@homeflare/config 0.2.1 → 0.4.0

package/README.md

@@ -9,18 +9,23 @@ bun add -D @homeflare/config
 
 ## What it gives you
 
-| file                 | how to use it                           |
-| -------------------- | --------------------------------------- |
-| `tsconfig.base.json` | `extends` — apps and Workers            |
-| `tsconfig.lib.json`  | `extends` — packages that publish types |
-| `oxlintrc.json`      | `extends` — 36 rules, 6 plugins         |
-| `oxfmtrc.json`       | copy to `.oxfmtrc.json`                 |
-| `bunfig.toml`        | copy to `bunfig.toml`                   |
+| file                 | how to use it                                    |
+| -------------------- | ------------------------------------------------ |
+| `tsconfig.base.json` | `extends` — owned code, full strictness          |
+| `tsconfig.app.json`  | `extends` — Worker apps (source-publishing deps) |
+| `tsconfig.lib.json`  | `extends` — packages that publish types          |
+| `oxlintrc.json`      | `extends` — libraries                            |
+| `oxlintrc.app.json`  | `extends` — Worker / TanStack / Alchemy apps     |
+| `oxfmtrc.json`       | copy to `.oxfmtrc.json`                          |
+| `bunfig.toml`        | copy to `bunfig.toml`                            |
 
 ## tsconfig
 
 ```jsonc
-// an app or a Worker
+// a Worker or app that imports packages publishing .ts (not .d.ts)
+{ "extends": "@homeflare/config/tsconfig.app.json" }
+
+// owned library code — the full baseline
 { "extends": "@homeflare/config/tsconfig.base.json" }
 
 // a package that publishes types
@@ -34,24 +39,40 @@ The base turns on `strict` plus the flags that catch the most runtime bugs:
 `noUncheckedIndexedAccess` (`arr[0]` is `T | undefined`), `exactOptionalPropertyTypes`,
 and `noFallthroughCasesInSwitch`.
 
+⚠️ **`tsconfig.app.json` turns three of those off.** `skipLibCheck` only skips `.d.ts`.
+Measured 2026-09-16: `@cloudflare/ci@0.2.0` ships `"types": "./src/index.ts"`, and Better
+Auth plugin types do the same. Those files typecheck under _your_ flags, so the strict
+baseline fails the consumer. Use the app preset there; keep `base` / `lib` for code you
+own. Override the flags back on in a project that does not import source-publishing deps.
+
 ## oxlint
 
 ```json
 { "extends": ["./node_modules/@homeflare/config/oxlintrc.json"] }
 ```
 
+A Worker, TanStack Start, or Alchemy app:
+
+```json
+{ "extends": ["./node_modules/@homeflare/config/oxlintrc.app.json"] }
+```
+
 ⚠️ oxlint's `extends` takes **file paths**, not package names — there is no
 `eslint-config-*` style resolution, so the path into `node_modules` is written out.
 
-36 rules across `typescript`, `unicorn`, `oxc`, `import`, `react` and `jsx-a11y`. The ones
-worth knowing:
+The library preset is 36 rules across `typescript`, `unicorn`, `oxc`, `import`, `react`
+and `jsx-a11y`. The app preset extends it and turns off the collisions `--deny-warnings`
+hits on correct Worker/app code (measured 2026-09-16):
 
-- `no-console: error` — ⚠️ except where `console` _is_ the transport, as in a Worker
-  writing JSON for Workers Logs. Override it per file, not globally.
-- `typescript/no-non-null-assertion` — `!` hides exactly what `noUncheckedIndexedAccess`
-  is trying to surface.
-- `react/exhaustive-deps`, `jsx-a11y/click-events-have-key-events` — only bite in React
-  code; a Worker never sees them.
+- `no-console` off under `src/` — `console` _is_ Workers Logs.
+- `import/no-default-export` off — Alchemy, `Worker`, and TanStack entry files export
+  default.
+- `jsx-a11y/control-has-associated-label` off — Kumo initials triggers are labelled by
+  the design system, not a `htmlFor`.
+- `typescript/no-non-null-assertion` off in tests.
+
+⛔ Do not copy the library preset into an app and then disable those one by one. That is
+how every app grows a private oxlint.
 
 ## oxfmt and bunfig
 
@@ -63,8 +84,12 @@ cp node_modules/@homeflare/config/bunfig.toml  bunfig.toml
 ⚠️ `.oxfmtrc.json` needs the **leading dot**. Without it oxfmt silently uses its defaults,
 and the symptom is a formatter that rewrites your quotes.
 
-⛔ Neither format supports `extends`, so these two are copies. That means they can drift —
-which is what `@homeflare/config/check` exists to catch.
+⛔ oxfmt has no `extends`. Extra `ignorePatterns` are a **merge**: generated OpenAPI,
+`vendor/`, `**/generated/**`, `**/*.gen.ts` stay out of the formatter. ⛔ Identity
+comparison is the wrong gate — it rewrote 154 files to `singleQuote` and formatted
+vendor OpenAPI (measured 2026-09-16). Dropping a house ignore is still drift.
+
+`bunfig.toml` is still an exact copy.
 
 ## Keeping a project honest
 
@@ -76,8 +101,8 @@ if (problems.length > 0) throw new Error(problems.join('\n'));
 ```
 
 ★ Run it from a test. It asserts a project still extends the shared tsconfig and oxlint
-presets, and that its copied `.oxfmtrc.json` and `bunfig.toml` still match — so a project
-that quietly diverges fails its own suite rather than drifting for six months.
+presets, that `.oxfmtrc.json` keeps house style plus at least the house ignores, and that
+`bunfig.toml` still matches.
 
