@bensandee/tooling 0.81.1 → 0.82.0

package/README.md

@@ -28,12 +28,12 @@ The tool auto-detects project structure, CI platform, project type, and Docker p
 
 ### Project management
 
-| Command                           | Description                                                                                                                                                                                             |
-| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `tooling repo:sync [dir]`         | Detect, generate, and sync project tooling (idempotent). First run prompts for release strategy, CI platform (if not detected), and formatter (if Prettier found). Subsequent runs are non-interactive. |
+| Command                           | Description                                                                                                                                                                                                |
+| --------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `tooling repo:sync [dir]`         | Detect, generate, and sync project tooling (idempotent). First run prompts for release strategy, CI platform (if not detected), and formatter (if Prettier found). Subsequent runs are non-interactive.    |
 | `tooling repo:sync --check [dir]` | Dry-run drift detection. Exits 1 if files would change, except drift confined to `.forgejo/workflows/`/`.github/workflows/`, which is reported on the `::bst-checks:: warn` marker at exit 0. CI-friendly. |
-| `tooling checks:run`              | Run project checks -- `bst checks:run --help` lists the ordered steps. Flags: `--skip`, `--add`, `--fail-fast`, `--verbose`, `--with-coverage`, `--coverage`, `--no-coverage`.                          |
-| `tooling lint:types`              | Type-aware linting (`oxlint --type-aware`, backed by `oxlint-tsgolint`). Flags: `--json`. See [Type-aware linting](#type-aware-linting) below.                                                          |
+| `tooling checks:run`              | Run project checks -- `bst checks:run --help` lists the ordered steps. Flags: `--skip`, `--add`, `--fail-fast`, `--verbose`, `--with-coverage`, `--coverage`, `--no-coverage`.                             |
+| `tooling lint:types`              | Type-aware linting (`oxlint --type-aware`, backed by `oxlint-tsgolint`). Flags: `--json`. See [Type-aware linting](#type-aware-linting) below.                                                             |
 
 **Flags:** `--yes` (accept all defaults), `--no-ci` (negates `--ci`), `--no-prompt` (negates `--prompt`), `--eslint-plugin`
 
@@ -172,15 +172,15 @@ Renovate moves the pinned `node` version, but only within its current major -- a
 
 ### Release management
 
-| Command                          | Description                                                                                                                                                                                                                                                         |
-| -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. A prerelease package moves only its own `<name>@<version>` tag; `<name>@latest`, `<name>@vX` and `<name>@vX.Y` move only for a release (see `release:simple`). Flags: `--dry-run`, `--verbose`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `RELEASE_TOKEN`.                                                                                                                       |
-| `tooling release:simple`         | Streamlined release using commit-and-tag-version. Flags: `--release-as`, `--first-release`, `--prerelease`, `--verbose`. Env: `RELEASE_TOKEN` (required on every platform).                                                                                         |
-| `tooling release:trigger`        | Trigger a release workflow.                                                                                                                                                                                                                                         |
-| `tooling workflow:dispatch`      | Dispatch a `workflow_dispatch` event for any workflow in any repo on the same git host. Flags: `--repo`, `--workflow` (required), `--ref`, `--input key=value` (repeatable).                                                                                        |
-| `tooling forgejo:create-release` | Create a Forgejo release from a tag.                                                                                                                                                                                                                                |
-| `tooling changesets:merge`       | Merge a changesets version PR. Gated on a live read of the PR; refuses an empty version PR. On Forgejo, a first `mergeable: false` re-reads once after a short delay before refusing, since the forge reports `false` both for a conflict and while still checking. |
-| `tooling webhook:send <url>`     | POST a structured JSON release payload with HMAC-SHA256 auth. Best-effort by default: a delivery failure is logged, annotated `::error::` under CI, and the command exits 0; `--strict` restores a non-zero exit. Flags: `--tag`, `--repository`, `--server-url`, `--actor`, `--prerelease`, `--strict`. Secret from `WEBHOOK_SECRET` env var.                                                                                      |
+| Command                          | Description                                                                                                                                                                                                                                                                                                                                    |
+| -------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. A prerelease package moves only its own `<name>@<version>` tag; `<name>@latest`, `<name>@vX` and `<name>@vX.Y` move only for a release (see `release:simple`). Flags: `--dry-run`, `--verbose`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `RELEASE_TOKEN`.                                   |
+| `tooling release:simple`         | Streamlined release using commit-and-tag-version. Flags: `--release-as`, `--first-release`, `--prerelease`, `--verbose`. Env: `RELEASE_TOKEN` (required on every platform).                                                                                                                                                                    |
