@northguild/gmt-oxlint 1.1.5 → 1.2.1

package/README.md

@@ -59,6 +59,7 @@ export default defineConfig({
     "gmt/no-date-parse": "error",
     "gmt/no-date-utc": "error",
     "gmt/no-date-getTimezoneOffset": "error",
+    "gmt/no-date-library-imports": "error",
   },
 });
 ```
@@ -92,7 +93,8 @@ Or explicitly configure each rule. You can use either a string or an array form:
     "@northguild/gmt-oxlint/no-date-now": "error",
     "@northguild/gmt-oxlint/no-date-parse": "error",
     "@northguild/gmt-oxlint/no-date-utc": "error",
-    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error"
+    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error",
+    "@northguild/gmt-oxlint/no-date-library-imports": "error"
   }
 }
 ```
@@ -109,7 +111,8 @@ Array form also supported:
     "@northguild/gmt-oxlint/no-date-now": ["error"],
     "@northguild/gmt-oxlint/no-date-parse": ["error"],
     "@northguild/gmt-oxlint/no-date-utc": ["error"],
-    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": ["error"]
+    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": ["error"],
+    "@northguild/gmt-oxlint/no-date-library-imports": ["error"]
   }
 }
 ```
@@ -118,13 +121,17 @@ Array form also supported:
 
 | Pattern                    | Rule                        | Suggestion                                                                                                            |
 | -------------------------- | --------------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| `Date` global reference    | `no-date-global`            | Use `getNow()`, `getUnixNow('milliseconds' or 'seconds')`, `getUtcNow()`, or `getZonedNow(timezone)`                  |
+| `Date` global reference    | `no-date-global`            | Use `getNow()`, `getUnixNow({ epochUnit: 'milliseconds' or 'seconds' })`, `getUtcNow()`, or `getZonedNow(timezone)`   |
 | `new Date(...)`            | `no-new-date`               | Use `getUtcNow()`, `getNow()`, or `getZonedNow(timezone)`                                                             |
-| `Date.now()`               | `no-date-now`               | Use `getUnixNow('milliseconds' or 'seconds')` or `getNow()`                                                           |
+| `Date.now()`               | `no-date-now`               | Use `getUnixNow({ epochUnit: 'milliseconds' or 'seconds' })` or `getNow()`                                            |
 | `Date.parse(...)`          | `no-date-parse`             | Use `convertZonedToUnix(value)`                                                                                       |
-| `Date.UTC(...)`            | `no-date-utc`               | Use `convertUtcDateTimeToUnix('YYYY-MM-DDTHH:mm:ss', 'milliseconds' or 'seconds')`                                    |
+| `Date.UTC(...)`            | `no-date-utc`               | Use `convertUtcToUnix('YYYY-MM-DDTHH:mm:ssZ', { epochUnit: 'milliseconds' or 'seconds' })`                            |
 | `date.getTimezoneOffset()` | `no-date-getTimezoneOffset` | Use `getZonedNow(timezone)`, other gmt zoned helpers such as `convertZonedToUnix(value)`, or `Temporal.ZonedDateTime` |
 
+> **`@js-joda/core` is deliberately allowed.** It has its own value types and touches
+> `Date` only at the boundary (reading the clock, host zone lookup, `toDate()` interop),
+> so it does not carry the ambient-timezone and DST problems this ban targets.
