@acme-skunkworks/eslint-config 1.0.4 → 1.1.0

package/README.md

@@ -1,142 +1,82 @@
 # @acme-skunkworks/eslint-config
 
-Shared ESLint v9 configuration with TypeScript and React support, composed from named-export presets.
+> A shared ESLint v9 flat-config **preset composer** for TypeScript and React projects — import named-export presets and compose only the ones you need.
 
-## 📦 Installation
+[![npm version](https://img.shields.io/npm/v/@acme-skunkworks/eslint-config?logo=npm)](https://www.npmjs.com/package/@acme-skunkworks/eslint-config)
+[![Provenance: built and signed on GitHub Actions](https://img.shields.io/badge/provenance-built%20%26%20signed%20on%20GitHub%20Actions-2ea44f?logo=github)](https://www.npmjs.com/package/@acme-skunkworks/eslint-config#provenance)
+[![License: MIT](https://img.shields.io/npm/l/@acme-skunkworks/eslint-config)](LICENSE)
+[![Node engine](https://img.shields.io/node/v/@acme-skunkworks/eslint-config?logo=node.js)](https://www.npmjs.com/package/@acme-skunkworks/eslint-config)
+
+Every release is published to npm via OIDC Trusted Publishing with a **provenance attestation** — the artefact is built and signed on GitHub Actions, so consumers can verify exactly which commit and workflow produced it.
+
+## Install
 
 ```bash
 pnpm add -D @acme-skunkworks/eslint-config eslint prettier
 ```
 
-Every ESLint plugin used by the config ships as a regular dependency — you don't install plugins separately. `eslint` and `prettier` are peer dependencies.
+`eslint` (`^8.57.0 || ^9.0.0`) and `prettier` (`^3.0.0`) are **required peer dependencies** — install them alongside. Every ESLint plugin the config uses ships as a regular dependency, so you don't install plugins separately. Node 22+ is required.
+
+> **ESLint v8 users:** flat config isn't the default in v8 — set `ESLINT_USE_FLAT_CONFIG=1` so ESLint reads your `eslint.config.js`. ESLint v9 uses flat config by default, so no flag is needed.
 
-## 🚀 Usage
+## Quick start
 
-The package exports presets as named exports. Compose them in your `eslint.config.js`:
+The package exposes each preset as a named export. Compose them in your `eslint.config.js`:
 
 ```js
-import { base, typescript, frameworkRouting } from "@acme-skunkworks/eslint-config";
+import {
+  base,
+  typescript,
+  frameworkRouting,
+} from "@acme-skunkworks/eslint-config";
 
 export default [
   ...base,
   typescript,
   ...frameworkRouting,
   // your overrides last so they win
-  {
-    rules: {
-      "@typescript-eslint/no-explicit-any": "warn",
-    },
-  },
+  { rules: { "@typescript-eslint/no-explicit-any": "warn" } },
 ];
 ```
 
