coreConformance({
  root: process.cwd(),
  duplication: { maxClones: 0 },
  deadExports: { requireKnipConfig: true },
  closedDesignSystem: {
    stylesheet: "theme.css",
    requiredSelectors: [".token"],
    forbiddenSelectors: [".raw"],
    buildCommand: [
      process.execPath,
      "-e",
      "require('node:fs').writeFileSync(process.argv[1], '.token {}')",
      "{output}",
    ],
  },
  tsconfigStrictness: {
    waivers: {
      exactOptionalPropertyTypes: "Vendor SDK typings assign undefined to optional fields.",
    },
  },
});

runCoreConformanceReport({ root, tsconfigStrictness: {}, skipChecks: ["duplication-budget"] }) on a workspace, trimmed:

{
  "status": "failed",
  "checks": [
    { "check": "dependency-overlap", "status": "evaluated", "findings": [] },
    {
      "check": "duplication-budget",
      "status": "skipped",
      "reason": "Excluded by skipChecks.",
      "findings": []
    },
    {
      "check": "closed-design-system-probe",
      "status": "skipped",
      "reason": "No CSS build/selector probe configured.",
      "findings": []
    },
    {
      "check": "tsconfig-strictness",
      "status": "evaluated",
      "findings": [
        {
          "check": "tsconfig-strictness",
          "severity": "error",
          "message": "packages/agentlint-plugin-core/tsconfig.json: `noUncheckedIndexedAccess` is unset; set it to true in compilerOptions.",
          "path": "packages/agentlint-plugin-core/tsconfig.json",
          "docs": "https://github.com/aurelienbobenrieth/harness/tree/main/packages/conformance-core#tsconfig-strictness"
        }
      ]
    }
  ]
}

Also exported: coreChecks, activeChecks, and each check object (dependencyOverlap, duplicationBudget, deadExports, closedDesignSystemProbe, tsconfigStrictness, instructionBlocks).

Reads dependencies + devDependencies. Workspaces: pnpm-workspace.yaml packages: literal paths and single-level dir/* only; negations and deeper globs ignored.

dayjs date-fns moment luxon
axios got ky node-fetch superagent
uuid nanoid cuid cuid2 @paralleldrive/cuid2 ulid
zod yup joi ajv superstruct valibot arktype
lodash lodash-es ramda remeda es-toolkit
chalk picocolors kleur colorette ansis
dotenv dotenv-flow
jest vitest
winston pino bunyan loglevel consola
glob fast-glob globby tinyglobby
commander yargs cac citty meow
inquirer @inquirer/prompts prompts @clack/prompts enquirer
p-limit p-queue p-map promise-pool @supercharge/promise-pool
yaml js-yaml
papaparse csv-parse fast-csv
prisma drizzle-orm kysely knex typeorm sequelize
ws socket.io
immer mutative
zustand jotai valtio @xstate/store
fs-extra graceful-fs
semver compare-versions
marked markdown-it remark micromark
cheerio parse5 linkedom node-html-parser
execa zx tinyexec
rimraf del
cross-env env-cmd
nodemon tsx-watch watchexec
mime mime-types
deepmerge defu ts-deepmerge
query-string qs

1. Put --*: initial in the top-level @theme (Tailwind theme docs) so only your tokens generate utilities, then migrate affected uses. Static utilities and arbitrary values still work: this closes the token set, not the class list.
2. Probe stylesheet: an isolated file importing the real one and requesting allowed and forbidden classes through @source inline(...) (syntax). Without it, a missing selector may only mean "never discovered".
3. Build with the pinned local CLI as an executable plus argument array; never a downloaded floating CLI. buildCommand is required because core conformance has no framework default.
4. Wire it like the example.

For a full class allowlist, also check class construction and arbitrary values in source. A failed build or missing tool means unevaluated, never "forbidden absent". Keep probe candidates out of production source.

• Strict family: strictNullChecks, noImplicitAny, strictFunctionTypes, strictBindCallApply, strictPropertyInitialization, strictBuiltinIteratorReturn, noImplicitThis, useUnknownInCatchVariables, alwaysStrict.
• erasableSyntaxOnly replaces a family of enum/namespace/parameter-property lint rules with a compiler guarantee.
• Default files: tsconfig.json + tsconfig.*.json in the root and every pnpm workspace package, minus solution files ("files": [], no include) and configs that only serve as another checked config's extends base.
• additionalRequiredFlags: more flags that must be true, e.g. noImplicitOverride.

extends resolution: relative paths with or without .json; arrays, later entries winning; package specifiers from node_modules (scoped too) via string exports targets or the manifest tsconfig field; JSONC comments, trailing commas, a BOM. Reads JSON only: no tsc run, no TypeScript install needed.