@multiplatform.one/config 7.11.0 → 7.15.0

package/lint.mjs

@@ -54,6 +54,22 @@
  *    platform=web, i.e. an Expo DOM component). Node-only build tooling is
  *    exempt by construction: a file that imports a `node:` builtin cannot run
  *    in a browser or on Hermes anyway.
+ * 11. Fail on an UNDECLARED SIZE-RECIPE ESCAPE (MPO-23, `00` L8 E8) — a
+ *    `sizeRecipeEscape` prop, key or call, or a `size-recipe-escape:` comment,
+ *    whose file and reason are not a row in the spec's `## Size-recipe
+ *    escapes` table, or a row whose site is gone.
+ * 12. Fail on an UNLABELED FOREIGN CONTROL SPECIMEN (LC-56 STORY-HONESTY,
+ *    MPO-316) — a `*.stories.tsx` that value-imports a raw control primitive
+ *    (`Input`, `Button`, `Checkbox`, …) from `tamagui` without carrying
+ *    `parameters.foreignContrastSpecimen: true`. A raw primitive consumes no
+ *    knobs, so a knob sweep that trusts the story scores the primitive and
+ *    marks the component checked. Layout and text primitives (XStack,
+ *    Paragraph, …) are out of scope by rule.
+ * 13. Fail on an UNDECLARED COLOUR-LITERAL ESCAPE (MPO-326) — a
+ *    `hex-escape:` comment, which exempts its file from
+ *    `mpo-conventions/no-hex-literals`, whose file and reason are not a row
+ *    in the spec's `## Colour-literal escapes` table, or a row whose comment
+ *    is gone.
  *
  * Usage:
  *   import { runConventionChecks } from "@multiplatform.one/config/lint";
@@ -65,9 +81,11 @@
 
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
-import { join, relative } from "node:path";
+import { dirname, join, relative } from "node:path";
 import { pathToFileURL } from "node:url";
 import { DRAWING_PRAGMA, isDrawingFile, readDrawingRegistry } from "./drawing-registry.mjs";
+import { findHexEscapes } from "./oxlint.mjs";
+import { readHexEscapeRegistry, readSizeRecipeEscapeRegistry } from "./spec-registry.mjs";
 
 /**
  * @typedef {{ root?: string, apps?: string, features?: string, public?: string, packages?: string }} ConventionRoots
@@ -154,12 +172,17 @@ const CSS_IGNORE_PREFIXES = [
   join("frappe", "sites"),
   // Keycloakify vendored theme resources (not app-authored styles)
   join("keycloak", "public", "keycloakify-dev-resources"),
-  // Platform-forced: vscode webviews rewrite <link href> to vscode-resource
-  // URIs and url() resolves relative to the emitted stylesheet — inline
-  // <style> would resolve against vscode-webview:// instead (LC-33 fonts).
-  join("one", "vscode", "webview", "fonts.css"),
 ];
 
+/**
+ * Paths inside ANY product app that are never scanned for .css: `mpo init`
+ * renames apps/one to each product app (MPO-318), so these cannot be pinned to
+ * `one`. Platform-forced: vscode webviews rewrite <link href> to
+ * vscode-resource URIs and url() resolves relative to the emitted stylesheet —
+ * inline <style> would resolve against vscode-webview:// instead (LC-33 fonts).
+ */
+const CSS_IGNORE_APP_FILES = new Set(["vscode/webview/fonts.css"]);
+
 /** Generated Tamagui CSS extract filenames (not hand-authored app styles). */
 const GENERATED_CSS_NAMES = new Set(["tamagui.css", "tamagui.content.css"]);
 
@@ -195,8 +218,9 @@ function isCssIgnored(absPath) {
   if (CSS_IGNORE_PREFIXES.some((prefix) => rel === prefix || rel.startsWith(prefix + "/"))) {
     return true;
   }
-  const base = rel.split(/[/\\]/).pop() ?? "";
-  return GENERATED_CSS_NAMES.has(base);
+  const parts = rel.split(/[/\\]/);
+  if (CSS_IGNORE_APP_FILES.has(parts.slice(1).join("/"))) return true;
+  return GENERATED_CSS_NAMES.has(parts.at(-1) ?? "");
 }
 
 function listAppNames() {
@@ -239,9 +263,25 @@ function tryRequire(name) {
   }
 }
 