 ## License
 

package/dist/check.d.ts

@@ -1,20 +1,3 @@
-/**
- * Assert that a project still stands on the shared config.
- *
- * ★ WHY THIS EXISTS. Two of the five presets — `.oxfmtrc.json` and `bunfig.toml` — have no
- *   `extends` mechanism, so adopting them means COPYING them. A copy drifts silently: the
- *   project keeps building, the rules quietly diverge, and nobody finds out until two
- *   repos disagree about how the same code should look.
- *
- * ⛔ IT REPORTS, IT DOES NOT REPAIR. A checker that rewrites a project's config would
- *   overwrite a deliberate local exception, and this cannot tell the difference between
- *   drift and a decision. It names what differs; a human decides which way to move.
- *
- * ⚠️ Every file it reads is parsed natively — `Bun.file().json()`, `Bun.TOML.parse`. No
- *   parsing dependency reaches a consumer.
- *   ⛔ NOT JSONC. Bun's `.json()` rejects comments (measured 2026-09-15), so a project
- *     whose tsconfig carries them is reported as unreadable rather than silently skipped.
- */
 /** One thing a project should fix, in the imperative. */
 export type Problem = string;
 /**

package/dist/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,yDAAyD;AACzD,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAkH7B;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CASlF"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAmBA,yDAAyD;AACzD,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAyI7B;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CASlF"}

package/dist/check.js

@@ -1,4 +1,22 @@
 // @bun
+// src/oxfmt.ts
+var STYLE_KEYS = ["printWidth", "useTabs", "singleQuote", "semi"];
+function problemsInOxfmt(preset, theirs) {
+  const problems = [];
+  for (const key of STYLE_KEYS) {
+    if (theirs[key] !== preset[key]) {
+      problems.push(`.oxfmtrc.json: ${key} differs from @homeflare/config \u2014 re-copy it, or say why it differs`);
+    }
+  }
+  const local = new Set(theirs.ignorePatterns ?? []);
+  for (const pattern of preset.ignorePatterns ?? []) {
+    if (!local.has(pattern)) {
+      problems.push(`.oxfmtrc.json: missing house ignore ${pattern} \u2014 generated files would be rewritten`);
+    }
+  }
+  return problems;
+}
+
 // src/check.ts
 function stripComments(text) {
   let out = "";
@@ -74,11 +92,27 @@ async function checkCopy(projectDir, file, parse, problems) {
     problems.push(`${file}: differs from @homeflare/config \u2014 re-copy it, or say why it differs`);
   }
 }
+async function checkOxfmt(projectDir, problems) {
+  const mine = Bun.file(`${projectDir}/.oxfmtrc.json`);
+  if (!await mine.exists()) {
+    problems.push(".oxfmtrc.json: missing \u2014 copy it from @homeflare/config");
+    return;
+  }
+  let theirs;
+  try {
+    theirs = JSON.parse(await mine.text());
+  } catch {
+    problems.push(".oxfmtrc.json: unparseable");
+    return;
+  }
+  const preset = JSON.parse(await Bun.file(`${presetDir()}oxfmtrc.json`).text());
+  problems.push(...problemsInOxfmt(preset, theirs));
+}
 async function checkProject(projectDir) {
   const problems = [];
   await checkExtends(projectDir, "tsconfig.json", "@homeflare/config/tsconfig", problems);
   await checkExtends(projectDir, ".oxlintrc.json", "@homeflare/config/oxlintrc", problems);
-  await checkCopy(projectDir, ".oxfmtrc.json", (t) => JSON.parse(t), problems);
+  await checkOxfmt(projectDir, problems);
   await checkCopy(projectDir, "bunfig.toml", (t) => Bun.TOML.parse(t), problems);
   return problems;
 }
@@ -86,5 +120,5 @@ export {
   checkProject
 };
 
-//# debugId=7F6869C495728F5464756E2164756E21
+//# debugId=550B779804E201AD64756E2164756E21
 //# sourceMappingURL=check.js.map

