@rexezuge/tooling 0.0.0-stage → 1.0.1

package/dist/eslint-rules.js

@@ -0,0 +1,273 @@
+/**
+ * The rule-override blocks of the repo lint config.
+ *
+ * Extracted from `eslint.ts` with the boundary rules: each block is a plain
+ * rules object with the provenance comment that says *why* it is set to this
+ * value, because a per-rule decision with no reason attached is a decision the
+ * next reader re-litigates. `eslint.ts` composes these; this file is where a
+ * rule's story lives.
+ */
+/**
+ * TypeScript rules, identical in all four source stacks.
+ */
+export const TYPESCRIPT_RULES = {
+    '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }],
+    // Allow `void expr` for intentional fire-and-forget in Workers.
+    '@typescript-eslint/no-floating-promises': ['error', { ignoreVoid: true }],
+    // Relax the unsafe-any rules to warn: the external API boundaries (Cloudflare
+    // bindings, provider SDKs) are typed `any` upstream, and the alternative is a
+    // config that cannot be adopted.
+    '@typescript-eslint/no-explicit-any': 'warn',
+    '@typescript-eslint/no-unsafe-assignment': 'warn',
+    '@typescript-eslint/no-unsafe-member-access': 'warn',
+    '@typescript-eslint/no-unsafe-call': 'warn',
+    '@typescript-eslint/no-unsafe-return': 'warn',
+    '@typescript-eslint/no-unsafe-argument': 'warn',
+    // JSX event handlers and hook callback objects commonly use async functions
+    // where void is expected.
+    '@typescript-eslint/no-misused-promises': ['error', { checksVoidReturn: { attributes: false, properties: false } }],
+    // An `async` function with no `await`: every handler and DAO method is
+    // `async` by shape so a future `await` does not change its signature.
+    '@typescript-eslint/require-await': 'off',
+    // `await` on a value the types say is not thenable, where the value is a
+    // `PromiseLike` from an interface declared that way.
+    '@typescript-eslint/await-thenable': 'off',
+};
+/**
+ * Unicorn and SonarJS rules carried from the source repos, each off for a
+ * stated reason.
+ *
+ * This is the family's "deliberately does not follow" block: every entry is
+ * off because complying would make the code worse for what the project is,
+ * and each is listed rather than dropped so the decision stays reviewable.
+ */
+export const UNICORN_RULES = {
+    // Codebase uses ctx, req, res, env, err, util, db, dao, etc. — too invasive
+    // to rename.
+    'unicorn/prevent-abbreviations': 'off',
+    // D1/DAO layer returns null; disabling this avoids mass rewrites.
+    'unicorn/no-null': 'off',
+    // Monorepo uses CommonJS-compatible module style in some configs.
+    'unicorn/prefer-module': 'off',
+    // Top-level await not available in all Workers entry points.
+    'unicorn/prefer-top-level-await': 'off',
+    // Error subclassing via `new MyError()` is intentional in backend-errors.
+    'unicorn/custom-error-definition': 'off',
+    // Allow process.exit in build/script files.
+    'unicorn/no-process-exit': 'off',
+    // Array reduce is used intentionally in analytics/data transformation.
+    'unicorn/no-array-reduce': 'off',
+    // Allow Number() — parseInt/parseFloat are used in some cases intentionally.
+    'unicorn/prefer-number-properties': ['error', { checkInfinity: false }],
+    // Allow nested ternaries in JSX (React render patterns).
+    'unicorn/no-nested-ternary': 'off',
+    // Allow Array.from — codebase uses it for iterables.
+    'unicorn/prefer-spread': 'off',
+    // Entire codebase uses PascalCase for TS files; kebab-case would require
+    // mass renames.
+    'unicorn/filename-case': 'off',
+    // Established names should not be force-renamed.
+    'unicorn/name-replacements': 'off',
+    // Zod schema builder chains and other deep method chains are intentional.
+    'unicorn/max-nested-calls': 'off',
+    // import.meta.dirname is not available in all test environments.
+    'unicorn/prefer-import-meta-properties': 'off',
+    // Codebase uses `err` as catch parameter name throughout.
+    'unicorn/catch-error-name': 'off',
+    // Established boolean param names (retryable, enabled, etc.).
+    'unicorn/consistent-boolean-name': 'off',
+    // Uint8Array#toBase64 / fromBase64 are not in all Workers runtime versions.
+    'unicorn/prefer-uint8array-base64': 'off',
+    // Class member ordering would require extensive restructuring.
+    'unicorn/consistent-class-member-order': 'off',
+    // API response fields use verb prefixes by convention.
+    'unicorn/no-non-function-verb-prefix': 'off',
+    // forEach is used intentionally throughout the provider and utility layers.
+    'unicorn/no-for-each': 'off',
+    // .then() chains in DAO and provider layers are often intentional.
+    'unicorn/prefer-await': 'warn',
+    // Callback references (e.g. .map(Number)) are sometimes intentional.
+    'unicorn/no-array-callback-reference': 'warn',
+    // toSorted() is ES2023 and may not be in all tsconfig lib targets.
+    'unicorn/no-array-sort': 'warn',
+    // Early-return guard clauses are the established style; the rule only
+    // rewrites the final guard of a ladder, which yields asymmetric mixed style
+    // and long inline ternaries. Off in Mail-Meow and Edge-Sonic; canonical here
+    // because it is the family's established style.