+| `tooling release:trigger`        | Trigger a release workflow.                                                                                                                                                                                                                                                                                                                    |
+| `tooling workflow:dispatch`      | Dispatch a `workflow_dispatch` event for any workflow in any repo on the same git host. Flags: `--repo`, `--workflow` (required), `--ref`, `--input key=value` (repeatable).                                                                                                                                                                   |
+| `tooling forgejo:create-release` | Create a Forgejo release from a tag.                                                                                                                                                                                                                                                                                                           |
+| `tooling changesets:merge`       | Merge a changesets version PR. Gated on a live read of the PR; refuses an empty version PR. On Forgejo, a first `mergeable: false` re-reads once after a short delay before refusing, since the forge reports `false` both for a conflict and while still checking.                                                                            |
+| `tooling webhook:send <url>`     | POST a structured JSON release payload with HMAC-SHA256 auth. Best-effort by default: a delivery failure is logged, annotated `::error::` under CI, and the command exits 0; `--strict` restores a non-zero exit. Flags: `--tag`, `--repository`, `--server-url`, `--actor`, `--prerelease`, `--strict`. Secret from `WEBHOOK_SECRET` env var. |
 
 #### `release:simple`
 
@@ -296,22 +296,22 @@ For a repo whose released artifact carries its version somewhere other than `pac
 }
 ```
 
-| Field    | Description                                                                          |
-| -------- | ------------------------------------------------------------------------------------- |
+| Field    | Description                                                                                |
+| -------- | ------------------------------------------------------------------------------------------ |
 | `file`   | Path to the file whose version line gets stamped, relative to the project root (required). |
-| `prefix` | Literal string (never a pattern) the target line must start with (required).          |
-| `suffix` | Literal string (never a pattern) the target line must end with (optional; default: none). |
+| `prefix` | Literal string (never a pattern) the target line must start with (required).               |
+| `suffix` | Literal string (never a pattern) the target line must end with (optional; default: none).  |
 
 `prefix` and `suffix` are literal strings, not regexes -- the target line is read straight off `prefix + version + suffix`:
 
 | Target                              | `prefix`                    | `suffix`       |
-| ------------------------------------ | ---------------------------- | -------------- |
-| `Version: 1.2.3` (WordPress theme)  | `"Version: "`                | --             |
-| ` * Version: 1.2.3` (plugin header) | `" * Version: "`             | --             |
-| `Version: v1.2.3`                   | `"Version: v"`               | --             |
-| `__version__ = "1.2.3"`              | `"__version__ = \""`         | `"\""`         |
-| `<version>1.2.3</version>`          | `"<version>"`                | `"</version>"` |
-| `define('FOO_VERSION', '1.2.3');`   | `"define('FOO_VERSION', '"`  | `"');"`        |
+| ----------------------------------- | --------------------------- | -------------- |
+| `Version: 1.2.3` (WordPress theme)  | `"Version: "`               | --             |
+| ` * Version: 1.2.3` (plugin header) | `" * Version: "`            | --             |
+| `Version: v1.2.3`                   | `"Version: v"`              | --             |
+| `__version__ = "1.2.3"`             | `"__version__ = \""`        | `"\""`         |
+| `<version>1.2.3</version>`          | `"<version>"`               | `"</version>"` |
+| `define('FOO_VERSION', '1.2.3');`   | `"define('FOO_VERSION', '"` | `"');"`        |
 
 `release:assets` stamps every configured file before building assets, then verifies the stamp survived the build. Exactly one line in the file must match `prefix`/`suffix` or the release fails loudly -- zero matches means the config is broken, and more than one is an ambiguous config that needs a more specific `prefix` or a second entry. The stamp is never committed: the tracked copy of the file keeps its placeholder version on purpose, so there is only ever one source of truth (`package.json#version`) and nothing to drift. Run `bst release:assets --dry-run` to rehearse a `versionStamp` config locally, with no forge access and no release -- the rehearsal does still write the stamp, so it leaves the tracked file modified in your working tree. Discard it with `git checkout -- <file>`; committing it is exactly the drift this design exists to prevent.
 
@@ -619,7 +619,7 @@ There is exactly one credential to be careful with, and its lifetime is the part
 
 |           | Board token                                                       | Session cookie it mints |
 | --------- | ----------------------------------------------------------------- | ----------------------- |
-| Lifetime  | the agent **process** -- a service, so weeks                     | 12 hours                |
+| Lifetime  | the agent **process** -- a service, so weeks                      | 12 hours                |
 | Scope     | label transitions + comments + kill, every repo the bot can write | the board, nothing else |
 | Holders   | one, shared                                                       | one browser             |
 | Persisted | never                                                             | never                   |

package/dist/bin.mjs

@@ -407,7 +407,7 @@ function loadEnvFileForBin(rawArgs, io = processIo) {
 		if (resolveJsonMode(rawArgs)) {
 			const document = buildErrorDocument({
 				command: resolveCommandName(rawArgs),
-				version: "0.81.1",
+				version: "0.82.0",
 				kind: "usage",
 				message
 			});
@@ -1964,8 +1964,13 @@ const DeployConfigSchema = z.strictObject({
 });
 const AgentConfigSchema = z.strictObject({
