@sarj/eslint-plugin 16.4.4 → 16.4.6

package/dist/{_docs-XCw_6XV9.d.cts → _docs-B9LZ5Out.d.cts}

@@ -15,6 +15,11 @@ interface ExampleFile {
 }
 /** A reviewed example. It remains private unless `public: true` is explicit. */
 interface RuleExample {
+    readonly ruleOptions?: readonly unknown[];
+    readonly installedDependencies?: readonly {
+        readonly module: string;
+        readonly version: string;
+    }[];
     readonly id: string;
     readonly scenarioId?: string;
     readonly title: string;

package/dist/{_docs-XCw_6XV9.d.ts → _docs-B9LZ5Out.d.ts}

@@ -15,6 +15,11 @@ interface ExampleFile {
 }
 /** A reviewed example. It remains private unless `public: true` is explicit. */
 interface RuleExample {
+    readonly ruleOptions?: readonly unknown[];
+    readonly installedDependencies?: readonly {
+        readonly module: string;
+        readonly version: string;
+    }[];
     readonly id: string;
     readonly scenarioId?: string;
     readonly title: string;

package/dist/index.cjs

@@ -112,7 +112,7 @@ ${missing.join("\n")}`);
   });
 }
 function publicExample(example) {
-  return {
+  const copy = {
     id: example.id,
     scenarioId: example.scenarioId ?? "primary",
     title: example.title,
@@ -122,6 +122,9 @@ function publicExample(example) {
     expectedCount: example.expectedCount,
     fixedFiles: (example.fixedFiles ?? []).map(publicFile)
   };
+  if (example.ruleOptions !== void 0) copy.ruleOptions = example.ruleOptions;
+  if (example.installedDependencies !== void 0) copy.installedDependencies = example.installedDependencies.map(({ module: module2, version }) => ({ module: module2, version }));
+  return copy;
 }
 function publicFile(file) {
   return { path: file.path, source: file.source };
@@ -7193,7 +7196,7 @@ var import_utils43 = require("@typescript-eslint/utils");
 // src/rules/_zod.ts
 var ZOD_SCHEMA_NAME_RE = /Schema$|^Z[A-Z]/;
 function isZodModule(source) {
-  return /(^|[/@-])zod([/-]|$)/.test(source);
+  return source === "zod" || source.startsWith("zod/");
 }
 
