@sarj/eslint-plugin 16.31.0 → 16.32.1

package/dist/{_docs-DU-K223M.d.cts → _docs-Bq5OCcWF.d.cts}

@@ -14,8 +14,8 @@ interface ExampleFile {
     readonly source: string;
 }
 /** A reviewed example. It remains private unless `public: true` is explicit. */
-interface RuleExample {
-    readonly ruleOptions?: readonly unknown[];
+interface RuleExample<Options extends readonly unknown[] = readonly unknown[]> {
+    readonly ruleOptions?: Readonly<Options>;
     readonly installedDependencies?: readonly {
         readonly module: string;
         readonly version: string;
@@ -31,7 +31,7 @@ interface RuleExample {
     readonly fixedFiles?: readonly ExampleFile[];
 }
 /** Human-authored fields that cannot be derived from the ESLint rule module. */
-interface RuleDocumentation {
+interface RuleDocumentation<Options extends readonly unknown[] = readonly unknown[]> {
     readonly summary: string;
     readonly rationale: string;
     readonly remediation: string;
@@ -44,7 +44,7 @@ interface RuleDocumentation {
     readonly filePatterns?: readonly string[];
     readonly references?: readonly string[];
     readonly since?: string;
-    readonly examples?: readonly RuleExample[];
+    readonly examples?: readonly RuleExample<Options>[];
 }
 /** Complete native record exposed to catalog generation without changing ESLint metadata. */
 interface NativeRuleSpec extends Required<Omit<RuleDocumentation, "since">> {

package/dist/{_docs-DU-K223M.d.ts → _docs-Bq5OCcWF.d.ts}

@@ -14,8 +14,8 @@ interface ExampleFile {
     readonly source: string;
 }
 /** A reviewed example. It remains private unless `public: true` is explicit. */
-interface RuleExample {
-    readonly ruleOptions?: readonly unknown[];
+interface RuleExample<Options extends readonly unknown[] = readonly unknown[]> {
+    readonly ruleOptions?: Readonly<Options>;
     readonly installedDependencies?: readonly {
         readonly module: string;
         readonly version: string;
@@ -31,7 +31,7 @@ interface RuleExample {
     readonly fixedFiles?: readonly ExampleFile[];
 }
 /** Human-authored fields that cannot be derived from the ESLint rule module. */
-interface RuleDocumentation {
+interface RuleDocumentation<Options extends readonly unknown[] = readonly unknown[]> {
     readonly summary: string;
     readonly rationale: string;
     readonly remediation: string;
@@ -44,7 +44,7 @@ interface RuleDocumentation {
     readonly filePatterns?: readonly string[];
     readonly references?: readonly string[];
     readonly since?: string;
-    readonly examples?: readonly RuleExample[];
+    readonly examples?: readonly RuleExample<Options>[];
 }
 /** Complete native record exposed to catalog generation without changing ESLint metadata. */
 interface NativeRuleSpec extends Required<Omit<RuleDocumentation, "since">> {

package/dist/index.cjs

@@ -1580,7 +1580,7 @@ function isSearchParamReceiver(call, services) {
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.31.0",
+  version: "16.32.1",
   packageManager: "npm@12.2.1",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
@@ -1791,6 +1791,7 @@ function exactConstruction(node, consumer, implementation) {
 
 // src/rules/require-explicit-contract-implementation.ts
 var ESCAPED_CLASSES = /* @__PURE__ */ new WeakMap();
+var PROTOTYPE_MUTATIONS = /* @__PURE__ */ new WeakMap();
 var REQUIRE_EXPLICIT_CONTRACT_IMPLEMENTATION_DOCUMENTATION = {
   defaultLevel: "error",
   summary: "Require nominal inheritance when an injected abstract class is rejected by an instanceof guard.",
@@ -1855,6 +1856,8 @@ var REQUIRE_EXPLICIT_CONTRACT_IMPLEMENTATION_DOCUMENTATION = {
   ]
 };
 function hasPrototypeMutation(source) {
+  const cached = PROTOTYPE_MUTATIONS.get(source);
+  if (cached !== void 0) return cached;
   function visit(node) {
