Harden static analysis checks (#317)

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Author: nicklemmon

.eslintrc.js

@@ -40,7 +40,43 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Type check
-        run: npm run lint:types
+        run: npm run typecheck
+
+  format:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '24'
+          cache: 'npm'
+      - name: Install dependencies
+        run: npm ci
+      - name: Check formatting
+        run: npm run format:check
+
+  lint:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '24'
+          cache: 'npm'
+      - name: Install dependencies
+        run: npm ci
+      - name: Lint
+        run: npm run lint
 
   playwright-version:
     runs-on: ubuntu-latest

.github/workflows/ci.yml

@@ -0,0 +1,10 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "printWidth": 100,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "semi": false,
+  "proseWrap": "always",
+  "sortPackageJson": false,
+  "ignorePatterns": ["CLAUDE.md", ".github/dependabot.yml"]
+}

.oxfmtrc.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "options": {
+    "typeAware": true,
+    "maxWarnings": 0
+  },
+  "plugins": ["typescript", "react", "jsx-a11y", "import", "promise", "vitest", "oxc"],
+  "categories": {
+    "correctness": "error",
+    "suspicious": "error"
+  },
+  "rules": {
+    "typescript/no-explicit-any": "error",
+    "typescript/no-non-null-assertion": "error",
+    "typescript/no-unsafe-assignment": "error",
+    "typescript/no-unsafe-argument": "error",
+    "typescript/no-unsafe-call": "error",
+    "typescript/no-unsafe-member-access": "error",
+    "typescript/no-floating-promises": "error",
+    "typescript/no-misused-promises": "error",
+    "typescript/switch-exhaustiveness-check": "error",
+    "react/rules-of-hooks": "error",
+    "react/exhaustive-deps": "error",
+    "react/react-in-jsx-scope": "off",
+    "typescript/no-unsafe-type-assertion": "off",
+    "typescript/no-duplicate-type-constituents": "off",
+    "react/refs": "off",
+    "react/purity": "off",
+    "jsx-a11y/alt-text": "off",
+    "jsx-a11y/control-has-associated-label": "off",
+    "jsx-a11y/label-has-associated-control": "off",
+    "jsx-a11y/click-events-have-key-events": "off",
+    "jsx-a11y/no-static-element-interactions": "off",
+    "jsx-a11y/prefer-tag-over-role": "off",
+    "import/no-unassigned-import": "off",
+    "eslint/no-shadow": "off"
+  }
+}

.oxlintrc.json

@@ -0,0 +1,3 @@
+{
+  "recommendations": ["oxc.oxc-vscode"]
+}

.prettierrc

@@ -1,6 +1,6 @@
 {
   "editor.formatOnSave": true,
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.defaultFormatter": "oxc.oxc-vscode",
   "[shellscript]": {
     "editor.defaultFormatter": "foxundermoon.shell-format"
   }

.vscode/extensions.json

@@ -8,7 +8,8 @@ repository.
 - `npm start` - Start development server using Vite
 - `npm run build` - Build production bundle
 - `npm run preview` - Preview production build locally
-- `npm run prettier:write` - Format all files with Prettier
+- `npm run format` - Format all files with Oxfmt
+- `npm run typecheck` - Check TypeScript types
 
 ## Code Quality
 
@@ -55,6 +56,14 @@ entity-name/
 
 - Use `type` over `interface`
 
+### JSDoc conventions
+
+- Add a JSDoc description when you add or extract a function with a domain rule, a side effect, or
+  a failure condition.
+- Use Simplified Technical English: use short, direct sentences in the present tense.
+- Describe intent and observable behavior. Do not repeat type information in `@param`, `@returns`,
+  or prose; TypeScript already provides it.
+
 ### Adding New Game Content
 
 - **Cards**: Create folder in `src/cards/` with config.ts using `defineCard()` helper