@burdenoff/toolchain 0.0.0-stage → 2026.1107.1

package/dist/knip/base.js

@@ -0,0 +1,22 @@
+// knip/base.ts
+var KNIP_BASE = {
+  ignore: ["**/generated/**", "**/*.generated.ts", "dist/**", "coverage/**", "fixtures/**"],
+  ignoreDependencies: ["@burdenoff/toolchain", "bun-types", "@types/bun"],
+  ignoreBinaries: ["boff"],
+  ignoreExportsUsedInFile: true
+};
+function knipConfig(overrides = {}) {
+  return {
+    ...overrides,
+    ignore: [...KNIP_BASE.ignore, ...overrides.ignore ?? []],
+    ignoreDependencies: [...KNIP_BASE.ignoreDependencies, ...overrides.ignoreDependencies ?? []],
+    ignoreBinaries: [...KNIP_BASE.ignoreBinaries, ...overrides.ignoreBinaries ?? []],
+    ignoreExportsUsedInFile: overrides.ignoreExportsUsedInFile ?? KNIP_BASE.ignoreExportsUsedInFile
+  };
+}
+var base_default = knipConfig;
+export {
+  KNIP_BASE,
+  base_default as default,
+  knipConfig
+};

package/eslint/backend.d.ts

@@ -0,0 +1,4 @@
+import type { BackendOptions, FlatConfigArray } from './index.js';
+
+export type { BackendOptions };
+export default function createBurdenoffConfig(dirname: string, options?: BackendOptions): FlatConfigArray;

