@ploaness/config 1.0.0 → 1.1.0

package/biome-core.json

@@ -62,7 +62,7 @@
                   "kind": "objectLiteralProperty"
                 },
                 "match": "_*(.+)",
-                "formats": ["camelCase", "CONSTANT_CASE", "PascalCase"]
+                "formats": ["camelCase", "CONSTANT_CASE", "PascalCase", "snake_case"]
               },
               {
                 "selector": {
@@ -93,7 +93,8 @@
       },
       "performance": {
         "noBarrelFile": "off",
-        "noJsxPropsBind": "off"
+        "noJsxPropsBind": "off",
+        "noAccumulatingSpread": "off"
       },
       "suspicious": {
         "noDoubleEquals": "error",

package/biome.json

@@ -7,6 +7,11 @@
       "react": "all",
       "next": "all",
       "project": "all"
+    },
+    "rules": {
+      "a11y": {
+        "noNoninteractiveElementToInteractiveRole": "off"
+      }
     }
   }
 }

package/dist/a11y.d.ts

@@ -1,3 +1,27 @@
+export type { HitTargetClassification, HitTargetProbe, HitTargetVerdict, } from '@ploaness/governance';
+export { classifyHitTarget, findDefiniteIncomplete } from '@ploaness/governance';
+import type { Page } from '@playwright/test';
 export declare const SKIPPED_ROUTE_PREFIXES: readonly string[];
 export declare const MAX_SWEEP_ROUTES: number;
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export declare const settleForScan: (page: Page) => Promise<void>;
+/**
+ * The pages this project declares that the sweep did not cover, each with what to do about it.
+ *
+ * Answers with nothing when the member declares no application routes at all, which is the honest
+ * result for a package that has no app directory rather than a claim that its pages are covered.
+ * @param visitedRoutes the addresses the crawl reached and scanned.
+ * @param answeredRoutes the addresses that answered, forwarding ones included.
+ * @returns one sentence per uncovered page, ready to be shown as a failure.
+ */
+export declare const unsweptRoutes: (visitedRoutes: readonly string[], answeredRoutes: readonly string[]) => readonly string[];
 //# sourceMappingURL=a11y.d.ts.map

package/dist/a11y.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"a11y.d.ts","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA4C,CAAA;AAEhG,eAAO,MAAM,gBAAgB,EAAE,MAAiD,CAAA"}
+{"version":3,"file":"a11y.d.ts","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAkBA,YAAY,EACV,uBAAuB,EACvB,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAIhF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAW5C,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA4C,CAAA;AAEhG,eAAO,MAAM,gBAAgB,EAAE,MAAiD,CAAA;AA8IhF;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,GAAU,MAAM,IAAI,KAAG,OAAO,CAAC,IAAI,CAU5D,CAAA;AAyDD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,GACxB,eAAe,SAAS,MAAM,EAAE,EAChC,gBAAgB,SAAS,MAAM,EAAE,KAChC,SAAS,MAAM,EAgBjB,CAAA"}

package/dist/a11y.js

@@ -1,9 +1,228 @@
-// The two facts the shipped accessibility sweep cannot know about the project it runs in.
+// What the shipped accessibility sweep cannot know about the project it runs in, and the two decisions
+// it must not make for itself.
 //
-// The sweep itself is a managed file, byte-identical in every consumer, so this module is the whole of
-// its configuration surface. Both entries are one-directional: a project may add a route prefix the
-// crawl must not follow and may lower the route ceiling, and can do neither in the other direction.
+// The sweep is a managed file, byte-identical in every consumer, so this module is the whole of its
+// configuration surface. The first two entries are one-directional: a project may add a route prefix
+// the crawl must not follow and may lower the route ceiling, and can do neither in the other
+// direction.
+//
+// The last two are not configuration at all. They are rules, so they live in `@ploaness/governance`
+// where a spec exercises them against captured axe output and against probe shapes no browser has to
+// produce on demand, and they are re-exported here because the sweep imports through one entry point.
+//
+// `settleForScan` is a third kind again: neither a setting nor a rule, but the one piece of I/O the
+// sweep cannot do without and cannot keep to itself. It is here rather than in `@ploaness/governance`
+// because that package forbids I/O, and here rather than inside the sweep because a project has to
+// write its own scans for the pages the crawl cannot discover - an unlinked page, a custom admin view -
+// and two definitions of "the page is ready" would drift.
+export { classifyHitTarget, findDefiniteIncomplete } from '@ploaness/governance';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { appRootOf, declaredRoutesOf, findUnsweptRoutes, } from '@ploaness/governance';
 import { projectSettings } from './project-settings.js';
 export const SKIPPED_ROUTE_PREFIXES = projectSettings.accessibilitySkipRoutes;
 export const MAX_SWEEP_ROUTES = projectSettings.accessibilityRouteBudget;
+// Why a scan needs a wait at all: `page.goto` resolves at the `load` event, and a React application
+// hydrates after that. axe measured in between reads a tree still being assembled - a heading whose
+// level has not resolved lands in `incomplete`, which a consuming project saw on one run in three -
+// and reads contrast against text the final font has not laid out yet.
+//
+// WHAT IT WAITS FOR, in this order: the document's font set has answered; the element count has held
+// steady across two consecutive animation frames; every animation that will ever end has ended; and
+// the count has held steady once more. Fonts first, because contrast is measured on rendered pixels
+// and a face that arrives late reflows the text being judged. The count before the animations rather
+// than after, for the reason written beside it - an animation cannot be waited for until something has
+// created it, and on a hydrating page the mount is what creates it. Two frames rather than one,
+// because React yields between hydration segments and a
+// yield that happens to straddle a frame boundary is indistinguishable from a finished render if only
+// one frame is asked. A fixed count of frames was the first draft and was wrong in the direction that
+// matters: it settles the pages that were never the problem and gives up on a heavy panel exactly
+// where the defect lives.
+//
+// WHY ANIMATIONS ARE PART OF IT. An element count cannot see an opacity. A page that fades its content
+// in changes no element while it does so, so the count was steady two frames after hydration and a
+// scan then measured a half-transparent paragraph - and axe blends a partial opacity toward the
+// background exactly as an eye does, so it reported a contrast this page never actually renders at
+// rest. That is the harmless direction. The other one is why this is a correctness fix rather than a
+// convenience: text animating TOWARDS a colour too pale to read was measured at its opening frame and
+// PASSED, so the sweep built to catch contrast defects returned green on a page whose resting state is
+// a defect. Waiting for the animations to end measures the state a reader is left looking at.
+//
+// An animation that never ends is excluded rather than waited on, and the distinction is the whole
+// reason this does not simply cost the budget. A spinner has no resting state to wait for, so awaiting
+// it would spend the ceiling below on every settle of every control of every route, in exchange for
+// nothing. `finished` never resolves for one, which is a hang the ceiling would absorb silently. The
+// test for it is `iterations`, which a spinner reports as `Infinity`; a paused or already-finished
+// animation is excluded too, because it is showing the frame a reader is looking at right now.
+//
+// A cancelled animation REJECTS `finished` rather than resolving, and that rejection is swallowed. A
+// cancellation is a state change like any other and the element-count check notices it; ending the
+// whole settle over one cancelled transition would report nothing useful about the page.
+//
+// The two callbacks below are written inline rather than named, which is not a style preference: a
+// named helper closing over nothing is one the shipped rules ask to be hoisted to the outer scope, and
+// the outer scope is the one place this function may not reach.
+//
+// WHY NOT `networkidle`. Playwright's own documentation discourages it; it throws on expiry rather
+// than resolving; and it answers a different question. A page can be network-idle and mid-hydration.
+// It is also unusable here in particular: the sweep runs against `next dev`, whose every page holds a
+// hot-reload socket open, so no page it ever visits goes idle.
+//
+// WHY THE CEILING IS A TIMER. `requestAnimationFrame` does not fire in a page the browser has
+// backgrounded, so a frame-counted ceiling is not a ceiling. A throttled background timer still fires.
+// The race is inside the page for the same reason the hit-target probe does its work in one
+// `evaluate`: a Node-side race would leave the in-page promise pending against a context the next
+// navigation destroys.
+const SETTLE_BUDGET_MS = 1000;
+// Everything this function needs is inside it. Playwright ships a page function to the browser as its
+// own source text, so a reference to anything at module scope here would be a ReferenceError in the
+// page rather than a compile error in this file - the one mistake this shape cannot be checked for.
+// It is also why the animation wait below is written inline rather than as a helper of its own.
+const settleInPage = async (budgetMs) => {
+    const quietFrames = 2;
+    // Recursive rather than a loop over a counter, because there is no mutable binding to count with:
+    // this repository bans `let` and in-place mutation in its own source as well as in a consumer's. Each
+    // step awaits a frame, so what grows is frames rather than stack - an awaited recursion returns to
+    // the microtask queue every time. The frame is awaited inline because this is its only caller.
+    const stable = async (previous, remaining) => {
+        await new Promise((resolve) => {
+            requestAnimationFrame(() => {
+                resolve();
+            });
+        });
+        const current = document.querySelectorAll('*').length;
+        if (current !== previous) {
+            await stable(current, quietFrames);
+            return;
+        }
+        if (remaining > 1) {
+            await stable(current, remaining - 1);
+        }
+    };
+    const settled = async () => {
+        // The optional call covers a document carrying no font set at all, which must skip the wait
+        // rather than fail the settle.
+        await document.fonts?.ready;
+        // The element count FIRST, and this order is the whole of it. An animation does not exist until
+        // something creates it, and on a hydrating page that something is the mount: measured before the
+        // framework has mounted, `getAnimations` answers an honest empty list, and a settle that believed
+        // it would scan the very frame the animation is about to start from. Waiting for the tree to stop
+        // changing is waiting for the mount, which is what puts the animations on the page to be found.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+        await Promise.all((document.getAnimations?.() ?? [])
+            .filter((animation) => animation.playState === 'running' &&
+            animation.effect !== null &&
+            Number.isFinite(animation.effect.getComputedTiming().iterations))
+            .map(async (animation) => {
+            try {
+                await animation.finished;
+            }
+            catch {
+                // A cancelled animation rejects rather than resolving. The cancellation is a state change
+                // like any other and the count below is what notices it.
+            }
+        }));
+        // And again afterwards, because an animation that ends by revealing a panel adds elements as it
+        // finishes. This pass costs two frames on a page where nothing moved.
+        await stable(document.querySelectorAll('*').length, quietFrames);
+    };
+    const deadline = async () => {
+        await new Promise((resolve) => {
+            setTimeout(() => {
+                resolve();
+            }, budgetMs);
+        });
+    };
+    await Promise.race([settled(), deadline()]);
+};
+/**
+ * Wait for a page to finish rendering, before anything measures it.
+ *
+ * Call it after a navigation, and after a state change a scan is about to judge. A still document
+ * costs two animation frames; one that is animating costs however long its animations have left; a
+ * document that never stops changing costs the budget and no more, so a page nobody can settle slows
+ * the sweep rather than hanging it.
+ * @param page the page about to be scanned, left on whatever route it holds.
+ * @returns nothing. It resolves whether the page settled or the budget ran out.
+ */
+export const settleForScan = async (page) => {
+    try {
+        await page.evaluate(settleInPage, SETTLE_BUDGET_MS);
+    }
+    catch {
+        // A route that redirects on mount destroys the execution context while this is in flight, and a
+        // closed page cannot be asked anything. Neither is an accessibility finding, and neither should end
+        // a sweep: the scan that follows then runs on whatever the page holds, which is what every call
+        // site did before this function existed. A page that is genuinely broken still fails at `analyze`,
+        // with an axe result to read rather than a protocol error naming no route.
+    }
+};
+// What the sweep cannot work out from inside the browser: which pages this project declares.
+//
+// The crawl knows what it reached. Only the file tree knows what exists, so the completeness check
+// needs both, and reading the tree is I/O - which is why the walk is here and every DECISION it feeds
+// is in `@ploaness/governance`, where a coverage floor measures it. What follows is a directory walk
+// and two file reads; which file is a route file, and what address it answers at, are not decided
+// here.
+//
+// This is a function rather than the module-scope constants above it, and that is load-bearing.
+// `ploaness/a11y` is imported by a project's own specs too - that is why `settleForScan` lives here -
+// and a recursive walk evaluated at import time would run once per spec module, in every worker.
+// Where a project's own code can be. Walking from the member root would descend into `node_modules`
+// and `.next`, which are large, and into `dist`, which holds a compiled copy of the same routes.
+const WALKED_ROOTS = ['src', 'app', 'tests'];
+// The extensions a route file or a specification can have. Filtering here rather than in the rule
+// keeps the corpus small; the rule still decides what a `page.tsx` means.
+const READ_EXTENSIONS = ['.ts', '.tsx', '.jsx', '.js', '.mdx'];
+/** Where a project's specifications live, which is a ploaness convention rather than a setting. */
+const SPEC_ROOT = 'tests/';
+const filesUnder = (root, relative) => {
+    const entries = readdirSync(path.join(root, relative), {
+        withFileTypes: true,
+    });
+    return entries.flatMap((entry) => {
+        // Forward slashes throughout, because the rules receive these paths as addresses-in-waiting and a
+        // backslash from a Windows walk would split into segments nothing matches.
+        const child = relative === '' ? entry.name : `${relative}/${entry.name}`;
+        if (entry.isDirectory()) {
+            return filesUnder(root, child);
+        }
+        return READ_EXTENSIONS.some((extension) => child.endsWith(extension))
+            ? [child]
+            : [];
+    });
+};
+const projectFiles = (root) => WALKED_ROOTS.flatMap((walked) => existsSync(path.join(root, walked)) ? filesUnder(root, walked) : []);
+const readSpecs = (root, paths) => paths
+    .filter((file) => file.startsWith(SPEC_ROOT))
+    .map((file) => ({
+    path: file,
+    source: readFileSync(path.join(root, file), 'utf8'),
+}));
+/**
+ * The pages this project declares that the sweep did not cover, each with what to do about it.
+ *
+ * Answers with nothing when the member declares no application routes at all, which is the honest
+ * result for a package that has no app directory rather than a claim that its pages are covered.
+ * @param visitedRoutes the addresses the crawl reached and scanned.
+ * @param answeredRoutes the addresses that answered, forwarding ones included.
+ * @returns one sentence per uncovered page, ready to be shown as a failure.
+ */
+export const unsweptRoutes = (visitedRoutes, answeredRoutes) => {
+    const root = process.cwd();
+    const paths = projectFiles(root);
+    const appRoot = appRootOf(paths);
+    if (appRoot === undefined) {
+        return [];
+    }
+    const specs = readSpecs(root, paths);
+    return findUnsweptRoutes({
+        declaredRoutes: declaredRoutesOf(paths, appRoot),
+        visitedRoutes,
+        answeredRoutes,
+        skippedPrefixes: SKIPPED_ROUTE_PREFIXES,
+        specs,
+        everyFile: specs,
+    }).map((unswept) => `${unswept.file} [${unswept.rule}] ${unswept.reason}`);
+};
 //# sourceMappingURL=a11y.js.map

