@gjsify/cli 0.4.28 → 0.4.30

package/lib/commands/gettext.js

@@ -28,13 +28,7 @@ async function fileExists(path) {
 async function compileBulkXml(opts) {
     const outputFile = join(opts.outDir, opts.filename);
     await ensureDir(opts.outDir);
-    const args = [
-        `--output-file=${outputFile}`,
-        '--xml',
-        `--template=${opts.template}`,
-        '-d',
-        opts.poDir,
-    ];
+    const args = [`--output-file=${outputFile}`, '--xml', `--template=${opts.template}`, '-d', opts.poDir];
     if (opts.verbose) {
         console.log(`[gjsify gettext] msgfmt ${args.join(' ')}`);
     }
@@ -55,9 +49,7 @@ async function compilePerLanguage(opts) {
     }
     for (const lang of languages) {
         const poFile = join(opts.poDir, `${lang}.po`);
-        const langDir = opts.format === 'mo'
-            ? join(opts.outDir, lang, 'LC_MESSAGES')
-            : join(opts.outDir, lang);
+        const langDir = opts.format === 'mo' ? join(opts.outDir, lang, 'LC_MESSAGES') : join(opts.outDir, lang);
         await ensureDir(langDir);
         const outputFile = join(langDir, opts.filename);
         // msgfmt produces the binary .mo format by default — there is no
@@ -187,15 +179,16 @@ export const gettextCommand = {
             }
         }
         catch (err) {
-            if (err?.code === 'ENOENT') {
+            const e = err;
+            if (e?.code === 'ENOENT') {
                 console.error('[gjsify gettext] msgfmt not found. Install it via your distro (package: gettext).');
             }
             else {
-                if (err?.stderr)
-                    process.stderr.write(err.stderr);
-                console.error(`[gjsify gettext] msgfmt failed${err?.code !== undefined ? ` (exit ${err.code})` : ''}`);
+                if (e?.stderr)
+                    process.stderr.write(e.stderr);
+                console.error(`[gjsify gettext] msgfmt failed${e?.code !== undefined ? ` (exit ${e.code})` : ''}`);
             }
-            process.exitCode = typeof err?.code === 'number' ? err.code : 1;
+            process.exitCode = typeof e?.code === 'number' ? e.code : 1;
         }
     },
 };

package/lib/commands/gresource.d.ts

@@ -5,5 +5,5 @@ interface GResourceOptions {
     target?: string;
     verbose?: boolean;
 }
-export declare const gresourceCommand: Command<any, GResourceOptions>;
+export declare const gresourceCommand: Command<unknown, GResourceOptions>;
 export {};

package/lib/commands/gresource.js

@@ -43,14 +43,8 @@ export const gresourceCommand = {
     handler: async (args) => {
         const xmlPath = resolve(args.xml);
         const target = args.target ? resolve(args.target) : defaultTargetFor(xmlPath);
-        const sourcedir = args.sourcedir
-            ? resolve(args.sourcedir)
-            : dirname(xmlPath);
-        const cmdArgs = [
-            `--sourcedir=${sourcedir}`,
-            `--target=${target}`,
-            xmlPath,
-        ];
+        const sourcedir = args.sourcedir ? resolve(args.sourcedir) : dirname(xmlPath);
+        const cmdArgs = [`--sourcedir=${sourcedir}`, `--target=${target}`, xmlPath];
         if (args.verbose) {
             console.log(`[gjsify gresource] glib-compile-resources ${cmdArgs.join(' ')}`);
         }
@@ -68,15 +62,16 @@ export const gresourceCommand = {
             }
         }
         catch (err) {
-            if (err?.code === 'ENOENT') {
+            const e = err;
+            if (e?.code === 'ENOENT') {
                 console.error('[gjsify gresource] glib-compile-resources not found. Install it via your distro (package: glib2-devel / libglib2.0-dev).');
             }
             else {
-                if (err?.stderr)
-                    process.stderr.write(err.stderr);
-                console.error(`[gjsify gresource] glib-compile-resources failed${err?.code !== undefined ? ` (exit ${err.code})` : ''}`);
+                if (e?.stderr)
+                    process.stderr.write(e.stderr);
+                console.error(`[gjsify gresource] glib-compile-resources failed${e?.code !== undefined ? ` (exit ${e.code})` : ''}`);
             }
-            process.exitCode = typeof err?.code === 'number' ? err.code : 1;
+            process.exitCode = typeof e?.code === 'number' ? e.code : 1;
         }
     },
 };

