create-rsc-kit 0.30.3 → 0.30.5

package/dist/templates.js

@@ -121,7 +121,7 @@ export function scripts(o) {
         // typecheck run without one read the last start's - a route added since
         // was not a Route yet.
         typecheck: 'rsc-kit-typegen && tsc --noEmit',
-        ...(o.lint ? { lint: 'oxlint src --fix', 'lint:check': 'oxlint src --deny-warnings' } : {}),
+        ...(o.lint ? { lint: 'oxlint src --type-aware --fix', 'lint:check': 'oxlint src --type-aware --deny-warnings' } : {}),
         // Laravel returned above: its pages call into PHP that createTestApp does
         // not run, and its tests are Pest, on the other side.
         ...testScripts(o),
@@ -133,7 +133,7 @@ function testScripts(o) {
         test,
         // The one command an agent runs before saying it is done. Each part exists
         // on its own; this is so nothing has to remember the list.
-        check: ['rsc-kit-typegen', 'tsc --noEmit', ...(o.lint ? ['oxlint src --deny-warnings'] : []), test].join(' && '),
+        check: ['rsc-kit-typegen', 'tsc --noEmit', ...(o.lint ? ['oxlint src --type-aware --deny-warnings'] : []), test].join(' && '),
     };
 }
 export function packageJson(o) {
@@ -187,8 +187,11 @@ export function packageJson(o) {
         dev['tailwindcss'] = '^4.0.0';
         dev['@tailwindcss/vite'] = '^4.0.0';
     }
-    if (o.lint)
+    // Type-aware, for the rules below that read what an expression's type is.
+    if (o.lint) {
         dev['oxlint'] = '^1.81.0';
+        dev['oxlint-tsgolint'] = '^7.0.2003';
+    }
     if (o.validation === 'zod')
         deps['zod'] = '^4.0.0';
     if (o.validation === 'valibot')
@@ -562,6 +565,13 @@ export function oxlintConfig(o) {
             'typescript/no-explicit-any': 'error',
             'typescript/ban-ts-comment': 'error',
             'typescript/no-unsafe-function-type': 'error',
+            // Type-aware, and here for one reason: a call to a backend action
+            // is typed `T | Redirected`, and a redirected call resolves with
+            // `{ redirected }`. Read as text - `/t/${id}`, `String(id)`, `id + x`
+            // - it is "[object Object]", and the page navigates there.
+            'typescript/restrict-template-expressions': 'error',
+            'typescript/no-base-to-string': 'error',
+            'typescript/restrict-plus-operands': 'error',
             'no-unused-vars': 'error',
             'prefer-const': 'error',
             'no-var': 'error',
@@ -666,7 +676,14 @@ ${o.host === 'laravel' || o.backend
         : `- **Every action and query is built from the client in \`${o.sourceDir}/server/client.ts\`**,
   and authorisation is its \`.use()\` middleware - never a check written in a
   component, and never a bare \`'use server'\` function for anything that writes.`}
-- **Links and redirects are typed**: \`\`<Link href={\`/posts/\${slug}\`}>\`\`, a template
+${o.host === 'laravel' || o.backend
+        ? `- **A call to a backend action can be redirected** (an expired session, a guard),
+  and then resolves \`{ redirected }\` instead of its result. Narrow with
+  \`isRedirected\` from \`@rsc-kit/core/errors\` before reading the value, and before
+  any success toast or navigation after an \`await\` of a stub that returns nothing.
+  \`<Form>\` and \`useAction\` already skip \`onSuccess\` for it.
+`
+        : ''}- **Links and redirects are typed**: \`\`<Link href={\`/posts/\${slug}\`}>\`\`, a template
   literal, so a renamed route fails the typecheck. Never build urls by
   concatenation.
 - **Metadata is \`export const metadata\`** (or \`generateMetadata\`), never tags in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-rsc-kit",
-  "version": "0.30.3",
+  "version": "0.30.5",
   "type": "module",
   "description": "Scaffold an RSC app on Bun, Hono, Elysia or Node.",
   "bin": {