package/eslint/backend.js

@@ -0,0 +1,487 @@
+import pluginJs from '@eslint/js';
+import eslintComments from 'eslint-plugin-eslint-comments';
+import importPlugin from 'eslint-plugin-import';
+import security from 'eslint-plugin-security';
+import sonarjs from 'eslint-plugin-sonarjs';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+/**
+ * Burdenoff backend ESLint profile (@burdenoff/toolchain/eslint/backend).
+ *
+ * A faithful port of @burdenoff/be-sdk/eslint (configs/eslint/index.js, v1.2.0):
+ * same plugins, same rules, same per-path overrides, same factory signature.
+ * The plugins are dependencies of @burdenoff/toolchain, so a consuming repo
+ * keeps only `eslint` itself as a devDependency.
+ *
+ *   // eslint.config.js
+ *   import backend from '@burdenoff/toolchain/eslint/backend';
+ *   export default backend(import.meta.dirname, { project: './tsconfig.json' });
+ *
+ * @param {string} dirname - The directory of the consuming project (use import.meta.dirname)
+ * @param {object} [options] - Optional configuration
+ * @param {string} [options.project] - Path to the tsconfig used for type-aware rules (default: './tsconfig.eslint.json')
+ * @param {string[]} [options.ignores] - Extra ignore globs appended to the defaults
+ * @returns {import('eslint').Linter.Config[]}
+ */
+export default function createBurdenoffConfig(dirname, options = {}) {
+  const { project = './tsconfig.eslint.json', ignores = [] } = options;
+
+  if (!dirname) {
+    throw new Error('@burdenoff/toolchain/eslint/backend: dirname is required. Use backend(import.meta.dirname)');
+  }
+  if (!Array.isArray(ignores) || ignores.some((g) => typeof g !== 'string')) {
+    throw new Error('@burdenoff/toolchain/eslint/backend: options.ignores must be an array of strings');
+  }
+
+  return [
+    {
+      files: ['**/*.{js,mjs,cjs,ts}'],
+    },
+    {
+      ignores: [
+        '**/generated/**',
+        '**/generated/*.ts',
+        '**/temp/**',
+        '**/dist/**',
+        '**/coverage/**',
+        '**/node_modules/**',
+        '*.d.ts',
+        '*.config.js',
+        '*.config.mjs',
+        ...ignores,
+      ],
+    },
+    {
+      languageOptions: {
+        globals: {
+          ...globals.node,
+          ...globals.es2022,
+        },
+        parserOptions: {
+          // Automatically configured from factory function parameters
+          project,
+          tsconfigRootDir: dirname,
+          ecmaVersion: 'latest',
+          sourceType: 'module',
+        },
+      },
+    },
+    // ============================================================================
+    // Base Recommended Configurations
+    // ============================================================================
+    pluginJs.configs.recommended,
+    ...tseslint.configs.recommended,
+    security.configs.recommended,
+    sonarjs.configs.recommended,
+    {
+      plugins: {
+        import: importPlugin,
+        'eslint-comments': eslintComments,
+      },
+      rules: {
+        // ============================================================================
+        // ESLint Comments - Control inline ESLint directives
+        // ============================================================================
+        'eslint-comments/no-use': 'error', // Require description for eslint-disable comments
+        'eslint-comments/no-unlimited-disable': 'error', // Disallow unlimited eslint-disable
+        'eslint-comments/no-restricted-disable': 'error', // Disallow disabling specific rules without justification
+        'eslint-comments/no-duplicate-disable': 'error', // Disallow duplicate eslint-disable comments
+        'eslint-comments/no-unused-disable': 'error', // Disallow unused eslint-disable comments
+        'eslint-comments/no-unused-enable': 'error', // Disallow unused eslint-enable comments
+
+        // ============================================================================
+        // TypeScript Core Rules
+        // ============================================================================
+        '@typescript-eslint/ban-ts-ignore': 'off', // Allow @ts-ignore when needed
+        '@typescript-eslint/ban-ts-comment': 'off', // Allow @ts-expect-error with description
+
+        // Type Safety - Gradual adoption approach
+        '@typescript-eslint/no-explicit-any': 'warn', // Warn on 'any' usage (gradual improvement)
+        // Unused vars/imports - ERROR level since TypeScript's noUnusedLocals is disabled
+        // (TypeScript doesn't support per-file overrides, so ESLint handles this)
+        // Generated files are excluded via the ignores pattern and override section
+        '@typescript-eslint/no-unused-vars': [
+          'error',
+          {
+            argsIgnorePattern: '^_',
+            varsIgnorePattern: '^_',
+            destructuredArrayIgnorePattern: '^_',
+            caughtErrorsIgnorePattern: '^_',