+
 ## Why Temporal?
 
 [Temporal](https://tc39.es/proposal-temporal/) solves fundamental issues with JavaScript's `Date` object:

package/config/recommended.json

@@ -5,6 +5,7 @@
     "@northguild/gmt-oxlint/no-date-now": "error",
     "@northguild/gmt-oxlint/no-date-parse": "error",
     "@northguild/gmt-oxlint/no-date-utc": "error",
-    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error"
+    "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error",
+    "@northguild/gmt-oxlint/no-date-library-imports": "error"
   }
 }

package/dist/index.d.ts

@@ -10,6 +10,25 @@ type IdentifierNode = Node & {
 type CallExpressionNode = Node & {
     type: "CallExpression";
     callee: Node;
+    arguments?: Node[];
+};
+type LiteralNode = Node & {
+    type: "Literal";
+    value?: unknown;
+};
+type ImportDeclarationNode = Node & {
+    type: "ImportDeclaration";
+    source: LiteralNode;
+};
+/** `import("date-fns")` — the specifier can be any expression, not just a literal. */
+type ImportExpressionNode = Node & {
+    type: "ImportExpression";
+    source: Node;
+};
+/** `source` is null for `export { x }` with no `from` clause. */
+type ExportFromNode = Node & {
+    type: "ExportNamedDeclaration" | "ExportAllDeclaration";
+    source?: LiteralNode | null;
 };
 type NewExpressionNode = Node & {
     type: "NewExpression";
@@ -38,6 +57,10 @@ type RuleListener = {
     Program?: (node: ProgramNode) => void;
     NewExpression?: (node: NewExpressionNode) => void;
     CallExpression?: (node: CallExpressionNode) => void;
+    ImportDeclaration?: (node: ImportDeclarationNode) => void;
+    ImportExpression?: (node: ImportExpressionNode) => void;
+    ExportNamedDeclaration?: (node: ExportFromNode) => void;
+    ExportAllDeclaration?: (node: ExportFromNode) => void;
 };
 type RuleModule = {
     meta: {
@@ -68,6 +91,7 @@ declare const recommendedRules: {
     readonly "@northguild/gmt-oxlint/no-date-parse": "error";
     readonly "@northguild/gmt-oxlint/no-date-utc": "error";
     readonly "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error";
+    readonly "@northguild/gmt-oxlint/no-date-library-imports": "error";
 };
 declare const recommendedConfig: {
     readonly jsPlugins: readonly ["@northguild/gmt-oxlint"];
@@ -78,6 +102,7 @@ declare const recommendedConfig: {
         readonly "@northguild/gmt-oxlint/no-date-parse": "error";
         readonly "@northguild/gmt-oxlint/no-date-utc": "error";
         readonly "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error";
+        readonly "@northguild/gmt-oxlint/no-date-library-imports": "error";
     };
 };
 declare const plugin: OxlintPlugin;

package/dist/index.js

@@ -1,10 +1,11 @@
 // src/messages.ts
-var MSG_DATE_GLOBAL = "Avoid Date. Use @northguild/gmt getNow(), getUnixNow('milliseconds' | 'seconds'), getUtcNow(), or getZonedNow(timezone) instead.";
+var MSG_DATE_GLOBAL = "Avoid Date. Use @northguild/gmt getNow(), getUnixNow({ epochUnit: 'milliseconds' | 'seconds' }), getUtcNow(), or getZonedNow(timezone) instead.";
 var MSG_NEW_DATE = "Avoid new Date(). Use @northguild/gmt getUtcNow(), getNow(), or getZonedNow(timezone) instead.";
-var MSG_DATE_NOW = "Avoid Date.now(). Use @northguild/gmt getUnixNow('milliseconds' | 'seconds') or getNow() instead.";
-var MSG_DATE_UTC = "Avoid Date.UTC(). Use @northguild/gmt convertUtcDateTimeToUnix('YYYY-MM-DDTHH:mm:ss', 'milliseconds' | 'seconds') instead.";
+var MSG_DATE_NOW = "Avoid Date.now(). Use @northguild/gmt getUnixNow({ epochUnit: 'milliseconds' | 'seconds' }) or getNow() instead.";
+var MSG_DATE_UTC = "Avoid Date.UTC(). Use @northguild/gmt convertUtcToUnix('YYYY-MM-DDTHH:mm:ssZ', { epochUnit: 'milliseconds' | 'seconds' }) instead.";
 var MSG_DATE_PARSE = "Avoid Date.parse(). Use @northguild/gmt convertZonedToUnix(value) instead.";
 var MSG_GET_TIMEZONE_OFFSET = "Avoid date.getTimezoneOffset(). Timezone offsets change throughout the year, so use @northguild/gmt zoned methods instead.";
