chore: migrate to the magic tooling stack

[GSTJ]

Moves this package onto the shared GSTJ tooling stack: pnpm, oxlint, oxfmt,
magic-tsconfig, and the reusable CI workflow.

Stack changes

before	after
yarn 1 + yarn.lock	pnpm 11.17.0 (packageManager) + pnpm-lock.yaml
eslint 8 via expo-module lint (eslint-config-universe)	oxlint@1.75.0 + magic-oxlint-config/base
prettier 3	oxfmt@0.60.0 + magic-oxfmt-config
expo-module-scripts/tsconfig.plugin	magic-tsconfig/base.json
hand-written lint/test/build job	GSTJ/magic/.github/workflows/ci.yml@main

Scripts are the standard set: lint, lint:fix, format, format:fix,
typecheck, plus this repo's build, test, clean and release.

expo-module-scripts is no longer the runner

expo-module build, test, prepare and prepublishOnly all route through a
wrapper that runs yarn exec -- npx … whenever yarn is on PATH and the user
agent is not yarn — exactly the pnpm case, and yarn then refuses on the
packageManager: pnpm@… field. Two more reasons not to keep them:

• prepare ran expo-module configure, which re-creates the deleted
  .eslintrc.js from a template on every install.
• prepublishOnly shells out to the proofread bin, a transitive dependency
  that pnpm does not link into node_modules/.bin.

So build is tsc --project tsconfig.build.json and test is jest, which is
what those wrappers were doing. The package stays: expo-module clean and the
jest preset in jest.config.js still come from it.

Notable refactors

• ResourceXML came from a deep import into @expo/config-plugins, which
  is not a declared dependency — it arrives through expo. Yarn's flat
  node_modules made that resolve; pnpm's does not. It now comes from
  AndroidConfig.Resources on the entry point the file already imported.
• Kebab-case filenames: 11 renames, 21 import specifiers rewritten, applied
  with magic-kebab --write. No conflicts, nothing skipped, nothing flagged for
  review. git log --follow still reaches back through the renames.
• tsconfig is split. tsconfig.json (typecheck) covers the tests;
  tsconfig.build.json is the emit config that excludes them. Both re-declare
  CommonJS: Expo requires a config plugin, and the shared base is
  bundler-oriented (module: Preserve), which would emit ESM and break every
  consumer's prebuild. incremental is off for the emit config — its build-info
  file lands outside outDir, so clean && build was emitting nothing at all
  and require("./build") died on the first missing module.
• .release-it.cjs filters changelog commits with String#startsWith instead
  of a ^-anchored regex.
• no-template-curly-in-string is off for .release-it.cjs alone — ${version}
  there is release-it's own template syntax and has to reach it uninterpolated.
• CHANGELOG.md is excluded from oxfmt: @release-it/conventional-changelog
  rewrites it with * bullets on every release, and oxfmt rewrites those to
  -, so the release workflow's own bump PR would fail the format check it just
  created.

CI

checks calls the shared workflow. The second job, validate, exists only to
carry the name "Lint, test and build": master's ruleset requires that exact
status check, and a called workflow reports as <caller job> / <called job>, so
it can never produce that context. Deleting that job is a one-liner once the
ruleset is pointed at the shared workflow's check — a repository settings
change, which this PR deliberately does not make.

release.yml keeps its shape and now installs and runs through pnpm, with
format and typecheck added. Publishing is untouched: release-it still shells
out to npm. CodeQL is untouched.

Verified locally

pnpm install --frozen-lockfile from an empty node_modules, then lint (0
diagnostics), format --check, typecheck, test (5 passing), build, and
npm pack --dry-run (36 files, entry point loads through app.plugin.js).

https://claude.ai/code/session_01Fe92vvdc4R3F4BDBFoLcw1

[GSTJ]

Updated to the magic 1.1.0 round

Three commits on top of the migration: the bump, the workarounds it retires, and the one code change 1.1.0 forces.

