feat(KLEF): Set up GitHub Actions for various code quality checks

.eslintrc.json

@@ -0,0 +1,6 @@
+{
+  "extends": "next/core-web-vitals",
+  "rules": {
+    "react/no-unescaped-entities": "off"
+  }
+}

.github/cspell.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "https://raw.githubusercontent.com/streetsidesoftware/cspell/main/packages/cspell-types/cspell.schema.json",
+  "version": "0.2",
+  "language": "en",
+  "words": [
+    "kleff",
+    "kleffio",
+    "argocd",
+    "gameserver",
+    "keycloak",
+    "mdx",
+    "pnpm",
+    "tailwindcss",
+    "rehype",
+    "remark",
+    "shiki",
+    "nextjs",
+    "preconnect",
+    "prefetch"
+  ],
+  "ignorePaths": [
+    "node_modules",
+    ".github",
+    "*.json",
+    "*.yaml",
+    "*.yml",
+    "*.ts",
+    "*.tsx"
+  ]
+}

.github/labeler.yml

@@ -0,0 +1,21 @@
+---
+docs:
+  - changed-files:
+      - any-glob-to-any-file: "src/**/*.mdx"
+
+feature:
+  - changed-files:
+      - any-glob-to-any-file: "src/components/**"
+      - any-glob-to-any-file: "src/app/**/*.tsx"
+
+chore:
+  - changed-files:
+      - any-glob-to-any-file: ".github/**"
+      - any-glob-to-any-file: "package.json"
+      - any-glob-to-any-file: "pnpm-lock.yaml"
+      - any-glob-to-any-file: "*.config.*"
+
+tests:
+  - changed-files:
+      - any-glob-to-any-file: "tests/**"
+      - any-glob-to-any-file: "playwright.config.*"

.github/labels.json

@@ -0,0 +1,9 @@
+[
+  { "name": "feature", "color": "0075ca", "description": "New feature or enhancement" },
+  { "name": "bugfix", "color": "d73a4a", "description": "Bug fix" },
+  { "name": "chore", "color": "e4e669", "description": "Maintenance or tooling" },
+  { "name": "docs", "color": "0075ca", "description": "Documentation changes" },
+  { "name": "refactor", "color": "cfd3d7", "description": "Code refactor without behavior change" },
+  { "name": "security", "color": "ee0701", "description": "Security related change" },
+  { "name": "tests", "color": "bfd4f2", "description": "Test additions or updates" }
+]

.github/workflows/actionlint.yml

@@ -0,0 +1,25 @@
+---
+name: Action Lint
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  checks: write
+  pull-requests: write
+
+jobs:
+  actionlint:
+    name: Action Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: reviewdog/action-actionlint@v1
+        with:
+          actionlint_flags: "-color"

.github/workflows/e2e.yml

@@ -0,0 +1,49 @@
+---
+name: E2E Tests
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  e2e:
+    name: E2E Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: pnpm playwright install chromium --with-deps
+
+      - name: Build
+        run: pnpm build
+
+      - name: Run E2E tests
+        run: pnpm test:e2e
+
+      - name: Upload test report
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 7

.github/workflows/label-policy.yml

@@ -0,0 +1,55 @@
+---
+name: Label Policy
+on:
+  push:
+    branches: [main]
+  pull_request:
+    types: [opened, synchronize, reopened, labeled, unlabeled]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
+jobs:
+  label-sync:
+    name: Label Sync
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: EndBug/label-sync@v2
+        with:
+          config-file: .github/labels.json
+          delete-other-labels: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  auto-label:
+    name: Auto Label
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false
+    needs: [label-sync]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/labeler@v5
+        with:
+          configuration-path: .github/labeler.yml
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+  require-label:
+    name: Require Label
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false
+    needs: [auto-label]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            const required = ['feature','bugfix','chore','docs','refactor','security','tests'];
+            const labels = await github.paginate(
+              github.rest.issues.listLabelsOnIssue,
+              { owner: context.repo.owner, repo: context.repo.repo, issue_number: context.payload.pull_request.number }
+            );
+            const present = labels.map(l => l.name);
+            const ok = required.some(l => present.includes(l));
+            if (!ok) core.setFailed(`PR must include at least one of: ${required.join(', ')}`);

.github/workflows/lint.yml

@@ -0,0 +1,29 @@
+---
+name: Lint
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm lint

.github/workflows/mdx-lint.yml

@@ -0,0 +1,45 @@
+---
+name: MDX Lint
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  mdx-lint:
+    name: MDX Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - name: Install remark
+        run: |
+          npm install --global \
+            remark-cli \
+            remark-mdx \
+            remark-preset-lint-recommended \
+            remark-lint-no-duplicate-headings \
+            remark-lint-heading-increment \
+            remark-lint-no-empty-sections \
+            remark-lint-no-undefined-references
+      - name: Lint MDX files
+        run: |
+          remark \
+            --use remark-mdx \
+            --use remark-preset-lint-recommended \
+            --use remark-lint-no-duplicate-headings \
+            --use remark-lint-heading-increment \
+            --use remark-lint-no-empty-sections \
+            --use remark-lint-no-undefined-references \
+            --ext mdx,md \
+            --frail \
+            .