@sarj/eslint-plugin 16.9.0 → 16.11.0

package/dist/index.cjs

@@ -52,8 +52,8 @@ module.exports = __toCommonJS(src_exports);
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.9.0",
-  packageManager: "npm@12.1.0",
+  version: "16.11.0",
+  packageManager: "npm@12.2.0",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
   main: "./dist/index.cjs",
@@ -106,48 +106,49 @@ var package_default = {
   author: "sarj-ai",
   license: "MIT",
   dependencies: {
-    "@typescript-eslint/typescript-estree": "^8.70.1",
-    "@typescript-eslint/utils": "^8.70.1",
+    "@typescript-eslint/typescript-estree": "^8.71.2",
+    "@typescript-eslint/utils": "^8.71.2",
     "jsonc-parser": "^3.3.1"
   },
   devDependencies: {
     "@eslint-community/eslint-plugin-eslint-comments": "^4.8.1",
     "@eslint/compat": "^2.1.1",
     "@eslint/js": "10.0.1",
-    "@shadcn/lint": "0.2.0",
-    "@types/node": "26.6.2",
-    "@typescript-eslint/parser": "8.70.1",
-    "@typescript-eslint/rule-tester": "8.70.1",
-    "@typescript-eslint/utils": "8.70.1",
+    "@shadcn/lint": "0.2.1",
+    "@types/node": "26.6.5",
+    "@typescript-eslint/parser": "8.71.2",
+    "@typescript-eslint/rule-tester": "8.71.2",
+    "@typescript-eslint/utils": "8.71.2",
     "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/eslint-plugin": "1.6.27",
-    eslint: "10.11.0",
-    "eslint-node-test": "0.4.0",
-    "eslint-plugin-better-tailwindcss": "^4.7.0",
-    "eslint-plugin-jest": "29.16.6",
-    "eslint-plugin-jsdoc": "64.5.4",
-    "eslint-plugin-n": "^18.3.0",
+    eslint: "10.12.0",
+    "eslint-node-test": "1.0.1",
+    "eslint-plugin-better-tailwindcss": "^4.9.0",
+    "eslint-plugin-jest": "29.17.0",
+    "eslint-plugin-jsdoc": "65.3.1",
+    "eslint-plugin-n": "^18.4.1",
     "eslint-plugin-perfectionist": "5.12.1",
-    "eslint-plugin-playwright": "2.12.0",
+    "eslint-plugin-playwright": "2.12.1",
     "eslint-plugin-promise": "^7.3.0",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-simple-import-sort": "^14.0.0",
     "eslint-plugin-testing-library": "7.16.2",
-    "eslint-plugin-unicorn": "^76.0.0",
-    "eslint-plugin-zod": "^4.14.2",
-    globals: "15.15.0",
-    tsup: "latest",
+    "eslint-plugin-unicorn": "^78.0.0",
+    "eslint-plugin-zod": "^5.0.1",
+    globals: "17.13.0",
+    tsup: "8.5.1",
     typescript: "npm:@typescript/typescript6@6.0.2",
-    "typescript-eslint": "^8.70.1",
-    vitest: "5.0.1"
+    "typescript-eslint": "^8.71.2",
+    vitest: "5.0.4",
+    zod: "4.6.7"
   },
   peerDependencies: {
     eslint: ">=9.39.4",
     typescript: ">=5.0.0"
   },
   engines: {
-    node: ">=22.22.2"
+    node: "^22.22.2 || >=24.15.0"
   },
   allowScripts: {
     "esbuild@0.28.2": true,
@@ -159,12 +160,12 @@ var package_default = {
     }
   },
   overrides: {
-    "brace-expansion@^5.0.0": "5.0.9",
+    "brace-expansion@^5.0.0": "5.0.12",
     esbuild: "0.28.2",
-    "nanoid@<3.3.18": "3.3.18",
     "eslint-plugin-react": {
       eslint: "$eslint"
-    }
+    },
+    "nanoid@<3.3.20": "3.3.20"
   }
 };
 
@@ -7705,7 +7706,8 @@ var NO_IMPOSSIBLE_ZOD_LITERAL_BOUNDS_DOCUMENTATION = {
   remediation: "Choose compatible lower and upper bounds, or remove the constraint that does not express the intended domain.",
   category: "correctness",
   limitations: [
-    "Only finite numeric literals in a single number, string, or array schema chain are compared; explicit int() chains also require an admitted integer.",
+    "Only finite numeric literals in a single schema chain are compared; number().int(), int(), int32(), uint32(), strings and arrays require an admitted integer value or length.",
+    "int32() and uint32() include their intrinsic ranges. The managed preset delegates explicit real-bound conflicts to upstream zod/no-conflicting-checks to avoid duplicate findings.",
     "Integer-domain comparisons abstain near the JavaScript safe-integer boundary.",
     "Chains with dynamic bounds, non-bound validators, transforms, pipes, or preprocessors are skipped.",
     "Test and generated files are excluded."