 // src/rules/no-impossible-zod-literal-bounds.ts
@@ -7580,6 +7583,7 @@ var NO_REDUNDANT_OPTIONAL_ARRAY_DEFAULT_DOCUMENTATION = {
   autofix: "safe",
   limitations: [
     "Only syntactically local Zod array chains with adjacent `.optional().default(...)` calls are checked.",
+    "Imports must name the official zod package or its subpaths; relative modules and unproven npm aliases are excluded.",
     "String, scalar, tuple, set, record, aliased, composed, and dynamically constructed schemas are excluded.",
     "The reversed `.default(...).optional()` order is preserved because its outer optional can return undefined instead of the default.",
     "Defaults must be literal arrays or synchronous functions returning one literal array; dynamic or undefined fallbacks are excluded because Zod 3 reparses the fallback.",
@@ -7620,6 +7624,30 @@ var NO_REDUNDANT_OPTIONAL_ARRAY_DEFAULT_DOCUMENTATION = {
       focusPath: "src/schema.ts",
       expectedCount: 1,
       public: true
+    },
+    {
+      id: "unrelated-relative-builder",
+      title: "Preserve an unrelated builder in a directory named zod",
+      outcome: "no-match",
+      files: [
+        { path: "src/my-zod/index.ts", source: 'export const z = { string: () => "string", array: (_element: string) => ({ optional: () => ({ default: (value: readonly string[]) => ({ value, optional: true }) }), default: (value: readonly string[]) => ({ value, optional: false }) }) };' },
+        { path: "src/schema.ts", source: 'import { z } from "./my-zod/index.js"; export const Items = z.array(z.string()).optional().default([]);' }
+      ],
+      focusPath: "src/schema.ts",
+      expectedCount: 0,
+      public: true,
+      scenarioId: "module-identity"
+    },
+    {
+      id: "official-zod-subpath-array",
+      title: "Official Zod subpath constructors retain the safe fix",
+      outcome: "match",
+      files: [{ path: "src/schema.ts", source: 'import { array, string } from "zod/v4"; const Items = array(string()).optional().default([]);' }],
+      fixedFiles: [{ path: "src/schema.ts", source: 'import { array, string } from "zod/v4"; const Items = array(string()).default([]);' }],
+      focusPath: "src/schema.ts",
+      expectedCount: 1,
+      public: true,
+      scenarioId: "module-identity"
     }
   ]
 };
@@ -9687,8 +9715,8 @@ var NO_RESTRICTED_LIBRARY_LOAD_DOCUMENTATION = {
   category: "architecture",
   limitations: ["Only literal dynamic imports, unshadowed CommonJS loads/resolution calls, and runtime TypeScript import-equals declarations are checked; erased type imports are excluded. A configured restriction list is required."],
   examples: [
-    { id: "static-import", title: "Static imports remain the static-import rule's responsibility", outcome: "no-match", files: [{ path: "src/client.ts", source: "import axios from 'axios';" }], focusPath: "src/client.ts", expectedCount: 0, public: true },
-    { id: "runtime-load", title: "Do not load a restricted library at runtime", outcome: "match", files: [{ path: "src/client.ts", source: "const client = require('axios');" }], focusPath: "src/client.ts", expectedCount: 1, public: true }
+    { id: "static-import", title: "Static imports remain the static-import rule's responsibility", outcome: "no-match", files: [{ path: "src/client.ts", source: "import axios from 'axios';" }], focusPath: "src/client.ts", expectedCount: 0, public: true, ruleOptions: [{ libraries: [{ id: "LIB101", module: "axios", replacement: "Ky" }] }] },
+    { id: "runtime-load", title: "Do not load a restricted library at runtime", outcome: "match", files: [{ path: "src/client.ts", source: "const client = require('axios');" }], focusPath: "src/client.ts", expectedCount: 1, public: true, ruleOptions: [{ libraries: [{ id: "LIB101", module: "axios", replacement: "Ky" }] }] }
   ]
 };
 function staticModule(node) {
@@ -11832,8 +11860,8 @@ var NO_STORAGE_IN_STATELESS_MODULES_DOCUMENTATION = {
   category: "architecture",
   limitations: ["This opt-in architectural policy requires configured module paths and storage method names. Overloaded `put` requires storage-like receiver evidence; `prepare` requires SQL-shaped literal text or a conventional database receiver for dynamic text. These syntax heuristics do not prove database provenance or identify the system of record."],
   examples: [
-    { id: "system-of-record", title: "Read from the system of record", outcome: "no-match", files: [{ path: "src/engineer-digest/post.ts", source: "const issues = await linear.listIssues();" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 0, public: true },
-    { id: "private-storage", title: "Do not write private state in a stateless module", outcome: "match", files: [{ path: "src/engineer-digest/post.ts", source: "export {}; await kv.put('digest:last', timestamp);" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 1, public: true }
+    { id: "system-of-record", title: "Read from the system of record", outcome: "no-match", files: [{ path: "src/engineer-digest/post.ts", source: "const issues = await linear.listIssues();" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 0, public: true, ruleOptions: [{ modules: ["[\\\\/]engineer-digest[\\\\/]"] }] },
+    { id: "private-storage", title: "Do not write private state in a stateless module", outcome: "match", files: [{ path: "src/engineer-digest/post.ts", source: "export {}; await kv.put('digest:last', timestamp);" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 1, public: true, ruleOptions: [{ modules: ["[\\\\/]engineer-digest[\\\\/]"] }] }
   ]
 };
 function compile2(patterns) {
@@ -20993,7 +21021,8 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       ],
       focusPath: "src/row.ts",
       expectedCount: 0,
-      public: true
+      public: true,
+      installedDependencies: [{ module: "zod", version: "4.6.5" }]
     },
     {
       id: "hand-written-parsed-return",
@@ -21011,7 +21040,8 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       ],
       focusPath: "src/row.ts",
       expectedCount: 1,
-      public: true
+      public: true,
+      installedDependencies: [{ module: "zod", version: "4.6.5" }]
     }
   ]
 };
@@ -24284,7 +24314,7 @@ var RULES = {
 };
 var meta = {
   name: "@sarj/eslint-plugin",
-  version: "16.4.4"
+  version: "16.4.6"
 };
 var APPLICATION_ONLY_RULES = [];
 var LIBRARY_IMPORT_POLICY = ["error", {

