@hubspot/eslint-config-ui-extensions 1.1.0 → 1.2.0

package/README.md

@@ -182,6 +182,7 @@ export default defineConfig([
 | [no-dom-access](docs/rules/no-dom-access.md)                                           | Prevent access to the DOM (document object) in UI Extensions, which run in a sandboxed web worker without DOM access.                                                         |    |
 | [no-experimental-imports](docs/rules/no-experimental-imports.md)                       | Warn when importing from the experimental path of @hubspot/ui-extensions.                                                                                                     |    |
 | [no-html-elements](docs/rules/no-html-elements.md)                                     | Disallow usage of unsupported HTML elements in UI Extensions.                                                                                                                 |    |
+| [no-import-meta-env](docs/rules/no-import-meta-env.md)                                 | Prevent reading unsupported import.meta.env keys in UI Extensions builds.                                                                                                     |    |
 | [no-invalid-extension-point-imports](docs/rules/no-invalid-extension-point-imports.md) | Prevent importing components from unsupported extension points.                                                                                                               |    |
 | [no-invalid-image-src](docs/rules/no-invalid-image-src.md)                             | Only allow valid image URLs in the src attribute of Image components from @hubspot/ui-extensions.                                                                             | 🔧 |
 | [no-native-http](docs/rules/no-native-http.md)                                         | Prevent usage of native browser HTTP APIs (fetch and XMLHttpRequest) in UI Extensions.                                                                                        |    |

package/dist/__tests__/index.spec.js

@@ -1,5 +1,5 @@
 import { ESLint } from 'eslint';
-import { config } from "../index.js";
+import { config } from '../index.js';
 /**
  * A helper function to lint code with the imported ESLint config.
  * Returns the linting messages.
@@ -300,4 +300,25 @@ describe('config', () => {
             expect(customRuleError).toBeUndefined();
         });
     });
+    describe('custom no-import-meta-env rule', () => {
+        it('should error when reading an unsupported import.meta.env key', async () => {
+            const code = `
+        const apiUrl = import.meta.env.VITE_API_URL;
+      `;
+            const messages = await lintCode(code, 'test.js');
+            const customRuleError = messages.find((m) => m.ruleId === '@hubspot/ui-extensions/no-import-meta-env');
+            expect(customRuleError).toBeDefined();
+            expect(customRuleError?.severity).toBe(2);
+            expect(customRuleError?.message).toContain('VITE_API_URL');
+        });
+        it('should allow reading always-defined import.meta.env keys', async () => {
+            const code = `
+        const isDev = import.meta.env.DEV;
+        const mode = import.meta.env.MODE;
+      `;
+            const messages = await lintCode(code, 'test.js');
+            const customRuleError = messages.find((m) => m.ruleId === '@hubspot/ui-extensions/no-import-meta-env');
+            expect(customRuleError).toBeUndefined();
+        });
+    });
 });

package/dist/__tests__/rules/no-browser-dialogs.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noBrowserDialogs } from "../../rules/no-browser-dialogs.js";
-import { languageOptions } from "../../runtime.js";
+import { noBrowserDialogs } from '../../rules/no-browser-dialogs.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-browser-storage.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noBrowserStorage } from "../../rules/no-browser-storage.js";
-import { languageOptions } from "../../runtime.js";
+import { noBrowserStorage } from '../../rules/no-browser-storage.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-console.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noConsole } from "../../rules/no-console.js";
-import { languageOptions } from "../../runtime.js";
+import { noConsole } from '../../rules/no-console.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-dom-access.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noDomAccess } from "../../rules/no-dom-access.js";
-import { languageOptions } from "../../runtime.js";
+import { noDomAccess } from '../../rules/no-dom-access.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-experimental-imports.spec.js

@@ -1,6 +1,6 @@
 import { RuleTester } from 'eslint';
-import { noExperimentalImports } from "../../rules/no-experimental-imports.js";
-import { languageOptions } from "../../runtime.js";
+import { noExperimentalImports } from '../../rules/no-experimental-imports.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTesterOptions = {
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-html-elements.spec.js

