Migrate from ESLint to OxLint (#18443)

## Summary

Fully replaces ESLint with OxLint across the entire monorepo:

- **Replaced all ESLint configs** (`eslint.config.mjs`) with OxLint
configs (`.oxlintrc.json`) for every package: `twenty-front`,
`twenty-server`, `twenty-emails`, `twenty-ui`, `twenty-shared`,
`twenty-sdk`, `twenty-zapier`, `twenty-docs`, `twenty-website`,
`twenty-apps/*`, `create-twenty-app`
- **Migrated custom lint rules** from ESLint plugin format to OxLint JS
plugin system (`@oxlint/plugins`), including
`styled-components-prefixed-with-styled`, `no-hardcoded-colors`,
`sort-css-properties-alphabetically`,
`graphql-resolvers-should-be-guarded`,
`rest-api-methods-should-be-guarded`, `max-consts-per-file`, and
Jotai-related rules
- **Migrated custom rule tests** from ESLint `RuleTester` + Jest to
`oxlint/plugins-dev` `RuleTester` + Vitest
- **Removed all ESLint dependencies** from `package.json` files and
regenerated lockfiles
- **Updated Nx targets** (`lint`, `lint:diff-with-main`, `fmt`) in
`nx.json` and per-project `project.json` to use `oxlint` commands with
proper `dependsOn` for plugin builds
- **Updated CI workflows** (`.github/workflows/ci-*.yaml`) — no more
ESLint executor
- **Updated IDE setup**: replaced `dbaeumer.vscode-eslint` with
`oxc.oxc-vscode` extension, configured `source.fixAll.oxc` and
format-on-save with Prettier
- **Replaced all `eslint-disable` comments** with `oxlint-disable`
equivalents across the codebase
- **Updated docs** (`twenty-docs`) to reference OxLint instead of ESLint
- **Renamed** `twenty-eslint-rules` package to `twenty-oxlint-rules`

### Temporarily disabled rules (tracked in `OXLINT_MIGRATION_TODO.md`)

| Rule | Package | Violations | Auto-fixable |
|------|---------|-----------|-------------|
| `twenty/sort-css-properties-alphabetically` | twenty-front | 578 | Yes
|
| `typescript/consistent-type-imports` | twenty-server | 3814 | Yes |
| `twenty/max-consts-per-file` | twenty-server | 94 | No |

### Dropped plugins (no OxLint equivalent)

`eslint-plugin-project-structure`, `lingui/*`, `@stylistic/*`,
`import/order`, `prefer-arrow/prefer-arrow-functions`,
`eslint-plugin-mdx`, `@next/eslint-plugin-next`,
`eslint-plugin-storybook`, `eslint-plugin-react-refresh`. Partial
coverage for `jsx-a11y` and `unused-imports`.

### Additional fixes (pre-existing issues exposed by merge)

- Fixed `EmailThreadPreview.tsx` broken import from main rename
(`useOpenEmailThreadInSidePanel`)
- Restored truthiness guard in `getActivityTargetObjectRecords.ts`
- Fixed `AgentTurnResolver` return types to match entity (virtual
`fileMediaType`/`fileUrl` are resolved via `@ResolveField()`)

## Test plan

- [x] `npx nx lint twenty-front` passes
- [x] `npx nx lint twenty-server` passes
- [x] `npx nx lint twenty-docs` passes
- [x] Custom oxlint rules validated with Vitest: `npx nx test
twenty-oxlint-rules`
- [x] `npx nx typecheck twenty-front` passes
- [x] `npx nx typecheck twenty-server` passes
- [x] CI workflows trigger correctly with `dependsOn:
["twenty-oxlint-rules:build"]`
- [x] IDE linting works with `oxc.oxc-vscode` extension

packages/twenty-front/src/modules/auth/components/TwoFactorAuthenticationProvisionEffect.tsx

@@ -69,7 +69,7 @@ export const TwoFactorAuthenticationSetupEffect = () => {
     handleTwoFactorAuthenticationProvisioningInitiation();
 
     // Two factor authentication provisioning only needs to run once at mount
-    // eslint-disable-next-line react-hooks/exhaustive-deps
+    // oxlint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 
   return <></>;

packages/twenty-front/src/modules/auth/components/VerifyEmailEffect.tsx

@@ -121,7 +121,7 @@ export const VerifyEmailEffect = () => {
     verifyEmailToken();
 