     const member3 = memberName(node);
     if (member3 === "setPrototypeOf" || member3 === "__proto__" || member3 === "hasInstance")
@@ -1863,7 +1866,9 @@ function hasPrototypeMutation(source) {
       return true;
     return ts9.forEachChild(node, visit);
   }
-  return visit(source) === true;
+  const mutated = visit(source) === true;
+  PROTOTYPE_MUTATIONS.set(source, mutated);
+  return mutated;
 }
 function memberName(node) {
   if (ts9.isPropertyAccessExpression(node)) return node.name.text;
@@ -4088,7 +4093,7 @@ var NO_INVALID_TYPED_MUTATION_DOCUMENTATION = {
   rationale: "Object.assign, Reflect.set and property descriptors accept values that a normal typed property assignment rejects. They can invalidate a domain object's contract while subsequent reads retain its original type.",
   remediation: "Use an assignment that satisfies the declared property type, or construct and validate a complete replacement. Preserve any deliberate construction or external compatibility contract; do not cast away the incompatibility.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "none",
   limitations: [
     "Requires type information and an explicitly annotated local const initialized with a plain own-data object literal. Only non-exported, stable bindings without escapes or nested captures qualify. Deletes and descriptors that can lock writability or configurability invalidate storage provenance. The closed non-union contract must declare the initialized data property; parameters, opaque constructors/factories, accessor, method, indexed, callable and unresolved generic targets are excluded.",
@@ -4482,7 +4487,7 @@ var NO_CONTRADICTORY_TYPE_PREDICATE_DOCUMENTATION = {
   rationale: "TypeScript trusts an explicit type predicate without verifying its implementation. A contradictory check can admit the wrong primitive, overclaim a closed literal or empty domain, accept null as a non-null object, or remove valid alternatives from the false branch.",
   remediation: "Match the predicate to every value the check accepts and rejects. Check literal membership for a closed domain and exclude null when promising a non-null object. Use a boolean return for an intentional value filter; preserve required public and callback contracts.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes replace the unsound predicate with boolean only for an unused private function declaration without overloads, exports, eval, comments in the predicate, or declaration-file ownership. Runtime checks are preserved; observed callable contracts remain manual.",
@@ -4804,7 +4809,7 @@ var NO_PARTIAL_TYPE_PREDICATE_DOCUMENTATION = {
   rationale: "Type predicates narrow both branches, and TypeScript trusts their implementation. A positive-number or non-empty-string predicate can return false for a value belonging to its promised type, causing callers to treat that value as a different type.",
   remediation: "Use a boolean return for an intentional value filter, or recognize every member of the promised type. Preserve required callback and public contracts; a refined domain may need a distinct validated type. Recheck false-branch callers when changing a predicate.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes replace the unsound predicate with boolean only for an unused private function declaration without overloads, exports, eval, comments in the predicate, or declaration-file ownership. Runtime checks are preserved; observed callable contracts remain manual.",
@@ -5490,7 +5495,7 @@ var NO_INVALID_ZOD_CUSTOM_PARSE_DOCUMENTATION = {
   rationale: "Without a validator, z.custom<T>() returns its input unchanged while promising T. A parsed primitive outside that value domain fabricates a contract the caller may trust.",
