fg-devkit 1.0.0

package/configs/tsconfig.app.sync.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "fg-devkit/tsconfig.base.json",
+  "include": [
+    "env.d.ts",
+    "src/**/*",
+    "src/**/*.vue",
+    "src/**/*.ts",
+    "src/**/*.d.ts",
+    "src/vuex.d.ts"
+  ],
+  "exclude": ["src/**/__tests__/*"],
+  "compilerOptions": {
+    "strict": true,
+    "composite": true,
+    "noEmit": true,
+    "types": ["@intlify/unplugin-vue-i18n/messages", "vue-i18n", "vite/client"],
+    "moduleResolution": "bundler",
+    "resolvePackageJsonExports": true,
+    "paths": {
+      "@/*": ["./src/*"],
+      "@intlify/*": ["./node_modules/@intlify/*"]
+    },
+    "baseUrl": ".",
+    "allowJs": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "skipLibCheck": true,
+    "preserveSymlinks": false
+  },
+  "vueCompilerOptions": {
+    "strictTemplates": true,
+    "experimentalCompatMode": 2,
+    "types": ["fds-vue-core"]
+  }
+}

package/configs/tsconfig.base.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "@vue/tsconfig/tsconfig.dom.json",
+  "compilerOptions": {
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "allowJs": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "vueCompilerOptions": {
+    "strictTemplates": true,
+    "types": ["fds-vue-core"]
+  }
+}

