@gost-kit/eslint-config-svelte 0.0.0-stage → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,52 @@
+# @gost-kit/eslint-config-svelte
+
+## 0.2.0
+
+### Minor Changes
+
+- d6883b7: Add the typed require-feature-state-selector architecture rule for GOST Store
+  and explicit local Svelte raw state. Enable it in typed Svelte config scopes,
+  with conservative selector autofix and V2/V3 collision-safe names.
+
+### Patch Changes
+
+- 11cc6af: Add opt-in no-component-state diagnostics for state and bindable rune creation,
+  with binding-aware empty bind:this ref exceptions and no autofix. Keep the
+  public Svelte factory policy unchanged; consumers select application and UI-Kit
+  scopes with explicit ESLint overrides.
+
+  Reuse value-namespace rune resolution in the existing selector rule so type-only
+  names/imports do not hide derived or raw-state diagnostics. Consolidate rune and
+  Svelte script matching; document explicit plugin registration for extra JS scopes.
+
+- 6c74d68: Expose a composed TypeScript policy for framework adapters without an ESLint
+  reflection instance. Cover JSX/TSX with general checks and remove unused direct
+  config dependencies. Reject ambiguous combined Content-Type values while
+  preserving commas inside quoted parameters.
+- 730b73a: Add opt-in single-intent-dispatch for typed business UI callbacks, using public
+  Dispatch declaration/signature provenance. Diagnose multiple dispatches or
+  conditional intent selection without autofix. Keep the shared Svelte factory
+  default off and allow consumer UI-Kit exclusions through ordinary overrides.
+
+  Include optional calls/accesses that gate Dispatch in conditional-delivery
+  diagnostics, without treating unrelated optional data reads as dispatch gates.
+  Document the on-prefix and whole-handler syntactic-policy boundaries explicitly.
+
+- Updated dependencies [11cc6af]
+- Updated dependencies [d6883b7]
+- Updated dependencies [6c74d68]
+- Updated dependencies [730b73a]
+  - @gost-kit/eslint-plugin@0.1.0
+  - @gost-kit/eslint-config@0.2.0
+
+## 0.1.0
+
+### Minor Changes
+
+- 11af11e: Introduce an independently versioned Svelte 5 ESLint configuration with the
+  shared JavaScript/TypeScript baseline and explicit component/rune policies.
+
+### Patch Changes
+
+- Updated dependencies [656024a]
+  - @gost-kit/eslint-config@0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anton Smolko
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,122 @@
-# Temporary Holding Version
+# @gost-kit/eslint-config-svelte
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Shared Svelte 5 ESLint configuration, including the complete
+`@gost-kit/eslint-config` JavaScript/TypeScript baseline. Independently versioned;
+consult package.json and CHANGELOG.md for the version. Install alongside
+the required peer dependencies.
+
+Requires Node ^26.0.0, ESLint ^10.14.0, TypeScript ^5.9.3 and Svelte ^5.57.2.
+The pinned tested combination uses ESLint 10.14.0, TypeScript 5.9.3, Svelte
+5.57.2, eslint-plugin-svelte 3.24.0 and svelte-eslint-parser 1.10.1.
+
+## Usage
+
+Install this package, ESLint, TypeScript and Svelte as development dependencies.
+The common config comes through this package's dependency. In `eslint.config.mjs`:
+
+```js
+import { createSvelteConfig } from '@gost-kit/eslint-config-svelte';
+import globals from 'globals';
+
+export default [
+  ...(await createSvelteConfig({ tsconfigRootDir: import.meta.dirname })),
+  {
+    files: ['src/**/*.ts', 'src/**/*.svelte'],
+    languageOptions: { globals: globals.browser },
+  },
+];
+```
+
+Install `globals` explicitly if using it. The root must be an absolute consumer
+project path. Supply a tsconfig covering authored TypeScript and Svelte files.
+Type-aware checks report missing/incompatible projects; plain JavaScript does
+not require a tsconfig. Component scripts use TypeScript (`lang="ts"`); components
+without a script are permitted. TS/JS rune modules are supported. Globals are
+not supplied for browser, Node or test environments: scope them in the consumer.
+
+The asynchronous factory consumes the public `createTypeScriptPolicy` export
+from `@gost-kit/eslint-config`. It does not instantiate ESLint, resolve a synthetic
+filename or depend on private config names. It writes no files, invokes no application code and does not require
