@opensip-cli/checks-universal 0.1.0

package/dist/checks/quality/graph-ignore-hygiene.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Coverage for the `graph-ignore-hygiene` check (ADR-0014): validates that
+ * `@graph-ignore` directives carry a `graph:`-namespaced rule id and a
+ * `-- reason`, and flags files with an excessive number of suppressions.
+ *
+ * The pure detector behind this check is not exported, so the test drives the
+ * real wired check via `Check.run(cwd, { targetFiles })` against on-disk `.ts`
+ * fixtures (the check is `fileTypes: ['ts']`, `contentFilter: 'raw'`). Each
+ * violation's `type` is carried into `signal.metadata.type` by the framework,
+ * which is what we assert on. Runs inside a `RunScope` because the check path
+ * reads the current scope (content-filter dispatch, directive filtering).
+ */
+export {};
+//# sourceMappingURL=graph-ignore-hygiene.test.d.ts.map

package/dist/checks/quality/graph-ignore-hygiene.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-ignore-hygiene.test.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/graph-ignore-hygiene.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/checks/quality/graph-ignore-hygiene.test.js

@@ -0,0 +1,58 @@
+/**
+ * Coverage for the `graph-ignore-hygiene` check (ADR-0014): validates that
+ * `@graph-ignore` directives carry a `graph:`-namespaced rule id and a
+ * `-- reason`, and flags files with an excessive number of suppressions.
+ *
+ * The pure detector behind this check is not exported, so the test drives the
+ * real wired check via `Check.run(cwd, { targetFiles })` against on-disk `.ts`
+ * fixtures (the check is `fileTypes: ['ts']`, `contentFilter: 'raw'`). Each
+ * violation's `type` is carried into `signal.metadata.type` by the framework,
+ * which is what we assert on. Runs inside a `RunScope` because the check path
+ * reads the current scope (content-filter dispatch, directive filtering).
+ */
+import { mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { makeTestScope, withScope } from '@opensip-cli/test-support';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { graphIgnoreHygiene } from './graph-ignore-hygiene.js';
+let root;
+beforeEach(async () => {
+    root = await mkdtemp(join(tmpdir(), 'graph-hygiene-'));
+});
+afterEach(async () => {
+    await rm(root, { recursive: true, force: true });
+});
+/**
+ * Write `content` to `name.ts` under the temp root, run the check against just
+ * that file, and return the violation `type`s it produced.
+ */
+async function violationTypes(name, content) {
+    const filePath = join(root, name);
+    await writeFile(filePath, content, 'utf8');
+    const result = await withScope(makeTestScope(), () => graphIgnoreHygiene.run(root, { targetFiles: [filePath] }));
+    return result.signals.map((s) => s.metadata.type);
+}
+describe('graph-ignore-hygiene', () => {
+    it('flags a directive missing a -- reason as ignore-without-reason', async () => {
+        const types = await violationTypes('a.ts', '// @graph-ignore-next-line graph:cycle\nfunction visit() {}\n');
+        expect(types).toContain('ignore-without-reason');
+    });
+    it('flags a non-graph-namespaced id as invalid-ignore-slug', async () => {
+        const types = await violationTypes('b.ts', '// @graph-ignore-next-line cycle -- has a reason\nfunction visit() {}\n');
+        expect(types).toContain('invalid-ignore-slug');
+    });
+    it('accepts a valid graph: id with a reason — no violation', async () => {
+        const types = await violationTypes('c.ts', '// @graph-ignore-next-line graph:cycle -- intentional recursion\nfunction visit() {}\n');
+        expect(types).toHaveLength(0);
+    });
+    it('flags more than 7 directives in one file as excessive-ignores', async () => {
+        const lines = [];
+        for (let i = 0; i < 8; i++) {
+            lines.push(`// @graph-ignore-next-line graph:cycle -- reason ${String(i)}`, `function visit${String(i)}() {}`);
+        }
+        const types = await violationTypes('d.ts', lines.join('\n'));
+        expect(types).toContain('excessive-ignores');
+    });
+});
+//# sourceMappingURL=graph-ignore-hygiene.test.js.map

