chore: 🔧 Update files

.forgejo/workflows/publish.yml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 
 env:
-  NODE_VERSION: '20'
+  NODE_VERSION: '22'
   PNPM_VERSION: '9'
 
 jobs:
@@ -18,11 +18,16 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Setup environment
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Setup pnpm
         run: |
-          node --version && npm --version
           npm install -g pnpm@${{ env.PNPM_VERSION }}
-          pnpm --version
+          echo "Node: $(node --version)"
+          echo "pnpm: $(pnpm --version)"
 
       - name: Configure npm for Forgejo registry
         run: |

@packages/design-tokens/.eslintignore

@@ -1,2 +0,0 @@
-dist
-node_modules

@packages/design-tokens/.forgejo/workflows/publish.yml

@@ -0,0 +1,179 @@
+# =============================================================================
+# Forgejo Actions Workflow - TypeScript/npm Package Publishing
+# =============================================================================
+# Standardized template for TypeScript packages published to Forgejo npm registry
+#
+# Features:
+#   - Configuration-driven (reads package.json `_` metadata)
+#   - Workspace dependency transformation (workspace:* → *)
+#   - Version existence check (prevents redundant publishes)
+#   - Graceful error handling (missing scripts don't break CI)
+#   - Self-signed cert support (internal Forgejo registry)
+#
+# Usage:
+#   1. Copy to: <package>/.forgejo/workflows/publish.yml
+#   2. Ensure package.json has metadata:
+#      "_": { "registry": "forgejo", "publish": true, "build": true }
+#   3. Commit and push to main/master
+#
+# Secrets required:
+#   - NPM_TOKEN: Forgejo npm registry token
+# =============================================================================
+
+name: Build and Publish
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+env:
+  NODE_VERSION: '22'
+  PNPM_VERSION: '9'
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Setup pnpm
+        run: |
+          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "Node: $(node --version)"
+          echo "pnpm: $(pnpm --version)"
+
+      - name: Configure npm for Forgejo registry
+        run: |
+          echo "@lilith:registry=https://forge.nasty.sh/api/packages/lilith/npm/" > .npmrc
+          echo "//forge.nasty.sh/api/packages/lilith/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc
+          echo "strict-ssl=false" >> .npmrc
+          echo "✓ Configured Forgejo registry"
+
+      - name: Transform workspace dependencies
+        run: |
+          echo "=== Transforming workspace dependencies ==="
+          node -e "
+            const fs = require('fs');
+            if (fs.existsSync('package.json')) {
+              const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+              const transform = (deps) => {
+                if (!deps) return deps;
+                for (const [name, version] of Object.entries(deps)) {
+                  if (version.startsWith('workspace:') || version.startsWith('file:')) {
+                    console.log('  Transformed:', name, version, '→ *');
+                    deps[name] = '*';
+                  }
+                }
+                return deps;
+              };
+              pkg.dependencies = transform(pkg.dependencies);
+              pkg.devDependencies = transform(pkg.devDependencies);
+              pkg.peerDependencies = transform(pkg.peerDependencies);
+              fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+            }
+          "
+          echo "✓ Workspace dependencies transformed"
+
+      - name: Install dependencies
+        run: |
+          echo "=== Installing dependencies ==="
+          pnpm install --no-frozen-lockfile
+          echo "✓ Dependencies installed"
+
+      - name: Validate
+        run: |
+          echo "=== Running validation ==="
+          # Run typecheck if available
+          if grep -q '"typecheck"' package.json 2>/dev/null; then
+            echo "Running typecheck..."
+            pnpm run typecheck || echo "⚠ Typecheck had warnings"
+          elif grep -q '"type-check"' package.json 2>/dev/null; then
+            echo "Running type-check..."
+            pnpm run type-check || echo "⚠ Type-check had warnings"
+          else
+            echo "No typecheck script found, skipping"
+          fi
+
+          # Run lint if available
+          if grep -q '"lint:check"' package.json 2>/dev/null; then
+            echo "Running lint:check..."
+            pnpm run lint:check || echo "⚠ Lint had warnings"
+          elif grep -q '"lint"' package.json 2>/dev/null; then
+            echo "Running lint..."
+            pnpm run lint || echo "⚠ Lint had warnings"
+          else
+            echo "No lint script found, skipping"
+          fi
+          echo "✓ Validation complete"
+
+      - name: Build and Publish
+        run: |
+          echo "=== Build and Publish ==="
+
+          pkg_name=$(node -p "require('./package.json').name")
+          pkg_version=$(node -p "require('./package.json').version")
+          should_build=$(node -p "require('./package.json')._?.build === true")
+          should_publish=$(node -p "require('./package.json')._?.publish === true")
+          registry=$(node -p "require('./package.json')._?.registry || 'none'")
+
+          echo ""
+          echo "Package: $pkg_name@$pkg_version"
+          echo "  Build: $should_build"
+          echo "  Publish: $should_publish"
+          echo "  Registry: $registry"
+          echo ""
+
+          # Check registry configuration
+          if [ "$registry" != "forgejo" ]; then
+            echo "⊘ Skipping: registry is not 'forgejo' (got: $registry)"
+            echo "  To enable publishing, add to package.json:"
+            echo "  \"_\": { \"registry\": \"forgejo\", \"publish\": true, \"build\": true }"
+            exit 0
+          fi
+
+          # Build if configured
+          if [ "$should_build" = "true" ]; then
+            echo "=== Building package ==="
+            if pnpm run build 2>&1; then
+              echo "✓ Build successful"
+            elif npx tsc 2>&1; then
+              echo "✓ Build successful (via tsc)"
+            else
+              echo "⚠ Build failed or no build command found"
+            fi
+          else
+            echo "⊘ Build skipped (build: false)"
+          fi
+
+          # Publish if configured
+          if [ "$should_publish" = "true" ]; then
+            echo ""
+            echo "=== Checking if version already published ==="
+            if npm view "$pkg_name@$pkg_version" version 2>/dev/null; then
+              echo "✓ Version $pkg_version already published to registry"
+              echo "  No action needed"
+            else
+              echo "→ Version $pkg_version not found in registry"
+              echo ""
+              echo "=== Publishing to Forgejo registry ==="
+              if npm publish --access public --no-git-checks 2>&1; then
+                echo ""
+                echo "✓ Successfully published $pkg_name@$pkg_version"
+                echo "  Registry: https://forge.nasty.sh/lilith/-/packages/npm/$pkg_name"
+              else
+                echo "✗ Publish failed"
+                exit 1
+              fi
+            fi
+          else
+            echo "⊘ Publish skipped (publish: false)"
+          fi