package/lib/commands/gsettings.d.ts

@@ -5,5 +5,5 @@ interface GSettingsOptions {
     strict?: boolean;
     verbose?: boolean;
 }
-export declare const gsettingsCommand: Command<any, GSettingsOptions>;
+export declare const gsettingsCommand: Command<unknown, GSettingsOptions>;
 export {};

package/lib/commands/gsettings.js

@@ -33,9 +33,7 @@ export const gsettingsCommand = {
     },
     handler: async (args) => {
         const schemadir = resolve(args.schemadir);
-        const targetdir = args.targetdir
-            ? resolve(args.targetdir)
-            : schemadir;
+        const targetdir = args.targetdir ? resolve(args.targetdir) : schemadir;
         const cmdArgs = [];
         if (args.strict)
             cmdArgs.push('--strict');
@@ -58,15 +56,16 @@ export const gsettingsCommand = {
             }
         }
         catch (err) {
-            if (err?.code === 'ENOENT') {
+            const e = err;
+            if (e?.code === 'ENOENT') {
                 console.error('[gjsify gsettings] glib-compile-schemas not found. Install it via your distro (package: glib2-devel / libglib2.0-dev).');
             }
             else {
-                if (err?.stderr)
-                    process.stderr.write(err.stderr);
-                console.error(`[gjsify gsettings] glib-compile-schemas failed${err?.code !== undefined ? ` (exit ${err.code})` : ''}`);
+                if (e?.stderr)
+                    process.stderr.write(e.stderr);
+                console.error(`[gjsify gsettings] glib-compile-schemas failed${e?.code !== undefined ? ` (exit ${e.code})` : ''}`);
             }
-            process.exitCode = typeof err?.code === 'number' ? err.code : 1;
+            process.exitCode = typeof e?.code === 'number' ? e.code : 1;
         }
     },
 };

package/lib/commands/info.d.ts

@@ -3,5 +3,5 @@ interface InfoOptions {
     export: boolean;
     file?: string;
 }
-export declare const infoCommand: Command<any, InfoOptions>;
+export declare const infoCommand: Command<unknown, InfoOptions>;
 export {};

package/lib/commands/install.d.ts

@@ -9,5 +9,5 @@ interface InstallOptions {
     verbose: boolean;
     backend?: 'native' | 'npm';
 }
-export declare const installCommand: Command<any, InstallOptions>;
+export declare const installCommand: Command<unknown, InstallOptions>;
 export {};

