@pragmatiks/lint 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## js-v0.2.0 (2026-05-10)
+
+### Misc
+
+- chore(js): align npm baseline to 0.2.0 to match PyPI v0.2.0
+
+## 0.1.0 - 2026-05-10
+
+- Scaffolded the unified `pragma-lint` mono-repo.
+- Added shared semgrep rules in `rules/`.
+- Added library-only Python package `pragmatiks-lint`.
+- Added library-only npm package `@pragmatiks/lint`.
+- Added build-time rule vendoring for both package artifacts.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Pragmatiks
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,9 @@
+# @pragmatiks/lint
+
+Library-only eslint flat config and bundled semgrep rules for Pragmatiks engineering principles.
+
+```ts
+import { PRAGMATIKS_LINT_FILES, pragmatiksConfig } from "@pragmatiks/lint";
+```
+
+This package has no `bin` entry. Command-line integration belongs in `pragma-cli`.

package/dist/eslint-config/index.d.ts

@@ -0,0 +1,8 @@
+import { Config } from 'eslint/config';
+
+declare const PRAGMATIKS_LINT_FILES: string[];
+declare function findPackageRoot(start: string): string;
+declare function semgrepRulesDirectory(): string;
+declare function pragmatiksConfig(): Config[];
+
+export { PRAGMATIKS_LINT_FILES, pragmatiksConfig as default, findPackageRoot, pragmatiksConfig, semgrepRulesDirectory };