package/dist/checks/quality/graph-ignore-hygiene.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-ignore-hygiene.test.js","sourceRoot":"","sources":["../../../src/checks/quality/graph-ignore-hygiene.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,IAAI,IAAY,CAAC;AAEjB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CACnD,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAC1D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAA0B,CAAC,CAAC;AAC1E,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,MAAM,EACN,+DAA+D,CAChE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,MAAM,EACN,yEAAyE,CAC1E,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,MAAM,EACN,wFAAwF,CACzF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,oDAAoD,MAAM,CAAC,CAAC,CAAC,EAAE,EAC/D,iBAAiB,MAAM,CAAC,CAAC,CAAC,OAAO,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/checks/quality/index.d.ts

@@ -0,0 +1,16 @@
+export * from './api/index.js';
+export * from './code-structure/index.js';
+export * from './dependency-version-consistency.js';
+export * from './fitness-ignore-hygiene.js';
+export * from './frontend/index.js';
+export * from './graph-ignore-hygiene.js';
+export * from './linting/index.js';
+export * from './no-compatibility-layer-names.js';
+export * from './no-deprecated-tags.js';
+export * from './no-markdown-references.js';
+export * from './no-raw-regex-on-code.js';
+export * from './no-temporary-workarounds.js';
+export * from './no-window-alert.js';
+export * from './observability/index.js';
+export * from './patterns/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/quality/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC"}

package/dist/checks/quality/index.js

@@ -0,0 +1,16 @@
+export * from './api/index.js';
+export * from './code-structure/index.js';
+export * from './dependency-version-consistency.js';
+export * from './fitness-ignore-hygiene.js';
+export * from './frontend/index.js';
+export * from './graph-ignore-hygiene.js';
+export * from './linting/index.js';
+export * from './no-compatibility-layer-names.js';
+export * from './no-deprecated-tags.js';
+export * from './no-markdown-references.js';
+export * from './no-raw-regex-on-code.js';
+export * from './no-temporary-workarounds.js';
+export * from './no-window-alert.js';
+export * from './observability/index.js';
+export * from './patterns/index.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/quality/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/quality/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC"}

package/dist/checks/quality/linting/eslint-justifications.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview ESLint Justifications check
+ */
+/**
+ * Check: quality/eslint-justifications
+ *
+ * Ensures all ESLint suppressions have proper justifications.
+ * Missing justifications are errors; generic justifications are warnings.
+ *
+ */
+export declare const eslintJustifications: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=eslint-justifications.d.ts.map

package/dist/checks/quality/linting/eslint-justifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint-justifications.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/eslint-justifications.ts"],"names":[],"mappings":"AACA;;GAEG;AA6VH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,sCA8C/B,CAAC"}