   remediation: "Provide actual validation, use the appropriate primitive schema, or retain an honest unknown result until validation. Preserve composed validators and independently owned domain contracts.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "none",
   limitations: [
     "Requires type information and a direct inline z.custom<T>().parse(primitiveLiteral) call with no custom validator or parse options. Recognizes runtime imports from zod or zod/v4 and native installed Zod v4 declarations; schema bindings, compositions, safeParse, dynamic inputs and indirect calls are excluded.",
@@ -5606,7 +5611,7 @@ var NO_CONTRADICTORY_OVERLOAD_RETURN_DOCUMENTATION = {
   rationale: "TypeScript checks an overload implementation against an overall envelope, without proving each input/result relationship. A function can compile while returning the opposite domain variant for every advertised literal input.",
   remediation: "Return the variant promised for each input. Prefer a checked case map or separate variant-specific operations when that makes the relationship explicit; retain overloads required by public APIs.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes align only an unused private complete same-file overload group with its existing literal implementation results. Binding aliases, exports, merges, eval, declaration files, comments, nonliteral result syntax and observed callers preserve manual ownership; runtime checks and returned values never change.",
@@ -33886,16 +33891,11 @@ var ADVISORY_RULES = [
   "@sarj/excessive-commentary",
   "@sarj/no-bespoke-api-case-conversion",
   "@sarj/no-boolean-selector-parameter",
-  "@sarj/no-contradictory-overload-return",
-  "@sarj/no-contradictory-type-predicate",
   "@sarj/no-cors-wildcard-with-credentials",
   "@sarj/no-credential-in-browser-storage",
   "@sarj/no-exception-text-in-5xx-response",
   "@sarj/no-excess-jsx-props",
-  "@sarj/no-invalid-typed-mutation",
-  "@sarj/no-invalid-zod-custom-parse",
   "@sarj/no-numeric-search-param-coercion",
-  "@sarj/no-partial-type-predicate",
   "@sarj/no-redundant-consumer-union",
   "@sarj/no-restated-comment",
   "@sarj/no-restated-jsdoc",
@@ -33921,12 +33921,12 @@ var RECOMMENDED_RULES = {
   "@sarj/no-broad-return-type": "error",
   "@sarj/no-reduce-accumulator-copy": "error",
   "@sarj/no-known-value-widening": "error",
-  "@sarj/no-invalid-typed-mutation": "warn",
-  "@sarj/no-contradictory-type-predicate": "warn",
-  "@sarj/no-partial-type-predicate": "warn",
+  "@sarj/no-invalid-typed-mutation": "error",
+  "@sarj/no-contradictory-type-predicate": "error",
+  "@sarj/no-partial-type-predicate": "error",
   "@sarj/no-boolean-selector-parameter": "warn",
-  "@sarj/no-invalid-zod-custom-parse": "warn",
-  "@sarj/no-contradictory-overload-return": "warn",
+  "@sarj/no-invalid-zod-custom-parse": "error",
+  "@sarj/no-contradictory-overload-return": "error",
   "@sarj/require-button-accessible-name": "error",
   "@sarj/require-camelcase-properties": "error",
   "@sarj/require-svg-accessible-name": "error",
@@ -34052,12 +34052,12 @@ var STRICT_RULES = {
   "@sarj/no-broad-return-type": "error",
   "@sarj/no-reduce-accumulator-copy": "error",
   "@sarj/no-known-value-widening": "error",
-  "@sarj/no-invalid-typed-mutation": "warn",
-  "@sarj/no-contradictory-type-predicate": "warn",
-  "@sarj/no-partial-type-predicate": "warn",
+  "@sarj/no-invalid-typed-mutation": "error",
+  "@sarj/no-contradictory-type-predicate": "error",
+  "@sarj/no-partial-type-predicate": "error",
   "@sarj/no-boolean-selector-parameter": "warn",
-  "@sarj/no-invalid-zod-custom-parse": "warn",
-  "@sarj/no-contradictory-overload-return": "warn",
+  "@sarj/no-invalid-zod-custom-parse": "error",
+  "@sarj/no-contradictory-overload-return": "error",
   "@sarj/require-button-accessible-name": "error",
