feat(deno): migrate accessibility-everywhere tools/ (7/8 manifests, standards#253 longtail) (#49)

## Summary

Workspace-style migration covering 7 of 8 npm manifests. The eighth
(`tools/browser-extension/package.json`) is Class C — browser-extension
packaging requires the npm-published `archiver` library at build time.
Same Class C pattern as VSCode extensions / Office add-ins.

## Migrated

| Manifest | Class | New | Imports |
|---|---|---|---|
| `/package.json` | workspace-root | extend `/deno.json` | `workspace`
field with 6 ReScript tools; tasks orchestrate setup/build/test/docker |
| `tools/safe-dom/package.json` | B | `tools/safe-dom/deno.json` |
rescript@^12, @rescript/core@^1.6 |
| `tools/cli/package.json` | B | `tools/cli/deno.json` | rescript,
commander, chalk, ora, cli-table3, fs-extra |
| `tools/github-action/package.json` | B |
`tools/github-action/deno.json` | rescript, @actions/core,
@actions/github |
| `tools/monitoring-api/package.json` | B |
`tools/monitoring-api/deno.json` | rescript, express, cors, helmet,
express-rate-limit, compression, dotenv, joi, uuid |
| `tools/stale/packages/core/package.json` | B |
`tools/stale/packages/core/deno.json` | rescript@^11.1 (preserved),
@rescript/core@^1.5, arangojs, dotenv |
| `tools/stale/packages/scanner/package.json` | B |
`tools/stale/packages/scanner/deno.json` | rescript@^11.1 (preserved),
axe-core@^4.8, playwright, puppeteer |

All Class B tools use `deno run -A --node-modules-dir=auto
npm:rescript@^<version>` for build/clean/dev (rescript's install
lifecycle requires resolvable node_modules).

## Deferred (Class C — host-required)

- `tools/browser-extension/package.json` — depends on `archiver`
(npm-only zip lib) for Chrome/Firefox packaging; `axe.min.js` is
copy-source-pathed from `node_modules` at build time. Class C pattern
(host-required npm scaffolding). Tracked as carve-out candidate for
hypatia rule extension (per-repo follow-up).

The root `build:browser-extension` task emits a documentation message
instead of orchestrating, so `deno task build:browser-extension` does
not silently fail.

## Test plan

- [ ] `deno task build` chains cli + safe-dom + scanner builds
- [ ] Each tool's `deno task build` produces equivalent .mjs/.bs.js
output to prior bare `rescript`
- [ ] `deno task setup` invokes the arangodb setup script

Per per-repo follow-up tracker for standards#253 (campaign closed
2026-05-31, longtail tracked in
`project_estate_npm_to_deno_2026_05_28.md`).

Refs hyperpolymath/standards#253.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

deno.json

@@ -1,9 +1,36 @@
 {
+  "$schema": "https://deno.land/x/deno/cli/schemas/config-file.v1.json",
+  "name": "@hyperpolymath/accessibility-everywhere",
+  "version": "1.0.0",
+  "license": "MIT",
+  "workspace": [
+    "./tools/cli",
+    "./tools/github-action",
+    "./tools/monitoring-api",
+    "./tools/safe-dom",
+    "./tools/stale/packages/core",
+    "./tools/stale/packages/scanner"
+  ],
   "tasks": {
+    "setup": "deno run --allow-read --allow-write --allow-net --allow-env scripts/setup-arangodb.js",
     "dev": "deno run --watch mod.ts",
+    "build": "deno task build:cli && deno task build:safe-dom && deno task build:scanner",
+    "build:cli": "deno task --cwd tools/cli build",
+    "build:safe-dom": "deno task --cwd tools/safe-dom build",
+    "build:scanner": "deno task --cwd tools/stale/packages/scanner build",
+    "build:browser-extension": "echo 'tools/browser-extension is a Class C browser-extension package (host requires the npm-published archiver). Use the existing scripts in tools/browser-extension/.'",
     "test": "deno test",
     "lint": "deno lint",
-    "fmt": "deno fmt"
+    "fmt": "deno fmt",
+    "docker:build": "docker compose build",
+    "docker:up": "docker compose up -d",
+    "docker:down": "docker compose down"
   },
-  "compilerOptions": { "strict": true }
+  "compilerOptions": { "strict": true },
+  "fmt": {
+    "useTabs": false,
+    "lineWidth": 100,
+    "indentWidth": 2,
+    "singleQuote": false
+  }
 }

package.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://deno.land/x/deno/cli/schemas/config-file.v1.json",
+  "name": "@accessibility-everywhere/cli",
+  "version": "1.0.0",
+  "license": "MIT",
+  "tasks": {
+    "build": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0",
+    "clean": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 clean",
+    "dev": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 -w"
+  },
+  "imports": {
+    "rescript": "npm:rescript@^12.0.0",
+    "@rescript/core": "npm:@rescript/core@^1.6.0",
+    "commander": "npm:commander@^11.0.0",
+    "chalk": "npm:chalk@^5.0.0",
+    "ora": "npm:ora@^7.0.0",
+    "cli-table3": "npm:cli-table3@^0.6.0",
+    "fs-extra": "npm:fs-extra@^11.0.0"
+  },
+  "nodeModulesDir": "auto"
+}

tools/cli/deno.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://deno.land/x/deno/cli/schemas/config-file.v1.json",
+  "name": "@accessibility-everywhere/github-action",
+  "version": "1.0.0",
+  "license": "MIT",
+  "tasks": {
+    "build": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0",
+    "clean": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 clean",
+    "dev": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 -w"
+  },
+  "imports": {
+    "rescript": "npm:rescript@^12.0.0",
+    "@rescript/core": "npm:@rescript/core@^1.6.0",
+    "@actions/core": "npm:@actions/core@^1.10.0",
+    "@actions/github": "npm:@actions/github@^6.0.0"
+  },
+  "nodeModulesDir": "auto"
+}

tools/cli/package.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://deno.land/x/deno/cli/schemas/config-file.v1.json",
+  "name": "@accessibility-everywhere/monitoring-api",
+  "version": "1.0.0",
+  "license": "MIT",
+  "tasks": {
+    "build": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0",
+    "clean": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 clean",
+    "dev": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 -w",
+    "start": "deno run --allow-net --allow-read --allow-env src/Index.mjs"
+  },
+  "imports": {
+    "rescript": "npm:rescript@^12.0.0",
+    "@rescript/core": "npm:@rescript/core@^1.6.0",
+    "express": "npm:express@^4.18.0",
+    "cors": "npm:cors@^2.8.0",
+    "helmet": "npm:helmet@^7.0.0",
+    "express-rate-limit": "npm:express-rate-limit@^7.0.0",
+    "compression": "npm:compression@^1.7.0",
+    "dotenv": "npm:dotenv@^16.0.0",
+    "joi": "npm:joi@^17.0.0",
+    "uuid": "npm:uuid@^9.0.0"
+  },
+  "nodeModulesDir": "auto"
+}

tools/github-action/deno.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://deno.land/x/deno/cli/schemas/config-file.v1.json",
+  "name": "@accessibility-everywhere/safe-dom",
+  "version": "1.0.0",
+  "license": "MIT",
+  "tasks": {
+    "build": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0",
+    "clean": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 clean",
+    "dev": "deno run -A --node-modules-dir=auto npm:rescript@^12.0.0 -w"
+  },
+  "imports": {
+    "rescript": "npm:rescript@^12.0.0",
+    "@rescript/core": "npm:@rescript/core@^1.6.0"
+  },
+  "nodeModulesDir": "auto"
+}