@doikayt/typescript-build-config 0.1.9

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Data Lackey Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,280 @@
+# @doikayt/typescript-build-config
+
+Shared build configuration presets for TypeScript-based projects.
+
+<!-- TOC:START -->
+- [@doikayt/typescript-build-config](#doikayttypescript-build-config)
+  - [Purpose](#purpose)
+  - [Installation](#installation)
+  - [Dependency Strategy](#dependency-strategy)
+  - [Current Contents](#current-contents)
+  - [Delivery Model](#delivery-model)
+  - [Release Pipeline](#release-pipeline)
+  - [Conventions Every Project Must Adhere To](#conventions-every-project-must-adhere-to)
+    - [The `ci` script](#the-ci-script)
+      - [NX projects](#nx-projects)
+    - [The `update-all-format` target](#the-update-all-format-target)
+  - [Publishing](#publishing)
+  - [For Maintainers](#for-maintainers)
+    - [Clone and install](#clone-and-install)
+    - [Run the full CI suite](#run-the-full-ci-suite)
+  - [License](#license)
+<!-- TOC:END -->
+
+## Purpose
+
+This package centralises common build tooling configuration and release policy across all
+TypeScript projects maintained under the `@doikayt` scope. The goal is a
+single source of truth for such settings that should be held constant across
+projects, avoiding drift between repos over time.
+The plugin encapsulates common build **policy** and release **workflow logic**
+via the pipeline files it installs into each consumer repo and the canonical release process in
+[docs/RELEASE-PROCESS.md](docs/RELEASE-PROCESS.md).
+
+## Installation
+
+```bash
+npm install --save-dev @doikayt/typescript-build-config
+```
+
+The postinstall script copies starter config files into your project root and
+sets up the release pipeline (see below).
+
+## Dependency Strategy
+
+`eslint` and `prettier` are listed as `dependencies` and are pulled in
+automatically. The `@typescript-eslint/*` plugins are listed in both
+`dependencies` and `peerDependencies` — the peer declaration pins the minimum
+version to `^8.57.1` to avoid a `ts-api-utils` incompatibility with TS 5.4+.
+
+This package targets new projects. Use in existing projects that pin older
+versions of these tools may produce peer dependency conflicts.
+
+## Current Contents
+
+- ESLint config
+- Prettier config
+- TypeScript config (`tsconfig.json`, `tsconfig.test.json`, `tsconfig.eslint.json`)
+- Postinstall script that copies starter top-level config files into your
+  project root, extending the configs installed under `node_modules`
+- GitHub Actions release workflow (`.github/workflows/release.yml`)
+- Changeset config (`.changeset/config.json`)
+- Auto-changeset script (`scripts/auto-changeset.sh`)
+- NPM token diagnostic workflow (`.github/workflows/verify-npm-token.yml`) — see
+  [Troubleshooting Publish Auth](docs/RELEASE-PROCESS.md#troubleshooting-publish-auth)
+
+## Delivery Model
+
+This package standardizes downstream repos through three delivery channels — script and
+config artifacts that _implement_ the common policy, and a canonical document that
+_states_ it:
+
+```
+        ┌─────────────────────────────────────────────────┐
+        │        @doikayt/typescript-build-config        │
+        │                                                 │
+        │  presets     src/eslint.js  prettier  tsconfig  │
+        │  stubs       src/top-level/*                    │
+        │  pipeline    src/pipeline/*                     │
+        │  policy      docs/RELEASE-PROCESS.md            │
+        └─────────┬───────────────┬───────────────┬───────┘
+                  │               │               │
+   1 REFERENCED   │  2 COPIED     │  3 LINKED,    │
+     IN PLACE     │    ON INSTALL │  NEVER COPIED │
+                  │               │               │
+ presets stay in  │ postinstall   │ cited by URL  │
+ node_modules —   │ seeds stubs + │ only; one     │
+ updates flow     │ pipeline once;│ canonical     │
+ with npm update  │ consumer owns │ copy — drift  │
+                  │ them; drift ⇒ │ is impossible │
+                  │ diff warning  │               │
+                  ▼               ▼               ▼
+        ┌─────────────────────────────────────────────────┐
+        │                  consumer repo                  │
+        │                                                 │
+        │  seeded stubs:  eslint.config.js  tsconfig.json │
+        │       │         prettier.config.js  …           │
+        │       └────extends────► presets living in       │
+        │                         node_modules  (chan. 1) │
+        │  owned pipeline:  .github/workflows/release.yml │
+        │                   scripts/auto-changeset.sh     │
+        │  CONTRIBUTING.md ─cites URL─► RELEASE-PROCESS.md│
+        └─────────────────────────────────────────────────┘
+```
+
+**Terms:**
+
+- **Presets** — the real configuration content: the ESLint rules (`src/eslint.js`),
+  Prettier options, and base tsconfig this package exports. They stay inside
+  `node_modules` and are never copied — which is what makes them ecosystem-wide levers:
+  change a lint rule once here, publish, and every downstream repo receives the new rule
+  on its next `npm update`, with no per-repo edits.
+- **Stubs** — thin files seeded once into the consumer's project root by the postinstall
+  script (`eslint.config.js`, `tsconfig.json`, …). Their only job is to `extends`/import
+  the presets: channel 2 seeds these static, copied-once files, and they point back at
