@archpublicwebsite/eslint-config 1.0.19 → 1.0.21

package/commitlint.config.cjs

@@ -0,0 +1,31 @@
+module.exports = {
+  rules: {
+    'type-enum': [
+      2,
+      'always',
+      [
+        'feat',
+        'fix',
+        'docs',
+        'refactor',
+        'perf',
+        'test',
+        'build',
+        'ci',
+        'chore',
+        'style',
+        'types',
+        'workflow',
+        'release',
+        'deps',
+        'revert',
+      ],
+    ],
+    'type-case': [2, 'always', 'lower-case'],
+    'type-empty': [2, 'never'],
+    'scope-case': [2, 'always', ['lower-case', 'kebab-case']],
+    'subject-empty': [2, 'never'],
+    'subject-case': [0],
+    'header-max-length': [2, 'always', 100],
+  },
+}

package/eslint.config.mjs

@@ -29,8 +29,12 @@ export function createArchipelagoConfig(...overrides) {
         '**/coverage/**',
         '**/.next/**',
         '**/public/**',
+        '**/*.md',
         '**/*.d.ts',
       ],
+      linterOptions: {
+        reportUnusedDisableDirectives: 'off',
+      },
     },
 
     // ── Tailwind ──────────────────────────────────────────────────────────────
@@ -198,6 +202,28 @@ export function createArchipelagoConfig(...overrides) {
         'antfu/if-newline': 'off',
         'antfu/no-import-dist': 'off',
 
+        // ── Compatibility mode for existing codebases ─────────────────────
+        // Keep the security-sensitive rules as errors, but avoid blocking
+        // commits on purely stylistic differences in current components/tools.
+        'style/semi': 'off',
+        'style/quotes': 'off',
+        'style/quote-props': 'off',
+        'style/no-multi-spaces': 'off',
+        'style/key-spacing': 'off',
+        'style/member-delimiter-style': 'off',
+        'style/max-statements-per-line': 'off',
+        'style/brace-style': 'off',
+        'jsdoc/require-returns-description': 'off',
+        'regexp/use-ignore-case': 'off',
+        'regexp/prefer-w': 'off',
+        'unicorn/escape-case': 'off',
+
+        // Allow progressive tightening later; for now do not block on these.
+        'no-unused-vars': 'off',
+        'unused-imports/no-unused-imports': 'off',
+        'unused-imports/no-unused-vars': 'off',
+        'ts/no-unused-vars': 'off',
+
         // ── Vue ──────────────────────────────────────────────────────────────
         'vue/multi-word-component-names': 'off',
         'vue/no-required-prop-with-default': 'off',
@@ -212,26 +238,18 @@ export function createArchipelagoConfig(...overrides) {
         'vue/prefer-separate-static-class': 'off',
         'vue/attribute-hyphenation': 'off',
         'vue/define-macros-order': 'off',
+        'vue/no-v-html': 'off',
         'vue/max-attributes-per-line': ['error', {
           singleline: 3,
           multiline: 1,
         }],
-        'vue/max-len': ['warn', {
-          code: 120,
-          ignoreComments: true,
-          ignoreUrls: true,
-          ignoreStrings: true,
-          ignoreTemplateLiterals: true,
-          ignoreRegExpLiterals: true,
-          ignoreHTMLAttributeValues: true,
-          ignoreHTMLTextContents: true,
-        }],
+        'vue/max-len': 'off',
 
         // ── TypeScript ───────────────────────────────────────────────────────
         'ts/no-use-before-define': 'off',
         'ts/no-empty-object-type': 'off',
-        'ts/no-explicit-any': 'warn',
-        'ts/no-var-requires': 'warn',
+        'ts/no-explicit-any': 'off',
+        'ts/no-var-requires': 'off',
         // Keep disabled globally to avoid parserServices errors on plain JS
         // config files (tailwind/postcss/vite) during lint-staged runs.
         'ts/consistent-type-imports': 'off',

package/lint-staged.config.mjs

@@ -0,0 +1,11 @@
+const config = {
+  '*.{js,mjs,cjs,ts,tsx,vue}': [
+    'eslint --fix',
+    'prettier --write',
+  ],
+  '*.{json,md,yml,yaml,css,scss,html}': [
+    'prettier --write',
+  ],
+}
+
+export default config

