wgtechlabs
diff --git a/‎.gitattributes‎
Lines changed: 2 additions & 0 deletions b/‎.gitattributes‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎.github/workflows/build.yml‎
Lines changed: 11 additions & 12 deletions b/‎.github/workflows/build.yml‎
Lines changed: 11 additions & 12 deletions
diff --git a/‎.github/workflows/container.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/container.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/release.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/release.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/validate.yml‎
Lines changed: 10 additions & 11 deletions b/‎.github/workflows/validate.yml‎
Lines changed: 10 additions & 11 deletions
diff --git a/‎.gitignore‎
Lines changed: 2 additions & 1 deletion b/‎.gitignore‎
Lines changed: 2 additions & 1 deletion
diff --git a/‎.npmrc‎
Lines changed: 0 additions & 13 deletions b/‎.npmrc‎
Lines changed: 0 additions & 13 deletions
diff --git a/‎.vscode/settings.json‎
Lines changed: 0 additions & 2 deletions b/‎.vscode/settings.json‎
Lines changed: 0 additions & 2 deletions
diff --git a/‎CONTRIBUTING.md‎
Lines changed: 33 additions & 34 deletions b/‎CONTRIBUTING.md‎
Lines changed: 33 additions & 34 deletions
diff --git a/‎Dockerfile‎
Lines changed: 26 additions & 21 deletions b/‎Dockerfile‎
Lines changed: 26 additions & 21 deletions
@@ -0,0 +1,2 @@
+* text=auto eol=lf
+bun.lock text eol=lf
@@ -13,30 +13,29 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
         with:
-          version: 9.15.4
+          bun-version: 1.3.11
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
-          cache: 'pnpm'
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: bun install --frozen-lockfile
 
       - name: Type checking
-        run: pnpm type-check
+        run: bun run type-check
 
       - name: Run tests
-        run: pnpm test
+        run: bun run test
 
       - name: Generate coverage
-        run: pnpm test:coverage
+        run: bun run test:coverage
         continue-on-error: true
 
   build:
@@ -50,10 +49,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Build and Push Container
-        uses: wgtechlabs/container-build-flow-action@v1.3.1
+        uses: wgtechlabs/container-build-flow-action@v1.7.1
         with:
           # Registry Configuration
           registry: both
 
@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Build and Push Production Container
-        uses: wgtechlabs/container-build-flow-action@v1.3.1
+        uses: wgtechlabs/container-build-flow-action@v1.7.1
         with:
           # Registry Configuration
           registry: both
 
@@ -13,13 +13,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Create Release
         id: release
-        uses: wgtechlabs/release-build-flow-action@v1.6.0
+        uses: wgtechlabs/release-build-flow-action@v1.7.0
         with:
           # Use PAT so the release event triggers downstream workflows
           # (e.g., container build flow)
 
@@ -11,34 +11,33 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
         with:
-          version: 9.15.4
+          bun-version: 1.3.11
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '22'
-          cache: 'pnpm'
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: bun install --frozen-lockfile
 
       - name: Type checking
-        run: pnpm type-check
+        run: bun run type-check
 
       - name: Run tests
-        run: pnpm test
+        run: bun run test
 
       - name: Generate coverage
-        run: pnpm test:coverage
+        run: bun run test:coverage
         continue-on-error: true
 
       - name: Build TypeScript
-        run: pnpm build
+        run: bun run build
 
       - name: Test Docker build (no push)
         run: |
 
@@ -138,8 +138,9 @@ Thumbs.db
 docs/
 ai_context/
 
-# Enforce pnpm usage - ignore npm and yarn lockfiles
+# Enforce bun usage - ignore non-bun lockfiles
 package-lock.json
+pnpm-lock.yaml
 yarn.lock
 
 # Environment files with sensitive data
 
@@ -21,8 +21,6 @@
   "[javascript]": {
     "editor.defaultFormatter": "dbaeumer.vscode-eslint"
   },
-  "vitest.enable": true,
-  "vitest.commandLine": "pnpm test:watch",
   "python-envs.defaultEnvManager": "ms-python.python:system",
   "python-envs.pythonProjects": []
 }
@@ -26,9 +26,9 @@ To get started with development:
 
 2. **Install dependencies**
    ```bash
-   pnpm install
+   bun install
    ```
-   > ⚠️ **Important**: This project enforces the use of pnpm. npm and yarn install will be blocked automatically.
+   > ⚠️ **Important**: This project currently uses Bun as the package manager.
 
