[feat] Set up GitHub Actions CI/CD workflows for test, lint, coverage, and npm publishing

.github/workflows/coverage.yml

@@ -0,0 +1,71 @@
+name: Code Coverage
+
+on:
+    pull_request:
+        branches:
+            - main
+    push:
+        branches:
+            - main
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+
+jobs:
+    coverage:
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                node-version: [ 20.x ]
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up Node.js
+              uses: actions/setup-node@v4
+              with:
+                  node-version: ${{ matrix.node-version }}
+
+            - name: Install pnpm
+              uses: pnpm/action-setup@v2
+              with:
+                  version: 8
+
+            - name: Get pnpm store directory
+              id: pnpm-cache
+              shell: bash
+              run: |
+                  echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+            - name: Setup pnpm cache
+              uses: actions/cache@v3
+              with:
+                  path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+                  key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+                  restore-keys: |
+                      ${{ runner.os }}-pnpm-store-
+
+            - name: Install dependencies
+              run: pnpm install --frozen-lockfile
+
+            - name: Run tests with coverage
+              run: pnpm test:coverage
+
+            - name: Upload coverage to Codecov
+              uses: codecov/codecov-action@v3
+              with:
+                  files: ./coverage/coverage-final.json
+                  flags: unittests
+                  name: codecov-umbrella
+                  fail_ci_if_error: false
+                  verbose: true
+
+            - name: Comment coverage on PR
+              if: github.event_name == 'pull_request'
+              uses: romeovs/lcov-reporter-action@v0.3.1
+              with:
+                  lcov-file: ./coverage/lcov.info
+                  github-token: ${{ secrets.GITHUB_TOKEN }}
+              continue-on-error: true

.github/workflows/publish.yml

@@ -0,0 +1,85 @@
+name: Publish to npm
+
+on:
+    push:
+        branches:
+            - main
+        tags:
+            - "v[0-9]+.[0-9]+.[0-9]+"
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: false
+
+jobs:
+    publish:
+        runs-on: ubuntu-latest
+        if: github.actor != 'dependabot[bot]'
+        strategy:
+            matrix:
+                node-version: [ 20.x ]
+
+        permissions:
+            contents: read
+            packages: write
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up Node.js
+              uses: actions/setup-node@v4
+              with:
+                  node-version: ${{ matrix.node-version }}
+                  registry-url: https://registry.npmjs.org/
+
+            - name: Install pnpm
+              uses: pnpm/action-setup@v2
+              with:
+                  version: 8
+
+            - name: Get pnpm store directory
+              id: pnpm-cache
+              shell: bash
+              run: |
+                  echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+            - name: Setup pnpm cache
+              uses: actions/cache@v3
+              with:
+                  path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+                  key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+                  restore-keys: |
+                      ${{ runner.os }}-pnpm-store-
+
+            - name: Install dependencies
+              run: pnpm install --frozen-lockfile
+
+            - name: Lint code
+              run: pnpm lint
+
+            - name: Run tests
+              run: pnpm test
+
+            - name: Build TypeScript
+              run: pnpm build
+
+            - name: Publish to npm
+              run: pnpm publish --no-git-checks
+              env:
+                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+              if: |
+                  startsWith(github.ref, 'refs/tags/v') ||
+                  (github.ref == 'refs/heads/main' && github.event_name == 'push')
+
+            - name: Create GitHub Release
+              uses: softprops/action-gh-release@v1
+              if: startsWith(github.ref, 'refs/tags/v')
+              with:
+                  generate_release_notes: true
+                  files: |
+                      dist/**/*
+                      LICENSE.md
+                      README.md
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test-and-lint.yml

@@ -0,0 +1,82 @@
+name: Test & Lint
+
+on:
+    pull_request:
+        branches:
+            - main
+    push:
+        branches:
+            - main
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+
+jobs:
+    test-and-lint:
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                node-version: [ 20.x ]
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up Node.js
+              uses: actions/setup-node@v4
+              with:
+                  node-version: ${{ matrix.node-version }}
+
+            - name: Install pnpm
+              uses: pnpm/action-setup@v2
+              with:
+                  version: 8
+
+            - name: Get pnpm store directory
+              id: pnpm-cache
+              shell: bash
+              run: |
+                  echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+            - name: Setup pnpm cache
+              uses: actions/cache@v3
+              with:
+                  path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+                  key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+                  restore-keys: |
+                      ${{ runner.os }}-pnpm-store-
+
+            - name: Install dependencies
+              run: pnpm install --frozen-lockfile
+
+            - name: Lint code
+              run: pnpm lint
+              continue-on-error: false
+
+            - name: Check code formatting
+              run: pnpm format:check
+              continue-on-error: false
+
+            - name: Run tests
+              run: pnpm test
+              continue-on-error: false
+
+            - name: Build TypeScript
+              run: pnpm build
+              continue-on-error: false
+
+    # Summary job for branch protection rules
+    ci-status:
+        name: CI Status
+        runs-on: ubuntu-latest
+        needs: [ test-and-lint ]
+        if: always()
+        steps:
+            - name: Check CI status
+              run: |
+                  if [ "${{ needs.test-and-lint.result }}" = "failure" ]; then
+                    echo "❌ CI failed"
+                    exit 1
+                  fi
+                  echo "✅ CI passed"