+    'unicorn/prefer-ternary': 'off',
+    // `(await x).y` -> a named intermediate. Fires constantly in the tests,
+    // where destructuring beside the assertion it serves is clearer.
+    'unicorn/no-await-expression-member': 'off',
+    // `Number(x)` over `+x`: the `+` form is used where an explicit typeof check
+    // has already narrowed the operand.
+    'unicorn/prefer-number-coercion': 'off',
+    // Code-point iteration: the byte-level readers index deliberately, because
+    // the offset *is* what they are reading.
+    'unicorn/prefer-code-point': 'off',
+    // `if (!x) return;` over a compound condition: one guard per line, each with
+    // its own comment, is what keeps endpoint guards readable.
+    'unicorn/prefer-simple-condition-first': 'off',
+    // Module-scope `let` assigned from `beforeEach` in the test harnesses.
+    'unicorn/no-top-level-assignment-in-function': 'off',
+    // Sequential `for...of` with `await` in the DAOs — D1's subrequest budget is
+    // the scarce resource.
+    'unicorn/no-unreadable-for-of-expression': 'off',
+    // `Object.hasOwn` over `in`: used where a prototype-chain hit is harmless.
+    'unicorn/no-computed-property-existence-check': 'off',
+    // A labeled `break` out of two loops.
+    'unicorn/no-break-in-nested-loop': 'off',
+    // `this` outside a class body: the module-level cache singletons document
+    // their `this` contract in prose.
+    'unicorn/no-this-outside-of-class': 'off',
+    // A class named inside its own static method.
+    'unicorn/class-reference-in-static-methods': 'off',
+    // Assigning `globalThis.fetch` in a test — the only way to intercept the
+    // ambient fetch in Node without a module mock.
+    'unicorn/no-global-object-property-assignment': 'off',
+    // `(a ? b : c) && d`: written longhand so each precedence decision is
+    // visible.
+    'unicorn/prefer-logical-operator-over-ternary': 'off',
+    // `children[0]` in the XML helpers, which index a child list positionally.
+    'unicorn/better-dom-traversing': 'off',
+    // `entries()` -> `keys()`/`values()`: the full entry is destructured.
+    'unicorn/prefer-iterator-to-array': 'off',
+    // `.map(fn, thisArg)`: rejected on purpose.
+    'unicorn/no-array-method-this-argument': 'off',
+    // A module-scope function that closes over nothing.
+    'unicorn/consistent-function-scoping': 'off',
+    // `foo[0] === 'a' || foo[0] === 'b'` written longhand where the
+    // alternatives are not adjacent.
+    'unicorn/prefer-includes-over-repeated-comparisons': 'off',
+    // A `type` alias over an inline union, where the name is what makes the
+    // signature and its doc comment readable.
+    'sonarjs/use-type-alias': 'off',
+    // A short local alias for a type imported from a protocol package.
+    'sonarjs/redundant-type-aliases': 'off',
+    // `type: value` narrowing the other way, where both spellings appear in the
+    // same schema and the code follows whichever the spec uses there.
+    'sonarjs/no-nested-assignment': 'off',
+    // `Number.isInteger` plus a separate range check, where the bounds come from
+    // the caller's own options in one place.
+    'unicorn/prefer-number-is-safe-integer': 'off',
+    // `\u{...}` over a `\xNN` escape: the table is written in the byte form the
+    // spec prints.
+    'unicorn/prefer-unicode-code-point-escapes': 'off',
+    // `self.x = this.x` in an entry model: the alias makes the verbatim
+    // round-trip explicit.
+    'unicorn/no-this-assignment': 'off',
+    // Building a `Set` at module scope from a constant list, for O(1) membership
+    // on a path that runs per parameter.
+    'unicorn/no-top-level-side-effects': 'off',
+    // A conditional whose branches are identical, kept where the two branches
+    // are named separately to document that they are meant to diverge.
+    'sonarjs/no-all-duplicated-branches': 'off',
+    // An `else` after a `return`: the flat form keeps the remaining cases at one
+    // indent level in the dispatch tables.
+    'unicorn/prefer-else-if': 'off',
+    // A nested ternary in a sort comparator, where the three-way order is the
+    // point.
+    'unicorn/prefer-minimal-ternary': 'off',
+    // `void promise` where initiating the call is the point and the rejection is
+    // handled at a named site elsewhere.
+    'sonarjs/void-use': 'off',
+    // `x === undefined` reported as always-true/false. With
+    // `noUncheckedIndexedAccess` on, the guard is exactly right.
+    'sonarjs/different-types-comparison': 'off',
+    // An accumulating loop with a sequential `await` in it, over D1 writes.
+    'unicorn/prefer-array-from-async': 'off',
+};
+/**
+ * SonarJS rules the sources turned from errors into advisories, with the
+ * threshold raised to a value that has actually held.
+ */
+export const SONARJS_RULES = {
+    // Raise duplicate-string threshold to avoid flagging intentional repeated
+    // literals like provider IDs.
+    'sonarjs/no-duplicate-string': ['warn', { threshold: 5 }],
+    // Cognitive complexity — warn rather than error, so the ratchet can move
+    // without a red build. Raise the number only as files are decomposed.
