ci: add Bun validation and deploy workflows

Co-authored-by: Rahul Chalamala <rchalamala@users.noreply.github.com>

Author: cursoragent

.github/workflows/ci.yml

@@ -0,0 +1,60 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - agent
+      - "cursor/**"
+  workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    name: Lint, test, and build
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version-file: ".bun-version"
+
+      - name: Restore Bun cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-bun-
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run lint
+        run: bun run lint
+
+      - name: Run tests
+        run: bun run test:run
+
+      - name: Build app
+        run: bun run build
+
+      - name: Upload coverage artifact
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage
+          path: coverage
+          if-no-files-found: error

.github/workflows/deploy.yml

@@ -0,0 +1,58 @@
+# Deploy to Cloudflare Pages/Workers on push to main.
+#
+# Required repository secrets:
+#   CLOUDFLARE_API_TOKEN  - API token with Workers Scripts:Edit permission
+#   CLOUDFLARE_ACCOUNT_ID - Cloudflare account ID
+#
+# The wrangler.jsonc file in the repo root configures the deploy target,
+# routes, and SPA not-found handling.
+
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    name: Build and deploy
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version-file: ".bun-version"
+
+      - name: Restore Bun cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-bun-
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Build app
+        run: bun run build
+
+      - name: Deploy to Cloudflare
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: deploy

README.md

@@ -5,3 +5,78 @@ Made with ❤️ by [Rahul](https://github.com/rchalamala/), [Eric](https://gith
 In addition, thanks to [Armeet](https://github.com/armeetjatyani/) and others for suggestions/contributions!
 
 Favicon art by Audrey Wong.
+
+## Development
+
+Install dependencies:
+
+```bash
+bun install
+```
+
+Start the dev server (Vite, port 3000):
+
+```bash
+bun run dev
+```
+
+## Validation
+
+The repository includes a GitHub Actions CI workflow (`.github/workflows/ci.yml`)
+that runs the same core checks used locally:
+
+```bash
+bun run lint       # ESLint with zero-warning policy
+bun run test:run   # Vitest with coverage
+bun run build      # TypeScript type-check + Vite production build
+```
+
+To run the full validation sequence locally in one command:
+
+```bash
+bun run check
+```
+
+## Deployment
+
+The app deploys to **Cloudflare Pages/Workers**. The deploy configuration lives
+in `wrangler.jsonc`, which serves the built `dist/` directory as a static site
+with SPA routing (`not_found_handling: "single-page-application"`).
+
+### Continuous deployment
+
+Pushes to `main` trigger the CD workflow at `.github/workflows/deploy.yml`,
+which builds the app and deploys it via Wrangler.
+
+**Required GitHub repository secrets:**
+
+| Secret | Description |
+|--------|-------------|
+| `CLOUDFLARE_API_TOKEN` | API token with Workers Scripts:Edit permission |
+| `CLOUDFLARE_ACCOUNT_ID` | Your Cloudflare account ID |
+
+### Manual deploy
+
+To deploy manually from a local machine:
+
+```bash
+bun run build
+wrangler login       # one-time auth
+bun run deploy
+```
+
+### Local production preview
+
+To test the production build locally with Wrangler:
+
+```bash
+bun run build
+bun run dev:wrangler -- --port 8787
+# Open http://localhost:8787/
+```
+
+## Package manager
+
+This repository uses a **Bun-first** workflow. Installing dependencies with
+`npm install` is intentionally blocked so the committed `bun.lock` remains the
+single source of truth for dependency resolution.