feat(ci): upload loopover-ui bundle stats to Codecov

Tracks JS bundle-size regressions for the deployed marketing/product
site on every PR. Uses @codecov/bundle-analyzer's standalone CLI
against the built dist/client directly, since @codecov/vite-plugin's
latest release doesn't yet support Vite 8 (this repo's Vite runs on
rolldown internally, so @codecov/rollup-plugin doesn't fit either).

Fork-excluded and non-blocking (continue-on-error): unlike coverage,
nothing gates a merge on bundle size, so an upload hiccup must never
fail CI. loopover-miner-ui is intentionally excluded -- it's a
self-hosted operator dashboard with no build step in this CI job.

Author: JSONbored

.github/workflows/ci.yml

@@ -398,6 +398,21 @@ jobs:
       - name: UI build
         if: ${{ github.event_name == 'push' || needs.changes.outputs.ui == 'true' }}
         run: npm run extension:build && npm run miner-extension:build && npm --workspace @loopover/ui run build
+      # Bundle-size regression tracking for the deployed marketing/product site (loopover-ui only --
+      # loopover-miner-ui is a self-hosted operator dashboard with no build step in this job at all, see
+      # "UI build" above). Fork-excluded (no secrets.CODECOV_TOKEN on a fork PR, same boundary as the
+      # coverage-upload steps below) and non-blocking (continue-on-error): unlike coverage, nothing gates
+      # merges on bundle size, so an upload hiccup must never fail CI. Uses @codecov/bundle-analyzer's
+      # standalone CLI against the built dist/client directly rather than a bundler-plugin hook --
+      # @codecov/vite-plugin's latest release doesn't support this repo's Vite 8 yet (peer range caps at
+      # 6.x; this repo's Vite 8 runs on rolldown, not classic rollup, so @codecov/rollup-plugin doesn't fit
+      # either) -- revisit wiring the plugin in once upstream catches up.
+      - name: Upload UI bundle stats to Codecov
+        if: ${{ (github.event_name == 'push' || needs.changes.outputs.ui == 'true') && github.event.pull_request.head.repo.fork != true }}
+        continue-on-error: true
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        run: npm run bundle-analysis --workspace @loopover/ui
 
   # The full-suite coverage run, sharded (#ci-shard-coverage). This alone was ~9-10 of the ~11 minutes a
   # typical backend PR spent in validate-code, because vitest schedules whole test FILES atomically to

apps/loopover-ui/package.json

@@ -11,6 +11,7 @@
     "build": "vite build",
     "build:cloudflare": "npm --prefix ../.. run ui:build",
     "build:dev": "vite build --mode development",
+    "bundle-analysis": "bundle-analyzer ./dist/client --bundle-name=loopover-ui --upload-token=$CODECOV_TOKEN",
     "deploy:built": "wrangler deploy --config dist/server/wrangler.json",
     "preview": "vite preview",
     "version:built": "wrangler versions upload --config dist/server/wrangler.json",
@@ -76,6 +77,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@codecov/bundle-analyzer": "^2.0.1",
     "@eslint/js": "^9.39.4",
     "@lovable.dev/vite-tanstack-config": "2.6.5",
     "@testing-library/dom": "^10.4.1",