@devopsplaybook.io/common-utils 1.9.2 → 1.10.0-beta.22.53149f9

package/.github/workflows/main-build.yml

@@ -11,6 +11,7 @@ jobs:
     uses: devopsplaybook-io/common-utils/.github/workflows/reusable-npm-merge.yml@main
     with:
       npm_package_name: "@devopsplaybook.io/common-utils"
+      node_version: "22"
     secrets:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       QUALITY_DASHBOARD_URL: ${{ secrets.QUALITY_DASHBOARD_URL }}

package/.github/workflows/pr-check.yml

@@ -20,6 +20,7 @@ jobs:
     uses: devopsplaybook-io/common-utils/.github/workflows/reusable-npm-pr.yml@main
     with:
       npm_package_name: "@devopsplaybook.io/common-utils"
+      node_version: "22"
     secrets:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       QUALITY_DASHBOARD_URL: ${{ secrets.QUALITY_DASHBOARD_URL }}

package/.github/workflows/reusable-npm-merge.yml

@@ -7,7 +7,7 @@ on:
         description: "Node.js version to use"
         required: false
         type: string
-        default: "18"
+        default: "22"
       npm_package_name:
         description: "NPM package name (e.g. @devopsplaybook.io/otel-utils)"
         required: true

package/.github/workflows/reusable-npm-pr.yml

@@ -7,7 +7,7 @@ on:
         description: "Node.js version to use"
         required: false
         type: string
-        default: "18"
+        default: "22"
       npm_package_name:
         description: "NPM package name (e.g. @devopsplaybook.io/otel-utils)"
         required: true

package/AGENTS.md

@@ -52,8 +52,8 @@ The weekly update of the shared npm libraries is agent-driven instead: a Kuberne
 ## Key Conventions
 
 - **TypeScript**: Target ES2019, CommonJS output, strict mode enabled, declarations generated.
-- **ESLint**: Uses `typescript-eslint` with `strict` and `stylistic` rule sets. Minimize `eslint-disable` comments; use them only when the type system cannot express the constraint (e.g., `@typescript-eslint/no-explicit-any` for `this as any` dynamic field access in `ConfigBase`).
-- **Tests**: Jest with `ts-jest`. Spec files live next to source (`*.spec.ts`). Run with `npm run test`. The `tsconfig.spec.json` includes jest types.
+- **Linting**: Uses `oxlint` with its default **recommended** preset. Minimize disable comments (`eslint-disable`-style comments are honored by oxlint); use them only when the rule cannot be satisfied (e.g. `no-explicit-any` is not enabled by the recommended preset, so `any` needs no directive).
+- **Tests**: Jest with `@swc/jest` transform (`jsc.target` matches tsconfig ES2019) and `v8` coverage provider. Spec files live next to source (`*.spec.ts`). Run with `npm run test`. The `tsconfig.spec.json` includes jest types; `npm run build` also type-checks specs (`tsc -p tsconfig.spec.json --noEmit`).
 - **No default exports**: All modules use named exports only.
 - **OTel dependency injection**: Every DB module exposes a `*SetOTel(tracer, logger)` function that must be called before `*Init()`. OTel instances are stored as module-level singletons.
 - **Auth modules**: `AuthSetOTel(tracer)` and `UsersDataSetOTel(tracer)` must be called before `AuthInit`. Application scopes are registered through `AuthInit(context, config, allScopes)`; `UsersRoutes` relies on `req.tracerSpanApi` set by the `otel-utils-fastify` hooks.
@@ -68,7 +68,7 @@ The weekly update of the shared npm libraries is agent-driven instead: a Kuberne
 ```bash
 npm install
 npm run build    # tsc -> dist/
-npm run lint     # eslint src (must pass with 0 errors)
+npm run lint     # oxlint src (must pass with 0 errors)
 npm run test     # jest --coverage (all tests must pass)
 ```
 
@@ -91,7 +91,7 @@ All three commands must pass before committing. The CI pipeline (`reusable-npm-m
 
 - **uuid ESM**: `uuid` v14+ ships ESM. In any test that transitively imports `uuid`, add `jest.mock("uuid", () => ({ v4: () => "mock-uuid-1234" }))` to avoid `SyntaxError: Unexpected token 'export'`.
 - **better-sqlite3 is synchronous**: `SqlDbUtils` functions return values directly (not Promises). `PostgresDbUtils` functions return Promises. The `DbUtils` facade returns `number | Promise<number>` depending on the active backend.
-- **eslint-disable placement**: `eslint-disable-next-line` applies to the **immediately following line only**. When disabling a rule inside a function call argument, place the comment directly before the offending expression, not before the function call.
+- **Disable-comment placement**: `eslint-disable-next-line` applies to the **immediately following line only** (oxlint honors these comments too). When disabling a rule inside a function call argument, place the comment directly before the offending expression, not before the function call.
 - **pg callback typing**: Always explicitly type pg callback parameters: `(error: Error | null, result: { rowCount: number | null })`. TypeScript cannot infer these from the overloaded `pool.query` signature.
 
