chore: switch to oxfmt, oxlint - add ci checks

.claude/REVIEW.md

@@ -47,4 +47,4 @@ The `apps/webapp/app/v3/` directory name is misleading — most code there is V2
 
 ## Confidence calibration for this repo
 
-The most common false-positive pattern: speculating about race conditions in code paths the agent doesn't have runtime visibility into. If the only evidence is "this *could* race", drop it. If you can point to a specific interleaving with file:line for each step, surface it.
+The most common false-positive pattern: speculating about race conditions in code paths the agent doesn't have runtime visibility into. If the only evidence is "this _could_ race", drop it. If you can point to a specific interleaving with file:line for each step, surface it.

.claude/rules/legacy-v3-code.md

@@ -19,6 +19,7 @@ The `v3/` directory name is misleading - most code here is actively used by the
 ## V1/V2 Branching Pattern
 
 Some services act as routers that branch on `RunEngineVersion`:
+
 - `services/cancelTaskRun.server.ts` - calls V1 service or `engine.cancelRun()` for V2
 - `services/batchTriggerV3.server.ts` - uses marqs for V1 path, run-engine for V2
 

.claude/rules/package-installation.md

@@ -8,9 +8,11 @@ paths:
 When adding a new dependency to any package.json in the monorepo:
 
 1. **Look up the latest version** on npm before adding:
+
    ```bash
    pnpm view <package-name> version
    ```
+
    If unsure which version to use (e.g. major version compatibility), confirm with the user.
 
 2. **Edit the package.json directly** — do NOT use `pnpm add` as it can cause issues in the monorepo. Add the dependency with the correct version range (typically `^x.y.z`).

.claude/skills/span-timeline-events/SKILL.md

@@ -52,15 +52,15 @@ Sibling spans (same parent) are sorted by `start_time ASC` from the ClickHouse q
 
 `getAdminOnlyForEvent()` controls visibility. Events default to **admin-only** (`true`).
 
-| Event | Admin-only | Friendly name |
-|-------|-----------|---------------|
-| `dequeue` | No | Dequeued |
-| `fork` | No | Launched |
-| `import` | No (if no fork event) | Importing task file |
-| `create_attempt` | Yes | Attempt created |
-| `lazy_payload` | Yes | Lazy attempt initialized |
-| `pod_scheduled` | Yes | Pod scheduled |
-| (default) | Yes | (raw event name) |
+| Event            | Admin-only            | Friendly name            |
+| ---------------- | --------------------- | ------------------------ |
+| `dequeue`        | No                    | Dequeued                 |
+| `fork`           | No                    | Launched                 |
+| `import`         | No (if no fork event) | Importing task file      |
+| `create_attempt` | Yes                   | Attempt created          |
+| `lazy_payload`   | Yes                   | Lazy attempt initialized |
+| `pod_scheduled`  | Yes                   | Pod scheduled            |
+| (default)        | Yes                   | (raw event name)         |
 
 ## Adding New Timeline Events
 

.claude/skills/trigger-dev-tasks/SKILL.md

@@ -113,17 +113,18 @@ export const paymentTask = task({
 
 ```ts
 await myTask.trigger(payload, {
-  delay: "1h",           // Delay execution
-  ttl: "10m",            // Cancel if not started within TTL
+  delay: "1h", // Delay execution
+  ttl: "10m", // Cancel if not started within TTL
   idempotencyKey: key,
   queue: "my-queue",
-  machine: "large-1x",   // micro, small-1x, small-2x, medium-1x, medium-2x, large-1x, large-2x
+  machine: "large-1x", // micro, small-1x, small-2x, medium-1x, medium-2x, large-1x, large-2x
   maxAttempts: 3,
-  tags: ["user_123"],    // Max 10 tags
-  debounce: {            // Consolidate rapid triggers
+  tags: ["user_123"], // Max 10 tags
+  debounce: {
+    // Consolidate rapid triggers
     key: "unique-key",
     delay: "5s",
-    mode: "trailing",    // "leading" (default) or "trailing"
+    mode: "trailing", // "leading" (default) or "trailing"
   },
 });
 ```
@@ -134,21 +135,27 @@ Consolidate multiple triggers into a single execution:
 