+            ignoreRestSiblings: true,
+          },
+        ],
+        '@typescript-eslint/explicit-function-return-type': [
+          'warn',
+          {
+            allowExpressions: true,
+            allowTypedFunctionExpressions: true,
+            allowHigherOrderFunctions: true,
+          },
+        ],
+
+        // ============================================================================
+        // Async/Promise Handling - CRITICAL for backend reliability
+        // ============================================================================
+        '@typescript-eslint/no-floating-promises': 'error', // Prevent unhandled promises
+        '@typescript-eslint/no-misused-promises': 'error', // Prevent promises used in wrong contexts
+        '@typescript-eslint/await-thenable': 'error', // Ensure await is only used with promises
+        // Disable require-await - async functions without await are allowed for interface consistency,
+        // promise return types, and future async operations
+        '@typescript-eslint/require-await': 'off',
+        // Disable promise-function-async - produces numerous false positives on arrow functions
+        // in array methods that don't return promises (e.g., .map((x) => x.id), .filter((a) => a.tag))
+        // The rule incorrectly flags simple property access and synchronous operations as promise-returning
+        '@typescript-eslint/promise-function-async': 'off',
+        'no-return-await': 'off', // Turned off in favor of @typescript-eslint version
+        '@typescript-eslint/return-await': 'error', // Enforce proper return await for try/catch
+
+        // ============================================================================
+        // Type Imports/Exports - Tree-shaking and performance
+        // ============================================================================
+        '@typescript-eslint/consistent-type-imports': [
+          'error',
+          {
+            prefer: 'type-imports',
+            disallowTypeAnnotations: false, // Allow type imports in annotations
+            fixStyle: 'separate-type-imports',
+          },
+        ],
+        '@typescript-eslint/consistent-type-exports': 'error',
+        '@typescript-eslint/no-unnecessary-type-assertion': 'error',
+
+        // Type safety rules with too many false positives - disabled for now
+        '@typescript-eslint/no-unsafe-assignment': 'off',
+        '@typescript-eslint/no-unsafe-call': 'off',
+        '@typescript-eslint/no-unsafe-member-access': 'off',
+        '@typescript-eslint/no-unsafe-return': 'off',
+        '@typescript-eslint/no-namespace': 'warn', // Warn on namespaces (occasionally needed for type augmentation)
+
+        // ============================================================================
+        // Import Organization - Code organization and circular dependency prevention
+        // ============================================================================
+        'import/order': 'off', // Disabled in favor of Prettier plugin (@trivago/prettier-plugin-sort-imports)
+        'import/no-duplicates': 'error', // Prevent duplicate imports
+        'import/no-cycle': ['error', { maxDepth: 3 }], // Prevent circular dependencies
+        'import/no-self-import': 'error', // Prevent self imports
+        'import/first': 'error', // Imports should be at top of file
+        'import/newline-after-import': 'error', // Blank line after imports
+
+        // ============================================================================
+        // Code Quality - General best practices
+        // ============================================================================
+        'no-console': ['warn', { allow: ['warn', 'error', 'info'] }], // Warn on console.log
+        'no-debugger': 'error', // Disallow debugger statements
+        'prefer-const': 'error', // Prefer const over let
+        'no-var': 'error', // Disallow var
+        eqeqeq: ['error', 'always', { null: 'ignore' }], // Require === and !==
+        'no-throw-literal': 'error', // Disallow throwing literals
+        'prefer-promise-reject-errors': 'error', // Reject with Error objects
+
+        // ============================================================================
+        // Error Handling - Production reliability (NEW in v1.1.0)
+        // ============================================================================
+        'no-ex-assign': 'error', // Disallow reassigning exceptions
+        'no-unsafe-finally': 'error', // Disallow unsafe returns in finally blocks
+        'no-unreachable': 'error', // Disallow unreachable code
+        'no-loss-of-precision': 'error', // Disallow number precision loss
+
+        // ============================================================================
+        // Database Safety - Pagination guard (Phase 0.3)