-Pull in the presets relevant to your project:
-
-| Export | What it covers |
-|---|---|
-| `base` | Plugin-alias hack + global ignores + the canonical baseline + packageJson lint config + commonjs file overrides + the big preferences block (top-level type imports, `func-style: declaration`, prettier integration, import resolver, `no-console` warn, etc.). The "you almost always want this" stack. |
-| `typescript` | Overrides for `**/*.{ts,tsx}` (disables `react/no-unused-prop-types` and `react/prop-types`). |
-| `frameworkRouting` | Disables `canonical/filename-match-exported` for routing dirs (`routes/**`, `app/**`, `pages/**`, `src/routes/**`, `src/pages/**`); re-allows arrow functions on `root.tsx` / `*.route.tsx`. Order matters — must spread **after** `base`. |
-| `astro` | `eslint-plugin-astro/flat/recommended` + Astro-specific overrides. Pull in for Astro projects. |
-| `sanity` | Schema property ordering for `*.schema.ts` and structure-file exceptions. Pull in for projects using Sanity Studio. |
-| `testing` | Relaxes strict TypeScript rules and devDependencies imports for `**/*.{test,spec}.*`, `__tests__/**`, and setup files. |
-| `storybook` | Overrides for `**/*.stories.{ts,tsx}`. |
-| `complexity` | Raises cyclomatic complexity threshold to 40 for `**/scripts/**` (orchestration scripts run linearly). Opt-in. |
-| `e2e` | Disables `react-hooks/rules-of-hooks` for `**/e2e/**` (Playwright `test.extend` callbacks are false positives). Opt-in. |
-| `tableComponents` | Disables `react/no-unstable-nested-components` for `**/*Table.tsx` (TanStack Table / Refine column-cell renderers). Opt-in. |
-
-> **Note:** Requires ESLint v9+ with flat config. Node 22+.
-
-## 🔄 Migrating from `@robeasthope/eslint-config`
-
-This package was previously published as `@robeasthope/eslint-config` from the [`RobEasthope/protomolecule`](https://github.com/RobEasthope/protomolecule) monorepo (versions up to and including v6.2.1). It now ships from this standalone repo under the `@acme-skunkworks` scope, with a named-export composition pattern.
-
-### Step 1: rename the dep
-
-```bash
-pnpm remove @robeasthope/eslint-config
-pnpm add -D @acme-skunkworks/eslint-config
-```
-
-### Step 2: switch to named exports
-
-The default export still works during the migration window, but is **deprecated** and will be removed in a future major:
-
-```js
-// Old (still works in v1, deprecated)
-import eslintConfig from "@acme-skunkworks/eslint-config";
-export default [...eslintConfig];
-
-// New (preferred — pull in only what you need)
-import { base, typescript, frameworkRouting } from "@acme-skunkworks/eslint-config";
-export default [...base, typescript, ...frameworkRouting];
-```
-
-If your project was a Sanity / Storybook / Astro consumer, opt-in to those presets explicitly. The default export bundled all of them; the new shape makes the dependencies explicit.
+Pull in only the presets your project needs. Array presets are spread with `...`; single-config presets are added as-is — the table below notes which is which.
 
-### What's new in v1
+## Presets
 
-- **Tempest fold-in.** Plugin versions bumped to current; `complexity`, `e2e`, and `tableComponents` are new opt-in presets ported from Tempest. See `MIGRATION_FROM_PROTOMOLECULE.md` for the per-preset diff.
-- **Named-export composition.** Each preset is independently importable; consumers compose what they need.
-- **`prettier` is now a `peerDependency`.** Was already a transitive dep via `eslint-plugin-prettier`; this just makes the contract explicit.
+**Core** — the everyday stack:
 
-For older breaking-change history (v4 → v5 plugin bundling, v5 → v6 top-level type imports) see the original [protomolecule changelog](https://github.com/RobEasthope/protomolecule/blob/main/packages/eslint-config/CHANGELOG.md).
+| Preset             | Shape         | What it covers                                                                                                                                                                                                                                                                                                                                                                                         |
+| ------------------ | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `base`             | array (`...`) | Plugin-alias hack, global ignores, the canonical baseline, `package.json` lint config, CommonJS **and ESM** file overrides (Node + ES globals for `.cjs` / `.mjs` so standalone scripts parse without `no-undef`), and the `preferences` block (top-level type imports, `func-style: declaration`, Prettier integration, import resolver, `no-console` warn). The "you almost always want this" stack. |
+| `typescript`       | single        | Overrides for `**/*.{ts,tsx}` — disables `react/no-unused-prop-types` and `react/prop-types`, which are redundant under TypeScript.                                                                                                                                                                                                                                                                    |
+| `frameworkRouting` | array (`...`) | Turns off `canonical/filename-match-exported` for routing dirs — `routes/**`, `app/**`, `pages/**` (Next.js), `src/routes/**` (SvelteKit), `src/pages/**` (Astro) — and re-allows arrow functions on `root.tsx` / `*.route.tsx`. Spread **after** `base` (see Gotchas).                                                                                                                                |
+| `testing`          | single        | Relaxes strict TypeScript rules and `import/no-extraneous-dependencies` for `**/*.{test,spec}.*`, `__tests__/**`, and setup files.                                                                                                                                                                                                                                                                     |
 