   "@sarj/require-camelcase-properties": "error",
   "@sarj/require-svg-accessible-name": "error",

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { D as DocumentedRule } from './_docs-DU-K223M.cjs';
-export { p as publicDocumentation } from './_docs-DU-K223M.cjs';
+import { D as DocumentedRule } from './_docs-Bq5OCcWF.cjs';
+export { p as publicDocumentation } from './_docs-Bq5OCcWF.cjs';
 import '@typescript-eslint/utils';
 
 /** @fileoverview _retired-rules — burned rule names and their migration action. */
@@ -308,7 +308,7 @@ declare const RULES: {
 /** @deprecated All repositories use one policy; retained for import compatibility. */
 declare const APPLICATION_ONLY_RULES: readonly [];
 /** Rules staged as non-blocking warnings while corpus adoption evidence accumulates. */
-declare const ADVISORY_RULES: readonly ["@sarj/excessive-commentary", "@sarj/no-bespoke-api-case-conversion", "@sarj/no-boolean-selector-parameter", "@sarj/no-contradictory-overload-return", "@sarj/no-contradictory-type-predicate", "@sarj/no-cors-wildcard-with-credentials", "@sarj/no-credential-in-browser-storage", "@sarj/no-exception-text-in-5xx-response", "@sarj/no-excess-jsx-props", "@sarj/no-invalid-typed-mutation", "@sarj/no-invalid-zod-custom-parse", "@sarj/no-numeric-search-param-coercion", "@sarj/no-partial-type-predicate", "@sarj/no-redundant-consumer-union", "@sarj/no-restated-comment", "@sarj/no-restated-jsdoc", "@sarj/prefer-discriminated-union", "@sarj/prefer-millisecond-control-duration-schema", "@sarj/prefer-minimal-parameter-contract", "@sarj/prefer-module-level-refined-schema", "@sarj/prefer-native-fetch-in-server-actions", "@sarj/prefer-node-crypto-hash", "@sarj/prefer-node-fs-promises", "@sarj/prefer-shared-zod-enum", "@sarj/prefer-whole-object-assertion", "@sarj/prefer-zod-parse-output-type", "@sarj/require-sql-access-class"];
+declare const ADVISORY_RULES: readonly ["@sarj/excessive-commentary", "@sarj/no-bespoke-api-case-conversion", "@sarj/no-boolean-selector-parameter", "@sarj/no-cors-wildcard-with-credentials", "@sarj/no-credential-in-browser-storage", "@sarj/no-exception-text-in-5xx-response", "@sarj/no-excess-jsx-props", "@sarj/no-numeric-search-param-coercion", "@sarj/no-redundant-consumer-union", "@sarj/no-restated-comment", "@sarj/no-restated-jsdoc", "@sarj/prefer-discriminated-union", "@sarj/prefer-millisecond-control-duration-schema", "@sarj/prefer-minimal-parameter-contract", "@sarj/prefer-module-level-refined-schema", "@sarj/prefer-native-fetch-in-server-actions", "@sarj/prefer-node-crypto-hash", "@sarj/prefer-node-fs-promises", "@sarj/prefer-shared-zod-enum", "@sarj/prefer-whole-object-assertion", "@sarj/prefer-zod-parse-output-type", "@sarj/require-sql-access-class"];
 declare const RECOMMENDED_RULES: {
     readonly "@sarj/no-excess-jsx-props": "warn";
     readonly "@sarj/no-redundant-consumer-union": "warn";
@@ -319,12 +319,12 @@ declare const RECOMMENDED_RULES: {
     readonly "@sarj/no-broad-return-type": "error";
     readonly "@sarj/no-reduce-accumulator-copy": "error";
     readonly "@sarj/no-known-value-widening": "error";
-    readonly "@sarj/no-invalid-typed-mutation": "warn";
-    readonly "@sarj/no-contradictory-type-predicate": "warn";
-    readonly "@sarj/no-partial-type-predicate": "warn";
+    readonly "@sarj/no-invalid-typed-mutation": "error";
+    readonly "@sarj/no-contradictory-type-predicate": "error";
+    readonly "@sarj/no-partial-type-predicate": "error";
     readonly "@sarj/no-boolean-selector-parameter": "warn";
-    readonly "@sarj/no-invalid-zod-custom-parse": "warn";
-    readonly "@sarj/no-contradictory-overload-return": "warn";
+    readonly "@sarj/no-invalid-zod-custom-parse": "error";
+    readonly "@sarj/no-contradictory-overload-return": "error";