+  the evolving content that channel 1 keeps current in `node_modules`.
+- **Owned pipeline** — the release workflow and scripts, copied on install. "Owned" by
+  the **consumer repo**: it may edit its copies, upstream never overwrites them, and
+  postinstall prints a diff warning when a copy drifts from the canonical template.
+- **Policy** — the release process itself, stated once in
+  [docs/RELEASE-PROCESS.md](docs/RELEASE-PROCESS.md). Consumers reference it by URL from
+  their own contributor docs (as the consumer box shows) — never copied, so it cannot
+  drift.
+
+## Release Pipeline
+
+On install, the postinstall script copies the release pipeline files into your
+project automatically. The package name in `auto-changeset.sh` is substituted
+from your project's `package.json` at install time.
+
+On `npm update`, the behavior per file is:
+
+- **File absent** — copied into place
+- **File identical to canonical** — skipped silently
+- **File differs from canonical** — warning printed with a diff; local copy is
+  left untouched for manual review
+
+This means local customisations are never silently overwritten, but you are
+notified when your copy has drifted from the upstream version.
+
+The release pipeline requires an `NPM` secret stored at the GitHub organisation
+level. All repos under the org inherit it automatically — no per-repo secret
+configuration is needed.
+
+## Conventions Every Project Must Adhere To
+
+Every project that installs this package must implement two named entry points.
+`postinstall` warns on every `npm install` or `npm update` until each is in
+place.
+
+### The `ci` script
+
+Every project must expose a `ci` script in `package.json`. The release workflow
+calls `npm run ci` as its CI gate. A project without a `ci` script will fail
+the CI job — the correct signal that the convention has not been met.
+
+`ci` is the single entry point for "everything that must pass before a release":
+formatting checks, tests, linting — whatever the project requires. What it
+calls internally is up to the project:
+
+```json
+{
+  "scripts": { "ci": "prettier --check src/ && vitest run && playwright test" }
+}
+```
+
+`npm run ci` doubles as your local "simulate CI" command.
+
+**Invariant:** if `npm run ci` passes locally, and you commit and push, the
+remote CI job will pass.
+
+#### NX projects
+
+NX-based projects must still expose `ci` as a thin shim in `package.json`, even
+if it only delegates to NX targets:
+
+```json
+{ "scripts": { "ci": "nx run-many --target=ci --all" } }
+```
+
+The release workflow is NX-agnostic — it calls `npm run ci`, never NX directly.
+
+### The `update-all-format` target
+
+Every project must expose an `update-all-format` entry point — either a
+`package.json` script or an NX `project.json` target. This is the single
+command for "reformat everything before reviewing a diff": run it before
+committing to keep diffs clean and reviewable.
+
+The plugin enforces the name only, not the content:
+
+```json
+{
+  "scripts": {
+    "update-all-format": "prettier --write src/ && npm run update-markdown-docs"
+  }
+}
+```
+
+Or as an NX target:
+
+```json
+{
+  "targets": {
+    "update-all-format": {
+      "executor": "nx:run-commands",
+      "options": { "command": "prettier --write src/" }
+    }
+  }
+}
+```
+
+If neither is found, `postinstall` prints a warning (non-fatal) on every
+`npm install` or `npm update` until the target is added.
+
+NX projects may define the target in `project.json` instead of `package.json`
+scripts — the postinstall check recognises both. There is no shim requirement
+for `update-all-format` (unlike `ci`), because no external tooling calls it
+directly.
+
+## Publishing
+
+Releases are automated via Changesets and GitHub Actions. The full policy —
+commit-prefix → bump mapping, forcing or suppressing a release, resolving
+`changeset status` errors, verifying a release, troubleshooting publish auth —
+is documented in [docs/RELEASE-PROCESS.md](docs/RELEASE-PROCESS.md). That
+document is the canonical release policy for every repo that installs this
+package.
+
+Quick reference:
+
+**For a patch release** — push a `fix:` commit to `main`. The workflow handles
+the rest.
+
+**For a minor or major release** — run `npx changeset` locally, choose the
+bump level at the prompt, commit the generated `.changeset/*.md` file, then
+push. The auto-generation step is skipped when a handwritten changeset is
+present. For majors this is mandatory: a breaking-change commit (`feat!:` or
+`BREAKING CHANGE` in the body) with no handwritten changeset fails the
+release job until one is committed.
+
+**Manual publish (emergency):** trigger the workflow manually via
+**GitHub Actions → CI / Release → Run workflow** on the `main` branch.
+
+## For Maintainers
+
+### Clone and install
+
+```bash
+git clone git@github.com:doikayt/typescript-build-config.git
+cd typescript-build-config
+npm install
+```
+
+The postinstall script detects that it is running inside the plugin repo itself
+and exits immediately — no config stubs or pipeline files are copied.
+
+### Run the full CI suite
+
+```bash
+npm run ci
+```
+
+This is the same entry point mandated for every consumer repo. In this project
+it runs a Prettier format check followed by the full test suite:
+
+```
+npm run ci  →  prettier --check src/  →  node --test
+```
+
+A passing `npm run ci` locally means the remote CI job will pass.
+
+To auto-fix formatting before verifying:
+
+```bash
+npm run update-all-format && npm run ci
+```
+
+## License
+
+MIT

