@fitzzero/quickdraw-lint 5.1.1 → 5.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fitzzero/quickdraw-lint",
-  "version": "5.1.1",
+  "version": "5.1.2",
   "description": "oxlint plugin, base config and baseline command for quickdraw apps",
   "keywords": [
     "lint",

package/plugin/rules/no-todo-schema.mjs

@@ -116,7 +116,7 @@ export default {
       keylessInput:
         "`todoSchema()` is a placeholder left by the 4.x migration: it validates nothing, so any value passes as its type. " +
         "Without `keys`, it also hides this input's keys from defineService's id-reach (rowless) check, " +
-        "which refuses an `id` input under an access form that checks no row; give it keys " +
+        "which refuses an `id` input under an access form that asks the policy nothing about the row it names; give it keys " +
         '(`todoSchema<T>({ keys: ["id", ...] })`) until a real schema (Zod 4.2 or later) replaces it.',
     },
     schema: [],

package/plugin/rules/no-v4-api.mjs

@@ -17,7 +17,7 @@ const MCP = "@fitzzero/quickdraw-core/server/mcp";
 const METHODS =
   "Declare methods in a contract (`defineContract(name, { methods: { name: query({ input, output }) } })`), type them with `InputOf<C, M>` and `OutputOf<C, M>`, and implement them as `{ access, handler({ input, ctx, db }) }`.";
 const CHANNELS =
-  "Declare channels in the contract (`channels: { name: { payload } }`), handle them in `qd.defineService(contract, { channels })`, and send with `qd.<service>.<channel>.useChannel()`.";
+  "Declare channels in the contract (`channels: { name: { payload, requires } }`, where `requires` names what the sender must hold, such as `{ room }`), handle them in `qd.defineService(contract, { channels })`, and send with `qd.<service>.<channel>.useChannel()`.";
 const EVENTS =
   "Declare room events in the contract (`events: { name: { payload } }`), send them with `ctx.rooms.emit(room, contract, event, payload)`, and listen with `qd.<service>.<event>.useEvent(handler)`.";
 const ADMIN_TYPES =