@@ -1,6 +1,6 @@
 import { RuleTester } from 'eslint';
-import { unsupportedHtmlElements } from "../../rules/no-html-elements.js";
-import { languageOptions } from "../../runtime.js";
+import { unsupportedHtmlElements } from '../../rules/no-html-elements.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-import-meta-env.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/rules/no-import-meta-env.spec.js

@@ -0,0 +1,100 @@
+import { RuleTester } from 'eslint';
+import { noImportMetaEnv } from '../../rules/no-import-meta-env.js';
+import { languageOptions } from '../../runtime.js';
+const ruleTester = new RuleTester({
+    languageOptions: {
+        ...languageOptions,
+        parserOptions: {
+            ecmaVersion: 'latest',
+            sourceType: 'module',
+            ecmaFeatures: {
+                jsx: true,
+            },
+        },
+    },
+});
+describe('no-import-meta-env', () => {
+    ruleTester.run('no-import-meta-env', noImportMetaEnv, {
+        valid: [
+            {
+                name: 'allows import.meta.env.MODE',
+                code: `const mode = import.meta.env.MODE;`,
+            },
+            {
+                name: 'allows import.meta.env.DEV',
+                code: `const isDev = import.meta.env.DEV;`,
+            },
+            {
+                name: 'allows import.meta.env.PROD',
+                code: `const isProd = import.meta.env.PROD;`,
+            },
+            {
+                name: 'allows import.meta.env.SSR',
+                code: `const isSsr = import.meta.env.SSR;`,
+            },
+            {
+                name: 'allows import.meta.env.BASE_URL',
+                code: `const base = import.meta.env.BASE_URL;`,
+            },
+            {
+                name: 'allows bracket access for allowed keys',
+                code: `const mode = import.meta.env['MODE'];`,
+            },
+            {
+                name: 'allows import.meta.env itself (no property access)',
+                code: `const env = import.meta.env;`,
+            },
+            {
+                name: 'allows import.meta without env',
+                code: `const url = import.meta.url;`,
+            },
+        ],
+        invalid: [
+            {
+                name: 'flags dot access for custom VITE_ key',
+                code: `const apiKey = import.meta.env.VITE_API_KEY;`,
+                errors: [
+                    { messageId: 'unsupportedKey', data: { key: 'VITE_API_KEY' } },
+                ],
+            },
+            {
+                name: 'flags bracket access for custom VITE_ key',
+                code: `const apiKey = import.meta.env['VITE_API_KEY'];`,
+                errors: [
+                    { messageId: 'unsupportedKey', data: { key: 'VITE_API_KEY' } },
+                ],
+            },
+            {
+                name: 'flags dynamic computed access',
+                code: `const key = 'VITE_FOO'; const val = import.meta.env[key];`,
+                errors: [{ messageId: 'dynamicAccess' }],
+            },
+            {
+                name: 'flags multiple unsupported keys in one file',
+                code: `
+          const a = import.meta.env.VITE_API_URL;
+          const b = import.meta.env.VITE_SECRET;
+        `,
+                errors: [
+                    { messageId: 'unsupportedKey', data: { key: 'VITE_API_URL' } },
+                    { messageId: 'unsupportedKey', data: { key: 'VITE_SECRET' } },
+                ],
+            },
+            {
+                name: 'flags unsupported key in JSX expression',
+                code: `
+          import { Text } from '@hubspot/ui-extensions';
+          function Extension() {
+            return <Text>{import.meta.env.VITE_LABEL}</Text>;
+          }
+        `,
+                errors: [{ messageId: 'unsupportedKey', data: { key: 'VITE_LABEL' } }],
+            },
+            {
+                name: 'flags bracket access for a non-string expression',
+                code: `const val = import.meta.env[getKey()];`,
+                errors: [{ messageId: 'dynamicAccess' }],
+            },
+        ],
+    });
+});

package/dist/__tests__/rules/no-invalid-extension-point-imports.spec.js

@@ -1,6 +1,6 @@
 import { RuleTester } from 'eslint';
-import { noInvalidExtensionPointImports } from "../../rules/no-invalid-extension-point-imports.js";
-import { languageOptions } from "../../runtime.js";
+import { noInvalidExtensionPointImports } from '../../rules/no-invalid-extension-point-imports.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTesterOptions = {
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-invalid-image-src.spec.js

