@konvert7/klint 1.5.3 → 1.7.0

package/README.md

@@ -936,6 +936,75 @@ rules:
 | `sonar/no-single-char-class` | Avoid regex character classes with a single character |
 | `sonar/prefer-at` | Prefer `.at()` for relative index access |
 
+## Experimental rules (`rules.experimental`)
+
+Rules under trial live under `rules.experimental`:
+
+```yaml
+rules:
+  recommended: true
+  experimental:
+    no-date-equality: error
+    no-floating-promise: warn
+```
+
+- **Opt-in.** A rule runs only when it is listed under `rules.experimental` with `error`, `warn`, or `{severity, include}`. `recommended: true` never enables one.
+- **Wrong group.** An experimental rule listed under `rules.core` or `rules.sonar`, or a core or sonar rule listed under `rules.experimental`, gives one `klint/config` warning and is ignored.
+- **Plain ids.** Ids have no `experimental/` prefix in output, `--json`, `.klint/stats.json` and `klint stats`. Ids and suppressions stay the same when a rule is promoted to `core`.
+- **Same-file checks.** These rules use no type information. They stay silent unless the file proves the case, and they have no autofix.
+
+### `no-date-equality`
+
+Reports `==`, `===`, `!=` and `!==` when both operands are provably `Date` objects, because these compare identity, not time.
+
+Reported:
+
+```ts
+const a = new Date(1);
+const b = new Date(2);
+a === b;
+new Date(1) !== new Date(2);
+```
+
+Not reported:
+
+```ts
+let c = new Date(1);
+c === a; // let binding
+function f(d: Date) { return d === a; } // parameter
+x.created === y.created; // property
+a < b; // relational operator
+a === null; // null comparison
+```
+
+### `no-floating-promise`
+
+Reports an expression statement that drops a promise the file provably created.
+
+Reported:
+
+```ts
+async function f() {}
+f();
+new Promise((resolve) => resolve(1));
+Promise.all([]);
+Promise.resolve(1).then((x) => x);
+Promise.resolve(1).finally(() => {});
+```
+
+Not reported:
+
+```ts
+await f();
+return f();
+void f();
+const p = f();
+g(f());
+f().catch(() => {});
+f().then((x) => x, () => {});
+obj.f();
+```
+
 ## Agent and CI Integration
 
 Agent hooks should run klint with `--json` so violations are machine-readable, and with `--hook` so [`klint stats`](#stats) can tell hook runs apart from direct ones.