-## ✨ Features
+**Opt-in** — pull in per project:
 
-- **TypeScript** — full TypeScript linting via `typescript-eslint` v8.
-- **React** — React 19 compatible rules from canonical-auto.
-- **React Router 7 compatible** — top-level type imports, `func-style: declaration` with framework-aware exceptions for typed exports on `root.tsx` / `*.route.tsx`.
-- **Astro** — opt-in preset.
-- **Sanity** — opt-in preset for schema property ordering and structure-file exceptions.
-- **Modern JavaScript** — ES2022+, Prettier integration, accessibility checks.
+| Preset            | Shape         | What it covers                                                                                                      |
+| ----------------- | ------------- | ------------------------------------------------------------------------------------------------------------------- |
+| `astro`           | array (`...`) | `eslint-plugin-astro/flat/recommended` plus Astro-specific overrides.                                               |
+| `sanity`          | array (`...`) | Schema property ordering for `*.schema.ts` and structure-file exceptions, for Sanity Studio projects.               |
+| `storybook`       | single        | Overrides for `**/*.stories.{ts,tsx}`.                                                                              |
+| `complexity`      | array (`...`) | Raises the cyclomatic-complexity threshold to 40 for `**/scripts/**`, where orchestration scripts run linearly.     |
+| `e2e`             | single        | Disables `react-hooks/rules-of-hooks` for `**/e2e/**` — Playwright `test.extend` callbacks are false positives.     |
+| `tableComponents` | single        | Disables `react/no-unstable-nested-components` for `**/*Table.tsx` — TanStack Table / Refine column-cell renderers. |
 
-## 🛠️ Customisation
+> A deprecated **default export** still bundles the v6.x composition for back-compat during migration. New code should use the named exports above. See the [migration guide](MIGRATION_FROM_PROTOMOLECULE.md).
 
-Override any rule from your local config — last config wins in flat config:
+## Gotchas
 
-```js
-import { base, typescript } from "@acme-skunkworks/eslint-config";
-
-export default [
-  ...base,
-  typescript,
-  {
-    rules: {
-      "@typescript-eslint/no-explicit-any": "warn",
-      "react/prop-types": "off",
-    },
-  },
-];
-```
-
-Add additional plugins by configuring them directly:
-
-```js
-import { base, typescript } from "@acme-skunkworks/eslint-config";
-import pluginReact from "eslint-plugin-react";
+Two ordering rules are easy to get wrong and fail **silently** — the config still loads, but the intended override never wins:
 
-export default [
-  ...base,
-  typescript,
-  {
-    plugins: { react: pluginReact },
-    rules: { "react/jsx-uses-react": "error" },
-  },
-];
-```
-
-## 🔧 Development
-
-```bash
-pnpm install   # install deps
-pnpm run build # tsc → dist/
-pnpm lint      # lint this package's own source
-pnpm lint:fix  # auto-fix
-```
+- **Spread `frameworkRouting` _after_ `...base`.** Its `func-style` override must come later in the array than the `preferences` block (which `base` includes), or `base` wins and the React Router 7 typed-export pattern breaks.
+- **`frameworkRouting` is an ordered pair of configs** for the same reason — its second element (the React Router exceptions) must stay after its first, which in turn must follow `preferences`. If you ever expand the spread into individual elements, preserve their order.
 
-## 📄 License
+Full rationale (and the protomolecule issues behind it) is in [`CLAUDE.md`](CLAUDE.md).
 