 ## Adopting in Other Projects

package/README.md

@@ -498,7 +498,7 @@ The `.github/workflows/` directory contains **reusable workflows** that other re
 
 | Input              | Required | Default | Description                                               |
 | ------------------ | -------- | ------- | --------------------------------------------------------- |
-| `node_version`     | No       | `"18"`  | Node.js version                                           |
+| `node_version`     | No       | `"22"`  | Node.js version                                           |
 | `npm_package_name` | Yes      | --      | npm package name (e.g. `@devopsplaybook.io/common-utils`) |
 
 | Secret                    | Required | Description                               |
@@ -630,7 +630,7 @@ jobs:
 ```bash
 npm install
 npm run build    # TypeScript compilation -> dist/
-npm run lint     # ESLint (strict + stylistic)
+npm run lint     # oxlint (recommended preset)
 npm run test     # Jest with coverage
 ```
 

package/dist/src/ConfigBase.js

@@ -46,7 +46,6 @@ const path_1 = __importDefault(require("path"));
  * array → JSON.parse, etc.).  When the default is already a string or
  * there is no default, the original string is returned as-is.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function coerceValue(value, defaultValue) {
     if (defaultValue === undefined || defaultValue === null) {
         return value;
@@ -145,7 +144,7 @@ class ConfigBase {
             if (pkg && pkg.version) {
                 this.VERSION = pkg.version;
             }
-            // eslint-disable-next-line @typescript-eslint/no-unused-vars
+            // eslint-disable-next-line no-unused-vars -- catch binding kept so dist/ stays byte-identical to the TS6 build
         }
         catch (_e) {
             // fallback to "1"
@@ -196,7 +195,6 @@ class ConfigBase {
             field: def.field,
             sensitive: (_a = def.sensitive) !== null && _a !== void 0 ? _a : false,
             envAliases: (_b = def.envAliases) !== null && _b !== void 0 ? _b : [],
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             defaultValue: this[def.field],
         });
     }
@@ -208,12 +206,11 @@ class ConfigBase {
      *                When omitted nothing is logged (useful in tests).
      */
     async reload(logger) {
-        // eslint-disable-next-line @typescript-eslint/no-empty-function
         const log = logger !== null && logger !== void 0 ? logger : (() => { });
         let content = {};
         try {
             content = await fse.readJson(this.CONFIG_FILE);
-            // eslint-disable-next-line @typescript-eslint/no-unused-vars
+            // eslint-disable-next-line no-unused-vars -- catch binding kept so dist/ stays byte-identical to the TS6 build
         }
         catch (_e) {
             // config file is optional – fall back to env + defaults
@@ -244,13 +241,11 @@ class ConfigBase {
             // 3. Apply environment value (full name or alias) if found,
             //    coercing strings to match the default value type
             if (foundValue !== undefined) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
                 this[field] = coerceValue(foundValue, defaultValue);
             }
             // 4. Config file override (environment always wins, but if neither
             //    environment nor alias matched, check config file)
             if (foundValue === undefined && content[field] !== undefined) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
                 this[field] = content[field];
                 from = "config";
             }
@@ -258,9 +253,7 @@ class ConfigBase {
                 log(`Configuration Value: ${field}: ******************** (from ${from})`);
             }
             else {
-                log(
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                `Configuration Value: ${field}: ${this[field]} (from ${from}${usedAlias ? ` via alias` : ""})`);
+                log(`Configuration Value: ${field}: ${this[field]} (from ${from}${usedAlias ? ` via alias` : ""})`);
             }
         }
     }

package/dist/src/DbUtils.js

@@ -75,7 +75,6 @@ async function DbUtilsInit(context, config, sqlDir) {
  * - SQLite: `better-sqlite3` `Database` instance
  * - Postgres: `pg` `Pool` instance
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function DbUtilsGetDatabase() {
     if (databaseType === "postgres") {
         return PostgresDbUtils.PostgresDbUtilsGetPool();