package/klint.schema.json

@@ -1,5 +1,5 @@
 {
-  "$id": "https://raw.githubusercontent.com/konvert7/klint/refs/tags/v1.5.3/klint.schema.json",
+  "$id": "https://raw.githubusercontent.com/konvert7/klint/refs/tags/v1.7.0/klint.schema.json",
   "$schema": "http://json-schema.org/draft-07/schema#",
   "additionalProperties": false,
   "description": "klint configuration. Lives at klint.yaml (or klint.config.json) next to biome.json and knip.json.",
@@ -1205,6 +1205,133 @@
               },
               "type": "object"
             },
+            "experimental": {
+              "additionalProperties": {
+                "anyOf": [
+                  {
+                    "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                    "enum": [
+                      "error",
+                      "warn",
+                      "off"
+                    ],
+                    "type": "string"
+                  },
+                  {
+                    "additionalProperties": false,
+                    "description": "Rule options object. Omit severity to default to \"error\". Add include to scope the rule to specific files.",
+                    "properties": {
+                      "include": {
+                        "description": "Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: [\"src/hooks/**\", \"!src/hooks/scripts/**\"]",
+                        "items": {
+                          "type": "string"
+                        },
+                        "type": "array"
+                      },
+                      "severity": {
+                        "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                        "enum": [
+                          "error",
+                          "warn",
+                          "off",
+                          null
+                        ],
+                        "type": "string"
+                      }
+                    },
+                    "type": "object"
+                  }
+                ]
+              },
+              "description": "Opt-in experimental rules: each runs only when listed here with error, warn or {severity, include}. recommended: true never enables them. Rule ids have no prefix, so they stay the same when a rule is promoted to core.",
+              "properties": {
+                "no-date-equality": {
+                  "anyOf": [
+                    {
+                      "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                      "enum": [
+                        "error",
+                        "warn",
+                        "off"
+                      ],
+                      "type": "string"
+                    },
+                    {
+                      "additionalProperties": false,
+                      "description": "Rule options object. Omit severity to default to \"error\". Add include to scope the rule to specific files.",
+                      "properties": {
+                        "include": {
+                          "description": "Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: [\"src/hooks/**\", \"!src/hooks/scripts/**\"]",
+                          "items": {
+                            "type": "string"
+                          },
+                          "type": "array"
+                        },
+                        "severity": {
+                          "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                          "enum": [
+                            "error",
+                            "warn",
+                            "off",
+                            null
+                          ],
+                          "type": "string"
+                        }
+                      },
+                      "type": "object"
+                    }
+                  ],
+                  "description": "Experimental, opt-in: list it under rules.experimental. Flags ==, ===, != and !== between two values the same file proves are Date objects (a new Date(...) or a const initialised with one) — these compare identity, not time. Stays silent unless the file proves both sides are Dates; no autofix.",
+                  "examples": [
+                    "no-date-equality: error",
+                    "no-date-equality:\n  severity: warn\n  include: [\"src/**\"]"
+                  ]
+                },
+                "no-floating-promise": {
+                  "anyOf": [
+                    {
+                      "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                      "enum": [
+                        "error",
+                        "warn",
+                        "off"
+                      ],
+                      "type": "string"
+                    },
+                    {
+                      "additionalProperties": false,
+                      "description": "Rule options object. Omit severity to default to \"error\". Add include to scope the rule to specific files.",
+                      "properties": {
+                        "include": {
+                          "description": "Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: [\"src/hooks/**\", \"!src/hooks/scripts/**\"]",
+                          "items": {
+                            "type": "string"
+                          },
+                          "type": "array"
+                        },
+                        "severity": {
+                          "description": "Rule severity. \"error\" exits with code 2; \"warn\" reports but exits 0; \"off\" silences.",
+                          "enum": [
+                            "error",
+                            "warn",
+                            "off",
+                            null
+                          ],
+                          "type": "string"
+                        }
+                      },
+                      "type": "object"
+                    }
+                  ],
+                  "description": "Experimental, opt-in: list it under rules.experimental. Flags an expression statement that drops a promise the same file proves it created: a call to a same-file async function, new Promise(...), or Promise.resolve/reject/all/allSettled/race/any(...), optionally followed by .then(onFulfilled) or .finally(...) with no .catch. Stays silent unless the file proves it; no autofix.",
+                  "examples": [
+                    "no-floating-promise: error",
+                    "no-floating-promise: warn"
+                  ]
+                }
+              },
+              "type": "object"
+            },
             "recommended": {
               "default": false,
               "description": "true enables the six sonar rules at error, as plugins: [sonar] did.",
@@ -2272,7 +2399,7 @@
         }
       ],
       "default": null,
-      "description": "Rules, in groups: recommended (true enables the six sonar rules at error), core (built-in rules) and sonar (sonar rules, without the sonar/ prefix). Example: { \"recommended\": true, \"core\": { \"no-string-match\": \"error\" }, \"sonar\": { \"prefer-at\": \"warn\" } }. The v1 flat map (rule name → severity or options, sonar/ prefixed) is still read; run `klint migrate` to upgrade it."
+      "description": "Rules, in groups: recommended (true enables the six sonar rules at error), core (built-in rules), sonar (sonar rules, without the sonar/ prefix) and experimental (opt-in rules under trial; never enabled by recommended; ids have no prefix). Example: { \"recommended\": true, \"core\": { \"no-string-match\": \"error\" }, \"sonar\": { \"prefer-at\": \"warn\" } }. The v1 flat map (rule name → severity or options, sonar/ prefixed) is still read; run `klint migrate` to upgrade it."
     }
   },
   "type": "object"

