feat!: migrate to Biome + Lefthook + Vitest + esbuild + Node 24 (#8)

* feat!: migrate to Biome + Lefthook + Vitest + esbuild + Node 24

Brings the action in line with the org's modern toolchain template
(mirroring reside-eng/npm-dependency-stats-action#1655):

- Replace ESLint 8 + Prettier 3 + Husky + lint-staged + @side/eslint-config-*
  + @side/prettier-config with @biomejs/biome 2.4.15 + lefthook 2.1.8.
- Replace @vercel/ncc with esbuild 0.28.0 — bundle output is now
  dist/index.mjs (ESM) with a createRequire banner for CommonJS deps.
- Add Vitest 4.1.7 + @vitest/coverage-v8 plus smoke tests for action.ts
  and github.ts (80% line coverage, gate set at 75%).
- Bump Node engine ^24.0.0, @tsconfig/node24, @types/node@^24,
  TypeScript ^6.0.3 (required by @tsconfig/node24's lib values).
- action.yml: runs.using node20 -> node24, main dist/index.js -> dist/index.mjs.
- Bump cycjimmy/semantic-release-action v2.7.0 -> v6.0.0 and
  semantic_version ^18 -> ^25 in the release workflow.
- gitignore dist/ on main (release workflow continues to force-commit the
  rebuilt bundle to the v<major> branch, matching the reference template).
- Add Claude Code scaffolding: AGENTS.md, CLAUDE.md stub,
  .claude/{agents,commands}/.gitkeep, .claude/settings.json permissions,
  .vscode/extensions.json, .github/workflows/claude-code.yml.

BREAKING CHANGE: action.yml now uses node24 runtime and dist/index.mjs
entrypoint. Consumers must pin to @v2 (the new major branch produced by
semantic-release). Existing @v1 consumers are unaffected.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(agents): trim AGENTS.md to load-bearing content only

Drops three sections that don't change agent behaviour at execution time:

- Release: version pins and trigger branches aren't load-bearing for dev
  work; the dist/ ownership rule (the one piece that mattered) is now
  folded into Conventions.
- Atlassian: already declared in ~/.claude/CLAUDE.md and the parent
  Side/CLAUDE.md; no Atlassian touchpoints in this repo anyway.
- Side org context: already declared in the parent Side/CLAUDE.md.

Adds the non-obvious things an agent would otherwise rediscover:

- The two action modes (upsert vs create-only) and the parent-selector
  behaviour.
- A pointer to the reorderTableRows quirk in src/action.ts.
- The module-load side effect in src/github.ts (why tests mock
  @actions/core before importing it).
- The feat!: / BREAKING CHANGE: rule for triggering major bumps.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* ci: upload test coverage to Coveralls

The pre-migration verify.yml and release.yml had a commented-out
Coveralls upload step waiting for tests to exist. Now that we have 11
tests at 80% line coverage, wire it up:

- vitest.config.ts: add 'lcov' to coverage.reporter so coverage/lcov.info
  is produced (Coveralls default input path). Keeps 'text' for local CLI
  output.
- verify.yml + release.yml: add Coveralls upload step
  (coverallsapp/github-action@v2.3.6, SHA-pinned) immediately after the
  test step.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* ci: add claude code review action

---------

Co-authored-by: Eddie Leffler <757524+hershmire@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: Mathieu Di-Majo <mathieu.dimajo@gmail.com>