+var MSG_DATE_LIBRARY_IMPORT = "Avoid date libraries that wrap native Date (moment, dayjs, luxon, date-fns, spacetime). Use @northguild/gmt instead.";
 
 // src/utils/isChainExpression.ts
 function isChainExpression(node) {
@@ -44,6 +45,25 @@ function hasDateStaticMemberCall(node, memberName) {
   return isIdentifier(callee.object, "Date") && isIdentifier(callee.property, memberName);
 }
 
+// src/utils/isBannedDateLibrary.ts
+var BANNED_DATE_LIBRARIES = [
+  "moment",
+  "moment-timezone",
+  "dayjs",
+  "luxon",
+  "date-fns",
+  "date-fns-tz",
+  "spacetime"
+];
+var isBannedDateLibrary = (specifier) => {
+  if (typeof specifier !== "string") {
+    return false;
+  }
+  return BANNED_DATE_LIBRARIES.some(
+    (lib) => specifier === lib || specifier.startsWith(`${lib}/`)
+  );
+};
+
 // src/rules/no-date-getTimezoneOffset.ts
 var noDateGetTimezoneOffsetRule = {
   meta: {
@@ -104,6 +124,47 @@ var noDateGlobalRule = {
   }
 };
 
+// src/rules/no-date-library-imports.ts
+var reportIfBanned = (context, source) => {
+  if (!source || !isBannedDateLibrary(source.value)) {
+    return;
+  }
+  context.report({ node: source, message: MSG_DATE_LIBRARY_IMPORT });
+};
+var noDateLibraryImportsRule = {
+  meta: {
+    type: "problem",
+    docs: {
+      description: "Disallow importing date libraries that wrap native Date objects."
+    },
+    schema: []
+  },
+  create(context) {
+    return {
+      ImportDeclaration(node) {
+        reportIfBanned(context, node.source);
+      },
+      // `export { format } from "date-fns"` re-exports the banned API just as
+      // effectively as importing it. `source` is null for a local re-export.
+      ExportNamedDeclaration(node) {
+        reportIfBanned(context, node.source);
+      },
+      ExportAllDeclaration(node) {
+        reportIfBanned(context, node.source);
+      },
+      ImportExpression(node) {
+        reportIfBanned(context, node.source);
+      },
+      CallExpression(node) {
+        if (!isIdentifier(node.callee, "require")) {
+          return;
+        }
+        reportIfBanned(context, node.arguments?.[0]);
+      }
+    };
+  }
+};
+
 // src/rules/no-date-now.ts
 var noDateNowRule = {
   meta: {
@@ -187,7 +248,8 @@ var recommendedRules = {
   "@northguild/gmt-oxlint/no-date-now": "error",
   "@northguild/gmt-oxlint/no-date-parse": "error",
   "@northguild/gmt-oxlint/no-date-utc": "error",
-  "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error"
+  "@northguild/gmt-oxlint/no-date-getTimezoneOffset": "error",
+  "@northguild/gmt-oxlint/no-date-library-imports": "error"
 };
 var recommendedConfig = {
   jsPlugins: ["@northguild/gmt-oxlint"],
@@ -201,7 +263,8 @@ var plugin = {
     "no-date-now": noDateNowRule,
     "no-date-parse": noDateParseRule,
     "no-date-utc": noDateUtcRule,
-    "no-date-getTimezoneOffset": noDateGetTimezoneOffsetRule
+    "no-date-getTimezoneOffset": noDateGetTimezoneOffsetRule,
+    "no-date-library-imports": noDateLibraryImportsRule
   },
   configs: { recommended: { rules: recommendedRules } }
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@northguild/gmt-oxlint",
-  "version": "1.1.5",
+  "version": "1.2.1",
   "description": "Oxlint JS plugin for banning Date APIs in Temporal-first projects",
   "keywords": [
     "date",
@@ -55,7 +55,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
-    "@tanstack/intent": "^0.3.6",
+    "@tanstack/intent": "^0.4.0",
     "oxlint": "^1.0.0",
     "tsup": "^8.5.0",
     "typescript": "^5.0.0"
@@ -70,7 +70,6 @@
     "test:watch": "vitest --config vitest.config.ts",
     "typecheck": "tsc --project tsconfig.json --noEmit",
     "pack": "npm pack --dry-run",
-    "publish:dry-run": "npm publish --access public --dry-run",
-    "publish:public": "npm publish --access public"
+    "publish:dry-run": "npm publish --access public --dry-run"
   }
 }

package/skills/ci-enforcement/SKILL.md

@@ -5,7 +5,7 @@ description: >
   gmt-oxlint/* diagnostics, and policy alignment with ESLint/Biome where
   multiple linters are used.