     readonly "@sarj/require-button-accessible-name": "error";
     readonly "@sarj/require-camelcase-properties": "error";
     readonly "@sarj/require-svg-accessible-name": "error";
@@ -645,12 +645,12 @@ declare const STRICT_RULES: {
     readonly "@sarj/no-broad-return-type": "error";
     readonly "@sarj/no-reduce-accumulator-copy": "error";
     readonly "@sarj/no-known-value-widening": "error";
-    readonly "@sarj/no-invalid-typed-mutation": "warn";
-    readonly "@sarj/no-contradictory-type-predicate": "warn";
-    readonly "@sarj/no-partial-type-predicate": "warn";
+    readonly "@sarj/no-invalid-typed-mutation": "error";
+    readonly "@sarj/no-contradictory-type-predicate": "error";
+    readonly "@sarj/no-partial-type-predicate": "error";
     readonly "@sarj/no-boolean-selector-parameter": "warn";
-    readonly "@sarj/no-invalid-zod-custom-parse": "warn";
-    readonly "@sarj/no-contradictory-overload-return": "warn";
+    readonly "@sarj/no-invalid-zod-custom-parse": "error";
+    readonly "@sarj/no-contradictory-overload-return": "error";
     readonly "@sarj/require-button-accessible-name": "error";
     readonly "@sarj/require-camelcase-properties": "error";
     readonly "@sarj/require-svg-accessible-name": "error";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DocumentedRule } from './_docs-DU-K223M.js';
-export { p as publicDocumentation } from './_docs-DU-K223M.js';
+import { D as DocumentedRule } from './_docs-Bq5OCcWF.js';
+export { p as publicDocumentation } from './_docs-Bq5OCcWF.js';
 import '@typescript-eslint/utils';
 
 /** @fileoverview _retired-rules — burned rule names and their migration action. */
@@ -308,7 +308,7 @@ declare const RULES: {
 /** @deprecated All repositories use one policy; retained for import compatibility. */
 declare const APPLICATION_ONLY_RULES: readonly [];
 /** Rules staged as non-blocking warnings while corpus adoption evidence accumulates. */
-declare const ADVISORY_RULES: readonly ["@sarj/excessive-commentary", "@sarj/no-bespoke-api-case-conversion", "@sarj/no-boolean-selector-parameter", "@sarj/no-contradictory-overload-return", "@sarj/no-contradictory-type-predicate", "@sarj/no-cors-wildcard-with-credentials", "@sarj/no-credential-in-browser-storage", "@sarj/no-exception-text-in-5xx-response", "@sarj/no-excess-jsx-props", "@sarj/no-invalid-typed-mutation", "@sarj/no-invalid-zod-custom-parse", "@sarj/no-numeric-search-param-coercion", "@sarj/no-partial-type-predicate", "@sarj/no-redundant-consumer-union", "@sarj/no-restated-comment", "@sarj/no-restated-jsdoc", "@sarj/prefer-discriminated-union", "@sarj/prefer-millisecond-control-duration-schema", "@sarj/prefer-minimal-parameter-contract", "@sarj/prefer-module-level-refined-schema", "@sarj/prefer-native-fetch-in-server-actions", "@sarj/prefer-node-crypto-hash", "@sarj/prefer-node-fs-promises", "@sarj/prefer-shared-zod-enum", "@sarj/prefer-whole-object-assertion", "@sarj/prefer-zod-parse-output-type", "@sarj/require-sql-access-class"];
+declare const ADVISORY_RULES: readonly ["@sarj/excessive-commentary", "@sarj/no-bespoke-api-case-conversion", "@sarj/no-boolean-selector-parameter", "@sarj/no-cors-wildcard-with-credentials", "@sarj/no-credential-in-browser-storage", "@sarj/no-exception-text-in-5xx-response", "@sarj/no-excess-jsx-props", "@sarj/no-numeric-search-param-coercion", "@sarj/no-redundant-consumer-union", "@sarj/no-restated-comment", "@sarj/no-restated-jsdoc", "@sarj/prefer-discriminated-union", "@sarj/prefer-millisecond-control-duration-schema", "@sarj/prefer-minimal-parameter-contract", "@sarj/prefer-module-level-refined-schema", "@sarj/prefer-native-fetch-in-server-actions", "@sarj/prefer-node-crypto-hash", "@sarj/prefer-node-fs-promises", "@sarj/prefer-shared-zod-enum", "@sarj/prefer-whole-object-assertion", "@sarj/prefer-zod-parse-output-type", "@sarj/require-sql-access-class"];