 	autonomy: z.boolean().optional().meta({ description: "Opt into interior autonomy (default false). When a phase's latest rationale reports readiness \"ready\" with an empty openQuestions[] and the review phase is clean, the agent applies the existing plan -> implement -> review -> park-at-mergeable advance itself instead of parking for a human. Never applies to the design/spec gate or the final merge from the mergeable terminal -- those always wait on a human. Also arms the trunk-red detector: when this repo's default branch combined status settles red, the agent files a tracking issue naming the failing checks and labels it agent/spec, starting the fix through the ordinary spec/plan/implement/review pipeline. It also closes that issue, with a comment, if the default branch recovers on its own before a human acts on it." }),
-	preRunRebase: z.boolean().optional().meta({ description: "Attempt a clean-only rebase of the work branch onto the default branch before the implement (execute) phase's container starts (default true). A clean rebase runs the container on the rebased branch; a conflicting one is aborted, reported on the run's ledger comment, and the run still proceeds on the un-rebased branch for a later agent/repair cycle to resolve -- it never fails the run. Set false to skip the attempt entirely for this repo: no fetch, no rebase, no abort, and the branch is worked exactly as cloned." }),
+	preRunRebase: z.boolean().optional().meta({ description: "Attempt a clean-only rebase of the work branch onto the default branch before the implement (execute) phase's container starts (default true). A clean rebase runs the container on the rebased branch; a conflicting one is aborted, reported on the run's status comment, and the run still proceeds on the un-rebased branch -- it never fails the run. Two consecutive conflicting attempts hand the unit to agent/repair before any container runs, unless the branch already contains the default branch (a hand-made merge, which leaves a repair nothing to rebase), and a timeout or a failed rebase never counts toward that pair. Set false to skip the attempt entirely for this repo: no fetch, no rebase, no abort, and the branch is worked exactly as cloned." }),
 	backlog: z.boolean().optional().meta({ description: "Whether the agent may self-trigger backlog runs consuming this repo's .agent/findings/ ledger (default: on wherever the ledger exists, which only happens in a repo whose own review loop wrote it). A backlog run opens a pull request that fixes or refutes the pending findings; false disarms it, leaving the ledger to accumulate for a human." }),
+	lintSweep: z.strictObject({
+		enabled: z.boolean().optional().meta({ description: "Whether the agent's lint-warning sweep may open pull requests in this repo (default: on). false disarms it; the repo is then never cloned or measured by it." }),
+		minWarnings: z.number().int().nonnegative().optional().meta({ description: "How many oxlint warnings the default branch must carry before the sweep opens a pull request (default 5). Below the floor the warn marker on checks:run is the whole response." }),
+		cooldownDays: z.number().int().nonnegative().optional().meta({ description: "Days after a lint-sweep pull request merged or closed before the sweep may open another (default 7): a merged sweep whose declined warnings survive must not re-file them the next morning." })
+	}).optional().meta({ description: "The lint-warning sweep: a periodic agent job that measures this repo's oxlint warnings on its default branch in a container and, past minWarnings, opens a pull request carrying a generated plan for an agent/implement run to work off." }),
 	priority: z.record(z.string(), z.enum([
 		"critical",
 		"high",
@@ -1974,6 +1979,14 @@ const AgentConfigSchema = z.strictObject({
 	])).optional().meta({ description: "Map this repo's own issue-label names onto the agent's four priority levels, e.g. {\"P1\": \"critical\", \"P4\": \"low\"}. The map UNIONS with the built-in priority/<level> names rather than replacing them, and the agent does not create aliased labels -- the repo owns names the agent did not choose. Priority affects claim order only: it never changes a run's model, effort, or any budget." }),
 	triageAnalysis: z.boolean().optional().meta({ description: "Whether the agent may route its own agent-note/human-triage-needed issues through the agent/analyze stage (default: off). Unlike agent.backlog, which defaults on, this defaults off: a backlog run batches every pending finding into one container, while triage routing spends one container per issue -- arming it is the reversible direction, not disarming it." })
 });
+const TolerantAgentConfigSchema = z.object({
+	...AgentConfigSchema.shape,
+	lintSweep: tolerantBlock(z.strictObject({
+		enabled: z.boolean().optional(),
+		minWarnings: z.number().int().nonnegative().optional(),
+		cooldownDays: z.number().int().nonnegative().optional()
+	})).optional()
+});
 const BranchPruneConfigSchema = z.strictObject({
 	mergedDays: z.number().int().nonnegative().optional().meta({ description: "Days after a work branch's PR merged before bst branch:prune deletes it (default 7). Zero is valid on purpose (an explicit 'delete everything merged already'), matching the --merged-days CLI flag's contract." }),
 	backupDays: z.number().int().nonnegative().optional().meta({ description: "Days before bst branch:prune deletes an agent/(repair|rebase)-backup/* ref whose parent branch has no merged PR to key on (default 30). Deliberately longer than mergedDays: a backup ref is the only surviving copy of history rebased away from its parent. Zero is valid on purpose, matching the --backup-days CLI flag's contract." }),
@@ -2081,7 +2094,7 @@ const TolerantToolingConfigSchema = z.object({
 	deploy: tolerantBlock(DeployConfigSchema).optional(),
 	checks: tolerantBlock(ChecksConfigSchema).optional(),
 	lint: tolerantBlock(LintConfigSchema).optional(),
-	agent: tolerantBlock(AgentConfigSchema).optional(),
+	agent: TolerantAgentConfigSchema.optional(),
 	branchPrune: tolerantBlock(BranchPruneConfigSchema).optional(),
 	releaseAssets: z.array(tolerantBlock(ReleaseAssetSchema)).optional(),
 	versionStamp: z.array(tolerantBlock(VersionStampSchema)).optional(),
@@ -5495,8 +5508,8 @@ function declaredPublishRegistries(targetDir, structure, rootPackageJson) {
 * shape of custom regex manager in the root `renovate.json` can rewrite both this version and this
 * digest (`customManagers` entries scoped to this file).
