@sarj/eslint-plugin 16.30.2 → 16.30.4

package/dist/index.cjs

@@ -1580,7 +1580,7 @@ function isSearchParamReceiver(call, services) {
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.30.2",
+  version: "16.30.4",
   packageManager: "npm@12.2.1",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
@@ -1636,7 +1636,6 @@ var package_default = {
   dependencies: {
     "@typescript-eslint/typescript-estree": "^8.72.0",
     "@typescript-eslint/utils": "^8.72.0",
-    "eslint-plugin-sonarjs": "4.2.2",
     "jsonc-parser": "^3.3.1",
     "ts-api-utils": "2.5.0"
   },
@@ -4857,7 +4856,6 @@ function showWitness(value) {
 
 // src/rules/no-boolean-selector-parameter.ts
 var import_utils32 = require("@typescript-eslint/utils");
-var import_eslint_plugin_sonarjs = require("eslint-plugin-sonarjs");
 
 // src/rules/_boolean-selector-contract.ts
 var import_utils30 = require("@typescript-eslint/utils");
@@ -5182,7 +5180,6 @@ function literalCallers(sourceCode, owner, binding) {
 }
 
 // src/rules/no-boolean-selector-parameter.ts
-var UPSTREAM_SELECTOR_RULE = import_eslint_plugin_sonarjs.rules["no-selector-parameter"];
 var NO_BOOLEAN_SELECTOR_PARAMETER_DOCUMENTATION = {
   summary: "Prefer intention-revealing operations over a boolean parameter selecting between actions.",
   rationale: "A positional boolean hides which operation a caller requests. Splitting independent actions can make that intent explicit, while boolean data, pure mappings and externally required callback or method contracts remain valid.",
@@ -5191,15 +5188,14 @@ var NO_BOOLEAN_SELECTOR_PARAMETER_DOCUMENTATION = {
   defaultLevel: "warning",
   autofix: "safe",
   limitations: [
-    "Requires type information. Adapts maintained SonarJS S2301 for single-statement if/else or conditional bodies and adds expression-bodied arrow conditionals. Only a direct broad-boolean parameter or its negation is considered; optional, nullable, literal-only, generic, destructured and indirect predicate conditions are excluded.",
+    "Requires type information. Checks an owned single-statement if/else, returned conditional or conditional expression statement, and expression-bodied arrow conditionals. Only a direct broad-boolean parameter or its negation is considered; optional, nullable, literal-only, generic, destructured and indirect predicate conditions are excluded.",
     "Preserves setters, pure mappings, selected pure data passed to one stable lexical operation or assigned to one simple target, independently authored callable and inherited member contracts, inline callbacks, and statically proven named callback references. Independent helpers remain checked in JSX files; callback identity is established from references rather than handler names.",
-    "The upstream block-body detector still exempts literal on[A-Z] object properties; the concise-arrow extension does not infer a callback contract from that name. Multi-statement bodies, short-circuit guards, local parameter aliases and arbitrary control flow are not inferred. Noncomputed property reads count as data without proving getter effects; computed reads remain outside that exemption, including literal keys. Side-effect detection does not prove whether a called function is pure, and a warning requires manual design review. Generated files are excluded; tests remain checked.",
+    "The block-body detector preserves the existing literal on[A-Z] object-property exemption; the concise-arrow extension does not infer a callback contract from that name. Multi-statement bodies, short-circuit guards, local parameter aliases and arbitrary control flow are not inferred. Noncomputed property reads count as data without proving getter effects; computed reads remain outside that exemption, including literal keys. Side-effect detection does not prove whether a called function is pure, and a warning requires manual design review. Generated files are excluded; tests remain checked.",
     "Automatic fixes only reuse two already authored private zero-argument ordinary operations returning primitive string literals. A complete comment-free four-declaration module must contain those operations, one private const broad-boolean arrow selecting their direct calls, and one exported zero-argument ordinary function with an explicit string-array return that calls the selector exclusively with literal true and false. Calls are routed to the existing named operations and the exclusively used selector declaration is removed. All other APIs, callbacks, dynamic arguments, contracts and operation bodies remain manual."