package/klint.schema.yaml

@@ -1,4 +1,4 @@
-$id: https://raw.githubusercontent.com/konvert7/klint/refs/tags/v1.5.3/klint.schema.json
+$id: https://raw.githubusercontent.com/konvert7/klint/refs/tags/v1.7.0/klint.schema.json
 $schema: http://json-schema.org/draft-07/schema#
 additionalProperties: false
 description: klint configuration. Lives at klint.yaml (or klint.config.json) next to biome.json and knip.json.
@@ -876,6 +876,96 @@ properties:
               examples:
               - 'no-unguarded-json-parse: error'
           type: object
+        experimental:
+          additionalProperties:
+            anyOf:
+            - description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+              enum:
+              - error
+              - warn
+              - off
+              type: string
+            - additionalProperties: false
+              description: Rule options object. Omit severity to default to "error". Add include to scope the rule to specific files.
+              properties:
+                include:
+                  description: 'Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: ["src/hooks/**", "!src/hooks/scripts/**"]'
+                  items:
+                    type: string
+                  type: array
+                severity:
+                  description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+                  enum:
+                  - error
+                  - warn
+                  - off
+                  - null
+                  type: string
+              type: object
+          description: 'Opt-in experimental rules: each runs only when listed here with error, warn or {severity, include}. recommended: true never enables them. Rule ids have no prefix, so they stay the same when a rule is promoted to core.'
+          properties:
+            no-date-equality:
+              anyOf:
+              - description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+                enum:
+                - error
+                - warn
+                - off
+                type: string
+              - additionalProperties: false
+                description: Rule options object. Omit severity to default to "error". Add include to scope the rule to specific files.
+                properties:
+                  include:
+                    description: 'Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: ["src/hooks/**", "!src/hooks/scripts/**"]'
+                    items:
+                      type: string
+                    type: array
+                  severity:
+                    description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+                    enum:
+                    - error
+                    - warn
+                    - off
+                    - null
+                    type: string
+                type: object
+              description: 'Experimental, opt-in: list it under rules.experimental. Flags ==, ===, != and !== between two values the same file proves are Date objects (a new Date(...) or a const initialised with one) — these compare identity, not time. Stays silent unless the file proves both sides are Dates; no autofix.'
+              examples:
+              - 'no-date-equality: error'
+              - |-
+                no-date-equality:
+                  severity: warn
+                  include: ["src/**"]
+            no-floating-promise:
+              anyOf:
+              - description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+                enum:
+                - error
+                - warn
+                - off
+                type: string
+              - additionalProperties: false
+                description: Rule options object. Omit severity to default to "error". Add include to scope the rule to specific files.
+                properties:
+                  include:
+                    description: 'Glob patterns scoping this rule to a subset of files. Prefix with ! to exclude. Example: ["src/hooks/**", "!src/hooks/scripts/**"]'
+                    items:
+                      type: string
+                    type: array
+                  severity:
+                    description: Rule severity. "error" exits with code 2; "warn" reports but exits 0; "off" silences.
+                    enum:
+                    - error
+                    - warn
+                    - off
+                    - null
+                    type: string
+                type: object
