chore: Biome + husky quality gate; bump @mind-studio/ui to 0.4.0

.github/workflows/ci.yml

@@ -24,7 +24,11 @@ jobs:
       - run: npm ci
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN || secrets.GITHUB_TOKEN }}
+      # Lint + format gate (Biome). Fails on errors; warnings are the
+      # documented legacy baseline tracked in biome.json.
+      - run: npx biome ci .
       - run: npx tsc --noEmit
+      - run: npm run test
       - run: npm run build
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN || secrets.GITHUB_TOKEN }}

.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged

.husky/pre-push

@@ -0,0 +1,6 @@
+# Fast confidence gate before code leaves this machine — mirrors CI's
+# correctness checks. The slow `next build` is left to CI.
+# Bypass in a pinch with `git push --no-verify`.
+npm run lint || exit 1
+npm run typecheck || exit 1
+npm run test || exit 1

biome.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.5.0/schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git",
+    "useIgnoreFile": true
+  },
+  "files": {
+    "ignoreUnknown": true,
+    "includes": [
+      "**",
+      "!**/public",
+      "!**/scripts",
+      "!**/next-env.d.ts",
+      "!**/package-lock.json",
+      "!**/*.css"
+    ]
+  },
+  "formatter": {
+    "enabled": true,
+    "indentStyle": "space",
+    "indentWidth": 2,
+    "lineWidth": 100
+  },
+  "linter": {
+    "enabled": true,
+    "domains": {
+      "next": "recommended",
+      "react": "recommended"
+    },
+    "rules": {
+      "recommended": true,
+      "correctness": {
+        "useExhaustiveDependencies": "warn",
+        "useJsxKeyInIterable": "warn"
+      },
+      "suspicious": {
+        "noShadowRestrictedNames": "warn",
+        "noArrayIndexKey": "warn",
+        "noAssignInExpressions": "warn"
+      },
+      "a11y": {
+        "useButtonType": "warn",
+        "noStaticElementInteractions": "warn",
+        "useSemanticElements": "warn",
+        "useKeyWithClickEvents": "warn",
+        "useAriaPropsSupportedByRole": "warn"
+      }
+    }
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "double"
+    }
+  },
+  "assist": {
+    "enabled": true,
+    "actions": {
+      "source": {
+        "organizeImports": "on"
+      }
+    }
+  }
+}

next.config.ts

@@ -4,8 +4,7 @@ import type { NextConfig } from "next";
 // shell). Defaults cover the prod shell + local shell dev. We never send
 // X-Frame-Options: DENY (that would block framing outright).
 const FRAME_ANCESTORS =
-  process.env.NEXT_PUBLIC_FRAME_ANCESTORS ??
-  "https://shell.mindpods.org http://localhost:3100";
+  process.env.NEXT_PUBLIC_FRAME_ANCESTORS ?? "https://shell.mindpods.org http://localhost:3100";
 
 const nextConfig: NextConfig = {
   output: "standalone",