 3. **Set up environment variables**
    - Copy `.env.example` to `.env`
@@ -52,7 +52,7 @@ To get started with development:
 
 5. **Start the project in development mode**
    ```bash
-   pnpm dev
+   bun run dev
    ```
 
 Please refer to the [README](./README.md) for more detailed setup instructions.
@@ -61,31 +61,30 @@ Please refer to the [README](./README.md) for more detailed setup instructions.
 
 ```bash
 # Development with auto-reload
-pnpm dev
+bun run dev
 
 # Build for production
-pnpm build
+bun run build
 
 # Type checking only
-pnpm type-check
+bun run type-check
 
 # Linting
-pnpm lint              # Run ESLint on all source files
-pnpm lint:fix          # Run ESLint with auto-fix
-pnpm lint:security     # Focus on security-related issues
-pnpm lint:ci           # CI-friendly linting (fails on warnings)
+bun run lint              # Run ESLint on all source files
+bun run lint:fix          # Run ESLint with auto-fix
+bun run lint:security     # Focus on security-related issues
+bun run lint:ci           # CI-friendly linting (fails on warnings)
 
 # Clean build artifacts
-pnpm clean
+bun run clean
 
 # Start production build
-pnpm start
+bun run start
 
 # Run tests
-pnpm test                # Run all tests once
-pnpm test:watch          # Run tests in watch mode
-pnpm test:ui             # Interactive test UI
-pnpm test:coverage       # Generate coverage report
+bun run test                # Run all tests once
+bun run test:watch          # Run tests in watch mode
+bun run test:coverage       # Generate coverage report
 ```
 
 #### 🏛️ Project Structure
@@ -116,7 +115,7 @@ src/
 - **Code Quality**: Follow ESLint rules and security best practices enforced by automated linting
 - **Structured Logging**: Use `@wgtechlabs/log-engine` for all logging with built-in PII protection and security features
 - **Error Handling**: Implement comprehensive error handling with detailed logging
-- **Package Manager**: Use pnpm exclusively (enforced via preinstall script)
+- **Package Manager**: Use Bun for dependency management and project scripts
 - **Code Style**: Follow existing patterns and maintain consistency
 - **Environment**: Use Node.js 22+ for development
 - **Redis Integration**: Ensure Redis connectivity for all webhook-related features
@@ -138,16 +137,16 @@ This project uses **ESLint** with comprehensive security plugins to maintain cod
 
 ```bash
 # Check for issues
-pnpm lint
+bun run lint
 
 # Automatically fix issues
-pnpm lint:fix
+bun run lint:fix
 
 # Security-focused check
-pnpm lint:security
+bun run lint:security
 
 # CI mode (fails on warnings)
-pnpm lint:ci
+bun run lint:ci
 ```
 
 **Comprehensive ESLint Configuration:**
@@ -174,8 +173,8 @@ For complete configuration details, see [eslint.config.js](./eslint.config.js).
 - **Fix all linting errors** before submitting PRs (required)
 - **Address security warnings** unless there's a documented reason to ignore them
 - **Use ESLint disable comments sparingly** and only with proper justification
-- **Run `pnpm lint:fix`** to auto-fix style issues before committing
-- **Test security rules** with `pnpm lint:security` for security-focused checks
+- **Run `bun run lint:fix`** to auto-fix style issues before committing
+- **Test security rules** with `bun run lint:security` for security-focused checks
 - **VSCode users** get automatic linting and auto-fix on save with ESLint extension
 - **Document any rule disables** in code comments explaining why they're necessary
 
@@ -193,14 +192,14 @@ const data: any = response;
 
 #### 🧪 Testing Guidelines
 
-This project uses [Vitest](https://vitest.dev/) for automated testing. When contributing:
+This project uses [Bun's built-in test runner](https://bun.com/docs/cli/test) (`bun:test`) for automated testing. When contributing:
 
 **Automated Testing:**
 - Write tests for new features and bug fixes
-- Ensure all tests pass: `pnpm test`
-- Maintain minimum 80% code coverage: `pnpm test:coverage`
+- Ensure all tests pass: `bun run test`
+- Maintain minimum 80% code coverage: `bun run test:coverage`
 - Follow co-located test patterns (e.g., `signature.ts` → `signature.test.ts`)
-- Use `pnpm test:watch` for development, `pnpm test:ui` for interactive testing
+- Use `bun run test:watch` for development
 
 **Manual Testing:**
 - Test your changes using tools like ngrok for webhook testing
@@ -212,15 +211,15 @@ This project uses [Vitest](https://vitest.dev/) for automated testing. When cont
 #### 🔍 Code Review Process
 
 1. **Pre-submission checks**:
-   - [ ] Code builds without errors (`pnpm build`)
-   - [ ] TypeScript type checking passes (`pnpm type-check`)
-   - [ ] Linting passes without errors (`pnpm lint`)
-   - [ ] All tests pass (`pnpm test`)
-   - [ ] Coverage requirements met (`pnpm test:coverage`)
-   - [ ] Development server starts successfully (`pnpm dev`)
+   - [ ] Code builds without errors (`bun run build`)
+   - [ ] TypeScript type checking passes (`bun run type-check`)
+   - [ ] Linting passes without errors (`bun run lint`)
+   - [ ] All tests pass (`bun run test`)
+   - [ ] Coverage requirements met (`bun run test:coverage`)
+   - [ ] Development server starts successfully (`bun run dev`)
    - [ ] Redis integration works properly
    - [ ] Error handling is comprehensive
-   - [ ] No security warnings from `pnpm lint:security`
+   - [ ] No security warnings from `bun run lint:security`
 