package/dist/a11y.js.map

@@ -1 +1 @@
-{"version":3,"file":"a11y.js","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,EAAE;AACF,uGAAuG;AACvG,oGAAoG;AACpG,oGAAoG;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,sBAAsB,GAAsB,eAAe,CAAC,uBAAuB,CAAA;AAEhG,MAAM,CAAC,MAAM,gBAAgB,GAAW,eAAe,CAAC,wBAAwB,CAAA"}
+{"version":3,"file":"a11y.js","sourceRoot":"","sources":["../src/a11y.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,+BAA+B;AAC/B,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,6FAA6F;AAC7F,aAAa;AACb,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,sGAAsG;AACtG,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,mGAAmG;AACnG,wGAAwG;AACxG,0DAA0D;AAO1D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAEhF,OAAO,EAAe,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,sBAAsB,GAAsB,eAAe,CAAC,uBAAuB,CAAA;AAEhG,MAAM,CAAC,MAAM,gBAAgB,GAAW,eAAe,CAAC,wBAAwB,CAAA;AAEhF,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,uEAAuE;AACvE,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,gGAAgG;AAChG,wDAAwD;AACxD,sGAAsG;AACtG,sGAAsG;AACtG,kGAAkG;AAClG,0BAA0B;AAC1B,EAAE;AACF,uGAAuG;AACvG,mGAAmG;AACnG,gGAAgG;AAChG,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,uGAAuG;AACvG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,gEAAgE;AAChE,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,sGAAsG;AACtG,+DAA+D;AAC/D,EAAE;AACF,8FAA8F;AAC9F,uGAAuG;AACvG,4FAA4F;AAC5F,kGAAkG;AAClG,uBAAuB;AACvB,MAAM,gBAAgB,GAAW,IAAI,CAAA;AAuBrC,sGAAsG;AACtG,oGAAoG;AACpG,oGAAoG;AACpG,gGAAgG;AAChG,MAAM,YAAY,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;IAC7D,MAAM,WAAW,GAAW,CAAC,CAAA;IAC7B,kGAAkG;IAClG,sGAAsG;IACtG,mGAAmG;IACnG,+FAA+F;IAC/F,MAAM,MAAM,GAAG,KAAK,EAAE,QAAgB,EAAE,SAAiB,EAAiB,EAAE;QAC1E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,qBAAqB,CAAC,GAAS,EAAE;gBAC/B,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAW,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAC7D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAClC,OAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,4FAA4F;QAC5F,+BAA+B;QAC/B,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QAC3B,gGAAgG;QAChG,iGAAiG;QACjG,kGAAkG;QAClG,kGAAkG;QAClG,gGAAgG;QAChG,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAChE,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC;aAC/B,MAAM,CACL,CAAC,SAAwB,EAAW,EAAE,CACpC,SAAS,CAAC,SAAS,KAAK,SAAS;YACjC,SAAS,CAAC,MAAM,KAAK,IAAI;YACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,CACnE;aACA,GAAG,CAAC,KAAK,EAAE,SAAwB,EAAiB,EAAE;YACrD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,QAAQ,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,yDAAyD;YAC3D,CAAC;QACH,CAAC,CAAC,CACL,CAAA;QACD,gGAAgG;QAChG,sEAAsE;QACtE,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;YACpD,UAAU,CAAC,GAAS,EAAE;gBACpB,OAAO,EAAE,CAAA;YACX,CAAC,EAAE,QAAQ,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;AAC7C,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAU,EAAiB,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gGAAgG;QAChG,oGAAoG;QACpG,gGAAgG;QAChG,mGAAmG;QACnG,2EAA2E;IAC7E,CAAC;AACH,CAAC,CAAA;AAED,6FAA6F;AAC7F,EAAE;AACF,mGAAmG;AACnG,sGAAsG;AACtG,qGAAqG;AACrG,kGAAkG;AAClG,QAAQ;AACR,EAAE;AACF,gGAAgG;AAChG,sGAAsG;AACtG,iGAAiG;AAEjG,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,YAAY,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AAE/D,kGAAkG;AAClG,0EAA0E;AAC1E,MAAM,eAAe,GAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAEjF,mGAAmG;AACnG,MAAM,SAAS,GAAW,QAAQ,CAAA;AAElC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAqB,EAAE;IACvE,MAAM,OAAO,GAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;QACxE,aAAa,EAAE,IAAI;KACpB,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAa,EAAqB,EAAE;QAC1D,kGAAkG;QAClG,2EAA2E;QAC3E,MAAM,KAAK,GAAW,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;QAChF,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,SAAiB,EAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAqB,EAAE,CACvD,YAAY,CAAC,OAAO,CAAC,CAAC,MAAc,EAAqB,EAAE,CACzD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpE,CAAA;AAEH,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAwB,EAAyB,EAAE,CAClF,KAAK;KACF,MAAM,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;KAC7D,GAAG,CACF,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC;IAC7B,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;CACpD,CAAC,CACH,CAAA;AAEL;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,aAAgC,EAChC,cAAiC,EACd,EAAE;IACrB,MAAM,IAAI,GAAW,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,MAAM,KAAK,GAAsB,YAAY,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,OAAO,GAAuB,SAAS,CAAC,KAAK,CAAC,CAAA;IACpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,KAAK,GAA0B,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC3D,OAAO,iBAAiB,CAAC;QACvB,cAAc,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC;QAChD,aAAa;QACb,cAAc;QACd,eAAe,EAAE,sBAAsB;QACvC,KAAK;QACL,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC,GAAG,CAAC,CAAC,OAAqB,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;AAClG,CAAC,CAAA"}

package/dist/eslint-core.d.ts

@@ -1,5 +1,6 @@
 import type { Linter } from 'eslint';
 import { defineConfig } from 'eslint/config';
+import { type RestrictedSyntax } from './eslint-security.js';
 /**
  * One flat-config block, described by its shape rather than by the plugins' own declarations.
  *
@@ -20,11 +21,6 @@ export type FlatConfigBlock = Readonly<Record<string, unknown>>;
  * because an assertion is uncovered by the type coverage measurement this repository holds at 100%.
  */
 export type RuleTable = Partial<Linter.RulesRecord>;
-/** One `no-restricted-syntax` entry: the shape to reject, and what to say when it appears. */
-export interface RestrictedSyntax {
-    readonly selector: string;
-    readonly message: string;
-}
 /**
  * A whole `no-restricted-syntax` setting: the severity first, then the shapes.
  *
@@ -64,6 +60,8 @@ declare const NO_LITERAL_ASSERTIONS: readonly RestrictedSyntax[];
 export declare const compose: typeof defineConfig;
 /** Formatting is Biome's job; this disables every conflicting stylistic rule and must stay last. */
 export declare const prettierLast: FlatConfigBlock;
+/** The same layer with every rule it declares raised to `error`; a rule it turns off stays off. */
+export declare const withoutWarnings: (layer: object) => FlatConfigBlock;
 /** The preset layers every ploaness-governed project runs, none of which may report at `warn`. */
 export declare const baseLayers: readonly FlatConfigBlock[];
 /**
@@ -90,11 +88,15 @@ export declare const testIntegrityRules: RuleTable;
 /**
  * The framework idiom a spec is written in, which the production rules were never aimed at.
  *
- * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the size caps, the
- * explicitness rules, the ban on a non-null assertion, the unsafe-any family - stays ON, because the
- * standard says test code passes the same static-analysis checks as production code. A relaxation that
- * made a test easier to write by making it less checked would exempt the suite from the contract it
- * exists to enforce.
+ * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the explicitness
+ * rules, the ban on a non-null assertion, the unsafe-any family, and every size cap but one - stays ON,
+ * because the standard says test code passes the same static-analysis checks as production code. A
+ * relaxation that made a test easier to write by making it less checked would exempt the suite from the
+ * contract it exists to enforce.
+ *
+ * The one exception is `max-lines-per-function`, and it is a role distinction rather than a relaxation:
+ * the cap bounds a unit of logic, and a `describe` body is a list of independent declarations. The file
+ * cap still applies. See the entry itself for the argument.
  *
  * Shared by every shipped config rather than stated in each, because what earns the exemption is being a
  * SPEC rather than being a Payload application's spec. Stated twice it drifted: a library consumer's
@@ -162,6 +164,7 @@ export declare const processConfigBlock: () => FlatConfigBlock;
  * catch.
  */
 export declare const specEnvironmentBlock: () => FlatConfigBlock;
+export type { RestrictedSyntax } from './eslint-security.js';
 /** The shared selectors, re-exported so a scoped block can spread rather than restate them. */
 export { NO_FAST_CHECK_SEED, NO_INHERITANCE, NO_LITERAL_ASSERTIONS, NO_MOCK_PROPERTIES, NO_NETWORK_GUARD_ESCAPE, NO_TEST_ORDER_ESCAPE, };
 //# sourceMappingURL=eslint-core.d.ts.map

package/dist/eslint-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eslint-core.d.ts","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAU5C;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC,CAAA;AAE/E,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,+DAA+D;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,KAAK,SAAS,eAAe,EAAE,CAAA;AAuDnF,QAAA,MAAM,kBAAkB,EAAE,SAAS,kBAAkB,EAIlD,CAAA;AAEH,QAAA,MAAM,cAAc,EAAE,uBAUrB,CAAA;AAOD,QAAA,MAAM,qBAAqB,EAAE,SAAS,gBAAgB,EAarD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,EAAE,OAAO,YAA2B,CAAA;AAExD,oGAAoG;AACpG,eAAO,MAAM,YAAY,EAAE,eAA0B,CAAA;AA2CrD,kGAAkG;AAClG,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAWgB,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,eAAe,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAC/C,eAED,CAAA;AAEF,+FAA+F;AAC/F,eAAO,MAAM,cAAc,EAAE,SA0N5B,CAAA;AASD;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAExE,eAAO,MAAM,YAAY,EAAE,YAAqB,CAAA;AAEhD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,EAAE,SAmBhC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,EAAE,SAU5B,CAAA;AAUD,QAAA,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EASlD,CAAA;AAOD,QAAA,MAAM,uBAAuB,EAAE,SAAS,gBAAgB,EAuEvD,CAAA;AAKD,QAAA,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAoBpD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAQlC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,MAAM,EAAE,KAAG,eAgCzD,CAAA;AAkDF,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,MAAM,EAAE,EACxB,SAAS,SAAS,MAAM,EAAE,KACzB,eAQD,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAO,eAUpC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAQtC,CAAA;AAEF,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}
+{"version":3,"file":"eslint-core.d.ts","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAS5C,OAAO,EAAE,KAAK,gBAAgB,EAAyB,MAAM,sBAAsB,CAAA;AAEnF;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC,CAAA;AAE/E,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,+DAA+D;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,KAAK,SAAS,eAAe,EAAE,CAAA;AAsEnF,QAAA,MAAM,kBAAkB,EAAE,SAAS,kBAAkB,EAIlD,CAAA;AAEH,QAAA,MAAM,cAAc,EAAE,uBAUrB,CAAA;AAiBD,QAAA,MAAM,qBAAqB,EAAE,SAAS,gBAAgB,EAerD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,EAAE,OAAO,YAA2B,CAAA;AAExD,oGAAoG;AACpG,eAAO,MAAM,YAAY,EAAE,eAA0B,CAAA;AA8BrD,mGAAmG;AACnG,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,KAAG,eAe/C,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAWgB,CAAA;AAEjE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,eAAe,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAC/C,eAED,CAAA;AAEF,+FAA+F;AAC/F,eAAO,MAAM,cAAc,EAAE,SAqS5B,CAAA;AASD;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAExE,eAAO,MAAM,YAAY,EAAE,YAAqB,CAAA;AAEhD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,EAAE,SAwBhC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,EAAE,SAgB5B,CAAA;AAUD,QAAA,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EASlD,CAAA;AAOD,QAAA,MAAM,uBAAuB,EAAE,SAAS,gBAAgB,EAuEvD,CAAA;AAKD,QAAA,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAoBpD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,EAAE,SASlC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,MAAM,EAAE,KAAG,eAgCzD,CAAA;AAkDF,uGAAuG;AACvG,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,MAAM,EAAE,EACxB,SAAS,SAAS,MAAM,EAAE,KACzB,eAQD,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAO,eAUpC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,oBAAoB,QAAO,eAQtC,CAAA;AAEF,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}

