@rshono/create 1.0.0-rc.0 → 1.0.0-rc.1

package/README.md

@@ -22,7 +22,7 @@ Six, each with a default, and each answerable by a flag instead:
 | Where should it go?   | `my-rshono-app`    | first positional argument, or `.`                                   |
 | Where is it deployed? | `node`             | `--deploy node\|bun\|deno\|cloudflare\|vercel\|netlify\|aws-lambda` |
 | Styling               | plain CSS          | `--tailwind` / `--no-tailwind`                                      |
-| Formatting & linting  | Prettier + oxlint  | `--quality prettier-oxlint\|biome\|oxc\|none`                       |
+| Formatting & linting  | Prettier + oxlint  | `--quality prettier-oxlint\|prettier-eslint\|biome\|oxc\|none`      |
 | Install dependencies? | yes                | `--no-install`                                                      |
 | Initialize git?       | yes, unless nested | `--no-git`                                                          |
 
@@ -51,6 +51,7 @@ src/actions.ts          a 'use server' action, called from a form that works wit
 src/components/         layout, home, greet-form ('use client'), 404, 500
 src/lib/env.ts          both sides of the PUBLIC_ boundary in one place
 src/styles.css          element-level CSS, or the Tailwind entry
+pnpm-workspace.yaml     pnpm only: which dependency install scripts this app runs (none of them)
 ```
 
 Then, if the dependencies were installed, the scaffold is run through its own formatter — so a fresh
@@ -83,10 +84,16 @@ import { plan, writePlan } from '@rshono/create';
 
 ## Two things worth knowing
 
-**There is no ESLint option.** Linting TypeScript with ESLint means `typescript-eslint`, whose peer range is
-`typescript >=4.8.4 <6.1.0`; rshono is built and tested against TypeScript 7. `npm install` fails outright
-on the conflict, and forcing past it would hand you a linter running against a compiler API it was never
-built for. When upstream widens the range, ESLint becomes one more entry in `features/quality.ts`.
+**The ESLint preset pins TypeScript 6.** Linting TypeScript with ESLint means `typescript-eslint`, which
+reads the compiler API directly rather than through a stable interface, so its peer range is
+`typescript >=4.8.4 <6.1.0` — below the TypeScript rshono is built and tested against. An app that chooses
+ESLint therefore gets `typescript ~6.0.3`, the newest that range allows: `npm install` would otherwise fail
+outright on the conflict, and forcing past it hands you a linter running against a compiler API it was never
+built for. The framework's declarations compile identically under either version, which is what makes this
+the app's pin and not the framework's — every other preset leaves TypeScript alone. What you trade for
+type-aware rules is a compiler one major behind, and the JavaScript implementation rather than the native
+one, so `typecheck` on a large app is several times slower. When upstream widens the range, the pin in
+`features/quality.ts` is the only thing to delete.
 
 **Tailwind is four packages, a `postcss.config.mjs` and one rule in `rshono.config.ts`.** rshono compiles
 CSS natively and has no PostCSS in it — that is deliberate, and it means an app that wants a plugin chain

package/dist/api.mjs

@@ -31,6 +31,7 @@ var __webpack_exports__ = {};
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
   bp: () => (/* reexport */ DEPLOY_TARGET_NAMES),
+  ml: () => (/* reexport */ (/* inlined export .ESLINT_TYPESCRIPT */"~6.0.3")),
   e7: () => (/* reexport */ FRAMEWORK_DEPS),
   Ab: () => (/* reexport */ PACKAGE_MANAGERS),
   pm: () => (/* reexport */ QUALITY_PRESETS),
@@ -42,7 +43,7 @@ __webpack_require__.d(__webpack_exports__, {
   WL: () => (/* reexport */ inspectTarget),
   p1: () => (/* reexport */ isDeployTarget),
   eW: () => (/* reexport */ isValidPackageName),
-  ml: () => (/* reexport */ packageManager),
+  VZ: () => (/* reexport */ packageManager),
   et: () => (/* reexport */ plan_plan),
   N7: () => (/* reexport */ selectFeatures),
   PQ: () => (/* reexport */ toPackageName),
@@ -78,7 +79,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 ;// CONCATENATED MODULE: ./src/generated/framework.ts
 // GENERATED by scripts/codegen.mjs from packages/core — do not edit. Run `pnpm --filter @rshono/create codegen`.