 declare const RECOMMENDED_RULES: {
     readonly "@sarj/no-excess-jsx-props": "warn";
     readonly "@sarj/no-redundant-consumer-union": "warn";
@@ -319,12 +319,12 @@ declare const RECOMMENDED_RULES: {
     readonly "@sarj/no-broad-return-type": "error";
     readonly "@sarj/no-reduce-accumulator-copy": "error";
     readonly "@sarj/no-known-value-widening": "error";
-    readonly "@sarj/no-invalid-typed-mutation": "warn";
-    readonly "@sarj/no-contradictory-type-predicate": "warn";
-    readonly "@sarj/no-partial-type-predicate": "warn";
+    readonly "@sarj/no-invalid-typed-mutation": "error";
+    readonly "@sarj/no-contradictory-type-predicate": "error";
+    readonly "@sarj/no-partial-type-predicate": "error";
     readonly "@sarj/no-boolean-selector-parameter": "warn";
-    readonly "@sarj/no-invalid-zod-custom-parse": "warn";
-    readonly "@sarj/no-contradictory-overload-return": "warn";
+    readonly "@sarj/no-invalid-zod-custom-parse": "error";
+    readonly "@sarj/no-contradictory-overload-return": "error";
     readonly "@sarj/require-button-accessible-name": "error";
     readonly "@sarj/require-camelcase-properties": "error";
     readonly "@sarj/require-svg-accessible-name": "error";
@@ -645,12 +645,12 @@ declare const STRICT_RULES: {
     readonly "@sarj/no-broad-return-type": "error";
     readonly "@sarj/no-reduce-accumulator-copy": "error";
     readonly "@sarj/no-known-value-widening": "error";
-    readonly "@sarj/no-invalid-typed-mutation": "warn";
-    readonly "@sarj/no-contradictory-type-predicate": "warn";
-    readonly "@sarj/no-partial-type-predicate": "warn";
+    readonly "@sarj/no-invalid-typed-mutation": "error";
+    readonly "@sarj/no-contradictory-type-predicate": "error";
+    readonly "@sarj/no-partial-type-predicate": "error";
     readonly "@sarj/no-boolean-selector-parameter": "warn";
-    readonly "@sarj/no-invalid-zod-custom-parse": "warn";
-    readonly "@sarj/no-contradictory-overload-return": "warn";
+    readonly "@sarj/no-invalid-zod-custom-parse": "error";
+    readonly "@sarj/no-contradictory-overload-return": "error";
     readonly "@sarj/require-button-accessible-name": "error";
     readonly "@sarj/require-camelcase-properties": "error";
     readonly "@sarj/require-svg-accessible-name": "error";

package/dist/index.js

@@ -1533,7 +1533,7 @@ function isSearchParamReceiver(call, services) {
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.31.0",
+  version: "16.32.1",
   packageManager: "npm@12.2.1",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
@@ -1750,6 +1750,7 @@ function exactConstruction(node, consumer, implementation) {
 
 // src/rules/require-explicit-contract-implementation.ts
 var ESCAPED_CLASSES = /* @__PURE__ */ new WeakMap();
+var PROTOTYPE_MUTATIONS = /* @__PURE__ */ new WeakMap();
 var REQUIRE_EXPLICIT_CONTRACT_IMPLEMENTATION_DOCUMENTATION = {
   defaultLevel: "error",
   summary: "Require nominal inheritance when an injected abstract class is rejected by an instanceof guard.",
@@ -1814,6 +1815,8 @@ var REQUIRE_EXPLICIT_CONTRACT_IMPLEMENTATION_DOCUMENTATION = {
   ]
 };
 function hasPrototypeMutation(source) {
+  const cached = PROTOTYPE_MUTATIONS.get(source);
+  if (cached !== void 0) return cached;
   function visit(node) {
     const member3 = memberName(node);
     if (member3 === "setPrototypeOf" || member3 === "__proto__" || member3 === "hasInstance")
@@ -1822,7 +1825,9 @@ function hasPrototypeMutation(source) {
       return true;
     return ts9.forEachChild(node, visit);
   }
-  return visit(source) === true;
+  const mutated = visit(source) === true;
+  PROTOTYPE_MUTATIONS.set(source, mutated);
+  return mutated;
 }
 function memberName(node) {