package/lib/commands/install.js

@@ -22,10 +22,10 @@ import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, rmSync, syml
 import { dirname, join, relative } from 'node:path';
 import { spawn } from 'node:child_process';
 import { discoverWorkspaces } from '@gjsify/workspace';
-import { buildInstallCommand, detectPackageManager, runMinimalChecks, } from '../utils/check-system-deps.js';
+import { buildInstallCommand, detectPackageManager, runMinimalChecks } from '../utils/check-system-deps.js';
 import { detectNativePackages } from '../utils/detect-native-packages.js';
 import { installPackages } from '../utils/install-backend.js';
-import { binDirOnPath, defaultGlobalLayout, linkGlobalBins, specToPackageName, } from '../utils/install-global.js';
+import { binDirOnPath, defaultGlobalLayout, linkGlobalBins, specToPackageName } from '../utils/install-global.js';
 import { addDependencyEntry, defaultRangeFromVersion, parseSpec, projectSpecsFromPackageJson, readPackageJson, writePackageJson, } from '../utils/pkg-json-edit.js';
 export const installCommand = {
     command: 'install [packages..]',
@@ -265,14 +265,39 @@ async function workspaceInstall(cwd, args) {
             for (const [depName, spec] of Object.entries(block)) {
                 if (typeof spec !== 'string')
                     continue;
-                if (spec.startsWith('workspace:')) {
-                    const target = byName.get(depName);
-                    if (!target) {
-                        throw new Error(`gjsify install: ${ws.name} declares "${depName}: ${spec}" but ` +
-                            `no workspace with that name exists`);
+                // A dependency whose NAME matches a local workspace is always
+                // satisfied by that workspace — never by a same-named package on
+                // npm. This holds regardless of the spec form: an explicit
+                // `workspace:` protocol, a plain semver range (`^1.2.3`), or even
+                // a dist-tag. Yarn/npm resolve a workspace-named dep to the local
+                // package first; we MUST do the same. Routing such a dep into the
+                // native fetch/extract queue is the data-loss bug this guards
+                // against — `extractOne` would `rmSync` + drop the published
+                // tarball over the workspace's OWN source tree (the published
+                // tarball ships only `files`, so `src/**` gets wiped). Symlink
+                // it instead, exactly like a `workspace:` ref.
+                const localWorkspace = byName.get(depName);
+                if (localWorkspace) {
+                    // Only an EXPLICIT out-of-workspace protocol (link:/file:/
+                    // portal:/git+/http(s):) opts out of the local workspace. Any
+                    // other shape — `workspace:` or a plain semver range/dist-tag
+                    // (`^1.2.3`, `*`, `latest`) — resolves to the local package.
+                    const explicitOverride = /^(link|file|portal|git\+|https?):/.test(spec);
+                    if (!explicitOverride) {
+                        symlinks.push({
+                            fromWorkspaceName: ws.name,
+                            depName,
+                            targetLocation: localWorkspace.location,
+                        });
+                        continue;
                     }
-                    symlinks.push({ fromWorkspaceName: ws.name, depName, targetLocation: target.location });
-                    continue;
+                    // explicit override → fall through to the existing handling.
+                }
+                if (spec.startsWith('workspace:')) {
+                    // `workspace:` against a name that is NOT a discovered
+                    // workspace is a hard error (typo / missing package).
+                    throw new Error(`gjsify install: ${ws.name} declares "${depName}: ${spec}" but ` +
+                        `no workspace with that name exists`);
                 }
                 if (/^(link|file|portal|git\+|https?):/.test(spec))
                     continue;
@@ -320,7 +345,8 @@ async function workspaceInstall(cwd, args) {
         try {
             rmSync(linkPath, { recursive: true, force: true });
         }
-        catch { /* unexpected — Gio failure on a path we just lstat'd to
+        catch {
+            /* unexpected — Gio failure on a path we just lstat'd to
                      decide we wanted to remove. The subsequent symlinkSync
                      will surface the real reason if there is one. */
         }
@@ -367,7 +393,9 @@ async function workspaceInstall(cwd, args) {
             lstatSync(linkPath);
             existsHere = true;
         }
-        catch { /* ENOENT */ }
+        catch {
+            /* ENOENT */
+        }
         if (existsHere)
             continue;
         mkdirSync(dirname(linkPath), { recursive: true });
@@ -419,8 +447,12 @@ async function workspaceInstall(cwd, args) {
             try {
                 rmSync(linkPath, { force: true });
             }
-            catch { /* fine */ }
-            writeFileSync(linkPath, buildBinShim(ws.location, nodeTarget, gjsTarget, nativePrebuildDirs), { mode: 0o755 });
+            catch {
+                /* fine */
+            }
+            writeFileSync(linkPath, buildBinShim(ws.location, nodeTarget, gjsTarget, nativePrebuildDirs), {
+                mode: 0o755,
+            });
             chmodSync(linkPath, 0o755);
             wsBinsCreated++;
         }

