chore: add project configuration and tooling setup (#7)

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codesmith <codesmith-bot@users.noreply.github.com>

Author: 4 people

.changeset/tooling-setup.md

@@ -0,0 +1,2 @@
+---
+---

.coderabbit.yaml

@@ -0,0 +1,76 @@
+language: en-GB
+
+reviews:
+  profile: chill
+  high_level_summary_in_walkthrough: true
+  review_status: true
+  review_details: false
+  changed_files_summary: true
+  sequence_diagrams: true
+  estimate_code_review_effort: false
+  assess_linked_issues: true
+  related_issues: true
+  related_prs: true
+  suggested_labels: false
+  suggested_reviewers: true
+  in_progress_fortune: false
+  poem: false
+
+  slop_detection:
+    enabled: true
+    label: "007"
+
+  auto_review:
+    enabled: true
+    auto_pause_after_reviewed_commits: 5
+    labels:
+      - "!release"
+    ignore_title_keywords:
+      - "WIP"
+      - "[skip-review]"
+      - "chore(release)"
+      - "Version Packages"
+    ignore_usernames:
+      - "renovate[bot]"
+      - "dependabot[bot]"
+      - "github-actions[bot]"
+
+  pre_merge_checks:
+    docstrings:
+      mode: off
+    title:
+      mode: error
+    description:
+      mode: warning
+    issue_assessment:
+      mode: warning
+
+  tools:
+    gitleaks:
+      enabled: true
+    osvScanner:
+      enabled: true
+    actionlint:
+      enabled: true
+    yamllint:
+      enabled: true
+    shellcheck:
+      enabled: true
+    dotenvLint:
+      enabled: true
+    eslint:
+      enabled: false
+    biome:
+      enabled: false
+    oxc:
+      enabled: false
+    markdownlint:
+      enabled: false
+    languagetool:
+      enabled: false
+    checkov:
+      enabled: false
+    trivy:
+      enabled: false
+    opengrep:
+      enabled: false

.editorconfig

@@ -0,0 +1,21 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.{js,ts}]
+indent_size = 2
+indent_style = space
+block_comment_start = /*
+block_comment = *
+block_comment_end = */
+
+[*.{yml,yaml}]
+indent_size = 2
+indent_style = space
+
+[*.{md,rmd,mkd,mkdn,mdwn,mdown,markdown,litcoffee}]
+trim_trailing_whitespace = false

.github/workflows/labeler.yml

@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Label pull request
-        uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6
+        uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
         with:
           repo-token: "${{ secrets.WOLFSTAR_TOKEN }}"
           sync-labels: true

.github/workflows/renovate-changeset.yml

@@ -12,7 +12,7 @@ jobs:
     if: ${{ github.event.pull_request.user.login == 'renovate[bot]' && contains(github.event.pull_request.labels.*.name, 'dependencies') }}
     permissions: {}
     steps:
-      - uses: mscharley/dependency-changesets-action@f25d784f13eb09227429cebd880ade75d19d6283 # v1.1.9
+      - uses: mscharley/dependency-changesets-action@f96232368519695969bea8a8cfff7cca32b1e56a # v1.2.4
         with:
           token: ${{ secrets.WOLFSTAR_TOKEN }}
           changeset-folder: ".changeset"

.github/workflows/zizmor.yml

@@ -28,6 +28,6 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
         with:
           advanced-security: false

.gitignore

@@ -1,14 +1,50 @@
+# Ignore a blackhole and the folder for development
 node_modules/
-dist/
-.turbo/
-coverage/
-*.tsbuildinfo
-*.log
+.vs/
+.idea/
+*.iml
+
+# misc
 .DS_Store
 .env
 .env.*
 !.env.example
-.idea/
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# pnpm
+.pnpm-store/
+
+# Build Artifacts
+dist/
+build/
+test_out/
+.swc/
+*.tsbuildinfo
+tsup.config.bundled*.mjs
+*.zip
+*.tar
+*.tar.xz
+*.tar.gz
+*.7z
+*.rar
+
+# Ignore heapsnapshot and log files
+*.heapsnapshot
+*.log
+
+# Test artifacts
+coverage/
+*.junit.xml
+
+# Ignore package locks
+package-lock.json
+
+# Ignore Turbo caching
+.turbo/
+
 .vscode/*
 !.vscode/extensions.json
 !.vscode/settings.json

.npm-deprecaterc.yml

@@ -0,0 +1,3 @@
+name: '*next*'
+package:
+    - '@wolfstar/plugin-api'