package/dist/eslint-core.js

@@ -21,6 +21,7 @@ import sonarjs from 'eslint-plugin-sonarjs';
 import unicorn from 'eslint-plugin-unicorn';
 import globals from 'globals';
 import tseslint from 'typescript-eslint';
+import { SECURITY_RESTRICTIONS } from './eslint-security.js';
 // Narrowing rather than a property read: `rules` arrives as `unknown` out of the index signature above,
 // and a layer that carries none is passed through untouched.
 const isRuleTable = (value) => typeof value === 'object' && value !== null;
@@ -56,6 +57,19 @@ const MOCKING_PACKAGES = [
     'nock',
     'msw',
 ];
+// No simulated web layer. A test-only imitation of a framework's request handling answers a request
+// without the server, the serialization and the error handling a real one passes through, so a test
+// written against it proves the handler ran rather than that the endpoint works.
+//
+// What is NOT listed here matters as much as what is. The framework's OWN request pipeline - the code a
+// live request actually runs, reached in process - is a real component under the substitute criterion,
+// and driving an endpoint through it is the intended way to assert on a real response. `supertest` is
+// absent for the same kind of reason: it binds a real ephemeral port, which is exactly what the rule
+// asks for. And like the mock ban above, this names the cases it knows; a hand-rolled imitation is
+// still a violation that an inspection decides.
+const WEB_SIMULATION_MESSAGE = 'No simulated web layer. Drive the endpoint through the real request pipeline, or a real server ' +
+    'on a local port, instead (see AGENTS.md).';
+const WEB_SIMULATION_PACKAGES = ['node-mocks-http', 'light-my-request'];
 // Collection/global/field/block configs are declarative wiring: importing one already satisfies its
 // coverage, so a function inlined there has no unit-test seam and can sit untested. This rule bans
 // inline functions in those files, forcing extraction into the unit-tested src/access and src/lib
@@ -87,18 +101,29 @@ const NO_INHERITANCE = [
 // An assertion whose operands are literals alone cannot fail when the code under test changes, so it
 // reports as passing while judging nothing. This catches the exact form the standard names; the general
 // rule is not statically decidable and is stated in the agent guide instead.
+//
+// Anchored on the FIRST argument, which is the operand. Written as a child combinator over the whole
+// call - `CallExpression[callee.name='expect'] > Literal` - it matched a literal in ANY argument
+// position, and `expect` takes a second one: the message Vitest prints when the assertion fails. So the
+// rule rejected `expect(parsed, 'the value that got through')`, which is not an assertion over a
+// literal at all, and rejected it with a message describing a defect the line does not have. What
+// survived was the one spelling neither this rule nor `vitest/valid-expect` happened to catch, a
+// template literal carrying a substitution - and every shipped spec in `packages/assets` uses it,
+// which is why nothing here ever reported the hole.
 const LITERAL_ASSERTION_MESSAGE = 'An assertion over a literal cannot fail when the code under test changes. Assert an observable outcome.';
+const EXPECT_CALL = "CallExpression[callee.name='expect']";
 const NO_LITERAL_ASSERTIONS = [
     {
-        selector: "CallExpression[callee.name='expect'] > Literal",
+        selector: `${EXPECT_CALL}[arguments.0.type='Literal']`,
         message: LITERAL_ASSERTION_MESSAGE,
     },
     {
-        selector: "CallExpression[callee.name='expect'] > TemplateLiteral[expressions.length=0]",
+        selector: `${EXPECT_CALL}[arguments.0.type='TemplateLiteral'][arguments.0.expressions.length=0]`,
         message: LITERAL_ASSERTION_MESSAGE,
     },
     {
-        selector: "CallExpression[callee.name='expect'] > UnaryExpression[operator='-'] > Literal",
+        selector: `${EXPECT_CALL}[arguments.0.type='UnaryExpression'][arguments.0.operator='-']` +
+            "[arguments.0.argument.type='Literal']",
         message: LITERAL_ASSERTION_MESSAGE,
     },
 ];
@@ -120,8 +145,9 @@ export const compose = defineConfig;
 /** Formatting is Biome's job; this disables every conflicting stylistic rule and must stay last. */
 export const prettierLast = prettier;
 // A warning severity does not exist in a governed repository: a check has two verdicts, and a finding
-// that prints and exits 0 is neither. Several presets ship rules at `warn` anyway - 31 of jsdoc's and 6
-// of regexp's, as of this writing - so every finding they report was invisible to the build.
+// that prints and exits 0 is neither. Several presets ship rules at `warn` anyway - 31 of jsdoc's, 6
+// of regexp's, and 14 of the 22 in Next's own core-web-vitals preset, as of this writing - so every
+// finding they report was invisible to the build.
 //
 // The list of which rules those are is NOT written down here. It would be a copy of what the presets
 // declare, and it would go stale on the next upgrade in the one direction that fails open. Each layer's
@@ -141,7 +167,11 @@ const escalate = (setting) => {
 // arrives as the plugin's own declared interface, and an interface carries no index signature, so
 // naming one here would force an assertion at every call site - which the type coverage measurement
 // counts as uncovered. What this function needs is one property, read the way an unknown shape is read.
-const withoutWarnings = (layer) => {
+//
+// Exported because the application config mounts a framework preset of its own that arrives with the
+// same defect, and a second copy of this escalation there would be the drift this file exists to stop.
+/** The same layer with every rule it declares raised to `error`; a rule it turns off stays off. */
+export const withoutWarnings = (layer) => {
     const rules = Reflect.get(layer, 'rules');
     return isRuleTable(rules)
         ? {
@@ -189,6 +219,13 @@ export const guidelineRules = {
     // Conflicts with the explicit philosophy: typedef requires annotations, this rule would strip
     // the "trivially inferable" ones (e.g. `const x: string = '...'`). We want them written.
     '@typescript-eslint/no-inferrable-types': 'off',
+    // The same conflict, one type narrower, and unsatisfiable rather than merely contrary. For a
+    // constant that must carry a string LITERAL type - a discriminant, or a key a typed API indexes by -
+    // all three spellings are rejected: `const X: 'a' = 'a'` by this rule, `const X = 'a' as const` and
+    // `const X = 'a'` by typedef. There is no legal declaration left, so this one gives way. It arrives
+    // from the typescript-eslint preset rather than from this table, which is why it outlived the audit
+    // that turned off the rule above.
+    '@typescript-eslint/prefer-as-const': 'off',
     '@typescript-eslint/no-non-null-assertion': 'error',
     '@typescript-eslint/strict-boolean-expressions': 'error',
     '@typescript-eslint/switch-exhaustiveness-check': 'error',
@@ -283,7 +320,7 @@ export const guidelineRules = {
     'unicorn/expiring-todo-comments': 'off',
     // Composition over inheritance. A type inherits only from a base the language or a dependency
     // requires, and the error base is the one such base that appears in ordinary code.
-    'no-restricted-syntax': [...NO_INHERITANCE],
+    'no-restricted-syntax': [...NO_INHERITANCE, ...SECURITY_RESTRICTIONS],
     // Control-flow clarity.
     eqeqeq: ['error', 'always'],
     curly: ['error', 'all'],
@@ -364,6 +401,60 @@ export const guidelineRules = {
     // avoid the constant. Biome decides, for the reason it already decides formatting: the two must
     // never disagree about the same character, so one of them owns style and the other defers.
     'unicorn/prefer-global-number-constants': 'off',
+    // The sibling contradiction, resolved the OTHER way, and the difference is worth the paragraph.
+    //
+    // Building a list by a sequential scan - each entry deciding what it becomes from what the previous
+    // ones did - has four spellings, and this harness rejected all of them but one. `[...accumulator,
+    // one]` inside a `reduce` is Biome's `noAccumulatingSpread`. `accumulator.concat([one])` is
+    // `unicorn/prefer-spread`, which does not merely permit the spread form but MANDATES it over
+    // `concat`. `collected.push(one)` is `functional/immutable-data`, and the mutable binding a loop
+    // needs is `functional/no-let`. What survived was recursion, which is a poor thing to be steered
+    // into: it trades the copying `noAccumulatingSpread` objects to for a hard stack-depth limit, so the
+    // rule set was answering a performance question with a correctness cliff.
+    //
+    // The rule above says Biome decides when the two disagree. That rule is about STYLE - which spelling
+    // of a constant, where both spellings do the same thing and the only cost of choosing wrongly is
+    // inconsistency. This is not that. `noAccumulatingSpread` is a claim about algorithmic cost, and
+    // this harness has already answered that question everywhere else: `functional/no-let` and
+    // `functional/immutable-data` price immutability above copying, in every module, by design. A rule
+    // penalising the immutable form is arguing with a decision the rule set already made - and
+    // `unicorn/no-array-reduce` is off a few lines above precisely because `reduce` is the idiom that
+    // decision leaves. So `noAccumulatingSpread` is gone from `biome-core.json`.
+    //
+    // The lists a governed project accumulates this way are a day's diary entries or a quote's line
+    // items. The copying is real and is measured in microseconds; the stack limit is not.
+    //
+    // `prefer-spread` used to stay as the narrower cut, and it no longer does, for a reason that is not
+    // about accumulation at all. See the entry that follows.
+    // A THIRD contradiction, and the first one where the fixer is the thing that breaks the code.
+    //
+    // `unicorn/prefer-spread` mandates `[...value]` over `Array.from(value)` and over `value.split('')`,
+    // and it is not type-aware, so it says that about a string too. `@typescript-eslint/no-misused-spread`
+    // - from `strictTypeChecked`, and type-aware - bans spreading a string, because `...` iterates code
+    // points and decomposes an emoji into its parts. Neither rule can see the other's case, and the
+    // unicorn rule has no option to exclude a string.
+    //
+    // What makes this different from a disagreement is that they meet inside a single `eslint --fix`.
+    // The fixer rewrites `Array.from(label)` to `[...label]`, and the same run then reports the text it
+    // just wrote. `ploaness format` therefore hands a developer a file it authored and rejects, on a
+    // line they did not write, with a message whose suggested repair is a suppression. A contradiction
+    // a person can walk around by choosing a different spelling is one thing; one the harness walks
+    // INTO on their behalf is another, and it is why this could not be left as guidance.
+    //
+    // `prefer-spread` yields, and the direction follows the accumulation paragraph above rather than the
+    // `Number.NaN` rule before it. That one was about style, where the two spellings do the same thing
+    // and only consistency is at stake. This is not: one rule is making a correctness claim about text a
+    // CMS stores - a name, a title, an editor's paragraph - out of type information the other one does
+    // not have. The uninformed rule does not get to overrule the informed one, and it certainly does not
+    // get to do so through a fixer.
+    //
+    // WHAT THIS COSTS, stated plainly because it reopens a door another spec was built to hold shut.
+    // `accumulator.concat([one])` is legal again, so the fold `immutable-accumulation.spec.ts` leaves
+    // open is now one good spelling of a sequential scan rather than the only one. The other three doors
+    // that spec names are unaffected: `functional/immutable-data` still rejects `push`,
+    // `functional/no-let` still rejects the loop binding, and Biome still does not re-ban the fold. The
+    // trade is a style guarantee for a correctness one, taken deliberately and in that direction.
+    'unicorn/prefer-spread': 'off',
     // New in unicorn 73. It would expand every concise one-line `/** ... */` export doc into a
     // three-line block, and would also rewrite the `GENERATED AUTOMATICALLY BY PAYLOAD` /
     // `DO NOT MODIFY` headers that Payload writes into the `src/app/(payload)` scaffolding.
@@ -377,11 +468,25 @@ export const guidelineRules = {
     'jsdoc/require-jsdoc': 'off',
     'jsdoc/require-param': 'off',
     'jsdoc/require-returns': 'off',
+    // And require that a block which exists SAYS something. `require-jsdoc` asks only whether a block is
+    // present, so `/**\n *\n */` satisfied it while documenting nothing - a check nothing could fail,
+    // sitting under a rule whose whole purpose is a documenting comment. A consuming project shipped
+    // exactly that stub on a hook and it survived every gate until the file was rewritten for other
+    // reasons. This visits blocks that already exist rather than demanding new ones, so it closes the
+    // hole without widening the set of symbols that must be documented.
+    'jsdoc/require-description': 'error',
     // No mocks - ban the mocking entry points and libraries build-wide.
     'no-restricted-properties': ['error', ...NO_MOCK_PROPERTIES],
+    // One setting carries both bans, because this key REPLACES rather than merges: a second
+    // `no-restricted-imports` anywhere would drop whichever list it did not restate.
     'no-restricted-imports': [
         'error',
-        { paths: MOCKING_PACKAGES.map((name) => ({ name, message: NO_MOCKS_MESSAGE })) },
+        {
+            paths: [
+                ...MOCKING_PACKAGES.map((name) => ({ name, message: NO_MOCKS_MESSAGE })),
+                ...WEB_SIMULATION_PACKAGES.map((name) => ({ name, message: WEB_SIMULATION_MESSAGE })),
+            ],
+        },
     ],
 };
 export const vitestPlugin = vitest;
@@ -396,7 +501,12 @@ export const testIntegrityRules = {
     // sonarjs/assertions-in-tests is a less-configurable duplicate that does not, so it defers in
     // this scope.
     'sonarjs/assertions-in-tests': 'off',
-    'vitest/valid-expect': 'error', // `expect` is called correctly (awaited, matcher present).
+    // `expect` is called correctly (awaited, matcher present). `maxArgs: 2` because Vitest's second
+    // argument is the message it prints when the assertion fails, and in a loop or a table-driven case
+    // that message is the difference between knowing a case failed and knowing WHICH input broke it. The
+    // plugin's default of 1 already waves through a string or template literal there, so what it
+    // actually rejected was the identifier form - the one a table-driven case needs.
+    'vitest/valid-expect': ['error', { maxArgs: 2 }],
     'vitest/no-standalone-expect': 'error', // assertions must live inside a test.
     'vitest/no-conditional-expect': 'error', // an assertion behind an `if` may never execute.
     'vitest/no-conditional-tests': 'error', // tests must not be defined conditionally.
@@ -409,11 +519,15 @@ export const testIntegrityRules = {
 /**
  * The framework idiom a spec is written in, which the production rules were never aimed at.
  *
- * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the size caps, the
- * explicitness rules, the ban on a non-null assertion, the unsafe-any family - stays ON, because the
- * standard says test code passes the same static-analysis checks as production code. A relaxation that
- * made a test easier to write by making it less checked would exempt the suite from the contract it
- * exists to enforce.
+ * Only idiom is relaxed. Every rule that carries a rule of the governing standard - the explicitness
+ * rules, the ban on a non-null assertion, the unsafe-any family, and every size cap but one - stays ON,
+ * because the standard says test code passes the same static-analysis checks as production code. A
+ * relaxation that made a test easier to write by making it less checked would exempt the suite from the
+ * contract it exists to enforce.
+ *
+ * The one exception is `max-lines-per-function`, and it is a role distinction rather than a relaxation:
+ * the cap bounds a unit of logic, and a `describe` body is a list of independent declarations. The file
+ * cap still applies. See the entry itself for the argument.
  *
  * Shared by every shipped config rather than stated in each, because what earns the exemption is being a
  * SPEC rather than being a Payload application's spec. Stated twice it drifted: a library consumer's
@@ -430,6 +544,12 @@ export const testIdiomRules = {
     'unicorn/no-top-level-assignment-in-function': 'off', // the standard vitest beforeAll pattern.
     'unicorn/max-nested-calls': 'off', // expect(fn(arg(value))) assertions are idiomatic.
     'unicorn/numeric-separators-style': 'off', // fixtures use code points (0x2026); ungrouped reads better.
+    // A `describe` body is a list of independent declarations rather than a unit of logic: nothing flows
+    // between its tests, so reading the twelfth needs none of the first eleven, and the cognitive load the
+    // cap bounds does not accumulate. Splitting one to satisfy the cap invents a group name that marks a
+    // linter boundary rather than a real one. A spec file that genuinely IS too long is still caught, by
+    // `max-lines`, which stays on.
+    'max-lines-per-function': 'off',
 };
 // Property tests must stay deterministic: one seed decides the whole suite, and a per-call override
 // reintroduces a gate whose verdict changes between two runs of an unchanged repository, which is the
@@ -543,6 +663,7 @@ const NO_TEST_ORDER_ESCAPE = [
 export const testSuiteSyntaxRules = {
     'no-restricted-syntax': [
         ...NO_INHERITANCE,
+        ...SECURITY_RESTRICTIONS,
         ...NO_LITERAL_ASSERTIONS,
         ...NO_FAST_CHECK_SEED,
         ...NO_TEST_ORDER_ESCAPE,