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { D as DocumentedRule } from './_docs-XCw_6XV9.cjs';
-export { p as publicDocumentation } from './_docs-XCw_6XV9.cjs';
+import { D as DocumentedRule } from './_docs-B9LZ5Out.cjs';
+export { p as publicDocumentation } from './_docs-B9LZ5Out.cjs';
 import '@typescript-eslint/utils';
 
 /** @fileoverview _retired-rules — burned rule names and their migration action. */
@@ -314,7 +314,7 @@ declare const RECOMMENDED_RULES: {
     }];
     readonly "no-restricted-imports": readonly ["error", {
         readonly paths: {
-            name: "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "axios" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
+            name: "axios" | "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
             message: "Use the platform-native fetch API; review errors, timeouts, retries, and response parsing during migration." | "Standards standardizes date utilities on date-fns; migration is not API-compatible." | "Standards standardizes collection utilities on Remeda and native APIs." | "Use clsx for conditional class-name composition." | "Standards standardizes runtime validation on Zod; schemas are not drop-in compatible." | "Use jose; review key formats and async signing and verification APIs." | "Standards standardizes servers on Hono; Node deployments also need @hono/node-server." | "Standards standardizes tests on Vitest; review globals, timers, mocks, and environment setup." | "Use Vitest spies, mocks, and fake timers instead of Sinon." | "Standards standardizes command-line interfaces on citty." | "Use native Promise, adding p-limit or p-map only for the extensions actually needed." | "Prefer node:fs/promises; verify recursive removal, copy, path, and error semantics." | "Node 22 provides global AbortController." | "Use URLSearchParams and explicitly review repeated keys, escaping, arrays, and object coercion." | "Standards standardizes environment loading on @dotenvx/dotenvx." | "Use picocolors for terminal colors." | "The original faker package is abandoned; use @faker-js/faker." | "node-sass is end-of-life; use Dart Sass." | "TSLint is deprecated; use ESLint with typescript-eslint.";
         }[];
         readonly patterns: {
@@ -626,7 +626,7 @@ declare const STRICT_RULES: {
     }];
     readonly "no-restricted-imports": readonly ["error", {
         readonly paths: {
-            name: "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "axios" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
+            name: "axios" | "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
             message: "Use the platform-native fetch API; review errors, timeouts, retries, and response parsing during migration." | "Standards standardizes date utilities on date-fns; migration is not API-compatible." | "Standards standardizes collection utilities on Remeda and native APIs." | "Use clsx for conditional class-name composition." | "Standards standardizes runtime validation on Zod; schemas are not drop-in compatible." | "Use jose; review key formats and async signing and verification APIs." | "Standards standardizes servers on Hono; Node deployments also need @hono/node-server." | "Standards standardizes tests on Vitest; review globals, timers, mocks, and environment setup." | "Use Vitest spies, mocks, and fake timers instead of Sinon." | "Standards standardizes command-line interfaces on citty." | "Use native Promise, adding p-limit or p-map only for the extensions actually needed." | "Prefer node:fs/promises; verify recursive removal, copy, path, and error semantics." | "Node 22 provides global AbortController." | "Use URLSearchParams and explicitly review repeated keys, escaping, arrays, and object coercion." | "Standards standardizes environment loading on @dotenvx/dotenvx." | "Use picocolors for terminal colors." | "The original faker package is abandoned; use @faker-js/faker." | "node-sass is end-of-life; use Dart Sass." | "TSLint is deprecated; use ESLint with typescript-eslint.";
         }[];
         readonly patterns: {
@@ -927,7 +927,7 @@ type FlatPreset = {
 declare const PLUGIN: {
     readonly meta: {
         readonly name: "@sarj/eslint-plugin";
-        readonly version: "16.4.4";
+        readonly version: "16.4.6";
     };
     readonly rules: {
         readonly "require-explicit-contract-implementation": DocumentedRule<readonly [], "declareActualContract">;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DocumentedRule } from './_docs-XCw_6XV9.js';
-export { p as publicDocumentation } from './_docs-XCw_6XV9.js';
+import { D as DocumentedRule } from './_docs-B9LZ5Out.js';
+export { p as publicDocumentation } from './_docs-B9LZ5Out.js';
 import '@typescript-eslint/utils';
 