package/dist/check.js.map

@@ -1,10 +1,11 @@
 {
   "version": 3,
-  "sources": ["../src/check.ts"],
+  "sources": ["../src/oxfmt.ts", "../src/check.ts"],
   "sourcesContent": [
-    "/**\n * Assert that a project still stands on the shared config.\n *\n * ★ WHY THIS EXISTS. Two of the five presets — `.oxfmtrc.json` and `bunfig.toml` — have no\n *   `extends` mechanism, so adopting them means COPYING them. A copy drifts silently: the\n *   project keeps building, the rules quietly diverge, and nobody finds out until two\n *   repos disagree about how the same code should look.\n *\n * ⛔ IT REPORTS, IT DOES NOT REPAIR. A checker that rewrites a project's config would\n *   overwrite a deliberate local exception, and this cannot tell the difference between\n *   drift and a decision. It names what differs; a human decides which way to move.\n *\n * ⚠️ Every file it reads is parsed natively — `Bun.file().json()`, `Bun.TOML.parse`. No\n *   parsing dependency reaches a consumer.\n *   ⛔ NOT JSONC. Bun's `.json()` rejects comments (measured 2026-09-15), so a project\n *     whose tsconfig carries them is reported as unreadable rather than silently skipped.\n */\n\n/** One thing a project should fix, in the imperative. */\nexport type Problem = string;\n\ntype Json = Record<string, unknown>;\n\n/**\n * ⚠️ A tsconfig LEGITIMATELY carries comments — that is where the reasoning for a strict\n *   flag lives, and stripping them to satisfy a parser would be the wrong trade. Bun's\n *   `.json()` rejects them (measured 2026-09-15), so comments are removed before parsing\n *   rather than treated as a fault.\n * 🔴 A NAIVE REGEX CORRUPTS THE FILE IT IS READING. Measured while writing this: a\n *   `(^|[^:\"])//.*$` strip mangled `\"./node_modules/oxlint/...\"` — the `//` inside a\n *   STRING — turning valid JSON into a parse error reported as \"JSONC not supported\".\n *   So this walks the text and tracks whether it is inside a string, which is the\n *   smallest correct thing; a real JSONC parser would be a dependency every consumer\n *   inherits for one check.\n */\nfunction stripComments(text: string): string {\n  let out = '';\n  let inString = false;\n  let escaped = false;\n\n  for (let i = 0; i < text.length; i += 1) {\n    const ch = text[i] ?? '';\n    const next = text[i + 1] ?? '';\n\n    if (inString) {\n      out += ch;\n      if (escaped) escaped = false;\n      else if (ch === '\\\\') escaped = true;\n      else if (ch === '\"') inString = false;\n      continue;\n    }\n\n    if (ch === '\"') {\n      inString = true;\n      out += ch;\n    } else if (ch === '/' && next === '/') {\n      while (i < text.length && text[i] !== '\\n') i += 1;\n      out += '\\n';\n    } else if (ch === '/' && next === '*') {\n      i += 2;\n      while (i < text.length && !(text[i] === '*' && text[i + 1] === '/')) i += 1;\n      i += 1;\n    } else {\n      out += ch;\n    }\n  }\n\n  return out;\n}\n\nasync function readJson(path: string): Promise<Json | undefined> {\n  const file = Bun.file(path);\n  if (!(await file.exists())) return undefined;\n  try {\n    return JSON.parse(stripComments(await file.text())) as Json;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Where this package's own presets live, however it was installed. */\nfunction presetDir(): string {\n  return new URL('../', import.meta.url).pathname;\n}\n\nasync function checkExtends(\n  projectDir: string,\n  file: string,\n  needle: string,\n  problems: Problem[],\n): Promise<void> {\n  const config = await readJson(`${projectDir}/${file}`);\n  if (config === undefined) {\n    problems.push(`${file}: missing or unparseable (JSONC comments are not supported)`);\n    return;\n  }\n\n  const extended = JSON.stringify(config['extends'] ?? '');\n\n  // ⚠️ A WORKSPACE PATH COUNTS. Inside this repo the presets are referenced as\n  //   `./packages/config/...` rather than by package name, and reporting that as drift\n  //   would make the check fail in the one repo that defines the config.\n  const workspacePath = needle.replace('@homeflare/config/', 'packages/config/');\n  if (!extended.includes(needle) && !extended.includes(workspacePath)) {\n    problems.push(`${file}: does not extend ${needle} — it currently extends ${extended}`);\n  }\n}\n\n/**\n * Compare a copied file against the preset, ignoring formatting.\n * ⚠️ Structural comparison, not text: a project that reformats its copy has not drifted,\n *   and reporting that would train people to ignore this check.\n */\nasync function checkCopy(\n  projectDir: string,\n  file: string,\n  parse: (text: string) => unknown,\n  problems: Problem[],\n): Promise<void> {\n  const mine = Bun.file(`${projectDir}/${file}`);\n  if (!(await mine.exists())) {\n    problems.push(`${file}: missing — copy it from @homeflare/config`);\n    return;\n  }\n\n  const preset = parse(await Bun.file(`${presetDir()}${file.replace(/^\\./, '')}`).text());\n  const theirs = parse(await mine.text());\n\n  if (JSON.stringify(theirs) !