-MIT License — see [LICENSE](LICENSE).
+## Links
 
-This software is provided "as is", without warranty of any kind. Use at your own risk.
+- [Changelog](CHANGELOG.md)
+- [Migration guide](MIGRATION_FROM_PROTOMOLECULE.md) — moving from `@robeasthope/eslint-config`
+- [Repository](https://github.com/acme-skunkworks/eslint-config)
+- [Licence](LICENSE) — MIT

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import type { Linter } from "eslint";
 /**
  * Base preset — the "you almost always want this" stack:
  * plugin-alias hack, global ignores, the canonical baseline, packageJson
- * lint config, commonjs file overrides, and the big preferences block
+ * lint config, commonjs + esm file overrides, and the big preferences block
  * (top-level type imports, func-style, prettier, import resolver, etc.).
  */
 export declare const base: Linter.Config[];

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAerC;;;;;GAKG;AACH,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,MAAM,EAS/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAA4B,CAAC;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAG3C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAkB,CAAC;AAEhD;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD;;GAEG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;;;;;;GAQG;AACH,QAAA,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EASjC,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAerC;;;;;GAKG;AACH,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,MAAM,EAU/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAA4B,CAAC;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAG3C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAkB,CAAC;AAEhD;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD;;GAEG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;;;;;;GAQG;AACH,QAAA,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EASjC,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/index.js

@@ -2,6 +2,7 @@
 /* eslint-disable @typescript-eslint/no-explicit-any */
 import { astro } from "./rules/astro.js";
 import { commonjs } from "./rules/commonjs.js";
+import { esm } from "./rules/esm.js";
 import { frameworkRouting as frameworkRoutingRule } from "./rules/frameworkRouting.js";
 import { ignoredFileAndFolders } from "./rules/ignoredFileAndFolders.js";
 import { packageJson } from "./rules/packageJson.js";
@@ -26,7 +27,7 @@ const importXAlias = {
 /**
  * Base preset — the "you almost always want this" stack:
  * plugin-alias hack, global ignores, the canonical baseline, packageJson
- * lint config, commonjs file overrides, and the big preferences block
+ * lint config, commonjs + esm file overrides, and the big preferences block
  * (top-level type imports, func-style, prettier, import resolver, etc.).
  */
 export const base = [
@@ -37,6 +38,7 @@ export const base = [
     ...eslintConfigCanonicalAuto,
     packageJson,
     commonjs,
+    esm,
     preferences,
 ];
 /**

package/dist/infrastructure/scripts/check-changelog-completeness.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env -S npx tsx
+export declare function isReleaseTriggering(prTitle: string): boolean;
+export declare function hasChangelogEntry(changedFiles: readonly string[]): boolean;
+export type CompletenessResult = {
+    ok: boolean;
+    reason: string;
+};
+export declare function checkCompleteness(prTitle: string, changedFiles: readonly string[]): CompletenessResult;
+//# sourceMappingURL=check-changelog-completeness.d.ts.map

package/dist/infrastructure/scripts/check-changelog-completeness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-changelog-completeness.d.ts","sourceRoot":"","sources":["../../../infrastructure/scripts/check-changelog-completeness.ts"],"names":[],"mappings":";AAwBA,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG5D;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAI1E;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,kBAAkB,CAmBpB"}