+        // findMany without `take` risks full-table scans under production load.
+        // Use Platform.normalizeOffsetPagination / clampGraphqlLimit to enforce the
+        // MAX_GRAPHQL_PAGE_LIMIT (100) ceiling before passing limit to Prisma.
+        // Spread-based pagination ({ ...toPrismaPage(pg) }) is exempt — add a
+        // brief eslint-disable comment explaining the spread carries a clamped take.
+        // ============================================================================
+        'no-restricted-syntax': [
+          'warn',
+          {
+            selector:
+              "CallExpression[callee.property.name='findMany'] > ObjectExpression:not(:has(Property[key.name='take']))",
+            message:
+              'findMany() must include a `take` arg to prevent full-table scans. ' +
+              'Use Platform.normalizeOffsetPagination() → toPrismaPage() or clampGraphqlLimit().',
+          },
+        ],
+
+        // ============================================================================
+        // Performance - Backend optimization (NEW in v1.1.0)
+        // ============================================================================
+        // Disable no-await-in-loop globally - many sequential operations (transactions, batch processing)
+        // are intentionally using await in loops for data integrity and ordering
+        'no-await-in-loop': 'off',
+        'no-constant-condition': 'error', // Disallow constant conditions
+        'no-dupe-else-if': 'error', // Disallow duplicate else-if conditions
+        'no-duplicate-case': 'error', // Disallow duplicate case labels
+        'no-empty': ['error', { allowEmptyCatch: false }], // Disallow empty blocks
+        'no-extra-boolean-cast': 'error', // Disallow unnecessary boolean casts
+
+        // ============================================================================
+        // SonarJS Rules - Code complexity and quality
+        // ============================================================================
+        'sonarjs/cognitive-complexity': ['warn', 25], // Warn on high complexity (25 is pragmatic)
+        'sonarjs/no-dead-store': 'error', // Error on unused assignments (TypeScript noUnusedLocals disabled)
+        'sonarjs/no-unused-vars': 'error', // Error on unused variables (TypeScript noUnusedLocals disabled)
+        'sonarjs/unused-import': 'error', // Error on unused imports (TypeScript noUnusedLocals disabled)
+        'sonarjs/no-duplicate-string': 'off', // Off for GraphQL/config strings
+        'sonarjs/todo-tag': 'warn', // Warn on TODO comments
+        'sonarjs/fixme-tag': 'off', // Allow FIXME for documented blockers
+        'sonarjs/slow-regex': 'warn', // Warn on slow regex
+        'sonarjs/pseudo-random': 'warn', // Warn on Math.random() for security
+        'sonarjs/no-commented-code': 'warn', // Warn on commented code
+        'sonarjs/redundant-type-aliases': 'off', // Too many false positives with generated types
+        'sonarjs/no-invariant-returns': 'warn', // Warn on invariant returns
+        // Disable function-return-type - union return types and conditional returns are intentional
+        // design patterns (e.g., returning different types based on runtime conditions)
+        'sonarjs/function-return-type': 'off',
+        'sonarjs/different-types-comparison': 'warn', // Warn on comparing different types
+        'sonarjs/deprecation': 'warn', // Warn on deprecated APIs
+        'sonarjs/no-nested-conditional': 'warn', // Warn on nested conditionals
+        'sonarjs/no-ignored-exceptions': 'warn', // Warn on ignored exceptions
+        'sonarjs/no-small-switch': 'warn', // Warn on small switch statements
+        'sonarjs/no-async-constructor': 'warn', // Warn on async constructors
+        'sonarjs/no-control-regex': 'off', // Allow control characters in regex
+        'no-control-regex': 'off', // Allow control characters in regex
+        'sonarjs/class-name': 'off', // Allow underscores in generated types
+        // Disable sonarjs/encryption-secure-mode - false positive on cipher algorithm selection
+        'sonarjs/encryption-secure-mode': 'off',
+        'sonarjs/no-hardcoded-ip': 'off', // Allow hardcoded IPs for config
+        'sonarjs/updated-loop-counter': 'warn', // Warn on loop counter updates
+        'sonarjs/anchor-precedence': 'warn', // Warn on anchor precedence
+        'sonarjs/void-use': 'off', // Allow void for ignoring promises
+
+        // ============================================================================
+        // Security Rules - Production security
+        // ============================================================================
+        'security/detect-object-injection': 'off', // Too many false positives
+        // Other security rules are enabled via security.configs.recommended
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Test Files
