smoke_test.py

@@ -0,0 +1,56 @@
+"""Smoke test — run against the built wheel and sdist before publishing.
+
+Checks that the package installs cleanly, all public names are importable,
+and the CLI entry point is reachable.  Intentionally has no external
+dependencies beyond the package itself.
+"""
+
+import importlib
+import subprocess
+
+
+def test_public_api() -> None:
+    import evalwire
+
+    required = [
+        "DatasetUploader",
+        "ExperimentRunner",
+        "make_membership_evaluator",
+        "make_top_k_evaluator",
+        "setup_observability",
+    ]
+    missing = [name for name in required if not hasattr(evalwire, name)]
+    assert not missing, f"Missing public names: {missing}"
+
+
+def test_submodules_importable() -> None:
+    for module in [
+        "evalwire.evaluators",
+        "evalwire.uploader",
+        "evalwire.runner",
+        "evalwire.observability",
+        "evalwire.config",
+        "evalwire.cli",
+    ]:
+        importlib.import_module(module)
+
+
+def test_cli_entry_point() -> None:
+    import shutil
+
+    evalwire_bin = shutil.which("evalwire")
+    assert evalwire_bin is not None, "evalwire CLI entry point not found on PATH"
+    result = subprocess.run(
+        [evalwire_bin, "--help"],
+        capture_output=True,
+        text=True,
+    )
+    assert result.returncode == 0, f"CLI --help failed:\n{result.stderr}"
+    assert "evalwire" in result.stdout.lower()
+
+
+if __name__ == "__main__":
+    test_public_api()
+    test_submodules_importable()
+    test_cli_entry_point()
+    print("Smoke test passed.")