@@ -1,6 +1,6 @@
 import { RuleTester } from 'eslint';
-import { noInvalidImageSrc } from "../../rules/no-invalid-image-src.js";
-import { languageOptions } from "../../runtime.js";
+import { noInvalidImageSrc } from '../../rules/no-invalid-image-src.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-native-http.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noNativeHttp } from "../../rules/no-native-http.js";
-import { languageOptions } from "../../runtime.js";
+import { noNativeHttp } from '../../rules/no-native-http.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-parent-imports.spec.js

@@ -1,6 +1,6 @@
 import { RuleTester } from 'eslint';
-import { noParentImports } from "../../rules/no-parent-imports.js";
-import { languageOptions } from "../../runtime.js";
+import { noParentImports } from '../../rules/no-parent-imports.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTesterOptions = {
     languageOptions: {
         ...languageOptions,

package/dist/__tests__/rules/no-restricted-globals.spec.js

@@ -1,7 +1,7 @@
 import { RuleTester } from 'eslint';
 import tseslint from 'typescript-eslint';
-import { noRestrictedGlobals } from "../../rules/no-restricted-globals.js";
-import { languageOptions } from "../../runtime.js";
+import { noRestrictedGlobals } from '../../rules/no-restricted-globals.js';
+import { languageOptions } from '../../runtime.js';
 const ruleTester = new RuleTester({
     languageOptions: {
         ...languageOptions,
@@ -68,6 +68,21 @@ describe('no-restricted-globals', () => {
           function navigate(location) {
             return location.href;
           }
+        `,
+            },
+            {
+                name: 'allows navigator as a local variable',
+                code: `
+          const navigator = { language: 'en' };
+          console.log(navigator.language);
+        `,
+            },
+            {
+                name: 'allows navigator as a function parameter',
+                code: `
+          function getLocale(navigator) {
+            return navigator.language;
+          }
         `,
             },
             {
@@ -75,6 +90,13 @@ describe('no-restricted-globals', () => {
                 code: `
           const { history } = router;
           history.push('/test');
+        `,
+            },
+            {
+                name: 'allows navigator as an object property key',
+                code: `
+          const obj = { navigator: { language: 'en' } };
+          obj.navigator.language;
         `,
             },
             {
@@ -179,6 +201,20 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'history' }],
             },
+            {
+                name: 'reports error for navigator.language access',
+                code: `
+          const lang = navigator.language;
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
+            {
+                name: 'reports error for navigator.clipboard access',
+                code: `
+          navigator.clipboard.writeText('hello');
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for window.importScripts',
                 code: `
@@ -207,6 +243,13 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'location' }],
             },
+            {
+                name: 'reports error for window.navigator',
+                code: `
+          const ua = window.navigator.userAgent;
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for window.history',
                 code: `
@@ -228,6 +271,13 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'addEventListener' }],
             },
+            {
+                name: 'reports error for self.navigator',
+                code: `
+          const online = self.navigator.onLine;
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for self.location',
                 code: `
@@ -256,6 +306,13 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'location' }],
             },
+            {
+                name: 'reports error for globalThis.navigator',
+                code: `
+          globalThis.navigator.geolocation.getCurrentPosition(cb);
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for globalThis.history',
                 code: `
@@ -263,6 +320,13 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'history' }],
             },
+            {
+                name: 'reports error for bracket notation window["navigator"]',
+                code: `
+          const devices = window['navigator'].mediaDevices;
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for bracket notation window["location"]',
                 code: `
@@ -284,6 +348,24 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'location' }],
             },
+            {
+                name: 'reports error for navigator in React component',
+                code: `
+          import { Text } from '@hubspot/ui-extensions';
+          function Component() {
+            const ua = navigator.userAgent;
+            return <Text>{ua}</Text>;
+          }
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
+            {
+                name: 'reports error for navigator in arrow function',
+                code: `
+          const getLangs = () => navigator.languages;
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error in React component',
                 code: `
@@ -382,6 +464,12 @@ describe('no-restricted-globals', () => {
           interface Router {
             history: typeof history;
           }
+        `,
+            },
+            {
+                name: 'allows navigator type in type alias',
+                code: `
+          type NavigatorType = typeof navigator;
         `,
             },
             {
@@ -421,6 +509,17 @@ describe('no-restricted-globals', () => {
         `,
                 errors: [{ messageId: 'history' }],
             },
+            {
+                name: 'reports error for navigator usage after type declarations',
+                code: `
+          type NavigatorType = typeof navigator;
+
+          function getLocale() {
+            return navigator.language;
+          }
+        `,
+                errors: [{ messageId: 'navigator' }],
+            },
             {
                 name: 'reports error for addEventListener with typed handler',
                 code: `

