@bensandee/tooling 0.67.0 → 0.69.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bensandee/tooling",
-  "version": "0.67.0",
+  "version": "0.69.0",
   "description": "CLI tool to bootstrap and maintain standardized TypeScript project tooling",
   "license": "MIT",
   "repository": {
@@ -9,9 +9,10 @@
     "directory": "packages/tooling-cli"
   },
   "bin": {
-    "bst": "./dist/bin.mjs"
+    "bst": "./bin/bst.mjs"
   },
   "files": [
+    "bin",
     "dist",
     "tooling.schema.json"
   ],
@@ -20,10 +21,6 @@
     "#src/*.ts": "./src/*.ts"
   },
   "exports": {
-    ".": {
-      "types": "./dist/index.d.mts",
-      "default": "./dist/index.mjs"
-    },
     "./bin": "./dist/bin.mjs",
     "./package.json": "./package.json",
     "./tooling.schema.json": "./tooling.schema.json"
@@ -33,26 +30,27 @@
   },
   "dependencies": {
     "@bensandee/common": "0.1.4",
-    "@clack/prompts": "^1.5.1",
+    "@clack/prompts": "^1.7.0",
     "citty": "^0.2.2",
-    "dependency-cruiser": "^17.4.3",
+    "dependency-cruiser": "^18.1.1",
     "json5": "^2.2.3",
     "jsonc-parser": "^3.3.1",
-    "picomatch": "^4.0.4",
+    "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@bensandee/config": "0.13.1",
-    "@changesets/cli": "2.31.0",
-    "@release-it/bumper": "7.0.6",
-    "@types/node": "24.13.2",
+    "@bensandee/config": "0.14.0",
+    "@changesets/cli": "2.31.1",
+    "@release-it/bumper": "8.0.0",
+    "@types/node": "24.13.3",
     "@types/picomatch": "4.0.3",
-    "commit-and-tag-version": "12.7.3",
-    "prettier": "3.8.4",
-    "release-it": "20.2.0",
-    "tsdown": "0.22.3",
-    "@bensandee/claude-hooks": "0.10.1"
+    "commit-and-tag-version": "13.1.2",
+    "prettier": "3.9.6",
+    "release-it": "21.0.1",
+    "tsdown": "0.22.14",
+    "@bensandee/claude-hooks": "0.11.0",
+    "@bensandee/forgejo": "0.1.0"
   },
   "scripts": {
     "build": "tsdown",

package/tooling.schema.json

@@ -58,7 +58,7 @@
       "type": "boolean"
     },
     "docker": {
-      "description": "Docker package overrides (package name → partial config; any field may be omitted to fall back to convention)",
+      "description": "Docker image overrides, keyed by a package directory or a discovered image name (any field may be omitted to fall back to convention or discovery)",
       "type": "object",
       "propertyNames": {
         "type": "string"
@@ -85,9 +85,17 @@
             }
           },
           "imageName": {
-            "description": "Image name used for docker:build tags, docker:publish refs, and docker:check cross-referencing. Falls back to the derived name: the package.json name for the root package (npm scope stripped), or {root-name}-{package-name} for a monorepo package.",
+            "description": "Image name used for docker:build tags, docker:publish refs, and docker:check cross-referencing. Falls back to the derived name: the package.json name for the root package (npm scope stripped), or {root-name}-{package-name} for a monorepo package. A value that already carries a registry host (e.g. 'ghcr.io/me/app') is used as written by docker:publish, with no registryNamespace prefix added, and must name the registry this run logs in to -- one naming any other host refuses before login.",
             "type": "string",
             "minLength": 1
+          },
+          "version": {
+            "description": "Version used for docker:publish tags; overrides the version resolved from the enclosing package.",
+            "type": "string"
+          },
+          "publish": {
+            "description": "Exclude this image from docker:publish while publishDocker stays true (default true).",
+            "type": "boolean"
           }
         },
         "additionalProperties": false
@@ -258,6 +266,20 @@
             "gateOnPullRequests": {
               "description": "Run coverage on PR builds too (default: false; deferred follow-up)",
               "type": "boolean"
+            },
+            "include": {
+              "description": "Glob patterns replacing the default coverage source scope (['src/**']) in the generated vitest.config.ts.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "exclude": {
+              "description": "Glob patterns appended to the universal coverage.exclude defaults in the generated vitest.config.ts, for project-specific untestable files (entrypoints, dev-only shims, icon barrels).",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
             }
           },
           "additionalProperties": false
@@ -278,6 +300,7 @@
