Add CI/CD workflows, Dependabot, 100% test coverage

- CI workflow: lint + test on push/PR, Node 20+22 matrix
- Publish workflow: auto-publish to npm on GitHub Release via OIDC Trusted Publishing (no tokens)
- Dependabot: weekly npm dependency checks
- Enforce 100% line/branch/function coverage in test script
- Add 6 new tests (userPort, ping identity, null sessionStore) — 44 total
- Fix ESLint config: add missing clearTimeout global
- README: add CI + npm badges, /mcp reload guidance, update test counts

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: BrainSlugs83

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [20, 22]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm ci
+      - run: npm run check

.github/workflows/publish.yml

@@ -0,0 +1,31 @@
+name: Publish to npm
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+
+      - run: npm ci
+
+      # Set package version from release tag (e.g. v1.6.0 → 1.6.0)
+      - name: Set version from tag
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          npm version "$VERSION" --no-git-tag-version --allow-same-version
+
+      - run: npm run check
+
+      - run: npm publish --provenance --access public

README.md

@@ -1,5 +1,8 @@
 # vector-memory
 
+[![CI](https://github.com/BrainSlugs83/GithubCopilotCLI-VectorMemoryMCP/actions/workflows/ci.yml/badge.svg)](https://github.com/BrainSlugs83/GithubCopilotCLI-VectorMemoryMCP/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/ghcp-cli-vector-memory-mcp)](https://www.npmjs.com/package/ghcp-cli-vector-memory-mcp)
+
 An [MCP](https://modelcontextprotocol.io/) server that adds **persistent long-term memory** to [**GitHub Copilot CLI**](https://docs.github.com/en/copilot/github-copilot-in-the-cli) via local semantic vector search. Copilot can recall past conversations, code changes, and decisions across all sessions — by meaning, not just keywords.
 
 > **Note:** This is a community project and is not affiliated with or endorsed by GitHub. [GitHub Copilot CLI](https://docs.github.com/en/copilot/github-copilot-in-the-cli) is a product of GitHub / Microsoft.
@@ -73,9 +76,9 @@ GitHub Copilot CLI reads MCP server definitions from a JSON config file. The **u
 
 > **You do not need to clone this repo or run `npm install` yourself.** The `npx -y` command automatically downloads, installs, and runs the package from the npm registry. It caches the package locally so subsequent launches are fast.
 
-### Step 3: Restart Copilot CLI
+### Step 3: Load the server
 
-Close any running Copilot CLI session and start a new one. The MCP server will launch automatically in the background.
+Close any running Copilot CLI session and start a new one — **or** if you already have a session open, type `/mcp reload` to pick up the new config without restarting. The MCP server will launch automatically in the background.
 
 > [!IMPORTANT]
 > **The very first launch takes a few minutes.** On first run, `npx` installs the package and its
@@ -190,7 +193,7 @@ copilot.exe ──STDIO──▶ index.js (proxy) ──HTTP──▶ vector-mem
 
 ```bash
 npm run lint     # ESLint on all source files
-npm test         # 38 unit tests (node:test, zero external deps)
+npm test         # 44 unit tests with 100% coverage (node:test, zero external deps)
 npm run check    # lint + test
 ```
 
@@ -203,7 +206,7 @@ npm test
 With coverage:
 
 ```bash
-node --test --experimental-test-coverage test.js
+npm test   # coverage is enforced at 100% by default
 ```
 
 ### File overview
@@ -214,7 +217,7 @@ node --test --experimental-test-coverage test.js
 | `vector-memory-server.js` | HTTP singleton — owns model, DB, indexing |
 | `embed-worker.js` | Worker thread for ONNX embedding inference |
 | `lib.js` | Pure logic: filtering, dedup, scoring, handler factory |
-| `test.js` | 38 unit tests with DI mocks |
+| `test.js` | 44 unit tests with DI mocks, 100% coverage enforced |
 | `eslint.config.js` | Lint config |
 
