@wellmade/oxlint-config 0.2.0

package/.oxlintrc.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json",
+  "plugins": [
+    "typescript",
+    "unicorn",
+    "import",
+    "promise",
+    "node"
+  ],
+  "categories": {
+    "correctness": "error",
+    "suspicious": "error",
+    "perf": "warn",
+    "restriction": "off",
+    "pedantic": "off",
+    "style": "off",
+    "nursery": "off"
+  },
+  "env": {
+    "es2024": true,
+    "browser": true,
+    "node": true
+  },
+  "rules": {
+    "eqeqeq": [
+      "error",
+      "always"
+    ],
+    "no-debugger": "error",
+    "no-alert": "error",
+    "no-var": "error",
+    "prefer-const": "error",
+    "no-unused-vars": [
+      "error",
+      {
+        "argsIgnorePattern": "^_",
+        "varsIgnorePattern": "^_"
+      }
+    ],
+    "no-console": [
+      "error",
+      {
+        "allow": [
+          "debug",
+          "info",
+          "warn",
+          "error"
+        ]
+      }
+    ],
+    "no-await-in-loop": "off",
+    "import/no-duplicates": "error",
+    "import/no-self-import": "error",
+    "import/no-cycle": "error",
+    "promise/no-return-wrap": "error",
+    "promise/always-return": "off",
+    "typescript/no-explicit-any": "warn",
+    "typescript/no-non-null-assertion": "off",
+    "unicorn/no-array-for-each": "off",
+    "unicorn/no-null": "off",
+    "unicorn/no-array-sort": "off",
+    "unicorn/consistent-function-scoping": "off"
+  },
+  "ignorePatterns": [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/build/**",
+    "**/out/**",
+    "**/.next/**",
+    "**/.astro/**",
+    "**/.turbo/**",
+    "**/coverage/**",
+    "**/*.generated.*",
+    "**/*.generated"
+  ]
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wellmade
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,82 @@
+# @wellmade/oxlint-config
+
+Shared [oxlint](https://oxc.rs/) config — the Rust-based linter that's ~50–100× faster than ESLint.
+
+Same bug-prevention philosophy as `@wellmade/eslint-config`, expressed in oxlint's rule set. Wellmade dogfoods this on its own internal projects (atelier-ai, cli scaffolds, devcontainers). Customer projects can pick either side based on their existing tooling.
+
+## Install
+
+```sh
+npm install --save-dev oxlint @wellmade/oxlint-config
+```
+
+Two consumer shapes work. **Use the JSON path** unless you have a specific reason not to — it's oxlint's stable, no-asterisk config format.
+
+### Recommended: `.oxlintrc.json`
+
+```json
+{
+  "extends": ["./node_modules/@wellmade/oxlint-config/.oxlintrc.json"]
+}
+```
+
+Bare-specifier `extends` (`"@wellmade/oxlint-config"`) isn't supported yet ([oxc#15538](https://github.com/oxc-project/oxc/issues/15538)); the `node_modules` path is the workaround until that lands.
+
+### Alternative: `oxlint.config.ts` (experimental)
+
+oxlint marks JS/TS config files as "experimental and requiring Node.js at runtime" (per `oxlint --help` in 1.67). They work and they let you compose programmatically, but the JSON path is more durable for now.
+
+```ts
+// oxlint.config.ts
+import wellmade from '@wellmade/oxlint-config';
+export default wellmade;
+```
+
+### Run
+
+```sh
+npx oxlint
+```
+
+### Opt-in: type-aware linting
+
+oxlint can run typescript-eslint's type-aware rules natively (`options.typeAware`), which is a large speed win over `typescript-eslint`. It's **opt-in** because it has two hard requirements the base config won't force on everyone:
+
+1. install `oxlint-tsgolint` (the type-aware engine), and
+2. TypeScript **7.0+** (it runs on typescript-go).
+
+```sh
+npm install --save-dev oxlint-tsgolint
+```
+
+```ts
+// oxlint.config.ts
+import { withTypeAware } from '@wellmade/oxlint-config';
+export default withTypeAware();
+```
+
+Without `oxlint-tsgolint` installed, oxlint fails with *"Failed to find tsgolint executable"* — that's the guard, not a bug. The base config stays type-aware-free so the default path needs no extra dependency.