package/dist/__tests__/utils/ast-utils.spec.js

@@ -1,4 +1,4 @@
-import { getMemberExpressionPropertyName, isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from "../../utils/ast-utils.js";
+import { getMemberExpressionPropertyName, isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from '../../utils/ast-utils.js';
 describe('ast-utils', () => {
     describe('isGlobalIdentifierCall', () => {
         it('should return true for global identifier calls', () => {

package/dist/__tests__/utils/extension-point-utils.spec.js

@@ -1,4 +1,4 @@
-import { getExtensionPointFromFilePath, getHubspotImportExtensionPoint, isImportOutsideExtensionPoint, mapExtensionPointToImportDirectory, } from "../../utils/extension-point-utils.js";
+import { getExtensionPointFromFilePath, getHubspotImportExtensionPoint, isImportOutsideExtensionPoint, mapExtensionPointToImportDirectory, } from '../../utils/extension-point-utils.js';
 describe('extension-point-utils', () => {
     describe('getExtensionPointFromFilePath', () => {
         it('should return the extension point for valid paths', () => {

package/dist/__tests__/utils/import-utils.spec.js

@@ -1,4 +1,4 @@
-import { getImportedComponentName, isExperimentalImport, isHubspotExtensibilityImport, isRelativeImport, } from "../../utils/import-utils.js";
+import { getImportedComponentName, isExperimentalImport, isHubspotExtensibilityImport, isRelativeImport, } from '../../utils/import-utils.js';
 describe('import-utils', () => {
     describe('isHubspotExtensibilityImport', () => {
         it('should return true for @hubspot/ui-extensions imports', () => {

package/dist/__tests__/utils/jsx-utils.spec.js

@@ -1,4 +1,4 @@
-import { findJSXAttribute, isJSXComponent } from "../../utils/jsx-utils.js";
+import { findJSXAttribute, isJSXComponent } from '../../utils/jsx-utils.js';
 describe('jsx-utils', () => {
     describe('findJSXAttribute', () => {
         it('should find an attribute by name', () => {

package/dist/__tests__/utils/scope-utils.spec.js

@@ -1,4 +1,4 @@
-import { isInTypeContext } from "../../utils/scope-utils.js";
+import { isInTypeContext } from '../../utils/scope-utils.js';
 describe('scope-utils', () => {
     describe('isInTypeContext', () => {
         it('should return true when node has a TypeScript type parent', () => {