           }
         },
         "exclude": {
+          "description": "Picomatch globs, matched against a repo-relative path and each of its ancestor directories (so a bare directory pattern like \"packages/legacy\" works). A matching path leaves the measured codebase entirely, for every gated metric and the linesOfCode observation alike: an excluded file is not counted, and its module and edges leave the dependency graph before any count is derived. Unlike exempt, an excluded module's contribution to other modules' fan-in/fan-out is also gone, not just its own listing. The list is additive -- each entry only ever excludes more -- and negation is not supported: a leading \"!\" is not an exception carved out of an earlier entry, and matches every path the negated pattern does not name.",
           "type": "array",
           "items": {
             "type": "string"
@@ -295,15 +318,27 @@
           "maximum": 9007199254740991
         },
         "fanInLimit": {
+          "description": "A module is a fan-in outlier above this many importers, and only when it also exceeds `moduleSizeLimit` source lines (defaults 10 and 200) -- popularity alone is not coupling. Only value edges are counted: a type-only import is erased before the graph is built and never moves this count, and a third-party import resolves outside the graph entirely. A cross-package import counts unless `crossPackage` is off (default on) -- see that setting. Never duplicate a type or fork a helper to stay under the limit -- prefer a justified `exempt` entry, which names the hub, over raising the limit, which hides it.",
           "type": "integer",
           "minimum": 0,
           "maximum": 9007199254740991
         },
         "fanOutLimit": {
+          "description": "A module is a fan-out outlier above this many first-party dependencies (default 10). Counted on the same value-edge basis as fanInLimit, `crossPackage` included, with the same consequence: an import you were about to inline or copy to protect this budget most likely costs nothing.",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991
+        },
+        "moduleSizeLimit": {
+          "description": "Source lines a module must exceed before its importer count can make it a fan-in outlier (default 200). A module with many importers and little surface is a leaf, not a junction: it has one job and no reason to change for any of its callers, so counting its importers reports popularity rather than coupling. Applies to fan-in only -- a small module with many dependencies is a barrel, which is a finding.",
           "type": "integer",
           "minimum": 0,
           "maximum": 9007199254740991
         },
+        "crossPackage": {
+          "description": "Count dependency edges that cross a workspace package boundary (default true). On by default because the alternative measures the wrong thing: with it off, moving a module into its own package removes its importers from every metric, so extracting a package hides a hub rather than fixing it. A monorepo adopting the default sees fan-in and fan-out rise once, and clears it with a one-time `health:check --update-baseline --reset`; a single-package repo has no workspace siblings to resolve, so no new edge enters its graph. Set it to false only where the package boundary is a curated API surface an edge across genuinely costs less, or to hold a baseline on the old measurement basis.",
+          "type": "boolean"
+        },
         "history": {
           "type": "string",
           "enum": ["orphan-branch", "none"]
@@ -315,12 +350,62 @@
           "type": "integer",
           "minimum": 0,
           "maximum": 9007199254740991
+        },
+        "exempt": {
+          "description": "Per-metric, per-module reporting suppression, keyed first by metric name (fanInOutliers or fanOutOutliers) then by the repo-relative module path exactly as `health:summary --explain` prints it. Each module maps to a required, non-empty justification string. An exempt module stays fully in the graph -- its edges still count toward every other module's fan-in/fan-out -- and only stops being listed as an outlier for that one metric.",
+          "type": "object",
+          "propertyNames": {
+            "type": "string",
+            "enum": ["fanInOutliers", "fanOutOutliers"]
+          },
+          "additionalProperties": {
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "ascii": {