   if (ts9.isPropertyAccessExpression(node)) return node.name.text;
@@ -4067,7 +4072,7 @@ var NO_INVALID_TYPED_MUTATION_DOCUMENTATION = {
   rationale: "Object.assign, Reflect.set and property descriptors accept values that a normal typed property assignment rejects. They can invalidate a domain object's contract while subsequent reads retain its original type.",
   remediation: "Use an assignment that satisfies the declared property type, or construct and validate a complete replacement. Preserve any deliberate construction or external compatibility contract; do not cast away the incompatibility.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "none",
   limitations: [
     "Requires type information and an explicitly annotated local const initialized with a plain own-data object literal. Only non-exported, stable bindings without escapes or nested captures qualify. Deletes and descriptors that can lock writability or configurability invalidate storage provenance. The closed non-union contract must declare the initialized data property; parameters, opaque constructors/factories, accessor, method, indexed, callable and unresolved generic targets are excluded.",
@@ -4461,7 +4466,7 @@ var NO_CONTRADICTORY_TYPE_PREDICATE_DOCUMENTATION = {
   rationale: "TypeScript trusts an explicit type predicate without verifying its implementation. A contradictory check can admit the wrong primitive, overclaim a closed literal or empty domain, accept null as a non-null object, or remove valid alternatives from the false branch.",
   remediation: "Match the predicate to every value the check accepts and rejects. Check literal membership for a closed domain and exclude null when promising a non-null object. Use a boolean return for an intentional value filter; preserve required public and callback contracts.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes replace the unsound predicate with boolean only for an unused private function declaration without overloads, exports, eval, comments in the predicate, or declaration-file ownership. Runtime checks are preserved; observed callable contracts remain manual.",
@@ -4783,7 +4788,7 @@ var NO_PARTIAL_TYPE_PREDICATE_DOCUMENTATION = {
   rationale: "Type predicates narrow both branches, and TypeScript trusts their implementation. A positive-number or non-empty-string predicate can return false for a value belonging to its promised type, causing callers to treat that value as a different type.",
   remediation: "Use a boolean return for an intentional value filter, or recognize every member of the promised type. Preserve required callback and public contracts; a refined domain may need a distinct validated type. Recheck false-branch callers when changing a predicate.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes replace the unsound predicate with boolean only for an unused private function declaration without overloads, exports, eval, comments in the predicate, or declaration-file ownership. Runtime checks are preserved; observed callable contracts remain manual.",
@@ -5472,7 +5477,7 @@ var NO_INVALID_ZOD_CUSTOM_PARSE_DOCUMENTATION = {
   rationale: "Without a validator, z.custom<T>() returns its input unchanged while promising T. A parsed primitive outside that value domain fabricates a contract the caller may trust.",
   remediation: "Provide actual validation, use the appropriate primitive schema, or retain an honest unknown result until validation. Preserve composed validators and independently owned domain contracts.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "none",
   limitations: [
     "Requires type information and a direct inline z.custom<T>().parse(primitiveLiteral) call with no custom validator or parse options. Recognizes runtime imports from zod or zod/v4 and native installed Zod v4 declarations; schema bindings, compositions, safeParse, dynamic inputs and indirect calls are excluded.",