== JSON.stringify(preset)) {\n    problems.push(`${file}: differs from @homeflare/config — re-copy it, or say why it differs`);\n  }\n}\n\n/**\n * Check a project directory. Returns an empty array when everything is in step.\n *\n *     const problems = await checkProject(process.cwd());\n *     expect(problems).toEqual([]);\n */\nexport async function checkProject(projectDir: string): Promise<readonly Problem[]> {\n  const problems: Problem[] = [];\n\n  await checkExtends(projectDir, 'tsconfig.json', '@homeflare/config/tsconfig', problems);\n  await checkExtends(projectDir, '.oxlintrc.json', '@homeflare/config/oxlintrc', problems);\n  await checkCopy(projectDir, '.oxfmtrc.json', (t) => JSON.parse(t) as unknown, problems);\n  await checkCopy(projectDir, 'bunfig.toml', (t) => Bun.TOML.parse(t), problems);\n\n  return problems;\n}\n"
+    "/**\n * House oxfmt is a COPY — the format has no `extends`.\n *\n * ⛔ IDENTITY WAS THE WRONG GATE. Measured 2026-09-16: a Worker/TanStack app that\n *   copied the preset verbatim would format vendor OpenAPI YAML, generated trees,\n *   TanStack routeTree files and openapi.json, and rewrite 154 files to singleQuote.\n *   Generated OpenAPI is an artefact; a quote flip there is a false diff, not style.\n *\n * ★ Extra `ignorePatterns` are therefore allowed. House style keys are not. Dropping\n *   a house ignore is still drift — that is how generated files get rewritten.\n */\n\nexport type OxfmtConfig = {\n  readonly printWidth?: number;\n  readonly useTabs?: boolean;\n  readonly singleQuote?: boolean;\n  readonly semi?: boolean;\n  readonly ignorePatterns?: readonly string[];\n  readonly [key: string]: unknown;\n};\n\nconst STYLE_KEYS = ['printWidth', 'useTabs', 'singleQuote', 'semi'] as const;\n\n/**\n * Problems in a project's `.oxfmtrc.json` against the house preset.\n * Empty means the copy still carries house style, and at least the house ignores.\n */\nexport function problemsInOxfmt(preset: OxfmtConfig, theirs: OxfmtConfig): readonly string[] {\n  const problems: string[] = [];\n\n  for (const key of STYLE_KEYS) {\n    if (theirs[key] !== preset[key]) {\n      problems.push(\n        `.oxfmtrc.json: ${key} differs from @homeflare/config — re-copy it, or say why it differs`,\n      );\n    }\n  }\n\n  const local = new Set(theirs.ignorePatterns ?? []);\n  for (const pattern of preset.ignorePatterns ?? []) {\n    if (!local.has(pattern)) {\n      problems.push(\n        `.oxfmtrc.json: missing house ignore ${pattern} — generated files would be rewritten`,\n      );\n    }\n  }\n\n  return problems;\n}\n",
+    "/**\n * Assert that a project still stands on the shared config.\n *\n * ★ WHY THIS EXISTS. Two of the five presets — `.oxfmtrc.json` and `bunfig.toml` — have no\n *   `extends` mechanism, so adopting them means COPYING them. A copy drifts silently: the\n *   project keeps building, the rules quietly diverge, and nobody finds out until two\n *   repos disagree about how the same code should look.\n *\n * ⛔ IT REPORTS, IT DOES NOT REPAIR. A checker that rewrites a project's config would\n *   overwrite a deliberate local exception, and this cannot tell the difference between\n *   drift and a decision. It names what differs; a human decides which way to move.\n *\n * ⚠️ Every file it reads is parsed natively — `Bun.file().json()`, `Bun.TOML.parse`. No\n *   parsing dependency reaches a consumer.\n *   ⛔ NOT JSONC. Bun's `.json()` rejects comments (measured 2026-09-15), so a project\n *     whose tsconfig carries them is reported as unreadable rather than silently skipped.\n */\nimport { type OxfmtConfig, problemsInOxfmt } from './oxfmt.ts';\n\n/** One thing a project should fix, in the imperative. */\nexport type Problem = string;\n\ntype Json = Record<string, unknown>;\n\n/**\n * ⚠️ A tsconfig LEGITIMATELY carries comments — that is where the reasoning for a strict\n *   flag lives, and stripping them to satisfy a parser would be the wrong trade. Bun's\n *   `.json()` rejects them (measured 2026-09-15), so comments are removed before parsing\n *   rather than treated as a fault.\n * 🔴 A NAIVE REGEX CORRUPTS THE FILE IT IS READING. Measured while writing this: a\n *   `(^|[^:\"])//.*$` strip mangled `\"./node_modules/oxlint/...\"` — the `//` inside a\n *   STRING — turning valid JSON into a parse error reported as \"JSONC not supported\".\n *   So this walks the text and tracks whether it is inside a string, which is the\n *   smallest correct thing; a real JSONC parser would be a dependency every consumer\n *   inherits for one check.\n */\nfunction stripComments(text: string): string {\n  let out = '';\n  let inString = false;\n  let escaped = false;\n\n  for (let i = 0; i < text.length; i += 1) {\n    const ch = text[i] ?? '';\n    const next = text[i + 1] ?? '';\n\n    if (inString) {\n      out += ch;\n      if (escaped) escaped = false;\n      else if (ch === '\\\\') escaped = true;\n      else if (ch === '\"') inString = false;\n      continue;\n    }\n\n    if (ch === '\"') {\n      inString = true;\n      out += ch;\n    } else if (ch === '/' && next === '/') {\n      while (i < text.length && text[i] !