package/dist/src/DbUtilsNoTelemetry.js

@@ -19,9 +19,7 @@ function DbUtilsNoTelemetrySetLogger(loggerIn) {
  *
  * @returns Number of rows inserted.
  */
-function DbUtilsNoTelemetryBatchInsert(tableCols, numCols, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-rows) {
+function DbUtilsNoTelemetryBatchInsert(tableCols, numCols, rows) {
     if (rows.length === 0)
         return 0;
     const rowSQL = `(${Array.from({ length: numCols }, () => "?").join(",")})`;
@@ -40,7 +38,6 @@ function DbUtilsNoTelemetryExecSQL(sql, params = []) {
     if (dbType === "postgres") {
         const pgSql = (0, DbUtils_1.convertToPostgresPlaceholders)(sql);
         return new Promise((resolve, reject) => {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             (0, DbUtils_1.DbUtilsGetDatabase)().query(pgSql, params, (error, result) => {
                 if (error) {
                     logger.error(`SQL INSERT ERROR: ${sql.substring(0, 200)}`, error);
@@ -71,7 +68,6 @@ function DbUtilsNoTelemetryQuerySQL(sql, params = [], debug = false) {
     if (dbType === "postgres") {
         const pgSql = (0, DbUtils_1.convertToPostgresPlaceholders)(sql);
         return new Promise((resolve, reject) => {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             (0, DbUtils_1.DbUtilsGetDatabase)().query(pgSql, params, (error, result) => {
                 if (error) {
                     logger.error(`SQL ERROR: ${sql}`, error);

package/dist/src/LLM.js

@@ -87,7 +87,6 @@ class LLMClient {
             throw new Error("LLM integration disabled (apiKey, apiUrl or model not set)");
         }
         const model = (options === null || options === void 0 ? void 0 : options.model) || this.model;
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         const body = {
             model,
             messages,
@@ -122,7 +121,6 @@ class LLMClient {
     extractErrorMessage(err) {
         var _a, _b, _c;
         if (axios_1.default.isAxiosError(err)) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             const providerMessage = (_c = (_b = (_a = err.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.error) === null || _c === void 0 ? void 0 : _c.message;
             if (providerMessage) {
                 return providerMessage;

package/dist/src/OTelContext.js

@@ -36,7 +36,6 @@ function createOTelContext() {
             }
             return logger;
         },
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         OTelRequestSpan: (req) => req === null || req === void 0 ? void 0 : req.tracerSpanApi,
     };
 }

package/dist/src/PostgresDbUtils.js

@@ -166,9 +166,7 @@ class PostgresSchemaDbUtils {
      *                       otherwise use the runtime pool (default).
      * @returns Number of rows changed.
      */
-    execSQL(context, sql, 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    params = [], useSchemaPool = false) {
+    execSQL(context, sql, params = [], useSchemaPool = false) {
         const span = tracer.startSpan("PostgresSchemaDbUtilsExecSQL", context);
         const pool = useSchemaPool ? this.schemaPool : this.runtimePool;
         if (!pool) {
@@ -219,9 +217,7 @@ class PostgresSchemaDbUtils {
      * Execute a read SQL query with OTel tracing.
      * @returns Array of row objects.
      */
-    querySQL(context, sql, 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    params = [], useSchemaPool = false) {
+    querySQL(context, sql, params = [], useSchemaPool = false) {
         const span = tracer.startSpan("PostgresSchemaDbUtilsQuerySQL", context);
         const pool = useSchemaPool ? this.schemaPool : this.runtimePool;
         if (!pool) {
@@ -247,9 +243,7 @@ class PostgresSchemaDbUtils {
     /**
      * Run a callback inside a transaction.
      */
-    async transaction(context, 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    callback, useSchemaPool = false) {
+    async transaction(context, callback, useSchemaPool = false) {
         const span = tracer.startSpan("PostgresSchemaDbUtilsTransaction", context);
         const pool = useSchemaPool ? this.schemaPool : this.runtimePool;
         if (!pool) {
@@ -294,15 +288,12 @@ class PostgresSchemaDbUtils {
         this.moduleLogger.info("All database pools closed");
     }
     // -- Internal helpers (schema pool only) ----------------------------------
-    execSQLForSchema(context, sql, 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    params = []) {
+    execSQLForSchema(context, sql, params = []) {
         const span = tracer.startSpan("PostgresSchemaDbUtilsExecSQLForSchema", context);
         if (!this.schemaPool) {
             throw new Error(`Pool not initialized for schema: ${this.schemaName}`);
         }
         return new Promise((resolve, reject) => {
-            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
             this.schemaPool.query(sql, params, (error) => {
                 span.end();
                 if (error) {
@@ -322,11 +313,9 @@ class PostgresSchemaDbUtils {
                 throw new Error(`Pool not initialized for schema: ${this.schemaName}`);
             }
             return new Promise((resolve, reject) => {
-                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
                 this.schemaPool.query(sql, (error) => {
                     span.end();
                     if (error) {
-                        // eslint-disable-next-line @typescript-eslint/no-explicit-any
                         if (error.code === "ENOENT") {
                             resolve();
                         }
@@ -341,22 +330,18 @@ class PostgresSchemaDbUtils {
             });
         }
         catch (error) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             if (error.code === "ENOENT") {
                 return;
             }
             throw error;
         }
     }
-    querySQLForSchema(context, sql, 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    params = []) {
+    querySQLForSchema(context, sql, params = []) {
         const span = tracer.startSpan("PostgresSchemaDbUtilsQuerySQLForSchema", context);
         if (!this.schemaPool) {
             throw new Error(`Pool not initialized for schema: ${this.schemaName}`);
         }
         return new Promise((resolve, reject) => {
-            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
             this.schemaPool.query(sql, params, (error, result) => {
                 span.end();
                 if (error) {