+    // ============================================================================
+    {
+      files: ['**/__tests__/**/*.ts', '**/*.test.ts', '**/*.spec.ts', '**/*.integration.test.ts'],
+      rules: {
+        'sonarjs/no-hardcoded-ip': 'off', // Test files can have hardcoded IPs
+        'sonarjs/no-hardcoded-passwords': 'off', // Test files can have test passwords
+        'no-control-regex': 'off', // Test files can have control chars in regex
+        'sonarjs/no-control-regex': 'off', // Test files can have control chars
+        '@typescript-eslint/no-explicit-any': 'off', // Test files can use any
+        '@typescript-eslint/require-await': 'off', // Test setup functions often don't need await
+        '@typescript-eslint/no-misused-promises': 'off', // Test mocks properly handle async
+        'sonarjs/no-nested-functions': 'off', // Test mocks often require nested functions
+        'sonarjs/pseudo-random': 'off', // Test data generation can use Math.random()
+        'eslint-comments/no-use': 'off', // Allow eslint-disable in test files
+        'no-await-in-loop': 'off', // Tests often need sequential async operations
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Cache/Storage Services
+    // ============================================================================
+    {
+      files: ['**/cache/**/*.ts', '**/storage/**/*.ts', '**/services/cache/**/*.ts', '**/services/storage/**/*.ts'],
+      rules: {
+        'sonarjs/hashing': 'off', // MD5 for checksums/ETags is acceptable
+        'sonarjs/publicly-writable-directories': 'off', // Temp directories are acceptable
+        'security/detect-non-literal-fs-filename': 'off', // Storage services use dynamic paths
+        'sonarjs/no-invariant-returns': 'off', // Interface implementations may require specific returns
+        'sonarjs/cognitive-complexity': ['warn', 40], // Storage operations naturally complex
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Generated Type Files
+    // Generated files (codegen, prisma) have unused imports we cannot control
+    // ============================================================================
+    {
+      files: [
+        '**/types/**/*.ts',
+        '**/*.types.ts',
+        '**/generated/**/*.ts',
+        '**/*.generated.ts',
+        '**/mapper-models.ts', // Imports from generated Prisma types
+        '**/scalar-types.ts', // Scalar type definitions for codegen
+      ],
+      rules: {
+        'sonarjs/class-name': 'off', // Generated types can have _ prefix
+        '@typescript-eslint/no-explicit-any': 'off', // Generated types can use any
+        '@typescript-eslint/explicit-function-return-type': 'off', // Generated types don't need explicit returns
+        // Disable unused vars/imports checks for generated files
+        '@typescript-eslint/no-unused-vars': 'off',
+        'sonarjs/no-unused-vars': 'off',
+        'sonarjs/unused-import': 'off',
+        'sonarjs/no-dead-store': 'off',
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Adapter Files
+    // ============================================================================
+    {
+      files: ['**/adapters/**/*.ts', '**/*Adapter.ts'],
+      rules: {
+        'sonarjs/function-return-type': 'off', // Adapters implement external API contracts
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Resolver Files (GraphQL)
+    // ============================================================================
+    {
+      files: ['**/resolvers/**/*.ts', '**/*.resolvers.ts'],
+      rules: {
+        'sonarjs/function-return-type': 'off', // Resolvers implement GraphQL schema contracts
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Logger Transports (NEW in v1.1.0)
+    // Validated file paths from config, not user input
+    // ============================================================================
+    {
+      files: ['**/logger/**/transports.ts', '**/utils/logger/transports.ts'],
+      rules: {
+        'security/detect-non-literal-fs-filename': 'off', // File paths validated in constructor
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe fs operations
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Export Services (NEW in v1.1.0)
+    // Validated export paths with security checks
+    // ============================================================================
+    {
+      files: ['**/export/**/ExportFormatService.ts', '**/modules/export/services/ExportFormatService.ts'],
+      rules: {
+        'security/detect-non-literal-fs-filename': 'off', // Export paths validated before fs operations
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe export operations
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Services with Validated Dynamic RegExp (NEW in v1.1.0)
+    // RegExp patterns from validated application config, not user input
+    // ============================================================================
