@akanjs/devkit 3.0.0-alpha.9 → 3.0.0-alpha.91

package/integration/devStabilityHarness.ts

@@ -118,20 +118,12 @@ export default config;
       ),
       this.writeFile(
         "env/env.client.ts",
-        `import { getEnv } from "akanjs/base";
-
-export const env = {
-  ...getEnv(),
-} as const;
+        `export const env = {} as const;
 `,
       ),
       this.writeFile(
         "env/env.server.ts",
-        `import { getEnv } from "akanjs/base";
-
-export const env = {
-  ...getEnv(),
-} as const;
+        `export const env = {} as const;
 `,
       ),
       this.writeFile(

package/libSource.test.ts

@@ -0,0 +1,112 @@
+import { afterEach, describe, expect, test } from "bun:test";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { Executor, LibExecutor, WorkspaceExecutor } from "./executors";
+import { formatLibStatuses, LibSource } from "./libSource";
+
+const tempRoots: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(tempRoots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
+});
+
+const write = async (filePath: string, content: string) => {
+  await mkdir(path.dirname(filePath), { recursive: true });
+  await writeFile(filePath, content);
+};
+
+// `LibExecutor.from` memoises by name, so each fixture needs a name no other test has used.
+const makeLib = async (libName: string) => {
+  const root = await mkdtemp(path.join(os.tmpdir(), "akan-libsource-"));
+  tempRoots.push(root);
+  await write(
+    path.join(root, "package.json"),
+    '{ "name": "workspace", "version": "0.0.1", "description": "workspace" }\n',
+  );
+  await write(path.join(root, ".gitignore"), "node_modules\n");
+  await write(path.join(root, `libs/${libName}/package.json`), `{ "name": "@${libName}", "version": "0.0.1" }\n`);
+  await write(path.join(root, `libs/${libName}/common/helper.ts`), "export const helper = 1;\n");
+  await write(path.join(root, `libs/${libName}/env/env.server.testing.ts`), "export const env = { key: 1 };\n");
+
+  const git = new Executor("fixture", root);
+  await git.spawn("git", ["init", "--quiet"]);
+
+  const workspace = WorkspaceExecutor.fromRoot({ workspaceRoot: root, repoName: `workspace-${libName}` });
+  const lib = LibExecutor.from(workspace, libName);
+  return { root, lib, source: new LibSource(lib) };
+};
+
+describe("LibSource", () => {
+  test("reports an unstamped library", async () => {
+    const { source } = await makeLib("plain-lib");
+    const status = await source.status();
+
+    expect(status.drift).toBe("unstamped");
+    expect(status.stamp).toBeNull();
+    expect(status.hash).toMatch(/^[0-9a-f]{32}$/);
+  });
+
+  test("stamps the origin into package.json and reads back clean", async () => {
+    const { lib, source } = await makeLib("stamped-lib");
+    const stamp = await source.write({ origin: "akanjs", sha: "3.0.0" });
+
+    expect(stamp.origin).toBe("akanjs");
+    expect(await source.read()).toEqual(stamp);
+    expect((await source.status()).drift).toBe("clean");
+
+    const manifest = await lib.getPackageJson();
+    expect(manifest.name).toBe("@stamped-lib");
+    expect((manifest.akan as { source: { sha: string } }).source.sha).toBe("3.0.0");
+  });
+
+  test("detects an edit to library source as drift", async () => {
+    const { root, source } = await makeLib("drift-lib");
+    await source.write({ origin: "akanjs", sha: "3.0.0" });
+    await write(path.join(root, "libs/drift-lib/common/helper.ts"), "export const helper = 2;\n");
+
+    expect((await source.status()).drift).toBe("drifted");
+  });
+
+  test("survives every other akan write to the manifest", async () => {
+    const { lib, source } = await makeLib("merge-lib");
+    const stamp = await source.write({ origin: "akanjs", sha: "3.0.0" });
+    const manifest = await lib.getPackageJson();
+    await lib.setPackageJson({ ...manifest, dependencies: { lodash: "4.0.0" } });
+
+    expect(await source.read()).toEqual(stamp);
+    expect((await source.status()).drift).toBe("drifted");
+  });
+
+  test("leaves env values out of the hash — they belong to the installing workspace", async () => {
+    const { root, source } = await makeLib("env-lib");
+    await source.write({ origin: "akanjs", sha: "3.0.0" });
+    await write(path.join(root, "libs/env-lib/env/env.server.testing.ts"), "export const env = { key: 999 };\n");
+
+    expect((await source.status()).drift).toBe("clean");
+  });
+});
+
+describe("formatLibStatuses", () => {
+  test("marks drifted libraries and counts them", () => {
+    const text = formatLibStatuses([
+      {
+        lib: "util",
+        drift: "clean",
+        hash: "a".repeat(32),
+        stamp: { origin: "akanjs", sha: "3.0.0", hash: "a".repeat(32), syncedAt: "now" },
+      },
+      {
+        lib: "shared",
+        drift: "drifted",
+        hash: "b".repeat(32),
+        stamp: { origin: "akanjs", sha: "3.0.0", hash: "a".repeat(32), syncedAt: "now" },
+      },
+      { lib: "local", drift: "unstamped", hash: "c".repeat(32), stamp: null },
+    ]);
+
+    expect(text).toContain("DRIFTED   libs/shared  akanjs@3.0.0");
+    expect(text).toContain("unstamped libs/local  no akan.source in package.json");
+    expect(text).toContain("drifted: 1 / 3");
+  });
+});