@packages/design-tokens/eslint.config.js

@@ -0,0 +1,3 @@
+import { createBaseConfig } from '@lilith/configs/eslint/base-flat';
+
+export default createBaseConfig({ tsconfigRootDir: import.meta.dirname });

@packages/design-tokens/package.json

@@ -10,7 +10,7 @@
     "typecheck": "tsc --noEmit",
     "build": "tsc",
     "test": "vitest run --passWithNoTests",
-    "lint": "eslint . --ext ts"
+    "lint": "eslint . --fix"
   },
   "dependencies": {},
   "devDependencies": {

@packages/lilith-ui/.eslintrc.cjs

@@ -1,35 +0,0 @@
-module.exports = {
-  parser: '@typescript-eslint/parser',
-  parserOptions: {
-    ecmaVersion: 'latest',
-    sourceType: 'module',
-    ecmaFeatures: {
-      jsx: true,
-    },
-    project: './tsconfig.json',
-  },
-  plugins: ['@typescript-eslint', 'react', 'react-hooks'],
-  extends: [
-    'eslint:recommended',
-    'plugin:@typescript-eslint/recommended',
-    'plugin:react/recommended',
-    'plugin:react-hooks/recommended',
-  ],
-  settings: {
-    react: {
-      version: 'detect',
-    },
-  },
-  ignorePatterns: ['vite.config.ts', 'vitest.config.ts', 'dist', 'node_modules', 'showcase', '__tests__', '*.stories.tsx', '*.stories.ts', 'stories'],
-  rules: {
-    'react/react-in-jsx-scope': 'off',
-    'react/prop-types': 'off',
-    'react-hooks/rules-of-hooks': 'error',
-    'react-hooks/exhaustive-deps': 'warn',
-    '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }],
-    '@typescript-eslint/no-explicit-any': 'warn',
-    '@typescript-eslint/explicit-module-boundary-types': 'off',
-    'no-unused-vars': 'off',
-    'prefer-const': 'error',
-  },
-}