-/** @param {string} relPath */
+/**
+ * A registry source under public/<pkg>/, or, when the tree has no
+ * public/<pkg> (every project `mpo init` scaffolds), the same path inside the
+ * installed @multiplatform.one/<pkg>, which publishes its src/ (MPO-352).
+ * @param {string} relPath
+ */
 function readPublicSource(relPath) {
-  const full = join(PUBLIC_DIR, relPath);
+  const [pkg, ...rest] = relPath.split("/");
+  let full = join(PUBLIC_DIR, relPath);
+  if (!existsSync(join(PUBLIC_DIR, pkg))) {
+    try {
+      full = join(
+        dirname(requireFromRoot.resolve(`@multiplatform.one/${pkg}/package.json`)),
+        ...rest,
+      );
+    } catch {
+      return "";
+    }
+  }
   return existsSync(full) ? readFileSync(full, "utf8") : "";
 }
 
@@ -335,9 +375,11 @@ function scanLiterals(re, check) {
  * @returns {Set<string>}
  */
 function readAnimationTokens() {
-  const tokens = new Set(["none"]); // valid non-animating value
+  /** @type {Set<string>} */
+  const tokens = new Set();
   const src = readPublicSource("theme/src/theme/animations/css.ts");
   if (!src) return tokens;
+  tokens.add("none"); // valid non-animating value
   for (const key of keysOfBlock(sliceBlock(src, "animationConfig =", "} as const"), 2)) {
     tokens.add(key);
   }
@@ -347,6 +389,7 @@ function readAnimationTokens() {
 /** Flag `transition="literal"` / `transition={"literal"}` using an unregistered token. */
 function checkTransitionTokens() {
   const valid = readAnimationTokens();
+  if (!valid.size) return { violations: [], valid: [], ok: false };
   // Only string LITERALS directly on the prop — dynamic values (variables,
   // ternaries, knobProps.transition) resolve at runtime and are out of scope.
   const re = /\btransition=(?:"([a-zA-Z0-9]+)"|\{\s*"([a-zA-Z0-9]+)"\s*\})/g;
@@ -354,7 +397,7 @@ function checkTransitionTokens() {
     const token = m[1] ?? m[2];
     return valid.has(token) ? undefined : `transition="${token}"`;
   });
-  return { violations, valid: [...valid].filter((t) => t !== "none").sort() };
+  return { violations, valid: [...valid].filter((t) => t !== "none").sort(), ok: true };
 }
 
 /**
@@ -639,7 +682,7 @@ function checkAnimationProps() {
     for (const tag of src.matchAll(/<[A-Z][\w.]*(?:\s(?:=>|[^>])*)?>/gs)) {
       const t = tag[0];
       if (!/\b(enterStyle|exitStyle)=/.test(t)) continue;
-      if (/\btransition[=:]/.test(t)) continue;
+      if (/\btransition(?:[=:]|Props\()/.test(t)) continue;
       const line = src.slice(0, tag.index).split("\n").length;
       driverless.push(`${rel}:${line} — enter/exitStyle with no \`transition\` driver (LC-24)`);
     }
@@ -715,6 +758,178 @@ function checkSizeRecipeEscape() {
   return violations;
 }
 
