ci: enhance CI pipeline with comprehensive testing and build verification

- Add push trigger for main/master branches
- Split workflow into separate lint, test, and build jobs
- Add matrix testing for Node.js versions 18, 20, and 22
- Implement test coverage reporting with Codecov integration
- Add build artifact validation and upload
- Use frozen lockfile for consistent dependency installation
- Add proper permissions for PR comments

This improves CI reliability by testing across multiple Node versions and
ensures build outputs are properly validated before merging.

Author: z0ffy

.github/workflows/ci.yml

@@ -1,10 +1,18 @@
 name: CI
 
 on:
+  push:
+    branches: [main, master]
   pull_request:
+    branches: [main, master]
+
+permissions:
+  contents: read
+  pull-requests: write  # 用于 PR 评论（如测试覆盖率报告）
 
 jobs:
-  build:
+  lint:
+    name: Lint Code
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -15,18 +23,88 @@ jobs:
         with:
           version: 9
 
-      - name: Install Node.js
+      - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20.x'
-          registry-url: https://registry.npmjs.org
+          node-version: '20'
           cache: 'pnpm'
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Run ESLint
         run: pnpm run lint
 
-      - name: Compile TypeScript
+  test:
+    name: Test (Node ${{ matrix.node-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: ['18', '20', '22']
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run tests with coverage
+        run: pnpm run coverage
+
+      - name: Upload coverage reports
+        if: matrix.node-version == '20'
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: false
+
+  build:
+    name: Build Package
+    runs-on: ubuntu-latest
+    needs: [lint, test]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build package
         run: pnpm run build
+
+      - name: Check build output
+        run: |
+          ls -la dist/
+          if [ ! -f "dist/index.js" ] || [ ! -f "dist/index.mjs" ] || [ ! -f "dist/index.d.ts" ]; then
+            echo "Build output missing required files"
+            exit 1
+          fi
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          retention-days: 7