package/dist/eslint-config/index.js

@@ -0,0 +1,116 @@
+import { existsSync } from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { defineConfig, globalIgnores } from 'eslint/config';
+import sonarjs from 'eslint-plugin-sonarjs';
+import unicorn from 'eslint-plugin-unicorn';
+import tseslint from 'typescript-eslint';
+
+// src/eslint-config/index.ts
+
+// src/eslint-config/options.ts
+var COMPLEXITY_OPTS = 10;
+var MAX_LINES_PER_FUNCTION_OPTS = {
+  max: 50,
+  skipBlankLines: true,
+  skipComments: true
+};
+var MAX_STATEMENTS_OPTS = 15;
+var MAX_DEPTH_OPTS = 4;
+var MAX_PARAMS_OPTS = 4;
+var PREVENT_ABBREVIATIONS_OPTS = {
+  allowList: {
+    id: true,
+    url: true,
+    uri: true,
+    api: true,
+    cli: true,
+    sdk: true,
+    os: true,
+    io: true,
+    ip: true,
+    tls: true,
+    ssl: true,
+    jwt: true,
+    json: true,
+    yaml: true,
+    html: true,
+    css: true,
+    dom: true,
+    ast: true,
+    gpu: true,
+    cpu: true,
+    ram: true,
+    vm: true,
+    props: true,
+    ref: true,
+    e: true
+  }
+};
+
+// src/eslint-config/index.ts
+var PRAGMATIKS_LINT_FILES = ["**/*.{ts,tsx,mts,cts,js,mjs,cjs}"];
+function findPackageRoot(start) {
+  let current = start;
+  for (; ; ) {
+    if (existsSync(path.join(current, "package.json"))) {
+      return current;
+    }
+    const parent = path.dirname(current);
+    if (parent === current) {
+      throw new Error(`package.json not found above ${start}`);
+    }
+    current = parent;
+  }
+}
+function semgrepRulesDirectory() {
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  return path.join(findPackageRoot(here), "src", "semgrep-rules");
+}
+function recommendedOrThrow(plugin, name) {
+  const recommended = plugin.configs?.recommended;
+  if (!recommended) {
+    throw new Error(
+      `${name} has no recommended flat-config preset. Peer dependency major mismatch.`
+    );
+  }
+  return recommended;
+}
+function pragmatiksConfig() {
+  return defineConfig([
+    {
+      files: PRAGMATIKS_LINT_FILES,
+      languageOptions: {
+        parser: tseslint.parser,
+        parserOptions: {
+          ecmaVersion: "latest",
+          sourceType: "module"
+        }
+      },
+      settings: {
+        pragmatiksLint: {
+          semgrepRulesDirectory: semgrepRulesDirectory()
+        }
+      }
+    },
+    recommendedOrThrow(sonarjs, "eslint-plugin-sonarjs"),
+    recommendedOrThrow(unicorn, "eslint-plugin-unicorn"),
+    {
+      files: PRAGMATIKS_LINT_FILES,
+      rules: {
+        complexity: ["error", COMPLEXITY_OPTS],
+        "max-lines-per-function": ["error", MAX_LINES_PER_FUNCTION_OPTS],
+        "max-statements": ["error", MAX_STATEMENTS_OPTS],
+        "max-depth": ["error", MAX_DEPTH_OPTS],
+        "max-params": ["error", MAX_PARAMS_OPTS],
+        "unicorn/prevent-abbreviations": ["error", PREVENT_ABBREVIATIONS_OPTS]
+      }
+    },
+    globalIgnores(["dist/**", "node_modules/**", ".next/**", ".turbo/**"])
+  ]);
+}
+var eslint_config_default = pragmatiksConfig;
+
+export { PRAGMATIKS_LINT_FILES, eslint_config_default as default, findPackageRoot, pragmatiksConfig, semgrepRulesDirectory };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/eslint-config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/eslint-config/options.ts","../../src/eslint-config/index.ts"],"names":[],"mappings":";;;;;;;;;;;AAAO,IAAM,eAAA,GAAkB,EAAA;AAExB,IAAM,2BAAA,GAA8B;AAAA,EACzC,GAAA,EAAK,EAAA;AAAA,EACL,cAAA,EAAgB,IAAA;AAAA,EAChB,YAAA,EAAc;AAChB,CAAA;AAEO,IAAM,mBAAA,GAAsB,EAAA;AAE5B,IAAM,cAAA,GAAiB,CAAA;AAEvB,IAAM,eAAA,GAAkB,CAAA;AAExB,IAAM,0BAAA,GAA6B;AAAA,EACxC,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,IAAA;AAAA,IACJ,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,EAAA,EAAI,IAAA;AAAA,IACJ,EAAA,EAAI,IAAA;AAAA,IACJ,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,IAAA,EAAM,IAAA;AAAA,IACN,IAAA,EAAM,IAAA;AAAA,IACN,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IACP,GAAA,EAAK,IAAA;AAAA,IACL,CAAA,EAAG;AAAA;AAEP,CAAA;;;ACxBO,IAAM,qBAAA,GAAwB,CAAC,kCAAkC;AAEjE,SAAS,gBAAgB,KAAA,EAAuB;AACrD,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,WAAS;AACP,IAAA,IAAI,WAAW,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,cAAc,CAAC,CAAA,EAAG;AAClD,MAAA,OAAO,OAAA;AAAA,IACT;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA;AACnC,IAAA,IAAI,WAAW,OAAA,EAAS;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,KAAK,CAAA,CAAE,CAAA;AAAA,IACzD;AACA,IAAA,OAAA,GAAU,MAAA;AAAA,EACZ;AACF;AAEO,SAAS,qBAAA,GAAgC;AAC9C,EAAA,MAAM,OAAO,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