package/dist/infrastructure/scripts/check-changelog-completeness.js

@@ -0,0 +1,69 @@
+#!/usr/bin/env -S npx tsx
+// Changelog-completeness gate (SK-371). A release-triggering PR title
+// (`feat`/`fix`/`perf`/`revert`/breaking) MUST carry a dated `changelog/` entry. This restores
+// the coupling Changesets gave for free — no changeset → no release — now that
+// release-please infers the bump from the Conventional-Commit PR title rather
+// than an explicit file. Wired into ci.yml's build-and-lint job.
+//
+// "Release-triggering" mirrors release-please's default node bump table:
+// `feat` (minor), `fix`/`perf`/`revert` (patch), and a `!` breaking marker
+// (major) cut a release; `docs`/`chore`/`ci`/`refactor`/`test`/`build`/`style`
+// do not.
+//
+// Inputs (env, set by the workflow):
+//   PR_TITLE — the pull request title (github.event.pull_request.title)
+//   BASE_REF — the base branch name (github.base_ref); defaults to "main"
+// Reads changed files from `git diff --name-only origin/<BASE_REF>...HEAD`.
+// Pure functions live exported for vitest.
+import { execFileSync } from "node:child_process";
+const RELEASE_TRIGGERING_TYPE = /^(feat|fix|perf|revert)(\([^)]+\))?:/;
+const BREAKING_SUBJECT = /^[a-z]+(\([^)]+\))?!:/;
+const CHANGELOG_ENTRY = /^changelog\/.+\.md$/;
+export function isReleaseTriggering(prTitle) {
+    const title = prTitle.trim();
+    return BREAKING_SUBJECT.test(title) || RELEASE_TRIGGERING_TYPE.test(title);
+}
+export function hasChangelogEntry(changedFiles) {
+    return changedFiles.some((file) => CHANGELOG_ENTRY.test(file) && file !== "changelog/README.md");
+}
+export function checkCompleteness(prTitle, changedFiles) {
+    if (!isReleaseTriggering(prTitle)) {
+        return {
+            ok: true,
+            reason: `PR title "${prTitle}" is not release-triggering — no changelog entry required.`,
+        };
+    }
+    if (hasChangelogEntry(changedFiles)) {
+        return {
+            ok: true,
+            reason: "Release-triggering PR title with a changelog/ entry present.",
+        };
+    }
+    return {
+        ok: false,
+        reason: `PR title "${prTitle}" triggers a release (feat/fix/perf/revert/breaking) but no changelog/*.md entry is present in the diff vs the base branch. Run /send-it (or add a dated changelog/ entry) so the release carries notes.`,
+    };
+}
+function readChangedFiles(baseRef) {
+    const out = execFileSync("git", ["diff", "--name-only", `origin/${baseRef}...HEAD`], { encoding: "utf8" });
+    return out
+        .split("\n")
+        .map((line) => line.trim())
+        .filter(Boolean);
+}
+function main() {
+    const prTitle = process.env.PR_TITLE ?? "";
+    const baseRef = process.env.BASE_REF || "main";
+    if (!prTitle) {
+        console.error("PR_TITLE is not set — cannot run the changelog-completeness gate.");
+        process.exit(1);
+    }
+    const result = checkCompleteness(prTitle, readChangedFiles(baseRef));
+    console.log(result.reason);
+    if (!result.ok) {
+        process.exit(1);
+    }
+}
+if (import.meta.url === `file://${process.argv[1]}`) {
+    main();
+}

package/dist/infrastructure/scripts/finalise-changelog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finalise-changelog.d.ts","sourceRoot":"","sources":["../../../infrastructure/scripts/finalise-changelog.ts"],"names":[],"mappings":";AAuBA,eAAO,MAAM,aAAa,cAAc,CAAC;AAEzC,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAMtE;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,UAAU,GACpB,IAAI,GAAG,MAAM,CAgCf;AAaD;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CA4EpD"}
+{"version":3,"file":"finalise-changelog.d.ts","sourceRoot":"","sources":["../../../infrastructure/scripts/finalise-changelog.ts"],"names":[],"mappings":";AAuBA,eAAO,MAAM,aAAa,cAAc,CAAC;AAEzC,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5B,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAMtE;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,UAAU,GACpB,IAAI,GAAG,MAAM,CAgCf;AAaD;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CA6EpD"}

package/dist/infrastructure/scripts/finalise-changelog.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env -S npx tsx
-// Release-time finalisation of changelog entries — run by changesets/action's
-// `version:` command, right after `changeset version`, so the result is
-// committed into the "release: version packages" PR (no separate workflow, no
-// bot push to main).
+// Release-time finalisation of changelog entries — run by the orchestrator
+// right after `release-please release-pr` (SK-371/SK-376), so the result is
+// committed into the release PR (no separate workflow, no bot push to main).
+// Reads the just-bumped version from package.json, which release-please updated.
 //
 // For every entry that isn't finalised yet (empty `version`):
 //   1. resolve its merged PR from the `branch` field via `gh` and enrich
@@ -119,8 +119,9 @@ export function makeResolver(run) {
     }
     return (branch) => {
         // Enrichment is best-effort metadata: a gh/git failure here must NOT abort
-        // `changeset version` and block the release. On any error, warn and return
-        // null — the entry still gets version-stamped, just without PR metadata.
+        // the release-please release-PR build and block the release. On any error,
+        // warn and return null — the entry still gets version-stamped, just without
+        // PR metadata.
         try {
             return resolve(branch);
         }