+a placeholder source file. Config/compiler options remain consumer overrides,
+for example `languageOptions.parserOptions.svelteConfig` for component files.
+Do not append the common factory again: it is already included.
+
+## Rules and boundaries
+
+The [Svelte rule inventory](RULES.md) records every enabled framework rule and
+its options. The [shared inventory](../eslint-config/RULES.md) describes inherited
+JS/TS checks; in an installed package consult the README/RULES of
+`@gost-kit/eslint-config`. All enabled checks are errors, including in tests.
+No blanket test exception or SvelteKit-only rule set is enabled.
+
+Keys are required for each blocks, but upstream `valid-each-key` does not prove
+uniqueness/stability or ban index keys. `no-unused-props` supports spread/forwarding;
+fixtures verify that forwarding declared props does not produce false positives.
+Simple derived suggestions do not establish equivalence of arbitrary effects.
+The `no-ignored-unsubscribe` check is syntactic: an ignored direct `.subscribe()`
+call is reported even when it belongs to another API with that method name.
+Use a documented targeted exception when that API needs no cleanup; the rule does
+not establish actual cleanup/lifecycle correctness. `no-store-async` concerns
+standard Svelte store callbacks, not application API effects.
+
+Framework-independent correctness, arrow bodies, imports and spacing apply inside
+component scripts. Svelte formatting is delegated to Prettier; this config does
+not execute the formatter. Use `@gost-kit/prettier-config` with
+`prettier-plugin-svelte` in the consuming project's Prettier config.
+
+The bundled `@gost-kit/eslint-plugin` enables
+`gost/require-feature-state-selector` on typed components and `.svelte.ts`.
+It recognizes public GOST Store state and explicit local `$state.raw` bindings;
+select the branch with `$derived` before passing it to a reactive computation.
+Simple cases support conservative autofix with V2/V3 name collision suffixes.
+See the installed plugin's RULES.md or the [source inventory](../eslint-plugin/RULES.md)
+for exact supported forms and limitations. JS-script/stateless components are skipped;
+mixed components check only the scripts marked `lang="ts"`.
+The typed architecture rule is not enabled for `.svelte.js`.
+
+The bundled `gost/no-component-state` rule is off by default. Enable it for
+application components and exclude independent UI components with ordinary
+ESLint overrides, as shown in the plugin inventory. It diagnoses direct
+`$state`, `$state.raw` and `$bindable` creation, allowing simple empty `bind:this`
+refs. It has no autofix and does not analyze all mutations. The repository's
+private adapter explicitly enables it for `src/**/*.svelte`; the public factory
+does not impose that ownership policy.
+
+The bundled `gost/single-intent-dispatch` rule is also off by default. It checks
+real GOST Dispatch calls in typed instance callbacks passed through `on*` props
+or legacy events: one intent per handler, without conditional selection. UI-Kit
+owns browser-event adaptation and may opt out through file overrides. This is
+not a blanket browser API detector, and there is no autofix. Consult the plugin
+inventory for supported aliases and scope limits.
+
+Boolean conditions (#18) and presentation computations in derived/template
+expressions (#19) remain separate work. Existing `$state.raw`
+shell bindings and feature selectors remain valid; the Svelte compiler/type
+checker still verifies compilation/accessibility.
+
+## Overrides and verification
+
+Append project overrides after the factory result:
+
+```js
+{
+  files: ['src/content/RichText.svelte'],
+  rules: { 'svelte/no-at-html-tags': 'off' },
+}
+```
+
+An HTML exception still needs a trusted/sanitized source. The rule itself bans
+syntax and does not validate a sanitizer. Keep formatter and linter separate:
+
+```sh
+eslint . --fix
+prettier . --write
+eslint . --max-warnings=0
+prettier . --check
+```
+
+Some lint errors require manual changes. Upgrade deliberately: inspect changes
+in both inherited common policies and the Svelte inventory, run type/component
+checks and tests, and review any output diff. Configuration releases remain
+independent of runtime package versions. Tests and helper fixtures are excluded
+from package artifacts; Svelte is a peer, not an automatically selected UI framework.

