@hyperfixation/eslint-config 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Graham Lutz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+import type { Linter } from "eslint";
+/**
+ * The four bans follow from the run model: a run crosses a deploy by restarting, never by
+ * carrying a workflow across an `applicationVersion` boundary. `patch`/`deprecatePatch` would
+ * run new code against another version's checkpoints; `recv`/`send`/`getEvent`/`setEvent` park
+ * a workflow in a wait no drain can bound; `sendInTransaction` writes to a DBOS row that may
+ * have been garbage-collected, discarding a committed decision.
+ */
+export declare const BANNED_DBOS_PROPERTIES: readonly ["patch", "deprecatePatch", "recv", "send", "getEvent", "setEvent"];
+/** Matched on the member name, so an instance `dbosClient.sendInTransaction(…)` is caught too. */
+export declare const BANNED_MEMBER = "sendInTransaction";
+/**
+ * A package's `exports` map already makes these a resolver error; the lint rule is what names
+ * the reason at the point of the import instead of in a `tsc` stack. The plan writes the
+ * patterns as `src/*` and `dist/*`; they are `**` here so a nested path cannot slip through.
+ */
+export declare const DEEP_IMPORT_PATTERNS: readonly ["@hyperfixation/*/src", "@hyperfixation/*/src/**", "@hyperfixation/*/dist", "@hyperfixation/*/dist/**"];
+/**
+ * A hint that fails fast in the editor, **not** the enforcement: round-3 finding 3 established
+ * that `no-restricted-imports` only constrains the importing file, so a helper in `src/lib/`
+ * that imports `@/db` and is imported by a flow is lint-legal. The step pool refuses the write
+ * whatever file issued it; this rule just shortens the loop for the common case.
+ */
+export declare const FLOW_RAW_HANDLE_PATHS: readonly ["@/db", "@hyperfixation/db/client", "@hyperfixation/core/records"];
+/**
+ * The plan scopes the hint to `src/flows/**`; the glob is unanchored so it holds for an app's
+ * `src/flows/` and for a fixture that is not under a `src/` at all.
+ */
+export declare const FLOW_FILES: readonly ["**/flows/**/*.ts", "**/flows/**/*.tsx"];
+export declare const hyperfixation: Linter.Config[];
+export default hyperfixation;

package/dist/index.js

@@ -0,0 +1,108 @@
+import tseslint from "typescript-eslint";
+/**
+ * The four bans follow from the run model: a run crosses a deploy by restarting, never by
+ * carrying a workflow across an `applicationVersion` boundary. `patch`/`deprecatePatch` would
+ * run new code against another version's checkpoints; `recv`/`send`/`getEvent`/`setEvent` park
+ * a workflow in a wait no drain can bound; `sendInTransaction` writes to a DBOS row that may
+ * have been garbage-collected, discarding a committed decision.
+ */
+export const BANNED_DBOS_PROPERTIES = [
+    "patch",
+    "deprecatePatch",
+    "recv",
+    "send",
+    "getEvent",
+    "setEvent",
+];
+/** Matched on the member name, so an instance `dbosClient.sendInTransaction(…)` is caught too. */
+export const BANNED_MEMBER = "sendInTransaction";
+/**
+ * A package's `exports` map already makes these a resolver error; the lint rule is what names
+ * the reason at the point of the import instead of in a `tsc` stack. The plan writes the
+ * patterns as `src/*` and `dist/*`; they are `**` here so a nested path cannot slip through.
+ */
+export const DEEP_IMPORT_PATTERNS = [
+    "@hyperfixation/*/src",
+    "@hyperfixation/*/src/**",
+    "@hyperfixation/*/dist",
+    "@hyperfixation/*/dist/**",
+];
+/**
+ * A hint that fails fast in the editor, **not** the enforcement: round-3 finding 3 established
+ * that `no-restricted-imports` only constrains the importing file, so a helper in `src/lib/`
+ * that imports `@/db` and is imported by a flow is lint-legal. The step pool refuses the write
+ * whatever file issued it; this rule just shortens the loop for the common case.
+ */
+export const FLOW_RAW_HANDLE_PATHS = [
+    "@/db",
+    "@hyperfixation/db/client",
+    "@hyperfixation/core/records",
+];
+/**
+ * The plan scopes the hint to `src/flows/**`; the glob is unanchored so it holds for an app's
+ * `src/flows/` and for a fixture that is not under a `src/` at all.
+ */
+export const FLOW_FILES = ["**/flows/**/*.ts", "**/flows/**/*.tsx"];
+const TS_FILES = ["**/*.ts", "**/*.tsx"];
+const RAW_HANDLE_MESSAGE = "Flows reach the database through ctx.tx only. The step pool refuses an unfenced write anyway; this is the fast hint.";
+const bans = {
+    name: "hyperfixation/bans",
+    files: TS_FILES,
+    languageOptions: {
+        parser: tseslint.parser,
+        parserOptions: { ecmaVersion: "latest", sourceType: "module" },
+    },
+    rules: {
+        "no-restricted-properties": [
+            "error",
+            ...BANNED_DBOS_PROPERTIES.map((property) => ({
+                object: "DBOS",
+                property,
+                message: `DBOS.${property} is banned: a run crosses a deploy by restarting, not by carrying a workflow across an applicationVersion boundary.`,
+            })),
+        ],
+        "no-restricted-syntax": [
+            "error",
+            {
+                selector: `MemberExpression[property.name="${BANNED_MEMBER}"]`,
+                message: `${BANNED_MEMBER} is banned: no core table has an FK to a DBOS row, and a collected workflow row would silently discard the committed decision.`,
+            },
+        ],
+        "no-restricted-imports": [
+            "error",
+            {
+                patterns: [
+                    {
+                        group: [...DEEP_IMPORT_PATTERNS],
+                        message: "Import the package's public entry. A deep import reaches past the exports map, which is the contract.",
+                    },
+                ],
+            },
+        ],
+    },
+};
+const flowHints = {
+    name: "hyperfixation/flow-raw-handle-hint",
+    files: [...FLOW_FILES],
+    rules: {
+        "no-restricted-imports": [
+            "error",
+            {
+                paths: FLOW_RAW_HANDLE_PATHS.map((name) => ({ name, message: RAW_HANDLE_MESSAGE })),
+                patterns: [
+                    {
+                        group: [...DEEP_IMPORT_PATTERNS],
+                        message: "Import the package's public entry. A deep import reaches past the exports map, which is the contract.",
+                    },
+                ],
+            },
+        ],
+    },
+};
+/** Build output is never linted; it is not source anyone can fix. */
+const ignores = {
+    name: "hyperfixation/ignores",
+    ignores: ["**/dist/**", "**/node_modules/**", "**/.turbo/**"],
+};
+export const hyperfixation = [ignores, bans, flowHints];
+export default hyperfixation;

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@hyperfixation/eslint-config",
+  "version": "0.1.0",
+  "license": "MIT",
+  "description": "The shared flat ESLint config: the DBOS primitive ban, the deep-import ban, and the raw-handle hint in flows",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/grahamlutz/hyperfixation-core.git",
+    "directory": "packages/eslint-config"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.test.*"
+  ],
+  "dependencies": {
+    "typescript-eslint": "^8.46.0"
+  },
+  "devDependencies": {
+    "eslint": "^10.10.0"
+  },
+  "peerDependencies": {
+    "eslint": "^9.0.0 || ^10.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src",
+    "test": "vitest run --passWithNoTests"
+  }
+}