 /** @fileoverview _retired-rules — burned rule names and their migration action. */
@@ -314,7 +314,7 @@ declare const RECOMMENDED_RULES: {
     }];
     readonly "no-restricted-imports": readonly ["error", {
         readonly paths: {
-            name: "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "axios" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
+            name: "axios" | "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
             message: "Use the platform-native fetch API; review errors, timeouts, retries, and response parsing during migration." | "Standards standardizes date utilities on date-fns; migration is not API-compatible." | "Standards standardizes collection utilities on Remeda and native APIs." | "Use clsx for conditional class-name composition." | "Standards standardizes runtime validation on Zod; schemas are not drop-in compatible." | "Use jose; review key formats and async signing and verification APIs." | "Standards standardizes servers on Hono; Node deployments also need @hono/node-server." | "Standards standardizes tests on Vitest; review globals, timers, mocks, and environment setup." | "Use Vitest spies, mocks, and fake timers instead of Sinon." | "Standards standardizes command-line interfaces on citty." | "Use native Promise, adding p-limit or p-map only for the extensions actually needed." | "Prefer node:fs/promises; verify recursive removal, copy, path, and error semantics." | "Node 22 provides global AbortController." | "Use URLSearchParams and explicitly review repeated keys, escaping, arrays, and object coercion." | "Standards standardizes environment loading on @dotenvx/dotenvx." | "Use picocolors for terminal colors." | "The original faker package is abandoned; use @faker-js/faker." | "node-sass is end-of-life; use Dart Sass." | "TSLint is deprecated; use ESLint with typescript-eslint.";
         }[];
         readonly patterns: {
@@ -626,7 +626,7 @@ declare const STRICT_RULES: {
     }];
     readonly "no-restricted-imports": readonly ["error", {
         readonly paths: {
-            name: "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "axios" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
+            name: "axios" | "request" | "node-fetch" | "cross-fetch" | "isomorphic-fetch" | "moment" | "dayjs" | "lodash" | "lodash-es" | "underscore" | "classnames" | "joi" | "yup" | "superstruct" | "io-ts" | "runtypes" | "jsonwebtoken" | "express" | "koa" | "jest" | "mocha" | "sinon" | "commander" | "yargs" | "bluebird" | "rimraf" | "fs-extra" | "abort-controller" | "querystring" | "dotenv" | "chalk" | "faker" | "node-sass" | "tslint";
             message: "Use the platform-native fetch API; review errors, timeouts, retries, and response parsing during migration." | "Standards standardizes date utilities on date-fns; migration is not API-compatible." | "Standards standardizes collection utilities on Remeda and native APIs." | "Use clsx for conditional class-name composition." | "Standards standardizes runtime validation on Zod; schemas are not drop-in compatible." | "Use jose; review key formats and async signing and verification APIs." | "Standards standardizes servers on Hono; Node deployments also need @hono/node-server." | "Standards standardizes tests on Vitest; review globals, timers, mocks, and environment setup." | "Use Vitest spies, mocks, and fake timers instead of Sinon." | "Standards standardizes command-line interfaces on citty." | "Use native Promise, adding p-limit or p-map only for the extensions actually needed." | "Prefer node:fs/promises; verify recursive removal, copy, path, and error semantics." | "Node 22 provides global AbortController." | "Use URLSearchParams and explicitly review repeated keys, escaping, arrays, and object coercion." | "Standards standardizes environment loading on @dotenvx/dotenvx." | "Use picocolors for terminal colors." | "The original faker package is abandoned; use @faker-js/faker." | "node-sass is end-of-life; use Dart Sass." | "TSLint is deprecated; use ESLint with typescript-eslint.";
         }[];
         readonly patterns: {
@@ -927,7 +927,7 @@ type FlatPreset = {
 declare const PLUGIN: {
     readonly meta: {
         readonly name: "@sarj/eslint-plugin";
-        readonly version: "16.4.4";
+        readonly version: "16.4.6";
     };
     readonly rules: {
         readonly "require-explicit-contract-implementation": DocumentedRule<readonly [], "declareActualContract">;