,KAAK,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA,EAAG,OAAO,eAAe,CAAA;AAChE;AAEA,SAAS,kBAAA,CACP,QACA,IAAA,EACQ;AACR,EAAA,MAAM,WAAA,GAAc,OAAO,OAAA,EAAS,WAAA;AACpC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,GAAG,IAAI,CAAA,uEAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,OAAO,WAAA;AACT;AAEO,SAAS,gBAAA,GAAmB;AACjC,EAAA,OAAO,YAAA,CAAa;AAAA,IAClB;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,eAAA,EAAiB;AAAA,QACf,QAAQ,QAAA,CAAS,MAAA;AAAA,QACjB,aAAA,EAAe;AAAA,UACb,WAAA,EAAa,QAAA;AAAA,UACb,UAAA,EAAY;AAAA;AACd,OACF;AAAA,MACA,QAAA,EAAU;AAAA,QACR,cAAA,EAAgB;AAAA,UACd,uBAAuB,qBAAA;AAAsB;AAC/C;AACF,KACF;AAAA,IACA,kBAAA,CAAmB,SAAS,uBAAuB,CAAA;AAAA,IACnD,kBAAA,CAAmB,SAAS,uBAAuB,CAAA;AAAA,IACnD;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,KAAA,EAAO;AAAA,QACL,UAAA,EAAY,CAAC,OAAA,EAAS,eAAe,CAAA;AAAA,QACrC,wBAAA,EAA0B,CAAC,OAAA,EAAS,2BAA2B,CAAA;AAAA,QAC/D,gBAAA,EAAkB,CAAC,OAAA,EAAS,mBAAmB,CAAA;AAAA,QAC/C,WAAA,EAAa,CAAC,OAAA,EAAS,cAAc,CAAA;AAAA,QACrC,YAAA,EAAc,CAAC,OAAA,EAAS,eAAe,CAAA;AAAA,QACvC,+BAAA,EAAiC,CAAC,OAAA,EAAS,0BAA0B;AAAA;AACvE,KACF;AAAA,IACA,cAAc,CAAC,SAAA,EAAW,iBAAA,EAAmB,UAAA,EAAY,WAAW,CAAC;AAAA,GACtE,CAAA;AACH;AAEA,IAAO,qBAAA,GAAQ","file":"index.js","sourcesContent":["export const COMPLEXITY_OPTS = 10;\n\nexport const MAX_LINES_PER_FUNCTION_OPTS = {\n  max: 50,\n  skipBlankLines: true,\n  skipComments: true,\n};\n\nexport const MAX_STATEMENTS_OPTS = 15;\n\nexport const MAX_DEPTH_OPTS = 4;\n\nexport const MAX_PARAMS_OPTS = 4;\n\nexport const PREVENT_ABBREVIATIONS_OPTS = {\n  allowList: {\n    id: true,\n    url: true,\n    uri: true,\n    api: true,\n    cli: true,\n    sdk: true,\n    os: true,\n    io: true,\n    ip: true,\n    tls: true,\n    ssl: true,\n    jwt: true,\n    json: true,\n    yaml: true,\n    html: true,\n    css: true,\n    dom: true,\n    ast: true,\n    gpu: true,\n    cpu: true,\n    ram: true,\n    vm: true,\n    props: true,\n    ref: true,\n    e: true,\n  },\n};\n","import { existsSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport { type Config, defineConfig, globalIgnores } from \"eslint/config\";\nimport sonarjs from \"eslint-plugin-sonarjs\";\nimport unicorn from \"eslint-plugin-unicorn\";\nimport tseslint from \"typescript-eslint\";\n\nimport {\n  COMPLEXITY_OPTS,\n  MAX_DEPTH_OPTS,\n  MAX_LINES_PER_FUNCTION_OPTS,\n  MAX_PARAMS_OPTS,\n  MAX_STATEMENTS_OPTS,\n  PREVENT_ABBREVIATIONS_OPTS,\n} from \"./options.js\";\n\nexport const PRAGMATIKS_LINT_FILES = [\"**/*.{ts,tsx,mts,cts,js,mjs,cjs}\"];\n\nexport function findPackageRoot(start: string): string {\n  let current = start;\n  for (;;) {\n    if (existsSync(path.join(current, \"package.json\"))) {\n      return current;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) {\n      throw new Error(`package.json not found above ${start}`);\n    }\n    current = parent;\n  }\n}\n\nexport function semgrepRulesDirectory(): string {\n  const here = path.dirname(fileURLToPath(import.meta.url));\n  return path.join(findPackageRoot(here), \"src\", \"semgrep-rules\");\n}\n\nfunction recommendedOrThrow(\n  plugin: { configs?: Record<string, unknown> },\n  name: string,\n): Config {\n  const recommended = plugin.configs?.recommended;\n  if (!recommended) {\n    throw new Error(\n      `${name} has no recommended flat-config preset. Peer dependency major mismatch.`,\n    );\n  }\n  return recommended as Config;\n}\n\nexport function pragmatiksConfig() {\n  return defineConfig([\n    {\n      files: PRAGMATIKS_LINT_FILES,\n      languageOptions: {\n        parser: tseslint.parser,\n        parserOptions: {\n          ecmaVersion: \"latest\",\n          sourceType: \"module\",\n        },\n      },\n      settings: {\n        pragmatiksLint: {\n          semgrepRulesDirectory: semgrepRulesDirectory(),\n        },\n      },\n    },\n    recommendedOrThrow(sonarjs, \"eslint-plugin-sonarjs\"),\n    recommendedOrThrow(unicorn, \"eslint-plugin-unicorn\"),\n    {\n      files: PRAGMATIKS_LINT_FILES,\n      rules: {\n        complexity: [\"error\", COMPLEXITY_OPTS],\n        \"max-lines-per-function\": [\"error\", MAX_LINES_PER_FUNCTION_OPTS],\n        \"max-statements\": [\"error\", MAX_STATEMENTS_OPTS],\n        \"max-depth\": [\"error\", MAX_DEPTH_OPTS],\n        \"max-params\": [\"error\", MAX_PARAMS_OPTS],\n        \"unicorn/prevent-abbreviations\": [\"error\", PREVENT_ABBREVIATIONS_OPTS],\n      },\n    },\n    globalIgnores([\"dist/**\", \"node_modules/**\", \".next/**\", \".turbo/**\"]),\n  ]);\n}\n\nexport default pragmatiksConfig;\n"]}