   ],
   references: [
     "https://understandlegacycode.com/blog/what-is-wrong-with-boolean-parameters/",
-    "https://martinfowler.com/bliki/FlagArgument.html",
-    "https://github.com/SonarSource/SonarJS/tree/master/packages/analysis/src/jsts/rules/S2301"
+    "https://martinfowler.com/bliki/FlagArgument.html"
   ],
   examples: [
     {
@@ -5289,38 +5285,26 @@ var no_boolean_selector_parameter_default = createRule({
         fix
       });
     }
-    function translate({ loc }) {
-      if (loc === void 0) return;
-      const position = "start" in loc ? loc.start : loc;
-      const identifier = context.sourceCode.getNodeByRangeIndex(
-        context.sourceCode.getIndexFromLoc(position)
-      );
-      if (identifier?.type === import_utils32.AST_NODE_TYPES.Identifier) report2(identifier);
-    }
-    const nativeContext = Object.create(context, {
-      report: { value: translate }
-    });
-    const nativeArguments = [nativeContext];
-    const listeners = Reflect.apply(
-      UPSTREAM_SELECTOR_RULE.create.bind(UPSTREAM_SELECTOR_RULE),
-      void 0,
-      nativeArguments
-    );
-    const native = {};
-    if (typeof listeners !== "object" || listeners === null) return native;
-    for (const selector of Object.keys(listeners)) {
-      const listener = Reflect.get(listeners, selector);
-      if (typeof listener === "function")
-        native[selector] = (...nodes) => {
-          Reflect.apply(listener, void 0, nodes);
-        };
+    function inspectSingleStatementBody(owner) {
+      if (owner.body?.type !== import_utils32.AST_NODE_TYPES.BlockStatement || owner.body.body.length !== 1 || preservesBlockObjectCallback(owner)) return;
+      const statement = owner.body.body[0];
+      if (statement?.type === import_utils32.AST_NODE_TYPES.IfStatement) {
+        if (statement.alternate === null || !import_utils32.ASTUtils.hasSideEffect(statement.consequent, context.sourceCode) && !import_utils32.ASTUtils.hasSideEffect(statement.alternate, context.sourceCode)) return;
+        const identifier2 = testIdentifier(statement.test);
+        if (identifier2 !== void 0) report2(identifier2);
+        return;
+      }
+      const selected = statement?.type === import_utils32.AST_NODE_TYPES.ReturnStatement ? statement.argument : statement?.type === import_utils32.AST_NODE_TYPES.ExpressionStatement ? statement.expression : void 0;
+      if (selected?.type !== import_utils32.AST_NODE_TYPES.ConditionalExpression || !import_utils32.ASTUtils.hasSideEffect(selected.consequent, context.sourceCode) && !import_utils32.ASTUtils.hasSideEffect(selected.alternate, context.sourceCode)) return;
+      const identifier = testIdentifier(selected.test);
+      if (identifier !== void 0) report2(identifier);
     }
     return {
-      ...native,
+      FunctionDeclaration: inspectSingleStatementBody,
+      FunctionExpression: inspectSingleStatementBody,
+      ArrowFunctionExpression: inspectSingleStatementBody,
       ConditionalExpression(node) {
-        native.ConditionalExpression?.(node);
-        if (node.parent.type !== import_utils32.AST_NODE_TYPES.ArrowFunctionExpression || node.parent.body !== node || !import_utils32.ASTUtils.hasSideEffect(node.consequent, context.sourceCode) && !import_utils32.ASTUtils.hasSideEffect(node.alternate, context.sourceCode))
-          return;
+        if (node.parent.type !== import_utils32.AST_NODE_TYPES.ArrowFunctionExpression || node.parent.body !== node || !import_utils32.ASTUtils.hasSideEffect(node.consequent, context.sourceCode) && !import_utils32.ASTUtils.hasSideEffect(node.alternate, context.sourceCode)) return;
         const callable = node.parent;
         if (callable.parent.type === import_utils32.AST_NODE_TYPES.CallExpression && callable.parent.arguments.includes(callable) || callable.parent.type === import_utils32.AST_NODE_TYPES.JSXExpressionContainer)
           return;
@@ -5330,6 +5314,13 @@ var no_boolean_selector_parameter_default = createRule({
     };
   }
 });
+function preservesBlockObjectCallback(owner) {
+  const property = owner.parent;