@@ -7741,7 +7743,14 @@ var NO_IMPOSSIBLE_ZOD_LITERAL_BOUNDS_DOCUMENTATION = {
     }
   ]
 };
-var KINDS = /* @__PURE__ */ new Set(["array", "number", "string"]);
+var KINDS = /* @__PURE__ */ new Map([
+  ["array", "array"],
+  ["number", "number"],
+  ["string", "string"],
+  ["int", "integer"],
+  ["int32", "int32"],
+  ["uint32", "uint32"]
+]);
 var NUMBER_METHODS = /* @__PURE__ */ new Set([
   "gt",
   "gte",
@@ -7787,11 +7796,14 @@ function strongerUpper(current, candidate2) {
   }
   return current;
 }
+function isRealEmpty(lower, upper) {
+  if (lower === null || upper === null) return false;
+  return lower.value > upper.value || lower.value === upper.value && (lower.exclusive || upper.exclusive);
+}
 function isEmpty(lower, upper, integer) {
   if (lower === null || upper === null) return false;
-  const realEmpty = lower.value > upper.value || lower.value === upper.value && (lower.exclusive || upper.exclusive);
+  if (isRealEmpty(lower, upper)) return true;
   if (integer) {
-    if (realEmpty) return false;
     const safeMargin = Number.MAX_SAFE_INTEGER - 1;
     if (Math.abs(lower.value) >= safeMargin || Math.abs(upper.value) >= safeMargin) {
       return false;
@@ -7800,11 +7812,12 @@ function isEmpty(lower, upper, integer) {
     const maximum = upper.exclusive ? Math.ceil(upper.value) - 1 : Math.floor(upper.value);
     return minimum > maximum;
   }
-  return realEmpty;
+  return false;
 }
 function isOutermostCall(node) {
-  const parent = node.parent;
-  return !(parent?.type === import_utils43.AST_NODE_TYPES.MemberExpression && parent.object === node && parent.parent?.type === import_utils43.AST_NODE_TYPES.CallExpression && parent.parent.callee === parent);
+  const expression = outerExpression(node);
+  const parent = expression.parent;
+  return !(parent?.type === import_utils43.AST_NODE_TYPES.MemberExpression && parent.object === expression && parent.parent?.type === import_utils43.AST_NODE_TYPES.CallExpression && parent.parent.callee === parent);
 }
 var no_impossible_zod_literal_bounds_default = createRule({
   name: "no-impossible-zod-literal-bounds",
@@ -7814,13 +7827,24 @@ var no_impossible_zod_literal_bounds_default = createRule({
     docs: {
       description: "Disallow same-chain literal Zod bounds whose accepted set is mathematically empty."
     },
-    schema: [],
+    schema: [
+      {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          delegateRealContradictions: {
+            type: "boolean",
+            description: "Let enabled upstream zod/no-conflicting-checks own explicit real-bound contradictions."
+          }
+        }
+      }
+    ],
     messages: {
       impossibleBounds: "This Zod {{kind}} schema accepts no values: {{lower}} conflicts with {{upper}}."
     }
   },
-  defaultOptions: [],
-  create(context) {
+  defaultOptions: [{}],
+  create(context, [options]) {
     const sourceCode = context.sourceCode;
     if (isTestFile(context.filename) || isGeneratedFile(context.filename, sourceCode.getText())) {
       return {};
@@ -7834,9 +7858,13 @@ var no_impossible_zod_literal_bounds_default = createRule({
       if (binding === void 0) return false;
       let scope = sourceCode.getScope(node);
       while (scope !== null) {
-        const variable = scope.variables.find((candidate2) => candidate2.name === node.name);
+        const variable = scope.variables.find(
+          (candidate2) => candidate2.name === node.name
+        );
         if (variable !== void 0) {
-          return variable.defs.some((definition) => definition.name === binding);
+          return variable.defs.some(
+            (definition) => definition.name === binding
+          );
         }
         scope = scope.upper;
       }
@@ -7869,7 +7897,7 @@ var no_impossible_zod_literal_bounds_default = createRule({
         return null;
       }
       const name = import_utils43.ASTUtils.getPropertyName(callee);
-      return name !== null && KINDS.has(name) ? name : null;
+      return name === null ? null : KINDS.get(name) ?? null;
     }
     function isInsideReshapingCall(node) {
       let child = node;
@@ -7891,10 +7919,33 @@ var no_impossible_zod_literal_bounds_default = createRule({
       return false;
     }
     function contradiction(chain) {
-      const allowed = chain.kind === "number" ? NUMBER_METHODS : LENGTH_METHODS;
+      const bounds = readConstraints(chain);
+      if (bounds === null) return null;
+      let { lower, upper } = bounds;
+      const { integer, numeric } = bounds;
+      if (isRealEmpty(lower, upper) && (numeric && integer || options?.delegateRealContradictions === true)) {
+        return null;
+      }
+      if (chain.kind === "int32" || chain.kind === "uint32") {
+        lower = strongerLower(lower, {
+          exclusive: false,
+          label: `${chain.kind}() minimum`,
+          value: chain.kind === "int32" ? -(2 ** 31) : 0
+        });
+        upper = strongerUpper(upper, {
+          exclusive: false,
+          label: `${chain.kind}() maximum`,
+          value: chain.kind === "int32" ? 2 ** 31 - 1 : 2 ** 32 - 1
+        });
+      }
+      return isEmpty(lower, upper, integer) && lower !== null && upper !== null ? { lower, upper } : null;
+    }
+    function readConstraints(chain) {
+      const numeric = chain.kind !== "string" && chain.kind !== "array";
+      const allowed = numeric ? NUMBER_METHODS : LENGTH_METHODS;
       let lower = null;
       let upper = null;