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archpublicwebsite/eslint-config",
-  "version": "1.0.19",
+  "version": "1.0.21",
   "author": "Archipelago Hotels",
   "description": "Reusable ESLint flat config and git-hook toolkit for Archipelago projects",
   "type": "module",
@@ -11,6 +11,9 @@
       "import": "./eslint.config.mjs",
       "default": "./eslint.config.mjs"
     },
+    "./prettier": "./prettier.config.mjs",
+    "./commitlint": "./commitlint.config.cjs",
+    "./lint-staged": "./lint-staged.config.mjs",
     "./tools/*": "./tools/*"
   },
   "repository": {
@@ -20,6 +23,9 @@
   },
   "files": [
     "eslint.config.mjs",
+    "prettier.config.mjs",
+    "commitlint.config.cjs",
+    "lint-staged.config.mjs",
     "tools",
     "README.md"
   ],

package/prettier.config.mjs

@@ -0,0 +1,11 @@
+const config = {
+  plugins: ['prettier-plugin-tailwindcss'],
+  singleQuote: true,
+  printWidth: 120,
+  semi: false,
+  tabWidth: 2,
+  trailingComma: 'es5',
+  arrowParens: 'avoid',
+}
+
+export default config

package/tools/security/patterns.mjs

@@ -233,8 +233,8 @@ export const FILE_PATTERNS = [
   },
   {
     id: 'vue-v-html',
-    severity: 'high',
-    message: 'v-html directive — renders raw HTML; XSS risk if bound to user-controlled data',
+    severity: 'medium',
+    message: 'v-html directive detected — ensure content is sanitised (e.g. DOMPurify) and never bind unsanitised user input',
     // Matches both :v-html and v-html= in .vue template strings captured in JS
     regex: /v-html\s*=/,
     category: 'xss',

package/tools/setup/install.mjs

@@ -104,6 +104,15 @@ export default createArchipelagoConfig({
 // ─── .prettierrc ────────────────────────────────────────────────────────────
 
 function ensurePrettierConfig(projectRoot) {
+  const prettierModuleConfigPath = join(projectRoot, 'prettier.config.mjs')
+  const prettierModuleConfigContent = `import config from '@archpublicwebsite/eslint-config/prettier'
+
+export default config
+`
+
+  if (writeIfMissing(prettierModuleConfigPath, prettierModuleConfigContent))
+    log('Created prettier.config.mjs')
+
   const prettierPath = join(projectRoot, '.prettierrc')
   const defaults = {
     plugins: ['prettier-plugin-tailwindcss'],
@@ -138,6 +147,41 @@ function ensurePrettierConfig(projectRoot) {
   }
 }
 
+function ensureCommitlintConfig(projectRoot) {
+  const commitlintConfigPath = join(projectRoot, 'commitlint.config.cjs')
+  const content = `module.exports = require('@archpublicwebsite/eslint-config/commitlint')
+`
+  if (writeIfMissing(commitlintConfigPath, content))
+    log('Created commitlint.config.cjs')
+}
+
+function ensureLintStagedConfig(projectRoot) {
+  const lintStagedConfigPath = join(projectRoot, 'lint-staged.config.mjs')
+  const content = `import config from '@archpublicwebsite/eslint-config/lint-staged'
+
+export default config
+`
+  if (writeIfMissing(lintStagedConfigPath, content))
+    log('Created lint-staged.config.mjs')
+}
+
+function ensurePrettierIgnore(projectRoot) {
+  const prettierIgnorePath = join(projectRoot, '.prettierignore')
+  const content = `node_modules
+dist
+coverage
+.nuxt
+.output
+.next
+.turbo
+pnpm-lock.yaml
+package-lock.json
+yarn.lock
+`
+  if (writeIfMissing(prettierIgnorePath, content))
+    log('Created .prettierignore')
+}
+
 // ─── .hooks ─────────────────────────────────────────────────────────────────
 
 function ensureHooks(projectRoot) {
@@ -247,6 +291,11 @@ function ensurePackageScripts(projectRoot) {
 
   const scripts = pkg.scripts && typeof pkg.scripts === 'object' ? pkg.scripts : {}
   const desiredScripts = {
+    lint: 'eslint .',
+    'lint:fix': 'eslint . --fix',
+    format: 'prettier . --write',
+    typecheck: 'tsc --noEmit',
+    'lint-staged': 'lint-staged',
     precommit: 'node node_modules/@archpublicwebsite/eslint-config/tools/git-hooks/pre-commit.mjs',
     prepush: 'node node_modules/@archpublicwebsite/eslint-config/tools/git-hooks/pre-push.mjs',
     'security:global-scan': 'bash ./node_modules/@archpublicwebsite/eslint-config/tools/security/scan-global.sh',
@@ -316,6 +365,9 @@ function main() {
   ensureEslintUserIgnore(projectRoot)
   ensureEslintConfig(projectRoot)
   ensurePrettierConfig(projectRoot)
+  ensurePrettierIgnore(projectRoot)
+  ensureCommitlintConfig(projectRoot)
+  ensureLintStagedConfig(projectRoot)
   ensureHooks(projectRoot)
   ensureHooksPath(projectRoot)
   ensureSecurityScripts(projectRoot)