Signal Range

.deepsource.toml

@@ -1,10 +1,17 @@
 version = 1
 
-test_patterns = ["*.test.js"]
+test_patterns = ["test/**/*.test.ts", "test/**/*.spec.ts"]
+
+exclude_patterns = [
+  "src/engine/**",
+  "src/private/**",
+  "dist/**",
+  "coverage/**"
+]
 
 [[analyzers]]
 name = "javascript"
 enabled = true
 
   [analyzers.meta]
-  plugins = ["react"]
+  environment = ["browser", "nodejs"]

.gitattributes

@@ -0,0 +1,184 @@
+# Force the following filetypes to have unix eols, so Windows does not break them
+*.* text eol=lf
+## GITATTRIBUTES FOR WEB PROJECTS
+#
+# These settings are for any web project.
+# Details per file setting:
+#   text    These files should be normalized (i.e. convert CRLF to LF).
+#   binary  These files are binary and should be left untouched.
+# Note that binary is a macro for -text -diff.
+######################################################################
+# Auto detect
+##   Handle line endings automatically for files detected as
+##   text and leave all files detected as binary untouched.
+##   This will handle all files NOT defined below.
+*                 text=auto
+# Source code
+*.bash            text eol=lf
+*.bat             text eol=crlf
+*.cmd             text eol=crlf
+*.coffee          text
+*.css             text
+*.htm             text diff=html
+*.html            text diff=html
+*.inc             text
+*.ini             text
+*.js              text
+*.json            text
+*.jsx             text
+*.less            text
+*.ls              text
+*.map             text -diff
+*.od              text
+*.onlydata        text
+*.php             text diff=php
+*.pl              text
+*.ps1             text eol=crlf
+*.py              text diff=python
+*.rb              text diff=ruby
+*.sass            text
+*.scm             text
+*.scss            text diff=css
+*.sh              text eol=lf
+*.sql             text
+*.styl            text
+*.tag             text
+*.ts              text
+*.tsx             text
+*.xml             text
+*.xhtml           text diff=html
+# Docker
+Dockerfile        text
+# Documentation
+*.ipynb           text
+*.markdown        text
+*.md              text
+*.mdwn            text
+*.mdown           text
+*.mkd             text
+*.mkdn            text
+*.mdtxt           text
+*.mdtext          text
+*.txt             text
+AUTHORS           text
+CHANGELOG         text
+CHANGES           text
+CONTRIBUTING      text
+COPYING           text
+copyright         text
+*COPYRIGHT*       text
+INSTALL           text
+license           text
+LICENSE           text
+NEWS              text
+readme            text
+*README*          text
+TODO              text
+# Templates
+*.dot             text
+*.ejs             text
+*.haml            text
+*.handlebars      text
+*.hbs             text
+*.hbt             text
+*.jade            text
+*.latte           text
+*.mustache        text
+*.njk             text
+*.phtml           text
+*.tmpl            text
+*.tpl             text
+*.twig            text
+*.vue             text
+# Configs
+*.cnf             text
+*.conf            text
+*.config          text
+.editorconfig     text
+.env              text
+.gitattributes    text
+.gitconfig        text
+.htaccess         text
+*.lock            text -diff
+pnpm-lock.yaml   text -diff
+*.toml            text
+*.yaml            text
+*.yml             text
+browserslist      text
+Makefile          text
+makefile          text
+# Heroku
+Procfile          text
+# Graphics
+*.ai              binary
+*.bmp             binary
+*.eps             binary
+*.gif             binary
+*.gifv            binary
+*.ico             binary
+*.jng             binary
+*.jp2             binary
+*.jpg             binary
+*.jpeg            binary
+*.jpx             binary
+*.jxr             binary
+*.pdf             binary
+*.png             binary
+*.psb             binary
+*.psd             binary
+# SVG treated as an asset (binary) by default.
+*.svg             text
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg           binary
+*.svgz            binary
+*.tif             binary
+*.tiff            binary
+*.wbmp            binary
+*.webp            binary
+# Audio
+*.kar             binary
+*.m4a             binary
+*.mid             binary
+*.midi            binary
+*.mp3             binary
+*.ogg             binary
+*.ra              binary
+# Video
+*.3gpp            binary
+*.3gp             binary
+*.as              binary
+*.asf             binary
+*.asx             binary
+*.fla             binary
+*.flv             binary
+*.m4v             binary
+*.mng             binary
+*.mov             binary
+*.mp4             binary
+*.mpeg            binary
+*.mpg             binary
+*.ogv             binary
+*.swc             binary
+*.swf             binary
+*.webm            binary
+# Archives
+*.7z              binary
+*.gz              binary
+*.jar             binary
+*.rar             binary
+*.tar             binary
+*.zip             binary
+# Fonts
+*.ttf             binary
+*.eot             binary
+*.otf             binary
+*.woff            binary
+*.woff2           binary
+# Executables
+*.exe             binary
+*.pyc             binary
+# RC files (like .babelrc or .eslintrc)
+*.*rc             text
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text

.github/actions/setup-node-project/action.yml

@@ -1,21 +1,30 @@
 name: 'Setup Node Project'
-description: 'Setup Node.js, cache dependencies, and install (call after checkout)'
+description: 'Setup pnpm, Node.js, cache dependencies, and install (call after checkout)'
 
 inputs:
   node-version:
     description: 'Node.js version to use'
     required: false
-    default: '22'
+    default: '24'
 
 runs:
   using: 'composite'
   steps:
+    # pnpm must be on PATH before setup-node, otherwise `cache: pnpm` cannot
+    # resolve the store directory. Version comes from `packageManager` in
+    # package.json, so it stays in lockstep with local development.
+    - name: Setup pnpm
+      uses: pnpm/action-setup@v4
+
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
-        cache: 'npm'
+        cache: 'pnpm'
 
+    # --ignore-scripts is belt-and-braces: pnpm already gates postinstall
+    # scripts behind the onlyBuiltDependencies allowlist in package.json.
+    # Nothing in CI needs the wrangler/sharp native binaries.
     - name: Install Dependencies
       shell: bash
-      run: npm ci --ignore-scripts
+      run: pnpm install --frozen-lockfile --ignore-scripts