chore: init trunk

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,34 +1,38 @@
 ---
 name: Bug report
 about: Create a report to help us improve
-title: ''
+title: ""
 labels: bug
-assignees: ''
-
+assignees: ""
 ---
 
-**Describe the bug**
+## Describe the bug
+
 A clear and concise description of what the bug is.
 
-**To Reproduce**
+## To Reproduce
+
 Steps to reproduce the behavior:
 
 1. Go to '...'
 2. Click on '....'
 3. Scroll down to '....'
 4. See error
 
-**Expected behavior**
+## Expected behavior
+
 A clear and concise description of what you expected to happen.
 
-**Screenshots**
+## Screenshots
+
 If applicable, add screenshots to help explain your problem.
 
-**Environment**
+## Environment
 
 - OS: [e.g. macOS, Windows, Ubuntu]
 - Language [e.g. AssemblyScript, Go]
 - Version [e.g. v0.xx]
 
-**Additional context**
+## Additional context
+
 Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,20 +1,23 @@
 ---
 name: Feature request
 about: Suggest an idea for this project
-title: ''
-labels: ''
-assignees: ''
-
+title: ""
+labels: ""
+assignees: ""
 ---
 
-**Is your feature request related to a problem? Please describe.**
+## Is your feature request related to a problem? Please describe
+
 A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
 
-**Describe the solution you'd like**
+## Describe the solution you'd like
+
 A clear and concise description of what you want to happen.
 
-**Describe alternatives you've considered**
+## Describe alternatives you've considered
+
 A clear and concise description of any alternative solutions or features you've considered.
 
-**Additional context**
+## Additional context
+
 Add any other context or screenshots about the feature request here.

.github/actionlint.yml

@@ -0,0 +1,6 @@
+self-hosted-runner:
+  # Labels of self-hosted runner in array of string
+  labels:
+    - warp-ubuntu-latest-x64-2x
+    - warp-ubuntu-latest-x64-4x
+    - warp-ubuntu-latest-x64-8x

.github/pull_request_template.md

@@ -1,20 +1,26 @@
-**Description**
+## Description
 
 Please explain the changes you made here.
 
-**Checklist**
+## Checklist
 
 - [ ] Code compiles correctly and linting passes locally
-- [ ] For all _code_ changes, an entry added to the `CHANGELOG.md` file describing and linking to this PR
+- [ ] For all _code_ changes, an entry added to the `CHANGELOG.md` file describing and linking to
+      this PR
 - [ ] Tests added for new functionality, or regression tests for bug fixes added as applicable
-- [ ] For public APIs, new features, etc., PR on [docs repo](https://github.com/hypermodeinc/docs) staged and linked here
+- [ ] For public APIs, new features, etc., PR on [docs repo](https://github.com/hypermodeinc/docs)
+      staged and linked here
 
-**Instructions**
+## Instructions
 
-- The PR title should follow the [Conventional Commits](https://www.conventionalcommits.org/) syntax, leading with `fix:`, `feat:`, `chore:`, `ci:`, etc.
-- The description should briefly explain what the PR is about.  In the case of a bugfix, describe or link to the bug.
+- The PR title should follow the [Conventional Commits](https://www.conventionalcommits.org/)
+  syntax, leading with `fix:`, `feat:`, `chore:`, `ci:`, etc.
+- The description should briefly explain what the PR is about. In the case of a bugfix, describe or
+  link to the bug.
 - In the checklist section, check the boxes in that are applicable, using `[x]` syntax.
-  - If not applicable, remove the entire line.  Only leave the box unchecked if you intend to come back and check the box later.
-- Delete the `Instructions` line and everything below it, to indicate you have read and are following these instructions. 🙂
+  - If not applicable, remove the entire line. Only leave the box unchecked if you intend to come
+    back and check the box later.
+- Delete the `Instructions` line and everything below it, to indicate you have read and are
+  following these instructions. 🙂
 
 Thank you for your contribution to the Modus project!