package/dist/index.d.ts

@@ -0,0 +1,43 @@
+export { PRAGMATIKS_LINT_FILES, findPackageRoot, default as pragmatiksConfig, semgrepRulesDirectory } from './eslint-config/index.js';
+import 'eslint/config';
+
+declare const COMPLEXITY_OPTS = 10;
+declare const MAX_LINES_PER_FUNCTION_OPTS: {
+    max: number;
+    skipBlankLines: boolean;
+    skipComments: boolean;
+};
+declare const MAX_STATEMENTS_OPTS = 15;
+declare const MAX_DEPTH_OPTS = 4;
+declare const MAX_PARAMS_OPTS = 4;
+declare const PREVENT_ABBREVIATIONS_OPTS: {
+    allowList: {
+        id: boolean;
+        url: boolean;
+        uri: boolean;
+        api: boolean;
+        cli: boolean;
+        sdk: boolean;
+        os: boolean;
+        io: boolean;
+        ip: boolean;
+        tls: boolean;
+        ssl: boolean;
+        jwt: boolean;
+        json: boolean;
+        yaml: boolean;
+        html: boolean;
+        css: boolean;
+        dom: boolean;
+        ast: boolean;
+        gpu: boolean;
+        cpu: boolean;
+        ram: boolean;
+        vm: boolean;
+        props: boolean;
+        ref: boolean;
+        e: boolean;
+    };
+};
+
+export { COMPLEXITY_OPTS, MAX_DEPTH_OPTS, MAX_LINES_PER_FUNCTION_OPTS, MAX_PARAMS_OPTS, MAX_STATEMENTS_OPTS, PREVENT_ABBREVIATIONS_OPTS };