+    'sonarjs/cognitive-complexity': ['warn', 20],
+    // False positives: connection method names like 'imap-password' and field
+    // names like 'password_hash'.
+    'sonarjs/no-hardcoded-passwords': 'off',
+    // Third-party deprecations are warnings, not errors.
+    'sonarjs/deprecation': 'warn',
+    // Nested ternaries in complex data-mapping code.
+    'sonarjs/no-nested-conditional': 'warn',
+    // React component props are commonly not marked Readonly<>.
+    'sonarjs/prefer-read-only-props': 'warn',
+    // Static readonly properties require invasive refactoring.
+    'sonarjs/public-static-readonly': 'warn',
+    // Nested template literals in SQL queries and prompt construction.
+    'sonarjs/no-nested-template-literals': 'warn',
+};
+/**
+ * Test-suite overrides.
+ *
+ * `test/**` is deliberately *not* in the config's ignores list. Durable-DAV,
+ * AWS and Mail-Meow all ignored it, and ~200 KB of test code had accumulated
+ * violations that nothing reported. This block puts the suite back under the
+ * same rules as the rest of the workspace and switches off only the handful
+ * whose findings are structural artefacts of test code rather than defects.
+ * It does not disable correctness rules: the unused-variable, dead-store,
+ * regex and sorting findings in the suite are real and are fixed, not
+ * suppressed.
+ */
+export const TEST_RULES = {
+    // `it('…', async () => …)` is the Vitest idiom.
+    '@typescript-eslint/no-misused-promises': ['error', { checksVoidReturn: { arguments: false, attributes: false } }],
+    // Unbound method is a common false positive in mock assertions like
+    // expect(fn).toHaveBeenCalledWith(...).
+    '@typescript-eslint/unbound-method': 'off',
+    // Test helpers and stubs routinely use async functions without await.
+    '@typescript-eslint/require-await': 'off',
+    // Redundant type constituents appear in typed mock stubs.
+    '@typescript-eslint/no-redundant-type-constituents': 'off',
+    // `as never` casts are the standard fake-DB double pattern in tests.
+    '@typescript-eslint/no-unnecessary-type-assertion': 'off',
+    // Promise.withResolvers() and function-scoping refactors are cosmetic.
+    'unicorn/prefer-promise-with-resolvers': 'off',
+    'unicorn/consistent-function-scoping': 'off',
+    // Fake-DB builders push-then-return and sort without comparators.
+    'unicorn/no-return-array-push': 'off',
+    'unicorn/require-array-sort-compare': 'off',
+    // Iterator-helper rewrites churn test fakes with no runtime benefit.
+    'unicorn/prefer-iterator-helpers': 'off',
+    'unicorn/prefer-iterator-to-array': 'off',
+    // String replacement with test-driven values is intentional in assertions.
+    'unicorn/no-unsafe-string-replacement': 'off',
+    // Fake-D1 doubles await a DAO thunk and call straight onto the result.
+    'unicorn/no-await-expression-member': 'off',
+    // `void promise` marks a deliberately unawaited promise in a test.
+    'sonarjs/void-use': 'off',
+    // A test asserting request routing has to name `http://` hosts, and a proxy
+    // test has to name a loopback upstream. Both are the subject matter, not
+    // leaked configuration. `unicorn/prefer-https` must stay off here and this
+    // is not a style preference: it rewrites `http://` to `https://` *inside
+    // string literals*, and `--fix` applies it silently.
+    'sonarjs/no-clear-text-protocols': 'off',
+    'sonarjs/no-hardcoded-ip': 'off',
+    'unicorn/prefer-https': 'off',
+    // sonarjs/assertions-in-tests fires false positives when test helpers handle
+    // assertions indirectly.
+    'sonarjs/assertions-in-tests': 'off',
+    // sonarjs/no-extra-arguments fires incorrectly on Vitest mock overloads.
+    'sonarjs/no-extra-arguments': 'off',
+    // Union/inline types in test fakes are more readable than aliases.
+    'sonarjs/use-type-alias': 'off',
+    // Alphabetical-sort rule fights deterministic fixture ordering.
+    'sonarjs/no-alphabetical-sort': 'off',
+    // Repeated string literals in fixtures/assertions are clearer inline.
+    'sonarjs/no-duplicate-string': 'off',
+    // Fake-D1 doubles break out of a nested loop to model a statement miss.
+    'unicorn/no-break-in-nested-loop': 'off',
+    // Fixtures are naturally built with sort()/for…of over composed expressions.