 ### Manual server management

eslint.config.js

@@ -13,6 +13,7 @@ export default [
         setTimeout: "readonly",
         setInterval: "readonly",
         clearInterval: "readonly",
+        clearTimeout: "readonly",
         URL: "readonly",
       },
     },

package.json

@@ -38,7 +38,7 @@
   ],
   "scripts": {
     "lint": "eslint index.js vector-memory-server.js embed-worker.js lib.js",
-    "test": "node --test test.js",
+    "test": "node --test --experimental-test-coverage --test-coverage-lines=100 --test-coverage-branches=100 --test-coverage-functions=100 --test-coverage-exclude=test.js test.js",
     "check": "npm run lint && npm run test"
   },
   "dependencies": {

test.js

@@ -1,7 +1,7 @@
 import { describe, it } from "node:test";
 import assert from "node:assert/strict";
 import { Readable } from "node:stream";
-import { filterUnindexed, dedup, postProcessResults, isOurServer, isIndexable, MIN_SCORE, createHandler } from "./lib.js";
+import { filterUnindexed, dedup, postProcessResults, isOurServer, isIndexable, userPort, BASE_PORT, MIN_SCORE, createHandler } from "./lib.js";
 
 // --- Mock helpers for handler tests ---
 
@@ -50,6 +50,27 @@ function makeDeps(overrides = {}) {
   };
 }
 
+describe("userPort", () => {
+  it("returns a number within the expected range", () => {
+    const port = userPort("testuser");
+    assert.ok(port >= BASE_PORT, `port ${port} should be >= ${BASE_PORT}`);
+    assert.ok(port <= BASE_PORT + 0xFFF, `port ${port} should be <= ${BASE_PORT + 0xFFF}`);
+  });
+
+  it("is deterministic for the same username", () => {
+    assert.equal(userPort("alice"), userPort("alice"));
+  });
+
+  it("is case-insensitive", () => {
+    assert.equal(userPort("Alice"), userPort("alice"));
+  });
+
+  it("returns different ports for different usernames", () => {
+    // Not guaranteed for all pairs, but statistically overwhelmingly likely
+    assert.notEqual(userPort("alice"), userPort("bob"));
+  });
+});
+
 describe("filterUnindexed", () => {
   it("returns items not in the existing index", () => {
     const all = [
@@ -251,6 +272,19 @@ describe("handleRequest - /ping", () => {
     assert.equal(res.statusCode, 200);
     assert.deepEqual(res.body, { ok: true });
   });
+
+  it("includes identity when getIdentity is provided", async () => {
+    const deps = makeDeps({
+      getIdentity: () => ({ user: "testuser", version: "1.0.0" }),
+    });
+    const handler = createHandler(deps);
+    const res = mockRes();
+    await handler(mockReq("POST", "/ping"), res);
+    assert.equal(res.statusCode, 200);
+    assert.equal(res.body.ok, true);
+    assert.equal(res.body.user, "testuser");
+    assert.equal(res.body.version, "1.0.0");
+  });
 });
 
 describe("handleRequest - routing", () => {
@@ -343,6 +377,19 @@ describe("handleRequest - /search", () => {
     await handler(mockReq("POST", "/search", { query: "test" }), mockRes());
     assert.ok(deps._closedDbs.includes("vec"));
   });
+
+  it("skips indexing when sessionStore is null", async () => {
+    let indexCalled = false;
+    const deps = makeDeps({
+      openSessionStore: () => null,
+      indexContent: async () => { indexCalled = true; return 1; },
+    });
+    const handler = createHandler(deps);
+    const res = mockRes();
+    await handler(mockReq("POST", "/search", { query: "test" }), res);
+    assert.equal(res.statusCode, 200);
+    assert.ok(!indexCalled, "indexContent should not be called when sessionStore is null");
+  });
 });
 
 describe("handleRequest - /reindex", () => {