== '\\n') i += 1;\n      out += '\\n';\n    } else if (ch === '/' && next === '*') {\n      i += 2;\n      while (i < text.length && !(text[i] === '*' && text[i + 1] === '/')) i += 1;\n      i += 1;\n    } else {\n      out += ch;\n    }\n  }\n\n  return out;\n}\n\nasync function readJson(path: string): Promise<Json | undefined> {\n  const file = Bun.file(path);\n  if (!(await file.exists())) return undefined;\n  try {\n    return JSON.parse(stripComments(await file.text())) as Json;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Where this package's own presets live, however it was installed. */\nfunction presetDir(): string {\n  return new URL('../', import.meta.url).pathname;\n}\n\nasync function checkExtends(\n  projectDir: string,\n  file: string,\n  needle: string,\n  problems: Problem[],\n): Promise<void> {\n  const config = await readJson(`${projectDir}/${file}`);\n  if (config === undefined) {\n    problems.push(`${file}: missing or unparseable (JSONC comments are not supported)`);\n    return;\n  }\n\n  const extended = JSON.stringify(config['extends'] ?? '');\n\n  // ⚠️ A WORKSPACE PATH COUNTS. Inside this repo the presets are referenced as\n  //   `./packages/config/...` rather than by package name, and reporting that as drift\n  //   would make the check fail in the one repo that defines the config.\n  const workspacePath = needle.replace('@homeflare/config/', 'packages/config/');\n  if (!extended.includes(needle) && !extended.includes(workspacePath)) {\n    problems.push(`${file}: does not extend ${needle} — it currently extends ${extended}`);\n  }\n}\n\n/**\n * Compare a copied file against the preset, ignoring formatting.\n * ⚠️ Structural comparison, not text: a project that reformats its copy has not drifted,\n *   and reporting that would train people to ignore this check.\n */\nasync function checkCopy(\n  projectDir: string,\n  file: string,\n  parse: (text: string) => unknown,\n  problems: Problem[],\n): Promise<void> {\n  const mine = Bun.file(`${projectDir}/${file}`);\n  if (!(await mine.exists())) {\n    problems.push(`${file}: missing — copy it from @homeflare/config`);\n    return;\n  }\n\n  const preset = parse(await Bun.file(`${presetDir()}${file.replace(/^\\./, '')}`).text());\n  const theirs = parse(await mine.text());\n\n  if (JSON.stringify(theirs) !== JSON.stringify(preset)) {\n    problems.push(`${file}: differs from @homeflare/config — re-copy it, or say why it differs`);\n  }\n}\n\n/**\n * House oxfmt has no `extends`. Extra ignores are a merge; style keys are not.\n * ⛔ Identity comparison rewrote generated OpenAPI (measured 2026-09-16).\n */\nasync function checkOxfmt(projectDir: string, problems: Problem[]): Promise<void> {\n  const mine = Bun.file(`${projectDir}/.oxfmtrc.json`);\n  if (!(await mine.exists())) {\n    problems.push('.oxfmtrc.json: missing — copy it from @homeflare/config');\n    return;\n  }\n\n  let theirs: OxfmtConfig;\n  try {\n    theirs = JSON.parse(await mine.text()) as OxfmtConfig;\n  } catch {\n    problems.push('.oxfmtrc.json: unparseable');\n    return;\n  }\n\n  const preset = JSON.parse(await Bun.file(`${presetDir()}oxfmtrc.json`).text()) as OxfmtConfig;\n  problems.push(...problemsInOxfmt(preset, theirs));\n}\n\n/**\n * Check a project directory. Returns an empty array when everything is in step.\n *\n *     const problems = await checkProject(process.cwd());\n *     expect(problems).toEqual([]);\n */\nexport async function checkProject(projectDir: string): Promise<readonly Problem[]> {\n  const problems: Problem[] = [];\n\n  await checkExtends(projectDir, 'tsconfig.json', '@homeflare/config/tsconfig', problems);\n  await checkExtends(projectDir, '.oxlintrc.json', '@homeflare/config/oxlintrc', problems);\n  await checkOxfmt(projectDir, problems);\n  await checkCopy(projectDir, 'bunfig.toml', (t) => Bun.TOML.parse(t), problems);\n\n  return problems;\n}\n"
   ],
-  "mappings": ";;AAmCA,SAAS,aAAa,CAAC,MAAsB;AAAA,EAC3C,IAAI,MAAM;AAAA,EACV,IAAI,WAAW;AAAA,EACf,IAAI,UAAU;AAAA,EAEd,SAAS,IAAI,EAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AAAA,IACvC,MAAM,KAAK,KAAK,MAAM;AAAA,IACtB,MAAM,OAAO,KAAK,IAAI,MAAM;AAAA,IAE5B,IAAI,UAAU;AAAA,MACZ,OAAO;AAAA,MACP,IAAI;AAAA,QAAS,UAAU;AAAA,MAClB,SAAI,OAAO;AAAA,QAAM,UAAU;AAAA,MAC3B,SAAI,OAAO;AAAA,QAAK,WAAW;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI,OAAO,KAAK;AAAA,MACd,WAAW;AAAA,MACX,OAAO;AAAA,IACT,EAAO,SAAI,OAAO,OAAO,SAAS,KAAK;AAAA,MACrC,OAAO,IAAI,KAAK,UAAU,KAAK,OAAO;AAAA;AAAA,QAAM,KAAK;AAAA,MACjD,OAAO;AAAA;AAAA,IACT,EAAO,SAAI,OAAO,OAAO,SAAS,KAAK;AAAA,MACrC,KAAK;AAAA,MACL,OAAO,IAAI,KAAK,UAAU,EAAE,KAAK,OAAO,OAAO,KAAK,IAAI,OAAO;AAAA,QAAM,KAAK;AAAA,MAC1E,KAAK;AAAA,IACP,EAAO;AAAA,MACL,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO;AAAA;AAGT,eAAe,QAAQ,CAAC,MAAyC;AAAA,EAC/D,MAAM,OAAO,IAAI,KAAK,IAAI;AAAA,EAC1B,IAAI,CAAE,MAAM,KAAK,OAAO;AAAA,IAAI;AAAA,EAC5B,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,cAAc,MAAM,KAAK,KAAK,CAAC,CAAC;AAAA,IAClD,MAAM;AAAA,IACN;AAAA;AAAA;AAKJ,SAAS,SAAS,GAAW;AAAA,EAC3B,OAAO,IAAI,IAAI,OAAO,YAAY,GAAG,EAAE;AAAA;AAGzC,eAAe,YAAY,CACzB,YACA,MACA,QACA,UACe;AAAA,EACf,MAAM,SAAS,MAAM,SAAS,GAAG,cAAc,MAAM;AAAA,EACrD,IAAI,WAAW,WAAW;AAAA,IACxB,SAAS,KAAK,GAAG,iEAAiE;AAAA,IAClF;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,EAAE;AAAA,EAKvD,MAAM,gBAAgB,OAAO,QAAQ,sBAAsB,kBAAkB;AAAA,EAC7E,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC,SAAS,SAAS,aAAa,GAAG;AAAA,IACnE,SAAS,KAAK,GAAG,yBAAyB,sCAAiC,UAAU;AAAA,EACvF;AAAA;AAQF,eAAe,SAAS,CACtB,YACA,MACA,OACA,UACe;AAAA,EACf,MAAM,OAAO,IAAI,KAAK,GAAG,cAAc,MAAM;AAAA,EAC7C,IAAI,CAAE,MAAM,KAAK,OAAO,GAAI;AAAA,IAC1B,SAAS,KAAK,GAAG,qDAAgD;AAAA,IACjE;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,MAAM,MAAM,IAAI,KAAK,GAAG,UAAU,IAAI,KAAK,QAAQ,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;AAAA,EACtF,MAAM,SAAS,MAAM,MAAM,KAAK,KAAK,CAAC;AAAA,EAEtC,IAAI,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,MAAM,GAAG;AAAA,IACrD,SAAS,KAAK,GAAG,+EAA0E;AAAA,EAC7F;AAAA;AASF,eAAsB,YAAY,CAAC,YAAiD;AAAA,EAClF,MAAM,WAAsB,CAAC;AAAA,EAE7B,MAAM,aAAa,YAAY,iBAAiB,8BAA8B,QAAQ;AAAA,EACtF,MAAM,aAAa,YAAY,kBAAkB,8BAA8B,QAAQ;AAAA,EACvF,MAAM,UAAU,YAAY,iBAAiB,CAAC,MAAM,KAAK,MAAM,CAAC,GAAc,QAAQ;AAAA,EACtF,MAAM,UAAU,YAAY,eAAe,CAAC,MAAM,IAAI,KAAK,MAAM,CAAC,GAAG,QAAQ;AAAA,EAE7E,OAAO;AAAA;",
-  "debugId": "7F6869C495728F5464756E2164756E21",
+  "mappings": ";;AAqBA,IAAM,aAAa,CAAC,cAAc,WAAW,eAAe,MAAM;AAM3D,SAAS,eAAe,CAAC,QAAqB,QAAwC;AAAA,EAC3F,MAAM,WAAqB,CAAC;AAAA,EAE5B,WAAW,OAAO,YAAY;AAAA,IAC5B,IAAI,OAAO,SAAS,OAAO,MAAM;AAAA,MAC/B,SAAS,KACP,kBAAkB,6EACpB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,IAAI,IAAI,OAAO,kBAAkB,CAAC,CAAC;AAAA,EACjD,WAAW,WAAW,OAAO,kBAAkB,CAAC,GAAG;AAAA,IACjD,IAAI,CAAC,MAAM,IAAI,OAAO,GAAG;AAAA,MACvB,SAAS,KACP,uCAAuC,mDACzC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;;;ACXT,SAAS,aAAa,CAAC,MAAsB;AAAA,EAC3C,IAAI,MAAM;AAAA,EACV,IAAI,WAAW;AAAA,EACf,IAAI,UAAU;AAAA,EAEd,SAAS,IAAI,EAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AAAA,IACvC,MAAM,KAAK,KAAK,MAAM;AAAA,IACtB,MAAM,OAAO,KAAK,IAAI,MAAM;AAAA,IAE5B,IAAI,UAAU;AAAA,MACZ,OAAO;AAAA,MACP,IAAI;AAAA,QAAS,UAAU;AAAA,MAClB,SAAI,OAAO;AAAA,QAAM,UAAU;AAAA,MAC3B,SAAI,OAAO;AAAA,QAAK,WAAW;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI,OAAO,KAAK;AAAA,MACd,WAAW;AAAA,MACX,OAAO;AAAA,IACT,EAAO,SAAI,OAAO,OAAO,SAAS,KAAK;AAAA,MACrC,OAAO,IAAI,KAAK,UAAU,KAAK,OAAO;AAAA;AAAA,QAAM,KAAK;AAAA,MACjD,OAAO;AAAA;AAAA,IACT,EAAO,SAAI,OAAO,OAAO,SAAS,KAAK;AAAA,MACrC,KAAK;AAAA,MACL,OAAO,IAAI,KAAK,UAAU,EAAE,KAAK,OAAO,OAAO,KAAK,IAAI,OAAO;AAAA,QAAM,KAAK;AAAA,MAC1E,KAAK;AAAA,IACP,EAAO;AAAA,MACL,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO;AAAA;AAGT,eAAe,QAAQ,CAAC,MAAyC;AAAA,EAC/D,MAAM,OAAO,IAAI,KAAK,IAAI;AAAA,EAC1B,IAAI,CAAE,MAAM,KAAK,OAAO;AAAA,IAAI;AAAA,EAC5B,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,cAAc,MAAM,KAAK,KAAK,CAAC,CAAC;AAAA,IAClD,MAAM;AAAA,IACN;AAAA;AAAA;AAKJ,SAAS,SAAS,GAAW;AAAA,EAC3B,OAAO,IAAI,IAAI,OAAO,YAAY,GAAG,EAAE;AAAA;AAGzC,eAAe,YAAY,CACzB,YACA,MACA,QACA,UACe;AAAA,EACf,MAAM,SAAS,MAAM,SAAS,GAAG,cAAc,MAAM;AAAA,EACrD,IAAI,WAAW,WAAW;AAAA,IACxB,SAAS,KAAK,GAAG,iEAAiE;AAAA,IAClF;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,KAAK,UAAU,OAAO,cAAc,EAAE;AAAA,EAKvD,MAAM,gBAAgB,OAAO,QAAQ,sBAAsB,kBAAkB;AAAA,EAC7E,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC,SAAS,SAAS,aAAa,GAAG;AAAA,IACnE,SAAS,KAAK,GAAG,yBAAyB,sCAAiC,UAAU;AAAA,EACvF;AAAA;AAQF,eAAe,SAAS,CACtB,YACA,MACA,OACA,UACe;AAAA,EACf,MAAM,OAAO,IAAI,KAAK,GAAG,cAAc,MAAM;AAAA,EAC7C,IAAI,CAAE,MAAM,KAAK,OAAO,GAAI;AAAA,IAC1B,SAAS,KAAK,GAAG,qDAAgD;AAAA,IACjE;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,MAAM,MAAM,IAAI,KAAK,GAAG,UAAU,IAAI,KAAK,QAAQ,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;AAAA,EACtF,MAAM,SAAS,MAAM,MAAM,KAAK,KAAK,CAAC;AAAA,EAEtC,IAAI,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,MAAM,GAAG;AAAA,IACrD,SAAS,KAAK,GAAG,+EAA0E;AAAA,EAC7F;AAAA;AAOF,eAAe,UAAU,CAAC,YAAoB,UAAoC;AAAA,EAChF,MAAM,OAAO,IAAI,KAAK,GAAG,0BAA0B;AAAA,EACnD,IAAI,CAAE,MAAM,KAAK,OAAO,GAAI;AAAA,IAC1B,SAAS,KAAK,8DAAyD;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;AAAA,IACrC,MAAM;AAAA,IACN,SAAS,KAAK,4BAA4B;AAAA,IAC1C;AAAA;AAAA,EAGF,MAAM,SAAS,KAAK,MAAM,MAAM,IAAI,KAAK,GAAG,UAAU,eAAe,EAAE,KAAK,CAAC;AAAA,EAC7E,SAAS,KAAK,GAAG,gBAAgB,QAAQ,MAAM,CAAC;AAAA;AASlD,eAAsB,YAAY,CAAC,YAAiD;AAAA,EAClF,MAAM,WAAsB,CAAC;AAAA,EAE7B,MAAM,aAAa,YAAY,iBAAiB,8BAA8B,QAAQ;AAAA,EACtF,MAAM,aAAa,YAAY,kBAAkB,8BAA8B,QAAQ;AAAA,EACvF,MAAM,WAAW,YAAY,QAAQ;AAAA,EACrC,MAAM,UAAU,YAAY,eAAe,CAAC,MAAM,IAAI,KAAK,MAAM,CAAC,GAAG,QAAQ;AAAA,EAE7E,OAAO;AAAA;",
+  "debugId": "550B779804E201AD64756E2164756E21",
   "names": []
 }