-      let integer = false;
+      let integer = chain.kind !== "number";
       function addBound(method, semantic, value) {
         const label = `${method}(${String(value)})`;
         if (semantic !== null) {
@@ -7938,13 +7989,13 @@ var no_impossible_zod_literal_bounds_default = createRule({
         const semantic = zeroBoundSemantic(method);
         const value = semantic?.value ?? finiteNumber(node.arguments[0]);
         if (value === null) return null;
-        if (chain.kind !== "number" && (!Number.isInteger(value) || value < 0)) {
+        if (!numeric && value < 0) {
           return null;
         }
         if (semantic !== null && node.arguments.length !== 0) return null;
         addBound(method, semantic, value);
       }
-      return isEmpty(lower, upper, integer) && lower !== null && upper !== null ? { lower, upper } : null;
+      return { integer, lower, numeric, upper };
     }
     return {
       ImportDeclaration(node) {
@@ -7960,7 +8011,9 @@ var no_impossible_zod_literal_bounds_default = createRule({
             namespaces.add(specifier.local.name);
             importBindings.set(specifier.local.name, specifier.local);
           } else if (imported !== null && KINDS.has(imported)) {
-            constructors.set(specifier.local.name, imported);
+            const kind = KINDS.get(imported);
+            if (kind !== void 0)
+              constructors.set(specifier.local.name, kind);
             importBindings.set(specifier.local.name, specifier.local);
           } else if (imported === "preprocess") {
             preprocessors.add(specifier.local.name);
@@ -21664,7 +21717,7 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       focusPath: "src/row.ts",
       expectedCount: 0,
       public: true,
-      installedDependencies: [{ module: "zod", version: "4.6.5" }]
+      installedDependencies: [{ module: "zod", version: "4.6.7" }]
     },
     {
       id: "hand-written-parsed-return",
@@ -21683,7 +21736,7 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       focusPath: "src/row.ts",
       expectedCount: 1,
       public: true,
-      installedDependencies: [{ module: "zod", version: "4.6.5" }]
+      installedDependencies: [{ module: "zod", version: "4.6.7" }]
     }
   ]
 };
@@ -22144,10 +22197,39 @@ var REQUIRE_FETCH_TIMEOUT_DOCUMENTATION = {
   rationale: "An unbounded request can occupy work indefinitely when an upstream stalls.",
   remediation: "Pass an abort signal, such as `AbortSignal.timeout(ms)`, in the fetch init.",
   category: "correctness",
-  limitations: ["Signal presence establishes an explicit cancellation path, not a guaranteed timeout. Literal null, global undefined, and void 0 do not provide a signal. Unknown spreads and dynamic values are not inferred. Forwarded Request objects can carry an existing signal."],
+  limitations: [
+    "Signal presence establishes an explicit cancellation path, not a guaranteed timeout. Literal null, global undefined, and void 0 do not provide a signal. Erased TypeScript wrappers preserve the same analysis. Unknown spreads and dynamic values are not inferred. Forwarded Request objects retain their signal unless an init explicitly resets it to null.",
+    "Accessors and unproved prototypes are excluded because native option conversion can attach or replace a signal before it is read."
+  ],
   examples: [
-    { id: "bounded-fetch", title: "Bound the request", outcome: "no-match", files: [{ path: "src/client.ts", source: "await fetch(url, { signal: AbortSignal.timeout(5000) });" }], focusPath: "src/client.ts", expectedCount: 0, public: true },
-    { id: "unbounded-fetch", title: "Do not leave fetch unbounded", outcome: "match", files: [{ path: "src/client.ts", source: "await fetch('https://api.example.com/items');" }], focusPath: "src/client.ts", expectedCount: 1, public: true }
+    {
+      id: "bounded-fetch",
+      title: "Bound the request",
+      outcome: "no-match",
+      files: [
+        {
+          path: "src/client.ts",
+          source: "await fetch(url, { signal: AbortSignal.timeout(5000) });"
+        }
+      ],
+      focusPath: "src/client.ts",
+      expectedCount: 0,
+      public: true
+    },
+    {
+      id: "unbounded-fetch",
+      title: "Do not leave fetch unbounded",
+      outcome: "match",
+      files: [
+        {
+          path: "src/client.ts",
+          source: "await fetch('https://api.example.com/items');"
+        }
+      ],
+      focusPath: "src/client.ts",
+      expectedCount: 1,
+      public: true
+    }
   ]
 };
 var GLOBAL_OBJECTS2 = /* @__PURE__ */ new Set([
@@ -22164,23 +22246,50 @@ function matchesAnyPattern3(filename, patterns) {
   }
   return false;
 }
-function initProvablyLacksSignal(init, resolvesToGlobal) {
-  if (init.type !== import_utils119.AST_NODE_TYPES.ObjectExpression) return false;
-  let lacksSignal = true;
+function emptySignal(expression, resolvesToGlobal) {
+  const value = unwrapExpression(expression);
+  if (value.type === import_utils119.AST_NODE_TYPES.Literal && value.value === null)
+    return "null";
+  if (value.type === import_utils119.AST_NODE_TYPES.Identifier && value.name === "undefined" && resolvesToGlobal(value))
+    return "undefined";
+  if (value.type === import_utils119.AST_NODE_TYPES.UnaryExpression && value.operator === "void") {
+    const argument = unwrapExpression(value.argument);
+    if (argument.type === import_utils119.AST_NODE_TYPES.Literal && argument.value === 0)