package/dist/src/users/Auth.js

@@ -104,7 +104,6 @@ async function AuthGenerateJWT(user) {
  * mirroring the owning user's live role and scopes is built (valid until
  * the token is revoked).
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function jwtDecodeCached(req) {
     if (req._jwtPayload) {
         return req._jwtPayload;
@@ -131,7 +130,6 @@ async function jwtDecodeCached(req) {
  * Permissions are read from the user record at resolution time, so
  * role/scope changes apply to existing tokens immediately.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function resolveApiToken(authorizationHeader) {
     const token = authorizationHeader.split(" ")[1];
     if (!token) {
@@ -140,7 +138,6 @@ async function resolveApiToken(authorizationHeader) {
     const span = tracer.startSpan("AuthResolveApiToken");
     const tokenHash = (0, crypto_1.createHash)("sha256").update(token).digest("hex");
     const apiToken = await (0, UsersApiTokensData_1.UsersApiTokensDataGetByTokenHash)(span, tokenHash);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let payload = null;
     if (apiToken) {
         const user = await (0, UsersData_1.UsersDataGet)(span, apiToken.userId);
@@ -156,17 +153,12 @@ async function resolveApiToken(authorizationHeader) {
     span.end();
     return payload;
 }
-async function AuthMustBeAuthenticated(
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-req, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-res) {
+async function AuthMustBeAuthenticated(req, res) {
     if (!(await jwtDecodeCached(req))) {
         res.status(403).send({ error: "Access Denied" });
         throw new Error("Access Denied");
     }
 }
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function AuthMustBeAdmin(req, res) {
     const info = await jwtDecodeCached(req);
     if ((info === null || info === void 0 ? void 0 : info.role) === "admin") {
@@ -175,11 +167,7 @@ async function AuthMustBeAdmin(req, res) {
     res.status(403).send({ error: "Access Denied" });
     throw new Error("Access Denied");
 }
-async function AuthHasScope(
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-req, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-res, scope) {
+async function AuthHasScope(req, res, scope) {
     const info = await jwtDecodeCached(req);
     if (!info) {
         res.status(403).send({ error: "Access Denied" });
@@ -195,7 +183,6 @@ res, scope) {
     res.status(403).send({ error: "Access Denied" });
     throw new Error("Access Denied");
 }
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function AuthGetUserSession(req) {
     const userSession = { isAuthenticated: false };
     const info = await jwtDecodeCached(req);

package/dist/src/users/User.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.User = void 0;
 const uuid_1 = require("uuid");
 class User {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     static fromJson(json) {
         if (!json) {
             return null;
@@ -34,7 +33,6 @@ class User {
         this.scopes = [...User.DEFAULT_SCOPES];
         this.id = (0, uuid_1.v4)();
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     toJson() {
         return {
             id: this.id,
@@ -44,7 +42,6 @@ class User {
             scopes: this.scopes,
         };
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     toTransportJson() {
         return {
             id: this.id,

package/dist/src/users/UserApiToken.js

@@ -12,7 +12,6 @@ const uuid_1 = require("uuid");
  */
 class UserApiToken {
     //
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     static fromJson(json) {
         if (!json) {
             return null;
@@ -28,7 +27,6 @@ class UserApiToken {
     constructor() {
         this.id = (0, uuid_1.v4)();
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     toJson() {
         return {
             id: this.id,
@@ -39,7 +37,6 @@ class UserApiToken {
         };
     }
     // Transport representation: never exposes the token hash.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     toTransportJson() {
         return {
             id: this.id,

package/dist/src/users/UsersApiTokensData.js

@@ -71,7 +71,6 @@ async function UsersApiTokensDataDeleteByUser(context, userId) {
     span.end();
 }
 // Private Functions
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function fromRaw(tokenRaw) {
     const apiToken = new UserApiToken_1.UserApiToken();
     apiToken.id = tokenRaw.id;

package/dist/src/users/UsersData.js

@@ -86,7 +86,6 @@ async function UsersDataDelete(context, id) {
     span.end();
 }
 // Private Functions
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function fromRaw(userRaw) {
     const user = new User_1.User();
     user.id = userRaw.id;

package/dist/src/users/UsersRoutes.js

@@ -13,7 +13,6 @@ const UsersApiTokensData_1 = require("./UsersApiTokensData");
  * Retrieves the OTel span attached to the request by the
  * `@devopsplaybook.io/otel-utils-fastify` hooks.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function requestSpan(req) {
     return req === null || req === void 0 ? void 0 : req.tracerSpanApi;
 }