package/RULES.md

@@ -0,0 +1,61 @@
+# Svelte rule inventory
+
+Pinned baseline: eslint-plugin-svelte 3.24.0, svelte-eslint-parser 1.10.1,
+Svelte 5.57.2. All selected rules are errors on components and rune modules.
+Common JS/TS policies are inherited, not duplicated here.
+
+| Policy | Rule                                           | Level/options                                              |
+| ------ | ---------------------------------------------- | ---------------------------------------------------------- |
+| S01    | `svelte/no-dupe-else-if-blocks`                | `["error"]`                                                |
+| S02    | `svelte/no-not-function-handler`               | `["error"]`                                                |
+| S03    | `svelte/no-object-in-text-mustaches`           | `["error"]`                                                |
+| S04    | `svelte/require-each-key`                      | `["error"]`                                                |
+| S04    | `svelte/valid-each-key`                        | `["error"]`                                                |
+| S05    | `svelte/button-has-type`                       | `["error"]`                                                |
+| S06    | `svelte/no-bind-value-on-checkable-inputs`     | `["error"]`                                                |
+| S07    | `svelte/no-dupe-style-properties`              | `["error"]`                                                |
+| S07    | `svelte/no-shorthand-style-property-overrides` | `["error"]`                                                |
+| S07    | `svelte/no-unknown-style-directive-property`   | `["error"]`                                                |
+| S08    | `svelte/no-conflicting-module-names`           | `["error"]`                                                |
+| S09    | `svelte/no-svelte-internal`                    | `["error"]`                                                |
+| S10    | `svelte/no-at-debug-tags`                      | `["error"]`                                                |
+| S10    | `svelte/no-inspect`                            | `["error"]`                                                |
+| S11    | `svelte/no-unused-svelte-ignore`               | `["error"]`                                                |
+| S11    | `svelte/no-unused-props`                       | `["error"]`                                                |
+| S12    | `svelte/no-unnecessary-state-wrap`             | `["error"]`                                                |
+| S13    | `svelte/prefer-derived-over-derived-by`        | `["error"]`                                                |
+| S14    | `svelte/prefer-writable-derived`               | `["error"]`                                                |
+| AS01   | `svelte/no-at-html-tags`                       | `["error"]`                                                |
+| AS02   | `svelte/block-lang`                            | `["error", {"script":"ts", "enforceScriptPresent":false}]` |
+| AS03   | `svelte/no-store-async`                        | `["error"]`                                                |
+| AS03   | `svelte/no-ignored-unsubscribe`                | `["error"]`                                                |
+
+Infrastructure rules `svelte/comment-directive` and `svelte/system` are inherited
+from Svelte base. The base and Prettier compatibility layers do not implicitly
+activate the recommended Svelte/Kit policy set. Ordinary JS/TS files keep the
+common baseline; selected framework rules target `**/*.svelte`, `**/*.svelte.ts`
+and `**/*.svelte.js` where the upstream rule supports the corresponding syntax.
+
+Not enabled: AS04 DOM/listener restrictions, AS05 SSR browser-global restrictions,
+AS06 prefer-svelte-reactivity, legacy recommended/experimental rules and SvelteKit
+routing rules. Prettier owns HTML/CSS formatting. Architecture checks #18–#19 remain separate outcomes.
+
+The bundled GOST plugin additionally enables `gost/require-feature-state-selector`
+at error for TypeScript component scripts and `.svelte.ts`. It checks public
+Store state and explicit local `$state.raw` before reactive computation calls,
+with limited autofix. JS scripts and `.svelte.js` are excluded from this typed
+rule. See [the plugin inventory](../eslint-plugin/RULES.md) for its boundaries.
+
+Sources: [rule catalog](https://sveltejs.github.io/eslint-plugin-svelte/rules/),
+[configuration boundaries](https://sveltejs.github.io/eslint-plugin-svelte/user-guide/).
+Recalculate configs and review selected/inherited rule changes when upgrading.
+
+`gost/no-component-state` is registered but off by default. Consumers can enable
+it for selected component paths and turn it off in later UI-Kit overrides.
+It checks direct state/bindable rune creation, with a simple `bind:this` ref
+exception and no autofix. See the plugin inventory for exact boundaries.
+
+`gost/single-intent-dispatch` is registered but off by default. It checks direct
+GOST Dispatch calls and conditional intent selection in typed instance `on*`
+callbacks. Business/UI-Kit scopes use explicit consumer overrides. It requires
+type services and has no autofix; see the plugin inventory for limits.