-/** The framework release a scaffolded app is pinned to: this package and rshono ship together. */ const RSHONO_VERSION = '1.0.0-rc.0';
+/** The framework release a scaffolded app is pinned to: this package and rshono ship together. */ const RSHONO_VERSION = '1.0.0-rc.1';
 /**
  * The dependency versions rshono is tested against, copied from its own manifest. Exact where it is
  * exact — React's RSC internals are coupled across builds, and a generated app has no workspace
@@ -145,8 +146,26 @@ __webpack_require__.d(__webpack_exports__, {
     '@biomejs/biome': '^2.5.6',
     oxlint: '^1.76.0',
     oxfmt: '^0.61.0',
+    eslint: '^10.8.0',
+    // ESLint's own recommended JavaScript rules, which typescript-eslint layers on top of rather than
+    // replaces, and the rules of hooks — the one class of React mistake no type checker sees.
+    '@eslint/js': '^10.0.1',
+    'typescript-eslint': '^8.65.0',
+    'eslint-plugin-react-hooks': '^7.1.1',
     wrangler: '^4.115.0'
 };
+/**
+ * The TypeScript an ESLint app pins, in place of the framework's own — the one deliberate exception to
+ * {@link FRAMEWORK_DEPS}, and the reason it is spelled out here.
+ *
+ * typescript-eslint reads TypeScript's compiler API directly rather than through a stable interface, so
+ * it accepts `typescript >=4.8.4 <6.1.0` and nothing above. `~6.0.3` is the newest that satisfies it:
+ * patch releases of 6.0, no minor. The framework itself stays on the TypeScript it is tested against —
+ * rshono's declarations compile the same under either, which is what makes this pin an app's business
+ * and not the framework's.
+ *
+ * When upstream widens the range, this constant and the ESLint feature's use of it are what to delete.
+ */ const ESLINT_TYPESCRIPT = '~6.0.3';
 
 ;// CONCATENATED MODULE: ./src/features/deploy.ts
 
@@ -187,6 +206,11 @@ __webpack_require__.d(__webpack_exports__, {
         devDependencies: {
             wrangler: TOOL_VERSIONS.wrangler
         },
+        // wrangler brings workerd, whose install script only picks the platform binary out of the optional
+        // dependency that already carries it — `workerd --version` answers without it having run.
+        allowBuilds: {
+            workerd: false
+        },
         scripts: {
             deploy: 'rshono build && wrangler deploy'
         },
@@ -277,6 +301,30 @@ const OXLINT = {
         'lint:fix': 'oxlint --fix'
     }
 };
+/**
+ * The one feature that changes a dependency the framework otherwise decides: typescript-eslint cannot be
+ * installed alongside the TypeScript rshono is tested against, so an ESLint app pins the newest one its
+ * peer range accepts (see {@link ESLINT_TYPESCRIPT}). Every other preset leaves TypeScript alone.
+ *
+ * The rules are type-aware, which is the reason to reach for ESLint over a syntax-only linter at all —
+ * so the config it ships hands the whole program to the parser rather than linting file by file.