+    'unicorn/no-array-sort': 'off',
+    'unicorn/no-unreadable-for-of-expression': 'off',
+    'unicorn/no-useless-template-literals': 'off',
+    'unicorn/no-declarations-before-early-exit': 'off',
+    'unicorn/prefer-includes-over-repeated-comparisons': 'off',
+    'sonarjs/prefer-specific-assertions': 'off',
+    'sonarjs/no-inverted-boolean-check': 'off',
+};
+//# sourceMappingURL=eslint-rules.js.map

package/dist/eslint-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint-rules.js","sourceRoot":"","sources":["../src/eslint-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsC;IACjE,mCAAmC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACpG,gEAAgE;IAChE,yCAAyC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,iCAAiC;IACjC,oCAAoC,EAAE,MAAM;IAC5C,yCAAyC,EAAE,MAAM;IACjD,4CAA4C,EAAE,MAAM;IACpD,mCAAmC,EAAE,MAAM;IAC3C,qCAAqC,EAAE,MAAM;IAC7C,uCAAuC,EAAE,MAAM;IAC/C,4EAA4E;IAC5E,0BAA0B;IAC1B,wCAAwC,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;IACnH,uEAAuE;IACvE,sEAAsE;IACtE,kCAAkC,EAAE,KAAK;IACzC,yEAAyE;IACzE,qDAAqD;IACrD,mCAAmC,EAAE,KAAK;CAC3C,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsC;IAC9D,4EAA4E;IAC5E,aAAa;IACb,+BAA+B,EAAE,KAAK;IACtC,kEAAkE;IAClE,iBAAiB,EAAE,KAAK;IACxB,kEAAkE;IAClE,uBAAuB,EAAE,KAAK;IAC9B,6DAA6D;IAC7D,gCAAgC,EAAE,KAAK;IACvC,0EAA0E;IAC1E,iCAAiC,EAAE,KAAK;IACxC,4CAA4C;IAC5C,yBAAyB,EAAE,KAAK;IAChC,uEAAuE;IACvE,yBAAyB,EAAE,KAAK;IAChC,6EAA6E;IAC7E,kCAAkC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACvE,yDAAyD;IACzD,2BAA2B,EAAE,KAAK;IAClC,qDAAqD;IACrD,uBAAuB,EAAE,KAAK;IAC9B,yEAAyE;IACzE,gBAAgB;IAChB,uBAAuB,EAAE,KAAK;IAC9B,iDAAiD;IACjD,2BAA2B,EAAE,KAAK;IAClC,0EAA0E;IAC1E,0BAA0B,EAAE,KAAK;IACjC,iEAAiE;IACjE,uCAAuC,EAAE,KAAK;IAC9C,0DAA0D;IAC1D,0BAA0B,EAAE,KAAK;IACjC,8DAA8D;IAC9D,iCAAiC,EAAE,KAAK;IACxC,4EAA4E;IAC5E,kCAAkC,EAAE,KAAK;IACzC,+DAA+D;IAC/D,uCAAuC,EAAE,KAAK;IAC9C,uDAAuD;IACvD,qCAAqC,EAAE,KAAK;IAC5C,4EAA4E;IAC5E,qBAAqB,EAAE,KAAK;IAC5B,mEAAmE;IACnE,sBAAsB,EAAE,MAAM;IAC9B,qEAAqE;IACrE,qCAAqC,EAAE,MAAM;IAC7C,mEAAmE;IACnE,uBAAuB,EAAE,MAAM;IAC/B,sEAAsE;IACtE,4EAA4E;IAC5E,6EAA6E;IAC7E,gDAAgD;IAChD,wBAAwB,EAAE,KAAK;IAC/B,wEAAwE;IACxE,iEAAiE;IACjE,oCAAoC,EAAE,KAAK;IAC3C,6EAA6E;IAC7E,oCAAoC;IACpC,gCAAgC,EAAE,KAAK;IACvC,2EAA2E;IAC3E,yCAAyC;IACzC,2BAA2B,EAAE,KAAK;IAClC,6EAA6E;IAC7E,2DAA2D;IAC3D,uCAAuC,EAAE,KAAK;IAC9C,uEAAuE;IACvE,6CAA6C,EAAE,KAAK;IACpD,6EAA6E;IAC7E,uBAAuB;IACvB,yCAAyC,EAAE,KAAK;IAChD,2EAA2E;IAC3E,8CAA8C,EAAE,KAAK;IACrD,sCAAsC;IACtC,iCAAiC,EAAE,KAAK;IACxC,0EAA0E;IAC1E,kCAAkC;IAClC,kCAAkC,EAAE,KAAK;IACzC,8CAA8C;IAC9C,2CAA2C,EAAE,KAAK;IAClD,yEAAyE;IACzE,+CAA+C;IAC/C,8CAA8C,EAAE,KAAK;IACrD,sEAAsE;IACtE,WAAW;IACX,8CAA8C,EAAE,KAAK;IACrD,2EAA2E;IAC3E,+BAA+B,EAAE,KAAK;IACtC,sEAAsE;IACtE,kCAAkC,EAAE,KAAK;IACzC,4CAA4C;IAC5C,uCAAuC,EAAE,KAAK;IAC9C,oDAAoD;IACpD,qCAAqC,EAAE,KAAK;IAC5C,gEAAgE;IAChE,iCAAiC;IACjC,mDAAmD,EAAE,KAAK;IAC1D,wEAAwE;IACxE,0CAA0C;IAC1C,wBAAwB,EAAE,KAAK;IAC/B,mEAAmE;IACnE,gCAAgC,EAAE,KAAK;IACvC,4EAA4E;IAC5E,kEAAkE;IAClE,8BAA8B,EAAE,KAAK;IACrC,6EAA6E;IAC7E,yCAAyC;IACzC,uCAAuC,EAAE,KAAK;IAC9C,4EAA4E;IAC5E,eAAe;IACf,2CAA2C,EAAE,KAAK;IAClD,oEAAoE;IACpE,uBAAuB;IACvB,4BAA4B,EAAE,KAAK;IACnC,6EAA6E;IAC7E,qCAAqC;IACrC,mCAAmC,EAAE,KAAK;IAC1C,0EAA0E;