 */
-const MISE_VERSION = "2026.9.14";
-const MISE_LINUX_X64_SHA256 = "2b289d1b3074e0b1d3f95bad0bd78bbc517c1a5bcb020cbc1643d260f5d1a351";
+const MISE_VERSION = "2026.9.16";
+const MISE_LINUX_X64_SHA256 = "b6f8757201f6a2ee799f45f3f52ef7ca0b4071523637dc3b0b24264dd3333518";
 /** Where generated Forgejo workflows fetch the shared mise setup action: a composite action in
 * `bensandee/common`, on the forge every fleet repo lives on. GitHub cannot reach it; the
 * generators keep inline steps there. */
@@ -6343,17 +6356,17 @@ function perPackageDevDeps(config) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["typescript"];
 		deps["@types/node"] = {
 			"@changesets/cli": "3.0.3",
@@ -6361,17 +6374,17 @@ function perPackageDevDeps(config) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["@types/node"];
 	}
 	if (config.builder === "tsdown") deps["tsdown"] = {
@@ -6380,17 +6393,17 @@ function perPackageDevDeps(config) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["tsdown"];
 	return deps;
 }
@@ -6410,17 +6423,17 @@ function vitestDevDeps() {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["vitest"],
 		"@vitest/coverage-v8": {
 			"@changesets/cli": "3.0.3",
@@ -6428,17 +6441,17 @@ function vitestDevDeps() {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["@vitest/coverage-v8"]
 	};
 }
@@ -6455,17 +6468,17 @@ function rootDevDeps(config) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["lefthook"] };
 	if (config.stack !== "none") {
 		deps["knip"] = {
@@ -6474,17 +6487,17 @@ function rootDevDeps(config) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["knip"];
 		deps["oxlint"] = {
 			"@changesets/cli": "3.0.3",
@@ -6492,17 +6505,17 @@ function rootDevDeps(config) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["oxlint"];
 		Object.assign(deps, vitestDevDeps());
 	}
@@ -6512,17 +6525,17 @@ function rootDevDeps(config) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["oxlint-tsgolint"];
 	return deps;
 }
@@ -6556,17 +6569,17 @@ function addReleaseDeps(deps, config) {
 				"@types/node": "24.13.5",
 				"@vitest/coverage-v8": "5.0.1",
 				"commit-and-tag-version": "13.2.1",
-				"knip": "6.37.0",
+				"knip": "6.38.0",
 				"lefthook": "2.1.14",
-				"oxfmt": "0.68.0",
-				"oxlint": "1.83.0",
-				"oxlint-tsgolint": "7.0.2002",
-				"prettier": "3.9.8",
+				"oxfmt": "0.71.0",
+				"oxlint": "1.85.0",
+				"oxlint-tsgolint": "7.0.2003",
+				"prettier": "3.9.9",
 				"release-it": "21.1.0",
 				"tsdown": "0.23.0",
 				"typescript": "6.0.3",
 				"vitest": "5.0.1",
-				"pnpm": "11.27.0"
+				"pnpm": "11.27.1"
 			}["release-it"];
 			if (config.structure === "monorepo") deps["@release-it/bumper"] = {
 				"@changesets/cli": "3.0.3",
@@ -6574,17 +6587,17 @@ function addReleaseDeps(deps, config) {
 				"@types/node": "24.13.5",
 				"@vitest/coverage-v8": "5.0.1",
 				"commit-and-tag-version": "13.2.1",
-				"knip": "6.37.0",
+				"knip": "6.38.0",
 				"lefthook": "2.1.14",
-				"oxfmt": "0.68.0",
-				"oxlint": "1.83.0",
-				"oxlint-tsgolint": "7.0.2002",
-				"prettier": "3.9.8",
+				"oxfmt": "0.71.0",
+				"oxlint": "1.85.0",
+				"oxlint-tsgolint": "7.0.2003",
+				"prettier": "3.9.9",
 				"release-it": "21.1.0",
 				"tsdown": "0.23.0",
 				"typescript": "6.0.3",
 				"vitest": "5.0.1",
-				"pnpm": "11.27.0"
+				"pnpm": "11.27.1"
 			}["@release-it/bumper"];
 			break;
 		case "simple":
@@ -6594,17 +6607,17 @@ function addReleaseDeps(deps, config) {
 				"@types/node": "24.13.5",
 				"@vitest/coverage-v8": "5.0.1",
 				"commit-and-tag-version": "13.2.1",
-				"knip": "6.37.0",
+				"knip": "6.38.0",
 				"lefthook": "2.1.14",
-				"oxfmt": "0.68.0",
-				"oxlint": "1.83.0",
-				"oxlint-tsgolint": "7.0.2002",
-				"prettier": "3.9.8",
+				"oxfmt": "0.71.0",
+				"oxlint": "1.85.0",
+				"oxlint-tsgolint": "7.0.2003",
+				"prettier": "3.9.9",
 				"release-it": "21.1.0",
 				"tsdown": "0.23.0",
 				"typescript": "6.0.3",
 				"vitest": "5.0.1",
-				"pnpm": "11.27.0"
+				"pnpm": "11.27.1"
 			}["commit-and-tag-version"];
 			break;
 		case "changesets": deps["@changesets/cli"] = {
@@ -6613,17 +6626,17 @@ function addReleaseDeps(deps, config) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["@changesets/cli"];
 	}
 }
@@ -6820,17 +6833,17 @@ function applyMetadataDefaults(pkg, ctx, changes) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["pnpm"];
 	const desiredPm = pinnedPnpm ? `pnpm@${pinnedPnpm}` : void 0;
 	if (desiredPm) {
@@ -6871,7 +6884,7 @@ function buildManagedDevDeps(ctx) {
 	const devDeps = { ...rootDevDeps(ctx.config) };
 	if (!isMonorepo) Object.assign(devDeps, perPackageDevDeps(ctx.config));