package/configs/vscode-settings.json

@@ -0,0 +1,74 @@
+{
+  "i18n-ally.localesPaths": ["src/lang"],
+  "i18n-ally.sourceLanguage": "sv",
+  "i18n-ally.displayLanguage": "sv",
+  "i18n-ally.keystyle": "nested",
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.formatOnSave": true,
+  "[javascript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[typescript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "editor.codeActionsOnSave": {
+    "source.fixAll.eslint": "explicit",
+    "source.organizeImports": "explicit"
+  },
+  "editor.formatOnSaveMode": "file",
+  "typescript.format.semicolons": "remove",
+  "javascript.format.semicolons": "remove",
+  "editor.quickSuggestions": {
+    "other": true,
+    "comments": false,
+    "strings": true
+  },
+  "editor.suggest.showKeywords": true,
+  "editor.suggest.showSnippets": false,
+  "editor.suggest.showFolders": false,
+  "editor.wordBasedSuggestions": "off",
+  "editor.suggestOnTriggerCharacters": true,
+  "editor.tabCompletion": "on",
+  "editor.acceptSuggestionOnCommitCharacter": true,
+  "editor.quickSuggestionsDelay": 50,
+  "editor.suggestSelection": "first",
+  "editor.suggest.localityBonus": true,
+  "editor.parameterHints.enabled": false,
+  "editor.inlayHints.enabled": "off",
+  "editor.suggest.filterGraceful": true,
+  "eslint.validate": ["javascript", "javascriptreact", "typescript", "typescriptreact", "vue"],
+  "css.customData": [".vscode/tailwind.json"],
+  "typescript.tsdk": "node_modules/typescript/lib",
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "typescript.preferences.includePackageJsonAutoImports": "on",
+  "typescript.suggest.autoImports": true,
+  "typescript.updateImportsOnFileMove.enabled": "always",
+  "typescript.inlayHints.parameterNames.enabled": "none",
+  "typescript.inlayHints.variableTypes.enabled": false,
+  "typescript.inlayHints.propertyDeclarationTypes.enabled": false,
+  "typescript.inlayHints.functionLikeReturnTypes.enabled": false,
+  "javascript.inlayHints.parameterNames.enabled": "none",
+  "javascript.inlayHints.variableTypes.enabled": false,
+  "typescript.suggest.includeCompletionsForImportStatements": true,
+  "typescript.preferences.importModuleSpecifier": "relative",
+  "typescript.preferences.importModuleSpecifierEnding": "auto",
+  "typescript.suggest.completeFunctionCalls": true,
+  "typescript.suggest.paths": false,
+  "[vue]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.quickSuggestions": {
+      "other": true,
+      "comments": false,
+      "strings": true
+    },
+    "editor.suggest.showSnippets": false,
+    "editor.suggest.showFiles": false,
+    "editor.suggest.showFolders": false,
+    "editor.suggest.snippetsPreventQuickSuggestions": true,
+    "editor.wordBasedSuggestions": "off",
+    "editor.quickSuggestionsDelay": 50,
+    "editor.suggestSelection": "first",
+    "editor.parameterHints.enabled": false,
+    "editor.inlayHints.enabled": "off"
+  }
+}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "fg-devkit",
+  "version": "1.0.0",
+  "description": "Shared configs, scripts, and DX tooling for Vue / TypeScript frontend repos",
+  "type": "module",
+  "license": "UNLICENSED",
+  "bin": {
+    "fg": "./scripts/fg-devkit.mjs",
+    "fg-devkit": "./scripts/fg-devkit.mjs",
+    "fg-vuln-commit": "./scripts/vuln-commit.mjs",
+    "fds-vuln-commit": "./scripts/vuln-commit.mjs"
+  },
+  "exports": {
+    "./tsconfig.base.json": "./configs/tsconfig.base.json",
+    "./tsconfig.app.sync.json": "./configs/tsconfig.app.sync.json",
+    "./eslint.config.base.js": "./configs/eslint.config.base.js",
+    "./prettier.config.js": "./configs/prettier.config.js",
+    "./vscode-settings.json": "./configs/vscode-settings.json",
+    "./dependency-policy.vue-workspace.json": "./configs/dependency-policy.vue-workspace.json",
+    "./vuln-commit": "./scripts/vuln-commit.mjs",
+    "./cz-adapter": "./scripts/cz/cz-adapter.cjs",
+    "./cz-config": "./scripts/cz/.cz-config.cjs",
+    "./scripts/sync-peers-from-dev.mjs": "./scripts/sync-peers-from-dev.mjs",
+    "./scripts/sync-vscode-settings.mjs": "./scripts/sync-vscode-settings.mjs",
+    "./scripts/sync-tooling-configs.mjs": "./scripts/sync-tooling-configs.mjs",
+    "./scripts/sync-project-configs.mjs": "./scripts/sync-project-configs.mjs",
+    "./scripts/check-dependency-policy.mjs": "./scripts/check-dependency-policy.mjs",
+    "./scripts/sync-dependency-policy.mjs": "./scripts/sync-dependency-policy.mjs",
+    "./scripts/resolve-dependency-policy-path.mjs": "./scripts/resolve-dependency-policy-path.mjs",
+    "./scripts/refresh-dependency-policy-from-repos.mjs": "./scripts/refresh-dependency-policy-from-repos.mjs",
+    "./scripts/fg-devkit.mjs": "./scripts/fg-devkit.mjs",
+    "./scripts/release.sh": "./scripts/release.sh",
+    "./scripts/cz/cz-adapter.cjs": "./scripts/cz/cz-adapter.cjs",
+    "./scripts/cz/.cz-config.cjs": "./scripts/cz/.cz-config.cjs",
+    "./cursor-rules/core-coding-standards.mdc": "./.cursor/rules/core-coding-standards.mdc"
+  },
+  "files": [
+    "configs",
+    "scripts",
+    ".cursor/rules/core-coding-standards.mdc"
+  ],
+  "engines": {
+    "node": "^20.19.0 || >=22.12.0"
+  },
+  "keywords": [
+    "eslint",
+    "prettier",
+    "typescript",
+    "vue"
+  ],
+  "peerDependencies": {
+    "@typescript-eslint/eslint-plugin": "^8.57.0",
+    "@typescript-eslint/parser": "^8.57.0",
+    "@vitest/eslint-plugin": "^1.5.0",
+    "@vue/eslint-config-prettier": "^10.0.0",
+    "@vue/tsconfig": "^0.8.0",
+    "eslint": "^9.0.0 || ^10.0.0",
+    "eslint-plugin-vue": "^10.0.0",
+    "typescript": ">=5.0.0",
+    "vue-eslint-parser": "^10.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@vitest/eslint-plugin": {
+      "optional": true
+    }
+  }
+}