 metadata:
-  library_version: 1.1.2
+  library_version: 1.2.0
 ---
 
 # CI Enforcement
@@ -19,6 +19,9 @@ Use this skill when enabling Oxlint-based Date policy checks in CI.
 
 2. Stage adoption for large repos
 - Start with changed files or specific paths if baseline debt is high.
+- `no-date-library-imports` usually carries the largest baseline (every `moment` / `dayjs` /
+  `luxon` / `date-fns` / `spacetime` import). It is safe to run it as `"warn"` for existing
+  paths while keeping it `"error"` for new ones, then tighten as imports are migrated.
 - Expand to full repository enforcement once baseline is controlled.
 
 3. Keep diagnostics actionable

package/skills/first-time-setup/SKILL.md

@@ -5,7 +5,7 @@ description: >
   prefer oxlint.config.ts + recommendedConfig import, and verify gmt-oxlint
   diagnostics while preserving current repository lint behavior.
 metadata:
-  library_version: 1.1.2
+  library_version: 1.2.0
 ---
 
 # First-Time Setup
@@ -30,6 +30,10 @@ Use this skill when a user wants to adopt `@northguild/gmt-oxlint`.
 3. Verify enforcement
 - Run Oxlint and confirm Date API bans are reported.
 - Confirm rule IDs are emitted as `@northguild/gmt-oxlint/*`.
+- The recommended config also enables `no-date-library-imports`, which errors on `moment`,
+  `moment-timezone`, `dayjs`, `luxon`, `date-fns`, `date-fns-tz` and `spacetime` imports.
+  In a codebase that still uses them, warn the user before enabling it, or stage it (see
+  the CI enforcement skill) instead of disabling it.
 
 4. Optional aliasing
 - If the user wants shorter rule IDs, use object-form `jsPlugins` with `name` alias and configure rules under that alias.

package/skills/migration-refactor/SKILL.md

@@ -5,7 +5,7 @@ description: >
   helpers, preserving behavior, and guiding the Temporal custom-method path when
   gmt does not yet provide a needed helper.
 metadata:
-  library_version: 1.1.2
+  library_version: 1.2.0
 ---
 
 # Migration Refactor
@@ -35,6 +35,14 @@ Use this skill when Oxlint reports Date API violations and the user asks for fix
 - `Date.parse(...)` -> gmt conversion helper where available.
 - `Date.UTC(...)` -> gmt UTC conversion helper where available.
 - `getTimezoneOffset()` usage -> timezone-aware gmt zoned helpers.
+- `no-date-library-imports` (`moment`, `moment-timezone`, `dayjs`, `luxon`, `date-fns`,
+  `date-fns-tz`, `spacetime`, including subpaths, `require()` and dynamic `import()`) ->
+  replace the call sites with gmt equivalents, then remove the import. Do not silence it by
+  re-exporting through a local module — `export … from` is flagged too. `@js-joda/core` is
+  intentionally allowed.
+- When porting library arithmetic, keep Temporal's semantics: a non-existent day clamps
+  (`2024-02-29` + 1 year → `2025-02-28`); date-fns `setYear` rolls to 1 March instead, so
+  flag that behaviour change to the user rather than copying it.
 
 ## Validation