package/dist/eslint-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"eslint-core.js","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,sGAAsG;AACtG,oGAAoG;AACpG,qGAAqG;AACrG,wGAAwG;AACxG,0EAA0E;AAC1E,EAAE;AACF,uGAAuG;AACvG,wEAAwE;AACxE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC3B,OAAO,QAAQ,MAAM,yDAAyD,CAAA;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,MAAM,MAAM,uBAAuB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,QAAQ,MAAM,wBAAwB,CAAA;AAC7C,OAAO,UAAU,MAAM,0BAA0B,CAAA;AACjD,OAAO,KAAK,MAAM,qBAAqB,CAAA;AACvC,OAAO,MAAM,MAAM,sBAAsB,CAAA;AACzC,OAAO,OAAO,MAAM,uBAAuB,CAAA;AAC3C,OAAO,OAAO,MAAM,uBAAuB,CAAA;AAC3C,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,QAAQ,MAAM,mBAAmB,CAAA;AAoDxC,wGAAwG;AACxG,6DAA6D;AAC7D,MAAM,WAAW,GAAG,CAAC,KAAc,EAAsB,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AAE7C,MAAM,cAAc,GAAW,CAAC,CAAA;AAChC,MAAM,UAAU,GAAW,CAAC,CAAA;AAC5B,MAAM,SAAS,GAAW,CAAC,CAAA;AAC3B,MAAM,kBAAkB,GAAW,GAAG,CAAA;AACtC,MAAM,sBAAsB,GAAW,EAAE,CAAA;AACzC,MAAM,eAAe,GAAW,CAAC,CAAA;AACjC,+DAA+D;AAC/D,MAAM,kBAAkB,GAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAExD,8FAA8F;AAC9F,kGAAkG;AAClG,2FAA2F;AAC3F,MAAM,gBAAgB,GACpB,4FAA4F,CAAA;AAC9F,MAAM,kBAAkB,GAAsB;IAC5C,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,SAAS;IACT,YAAY;CACb,CAAA;AACD,MAAM,gBAAgB,GAAsB;IAC1C,OAAO;IACP,YAAY;IACZ,WAAW;IACX,eAAe;IACf,YAAY;IACZ,MAAM;IACN,KAAK;CACN,CAAA;AAED,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,yGAAyG;AACzG,yGAAyG;AACzG,oGAAoG;AACpG,MAAM,mBAAmB,GACvB,qFAAqF;IACrF,oCAAoC,CAAA;AACtC,mGAAmG;AACnG,wGAAwG;AACxG,wGAAwG;AACxG,kGAAkG;AAClG,MAAM,kBAAkB,GAAkC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9F,MAAM,EAAE,IAAI;IACZ,QAAQ;IACR,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC,CAAA;AAEH,MAAM,cAAc,GAA4B;IAC9C,OAAO;IACP;QACE,QAAQ,EAAE,6DAA6D;QACvE,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,QAAQ,EAAE,4DAA4D;QACtE,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAA;AAED,qGAAqG;AACrG,wGAAwG;AACxG,6EAA6E;AAC7E,MAAM,yBAAyB,GAC7B,yGAAyG,CAAA;AAC3G,MAAM,qBAAqB,GAAgC;IACzD;QACE,QAAQ,EAAE,gDAAgD;QAC1D,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,QAAQ,EAAE,8EAA8E;QACxF,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,QAAQ,EAAE,gFAAgF;QAC1F,OAAO,EAAE,yBAAyB;KACnC;CACF,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,OAAO,GAAwB,YAAY,CAAA;AAExD,oGAAoG;AACpG,MAAM,CAAC,MAAM,YAAY,GAAoB,QAAQ,CAAA;AAErD,sGAAsG;AACtG,wGAAwG;AACxG,6FAA6F;AAC7F,EAAE;AACF,qGAAqG;AACrG,wGAAwG;AACxG,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,KAAK,GAAG,CAAC,QAAiB,EAAW,EAAE,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,CAAC,CAAA;AAElF,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAW,EAAE;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC3C,CAAC;IACD,gGAAgG;IAChG,uGAAuG;IACvG,MAAM,QAAQ,GAAuB,OAAO,CAAA;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACvE,CAAC,CAAA;AAED,mGAAmG;AACnG,kGAAkG;AAClG,oGAAoG;AACpG,wGAAwG;AACxG,MAAM,eAAe,GAAG,CAAC,KAAa,EAAmB,EAAE;IACzD,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAClD,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;YACE,GAAG,KAAK;YACR,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,OAAO,CAA6B,EAA8B,EAAE,CAAC;gBACzE,EAAE;gBACF,QAAQ,CAAC,OAAO,CAAC;aAClB,CACF,CACF;SACF;QACH,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAA;AAClB,CAAC,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,UAAU,GAA+B;IACpD,EAAE,CAAC,OAAO,CAAC,WAAW;IACtB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB;IACrC,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB;IACxC,OAAO,CAAC,OAAO,CAAC,WAAW;IAC3B,OAAO,CAAC,OAAO,CAAC,WAAW;IAC3B,kGAAkG;IAClG,6FAA6F;IAC7F,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,2DAA2D;IACjF,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,+BAA+B;CACpE,CAAC,GAAG,CAAC,CAAC,KAAa,EAAmB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,aAAgD,EAC/B,EAAE,CAAC,CAAC;IACrB,eAAe,EAAE,EAAE,aAAa,EAAE;CACnC,CAAC,CAAA;AAEF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,yEAAyE;IACzE,kDAAkD,EAAE,OAAO;IAC3D,mDAAmD,EAAE,OAAO;IAC5D,2FAA2F;IAC3F,6FAA6F;IAC7F,uEAAuE;IACvE,4BAA4B,EAAE;QAC5B,OAAO;QACP,EAAE,mBAAmB,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE;KACvE;IACD,8FAA8F;IAC9F,yFAAyF;IACzF,wCAAwC,EAAE,KAAK;IAC/C,0CAA0C,EAAE,OAAO;IACnD,+CAA+C,EAAE,OAAO;IACxD,gDAAgD,EAAE,OAAO;IACzD,6CAA6C,EAAE,OAAO;IACtD,qDAAqD;IACrD,yCAAyC,EAAE,OAAO;IAClD,kGAAkG;IAClG,6FAA6F;IAC7F,gGAAgG;IAChG,iFAAiF;IACjF,kGAAkG;IAClG,gGAAgG;IAChG,4FAA4F;IAC5F,kGAAkG;IAClG,qEAAqE;IACrE,EAAE;IACF,oGAAoG;IACpG,iGAAiG;IACjG,mGAAmG;IACnG,mGAAmG;IACnG,sGAAsG;IACtG,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAChD,wCAAwC,EAAE,OAAO;IACjD,uCAAuC,EAAE,OAAO;IAChD,+CAA+C,EAAE,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxF,8FAA8F;IAC9F,gGAAgG;IAChG,iGAAiG;IACjG,qDAAqD;IACrD,kCAAkC,EAAE,OAAO;IAC3C,4FAA4F;IAC5F,iGAAiG;IACjG,4FAA4F;IAC5F,mGAAmG;IACnG,sCAAsC,EAAE;QACtC,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;YACrD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,KAAK,EAAE,KAAK,EAAE;SAC5E;KACF;IAED,4FAA4F;IAC5F,uDAAuD,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,qDAAqD,EAAE,OAAO;IAE9D,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;IACrC,8BAA8B,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;IACzD,YAAY,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;IACnC,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACjC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7F,wBAAwB,EAAE;QACxB,OAAO;QACP,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;KAC1E;IAED,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,gGAAgG;IAChG,yFAAyF;IACzF,kGAAkG;IAClG,gGAAgG;IAChG,qCAAqC,EAAE;QACrC,OAAO;QACP;YACE,MAAM,EAAE,kBAAkB;YAC1B,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;YACzB,6BAA6B,EAAE,IAAI;YACnC,WAAW,EAAE,IAAI;YACjB,yBAAyB,EAAE,IAAI;YAC/B,6BAA6B,EAAE,IAAI;YACnC,iBAAiB,EAAE,IAAI;YACvB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;SACrB;KACF;IAED,0FAA0F;IAC1F,+FAA+F;IAC/F,8FAA8F;IAC9F,8CAA8C;IAC9C,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAExF,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG,2FAA2F;IAC3F,EAAE;IACF,kGAAkG;IAClG,kGAAkG;IAClG,8FAA8F;IAC9F,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACpF,gCAAgC,EAAE,KAAK;IAEvC,8FAA8F;IAC9F,mFAAmF;IACnF,sBAAsB,EAAE,CAAC,GAAG,cAAc,CAAC;IAE3C,wBAAwB;IACxB,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;IACvB,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAEnD,8CAA8C;IAC9C,+BAA+B,EAAE,KAAK,EAAE,gDAAgD;IACxF,mGAAmG;IACnG,oGAAoG;IACpG,qGAAqG;IACrG,kGAAkG;IAClG,oGAAoG;IACpG,qGAAqG;IACrG,qGAAqG;IACrG,8EAA8E;IAC9E,yFAAyF;IACzF,2BAA2B,EAAE;QAC3B,OAAO;QACP,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;KAC/E;IACD,+FAA+F;IAC/F,gGAAgG;IAChG,kGAAkG;IAClG,qEAAqE;IACrE,iCAAiC,EAAE;QACjC,OAAO;QACP;YACE,QAAQ,EAAE;gBACR,gGAAgG;gBAChG,8FAA8F;gBAC9F,+FAA+F;gBAC/F,GAAG,EAAE,IAAI;gBACT,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACb;SACF;KACF;IACD,+FAA+F;IAC/F,sGAAsG;IACtG,sGAAsG;IACtG,iGAAiG;IACjG,+FAA+F;IAC/F,qGAAqG;IACrG,mEAAmE;IACnE,+FAA+F;IAC/F,mFAAmF;IACnF,mCAAmC,EAAE;QACnC,OAAO;QACP;YACE,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,IAAI;YACvB,yBAAyB,EAAE,IAAI;SAChC;KACF;IACD,wBAAwB,EAAE,KAAK,EAAE,iEAAiE;IAClG,kGAAkG;IAClG,gGAAgG;IAChG,0EAA0E;IAC1E,iCAAiC,EAAE,KAAK;IACxC,yBAAyB,EAAE,KAAK;IAChC,kCAAkC,EAAE,KAAK;IACzC,uBAAuB,EAAE,KAAK;IAC9B,4BAA4B,EAAE,KAAK;IACnC,iBAAiB,EAAE,KAAK,EAAE,6CAA6C;IACvE,2BAA2B,EAAE,KAAK;IAClC,yFAAyF;IACzF,iGAAiG;IACjG,+FAA+F;IAC/F,gGAAgG;IAChG,2FAA2F;IAC3F,wCAAwC,EAAE,KAAK;IAC/C,2FAA2F;IAC3F,sFAAsF;IACtF,wFAAwF;IACxF,yCAAyC,EAAE,KAAK;IAChD,uBAAuB,EAAE;QACvB,OAAO;QACP,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KAClE;IAED,2FAA2F;IAC3F,uFAAuF;IACvF,qBAAqB,EAAE,KAAK;IAC5B,qBAAqB,EAAE,KAAK;IAC5B,uBAAuB,EAAE,KAAK;IAE9B,oEAAoE;IACpE,0BAA0B,EAAE,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC;IAC5D,uBAAuB,EAAE;QACvB,OAAO;QACP,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE;KACjF;CACF,CAAA;AAoBD,MAAM,CAAC,MAAM,YAAY,GAAiB,MAAM,CAAA;AAEhD,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAc;IAC3C,yBAAyB,EAAE,OAAO,EAAE,gDAAgD;IACpF,0BAA0B,EAAE,OAAO,EAAE,qCAAqC;IAC1E,+BAA+B,EAAE,OAAO,EAAE,6DAA6D;IACvG,+DAA+D;IAC/D,sBAAsB,EAAE,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;IACnF,8FAA8F;IAC9F,8FAA8F;IAC9F,cAAc;IACd,6BAA6B,EAAE,KAAK;IACpC,qBAAqB,EAAE,OAAO,EAAE,2DAA2D;IAC3F,6BAA6B,EAAE,OAAO,EAAE,sCAAsC;IAC9E,8BAA8B,EAAE,OAAO,EAAE,iDAAiD;IAC1F,6BAA6B,EAAE,OAAO,EAAE,2CAA2C;IACnF,2BAA2B,EAAE,OAAO,EAAE,iDAAiD;IACvF,oBAAoB,EAAE,OAAO;IAC7B,4BAA4B,EAAE,OAAO,EAAE,qCAAqC;IAC5E,2BAA2B,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpD,4BAA4B,EAAE,OAAO,EAAE,+DAA+D;CACvG,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,gGAAgG;IAChG,gGAAgG;IAChG,4FAA4F;IAC5F,oFAAoF;IACpF,qCAAqC,EAAE,KAAK;IAC5C,6BAA6B,EAAE,KAAK,EAAE,wDAAwD;IAC9F,6CAA6C,EAAE,KAAK,EAAE,yCAAyC;IAC/F,0BAA0B,EAAE,KAAK,EAAE,mDAAmD;IACtF,kCAAkC,EAAE,KAAK,EAAE,6DAA6D;CACzG,CAAA;AAED,oGAAoG;AACpG,sGAAsG;AACtG,kCAAkC;AAClC,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,yGAAyG;AACzG,4FAA4F;AAC5F,MAAM,kBAAkB,GAAgC;IACtD;QACE,QAAQ,EACN,2EAA2E;YAC3E,8CAA8C;QAChD,OAAO,EACL,8FAA8F;YAC9F,wCAAwC;KAC3C;CACF,CAAA;AAED,qGAAqG;AACrG,wGAAwG;AACxG,yGAAyG;AACzG,yGAAyG;AACzG,iGAAiG;AACjG,MAAM,uBAAuB,GAAgC;IAC3D;QACE,QAAQ,EACN,8FAA8F;QAChG,OAAO,EACL,+FAA+F;YAC/F,4EAA4E;KAC/E;IACD;QACE,QAAQ,EACN,6FAA6F;QAC/F,OAAO,EACL,+FAA+F;YAC/F,oBAAoB;KACvB;IACD;QACE,QAAQ,EACN,uCAAuC;YACvC,kFAAkF;QACpF,OAAO,EACL,gGAAgG;YAChG,QAAQ;KACX;IACD;QACE,QAAQ,EACN,uFAAuF;YACvF,kFAAkF;QACpF,OAAO,EACL,iGAAiG;YACjG,QAAQ;KACX;IACD;QACE,QAAQ,EAAE,wDAAwD;QAClE,OAAO,EACL,+FAA+F;KAClG;IACD;QACE,QAAQ,EACN,2FAA2F;QAC7F,OAAO,EACL,6FAA6F;YAC7F,mDAAmD;KACtD;IACD;QACE,QAAQ,EAAE,iFAAiF;QAC3F,OAAO,EACL,8FAA8F;KACjG;IACD,8FAA8F;IAC9F,qGAAqG;IACrG,iGAAiG;IACjG,0EAA0E;IAC1E;QACE,QAAQ,EACN,oFAAoF;YACpF,4DAA4D;QAC9D,OAAO,EACL,+FAA+F;KAClG;IACD;QACE,QAAQ,EACN,0EAA0E;YAC1E,4DAA4D;QAC9D,OAAO,EACL,8FAA8F;KACjG;IACD;QACE,QAAQ,EAAE,6EAA6E;QACvF,OAAO,EACL,8FAA8F;KACjG;CACF,CAAA;AAED,sGAAsG;AACtG,yFAAyF;AACzF,iFAAiF;AACjF,MAAM,oBAAoB,GAAgC;IACxD;QACE,QAAQ,EACN,0FAA0F;QAC5F,OAAO,EACL,gGAAgG;YAChG,0DAA0D;KAC7D;IACD;QACE,QAAQ,EACN,0FAA0F;QAC5F,OAAO,EACL,6FAA6F;YAC7F,qBAAqB;KACxB;IACD;QACE,QAAQ,EAAE,2EAA2E;QACrF,OAAO,EACL,yFAAyF;KAC5F;CACF,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,sBAAsB,EAAE;QACtB,GAAG,cAAc;QACjB,GAAG,qBAAqB;QACxB,GAAG,kBAAkB;QACrB,GAAG,oBAAoB;QACvB,GAAG,uBAAuB;KAC3B;CACF,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAwB,EAAmB,EAAE,CAAC,CAAC;IAC7E,KAAK;IACL,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9C,8FAA8F;IAC9F,qGAAqG;IACrG,qFAAqF;IACrF,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IACjD,KAAK,EAAE;QACL,GAAG,cAAc;QACjB,oGAAoG;QACpG,qGAAqG;QACrG,4FAA4F;QAC5F,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK;QAC5C,oGAAoG;QACpG,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;QAC1D,4BAA4B,EAAE,KAAK;QACnC,qGAAqG;QACrG,uEAAuE;QACvE,qCAAqC,EAAE,KAAK;QAC5C,kBAAkB,EAAE;YAClB,OAAO;YACP;gBACE,MAAM,EAAE,kBAAkB;gBAC1B,kBAAkB,EAAE,IAAI;gBACxB,mBAAmB,EAAE,IAAI;gBACzB,6BAA6B,EAAE,IAAI;gBACnC,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,KAAK;aACrB;SACF;KACF;CACF,CAAC,CAAA;AAEF,0FAA0F;AAC1F,EAAE;AACF,wGAAwG;AACxG,yGAAyG;AACzG,uGAAuG;AACvG,kGAAkG;AAClG,MAAM,eAAe,GAAW,kBAAkB,CAAA;AAElD,yGAAyG;AACzG,+BAA+B;AAC/B,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,sGAAsG;AACtG,oGAAoG;AACpG,+DAA+D;AAC/D,MAAM,mBAAmB,GAAW,eAAe,CAAA;AAEnD,qGAAqG;AACrG,sBAAsB;AACtB,EAAE;AACF,uGAAuG;AACvG,sGAAsG;AACtG,sGAAsG;AACtG,kGAAkG;AAClG,oGAAoG;AACpG,qFAAqF;AACrF,EAAE;AACF,sGAAsG;AACtG,uGAAuG;AACvG,uGAAuG;AACvG,uGAAuG;AACvG,wGAAwG;AACxG,uGAAuG;AACvG,mGAAmG;AACnG,MAAM,eAAe,GAAW,YAAY,CAAA;AAE5C,0GAA0G;AAC1G,yGAAyG;AACzG,yEAAyE;AACzE,EAAE;AACF,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,CAAC,SAA4B,EAAoB,EAAE,CAAC;IACxE,OAAO;IACP,EAAE,qBAAqB,EAAE,CAAC,eAAe,EAAE,GAAG,SAAS,CAAC,EAAE;CAC3D,CAAA;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAAwB,EACxB,OAA0B,EACT,EAAE,CAAC,CAAC;IACrB,KAAK;IACL,OAAO;IACP,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,mBAAmB,EAAE,OAAO;QAC5B,2BAA2B,EAAE,aAAa,CAAC,EAAE,CAAC;KAC/C;CACF,CAAC,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAoB,EAAE,CAAC,CAAC;IACxD,KAAK,EAAE,CAAC,kBAAkB,CAAC;IAC3B,uGAAuG;IACvG,sGAAsG;IACtG,uGAAuG;IACvG,wGAAwG;IACxG,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,2BAA2B,EAAE,aAAa,CAAC,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;KACnF;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAoB,EAAE,CAAC,CAAC;IAC1D,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,qGAAqG;IACrG,mCAAmC;IACnC,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,2BAA2B,EAAE,aAAa,CAAC,CAAC,mBAAmB,CAAC,CAAC;KAClE;CACF,CAAC,CAAA;AAEF,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}