IAC1E,mEAAmE;IACnE,oCAAoC,EAAE,KAAK;IAC3C,6EAA6E;IAC7E,uCAAuC;IACvC,wBAAwB,EAAE,KAAK;IAC/B,0EAA0E;IAC1E,SAAS;IACT,gCAAgC,EAAE,KAAK;IACvC,6EAA6E;IAC7E,qCAAqC;IACrC,kBAAkB,EAAE,KAAK;IACzB,wDAAwD;IACxD,6DAA6D;IAC7D,oCAAoC,EAAE,KAAK;IAC3C,wEAAwE;IACxE,iCAAiC,EAAE,KAAK;CACzC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsC;IAC9D,0EAA0E;IAC1E,8BAA8B;IAC9B,6BAA6B,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzD,yEAAyE;IACzE,sEAAsE;IACtE,8BAA8B,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5C,0EAA0E;IAC1E,8BAA8B;IAC9B,gCAAgC,EAAE,KAAK;IACvC,qDAAqD;IACrD,qBAAqB,EAAE,MAAM;IAC7B,iDAAiD;IACjD,+BAA+B,EAAE,MAAM;IACvC,4DAA4D;IAC5D,gCAAgC,EAAE,MAAM;IACxC,2DAA2D;IAC3D,gCAAgC,EAAE,MAAM;IACxC,mEAAmE;IACnE,qCAAqC,EAAE,MAAM;CAC9C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAsC;IAC3D,gDAAgD;IAChD,wCAAwC,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;IAClH,oEAAoE;IACpE,wCAAwC;IACxC,mCAAmC,EAAE,KAAK;IAC1C,sEAAsE;IACtE,kCAAkC,EAAE,KAAK;IACzC,0DAA0D;IAC1D,mDAAmD,EAAE,KAAK;IAC1D,qEAAqE;IACrE,kDAAkD,EAAE,KAAK;IACzD,uEAAuE;IACvE,uCAAuC,EAAE,KAAK;IAC9C,qCAAqC,EAAE,KAAK;IAC5C,kEAAkE;IAClE,8BAA8B,EAAE,KAAK;IACrC,oCAAoC,EAAE,KAAK;IAC3C,qEAAqE;IACrE,iCAAiC,EAAE,KAAK;IACxC,kCAAkC,EAAE,KAAK;IACzC,2EAA2E;IAC3E,sCAAsC,EAAE,KAAK;IAC7C,uEAAuE;IACvE,oCAAoC,EAAE,KAAK;IAC3C,mEAAmE;IACnE,kBAAkB,EAAE,KAAK;IACzB,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,qDAAqD;IACrD,iCAAiC,EAAE,KAAK;IACxC,yBAAyB,EAAE,KAAK;IAChC,sBAAsB,EAAE,KAAK;IAC7B,6EAA6E;IAC7E,yBAAyB;IACzB,6BAA6B,EAAE,KAAK;IACpC,yEAAyE;IACzE,4BAA4B,EAAE,KAAK;IACnC,mEAAmE;IACnE,wBAAwB,EAAE,KAAK;IAC/B,gEAAgE;IAChE,8BAA8B,EAAE,KAAK;IACrC,sEAAsE;IACtE,6BAA6B,EAAE,KAAK;IACpC,wEAAwE;IACxE,iCAAiC,EAAE,KAAK;IACxC,6EAA6E;IAC7E,uBAAuB,EAAE,KAAK;IAC9B,yCAAyC,EAAE,KAAK;IAChD,sCAAsC,EAAE,KAAK;IAC7C,2CAA2C,EAAE,KAAK;IAClD,mDAAmD,EAAE,KAAK;IAC1D,oCAAoC,EAAE,KAAK;IAC3C,mCAAmC,EAAE,KAAK;CAC3C,CAAC"}

package/dist/eslint.d.ts

@@ -0,0 +1,96 @@
+/**
+ * The converged ESLint flat config for a monorepo in the Rexezuge family.
+ *
+ * Provenance: the base is Durable-DAV's `eslint.config.mjs` (380+ lines, the most
+ * elaborate of the nine repos, with the layered `no-restricted-imports` boundary
+ * rules). Merged in from the other three stacks that share the same plugin set:
+ *
+ * - **Edge-Sonic** — `test/**` is *not* ignored (it is linted like everything else,
+ *   with a narrow override block for Vitest idioms), and `unicorn/prefer-ternary`
+ *   is off. Edge-Sonic is also the source for the dynamic-`import()` boundary
+ *   guard and its `apps/web` layer block.
+ * - **Mail-Meow** — `prettier/prettier` is an **error**, not a warning.
+ * - **AWS-AccessBridge** — the `apps/api` DAO/service boundary uses
+ *   `allowTypeImports` where the source repos do not. It is also the source for
+ *   the anchored skip patterns and the symlink-safe walk that came out of its own
+ *   backlog.
+ *
+ * Canonical decisions, and why each one:
+ *
+ * 1. **`prettier/prettier: 'error'`.** Three of the four source repos had it at
+ *    `warn`, which under `eslint --quiet` is unenforceable — a gate nobody can see
+ *    is a gate that has never run. Formatting drift is therefore a hard failure.