package/lib/commands/lint.d.ts

@@ -1,7 +1,7 @@
 import type { Command } from '../types/index.js';
 interface LintOptions {
     paths?: string[];
-    write?: boolean;
+    fix?: boolean;
     configPath?: string;
     verbose?: boolean;
 }

package/lib/commands/lint.js

@@ -1,14 +1,16 @@
-// `gjsify lint` — wraps biome's `lint` mode.
+// `gjsify lint` — wraps oxlint.
 //
-// Sibling of `gjsify format`. Spawns biome from node_modules directly
-// (no Node launcher). Default behaviour: report-only. Pass `--write`
-// for biome's safe-fix mode, or use `gjsify fix` for the combined
-// format + safe-lint-fix + organize-imports surface.
+// Sibling of `gjsify format`. Spawns oxlint via its Node launcher
+// (`node_modules/oxlint/bin/oxlint` → `dist/cli.js`) — NOT a bare binary —
+// because oxlint's JS-plugin host (used by the internal
+// `oxlint-plugin-gjsify` rule) lives in the JS launcher. Default behaviour:
+// report-only. Pass `--fix` for oxlint's safe-fix mode, or use `gjsify fix`
+// for the combined oxfmt + oxlint --fix surface.
 import { resolve } from 'node:path';
-import { BiomeNotFoundError, findBiomeConfig, printBiomeNotFound, runBiome, } from '../utils/biome-resolve.js';
+import { OxcNotFoundError, findOxlintConfig, printOxcNotFound, runOxlint } from '../utils/oxc-resolve.js';
 export const lintCommand = {
     command: 'lint [paths..]',
-    description: 'Run Biome lint diagnostics (native binary spawn — no Node launcher).',
+    description: 'Run oxlint diagnostics (spawned via its Node launcher to support JS plugins).',
     builder: (yargs) => {
         return yargs
             .positional('paths', {
@@ -16,41 +18,39 @@ export const lintCommand = {
             type: 'string',
             array: true,
         })
-            .option('write', {
+            .option('fix', {
             description: 'Apply safe lint fixes in place.',
             type: 'boolean',
             default: false,
         })
             .option('config-path', {
-            description: 'Path to a biome.json. Default: walks up from cwd to find one.',
+            description: 'Path to an .oxlintrc.json. Default: walks up from cwd to find one.',
             type: 'string',
             normalize: true,
         })
             .option('verbose', {
-            description: 'Echo the resolved biome binary + args before spawning.',
+            description: 'Echo the resolved oxlint launcher + args before spawning.',
             type: 'boolean',
             default: false,
         });
     },
     handler: async (args) => {
         const cwd = process.cwd();
-        const paths = args.paths?.length
-            ? args.paths
-            : ['.'];
-        const biomeArgs = ['lint'];
-        if (args.write)
-            biomeArgs.push('--write');
-        const configPath = args.configPath ?? findBiomeConfig(cwd) ?? undefined;
+        const paths = args.paths?.length ? args.paths : ['.'];
+        const oxlintArgs = [];
+        if (args.fix)
+            oxlintArgs.push('--fix');
+        const configPath = args.configPath ?? findOxlintConfig(cwd) ?? undefined;
         if (configPath)
-            biomeArgs.push(`--config-path=${resolve(configPath, '..')}`);
-        biomeArgs.push(...paths);
+            oxlintArgs.push('--config', resolve(configPath));
+        oxlintArgs.push(...paths);
         try {
-            const code = await runBiome(biomeArgs, { cwd, verbose: args.verbose });
+            const code = await runOxlint(oxlintArgs, { cwd, verbose: args.verbose });
             process.exitCode = code;
         }
         catch (err) {
-            if (err instanceof BiomeNotFoundError) {
-                printBiomeNotFound(err);
+            if (err instanceof OxcNotFoundError) {
+                printOxcNotFound(err);
                 process.exitCode = 1;
                 return;
             }