 	if (ctx.config.stack !== "none" || ctx.config.ci === "forgejo") devDeps["@bensandee/config"] = isWorkspacePackage(ctx, "@bensandee/config") ? "workspace:*" : "0.14.5";
-	if (!isWorkspacePackage(ctx, "@bensandee/tooling")) devDeps["@bensandee/tooling"] = "0.81.1";
+	if (!isWorkspacePackage(ctx, "@bensandee/tooling")) devDeps["@bensandee/tooling"] = "0.82.0";
 	if (ctx.config.useEslintPlugin && ctx.config.stack !== "none") devDeps["@bensandee/eslint-plugin"] = isWorkspacePackage(ctx, "@bensandee/eslint-plugin") ? "workspace:*" : "0.15.2";
 	if (ctx.config.formatter === "oxfmt") devDeps["oxfmt"] = {
 		"@changesets/cli": "3.0.3",
@@ -6879,17 +6892,17 @@ function buildManagedDevDeps(ctx) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["oxfmt"];
 	if (ctx.config.formatter === "prettier") devDeps["prettier"] = {
 		"@changesets/cli": "3.0.3",
@@ -6897,17 +6910,17 @@ function buildManagedDevDeps(ctx) {
 		"@types/node": "24.13.5",
 		"@vitest/coverage-v8": "5.0.1",
 		"commit-and-tag-version": "13.2.1",
-		"knip": "6.37.0",
+		"knip": "6.38.0",
 		"lefthook": "2.1.14",
-		"oxfmt": "0.68.0",
-		"oxlint": "1.83.0",
-		"oxlint-tsgolint": "7.0.2002",
-		"prettier": "3.9.8",
+		"oxfmt": "0.71.0",
+		"oxlint": "1.85.0",
+		"oxlint-tsgolint": "7.0.2003",
+		"prettier": "3.9.9",
 		"release-it": "21.1.0",
 		"tsdown": "0.23.0",
 		"typescript": "6.0.3",
 		"vitest": "5.0.1",
-		"pnpm": "11.27.0"
+		"pnpm": "11.27.1"
 	}["prettier"];
 	addReleaseDeps(devDeps, ctx.config);
 	return devDeps;
@@ -6966,17 +6979,17 @@ async function generatePackageJson(ctx) {
 			"@types/node": "24.13.5",
 			"@vitest/coverage-v8": "5.0.1",
 			"commit-and-tag-version": "13.2.1",
-			"knip": "6.37.0",
+			"knip": "6.38.0",
 			"lefthook": "2.1.14",
-			"oxfmt": "0.68.0",
-			"oxlint": "1.83.0",
-			"oxlint-tsgolint": "7.0.2002",
-			"prettier": "3.9.8",
+			"oxfmt": "0.71.0",
+			"oxlint": "1.85.0",
+			"oxlint-tsgolint": "7.0.2003",
+			"prettier": "3.9.9",
 			"release-it": "21.1.0",
 			"tsdown": "0.23.0",
 			"typescript": "6.0.3",
 			"vitest": "5.0.1",
-			"pnpm": "11.27.0"
+			"pnpm": "11.27.1"
 		}["pnpm"]}`
 	};
 	ctx.write(filePath, JSON.stringify(pkg, null, 2) + "\n");
@@ -7987,17 +8000,36 @@ async function generateOxlint(ctx) {
 * format gate on the branch it was filed against -- blocking the pull request over a file no
 * human wrote and nobody maintains.
 *
-* `**\/*.md` is excluded because oxfmt's markdown printer, inherited from prettier, is not
-* idempotent: formatting an already-formatted file changes it again (task-list indentation grows
-* four spaces per pass), so a format-then-check gate fails on its own output. The fix landed on
-* prettier's `main` (prettier/prettier#19647, closing prettier/prettier#19644) but as of 2026-08-26
-* has not shipped in a release oxfmt can port from. Drop this entry once oxfmt ships the ported fix.
+* `docs/**\/retired/` is excluded because of what those files are, not only because of the
+* formatter bug below: the plan lifecycle defines a retired doc as a historical record nobody
+* maintains, so a reformat would rewrite hundreds of them for no reader and bury any real change
+* in the churn. It is also where every still-unstable file in the measured corpus lives. The
+* pattern covers both retired layouts the docs lifecycle knows: `docs/superpowers/*\/retired/`
+* and the legacy `docs/retired/`.
+*
+* oxfmt's markdown printer is still not idempotent, in one bounded way: an inline code span
+* broken across a line inside a list item whose continuation lines are indented deeper than the
+* item's content moves two columns left per pass until it reaches column 0, settling within four
+* passes. Active docs reach a fixed point in one pass; a `format --check` that fails right after
+* `pnpm format` is fixed by running `pnpm format` again until it changes nothing.
 */
 const BASE_IGNORE_PATTERNS = [
 	".claude",
 	".agent/findings",
-	"**/*.md"
+	"docs/**/retired/"
 ];
+/**
+* Exact patterns bst required in earlier versions and now removes on sync, because the merge in
+* `generateOxfmt` only ever appends: dropping a pattern from the base list would leave every
+* existing .oxfmtrc.json holding it forever.
+*
+* `**\/*.md` is here because bst wrote it from 2026-08-26 until markdown formatting was
+* re-enabled, and the 42 files it was excluding were all retired docs -- which the base list
+* still excludes by directory. A repo that wants its markdown left unformatted opts out with the
+* different spelling `*.md`, which matches every markdown file at any depth but is not an exact
+* match for a superseded entry, so the strip leaves it alone.