+ */ const ESLINT = {
+    id: 'eslint',
+    overlays: [
+        'eslint'
+    ],
+    devDependencies: {
+        eslint: TOOL_VERSIONS.eslint,
+        '@eslint/js': TOOL_VERSIONS["@eslint/js"],
+        'typescript-eslint': TOOL_VERSIONS["typescript-eslint"],
+        'eslint-plugin-react-hooks': TOOL_VERSIONS["eslint-plugin-react-hooks"],
+        typescript: (/* inlined export .ESLINT_TYPESCRIPT */"~6.0.3")
+    },
+    scripts: {
+        lint: 'eslint .',
+        'lint:fix': 'eslint . --fix'
+    }
+};
 const BIOME = {
     id: 'biome',
     overlays: [
@@ -301,6 +349,7 @@ const FORMATTERS = {
 };
 const LINTERS = {
     oxlint: OXLINT,
+    eslint: ESLINT,
     biome: BIOME,
     none: null
 };
@@ -388,6 +437,13 @@ const QUALITY_PRESETS = [
         formatter: 'prettier',
         linter: 'oxlint'
     },
+    {
+        id: 'prettier-eslint',
+        label: 'Prettier + ESLint',
+        hint: 'type-aware rules — pins TypeScript 6, which is all typescript-eslint accepts',
+        formatter: 'prettier',
+        linter: 'eslint'
+    },
     {
         id: 'biome',
         label: 'Biome',
@@ -454,6 +510,39 @@ const QUALITY_PRESETS = [
 function sorted(record) {
     return Object.fromEntries(Object.entries(record).sort(([a], [b])=>a < b ? -1 : 1));
 }
+/**
+ * The install script every app inherits, from the framework rather than from anything it chose. tsx
+ * reads `rshono.config.ts` through esbuild, and esbuild's script only picks the platform binary out of
+ * the optional dependency that already carries it — rshono's own repo denies it for the same reason.
+ */ const BASE_ALLOW_BUILDS = {
+    esbuild: false
+};
+/**
+ * pnpm's settings for the new app — written for pnpm and for nobody else.
+ *
+ * It exists for one field. A dependency with an install script is a question pnpm will not answer on its
+ * own: it fails the install, and fails every `pnpm dev` after it, until the project has said whether the
+ * script should run. None of the ones an rshono app inherits need to (each is a native package whose
+ * binary arrives as an optional dependency), so a fresh app carries the answer rather than meeting
+ * `pnpm approve-builds` before it has rendered a page once.
+ *
+ * In this file rather than under a `pnpm` key in `package.json`, which pnpm 11 no longer reads, single-
+ * package projects included. What lands here is a decision about *this* app: a scaffolded file the app
+ * owns from then on, not something the framework reaches back into.
+ */ function buildPnpmSettings(features) {
+    const allowBuilds = {
+        ...BASE_ALLOW_BUILDS
+    };
+    for (const feature of features)Object.assign(allowBuilds, feature.allowBuilds);
+    return [
+        '# Which dependencies may run an install script. pnpm runs none it has not been told about, and',
+        '# fails the install rather than skip one quietly — so anything added later belongs here too.',
+        '# `false` means the script was looked at: these ship their real binary as an optional dependency.',
+        'allowBuilds:',
+        ...Object.entries(sorted(allowBuilds)).map(([name, allowed])=>`  ${name}: ${allowed}`),
+        ''
+    ].join('\n');
+}
 /**
  * Assembles `package.json` from the answers and whatever the selected features contribute.
  *
@@ -598,6 +687,7 @@ function readTemplateDir(dir) {
     const gitignore = files.get('.gitignore');
     if (gitignore) files.set('.gitignore', appendGitignore(gitignore, features));
     files.set('package.json', buildPackageJson(answers, features, pm));
+    if (pm.name === 'pnpm') files.set('pnpm-workspace.yaml', buildPnpmSettings(features));
     return {
         // Sorted, so both the write order and a test's snapshot are stable.