package/libSource.ts

@@ -0,0 +1,126 @@
+import type { LibExecutor } from "./executors";
+import type { PackageJson } from "./types";
+
+export interface LibSourceStamp {
+  /** Where the copy came from: a git remote URL, or `akanjs` for the published package. */
+  origin: string;
+  /** The origin's commit sha, or the package version when the origin is a registry. */
+  sha: string;
+  /** Content hash of the library as installed, so a later edit is detectable without the origin. */
+  hash: string;
+  syncedAt: string;
+}
+
+export type LibDrift = "clean" | "drifted" | "unstamped";
+
+export interface LibStatus {
+  lib: string;
+  drift: LibDrift;
+  stamp: LibSourceStamp | null;
+  hash: string;
+}
+
+/**
+ * A library's origin, recorded in its own `package.json` under an `akan.source` key.
+ *
+ * The key rides `package.json` rather than a file of its own because every akan write to a library's
+ * manifest is a spread of the existing object (`LibExecutor.syncPackageJson`), so an unknown top-level
+ * key survives — while a new root file would have to be added to `libRootAllowedFiles` before
+ * `akan sync` stopped rejecting it.
+ */
+export class LibSource {
+  static readonly manifestKey = "akan";
+  /**
+   * Left out of the hash. `env/` holds per-deployment values that belong to the workspace the library
+   * was installed into, not to the origin, so an env edit is not drift.
+   */
+  static readonly unhashedDirs = ["env"];
+
+  #lib: LibExecutor;
+  constructor(lib: LibExecutor) {
+    this.#lib = lib;
+  }
+
+  get #prefix() {
+    return `libs/${this.#lib.name}/`;
+  }
+
+  #isHashed(file: string) {
+    const relative = file.slice(this.#prefix.length);
+    return !LibSource.unhashedDirs.includes(relative.split("/")[0] ?? "");
+  }
+
+  /** `package.json` cannot hash the stamp it carries, so the key comes off before hashing. */
+  async #hashableContent(file: string) {
+    const content = await this.#lib.workspace.readFile(file);
+    if (file !== `${this.#prefix}package.json`) return content;
+    const manifest = JSON.parse(content) as PackageJson;
+    delete manifest[LibSource.manifestKey];
+    return JSON.stringify(manifest);
+  }
+
+  /**
+   * Hash over the library's own files. Untracked files count: a freshly copied library is not committed
+   * yet, and its hash has to be the same one a later `status` recomputes.
+   */
+  async computeHash() {
+    const files = (await this.#lib.workspace.listGitFiles([`libs/${this.#lib.name}`], { untracked: true })).filter(
+      (file) => this.#isHashed(file),
+    );
+    const hasher = new Bun.CryptoHasher("sha256");
+    for (const file of files) {
+      hasher.update(file);
+      hasher.update("\0");
+      hasher.update(await this.#hashableContent(file));
+      hasher.update("\0");
+    }
+    return hasher.digest("hex").slice(0, 32);
+  }
+
+  async read(): Promise<LibSourceStamp | null> {
+    const manifest = await this.#lib.getPackageJson();
+    const akan = manifest[LibSource.manifestKey] as { source?: LibSourceStamp } | undefined;
+    return akan?.source ?? null;
+  }
+
+  async write({ origin, sha }: Pick<LibSourceStamp, "origin" | "sha">) {
+    const [manifest, hash] = await Promise.all([this.#lib.getPackageJson(), this.computeHash()]);
+    const akan = (manifest[LibSource.manifestKey] ?? {}) as Record<string, unknown>;
+    const stamp: LibSourceStamp = { origin, sha, hash, syncedAt: new Date().toISOString() };
+    await this.#lib.setPackageJson({ ...manifest, [LibSource.manifestKey]: { ...akan, source: stamp } });
+    return stamp;
+  }
+
+  /**
+   * Writes the stamp only when it would change. `syncedAt` moves on every write, so an unconditional
+   * write leaves the manifest dirty and defeats an idempotent caller — the hash is computed with the
+   * stamp removed, so comparing it first is sound.
+   */
+  async syncStamp({ origin, sha }: Pick<LibSourceStamp, "origin" | "sha">) {
+    const [current, hash] = await Promise.all([this.read(), this.computeHash()]);
+    if (current?.origin === origin && current.sha === sha && current.hash === hash)
+      return { stamp: current, changed: false };
+    return { stamp: await this.write({ origin, sha }), changed: true };
+  }
+
+  async status(): Promise<LibStatus> {
+    const [stamp, hash] = await Promise.all([this.read(), this.computeHash()]);
+    const drift = !stamp ? "unstamped" : stamp.hash === hash ? "clean" : "drifted";
+    return { lib: this.#lib.name, drift, stamp, hash };
+  }
+}
+
+export function formatLibStatuses(statuses: LibStatus[]) {
+  const marks = { clean: "clean    ", drifted: "DRIFTED  ", unstamped: "unstamped" } as const;
+  const sections = [
+    "Akan Library Source Status",
+    "",
+    ...statuses.map((status) => {
+      const origin = status.stamp ? `${status.stamp.origin}@${status.stamp.sha}` : "no akan.source in package.json";
+      return `  ${marks[status.drift]} libs/${status.lib}  ${origin}`;
+    }),
+    "",
+    `drifted: ${statuses.filter((status) => status.drift === "drifted").length} / ${statuses.length}`,
+  ];
+  return sections.join("\n");
+}