package/jest.config.js

@@ -2,12 +2,15 @@ module.exports = {
   moduleFileExtensions: ["ts", "js"],
   transform: {
     "^.+\\.(ts|tsx)$": [
-      "ts-jest",
+      "@swc/jest",
       {
-        tsconfig: "tsconfig.spec.json",
+        jsc: {
+          target: "es2019",
+        },
       },
     ],
   },
+  coverageProvider: "v8",
   testMatch: ["/**/src/**/*.spec.(ts|js)"],
   testPathIgnorePatterns: ["/node_modules/", "/dist/"],
   testEnvironment: "node",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devopsplaybook.io/common-utils",
-  "version": "1.9.2",
+  "version": "1.10.0-beta.22.53149f9",
   "description": "Shared utility modules for devopsplaybook.io projects (DB, Config, OTel context, auth/users, notifications, LLM, system helpers)",
   "keywords": [
     "Open Telemetry",
@@ -21,8 +21,8 @@
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
-    "build": "tsc",
-    "lint": "eslint src",
+    "build": "tsc && tsc -p tsconfig.spec.json --noEmit",
+    "lint": "oxlint src",
     "test": "jest --coverage"
   },
   "dependencies": {
@@ -39,7 +39,8 @@
     "uuid": "^14.0.2"
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
+    "@swc/core": "^1.16.2",
+    "@swc/jest": "^0.2.39",
     "@types/bcrypt": "^6.0.0",
     "@types/better-sqlite3": "^9.6.0",
     "@types/fs-extra": "^11.0.4",
@@ -48,12 +49,9 @@
     "@types/node": "^26.6.2",
     "@types/pg": "^8.23.1",
     "@types/uuid": "^11.0.0",
-    "eslint": "^10.11.0",
     "jest": "^30.5.2",
-    "ts-jest": "^29.4.12",
-    "ts-node": "^10.9.2",
-    "typescript": "^6.0.3",
-    "typescript-eslint": "^8.70.0"
+    "oxlint": "^1.83.0",
+    "typescript": "^7.0.2"
   },
   "publishConfig": {
     "access": "public"

package/src/ConfigBase.ts

@@ -59,7 +59,6 @@ export interface ConfigCommonInterface
  * array → JSON.parse, etc.).  When the default is already a string or
  * there is no default, the original string is returned as-is.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function coerceValue(value: string, defaultValue: any): any {
   if (defaultValue === undefined || defaultValue === null) {
     return value;
@@ -155,7 +154,6 @@ export abstract class ConfigBase implements ConfigCommonInterface {
     field: string;
     sensitive: boolean;
     envAliases: string[];
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     defaultValue: any;
   }[] = [];
 
@@ -173,7 +171,7 @@ export abstract class ConfigBase implements ConfigCommonInterface {
       if (pkg && pkg.version) {
         this.VERSION = pkg.version;
       }
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      // eslint-disable-next-line no-unused-vars -- catch binding kept so dist/ stays byte-identical to the TS6 build
     } catch (_e) {
       // fallback to "1"
     }
@@ -224,7 +222,6 @@ export abstract class ConfigBase implements ConfigCommonInterface {
       field: def.field,
       sensitive: def.sensitive ?? false,
       envAliases: def.envAliases ?? [],
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       defaultValue: (this as any)[def.field],
     });
   }
@@ -237,12 +234,11 @@ export abstract class ConfigBase implements ConfigCommonInterface {
    *                When omitted nothing is logged (useful in tests).
    */
   public async reload(logger?: (message: string) => void): Promise<void> {
-    // eslint-disable-next-line @typescript-eslint/no-empty-function
     const log = logger ?? (() => {});
     let content: Record<string, unknown> = {};
     try {
       content = await fse.readJson(this.CONFIG_FILE);
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      // eslint-disable-next-line no-unused-vars -- catch binding kept so dist/ stays byte-identical to the TS6 build
     } catch (_e) {
       // config file is optional – fall back to env + defaults
     }
@@ -277,14 +273,12 @@ export abstract class ConfigBase implements ConfigCommonInterface {
       // 3. Apply environment value (full name or alias) if found,
       //    coercing strings to match the default value type
       if (foundValue !== undefined) {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         (this as any)[field] = coerceValue(foundValue, defaultValue);
       }
 