package/lib/commands/pack.d.ts

@@ -23,7 +23,7 @@ interface PackResult {
     /** Absolute path of the written .tgz, or null on --dry-run. */
     absolutePath: string | null;
 }
-export declare const packCommand: Command<any, PackOptions>;
+export declare const packCommand: Command<unknown, PackOptions>;
 export interface PackWorkspaceOptions {
     /** Directory to write the .tgz into. Defaults to the workspace itself. */
     destination?: string;

package/lib/commands/pack.js

@@ -113,15 +113,11 @@ export async function packWorkspace(wsDir, opts = {}) {
     // mutated it (e.g. a `prepack` that injects build metadata into
     // package.json fields). Rare but legal — npm pack does the same.
     const sourceAfterScripts = readFileSync(pkgPath, 'utf-8');
-    const pkgAfterScripts = sourceAfterScripts === originalSource
-        ? pkg
-        : JSON.parse(sourceAfterScripts);
+    const pkgAfterScripts = sourceAfterScripts === originalSource ? pkg : JSON.parse(sourceAfterScripts);
     // Rewrite workspace:^/~/* deps to resolved npm version ranges, mirroring
     // yarn's auto-rewrite at publish time. Done in-memory only — the source
     // package.json on disk is never mutated by `gjsify pack`.
-    const rewrittenPkg = opts.skipWorkspaceRewrite
-        ? pkgAfterScripts
-        : rewriteWorkspaceDeps(pkgAfterScripts, wsDir);
+    const rewrittenPkg = opts.skipWorkspaceRewrite ? pkgAfterScripts : rewriteWorkspaceDeps(pkgAfterScripts, wsDir);
     const rewrittenSource = JSON.stringify(rewrittenPkg, null, indentOf(sourceAfterScripts)) + '\n';
     // Collect files according to the package.json `files` field (or npm's
     // default set). The package.json itself is always included with the
@@ -148,9 +144,7 @@ export async function packWorkspace(wsDir, opts = {}) {
     const tarBytes = createTarball(entries);
     const gzipBytes = await gzip(tarBytes);
     // npm filename: scope replaced with leading dash. "@gjsify/foo" → "gjsify-foo".
-    const filenameBase = name.startsWith('@')
-        ? name.slice(1).replace('/', '-')
-        : name;
+    const filenameBase = name.startsWith('@') ? name.slice(1).replace('/', '-') : name;
     const filename = `${filenameBase}-${version}.tgz`;
     const sha1 = createHash('sha1').update(gzipBytes).digest('hex');
     const sha512 = createHash('sha512').update(gzipBytes).digest('base64');
@@ -188,7 +182,9 @@ export async function packWorkspace(wsDir, opts = {}) {
  */
 function collectFiles(wsDir, pkg) {
     const always = forceIncluded(pkg);
-    const filesField = Array.isArray(pkg.files) ? pkg.files.filter((f) => typeof f === 'string') : null;
+    const filesField = Array.isArray(pkg.files)
+        ? pkg.files.filter((f) => typeof f === 'string')
+        : null;
     let candidates;
     if (filesField) {
         candidates = expandFilesPatterns(wsDir, filesField);
@@ -208,12 +204,25 @@ function collectFiles(wsDir, pkg) {
     }
     return [...out].sort();
 }
-const ALWAYS_INCLUDED_BASENAMES = new Set(['package.json', 'README', 'README.md', 'LICENSE', 'LICENSE.md', 'NOTICE', 'NOTICE.md']);
 const NEVER_INCLUDED_BASENAMES = new Set([
-    '.git', '.svn', '.hg', '.gitignore', '.gitattributes', '.npmrc',
-    'CVS', '.DS_Store', 'node_modules', '.npmignore', 'package-lock.json',
-    'gjsify-lock.json', 'yarn.lock', 'yarn-error.log', '.yarn',
-    '.pnp.cjs', '.pnp.loader.mjs', 'tsconfig.tsbuildinfo',
+    '.git',
+    '.svn',
+    '.hg',
+    '.gitignore',
+    '.gitattributes',
+    '.npmrc',
+    'CVS',
+    '.DS_Store',
+    'node_modules',
+    '.npmignore',
+    'package-lock.json',
+    'gjsify-lock.json',
+    'yarn.lock',
+    'yarn-error.log',
+    '.yarn',
+    '.pnp.cjs',
+    '.pnp.loader.mjs',
+    'tsconfig.tsbuildinfo',
 ]);
 function forceIncluded(pkg) {
     const out = new Set();
@@ -292,7 +301,7 @@ function loadIgnore(wsDir) {
     const npmIgnorePath = join(wsDir, '.npmignore');
     const gitIgnorePath = join(wsDir, '.gitignore');
     const patterns = [];
-    const sourcePath = existsSync(npmIgnorePath) ? npmIgnorePath : (existsSync(gitIgnorePath) ? gitIgnorePath : null);
+    const sourcePath = existsSync(npmIgnorePath) ? npmIgnorePath : existsSync(gitIgnorePath) ? gitIgnorePath : null;
     if (sourcePath) {
         const lines = readFileSync(sourcePath, 'utf-8').split('\n');
         for (const raw of lines) {
@@ -319,7 +328,10 @@ function globToRegex(glob) {
     // Escape regex metachars except *,?,/
     pat = pat.replace(/[.+^${}()|[\]\\]/g, '\\$&');
     // ** → .*  *  → [^/]*  ? → [^/]
-    pat = pat.replace(/\*\*/g, '__DOUBLESTAR__').replace(/\*/g, '[^/]*').replace(/__DOUBLESTAR__/g, '.*');
+    pat = pat
+        .replace(/\*\*/g, '__DOUBLESTAR__')
+        .replace(/\*/g, '[^/]*')
+        .replace(/__DOUBLESTAR__/g, '.*');
     pat = pat.replace(/\?/g, '[^/]');
     return new RegExp(`^${pat}($|/)`);
 }