+  if (property.type !== import_utils32.AST_NODE_TYPES.Property || property.computed) return false;
+  const key = property.key;
+  const name = key.type === import_utils32.AST_NODE_TYPES.Identifier ? key.name : key.type === import_utils32.AST_NODE_TYPES.Literal && typeof key.value === "string" ? key.value : void 0;
+  return name !== void 0 && /^on[A-Z]/u.test(name);
+}
 function testIdentifier(test) {
   const value = test.type === import_utils32.AST_NODE_TYPES.UnaryExpression && test.operator === "!" ? test.argument : test;
   return value.type === import_utils32.AST_NODE_TYPES.Identifier ? value : void 0;
@@ -32282,7 +32273,7 @@ var SOURCE_COUPLED_TEST_DOCUMENTATION = {
     "The rule follows stable lexical bindings, static source paths including JSX/TSX, CSS and HTML, awaited reads, and common text operations. Named imports of node:path/path join and resolve are followed when their complete trailing static path proves a source suffix. Reassigned bindings, dynamic trailing segments, namespace path wrappers, unknown path wrappers, iterator pipelines, and interprocedural flows remain unreported.",
     "Assertion roots are scope-resolved for supported test runners and Node assert imports; local or unknown helpers with assertion-like names are not inferred.",
     "Known fixture, golden, snapshot, and generated source paths are representation contracts and remain unreported; dot segments in the known path are normalized first.",
-    "Contained static paths beneath a stable native mkdtemp/mkdtempSync result are generated artifacts. Literal replace/replaceAll nonidentity guards comparing the same raw read remain unreported; fixed-string comparisons remain candidates.",
+    "Contained static paths, including stable nested join/resolve descendants, beneath a native mkdtemp/mkdtempSync result are generated artifacts. Absolute or drive-anchored resolve segments and traversal above the proven directory remain unproven. Literal replace/replaceAll nonidentity guards comparing the same raw read remain unreported; fixed-string comparisons remain candidates.",
     "When raw representation is genuinely the contract (for example a golden or compatibility sentinel), use an exact line suppression with the reason."
   ],
   examples: [
@@ -32325,6 +32316,16 @@ function stringValue(node) {
   }
   return null;
 }
+function relativePathDepth(normalized, initialDepth) {
+  let relativeDepth = initialDepth;
+  for (const part of normalized.split("/")) {
+    if (part === "..") {
+      if (relativeDepth === 0) return null;
+      relativeDepth -= 1;
+    } else if (part !== "" && part !== ".") relativeDepth += 1;
+  }
+  return relativeDepth;
+}
 function staticPathSuffix(pathArguments, builder) {
   const trailing = [];
   for (const argument of pathArguments.toReversed()) {
@@ -32450,20 +32451,27 @@ function createSourceCoupledRule(name, documentation, sourceSuffixRe) {
         }
         if (current.type !== import_utils169.AST_NODE_TYPES.CallExpression) return false;
         const callee = unwrap6(current.callee);
-        return callee.type === import_utils169.AST_NODE_TYPES.Identifier && ["mkdtemp", "mkdtempSync"].includes(nativeImportedName(callee, FS_MODULES) ?? "");
+        if (callee.type !== import_utils169.AST_NODE_TYPES.Identifier) return false;
+        if (["mkdtemp", "mkdtempSync"].includes(nativeImportedName(callee, FS_MODULES) ?? "")) return true;
+        const builder = nativePathBuilder(callee);
+        return builder !== null && temporaryDescendant(current, builder, depth + 1);
       };
-      const temporaryDescendant = (node, builder) => {
+      const temporaryDescendant = (node, builder, depth = 0) => {
+        if (depth > 8) return false;
         const [directory, ...segments] = node.arguments;
-        if (directory === void 0 || directory.type === import_utils169.AST_NODE_TYPES.SpreadElement || !temporaryDirectory(directory)) return false;
-        const values = [];
+        if (directory === void 0 || directory.type === import_utils169.AST_NODE_TYPES.SpreadElement || !temporaryDirectory(directory, depth)) return false;
+        let relativeDepth = 0;