package/dist/index.js

@@ -61,7 +61,7 @@ ${missing.join("\n")}`);
   });
 }
 function publicExample(example) {
-  return {
+  const copy = {
     id: example.id,
     scenarioId: example.scenarioId ?? "primary",
     title: example.title,
@@ -71,6 +71,9 @@ function publicExample(example) {
     expectedCount: example.expectedCount,
     fixedFiles: (example.fixedFiles ?? []).map(publicFile)
   };
+  if (example.ruleOptions !== void 0) copy.ruleOptions = example.ruleOptions;
+  if (example.installedDependencies !== void 0) copy.installedDependencies = example.installedDependencies.map(({ module, version }) => ({ module, version }));
+  return copy;
 }
 function publicFile(file) {
   return { path: file.path, source: file.source };
@@ -7167,7 +7170,7 @@ import {
 // src/rules/_zod.ts
 var ZOD_SCHEMA_NAME_RE = /Schema$|^Z[A-Z]/;
 function isZodModule(source) {
-  return /(^|[/@-])zod([/-]|$)/.test(source);
+  return source === "zod" || source.startsWith("zod/");
 }
 
 // src/rules/no-impossible-zod-literal-bounds.ts
@@ -7559,6 +7562,7 @@ var NO_REDUNDANT_OPTIONAL_ARRAY_DEFAULT_DOCUMENTATION = {
   autofix: "safe",
   limitations: [
     "Only syntactically local Zod array chains with adjacent `.optional().default(...)` calls are checked.",
+    "Imports must name the official zod package or its subpaths; relative modules and unproven npm aliases are excluded.",
     "String, scalar, tuple, set, record, aliased, composed, and dynamically constructed schemas are excluded.",
     "The reversed `.default(...).optional()` order is preserved because its outer optional can return undefined instead of the default.",
     "Defaults must be literal arrays or synchronous functions returning one literal array; dynamic or undefined fallbacks are excluded because Zod 3 reparses the fallback.",
@@ -7599,6 +7603,30 @@ var NO_REDUNDANT_OPTIONAL_ARRAY_DEFAULT_DOCUMENTATION = {
       focusPath: "src/schema.ts",
       expectedCount: 1,
       public: true
+    },
+    {
+      id: "unrelated-relative-builder",
+      title: "Preserve an unrelated builder in a directory named zod",
+      outcome: "no-match",
+      files: [
+        { path: "src/my-zod/index.ts", source: 'export const z = { string: () => "string", array: (_element: string) => ({ optional: () => ({ default: (value: readonly string[]) => ({ value, optional: true }) }), default: (value: readonly string[]) => ({ value, optional: false }) }) };' },
+        { path: "src/schema.ts", source: 'import { z } from "./my-zod/index.js"; export const Items = z.array(z.string()).optional().default([]);' }
+      ],
+      focusPath: "src/schema.ts",
+      expectedCount: 0,
+      public: true,
+      scenarioId: "module-identity"
+    },
+    {
+      id: "official-zod-subpath-array",
+      title: "Official Zod subpath constructors retain the safe fix",
+      outcome: "match",
+      files: [{ path: "src/schema.ts", source: 'import { array, string } from "zod/v4"; const Items = array(string()).optional().default([]);' }],
+      fixedFiles: [{ path: "src/schema.ts", source: 'import { array, string } from "zod/v4"; const Items = array(string()).default([]);' }],
+      focusPath: "src/schema.ts",
+      expectedCount: 1,
+      public: true,
+      scenarioId: "module-identity"
     }
   ]
 };
@@ -9671,8 +9699,8 @@ var NO_RESTRICTED_LIBRARY_LOAD_DOCUMENTATION = {
   category: "architecture",
   limitations: ["Only literal dynamic imports, unshadowed CommonJS loads/resolution calls, and runtime TypeScript import-equals declarations are checked; erased type imports are excluded. A configured restriction list is required."],
   examples: [