package/dist/index.js

@@ -0,0 +1,115 @@
+import { existsSync } from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { defineConfig, globalIgnores } from 'eslint/config';
+import sonarjs from 'eslint-plugin-sonarjs';
+import unicorn from 'eslint-plugin-unicorn';
+import tseslint from 'typescript-eslint';
+
+// src/eslint-config/index.ts
+
+// src/eslint-config/options.ts
+var COMPLEXITY_OPTS = 10;
+var MAX_LINES_PER_FUNCTION_OPTS = {
+  max: 50,
+  skipBlankLines: true,
+  skipComments: true
+};
+var MAX_STATEMENTS_OPTS = 15;
+var MAX_DEPTH_OPTS = 4;
+var MAX_PARAMS_OPTS = 4;
+var PREVENT_ABBREVIATIONS_OPTS = {
+  allowList: {
+    id: true,
+    url: true,
+    uri: true,
+    api: true,
+    cli: true,
+    sdk: true,
+    os: true,
+    io: true,
+    ip: true,
+    tls: true,
+    ssl: true,
+    jwt: true,
+    json: true,
+    yaml: true,
+    html: true,
+    css: true,
+    dom: true,
+    ast: true,
+    gpu: true,
+    cpu: true,
+    ram: true,
+    vm: true,
+    props: true,
+    ref: true,
+    e: true
+  }
+};
+
+// src/eslint-config/index.ts
+var PRAGMATIKS_LINT_FILES = ["**/*.{ts,tsx,mts,cts,js,mjs,cjs}"];
+function findPackageRoot(start) {
+  let current = start;
+  for (; ; ) {
+    if (existsSync(path.join(current, "package.json"))) {
+      return current;
+    }
+    const parent = path.dirname(current);
+    if (parent === current) {
+      throw new Error(`package.json not found above ${start}`);
+    }
+    current = parent;
+  }
+}
+function semgrepRulesDirectory() {
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  return path.join(findPackageRoot(here), "src", "semgrep-rules");
+}
+function recommendedOrThrow(plugin, name) {
+  const recommended = plugin.configs?.recommended;
+  if (!recommended) {
+    throw new Error(
+      `${name} has no recommended flat-config preset. Peer dependency major mismatch.`
+    );
+  }
+  return recommended;
+}
+function pragmatiksConfig() {
+  return defineConfig([
+    {
+      files: PRAGMATIKS_LINT_FILES,
+      languageOptions: {
+        parser: tseslint.parser,
+        parserOptions: {
+          ecmaVersion: "latest",
+          sourceType: "module"
+        }
+      },
+      settings: {
+        pragmatiksLint: {
+          semgrepRulesDirectory: semgrepRulesDirectory()
+        }
+      }
+    },
+    recommendedOrThrow(sonarjs, "eslint-plugin-sonarjs"),
+    recommendedOrThrow(unicorn, "eslint-plugin-unicorn"),
+    {
+      files: PRAGMATIKS_LINT_FILES,
+      rules: {
+        complexity: ["error", COMPLEXITY_OPTS],
+        "max-lines-per-function": ["error", MAX_LINES_PER_FUNCTION_OPTS],
+        "max-statements": ["error", MAX_STATEMENTS_OPTS],
+        "max-depth": ["error", MAX_DEPTH_OPTS],
+        "max-params": ["error", MAX_PARAMS_OPTS],
+        "unicorn/prevent-abbreviations": ["error", PREVENT_ABBREVIATIONS_OPTS]
+      }
+    },
+    globalIgnores(["dist/**", "node_modules/**", ".next/**", ".turbo/**"])
+  ]);
+}
+
+export { COMPLEXITY_OPTS, MAX_DEPTH_OPTS, MAX_LINES_PER_FUNCTION_OPTS, MAX_PARAMS_OPTS, MAX_STATEMENTS_OPTS, PRAGMATIKS_LINT_FILES, PREVENT_ABBREVIATIONS_OPTS, findPackageRoot, pragmatiksConfig, semgrepRulesDirectory };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/eslint-config/options.ts","../src/eslint-config/index.ts"],"names":[],"mappings":";;;;;;;;;;;AAAO,IAAM,eAAA,GAAkB;AAExB,IAAM,2BAAA,GAA8B;AAAA,EACzC,GAAA,EAAK,EAAA;AAAA,EACL,cAAA,EAAgB,IAAA;AAAA,EAChB,YAAA,EAAc;AAChB;AAEO,IAAM,mBAAA,GAAsB;AAE5B,IAAM,cAAA,GAAiB;AAEvB,IAAM,eAAA,GAAkB;AAExB,IAAM,0BAAA,GAA6B;AAAA,EACxC,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,IAAA;AAAA,IACJ,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,EAAA,EAAI,IAAA;AAAA,IACJ,EAAA,EAAI,IAAA;AAAA,IACJ,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,IAAA,EAAM,IAAA;AAAA,IACN,IAAA,EAAM,IAAA;AAAA,IACN,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,GAAA,EAAK,IAAA;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,KAAA,EAAO,IAAA;AAAA,IACP,GAAA,EAAK,IAAA;AAAA,IACL,CAAA,EAAG;AAAA;AAEP;;;ACxBO,IAAM,qBAAA,GAAwB,CAAC,kCAAkC;AAEjE,SAAS,gBAAgB,KAAA,EAAuB;AACrD,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,WAAS;AACP,IAAA,IAAI,WAAW,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,cAAc,CAAC,CAAA,EAAG;AAClD,MAAA,OAAO,OAAA;AAAA,IACT;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA;AACnC,IAAA,IAAI,WAAW,OAAA,EAAS;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,KAAK,CAAA,CAAE,CAAA;AAAA,IACzD;AACA,IAAA,OAAA,GAAU,MAAA;AAAA,EACZ;AACF;AAEO,SAAS,qBAAA,GAAgC;AAC9C,EAAA,MAAM,OAAO,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AACxD,EAAA,OAAO,KAAK,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA,EAAG,OAAO,eAAe,CAAA;AAChE;AAEA,SAAS,kBAAA,CACP,QACA,IAAA,EACQ;AACR,EAAA,MAAM,WAAA,GAAc,OAAO,OAAA,EAAS,WAAA;AACpC,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,GAAG,IAAI,CAAA,uEAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,OAAO,WAAA;AACT;AAEO,SAAS,gBAAA,GAAmB;AACjC,EAAA,OAAO,YAAA,CAAa;AAAA,IAClB;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,eAAA,EAAiB;AAAA,QACf,QAAQ,QAAA,CAAS,MAAA;AAAA,QACjB,aAAA,EAAe;AAAA,UACb,WAAA,EAAa,QAAA;AAAA,UACb,UAAA,EAAY;AAAA;AACd,OACF;AAAA,MACA,QAAA,EAAU;AAAA,QACR,cAAA,EAAgB;AAAA,UACd,uBAAuB,qBAAA;AAAsB;AAC/C;AACF,KACF;AAAA,IACA,kBAAA,CAAmB,SAAS,uBAAuB,CAAA;AAAA,IACnD,kBAAA,CAAmB,SAAS,uBAAuB,CAAA;AAAA,IACnD;AAAA,MACE,KAAA,EAAO,qBAAA;AAAA,MACP,KAAA,EAAO;AAAA,QACL,UAAA,EAAY,CAAC,OAAA,EAAS,eAAe,CAAA;AAAA,QACrC,wBAAA,EAA0B,CAAC,OAAA,EAAS,2BAA2B,CAAA;AAAA,QAC/D,gBAAA,EAAkB,CAAC,OAAA,EAAS,mBAAmB,CAAA;AAAA,QAC/C,WAAA,EAAa,CAAC,OAAA,EAAS,cAAc,CAAA;AAAA,QACrC,YAAA,EAAc,CAAC,OAAA,EAAS,eAAe,CAAA;AAAA,QACvC,+BAAA,EAAiC,CAAC,OAAA,EAAS,0BAA0B;AAAA;AACvE,KACF;AAAA,IACA,cAAc,CAAC,SAAA,EAAW,iBAAA,EAAmB,UAAA,EAAY,WAAW,CAAC;AAAA,GACtE,CAAA;AACH","file":"index.js","sourcesContent":["export