+const ESCAPE_REASON = String.raw`(?:"([^"\n]*)"|'([^'\n]*)'|\x60([^\x60$\n]*)\x60)`;
+/** `sizeRecipeEscape="…"`, `sizeRecipeEscape={"…"}`, `sizeRecipeEscape: "…"`. */
+const ESCAPE_PROP_RE = new RegExp(
+  String.raw`\bsizeRecipeEscape(?:=\{?\s*|\s*:\s*)${ESCAPE_REASON}`,
+  "g",
+);
+const ESCAPE_ATTR_RE = /\bsizeRecipeEscape=\{/g;
+const ESCAPE_CALL_RE = /(?<!function\s+)\bsizeRecipeEscape\s*\(/g;
+const ESCAPE_COMMENT_RE = /(?<!`)(?:\/\/|\/\*)\s*size-recipe-escape:\s*(.*?)\s*(?:\*\/.*)?$/;
+const ESCAPE_REASON_RE = new RegExp(ESCAPE_REASON, "g");
+
+/** @param {string} line */
+function isCommentLine(line) {
+  const trimmed = line.trim();
+  return trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*");
+}
+
+/**
+ * Every size-recipe escape the code writes, with the reason it gives. A call
+ * with no string argument, or a JSX prop whose value is not a string literal
+ * (`sizeRecipeEscape={reason}`), is returned with `reason: undefined`: the
+ * registry can only match a reason it can read.
+ * @param {string} src
+ * @returns {{ line: number, form: string, reason: string | undefined }[]}
+ */
+export function findSizeRecipeEscapes(src) {
+  /** @type {{ line: number, form: string, reason: string | undefined }[]} */
+  const sites = [];
+  const lines = src.split("\n");
+  const literalProps = new Set();
+  for (const m of src.matchAll(ESCAPE_PROP_RE)) {
+    literalProps.add(m.index);
+    const line = lineAt(src, m.index ?? 0);
+    if (isCommentLine(lines[line - 1] ?? "")) continue;
+    sites.push({ line, form: "prop", reason: (m[1] ?? m[2] ?? m[3] ?? "").trim() });
+  }
+  for (const m of src.matchAll(ESCAPE_ATTR_RE)) {
+    if (literalProps.has(m.index)) continue;
+    const line = lineAt(src, m.index ?? 0);
+    if (isCommentLine(lines[line - 1] ?? "")) continue;
+    sites.push({ line, form: "prop", reason: undefined });
+  }
+  for (const m of src.matchAll(ESCAPE_CALL_RE)) {
+    const line = lineAt(src, m.index ?? 0);
+    if (isCommentLine(lines[line - 1] ?? "")) continue;
+    let depth = 0;
+    let end = (m.index ?? 0) + m[0].length - 1;
+    for (; end < src.length; end++) {
+      if (src[end] === "(") depth += 1;
+      else if (src[end] === ")") {
+        depth -= 1;
+        if (depth === 0) break;
+      }
+    }
+    const args = src.slice((m.index ?? 0) + m[0].length, end);
+    const literals = [...args.matchAll(ESCAPE_REASON_RE)];
+    const last = literals[literals.length - 1];
+    sites.push({
+      line,
+      form: "call",
+      reason: last ? (last[1] ?? last[2] ?? last[3] ?? "").trim() : undefined,
+    });
+  }
+  lines.forEach((text, index) => {
+    if (text.trim().startsWith("*")) return;
+    const m = text.match(ESCAPE_COMMENT_RE);
+    if (m) sites.push({ line: index + 1, form: "comment", reason: m[1].trim() });
+  });
+  return sites.sort((a, b) => a.line - b.line);
+}
+
+/**
+ * MPO-23 / `00` L8 E8 — `sizeRecipeEscape` is the weakest escape and it had no
+ * registry, so it grew silently: any file could write the marker and both the
+ * LC-65 check above and `no-raw-geometry` skipped it. Every escape site now
+ * has to be declared in the spec's `## Size-recipe escapes` table by file and
+ * by the exact reason it gives, and a declared row whose site is gone fails
+ * too, so the table cannot rot into a blanket pass. The allowlist is read from
+ * the spec, never from the code (the radius-identity-registry shape).
+ *
+ * Missing spec or missing section → skip, the same as the drawing registry.
+ */
+function checkUndeclaredSizeRecipeEscapes() {
+  let registry;
+  try {
+    registry = readSizeRecipeEscapeRegistry(join(ROOT, "docs/theme-propagation-spec.md"));
+  } catch (error) {