@packages/lilith-ui/.forgejo/workflows/publish.yml

@@ -0,0 +1,179 @@
+# =============================================================================
+# Forgejo Actions Workflow - TypeScript/npm Package Publishing
+# =============================================================================
+# Standardized template for TypeScript packages published to Forgejo npm registry
+#
+# Features:
+#   - Configuration-driven (reads package.json `_` metadata)
+#   - Workspace dependency transformation (workspace:* → *)
+#   - Version existence check (prevents redundant publishes)
+#   - Graceful error handling (missing scripts don't break CI)
+#   - Self-signed cert support (internal Forgejo registry)
+#
+# Usage:
+#   1. Copy to: <package>/.forgejo/workflows/publish.yml
+#   2. Ensure package.json has metadata:
+#      "_": { "registry": "forgejo", "publish": true, "build": true }
+#   3. Commit and push to main/master
+#
+# Secrets required:
+#   - NPM_TOKEN: Forgejo npm registry token
+# =============================================================================
+
+name: Build and Publish
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+env:
+  NODE_VERSION: '22'
+  PNPM_VERSION: '9'
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Setup pnpm
+        run: |
+          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "Node: $(node --version)"
+          echo "pnpm: $(pnpm --version)"
+
+      - name: Configure npm for Forgejo registry
+        run: |
+          echo "@lilith:registry=https://forge.nasty.sh/api/packages/lilith/npm/" > .npmrc
+          echo "//forge.nasty.sh/api/packages/lilith/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc
+          echo "strict-ssl=false" >> .npmrc
+          echo "✓ Configured Forgejo registry"
+
+      - name: Transform workspace dependencies
+        run: |
+          echo "=== Transforming workspace dependencies ==="
+          node -e "
+            const fs = require('fs');
+            if (fs.existsSync('package.json')) {
+              const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+              const transform = (deps) => {
+                if (!deps) return deps;
+                for (const [name, version] of Object.entries(deps)) {
+                  if (version.startsWith('workspace:') || version.startsWith('file:')) {
+                    console.log('  Transformed:', name, version, '→ *');
+                    deps[name] = '*';
+                  }
+                }
+                return deps;
+              };
+              pkg.dependencies = transform(pkg.dependencies);
+              pkg.devDependencies = transform(pkg.devDependencies);
+              pkg.peerDependencies = transform(pkg.peerDependencies);
+              fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+            }
+          "
+          echo "✓ Workspace dependencies transformed"
+
+      - name: Install dependencies
+        run: |
+          echo "=== Installing dependencies ==="
+          pnpm install --no-frozen-lockfile
+          echo "✓ Dependencies installed"
+
+      - name: Validate
+        run: |
+          echo "=== Running validation ==="
+          # Run typecheck if available
+          if grep -q '"typecheck"' package.json 2>/dev/null; then
+            echo "Running typecheck..."
+            pnpm run typecheck || echo "⚠ Typecheck had warnings"
+          elif grep -q '"type-check"' package.json 2>/dev/null; then
+            echo "Running type-check..."
+            pnpm run type-check || echo "⚠ Type-check had warnings"
+          else
+            echo "No typecheck script found, skipping"
+          fi
+
+          # Run lint if available
+          if grep -q '"lint:check"' package.json 2>/dev/null; then
+            echo "Running lint:check..."
+            pnpm run lint:check || echo "⚠ Lint had warnings"
+          elif grep -q '"lint"' package.json 2>/dev/null; then
+            echo "Running lint..."
+            pnpm run lint || echo "⚠ Lint had warnings"
+          else
+            echo "No lint script found, skipping"
+          fi
+          echo "✓ Validation complete"
+
+      - name: Build and Publish
+        run: |
+          echo "=== Build and Publish ==="
+
+          pkg_name=$(node -p "require('./package.json').name")
+          pkg_version=$(node -p "require('./package.json').version")
+          should_build=$(node -p "require('./package.json')._?.build === true")
+          should_publish=$(node -p "require('./package.json')._?.publish === true")
+          registry=$(node -p "require('./package.json')._?.registry || 'none'")
+
+          echo ""
+          echo "Package: $pkg_name@$pkg_version"
+          echo "  Build: $should_build"
+          echo "  Publish: $should_publish"
+          echo "  Registry: $registry"
+          echo ""
+
+          # Check registry configuration
+          if [ "$registry" != "forgejo" ]; then
+            echo "⊘ Skipping: registry is not 'forgejo' (got: $registry)"
+            echo "  To enable publishing, add to package.json:"
+            echo "  \"_\": { \"registry\": \"forgejo\", \"publish\": true, \"build\": true }"
+            exit 0
+          fi
+
+          # Build if configured
+          if [ "$should_build" = "true" ]; then
+            echo "=== Building package ==="
+            if pnpm run build 2>&1; then
+              echo "✓ Build successful"
+            elif npx tsc 2>&1; then
+              echo "✓ Build successful (via tsc)"
+            else
+              echo "⚠ Build failed or no build command found"
+            fi
+          else
+            echo "⊘ Build skipped (build: false)"
+          fi
+
+          # Publish if configured
+          if [ "$should_publish" = "true" ]; then
+            echo ""
+            echo "=== Checking if version already published ==="
+            if npm view "$pkg_name@$pkg_version" version 2>/dev/null; then
+              echo "✓ Version $pkg_version already published to registry"
+              echo "  No action needed"
+            else
+              echo "→ Version $pkg_version not found in registry"
+              echo ""
+              echo "=== Publishing to Forgejo registry ==="
+              if npm publish --access public --no-git-checks 2>&1; then
+                echo ""
+                echo "✓ Successfully published $pkg_name@$pkg_version"
+                echo "  Registry: https://forge.nasty.sh/lilith/-/packages/npm/$pkg_name"
+              else
+                echo "✗ Publish failed"
+                exit 1
+              fi
+            fi
+          else
+            echo "⊘ Publish skipped (publish: false)"
+          fi