       // 4. Config file override (environment always wins, but if neither
       //    environment nor alias matched, check config file)
       if (foundValue === undefined && content[field] !== undefined) {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         (this as any)[field] = content[field];
         from = "config";
       }
@@ -295,7 +289,6 @@ export abstract class ConfigBase implements ConfigCommonInterface {
         );
       } else {
         log(
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any
           `Configuration Value: ${field}: ${(this as any)[field]} (from ${from}${usedAlias ? ` via alias` : ""})`,
         );
       }

package/src/DbUtils.ts

@@ -53,7 +53,6 @@ export async function DbUtilsInit(
  * - SQLite: `better-sqlite3` `Database` instance
  * - Postgres: `pg` `Pool` instance
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 export function DbUtilsGetDatabase(): any {
   if (databaseType === "postgres") {
     return PostgresDbUtils.PostgresDbUtilsGetPool();
@@ -99,7 +98,6 @@ export function DbUtilsQuerySQL(
   sql: string,
   params: unknown[] = [],
   debug = false,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
 ): any[] | Promise<any[]> {
   if (databaseType === "postgres") {
     return PostgresDbUtils.PostgresDbUtilsQuerySQL(

package/src/DbUtilsNoTelemetry.spec.ts

@@ -4,7 +4,6 @@ import {
   DbUtilsNoTelemetryQuerySQL,
 } from "./DbUtilsNoTelemetry";
 
-/* eslint-disable @typescript-eslint/no-unsafe-function-type */
 
 // Shared mock DB handle – defined BEFORE jest.mock factory so it's hoisted correctly.
 // We use jest.fn() at module scope; the mock factory captures the same reference.
@@ -38,11 +37,9 @@ beforeAll(() => {
     error: jest.fn(),
     info: jest.fn(),
     warn: jest.fn(),
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
   } as any;
   DbUtilsNoTelemetryModule.DbUtilsNoTelemetrySetLogger({
     createModuleLogger: () => mockLogger,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
   } as any);
 });
 
@@ -62,7 +59,6 @@ describe("DbUtilsNoTelemetryBatchInsert", () => {
     mockPrepare.mockReturnValue({
       run: jest.fn().mockReturnValue({ changes: 2 }),
       all: jest.fn(),
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
     } as any);
 
     const rows = [
@@ -83,7 +79,6 @@ describe("DbUtilsNoTelemetryExecSQL (sqlite)", () => {
     mockPrepare.mockReturnValue({
       run: jest.fn().mockReturnValue({ changes: 3 }),
       all: jest.fn(),
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
     } as any);
 
     const result = DbUtilsNoTelemetryExecSQL("INSERT INTO t (c) VALUES (?)", [
@@ -135,7 +130,6 @@ describe("DbUtilsNoTelemetryQuerySQL (sqlite)", () => {
     mockPrepare.mockReturnValue({
       run: jest.fn(),
       all: jest.fn().mockReturnValue(expectedRows),
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
     } as any);
 
     const result = DbUtilsNoTelemetryQuerySQL("SELECT * FROM t");

package/src/DbUtilsNoTelemetry.ts

@@ -24,7 +24,6 @@ export function DbUtilsNoTelemetrySetLogger(loggerIn: StandardLogger): void {
 export function DbUtilsNoTelemetryBatchInsert(
   tableCols: string,
   numCols: number,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   rows: any[][],
 ): number | Promise<number> {
   if (rows.length === 0) return 0;
@@ -50,7 +49,6 @@ export function DbUtilsNoTelemetryExecSQL(
   if (dbType === "postgres") {
     const pgSql = convertToPostgresPlaceholders(sql);
     return new Promise((resolve, reject) => {
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       (DbUtilsGetDatabase() as any).query(
         pgSql,
         params,
@@ -87,7 +85,6 @@ export function DbUtilsNoTelemetryQuerySQL(
   sql: string,
   params: unknown[] = [],
   debug = false,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
 ): any[] | Promise<any[]> {
   if (debug) {
     console.log(sql);
@@ -96,7 +93,6 @@ export function DbUtilsNoTelemetryQuerySQL(
   if (dbType === "postgres") {
     const pgSql = convertToPostgresPlaceholders(sql);
     return new Promise((resolve, reject) => {
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       (DbUtilsGetDatabase() as any).query(
         pgSql,
         params,

package/src/LLM.ts

@@ -159,7 +159,6 @@ export class LLMClient {
     }
 
     const model = options?.model || this.model;
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const body: Record<string, any> = {
       model,
       messages,
@@ -195,7 +194,6 @@ export class LLMClient {
    */
   private extractErrorMessage(err: unknown): string {
     if (axios.isAxiosError(err)) {
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       const providerMessage = (err.response?.data as any)?.error?.message;
       if (providerMessage) {
         return providerMessage;

package/src/OTelContext.ts

@@ -20,7 +20,6 @@ export interface OTelContext {
    * Retrieves the span previously attached to a request object.
    * Equivalent to `req.tracerSpanApi`.
    */
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   OTelRequestSpan: (req: any) => Span | undefined;
 }
 