package/dist/create-svelte-config.d.ts

@@ -0,0 +1,3 @@
+import type { Linter } from 'eslint';
+import { type ConfigOptions } from '@gost-kit/eslint-config';
+export declare const createSvelteConfig: ({ tsconfigRootDir, }: ConfigOptions) => Promise<Linter.Config[]>;

package/dist/create-svelte-config.js

@@ -0,0 +1,50 @@
+import { plugin } from '@gost-kit/eslint-plugin';
+import { createConfig, createTypeScriptPolicy, } from '@gost-kit/eslint-config';
+import svelte from 'eslint-plugin-svelte';
+import ts from 'typescript-eslint';
+import { svelteRules } from './rules.js';
+export const createSvelteConfig = async ({ tsconfigRootDir, }) => {
+    const shared = createConfig({ tsconfigRootDir });
+    const policy = createTypeScriptPolicy({ tsconfigRootDir });
+    return [
+        { name: 'gost-svelte/ignores', ignores: ['**/.svelte-kit/**'] },
+        ...shared,
+        ...svelte.configs.base,
+        ...svelte.configs.prettier,
+        {
+            name: 'gost-svelte/typescript-project',
+            files: ['**/*.{ts,tsx,mts,cts}', '**/*.svelte'],
+            languageOptions: { parserOptions: { extraFileExtensions: ['.svelte'] } },
+        },
+        {
+            name: 'gost-svelte/typescript-runes',
+            files: ['**/*.svelte.ts'],
+            languageOptions: { parser: ts.parser },
+        },
+        {
+            name: 'gost-svelte/component-typescript',
+            files: ['**/*.svelte'],
+            plugins: policy.plugins,
+            rules: policy.rules,
+            languageOptions: {
+                parserOptions: {
+                    parser: ts.parser,
+                    projectService: true,
+                    tsconfigRootDir,
+                    extraFileExtensions: ['.svelte'],
+                },
+            },
+        },
+        {
+            name: 'gost-svelte/architecture',
+            files: ['**/*.svelte', '**/*.svelte.ts'],
+            plugins: { gost: plugin },
+            rules: { 'gost/require-feature-state-selector': 'error' },
+        },
+        {
+            name: 'gost-svelte/selected-rules',
+            files: ['**/*.svelte', '**/*.svelte.ts', '**/*.svelte.js'],
+            rules: svelteRules,
+        },
+    ];
+};

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { createSvelteConfig } from './create-svelte-config.js';
+export type { ConfigOptions } from '@gost-kit/eslint-config';

package/dist/index.js

@@ -0,0 +1 @@
+export { createSvelteConfig } from './create-svelte-config.js';