+      return "undefined";
+  }
+  return null;
+}
+function initSignalState(init, resolvesToGlobal) {
+  init = unwrapExpression(init);
+  if (init.type !== import_utils119.AST_NODE_TYPES.ObjectExpression) return "unknown";
+  let state = "absent";
   for (const prop of init.properties) {
     if (prop.type === import_utils119.AST_NODE_TYPES.SpreadElement) {
-      lacksSignal = false;
+      state = "unknown";
       continue;
     }
+    if (prop.kind !== "init" || hasUnprovedPrototype(prop)) return "unknown";
     const isSignal = !prop.computed && prop.key.type === import_utils119.AST_NODE_TYPES.Identifier && prop.key.name === "signal" || prop.key.type === import_utils119.AST_NODE_TYPES.Literal && prop.key.value === "signal";
     if (isSignal) {
-      const value = prop.value;
-      lacksSignal = prop.kind === "init" && !prop.method && (value.type === import_utils119.AST_NODE_TYPES.Literal && value.value === null || value.type === import_utils119.AST_NODE_TYPES.Identifier && value.name === "undefined" && resolvesToGlobal(value) || value.type === import_utils119.AST_NODE_TYPES.UnaryExpression && value.operator === "void" && value.argument.type === import_utils119.AST_NODE_TYPES.Literal && value.argument.value === 0);
+      state = !prop.method ? emptySignal(prop.value, resolvesToGlobal) ?? "unknown" : "unknown";
+    } else if (!prop.computed && import_utils119.ASTUtils.getPropertyName(prop) === "__proto__" && state === "absent") {
+      state = "unknown";
     } else if (prop.computed && prop.key.type !== import_utils119.AST_NODE_TYPES.Literal) {
-      lacksSignal = false;
+      state = "unknown";
     }
   }
-  return lacksSignal;
+  return state;
+}
+function hasUnprovedPrototype(property) {
+  if (property.computed || property.method || property.shorthand || import_utils119.ASTUtils.getPropertyName(property) !== "__proto__")
+    return false;
+  const prototype = unwrapExpression(property.value);
+  if (prototype.type === import_utils119.AST_NODE_TYPES.Literal && prototype.value === null)
+    return false;
+  if (prototype.type !== import_utils119.AST_NODE_TYPES.ObjectExpression) return true;
+  return prototype.properties.some(
+    (member) => member.type === import_utils119.AST_NODE_TYPES.SpreadElement || member.kind !== "init" || !member.computed && import_utils119.ASTUtils.getPropertyName(member) === "__proto__" || member.computed && member.key.type !== import_utils119.AST_NODE_TYPES.Literal
+  );
 }
 function isInlineUrl(node, resolvesToGlobal) {
   node = unwrapExpression(node);
@@ -22226,40 +22335,50 @@ var require_fetch_timeout_default = createRule({
       return variable === null || variable.defs.length === 0;
     }
     function isGlobalFetchCall2(callee) {
+      callee = unwrapExpression(callee);
       if (callee.type === import_utils119.AST_NODE_TYPES.Identifier) {
         return callee.name === "fetch" && resolvesToGlobal(callee);
       }
-      return callee.type === import_utils119.AST_NODE_TYPES.MemberExpression && !callee.computed && callee.property.type === import_utils119.AST_NODE_TYPES.Identifier && callee.property.name === "fetch" && callee.object.type === import_utils119.AST_NODE_TYPES.Identifier && GLOBAL_OBJECTS2.has(callee.object.name) && resolvesToGlobal(callee.object);
+      const receiver = callee.type === import_utils119.AST_NODE_TYPES.MemberExpression ? unwrapExpression(callee.object) : null;
+      return callee.type === import_utils119.AST_NODE_TYPES.MemberExpression && import_utils119.ASTUtils.getPropertyName(callee) === "fetch" && receiver?.type === import_utils119.AST_NODE_TYPES.Identifier && GLOBAL_OBJECTS2.has(receiver.name) && resolvesToGlobal(receiver);
     }
-    function localConstInitProvablyLacksSignal(identifier) {
+    function localConstInitSignalState(identifier) {
       const variable = import_utils119.ASTUtils.findVariable(
         context.sourceCode.getScope(identifier),
         identifier.name
       );
-      if (variable?.defs.length !== 1) return false;
+      if (variable?.defs.length !== 1) return "unknown";
       const definition = variable.defs[0];
-      if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init?.type !== import_utils119.AST_NODE_TYPES.ObjectExpression || !initProvablyLacksSignal(definition.node.init, resolvesToGlobal)) {
-        return false;
+      if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || unwrapExpression(definition.node.init).type !== import_utils119.AST_NODE_TYPES.ObjectExpression) {
+        return "unknown";
       }
       for (const reference of variable.references) {
         const ref = reference.identifier;
         if (ref === identifier || ref === definition.name) continue;
         const member = ref.parent;
-        if (member.type !== import_utils119.AST_NODE_TYPES.MemberExpression || member.object !== ref || member.computed || member.property.type !== import_utils119.AST_NODE_TYPES.Identifier || member.property.name === "signal" || member.parent.type !== import_utils119.AST_NODE_TYPES.AssignmentExpression || member.parent.left !== member) {
-          return false;
+        if (member.type !== import_utils119.AST_NODE_TYPES.MemberExpression || member.object !== ref || member.computed || member.property.type !== import_utils119.AST_NODE_TYPES.Identifier || member.property.name === "signal" || member.property.name === "__proto__" || member.parent.type !== import_utils119.AST_NODE_TYPES.AssignmentExpression || member.parent.left !== member) {