+{"version":3,"file":"eslint-core.js","sourceRoot":"","sources":["../src/eslint-core.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,sGAAsG;AACtG,oGAAoG;AACpG,qGAAqG;AACrG,wGAAwG;AACxG,0EAA0E;AAC1E,EAAE;AACF,uGAAuG;AACvG,wEAAwE;AACxE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC3B,OAAO,QAAQ,MAAM,yDAAyD,CAAA;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,MAAM,MAAM,uBAAuB,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,QAAQ,MAAM,wBAAwB,CAAA;AAC7C,OAAO,UAAU,MAAM,0BAA0B,CAAA;AACjD,OAAO,KAAK,MAAM,qBAAqB,CAAA;AACvC,OAAO,MAAM,MAAM,sBAAsB,CAAA;AACzC,OAAO,OAAO,MAAM,uBAAuB,CAAA;AAC3C,OAAO,OAAO,MAAM,uBAAuB,CAAA;AAC3C,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,QAAQ,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAyB,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AA8CnF,wGAAwG;AACxG,6DAA6D;AAC7D,MAAM,WAAW,GAAG,CAAC,KAAc,EAAsB,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AAE7C,MAAM,cAAc,GAAW,CAAC,CAAA;AAChC,MAAM,UAAU,GAAW,CAAC,CAAA;AAC5B,MAAM,SAAS,GAAW,CAAC,CAAA;AAC3B,MAAM,kBAAkB,GAAW,GAAG,CAAA;AACtC,MAAM,sBAAsB,GAAW,EAAE,CAAA;AACzC,MAAM,eAAe,GAAW,CAAC,CAAA;AACjC,+DAA+D;AAC/D,MAAM,kBAAkB,GAAsB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAExD,8FAA8F;AAC9F,kGAAkG;AAClG,2FAA2F;AAC3F,MAAM,gBAAgB,GACpB,4FAA4F,CAAA;AAC9F,MAAM,kBAAkB,GAAsB;IAC5C,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,SAAS;IACT,YAAY;CACb,CAAA;AACD,MAAM,gBAAgB,GAAsB;IAC1C,OAAO;IACP,YAAY;IACZ,WAAW;IACX,eAAe;IACf,YAAY;IACZ,MAAM;IACN,KAAK;CACN,CAAA;AAED,oGAAoG;AACpG,oGAAoG;AACpG,iFAAiF;AACjF,EAAE;AACF,wGAAwG;AACxG,uGAAuG;AACvG,sGAAsG;AACtG,qGAAqG;AACrG,mGAAmG;AACnG,gDAAgD;AAChD,MAAM,sBAAsB,GAC1B,iGAAiG;IACjG,2CAA2C,CAAA;AAC7C,MAAM,uBAAuB,GAAsB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAA;AAE1F,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,yGAAyG;AACzG,yGAAyG;AACzG,oGAAoG;AACpG,MAAM,mBAAmB,GACvB,qFAAqF;IACrF,oCAAoC,CAAA;AACtC,mGAAmG;AACnG,wGAAwG;AACxG,wGAAwG;AACxG,kGAAkG;AAClG,MAAM,kBAAkB,GAAkC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9F,MAAM,EAAE,IAAI;IACZ,QAAQ;IACR,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC,CAAA;AAEH,MAAM,cAAc,GAA4B;IAC9C,OAAO;IACP;QACE,QAAQ,EAAE,6DAA6D;QACvE,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,QAAQ,EAAE,4DAA4D;QACtE,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAA;AAED,qGAAqG;AACrG,wGAAwG;AACxG,6EAA6E;AAC7E,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,wGAAwG;AACxG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,kGAAkG;AAClG,oDAAoD;AACpD,MAAM,yBAAyB,GAC7B,yGAAyG,CAAA;AAC3G,MAAM,WAAW,GAAW,sCAAsC,CAAA;AAClE,MAAM,qBAAqB,GAAgC;IACzD;QACE,QAAQ,EAAE,GAAG,WAAW,8BAA8B;QACtD,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,QAAQ,EAAE,GAAG,WAAW,wEAAwE;QAChG,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,QAAQ,EACN,GAAG,WAAW,gEAAgE;YAC9E,uCAAuC;QACzC,OAAO,EAAE,yBAAyB;KACnC;CACF,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,OAAO,GAAwB,YAAY,CAAA;AAExD,oGAAoG;AACpG,MAAM,CAAC,MAAM,YAAY,GAAoB,QAAQ,CAAA;AAErD,sGAAsG;AACtG,qGAAqG;AACrG,oGAAoG;AACpG,kDAAkD;AAClD,EAAE;AACF,qGAAqG;AACrG,wGAAwG;AACxG,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,KAAK,GAAG,CAAC,QAAiB,EAAW,EAAE,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,CAAC,CAAA;AAElF,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAW,EAAE;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC3C,CAAC;IACD,gGAAgG;IAChG,uGAAuG;IACvG,MAAM,QAAQ,GAAuB,OAAO,CAAA;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACvE,CAAC,CAAA;AAED,mGAAmG;AACnG,kGAAkG;AAClG,oGAAoG;AACpG,wGAAwG;AACxG,EAAE;AACF,qGAAqG;AACrG,uGAAuG;AACvG,mGAAmG;AACnG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAmB,EAAE;IAChE,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAClD,OAAO,WAAW,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;YACE,GAAG,KAAK;YACR,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,OAAO,CAA6B,EAA8B,EAAE,CAAC;gBACzE,EAAE;gBACF,QAAQ,CAAC,OAAO,CAAC;aAClB,CACF,CACF;SACF;QACH,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAA;AAClB,CAAC,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,UAAU,GAA+B;IACpD,EAAE,CAAC,OAAO,CAAC,WAAW;IACtB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB;IACrC,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB;IACxC,OAAO,CAAC,OAAO,CAAC,WAAW;IAC3B,OAAO,CAAC,OAAO,CAAC,WAAW;IAC3B,kGAAkG;IAClG,6FAA6F;IAC7F,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,2DAA2D;IACjF,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,+BAA+B;CACpE,CAAC,GAAG,CAAC,CAAC,KAAa,EAAmB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,aAAgD,EAC/B,EAAE,CAAC,CAAC;IACrB,eAAe,EAAE,EAAE,aAAa,EAAE;CACnC,CAAC,CAAA;AAEF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,yEAAyE;IACzE,kDAAkD,EAAE,OAAO;IAC3D,mDAAmD,EAAE,OAAO;IAC5D,2FAA2F;IAC3F,6FAA6F;IAC7F,uEAAuE;IACvE,4BAA4B,EAAE;QAC5B,OAAO;QACP,EAAE,mBAAmB,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE;KACvE;IACD,8FAA8F;IAC9F,yFAAyF;IACzF,wCAAwC,EAAE,KAAK;IAC/C,6FAA6F;IAC7F,qGAAqG;IACrG,oGAAoG;IACpG,oGAAoG;IACpG,oGAAoG;IACpG,kCAAkC;IAClC,oCAAoC,EAAE,KAAK;IAC3C,0CAA0C,EAAE,OAAO;IACnD,+CAA+C,EAAE,OAAO;IACxD,gDAAgD,EAAE,OAAO;IACzD,6CAA6C,EAAE,OAAO;IACtD,qDAAqD;IACrD,yCAAyC,EAAE,OAAO;IAClD,kGAAkG;IAClG,6FAA6F;IAC7F,gGAAgG;IAChG,iFAAiF;IACjF,kGAAkG;IAClG,gGAAgG;IAChG,4FAA4F;IAC5F,kGAAkG;IAClG,qEAAqE;IACrE,EAAE;IACF,oGAAoG;IACpG,iGAAiG;IACjG,mGAAmG;IACnG,mGAAmG;IACnG,sGAAsG;IACtG,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAChD,wCAAwC,EAAE,OAAO;IACjD,uCAAuC,EAAE,OAAO;IAChD,+CAA+C,EAAE,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxF,8FAA8F;IAC9F,gGAAgG;IAChG,iGAAiG;IACjG,qDAAqD;IACrD,kCAAkC,EAAE,OAAO;IAC3C,4FAA4F;IAC5F,iGAAiG;IACjG,4FAA4F;IAC5F,mGAAmG;IACnG,sCAAsC,EAAE;QACtC,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;YACrD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,KAAK,EAAE,KAAK,EAAE;SAC5E;KACF;IAED,4FAA4F;IAC5F,uDAAuD,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,qDAAqD,EAAE,OAAO;IAE9D,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;IACrC,8BAA8B,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;IACzD,YAAY,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;IACnC,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACjC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7F,wBAAwB,EAAE;QACxB,OAAO;QACP,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;KAC1E;IAED,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,gGAAgG;IAChG,yFAAyF;IACzF,kGAAkG;IAClG,gGAAgG;IAChG,qCAAqC,EAAE;QACrC,OAAO;QACP;YACE,MAAM,EAAE,kBAAkB;YAC1B,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;YACzB,6BAA6B,EAAE,IAAI;YACnC,WAAW,EAAE,IAAI;YACjB,yBAAyB,EAAE,IAAI;YAC/B,6BAA6B,EAAE,IAAI;YACnC,iBAAiB,EAAE,IAAI;YACvB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;SACrB;KACF;IAED,0FAA0F;IAC1F,+FAA+F;IAC/F,8FAA8F;IAC9F,8CAA8C;IAC9C,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAExF,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG,2FAA2F;IAC3F,EAAE;IACF,kGAAkG;IAClG,kGAAkG;IAClG,8FAA8F;IAC9F,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACpF,gCAAgC,EAAE,KAAK;IAEvC,8FAA8F;IAC9F,mFAAmF;IACnF,sBAAsB,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,qBAAqB,CAAC;IAErE,wBAAwB;IACxB,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;IACvB,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAEnD,8CAA8C;IAC9C,+BAA+B,EAAE,KAAK,EAAE,gDAAgD;IACxF,mGAAmG;IACnG,oGAAoG;IACpG,qGAAqG;IACrG,kGAAkG;IAClG,oGAAoG;IACpG,qGAAqG;IACrG,qGAAqG;IACrG,8EAA8E;IAC9E,yFAAyF;IACzF,2BAA2B,EAAE;QAC3B,OAAO;QACP,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;KAC/E;IACD,+FAA+F;IAC/F,gGAAgG;IAChG,kGAAkG;IAClG,qEAAqE;IACrE,iCAAiC,EAAE;QACjC,OAAO;QACP;YACE,QAAQ,EAAE;gBACR,gGAAgG;gBAChG,8FAA8F;gBAC9F,+FAA+F;gBAC/F,GAAG,EAAE,IAAI;gBACT,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACb;SACF;KACF;IACD,+FAA+F;IAC/F,sGAAsG;IACtG,sGAAsG;IACtG,iGAAiG;IACjG,+FAA+F;IAC/F,qGAAqG;IACrG,mEAAmE;IACnE,+FAA+F;IAC/F,mFAAmF;IACnF,mCAAmC,EAAE;QACnC,OAAO;QACP;YACE,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,IAAI;YACvB,yBAAyB,EAAE,IAAI;SAChC;KACF;IACD,wBAAwB,EAAE,KAAK,EAAE,iEAAiE;IAClG,kGAAkG;IAClG,gGAAgG;IAChG,0EAA0E;IAC1E,iCAAiC,EAAE,KAAK;IACxC,yBAAyB,EAAE,KAAK;IAChC,kCAAkC,EAAE,KAAK;IACzC,uBAAuB,EAAE,KAAK;IAC9B,4BAA4B,EAAE,KAAK;IACnC,iBAAiB,EAAE,KAAK,EAAE,6CAA6C;IACvE,2BAA2B,EAAE,KAAK;IAClC,yFAAyF;IACzF,iGAAiG;IACjG,+FAA+F;IAC/F,gGAAgG;IAChG,2FAA2F;IAC3F,wCAAwC,EAAE,KAAK;IAC/C,gGAAgG;IAChG,EAAE;IACF,oGAAoG;IACpG,kGAAkG;IAClG,4FAA4F;IAC5F,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,qGAAqG;IACrG,0EAA0E;IAC1E,EAAE;IACF,qGAAqG;IACrG,iGAAiG;IACjG,iGAAiG;IACjG,2FAA2F;IAC3F,mGAAmG;IACnG,2FAA2F;IAC3F,kGAAkG;IAClG,6EAA6E;IAC7E,EAAE;IACF,gGAAgG;IAChG,sFAAsF;IACtF,EAAE;IACF,oGAAoG;IACpG,yDAAyD;IACzD,8FAA8F;IAC9F,EAAE;IACF,qGAAqG;IACrG,uGAAuG;IACvG,oGAAoG;IACpG,gGAAgG;IAChG,kDAAkD;IAClD,EAAE;IACF,kGAAkG;IAClG,oGAAoG;IACpG,iGAAiG;IACjG,mGAAmG;IACnG,gGAAgG;IAChG,qFAAqF;IACrF,EAAE;IACF,qGAAqG;IACrG,mGAAmG;IACnG,qGAAqG;IACrG,mGAAmG;IACnG,qGAAqG;IACrG,gCAAgC;IAChC,EAAE;IACF,iGAAiG;IACjG,kGAAkG;IAClG,qGAAqG;IACrG,oFAAoF;IACpF,oGAAoG;IACpG,8FAA8F;IAC9F,uBAAuB,EAAE,KAAK;IAC9B,2FAA2F;IAC3F,sFAAsF;IACtF,wFAAwF;IACxF,yCAAyC,EAAE,KAAK;IAChD,uBAAuB,EAAE;QACvB,OAAO;QACP,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KAClE;IAED,2FAA2F;IAC3F,uFAAuF;IACvF,qBAAqB,EAAE,KAAK;IAC5B,qBAAqB,EAAE,KAAK;IAC5B,uBAAuB,EAAE,KAAK;IAC9B,qGAAqG;IACrG,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,kGAAkG;IAClG,oEAAoE;IACpE,2BAA2B,EAAE,OAAO;IAEpC,oEAAoE;IACpE,0BAA0B,EAAE,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC;IAC5D,wFAAwF;IACxF,iFAAiF;IACjF,uBAAuB,EAAE;QACvB,OAAO;QACP;YACE,KAAK,EAAE;gBACL,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACxE,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;aACtF;SACF;KACF;CACF,CAAA;AAoBD,MAAM,CAAC,MAAM,YAAY,GAAiB,MAAM,CAAA;AAEhD,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAc;IAC3C,yBAAyB,EAAE,OAAO,EAAE,gDAAgD;IACpF,0BAA0B,EAAE,OAAO,EAAE,qCAAqC;IAC1E,+BAA+B,EAAE,OAAO,EAAE,6DAA6D;IACvG,+DAA+D;IAC/D,sBAAsB,EAAE,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;IACnF,8FAA8F;IAC9F,8FAA8F;IAC9F,cAAc;IACd,6BAA6B,EAAE,KAAK;IACpC,gGAAgG;IAChG,mGAAmG;IACnG,qGAAqG;IACrG,6FAA6F;IAC7F,iFAAiF;IACjF,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChD,6BAA6B,EAAE,OAAO,EAAE,sCAAsC;IAC9E,8BAA8B,EAAE,OAAO,EAAE,iDAAiD;IAC1F,6BAA6B,EAAE,OAAO,EAAE,2CAA2C;IACnF,2BAA2B,EAAE,OAAO,EAAE,iDAAiD;IACvF,oBAAoB,EAAE,OAAO;IAC7B,4BAA4B,EAAE,OAAO,EAAE,qCAAqC;IAC5E,2BAA2B,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpD,4BAA4B,EAAE,OAAO,EAAE,+DAA+D;CACvG,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,gGAAgG;IAChG,gGAAgG;IAChG,4FAA4F;IAC5F,oFAAoF;IACpF,qCAAqC,EAAE,KAAK;IAC5C,6BAA6B,EAAE,KAAK,EAAE,wDAAwD;IAC9F,6CAA6C,EAAE,KAAK,EAAE,yCAAyC;IAC/F,0BAA0B,EAAE,KAAK,EAAE,mDAAmD;IACtF,kCAAkC,EAAE,KAAK,EAAE,6DAA6D;IACxG,qGAAqG;IACrG,uGAAuG;IACvG,qGAAqG;IACrG,qGAAqG;IACrG,+BAA+B;IAC/B,wBAAwB,EAAE,KAAK;CAChC,CAAA;AAED,oGAAoG;AACpG,sGAAsG;AACtG,kCAAkC;AAClC,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,yGAAyG;AACzG,4FAA4F;AAC5F,MAAM,kBAAkB,GAAgC;IACtD;QACE,QAAQ,EACN,2EAA2E;YAC3E,8CAA8C;QAChD,OAAO,EACL,8FAA8F;YAC9F,wCAAwC;KAC3C;CACF,CAAA;AAED,qGAAqG;AACrG,wGAAwG;AACxG,yGAAyG;AACzG,yGAAyG;AACzG,iGAAiG;AACjG,MAAM,uBAAuB,GAAgC;IAC3D;QACE,QAAQ,EACN,8FAA8F;QAChG,OAAO,EACL,+FAA+F;YAC/F,4EAA4E;KAC/E;IACD;QACE,QAAQ,EACN,6FAA6F;QAC/F,OAAO,EACL,+FAA+F;YAC/F,oBAAoB;KACvB;IACD;QACE,QAAQ,EACN,uCAAuC;YACvC,kFAAkF;QACpF,OAAO,EACL,gGAAgG;YAChG,QAAQ;KACX;IACD;QACE,QAAQ,EACN,uFAAuF;YACvF,kFAAkF;QACpF,OAAO,EACL,iGAAiG;YACjG,QAAQ;KACX;IACD;QACE,QAAQ,EAAE,wDAAwD;QAClE,OAAO,EACL,+FAA+F;KAClG;IACD;QACE,QAAQ,EACN,2FAA2F;QAC7F,OAAO,EACL,6FAA6F;YAC7F,mDAAmD;KACtD;IACD;QACE,QAAQ,EAAE,iFAAiF;QAC3F,OAAO,EACL,8FAA8F;KACjG;IACD,8FAA8F;IAC9F,qGAAqG;IACrG,iGAAiG;IACjG,0EAA0E;IAC1E;QACE,QAAQ,EACN,oFAAoF;YACpF,4DAA4D;QAC9D,OAAO,EACL,+FAA+F;KAClG;IACD;QACE,QAAQ,EACN,0EAA0E;YAC1E,4DAA4D;QAC9D,OAAO,EACL,8FAA8F;KACjG;IACD;QACE,QAAQ,EAAE,6EAA6E;QACvF,OAAO,EACL,8FAA8F;KACjG;CACF,CAAA;AAED,sGAAsG;AACtG,yFAAyF;AACzF,iFAAiF;AACjF,MAAM,oBAAoB,GAAgC;IACxD;QACE,QAAQ,EACN,0FAA0F;QAC5F,OAAO,EACL,gGAAgG;YAChG,0DAA0D;KAC7D;IACD;QACE,QAAQ,EACN,0FAA0F;QAC5F,OAAO,EACL,6FAA6F;YAC7F,qBAAqB;KACxB;IACD;QACE,QAAQ,EAAE,2EAA2E;QACrF,OAAO,EACL,yFAAyF;KAC5F;CACF,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,sBAAsB,EAAE;QACtB,GAAG,cAAc;QACjB,GAAG,qBAAqB;QACxB,GAAG,qBAAqB;QACxB,GAAG,kBAAkB;QACrB,GAAG,oBAAoB;QACvB,GAAG,uBAAuB;KAC3B;CACF,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAwB,EAAmB,EAAE,CAAC,CAAC;IAC7E,KAAK;IACL,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9C,8FAA8F;IAC9F,qGAAqG;IACrG,qFAAqF;IACrF,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IACjD,KAAK,EAAE;QACL,GAAG,cAAc;QACjB,oGAAoG;QACpG,qGAAqG;QACrG,4FAA4F;QAC5F,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK;QAC5C,oGAAoG;QACpG,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;QAC1D,4BAA4B,EAAE,KAAK;QACnC,qGAAqG;QACrG,uEAAuE;QACvE,qCAAqC,EAAE,KAAK;QAC5C,kBAAkB,EAAE;YAClB,OAAO;YACP;gBACE,MAAM,EAAE,kBAAkB;gBAC1B,kBAAkB,EAAE,IAAI;gBACxB,mBAAmB,EAAE,IAAI;gBACzB,6BAA6B,EAAE,IAAI;gBACnC,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,KAAK;aACrB;SACF;KACF;CACF,CAAC,CAAA;AAEF,0FAA0F;AAC1F,EAAE;AACF,wGAAwG;AACxG,yGAAyG;AACzG,uGAAuG;AACvG,kGAAkG;AAClG,MAAM,eAAe,GAAW,kBAAkB,CAAA;AAElD,yGAAyG;AACzG,+BAA+B;AAC/B,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,sGAAsG;AACtG,oGAAoG;AACpG,+DAA+D;AAC/D,MAAM,mBAAmB,GAAW,eAAe,CAAA;AAEnD,qGAAqG;AACrG,sBAAsB;AACtB,EAAE;AACF,uGAAuG;AACvG,sGAAsG;AACtG,sGAAsG;AACtG,kGAAkG;AAClG,oGAAoG;AACpG,qFAAqF;AACrF,EAAE;AACF,sGAAsG;AACtG,uGAAuG;AACvG,uGAAuG;AACvG,uGAAuG;AACvG,wGAAwG;AACxG,uGAAuG;AACvG,mGAAmG;AACnG,MAAM,eAAe,GAAW,YAAY,CAAA;AAE5C,0GAA0G;AAC1G,yGAAyG;AACzG,yEAAyE;AACzE,EAAE;AACF,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,CAAC,SAA4B,EAAoB,EAAE,CAAC;IACxE,OAAO;IACP,EAAE,qBAAqB,EAAE,CAAC,eAAe,EAAE,GAAG,SAAS,CAAC,EAAE;CAC3D,CAAA;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAAwB,EACxB,OAA0B,EACT,EAAE,CAAC,CAAC;IACrB,KAAK;IACL,OAAO;IACP,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,mBAAmB,EAAE,OAAO;QAC5B,2BAA2B,EAAE,aAAa,CAAC,EAAE,CAAC;KAC/C;CACF,CAAC,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAoB,EAAE,CAAC,CAAC;IACxD,KAAK,EAAE,CAAC,kBAAkB,CAAC;IAC3B,uGAAuG;IACvG,sGAAsG;IACtG,uGAAuG;IACvG,wGAAwG;IACxG,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,2BAA2B,EAAE,aAAa,CAAC,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;KACnF;CACF,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAoB,EAAE,CAAC,CAAC;IAC1D,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,qGAAqG;IACrG,mCAAmC;IACnC,OAAO,EAAE,EAAE,UAAU,EAAE;IACvB,KAAK,EAAE;QACL,2BAA2B,EAAE,aAAa,CAAC,CAAC,mBAAmB,CAAC,CAAC;KAClE;CACF,CAAC,CAAA;AAGF,+FAA+F;AAC/F,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,GACrB,CAAA"}