+
+The `correctness`/`suspicious` categories surface the type-aware `typescript/*` rules; `withTypeAware()` keeps the high-signal ones and switches off **`typescript/no-unsafe-type-assertion`** — it fires on every `as` cast, but validate-then-assert is a deliberate, correct pattern (typescript-eslint leaves this rule out of `recommended` for the same reason). Tuned against bedrock-js on TS 7: the rule accounted for 34 of 45 first-run findings, all safe-pattern false positives.
+
+## What's in it
+
+- **`correctness` + `suspicious` → error.** These are oxlint's "this is almost certainly a bug" categories. They should never warn — they should fail CI.
+- **`perf` → warn.** Useful signals, but not always actionable.
+- **`style` / `pedantic` / `restriction` → off.** Style is Prettier/oxfmt's job. Pedantic and restriction are too opinionated for a shared config.
+- **Plugins enabled:** `typescript`, `unicorn`, `import`, `promise`, `node`.
+- **Explicit rule choices:** `eqeqeq: always`, `no-var`, `prefer-const`, `no-console: warn`, `no-debugger: error`, `import/no-cycle: error`.
+
+## Philosophy
+
+Wellmade ships both `@wellmade/eslint-config` and `@wellmade/oxlint-config` deliberately. ESLint has wider plugin coverage; oxlint has the speed. The two configs converge on the same intent — catch real defects, leave formatting to formatters, stay quiet on debatable preferences — so consumers can pick by stack, not by philosophy.
+
+## What's intentionally *not* in it
+
+- **No formatting rules.** Run `oxfmt` (or Prettier) for whitespace and layout.
+- **No `bedrockPreset` yet.** The `JSON.parse` → `parseJson` redirects from `@wellmade/eslint-config` will land here once we've ported them; oxlint's JS plugin API shipped in late 2025 and is stabilizing.
+- **No framework variants yet** (React, Node-specific, NestJS). These will arrive as sibling sub-exports as the dogfooding signal comes in.
+
+## Status
+
+`0.x`. Wellmade is using this on its own work to gather real signal before recommending it to customer projects. Expect rule additions but no breaking removals without a minor bump and a `MIGRATION.md` note.

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@wellmade/oxlint-config",
+  "version": "0.2.0",
+  "description": "Wellmade's shared oxlint config — same philosophy as @wellmade/eslint-config, in Oxc's Rust-based linter.",
+  "license": "MIT",
+  "author": {
+    "name": "Wellmade",
+    "url": "https://www.wellmade.be"
+  },
+  "homepage": "https://github.com/wellmade-studio/standards-js/tree/main/packages/oxlint-config",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/wellmade-studio/standards-js.git",
+    "directory": "packages/oxlint-config"
+  },
+  "bugs": {
+    "url": "https://github.com/wellmade-studio/standards-js/issues"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.js",
+    "./.oxlintrc.json": "./.oxlintrc.json"
+  },
+  "main": "./src/index.js",
+  "files": [
+    "src/",
+    ".oxlintrc.json",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "node ./scripts/build-json.js",
+    "lint": "echo 'no-op'",
+    "format": "echo 'no-op'",
+    "test": "node --test ./test.js"
+  },
+  "peerDependencies": {
+    "oxlint": ">=1.0.0 <2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "oxlint",
+    "oxc",
+    "oxlint-config",
+    "linter",
+    "rust",
+    "typescript",
+    "wellmade"
+  ]
+}

package/src/index.js

@@ -0,0 +1,138 @@
+/**
+ * Wellmade's shared oxlint config, as a JS object.
+ *
+ * Consumers normally point at the JSON sibling via oxlint's `extends`:
+ *
+ *     // .oxlintrc.json in your project root
+ *     {
+ *       "extends": ["./node_modules/@wellmade/oxlint-config/.oxlintrc.json"]
+ *     }
+ *
+ * This JS export exists for programmatic composition and for our own tests.
+ * The shipped `.oxlintrc.json` is generated from it via `npm run build`.
+ *
+ * Rule choices mirror the bug-prevention bias of `@wellmade/eslint-config`:
+ * catch real defects, leave style to Prettier/oxfmt, stay quiet on debatable
+ * preferences. As oxlint's plugin coverage grows, more of the eslint-config
+ * intent will be expressible here.