+          return "unknown";
         }
       }
-      return true;
+      return initSignalState(definition.node.init, resolvesToGlobal);
     }
     function isForwardedRequest(argument) {
-      let value = argument;
+      let value = unwrapExpression(argument);
       if (value.type === import_utils119.AST_NODE_TYPES.Identifier) {
-        const binding = import_utils119.ASTUtils.findVariable(context.sourceCode.getScope(value), value.name);
+        const binding = import_utils119.ASTUtils.findVariable(
+          context.sourceCode.getScope(value),
+          value.name
+        );
         const definition = binding?.defs.length === 1 ? binding.defs[0] : void 0;
-        if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || binding?.references.some((reference) => reference.isWrite() && reference.init !== true)) return false;
-        value = definition.node.init;
+        if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || binding?.references.some(
+          (reference) => reference.isWrite() && reference.init !== true
+        ))
+          return false;
+        value = unwrapExpression(definition.node.init);
       }
-      return value.type === import_utils119.AST_NODE_TYPES.NewExpression && value.callee.type === import_utils119.AST_NODE_TYPES.Identifier && value.callee.name === "Request" && resolvesToGlobal(value.callee);
+      if (value.type !== import_utils119.AST_NODE_TYPES.NewExpression) return false;
+      const callee = unwrapExpression(value.callee);
+      return callee.type === import_utils119.AST_NODE_TYPES.Identifier && callee.name === "Request" && resolvesToGlobal(callee);
     }
     return {
       CallExpression(node) {
@@ -22267,11 +22386,13 @@ var require_fetch_timeout_default = createRule({
         if (!isGlobalFetchCall2(unwrappedNodeCallee)) {
           return;
         }
-        const [first, init] = node.arguments;
-        if (first !== void 0 && (node.arguments.length === 1 && !isInlineUrl(first, resolvesToGlobal) || isForwardedRequest(first))) {
+        const [first, rawInit] = node.arguments;
+        const init = rawInit === void 0 ? void 0 : unwrapExpression(rawInit);
+        const state = init === void 0 ? "unknown" : init.type === import_utils119.AST_NODE_TYPES.Identifier ? localConstInitSignalState(init) : initSignalState(init, resolvesToGlobal);
+        if (first !== void 0 && (node.arguments.length === 1 && !isInlineUrl(first, resolvesToGlobal) || isForwardedRequest(first) && state !== "null")) {
           return;
         }
-        if (init === void 0 || initProvablyLacksSignal(init, resolvesToGlobal) || init.type === import_utils119.AST_NODE_TYPES.Identifier && localConstInitProvablyLacksSignal(init)) {
+        if (init === void 0 || state !== "unknown" || first !== void 0 && isInlineUrl(first, resolvesToGlobal) && emptySignal(init, resolvesToGlobal) !== null) {
           context.report({ node, messageId: "missingSignal" });
         }
       }

package/dist/index.d.cts

@@ -176,7 +176,9 @@ declare const RULES: {
     readonly "no-detached-global-fetch": DocumentedRule<readonly [], "detachedGlobalFetch">;
     readonly "no-json-stringify-error": DocumentedRule<readonly [], "noJsonStringifyError">;
     readonly "no-json-stringify-object-equality": DocumentedRule<readonly [], "serializedObjectEquality">;
-    readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [], "impossibleBounds">;
+    readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [{
+        readonly delegateRealContradictions?: boolean;
+    }?], "impossibleBounds">;
     readonly "no-in-operator-on-built-in-collections": DocumentedRule<readonly [], "ambiguousCollectionIn">;
     readonly "no-redundant-optional-array-default": DocumentedRule<readonly [], "redundantOptionalArrayDefault">;
     readonly "interface-contract-members-private": DocumentedRule<readonly [], "nonContractMemberMustBePrivate">;
@@ -983,7 +985,9 @@ declare const PLUGIN: {
         readonly "no-detached-global-fetch": DocumentedRule<readonly [], "detachedGlobalFetch">;
         readonly "no-json-stringify-error": DocumentedRule<readonly [], "noJsonStringifyError">;
         readonly "no-json-stringify-object-equality": DocumentedRule<readonly [], "serializedObjectEquality">;
-        readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [], "impossibleBounds">;
+        readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [{
+            readonly delegateRealContradictions?: boolean;
+        }?], "impossibleBounds">;
         readonly "no-in-operator-on-built-in-collections": DocumentedRule<readonly [], "ambiguousCollectionIn">;
         readonly "no-redundant-optional-array-default": DocumentedRule<readonly [], "redundantOptionalArrayDefault">;
         readonly "interface-contract-members-private": DocumentedRule<readonly [], "nonContractMemberMustBePrivate">;

package/dist/index.d.ts

@@ -176,7 +176,9 @@ declare const RULES: {
     readonly "no-detached-global-fetch": DocumentedRule<readonly [], "detachedGlobalFetch">;
     readonly "no-json-stringify-error": DocumentedRule<readonly [], "noJsonStringifyError">;
     readonly "no-json-stringify-object-equality": DocumentedRule<readonly [], "serializedObjectEquality">;
-    readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [], "impossibleBounds">;
+    readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [{