package/dist/checks/quality/linting/eslint-justifications.js

@@ -0,0 +1,328 @@
+// @fitness-ignore-file file-length-limit -- Complex module with tightly coupled logic; refactoring would risk breaking changes
+/**
+ * @fileoverview ESLint Justifications check
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+const ISSUE_TYPE_MISSING_JUSTIFICATION = 'missing-justification';
+const ISSUE_TYPE_GENERIC_JUSTIFICATION = 'generic-justification';
+const ISSUE_TYPE_MALFORMED = 'malformed';
+// =============================================================================
+// PRE-COMPILED REGEX PATTERNS
+// =============================================================================
+// Generic justification patterns - pre-compiled for safety
+const GENERIC_TODO_PATTERN = /^todo$/i;
+const GENERIC_FIX_PATTERN = /^fix\s?(?:this|later|me)?$/i;
+const GENERIC_TEMPORARY_PATTERN = /^temporary$/i;
+const GENERIC_TEMP_PATTERN = /^temp$/i;
+const GENERIC_WIP_PATTERN = /^wip$/i;
+const GENERIC_IGNORE_PATTERN = /^ignore$/i;
+const GENERIC_SKIP_PATTERN = /^skip$/i;
+const GENERIC_DISABLED_PATTERN = /^disabled?$/i;
+const GENERIC_HACK_PATTERN = /^hack$/i;
+const GENERIC_WORKAROUND_PATTERN = /^workaround$/i;
+const GENERIC_NEEDED_PATTERN = /^needed$/i;
+const GENERIC_REQUIRED_PATTERN = /^required$/i;
+const GENERIC_NECESSARY_PATTERN = /^necessary$/i;
+const GENERIC_LEGACY_PATTERN = /^legacy$/i;
+const GENERIC_OLD_CODE_PATTERN = /^old\s?code$/i;
+const GENERIC_QUICK_FIX_PATTERN = /^quick\s?fix$/i;
+const GENERIC_HOTFIX_PATTERN = /^hotfix$/i;
+const GENERIC_WILL_FIX_PATTERN = /^will\s?fix$/i;
+const GENERIC_TO_BE_FIXED_PATTERN = /^to\s?be\s?fixed$/i;
+const GENERIC_NOT_SURE_PATTERN = /^not\s?sure$/i;
+const GENERIC_UNCLEAR_PATTERN = /^unclear$/i;
+const GENERIC_JUSTIFICATIONS = [
+    GENERIC_TODO_PATTERN,
+    GENERIC_FIX_PATTERN,
+    GENERIC_TEMPORARY_PATTERN,
+    GENERIC_TEMP_PATTERN,
+    GENERIC_WIP_PATTERN,
+    GENERIC_IGNORE_PATTERN,
+    GENERIC_SKIP_PATTERN,
+    GENERIC_DISABLED_PATTERN,
+    GENERIC_HACK_PATTERN,
+    GENERIC_WORKAROUND_PATTERN,
+    GENERIC_NEEDED_PATTERN,
+    GENERIC_REQUIRED_PATTERN,
+    GENERIC_NECESSARY_PATTERN,
+    GENERIC_LEGACY_PATTERN,
+    GENERIC_OLD_CODE_PATTERN,
+    GENERIC_QUICK_FIX_PATTERN,
+    GENERIC_HOTFIX_PATTERN,
+    GENERIC_WILL_FIX_PATTERN,
+    GENERIC_TO_BE_FIXED_PATTERN,
+    GENERIC_NOT_SURE_PATTERN,
+    GENERIC_UNCLEAR_PATTERN,
+];
+// ESLint suppression patterns - pre-compiled with bounded quantifiers to avoid ReDoS
+const ESLINT_DISABLE_NEXT_LINE_PATTERN = /\/\/\s{0,5}eslint-disable-next-line\s{1,5}([^\n]{1,500})/;
+const ESLINT_DISABLE_LINE_PATTERN = /\/\/\s{0,5}eslint-disable-line\s{1,5}([^\n]{1,500})/;
+const ESLINT_DISABLE_INLINE_PATTERN = /\/\/\s{0,5}eslint-disable\s{1,5}([^\n]{1,500})/;
+const ESLINT_DISABLE_BLOCK_PATTERN = /\/\*\s{0,5}eslint-disable(?:\s{1,5}([^*]{1,400}))?\s{0,5}\*\//;
+// Rationale capture caps at MAX_JUSTIFICATION_LENGTH so the boundary
+// the regex enforces matches the explicit length check at line 160.
+// Previously the regex capped at 400 while the constant was 500 —
+// rationales between 401 and 500 chars matched the disable pattern
+// (which accepts up to 500) but failed the rationale regex, producing
+// a misleading "Malformed ESLint suppression comment" error instead
+// of the accurate "too long" message. Aligning both to 500 closes
+// that gap.
+const JUSTIFICATION_PATTERN = /^([\w/@-]{1,100}(?:\s{0,3},\s{0,3}[\w/@-]{1,100}){0,9})(?:\s{1,5}--\s{1,5}([^\n]{1,500}))?$/;