const COMPLEXITY_OPTS = 10;\n\nexport const MAX_LINES_PER_FUNCTION_OPTS = {\n  max: 50,\n  skipBlankLines: true,\n  skipComments: true,\n};\n\nexport const MAX_STATEMENTS_OPTS = 15;\n\nexport const MAX_DEPTH_OPTS = 4;\n\nexport const MAX_PARAMS_OPTS = 4;\n\nexport const PREVENT_ABBREVIATIONS_OPTS = {\n  allowList: {\n    id: true,\n    url: true,\n    uri: true,\n    api: true,\n    cli: true,\n    sdk: true,\n    os: true,\n    io: true,\n    ip: true,\n    tls: true,\n    ssl: true,\n    jwt: true,\n    json: true,\n    yaml: true,\n    html: true,\n    css: true,\n    dom: true,\n    ast: true,\n    gpu: true,\n    cpu: true,\n    ram: true,\n    vm: true,\n    props: true,\n    ref: true,\n    e: true,\n  },\n};\n","import { existsSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport { type Config, defineConfig, globalIgnores } from \"eslint/config\";\nimport sonarjs from \"eslint-plugin-sonarjs\";\nimport unicorn from \"eslint-plugin-unicorn\";\nimport tseslint from \"typescript-eslint\";\n\nimport {\n  COMPLEXITY_OPTS,\n  MAX_DEPTH_OPTS,\n  MAX_LINES_PER_FUNCTION_OPTS,\n  MAX_PARAMS_OPTS,\n  MAX_STATEMENTS_OPTS,\n  PREVENT_ABBREVIATIONS_OPTS,\n} from \"./options.js\";\n\nexport const PRAGMATIKS_LINT_FILES = [\"**/*.{ts,tsx,mts,cts,js,mjs,cjs}\"];\n\nexport function findPackageRoot(start: string): string {\n  let current = start;\n  for (;;) {\n    if (existsSync(path.join(current, \"package.json\"))) {\n      return current;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) {\n      throw new Error(`package.json not found above ${start}`);\n    }\n    current = parent;\n  }\n}\n\nexport function semgrepRulesDirectory(): string {\n  const here = path.dirname(fileURLToPath(import.meta.url));\n  return path.join(findPackageRoot(here), \"src\", \"semgrep-rules\");\n}\n\nfunction recommendedOrThrow(\n  plugin: { configs?: Record<string, unknown> },\n  name: string,\n): Config {\n  const recommended = plugin.configs?.recommended;\n  if (!recommended) {\n    throw new Error(\n      `${name} has no recommended flat-config preset. Peer dependency major mismatch.`,\n    );\n  }\n  return recommended as Config;\n}\n\nexport function pragmatiksConfig() {\n  return defineConfig([\n    {\n      files: PRAGMATIKS_LINT_FILES,\n      languageOptions: {\n        parser: tseslint.parser,\n        parserOptions: {\n          ecmaVersion: \"latest\",\n          sourceType: \"module\",\n        },\n      },\n      settings: {\n        pragmatiksLint: {\n          semgrepRulesDirectory: semgrepRulesDirectory(),\n        },\n      },\n    },\n    recommendedOrThrow(sonarjs, \"eslint-plugin-sonarjs\"),\n    recommendedOrThrow(unicorn, \"eslint-plugin-unicorn\"),\n    {\n      files: PRAGMATIKS_LINT_FILES,\n      rules: {\n        complexity: [\"error\", COMPLEXITY_OPTS],\n        \"max-lines-per-function\": [\"error\", MAX_LINES_PER_FUNCTION_OPTS],\n        \"max-statements\": [\"error\", MAX_STATEMENTS_OPTS],\n        \"max-depth\": [\"error\", MAX_DEPTH_OPTS],\n        \"max-params\": [\"error\", MAX_PARAMS_OPTS],\n        \"unicorn/prevent-abbreviations\": [\"error\", PREVENT_ABBREVIATIONS_OPTS],\n      },\n    },\n    globalIgnores([\"dist/**\", \"node_modules/**\", \".next/**\", \".turbo/**\"]),\n  ]);\n}\n\nexport default pragmatiksConfig;\n"]}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@pragmatiks/lint",
+  "version": "0.2.0",
+  "description": "Pragmatiks engineering principles eslint config and bundled semgrep rules.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./eslint-config": {
+      "types": "./dist/eslint-config/index.d.ts",
+      "import": "./dist/eslint-config/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src/semgrep-rules",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "peerDependencies": {
+    "eslint": "^9.0.0",
+    "eslint-plugin-sonarjs": "^4.0.0",
+    "eslint-plugin-unicorn": "^64.0.0",
+    "typescript-eslint": "^8.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "eslint": "^9.18.0",
+    "eslint-plugin-sonarjs": "^4.0.3",
+    "eslint-plugin-unicorn": "^64.0.0",
+    "knip": "^6.12.1",
+    "prettier": "^3.4.2",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.3",
+    "typescript-eslint": "^8.59.2",
+    "vitest": "^2.1.8"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "eslint",
+    "eslint-config",
+    "semgrep",
+    "lint",
+    "pragmatiks"
+  ],
+  "license": "MIT",
+  "author": "Pragmatiks",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pragmatiks/pragma-lint.git",
+    "directory": "js"
+  },
+  "scripts": {
+    "build": "tsup",
+    "format": "prettier --write .",
+    "check": "eslint . && tsc --noEmit",
+    "test": "vitest run"
+  }
+}