package/lib/commands/publish.d.ts

@@ -12,5 +12,5 @@ interface PublishOptions {
     trusted?: boolean | 'auto';
     'check-trusted'?: boolean;
 }
-export declare const publishCommand: Command<any, PublishOptions>;
+export declare const publishCommand: Command<unknown, PublishOptions>;
 export {};

package/lib/commands/publish.js

@@ -36,9 +36,9 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
-import { DEFAULT_REGISTRY, parseNpmrc, registryFor, buildHeaders, } from '@gjsify/npm-registry';
+import { DEFAULT_REGISTRY, parseNpmrc, registryFor, buildHeaders } from '@gjsify/npm-registry';
 import { packWorkspace } from './pack.js';
-import { getNpmTrustedToken, hasGithubOidcEnv, OidcExchangeError, OidcUnavailableError, } from '../utils/npm-oidc.js';
+import { getNpmTrustedToken, hasGithubOidcEnv, OidcExchangeError, OidcUnavailableError } from '../utils/npm-oidc.js';
 export const publishCommand = {
     command: 'publish [path]',
     description: 'Pack + upload the workspace at <path> (default: cwd) to its npm registry. Drop-in for `npm publish` with workspace:^ rewrite handled automatically.',
@@ -68,7 +68,7 @@ export const publishCommand = {
         default: false,
     })
         .option('provenance', {
-        description: 'Pass-through flag — recorded in the payload but no signing happens (gjsify doesn\'t ship a sigstore signer yet).',
+        description: "Pass-through flag — recorded in the payload but no signing happens (gjsify doesn't ship a sigstore signer yet).",
         type: 'boolean',
         default: false,
     })
@@ -227,9 +227,7 @@ export const publishCommand = {
         // libnpmpublish/lib/publish.js). The full scoped filename is what
         // `npm pack` writes to disk, but the registry stores tarballs at
         // the unscoped path.
-        const unscopedName = packed.name.includes('/')
-            ? packed.name.slice(packed.name.indexOf('/') + 1)
-            : packed.name;
+        const unscopedName = packed.name.includes('/') ? packed.name.slice(packed.name.indexOf('/') + 1) : packed.name;
         const wireFilename = `${unscopedName}-${packed.version}.tgz`;
         const tarballUrl = `${registryClean}/${packed.name}/-/${wireFilename}`;
         // 4. Build payload + PUT
@@ -255,8 +253,7 @@ export const publishCommand = {
         // OIDC is used iff GitHub OIDC env vars are present AND no
         // `NODE_AUTH_TOKEN` is set. With `NODE_AUTH_TOKEN` set the user has
         // explicitly opted into token auth, so we don't shadow their choice.
-        const wantTrusted = trustedFlag === true ||
-            (trustedFlag === undefined && hasGithubOidcEnv() && !process.env.NODE_AUTH_TOKEN);
+        const wantTrusted = trustedFlag === true || (trustedFlag === undefined && hasGithubOidcEnv() && !process.env.NODE_AUTH_TOKEN);
         let authMode = 'token';
         if (wantTrusted) {
             try {
@@ -281,9 +278,7 @@ export const publishCommand = {
                 // Trusted Publisher bootstrap"). Skip such a package when