package/dist/rules.d.ts

@@ -0,0 +1,28 @@
+export declare const svelteRules: {
+    'svelte/no-dupe-else-if-blocks': "error";
+    'svelte/no-not-function-handler': "error";
+    'svelte/no-object-in-text-mustaches': "error";
+    'svelte/require-each-key': "error";
+    'svelte/valid-each-key': "error";
+    'svelte/button-has-type': "error";
+    'svelte/no-bind-value-on-checkable-inputs': "error";
+    'svelte/no-dupe-style-properties': "error";
+    'svelte/no-shorthand-style-property-overrides': "error";
+    'svelte/no-unknown-style-directive-property': "error";
+    'svelte/no-conflicting-module-names': "error";
+    'svelte/no-svelte-internal': "error";
+    'svelte/no-at-debug-tags': "error";
+    'svelte/no-inspect': "error";
+    'svelte/no-unused-svelte-ignore': "error";
+    'svelte/no-unused-props': "error";
+    'svelte/no-unnecessary-state-wrap': "error";
+    'svelte/prefer-derived-over-derived-by': "error";
+    'svelte/prefer-writable-derived': "error";
+    'svelte/no-at-html-tags': "error";
+    'svelte/block-lang': ["error", {
+        script: string;
+        enforceScriptPresent: boolean;
+    }];
+    'svelte/no-store-async': "error";
+    'svelte/no-ignored-unsubscribe': "error";
+};

package/dist/rules.js

@@ -0,0 +1,25 @@
+export const svelteRules = {
+    'svelte/no-dupe-else-if-blocks': 'error',
+    'svelte/no-not-function-handler': 'error',
+    'svelte/no-object-in-text-mustaches': 'error',
+    'svelte/require-each-key': 'error',
+    'svelte/valid-each-key': 'error',
+    'svelte/button-has-type': 'error',
+    'svelte/no-bind-value-on-checkable-inputs': 'error',
+    'svelte/no-dupe-style-properties': 'error',
+    'svelte/no-shorthand-style-property-overrides': 'error',
+    'svelte/no-unknown-style-directive-property': 'error',
+    'svelte/no-conflicting-module-names': 'error',
+    'svelte/no-svelte-internal': 'error',
+    'svelte/no-at-debug-tags': 'error',
+    'svelte/no-inspect': 'error',
+    'svelte/no-unused-svelte-ignore': 'error',
+    'svelte/no-unused-props': 'error',
+    'svelte/no-unnecessary-state-wrap': 'error',
+    'svelte/prefer-derived-over-derived-by': 'error',
+    'svelte/prefer-writable-derived': 'error',
+    'svelte/no-at-html-tags': 'error',
+    'svelte/block-lang': ['error', { script: 'ts', enforceScriptPresent: false }],
+    'svelte/no-store-async': 'error',
+    'svelte/no-ignored-unsubscribe': 'error',
+};

package/package.json

@@ -1,6 +1,60 @@
 {
   "name": "@gost-kit/eslint-config-svelte",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Shared Svelte 5 ESLint configuration with the GOST JavaScript and TypeScript baseline.",
+  "type": "module",
+  "license": "MIT",
+  "engines": {
+    "node": "^26.0.0"
+  },
+  "files": [
+    "dist",
+    "CHANGELOG.md",
+    "RULES.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "npm run clean && tsc -p tsconfig.build.json && tsc-alias -p tsconfig.build.json",
+    "check": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "prepack": "npm run build",
+    "clean": "node --input-type=module -e \"import { rmSync } from 'node:fs'; rmSync('dist', { recursive: true, force: true });\""
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/antonsmolko/gost-kit.git",
+    "directory": "packages/eslint-config-svelte"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "26.6.5",
+    "typescript": "5.9.3",
+    "tsc-alias": "1.9.9",
+    "vitest": "5.0.5",
+    "eslint": "10.14.0",
+    "prettier": "3.9.10",
+    "@gost-kit/prettier-config": "0.1.0",
+    "svelte": "5.57.2",
+    "prettier-plugin-svelte": "4.1.1"
+  },
+  "dependencies": {
+    "@gost-kit/eslint-config": "0.2.0",
+    "eslint-plugin-svelte": "3.24.0",
+    "svelte-eslint-parser": "1.10.1",
+    "typescript-eslint": "8.72.1",
+    "@gost-kit/eslint-plugin": "0.1.0"
+  },
+  "peerDependencies": {
+    "eslint": "^10.14.0",
+    "typescript": "^5.9.3",
+    "svelte": "^5.57.2"
+  }
+}