+        readonly delegateRealContradictions?: boolean;
+    }?], "impossibleBounds">;
     readonly "no-in-operator-on-built-in-collections": DocumentedRule<readonly [], "ambiguousCollectionIn">;
     readonly "no-redundant-optional-array-default": DocumentedRule<readonly [], "redundantOptionalArrayDefault">;
     readonly "interface-contract-members-private": DocumentedRule<readonly [], "nonContractMemberMustBePrivate">;
@@ -983,7 +985,9 @@ declare const PLUGIN: {
         readonly "no-detached-global-fetch": DocumentedRule<readonly [], "detachedGlobalFetch">;
         readonly "no-json-stringify-error": DocumentedRule<readonly [], "noJsonStringifyError">;
         readonly "no-json-stringify-object-equality": DocumentedRule<readonly [], "serializedObjectEquality">;
-        readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [], "impossibleBounds">;
+        readonly "no-impossible-zod-literal-bounds": DocumentedRule<readonly [{
+            readonly delegateRealContradictions?: boolean;
+        }?], "impossibleBounds">;
         readonly "no-in-operator-on-built-in-collections": DocumentedRule<readonly [], "ambiguousCollectionIn">;
         readonly "no-redundant-optional-array-default": DocumentedRule<readonly [], "redundantOptionalArrayDefault">;
         readonly "interface-contract-members-private": DocumentedRule<readonly [], "nonContractMemberMustBePrivate">;

package/dist/index.js

@@ -1,8 +1,8 @@
 // package.json
 var package_default = {
   name: "@sarj/eslint-plugin",
-  version: "16.9.0",
-  packageManager: "npm@12.1.0",
+  version: "16.11.0",
+  packageManager: "npm@12.2.0",
   description: "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   type: "module",
   main: "./dist/index.cjs",
@@ -55,48 +55,49 @@ var package_default = {
   author: "sarj-ai",
   license: "MIT",
   dependencies: {
-    "@typescript-eslint/typescript-estree": "^8.70.1",
-    "@typescript-eslint/utils": "^8.70.1",
+    "@typescript-eslint/typescript-estree": "^8.71.2",
+    "@typescript-eslint/utils": "^8.71.2",
     "jsonc-parser": "^3.3.1"
   },
   devDependencies: {
     "@eslint-community/eslint-plugin-eslint-comments": "^4.8.1",
     "@eslint/compat": "^2.1.1",
     "@eslint/js": "10.0.1",
-    "@shadcn/lint": "0.2.0",
-    "@types/node": "26.6.2",
-    "@typescript-eslint/parser": "8.70.1",
-    "@typescript-eslint/rule-tester": "8.70.1",
-    "@typescript-eslint/utils": "8.70.1",
+    "@shadcn/lint": "0.2.1",
+    "@types/node": "26.6.5",
+    "@typescript-eslint/parser": "8.71.2",
+    "@typescript-eslint/rule-tester": "8.71.2",
+    "@typescript-eslint/utils": "8.71.2",
     "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/eslint-plugin": "1.6.27",
-    eslint: "10.11.0",
-    "eslint-node-test": "0.4.0",
-    "eslint-plugin-better-tailwindcss": "^4.7.0",
-    "eslint-plugin-jest": "29.16.6",
-    "eslint-plugin-jsdoc": "64.5.4",
-    "eslint-plugin-n": "^18.3.0",
+    eslint: "10.12.0",
+    "eslint-node-test": "1.0.1",
+    "eslint-plugin-better-tailwindcss": "^4.9.0",
+    "eslint-plugin-jest": "29.17.0",
+    "eslint-plugin-jsdoc": "65.3.1",
+    "eslint-plugin-n": "^18.4.1",
     "eslint-plugin-perfectionist": "5.12.1",
-    "eslint-plugin-playwright": "2.12.0",
+    "eslint-plugin-playwright": "2.12.1",
     "eslint-plugin-promise": "^7.3.0",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-simple-import-sort": "^14.0.0",
     "eslint-plugin-testing-library": "7.16.2",
-    "eslint-plugin-unicorn": "^76.0.0",
-    "eslint-plugin-zod": "^4.14.2",
-    globals: "15.15.0",
-    tsup: "latest",
+    "eslint-plugin-unicorn": "^78.0.0",
+    "eslint-plugin-zod": "^5.0.1",
+    globals: "17.13.0",
+    tsup: "8.5.1",
     typescript: "npm:@typescript/typescript6@6.0.2",
-    "typescript-eslint": "^8.70.1",
-    vitest: "5.0.1"
+    "typescript-eslint": "^8.71.2",
+    vitest: "5.0.4",
+    zod: "4.6.7"
   },
   peerDependencies: {
     eslint: ">=9.39.4",
     typescript: ">=5.0.0"
   },
   engines: {
-    node: ">=22.22.2"
+    node: "^22.22.2 || >=24.15.0"
   },
   allowScripts: {
     "esbuild@0.28.2": true,
@@ -108,12 +109,12 @@ var package_default = {
     }
   },
   overrides: {
-    "brace-expansion@^5.0.0": "5.0.9",
+    "brace-expansion@^5.0.0": "5.0.12",
     esbuild: "0.28.2",
-    "nanoid@<3.3.18": "3.3.18",
     "eslint-plugin-react": {
       eslint: "$eslint"
-    }
+    },
+    "nanoid@<3.3.20": "3.3.20"
   }
 };
 
@@ -7679,7 +7680,8 @@ var NO_IMPOSSIBLE_ZOD_LITERAL_BOUNDS_DOCUMENTATION = {
   remediation: "Choose compatible lower and upper bounds, or remove the constraint that does not express the intended domain.",
   category: "correctness",
   limitations: [
-    "Only finite numeric literals in a single number, string, or array schema chain are compared; explicit int() chains also require an admitted integer.",
+    "Only finite numeric literals in a single schema chain are compared; number().int(), int(), int32(), uint32(), strings and arrays require an admitted integer value or length.",
+    "int32() and uint32() include their intrinsic ranges. The managed preset delegates explicit real-bound conflicts to upstream zod/no-conflicting-checks to avoid duplicate findings.",
     "Integer-domain comparisons abstain near the JavaScript safe-integer boundary.",
     "Chains with dynamic bounds, non-bound validators, transforms, pipes, or preprocessors are skipped.",
     "Test and generated files are excluded."