+const MAX_JUSTIFICATION_LENGTH = 500;
+// Track multi-line block disable/enable pairs
+const BLOCK_DISABLE_START_PATTERN = /\/\*\s{0,5}eslint-disable(?:\s{1,5}([^*]{1,400}))?\s{0,5}$/;
+const BLOCK_DISABLE_END_PATTERN = /^\s{0,10}\*\//;
+const BLOCK_ENABLE_PATTERN = /\/\*\s{0,5}eslint-enable/;
+// Other patterns
+const COMMENTED_OUT_PATTERN = /^\s{0,20}\/\/\s{0,5}\/\//;
+// =============================================================================
+// ANALYSIS FUNCTIONS
+// =============================================================================
+/**
+ * Validates generic justification patterns
+ */
+function isGenericJustification(justification) {
+    const trimmed = justification.trim();
+    return GENERIC_JUSTIFICATIONS.some((pattern) => pattern.test(trimmed));
+}
+/**
+ * Determine suppression type from matches
+ */
+function getSuppressionType(hasNextLine, hasDisableLine) {
+    if (hasNextLine) {
+        return 'eslint-disable-next-line';
+    }
+    if (hasDisableLine) {
+        return 'eslint-disable-line';
+    }
+    return 'eslint-disable';
+}
+/**
+ * Check inline ESLint suppressions (disable-next-line, disable-line, disable)
+ */
+function checkInlineSuppressions(line, lineNumber) {
+    const issues = [];
+    // Check for disable-next-line, disable-line, and standalone disable
+    const disableNextLineMatch = ESLINT_DISABLE_NEXT_LINE_PATTERN.exec(line);
+    const disableLineMatch = ESLINT_DISABLE_LINE_PATTERN.exec(line);
+    const disableMatch = ESLINT_DISABLE_INLINE_PATTERN.exec(line);
+    const match = disableNextLineMatch ?? disableLineMatch ?? disableMatch;
+    const suppressionType = getSuppressionType(disableNextLineMatch !== null, disableLineMatch !== null);
+    if (!match) {
+        return issues;
+    }
+    const afterRule = match[1];
+    if (!afterRule) {
+        return issues;
+    }
+    // Limit input length to prevent ReDoS
+    const trimmedAfterRule = afterRule.trim();
+    if (trimmedAfterRule.length > MAX_JUSTIFICATION_LENGTH) {
+        issues.push({
+            line: lineNumber,
+            type: ISSUE_TYPE_MALFORMED,
+            comment: line.trim(),
+            message: `ESLint justification too long (max ${MAX_JUSTIFICATION_LENGTH} characters)`,
+        });
+        return issues;
+    }
+    const justificationMatch = JUSTIFICATION_PATTERN.exec(trimmedAfterRule);
+    if (!justificationMatch?.[1]) {
+        issues.push({
+            line: lineNumber,
+            type: ISSUE_TYPE_MALFORMED,
+            comment: line.trim(),
+            message: 'Malformed ESLint suppression comment',
+        });
+        return issues;
+    }
+    const [, rule, justification] = justificationMatch;
+    if (!justification) {
+        issues.push({
+            line: lineNumber,
+            type: ISSUE_TYPE_MISSING_JUSTIFICATION,
+            rule,
+            comment: line.trim(),
+            message: `ESLint suppression for '${rule}' missing justification. Add: // ${suppressionType} ${rule} -- [specific reason why this rule doesn't apply]`,
+        });
+    }
+    else if (isGenericJustification(justification)) {
+        issues.push({
+            line: lineNumber,
+            type: ISSUE_TYPE_GENERIC_JUSTIFICATION,
+            rule,
+            comment: line.trim(),
+            message: `Generic justification for '${rule}': "${justification}". Replace with specific reason (e.g., "Third-party API returns untyped data" or "Validated by Zod schema above")`,