+ * 2. **The layered boundary rules are parameterized by `scope`.** Every source
+ *    repo wrote the same seven blocks with a different npm scope hardcoded; the
+ *    factory takes `scope` (`'@myapp'`) and generates the `@myapp/*` patterns.
+ *    The table itself lives in {@link ./eslint-boundaries}.
+ * 3. **`test/**` is linted, not ignored.** Durable-DAV/AWS/Mail-Meow ignored it;
+ *    Edge-Sonic does not, and records why: ~200 KB of test code had accumulated
+ *    violations that nothing reported.
+ * 4. **`apps/web` is a layer in its own right**, banned from every `@scope/*`
+ *    package. Edge-Sonic is the only source with that block; the others had none,
+ *    which is how their layer table's "may import: the browser" was a convention
+ *    rather than a gate. A backend package imported by the SPA compiles and then
+ *    fails at bundle time, with the error pointing at the bundler.
+ * 5. **jsdom + node globals for web files.** The sources ran `globals.node` only;
+ *    `apps/web` needs browser globals as well, and the vitest config for the SPA
+ *    runs under jsdom, so the lint environment matches the test environment.
+ * 6. **`eslint-plugin-react-hooks` is NOT imported here.** The kit stays
+ *    zero-dependency, and the plugin belongs to the app that has JSX. A consumer
+ *    appends it — the README shows the four lines.
+ *
+ * The rule bodies live in {@link ./eslint-rules} and the boundary table in
+ * {@link ./eslint-boundaries}; this file is the assembly. A repo that needs a
+ * boundary the canonical table does not name passes `extraLayers` — see
+ * {@link RepoLintConfigOptions}.
+ */
+import type { FlatConfig } from 'typescript-eslint';
+import type { LayerBan } from './eslint-boundaries';
+/**
+ * What `defineRepoLintConfig` accepts.
+ */
+export interface RepoLintConfigOptions {
+    /**
+     * The consuming repo's npm scope, e.g. `'@myapp'`. Every `no-restricted-imports`
+     * pattern in the boundary rules is derived from it, so the same factory serves
+     * all nine repos.
+     */
+    readonly scope: string;
+    /**
+     * The workspace directories the layered boundary rules are scoped to, as repo-
+     * relative globs. Defaults to the canonical layout the nine repos share.
+     */
+    readonly projectDirs?: readonly string[];
+    /**
+     * Extra ignore globs, merged with the canonical set.
+     */
+    readonly extraIgnores?: readonly string[];
+    /**
+     * Where `projectService` resolves the tsconfig from. Defaults to the directory
+     * ESLint is invoked in, which is the repo root in every CI job.
+     */
+    readonly tsconfigRootDir?: string;
+    /**
+     * Extra boundary layers, appended to the canonical table.
+     *
+     * The escape valve for a repo whose layout has a boundary the canonical table
+     * does not name — AWS-AccessBridge's `apps/api/src/endpoints/**` rule ("route
+     * classes must not import DAOs directly") and its `aws4fetch` ban are the shape.
+     * Same {@link LayerBan} form, so `extraLayers` flows through the
+     * `no-restricted-imports` and the `no-restricted-syntax` guard alike.
+     */
+    readonly extraLayers?: readonly LayerBan[];
+}
+/**
+ * Build the repo's flat config.
+ *
+ * Consumed from the repo root as three lines:
+ *
+ * ```js
+ * // eslint.config.mjs
+ * import { defineRepoLintConfig } from '@rexezuge/tooling/eslint';
+ * export default defineRepoLintConfig({ scope: '@myapp' });
+ * ```
+ */
+export declare function defineRepoLintConfig(options: RepoLintConfigOptions): FlatConfig.ConfigArray;
+//# sourceMappingURL=eslint.d.ts.map

package/dist/eslint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.d.ts","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AASH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;OAEG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC5C;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,UAAU,CAAC,WAAW,CAkH3F"}

package/dist/eslint.js

@@ -0,0 +1,189 @@
+/**
+ * The converged ESLint flat config for a monorepo in the Rexezuge family.
+ *
+ * Provenance: the base is Durable-DAV's `eslint.config.mjs` (380+ lines, the most
+ * elaborate of the nine repos, with the layered `no-restricted-imports` boundary
+ * rules). Merged in from the other three stacks that share the same plugin set:
+ *
+ * - **Edge-Sonic** — `test/**` is *not* ignored (it is linted like everything else,
+ *   with a narrow override block for Vitest idioms), and `unicorn/prefer-ternary`
+ *   is off. Edge-Sonic is also the source for the dynamic-`import()` boundary
+ *   guard and its `apps/web` layer block.
+ * - **Mail-Meow** — `prettier/prettier` is an **error**, not a warning.
+ * - **AWS-AccessBridge** — the `apps/api` DAO/service boundary uses
+ *   `allowTypeImports` where the source repos do not. It is also the source for
+ *   the anchored skip patterns and the symlink-safe walk that came out of its own
+ *   backlog.
+ *
+ * Canonical decisions, and why each one:
+ *
+ * 1. **`prettier/prettier: 'error'`.** Three of the four source repos had it at
+ *    `warn`, which under `eslint --quiet` is unenforceable — a gate nobody can see
+ *    is a gate that has never run. Formatting drift is therefore a hard failure.