package/lint/__fixtures__/README.md

@@ -0,0 +1,40 @@
+# grit rule fixtures
+
+One folder per `lint/*.grit` rule. `gritRules.test.ts` runs biome with that one plugin enabled and asserts
+`bad` reports **exactly** the marked lines and `good` reports nothing — so a rule that silently stops
+matching after a biome upgrade fails the suite instead of going quiet, and `every rule in this folder has a
+fixture` fails when a rule is added without one.
+
+## Contract
+
+- One case per line. `// @flag` marks a line the rule must report in `bad`; `// @ok` marks a line in `good`.
+- The `bad` assertion is set equality, not containment: a marked line nobody reported is a pattern that
+  stopped matching, and a reported line nobody marked is the rule reaching further than the fixture claims.
+- `good` is the half that matters most: an over-matching rule is what makes developers distrust the gate.
+- `fixture.json` is optional:
+  - `path` — where the source is written inside the temp workspace, for a rule that reads `$filename`
+    (`no-deep-internal-import`, `no-redeclare-predefined-endpoint`). Its extension also picks which of
+    `bad.ts` / `bad.tsx` is read.
+  - `expect: "file"` — for a rule whose span is the whole file (`no-bang-comment-in-client`), where there is
+    no per-line diagnostic to match. `bad` must report at least once.
+- A rule with two independent gates gets one subfolder per gate (`no-init-fetch-in-client/{use-client,store-file}`).
+- These files are excluded from the repo's own biome run (root `biome.json` `files.includes`) and from
+  `tsc` (`tsconfig.json` `exclude`), because they reference undeclared identifiers on purpose and the
+  formatter would reorder the class strings the vocabulary fixtures test.
+
+## Biome GritQL constraints these fixtures pinned down
+
+Each of these made a rule silently report nothing, and each was found by adding the fixture:
+
+- A bare snippet in JSX-attribute shape (`` `$name={$value}` ``) matches **no** JsxAttribute. Match the node
+  and read its fields: `JsxAttribute(name = $name, initializer = ...)`.
+- `JsModule()` never matches as a top-level pattern, and no node pattern is given comment trivia. A rule
+  about comments has to go through `file($name, $body)`, whose span is the whole file.
+- `file()`'s `$body` is the module's **token** span: interior trivia is visible, the leading and trailing
+  trivia are not. So a comment above the first statement or below the last one is unreachable from GritQL —
+  that is `no-bang-comment-in-client`'s blind spot, and why its fixture puts the marker between statements.
+- A regex capture (`r"..."($var)`) carries no source range: a diagnostic spanned on one gets no location,
+  and `$var` does not interpolate into a `message`.
+
+The five vocabulary fixtures were ported from `frontendBuild/styleGuard.test.ts`, the pre-grit
+implementation of the same rules, when that scanner was retired.