-    { id: "static-import", title: "Static imports remain the static-import rule's responsibility", outcome: "no-match", files: [{ path: "src/client.ts", source: "import axios from 'axios';" }], focusPath: "src/client.ts", expectedCount: 0, public: true },
-    { id: "runtime-load", title: "Do not load a restricted library at runtime", outcome: "match", files: [{ path: "src/client.ts", source: "const client = require('axios');" }], focusPath: "src/client.ts", expectedCount: 1, public: true }
+    { id: "static-import", title: "Static imports remain the static-import rule's responsibility", outcome: "no-match", files: [{ path: "src/client.ts", source: "import axios from 'axios';" }], focusPath: "src/client.ts", expectedCount: 0, public: true, ruleOptions: [{ libraries: [{ id: "LIB101", module: "axios", replacement: "Ky" }] }] },
+    { id: "runtime-load", title: "Do not load a restricted library at runtime", outcome: "match", files: [{ path: "src/client.ts", source: "const client = require('axios');" }], focusPath: "src/client.ts", expectedCount: 1, public: true, ruleOptions: [{ libraries: [{ id: "LIB101", module: "axios", replacement: "Ky" }] }] }
   ]
 };
 function staticModule(node) {
@@ -11816,8 +11844,8 @@ var NO_STORAGE_IN_STATELESS_MODULES_DOCUMENTATION = {
   category: "architecture",
   limitations: ["This opt-in architectural policy requires configured module paths and storage method names. Overloaded `put` requires storage-like receiver evidence; `prepare` requires SQL-shaped literal text or a conventional database receiver for dynamic text. These syntax heuristics do not prove database provenance or identify the system of record."],
   examples: [
-    { id: "system-of-record", title: "Read from the system of record", outcome: "no-match", files: [{ path: "src/engineer-digest/post.ts", source: "const issues = await linear.listIssues();" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 0, public: true },
-    { id: "private-storage", title: "Do not write private state in a stateless module", outcome: "match", files: [{ path: "src/engineer-digest/post.ts", source: "export {}; await kv.put('digest:last', timestamp);" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 1, public: true }
+    { id: "system-of-record", title: "Read from the system of record", outcome: "no-match", files: [{ path: "src/engineer-digest/post.ts", source: "const issues = await linear.listIssues();" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 0, public: true, ruleOptions: [{ modules: ["[\\\\/]engineer-digest[\\\\/]"] }] },
+    { id: "private-storage", title: "Do not write private state in a stateless module", outcome: "match", files: [{ path: "src/engineer-digest/post.ts", source: "export {}; await kv.put('digest:last', timestamp);" }], focusPath: "src/engineer-digest/post.ts", expectedCount: 1, public: true, ruleOptions: [{ modules: ["[\\\\/]engineer-digest[\\\\/]"] }] }
   ]
 };
 function compile2(patterns) {
@@ -21008,7 +21036,8 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       ],
       focusPath: "src/row.ts",
       expectedCount: 0,
-      public: true
+      public: true,
+      installedDependencies: [{ module: "zod", version: "4.6.5" }]
     },
     {
       id: "hand-written-parsed-return",
@@ -21026,7 +21055,8 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       ],
       focusPath: "src/row.ts",
       expectedCount: 1,
-      public: true
+      public: true,
+      installedDependencies: [{ module: "zod", version: "4.6.5" }]
     }
   ]
 };
@@ -24308,7 +24338,7 @@ var RULES = {
 };
 var meta = {
   name: "@sarj/eslint-plugin",
-  version: "16.4.4"
+  version: "16.4.6"
 };
 var APPLICATION_ONLY_RULES = [];
 var LIBRARY_IMPORT_POLICY = ["error", {