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@doikayt/typescript-build-config",
+  "version": "0.1.9",
+  "description": "Shared build configuration for TypeScript projects — ESLint, and future tsconfig/Prettier presets",
+  "_comments": {
+    "exports": "This block lists the config files that will be extended by files in in src/toplevel - which are copied to consuming project root folder. An example: eslint.config.js imports from '@doikayt/typescript-build-config/eslint'.",
+    "files": "These are the files included in the package tarball. Dotfiles like .gitignore are excluded by npm by default and must be listed explicitly alongside src/."
+  },
+  "type": "module",
+  "main": "src/eslint.js",
+  "exports": {
+    "./eslint": "./src/eslint.js",
+    "./prettier": "./src/prettier.js",
+    "./tsconfig": "./src/tsconfig.base.json"
+  },
+  "files": [
+    "src/",
+    "src/top-level/.gitignore"
+  ],
+  "scripts": {
+    "prepack": "echo no build step required",
+    "postinstall": "node src/postinstall.js",
+    "update-all-format": "prettier --write src/ && update-markdown-toc README.md",
+    "check-format": "prettier --check src/ && update-markdown-toc --check README.md",
+    "ci": "npm run check-format && node --test",
+    "test": "node --test"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.29.8",
+    "@datalackey/update-markdown-toc": "^1.4.14"
+  },
+  "dependencies": {
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "eslint": "^9.0.0",
+    "prettier": "^3.0.0"
+  },
+  "keywords": [
+    "eslint",
+    "typescript",
+    "config",
+    "build",
+    "tooling"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+ssh://git@github.com/doikayt/typescript-build-config.git"
+  },
+  "peerDependencies": {
+    "@typescript-eslint/eslint-plugin": "^8.57.1",
+    "@typescript-eslint/parser": "^8.57.1"
+  }
+}

package/src/eslint.js

@@ -0,0 +1,48 @@
+import tseslint from "@typescript-eslint/eslint-plugin";
+import tsparser from "@typescript-eslint/parser";
+
+export default [
+  {
+    files: ["**/*.ts"],
+    languageOptions: {
+      parser: tsparser,
+      parserOptions: {
+        project: "./tsconfig.eslint.json",
+        sourceType: "module",
+      },
+    },
+    plugins: {
+      "@typescript-eslint": tseslint,
+    },
+    rules: {
+      ...tseslint.configs["recommended"].rules,
+      ...tseslint.configs["recommended-requiring-type-checking"].rules,
+      eqeqeq: ["error", "always"],
+      "@typescript-eslint/no-explicit-any": "error",
+      "@typescript-eslint/no-unsafe-assignment": "error",
+      "@typescript-eslint/no-unsafe-call": "error",
+      "@typescript-eslint/no-unsafe-member-access": "error",
+      "@typescript-eslint/no-unsafe-return": "error",
+      "@typescript-eslint/strict-boolean-expressions": "error",
+      "@typescript-eslint/no-floating-promises": "error",
+      "prefer-const": "error",
+      "no-fallthrough": "error",
+      "@typescript-eslint/no-shadow": "error",
+      "@typescript-eslint/no-unused-vars": [
+        "error",
+        {
+          args: "all",
+          argsIgnorePattern: "^_",
+          varsIgnorePattern: "^_",
+        },
+      ],
+      "@typescript-eslint/explicit-function-return-type": [
+        "warn",
+        {
+          allowExpressions: true,
+          allowTypedFunctionExpressions: true,
+        },
+      ],
+    },
+  },
+];

