Release: v1.0.0

.github/workflows/build.yml

@@ -1,74 +1,90 @@
 name: Build
 
 on:
+  pull_request:
+    branches: [dev, main]
   push:
     branches: [dev]
 
-env:
-  REGISTRY_DOCKERHUB: wgtechlabs/unthread-webhook-server
-  REGISTRY_GHCR: ghcr.io/wgtechlabs/unthread-webhook-server
-
 jobs:
-  build-dev:
-    name: Build Development Images
+  test:
+    name: Run Tests
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v3
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
         with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+          version: 9.15.4
 
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          node-version: '22'
+          cache: 'pnpm'
 
-      - name: Extract metadata
-        id: meta
-        run: |
-          echo "short_sha=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
-          echo "build_date=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
-
-      - name: Build and push development images
-        uses: docker/build-push-action@v5
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Type checking
+        run: pnpm type-check
+
+      - name: Run tests
+        run: pnpm test
+
+      - name: Generate coverage
+        run: pnpm test:coverage
+        continue-on-error: true
+
+  build:
+    name: Build Container Images
+    runs-on: ubuntu-latest
+    needs: test
+    permissions:
+      contents: read
+      packages: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Build and Push Container
+        uses: wgtechlabs/[email protected]
         with:
+          # Registry Configuration
+          registry: both
+          dockerhub-username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          dockerhub-token: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
+          # Branch Configuration
+          main-branch: main
+          dev-branch: dev
+
+          # Image Configuration
+          image-name: unthread-webhook-server
+          dockerfile: ./Dockerfile
           context: .
-          push: true
           platforms: linux/amd64
-          tags: |
-            ${{ env.REGISTRY_DOCKERHUB }}:dev
-            ${{ env.REGISTRY_DOCKERHUB }}:dev-${{ steps.meta.outputs.short_sha }}
-            ${{ env.REGISTRY_GHCR }}:dev
-            ${{ env.REGISTRY_GHCR }}:dev-${{ steps.meta.outputs.short_sha }}
+
+          # Build Arguments
+          build-args: |
+            NODE_VERSION=22.21-alpine3.23
+            RAILWAY_SERVICE_ID=${{ secrets.RAILWAY_SERVICE_ID }}
+
+          # Labels
           labels: |
             org.opencontainers.image.title=Unthread Webhook Server
             org.opencontainers.image.description=A reliable, production-ready Node.js server for processing Unthread.io webhooks with signature verification and smart platform handling.
-            org.opencontainers.image.version=dev-${{ steps.meta.outputs.short_sha }}
-            org.opencontainers.image.created=${{ steps.meta.outputs.build_date }}
-            org.opencontainers.image.revision=${{ github.sha }}
             org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+            org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.licenses=GPL-3.0
 
-      - name: Development build summary
-        run: |
-          echo "## 🔨 Development Build Complete" >> $GITHUB_STEP_SUMMARY
-          echo "**Images built and pushed:**" >> $GITHUB_STEP_SUMMARY
-          echo "- \`${{ env.REGISTRY_DOCKERHUB }}:dev\`" >> $GITHUB_STEP_SUMMARY
-          echo "- \`${{ env.REGISTRY_DOCKERHUB }}:dev-${{ steps.meta.outputs.short_sha }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "- \`${{ env.REGISTRY_GHCR }}:dev\`" >> $GITHUB_STEP_SUMMARY
-          echo "- \`${{ env.REGISTRY_GHCR }}:dev-${{ steps.meta.outputs.short_sha }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "**Test the dev image:**" >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`bash" >> $GITHUB_STEP_SUMMARY
-          echo "docker pull ${{ env.REGISTRY_DOCKERHUB }}:dev" >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+          # Features
+          pr-comment-enabled: true
+          cache-enabled: true
+          provenance: true
+          sbom: true

.github/workflows/validate.yml

@@ -13,20 +13,32 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.4
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
-          cache: 'yarn'
+          node-version: '22'
+          cache: 'pnpm'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: Type checking
-        run: yarn type-check
+        run: pnpm type-check
+
+      - name: Run tests
+        run: pnpm test
+
+      - name: Generate coverage
+        run: pnpm test:coverage
+        continue-on-error: true
 
       - name: Build TypeScript
-        run: yarn build
+        run: pnpm build
 
       - name: Test Docker build (no push)
         run: |

.gitignore

@@ -14,6 +14,10 @@ pids
 coverage/
 *.lcov
 
+# Test artifacts
+.vitest/
+test-results/
+
 # Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
 .grunt
 
@@ -113,8 +117,10 @@ node_modules
 # Users Environment Variables
 .lock-wscript
 
-# IDEs and editors (shim for help)
-.vscode/
+# IDEs and editors
+.vscode/*
+!.vscode/settings.json
+!.vscode/extensions.json
 .idea/
 *.swp
 *.swo
@@ -132,8 +138,9 @@ Thumbs.db
 docs/
 ai_context/
 
-# Enforce Yarn usage - ignore npm lockfile
+# Enforce pnpm usage - ignore npm and yarn lockfiles
 package-lock.json
+yarn.lock
 
 # Environment files with sensitive data
 .env
@@ -142,4 +149,6 @@ package-lock.json
 .env.production
 
 # Context folder
-context/
+context/
+# Snyk Security Extension - AI Rules (auto-generated)
+.github/instructions/snyk_rules.instructions.md

.npmrc

@@ -0,0 +1,13 @@
+# pnpm configuration
+# Use shamefully-hoist to make peer dependencies available
+# This resolves TypeScript type inference issues with nested dependencies
+shamefully-hoist=true
+
+# Public hoist pattern - hoist @redis packages to resolve TypeScript type issues
+public-hoist-pattern[]=@redis/*
+
+# Auto-install peers to prevent missing peer dependency warnings
+auto-install-peers=true
+
+# Disable strict peer dependency checking to allow auto-install-peers to resolve mismatches
+strict-peer-dependencies=false

.vscode/extensions.json

@@ -1,10 +1,12 @@
 {
   "recommendations": [
+    "dbaeumer.vscode-eslint",
+    "vitest.explorer",
     "bierner.markdown-preview-github-styles", 
     "bierner.github-markdown-preview",
     "bierner.markdown-shiki",
     "bierner.color-info",
     "oderwat.indent-rainbow",
-    "warengonzaga.bini-theme",
+    "warengonzaga.bini-theme"
   ]
 }

.vscode/settings.json

@@ -0,0 +1,28 @@
+{
+  "editor.formatOnSave": false,
+  "editor.codeActionsOnSave": {
+    "source.fixAll.eslint": "explicit"
+  },
+  "eslint.validate": [
+    "javascript",
+    "typescript"
+  ],
+  "eslint.workingDirectories": [
+    {
+      "mode": "auto"
+    }
+  ],
+  "eslint.lintTask.enable": true,
+  "typescript.tsdk": "node_modules/typescript/lib",
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "[typescript]": {
+    "editor.defaultFormatter": "dbaeumer.vscode-eslint"
+  },
+  "[javascript]": {
+    "editor.defaultFormatter": "dbaeumer.vscode-eslint"
+  },
+  "vitest.enable": true,
+  "vitest.commandLine": "pnpm test:watch",
+  "python-envs.defaultEnvManager": "ms-python.python:system",
+  "python-envs.pythonProjects": []
+}