package/dist/rule-examples.cjs

@@ -38,7 +38,7 @@ var import_node_os = require("os");
 var import_node_path = require("path");
 var parser = __toESM(require("@typescript-eslint/parser"), 1);
 var import_eslint = require("eslint");
-async function verifyRuleExamples(rule) {
+async function verifyRuleExamples(rule, setup = {}) {
   const spec = rule.documentation;
   if (spec === void 0 || !spec.publicExamples.some((item) => item.outcome === "match") || !spec.publicExamples.some((item) => item.outcome === "no-match")) {
     throw new Error("rule requires documented public matching and non-matching examples");
@@ -51,6 +51,15 @@ async function verifyRuleExamples(rule) {
         await (0, import_promises.mkdir)((0, import_node_path.dirname)(path), { recursive: true });
         await (0, import_promises.writeFile)(path, file.source);
       }
+      for (const dependency of example.installedDependencies ?? []) {
+        if (setup.installedDependencyRoot === void 0) throw new Error(`${example.id}: explicit installed dependency root is required`);
+        const packageFile = fixturePath((0, import_node_path.resolve)(setup.installedDependencyRoot), `node_modules/${dependency.module}/package.json`);
+        const metadata = JSON.parse(await (0, import_promises.readFile)(packageFile, "utf8"));
+        if (typeof metadata !== "object" || metadata === null || !("name" in metadata) || !("version" in metadata) || metadata.name !== dependency.module || metadata.version !== dependency.version) throw new Error(`${example.id}: installed dependency identity/version mismatch for ${dependency.module}`);
+        const destination = fixturePath(root, `node_modules/${dependency.module}`);
+        await (0, import_promises.mkdir)((0, import_node_path.dirname)(destination), { recursive: true });
+        await (0, import_promises.symlink)((0, import_node_path.dirname)(packageFile), destination, process.platform === "win32" ? "junction" : "dir");
+      }
       const tsconfig = (0, import_node_path.join)(root, "tsconfig.json");
       if (!example.files.some((file) => file.path === "tsconfig.json")) {
         await (0, import_promises.writeFile)(tsconfig, JSON.stringify({ compilerOptions: {
@@ -68,10 +77,11 @@ async function verifyRuleExamples(rule) {
         files: ["**/*.{ts,tsx,js,jsx,mts,cts,mjs,cjs}"],
         languageOptions: { parser, parserOptions: { project: tsconfig, tsconfigRootDir: root } },
         plugins: { "@sarj": { rules: { [spec.ruleId]: rule } } },
-        rules: { [ruleId]: ["error", ...rule.defaultOptions ?? []] }
+        rules: { [ruleId]: ["error", ...example.ruleOptions ?? rule.defaultOptions ?? []] }
       };
       await verifyExample(new import_eslint.Linter({ cwd: root }), config, example, root, ruleId);
     } finally {
+      parser.clearCaches();
       await (0, import_promises.rm)(root, { recursive: true, force: true });
     }
   }

package/dist/rule-examples.d.cts

@@ -1,7 +1,9 @@
-import { D as DocumentedRule } from './_docs-XCw_6XV9.cjs';
+import { D as DocumentedRule } from './_docs-B9LZ5Out.cjs';
 import '@typescript-eslint/utils';
 