+*/
+const SUPERSEDED_IGNORE_PATTERNS = /* @__PURE__ */ new Set(["**/*.md"]);
 /** Extra ignore patterns when a release strategy generates CHANGELOGs. */
 const RELEASE_IGNORE_PATTERNS = ["**/CHANGELOG.md"];
 /**
@@ -8073,19 +8105,30 @@ async function generateOxfmt(ctx) {
 	}
 	const parsed = parseResult.data;
 	const ignorePatterns = Array.isArray(parsed["ignorePatterns"]) ? parsed["ignorePatterns"] : [];
-	const existingSet = new Set(ignorePatterns.filter((p) => typeof p === "string"));
+	const strings = ignorePatterns.filter((p) => typeof p === "string");
+	const existingSet = new Set(strings);
 	const missing = required.filter((p) => !existingSet.has(p));
-	if (missing.length === 0) return {
+	const kept = strings.filter((p) => !SUPERSEDED_IGNORE_PATTERNS.has(p));
+	const removed = strings.filter((p) => SUPERSEDED_IGNORE_PATTERNS.has(p));
+	const nonStringPatterns = ignorePatterns.filter((p) => typeof p !== "string");
+	if (missing.length === 0 && removed.length === 0) return {
 		filePath,
 		action: "skipped",
 		description: "Existing oxfmt config already has required ignorePatterns"
 	};
-	parsed["ignorePatterns"] = [...ignorePatterns, ...missing];
+	parsed["ignorePatterns"] = [
+		...kept,
+		...nonStringPatterns,
+		...missing
+	];
 	ctx.write(filePath, JSON.stringify(parsed, null, 2) + "\n");
+	const changeParts = [];
+	if (missing.length > 0) changeParts.push(`Added ignorePatterns: ${missing.join(", ")}`);
+	if (removed.length > 0) changeParts.push(`removed: ${removed.join(", ")}`);
 	return {
 		filePath,
 		action: "updated",
-		description: `Added ignorePatterns: ${missing.join(", ")}`
+		description: changeParts.join("; ")
 	};
 }
 async function generatePrettier(ctx) {
@@ -11537,9 +11580,18 @@ const COMMENTS_GUIDE_BODY = [
 	"- **The code is the fact.** When a comment disagrees with it, fix it in one line or delete it -- never grow one to argue the code is right."
 ].join("\n");
 /**
+* Exported because the agent's execute prompt names the same tokens, and a shared constant is
+* what keeps a guide and a prompt from naming different ones.
+*/
+const TEST_EVIDENCE_PREFIXES = {
+	red: "Red:",
+	noTest: "No test:"
+};
+/**
 * The test rules, measured like the comment rules: an audit of this repo's suite found about
 * 290 cases that could not fail, echoed a constant, pinned a sentence, or duplicated a sibling.
-* Each bullet names one of those shapes, because the repo's general "test behaviour, not
+* The opening bullets state the test-first cycle and its commit-body evidence line; each bullet
+* after them names one of those audited shapes, because the repo's general "test behaviour, not
 * wording" rule had not prevented them.
 */
 const TESTING_GUIDE_BODY = [
@@ -11548,6 +11600,8 @@ const TESTING_GUIDE_BODY = [
 	"**A test earns its place by failing when behaviour changes.** Prove each new one red by undoing the change it covers: a test that cannot fail reads as coverage, which is worse than none.",
 	"",
 	"- Write the test before the code it covers, and watch it fail for the reason you expect. A test that passes on its first run is testing something that already works.",
+	`- Carry the evidence in the commit body: \`${TEST_EVIDENCE_PREFIXES.red} <test name> failed: <reason>\` when the test ran red first, or \`${TEST_EVIDENCE_PREFIXES.noTest} <reason>\` when there was none to write; the reason is one clause (a missing export, a wrong value, a thrown error) so a reviewer can tell a run that followed the cycle from one that did not.`,
+	`- A change with no test to write is allowed, but the \`${TEST_EVIDENCE_PREFIXES.noTest}\` line always states the reason -- a plan's retire-the-plan task and a docs-only change are the named examples. "It is small" is not a reason -- a small change has a small test.`,
 	"- Never assert that a constant equals its own literal (a default, threshold, model name, label). Test the logic that reads it.",
 	"- Never pin prose with `toContain`/`toBe`. Snapshot it, or assert a property: ordering, absence, output that changes with an input, a character set or length.",
 	"- One case per branch. A new literal down a path already tested, or the same call through a one-line wrapper, is a duplicate.",
@@ -11617,7 +11671,7 @@ const PLANNING_GUIDE_BODY = [
 	"",
 	"- Check the plan's premises against the tree before building on them. \"Today X is broken\" is a claim: read the code that handles X, not just the line that throws.",
 	"- Label each task `Task <n>:` at the start of its heading or checkbox, numbered from 1, so `bst plan:brief` can find it.",
-	"- Give each task what makes it unambiguous and nothing more: a test's name and its assertions with the spec's exact values, a code change's exact signature and file, a command with the output that means it passed. Write out a body only for an algorithm the signature and tests do not determine. Work that uses another task's result names that task's interfaces, never repeats its code.",