package/lint/__fixtures__/no-arbitrary-color/bad.tsx

@@ -0,0 +1,3 @@
+export const HexValue = () => <div className="bg-[#3b82f6]" />; // @flag
+export const ColorFunctionValue = () => <div className="text-[rgb(0,0,0)]" />; // @flag
+export const HslValue = () => <div className="border-[hsl(210,100%,50%)]" />; // @flag

package/lint/__fixtures__/no-arbitrary-color/good.tsx

@@ -0,0 +1,4 @@
+export const CssVariableShorthand = () => <div className="bg-[--brand]" />; // @ok
+export const CssVariableFunction = () => <div className="text-[var(--fg)]" />; // @ok
+export const ArbitrarySizeNotColor = () => <div className="min-h-[300px] w-[42ch]" />; // @ok
+export const SemanticToken = () => <div className="bg-primary" />; // @ok

package/lint/__fixtures__/no-async-component-in-ui/bad.tsx

@@ -0,0 +1,4 @@
+export const Card = async () => <div className="flex" />; // @flag
+export const Typed: FC = async () => <div className="flex" />; // @flag
+export async function Panel() { return <div className="flex" />; } // @flag
+export default async function Shell() { return <div className="flex" />; } // @flag

package/lint/__fixtures__/no-async-component-in-ui/good.tsx

@@ -0,0 +1,4 @@
+export const Card = () => <div className="flex" />; // @ok
+export const Handler = () => { const onSave = async () => save(); return <button onClick={onSave} />; }; // @ok
+export const loadThing = async () => await fetchThing(); // @ok
+export function Panel() { return <div className="flex" />; } // @ok

package/lint/__fixtures__/no-bang-comment-in-client/bad.tsx

@@ -0,0 +1,4 @@
+export const a = 1;
+//! FIXME: this marker survives minification and ships to every visitor
+/*! and so does the block form */
+export const b = 2;

package/lint/__fixtures__/no-bang-comment-in-client/fixture.json

@@ -0,0 +1 @@
+{ "expect": "file" }

package/lint/__fixtures__/no-bang-comment-in-client/good.tsx

@@ -0,0 +1,3 @@
+// FIXME: the client-reachable spelling of the same note // @ok
+export const url = "https://host//!path"; // @ok
+export const a = 1; // @ok

package/lint/__fixtures__/no-daisyui-legacy-class/bad.tsx

@@ -0,0 +1,7 @@
+export const CompoundButton = () => <button className="btn-primary" />; // @flag
+export const CompoundBadge = () => <span className="badge-success" />; // @flag
+export const DroppedBaseSurface = () => <div className="bg-base-100" />; // @flag
+export const DroppedBaseContentWithOpacity = () => <div className="text-base-content/70" />; // @flag
+export const DroppedBaseOnABorderSide = () => <div className="border-t-base-300" />; // @flag
+export const DroppedPrimaryContent = () => <div className="text-primary-content" />; // @flag
+export const DroppedErrorSlot = () => <div className="bg-error/5" />; // @flag