package/dist/eslint-security.d.ts

@@ -0,0 +1,8 @@
+/** One `no-restricted-syntax` entry: the shape to reject, and what to say when it appears. */
+export interface RestrictedSyntax {
+    readonly selector: string;
+    readonly message: string;
+}
+/** Output-boundary syntax every composed configuration must retain. */
+export declare const SECURITY_RESTRICTIONS: readonly RestrictedSyntax[];
+//# sourceMappingURL=eslint-security.d.ts.map

package/dist/eslint-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint-security.d.ts","sourceRoot":"","sources":["../src/eslint-security.ts"],"names":[],"mappings":"AAMA,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAkED,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,EAAE,SAAS,gBAAgB,EAG5D,CAAA"}

package/dist/eslint-security.js

@@ -0,0 +1,47 @@
+const SENSITIVE_NAME = '/^(?:password|token|secret|apiKey|privateKey|creditCard|ssn|cvv)$/';
+const CONSOLE_CALL = "CallExpression[callee.type='MemberExpression']" +
+    "[callee.object.name='console']" +
+    '[callee.property.name=/^(?:log|error|warn|info|debug|trace)$/]';
+const SENSITIVE_LOG_MESSAGE = '[sensitive-data-logged] Do not write a credential-bearing value directly to console output; ' +
+    'remove it or pass an explicitly redacted value.';
+const sensitiveLog = (suffix) => ({
+    selector: `${CONSOLE_CALL}${suffix}`,
+    message: SENSITIVE_LOG_MESSAGE,
+});
+const SENSITIVE_LOGGING = [
+    sensitiveLog(` > Identifier[name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > MemberExpression[property.name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > ChainExpression MemberExpression[property.name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > TemplateLiteral Identifier[name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > TemplateLiteral MemberExpression[property.name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > BinaryExpression Identifier[name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > BinaryExpression MemberExpression[property.name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > ObjectExpression Property[shorthand=true] > Identifier[name=${SENSITIVE_NAME}]`),
+    sensitiveLog(` > ObjectExpression Property > MemberExpression[property.name=${SENSITIVE_NAME}]`),
+];
+const INTERNAL_ERROR = 'MemberExpression[object.name=/^(?:err|error|exception)$/]' +
+    '[property.name=/^(?:message|stack)$/]';
+const ERROR_PROPERTY = 'Property[key.name=/^(?:error|message)$/], Property[key.value=/^(?:error|message)$/]';
+const JSON_RESPONSE = "CallExpression[callee.type='MemberExpression']" +
+    '[callee.object.name=/^(?:Response|NextResponse)$/]' +
+    "[callee.property.name='json']";
+const ERROR_RESPONSE_MESSAGE = '[leaks-error-message] Do not return an internal error message or stack to a caller; log it ' +
+    'server-side and return a generic or explicitly sanitised public error.';
+const errorResponse = (selector) => ({
+    selector,
+    message: ERROR_RESPONSE_MESSAGE,
+});
+const INTERNAL_ERROR_RESPONSES = [
+    errorResponse(`${JSON_RESPONSE} > ObjectExpression > :matches(${ERROR_PROPERTY}) > ${INTERNAL_ERROR}`),
+    errorResponse(`${JSON_RESPONSE} > ${INTERNAL_ERROR}`),
+    errorResponse(`ReturnStatement > ObjectExpression > :matches(${ERROR_PROPERTY}) > ${INTERNAL_ERROR}`),
+    errorResponse(`ArrowFunctionExpression[expression=true] > ObjectExpression > ` +
+        `:matches(${ERROR_PROPERTY}) > ${INTERNAL_ERROR}`),
+    errorResponse(`NewExpression[callee.name='Response'] > ${INTERNAL_ERROR}`),
+];
+/** Output-boundary syntax every composed configuration must retain. */
+export const SECURITY_RESTRICTIONS = [
+    ...SENSITIVE_LOGGING,
+    ...INTERNAL_ERROR_RESPONSES,
+];
+//# sourceMappingURL=eslint-security.js.map

package/dist/eslint-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint-security.js","sourceRoot":"","sources":["../src/eslint-security.ts"],"names":[],"mappings":"AAYA,MAAM,cAAc,GAAW,oEAAoE,CAAA;AAEnG,MAAM,YAAY,GAChB,gDAAgD;IAChD,gCAAgC;IAChC,gEAAgE,CAAA;AAElE,MAAM,qBAAqB,GACzB,8FAA8F;IAC9F,iDAAiD,CAAA;AAEnD,MAAM,YAAY,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;IAC1D,QAAQ,EAAE,GAAG,YAAY,GAAG,MAAM,EAAE;IACpC,OAAO,EAAE,qBAAqB;CAC/B,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAgC;IACrD,YAAY,CAAC,sBAAsB,cAAc,GAAG,CAAC;IACrD,YAAY,CAAC,qCAAqC,cAAc,GAAG,CAAC;IACpE,YAAY,CAAC,qDAAqD,cAAc,GAAG,CAAC;IACpF,YAAY,CAAC,sCAAsC,cAAc,GAAG,CAAC;IACrE,YAAY,CAAC,qDAAqD,cAAc,GAAG,CAAC;IACpF,YAAY,CAAC,uCAAuC,cAAc,GAAG,CAAC;IACtE,YAAY,CAAC,sDAAsD,cAAc,GAAG,CAAC;IACrF,YAAY,CAAC,kEAAkE,cAAc,GAAG,CAAC;IACjG,YAAY,CAAC,iEAAiE,cAAc,GAAG,CAAC;CACjG,CAAA;AAED,MAAM,cAAc,GAClB,2DAA2D;IAC3D,uCAAuC,CAAA;AAEzC,MAAM,cAAc,GAClB,qFAAqF,CAAA;AAEvF,MAAM,aAAa,GACjB,gDAAgD;IAChD,oDAAoD;IACpD,+BAA+B,CAAA;AAEjC,MAAM,sBAAsB,GAC1B,6FAA6F;IAC7F,wEAAwE,CAAA;AAE1E,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAoB,EAAE,CAAC,CAAC;IAC7D,QAAQ;IACR,OAAO,EAAE,sBAAsB;CAChC,CAAC,CAAA;AAEF,MAAM,wBAAwB,GAAgC;IAC5D,aAAa,CACX,GAAG,aAAa,kCAAkC,cAAc,OAAO,cAAc,EAAE,CACxF;IACD,aAAa,CAAC,GAAG,aAAa,MAAM,cAAc,EAAE,CAAC;IACrD,aAAa,CACX,iDAAiD,cAAc,OAAO,cAAc,EAAE,CACvF;IACD,aAAa,CACX,gEAAgE;QAC9D,YAAY,cAAc,OAAO,cAAc,EAAE,CACpD;IACD,aAAa,CAAC,2CAA2C,cAAc,EAAE,CAAC;CAC3E,CAAA;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAgC;IAChE,GAAG,iBAAiB;IACpB,GAAG,wBAAwB;CAC5B,CAAA"}

package/dist/eslint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eslint.d.ts","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":";AA0DA,wBA0PC"}
+{"version":3,"file":"eslint.d.ts","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":";AA6DA,wBA4SC"}