+	`- Give each task what makes it unambiguous and nothing more: a test's name and its assertions with the spec's exact values and why that test fails before the change, a code change's exact signature and file, a command with the output that means it passed. Write out a body only for an algorithm the signature and tests do not determine. Work that uses another task's result names that task's interfaces, never repeats its code. A task with no test to write says \`${TEST_EVIDENCE_PREFIXES.noTest} <reason>\` in the plan, so the executor inherits the call instead of making it cold.`,
 	"- Keep tasks small. Each one runs its own test cycle and ends in a result that can be checked on its own: write the failing test, watch it fail, make it pass, commit. A run cut off partway then loses one task, not the plan. A large plan is fine; a large task is not.",
 	"- A plan that builds on earlier work opens with a task that checks the prerequisite exists, and records a `**Blocked:**` note if it does not, instead of rebuilding it.",
 	"- State a judgement that recurs across many places once, as a rule in the plan, so every task decides it the same way.",
@@ -11627,7 +11681,7 @@ const PLANNING_GUIDE_BODY = [
 	"",
 	"## Working through a plan",
 	"",
-	"Do the tasks in order, commit after each, and tick a box only once its result is verified. A box you cannot finish keeps its text exactly as written and gets one note underneath:",
+	`Do the tasks in order, commit after each, and tick a box only once its result is verified. Each task starts red -- write its test, watch it fail, make it pass -- and its commit body carries the testing guide's \`${TEST_EVIDENCE_PREFIXES.red}\` or \`${TEST_EVIDENCE_PREFIXES.noTest}\` line. A box you cannot finish keeps its text exactly as written and gets one note underneath:`,
 	"",
 	"- `**Progress:**` -- partly done: what landed, what remains, where to pick up. The next pass resumes it.",
 	"- `**Blocked:**` -- tried and failing: the error. The next pass retries it.",
@@ -11784,6 +11838,8 @@ const JS_PRECOMMIT_RUNG = "- **Before a commit** -- `pnpm exec oxlint <the files
 const CHECK_CADENCE_TAIL = [
 	"- **Once per task or plan phase** -- `pnpm check --skip 'docker:*'`. This is the gate.",
 	"",
+	"- **When `format --check` still fails after `pnpm format`** -- run `pnpm format` again until it changes nothing. A code span broken across a line inside a list item can take up to four passes to settle.",
+	"",
 	"Batch the fixes, not the runs: re-running a checker after every single fix turns one report into eight."
 ];
 function checkCadenceBody(config) {
@@ -11833,6 +11889,7 @@ const HEALTH_RULE_TAIL = [
 	"**An exemption drops a module from one outlier list and nothing else.** Every module over a fan limit keeps a per-module ceiling in `health-baseline.json`, exempt or not, and growing past that ceiling fails the gate.",
 	"",
 	"When a real value edge trips the gate, the remedy depends on the module:",
+	"",
 	"- No `health.exempt` entry: split the module, or record a justified entry. The justification names what the hub wires by construction, which is what a copy would hide.",
 	"- An exempt hub gaining an edge inside its justification's scope: adopt the growth with `bst health:check --update-baseline --reset` in the pull request that adds the edge, and say why in that PR's plan or commit. The justification is the durable record of what the hub may wire; the raise needs no second record when the new edge is already named there.",
 	"- An exempt hub gaining an edge outside that scope: split the module, or widen the justification in `.tooling.json` as a reviewed edit of its own. A ceiling raised without either is the thing a reviewer should question.",
@@ -11895,7 +11952,7 @@ function agentGuides(config, coverageEnabled, healthEnabled) {
 	return [
 		{
 			name: "testing.md",
-			trigger: "write or change a test",
+			trigger: "change source, or write or change a test",
 			body: TESTING_GUIDE_BODY,
 			enabled: true
 		},
@@ -12011,7 +12068,7 @@ function writeGuide(ctx, guide) {
 		action: "skipped",
 		description: "Ignored via tooling:ignore comment"
 	};
-	const content = `${GUIDE_MANAGED_HEADER}\n${guide.body}\n`;
+	const content = formattedTemplate(ctx, filePath, `${GUIDE_MANAGED_HEADER}\n${guide.body}\n`);
 	if (existing === content) return {
 		filePath,
 		action: "skipped",
@@ -12070,6 +12127,7 @@ function syncClaudeMdFile(ctx, guides) {
 	const existing = ctx.read(FILE);
 	let updated = existing ?? STARTER_CLAUDE_MD;
 	for (const block of blocks) updated = applyBlock(updated, block);
+	updated = formattedTemplate(ctx, FILE, updated);
 	if (!existing) {
 		ctx.write(FILE, updated);
 		return {
@@ -12262,7 +12320,7 @@ function reportFailures(failed, command) {
 function generateMigratePrompt(results, config, detected) {
 	const sections = [];
 	const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-	sections.push(`# Migration Prompt\n\n_Generated by \`@bensandee/tooling@0.81.1 repo:sync\` on ${timestamp}_\n`);
+	sections.push(`# Migration Prompt\n\n_Generated by \`@bensandee/tooling@0.82.0 repo:sync\` on ${timestamp}_\n`);
 	const changed = results.filter((r) => r.action === "created" || r.action === "updated" || r.action === "archived");
 	if (changed.length > 0) {
 		const items = changed.map((r) => {
@@ -22245,14 +22303,15 @@ function resolveLabelSet(sets, name) {
 * same reason its neighbour does: it parses the CLI's own `.tooling.json` config schema, which the
 * forge-generic package must not know about.