package/scripts/check-dependency-policy.mjs

@@ -0,0 +1,135 @@
+#!/usr/bin/env node
+/**
+ * Validates the current package.json against the shared dependency policy.
+ *
+ * - Ensures the policy file itself uses pinned versions.
+ * - For each dependency listed in the policy, checks the consumer’s declared version matches.
+ * - For managedAnywhere packages, allows either dependencies or devDependencies but requires one consistent version.
+ * - Optionally checks policy-defined pnpm overrides against the consumer’s package.json.
+ * - Enforces pinned semver for any other dependencies/devDependencies/optionalDependencies and consumer pnpm.overrides.
+ *
+ * Policy path: first CLI argument, or default policy under fg-devkit/configs/ (see resolve-dependency-policy-path.mjs).
+ * Exits non-zero and prints mismatches if anything fails.
+ */
+
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { collectPinViolations, isPinnedDependencyVersion } from './dependency-policy-pins.mjs'
+import { resolveDependencyPolicyPath } from './resolve-dependency-policy-path.mjs'
+
+const cwd = process.cwd()
+const pkgPath = path.resolve(cwd, 'package.json')
+const scriptDir = path.dirname(fileURLToPath(import.meta.url))
+const policyPath = resolveDependencyPolicyPath(scriptDir, cwd, process.argv)
+
+if (!fs.existsSync(pkgPath)) {
+  console.error('[check-deps] Could not find package.json in current working directory')
+  process.exit(1)
+}
+
+if (!fs.existsSync(policyPath)) {
+  console.error(`[check-deps] Could not find dependency policy: ${policyPath}`)
+  console.error(
+    '[check-deps] Usage: node …/check-dependency-policy.mjs [policy-file]\n' +
+      '  policy-file: absolute path, path relative to cwd, or filename under fg-devkit/configs/ (default: dependency-policy.vue-workspace.json)',
+  )
+  process.exit(1)
+}
+
+const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'))
+const policy = JSON.parse(fs.readFileSync(policyPath, 'utf8'))
+const mismatches = []
+
+/** True if this package+section is governed by the policy (so global pin checks skip it). */
+function isPolicyManagedInSection(section, name) {
+  if (policy.managedAnywhere?.[name] !== undefined) {
+    return true
+  }
+  return policy.managedDependencies?.[section]?.[name] !== undefined
+}
+
+// Policy file must only contain pinned versions.
+for (const [section, dependencies] of Object.entries(policy.managedDependencies ?? {})) {
+  mismatches.push(...collectPinViolations(`[policy] managedDependencies.${section}.`, dependencies))
+}
+
+mismatches.push(...collectPinViolations('[policy] managedAnywhere.', policy.managedAnywhere ?? {}))
+mismatches.push(...collectPinViolations('[policy] overrides.', policy.overrides ?? {}))
+
+// Intersection: only packages that exist in both policy and consumer are compared.
+for (const [section, dependencies] of Object.entries(policy.managedDependencies ?? {})) {
+  const current = pkg[section] ?? {}
+
+  for (const [name, expected] of Object.entries(dependencies)) {
+    const actual = current[name]
+    if (actual === undefined) {
+      continue
+    }
+    if (actual !== expected) {
+      mismatches.push(`${section}.${name}: expected ${expected}, got ${actual ?? '(missing)'}`)
+    } else if (!isPinnedDependencyVersion(actual)) {
+      mismatches.push(`${section}.${name}: must be pinned, got ${JSON.stringify(actual)}`)
+    }
+  }
+}
+
+// Packages allowed in either dependencies or devDependencies with a single expected version.
+for (const [name, expected] of Object.entries(policy.managedAnywhere ?? {})) {
+  const dep = pkg.dependencies?.[name]
+  const dev = pkg.devDependencies?.[name]
+  if (dep === undefined && dev === undefined) {
+    continue
+  }
+  if (dep !== undefined && dev !== undefined && dep !== dev) {
+    mismatches.push(
+      `managedAnywhere.${name}: inconsistent versions (dependencies: ${dep}, devDependencies: ${dev})`,
+    )
+    continue
+  }
+  const actual = dep !== undefined ? dep : dev
+  if (actual !== expected) {
+    mismatches.push(`managedAnywhere.${name}: expected ${expected}, got ${actual ?? '(missing)'}`)
+  } else if (!isPinnedDependencyVersion(actual)) {
+    mismatches.push(`managedAnywhere.${name}: must be pinned, got ${JSON.stringify(actual)}`)
+  }
+}
+
+// Optional: policy may define pnpm.overrides entries the consumer must mirror.
+const overrides = pkg.pnpm?.overrides ?? {}
+for (const [name, expected] of Object.entries(policy.overrides ?? {})) {
+  const actual = overrides[name]
+  if (actual !== expected) {
+    mismatches.push(`pnpm.overrides.${name}: expected ${expected}, got ${actual ?? '(missing)'}`)
+  } else if (actual !== undefined && !isPinnedDependencyVersion(actual)) {
+    mismatches.push(`pnpm.overrides.${name}: must be pinned, got ${JSON.stringify(actual)}`)
+  }
+}
+
+// Everything not covered by the policy must still use exact pinned semver.
+for (const section of ['dependencies', 'devDependencies', 'optionalDependencies']) {
+  for (const [name, value] of Object.entries(pkg[section] ?? {})) {
+    if (isPolicyManagedInSection(section, name)) {
+      continue
+    }
+    if (!isPinnedDependencyVersion(value)) {
+      mismatches.push(
+        `[pins] ${section}.${name}: must be exact pinned semver (no ^ ~ ranges); got ${JSON.stringify(value)}`,
+      )
+    }
+  }
+}
+
+// Consumer pnpm.overrides must be pinned (ranges reported even if not in policy).
+mismatches.push(...collectPinViolations('[pins] pnpm.overrides.', pkg.pnpm?.overrides ?? {}))
+
+if (mismatches.length > 0) {
+  console.error('[check-deps] Dependency policy mismatches found:')
+  for (const mismatch of mismatches) {
+    console.error(`- ${mismatch}`)
+  }
+  process.exit(1)
+}
+
+console.log('[check-deps] package.json matches dependency policy')