package/dist/oxfmt.d.ts

@@ -0,0 +1,25 @@
+/**
+ * House oxfmt is a COPY — the format has no `extends`.
+ *
+ * ⛔ IDENTITY WAS THE WRONG GATE. Measured 2026-09-16: a Worker/TanStack app that
+ *   copied the preset verbatim would format vendor OpenAPI YAML, generated trees,
+ *   TanStack routeTree files and openapi.json, and rewrite 154 files to singleQuote.
+ *   Generated OpenAPI is an artefact; a quote flip there is a false diff, not style.
+ *
+ * ★ Extra `ignorePatterns` are therefore allowed. House style keys are not. Dropping
+ *   a house ignore is still drift — that is how generated files get rewritten.
+ */
+export type OxfmtConfig = {
+    readonly printWidth?: number;
+    readonly useTabs?: boolean;
+    readonly singleQuote?: boolean;
+    readonly semi?: boolean;
+    readonly ignorePatterns?: readonly string[];
+    readonly [key: string]: unknown;
+};
+/**
+ * Problems in a project's `.oxfmtrc.json` against the house preset.
+ * Empty means the copy still carries house style, and at least the house ignores.
+ */
+export declare function problemsInOxfmt(preset: OxfmtConfig, theirs: OxfmtConfig): readonly string[];
+//# sourceMappingURL=oxfmt.d.ts.map

package/dist/oxfmt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxfmt.d.ts","sourceRoot":"","sources":["../src/oxfmt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC,CAAC;AAIF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,SAAS,MAAM,EAAE,CAqB3F"}

package/oxfmtrc.json

@@ -3,5 +3,17 @@
   "useTabs": false,
   "singleQuote": true,
   "semi": true,
-  "ignorePatterns": ["**/node_modules/**", "**/dist/**", "**/coverage/**"]
+  "ignorePatterns": [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/coverage/**",
+    "**/generated/**",
+    "**/*.gen.ts",
+    "**/vendor/**",
+    "**/*.openapi.yaml",
+    "**/*.openapi.yml",
+    "**/openapi.json",
+    "**/.wrangler/**",
+    "**/worker-configuration.d.ts"
+  ]
 }

package/oxlintrc.app.json

@@ -0,0 +1,32 @@
+{
+  "extends": ["./oxlintrc.json"],
+  "ignorePatterns": [
+    "dist/**",
+    "coverage/**",
+    "**/generated/**",
+    "**/*.gen.ts",
+    "**/vendor/**",
+    "**/*.openapi.yaml",
+    "**/*.openapi.yml",
+    "**/openapi.json"
+  ],
+  "rules": {
+    "import/no-default-export": "off",
+    "jsx-a11y/control-has-associated-label": "off"
+  },
+  "overrides": [
+    {
+      "files": ["src/**", "workers/**", "app/**"],
+      "rules": {
+        "no-console": "off"
+      }
+    },
+    {
+      "files": ["**/tests/**", "**/*.test.ts", "**/*.test.tsx", "**/*.spec.ts", "**/scripts/**"],
+      "rules": {
+        "no-console": "off",
+        "typescript/no-non-null-assertion": "off"
+      }
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@homeflare/config",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "Shared tsconfig, oxlint and oxfmt configuration for HomeFlare projects.",
   "license": "MIT",
   "author": "Timothy Schneider",
@@ -14,7 +14,9 @@
     "src",
     "tsconfig.base.json",
     "tsconfig.lib.json",
+    "tsconfig.app.json",
     "oxlintrc.json",
+    "oxlintrc.app.json",
     "oxfmtrc.json",
     "bunfig.toml",
     "README.md",
@@ -24,7 +26,9 @@
   "exports": {
     "./tsconfig.base.json": "./tsconfig.base.json",
     "./tsconfig.lib.json": "./tsconfig.lib.json",
+    "./tsconfig.app.json": "./tsconfig.app.json",
     "./oxlintrc.json": "./oxlintrc.json",
+    "./oxlintrc.app.json": "./oxlintrc.app.json",
     "./oxfmtrc.json": "./oxfmtrc.json",
     "./bunfig.toml": "./bunfig.toml",
     "./check": {

package/src/check.ts

@@ -15,6 +15,7 @@
  *   ⛔ NOT JSONC. Bun's `.json()` rejects comments (measured 2026-09-15), so a project
  *     whose tsconfig carries them is reported as unreadable rather than silently skipped.
  */
+import { type OxfmtConfig, problemsInOxfmt } from './oxfmt.ts';
 