+      "description": "ASCII-only gate (bst ascii:check) configuration. Opt-in: set enabled true to scan tracked text files for curated non-ASCII offenders (curly quotes, ellipsis, dashes, box-drawing) and report a suggested ASCII replacement for each hit.",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "description": "Opt into the ascii:check gate (default false)",
+          "type": "boolean"
+        },
+        "exclude": {
+          "description": "Additional path globs to skip during scanning. Added to the built-in defaults (docs/**/retired/**, **/CHANGELOG.md, and the two generated .claude/hooks/bst-hook files), not a replacement for them.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "deny": {
+          "description": "Named offender categories to add to the default deny-list (e.g. \"math\")",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "allow": {
+          "description": "Codepoints (as U+XXXX) to drop from the effective deny-list",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
         }
       },
       "additionalProperties": false
     },
     "docs": {
-      "description": "Plan/spec lifecycle gate (`bst docs:check`). Overrides only — dirs are discovered by convention. Set to false to disable. Violations are advisory until a pair is named in `enforced`.",
+      "description": "Plan/spec lifecycle gate (`bst docs:check`). Overrides only -- dirs are discovered by convention. Set to false to disable. Violations are advisory until a pair is named in `enforced`.",
       "anyOf": [
         {
           "type": "boolean",
@@ -344,7 +429,7 @@
               ]
             },
             "dirs": {
-              "description": "Extra active doc dirs beyond convention (e.g. [\"docs/rfcs\"]). Each retires into its own completed/ subdir.",
+              "description": "Extra active doc dirs beyond convention (e.g. [\"docs/rfcs\"]). Each retires into its own retired/ subdir.",
               "type": "array",
               "items": {
                 "type": "string"
@@ -374,7 +459,7 @@
           "description": "Target repository (owner/repo) whose workflow the release dispatches to trigger a deploy"
         },
         "stack": {
-          "description": "Deploy stack name passed as the `stack` input (default: package name, '-' → '_')",
+          "description": "Deploy stack name passed as the `stack` input (default: package name, '-' -> '_')",
           "type": "string"
         },
         "workflow": {
@@ -435,6 +520,93 @@
         }
       },
       "additionalProperties": false
+    },
+    "agent": {
+      "description": "agent:daemon behaviour overrides. Opt-in: see agent.autonomy for the interior-autonomy gate.",
+      "type": "object",
+      "properties": {
+        "autonomy": {
+          "description": "Opt into interior autonomy (default false). When a phase's latest rationale reports readiness \"ready\" with an empty openQuestions[] and the review phase is clean, the daemon applies the existing plan -> implement -> review -> park-at-mergeable advance itself instead of parking for a human. Never applies to the design/spec gate or the final merge from the mergeable terminal -- those always wait on a human.",
+          "type": "boolean"
+        },
+        "preRunRebase": {
+          "description": "Attempt a clean-only rebase of the work branch onto the default branch before the implement (execute) phase's container starts (default true). A clean rebase runs the container on the rebased branch; a conflicting one is aborted, reported on the run's ledger comment, and the run still proceeds on the un-rebased branch for a later agent/repair cycle to resolve -- it never fails the run. Set false to skip the attempt entirely for this repo: no fetch, no rebase, no abort, and the branch is worked exactly as cloned.",
+          "type": "boolean"
+        },
+        "priority": {
+          "description": "Map this repo's own issue-label names onto the daemon's four priority levels, e.g. {\"P1\": \"critical\", \"P4\": \"low\"}. The map UNIONS with the built-in priority/<level> names rather than replacing them, and the daemon does not create aliased labels -- the repo owns names the daemon did not choose. Priority affects claim order only: it never changes a run's model, effort, or any budget.",
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "enum": ["critical", "high", "normal", "low"]
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "branchPrune": {
+      "description": "bst branch:prune overrides: mergedDays/backupDays windows, and extra never-touch exclusions layered on top of the hard-coded list.",
+      "type": "object",