 */
-/** Tolerant of an unknown sibling key (`z.looseObject`) and of a key `agent` itself does not
-* declare (`tolerantBlock`): this backs a report (the autonomy-ladder startup report and the
-* priority-label sweep), so a newer repo's `agent.<newKey>` must report that repo's real
-* autonomy setting instead of `unknown`. Its neighbour, `branch-prune-reads.ts`'s
-* `ToolingConfigBranchPruneShapeSchema`, stays strict on the `branchPrune` block itself --
-* that asymmetry is deliberate: this read backs a report, where a silently-ignored key costs
-* nothing; that one backs a delete, where it would cost an un-excluded branch. */
-const ToolingConfigAgentShapeSchema = z.looseObject({ agent: tolerantBlock(AgentConfigSchema).optional() });
+/** Tolerant of an unknown sibling key (`z.looseObject`) and of a key that `agent` or one of its
+* nested blocks does not declare (`TolerantAgentConfigSchema`): this backs a report (the
+* autonomy-ladder startup report and the priority-label sweep), so a newer repo's
+* `agent.<newKey>` must report that repo's real autonomy setting instead of `unknown`. Its
+* neighbour, `branch-prune-reads.ts`'s `ToolingConfigBranchPruneShapeSchema`, stays strict on the
+* `branchPrune` block itself -- that asymmetry is deliberate: this read backs a report, where a
+* silently-ignored key costs nothing; that one backs a delete, where it would cost an un-excluded
+* branch. */
+const ToolingConfigAgentShapeSchema = z.looseObject({ agent: TolerantAgentConfigSchema.optional() });
 /**
 * Fetch and validate `.tooling.json#agent` straight from the forge at `ref`. Resolves rather than
 * throws in every case -- a transport failure, a non-404 status, unparsable JSON, or a schema
@@ -31453,7 +31512,7 @@ setForgejoLogger(log$1);
 * `local <sha>[-dirty]` otherwise -- so an artifact built from the working tree
 * can't pass itself off as the published release whose version it carries.
 */
-const displayVersion = "0.81.1";
+const displayVersion = "0.82.0";
 /**
 * Wait until a stream's internally-buffered data has been flushed to the OS.
 *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bensandee/tooling",
-  "version": "0.81.1",
+  "version": "0.82.0",
   "description": "CLI tool to bootstrap and maintain standardized TypeScript project tooling",
   "license": "MIT",
   "repository": {
@@ -34,11 +34,11 @@
     "@clack/prompts": "^1.8.1",
     "citty": "^0.2.2",
     "cross-spawn": "^7.0.6",
-    "dependency-cruiser": "^18.3.1",
+    "dependency-cruiser": "^18.4.0",
     "json5": "^2.2.3",
     "jsonc-parser": "^3.3.1",
     "picomatch": "^4.0.7",
-    "smol-toml": "^1.8.0",
+    "smol-toml": "^1.9.0",
     "yaml": "^2.9.1",
     "zod": "^4.6.5"
   },
@@ -51,8 +51,8 @@
     "@types/node": "24.13.5",
     "@types/picomatch": "4.0.3",
     "commit-and-tag-version": "13.2.1",
-    "oxfmt": "0.68.0",
-    "prettier": "3.9.8",
+    "oxfmt": "0.71.0",
+    "prettier": "3.9.9",
     "release-it": "21.1.0",
     "tsdown": "0.23.0"
   },

package/tooling.schema.json

@@ -605,13 +605,36 @@
           "type": "boolean"
         },
         "preRunRebase": {
-          "description": "Attempt a clean-only rebase of the work branch onto the default branch before the implement (execute) phase's container starts (default true). A clean rebase runs the container on the rebased branch; a conflicting one is aborted, reported on the run's ledger comment, and the run still proceeds on the un-rebased branch for a later agent/repair cycle to resolve -- it never fails the run. Set false to skip the attempt entirely for this repo: no fetch, no rebase, no abort, and the branch is worked exactly as cloned.",
+          "description": "Attempt a clean-only rebase of the work branch onto the default branch before the implement (execute) phase's container starts (default true). A clean rebase runs the container on the rebased branch; a conflicting one is aborted, reported on the run's status comment, and the run still proceeds on the un-rebased branch -- it never fails the run. Two consecutive conflicting attempts hand the unit to agent/repair before any container runs, unless the branch already contains the default branch (a hand-made merge, which leaves a repair nothing to rebase), and a timeout or a failed rebase never counts toward that pair. Set false to skip the attempt entirely for this repo: no fetch, no rebase, no abort, and the branch is worked exactly as cloned.",
           "type": "boolean"
         },
         "backlog": {
           "description": "Whether the agent may self-trigger backlog runs consuming this repo's .agent/findings/ ledger (default: on wherever the ledger exists, which only happens in a repo whose own review loop wrote it). A backlog run opens a pull request that fixes or refutes the pending findings; false disarms it, leaving the ledger to accumulate for a human.",
           "type": "boolean"
         },
+        "lintSweep": {
+          "description": "The lint-warning sweep: a periodic agent job that measures this repo's oxlint warnings on its default branch in a container and, past minWarnings, opens a pull request carrying a generated plan for an agent/implement run to work off.",
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "description": "Whether the agent's lint-warning sweep may open pull requests in this repo (default: on). false disarms it; the repo is then never cloned or measured by it.",
+              "type": "boolean"
+            },
+            "minWarnings": {
+              "description": "How many oxlint warnings the default branch must carry before the sweep opens a pull request (default 5). Below the floor the warn marker on checks:run is the whole response.",
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            },
+            "cooldownDays": {
+              "description": "Days after a lint-sweep pull request merged or closed before the sweep may open another (default 7): a merged sweep whose declined warnings survive must not re-file them the next morning.",
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            }
+          },
+          "additionalProperties": false
+        },
         "priority": {
           "description": "Map this repo's own issue-label names onto the agent's four priority levels, e.g. {\"P1\": \"critical\", \"P4\": \"low\"}. The map UNIONS with the built-in priority/<level> names rather than replacing them, and the agent does not create aliased labels -- the repo owns names the agent did not choose. Priority affects claim order only: it never changes a run's model, effort, or any budget.",
           "type": "object",