package/src/pipeline/auto-changeset.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+# Auto-generate a changeset from conventional commit messages when none exists.
+# Run in CI before `npx changeset version`.
+#
+# Bump mapping (intentionally conservative — automated releases are always patch):
+#   fix:, feat:, perf:    → patch
+#   feat!: / BREAKING CHANGE → FAIL: majors require a handwritten changeset
+#   chore:, ci:, docs:, refactor:, style:, test:, build: → no release
+#
+# Minor and major bumps must be declared explicitly via `npx changeset` before
+# pushing. A breaking-change marker with no handwritten changeset fails the
+# release job until a changeset (real or empty) is committed.
+# If no releasable commits are found, exits cleanly — changeset version
+# then has nothing to consume and publish is a no-op.
+set -euo pipefail
+
+CHANGESET_DIR=".changeset"
+PACKAGES=("__PACKAGE_NAME__")
+
+# Skip if a manually-authored changeset already exists
+EXISTING=$(find "$CHANGESET_DIR" -name "*.md" ! -name "README.md" | wc -l)
+if [ "$EXISTING" -gt 0 ]; then
+  echo "→ Changeset already present — skipping auto-generation"
+  exit 0
+fi
+
+# Commits since last tag, or all commits if repo has no tags yet
+LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+if [ -n "$LAST_TAG" ]; then
+  RANGE="${LAST_TAG}..HEAD"
+else
+  RANGE="HEAD"
+fi
+
+SUBJECTS=$(git log "$RANGE" --pretty=format:"%s" 2>/dev/null || true)
+FULL_LOG=$(git log "$RANGE" --pretty=format:"%s%n%b" 2>/dev/null || true)
+
+if [ -z "$SUBJECTS" ]; then
+  echo "→ No commits in range — skipping auto-generation"
+  exit 0
+fi
+
+BUMP=""
+SUMMARY_LINES=()
+
+while IFS= read -r line; do
+  [ -z "$line" ] && continue
+  if echo "$line" | grep -qE "^[a-z]+(\([^)]+\))?!:" || echo "$line" | grep -qE "^BREAKING CHANGE"; then
+    echo "ERROR: breaking-change commit found with no handwritten changeset:" >&2
+    echo "  $line" >&2
+    echo "Major releases require explicit human declaration. Either:" >&2
+    echo "  npx changeset              # declare the bump, write migration notes" >&2
+    echo "  npx changeset add --empty  # or suppress the release entirely" >&2
+    echo "Commit the .changeset/*.md file and push again." >&2
+    exit 1
+  fi
+  if echo "$line" | grep -qE "^(fix|feat|perf)(\([^)]+\))?:" && [ -z "$BUMP" ]; then
+    BUMP="patch"
+  fi
+done <<< "$FULL_LOG"
+
+while IFS= read -r line; do
+  [ -z "$line" ] && continue
+  if echo "$line" | grep -qE "^(fix|feat|perf)(\([^)]+\))?:"; then
+    SUMMARY_LINES+=("- $line")
+  fi
+done <<< "$SUBJECTS"
+
+if [ -z "$BUMP" ]; then
+  echo "→ No releasable commits (fix:/feat:/perf:) since ${LAST_TAG:-beginning} — skipping"
+  exit 0
+fi
+
+FRONTMATTER=""
+for pkg in "${PACKAGES[@]}"; do
+  FRONTMATTER="${FRONTMATTER}\"${pkg}\": ${BUMP}"$'\n'
+done
+
+DESCRIPTION=$(printf '%s\n' "${SUMMARY_LINES[@]}")
+FILENAME="${CHANGESET_DIR}/auto-$(date +%s)-$$.md"
+
+cat > "$FILENAME" <<EOF
+---
+${FRONTMATTER}---
+
+${DESCRIPTION}
+EOF
+
+echo "→ Generated ${FILENAME} (bump: ${BUMP})"
+cat "$FILENAME"