+    return [`size-recipe escape registry: ${error instanceof Error ? error.message : error}`];
+  }
+  if (!registry.present) return [];
+  const declared = new Map();
+  for (const { file, reason } of registry.escapes) declared.set(`${file}\n${reason}`, false);
+  /** @type {string[]} */
+  const violations = [];
+  const scan = (filePath) => {
+    if (!/\.(tsx|ts|jsx|js)$/.test(filePath) || filePath.endsWith(".d.ts")) return;
+    if (/\.(spec|test)\./.test(filePath)) return;
+    const src = readFileSync(filePath, "utf8");
+    if (!src.includes("sizeRecipeEscape") && !src.includes("size-recipe-escape:")) return;
+    const rel = relative(ROOT, filePath).replaceAll("\\", "/");
+    for (const site of findSizeRecipeEscapes(src)) {
+      if (site.reason === undefined || site.reason === "") {
+        violations.push(`${rel}:${site.line} — sizeRecipeEscape with no written reason`);
+        continue;
+      }
+      const key = `${rel}\n${site.reason}`;
+      if (declared.has(key)) {
+        declared.set(key, true);
+        continue;
+      }
+      violations.push(`${rel}:${site.line} — undeclared escape "${site.reason}"`);
+    }
+  };
+  for (const dir of [PUBLIC_DIR, PACKAGES_DIR, APPS_DIR, FEATURES_DIR]) walkFiles(dir, scan);
+  for (const [key, seen] of declared) {
+    if (seen) continue;
+    const [file, reason] = key.split("\n");
+    violations.push(`${file} — declared escape "${reason}" has no site in the code (stale row)`);
+  }
+  return violations;
+}
+
+/**
+ * MPO-326 — `no-hex-literals` covers apps/, packages/ and features/, and a
+ * surface no theme token reaches (GTK widget CSS outside the provider, a
+ * content script on third-party pages, the badge API, Expo build config)
+ * opts its file out with a `hex-escape: <reason>` comment. The comment alone
+ * would let any file opt out, so every one must be a row in the spec's
+ * `## Colour-literal escapes` table by file and exact reason, and a row whose
+ * comment is gone fails too (the size-recipe registry shape).
+ *
+ * Missing spec or missing section → skip, the same as the drawing registry.
+ */
+function checkUndeclaredHexEscapes() {
+  let registry;
+  try {
+    registry = readHexEscapeRegistry(join(ROOT, "docs/theme-propagation-spec.md"));
+  } catch (error) {
+    return [`colour-literal escape registry: ${error instanceof Error ? error.message : error}`];
+  }
+  if (!registry.present) return [];
+  const declared = new Map();
+  for (const { file, reason } of registry.escapes) declared.set(`${file}\n${reason}`, false);
+  /** @type {string[]} */
+  const violations = [];
+  const scan = (filePath) => {
+    if (!/\.(tsx|ts|jsx|js)$/.test(filePath) || filePath.endsWith(".d.ts")) return;
+    if (/\.(spec|test)\./.test(filePath)) return;
+    const src = readFileSync(filePath, "utf8");
+    const rel = relative(ROOT, filePath).replaceAll("\\", "/");
+    for (const site of findHexEscapes(src)) {
+      if (!site.reason) {
+        violations.push(`${rel}:${site.line} — hex-escape with no written reason`);
+        continue;
+      }
+      const key = `${rel}\n${site.reason}`;
+      if (declared.has(key)) {
+        declared.set(key, true);
+        continue;
+      }
+      violations.push(`${rel}:${site.line} — undeclared escape "${site.reason}"`);
+    }
+  };
+  for (const dir of [PUBLIC_DIR, PACKAGES_DIR, APPS_DIR, FEATURES_DIR]) walkFiles(dir, scan);
+  for (const [key, seen] of declared) {
+    if (seen) continue;
+    const [file, reason] = key.split("\n");
+    violations.push(`${file} — declared escape "${reason}" has no comment in the code (stale row)`);
+  }
+  return violations;
+}
+
 // ── Story file shape (MPO-93) ─────────────────────────────────────────────
 