@packages/lilith-ui/eslint.config.js

@@ -0,0 +1,3 @@
+import { createReactConfig } from '@lilith/configs/eslint/react-flat';
+
+export default createReactConfig({ tsconfigRootDir: import.meta.dirname });

@packages/lilith-ui/package.json

@@ -35,7 +35,7 @@
     "lint": "eslint 'src/**/*.{ts,tsx}' --ignore-pattern '*.stories.*'"
   },
   "dependencies": {
-    "@transftw/theme-provider": "^1.0.0",
+    "@transftw/theme-provider": "workspace:*",
     "lucide-react": "^0.553.0",
     "react": "^18.3.1",
     "styled-components": "^6.1.8"

@packages/lilith-ui/showcase/.forgejo/workflows/publish.yml

@@ -0,0 +1,179 @@
+# =============================================================================
+# Forgejo Actions Workflow - TypeScript/npm Package Publishing
+# =============================================================================
+# Standardized template for TypeScript packages published to Forgejo npm registry
+#
+# Features:
+#   - Configuration-driven (reads package.json `_` metadata)
+#   - Workspace dependency transformation (workspace:* → *)
+#   - Version existence check (prevents redundant publishes)
+#   - Graceful error handling (missing scripts don't break CI)
+#   - Self-signed cert support (internal Forgejo registry)
+#
+# Usage:
+#   1. Copy to: <package>/.forgejo/workflows/publish.yml
+#   2. Ensure package.json has metadata:
+#      "_": { "registry": "forgejo", "publish": true, "build": true }
+#   3. Commit and push to main/master
+#
+# Secrets required:
+#   - NPM_TOKEN: Forgejo npm registry token
+# =============================================================================
+
+name: Build and Publish
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+env:
+  NODE_VERSION: '22'
+  PNPM_VERSION: '9'
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Setup pnpm
+        run: |
+          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "Node: $(node --version)"
+          echo "pnpm: $(pnpm --version)"
+
+      - name: Configure npm for Forgejo registry
+        run: |
+          echo "@lilith:registry=https://forge.nasty.sh/api/packages/lilith/npm/" > .npmrc
+          echo "//forge.nasty.sh/api/packages/lilith/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc
+          echo "strict-ssl=false" >> .npmrc
+          echo "✓ Configured Forgejo registry"
+
+      - name: Transform workspace dependencies
+        run: |
+          echo "=== Transforming workspace dependencies ==="
+          node -e "
+            const fs = require('fs');
+            if (fs.existsSync('package.json')) {
+              const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+              const transform = (deps) => {
+                if (!deps) return deps;
+                for (const [name, version] of Object.entries(deps)) {
+                  if (version.startsWith('workspace:') || version.startsWith('file:')) {
+                    console.log('  Transformed:', name, version, '→ *');
+                    deps[name] = '*';
+                  }
+                }
+                return deps;
+              };
+              pkg.dependencies = transform(pkg.dependencies);
+              pkg.devDependencies = transform(pkg.devDependencies);
+              pkg.peerDependencies = transform(pkg.peerDependencies);
+              fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+            }
+          "
+          echo "✓ Workspace dependencies transformed"
+
+      - name: Install dependencies
+        run: |
+          echo "=== Installing dependencies ==="
+          pnpm install --no-frozen-lockfile
+          echo "✓ Dependencies installed"
+
+      - name: Validate
+        run: |
+          echo "=== Running validation ==="
+          # Run typecheck if available
+          if grep -q '"typecheck"' package.json 2>/dev/null; then