package/scripts/cz/.cz-config.cjs

@@ -0,0 +1,26 @@
+/**
+ * Commitizen configuration (legacy path): commit types, prompts, and message limits.
+ * Used when tooling points commitizen at this file instead of the cz-adapter prompter.
+ */
+module.exports = {
+  types: [
+    { value: 'feat', name: 'feat(scope): Added' },
+    { value: 'fix', name: 'fix(scope): Fixed' },
+    { value: 'perf', name: 'perf(scope): Performance' },
+    { value: 'refactor', name: 'refactor(scope): Changed' },
+    { value: 'chore', name: 'chore(scope): Changed' },
+    { value: 'dep', name: 'dep(scope): Dependencies (single package or batch)' },
+    { value: 'vuln', name: 'vuln(scope): Security dependency update (single package or batch)' },
+    { value: 'fix(security)', name: 'fix(security): Security' }
+  ],
+  allowCustomScopes: true,
+  allowBreakingChanges: [],
+  skipQuestions: ['footer', 'breaking'],
+  subjectLimit: 120,
+  messages: {
+    type: 'Select the type of change you are committing:',
+    customScope: 'Packages (for dep/vuln) or scope:',
+    subject: 'Commit subject (imperative, no trailing period):',
+    body: "Optional body (use '|' for newline):"
+  }
+}