package/src/pipeline/changeset-config.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.1.2/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": []
+}

package/src/pipeline/release.yml

@@ -0,0 +1,72 @@
+name: CI / Release
+
+permissions:
+  contents: write
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run ci
+      - name: Check Changesets (PR only)
+        if: github.event_name == 'pull_request'
+        run: npx changeset status
+
+  release:
+    needs: ci
+    if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
+    permissions:
+      contents: write
+      id-token: write
+    concurrency:
+      group: release
+      cancel-in-progress: false
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+          cache: npm
+      - run: npm ci
+      - name: Configure git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+      - name: Auto-generate changeset from commits
+        run: bash scripts/auto-changeset.sh
+      - name: Apply version bumps
+        run: npx changeset version
+      - name: Commit and push version bumps
+        run: |
+          git add .
+          git diff --staged --quiet && echo "No changesets to release" || \
+            (git commit -m "chore: release [skip ci]" && git push)
+      - name: Publish
+        id: publish
+        run: npx changeset publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM }}
+      - name: Push release tags
+        run: git push --tags
+      - name: Post-publish hook (optional)
+        if: steps.publish.outcome == 'success'
+        run: |
+          node -e "process.exit(require('./package.json').scripts?.['post-publish'] ? 0 : 1)" \
+            && npm run post-publish \
+            || echo "No post-publish script — skipping"

package/src/pipeline/verify-npm-token.yml

@@ -0,0 +1,17 @@
+name: Verify NPM Token
+
+on:
+  workflow_dispatch:
+
+jobs:
+  verify-token:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+      - name: Check npm auth
+        run: npm whoami
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM }}

package/src/postinstall.js

@@ -0,0 +1,136 @@
+import {
+  existsSync,
+  copyFileSync,
+  readFileSync,
+  writeFileSync,
+  mkdirSync,
+} from "fs";
+import { resolve, dirname } from "path";
+import { execSync } from "child_process";
+import { tmpdir } from "os";
+import { join } from "path";
+
+const PREFIX = "[@doikayt/typescript-build-config]";
+
+console.log(`${PREFIX} Running postinstall...`);
+
+const projectRoot = process.env.INIT_CWD ?? process.cwd();
+const projectPkg = JSON.parse(
+  readFileSync(resolve(projectRoot, "package.json"), "utf8"),
+);
+
+if (projectPkg.name === "@doikayt/typescript-build-config") {
+  console.log(`${PREFIX} Self-install detected — postinstall is a no-op.`);
+  process.exit(0);
+}
+
+const srcDir = new URL("top-level", import.meta.url).pathname;
+const pipelineDir = new URL("pipeline", import.meta.url).pathname;
+
+// --- Top-level config files: all-or-nothing ---
+
+const configFiles = [
+  { src: "gitignore", dest: ".gitignore" },
+  { src: "tsconfig.json", dest: "tsconfig.json" },
+  { src: "tsconfig.test.json", dest: "tsconfig.test.json" },
+  { src: "tsconfig.eslint.json", dest: "tsconfig.eslint.json" },
+  { src: "eslint.config.js", dest: "eslint.config.js" },
+  { src: "prettier.config.js", dest: "prettier.config.js" },
+];
+
+const alreadyExist = configFiles
+  .map(({ dest }) => resolve(projectRoot, dest))
+  .filter((destPath) => existsSync(destPath));
+
+if (alreadyExist.length > 0) {
+  console.log(`${PREFIX} Skipping config files — the following already exist:`);
+  for (const destPath of alreadyExist) console.log("  " + destPath);
+  console.log(`${PREFIX} Delete them manually to re-run postinstall.`);
+} else {
+  for (const { src, dest } of configFiles) {
+    const srcPath = resolve(srcDir, src);
+    const destPath = resolve(projectRoot, dest);
+    if (!existsSync(srcPath)) {
+      console.error(`${PREFIX} Missing source: ${srcPath}`);
+      process.exit(1);
+    }
+    copyFileSync(srcPath, destPath);
+    console.log(`${PREFIX} Copied ${src} -> ${dest}`);
+  }
+}
+
+// --- Pipeline files: per-file copy/warn/diff ---
+
+const projectName = projectPkg.name;
+
+const pipelineFiles = [
+  { src: "release.yml", dest: ".github/workflows/release.yml" },
+  { src: "changeset-config.json", dest: ".changeset/config.json" },
+  { src: "auto-changeset.sh", dest: "scripts/auto-changeset.sh" },
+  {
+    src: "verify-npm-token.yml",
+    dest: ".github/workflows/verify-npm-token.yml",
+  },
+];
+
+for (const { src, dest } of pipelineFiles) {
+  const srcPath = resolve(pipelineDir, src);
+  const destPath = resolve(projectRoot, dest);
+
+  let canonical = readFileSync(srcPath, "utf8");
+
+  if (src === "auto-changeset.sh") {
+    canonical = canonical.replace(
+      'PACKAGES=("__PACKAGE_NAME__")',
+      `PACKAGES=("${projectName}")`,
+    );
+  }
+
+  if (!existsSync(destPath)) {
+    mkdirSync(dirname(destPath), { recursive: true });
+    writeFileSync(destPath, canonical);
+    console.log(`${PREFIX} Copied ${src} -> ${dest}`);
+    continue;
+  }
+
+  const existing = readFileSync(destPath, "utf8");
+  if (existing === canonical) continue;
+
+  console.warn(
+    `${PREFIX} WARNING: ${dest} differs from canonical version — skipping. Review the diff:`,
+  );
+  const tmpPath = join(tmpdir(), `tbc-canonical-${src}`);
+  writeFileSync(tmpPath, canonical);
+  try {
+    execSync(`diff "${tmpPath}" "${destPath}"`, { stdio: "inherit" });
+  } catch {
+    // diff exits 1 when files differ — output already printed via stdio: inherit
+  }
+}
+
+// --- update-all-format convention check ---
+
+let hasUpdateAllFormat = !!projectPkg.scripts?.["update-all-format"];
+
+if (!hasUpdateAllFormat) {
+  const projectJsonPath = resolve(projectRoot, "project.json");
+  if (existsSync(projectJsonPath)) {
+    try {
+      const projectJson = JSON.parse(readFileSync(projectJsonPath, "utf8"));
+      if (projectJson.targets?.["update-all-format"]) hasUpdateAllFormat = true;
+    } catch {
+      // malformed project.json — treat as absent
+    }
+  }
+}
+
+if (!hasUpdateAllFormat) {
+  console.warn(`${PREFIX} Missing target: update-all-format`);
+  console.warn(`Add to package.json scripts:`);
+  console.warn(
+    `  "update-all-format": "npm run format && npm run update-markdown-docs"`,
+  );
+  console.warn(`Or add an NX target with the same name.`);
+}
+
+console.log(`${PREFIX} Postinstall complete.`);