                 // --tolerate-untrusted-new is set so one un-bootstrapped
                 // package doesn't break the entire serialized publish loop.
-                const isUntrustedNewPackage = err instanceof OidcExchangeError &&
-                    err.status === 404 &&
-                    /package not found/i.test(err.body);
+                const isUntrustedNewPackage = err instanceof OidcExchangeError && err.status === 404 && /package not found/i.test(err.body);
                 if (isUntrustedNewPackage && tolerateUntrustedNew) {
                     const headerMsg = `${packed.name}@${packed.version} (skipped — no Trusted Publisher on npm, see AGENTS.md "New @gjsify/* package: first-publish + Trusted Publisher bootstrap")`;
                     if (args.json) {
@@ -343,8 +338,7 @@ export const publishCommand = {
         if (!otp && res.status === 401) {
             const wwwAuth = res.headers.get('www-authenticate') ?? '';
             const body401 = await res.text().catch(() => '');
-            const needsOtp = wwwAuth.toLowerCase().split(/,\s*/).includes('otp') ||
-                /one-time pass/i.test(body401);
+            const needsOtp = wwwAuth.toLowerCase().split(/,\s*/).includes('otp') || /one-time pass/i.test(body401);
             if (needsOtp) {
                 // Interactive path: if stdin is a TTY, prompt and retry once.
                 if (process.stdin.isTTY && process.stdout.isTTY) {
@@ -394,8 +388,7 @@ export const publishCommand = {
         // Both are intentionally tolerated under --tolerate-republish so
         // that re-running a release workflow after a partial failure does
         // not error on the already-published packages.
-        const isRepublishConflict = res.status === 409 ||
-            (res.status === 403 && /previously published/i.test(text));
+        const isRepublishConflict = res.status === 409 || (res.status === 403 && /previously published/i.test(text));
         if (isRepublishConflict && tolerate) {
             const out = {
                 ok: true,
@@ -433,11 +426,15 @@ async function packWorkspaceToBytes(wsDir) {
     try {
         (await import('node:fs')).rmSync(res.absolutePath);
     }
-    catch { /* best effort */ }
+    catch {
+        /* best effort */
+    }
     try {
         (await import('node:fs')).rmdirSync(tmp);
     }
-    catch { /* best effort */ }
+    catch {
+        /* best effort */
+    }
     return bytes;
 }
 async function loadRewrittenManifest(wsDir, pkg) {
@@ -490,7 +487,9 @@ async function loadNpmrc(cwd) {
     // The auth-token npmrc from actions/setup-node ships
     // `_authToken=${NODE_AUTH_TOKEN}` as a literal placeholder; the env var
     // is set on the publish step.
-    const merged = sources.join('\n').replace(/\$\{([A-Z_][A-Z0-9_]*)\}/gi, (_, name) => process.env[name] ?? '');
+    const merged = sources
+        .join('\n')
+        .replace(/\$\{([A-Z_][A-Z0-9_]*)\}/gi, (_, name) => process.env[name] ?? '');
     return parseNpmrc(merged);
 }
 function buildPublishPayload(opts) {