 2. **Pull Request Requirements**:
    - [ ] Target the `dev` branch (PRs to `main` will be rejected)
 
@@ -4,10 +4,11 @@
 # Multi-stage Docker build for the Unthread Webhook Server
 # 
 # Build stages:
-# 1. base    - Base Alpine image with Node.js and security updates
-# 2. deps    - Install production dependencies only
-# 3. build   - Install dev dependencies and build the application
-# 4. final   - Create minimal runtime image with built app
+# 1. base     - Base Alpine image with Node.js and security updates (runtime)
+# 2. bun-base - base + Bun, used only for dependency install and build
+# 3. deps     - Install production dependencies only
+# 4. build    - Install dev dependencies and build the application
+# 5. final    - Minimal runtime image (no Bun) with built app
 #
 # Usage:
 #   docker build -t unthread-webhook-server .
@@ -34,27 +35,32 @@ RUN apk update && apk upgrade && \
     apk add --no-cache dumb-init && \
     rm -rf /var/cache/apk/*
 
-# Enable and install pnpm via corepack
-# Note: Version must match packageManager field in package.json (currently 9.15.4)
-RUN corepack enable && \
-    corepack prepare pnpm@9.15.4 --activate
-
 # Set working directory for all subsequent stages
 WORKDIR /usr/src/app
 
+# =============================================================================
+# STAGE 1b: Bun Base (build-time only)
+# =============================================================================
+# Bun is installed only in this stage so it never ends up in the final runtime
+# image, keeping the production image smaller and reducing attack surface.
+FROM base AS bun-base
+
+# Install Bun for dependency management
+# Note: Version must match packageManager field in package.json (currently 1.3.11)
+RUN npm install --global bun@1.3.11
+
 # =============================================================================
 # STAGE 2: Production Dependencies
 # =============================================================================
 # Install only production dependencies for runtime
-FROM base AS deps
+FROM bun-base AS deps
 
 # Use bind mounts and cache for faster builds
-# Downloads dependencies without copying package files into the layer
+# Mount the Bun lockfile and use --frozen-lockfile for reproducible installs
 RUN --mount=type=bind,source=package.json,target=package.json \
-    --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
-    --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=cache,id=s/${RAILWAY_SERVICE_ID}-pnpm-store,target=/root/.local/share/pnpm/store \
-    pnpm install --prod --frozen-lockfile
+    --mount=type=bind,source=bun.lock,target=bun.lock \
+    --mount=type=cache,id=s/${RAILWAY_SERVICE_ID}-bun-cache,target=/root/.bun/install/cache \
+    bun install --production --frozen-lockfile
 
 # =============================================================================
 # STAGE 3: Build Application  
@@ -64,14 +70,13 @@ FROM deps AS build
 
 # Install all dependencies (including devDependencies for building)
 RUN --mount=type=bind,source=package.json,target=package.json \
-    --mount=type=bind,source=pnpm-lock.yaml,target=pnpm-lock.yaml \
-    --mount=type=bind,source=.npmrc,target=.npmrc \
-    --mount=type=cache,id=s/${RAILWAY_SERVICE_ID}-pnpm-store,target=/root/.local/share/pnpm/store \
-    pnpm install --frozen-lockfile
+    --mount=type=bind,source=bun.lock,target=bun.lock \
+    --mount=type=cache,id=s/${RAILWAY_SERVICE_ID}-bun-cache,target=/root/.bun/install/cache \
+    bun install --frozen-lockfile
 
 # Copy source code and build the application
 COPY . .
-RUN pnpm run build
+RUN bun run build
 
 # =============================================================================
 # STAGE 4: Final Runtime Image
@@ -109,4 +114,4 @@ HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
 
 # Use dumb-init for proper signal handling and start the application
 ENTRYPOINT ["dumb-init", "--"]
-CMD ["node", "dist/app.js"]
+CMD ["node", "dist/app.js"]
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+* text=auto eol=lf`
	`2`	`+bun.lock text eol=lf`
Original file line number	Diff line number	Diff line change
`@@ -21,8 +21,6 @@`
`21`	`21`	`"[javascript]": {`
`22`	`22`	`"editor.defaultFormatter": "dbaeumer.vscode-eslint"`
`23`	`23`	`},`
`24`		`- "vitest.enable": true,`
`25`		`- "vitest.commandLine": "pnpm test:watch",`
`26`	`24`	`"python-envs.defaultEnvManager": "ms-python.python:system",`
`27`	`25`	`"python-envs.pythonProjects": []`
`28`	`26`	`}`