         for (const segment of segments) {
           if (segment.type === import_utils169.AST_NODE_TYPES.SpreadElement) return false;
           const value = stringValue(segment);
           if (value === null) return false;
-          values.push(value.replaceAll("\\", "/"));
+          const normalized = value.replaceAll("\\", "/");
+          if (builder === "resolve" && (import_node_path3.posix.isAbsolute(normalized) || import_node_path3.win32.parse(normalized).root !== "")) return false;
+          const nextDepth = relativePathDepth(normalized, relativeDepth);
+          if (nextDepth === null) return false;
+          relativeDepth = nextDepth;
         }
-        const sentinel = "/__source_oracle_temporary_directory__";
-        return import_node_path3.posix[builder](sentinel, ...values).startsWith(`${sentinel}/`);
+        return relativeDepth > 0;
       };
       const sourcePathValue = (value) => {
         const normalized = import_node_path3.posix.normalize(value.replaceAll("\\", "/"));

package/dist/index.js

@@ -1533,7 +1533,7 @@ function isSearchParamReceiver(call, services) {
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.30.2",
+  version: "16.30.4",
   packageManager: "npm@12.2.1",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
@@ -1589,7 +1589,6 @@ var package_default = {
   dependencies: {
     "@typescript-eslint/typescript-estree": "^8.72.0",
     "@typescript-eslint/utils": "^8.72.0",
-    "eslint-plugin-sonarjs": "4.2.2",
     "jsonc-parser": "^3.3.1",
     "ts-api-utils": "2.5.0"
   },
@@ -4835,12 +4834,7 @@ function showWitness(value) {
 }
 
 // src/rules/no-boolean-selector-parameter.ts
-import {
-  AST_NODE_TYPES as AST_NODE_TYPES30,
-  ASTUtils as ASTUtils16,
-  ESLintUtils as ESLintUtils14
-} from "@typescript-eslint/utils";
-import { rules as sonarRules } from "eslint-plugin-sonarjs";
+import { AST_NODE_TYPES as AST_NODE_TYPES30, ASTUtils as ASTUtils16, ESLintUtils as ESLintUtils14 } from "@typescript-eslint/utils";
 
 // src/rules/_boolean-selector-contract.ts
 import { AST_NODE_TYPES as AST_NODE_TYPES28, ASTUtils as ASTUtils14 } from "@typescript-eslint/utils";
@@ -5168,7 +5162,6 @@ function literalCallers(sourceCode, owner, binding) {
 }
 
 // src/rules/no-boolean-selector-parameter.ts
-var UPSTREAM_SELECTOR_RULE = sonarRules["no-selector-parameter"];
 var NO_BOOLEAN_SELECTOR_PARAMETER_DOCUMENTATION = {
   summary: "Prefer intention-revealing operations over a boolean parameter selecting between actions.",
   rationale: "A positional boolean hides which operation a caller requests. Splitting independent actions can make that intent explicit, while boolean data, pure mappings and externally required callback or method contracts remain valid.",
@@ -5177,15 +5170,14 @@ var NO_BOOLEAN_SELECTOR_PARAMETER_DOCUMENTATION = {
   defaultLevel: "warning",
   autofix: "safe",
   limitations: [
-    "Requires type information. Adapts maintained SonarJS S2301 for single-statement if/else or conditional bodies and adds expression-bodied arrow conditionals. Only a direct broad-boolean parameter or its negation is considered; optional, nullable, literal-only, generic, destructured and indirect predicate conditions are excluded.",
+    "Requires type information. Checks an owned single-statement if/else, returned conditional or conditional expression statement, and expression-bodied arrow conditionals. Only a direct broad-boolean parameter or its negation is considered; optional, nullable, literal-only, generic, destructured and indirect predicate conditions are excluded.",
     "Preserves setters, pure mappings, selected pure data passed to one stable lexical operation or assigned to one simple target, independently authored callable and inherited member contracts, inline callbacks, and statically proven named callback references. Independent helpers remain checked in JSX files; callback identity is established from references rather than handler names.",