package/dist/index.js

@@ -1,16 +1,17 @@
 import globals from 'globals';
-import { noBrowserDialogs } from "./rules/no-browser-dialogs.js";
-import { noBrowserStorage } from "./rules/no-browser-storage.js";
-import { noConsole } from "./rules/no-console.js";
-import { noDomAccess } from "./rules/no-dom-access.js";
-import { noExperimentalImports } from "./rules/no-experimental-imports.js";
-import { unsupportedHtmlElements } from "./rules/no-html-elements.js";
-import { noInvalidExtensionPointImports } from "./rules/no-invalid-extension-point-imports.js";
-import { noInvalidImageSrc } from "./rules/no-invalid-image-src.js";
-import { noNativeHttp } from "./rules/no-native-http.js";
-import { noParentImports } from "./rules/no-parent-imports.js";
-import { noRestrictedGlobals } from "./rules/no-restricted-globals.js";
-import { languageOptions } from "./runtime.js";
+import { noBrowserDialogs } from './rules/no-browser-dialogs.js';
+import { noBrowserStorage } from './rules/no-browser-storage.js';
+import { noConsole } from './rules/no-console.js';
+import { noDomAccess } from './rules/no-dom-access.js';
+import { noExperimentalImports } from './rules/no-experimental-imports.js';
+import { unsupportedHtmlElements } from './rules/no-html-elements.js';
+import { noImportMetaEnv } from './rules/no-import-meta-env.js';
+import { noInvalidExtensionPointImports } from './rules/no-invalid-extension-point-imports.js';
+import { noInvalidImageSrc } from './rules/no-invalid-image-src.js';
+import { noNativeHttp } from './rules/no-native-http.js';
+import { noParentImports } from './rules/no-parent-imports.js';
+import { noRestrictedGlobals } from './rules/no-restricted-globals.js';
+import { languageOptions } from './runtime.js';
 const rules = {
     'no-html-elements': unsupportedHtmlElements,
     'no-invalid-extension-point-imports': noInvalidExtensionPointImports,
@@ -23,6 +24,7 @@ const rules = {
     'no-browser-storage': noBrowserStorage,
     'no-parent-imports': noParentImports,
     'no-restricted-globals': noRestrictedGlobals,
+    'no-import-meta-env': noImportMetaEnv,
 };
 // We export a config array for our users to extend
 export const config = [
@@ -62,6 +64,7 @@ export const config = [
             '@hubspot/ui-extensions/no-browser-storage': 'error',
             '@hubspot/ui-extensions/no-parent-imports': 'error',
             '@hubspot/ui-extensions/no-restricted-globals': 'error',
+            '@hubspot/ui-extensions/no-import-meta-env': 'error',
         },
     },
 ];

package/dist/rules/no-browser-dialogs.js

@@ -1,5 +1,5 @@
-import { getMemberExpressionPropertyName, isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { getMemberExpressionPropertyName, isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 const MESSAGE_IDS = {
     alert: 'nativeAlert',
     confirm: 'nativeConfirm',

package/dist/rules/no-browser-storage.js

@@ -1,5 +1,5 @@
-import { isWindowSelfOrGlobalThisPropertyAccess } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { isWindowSelfOrGlobalThisPropertyAccess } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 const STORAGE_IDENTIFIERS = new Set([
     'localStorage',
     'sessionStorage',

package/dist/rules/no-console.js

@@ -1,5 +1,5 @@
-import { getMemberExpressionPropertyName } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { getMemberExpressionPropertyName } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 const CONSOLE_METHODS = ['log', 'info', 'warn', 'debug', 'error'];
 const LOGGER_ALTERNATIVES = {
     log: 'logger.debug()',

package/dist/rules/no-dom-access.js

@@ -1,5 +1,5 @@
-import { isWindowSelfOrGlobalThisPropertyAccess } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { isWindowSelfOrGlobalThisPropertyAccess } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 export const noDomAccess = {
     meta: {
         type: 'problem',

package/dist/rules/no-experimental-imports.js

@@ -1,4 +1,4 @@
-import { isExperimentalImport } from "../utils/import-utils.js";
+import { isExperimentalImport } from '../utils/import-utils.js';
 export const noExperimentalImports = {
     meta: {
         type: 'suggestion',

package/dist/rules/no-html-elements.js

@@ -1,4 +1,4 @@
-import { htmlTags } from "../constants.js";
+import { htmlTags } from '../constants.js';
 export const unsupportedHtmlElements = {
     meta: {
         type: 'problem',