+ * 2. **The layered boundary rules are parameterized by `scope`.** Every source
+ *    repo wrote the same seven blocks with a different npm scope hardcoded; the
+ *    factory takes `scope` (`'@myapp'`) and generates the `@myapp/*` patterns.
+ *    The table itself lives in {@link ./eslint-boundaries}.
+ * 3. **`test/**` is linted, not ignored.** Durable-DAV/AWS/Mail-Meow ignored it;
+ *    Edge-Sonic does not, and records why: ~200 KB of test code had accumulated
+ *    violations that nothing reported.
+ * 4. **`apps/web` is a layer in its own right**, banned from every `@scope/*`
+ *    package. Edge-Sonic is the only source with that block; the others had none,
+ *    which is how their layer table's "may import: the browser" was a convention
+ *    rather than a gate. A backend package imported by the SPA compiles and then
+ *    fails at bundle time, with the error pointing at the bundler.
+ * 5. **jsdom + node globals for web files.** The sources ran `globals.node` only;
+ *    `apps/web` needs browser globals as well, and the vitest config for the SPA
+ *    runs under jsdom, so the lint environment matches the test environment.
+ * 6. **`eslint-plugin-react-hooks` is NOT imported here.** The kit stays
+ *    zero-dependency, and the plugin belongs to the app that has JSX. A consumer
+ *    appends it — the README shows the four lines.
+ *
+ * The rule bodies live in {@link ./eslint-rules} and the boundary table in
+ * {@link ./eslint-boundaries}; this file is the assembly. A repo that needs a
+ * boundary the canonical table does not name passes `extraLayers` — see
+ * {@link RepoLintConfigOptions}.
+ */
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+import unicorn from 'eslint-plugin-unicorn';
+import { configs as sonarjsConfigs } from 'eslint-plugin-sonarjs';
+import pluginRegexp from 'eslint-plugin-regexp';
+import eslintConfigPrettier from 'eslint-config-prettier';
+import prettier from 'eslint-plugin-prettier';
+import { DEFAULT_PROJECT_DIRS, layerBans, restrictedDynamicImports, restrictedImports } from './eslint-boundaries';
+import { SONARJS_RULES, TEST_RULES, TYPESCRIPT_RULES, UNICORN_RULES } from './eslint-rules';
+/**
+ * Bridge a third-party preset into `tseslint.config()`.
+ *
+ * `sonarjs`' `recommended` preset is typed as a union that includes the legacy
+ * config shape, which `tseslint.config()` does not accept — but ESLint accepts it
+ * at runtime, which is the only thing that matters here. One checked assertion,
+ * rather than forking the plugin's own types.
+ */
+function asConfig(config) {
+    return config;
+}
+/**
+ * Bridge a rule block onto `tseslint.config()`'s `rules` field.
+ *
+ * The blocks in `eslint-rules.ts` are written as ESLint expects them —
+ * `'off' | 'warn' | 'error' | [level, ...options]` — but spelled as data so a
+ * rule's reason comment sits beside the rule itself. ESLint's own `RuleEntry`
+ * union is narrower than the data shape, and widening every entry to that union
+ * would buy nothing; one assertion here, with the reason, is the cheaper and
+ * more honest of the two.
+ */
+function asRules(block) {
+    return block;
+}
+/**
+ * Build the repo's flat config.
+ *
+ * Consumed from the repo root as three lines:
+ *
+ * ```js
+ * // eslint.config.mjs
+ * import { defineRepoLintConfig } from '@rexezuge/tooling/eslint';
+ * export default defineRepoLintConfig({ scope: '@myapp' });
+ * ```
+ */
+export function defineRepoLintConfig(options) {
+    const { scope } = options;
+    const projectDirs = options.projectDirs ?? DEFAULT_PROJECT_DIRS;
+    const canonical = layerBans(scope).filter((layer) => projectDirs.some((dir) => layer.dir.startsWith(dir)));
+    const extra = options.extraLayers ?? [];
+    const bans = [...canonical, ...extra];
+    return tseslint.config({
+        ignores: [
+            'eslint.config.mjs',
+            'eslint.config.js',
+            'scripts/**',
+            'worker-configuration.d.ts',
+            'local/**',
+            'app/dist/**',
+            'apps/web/dist/**',
+            'apps/*/dist/**',
+            'src/generated/**',
+            'apps/api/src/generated/**',
+            'coverage/**',
+            'coverage-integration/**',
+            'coverage-web/**',
+            'node_modules/**',
+            ...(options.extraIgnores ?? []),
+        ],
+    }, 
+    // Base: globals for all JS/TS source files. Node is the floor because the
+    // scripts and the workers both run on it; the web block below adds browser
+    // globals rather than replacing them, so a shared file that touches both
+    // (there are several in `shared/`) still lints.
+    {
+        files: ['**/*.{js,mjs,cjs,ts,mts,cts,tsx,jsx}'],
+        languageOptions: {
+            globals: globals.node,
+        },
+    }, 
+    // Type-aware TS rules, scoped to TS files only.