+ *
+ * @see https://oxc.rs/docs/guide/usage/linter
+ */
+export const baseConfig = {
+  $schema: 'https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json',
+
+  plugins: ['typescript', 'unicorn', 'import', 'promise', 'node'],
+
+  categories: {
+    correctness: 'error',
+    suspicious: 'error',
+    perf: 'warn',
+    restriction: 'off',
+    pedantic: 'off',
+    style: 'off',
+    nursery: 'off',
+  },
+
+  env: {
+    es2024: true,
+    browser: true,
+    node: true,
+  },
+
+  rules: {
+    eqeqeq: ['error', 'always'],
+    'no-debugger': 'error',
+    'no-alert': 'error',
+    'no-var': 'error',
+    'prefer-const': 'error',
+    'no-unused-vars': ['error', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }],
+
+    'no-console': ['error', { allow: ['debug', 'info', 'warn', 'error'] }],
+
+    'no-await-in-loop': 'off',
+
+    'import/no-duplicates': 'error',
+    'import/no-self-import': 'error',
+    'import/no-cycle': 'error',
+
+    'promise/no-return-wrap': 'error',
+    'promise/always-return': 'off',
+
+    'typescript/no-explicit-any': 'warn',
+    'typescript/no-non-null-assertion': 'off',
+
+    'unicorn/no-array-for-each': 'off',
+    'unicorn/no-null': 'off',
+    'unicorn/no-array-sort': 'off',
+    'unicorn/consistent-function-scoping': 'off',
+  },
+
+  ignorePatterns: [
+    '**/node_modules/**',
+    '**/dist/**',
+    '**/build/**',
+    '**/out/**',
+    '**/.next/**',
+    '**/.astro/**',
+    '**/.turbo/**',
+    '**/coverage/**',
+    '**/*.generated.*',
+    '**/*.generated',
+  ],
+};
+
+export default baseConfig;
+
+/**
+ * Opt-in type-aware layer.
+ *
+ * oxlint can now run typescript-eslint's type-aware rules natively via
+ * `options.typeAware` (root config only). This is a real speed win over
+ * `typescript-eslint` but carries two hard requirements the base config
+ * deliberately avoids forcing on every consumer:
+ *
+ *   1. the `oxlint-tsgolint` package must be installed, and
+ *   2. TypeScript 7.0+ (tsgolint runs on typescript-go).
+ *
+ * Without `oxlint-tsgolint` present, oxlint fails at runtime with
+ * "Failed to find tsgolint executable" — so this stays opt-in.
+ *
+ * Usage (root `.oxlintrc.json` is generated from this, or compose in a
+ * JS/TS config):
+ *
+ *     // oxlint.config.ts
+ *     import { withTypeAware } from '@wellmade/oxlint-config';
+ *     export default withTypeAware();
+ *
+ * Rule tuning is driven by dogfooding against bedrock-js on TS 7 (the first
+ * Wellmade project on the native compiler). The `correctness`/`suspicious`
+ * categories pull in the type-aware `typescript/*` rules; we keep the
+ * high-signal ones (no-base-to-string, no-misused-spread,
+ * require-array-sort-compare, no-unnecessary-type-parameters, …) at their
+ * category defaults and switch off the one that's wrong for a carefully
+ * typed library:
+ *
+ *   - `typescript/no-unsafe-type-assertion` → **off.** It fires on every
+ *     `as` cast, but validate-then-assert (`pojo`, `parseEnum`, `readJson`)
+ *     is a deliberate, correct pattern in this stack — the assertion follows
+ *     a runtime check. typescript-eslint itself leaves this rule out of its
+ *     `recommended` set for the same reason. 34 of bedrock's 45 first-run
+ *     findings were this rule; enforcing it would punish the safe pattern.
+ *
+ * @param {object} [config] base config to layer onto (defaults to baseConfig)
+ * @returns {object} a new config object with type-aware linting enabled
+ * @see https://oxc.rs/docs/guide/usage/linter/type-aware.html
+ */
+export function withTypeAware(config = baseConfig) {
+  return {
+    ...config,
+    options: {
+      ...config.options,
+      typeAware: true,
+    },
+    rules: {
+      ...config.rules,
+      'typescript/no-unsafe-type-assertion': 'off',
+    },
+  };
+}