package/dist/rules/no-import-meta-env.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from 'eslint';
+export declare const noImportMetaEnv: Rule.RuleModule;

package/dist/rules/no-import-meta-env.js

@@ -0,0 +1,67 @@
+// Vite's always-defined import.meta.env members
+const ALLOWED_KEYS = new Set(['MODE', 'DEV', 'PROD', 'SSR', 'BASE_URL']);
+function isImportMetaEnv(node) {
+    const obj = node.object;
+    if (obj.type !== 'MemberExpression')
+        return false;
+    const meta = obj.object;
+    const envProp = obj.property;
+    return (meta.type === 'MetaProperty' &&
+        meta.meta.name === 'import' &&
+        meta.property.name === 'meta' &&
+        envProp.type === 'Identifier' &&
+        envProp.name === 'env' &&
+        !obj.computed);
+}
+export const noImportMetaEnv = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Prevent reading unsupported import.meta.env keys in UI Extensions builds.',
+            url: 'https://developers.hubspot.com/docs/apps/developer-platform/add-features/ui-extensibility/linting/rules/no-import-meta-env',
+        },
+        messages: {
+            unsupportedKey: '"import.meta.env.{{key}}" is not available in UI Extensions builds. Only MODE, DEV, PROD, SSR, and BASE_URL are always defined.',
+            dynamicAccess: 'Dynamic access of import.meta.env is not supported in UI Extensions builds. Only MODE, DEV, PROD, SSR, and BASE_URL are always defined.',
+        },
+        schema: [],
+    },
+    create(context) {
+        return {
+            MemberExpression(node) {
+                if (!isImportMetaEnv(node))
+                    return;
+                const prop = node.property;
+                if (!node.computed) {
+                    // import.meta.env.KEY
+                    const key = prop.name;
+                    if (!ALLOWED_KEYS.has(key)) {
+                        context.report({
+                            node: node,
+                            messageId: 'unsupportedKey',
+                            data: { key },
+                        });
+                    }
+                }
+                else if (prop.type === 'Literal' && typeof prop.value === 'string') {
+                    // import.meta.env['KEY']
+                    const key = prop.value;
+                    if (!ALLOWED_KEYS.has(key)) {
+                        context.report({
+                            node: node,
+                            messageId: 'unsupportedKey',
+                            data: { key },
+                        });
+                    }
+                }
+                else {
+                    // import.meta.env[dynamicKey]
+                    context.report({
+                        node: node,
+                        messageId: 'dynamicAccess',
+                    });
+                }
+            },
+        };
+    },
+};

package/dist/rules/no-invalid-extension-point-imports.js

@@ -1,6 +1,6 @@
 import path from 'path';
-import { getExtensionPointFromFilePath, getHubspotImportExtensionPoint, mapExtensionPointToImportDirectory, } from "../utils/extension-point-utils.js";
-import { isHubspotExtensibilityImport } from "../utils/import-utils.js";
+import { getExtensionPointFromFilePath, getHubspotImportExtensionPoint, mapExtensionPointToImportDirectory, } from '../utils/extension-point-utils.js';
+import { isHubspotExtensibilityImport } from '../utils/import-utils.js';
 export const noInvalidExtensionPointImports = {
     meta: {
         type: 'problem',

package/dist/rules/no-invalid-image-src.js

@@ -1,5 +1,5 @@
-import { getImportedComponentName, isHubspotExtensibilityImport, } from "../utils/import-utils.js";
-import { findJSXAttribute, isJSXComponent } from "../utils/jsx-utils.js";
+import { getImportedComponentName, isHubspotExtensibilityImport, } from '../utils/import-utils.js';
+import { findJSXAttribute, isJSXComponent } from '../utils/jsx-utils.js';
 const ALLOWED_PROTOCOLS = {
     HTTP: 'http:',
     HTTPS: 'https:',

package/dist/rules/no-native-http.js

@@ -1,5 +1,5 @@
-import { isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 export const noNativeHttp = {
     meta: {
         type: 'problem',