 /** Execute all authored examples, including private regressions, in isolated projects. */
-declare function verifyRuleExamples<Options extends readonly unknown[], MessageIds extends string>(rule: DocumentedRule<Options, MessageIds>): Promise<number>;
+declare function verifyRuleExamples<Options extends readonly unknown[], MessageIds extends string>(rule: DocumentedRule<Options, MessageIds>, setup?: {
+    readonly installedDependencyRoot?: string;
+}): Promise<number>;
 
 export { verifyRuleExamples };

package/dist/rule-examples.d.ts

@@ -1,7 +1,9 @@
-import { D as DocumentedRule } from './_docs-XCw_6XV9.js';
+import { D as DocumentedRule } from './_docs-B9LZ5Out.js';
 import '@typescript-eslint/utils';
 
 /** Execute all authored examples, including private regressions, in isolated projects. */
-declare function verifyRuleExamples<Options extends readonly unknown[], MessageIds extends string>(rule: DocumentedRule<Options, MessageIds>): Promise<number>;
+declare function verifyRuleExamples<Options extends readonly unknown[], MessageIds extends string>(rule: DocumentedRule<Options, MessageIds>, setup?: {
+    readonly installedDependencyRoot?: string;
+}): Promise<number>;
 
 export { verifyRuleExamples };

package/dist/rule-examples.js

@@ -1,10 +1,10 @@
 // src/verify-rule-examples.ts
-import { mkdtemp, mkdir, rm, writeFile } from "fs/promises";
+import { mkdtemp, mkdir, rm, writeFile, readFile, symlink } from "fs/promises";
 import { tmpdir } from "os";
 import { dirname, join, resolve, sep } from "path";
 import * as parser from "@typescript-eslint/parser";
 import { Linter } from "eslint";
-async function verifyRuleExamples(rule) {
+async function verifyRuleExamples(rule, setup = {}) {
   const spec = rule.documentation;
   if (spec === void 0 || !spec.publicExamples.some((item) => item.outcome === "match") || !spec.publicExamples.some((item) => item.outcome === "no-match")) {
     throw new Error("rule requires documented public matching and non-matching examples");
@@ -17,6 +17,15 @@ async function verifyRuleExamples(rule) {
         await mkdir(dirname(path), { recursive: true });
         await writeFile(path, file.source);
       }
+      for (const dependency of example.installedDependencies ?? []) {
+        if (setup.installedDependencyRoot === void 0) throw new Error(`${example.id}: explicit installed dependency root is required`);
+        const packageFile = fixturePath(resolve(setup.installedDependencyRoot), `node_modules/${dependency.module}/package.json`);
+        const metadata = JSON.parse(await readFile(packageFile, "utf8"));
+        if (typeof metadata !== "object" || metadata === null || !("name" in metadata) || !("version" in metadata) || metadata.name !== dependency.module || metadata.version !== dependency.version) throw new Error(`${example.id}: installed dependency identity/version mismatch for ${dependency.module}`);
+        const destination = fixturePath(root, `node_modules/${dependency.module}`);
+        await mkdir(dirname(destination), { recursive: true });
+        await symlink(dirname(packageFile), destination, process.platform === "win32" ? "junction" : "dir");
+      }
       const tsconfig = join(root, "tsconfig.json");
       if (!example.files.some((file) => file.path === "tsconfig.json")) {
         await writeFile(tsconfig, JSON.stringify({ compilerOptions: {
@@ -34,10 +43,11 @@ async function verifyRuleExamples(rule) {
         files: ["**/*.{ts,tsx,js,jsx,mts,cts,mjs,cjs}"],
         languageOptions: { parser, parserOptions: { project: tsconfig, tsconfigRootDir: root } },
         plugins: { "@sarj": { rules: { [spec.ruleId]: rule } } },
-        rules: { [ruleId]: ["error", ...rule.defaultOptions ?? []] }
+        rules: { [ruleId]: ["error", ...example.ruleOptions ?? rule.defaultOptions ?? []] }
       };
       await verifyExample(new Linter({ cwd: root }), config, example, root, ruleId);
     } finally {
+      parser.clearCaches();
       await rm(root, { recursive: true, force: true });
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sarj/eslint-plugin",
-  "version": "16.4.4",
+  "version": "16.4.6",
   "packageManager": "npm@12.1.0",
   "description": "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   "type": "module",