@@ -5588,7 +5593,7 @@ var NO_CONTRADICTORY_OVERLOAD_RETURN_DOCUMENTATION = {
   rationale: "TypeScript checks an overload implementation against an overall envelope, without proving each input/result relationship. A function can compile while returning the opposite domain variant for every advertised literal input.",
   remediation: "Return the variant promised for each input. Prefer a checked case map or separate variant-specific operations when that makes the relationship explicit; retain overloads required by public APIs.",
   category: "correctness",
-  defaultLevel: "warning",
+  defaultLevel: "error",
   autofix: "safe",
   limitations: [
     "Automatic fixes align only an unused private complete same-file overload group with its existing literal implementation results. Binding aliases, exports, merges, eval, declaration files, comments, nonliteral result syntax and observed callers preserve manual ownership; runtime checks and returned values never change.",
@@ -33994,16 +33999,11 @@ var ADVISORY_RULES = [
   "@sarj/excessive-commentary",
   "@sarj/no-bespoke-api-case-conversion",
   "@sarj/no-boolean-selector-parameter",
-  "@sarj/no-contradictory-overload-return",
-  "@sarj/no-contradictory-type-predicate",
   "@sarj/no-cors-wildcard-with-credentials",
   "@sarj/no-credential-in-browser-storage",
   "@sarj/no-exception-text-in-5xx-response",
   "@sarj/no-excess-jsx-props",
-  "@sarj/no-invalid-typed-mutation",
-  "@sarj/no-invalid-zod-custom-parse",
   "@sarj/no-numeric-search-param-coercion",
-  "@sarj/no-partial-type-predicate",
   "@sarj/no-redundant-consumer-union",
   "@sarj/no-restated-comment",
   "@sarj/no-restated-jsdoc",
@@ -34029,12 +34029,12 @@ var RECOMMENDED_RULES = {
   "@sarj/no-broad-return-type": "error",
   "@sarj/no-reduce-accumulator-copy": "error",
   "@sarj/no-known-value-widening": "error",
-  "@sarj/no-invalid-typed-mutation": "warn",
-  "@sarj/no-contradictory-type-predicate": "warn",
-  "@sarj/no-partial-type-predicate": "warn",
+  "@sarj/no-invalid-typed-mutation": "error",
+  "@sarj/no-contradictory-type-predicate": "error",
+  "@sarj/no-partial-type-predicate": "error",
   "@sarj/no-boolean-selector-parameter": "warn",
-  "@sarj/no-invalid-zod-custom-parse": "warn",
-  "@sarj/no-contradictory-overload-return": "warn",
+  "@sarj/no-invalid-zod-custom-parse": "error",
+  "@sarj/no-contradictory-overload-return": "error",
   "@sarj/require-button-accessible-name": "error",
   "@sarj/require-camelcase-properties": "error",
   "@sarj/require-svg-accessible-name": "error",
@@ -34160,12 +34160,12 @@ var STRICT_RULES = {
   "@sarj/no-broad-return-type": "error",
   "@sarj/no-reduce-accumulator-copy": "error",
   "@sarj/no-known-value-widening": "error",
-  "@sarj/no-invalid-typed-mutation": "warn",
-  "@sarj/no-contradictory-type-predicate": "warn",
-  "@sarj/no-partial-type-predicate": "warn",
+  "@sarj/no-invalid-typed-mutation": "error",
+  "@sarj/no-contradictory-type-predicate": "error",
+  "@sarj/no-partial-type-predicate": "error",
   "@sarj/no-boolean-selector-parameter": "warn",
-  "@sarj/no-invalid-zod-custom-parse": "warn",
-  "@sarj/no-contradictory-overload-return": "warn",
+  "@sarj/no-invalid-zod-custom-parse": "error",
+  "@sarj/no-contradictory-overload-return": "error",
   "@sarj/require-button-accessible-name": "error",
   "@sarj/require-camelcase-properties": "error",
   "@sarj/require-svg-accessible-name": "error",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sarj/eslint-plugin",
-  "version": "16.31.0",
+  "version": "16.32.1",
   "packageManager": "npm@12.2.1",
   "description": "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   "type": "module",