+    {
+      files: ['**/TemplateService.ts', '**/numberGenerator.ts', '**/tags/services/validation.ts'],
+      rules: {
+        'security/detect-non-literal-regexp': 'off', // RegExp from validated config with error handling
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe regex usage
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Report Generators (NEW in v1.1.0)
+    // Naturally high complexity due to Excel/PDF formatting
+    // ============================================================================
+    {
+      files: ['**/ExcelReportGenerator.ts', '**/PDFReportGenerator.ts', '**/ReportService.ts'],
+      rules: {
+        'sonarjs/cognitive-complexity': ['warn', 35], // Allow higher complexity for report generation
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for GraphQL Modules Namespace Augmentation (NEW in v1.1.0)
+    // Required by @graphql-modules for context type augmentation
+    // ============================================================================
+    {
+      files: ['**/modules/*/index.ts', '**/modules/*/declarations.ts'],
+      rules: {
+        '@typescript-eslint/no-namespace': 'off', // Namespace augmentation required for GraphQL Modules
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented namespace usage
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Prisma JSON Type Handling (NEW in v1.1.0)
+    // Prisma.JsonValue is a union type by design
+    // ============================================================================
+    {
+      files: ['**/inputValidators.ts', '**/*Validator.ts'],
+      rules: {
+        'sonarjs/function-return-type': 'off', // Prisma.JsonValue is a union type by design
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented Prisma type usage
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for SDK Core Implementation Files
+    // Allow eslint-disable for documented design decisions
+    // ============================================================================
+    {
+      files: [
+        '**/database/index.ts',
+        '**/middleware/security.ts',
+        '**/event-queue/implementations/**/*.ts',
+        '**/instrumentation/metrics-collector.ts',
+      ],
+      rules: {
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented design patterns
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for I18n Translation Loader
+    // Validated file paths from config, not user input
+    // ============================================================================
+    {
+      files: ['**/i18n/loader.ts', '**/i18n/**/loader.ts'],
+      rules: {
+        'security/detect-non-literal-fs-filename': 'off', // File paths validated before fs operations
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe fs operations
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Prisma Generator
+    // Validated output paths with security checks
+    // ============================================================================
+    {
+      files: ['**/prisma/generator/**/*.ts', '**/generator/index.ts'],
+      rules: {
+        'security/detect-non-literal-fs-filename': 'off', // Output paths validated before fs operations
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe fs operations
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Translation Service with Dynamic RegExp
+    // RegExp patterns from validated translation config, not user input
+    // ============================================================================
+    {
+      files: ['**/translation/index.ts', '**/translation/**/index.ts'],
+      rules: {
+        'security/detect-non-literal-regexp': 'off', // RegExp from validated translation patterns
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe regex usage
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Validation Utilities with Dynamic RegExp
+    // RegExp patterns from validated validation rules, not user input
+    // ============================================================================
+    {
+      files: ['**/utils/validation.ts', '**/utils/**/validation.ts'],
+      rules: {
+        'security/detect-non-literal-regexp': 'off', // RegExp from validated validation rules
+        'eslint-comments/no-use': 'off', // Allow eslint-disable for documented safe regex usage
+      },
+    },
+
+    // ============================================================================
+    // Override Rules for Server Backwards Compatibility
+    // IUser is deprecated in favor of IActor, but SDK maintains backwards compat
+    // ============================================================================
+    {
+      files: ['**/server/context.ts', '**/server/types.ts'],
+      rules: {
+        'sonarjs/deprecation': 'off', // Intentional use of deprecated IUser for backwards compatibility
+      },
+    },
+  ];
+}