         files: new Map([
@@ -730,6 +820,7 @@ function inspectTarget(dir) {
 
 
 var __webpack_exports__DEPLOY_TARGET_NAMES = __webpack_exports__.bp;
+var __webpack_exports__ESLINT_TYPESCRIPT = __webpack_exports__.ml;
 var __webpack_exports__FRAMEWORK_DEPS = __webpack_exports__.e7;
 var __webpack_exports__PACKAGE_MANAGERS = __webpack_exports__.Ab;
 var __webpack_exports__QUALITY_PRESETS = __webpack_exports__.pm;
@@ -741,9 +832,9 @@ var __webpack_exports__detectPackageManager = __webpack_exports__.Lv;
 var __webpack_exports__inspectTarget = __webpack_exports__.WL;
 var __webpack_exports__isDeployTarget = __webpack_exports__.p1;
 var __webpack_exports__isValidPackageName = __webpack_exports__.eW;
-var __webpack_exports__packageManager = __webpack_exports__.ml;
+var __webpack_exports__packageManager = __webpack_exports__.VZ;
 var __webpack_exports__plan = __webpack_exports__.et;
 var __webpack_exports__selectFeatures = __webpack_exports__.N7;
 var __webpack_exports__toPackageName = __webpack_exports__.PQ;
 var __webpack_exports__writePlan = __webpack_exports__.pD;
-export { __webpack_exports__DEPLOY_TARGET_NAMES as DEPLOY_TARGET_NAMES, __webpack_exports__FRAMEWORK_DEPS as FRAMEWORK_DEPS, __webpack_exports__PACKAGE_MANAGERS as PACKAGE_MANAGERS, __webpack_exports__QUALITY_PRESETS as QUALITY_PRESETS, __webpack_exports__RSHONO_RANGE as RSHONO_RANGE, __webpack_exports__TOOL_VERSIONS as TOOL_VERSIONS, __webpack_exports__buildPackageJson as buildPackageJson, __webpack_exports__deployHint as deployHint, __webpack_exports__detectPackageManager as detectPackageManager, __webpack_exports__inspectTarget as inspectTarget, __webpack_exports__isDeployTarget as isDeployTarget, __webpack_exports__isValidPackageName as isValidPackageName, __webpack_exports__packageManager as packageManager, __webpack_exports__plan as plan, __webpack_exports__selectFeatures as selectFeatures, __webpack_exports__toPackageName as toPackageName, __webpack_exports__writePlan as writePlan };
+export { __webpack_exports__DEPLOY_TARGET_NAMES as DEPLOY_TARGET_NAMES, __webpack_exports__ESLINT_TYPESCRIPT as ESLINT_TYPESCRIPT, __webpack_exports__FRAMEWORK_DEPS as FRAMEWORK_DEPS, __webpack_exports__PACKAGE_MANAGERS as PACKAGE_MANAGERS, __webpack_exports__QUALITY_PRESETS as QUALITY_PRESETS, __webpack_exports__RSHONO_RANGE as RSHONO_RANGE, __webpack_exports__TOOL_VERSIONS as TOOL_VERSIONS, __webpack_exports__buildPackageJson as buildPackageJson, __webpack_exports__deployHint as deployHint, __webpack_exports__detectPackageManager as detectPackageManager, __webpack_exports__inspectTarget as inspectTarget, __webpack_exports__isDeployTarget as isDeployTarget, __webpack_exports__isValidPackageName as isValidPackageName, __webpack_exports__packageManager as packageManager, __webpack_exports__plan as plan, __webpack_exports__selectFeatures as selectFeatures, __webpack_exports__toPackageName as toPackageName, __webpack_exports__writePlan as writePlan };

package/dist/cli.mjs

@@ -2943,7 +2943,7 @@ function hasGit(cwd) {
 
 ;// CONCATENATED MODULE: ./src/generated/framework.ts
 // GENERATED by scripts/codegen.mjs from packages/core — do not edit. Run `pnpm --filter @rshono/create codegen`.