 ```ts
 // Rapid triggers with same key = single execution
-await myTask.trigger({ userId: "123" }, {
-  debounce: {
-    key: "user-123-update",
-    delay: "5s",
-  },
-});
+await myTask.trigger(
+  { userId: "123" },
+  {
+    debounce: {
+      key: "user-123-update",
+      delay: "5s",
+    },
+  }
+);
 
 // Trailing mode: use payload from LAST trigger
-await myTask.trigger({ data: "latest" }, {
-  debounce: {
-    key: "my-key",
-    delay: "10s",
-    mode: "trailing",
-  },
-});
+await myTask.trigger(
+  { data: "latest" },
+  {
+    debounce: {
+      key: "my-key",
+      delay: "10s",
+      mode: "trailing",
+    },
+  }
+);
 ```
 
 Use cases: user activity updates, webhook deduplication, search indexing, notification batching.
@@ -170,15 +177,15 @@ for (const result of results) {
 
 ## Machine Presets
 
-| Preset      | vCPU | Memory |
-|-------------|------|--------|
-| micro       | 0.25 | 0.25GB |
-| small-1x    | 0.5  | 0.5GB  |
-| small-2x    | 1    | 1GB    |
-| medium-1x   | 1    | 2GB    |
-| medium-2x   | 2    | 4GB    |
-| large-1x    | 4    | 8GB    |
-| large-2x    | 8    | 16GB   |
+| Preset    | vCPU | Memory |
+| --------- | ---- | ------ |
+| micro     | 0.25 | 0.25GB |
+| small-1x  | 0.5  | 0.5GB  |
+| small-2x  | 1    | 1GB    |
+| medium-1x | 1    | 2GB    |
+| medium-2x | 2    | 4GB    |
+| large-1x  | 4    | 8GB    |
+| large-2x  | 8    | 16GB   |
 
 ## Design Principles
 

.claude/skills/trigger-dev-tasks/advanced-tasks.md

@@ -48,19 +48,19 @@ Enhanced batch triggering with larger payloads and streaming ingestion.
 
 ### Rate Limiting (per environment)
 
-| Tier | Bucket Size | Refill Rate |
-|------|-------------|-------------|
-| Free | 1,200 runs | 100 runs/10 sec |
-| Hobby | 5,000 runs | 500 runs/5 sec |
-| Pro | 5,000 runs | 500 runs/5 sec |
+| Tier  | Bucket Size | Refill Rate     |
+| ----- | ----------- | --------------- |
+| Free  | 1,200 runs  | 100 runs/10 sec |
+| Hobby | 5,000 runs  | 500 runs/5 sec  |
+| Pro   | 5,000 runs  | 500 runs/5 sec  |
 
 ### Concurrent Batch Processing
 
-| Tier | Concurrent Batches |
-|------|-------------------|
-| Free | 1 |
-| Hobby | 10 |
-| Pro | 10 |
+| Tier  | Concurrent Batches |
+| ----- | ------------------ |
+| Free  | 1                  |
+| Hobby | 10                 |
+| Pro   | 10                 |
 
 ### Usage
 
@@ -122,8 +122,8 @@ await myTask.trigger(
   { userId: "123" },
   {
     debounce: {
-      key: "user-123-update",  // Unique identifier for debounce group
-      delay: "5s",              // Wait duration ("5s", "1m", or milliseconds)
+      key: "user-123-update", // Unique identifier for debounce group
+      delay: "5s", // Wait duration ("5s", "1m", or milliseconds)
     },
   }
 );
@@ -135,14 +135,20 @@ await myTask.trigger(
 
 ```ts
 // First trigger sets the payload
-await myTask.trigger({ action: "first" }, {
-  debounce: { key: "my-key", delay: "10s" }
-});
+await myTask.trigger(
+  { action: "first" },
+  {
+    debounce: { key: "my-key", delay: "10s" },
+  }
+);
 
 // Second trigger only reschedules - payload remains "first"
-await myTask.trigger({ action: "second" }, {
-  debounce: { key: "my-key", delay: "10s" }
-});
+await myTask.trigger(
+  { action: "second" },
+  {
+    debounce: { key: "my-key", delay: "10s" },
+  }
+);
 // Task executes with { action: "first" }
 ```
 
@@ -162,6 +168,7 @@ await myTask.trigger(
 ```
 