@@ -59,7 +58,6 @@ export function createOTelContext(): OTelContext {
       }
       return logger;
     },
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     OTelRequestSpan: (req: any) => req?.tracerSpanApi as Span | undefined,
   };
 }

package/src/PostgresDbUtils.spec.ts

@@ -1,4 +1,3 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
 
 // Mock pg before imports
 const mockQuery = jest.fn();
@@ -58,7 +57,6 @@ describe("PostgresDbUtils", () => {
   beforeEach(() => {
     jest.clearAllMocks();
     jest.isolateModules(() => {
-      // eslint-disable-next-line @typescript-eslint/no-require-imports
       PostgresDbUtils = require("./PostgresDbUtils");
     });
     PostgresDbUtils.PostgresDbUtilsSetOTel(

package/src/PostgresDbUtils.ts

@@ -181,7 +181,6 @@ export class PostgresSchemaDbUtils {
   execSQL(
     context: Span,
     sql: string,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     params: any[] = [],
     useSchemaPool = false,
   ): Promise<number> {
@@ -257,10 +256,8 @@ export class PostgresSchemaDbUtils {
   querySQL(
     context: Span,
     sql: string,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     params: any[] = [],
     useSchemaPool = false,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
   ): Promise<any[]> {
     const span = tracer.startSpan("PostgresSchemaDbUtilsQuerySQL", context);
     const pool = useSchemaPool ? this.schemaPool : this.runtimePool;
@@ -300,7 +297,6 @@ export class PostgresSchemaDbUtils {
    */
   async transaction(
     context: Span,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     callback: (client: any) => Promise<void>,
     useSchemaPool = false,
   ): Promise<void> {
@@ -370,7 +366,6 @@ export class PostgresSchemaDbUtils {
   private execSQLForSchema(
     context: Span,
     sql: string,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     params: any[] = [],
   ): Promise<void> {
     const span = tracer.startSpan(
@@ -383,7 +378,6 @@ export class PostgresSchemaDbUtils {
     }
 
     return new Promise((resolve, reject) => {
-      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
       this.schemaPool!.query(sql, params, (error: Error | null) => {
         span.end();
         if (error) {
@@ -411,11 +405,9 @@ export class PostgresSchemaDbUtils {
       }
 
       return new Promise((resolve, reject) => {
-        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
         this.schemaPool!.query(sql, (error: Error | null) => {
           span.end();
           if (error) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             if ((error as any).code === "ENOENT") {
               resolve();
             } else {
@@ -427,7 +419,6 @@ export class PostgresSchemaDbUtils {
         });
       });
     } catch (error) {
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
       if ((error as any).code === "ENOENT") {
         return;
       }
@@ -438,9 +429,7 @@ export class PostgresSchemaDbUtils {
   private querySQLForSchema(
     context: Span,
     sql: string,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     params: any[] = [],
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
   ): Promise<any[]> {
     const span = tracer.startSpan(
       "PostgresSchemaDbUtilsQuerySQLForSchema",
@@ -452,7 +441,6 @@ export class PostgresSchemaDbUtils {
     }
 
     return new Promise((resolve, reject) => {
-      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
       this.schemaPool!.query(
         sql,
         params,
@@ -616,7 +604,6 @@ export function PostgresDbUtilsQuerySQL(
   sql: string,
   params: unknown[] = [],
   debug = false,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
 ): Promise<any[]> {
   const span = tracer.startSpan("PostgresDbUtilsQuerySQL", context);
   if (debug) {

package/src/SqlDbUtils.spec.ts

@@ -1,4 +1,3 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
 
 // Mock dependencies before imports
 jest.mock("better-sqlite3", () => {
@@ -64,7 +63,6 @@ describe("SqlDbUtils", () => {
     jest.clearAllMocks();
     // Re-import to reset module state
     jest.isolateModules(() => {
-      // eslint-disable-next-line @typescript-eslint/no-require-imports
       SqlDbUtils = require("./SqlDbUtils");
     });
     SqlDbUtils.SqlDbUtilsSetOTel(mockTracer as any, mockLogger as any);
@@ -77,7 +75,6 @@ describe("SqlDbUtils", () => {
   });
 
   it("SqlDbUtilsExecSQL should call prepare and run", () => {
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
     const Database = require("better-sqlite3");
     const db = new Database("/tmp/test.db");
     const mockRun = jest.fn().mockReturnValue({ changes: 5 });

package/src/SqlDbUtils.ts

@@ -133,7 +133,6 @@ export function SqlDbUtilsQuerySQL(
   sql: string,
   params: unknown[] = [],
   debug = false,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
 ): any[] {
   const span = tracer.startSpan("SqlDbUtilsQuerySQL", context);
   if (debug) {