package/lint/__fixtures__/no-daisyui-legacy-class/good.tsx

@@ -0,0 +1,5 @@
+export const BareAmbiguousNamesCollideWithTailwind = () => <div className="card input badge btn" />; // @ok
+export const SurvivingSemanticPair = () => <div className="bg-primary text-primary-foreground" />; // @ok
+export const SurvivingStatusTokens = () => <div className="bg-neutral text-info border-warning" />; // @ok
+export const DestructiveReplacesError = () => <div className="bg-destructive/10 text-destructive" />; // @ok
+export const UnrelatedContentUtilities = () => <div className="content-center justify-content" />; // @ok

package/lint/__fixtures__/no-deep-internal-import/bad.tsx

@@ -0,0 +1,3 @@
+import { userConstant } from "@libs/shared/lib/user/user.constant"; // @flag
+import { helper } from "../../common/helper"; // @flag
+import * as cnst from "../cnst"; // @flag

package/lint/__fixtures__/no-deep-internal-import/fixture.json

@@ -0,0 +1 @@
+{ "path": "apps/demo/lib/task/Task.Zone.tsx" }

package/lint/__fixtures__/no-deep-internal-import/good.tsx

@@ -0,0 +1,3 @@
+import { cnst, st } from "@apps/demo/client"; // @ok
+import { Task } from "./task.constant"; // @ok
+import { env } from "@apps/demo/env/env.client"; // @ok

package/lint/__fixtures__/no-deprecated-log-level/bad.tsx

@@ -0,0 +1,4 @@
+export const viaLocal = () => logger.log("x"); // @flag
+export const viaStatic = () => Logger.log("x"); // @flag
+export class ViaField { run() { this.logger.log("x"); } } // @flag
+export class ViaPrivateField { run() { this.#logger.log("x"); } } // @flag

package/lint/__fixtures__/no-deprecated-log-level/good.tsx

@@ -0,0 +1,4 @@
+export const infoIsTheReplacement = () => logger.info("x"); // @ok
+export const otherLevelsAreFine = () => logger.warn("x"); // @ok
+export const anUnrelatedReceiverIsNotTheLadder = () => auditTrail.log("x"); // @ok
+export const consoleIsBiomesOwnRule = () => console.log("x"); // @ok

package/lint/__fixtures__/no-import-client-functions/bad.tsx

@@ -0,0 +1,2 @@
+import { useState } from "react"; // @flag
+import { st } from "../st"; // @flag

package/lint/__fixtures__/no-import-client-functions/good.tsx

@@ -0,0 +1,4 @@
+import type { ReactNode } from "react"; // @ok
+import { cnst } from "@libs/shared/client"; // @ok
+import { usePage } from "akanjs/client"; // @ok
+export const Card = ({ children }: { children: ReactNode }) => <div>{children}</div>; // @ok

package/lint/__fixtures__/no-import-client-in-server/bad.tsx

@@ -0,0 +1,6 @@
+import { TaskStore } from "./task.store"; // @flag
+import { Card } from "./Task.Unit"; // @flag
+import { Button } from "@libs/shared/ui"; // @flag
+import { useSpeech } from "@libs/util/webkit"; // @flag
+import { cn } from "akanjs/client"; // @flag
+import { st } from "../st"; // @flag

package/lint/__fixtures__/no-import-client-in-server/good.tsx

@@ -0,0 +1,5 @@
+import type { TaskStore } from "./task.store"; // @ok
+import * as cnst from "../cnst"; // @ok
+import * as db from "../db"; // @ok
+import { Err } from "../dict"; // @ok
+import { Admin } from "@libs/shared/srvkit"; // @ok

package/lint/__fixtures__/no-import-external-library/bad.tsx

@@ -0,0 +1,4 @@
+import dayjs from "dayjs"; // @flag
+import { z } from "zod"; // @flag
+import fs from "node:fs"; // @flag
+import { clsx } from "clsx"; // @flag

package/lint/__fixtures__/no-import-external-library/good.tsx

@@ -0,0 +1,5 @@
+import { Ticket } from "./ticket.constant"; // @ok
+import { cnst } from "@libs/shared/client"; // @ok
+import { field } from "akanjs/constant"; // @ok
+import { useState } from "react"; // @ok
+import { test } from "bun:test"; // @ok

package/lint/__fixtures__/no-import-server-in-client/bad.tsx

@@ -0,0 +1,6 @@
+import { TaskService } from "./task.service"; // @flag
+import { TaskModel } from "./task.document"; // @flag
+import { Admin } from "@libs/shared/srvkit"; // @flag
+import { AkanServer } from "akanjs/server"; // @flag
+import * as db from "../db"; // @flag
+import { Err } from "../dict"; // @flag