-    "The upstream block-body detector still exempts literal on[A-Z] object properties; the concise-arrow extension does not infer a callback contract from that name. Multi-statement bodies, short-circuit guards, local parameter aliases and arbitrary control flow are not inferred. Noncomputed property reads count as data without proving getter effects; computed reads remain outside that exemption, including literal keys. Side-effect detection does not prove whether a called function is pure, and a warning requires manual design review. Generated files are excluded; tests remain checked.",
+    "The block-body detector preserves the existing literal on[A-Z] object-property exemption; the concise-arrow extension does not infer a callback contract from that name. Multi-statement bodies, short-circuit guards, local parameter aliases and arbitrary control flow are not inferred. Noncomputed property reads count as data without proving getter effects; computed reads remain outside that exemption, including literal keys. Side-effect detection does not prove whether a called function is pure, and a warning requires manual design review. Generated files are excluded; tests remain checked.",
     "Automatic fixes only reuse two already authored private zero-argument ordinary operations returning primitive string literals. A complete comment-free four-declaration module must contain those operations, one private const broad-boolean arrow selecting their direct calls, and one exported zero-argument ordinary function with an explicit string-array return that calls the selector exclusively with literal true and false. Calls are routed to the existing named operations and the exclusively used selector declaration is removed. All other APIs, callbacks, dynamic arguments, contracts and operation bodies remain manual."
   ],
   references: [
     "https://understandlegacycode.com/blog/what-is-wrong-with-boolean-parameters/",
-    "https://martinfowler.com/bliki/FlagArgument.html",
-    "https://github.com/SonarSource/SonarJS/tree/master/packages/analysis/src/jsts/rules/S2301"
+    "https://martinfowler.com/bliki/FlagArgument.html"
   ],
   examples: [
     {
@@ -5275,38 +5267,26 @@ var no_boolean_selector_parameter_default = createRule({
         fix
       });
     }
-    function translate({ loc }) {
-      if (loc === void 0) return;
-      const position = "start" in loc ? loc.start : loc;
-      const identifier = context.sourceCode.getNodeByRangeIndex(
-        context.sourceCode.getIndexFromLoc(position)
-      );
-      if (identifier?.type === AST_NODE_TYPES30.Identifier) report2(identifier);
-    }
-    const nativeContext = Object.create(context, {
-      report: { value: translate }
-    });
-    const nativeArguments = [nativeContext];
-    const listeners = Reflect.apply(
-      UPSTREAM_SELECTOR_RULE.create.bind(UPSTREAM_SELECTOR_RULE),
-      void 0,
-      nativeArguments
-    );
-    const native = {};
-    if (typeof listeners !== "object" || listeners === null) return native;
-    for (const selector of Object.keys(listeners)) {
-      const listener = Reflect.get(listeners, selector);
-      if (typeof listener === "function")
-        native[selector] = (...nodes) => {
-          Reflect.apply(listener, void 0, nodes);
-        };
+    function inspectSingleStatementBody(owner) {
+      if (owner.body?.type !== AST_NODE_TYPES30.BlockStatement || owner.body.body.length !== 1 || preservesBlockObjectCallback(owner)) return;
+      const statement = owner.body.body[0];
+      if (statement?.type === AST_NODE_TYPES30.IfStatement) {
+        if (statement.alternate === null || !ASTUtils16.hasSideEffect(statement.consequent, context.sourceCode) && !ASTUtils16.hasSideEffect(statement.alternate, context.sourceCode)) return;
+        const identifier2 = testIdentifier(statement.test);
+        if (identifier2 !== void 0) report2(identifier2);
+        return;
+      }
+      const selected = statement?.type === AST_NODE_TYPES30.ReturnStatement ? statement.argument : statement?.type === AST_NODE_TYPES30.ExpressionStatement ? statement.expression : void 0;
+      if (selected?.type !== AST_NODE_TYPES30.ConditionalExpression || !ASTUtils16.hasSideEffect(selected.consequent, context.sourceCode) && !ASTUtils16.hasSideEffect(selected.alternate, context.sourceCode)) return;