@@ -7715,7 +7717,14 @@ var NO_IMPOSSIBLE_ZOD_LITERAL_BOUNDS_DOCUMENTATION = {
     }
   ]
 };
-var KINDS = /* @__PURE__ */ new Set(["array", "number", "string"]);
+var KINDS = /* @__PURE__ */ new Map([
+  ["array", "array"],
+  ["number", "number"],
+  ["string", "string"],
+  ["int", "integer"],
+  ["int32", "int32"],
+  ["uint32", "uint32"]
+]);
 var NUMBER_METHODS = /* @__PURE__ */ new Set([
   "gt",
   "gte",
@@ -7761,11 +7770,14 @@ function strongerUpper(current, candidate2) {
   }
   return current;
 }
+function isRealEmpty(lower, upper) {
+  if (lower === null || upper === null) return false;
+  return lower.value > upper.value || lower.value === upper.value && (lower.exclusive || upper.exclusive);
+}
 function isEmpty(lower, upper, integer) {
   if (lower === null || upper === null) return false;
-  const realEmpty = lower.value > upper.value || lower.value === upper.value && (lower.exclusive || upper.exclusive);
+  if (isRealEmpty(lower, upper)) return true;
   if (integer) {
-    if (realEmpty) return false;
     const safeMargin = Number.MAX_SAFE_INTEGER - 1;
     if (Math.abs(lower.value) >= safeMargin || Math.abs(upper.value) >= safeMargin) {
       return false;
@@ -7774,11 +7786,12 @@ function isEmpty(lower, upper, integer) {
     const maximum = upper.exclusive ? Math.ceil(upper.value) - 1 : Math.floor(upper.value);
     return minimum > maximum;
   }
-  return realEmpty;
+  return false;
 }
 function isOutermostCall(node) {
-  const parent = node.parent;
-  return !(parent?.type === AST_NODE_TYPES37.MemberExpression && parent.object === node && parent.parent?.type === AST_NODE_TYPES37.CallExpression && parent.parent.callee === parent);
+  const expression = outerExpression(node);
+  const parent = expression.parent;
+  return !(parent?.type === AST_NODE_TYPES37.MemberExpression && parent.object === expression && parent.parent?.type === AST_NODE_TYPES37.CallExpression && parent.parent.callee === parent);
 }
 var no_impossible_zod_literal_bounds_default = createRule({
   name: "no-impossible-zod-literal-bounds",
@@ -7788,13 +7801,24 @@ var no_impossible_zod_literal_bounds_default = createRule({
     docs: {
       description: "Disallow same-chain literal Zod bounds whose accepted set is mathematically empty."
     },
-    schema: [],
+    schema: [
+      {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          delegateRealContradictions: {
+            type: "boolean",
+            description: "Let enabled upstream zod/no-conflicting-checks own explicit real-bound contradictions."
+          }
+        }
+      }
+    ],
     messages: {
       impossibleBounds: "This Zod {{kind}} schema accepts no values: {{lower}} conflicts with {{upper}}."
     }
   },
-  defaultOptions: [],
-  create(context) {
+  defaultOptions: [{}],
+  create(context, [options]) {
     const sourceCode = context.sourceCode;
     if (isTestFile(context.filename) || isGeneratedFile(context.filename, sourceCode.getText())) {
       return {};
@@ -7808,9 +7832,13 @@ var no_impossible_zod_literal_bounds_default = createRule({
       if (binding === void 0) return false;
       let scope = sourceCode.getScope(node);
       while (scope !== null) {
-        const variable = scope.variables.find((candidate2) => candidate2.name === node.name);
+        const variable = scope.variables.find(
+          (candidate2) => candidate2.name === node.name
+        );
         if (variable !== void 0) {
-          return variable.defs.some((definition) => definition.name === binding);
+          return variable.defs.some(
+            (definition) => definition.name === binding
+          );
         }
         scope = scope.upper;
       }
@@ -7843,7 +7871,7 @@ var no_impossible_zod_literal_bounds_default = createRule({
         return null;
       }
       const name = ASTUtils17.getPropertyName(callee);
-      return name !== null && KINDS.has(name) ? name : null;
+      return name === null ? null : KINDS.get(name) ?? null;
     }
     function isInsideReshapingCall(node) {
       let child = node;
@@ -7865,10 +7893,33 @@ var no_impossible_zod_literal_bounds_default = createRule({
       return false;
     }
     function contradiction(chain) {
-      const allowed = chain.kind === "number" ? NUMBER_METHODS : LENGTH_METHODS;
+      const bounds = readConstraints(chain);
+      if (bounds === null) return null;
+      let { lower, upper } = bounds;
+      const { integer, numeric } = bounds;
+      if (isRealEmpty(lower, upper) && (numeric && integer || options?.delegateRealContradictions === true)) {
+        return null;
+      }
+      if (chain.kind === "int32" || chain.kind === "uint32") {
+        lower = strongerLower(lower, {
+          exclusive: false,
+          label: `${chain.kind}() minimum`,
+          value: chain.kind === "int32" ? -(2 ** 31) : 0
+        });
+        upper = strongerUpper(upper, {
+          exclusive: false,
+          label: `${chain.kind}() maximum`,
+          value: chain.kind === "int32" ? 2 ** 31 - 1 : 2 ** 32 - 1
+        });
+      }
+      return isEmpty(lower, upper, integer) && lower !== null && upper !== null ? { lower, upper } : null;
+    }
+    function readConstraints(chain) {
+      const numeric = chain.kind !== "string" && chain.kind !== "array";
+      const allowed = numeric ? NUMBER_METHODS : LENGTH_METHODS;
       let lower = null;
       let upper = null;
-      let integer = false;
+      let integer = chain.kind !== "number";
       function addBound(method, semantic, value) {
         const label = `${method}(${String(value)})`;
         if (semantic !== null) {
@@ -7912,13 +7963,13 @@ var no_impossible_zod_literal_bounds_default = createRule({
         const semantic = zeroBoundSemantic(method);
         const value = semantic?.value ?? finiteNumber(node.arguments[0]);
         if (value === null) return null;
-        if (chain.kind !== "number" && (!Number.isInteger(value) || value < 0)) {
+        if (!numeric && value < 0) {
           return null;
         }