.github/workflows/ci-cli-lint.yml

@@ -1,4 +1,5 @@
 name: ci-cli-lint
+
 on:
   pull_request:
     types:
@@ -7,7 +8,11 @@ on:
       - reopened
       - ready_for_review
     paths:
-      - "cli/**"
+      - cli/**
+
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest

.github/workflows/ci-go-lint.yml

@@ -9,8 +9,8 @@ on:
       - reopened
       - ready_for_review
     paths:
-      - '**/*.go'
-      - '**/go.mod'
+      - "**/*.go"
+      - "**/go.mod"
 
 permissions:
   contents: read
@@ -27,7 +27,12 @@ jobs:
         uses: actions/checkout@v4
       - name: Search for go.mod files
         id: get-dirs
-        run: echo "dirs=$(find . -name 'go.mod' -exec dirname {} \; | sed 's|^\./||' | jq -Rsc 'split("\n")[:-1]')" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            find . -name 'go.mod' -exec dirname {} \; |
+            sed 's|^\./||' |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
 
   go-lint:
     needs: get-dirs

.github/workflows/ci-go-test.yml

@@ -9,9 +9,9 @@ on:
       - reopened
       - ready_for_review
     paths:
-      - '**/*.go'
-      - '**/go.mod'
-      - '**/testdata/**'
+      - "**/*.go"
+      - "**/go.mod"
+      - "**/testdata/**"
 
 permissions:
   contents: read
@@ -29,7 +29,12 @@ jobs:
         uses: actions/checkout@v4
       - name: Search for go.mod files
         id: get-dirs
-        run: echo "dirs=$(find . -name 'go.mod' -exec dirname {} \; | sed 's|^\./||' | jq -Rsc 'split("\n")[:-1]')" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            find . -name 'go.mod' -exec dirname {} \; |
+            sed 's|^\./||' |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
 
   go-test:
     needs: get-dirs

.github/workflows/ci-release-info-build.yaml

@@ -1,4 +1,5 @@
 name: ci-release-info-build
+
 on:
   pull_request:
     types:
@@ -7,7 +8,11 @@ on:
       - reopened
       - ready_for_review
     paths:
-      - 'tools/release-info/**'
+      - tools/release-info/**
+
+permissions:
+  contents: read
+
 jobs:
   build:
     if: github.event_name == 'pull_request'

.github/workflows/ci-release-info-lint.yaml

@@ -1,4 +1,5 @@
 name: ci-release-info-lint
+
 on:
   pull_request:
     types:
@@ -7,7 +8,11 @@ on:
       - reopened
       - ready_for_review
     paths:
-      - 'tools/release-info/**'
+      - tools/release-info/**
+
+permissions:
+  contents: read
+
 jobs:
   lint:
     if: github.event_name == 'pull_request'

.github/workflows/ci-sdk-as-build.yml

@@ -25,7 +25,11 @@ jobs:
         uses: actions/checkout@v4
       - name: Find Examples
         id: get-dirs
-        run: echo "dirs=$(ls -d sdk/assemblyscript/examples/* | jq -Rsc 'split("\n")[:-1]' )" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            ls -d sdk/assemblyscript/examples/* |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
 
   sdk-as-build-examples:
     needs: get-dirs

.github/workflows/ci-sdk-as-lint.yml

@@ -25,7 +25,11 @@ jobs:
         uses: actions/checkout@v4
       - name: Find Examples
         id: get-dirs
-        run: echo "dirs=$(ls -d sdk/assemblyscript/examples/* | jq -Rsc 'split("\n")[:-1]' )" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            ls -d sdk/assemblyscript/examples/* |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
 
   sdk-as-lint-src:
     if: github.event_name == 'pull_request'

.github/workflows/ci-sdk-go-build.yml

@@ -26,10 +26,20 @@ jobs:
         uses: actions/checkout@v4
       - name: Find tools
         id: get-tools-dirs
-        run: echo "dirs=$(find ./sdk/go/tools -mindepth 1 -maxdepth 1 -type d | sed 's|^\./||' | jq -Rsc 'split("\n")[:-1]')" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            find ./sdk/go/tools -mindepth 1 -maxdepth 1 -type d |
+            sed 's|^\./||' |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
       - name: Find examples
         id: get-examples-dirs
-        run: echo "dirs=$(find ./sdk/go/examples -mindepth 1 -maxdepth 1 -type d | sed 's|^\./||' | jq -Rsc 'split("\n")[:-1]')" >> ${GITHUB_OUTPUT}
+        run: >
+          echo "dirs=$(
+            find ./sdk/go/examples -mindepth 1 -maxdepth 1 -type d |
+            sed 's|^\./||' |
+            jq -Rsc 'split("\n")[:-1]'
+          )" >> ${GITHUB_OUTPUT}
 