+        });
+    }
+    return issues;
+}
+/**
+ * Check single-line block ESLint suppressions
+ */
+function checkBlockSuppressions(line, lineNumber) {
+    const blockDisableMatch = ESLINT_DISABLE_BLOCK_PATTERN.exec(line);
+    if (!blockDisableMatch) {
+        return null;
+    }
+    const rules = blockDisableMatch[1];
+    if (rules && !rules.includes('--')) {
+        return {
+            line: lineNumber,
+            type: ISSUE_TYPE_MISSING_JUSTIFICATION,
+            comment: line.trim(),
+            message: `Block-level ESLint disable missing justification. Add: /* eslint-disable ${rules} -- [specific reason] */`,
+        };
+    }
+    return null;
+}
+/* v8 ignore start -- block-state machine has many edge-case branches; covered indirectly via integration */
+/**
+ * Process a line for suppressions
+ */
+function processLineForSuppressions(line, lineNumber, state, issues) {
+    // Skip commented-out suppressions
+    if (COMMENTED_OUT_PATTERN.test(line)) {
+        return;
+    }
+    // Check for multi-line block start
+    const blockStartMatch = BLOCK_DISABLE_START_PATTERN.exec(line);
+    if (blockStartMatch && !state.inMultiLineBlock) {
+        state.inMultiLineBlock = true;
+        state.blockStartLine = lineNumber;
+        state.blockRules = blockStartMatch[1] ?? null;
+        return;
+    }
+    // Check for multi-line block end
+    if (state.inMultiLineBlock && BLOCK_DISABLE_END_PATTERN.test(line)) {
+        if (state.blockRules && !state.blockRules.includes('--')) {
+            issues.push({
+                line: state.blockStartLine,
+                type: ISSUE_TYPE_MISSING_JUSTIFICATION,
+                comment: `Multi-line eslint-disable block`,
+                message: `Multi-line ESLint disable block missing justification. Add: /* eslint-disable ${state.blockRules} -- [specific reason] */`,
+            });
+        }
+        state.inMultiLineBlock = false;
+        state.blockStartLine = 0;
+        state.blockRules = null;
+        return;
+    }
+    // Check for block enable (closes any open block)
+    if (BLOCK_ENABLE_PATTERN.test(line)) {
+        state.inMultiLineBlock = false;
+        state.blockStartLine = 0;
+        state.blockRules = null;
+        return;
+    }
+    // Check inline suppressions
+    const inlineIssues = checkInlineSuppressions(line, lineNumber);
+    issues.push(...inlineIssues);
+    // Check single-line block suppressions
+    const blockIssue = checkBlockSuppressions(line, lineNumber);
+    if (blockIssue) {
+        issues.push(blockIssue);
+    }
+}
+/* v8 ignore stop */
+/**
+ * Validates ESLint suppressions in a file
+ */
+function validateESLintSuppressions(content) {
+    const issues = [];
+    const lines = content.split('\n');
+    const state = {
+        inMultiLineBlock: false,
+        blockStartLine: 0,
+        blockRules: null,
+    };
+    for (const [i, line] of lines.entries()) {
+        if (!line)
+            continue;
+        processLineForSuppressions(line, i + 1, state, issues);
+    }
+    // If we ended with an open block, report it
+    if (state.inMultiLineBlock && state.blockRules && !state.blockRules.includes('--')) {
+        issues.push({
+            line: state.blockStartLine,
+            type: ISSUE_TYPE_MISSING_JUSTIFICATION,
+            comment: `Unclosed multi-line eslint-disable block`,