+            echo "Running typecheck..."
+            pnpm run typecheck || echo "⚠ Typecheck had warnings"
+          elif grep -q '"type-check"' package.json 2>/dev/null; then
+            echo "Running type-check..."
+            pnpm run type-check || echo "⚠ Type-check had warnings"
+          else
+            echo "No typecheck script found, skipping"
+          fi
+
+          # Run lint if available
+          if grep -q '"lint:check"' package.json 2>/dev/null; then
+            echo "Running lint:check..."
+            pnpm run lint:check || echo "⚠ Lint had warnings"
+          elif grep -q '"lint"' package.json 2>/dev/null; then
+            echo "Running lint..."
+            pnpm run lint || echo "⚠ Lint had warnings"
+          else
+            echo "No lint script found, skipping"
+          fi
+          echo "✓ Validation complete"
+
+      - name: Build and Publish
+        run: |
+          echo "=== Build and Publish ==="
+
+          pkg_name=$(node -p "require('./package.json').name")
+          pkg_version=$(node -p "require('./package.json').version")
+          should_build=$(node -p "require('./package.json')._?.build === true")
+          should_publish=$(node -p "require('./package.json')._?.publish === true")
+          registry=$(node -p "require('./package.json')._?.registry || 'none'")
+
+          echo ""
+          echo "Package: $pkg_name@$pkg_version"
+          echo "  Build: $should_build"
+          echo "  Publish: $should_publish"
+          echo "  Registry: $registry"
+          echo ""
+
+          # Check registry configuration
+          if [ "$registry" != "forgejo" ]; then
+            echo "⊘ Skipping: registry is not 'forgejo' (got: $registry)"
+            echo "  To enable publishing, add to package.json:"
+            echo "  \"_\": { \"registry\": \"forgejo\", \"publish\": true, \"build\": true }"
+            exit 0
+          fi
+
+          # Build if configured
+          if [ "$should_build" = "true" ]; then
+            echo "=== Building package ==="
+            if pnpm run build 2>&1; then
+              echo "✓ Build successful"
+            elif npx tsc 2>&1; then
+              echo "✓ Build successful (via tsc)"
+            else
+              echo "⚠ Build failed or no build command found"
+            fi
+          else
+            echo "⊘ Build skipped (build: false)"
+          fi
+
+          # Publish if configured
+          if [ "$should_publish" = "true" ]; then
+            echo ""
+            echo "=== Checking if version already published ==="
+            if npm view "$pkg_name@$pkg_version" version 2>/dev/null; then
+              echo "✓ Version $pkg_version already published to registry"
+              echo "  No action needed"
+            else
+              echo "→ Version $pkg_version not found in registry"
+              echo ""
+              echo "=== Publishing to Forgejo registry ==="
+              if npm publish --access public --no-git-checks 2>&1; then
+                echo ""
+                echo "✓ Successfully published $pkg_name@$pkg_version"
+                echo "  Registry: https://forge.nasty.sh/lilith/-/packages/npm/$pkg_name"
+              else
+                echo "✗ Publish failed"
+                exit 1
+              fi
+            fi
+          else
+            echo "⊘ Publish skipped (publish: false)"
+          fi

@packages/lilith-ui/showcase/package.json

@@ -17,8 +17,8 @@
     "test:e2e:ui": "playwright test --ui"
   },
   "dependencies": {
-    "@transftw/lilith-ui": "^1.0.0",
-    "@transftw/theme-provider": "^1.0.0",
+    "@transftw/lilith-ui": "workspace:*",
+    "@transftw/theme-provider": "workspace:*",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-router-dom": "^6.20.0",