package/src/users/Auth.ts

@@ -85,7 +85,6 @@ export async function AuthGenerateJWT(user: User): Promise<string> {
  * mirroring the owning user's live role and scopes is built (valid until
  * the token is revoked).
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function jwtDecodeCached(req: any): Promise<any | null> {
   if (req._jwtPayload) {
     return req._jwtPayload;
@@ -115,7 +114,6 @@ async function jwtDecodeCached(req: any): Promise<any | null> {
  * Permissions are read from the user record at resolution time, so
  * role/scope changes apply to existing tokens immediately.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function resolveApiToken(authorizationHeader: string): Promise<any | null> {
   const token = authorizationHeader.split(" ")[1];
   if (!token) {
@@ -124,7 +122,6 @@ async function resolveApiToken(authorizationHeader: string): Promise<any | null>
   const span = tracer.startSpan("AuthResolveApiToken");
   const tokenHash = createHash("sha256").update(token).digest("hex");
   const apiToken = await UsersApiTokensDataGetByTokenHash(span, tokenHash);
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   let payload: any | null = null;
   if (apiToken) {
     const user = await UsersDataGet(span, apiToken.userId);
@@ -142,9 +139,7 @@ async function resolveApiToken(authorizationHeader: string): Promise<any | null>
 }
 
 export async function AuthMustBeAuthenticated(
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   req: any,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   res: any,
 ): Promise<void> {
   if (!(await jwtDecodeCached(req))) {
@@ -153,7 +148,6 @@ export async function AuthMustBeAuthenticated(
   }
 }
 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 export async function AuthMustBeAdmin(req: any, res: any): Promise<void> {
   const info = await jwtDecodeCached(req);
   if (info?.role === "admin") {
@@ -164,9 +158,7 @@ export async function AuthMustBeAdmin(req: any, res: any): Promise<void> {
 }
 
 export async function AuthHasScope(
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   req: any,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   res: any,
   scope: UserScope,
 ): Promise<void> {
@@ -186,7 +178,6 @@ export async function AuthHasScope(
   throw new Error("Access Denied");
 }
 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 export async function AuthGetUserSession(req: any): Promise<UserSession> {
   const userSession: UserSession = { isAuthenticated: false };
   const info = await jwtDecodeCached(req);

package/src/users/User.ts

@@ -19,7 +19,6 @@ export class User {
   /** Full scope set of the host application, registered via `AuthInit`. */
   public static ALL_SCOPES: UserScope[] = [];
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public static fromJson(json: any): User | null {
     if (!json) {
       return null;
@@ -55,7 +54,6 @@ export class User {
     this.id = uuidv4();
   }
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public toJson(): any {
     return {
       id: this.id,
@@ -66,7 +64,6 @@ export class User {
     };
   }
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public toTransportJson(): any {
     return {
       id: this.id,

package/src/users/UserApiToken.ts

@@ -10,7 +10,6 @@ import { v4 as uuidv4 } from "uuid";
  */
 export class UserApiToken {
   //
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public static fromJson(json: any): UserApiToken | null {
     if (!json) {
       return null;
@@ -34,7 +33,6 @@ export class UserApiToken {
     this.id = uuidv4();
   }
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public toJson(): any {
     return {
       id: this.id,
@@ -46,7 +44,6 @@ export class UserApiToken {
   }
 
   // Transport representation: never exposes the token hash.
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   public toTransportJson(): any {
     return {
       id: this.id,

package/src/users/UsersApiTokensData.ts

@@ -100,7 +100,6 @@ export async function UsersApiTokensDataDeleteByUser(
 
 // Private Functions
 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function fromRaw(tokenRaw: any): UserApiToken {
   const apiToken = new UserApiToken();
   apiToken.id = tokenRaw.id;

package/src/users/UsersData.ts

@@ -109,7 +109,6 @@ export async function UsersDataDelete(
 
 // Private Functions
 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function fromRaw(userRaw: any): User {
   const user = new User();
   user.id = userRaw.id;

package/src/users/UsersRoutes.ts

@@ -30,7 +30,6 @@ import {
  * Retrieves the OTel span attached to the request by the
  * `@devopsplaybook.io/otel-utils-fastify` hooks.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function requestSpan(req: any): Span | undefined {
   return req?.tracerSpanApi;
 }

package/tsconfig.spec.json

@@ -3,5 +3,6 @@
   "compilerOptions": {
     "types": ["jest", "node"]
   },
-  "include": ["src/**/*.spec.ts"]
+  "include": ["src/**/*.spec.ts"],
+  "exclude": []
 }

package/eslint.config.mjs

@@ -1,11 +0,0 @@
-// @ts-check
-
-import eslint from "@eslint/js";
-import tseslint from "typescript-eslint";
-
-export default tseslint.config(
-  { ignores: ["dist/", "node_modules/"] },
-  eslint.configs.recommended,
-  ...tseslint.configs.strict,
-  ...tseslint.configs.stylistic,
-);