 In trailing mode, these options update with each trigger:
+
 - `payload` — task input data
 - `metadata` — run metadata
 - `tags` — run tags (replaces existing)

.claude/skills/trigger-dev-tasks/basic-tasks.md

@@ -75,8 +75,8 @@ await myTask.trigger(
   { userId: "123" },
   {
     debounce: {
-      key: "user-123-update",  // Unique key for debounce group
-      delay: "5s",              // Wait before executing
+      key: "user-123-update", // Unique key for debounce group
+      delay: "5s", // Wait before executing
     },
   }
 );
@@ -88,13 +88,14 @@ await myTask.trigger(
     debounce: {
       key: "trailing-example",
       delay: "10s",
-      mode: "trailing",  // Default is "leading" (first payload)
+      mode: "trailing", // Default is "leading" (first payload)
     },
   }
 );
 ```
 
 **Debounce modes:**
+
 - `leading` (default): Uses payload from first trigger, subsequent triggers only reschedule
 - `trailing`: Uses payload from most recent trigger
 

.cursor/commands/deslop.md

@@ -3,9 +3,10 @@
 Check the diff against main, and remove all AI generated slop introduced in this branch.
 
 This includes:
+
 - Extra comments that a human wouldn't add or is inconsistent with the rest of the file
 - Extra defensive checks or try/catch blocks that are abnormal for that area of the codebase (especially if called by trusted / validated codepaths)
 - Casts to any to get around type issues
 - Any other style that is inconsistent with the file
 
-Report at the end with only a 1-3 sentence summary of what you changed
+Report at the end with only a 1-3 sentence summary of what you changed

.github/labeler.yml

@@ -9,4 +9,4 @@
   - any: ["**/*.md"]
 
 "📌 area: ci":
-  - any: [".github/**/*"]
+  - any: [".github/**/*"]

.github/workflows/code-quality.yml

@@ -0,0 +1,38 @@
+name: "🎨 Format & Lint"
+
+on:
+  workflow_call:
+
+permissions:
+  contents: read
+
+jobs:
+  code-quality:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: ⬇️ Checkout repo
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: ⎔ Setup pnpm
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+        with:
+          version: 10.33.2
+
+      - name: ⎔ Setup node
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: 20.20.2
+          cache: "pnpm"
+
+      - name: 📥 Download deps
+        run: pnpm install --frozen-lockfile
+
+      - name: 💅 Check formatting
+        run: pnpm exec oxfmt --check .
+
+      - name: 🔎 Lint
+        run: pnpm exec oxlint .

.github/workflows/dependabot-critical-alerts.yml

@@ -2,7 +2,7 @@ name: Dependabot Critical Alerts
 
 on:
   schedule:
-    - cron: "0 8 * * *"  # Daily 08:00 UTC
+    - cron: "0 8 * * *" # Daily 08:00 UTC
   workflow_dispatch:
     inputs:
       severity:

.github/workflows/dependabot-weekly-summary.yml

@@ -2,7 +2,7 @@ name: Dependabot Weekly Summary
 
 on:
   schedule:
-    - cron: "0 8 * * 1"  # Mon 08:00 UTC
+    - cron: "0 8 * * 1" # Mon 08:00 UTC
   workflow_dispatch:
 
 # Single-purpose monitoring workflow; serialise on workflow name only - we never
@@ -12,9 +12,9 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  contents: read       # gh CLI baseline
-  pull-requests: read  # gh pr list (open dependabot PRs)
-  actions: read        # gh run list / view (parse latest dependabot run logs)
+  contents: read # gh CLI baseline
+  pull-requests: read # gh pr list (open dependabot PRs)
+  actions: read # gh run list / view (parse latest dependabot run logs)
 
 jobs:
   summary:

.github/workflows/pr_checks.yml

@@ -102,6 +102,11 @@ jobs:
               - 'pnpm-workspace.yaml'
               - 'turbo.json'
 
+  code-quality:
+    needs: changes
+    if: needs.changes.outputs.code == 'true'
+    uses: ./.github/workflows/code-quality.yml
+
   typecheck:
     needs: changes
     if: needs.changes.outputs.code == 'true' || needs.changes.outputs.typecheck_self == 'true'
@@ -155,6 +160,7 @@ jobs:
     name: All PR Checks
     needs:
       - changes
+      - code-quality
       - typecheck
       - webapp
       - e2e-webapp