package/dist/eslint.js

@@ -10,7 +10,8 @@
 //
 // Philosophy: maximum-explicit. The build should be hard to satisfy by accident, so that code which
 // passes is verbose, explicit and readable by construction.
-import { REEXPORT_CONFIG_FILES } from '@ploaness/governance';
+import nextPlugin from '@next/eslint-plugin-next';
+import { ENVIRONMENT_READ_EXEMPTIONS, REEXPORT_CONFIG_FILES } from '@ploaness/governance';
 //
 // The framework-neutral half - the caps, the explicitness rules, the naming ban, the suppression
 // discipline, the mock ban - lives in ./eslint-core.js and is shared with the ploaness repository's own
@@ -18,7 +19,8 @@ import { REEXPORT_CONFIG_FILES } from '@ploaness/governance';
 // collection configs, the environment module, the a11y layer, and the test-integrity block.
 import jsxA11y from 'eslint-plugin-jsx-a11y';
 import testingLibrary from 'eslint-plugin-testing-library';
-import { baseLayers, compose, guidelineRules, immutabilityBlock, NO_INHERITANCE, NO_MOCK_PROPERTIES, NO_NETWORK_GUARD_ESCAPE, prettierLast, processConfigBlock, specEnvironmentBlock, testIdiomRules, testIntegrityRules, testSuiteSyntaxRules, typeAwareParsing, vitestPlugin, } from './eslint-core.js';
+import { baseLayers, compose, guidelineRules, immutabilityBlock, NO_INHERITANCE, NO_MOCK_PROPERTIES, NO_NETWORK_GUARD_ESCAPE, prettierLast, processConfigBlock, specEnvironmentBlock, testIdiomRules, testIntegrityRules, testSuiteSyntaxRules, typeAwareParsing, vitestPlugin, withoutWarnings, } from './eslint-core.js';
+import { SECURITY_RESTRICTIONS } from './eslint-security.js';
 import { projectSettings as settings } from './project-settings.js';
 const NO_INLINE_CONFIG_FUNCTIONS_SELECTOR = 'ArrowFunctionExpression, FunctionExpression';
 const NO_INLINE_CONFIG_FUNCTIONS_MESSAGE = 'No inline functions in collection/global/field/block configs. Define behavior (access, hooks, ' +
@@ -110,11 +112,43 @@ specEnvironmentBlock(),
 //    This is pure static analysis, so it is deterministic (never flaky) and the baseline every site
 //    needs. What it CANNOT see (it does not render): color contrast, focus order, real keyboard
 //    navigation - those need a browser and are covered by axe-in-e2e (see AGENTS.md testing policy).
+//
+//    This block also settles one rule for the whole application configuration. Biome ships a port of
+//    `no-noninteractive-element-to-interactive-role`, and it is `off` in `biome.json` because it
+//    contradicts Biome's own `useSemanticElements`: that rule requires `role="grid"` to sit on a
+//    `<table>`, which is what the ARIA pattern documents, and the port then refuses the table carrying
+//    it. No markup satisfies both, the port accepts no options, and the cost fell on any consumer
+//    building an accessible grid, treegrid, listbox or tab-strip on the correct native element - a
+//    suppression each, spent on a disagreement between two rules rather than on a hard case. The
+//    recommended options mounted here are the same check with the allowances the port lacks: they
+//    name `table: ['grid']`, `td: ['gridcell']` and `li: ['row']` explicitly, so nothing is lost.
 {
     files: ['**/*.tsx'],
     plugins: { 'jsx-a11y': jsxA11y },
     rules: jsxA11y.flatConfigs.recommended.rules,
 }, 
+// ── Core Web Vitals: the static half of a measurement no gate can take. A vitals score, like a
+//    Lighthouse score, moves between two runs of an unchanged tree and would measure `next dev`'s
+//    on-demand compiler rather than the application, which is why neither is a gate. The CAUSES of a
+//    bad score are static and known - a raw `<img>` where `next/image` would size and lazy-load it, a
+//    synchronous `<script>`, an `<a>` for an internal route, a Google font with no `display` - and
+//    Next publishes exactly that list as its core-web-vitals preset. The preset is mounted whole and
+//    raised through `withoutWarnings`, because it leaves 14 of its 22 rules at `warn` and a warning is
+//    not a verdict here; nothing is turned off, so this is the preset by name and provenance rather
+//    than a hand copy of it that would go stale on the next Next.
+//
+//    `src/**` only, because the rules judge what the application renders and serves. A component
+//    test rendering an `<img>` under jsdom serves nothing, for the same reason test code is not held
+//    to the bundle budget. `.ts` is in beside `.tsx` because three of the rules are not JSX rules at
+//    all: a module variable assigned, a `document` imported into a page, a relative
+//    `location.assign`.
+//
+//    The version is tied to the `next` pin in pins.json - `pins-agree.spec.ts` holds the joint -
+//    since the two are published together and the rules describe one release's semantics.
+{
+    ...withoutWarnings(nextPlugin.configs['core-web-vitals']),
+    files: ['src/**/*.ts', 'src/**/*.tsx'],
+}, 
 // ── Generated Payload mount only: relax type-safety the framework legitimately defeats.
 //    Scoped to `src/app/(payload)/**` (the create-payload-app scaffold + API re-exports), NOT all
 //    of `src/app/**` - `(frontend)`, `oauth`, and any route you hand-write are real code and stay
@@ -159,6 +193,7 @@ specEnvironmentBlock(),
     rules: {
         'no-restricted-syntax': [
             ...NO_INHERITANCE,
+            ...SECURITY_RESTRICTIONS,
             {
                 selector: NO_INLINE_CONFIG_FUNCTIONS_SELECTOR,
                 message: NO_INLINE_CONFIG_FUNCTIONS_MESSAGE,
@@ -177,7 +212,7 @@ specEnvironmentBlock(),
 //    `environment.ts` could have validated.
 {
     files: ['src/**/*.ts'],
-    ignores: ['src/lib/environment.ts', 'src/proxy.ts'],
+    ignores: [...ENVIRONMENT_READ_EXEMPTIONS],
     rules: {
         // `NO_MOCK_PROPERTIES` is spread in beside the env rule because this key REPLACES the base
         // setting rather than adding to it - naming only the env restriction here switched the
@@ -223,10 +258,22 @@ specEnvironmentBlock(),
 //    test must contain a real assertion. The testing-library rules keep component tests user-facing
 //    (query by role/text); assertions use the @testing-library/jest-dom matchers, which a project
 //    registers in a `vitest.setup.ts` of its own if it writes component tests.
-//    Scoped to the Vitest suite (`tests/int` + `tests/unit`); Playwright e2e specs use a different
-//    runner (and its own unconditional `forbidOnly`), so these Vitest/RTL rules do not apply there.
+//    Scoped to every directory `vitest.ts` collects - `tests/int`, `tests/unit` and `tests/component`
+//    - because a suite the runner runs and the linter does not reach is a suite held to no standard.
+//    The component directory was missed for exactly that reason, and the rules that name it in the
+//    sentence above were the ones it escaped: a consumer's component specs ran under a jsdom suite
+//    this harness mandates while every `testing-library/*` rule, `no-disabled-tests`,
+//    `no-commented-out-tests` and the literal-assertion ban passed over them. Playwright e2e specs
+//    use a different runner, with its own unconditional `forbidOnly`, so these rules stay out of it.
 {
-    files: ['tests/int/**/*.ts', 'tests/int/**/*.tsx', 'tests/unit/**/*.ts', 'tests/unit/**/*.tsx'],
+    files: [
+        'tests/int/**/*.ts',
+        'tests/int/**/*.tsx',
+        'tests/unit/**/*.ts',
+        'tests/unit/**/*.tsx',
+        'tests/component/**/*.ts',
+        'tests/component/**/*.tsx',
+    ],
     plugins: { vitest: vitestPlugin, 'testing-library': testingLibrary },
     rules: {
         // A test must actually run and actually assert. The rules live in eslint-core.js, because the
@@ -253,7 +300,11 @@ specEnvironmentBlock(),
 {
     files: ['tests/e2e/**/*.ts', 'tests/e2e/**/*.tsx'],
     rules: {
-        'no-restricted-syntax': [...NO_INHERITANCE, ...NO_NETWORK_GUARD_ESCAPE],
+        'no-restricted-syntax': [
+            ...NO_INHERITANCE,
+            ...SECURITY_RESTRICTIONS,
+            ...NO_NETWORK_GUARD_ESCAPE,
+        ],
     },
 }, 
 // ── Formatting is Biome's job - disable every conflicting stylistic rule (must stay last) ────

package/dist/eslint.js.map

@@ -1 +1 @@
-{"version":3,"file":"eslint.js","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":"AAAA,YAAY;AACZ,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,mGAAmG;AACnG,0FAA0F;AAC1F,4FAA4F;AAC5F,EAAE;AACF,oGAAoG;AACpG,4DAA4D;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,EAAE;AACF,iGAAiG;AACjG,wGAAwG;AACxG,kGAAkG;AAClG,4FAA4F;AAC5F,OAAO,OAAO,MAAM,wBAAwB,CAAA;AAC5C,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EACL,UAAU,EACV,OAAO,EAEP,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,GACb,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEnE,MAAM,mCAAmC,GAAW,6CAA6C,CAAA;AACjG,MAAM,kCAAkC,GACtC,gGAAgG;IAChG,uFAAuF,CAAA;AAEzF,sFAAsF;AACtF,kGAAkG;AAClG,oGAAoG;AACpG,0EAA0E;AAC1E,EAAE;AACF,oGAAoG;AACpG,sEAAsE;AACtE,MAAM,mBAAmB,GAAoB;IAC3C,KAAK,EAAE,CAAC,GAAG,qBAAqB,CAAC;IACjC,KAAK,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE;CAC/C,CAAA;AAED,eAAe,OAAO;AACpB,+FAA+F;AAC/F;IACE,OAAO,EAAE;QACP,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,YAAY;QAEZ,WAAW;QACX,sBAAsB;QACtB,GAAG,QAAQ,CAAC,kBAAkB;QAC9B,8EAA8E;QAC9E,qFAAqF;QACrF,4EAA4E;QAC5E,mBAAmB;QACnB,gBAAgB;QAChB,sBAAsB;QACtB,oBAAoB;QACpB,mBAAmB;QACnB,gGAAgG;QAChG,iGAAiG;QACjG,8FAA8F;QAC9F,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,+CAA+C;QAC/C,OAAO;KACR;CACF,EAED,GAAG,UAAU;AAEb,6FAA6F;AAC7F,gBAAgB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAC1C,EAAE,KAAK,EAAE,cAAc,EAAE;AAEzB,oGAAoG;AACpG,+FAA+F;AAC/F,6EAA6E;AAC7E,iBAAiB,CACf,CAAC,SAAS,EAAE,UAAU,CAAC,EACvB,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,iCAAiC,CAAC,CACvF;AAED,oGAAoG;AACpG,kGAAkG;AAClG,kBAAkB,EAAE;AAEpB,oGAAoG;AACpG,oBAAoB,EAAE;AAEtB,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AACpG;IACE,KAAK,EAAE,CAAC,aAAa,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,sBAAsB,CAAC;IACvF,KAAK,EAAE;QACL,qBAAqB,EAAE;YACrB,OAAO;YACP;gBACE,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;gBACtF,QAAQ,EAAE;oBACR,6FAA6F;oBAC7F,wBAAwB;oBACxB,wBAAwB;iBACzB;aACF;SACF;QACD,4FAA4F;QAC5F,8BAA8B,EAAE,KAAK;KACtC;CACF;AAED,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,KAAK,EAAE;QACL,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;KAC3D;CACF;AAED,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,gGAAgG;AAChG,qGAAqG;AACrG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;IAChC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;CAC7C;AAED,yFAAyF;AACzF,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG;IACE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC;IAClC,KAAK,EAAE;QACL,yCAAyC,EAAE,KAAK;QAChD,mCAAmC,EAAE,KAAK;QAC1C,4CAA4C,EAAE,KAAK;QACnD,qCAAqC,EAAE,KAAK;QAC5C,uCAAuC,EAAE,KAAK;QAC9C,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;QAC1D,kCAAkC,EAAE,KAAK,EAAE,iDAAiD;QAC5F,gDAAgD,EAAE,KAAK;QACvD,oDAAoD,EAAE,KAAK;QAC3D,gCAAgC,EAAE,KAAK;KACxC;CACF;AAED,6FAA6F;AAC7F,6FAA6F;AAC7F,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC;IAClC,KAAK,EAAE;QACL,4BAA4B,EAAE,KAAK;KACpC;CACF;AAED,+FAA+F;AAC/F,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,2EAA2E;AAC3E;IACE,KAAK,EAAE;QACL,yBAAyB;QACzB,qBAAqB;QACrB,oBAAoB;QACpB,oBAAoB;KACrB;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE;YACtB,GAAG,cAAc;YACjB;gBACE,QAAQ,EAAE,mCAAmC;gBAC7C,OAAO,EAAE,kCAAkC;aAC5C;SACF;KACF;CACF;AAED,iGAAiG;AACjG,sGAAsG;AACtG,sFAAsF;AACtF,kGAAkG;AAClG,uGAAuG;AACvG,oGAAoG;AACpG,sGAAsG;AACtG,qGAAqG;AACrG,4CAA4C;AAC5C;IACE,KAAK,EAAE,CAAC,aAAa,CAAC;IACtB,OAAO,EAAE,CAAC,wBAAwB,EAAE,cAAc,CAAC;IACnD,KAAK,EAAE;QACL,2FAA2F;QAC3F,uFAAuF;QACvF,yFAAyF;QACzF,kFAAkF;QAClF,0BAA0B,EAAE;YAC1B,OAAO;YACP,GAAG,kBAAkB;YACrB;gBACE,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,KAAK;gBACf,OAAO,EACL,kFAAkF;oBAClF,mFAAmF;aACtF;SACF;KACF;CACF;AAED,wFAAwF;AACxF,iGAAiG;AACjG;IACE,KAAK,EAAE,CAAC,YAAY,CAAC;IACrB,KAAK,EAAE;QACL,iCAAiC,EAAE,KAAK,EAAE,2CAA2C;QACrF,kCAAkC,EAAE,KAAK,EAAE,qDAAqD;QAChG,iCAAiC,EAAE,KAAK;QACxC,yFAAyF;QACzF,gGAAgG;QAChG,4FAA4F;QAC5F,6BAA6B;KAC9B;CACF;AAED,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,mGAAmG;IACnG,6DAA6D;IAC7D,KAAK,EAAE,EAAE,GAAG,cAAc,EAAE;CAC7B;AAED,gGAAgG;AAChG,mGAAmG;AACnG,sGAAsG;AACtG,kGAAkG;AAClG,oGAAoG;AACpG,kGAAkG;AAClG,+EAA+E;AAC/E,mGAAmG;AACnG,oGAAoG;AACpG;IACE,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC;IAC/F,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE;IACpE,KAAK,EAAE;QACL,8FAA8F;QAC9F,uDAAuD;QACvD,GAAG,kBAAkB;QACrB,GAAG,oBAAoB;QAEvB,0EAA0E;QAC1E,qCAAqC,EAAE,OAAO;QAC9C,mCAAmC,EAAE,OAAO;QAC5C,uCAAuC,EAAE,OAAO;QAChD,8BAA8B,EAAE,OAAO,EAAE,mDAAmD;QAC5F,oCAAoC,EAAE,OAAO,EAAE,8CAA8C;QAC7F,+BAA+B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QACnD,gCAAgC,EAAE,OAAO,EAAE,qDAAqD;QAChG,wCAAwC,EAAE,OAAO;QACjD,uCAAuC,EAAE,OAAO;QAChD,mCAAmC,EAAE,OAAO,EAAE,wCAAwC;QACtF,iDAAiD,EAAE,OAAO;KAC3D;CACF;AAED,qGAAqG;AACrG,uGAAuG;AACvG,6EAA6E;AAC7E;IACE,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAClD,KAAK,EAAE;QACL,sBAAsB,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,uBAAuB,CAAC;KACxE;CACF;AAED,gGAAgG;AAChG,mBAAmB,EACnB,YAAY,CACb,CAAA"}
+{"version":3,"file":"eslint.js","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":"AAAA,YAAY;AACZ,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,mGAAmG;AACnG,0FAA0F;AAC1F,4FAA4F;AAC5F,EAAE;AACF,oGAAoG;AACpG,4DAA4D;AAE5D,OAAO,UAAU,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACzF,EAAE;AACF,iGAAiG;AACjG,wGAAwG;AACxG,kGAAkG;AAClG,4FAA4F;AAC5F,OAAO,OAAO,MAAM,wBAAwB,CAAA;AAC5C,OAAO,cAAc,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EACL,UAAU,EACV,OAAO,EAEP,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEnE,MAAM,mCAAmC,GAAW,6CAA6C,CAAA;AACjG,MAAM,kCAAkC,GACtC,gGAAgG;IAChG,uFAAuF,CAAA;AAEzF,sFAAsF;AACtF,kGAAkG;AAClG,oGAAoG;AACpG,0EAA0E;AAC1E,EAAE;AACF,oGAAoG;AACpG,sEAAsE;AACtE,MAAM,mBAAmB,GAAoB;IAC3C,KAAK,EAAE,CAAC,GAAG,qBAAqB,CAAC;IACjC,KAAK,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE;CAC/C,CAAA;AAED,eAAe,OAAO;AACpB,+FAA+F;AAC/F;IACE,OAAO,EAAE;QACP,UAAU;QACV,iBAAiB;QACjB,aAAa;QACb,YAAY;QAEZ,WAAW;QACX,sBAAsB;QACtB,GAAG,QAAQ,CAAC,kBAAkB;QAC9B,8EAA8E;QAC9E,qFAAqF;QACrF,4EAA4E;QAC5E,mBAAmB;QACnB,gBAAgB;QAChB,sBAAsB;QACtB,oBAAoB;QACpB,mBAAmB;QACnB,gGAAgG;QAChG,iGAAiG;QACjG,8FAA8F;QAC9F,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,+CAA+C;QAC/C,OAAO;KACR;CACF,EAED,GAAG,UAAU;AAEb,6FAA6F;AAC7F,gBAAgB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAC1C,EAAE,KAAK,EAAE,cAAc,EAAE;AAEzB,oGAAoG;AACpG,+FAA+F;AAC/F,6EAA6E;AAC7E,iBAAiB,CACf,CAAC,SAAS,EAAE,UAAU,CAAC,EACvB,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,iCAAiC,CAAC,CACvF;AAED,oGAAoG;AACpG,kGAAkG;AAClG,kBAAkB,EAAE;AAEpB,oGAAoG;AACpG,oBAAoB,EAAE;AAEtB,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AACpG;IACE,KAAK,EAAE,CAAC,aAAa,CAAC;IACtB,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,sBAAsB,CAAC;IACvF,KAAK,EAAE;QACL,qBAAqB,EAAE;YACrB,OAAO;YACP;gBACE,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;gBACtF,QAAQ,EAAE;oBACR,6FAA6F;oBAC7F,wBAAwB;oBACxB,wBAAwB;iBACzB;aACF;SACF;QACD,4FAA4F;QAC5F,8BAA8B,EAAE,KAAK;KACtC;CACF;AAED,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,KAAK,EAAE;QACL,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;KAC3D;CACF;AAED,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,gGAAgG;AAChG,qGAAqG;AACrG,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,uGAAuG;AACvG,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,kGAAkG;AAClG,kGAAkG;AAClG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;IAChC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;CAC7C;AAED,gGAAgG;AAChG,kGAAkG;AAClG,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qGAAqG;AACrG,uGAAuG;AACvG,oGAAoG;AACpG,kEAAkE;AAClE,EAAE;AACF,iGAAiG;AACjG,qGAAqG;AACrG,qGAAqG;AACrG,oFAAoF;AACpF,wBAAwB;AACxB,EAAE;AACF,iGAAiG;AACjG,0FAA0F;AAC1F;IACE,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzD,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;CACvC;AAED,yFAAyF;AACzF,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG;IACE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC;IAClC,KAAK,EAAE;QACL,yCAAyC,EAAE,KAAK;QAChD,mCAAmC,EAAE,KAAK;QAC1C,4CAA4C,EAAE,KAAK;QACnD,qCAAqC,EAAE,KAAK;QAC5C,uCAAuC,EAAE,KAAK;QAC9C,kDAAkD,EAAE,KAAK;QACzD,mDAAmD,EAAE,KAAK;QAC1D,kCAAkC,EAAE,KAAK,EAAE,iDAAiD;QAC5F,gDAAgD,EAAE,KAAK;QACvD,oDAAoD,EAAE,KAAK;QAC3D,gCAAgC,EAAE,KAAK;KACxC;CACF;AAED,6FAA6F;AAC7F,6FAA6F;AAC7F,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC;IAClC,KAAK,EAAE;QACL,4BAA4B,EAAE,KAAK;KACpC;CACF;AAED,+FAA+F;AAC/F,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,2EAA2E;AAC3E;IACE,KAAK,EAAE;QACL,yBAAyB;QACzB,qBAAqB;QACrB,oBAAoB;QACpB,oBAAoB;KACrB;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE;YACtB,GAAG,cAAc;YACjB,GAAG,qBAAqB;YACxB;gBACE,QAAQ,EAAE,mCAAmC;gBAC7C,OAAO,EAAE,kCAAkC;aAC5C;SACF;KACF;CACF;AAED,iGAAiG;AACjG,sGAAsG;AACtG,sFAAsF;AACtF,kGAAkG;AAClG,uGAAuG;AACvG,oGAAoG;AACpG,sGAAsG;AACtG,qGAAqG;AACrG,4CAA4C;AAC5C;IACE,KAAK,EAAE,CAAC,aAAa,CAAC;IACtB,OAAO,EAAE,CAAC,GAAG,2BAA2B,CAAC;IACzC,KAAK,EAAE;QACL,2FAA2F;QAC3F,uFAAuF;QACvF,yFAAyF;QACzF,kFAAkF;QAClF,0BAA0B,EAAE;YAC1B,OAAO;YACP,GAAG,kBAAkB;YACrB;gBACE,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,KAAK;gBACf,OAAO,EACL,kFAAkF;oBAClF,mFAAmF;aACtF;SACF;KACF;CACF;AAED,wFAAwF;AACxF,iGAAiG;AACjG;IACE,KAAK,EAAE,CAAC,YAAY,CAAC;IACrB,KAAK,EAAE;QACL,iCAAiC,EAAE,KAAK,EAAE,2CAA2C;QACrF,kCAAkC,EAAE,KAAK,EAAE,qDAAqD;QAChG,iCAAiC,EAAE,KAAK;QACxC,yFAAyF;QACzF,gGAAgG;QAChG,4FAA4F;QAC5F,6BAA6B;KAC9B;CACF;AAED,gGAAgG;AAChG;IACE,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,mGAAmG;IACnG,6DAA6D;IAC7D,KAAK,EAAE,EAAE,GAAG,cAAc,EAAE;CAC7B;AAED,gGAAgG;AAChG,mGAAmG;AACnG,sGAAsG;AACtG,kGAAkG;AAClG,oGAAoG;AACpG,kGAAkG;AAClG,+EAA+E;AAC/E,sGAAsG;AACtG,qGAAqG;AACrG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,mGAAmG;AACnG,qGAAqG;AACrG;IACE,KAAK,EAAE;QACL,mBAAmB;QACnB,oBAAoB;QACpB,oBAAoB;QACpB,qBAAqB;QACrB,yBAAyB;QACzB,0BAA0B;KAC3B;IACD,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE;IACpE,KAAK,EAAE;QACL,8FAA8F;QAC9F,uDAAuD;QACvD,GAAG,kBAAkB;QACrB,GAAG,oBAAoB;QAEvB,0EAA0E;QAC1E,qCAAqC,EAAE,OAAO;QAC9C,mCAAmC,EAAE,OAAO;QAC5C,uCAAuC,EAAE,OAAO;QAChD,8BAA8B,EAAE,OAAO,EAAE,mDAAmD;QAC5F,oCAAoC,EAAE,OAAO,EAAE,8CAA8C;QAC7F,+BAA+B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QACnD,gCAAgC,EAAE,OAAO,EAAE,qDAAqD;QAChG,wCAAwC,EAAE,OAAO;QACjD,uCAAuC,EAAE,OAAO;QAChD,mCAAmC,EAAE,OAAO,EAAE,wCAAwC;QACtF,iDAAiD,EAAE,OAAO;KAC3D;CACF;AAED,qGAAqG;AACrG,uGAAuG;AACvG,6EAA6E;AAC7E;IACE,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAClD,KAAK,EAAE;QACL,sBAAsB,EAAE;YACtB,GAAG,cAAc;YACjB,GAAG,qBAAqB;YACxB,GAAG,uBAAuB;SAC3B;KACF;CACF;AAED,gGAAgG;AAChG,mBAAmB,EACnB,YAAY,CACb,CAAA"}