 const STORY_FILE_RE = /\.(stories|story)\.(js|jsx|mjs|ts|tsx)$/;
@@ -1276,6 +1491,97 @@ function checkGraphVarsCoverage() {
   return violations;
 }
 
+// ── Story honesty: foreign control specimens (LC-56 / MPO-316) ────────────
+
+/**
+ * The raw `tamagui` control primitives a story may not mount unlabeled: the
+ * pressables and controls @multiplatform.one/forms owns a house equivalent
+ * for. Layout and text primitives (XStack, YStack, Stack, Paragraph, Text,
+ * View, SizableText, Label) are out of scope BY RULE: roughly 250 story files
+ * import them and they carry no control anatomy to bypass.
+ */
+const STORY_FOREIGN_CONTROL_PRIMITIVES = new Set([
+  "Button",
+  "Checkbox",
+  "Input",
+  "Progress",
+  "RadioGroup",
+  "Select",
+  "Slider",
+  "Switch",
+  "TextArea",
+  "ToggleGroup",
+]);
+
+/**
+ * The exemption LC-56 introduced and LC-60's radius sweep already reads off
+ * the running story, so a specimen is declared in exactly one place for both
+ * arms.
+ */
+const STORY_HONESTY_MARKER_RE = /\bforeignContrastSpecimen\s*:\s*true\b/;
+
+/**
+ * @multiplatform.one/frappe is the data client, not a catalog package
+ * (knob-laws.md § Inventory): its stories demo hooks, and the buttons in them
+ * drive the hook, not a knob probe. It also cannot import a house control:
+ * forms reaches frappe through its @multiplatform.one/storybook devDependency,
+ * so the import would close a workspace cycle.
+ */
+const STORY_HONESTY_EXEMPT_PREFIXES = ["public/frappe/"];
+
+const TAMAGUI_IMPORT_RE = /import\s+([^;'"]*?)from\s*["']tamagui["']/g;
+
+/**
+ * LC-56: stories are the verify substrate for the knob rules, and a raw
+ * tamagui control consumes no knobs. FieldLayout, FieldGroup, Fieldset and
+ * FormGrid measured 9px radius at every `borderRadius` stop because their
+ * stories mounted `Input as TamaguiInput`. A sweep that trusts such a story
+ * manufactures a pass.
+ *
+ * File granularity is deliberate: attributing a JSX usage to one story export
+ * is not a regex job, and the knob probes stay the live arm for a labeled
+ * file. `import type` is erased and never counts.
+ */
+function checkStoryForeignControls() {
+  /** @type {string[]} */
+  const violations = [];
+  const scan = (filePath) => {
+    if (!STORY_FILE_RE.test(filePath)) return;
+    const rel = relative(ROOT, filePath).replaceAll("\\", "/");
+    if (STORY_HONESTY_EXEMPT_PREFIXES.some((prefix) => rel.startsWith(prefix))) return;
+    const src = readFileSync(filePath, "utf8");
+    if (!src.includes("tamagui")) return;
+    /** @type {{ imported: string, alias: string, line: number }[]} */
+    const controls = [];
+    for (const statement of src.matchAll(TAMAGUI_IMPORT_RE)) {
+      const clause = statement[1].trim();
+      if (/^type\b/.test(clause)) continue;
+      const named = clause.match(/\{([\s\S]*)\}/);
+      if (!named) continue;
+      for (const specifier of named[1].split(",")) {
+        const entry = specifier.trim();
+        if (!entry || /^type\b/.test(entry)) continue;
+        const [imported, alias] = entry.split(/\s+as\s+/).map((part) => part.trim());
+        if (!STORY_FOREIGN_CONTROL_PRIMITIVES.has(imported)) continue;
+        controls.push({
+          imported,
+          alias: alias || imported,
+          line: lineAt(src, statement.index ?? 0),
+        });
+      }
+    }
+    if (!controls.length || STORY_HONESTY_MARKER_RE.test(src)) return;
+    for (const { imported, alias, line } of controls) {
+      const shown = alias === imported ? imported : `${imported} as ${alias}`;
+      violations.push(
+        `${rel}:${line} — \`${shown}\` from "tamagui" with no \`parameters.foreignContrastSpecimen: true\``,
+      );
+    }
+  };
+  for (const dir of [PUBLIC_DIR, PACKAGES_DIR, APPS_DIR, FEATURES_DIR]) walkFiles(dir, scan);
+  return violations;
+}
+
 /**
  * Run structural convention checks over a consumer tree.
  *
@@ -1287,7 +1593,10 @@ export function runConventionChecks(options = {}) {
   const css = checkCssInApps();
   const twins = checkFeaturesTwins();
   const sizeRecipeEscape = checkSizeRecipeEscape();
+  const undeclaredEscapes = checkUndeclaredSizeRecipeEscapes();
+  const undeclaredHexEscapes = checkUndeclaredHexEscapes();
   const storyShape = checkStoryFileShape();
+  const storyForeignControls = checkStoryForeignControls();
   const undeclaredDrawings = checkUndeclaredDrawings();
   const tsconfigPaths = checkTsconfigWorkspacePaths();
   const metroFallbacks = checkMetroSubpathFallbacks();
@@ -1336,12 +1645,30 @@ export function runConventionChecks(options = {}) {
   if (sizeRecipeEscape.length) {
     failed = true;
     console.error(
-      "Convention (LC-65 SIZE-RECIPE ESCAPE): control chrome (height / minHeight / paddingHorizontal / fontSize) must come from the size recipe, not a numeric literal. Escape with `sizeRecipeEscape` or `// size-recipe-escape:` on the previous line or same statement. Pilot: Button/, InputParts/, fields/Select/.\n",
+      "Convention (LC-65 SIZE-RECIPE ESCAPE): control chrome (height / minHeight / paddingHorizontal / fontSize) must come from the size recipe, not a numeric literal. Escape with `sizeRecipeEscape` or `// size-recipe-escape: <reason>` on the previous line or same statement, and declare the reason in the spec's `## Size-recipe escapes` table. Pilot: Button/, InputParts/, fields/Select/.\n",
     );
     for (const msg of sizeRecipeEscape) console.error(`  ${msg}`);
     console.error("");
   }
 