+      "properties": {
+        "mergedDays": {
+          "description": "Days after a work branch's PR merged before bst branch:prune deletes it (default 7). Zero is valid on purpose (an explicit 'delete everything merged already'), matching the --merged-days CLI flag's contract.",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991
+        },
+        "backupDays": {
+          "description": "Days before bst branch:prune deletes an agent/(repair|rebase)-backup/* ref whose parent branch has no merged PR to key on (default 30). Deliberately longer than mergedDays: a backup ref is the only surviving copy of history rebased away from its parent. Zero is valid on purpose, matching the --backup-days CLI flag's contract.",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991
+        },
+        "exclude": {
+          "description": "Branch-name globs added to bst branch:prune's built-in never-touch list (main, changeset-release/*, renovate/*, bst/coverage-metrics, bst/health-metrics, anything with an open PR or protected). Additive only -- there is no key that removes a built-in entry.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "labelSets": {
+      "description": "User-defined label sets for `bst forgejo:labels sync --set <name>`, keyed by set name. Read from the repo the command runs in, never from a --repo/--fleet target. A name that collides with a built-in set (e.g. the agent package's own 'agent' set) is a resolution-time error, not a silent override.",
+      "type": "object",
+      "propertyNames": {
+        "type": "string"
+      },
+      "additionalProperties": {
+        "type": "array",
+        "items": {
+          "type": "object",
+          "properties": {
+            "name": {
+              "type": "string",
+              "minLength": 1,
+              "description": "The label's full name, e.g. 'area/frontend'"
+            },
+            "color": {
+              "type": "string",
+              "pattern": "^#[0-9a-fA-F]{6}$",
+              "description": "Hex color with a leading '#', e.g. '#1f6feb'"
+            },
+            "description": {
+              "type": "string",
+              "description": "Shown in the forge UI beside the label"
+            },
+            "exclusive": {
+              "description": "Forgejo scoped-label exclusivity: at most one label of this set's scope per issue/PR (default false)",
+              "type": "boolean"
+            }
+          },
+          "required": ["name", "color", "description"],
+          "additionalProperties": false
+        }
+      }
     }
   },
   "additionalProperties": false

package/dist/bin.d.mts

@@ -1 +0,0 @@
-export { };

package/dist/index.d.mts

@@ -1,146 +0,0 @@
-import { z } from "zod";
-
-//#region src/utils/json.d.ts
-declare const PackageJsonSchema: z.ZodObject<{
-  name: z.ZodOptional<z.ZodString>;
-  version: z.ZodOptional<z.ZodString>;
-  private: z.ZodOptional<z.ZodBoolean>;
-  type: z.ZodOptional<z.ZodString>;
-  scripts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-  dependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-  devDependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-  peerDependencies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-  bin: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
-  exports: z.ZodOptional<z.ZodUnknown>;
-  main: z.ZodOptional<z.ZodString>;
-  types: z.ZodOptional<z.ZodString>;
-  typings: z.ZodOptional<z.ZodString>;
-  engines: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-  devEngines: z.ZodOptional<z.ZodObject<{
-    runtime: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
-      name: z.ZodString;
-      version: z.ZodOptional<z.ZodString>;
-      onFail: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>, z.ZodArray<z.ZodObject<{
-      name: z.ZodString;
-      version: z.ZodOptional<z.ZodString>;
-      onFail: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>]>>;
-  }, z.core.$loose>>;
-  repository: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-    url: z.ZodString;
-  }, z.core.$loose>]>>;
-  packageManager: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>;
-type PackageJson = z.infer<typeof PackageJsonSchema>;
-//#endregion
-//#region src/types.d.ts
-type CiPlatform = "github" | "forgejo" | "none";
-type ReleaseStrategy = "release-it" | "simple" | "changesets" | "none";
-type Formatter = "oxfmt" | "prettier";
-/** Whether the repo has TS/JS source at all. Never inferred from absence. */
-type Stack = "typescript" | "javascript" | "none";