+              description: 'Experimental, opt-in: list it under rules.experimental. Flags an expression statement that drops a promise the same file proves it created: a call to a same-file async function, new Promise(...), or Promise.resolve/reject/all/allSettled/race/any(...), optionally followed by .then(onFulfilled) or .finally(...) with no .catch. Stays silent unless the file proves it; no autofix.'
+              examples:
+              - 'no-floating-promise: error'
+              - 'no-floating-promise: warn'
+          type: object
         recommended:
           default: false
           description: 'true enables the six sonar rules at error, as plugins: [sonar] did.'
@@ -1632,5 +1722,5 @@ properties:
           - 'sonar/prefer-string-replaceall: error'
       type: object
     default: null
-    description: 'Rules, in groups: recommended (true enables the six sonar rules at error), core (built-in rules) and sonar (sonar rules, without the sonar/ prefix). Example: { "recommended": true, "core": { "no-string-match": "error" }, "sonar": { "prefer-at": "warn" } }. The v1 flat map (rule name → severity or options, sonar/ prefixed) is still read; run `klint migrate` to upgrade it.'
+    description: 'Rules, in groups: recommended (true enables the six sonar rules at error), core (built-in rules), sonar (sonar rules, without the sonar/ prefix) and experimental (opt-in rules under trial; never enabled by recommended; ids have no prefix). Example: { "recommended": true, "core": { "no-string-match": "error" }, "sonar": { "prefer-at": "warn" } }. The v1 flat map (rule name → severity or options, sonar/ prefixed) is still read; run `klint migrate` to upgrade it.'
 type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@konvert7/klint",
-  "version": "1.5.3",
+  "version": "1.7.0",
   "description": "Architecture-as-Code linter for TypeScript. Enforce layer boundaries, import rules, and singleton patterns in YAML.",
   "type": "module",
   "bin": {
@@ -46,6 +46,12 @@
     "knip": "knip-bun",
     "klint": "cargo run --quiet -p klint-rs --",
     "jscpd": "jscpd --noTips",
+    "madge": "madge --circular --extensions ts --ts-config tsconfig.json tools tests .agents/hooks",
+    "lf": "bun tools/check-lf.ts",
+    "lf:fix": "bun tools/check-lf.ts --fix",
+    "exact-versions": "bun tools/check-exact-versions.ts",
+    "lock:check": "bun tools/check-lock.ts",
+    "secretlint": "secretlint \"**/*\"",
     "schema": "cargo run --quiet -p klint-rs --example generate_schema -- $npm_package_version",
     "lint-staged": "lint-staged",
     "prepare": "bun .husky/install.mjs"
@@ -53,35 +59,41 @@
   "lint-staged": {
     "*.ts": [
       "bun run check"
+    ],
+    "{package.json,bun.lock,bunfig.toml,.npmrc,Cargo.toml,Cargo.lock}": [
+      "bun run lock:check"
     ]
   },
   "optionalDependencies": {
-    "@konvert7/klint-darwin-arm64": "1.5.3",
-    "@konvert7/klint-darwin-x64": "1.5.3",
-    "@konvert7/klint-linux-arm64": "1.5.3",
-    "@konvert7/klint-linux-x64": "1.5.3",
-    "@konvert7/klint-linux-x64-musl": "1.5.3",
-    "@konvert7/klint-win32-x64": "1.5.3"
+    "@konvert7/klint-darwin-arm64": "1.7.0",
+    "@konvert7/klint-darwin-x64": "1.7.0",
+    "@konvert7/klint-linux-arm64": "1.7.0",
+    "@konvert7/klint-linux-x64": "1.7.0",
+    "@konvert7/klint-linux-x64-musl": "1.7.0",
+    "@konvert7/klint-win32-x64": "1.7.0"
   },
   "devDependencies": {
     "@biomejs/biome": "2.6.5",
-    "@commitlint/cli": "^20.5.3",
-    "@commitlint/config-conventional": "^20.5.3",
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
-    "@types/bun": "latest",
-    "@types/node": "latest",
+    "@commitlint/cli": "20.5.3",
+    "@commitlint/config-conventional": "20.5.3",
+    "@secretlint/secretlint-rule-preset-recommend": "13.1.0",
+    "@semantic-release/changelog": "6.0.3",
+    "@semantic-release/git": "10.0.1",
+    "@semantic-release/github": "12.0.8",
+    "@types/bun": "1.3.14",
+    "@types/node": "25.8.0",
     "@typescript-eslint/parser": "8.72.2",
     "eslint": "9.39.5",
     "eslint-plugin-sonarjs": "3.0.5",
-    "husky": "^9.1.7",
+    "husky": "9.1.7",
     "jscpd": "4.2.3",
-    "knip": "^6.9.0",
-    "lint-staged": "^15.5.2",
-    "semantic-release": "^25.0.3",
-    "typescript": "^5.9.3",
-    "yaml": "^2.9.0"
+    "knip": "6.14.1",
+    "lint-staged": "15.5.2",
+    "madge": "8.0.0",
+    "secretlint": "13.1.0",
+    "semantic-release": "25.0.3",
+    "typescript": "5.9.3",
+    "yaml": "2.9.0"
   },
   "directories": {
     "test": "tests"
@@ -90,5 +102,10 @@
   "bugs": {
     "url": "https://github.com/konvert7/klint/issues"
   },
-  "homepage": "https://github.com/konvert7/klint#readme"
+  "homepage": "https://klint.dev",
+  "overrides": {
+    "eslint-plugin-sonarjs": {
+      "minimatch": "9.0.7"
+    }
+  }
 }