package/dist/infrastructure/send-it/derive-changeset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"derive-changeset.d.ts","sourceRoot":"","sources":["../../../infrastructure/send-it/derive-changeset.ts"],"names":[],"mappings":";AAgBA,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACtE,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAK/C,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAmB3D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAO7D"}
+{"version":3,"file":"derive-changeset.d.ts","sourceRoot":"","sources":["../../../infrastructure/send-it/derive-changeset.ts"],"names":[],"mappings":";AAoBA,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACtE,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAK/C,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAmB3D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAO7D"}

package/dist/infrastructure/send-it/derive-changeset.js

@@ -1,10 +1,14 @@
 #!/usr/bin/env -S npx tsx
-// Derives the deterministic bits of a /send-it changeset entry.
+// Derives the deterministic bits /send-it needs from the branch commits.
 // Run: pnpm tsx infrastructure/send-it/derive-changeset.ts
 //
+// Since SK-371 there is no changeset file; /send-it uses these to name the dated
+// changelog/ entry and to compose the Conventional Commits PR title (the
+// release-please bump signal). The filename is retained for git history.
+//
 // Fields:
-//   slug : branch-name-derived filename for `.changeset/<slug>.md`
-//   bump : major | minor | patch (per /send-it's bump heuristic)
+//   slug : branch-name-derived slug (changelog/<ts>-<slug>.md filename)
+//   bump : major | minor | patch (drives the PR-title prefix: feat!/feat/fix)
 //   body : a one-line draft summary (the slash command may rewrite this)
 //
 // Reads from git via `git branch --show-current` and `git log origin/main..HEAD`