-/** The framework release a scaffolded app is pinned to: this package and rshono ship together. */ const RSHONO_VERSION = '1.0.0-rc.0';
+/** The framework release a scaffolded app is pinned to: this package and rshono ship together. */ const RSHONO_VERSION = '1.0.0-rc.1';
 /**
  * The dependency versions rshono is tested against, copied from its own manifest. Exact where it is
  * exact — React's RSC internals are coupled across builds, and a generated app has no workspace
@@ -3010,6 +3010,13 @@ const QUALITY_PRESETS = [
         formatter: 'prettier',
         linter: 'oxlint'
     },
+    {
+        id: 'prettier-eslint',
+        label: 'Prettier + ESLint',
+        hint: 'type-aware rules — pins TypeScript 6, which is all typescript-eslint accepts',
+        formatter: 'prettier',
+        linter: 'eslint'
+    },
     {
         id: 'biome',
         label: 'Biome',
@@ -3102,8 +3109,26 @@ const QUALITY_PRESETS = [
     '@biomejs/biome': '^2.5.6',
     oxlint: '^1.76.0',
     oxfmt: '^0.61.0',
+    eslint: '^10.8.0',
+    // ESLint's own recommended JavaScript rules, which typescript-eslint layers on top of rather than
+    // replaces, and the rules of hooks — the one class of React mistake no type checker sees.
+    '@eslint/js': '^10.0.1',
+    'typescript-eslint': '^8.65.0',
+    'eslint-plugin-react-hooks': '^7.1.1',
     wrangler: '^4.115.0'
 };
+/**
+ * The TypeScript an ESLint app pins, in place of the framework's own — the one deliberate exception to
+ * {@link FRAMEWORK_DEPS}, and the reason it is spelled out here.
+ *
+ * typescript-eslint reads TypeScript's compiler API directly rather than through a stable interface, so
+ * it accepts `typescript >=4.8.4 <6.1.0` and nothing above. `~6.0.3` is the newest that satisfies it:
+ * patch releases of 6.0, no minor. The framework itself stays on the TypeScript it is tested against —
+ * rshono's declarations compile the same under either, which is what makes this pin an app's business
+ * and not the framework's.
+ *
+ * When upstream widens the range, this constant and the ESLint feature's use of it are what to delete.
+ */ const ESLINT_TYPESCRIPT = '~6.0.3';
 
 ;// CONCATENATED MODULE: ./src/features/deploy.ts
 
@@ -3144,6 +3169,11 @@ const QUALITY_PRESETS = [
         devDependencies: {
             wrangler: TOOL_VERSIONS.wrangler
         },
+        // wrangler brings workerd, whose install script only picks the platform binary out of the optional
+        // dependency that already carries it — `workerd --version` answers without it having run.
+        allowBuilds: {
+            workerd: false
+        },
         scripts: {
             deploy: 'rshono build && wrangler deploy'
         },
@@ -3234,6 +3264,30 @@ const OXLINT = {
         'lint:fix': 'oxlint --fix'
     }
 };
+/**
+ * The one feature that changes a dependency the framework otherwise decides: typescript-eslint cannot be
+ * installed alongside the TypeScript rshono is tested against, so an ESLint app pins the newest one its
+ * peer range accepts (see {@link ESLINT_TYPESCRIPT}). Every other preset leaves TypeScript alone.
+ *
+ * The rules are type-aware, which is the reason to reach for ESLint over a syntax-only linter at all —
+ * so the config it ships hands the whole program to the parser rather than linting file by file.