+      const identifier = testIdentifier(selected.test);
+      if (identifier !== void 0) report2(identifier);
     }
     return {
-      ...native,
+      FunctionDeclaration: inspectSingleStatementBody,
+      FunctionExpression: inspectSingleStatementBody,
+      ArrowFunctionExpression: inspectSingleStatementBody,
       ConditionalExpression(node) {
-        native.ConditionalExpression?.(node);
-        if (node.parent.type !== AST_NODE_TYPES30.ArrowFunctionExpression || node.parent.body !== node || !ASTUtils16.hasSideEffect(node.consequent, context.sourceCode) && !ASTUtils16.hasSideEffect(node.alternate, context.sourceCode))
-          return;
+        if (node.parent.type !== AST_NODE_TYPES30.ArrowFunctionExpression || node.parent.body !== node || !ASTUtils16.hasSideEffect(node.consequent, context.sourceCode) && !ASTUtils16.hasSideEffect(node.alternate, context.sourceCode)) return;
         const callable = node.parent;
         if (callable.parent.type === AST_NODE_TYPES30.CallExpression && callable.parent.arguments.includes(callable) || callable.parent.type === AST_NODE_TYPES30.JSXExpressionContainer)
           return;
@@ -5316,6 +5296,13 @@ var no_boolean_selector_parameter_default = createRule({
     };
   }
 });
+function preservesBlockObjectCallback(owner) {
+  const property = owner.parent;
+  if (property.type !== AST_NODE_TYPES30.Property || property.computed) return false;
+  const key = property.key;
+  const name = key.type === AST_NODE_TYPES30.Identifier ? key.name : key.type === AST_NODE_TYPES30.Literal && typeof key.value === "string" ? key.value : void 0;
+  return name !== void 0 && /^on[A-Z]/u.test(name);
+}
 function testIdentifier(test) {
   const value = test.type === AST_NODE_TYPES30.UnaryExpression && test.operator === "!" ? test.argument : test;
   return value.type === AST_NODE_TYPES30.Identifier ? value : void 0;
@@ -32339,7 +32326,7 @@ function classMethodCounts(body3, methods) {
 }
 
 // src/rules/source-coupled-test.ts
-import { posix as posix2 } from "path";
+import { posix as posix2, win32 as win322 } from "path";
 import { AST_NODE_TYPES as AST_NODE_TYPES150, ASTUtils as ASTUtils98 } from "@typescript-eslint/utils";
 var GENERAL_SOURCE_SUFFIX_RE = /\.(?:bash|sh|ya?ml|jsonc|toml|py|css|html|[cm]?[jt]s|[jt]sx)$|(?<!\.(?:tf|tftest))\.json$/iu;
 var REPRESENTATION_DIR_RE = /(?:^|\/)(?:__fixtures__|fixtures?|goldens?|snapshots?)(?:\/|$)/iu;
@@ -32391,7 +32378,7 @@ var SOURCE_COUPLED_TEST_DOCUMENTATION = {
     "The rule follows stable lexical bindings, static source paths including JSX/TSX, CSS and HTML, awaited reads, and common text operations. Named imports of node:path/path join and resolve are followed when their complete trailing static path proves a source suffix. Reassigned bindings, dynamic trailing segments, namespace path wrappers, unknown path wrappers, iterator pipelines, and interprocedural flows remain unreported.",
     "Assertion roots are scope-resolved for supported test runners and Node assert imports; local or unknown helpers with assertion-like names are not inferred.",
     "Known fixture, golden, snapshot, and generated source paths are representation contracts and remain unreported; dot segments in the known path are normalized first.",
-    "Contained static paths beneath a stable native mkdtemp/mkdtempSync result are generated artifacts. Literal replace/replaceAll nonidentity guards comparing the same raw read remain unreported; fixed-string comparisons remain candidates.",
+    "Contained static paths, including stable nested join/resolve descendants, beneath a native mkdtemp/mkdtempSync result are generated artifacts. Absolute or drive-anchored resolve segments and traversal above the proven directory remain unproven. Literal replace/replaceAll nonidentity guards comparing the same raw read remain unreported; fixed-string comparisons remain candidates.",
     "When raw representation is genuinely the contract (for example a golden or compatibility sentinel), use an exact line suppression with the reason."