package/dist/rules/esm.d.ts

@@ -0,0 +1,166 @@
+/**
+ * Part of `base` — applied to every consumer.
+ *
+ * `.mjs` parser shim: the ESM counterpart to `commonjs`. Standalone ES-module
+ * scripts (`.mjs`) — build/maintenance tooling, skill helpers — run in Node but
+ * are not members of any tsconfig project, so the flat config gives them no
+ * environment globals and `console` / `process` trip `no-undef`. This sets
+ * `sourceType: "module"` plus Node + ES2021 globals so they parse cleanly. No
+ * rules — only `languageOptions`.
+ * @see https://eslint.org/docs/latest/use/configure/language-options
+ */
+export declare const esm: {
+    files: string[];
+    ignores: string[];
+    languageOptions: {
+        globals: {
+            AggregateError: false;
+            Array: false;
+            ArrayBuffer: false;
+            Atomics: false;
+            BigInt: false;
+            BigInt64Array: false;
+            BigUint64Array: false;
+            Boolean: false;
+            DataView: false;
+            Date: false;
+            decodeURI: false;
+            decodeURIComponent: false;
+            encodeURI: false;
+            encodeURIComponent: false;
+            Error: false;
+            escape: false;
+            eval: false;
+            EvalError: false;
+            FinalizationRegistry: false;
+            Float32Array: false;
+            Float64Array: false;
+            Function: false;
+            globalThis: false;
+            Infinity: false;
+            Int16Array: false;
+            Int32Array: false;
+            Int8Array: false;
+            Intl: false;
+            isFinite: false;
+            isNaN: false;
+            JSON: false;
+            Map: false;
+            Math: false;
+            NaN: false;
+            Number: false;
+            Object: false;
+            parseFloat: false;
+            parseInt: false;
+            Promise: false;
+            Proxy: false;
+            RangeError: false;
+            ReferenceError: false;
+            Reflect: false;
+            RegExp: false;
+            Set: false;
+            SharedArrayBuffer: false;
+            String: false;
+            Symbol: false;
+            SyntaxError: false;
+            TypeError: false;
+            Uint16Array: false;
+            Uint32Array: false;
+            Uint8Array: false;
+            Uint8ClampedArray: false;
+            undefined: false;
+            unescape: false;
+            URIError: false;
+            WeakMap: false;
+            WeakRef: false;
+            WeakSet: false;
+            __dirname: false;
+            __filename: false;
+            AbortController: false;
+            AbortSignal: false;
+            AsyncDisposableStack: false;
+            atob: false;
+            Blob: false;
+            BroadcastChannel: false;
+            btoa: false;
+            Buffer: false;
+            ByteLengthQueuingStrategy: false;
+            clearImmediate: false;
+            clearInterval: false;
+            clearTimeout: false;
+            CloseEvent: false;
+            CompressionStream: false;
+            console: false;
+            CountQueuingStrategy: false;
+            crypto: false;
+            Crypto: false;
+            CryptoKey: false;
+            CustomEvent: false;
+            DecompressionStream: false;
+            DisposableStack: false;
+            DOMException: false;
+            ErrorEvent: false;
+            Event: false;
+            EventTarget: false;
+            exports: true;
+            fetch: false;
+            File: false;
+            FormData: false;
+            global: false;
+            Headers: false;
+            localStorage: false;
+            MessageChannel: false;
+            MessageEvent: false;
+            MessagePort: false;
+            module: false;
+            navigator: false;
+            Navigator: false;
+            performance: false;
+            Performance: false;
+            PerformanceEntry: false;
+            PerformanceMark: false;
+            PerformanceMeasure: false;
+            PerformanceObserver: false;
+            PerformanceObserverEntryList: false;
+            PerformanceResourceTiming: false;
+            process: false;
+            queueMicrotask: false;
+            ReadableByteStreamController: false;
+            ReadableStream: false;
+            ReadableStreamBYOBReader: false;
+            ReadableStreamBYOBRequest: false;
+            ReadableStreamDefaultController: false;
+            ReadableStreamDefaultReader: false;
+            Request: false;
+            require: false;
+            Response: false;
+            sessionStorage: false;
+            setImmediate: false;
+            setInterval: false;
+            setTimeout: false;
+            Storage: false;
+            structuredClone: false;
+            SubtleCrypto: false;
+            SuppressedError: false;
+            TextDecoder: false;
+            TextDecoderStream: false;
+            TextEncoder: false;
+            TextEncoderStream: false;
+            TransformStream: false;
+            TransformStreamDefaultController: false;
+            URL: false;
+            URLPattern: false;
+            URLSearchParams: false;
+            WebAssembly: false;
+            WebSocket: false;
+            WritableStream: false;
+            WritableStreamDefaultController: false;
+            WritableStreamDefaultWriter: false;
+        };
+        parserOptions: {
+            ecmaVersion: string;
+        };
+        sourceType: string;
+    };
+};
+//# sourceMappingURL=esm.d.ts.map

package/dist/rules/esm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"esm.d.ts","sourceRoot":"","sources":["../../rules/esm.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAcS,CAAC"}