+ */ const ESLINT = {
+    id: 'eslint',
+    overlays: [
+        'eslint'
+    ],
+    devDependencies: {
+        eslint: TOOL_VERSIONS.eslint,
+        '@eslint/js': TOOL_VERSIONS["@eslint/js"],
+        'typescript-eslint': TOOL_VERSIONS["typescript-eslint"],
+        'eslint-plugin-react-hooks': TOOL_VERSIONS["eslint-plugin-react-hooks"],
+        typescript: (/* inlined export .ESLINT_TYPESCRIPT */"~6.0.3")
+    },
+    scripts: {
+        lint: 'eslint .',
+        'lint:fix': 'eslint . --fix'
+    }
+};
 const BIOME = {
     id: 'biome',
     overlays: [
@@ -3258,6 +3312,7 @@ const FORMATTERS = {
 };
 const LINTERS = {
     oxlint: OXLINT,
+    eslint: ESLINT,
     biome: BIOME,
     none: null
 };
@@ -3346,6 +3401,39 @@ function stylingFeature(styling) {
 function sorted(record) {
     return Object.fromEntries(Object.entries(record).sort(([a], [b])=>a < b ? -1 : 1));
 }
+/**
+ * The install script every app inherits, from the framework rather than from anything it chose. tsx
+ * reads `rshono.config.ts` through esbuild, and esbuild's script only picks the platform binary out of
+ * the optional dependency that already carries it — rshono's own repo denies it for the same reason.
+ */ const BASE_ALLOW_BUILDS = {
+    esbuild: false
+};
+/**
+ * pnpm's settings for the new app — written for pnpm and for nobody else.
+ *
+ * It exists for one field. A dependency with an install script is a question pnpm will not answer on its
+ * own: it fails the install, and fails every `pnpm dev` after it, until the project has said whether the
+ * script should run. None of the ones an rshono app inherits need to (each is a native package whose
+ * binary arrives as an optional dependency), so a fresh app carries the answer rather than meeting
+ * `pnpm approve-builds` before it has rendered a page once.
+ *
+ * In this file rather than under a `pnpm` key in `package.json`, which pnpm 11 no longer reads, single-
+ * package projects included. What lands here is a decision about *this* app: a scaffolded file the app
+ * owns from then on, not something the framework reaches back into.
+ */ function buildPnpmSettings(features) {
+    const allowBuilds = {
+        ...BASE_ALLOW_BUILDS
+    };
+    for (const feature of features)Object.assign(allowBuilds, feature.allowBuilds);
+    return [
+        '# Which dependencies may run an install script. pnpm runs none it has not been told about, and',
+        '# fails the install rather than skip one quietly — so anything added later belongs here too.',
+        '# `false` means the script was looked at: these ship their real binary as an optional dependency.',
+        'allowBuilds:',
+        ...Object.entries(sorted(allowBuilds)).map(([name, allowed])=>`  ${name}: ${allowed}`),
+        ''
+    ].join('\n');
+}
 /**
  * Assembles `package.json` from the answers and whatever the selected features contribute.
  *
@@ -3486,6 +3574,7 @@ function readTemplateDir(dir) {
     const gitignore = files.get('.gitignore');
     if (gitignore) files.set('.gitignore', appendGitignore(gitignore, features));
     files.set('package.json', buildPackageJson(answers, features, pm));
+    if (pm.name === 'pnpm') files.set('pnpm-workspace.yaml', buildPnpmSettings(features));
     return {
         // Sorted, so both the write order and a test's snapshot are stable.
         files: new Map([
@@ -3658,9 +3747,9 @@ Options:
   -d, --deploy <target>    ${DEPLOY_TARGET_NAMES.join(' | ')}
       --tailwind           Tailwind CSS (--no-tailwind for plain CSS)
       --quality <preset>   ${QUALITY_PRESETS.map((preset)=>preset.id).join(' | ')}
-      --formatter <name>   prettier | biome | oxfmt | none  (overrides --quality)
-      --linter <name>      oxlint | biome | none            (overrides --quality)
-      --pm <name>          npm | pnpm | yarn | bun          (default: whatever ran this)
+      --formatter <name>   prettier | biome | oxfmt | none      (overrides --quality)
+      --linter <name>      oxlint | eslint | biome | none       (overrides --quality; eslint pins TypeScript 6)
+      --pm <name>          npm | pnpm | yarn | bun              (default: whatever ran this)
       --no-install         write the files and stop
       --no-git             do not initialize a repository
       --force              scaffold into a directory that is not empty
@@ -3747,7 +3836,7 @@ async function main() {
         allowPositionals: true
     });
     if (values.help) return console.log(HELP);
-    if (values.version) return console.log("1.0.0-rc.0");
+    if (values.version) return console.log("1.0.0-rc.1");
     // A pipe, a CI job or an agent gets the defaults rather than a prompt nothing can answer.