+            message: `Unclosed multi-line ESLint disable block missing justification`,
+        });
+    }
+    return issues;
+}
+// =============================================================================
+// HELPERS
+// =============================================================================
+function getSuggestionForIssueType(issueType) {
+    switch (issueType) {
+        case ISSUE_TYPE_MISSING_JUSTIFICATION: {
+            return 'Add a justification after -- explaining why this rule is suppressed';
+        }
+        case ISSUE_TYPE_GENERIC_JUSTIFICATION: {
+            return 'Replace generic justification with a specific explanation of why this rule does not apply here';
+        }
+        default: {
+            return 'Fix the malformed eslint directive format: // eslint-disable-next-line rule-name -- reason';
+        }
+    }
+}
+function getSeverityForIssueType(issueType) {
+    return issueType === ISSUE_TYPE_GENERIC_JUSTIFICATION ? 'warning' : 'error';
+}
+// =============================================================================
+// CHECK DEFINITION
+// =============================================================================
+/**
+ * Check: quality/eslint-justifications
+ *
+ * Ensures all ESLint suppressions have proper justifications.
+ * Missing justifications are errors; generic justifications are warnings.
+ *
+ */
+export const eslintJustifications = defineCheck({
+    id: '92d8f5de-dc11-40eb-aaf4-e77159975825',
+    slug: 'eslint-justifications',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'medium',
+    description: 'Ensures all ESLint suppressions have proper justifications',
+    longDescription: `**Purpose:** Enforces that every \`eslint-disable\` directive includes a meaningful, specific justification explaining why the rule is suppressed.
+
+**Detects:**
+- Missing justifications on \`eslint-disable-next-line\`, \`eslint-disable-line\`, inline \`eslint-disable\`, and block \`/* eslint-disable */\` comments
+- Generic justifications matching patterns like \`todo\`, \`fix later\`, \`temporary\`, \`hack\`, \`workaround\`, \`needed\`, \`legacy\`, etc. (21 patterns total)
+- Malformed suppression comments and justifications exceeding 500 characters
+- Multi-line block disable/enable pairs without justifications
+
+**Why it matters:** Unjustified suppressions hide technical debt and make it impossible to determine whether a suppression is still necessary. Requiring specific reasons ensures suppressions are intentional and reviewable.
+
+**Scope:** Analyzes each file individually. General best practice.`,
+    tags: ['compliance', 'documentation', 'quality'],
+    fileTypes: ['ts', 'tsx'],
+    analyze: (content, filePath) => {
+        const violations = [];
+        // Early exit optimization: skip files without any suppressions
+        if (!content.includes('eslint-disable')) {
+            return violations;
+        }
+        const issues = validateESLintSuppressions(content);
+        for (const issue of issues) {
+            violations.push({
+                filePath,
+                line: issue.line,
+                message: issue.message,
+                severity: getSeverityForIssueType(issue.type),
+                suggestion: getSuggestionForIssueType(issue.type),
+                type: issue.type,
+                match: issue.comment,
+            });
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=eslint-justifications.js.map