package/lint/__fixtures__/no-import-server-in-client/good.tsx

@@ -0,0 +1,4 @@
+import type { TaskService } from "./task.service"; // @ok
+import * as cnst from "../cnst"; // @ok
+import { st } from "../st"; // @ok
+import { Err, Task } from "@libs/shared/client"; // @ok

package/lint/__fixtures__/no-init-fetch-in-client/store-file/bad.ts

@@ -0,0 +1 @@
+export class TaskStore { async reload(orgId: string) { const snapshot = await fetch.initTaskInOrg(orgId); } } // @flag

package/lint/__fixtures__/no-init-fetch-in-client/store-file/fixture.json

@@ -0,0 +1 @@
+{ "path": "apps/demo/lib/task/task.store.ts" }

package/lint/__fixtures__/no-init-fetch-in-client/store-file/good.ts

@@ -0,0 +1 @@
+export class TaskStore { async reload() { await st.do.initTaskInOrg(); } } // @ok

package/lint/__fixtures__/no-init-fetch-in-client/use-client/bad.tsx

@@ -0,0 +1,4 @@
+"use client";
+
+export const A = () => { void fetch.initTaskInOrg(orgId); }; // @flag
+export const B = () => { void fetch.getTaskInitInOrg(orgId); }; // @flag

package/lint/__fixtures__/no-init-fetch-in-client/use-client/good.tsx

@@ -0,0 +1,5 @@
+"use client";
+
+export const C = () => { void fetch.initPayment(sessionId); }; // @ok
+export const D = () => { void st.do.initTaskInOrg(); }; // @ok
+export const E = () => { void fetch.viewTask(taskId); }; // @ok

package/lint/__fixtures__/no-inline-color/bad.tsx

@@ -0,0 +1,3 @@
+export const HexInStyleObject = () => <div style={{ color: "#fff" }} />; // @flag
+export const RgbInStyleObject = () => <div style={{ background: "rgb(0,0,0)" }} />; // @flag
+export const ColorLiteralInStyleTag = () => <style>{`.x { color: #abcdef; }`}</style>; // @flag

package/lint/__fixtures__/no-inline-color/good.tsx

@@ -0,0 +1,3 @@
+export const VarReferenceInStyleObject = () => <div style={{ color: "var(--primary)" }} />; // @ok
+export const NonColorStyleProperty = () => <div style={{ width: "100%" }} />; // @ok
+export const ComputedNonColorStyle = () => <div style={{ minHeight }} />; // @ok

package/lint/__fixtures__/no-interpolated-arbitrary-class/bad.tsx

@@ -0,0 +1,3 @@
+export const SizeFromRuntimeExpression = () => <div className={`min-h-[${minHeight}px] flex`} />; // @flag
+export const ColorFromRuntimeExpression = () => <div className={`bg-[${color}] w-full`} />; // @flag
+export const BrokenBracketSwallowsNextClass = () => <div className={`min-h-[ w-full${minHeight}px] flex`} />; // @flag

package/lint/__fixtures__/no-interpolated-arbitrary-class/good.tsx

@@ -0,0 +1,3 @@
+export const LiteralArbitraryValue = () => <div className="min-h-[300px] flex" />; // @ok
+export const InterpolationOutsideBrackets = () => <div className={`flex gap-2 ${isOpen ? "opacity-50" : ""}`} />; // @ok
+export const InterpolationInStylePropNotClass = () => <div style={{ minHeight }} className={`flex ${extra}`} />; // @ok

package/lint/__fixtures__/no-js-private-class-method/bad.tsx

@@ -0,0 +1,3 @@
+export class SyncPrivate { #compute() { return 1; } } // @flag
+export class AsyncPrivate { async #load() { return 1; } } // @flag
+export class CallsPrivate { run() { this.#compute(); } } // @flag

package/lint/__fixtures__/no-js-private-class-method/good.tsx

@@ -0,0 +1,3 @@
+export class TypescriptPrivate { private _compute() { return 1; } } // @ok
+export class CallsUnderscore { run() { this._compute(); } } // @ok
+export class PrivateField { #cache = new Map(); } // @ok