package/eslint/browser.d.ts

@@ -0,0 +1,5 @@
+import type { BrowserOptions, FlatConfigArray } from './index.js';
+
+export type { BrowserOptions };
+export declare function createBrowserConfig(options?: BrowserOptions): FlatConfigArray;
+export default createBrowserConfig;

package/eslint/browser.js

@@ -0,0 +1,24 @@
+import globals from 'globals';
+
+import { createNodeConfig } from './node.js';
+
+/**
+ * Burdenoff browser-extension ESLint profile (@burdenoff/toolchain/eslint/browser):
+ * the Node profile plus browser globals and the `chrome` extension API global.
+ *
+ *   // eslint.config.js
+ *   import browser from '@burdenoff/toolchain/eslint/browser';
+ *   export default browser({ ignores: ['build/**'] });
+ *
+ * @param {object} [options] - Same options as the Node profile
+ * @returns {import('eslint').Linter.Config[]}
+ */
+export function createBrowserConfig(options = {}) {
+  const { globals: extraGlobals = {}, ...rest } = options;
+  return createNodeConfig({
+    ...rest,
+    globals: { ...globals.browser, ...globals.webextensions, chrome: 'readonly', ...extraGlobals },
+  });
+}
+
+export default createBrowserConfig;

package/eslint/gateway.d.ts

@@ -0,0 +1,4 @@
+import type { FlatConfigArray, GatewayOptions } from './index.js';
+
+export type { GatewayOptions };
+export default function createGatewayConfig(dirname: string, options?: GatewayOptions): FlatConfigArray;

package/eslint/gateway.js

@@ -0,0 +1,53 @@
+import eslint from '@eslint/js';
+import tseslint from 'typescript-eslint';
+
+/**
+ * Burdenoff gateway ESLint profile (@burdenoff/toolchain/eslint/gateway).
+ *
+ * Ported from gateways/global-int-gateway/eslint.config.js: typescript-eslint
+ * strictTypeChecked + stylisticTypeChecked with the project service.
+ *
+ *   // eslint.config.js
+ *   import gateway from '@burdenoff/toolchain/eslint/gateway';
+ *   export default gateway(import.meta.dirname);
+ *
+ * @param {string} dirname - The directory of the consuming project (use import.meta.dirname)
+ * @param {object} [options]
+ * @param {string[]} [options.ignores] - Extra ignore globs appended to the defaults
+ * @returns {import('eslint').Linter.Config[]}
+ */
+export default function createGatewayConfig(dirname, options = {}) {
+  const { ignores = [] } = options;
+  if (!dirname) {
+    throw new Error('@burdenoff/toolchain/eslint/gateway: dirname is required. Use gateway(import.meta.dirname)');
+  }
+  return tseslint.config(
+    eslint.configs.recommended,
+    ...tseslint.configs.strictTypeChecked,
+    ...tseslint.configs.stylisticTypeChecked,
+    {
+      languageOptions: {
+        parserOptions: {
+          projectService: true,
+          tsconfigRootDir: dirname,
+        },
+      },
+    },
+    {
+      rules: {
+        '@typescript-eslint/no-unused-vars': [
+          'error',
+          {
+            argsIgnorePattern: '^_',
+            varsIgnorePattern: '^_',
+          },
+        ],
+        '@typescript-eslint/consistent-type-imports': 'error',
+        '@typescript-eslint/no-import-type-side-effects': 'error',
+      },
+    },
+    {
+      ignores: ['dist/', 'node_modules/', '*.js', ...ignores],
+    },
+  );
+}

package/eslint/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared typings for the @burdenoff/toolchain ESLint profiles. Each profile
+ * module (`@burdenoff/toolchain/eslint/<profile>`) has its own .d.ts that
+ * re-uses these types.
+ */
+import type { Linter } from 'eslint';
+
+export type FlatConfig = Linter.Config;
+export type FlatConfigArray = Linter.Config[];
+
+export type RuleSeverity = 'error' | 'warn' | 'off';
+
+export interface BackendOptions {
+  /** tsconfig used for type-aware rules, relative to `dirname`. Default './tsconfig.eslint.json'. */
+  project?: string;
+  /** Extra ignore globs appended to the defaults. */
+  ignores?: string[];
+}
+
+export interface GatewayOptions {
+  ignores?: string[];
+}
+
+export interface ReactOptions {
+  ignores?: string[];
+  additionalRules?: Linter.RulesRecord;
+  /** Severity of the raw-colour / palette-class guard. Default 'error'. */
+  rawColors?: RuleSeverity;
+}
+
+export interface NodeOptions {
+  ignores?: string[];
+  globals?: Linter.Globals;
+  rules?: Linter.RulesRecord;
+}
+
+export type BrowserOptions = NodeOptions;

package/eslint/node.d.ts

@@ -0,0 +1,5 @@
+import type { FlatConfigArray, NodeOptions } from './index.js';
+
+export type { NodeOptions };
+export declare function createNodeConfig(options?: NodeOptions): FlatConfigArray;
+export default createNodeConfig;