GitHub Actions on push/PR: immutable install, constraints, lint, typecheck (src + tests + examples), tests with the per-file 100% coverage gate, knip + publint, full build, and a demo smoke test that drives the echo-agent over scripted stdin asserting the tool-call round-trip and the JSONL session dump — the same commands the local scripts and git hooks run.