+    {
+        files: ['**/*.{ts,mts,cts,tsx}'],
+        extends: tseslint.configs.recommendedTypeChecked,
+        languageOptions: {
+            parserOptions: {
+                projectService: true,
+                tsconfigRootDir: options.tsconfigRootDir ?? process.cwd(),
+            },
+        },
+    }, 
+    // --- typescript-eslint overrides (identical in all four source stacks) ---
+    {
+        files: ['**/*.{ts,mts,cts,tsx}'],
+        rules: asRules(TYPESCRIPT_RULES),
+    }, 
+    // --- Unicorn: modern JS/TS quality rules ---
+    asConfig(unicorn.configs['flat/recommended']), {
+        rules: asRules(UNICORN_RULES),
+    }, 
+    // --- SonarJS: code smell and bug detection ---
+    asConfig(sonarjsConfigs.recommended), {
+        rules: asRules(SONARJS_RULES),
+    }, 
+    // --- Regexp: static analysis for regular expressions ---
+    asConfig(pluginRegexp.configs['flat/recommended']), 
+    // --- Prettier: formatting drift is a hard error ---
+    //
+    // Mail-Meow's decision, adopted repo-wide because the alternative is
+    // unenforceable: `pnpm run lint` is `eslint --fix --quiet` in three of the
+    // four source repos, and `--quiet` discards every warning, so a
+    // `prettier/prettier` *warning* is a silent no-op. 242 files were in that
+    // state in Edge-Sonic: the gate had never run.
+    asConfig(eslintConfigPrettier), {
+        plugins: { prettier },
+        rules: {
+            'prettier/prettier': 'error',
+        },
+    }, 
+    // --- Import direction guardrails (parameterized by scope) ---
+    ...restrictedImports(bans), ...restrictedDynamicImports(bans), 
+    // --- Web: browser globals, matching the jsdom test environment ---
+    //
+    // The sources linted `apps/web` under `globals.node` only, so `window`,
+    // `document` and `localStorage` read as undefined globals. The vitest web
+    // config runs those suites under jsdom; the lint environment should agree
+    // with the environment the code is executed in, or the rule is reporting
+    // something untrue about how the file behaves.
+    {
+        files: ['apps/web/**/*.{ts,tsx,js,jsx,mts,cts,mjs,cjs}'],
+        languageOptions: {
+            globals: { ...globals.node, ...globals.browser },
+        },
+    }, 
+    // --- Test suite ---
+    //
+    // `test/**` is deliberately NOT in the ignores list above. See TEST_RULES
+    // for the override block and the reasoning behind it.
+    {
+        files: ['test/**/*.{ts,tsx,mts,cts}', '**/*.test.{ts,tsx,mts,cts}', '**/*.spec.{ts,tsx,mts,cts}'],
+        rules: asRules(TEST_RULES),
+    });
+}
+//# sourceMappingURL=eslint.js.map

package/dist/eslint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.js","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,YAAY,MAAM,sBAAsB,CAAC;AAChD,OAAO,oBAAoB,MAAM,wBAAwB,CAAC;AAC1D,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEnH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAgD5F;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,MAAmB;IACnC,OAAO,MAAqB,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,OAAO,CAAC,KAAwC;IACvD,OAAO,KAAmC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC;IAEtC,OAAO,QAAQ,CAAC,MAAM,CACpB;QACE,OAAO,EAAE;YACP,mBAAmB;YACnB,kBAAkB;YAClB,YAAY;YACZ,2BAA2B;YAC3B,UAAU;YACV,aAAa;YACb,kBAAkB;YAClB,gBAAgB;YAChB,kBAAkB;YAClB,2BAA2B;YAC3B,aAAa;YACb,yBAAyB;YACzB,iBAAiB;YACjB,iBAAiB;YACjB,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;SAChC;KACF;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,gDAAgD;IAChD;QACE,KAAK,EAAE,CAAC,sCAAsC,CAAC;QAC/C,eAAe,EAAE;YACf,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB;KACF;IAED,gDAAgD;IAChD;QACE,KAAK,EAAE,CAAC,uBAAuB,CAAC;QAChC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,sBAAsB;QAChD,eAAe,EAAE;YACf,aAAa,EAAE;gBACb,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,EAAE;aAC1D;SACF;KACF;IAED,4EAA4E;IAC5E;QACE,KAAK,EAAE,CAAC,uBAAuB,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,gBAAgB,CAAC;KACjC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAC7C;QACE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC;KAC9B;IAED,gDAAgD;IAChD,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,EACpC;QACE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC;KAC9B;IAED,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAElD,qDAAqD;IACrD,EAAE;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,gEAAgE;IAChE,0EAA0E;IAC1E,+CAA+C;IAC/C,QAAQ,CAAC,oBAAoB,CAAC,EAC9B;QACE,OAAO,EAAE,EAAE,QAAQ,EAAE;QACrB,KAAK,EAAE;YACL,mBAAmB,EAAE,OAAO;SAC7B;KACF;IAED,+DAA+D;IAC/D,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAC1B,GAAG,wBAAwB,CAAC,IAAI,CAAC;IAEjC,oEAAoE;IACpE,EAAE;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,+CAA+C;IAC/C;QACE,KAAK,EAAE,CAAC,+CAA+C,CAAC;QACxD,eAAe,EAAE;YACf,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;SACjD;KACF;IAED,qBAAqB;IACrB,EAAE;IACF,0EAA0E;IAC1E,sDAAsD;IACtD;QACE,KAAK,EAAE,CAAC,4BAA4B,EAAE,4BAA4B,EAAE,4BAA4B,CAAC;QACjG,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;KAC3B,CACF,CAAC;AACJ,CAAC"}