package/dist/checks/quality/linting/eslint-justifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint-justifications.js","sourceRoot":"","sources":["../../../../src/checks/quality/linting/eslint-justifications.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,gCAAgC,GAAG,uBAAgC,CAAC;AAC1E,MAAM,gCAAgC,GAAG,uBAAgC,CAAC;AAC1E,MAAM,oBAAoB,GAAG,WAAoB,CAAC;AAElD,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAC1D,MAAM,yBAAyB,GAAG,cAAc,CAAC;AACjD,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AACrC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AAChD,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,0BAA0B,GAAG,eAAe,CAAC;AACnD,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAC/C,MAAM,yBAAyB,GAAG,cAAc,CAAC;AACjD,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACjD,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACjD,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AACzD,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACjD,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAE7C,MAAM,sBAAsB,GAAG;IAC7B,oBAAoB;IACpB,mBAAmB;IACnB,yBAAyB;IACzB,oBAAoB;IACpB,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,wBAAwB;IACxB,oBAAoB;IACpB,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,2BAA2B;IAC3B,wBAAwB;IACxB,uBAAuB;CACxB,CAAC;AAEF,qFAAqF;AACrF,MAAM,gCAAgC,GAAG,0DAA0D,CAAC;AACpG,MAAM,2BAA2B,GAAG,qDAAqD,CAAC;AAC1F,MAAM,6BAA6B,GAAG,gDAAgD,CAAC;AACvF,MAAM,4BAA4B,GAChC,+DAA+D,CAAC;AAClE,qEAAqE;AACrE,oEAAoE;AACpE,kEAAkE;AAClE,mEAAmE;AACnE,sEAAsE;AACtE,oEAAoE;AACpE,kEAAkE;AAClE,YAAY;AACZ,MAAM,qBAAqB,GACzB,6FAA6F,CAAC;AAChG,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,8CAA8C;AAC9C,MAAM,2BAA2B,GAAG,4DAA4D,CAAC;AACjG,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAClD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAExD,iBAAiB;AACjB,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAyBzD,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,sBAAsB,CAAC,aAAqB;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,WAAoB,EAAE,cAAuB;IACvE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAY,EAAE,UAAkB;IAC/D,MAAM,MAAM,GAA6B,EAAE,CAAC;IAE5C,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,oBAAoB,IAAI,gBAAgB,IAAI,YAAY,CAAC;IACvE,MAAM,eAAe,GAAG,kBAAkB,CACxC,oBAAoB,KAAK,IAAI,EAC7B,gBAAgB,KAAK,IAAI,CAC1B,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sCAAsC;IACtC,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,gBAAgB,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,sCAAsC,wBAAwB,cAAc;SACtF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAExE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,kBAAkB,CAAC;IAEnD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,gCAAgC;YACtC,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,2BAA2B,IAAI,oCAAoC,eAAe,IAAI,IAAI,mDAAmD;SACvJ,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,sBAAsB,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,gCAAgC;YACtC,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,8BAA8B,IAAI,OAAO,aAAa,mHAAmH;SACnL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAY,EAAE,UAAkB;IAC9D,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,4EAA4E,KAAK,0BAA0B;SACrH,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G;;GAEG;AACH,SAAS,0BAA0B,CACjC,IAAY,EACZ,UAAkB,EAClB,KAAiB,EACjB,MAAgC;IAEhC,kCAAkC;IAClC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO;IACT,CAAC;IAED,mCAAmC;IACnC,MAAM,eAAe,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,eAAe,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC/C,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,cAAc,GAAG,UAAU,CAAC;QAClC,KAAK,CAAC,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,IAAI,KAAK,CAAC,gBAAgB,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK,CAAC,cAAc;gBAC1B,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,iCAAiC;gBAC1C,OAAO,EAAE,iFAAiF,KAAK,CAAC,UAAU,0BAA0B;aACrI,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC/B,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,OAAO;IACT,CAAC;IAED,iDAAiD;IACjD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC/B,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IAE7B,uCAAuC;IACvC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AACD,oBAAoB;AAEpB;;GAEG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAe;QACxB,gBAAgB,EAAE,KAAK;QACvB,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,IAAI;KACjB,CAAC;IAEF,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,0BAA0B,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,cAAc;YAC1B,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,0CAA0C;YACnD,OAAO,EAAE,gEAAgE;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,yBAAyB,CAAC,SAAoB;IACrD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,OAAO,qEAAqE,CAAC;QAC/E,CAAC;QACD,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,OAAO,gGAAgG,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,4FAA4F,CAAC;QACtG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAoB;IACnD,OAAO,SAAS,KAAK,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IAEpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,4DAA4D;IACzE,eAAe,EAAE;;;;;;;;;;mEAUgD;IACjE,IAAI,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC;IAChD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAoB,EAAE;QAC/D,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,+DAA+D;QAC/D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAEnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC7C,UAAU,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/linting/index.d.ts

@@ -0,0 +1,4 @@
+export * from './eslint-justifications.js';
+export * from './semgrep-justifications.js';
+export * from './typescript-directive-hygiene.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/quality/linting/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC"}

package/dist/checks/quality/linting/index.js

@@ -0,0 +1,4 @@
+export * from './eslint-justifications.js';
+export * from './semgrep-justifications.js';
+export * from './typescript-directive-hygiene.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/quality/linting/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/checks/quality/linting/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC"}

package/dist/checks/quality/linting/semgrep-justifications.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview Semgrep Justifications check
+ *
+ * Validates that all nosemgrep directives have proper justifications.
+ * Similar to eslint-justifications, this ensures suppression directives
+ * are documented with specific reasons.
+ */
+/**
+ * Check: quality/semgrep-justifications
+ *
+ * Ensures all nosemgrep suppressions have proper justifications.
+ * Missing justifications are errors; generic justifications are warnings.
+ * Blanket suppressions (without rule IDs) are errors.
+ */
+export declare const semgrepJustifications: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=semgrep-justifications.d.ts.map

package/dist/checks/quality/linting/semgrep-justifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep-justifications.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/semgrep-justifications.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AA8NH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,sCA8ChC,CAAC"}