package/lib/commands/run.d.ts

@@ -3,5 +3,5 @@ interface RunOptions {
     target: string;
     args: string[];
 }
-export declare const runCommand: Command<any, RunOptions>;
+export declare const runCommand: Command<unknown, RunOptions>;
 export {};

package/lib/commands/run.js

@@ -108,9 +108,7 @@ async function runScript(script, extraArgs) {
     // (stdout is always a pipe there, but the GHA log viewer renders ANSI
     // fine). Respect user overrides: FORCE_COLOR=0 or NO_COLOR keeps
     // colors off.
-    const colorEnv = process.env.FORCE_COLOR !== undefined || process.env.NO_COLOR !== undefined
-        ? {}
-        : { FORCE_COLOR: '1' };
+    const colorEnv = process.env.FORCE_COLOR !== undefined || process.env.NO_COLOR !== undefined ? {} : { FORCE_COLOR: '1' };
     const env = {
         ...process.env,
         ...colorEnv,
@@ -119,9 +117,7 @@ async function runScript(script, extraArgs) {
         npm_package_name: pkg.name ?? '',
         npm_package_version: pkg.version ?? '',
     };
-    const fullCmd = extraArgs.length > 0
-        ? `${literal} ${extraArgs.map(shellEscape).join(' ')}`
-        : literal;
+    const fullCmd = extraArgs.length > 0 ? `${literal} ${extraArgs.map(shellEscape).join(' ')}` : literal;
     // ensureMainLoop() (called inside spawn) keeps GJS alive after the
     // child exits — without an explicit process.exit() the success path
     // would park the loop forever. The error path already exits.

package/lib/commands/self-update.d.ts

@@ -4,5 +4,5 @@ interface SelfUpdateOptions {
     force?: boolean;
     tag: string;
 }
-export declare const selfUpdateCommand: Command<any, SelfUpdateOptions>;
+export declare const selfUpdateCommand: Command<unknown, SelfUpdateOptions>;
 export {};

package/lib/commands/self-update.js

@@ -76,9 +76,7 @@ export const selfUpdateCommand = {
             return;
         }
         if (args.check) {
-            console.log(currentVersion
-                ? `Update available: v${currentVersion} → v${target}`
-                : `Install required: → v${target}`);
+            console.log(currentVersion ? `Update available: v${currentVersion} → v${target}` : `Install required: → v${target}`);
             process.exit(1);
             return;
         }

package/lib/commands/showcase.d.ts

@@ -4,5 +4,5 @@ interface ShowcaseOptions {
     json: boolean;
     list: boolean;
 }
-export declare const showcaseCommand: Command<any, ShowcaseOptions>;
+export declare const showcaseCommand: Command<unknown, ShowcaseOptions>;
 export {};

package/lib/commands/showcase.js

@@ -1,5 +1,5 @@
 import { discoverShowcases, findShowcase } from '../utils/discover-showcases.js';
-import { runMinimalChecks, detectPackageManager, buildInstallCommand, } from '../utils/check-system-deps.js';
+import { runMinimalChecks, detectPackageManager, buildInstallCommand } from '../utils/check-system-deps.js';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { readFileSync } from 'node:fs';

package/lib/commands/system-check.d.ts

@@ -2,5 +2,5 @@ import type { Command } from '../types/index.js';
 interface CheckOptions {
     json: boolean;
 }
-export declare const systemCheckCommand: Command<any, CheckOptions>;
+export declare const systemCheckCommand: Command<unknown, CheckOptions>;
 export {};