     // Verify email only needs to run once at mount
-    // eslint-disable-next-line react-hooks/exhaustive-deps
+    // oxlint-disable-next-line react-hooks/exhaustive-deps
   }, [clientConfigApiStatus.isLoadedOnce]);
 
   if (isError) {

packages/twenty-front/src/modules/auth/components/VerifyLoginTokenEffect.tsx

@@ -32,7 +32,7 @@ export const VerifyLoginTokenEffect = () => {
       navigate(AppPath.SignInUp);
     }
     // Verify only needs to run once at mount
-    // eslint-disable-next-line react-hooks/exhaustive-deps
+    // oxlint-disable-next-line react-hooks/exhaustive-deps
   }, [clientConfigLoaded]);
 
   return <></>;

packages/twenty-front/src/modules/auth/sign-in-up/components/FooterNote.tsx

@@ -55,7 +55,7 @@ const StyledSeparator = styled.span`
 `;
 
 export const FooterNote = () => {
-  const isOnAWorkspace = useIsCurrentLocationOnAWorkspace();
+  const { isOnAWorkspace } = useIsCurrentLocationOnAWorkspace();
 
   const { shouldOfferBypass, shouldUseBypass, enableBypass } =
     useWorkspaceBypass();

packages/twenty-front/src/modules/auth/sign-in-up/components/SignInUpGlobalScopeForm.tsx

@@ -244,7 +244,7 @@ export const SignInUpGlobalScopeForm = () => {
           {(authProviders.google || authProviders.microsoft) && (
             <HorizontalSeparator />
           )}
-          {/* eslint-disable-next-line react/jsx-props-no-spreading */}
+          {/* oxlint-disable-next-line react/jsx-props-no-spreading */}
           <FormProvider {...form}>
             <SignInUpWithCredentials isGlobalScope />
           </FormProvider>

packages/twenty-front/src/modules/auth/sign-in-up/components/SignInUpWorkspaceScopeForm.tsx

@@ -66,7 +66,7 @@ export const SignInUpWorkspaceScopeForm = () => {
           <HorizontalSeparator />
         ) : null}
         {providers.password && (
-          // eslint-disable-next-line react/jsx-props-no-spreading
+          // oxlint-disable-next-line react/jsx-props-no-spreading
           <FormProvider {...form}>
             <SignInUpWithCredentials />
           </FormProvider>

packages/twenty-front/src/modules/auth/sign-in-up/components/internal/SignInUpTwoFactorAuthenticationVerification.tsx

@@ -231,7 +231,7 @@ export const SignInUpTOTPVerification = () => {
         <Trans>Paste the code below</Trans>
       </StyledTextContainer>
       <StyledMainContentContainer>
-        {/* // eslint-disable-next-line react/jsx-props-no-spreading */}
+        {/* // oxlint-disable-next-line react/jsx-props-no-spreading */}
         <Controller
           name="otp"
           control={form.control}
@@ -247,7 +247,7 @@ export const SignInUpTOTPVerification = () => {
                     {slots.slice(0, 3).map((slot, idx) => (
                       <Slot
                         key={idx}
-                        // eslint-disable-next-line react/jsx-props-no-spreading
+                        // oxlint-disable-next-line react/jsx-props-no-spreading
                         {...slot}
                       />
                     ))}
@@ -259,7 +259,7 @@ export const SignInUpTOTPVerification = () => {
                     {slots.slice(3).map((slot, idx) => (
                       <Slot
                         key={idx}
-                        // eslint-disable-next-line react/jsx-props-no-spreading
+                        // oxlint-disable-next-line react/jsx-props-no-spreading
                         {...slot}
                       />
                     ))}

packages/twenty-front/src/modules/auth/sign-in-up/components/internal/SignInUpWorkspaceScopeFormEffect.tsx

@@ -85,7 +85,7 @@ export const SignInUpWorkspaceScopeFormEffect = () => {
       signInUpStep === SignInUpStep.Init &&
       !workspaceAuthProviders.google &&
       !workspaceAuthProviders.microsoft &&
-      !workspaceAuthProviders.sso
+      workspaceAuthProviders.sso.length === 0
     ) {
       continueWithEmail();
       return;

packages/twenty-front/src/modules/auth/sign-in-up/hooks/useWorkspaceFromInviteHash.ts

@@ -30,7 +30,7 @@ export const useWorkspaceFromInviteHash = () => {
       onCompleted: (data) => {
         if (
           isDefined(currentWorkspace) &&
-          data?.findWorkspaceFromInviteHash &&
+          isDefined(data?.findWorkspaceFromInviteHash) &&
           currentWorkspace.id === data.findWorkspaceFromInviteHash.id
         ) {
           const workspaceDisplayName =