@packages/theme-provider/.forgejo/workflows/publish.yml

@@ -0,0 +1,179 @@
+# =============================================================================
+# Forgejo Actions Workflow - TypeScript/npm Package Publishing
+# =============================================================================
+# Standardized template for TypeScript packages published to Forgejo npm registry
+#
+# Features:
+#   - Configuration-driven (reads package.json `_` metadata)
+#   - Workspace dependency transformation (workspace:* → *)
+#   - Version existence check (prevents redundant publishes)
+#   - Graceful error handling (missing scripts don't break CI)
+#   - Self-signed cert support (internal Forgejo registry)
+#
+# Usage:
+#   1. Copy to: <package>/.forgejo/workflows/publish.yml
+#   2. Ensure package.json has metadata:
+#      "_": { "registry": "forgejo", "publish": true, "build": true }
+#   3. Commit and push to main/master
+#
+# Secrets required:
+#   - NPM_TOKEN: Forgejo npm registry token
+# =============================================================================
+
+name: Build and Publish
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+env:
+  NODE_VERSION: '22'
+  PNPM_VERSION: '9'
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+
+      - name: Setup pnpm
+        run: |
+          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "Node: $(node --version)"
+          echo "pnpm: $(pnpm --version)"
+
+      - name: Configure npm for Forgejo registry
+        run: |
+          echo "@lilith:registry=https://forge.nasty.sh/api/packages/lilith/npm/" > .npmrc
+          echo "//forge.nasty.sh/api/packages/lilith/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc
+          echo "strict-ssl=false" >> .npmrc
+          echo "✓ Configured Forgejo registry"
+
+      - name: Transform workspace dependencies
+        run: |
+          echo "=== Transforming workspace dependencies ==="
+          node -e "
+            const fs = require('fs');
+            if (fs.existsSync('package.json')) {
+              const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+              const transform = (deps) => {
+                if (!deps) return deps;
+                for (const [name, version] of Object.entries(deps)) {
+                  if (version.startsWith('workspace:') || version.startsWith('file:')) {
+                    console.log('  Transformed:', name, version, '→ *');
+                    deps[name] = '*';
+                  }
+                }
+                return deps;
+              };
+              pkg.dependencies = transform(pkg.dependencies);
+              pkg.devDependencies = transform(pkg.devDependencies);
+              pkg.peerDependencies = transform(pkg.peerDependencies);
+              fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
+            }
+          "
+          echo "✓ Workspace dependencies transformed"
+
+      - name: Install dependencies
+        run: |
+          echo "=== Installing dependencies ==="
+          pnpm install --no-frozen-lockfile
+          echo "✓ Dependencies installed"
+
+      - name: Validate
+        run: |
+          echo "=== Running validation ==="
+          # Run typecheck if available
+          if grep -q '"typecheck"' package.json 2>/dev/null; then
+            echo "Running typecheck..."
+            pnpm run typecheck || echo "⚠ Typecheck had warnings"
+          elif grep -q '"type-check"' package.json 2>/dev/null; then
+            echo "Running type-check..."
+            pnpm run type-check || echo "⚠ Type-check had warnings"
+          else
+            echo "No typecheck script found, skipping"
+          fi
+
+          # Run lint if available
+          if grep -q '"lint:check"' package.json 2>/dev/null; then
+            echo "Running lint:check..."
+            pnpm run lint:check || echo "⚠ Lint had warnings"
+          elif grep -q '"lint"' package.json 2>/dev/null; then
+            echo "Running lint..."
+            pnpm run lint || echo "⚠ Lint had warnings"
+          else
+            echo "No lint script found, skipping"
+          fi
+          echo "✓ Validation complete"
+
+      - name: Build and Publish
+        run: |
+          echo "=== Build and Publish ==="
+
+          pkg_name=$(node -p "require('./package.json').name")
+          pkg_version=$(node -p "require('./package.json').version")
+          should_build=$(node -p "require('./package.json')._?.build === true")
+          should_publish=$(node -p "require('./package.json')._?.publish === true")
+          registry=$(node -p "require('./package.json')._?.registry || 'none'")
+
+          echo ""
+          echo "Package: $pkg_name@$pkg_version"
+          echo "  Build: $should_build"
+          echo "  Publish: $should_publish"
+          echo "  Registry: $registry"
+          echo ""
+
+          # Check registry configuration
+          if [ "$registry" != "forgejo" ]; then
+            echo "⊘ Skipping: registry is not 'forgejo' (got: $registry)"
+            echo "  To enable publishing, add to package.json:"
+            echo "  \"_\": { \"registry\": \"forgejo\", \"publish\": true, \"build\": true }"
+            exit 0
+          fi
+
+          # Build if configured
+          if [ "$should_build" = "true" ]; then
+            echo "=== Building package ==="
+            if pnpm run build 2>&1; then
+              echo "✓ Build successful"
+            elif npx tsc 2>&1; then
+              echo "✓ Build successful (via tsc)"
+            else
+              echo "⚠ Build failed or no build command found"
+            fi
+          else
+            echo "⊘ Build skipped (build: false)"
+          fi
+
+          # Publish if configured
+          if [ "$should_publish" = "true" ]; then
+            echo ""
+            echo "=== Checking if version already published ==="
+            if npm view "$pkg_name@$pkg_version" version 2>/dev/null; then
+              echo "✓ Version $pkg_version already published to registry"
+              echo "  No action needed"
+            else
+              echo "→ Version $pkg_version not found in registry"
+              echo ""
+              echo "=== Publishing to Forgejo registry ==="
+              if npm publish --access public --no-git-checks 2>&1; then
+                echo ""
+                echo "✓ Successfully published $pkg_name@$pkg_version"
+                echo "  Registry: https://forge.nasty.sh/lilith/-/packages/npm/$pkg_name"
+              else
+                echo "✗ Publish failed"
+                exit 1
+              fi
+            fi
+          else
+            echo "⊘ Publish skipped (publish: false)"
+          fi