package/dist/project-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-settings.d.ts","sourceRoot":"","sources":["../src/project-settings.ts"],"names":[],"mappings":"AAOA,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAelE,eAAO,MAAM,eAAe,EAAE,QAA0C,CAAA"}
+{"version":3,"file":"project-settings.d.ts","sourceRoot":"","sources":["../src/project-settings.ts"],"names":[],"mappings":"AAeA,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAA;AA6C7B,eAAO,MAAM,eAAe,EAAE,QAAqC,CAAA"}

package/dist/project-settings.js

@@ -3,21 +3,57 @@
 // Three shipped configurations need them - the Vitest config, the Playwright config, and the constants
 // the managed accessibility sweep imports - and none of them may carry a second copy of this reader. A
 // value the harness both writes and judges is declared once; the same holds for the value it reads.
+//
+// In a workspace the answer is TWO blocks rather than one. A member declares its own settings and the
+// repository root declares the ones every member inherits, and the CLI layers them through
+// `readMemberSettings` before any gate sees them. Reading only the member's block here left the
+// shipped configurations disagreeing with every gate about the same project: a skip route declared at
+// the root reached the gates and not the sweep, so the crawl followed a prefix it had been told to
+// leave alone. The layering is one-directional, exactly as it is in the CLI - a list adds, a threshold
+// is honoured only when stricter - so a member can never widen what the root set.
 import { readFileSync } from 'node:fs';
 import path from 'node:path';
-import { readSettings } from '@ploaness/governance';
+import { ploanessBlock, readMemberSettings, readSettings, } from '@ploaness/governance';
 // A project whose package.json cannot be read gets the defaults, which are the strict end of every
 // setting. Failing to parse must never be the thing that loosens a threshold.
 // `unknown` rather than the parse's own `any`: `readSettings` narrows every field it reads, so handing
 // it an `any` would only move the narrowing somewhere nothing checks it.
-const readPackageJson = () => {
-    const manifest = path.join(process.cwd(), 'package.json');
+const readPackageJson = (directory) => {
     try {
-        return JSON.parse(readFileSync(manifest, 'utf8'));
+        return JSON.parse(readFileSync(path.join(directory, 'package.json'), 'utf8'));
     }
     catch {
         return {};
     }
 };
-export const projectSettings = readSettings(readPackageJson());
+// What marks the repository root of a workspace. `pnpm-workspace.yaml` rather than `.git`, because it
+// is the file that makes a directory a workspace root at all, and because a member checked out on its
+// own is then correctly read as its own root rather than inheriting from whatever encloses it.
+const WORKSPACE_MARKER = 'pnpm-workspace.yaml';
+// Upwards from the member until the marker is found or the filesystem root is reached. Recursive
+// rather than a loop, because this repository bans the mutable binding a loop would need.
+const workspaceRootAbove = (directory) => {
+    const parent = path.dirname(directory);
+    if (parent === directory) {
+        return undefined;
+    }
+    try {
+        readFileSync(path.join(parent, WORKSPACE_MARKER), 'utf8');
+        return parent;
+    }
+    catch {
+        return workspaceRootAbove(parent);
+    }
+};
+const settingsFor = (member) => {
+    const own = readPackageJson(member);
+    const repositoryRoot = workspaceRootAbove(member);
+    if (repositoryRoot === undefined) {
+        // The ordinary case: one package, which is its own repository. Layering a block onto itself would
+        // append every additive list to a copy of itself rather than leaving it alone.
+        return readSettings(own);
+    }
+    return readMemberSettings(ploanessBlock(readPackageJson(repositoryRoot)), ploanessBlock(own));
+};
+export const projectSettings = settingsFor(process.cwd());
 //# sourceMappingURL=project-settings.js.map

package/dist/project-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-settings.js","sourceRoot":"","sources":["../src/project-settings.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,oGAAoG;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAiB,MAAM,sBAAsB,CAAA;AAElE,mGAAmG;AACnG,8EAA8E;AAC9E,uGAAuG;AACvG,yEAAyE;AACzE,MAAM,eAAe,GAAG,GAAY,EAAE;IACpC,MAAM,QAAQ,GAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAa,YAAY,CAAC,eAAe,EAAE,CAAC,CAAA"}
+{"version":3,"file":"project-settings.js","sourceRoot":"","sources":["../src/project-settings.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,oGAAoG;AACpG,EAAE;AACF,sGAAsG;AACtG,2FAA2F;AAC3F,gGAAgG;AAChG,sGAAsG;AACtG,mGAAmG;AACnG,uGAAuG;AACvG,kFAAkF;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,YAAY,GAEb,MAAM,sBAAsB,CAAA;AAE7B,mGAAmG;AACnG,8EAA8E;AAC9E,uGAAuG;AACvG,yEAAyE;AACzE,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAW,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,sGAAsG;AACtG,sGAAsG;AACtG,+FAA+F;AAC/F,MAAM,gBAAgB,GAAW,qBAAqB,CAAA;AAEtD,iGAAiG;AACjG,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAsB,EAAE;IACnE,MAAM,MAAM,GAAW,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;QACzD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,MAAc,EAAY,EAAE;IAC/C,MAAM,GAAG,GAAY,eAAe,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,cAAc,GAAuB,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACrE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,kGAAkG;QAClG,+EAA+E;QAC/E,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,kBAAkB,CAAC,aAAa,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;AAC/F,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAa,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ploaness/config",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Analyzer and tool configurations owned by ploaness: ESLint, Biome, TypeScript, Vitest, Stylelint, dependency-cruiser, knip.",
   "license": "MIT",
   "author": "Herman Ciechanowiec <herman@ciechanowiec.eu>",
@@ -78,8 +78,9 @@
     "@axe-core/playwright": "4.13.0",
     "@eslint-community/eslint-plugin-eslint-comments": "4.7.2",
     "@eslint/js": "10.0.1",
+    "@next/eslint-plugin-next": "16.3.4",
     "@playwright/test": "1.62.1",
-    "@ploaness/governance": "1.0.0",
+    "@ploaness/governance": "1.1.0",
     "@testing-library/jest-dom": "7.0.1",
     "@testing-library/react": "16.3.3",
     "@testing-library/user-event": "14.6.6",
@@ -93,12 +94,12 @@
     "eslint-plugin-regexp": "3.2.0",
     "eslint-plugin-sonarjs": "4.2.0",
     "eslint-plugin-testing-library": "7.16.2",
-    "eslint-plugin-unicorn": "73.0.0",
+    "eslint-plugin-unicorn": "74.0.0",
     "fast-check": "4.9.0",
-    "globals": "17.11.0",
+    "globals": "17.12.0",
     "jsdom": "30.0.1",
     "stylelint-config-standard": "40.0.0",
-    "typescript-eslint": "8.68.0",
+    "typescript-eslint": "8.69.0",
     "vitest": "4.1.11"
   },
   "engines": {

package/pins.json

@@ -22,7 +22,7 @@
       "requiredFor": ["payload", "application"],
       "why": "What any Next application renders with, whether or not Payload is mounted inside it. A public frontend has the same build, the same client bundle and the same React version to agree about.",
       "versions": {
-        "next": "16.3.3",
+        "next": "16.3.4",
         "react": "19.2.8",
         "react-dom": "19.2.8",
         "@types/react": "19.2.18",

package/stylelint.json

@@ -5,7 +5,7 @@
   "reportDescriptionlessDisables": true,
   "reportNeedlessDisables": true,
   "reportInvalidScopeDisables": true,
-  "$comment": "at-rule-no-unknown lists the Tailwind v4 at-rules because they are a CSS dialect a Payload project may legitimately be written in, not a carve-out for one repository's files. A project that uses no Tailwind never writes one, so the list costs it nothing, and a typo such as @theem still fails. The whole list is named rather than the subset one project happened to need: a missing entry sends the next project back to a config file it is not allowed to own, which is the wall this list exists to remove. import-notation follows for the same reason and is not a relaxation - Tailwind v4 mandates the string form (@import \"tailwindcss\"), so the url form the standard config wants cannot be written at all; the rule still enforces one notation, and the one it enforces is now the one that can exist. lightness-notation and hue-degree-notation are set to the NUMBER form rather than turned off, for the same reason the at-rules above are listed: ploaness admits Tailwind deliberately, and the generator most Tailwind projects theme with writes oklch(1 0 0) rather than oklch(100% 0deg). Demanding the percentage form failed every such project on CSS it never hand-wrote. One notation is still enforced; it is now the one that can actually exist. selector-id-pattern keeps kebab-case for every id a project names and admits the double-underscore roots a framework mounts into - Next renders #__next, and a stylesheet that has to reach it cannot rename it. Turning the rule off would have surrendered the ids a project does choose.",
+  "$comment": "at-rule-no-unknown lists the Tailwind v4 at-rules because they are a CSS dialect a Payload project may legitimately be written in, not a carve-out for one repository's files. A project that uses no Tailwind never writes one, so the list costs it nothing, and a typo such as @theem still fails. The whole list is named rather than the subset one project happened to need: a missing entry sends the next project back to a config file it is not allowed to own, which is the wall this list exists to remove. at-rule-prelude-no-invalid has its own ignore list, so it retains the standard config's media allowance and adds apply: the CSS syntax patch models an abandoned proposal whose prelude is a dashed identifier, while Tailwind writes a utility list. Other at-rule preludes remain validated. import-notation follows for the same reason and is not a relaxation - Tailwind v4 mandates the string form (@import \"tailwindcss\"), so the url form the standard config wants cannot be written at all; the rule still enforces one notation, and the one it enforces is now the one that can exist. lightness-notation and hue-degree-notation are set to the NUMBER form rather than turned off, for the same reason the at-rules above are listed: ploaness admits Tailwind deliberately, and the generator most Tailwind projects theme with writes oklch(1 0 0) rather than oklch(100% 0deg). Demanding the percentage form failed every such project on CSS it never hand-wrote. One notation is still enforced; it is now the one that can actually exist. selector-id-pattern keeps kebab-case for every id a project names and admits the double-underscore roots a framework mounts into - Next renders #__next, and a stylesheet that has to reach it cannot rename it. Turning the rule off would have surrendered the ids a project does choose.",
   "rules": {
     "at-rule-no-unknown": [
       true,
@@ -25,6 +25,7 @@
         ]
       }
     ],
+    "at-rule-prelude-no-invalid": [true, { "ignoreAtRules": ["media", "apply"] }],
     "import-notation": "string",
     "selector-pseudo-class-no-unknown": [
       true,