package/dist/rules/esm.js

@@ -0,0 +1,27 @@
+import globals from "globals";
+/**
+ * Part of `base` — applied to every consumer.
+ *
+ * `.mjs` parser shim: the ESM counterpart to `commonjs`. Standalone ES-module
+ * scripts (`.mjs`) — build/maintenance tooling, skill helpers — run in Node but
+ * are not members of any tsconfig project, so the flat config gives them no
+ * environment globals and `console` / `process` trip `no-undef`. This sets
+ * `sourceType: "module"` plus Node + ES2021 globals so they parse cleanly. No
+ * rules — only `languageOptions`.
+ * @see https://eslint.org/docs/latest/use/configure/language-options
+ */
+export const esm = {
+    files: ["**/*.mjs"],
+    // Exclude node_modules
+    ignores: ["**/node_modules/**"],
+    languageOptions: {
+        globals: {
+            ...globals.node,
+            ...globals.es2021,
+        },
+        parserOptions: {
+            ecmaVersion: "latest",
+        },
+        sourceType: "module",
+    },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acme-skunkworks/eslint-config",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "Shared ESLint flat-config preset with TypeScript, React, Astro, Sanity, and Storybook support",
   "keywords": [
     "eslint",
@@ -46,7 +46,6 @@
     "act:release:dry": "act push -W .github/workflows/release.yml",
     "build": "tsc",
     "changelog:finalise": "tsx infrastructure/scripts/finalise-changelog.ts",
-    "changeset:version": "changeset version && pnpm changelog:finalise",
     "ci:list": "gh run list --limit 10",
     "ci:view": "gh run view",
     "ci:watch": "gh run watch $(gh run list -L 1 --json databaseId -q '.[0].databaseId // empty')",
@@ -54,14 +53,13 @@
     "format": "npx prettier --write .",
     "lint": "eslint 'index.ts' 'rules/**/*.ts' 'infrastructure/scripts/**/*.ts' 'infrastructure/send-it/**/*.ts' --cache --cache-location ./.eslintcache",
     "lint:fix": "eslint 'index.ts' 'rules/**/*.ts' 'infrastructure/scripts/**/*.ts' 'infrastructure/send-it/**/*.ts' --fix --cache --cache-location ./.eslintcache",
-    "lint:md": "markdownlint-cli2 '**/*.{md,mdx}' '!**/node_modules/**' '!**/dist/**' '!**/.turbo/**' '!**/.astro/**' '!**/CHANGELOG.md'",
-    "lint:md:fix": "markdownlint-cli2 --fix '**/*.{md,mdx}' '!**/node_modules/**' '!**/dist/**' '!**/.turbo/**' '!**/.astro/**' '!**/CHANGELOG.md'",
+    "lint:md": "markdownlint-cli2 '**/*.{md,mdx}' '!**/node_modules/**' '!**/dist/**' '!**/.turbo/**' '!**/.astro/**'",
+    "lint:md:fix": "markdownlint-cli2 --fix '**/*.{md,mdx}' '!**/node_modules/**' '!**/dist/**' '!**/.turbo/**' '!**/.astro/**'",
     "lint:sh": "bash -c 'if command -v shellcheck >/dev/null 2>&1; then shellcheck infrastructure/scripts/*.sh .husky/pre-commit .husky/pre-push .husky/commit-msg; elif [ \"$(uname -s)\" = \"Darwin\" ]; then echo \"⚠️  shellcheck not installed — skipping. Install: brew install shellcheck\"; else echo \"⚠️  shellcheck not installed — skipping. Install: apt-get install shellcheck\"; fi'",
     "lint:workflows": "actionlint",
     "lint:yaml": "yamllint .",
     "prepare": "husky",
     "prepublishOnly": "pnpm run build",
-    "release": "pnpm run build && changeset publish",
     "release:manual": "pnpm run build && npm publish --access public --provenance=false",
     "release:manual:dry": "pnpm run build && npm publish --access public --provenance=false --dry-run",
     "sort-pkg-json": "sort-package-json",
@@ -69,8 +67,7 @@
     "test:sh": "bash -c 'if command -v bats >/dev/null 2>&1; then bats infrastructure/tests/*.bats; elif [ \"$(uname -s)\" = \"Darwin\" ]; then echo \"⚠️  bats not installed — skipping. Install: brew install bats-core\"; else echo \"⚠️  bats not installed — skipping. Install: apt-get install bats\"; fi'",
     "test:watch": "vitest",
     "tsc": "tsc --noEmit",
-    "validate:changelog": "tsx infrastructure/scripts/validate-changelog.ts",
-    "version": "changeset version"
+    "validate:changelog": "tsx infrastructure/scripts/validate-changelog.ts"
   },
   "lint-staged": {
     "**/*": [
@@ -114,7 +111,6 @@
   },
   "devDependencies": {
     "@acme-skunkworks/markdownlint-config": "^2.0.0",
-    "@changesets/cli": "^2.31.0",
     "@types/eslint": "^9.6.1",
     "@types/node": "^25.6.0",
     "gray-matter": "^4.0.3",