chore: expand oxlint plugins and add agentic coding section

Enable all default plugins (eslint, typescript, unicorn, oxc) that were
previously dropped when plugins field was explicitly set, plus react,
jsx-a11y, import, and vitest for broader coverage.

Key changes:
- oxlintrc.json: add 7 new plugins, enable import/no-cycle for circular
  dependency detection, disable rules incompatible with project (React 17
  JSX transform, ES2022 target, side-effect imports)
- Fix lint violations caught by new plugins: unnecessary template literal,
  missing html lang attribute, label-control association for a11y
- Fix lint:ci ignore-pattern mismatch in apps/cdk
- Add inline oxlint-disable for intentional test.skip and assertion-free
  integration tests
- README: add Agentic Coding section with DSQL skill install and
  oxlint/oxfmt post-write hook recommendation

Author: konokenj

README.md

@@ -99,6 +99,27 @@ See [`AGENTS.md`](./AGENTS.md) for development guide — local development setup
 
 To add social sign-in (Google, Facebook, etc.), see [Add social sign-in to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-configuring-federation-with-social-idp.html).
 
+## Agentic coding
+
+This kit is designed to work well with AI coding agents. The following setup is recommended.
+
+### Aurora DSQL skill
+
+Install the [Aurora DSQL skill](https://docs.aws.amazon.com/aurora-dsql/latest/userguide/SECTION_aurora-dsql-steering.html) to give your agent DSQL-specific knowledge (schema design, migration patterns, constraints):
+
+```sh
+npx skills add awslabs/mcp --skill dsql
+```
+
+### Lint and format on save
+
+This kit uses [oxlint](https://oxc.rs/) + [oxfmt](https://oxc.rs/docs/guide/usage/formatter) — Rust-based linter and formatter fast enough to run on every file write without noticeable delay. Set up a post-write hook in your AI coding agent to get instant feedback:
+
+```sh
+oxlint --config oxlintrc.json --fix <file>
+oxfmt --write <file>
+```
+
 ## Maintenance policy
 
 This kit follows [Semantic Versioning](https://semver.org/). Since users copy (not fork) this kit, breaking changes are introduced as new major versions without a lengthy deprecation cycle.

apps/cdk/lib/constructs/cf-lambda-furl-service/service.ts

@@ -150,7 +150,7 @@ export class CloudFrontLambdaFunctionUrlService extends Construct {
         parameters: {
           DistributionId: distribution.distributionId,
           InvalidationBatch: {
-            CallerReference: `${handler.currentVersion.version}`,
+            CallerReference: handler.currentVersion.version,
             Paths: {
               Quantity: 1,
               Items: ['/*'],

apps/cdk/package.json

@@ -9,7 +9,7 @@
     "format": "oxfmt --write .",
     "format:ci": "oxfmt --check .",
     "lint": "oxlint --config ../../oxlintrc.json --fix --ignore-pattern lib/constructs/dsql-migrator/handler.ts .",
-    "lint:ci": "oxlint --config ../../oxlintrc.json --max-warnings 0 .",
+    "lint:ci": "oxlint --config ../../oxlintrc.json --max-warnings 0 --ignore-pattern lib/constructs/dsql-migrator/handler.ts .",
     "check": "pnpm run lint && pnpm run format",
     "check:ci": "pnpm run lint:ci && pnpm run format:ci",
     "cdk": "cdk"

apps/webapp/src/app/(root)/components/TodoItem.tsx

@@ -95,8 +95,11 @@ export default function TodoItemComponent({ todo }: TodoItemProps) {
           <input type="hidden" {...registerUpdate('status')} value={todo.status} />
 
           <div>
-            <label className="block text-sm font-medium text-gray-700">Title</label>
+            <label htmlFor={`title-${todo.id}`} className="block text-sm font-medium text-gray-700">
+              Title
+            </label>
             <input
+              id={`title-${todo.id}`}
               type="text"
               {...registerUpdate('title')}
               className="mt-1 p-2 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500"
@@ -107,8 +110,11 @@ export default function TodoItemComponent({ todo }: TodoItemProps) {
           </div>
 
           <div>
-            <label className="block text-sm font-medium text-gray-700">Description</label>
+            <label htmlFor={`description-${todo.id}`} className="block text-sm font-medium text-gray-700">
+              Description
+            </label>
             <textarea
+              id={`description-${todo.id}`}
               {...registerUpdate('description')}
               rows={3}
               className="mt-1 p-2 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500"

apps/webapp/src/app/layout.tsx

@@ -3,7 +3,7 @@ import { Toaster } from 'sonner';
 
 export default function RootLayout({ children }: { children: React.ReactNode }) {
   return (
-    <html>
+    <html lang="en">
       <head>
         <title>AWS Serverless TODO</title>
         {/* Comment out this meta tag if you want to enable search engine crawling */}

oxlintrc.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json",
-  "plugins": ["nextjs", "typescript"],
+  "plugins": ["eslint", "typescript", "unicorn", "oxc", "nextjs", "react", "jsx-a11y", "import", "vitest"],
   "options": {
     "typeAware": true,
     "typeCheck": true
@@ -12,8 +12,12 @@
   "rules": {
     "typescript/no-unused-vars": "off",
     "typescript/no-unsafe-type-assertion": "off",
+    "unicorn/no-array-sort": "off",
     "no-new": "off",
     "no-unused-expressions": "off",
+    "react/react-in-jsx-scope": "off",
+    "import/no-cycle": "error",
+    "import/no-unassigned-import": "off",
     "no-restricted-imports": [
       "error",
       {

packages/db/src/migrate.integ.test.ts

@@ -118,6 +118,7 @@ describe.skipIf(!endpoint)('migrate integration (DSQL)', () => {
     }
   });
 
+  // oxlint-disable-next-line jest/expect-expect -- success of await migrate() is the assertion
   test('I4: modified applied file still skipped (no hash check)', async () => {
     fs.writeFileSync(
       path.join(tmpDir, '0001_initial.sql'),
@@ -161,6 +162,7 @@ describe.skipIf(!endpoint)('migrate integration (DSQL)', () => {
     }
   });
 
+  // oxlint-disable-next-line jest/expect-expect -- success of await migrate() is the assertion
   test('I6: multiple statements in separate transactions', async () => {
     fs.writeFileSync(
       path.join(tmpDir, '0001.sql'),

packages/db/src/schema.integ.test.ts

@@ -64,6 +64,7 @@ describe('oxlint DSQL rules', () => {
   // no-restricted-syntax is not yet supported by oxlint (as of v1.56.0).
   // The rule is configured in oxlintrc.json for future compatibility.
   // These tests are skipped until oxlint adds support.
+  // oxlint-disable-next-line jest/no-disabled-tests -- waiting for oxlint no-restricted-syntax support
   test.skip('L5: .references() detected in schema.ts', () => {
     const file = writeFile(
       'schema.ts',
@@ -78,6 +79,7 @@ describe('oxlint DSQL rules', () => {
     expect(output).toContain('no-restricted-syntax');
   });
 
+  // oxlint-disable-next-line jest/no-disabled-tests -- waiting for oxlint no-restricted-syntax support
   test.skip('L6: .references() not detected in non-schema file', () => {
     const file = writeFile('actions.ts', "const x = { references: () => 'ok' };\nx.references();\n");
     const { output } = runOxlint(file);