Bumped — magic-oxlint-config, magic-oxfmt-config, magic-tsconfig 1.0.0 → 1.1.0, magic-codemods 1.0.0 → 1.1.0. No magic-oxlint-plugin here, so 1.0.1 doesn't apply. minimumReleaseAgeExclude moves to the 1.1.0 versions rather than going away — the tarballs are hours old and pnpm 11 enforces the quarantine on --frozen-lockfile. Those four lines are deletable in three days.

Removed

• oxfmt.config.mts is back to the one-line re-export. 1.1.0 ships **/CHANGELOG.md in the shared ignore list, so the local spread that re-declared it did nothing. oxfmt --check . still leaves CHANGELOG.md alone, which is what keeps release-it's own bump PR from failing the format check.
• "incremental": false in tsconfig.build.json. magic-tsconfig dropped incremental from base.json, so there was nothing left to switch off. *.tsbuildinfo came out of .gitignore with it; after deleting the stale root tsconfig.tsbuildinfo, neither tsc --noEmit nor tsc -p tsconfig.build.json writes one back. rm -rf build && pnpm run build emits a full tree, twice in a row.

Kept, but rewritten — the ignorePatterns: base.ignorePatterns line. The changelog frames it as the price of the extends form, and it still is: on oxlint 1.75.0 with magic-oxlint-config 1.1.0, extends: [base] resolves to ignorePatterns: []. I checked it two ways rather than trusting --print-config alone — a probe file at src/generated/Probe.ts (matched by **/generated/**, not by .gitignore) is silently skipped with the line and reports four diagnostics without it.

So instead of deleting the line, this config moved to extendConfig(base, …), the mechanism the README documents for repo-specific rules. It flattens rather than extending, so the ignore list arrives by construction and there is no local copy to drift. The one local override — no-template-curly-in-string off for .release-it.cjs, where ${version} is release-it's own template syntax and is supposed to reach it uninterpolated — survives the move and is still load-bearing: 5 diagnostics on that file without it, 0 with.

New violation — typescript/consistent-type-definitions is ["error", "type"] now, where 1.0.0 carried oxlint's default and asked for the opposite. One hit: PluginConfigType in src/plugin-config.ts. --fix converted it, oxfmt added the terminating semicolon the fixer left off. Nothing merges into it or implements it, so the alias is a straight swap and the emitted .d.ts is equivalent.

Verification — from a deleted node_modules: pnpm install --frozen-lockfile, pnpm run build (twice, from an empty build/), pnpm run lint 0 warnings 0 errors across 17 files / 354 rules, pnpm run format clean over 26 files, pnpm run typecheck, pnpm run test 5/5, npm pack --dry-run 36 files.

magic-kebab 1.1.0 --dry-run --strict also re-run against the new detections — 0 renames, 0 conflicts, nothing needing review. Worth doing here specifically because this package is a config plugin and 1.1.0 added the bare-string-literal detection for exactly that shape; app.plugin.js points at ./build, which is emitted and not a rename target.

[GSTJ]

Bumped to magic-oxlint-config / magic-oxfmt-config / magic-tsconfig 1.2.0. magic-codemods stays on 1.1.0 (still latest).

Both quarantine versions had to be listed in minimumReleaseAgeExclude for the install that rewrote the lockfile — pnpm checks the committed lockfile before resolving, so the 1.1.0 entries can only come out afterwards. Final state pins the three at @1.2.0 and keeps magic-codemods@1.1.0, which also published today.

Nothing to unwind from the 1.2.0 fixes: this isn't a Next app, so nextjs.json regaining incremental doesn't reach it (base.json is unchanged and still sets none, and no tsbuildinfo appears from build or typecheck). The CHANGELOG here is generated by @release-it/conventional-changelog, so the preset's **/CHANGELOG.md ignore stays and withoutIgnorePatterns() isn't wanted. oxlint.config.mts was already on extendConfig() rather than defineConfig({ extends }), so the undocumented shape isn't in this repo — verified the flattened config carries the preset's 13 ignorePatterns and its env.

Green: install --frozen-lockfile, build, lint (0), format --check, typecheck, 5/5 tests.