   sdk-go-build-tools:
     needs: get-dirs

.github/workflows/codeql.yml

@@ -9,15 +9,18 @@
 # the `language` matrix defined below to confirm you have the correct set of
 # supported CodeQL languages.
 #
-name: "CodeQL Advanced"
+name: CodeQL Advanced
 
 on:
   push:
-    branches: ["main"]
+    branches: [main]
   pull_request:
-    branches: ["main"]
+    branches: [main]
   schedule:
-    - cron: "41 3 * * 3"
+    - cron: 41 3 * * 3
+
+permissions:
+  contents: read
 
 jobs:
   analyze:

.github/workflows/release-cli.yaml

@@ -1,4 +1,4 @@
-name: "Release CLI"
+name: Release CLI
 
 on:
   push:
@@ -15,9 +15,9 @@ jobs:
     # note: must use GitHub-hosted runner for publishing to NPM with --provenance flag
     runs-on: ubuntu-latest
     steps:
-      - name: "Validate version"
+      - name: Validate version
         if: ${{ !startsWith(github.ref_name, 'cli/v') }}
-        run: 'echo "Modus CLI version must start with `cli/v` && exit 1'
+        run: echo "Modus CLI version must start with `cli/v` && exit 1
       - uses: actions/checkout@v4
         with:
           ref: "${{ github.ref_name }}"
@@ -30,7 +30,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ">=22"
-          registry-url: "https://registry.npmjs.org"
+          registry-url: https://registry.npmjs.org
       - name: Prepare Release
         working-directory: cli
         run: npm version ${{ steps.parse_cli_version.outputs.cli_version }} --no-git-tag-version
@@ -42,7 +42,11 @@ jobs:
         run: npm run build
       - name: Publish NPM Package
         working-directory: cli
-        run: npm publish --provenance --access public --tag ${{ steps.parse_cli_version.outputs.npm_tag }}
+        run: >
+          npm publish
+            --provenance
+            --access public
+            --tag ${{ steps.parse_cli_version.outputs.npm_tag }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create Release
@@ -60,17 +64,17 @@ jobs:
     name: Release Install Script
     runs-on: warp-ubuntu-latest-x64-2x
     steps:
-    - uses: actions/checkout@v4
-      with:
-        ref: "${{ github.ref_name }}"
-    - name: Push to R2 Bucket
-      uses: cloudflare/wrangler-action@v3
-      with:
-        accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-        apiToken: ${{ secrets.CLOUDFLARE_TOKEN }}
-        wranglerVersion: "3.83.0"
-        workingDirectory: cli
-        preCommands: |
-          cat install.sh
-        command: |
-          r2 object put install/modus.sh -f install.sh --content-type text/x-sh
+      - uses: actions/checkout@v4
+        with:
+          ref: "${{ github.ref_name }}"
+      - name: Push to R2 Bucket
+        uses: cloudflare/wrangler-action@v3
+        with:
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          apiToken: ${{ secrets.CLOUDFLARE_TOKEN }}
+          wranglerVersion: 3.83.0
+          workingDirectory: cli
+          preCommands: |
+            cat install.sh
+          command: |
+            r2 object put install/modus.sh -f install.sh --content-type text/x-sh

.github/workflows/release-info.yaml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ">=22"
-          registry-url: "https://registry.npmjs.org"
+          registry-url: https://registry.npmjs.org
       - name: Install Dependencies
         working-directory: tools/release-info
         run: npm ci
@@ -30,8 +30,8 @@ jobs:
         with:
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           apiToken: ${{ secrets.CLOUDFLARE_TOKEN }}
-          wranglerVersion: "3.83.0"
-          workingDirectory: "tools/release-info"
+          wranglerVersion: 3.83.0
+          workingDirectory: tools/release-info
           preCommands: |
             cat modus-latest.json
             cat modus-preview.json