     const interactive = Boolean(process.stdout.isTTY) && !values.yes;
     const pmFlag = oneOf(values.pm, [
@@ -3766,6 +3855,7 @@ async function main() {
     ], 'formatter');
     const linterFlag = oneOf(values.linter, [
         'oxlint',
+        'eslint',
         'biome',
         'none'
     ], 'linter');
@@ -3773,7 +3863,7 @@ async function main() {
     const tailwindFlag = tristate(values.tailwind, values['no-tailwind'], 'tailwind');
     const installFlag = tristate(values.install, values['no-install'], 'install');
     const gitFlag = tristate(values.git, values['no-git'], 'git');
-    intro(`create-rshono  ·  rshono ${"1.0.0-rc.0"}`);
+    intro(`create-rshono  ·  rshono ${"1.0.0-rc.1"}`);
     // ── Where ───────────────────────────────────────────────────────────────────────────────────────
     let directory = positionals[0];
     if (!directory) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rshono/create",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.1",
   "description": "Scaffold a new rshono app — Hono + Rspack + React Server Components",
   "author": "Lasse <lasse@lassetange.com> (https://www.lassetange.com)",
   "license": "ISC",

package/templates/base/src/actions.ts

@@ -9,7 +9,10 @@
  * The signature is the one `useActionState` expects: previous state first, then the form data.
  */
 export async function greet(_previous: string | null, formData: FormData): Promise<string> {
-  const name = String(formData.get('name') ?? '').trim();
+  // A form field is a string or a File, never only a string — a file input posted under this name would
+  // stringify to "[object File]" rather than fail. Narrowing is the validation the endpoint owes itself.
+  const field = formData.get('name');
+  const name = typeof field === 'string' ? field.trim() : '';
   if (!name) return 'Type a name first.';
 
   // Where real work goes — a database write, an email, a queue push.

package/templates/eslint/eslint.config.mjs

@@ -0,0 +1,31 @@
+import js from '@eslint/js';
+import reactHooks from 'eslint-plugin-react-hooks';
+import tseslint from 'typescript-eslint';
+
+/**
+ * Flat config, with type-aware rules — the reason to run ESLint over a syntax-only linter. `projectService`
+ * builds the same program `tsc` does from tsconfig.json, so a rule can ask what a value actually *is*:
+ * an unawaited promise, a `catch` that swallows an error, a `String()` around something that is not one.
+ *
+ * The cost is that ESLint needs TypeScript to answer, which is why this app pins TypeScript 6 —
+ * typescript-eslint reads the compiler API directly and accepts nothing newer. `npm run typecheck` is
+ * still the thing that decides whether the app compiles; these rules only see what it sees.
+ */
+export default tseslint.config(
+  // ESLint's own default ignores cover node_modules and nothing else, so the build output — and whatever
+  // the deploy target leaves beside it — would otherwise be linted as if you had written it.
+  { ignores: ['dist/**', '.wrangler/**', '.vercel/**', '.netlify/**'] },
+  js.configs.recommended,
+  tseslint.configs.recommendedTypeChecked,
+  // The rules of hooks: the one class of React mistake no type checker catches, and the reason a React
+  // app wants a linter at all.
+  reactHooks.configs.flat['recommended-latest'],
+  {
+    languageOptions: {
+      parserOptions: { projectService: true, tsconfigRootDir: import.meta.dirname },
+    },
+  },
+  // This file and any other plain JavaScript sits outside the TypeScript program, so the type-aware rules
+  // have nothing to run against and would report every file as unconfigured.
+  { files: ['**/*.{js,mjs,cjs}'], extends: [tseslint.configs.disableTypeChecked] },
+);