   ],
   examples: [
@@ -32434,6 +32421,16 @@ function stringValue(node) {
   }
   return null;
 }
+function relativePathDepth(normalized, initialDepth) {
+  let relativeDepth = initialDepth;
+  for (const part of normalized.split("/")) {
+    if (part === "..") {
+      if (relativeDepth === 0) return null;
+      relativeDepth -= 1;
+    } else if (part !== "" && part !== ".") relativeDepth += 1;
+  }
+  return relativeDepth;
+}
 function staticPathSuffix(pathArguments, builder) {
   const trailing = [];
   for (const argument of pathArguments.toReversed()) {
@@ -32559,20 +32556,27 @@ function createSourceCoupledRule(name, documentation, sourceSuffixRe) {
         }
         if (current.type !== AST_NODE_TYPES150.CallExpression) return false;
         const callee = unwrap6(current.callee);
-        return callee.type === AST_NODE_TYPES150.Identifier && ["mkdtemp", "mkdtempSync"].includes(nativeImportedName(callee, FS_MODULES) ?? "");
+        if (callee.type !== AST_NODE_TYPES150.Identifier) return false;
+        if (["mkdtemp", "mkdtempSync"].includes(nativeImportedName(callee, FS_MODULES) ?? "")) return true;
+        const builder = nativePathBuilder(callee);
+        return builder !== null && temporaryDescendant(current, builder, depth + 1);
       };
-      const temporaryDescendant = (node, builder) => {
+      const temporaryDescendant = (node, builder, depth = 0) => {
+        if (depth > 8) return false;
         const [directory, ...segments] = node.arguments;
-        if (directory === void 0 || directory.type === AST_NODE_TYPES150.SpreadElement || !temporaryDirectory(directory)) return false;
-        const values = [];
+        if (directory === void 0 || directory.type === AST_NODE_TYPES150.SpreadElement || !temporaryDirectory(directory, depth)) return false;
+        let relativeDepth = 0;
         for (const segment of segments) {
           if (segment.type === AST_NODE_TYPES150.SpreadElement) return false;
           const value = stringValue(segment);
           if (value === null) return false;
-          values.push(value.replaceAll("\\", "/"));
+          const normalized = value.replaceAll("\\", "/");
+          if (builder === "resolve" && (posix2.isAbsolute(normalized) || win322.parse(normalized).root !== "")) return false;
+          const nextDepth = relativePathDepth(normalized, relativeDepth);
+          if (nextDepth === null) return false;
+          relativeDepth = nextDepth;
         }
-        const sentinel = "/__source_oracle_temporary_directory__";
-        return posix2[builder](sentinel, ...values).startsWith(`${sentinel}/`);
+        return relativeDepth > 0;
       };
       const sourcePathValue = (value) => {
         const normalized = posix2.normalize(value.replaceAll("\\", "/"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sarj/eslint-plugin",
-  "version": "16.30.2",
+  "version": "16.30.4",
   "packageManager": "npm@12.2.1",
   "description": "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   "type": "module",
@@ -56,7 +56,6 @@
   "dependencies": {
     "@typescript-eslint/typescript-estree": "^8.72.0",
     "@typescript-eslint/utils": "^8.72.0",
-    "eslint-plugin-sonarjs": "4.2.2",
     "jsonc-parser": "^3.3.1",
     "ts-api-utils": "2.5.0"
   },