package/src/semgrep-rules/pra_env_read_deep.yml

@@ -0,0 +1,27 @@
+rules:
+  - id: pra-env-read-deep
+    pattern-either:
+      - pattern: os.environ[$KEY]
+      - pattern: os.environ.get($KEY)
+      - pattern: os.getenv($KEY)
+    paths:
+      exclude:
+        - "settings.py"
+        - "config.py"
+        - "env.py"
+        - "__main__.py"
+        - "__init__.py"
+        - "app.py"
+        - "cli.py"
+        - "main.py"
+        - "*/settings.py"
+        - "*/config.py"
+        - "*/env.py"
+        - "*/__main__.py"
+        - "*/__init__.py"
+        - "*/app.py"
+        - "*/cli.py"
+        - "*/main.py"
+    message: "principle #8 Environment reads belong at app boundaries. Move the read to settings or config."
+    severity: WARNING
+    languages: [python]

package/src/semgrep-rules/pra_io_prefix_mismatch.yml

@@ -0,0 +1,44 @@
+rules:
+  - id: pra-io-prefix-mismatch
+    patterns:
+      - pattern-either:
+          - pattern: |
+              def $NAME(...):
+                  ...
+          - pattern: |
+              async def $NAME(...):
+                  ...
+      - metavariable-regex:
+          metavariable: $NAME
+          regex: '^(get|fetch|retrieve|load|save|read|write|query)_.*'
+      - pattern-not: |
+          def $NAME(...):
+              ...
+              await $CALL
+              ...
+      - pattern-not: |
+          async def $NAME(...):
+              ...
+              await $CALL
+              ...
+      - pattern-not: |
+          def $NAME(...):
+              ...
+              open(...)
+              ...
+      - pattern-not: |
+          def $NAME(...):
+              ...
+              httpx.$METHOD(...)
+              ...
+      - pattern-not: |
+          def $NAME(...):
+              ...
+              requests.$METHOD(...)
+              ...
+      - pattern-not-regex: '(?s)(database|session|connection|cursor|client)\.(execute|fetch|get|post|put|delete|query|read|write|save)\('
+    message: "principle #7 I/O-prefixed function appears pure. Rename it with compute, build, derive, format, or parse."
+    severity: WARNING
+    languages: [python]
+    metadata:
+      note: "Heuristic rule; false positives are expected for hidden I/O wrappers."

