build: migrate from pnpm to bun as package manager

Keep pnpm for publish workflow only (publishConfig overrides + provenance).
Bun handles install, run, and exec for all other workflows.

- Add workspaces field to root package.json for bun workspace support
- Replace pnpm setup with oven-sh/setup-bun in CI and release workflows
- Update all scripts to use bun run / bun run --filter / bunx
- Replace npx with bunx in lefthook hooks
- Update CONTRIBUTING.md with bun commands
- Delete pnpm-lock.yaml, add bun.lock
- Keep pnpm-workspace.yaml for publish workflow compatibility

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: vanceingalls

.github/workflows/ci.yml

@@ -16,97 +16,79 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm build
+      - run: bun install --frozen-lockfile
+      - run: bun run build
 
   lint-and-format:
     name: Lint & Format
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm lint
-      - run: pnpm format:check
+      - run: bun install --frozen-lockfile
+      - run: bun run lint
+      - run: bun run format:check
 
   typecheck:
     name: Typecheck
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm build
-      - run: pnpm -r typecheck
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+      - run: bun run --filter '*' typecheck
 
   test-core:
     name: "Test: core"
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm --filter @hyperframes/core test -- --coverage
+      - run: bun install --frozen-lockfile
+      - run: bun run --filter @hyperframes/core test -- --coverage
 
   test-engine:
     name: "Test: engine"
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm --filter @hyperframes/engine test
+      - run: bun install --frozen-lockfile
+      - run: bun run --filter @hyperframes/engine test
 
   test-runtime-contract:
     name: "Test: runtime contract"
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm --filter @hyperframes/core test:hyperframe-runtime-ci
+      - run: bun install --frozen-lockfile
+      - run: bun run --filter @hyperframes/core test:hyperframe-runtime-ci
 
   semantic-pr-title:
     name: Semantic PR title

.github/workflows/release.yml

@@ -18,17 +18,14 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 10
+      - uses: oven-sh/setup-bun@v2
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
+      - run: bun install --frozen-lockfile
 
       - name: Bump versions
-        run: pnpm set-version ${{ inputs.version }}
+        run: bun run set-version ${{ inputs.version }}
 
       - name: Create release PR
         env:

CONTRIBUTING.md

@@ -6,38 +6,38 @@ Thanks for your interest in contributing to Hyperframes! This guide will help yo
 
 1. Fork the repository
 2. Clone your fork: `git clone https://github.com/YOUR_USERNAME/hyperframes.git`
-3. Install dependencies: `pnpm install`
+3. Install dependencies: `bun install`
 4. Create a branch: `git checkout -b my-feature`
 
 ## Development
 
 ```bash
-pnpm install        # Install all dependencies
-pnpm dev            # Run the studio (composition editor)
-pnpm build          # Build all packages
-pnpm -r typecheck   # Type-check all packages
-pnpm lint           # Lint all packages
-pnpm format:check   # Check formatting
+bun install        # Install all dependencies
+bun run dev        # Run the studio (composition editor)
+bun run build      # Build all packages
+bun run --filter '*' typecheck   # Type-check all packages
+bun run lint       # Lint all packages
+bun run format:check   # Check formatting
 ```
 
 ### Running Tests
 
 ```bash
-pnpm --filter @hyperframes/core test          # Core unit tests (vitest)
-pnpm --filter @hyperframes/engine test        # Engine unit tests (vitest)
-pnpm --filter @hyperframes/core test:hyperframe-runtime-ci  # Runtime contract tests
+bun run --filter @hyperframes/core test          # Core unit tests (vitest)
+bun run --filter @hyperframes/engine test        # Engine unit tests (vitest)
+bun run --filter @hyperframes/core test:hyperframe-runtime-ci  # Runtime contract tests
 ```
 
 ### Linting & Formatting
 
 ```bash
-pnpm lint            # Run oxlint
-pnpm lint:fix        # Run oxlint with auto-fix
-pnpm format          # Format all files with oxfmt
-pnpm format:check    # Check formatting without writing
+bun run lint            # Run oxlint
+bun run lint:fix        # Run oxlint with auto-fix
+bun run format          # Format all files with oxfmt
+bun run format:check    # Check formatting without writing
 ```
 
-Git hooks (via [lefthook](https://github.com/evilmartians/lefthook)) run automatically after `pnpm install` and enforce linting + formatting on staged files before each commit.
+Git hooks (via [lefthook](https://github.com/evilmartians/lefthook)) run automatically after `bun install` and enforce linting + formatting on staged files before each commit.
 
 ## Pull Requests
 
@@ -71,7 +71,7 @@ All packages use **fixed versioning** — every release bumps all packages to th
 
 ```bash
 # Bump versions, commit to a branch, create PR
-pnpm set-version 0.2.0
+bun run set-version 0.2.0
 git checkout -b release/v0.2.0
 git add packages/*/package.json
 git commit -m "chore: release v0.2.0"