@packages/theme-provider/eslint.config.js

@@ -0,0 +1,3 @@
+import { createReactConfig } from '@lilith/configs/eslint/react-flat';
+
+export default createReactConfig({ tsconfigRootDir: import.meta.dirname });

@packages/theme-provider/package.json

@@ -15,7 +15,7 @@
     "test": "echo 'Skipping test - theme-provider has no tests yet'"
   },
   "dependencies": {
-    "@transftw/design-tokens": "^1.0.0",
+    "@transftw/design-tokens": "workspace:*",
     "react": "^18.3.1",
     "styled-components": "^6.1.8"
   },

package.json

@@ -33,20 +33,20 @@
   "author": "Victoria Lackey <VictoriaLackey@pm.me>",
   "license": "MIT",
   "dependencies": {
-    "@lilith/mcp-common": "workspace:*",
-    "@lilith/stream-workflow-status-dashboard": "workspace:*",
-    "@modelcontextprotocol/sdk": "^1.24.3",
-    "zod": "^3.23.8"
+    "@lilith/mcp-common-ts": "workspace:*",
+    "@lilith/stream-workflow-status-dashboard-ts": "workspace:*",
+    "@modelcontextprotocol/sdk": "^1.25.2",
+    "zod": "^3.25.76"
   },
   "devDependencies": {
-    "@types/node": "^22.19.2",
-    "@typescript-eslint/eslint-plugin": "^8.15.0",
-    "@typescript-eslint/parser": "^8.15.0",
-    "@vitest/coverage-v8": "^2.1.5",
-    "eslint": "^9.15.0",
-    "typescript": "^5.7.2",
-    "vitest": "^2.1.5",
-    "@lilith/configs": "workspace:*"
+    "@lilith/configs-ts": "workspace:*",
+    "@types/node": "^22.19.5",
+    "@typescript-eslint/eslint-plugin": "^8.52.0",
+    "@typescript-eslint/parser": "^8.52.0",
+    "@vitest/coverage-v8": "^2.1.9",
+    "eslint": "^9.39.2",
+    "typescript": "^5.9.3",
+    "vitest": "^2.1.9"
   },
   "engines": {
     "node": ">=18.0.0",

tsconfig.json

@@ -1,5 +1,5 @@
 {
-  "extends": "@lilith/configs/typescript/esm.json",
+  "extends": "@lilith/configs-ts/typescript/esm.json",
   "compilerOptions": {
     "outDir": "./dist",
     "rootDir": "./src"