package/src/semgrep-rules/pra_no_abbreviations_python.yml

@@ -0,0 +1,21 @@
+rules:
+  - id: pra-no-abbreviations-python
+    patterns:
+      - pattern-either:
+          - pattern: $NAME = $VALUE
+          - pattern: "def $NAME(...): ..."
+          - pattern: "async def $NAME(...): ..."
+          - pattern: "def $FUNC($NAME, ...): ..."
+          - pattern: "def $FUNC(..., $NAME, ...): ..."
+          - pattern: "async def $FUNC($NAME, ...): ..."
+          - pattern: "async def $FUNC(..., $NAME, ...): ..."
+          - pattern: "for $NAME in $ITERABLE: ..."
+          - pattern: "class $NAME(...): ..."
+          - pattern: "class $NAME: ..."
+          - pattern: self.$NAME = $VALUE
+      - metavariable-regex:
+          metavariable: $NAME
+          regex: '^(k8s|cfg|db|req|res|ctx|tmp|pkg|svc|mgr|repo|usr|pwd|idx|cnt|msg|err|btn|txt|num|val)$'
+    message: "principle #11 Abbreviated identifier hides meaning. Rename it with full words."
+    severity: WARNING
+    languages: [python]

package/src/semgrep-rules/pra_no_block_comments.yml

@@ -0,0 +1,11 @@
+rules:
+  - id: pra-no-block-comments-python
+    pattern-regex: '(?m)^[ \t]*#(?![ \t]*WHY:).*\n[ \t]*#(?![ \t]*WHY:).*$'
+    message: "principle #10 Block comments make code harder to trust. Delete the comment or replace it with one WHY line."
+    severity: ERROR
+    languages: [python]
+  - id: pra-no-block-comments-js
+    pattern-regex: '/\*(?!\*)[\s\S]*?\*/'
+    message: "principle #10 Block comments make code harder to trust. Delete the comment or replace it with one WHY line."
+    severity: ERROR
+    languages: [typescript, javascript]

package/src/semgrep-rules/pra_no_todo_comments.yml

@@ -0,0 +1,11 @@
+rules:
+  - id: pra-no-todo-comments-python
+    pattern-regex: '(?i)#\s*(TODO(?!\(PRA-[0-9]+\))|FIXME|XXX)\b'
+    message: "principle #10 Planning comments decay. Link a Linear issue or remove the comment."
+    severity: ERROR
+    languages: [python]
+  - id: pra-no-todo-comments-js
+    pattern-regex: '(?i)(//|/\*)\s*(TODO(?!\(PRA-[0-9]+\))|FIXME|XXX)\b'
+    message: "principle #10 Planning comments decay. Link a Linear issue or remove the comment."
+    severity: ERROR
+    languages: [typescript, javascript]

package/src/semgrep-rules/pra_srp_and_or_name.yml

@@ -0,0 +1,24 @@
+rules:
+  - id: pra-srp-and-or-name
+    patterns:
+      - pattern-either:
+          - pattern: "def $NAME(...): ..."
+          - pattern: "async def $NAME(...): ..."
+      - metavariable-regex:
+          metavariable: $NAME
+          regex: '.*(_and_|_or_|[a-z0-9](And|Or)(?=[A-Z]|$)).*'
+    message: "principle #12 Compound function name violates SRP. Split the function by responsibility."
+    severity: ERROR
+    languages: [python]
+  - id: pra-srp-and-or-name-js
+    patterns:
+      - pattern-either:
+          - pattern: "function $NAME(...) { ... }"
+          - pattern: "async function $NAME(...) { ... }"
+          - pattern: "const $NAME = (...) => ..."
+      - metavariable-regex:
+          metavariable: $NAME
+          regex: '.*(_and_|_or_|[a-z0-9](And|Or)(?=[A-Z]|$)).*'
+    message: "principle #12 Compound function name violates SRP. Split the function by responsibility."
+    severity: ERROR
+    languages: [typescript, javascript]