 /** One thing a project should fix, in the imperative. */
 export type Problem = string;
@@ -131,6 +132,29 @@ async function checkCopy(
   }
 }
 
+/**
+ * House oxfmt has no `extends`. Extra ignores are a merge; style keys are not.
+ * ⛔ Identity comparison rewrote generated OpenAPI (measured 2026-09-16).
+ */
+async function checkOxfmt(projectDir: string, problems: Problem[]): Promise<void> {
+  const mine = Bun.file(`${projectDir}/.oxfmtrc.json`);
+  if (!(await mine.exists())) {
+    problems.push('.oxfmtrc.json: missing — copy it from @homeflare/config');
+    return;
+  }
+
+  let theirs: OxfmtConfig;
+  try {
+    theirs = JSON.parse(await mine.text()) as OxfmtConfig;
+  } catch {
+    problems.push('.oxfmtrc.json: unparseable');
+    return;
+  }
+
+  const preset = JSON.parse(await Bun.file(`${presetDir()}oxfmtrc.json`).text()) as OxfmtConfig;
+  problems.push(...problemsInOxfmt(preset, theirs));
+}
+
 /**
  * Check a project directory. Returns an empty array when everything is in step.
  *
@@ -142,7 +166,7 @@ export async function checkProject(projectDir: string): Promise<readonly Problem
 
   await checkExtends(projectDir, 'tsconfig.json', '@homeflare/config/tsconfig', problems);
   await checkExtends(projectDir, '.oxlintrc.json', '@homeflare/config/oxlintrc', problems);
-  await checkCopy(projectDir, '.oxfmtrc.json', (t) => JSON.parse(t) as unknown, problems);
+  await checkOxfmt(projectDir, problems);
   await checkCopy(projectDir, 'bunfig.toml', (t) => Bun.TOML.parse(t), problems);
 
   return problems;

package/src/oxfmt.ts

@@ -0,0 +1,49 @@
+/**
+ * House oxfmt is a COPY — the format has no `extends`.
+ *
+ * ⛔ IDENTITY WAS THE WRONG GATE. Measured 2026-09-16: a Worker/TanStack app that
+ *   copied the preset verbatim would format vendor OpenAPI YAML, generated trees,
+ *   TanStack routeTree files and openapi.json, and rewrite 154 files to singleQuote.
+ *   Generated OpenAPI is an artefact; a quote flip there is a false diff, not style.
+ *
+ * ★ Extra `ignorePatterns` are therefore allowed. House style keys are not. Dropping
+ *   a house ignore is still drift — that is how generated files get rewritten.
+ */
+
+export type OxfmtConfig = {
+  readonly printWidth?: number;
+  readonly useTabs?: boolean;
+  readonly singleQuote?: boolean;
+  readonly semi?: boolean;
+  readonly ignorePatterns?: readonly string[];
+  readonly [key: string]: unknown;
+};
+
+const STYLE_KEYS = ['printWidth', 'useTabs', 'singleQuote', 'semi'] as const;
+
+/**
+ * Problems in a project's `.oxfmtrc.json` against the house preset.
+ * Empty means the copy still carries house style, and at least the house ignores.
+ */
+export function problemsInOxfmt(preset: OxfmtConfig, theirs: OxfmtConfig): readonly string[] {
+  const problems: string[] = [];
+
+  for (const key of STYLE_KEYS) {
+    if (theirs[key] !== preset[key]) {
+      problems.push(
+        `.oxfmtrc.json: ${key} differs from @homeflare/config — re-copy it, or say why it differs`,
+      );
+    }
+  }
+
+  const local = new Set(theirs.ignorePatterns ?? []);
+  for (const pattern of preset.ignorePatterns ?? []) {
+    if (!local.has(pattern)) {
+      problems.push(
+        `.oxfmtrc.json: missing house ignore ${pattern} — generated files would be rewritten`,
+      );
+    }
+  }
+
+  return problems;
+}

package/tsconfig.app.json

@@ -0,0 +1,22 @@
+{
+  // For a Worker or app that IMPORTS packages which publish TypeScript source.
+  //
+  //     { "extends": "@homeflare/config/tsconfig.app.json" }
+  //
+  // ★ THE STRICT BASELINE STAYS. tsconfig.base.json and tsconfig.lib.json keep
+  //   exactOptionalPropertyTypes, noImplicitOverride and noUncheckedIndexedAccess —
+  //   they catch real bugs in code you own.
+  //
+  // ⛔ skipLibCheck CANNOT HELP HERE. It only skips .d.ts. Measured 2026-09-16:
+  //   @cloudflare/ci@0.2.0 ships `"types": "./src/index.ts"`, and Better Auth plugin
+  //   types do the same via a `dev-source` condition. Those files typecheck under
+  //   THIS project's flags, so the three below fail the consumer, not the library.
+  //
+  // Override them back on in a project that does not import source-publishing deps.
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "exactOptionalPropertyTypes": false,
+    "noImplicitOverride": false,
+    "noUncheckedIndexedAccess": false
+  }
+}