+  if (undeclaredEscapes.length) {
+    failed = true;
+    console.error(
+      "Convention (MPO-23 SIZE-RECIPE ESCAPE REGISTRY, 00 L8 E8): every sizeRecipeEscape site must be a row in docs/theme-propagation-spec.md `## Size-recipe escapes`, by file and by the exact reason the code writes. The table is the allowlist; writing another escape cannot widen it. A row whose site is gone fails too.\n",
+    );
+    for (const msg of undeclaredEscapes) console.error(`  ${msg}`);
+    console.error("");
+  }
+
+  if (undeclaredHexEscapes.length) {
+    failed = true;
+    console.error(
+      "Convention (MPO-326 COLOUR-LITERAL ESCAPE REGISTRY): a `hex-escape: <reason>` comment exempts its file from mpo-conventions/no-hex-literals, so every one must be a row in docs/theme-propagation-spec.md `## Colour-literal escapes`, by file and by the exact reason the comment writes. Reach for a theme token first; the escape is for surfaces no token reaches. A row whose comment is gone fails too.\n",
+    );
+    for (const msg of undeclaredHexEscapes) console.error(`  ${msg}`);
+    console.error("");
+  }
+
   if (storyShape.length) {
     failed = true;
     console.error(
@@ -1351,6 +1678,15 @@ export function runConventionChecks(options = {}) {
     console.error("");
   }
 
+  if (storyForeignControls.length) {
+    failed = true;
+    console.error(
+      'Convention (LC-56 STORY-HONESTY / MPO-316 FOREIGN CONTROL SPECIMEN): a story composes catalog components. A raw control primitive imported from "tamagui" (Input, Button, Checkbox, Switch, Slider, Select, RadioGroup, ToggleGroup, Progress, TextArea) consumes no knobs, so a knob sweep that trusts the story scores the primitive and marks the component checked. Mount the house control from @multiplatform.one/forms (inside a layout: `<Input><Input.Box><Input.Area /></Input.Box></Input>`), or, when the raw primitive is there on purpose to show the contrast, label that story `parameters: { foreignContrastSpecimen: true }` so the probes skip it. Layout and text primitives (XStack, YStack, Paragraph, Text) are out of scope.\n',
+    );
+    for (const msg of storyForeignControls) console.error(`  ${msg}`);
+    console.error("");
+  }
+
   if (undeclaredDrawings.violations.length) {
     failed = true;
     console.error(
@@ -1442,6 +1778,7 @@ export function runConventionChecks(options = {}) {
   }
 
   for (const [name, ok] of [
+    ["animation token", tokens.ok],
     ["style token", styleTokens.ok],
     ["theme name", themeNames.ok],
     ["intent", intents.ok],

package/oxlint.d.ts

@@ -3,8 +3,10 @@ export const PALETTE_FILE: RegExp;
 export const CHROME_PROPS: readonly string[];
 export const LAYOUT_PROPS: readonly string[];
 export const GEOMETRY_PROPS: readonly string[];
+export const MARGIN_PROPS: readonly string[];
 export function isPaletteModule(filename: string | undefined): boolean;
 export function matchColorLiteral(value: unknown): string | undefined;
+export function findHexEscapes(src: string): { line: number; reason: string }[];
 export const plugin: {
   meta?: { name?: string };
   rules?: Record<string, unknown>;

package/oxlint.json

@@ -0,0 +1,21 @@
+{
+  "jsPlugins": ["@multiplatform.one/config/oxlint"],
+  "rules": {
+    "mpo-conventions/no-hex-literals": "error",
+    "mpo-conventions/no-raw-typography": "error",
+    "mpo-conventions/no-chrome-props": "warn",
+    "mpo-conventions/no-raw-geometry": "warn",
+    "mpo-conventions/no-child-margin": "warn"
+  },
+  "overrides": [
+    {
+      "files": ["**/*.spec.{ts,tsx,js,jsx}", "**/*.test.{ts,tsx,js,jsx}", "**/tests/**"],
+      "rules": {
+        "mpo-conventions/no-hex-literals": "off",
+        "mpo-conventions/no-chrome-props": "off",
+        "mpo-conventions/no-raw-geometry": "off",
+        "mpo-conventions/no-child-margin": "off"
+      }
+    }
+  ]
+}