package/lint/__fixtures__/no-model-type-in-util-zone/bad.tsx

@@ -0,0 +1,3 @@
+export interface CardProps { task: cnst.Task; } // @flag
+export type RowProps = { banner: cnst.LightBanner }; // @flag
+export const View = ({ task }: { task: cnst.Task }) => <div className="flex" />; // @flag

package/lint/__fixtures__/no-model-type-in-util-zone/good.tsx

@@ -0,0 +1,6 @@
+export interface IdProps { taskId: string; } // @ok
+export interface EnumProps { role: cnst.AdminRole["value"]; } // @ok
+export interface InitProps { init: ClientInit<cnst.Task>; } // @ok
+export interface CallbackProps { onPick: (task: cnst.Task) => void; } // @ok
+export interface ModelsWrapperProps { models: ModelsProps<cnst.Task>; } // @ok
+export const localAnnotationStaysInFile = (raw: unknown) => raw as cnst.Task; // @ok

package/lint/__fixtures__/no-raw-palette-class/bad.tsx

@@ -0,0 +1,6 @@
+export const TwoInOneString = () => <div className="bg-blue-500 text-gray-700" />; // @flag
+export const VariantPrefixAndOpacity = () => <div className="hover:bg-red-500/50" />; // @flag
+export const NumericNeutral = () => <div className="bg-neutral-500" />; // @flag
+export const AlongsideAUrlString = () => <a href="https://x.io" className="bg-blue-500" />; // @flag
+export const BorderSide = () => <div className="border-t-emerald-300" />; // @flag
+export const InsideCn = () => <div className={cn("flex", "text-slate-400")} />; // @flag

package/lint/__fixtures__/no-raw-palette-class/good.tsx

@@ -0,0 +1,8 @@
+export const BareSemanticNeutral = () => <div className="bg-neutral text-neutral-foreground" />; // @ok
+export const SemanticTokens = () => <div className="bg-primary text-muted-foreground border-border" />; // @ok
+export const BlackAndWhiteStayInVocabulary = () => <div className="bg-black text-white bg-white/30 bg-black/50" />; // @ok
+export const NonColorNumericUtilities = () => <div className="gap-4 mt-2 grid-cols-3 w-500" />; // @ok
+export const OpacityOnASemanticToken = () => <div className="text-foreground/70 bg-primary/10" />; // @ok
+// iconClassName="bg-blue-500" — a class name in a line comment is not code
+/** legacy: bg-red-500 */
+export const CommentsAreNotCode = () => <div className="flex" />; // @ok

package/lint/__fixtures__/no-redeclare-predefined-endpoint/bad.ts

@@ -0,0 +1,10 @@
+export class TaskEndpoint extends endpoint(srv.task, ({ query, mutation }) => ({
+  task: query(cnst.Task).exec(() => null), // @flag
+  lightTask: query(cnst.Task).exec(() => null), // @flag
+  createTask: mutation(cnst.Task).exec(() => null), // @flag
+  updateTask: mutation(cnst.Task).exec(() => null), // @flag
+  removeTask: mutation(cnst.Task).exec(() => null), // @flag
+  viewTask: query(cnst.Task).exec(() => null), // @flag
+  editTask: query(cnst.Task).exec(() => null), // @flag
+  mergeTask: mutation(cnst.Task).exec(() => null), // @flag
+})) {}

package/lint/__fixtures__/no-redeclare-predefined-endpoint/fixture.json

@@ -0,0 +1 @@
+{ "path": "apps/demo/lib/task/task.signal.ts" }

package/lint/__fixtures__/no-redeclare-predefined-endpoint/good.ts

@@ -0,0 +1,6 @@
+export class TaskEndpoint extends endpoint(srv.task, ({ query, mutation }) => ({
+  startTask: mutation(cnst.Task).exec(() => null), // @ok
+  taskSummary: query(cnst.Task).exec(() => null), // @ok
+  viewTaskBoard: query(cnst.Task).exec(() => null), // @ok
+  createTaskComment: mutation(cnst.Task).exec(() => null), // @ok
+})) {}

package/lint/__fixtures__/no-return-in-store-action/bad.tsx

@@ -0,0 +1,2 @@
+export class AStore extends store(sig.a, () => ({})) { load() { return 1; } } // @flag
+export class BStore extends store(sig.b, () => ({})) { async save() { return true; } } // @flag