package/scripts/cz/cz-adapter.cjs

@@ -0,0 +1,116 @@
+/**
+ * Custom Commitizen adapter: interactive prompts for type, scope, dep/vuln flows, and message body.
+ * Builds the final conventional commit string and passes it to commit().
+ */
+module.exports = {
+  prompter(cz, commit) {
+    const types = [
+      { value: "feat", name: "feat(scope): Added" },
+      { value: "fix", name: "fix(scope): Fixed" },
+      { value: "perf", name: "perf(scope): Performance" },
+      { value: "refactor", name: "refactor(scope): Changed" },
+      { value: "chore", name: "chore(scope): Changed" },
+      { value: "docs", name: "docs(scope): Documentation" },
+      { value: "dep", name: "dep(scope): Dependencies (single package or batch)" },
+      { value: "vuln", name: "vuln(scope): Security dependency update (single package or batch)" },
+      { value: "fix(security)", name: "fix(security): Security" },
+    ];
+
+    const questions = [
+      {
+        type: "list",
+        name: "change_type",
+        message: "Select the type of change you are committing",
+        choices: types,
+      },
+      {
+        type: "input",
+        name: "scope",
+        when: (answers) => !["dep", "vuln"].includes(answers.change_type),
+        message: "Scope:",
+      },
+      {
+        type: "input",
+        name: "packages",
+        when: (answers) => ["dep", "vuln"].includes(answers.change_type),
+        message: "Packages:",
+      },
+      {
+        type: "list",
+        name: "vuln_change_kind",
+        when: (answers) => answers.change_type === "vuln",
+        message: "Vulnerability change type:",
+        choices: [
+          { value: "override", name: "override" },
+          { value: "bump", name: "bump" },
+        ],
+      },
+      {
+        type: "input",
+        name: "vuln_target_version",
+        when: (answers) => answers.change_type === "vuln",
+        message: "Target version/range (e.g. 5.2.2 or >=5.2.2):",
+        validate: (value) => (value && value.trim() ? true : "Provide a target version/range"),
+      },
+      {
+        type: "list",
+        name: "dep_change_kind",
+        when: (answers) => answers.change_type === "dep",
+        message: "Dependency change type:",
+        choices: [
+          { value: "new", name: "new package" },
+          { value: "update", name: "updated package" },
+          { value: "remove", name: "removed package" },
+        ],
+      },
+      {
+        type: "input",
+        name: "dep_version",
+        when: (answers) => answers.change_type === "dep",
+        message: "Version (x.y.z):",
+        validate: (value) => (/^\d+\.\d+\.\d+$/.test(value) ? true : "Use format x.y.z"),
+      },
+      {
+        type: "input",
+        name: "shortcut_id",
+        when: (answers) => !["dep", "vuln"].includes(answers.change_type),
+        message: "Shortcut ID digits only (optional, e.g. 1234):",
+      },
+      {
+        type: "input",
+        name: "message",
+        when: (answers) => !["dep", "vuln"].includes(answers.change_type),
+        message: "Commit subject (imperative, no trailing period):",
+      },
+      {
+        type: "input",
+        name: "body",
+        message: "Optional body (use '|' for newline):",
+      },
+    ];
+
+    cz.prompt(questions).then((answers) => {
+      const type = answers.change_type;
+      const scopeValue = ["dep", "vuln"].includes(type) ? answers.packages : answers.scope;
+      const needsEmptyParens = ["dep", "vuln"].includes(type) && !scopeValue;
+      const scopePart = scopeValue ? `(${scopeValue})` : needsEmptyParens ? "()" : "";
+      const shortcutPart = answers.shortcut_id ? ` [sc-${answers.shortcut_id}]` : "";
+      const bodyPart = answers.body ? `\n\n${answers.body.split("|").join("\n")}` : "";
+      const depSubject =
+        answers.dep_change_kind === "new"
+          ? `add ${answers.dep_version}`
+          : answers.dep_change_kind === "remove"
+            ? `yeet ${answers.dep_version}`
+            : `bump to ${answers.dep_version}`;
+      const vulnSubject =
+        type === "vuln"
+          ? answers.vuln_change_kind === "override"
+            ? `override ${answers.vuln_target_version}`
+            : `bump to ${answers.vuln_target_version}`
+          : "";
+      const subject = type === "dep" ? depSubject : type === "vuln" ? vulnSubject : answers.message;
+      const commitMessage = `${type}${scopePart}: ${subject}${shortcutPart}${bodyPart}`;
+      commit(commitMessage);
+    });
+  },
+};

package/scripts/dependency-policy-pins.mjs

@@ -0,0 +1,35 @@
+/**
+ * Helpers for dependency policy tooling: decide whether a version string is an exact pin
+ * and collect human-readable violations for a record of package → version.
+ *
+ * Strict pinning: exact x.y.z (optional -prerelease). No ^ ~ >= ranges or wildcards.
+ * Local / monorepo protocols (file:, workspace:, link:, relative paths) count as pinned.
+ */
+export function isPinnedDependencyVersion(value) {
+  if (typeof value !== 'string' || value.length === 0) {
+    return false
+  }
+  if (/^(file:|workspace:|link:|\.\/|\.\.\/)/.test(value)) {
+    return true
+  }
+  if (/[\^~><=*|]/.test(value)) {
+    return false
+  }
+  if (/\s/.test(value)) {
+    return false
+  }
+  return /^\d+\.\d+\.\d+(-[\w.]+)?$/.test(value)
+}
+
+/** Returns one message per entry in `record` whose value is not pinned per isPinnedDependencyVersion. */
+export function collectPinViolations(labelPrefix, record) {
+  const out = []
+  for (const [name, value] of Object.entries(record ?? {})) {
+    if (!isPinnedDependencyVersion(value)) {
+      out.push(
+        `${labelPrefix}${name}: must be exact pinned semver (no ^ ~ ranges); got ${JSON.stringify(value)}`,
+      )
+    }
+  }
+  return out
+}