-/** What compiles the project, if anything. */
-type Builder = "tsdown" | "vite" | "custom" | "none";
-/** User's answers from the interactive prompt or CLI flags. */
-interface ProjectConfig {
-  /** Project name (from package.json name or user input) */
-  name: string;
-  /** Project structure */
-  structure: "single" | "monorepo";
-  /** Include @bensandee/eslint-plugin oxlint plugin */
-  useEslintPlugin: boolean;
-  /** Formatter choice */
-  formatter: Formatter;
-  /** Whether the repo has TS/JS source at all */
-  stack: Stack;
-  /** What compiles the project */
-  builder: Builder;
-  /** Set up vitest with a starter test */
-  setupVitest: boolean;
-  /** CI platform choice */
-  ci: CiPlatform;
-  /** Set up Renovate for automated dependency updates */
-  setupRenovate: boolean;
-  /** Release management strategy */
-  releaseStrategy: ReleaseStrategy;
-  /** Opt-in: publish packages to npm registry */
-  publishNpm: boolean;
-  /** Opt-in: publish Docker images to a registry */
-  publishDocker: boolean;
-  /** Project type determines tsconfig base configuration */
-  projectType: "default" | "node" | "react" | "library";
-  /** Auto-detect and configure tsconfig bases for monorepo packages */
-  detectPackageTypes: boolean;
-  /** Target directory (default: cwd) */
-  targetDir: string;
-}
-/** Result from a single generator: what file was written and how. */
-interface GeneratorResult {
-  filePath: string;
-  action: "created" | "updated" | "skipped" | "archived" | "removed";
-  /** Human-readable description of what changed */
-  description: string;
-}
-/** Context passed to each generator function. */
-interface GeneratorContext {
-  config: ProjectConfig;
-  /** Absolute path to target directory */
-  targetDir: string;
-  /** Pre-parsed package.json from the target directory, or undefined if missing/invalid */
-  packageJson: PackageJson | undefined;
-  /** Check whether a file exists in the target directory */
-  exists: (relativePath: string) => boolean;
-  /** Read an existing file from the target directory, returns undefined if not found */
-  read: (relativePath: string) => string | undefined;
-  /** Write a file to the target directory (creating directories as needed) */
-  write: (relativePath: string, content: string) => void;
-  /** Remove a file from the target directory (no-op if not found) */
-  remove: (relativePath: string) => void;
-  /**
-   * Rewrite generated content the way the target repo's own formatter would — so a
-   * generated file is a fixed point of `pnpm format` and can't drift against
-   * `repo:sync --check`. Returns the content unchanged when the formatter isn't
-   * installed yet. See `utils/format.ts`.
-   */
-  format: (relativePath: string, content: string) => string;
-  /** Prompt user for conflict resolution on non-mergeable files */
-  confirmOverwrite: (relativePath: string) => Promise<"overwrite" | "skip">;
-}
-/** Generator function signature. */
-type Generator = (ctx: GeneratorContext) => Promise<GeneratorResult>;
-/** State detected from an existing project directory. */
-interface DetectedProjectState {
-  hasPackageJson: boolean;
-  hasTsconfig: boolean;
-  hasOxlintConfig: boolean;
-  /** Existing oxlint.config.ts already imports @bensandee/config/oxlint/recommended */
-  oxlintExtendsRecommended: boolean;
-  /** Legacy .oxlintrc.json found (should be migrated to oxlint.config.ts) */
-  hasLegacyOxlintJson: boolean;
-  hasGitignore: boolean;
-  hasVitestConfig: boolean;
-  hasTsdownConfig: boolean;
-  hasPnpmWorkspace: boolean;
-  hasKnipConfig: boolean;
-  hasRenovateConfig: boolean;
-  hasReleaseItConfig: boolean;
-  hasSimpleReleaseConfig: boolean;
-  hasChangesetsConfig: boolean;
-  /** Whether package.json has a repository field (needed for release workflows) */
-  hasRepositoryField: boolean;
-  /** Whether commit-and-tag-version is in root devDependencies (required for simple release strategy) */
-  hasCommitAndTagVersion: boolean;
-  /** Git remote origin URL (for inferring repository field) */
-  gitRemoteUrl: string | null;
-  /** Legacy tooling configs found */
-  legacyConfigs: LegacyConfig[];
-}
-declare const LEGACY_TOOLS: readonly ["eslint", "prettier", "jest", "webpack", "rollup"];
-type LegacyTool = (typeof LEGACY_TOOLS)[number];
-interface LegacyConfig {
-  tool: LegacyTool;
-  files: string[];
-}
-//#endregion
-export type { DetectedProjectState, Generator, GeneratorContext, GeneratorResult, LegacyConfig, ProjectConfig };

package/dist/index.mjs

@@ -1 +0,0 @@
-export {};