package/src/prettier.js

@@ -0,0 +1,11 @@
+export default {
+  printWidth: 100,
+  tabWidth: 4,
+  useTabs: false,
+  semi: true,
+  singleQuote: false,
+  trailingComma: "es5",
+  bracketSpacing: true,
+  arrowParens: "avoid",
+  endOfLine: "lf",
+};

package/src/top-level/eslint.config.js

@@ -0,0 +1,8 @@
+import config from "@doikayt/typescript-build-config/eslint";
+
+export default [
+    ...config,
+    {
+        ignores: ["dist/**", "node_modules/**"],
+    },
+];

package/src/top-level/gitignore

@@ -0,0 +1,10 @@
+.idea/
+
+**/node_modules/
+**/dist/
+*.tsbuildinfo 
+
+coverage/
+.nx/
+.env
+

package/src/top-level/prettier.config.js

@@ -0,0 +1,5 @@
+import config from "@doikayt/typescript-build-config/prettier";
+
+export default {
+    ...config,
+};

package/src/top-level/tsconfig.eslint.json

@@ -0,0 +1,4 @@
+{
+    "extends": "./tsconfig.json",
+    "include": ["src", "tests", "scripts/*.js", "scripts/*.ts", "*.config.js", "*.config.ts"]
+}

package/src/top-level/tsconfig.json

@@ -0,0 +1,8 @@
+{
+    "extends": "./node_modules/@doikayt/typescript-build-config/src/tsconfig.base.json",
+    "compilerOptions": {
+        "outDir": "dist",
+        "rootDir": "src"
+    },
+    "include": ["src"]
+}

package/src/top-level/tsconfig.test.json

@@ -0,0 +1,7 @@
+{
+    "extends": "./tsconfig.json",
+    "compilerOptions": {
+        "types": ["vitest/globals"]
+    },
+    "include": ["src", "tests"]
+}

package/src/tsconfig.base.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "strict": true,
+    "noEmitOnError": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "forceConsistentCasingInFileNames": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true
+  }
+}