Author: 3 people

.claude/agents/.gitkeep

@@ -0,0 +1,60 @@
+{
+  "permissions": {
+    "allow": [
+      "Edit(/**)",
+      "Bash(yarn *)",
+      "Bash(npx *)",
+      "Bash(find *)",
+      "Bash(ls *)",
+      "Bash(cat *)",
+      "Bash(grep *)",
+      "Bash(node --version)",
+      "Bash(yarn --version)",
+      "Bash(tsc --version)",
+      "Bash(biome --version)",
+      "Bash(lefthook --version)",
+      "Bash(gh --version)",
+      "Bash(git *)",
+      "Bash(gh auth status)",
+      "Bash(gh repo view*)",
+      "Bash(gh pr*)",
+      "Bash(gh issue*)",
+      "Bash(gh api*)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "WebFetch(domain:biomejs.dev)",
+      "WebFetch(domain:lefthook.dev)",
+      "mcp__atlassian__get*",
+      "mcp__atlassian__search*",
+      "mcp__atlassian__lookup*",
+      "mcp__atlassian__fetch",
+      "mcp__atlassian__atlassianUserInfo",
+      "mcp__context7__resolve-library-id",
+      "mcp__context7__query-docs"
+    ],
+    "deny": [
+      "Bash(sudo *)",
+      "Read(**/.env)",
+      "Read(**/.env.*)",
+      "Edit(**/.env)",
+      "Edit(**/.env.*)",
+      "Bash(git reset*)",
+      "Bash(git push --force*)",
+      "Bash(git clean -f*)",
+      "Bash(git checkout -- *)",
+      "Bash(git checkout .)",
+      "Bash(git branch -D *)",
+      "Bash(git branch --delete --force *)",
+      "Bash(gh auth login)",
+      "Bash(gh auth logout)",
+      "Bash(gh repo create)",
+      "Bash(gh repo delete)",
+      "Bash(gh repo archive)",
+      "Bash(gh pr merge*)",
+      "Bash(gh release*)",
+      "Bash(gh secret*)",
+      "Bash(gh variable*)"
+    ],
+    "ask": ["Bash(yarn dlx *)", "Bash(rm -rf *)"]
+  }
+}

.claude/commands/.gitkeep

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false

.claude/settings.json

@@ -0,0 +1,25 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+permissions:
+  actions: write
+  contents: write
+  deployments: write
+  id-token: write
+  issues: write
+  pull-requests: write
+  statuses: write
+
+jobs:
+  claude:
+    uses: reside-eng/workflow-templates/.github/workflows/claude-code.yml@v12
+    secrets: inherit

.editorconfig

@@ -0,0 +1,12 @@
+name: PR code Review
+
+on:
+  pull_request:
+    types: [opened, ready_for_review, reopened]
+  issue_comment:
+    types: [created]
+
+jobs:
+  code-review:
+    uses: reside-eng/workflow-templates/.github/workflows/code-review.yml@v12
+    secrets: inherit

.eslintignore

@@ -15,7 +15,7 @@ concurrency:
   group: release-${{ github.ref }}
 
 env:
-  NODE_VERSION: 20.x
+  NODE_VERSION: 24.x
 
 jobs:
   publish:
@@ -40,30 +40,30 @@ jobs:
           NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --immutable
 
-      - name: Verify formatting
-        run: yarn format:check
+      - name: Check
+        run: yarn check
 
-      - name: Lint
-        run: yarn lint
+      - name: Type check
+        run: yarn types:check
 
-      # - name: Test
-      #   run: yarn test --coverage --silent
+      - name: Test
+        run: yarn test:cov
 
-      # - name: Upload coverage to Coveralls
-      #   uses: coverallsapp/github-action@95b1a2355bd0e526ad2fd62da9fd386ad4c98474 # v2.2.1
-      #   with:
-      #     github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload coverage to Coveralls
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         run: yarn build
 
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@5982a02995853159735cb838992248c4f0f16166 # v2.7.0
+        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         id: semantic
         with:
-          semantic_version: ^18
+          semantic_version: ^25
           branches: |
             [
               '+([0-9])?(.{+([0-9]),x}).x',

.eslintrc.cjs

@@ -3,7 +3,7 @@ name: Verify
 on: [pull_request]
 
 env:
-  NODE_VERSION: 20.x
+  NODE_VERSION: 24.x
 
 jobs:
   build:
@@ -20,21 +20,21 @@ jobs:
           cache: 'yarn'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --immutable
 
-      - name: Verify formatting
-        run: yarn format:check
+      - name: Check
+        run: yarn check
 
-      - name: Lint
-        run: yarn lint
+      - name: Type check
+        run: yarn types:check
 
-      # - name: Test
-      #   run: yarn test --coverage --silent
+      - name: Test
+        run: yarn test:cov
 
-      # - name: Upload coverage to Coveralls
-      #   uses: coverallsapp/github-action@95b1a2355bd0e526ad2fd62da9fd386ad4c98474 # v2.2.1
-      #   with:
-      #     github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload coverage to Coveralls
+        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         run: yarn build