package/lint/__fixtures__/no-return-in-store-action/good.tsx

@@ -0,0 +1,6 @@
+export class CStore extends store(sig.c, () => ({})) { load() { this.set({ n: 1 }); } } // @ok
+export class DStore extends store(sig.d, () => ({})) { load() { if (!this.get()) return; this.set({ n: 1 }); } } // @ok
+export class EStore extends store(sig.e, () => ({})) { static helper() { return 1; } } // @ok
+export class FStore extends store(sig.f, () => ({})) { get total() { return 1; } } // @ok
+export class GStore extends store(sig.g, () => ({})) { load() { items.map((x) => { return x; }); } } // @ok
+export class HPlain { load() { return 1; } } // @ok

package/lint/__fixtures__/no-throw-raw-error/bad.tsx

@@ -0,0 +1,4 @@
+export const throwsNewError = () => { throw new Error("boom"); }; // @flag
+export const throwsBareError = () => { throw Error("boom"); }; // @flag
+export const throwsWithCause = () => { throw new Error("boom", { cause: reason }); }; // @flag
+export const throwsWithNoArgument = () => { throw new Error(); }; // @flag

package/lint/__fixtures__/no-throw-raw-error/good.tsx

@@ -0,0 +1,4 @@
+export const throwsErr = () => { throw new Err("ticket.error.notFound"); }; // @ok
+export const throwsASubclass = () => { throw new HttpError("boom"); }; // @ok
+export const constructsWithoutThrowing = () => new Error("boom"); // @ok
+export const rethrowsACaught = () => { try { run(); } catch (error) { throw error; } }; // @ok

package/lint/__fixtures__/no-unpublished-form-setter/bad.tsx

@@ -0,0 +1,3 @@
+export const A = () => <Field.Text onChange={(v) => st.do.setNameOnTask(v)} />; // @flag
+export const B = () => <Switch onChange={(value) => void st.do.setDoneOnTask(value)} />; // @flag
+export const C = () => <Select onChange={(v) => { st.do.setTypeOnTask(v); }} />; // @flag

package/lint/__fixtures__/no-unpublished-form-setter/good.tsx

@@ -0,0 +1,5 @@
+export const D = () => <Field.Text onChange={st.do.setNameOnTask} />; // @ok
+export const E = () => <Field.Text onChange={(v) => st.do.setNameOnTask(formatPhone(v))} />; // @ok
+export const F = () => <Field.Text onChange={(v) => { st.do.setNameOnTask(v); track(v); }} />; // @ok
+export const G = () => <Field.Text onChange={(v) => st.do.writeOnTask("rows.3.name", v)} />; // @ok
+export const H = () => <Field.Text onChange={(a, b) => st.do.setNameOnTask(a)} />; // @ok

package/lint/__fixtures__/no-use-client-in-server/bad.tsx

@@ -0,0 +1,3 @@
+"use client"; // @flag
+
+export const Card = () => <div className="flex" />;

package/lint/__fixtures__/no-use-client-in-server/good.tsx

@@ -0,0 +1,2 @@
+export const Card = () => <div className="flex" />; // @ok
+export const note = "server only"; // @ok

package/lint/__fixtures__/non-scalar-props-restricted/bad.tsx

@@ -0,0 +1,5 @@
+export const ArrowProp = () => <Button onClick={() => save()} />; // @flag
+export const ArrowWithTwoParams = () => <Button onSelect={(id, kind) => save(id, kind)} />; // @flag
+export const ArrowWithBareParam = () => <Button onChange={value => save(value)} />; // @flag
+export const FunctionExpressionProp = () => <Button onClick={function () { save(); }} />; // @flag
+export const NamedFunctionProp = () => <Button onClick={function handle() { save(); }} />; // @flag

package/lint/__fixtures__/non-scalar-props-restricted/good.tsx

@@ -0,0 +1,4 @@
+export const LoaderIsAllowed = () => <Zone loader={() => fetchThing()} />; // @ok
+export const OfIsAllowed = () => <Load of={() => fetchThing()} />; // @ok
+export const ScalarProps = () => <Button label="Save" count={3} disabled />; // @ok
+export const IdentifierProp = () => <Button onClick={handleSave} />; // @ok