package/dist/rules/no-parent-imports.js

@@ -1,5 +1,5 @@
-import { getExtensionPointFromFilePath, isImportOutsideExtensionPoint, } from "../utils/extension-point-utils.js";
-import { isRelativeImport } from "../utils/import-utils.js";
+import { getExtensionPointFromFilePath, isImportOutsideExtensionPoint, } from '../utils/extension-point-utils.js';
+import { isRelativeImport } from '../utils/import-utils.js';
 export const noParentImports = {
     meta: {
         type: 'problem',

package/dist/rules/no-restricted-globals.js

@@ -1,5 +1,5 @@
-import { isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from "../utils/ast-utils.js";
-import { isInTypeContext, isLocalVariable } from "../utils/scope-utils.js";
+import { isGlobalIdentifierCall, isWindowSelfOrGlobalThisPropertyAccess, } from '../utils/ast-utils.js';
+import { isInTypeContext, isLocalVariable } from '../utils/scope-utils.js';
 // Function-like globals that should only be checked as calls
 const RESTRICTED_FUNCTION_GLOBALS = new Set([
     'importScripts',
@@ -10,6 +10,7 @@ const RESTRICTED_FUNCTION_GLOBALS = new Set([
 const RESTRICTED_VALUE_GLOBALS = new Set([
     'location',
     'history',
+    'navigator',
 ]);
 // All restricted globals (for Identifier checking)
 const ALL_RESTRICTED_GLOBALS = new Set([
@@ -29,6 +30,7 @@ export const noRestrictedGlobals = {
             removeEventListener: 'removeEventListener() is not supported. Use React event props instead.',
             location: 'location is not available. Use context.location instead.',
             history: 'history is not available. Use <Link> or actions.openIframeModal() instead.',
+            navigator: 'navigator is not available as expected. Use provided context and actions instead.',
         },
         schema: [],
     },

package/dist/utils/extension-point-utils.js

@@ -1,5 +1,5 @@
 import path from 'path';
-import { EXTENSION_IMPORT_DIRECTORIES, EXTENSION_POINT_DIRECTORIES, } from "../constants.js";
+import { EXTENSION_IMPORT_DIRECTORIES, EXTENSION_POINT_DIRECTORIES, } from '../constants.js';
 /**
  * This function takes a file path as input and returns the extension point.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hubspot/eslint-config-ui-extensions",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "type": "module",
   "description": "eslint plugins for HubSpot React-based UI Extensions",
   "keywords": [
@@ -20,13 +20,14 @@
     "globals": "13.24.0"
   },
   "devDependencies": {
-    "@eslint/js": "9.39.2",
+    "@eslint/js": "9.39.3",
     "@types/eslint": "9.6.1",
     "@types/estree-jsx": "1.0.5",
-    "@types/node": "22.19.7",
+    "@types/node": "24.13.3",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "@vitest/coverage-v8": "4.0.18",
     "@vitest/eslint-plugin": "1.6.6",
-    "eslint": "9.39.2",
+    "eslint": "9.39.3",
     "eslint-doc-generator": "2.3.0",
     "eslint-plugin-eslint-plugin": "5.5.1",
     "eslint-plugin-node": "11.1.0",
@@ -52,7 +53,7 @@
   "license": "MIT",
   "gitHead": "36d3a36ffaa5bde1a7b73dc139d75027aae65b7f",
   "scripts": {
-    "build": "pnpm run clean && tsc",
+    "build": "pnpm run clean && tsgo",
     "clean": "rm -rf dist/",
     "format": "prettier --write . --ignore-path ../../.prettierignore",
     "format:check": "prettier --check . --ignore-path ../../.prettierignore",
@@ -64,6 +65,6 @@
     "test:coverage": "vitest run --coverage",
     "test:watch": "vitest",
     "update:eslint-docs": "eslint-doc-generator",
-    "watch": "tsc --watch"
+    "watch": "tsgo --watch"
   }
 }