         if (semantic !== null && node.arguments.length !== 0) return null;
         addBound(method, semantic, value);
       }
-      return isEmpty(lower, upper, integer) && lower !== null && upper !== null ? { lower, upper } : null;
+      return { integer, lower, numeric, upper };
     }
     return {
       ImportDeclaration(node) {
@@ -7934,7 +7985,9 @@ var no_impossible_zod_literal_bounds_default = createRule({
             namespaces.add(specifier.local.name);
             importBindings.set(specifier.local.name, specifier.local);
           } else if (imported !== null && KINDS.has(imported)) {
-            constructors.set(specifier.local.name, imported);
+            const kind = KINDS.get(imported);
+            if (kind !== void 0)
+              constructors.set(specifier.local.name, kind);
             importBindings.set(specifier.local.name, specifier.local);
           } else if (imported === "preprocess") {
             preprocessors.add(specifier.local.name);
@@ -21679,7 +21732,7 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       focusPath: "src/row.ts",
       expectedCount: 0,
       public: true,
-      installedDependencies: [{ module: "zod", version: "4.6.5" }]
+      installedDependencies: [{ module: "zod", version: "4.6.7" }]
     },
     {
       id: "hand-written-parsed-return",
@@ -21698,7 +21751,7 @@ var PREFER_ZOD_PARSE_OUTPUT_TYPE_DOCUMENTATION = {
       focusPath: "src/row.ts",
       expectedCount: 1,
       public: true,
-      installedDependencies: [{ module: "zod", version: "4.6.5" }]
+      installedDependencies: [{ module: "zod", version: "4.6.7" }]
     }
   ]
 };
@@ -22156,16 +22209,48 @@ var require_assert_never_default = createRule({
 });
 
 // src/rules/require-fetch-timeout.ts
-import { AST_NODE_TYPES as AST_NODE_TYPES103, ASTUtils as ASTUtils64 } from "@typescript-eslint/utils";
+import {
+  AST_NODE_TYPES as AST_NODE_TYPES103,
+  ASTUtils as ASTUtils64
+} from "@typescript-eslint/utils";
 var REQUIRE_FETCH_TIMEOUT_DOCUMENTATION = {
   summary: "Require an explicit abort signal on locally analyzable global fetch calls.",
   rationale: "An unbounded request can occupy work indefinitely when an upstream stalls.",
   remediation: "Pass an abort signal, such as `AbortSignal.timeout(ms)`, in the fetch init.",
   category: "correctness",
-  limitations: ["Signal presence establishes an explicit cancellation path, not a guaranteed timeout. Literal null, global undefined, and void 0 do not provide a signal. Unknown spreads and dynamic values are not inferred. Forwarded Request objects can carry an existing signal."],
+  limitations: [
+    "Signal presence establishes an explicit cancellation path, not a guaranteed timeout. Literal null, global undefined, and void 0 do not provide a signal. Erased TypeScript wrappers preserve the same analysis. Unknown spreads and dynamic values are not inferred. Forwarded Request objects retain their signal unless an init explicitly resets it to null.",
+    "Accessors and unproved prototypes are excluded because native option conversion can attach or replace a signal before it is read."
+  ],
   examples: [
-    { id: "bounded-fetch", title: "Bound the request", outcome: "no-match", files: [{ path: "src/client.ts", source: "await fetch(url, { signal: AbortSignal.timeout(5000) });" }], focusPath: "src/client.ts", expectedCount: 0, public: true },
-    { id: "unbounded-fetch", title: "Do not leave fetch unbounded", outcome: "match", files: [{ path: "src/client.ts", source: "await fetch('https://api.example.com/items');" }], focusPath: "src/client.ts", expectedCount: 1, public: true }
+    {
+      id: "bounded-fetch",
+      title: "Bound the request",
+      outcome: "no-match",
+      files: [
+        {
+          path: "src/client.ts",
+          source: "await fetch(url, { signal: AbortSignal.timeout(5000) });"
+        }
+      ],
+      focusPath: "src/client.ts",
+      expectedCount: 0,
+      public: true
+    },
+    {
+      id: "unbounded-fetch",
+      title: "Do not leave fetch unbounded",
+      outcome: "match",
+      files: [
+        {
+          path: "src/client.ts",
+          source: "await fetch('https://api.example.com/items');"
+        }
+      ],
+      focusPath: "src/client.ts",
+      expectedCount: 1,
+      public: true
+    }
   ]
 };
 var GLOBAL_OBJECTS2 = /* @__PURE__ */ new Set([
@@ -22182,23 +22267,50 @@ function matchesAnyPattern3(filename, patterns) {
   }
   return false;
 }
-function initProvablyLacksSignal(init, resolvesToGlobal) {
-  if (init.type !== AST_NODE_TYPES103.ObjectExpression) return false;
-  let lacksSignal = true;
+function emptySignal(expression, resolvesToGlobal) {
+  const value = unwrapExpression(expression);
+  if (value.type === AST_NODE_TYPES103.Literal && value.value === null)
+    return "null";
+  if (value.type === AST_NODE_TYPES103.Identifier && value.name === "undefined" && resolvesToGlobal(value))
+    return "undefined";
+  if (value.type === AST_NODE_TYPES103.UnaryExpression && value.operator === "void") {
+    const argument = unwrapExpression(value.argument);
+    if (argument.type === AST_NODE_TYPES103.Literal && argument.value === 0)
+      return "undefined";
+  }
+  return null;
+}
+function initSignalState(init, resolvesToGlobal) {
+  init = unwrapExpression(init);
+  if (init.type !== AST_NODE_TYPES103.ObjectExpression) return "unknown";
+  let state = "absent";
   for (const prop of init.properties) {
     if (prop.type === AST_NODE_TYPES103.SpreadElement) {
-      lacksSignal = false;
+      state = "unknown";
       continue;
     }
+    if (prop.kind !== "init" || hasUnprovedPrototype(prop)) return "unknown";
     const isSignal = !prop.computed && prop.key.type === AST_NODE_TYPES103.Identifier && prop.key.name === "signal" || prop.key.type === AST_NODE_TYPES103.Literal && prop.key.value === "signal";
     if (isSignal) {
-      const value = prop.value;
-      lacksSignal = prop.kind === "init" && !prop.method && (value.type === AST_NODE_TYPES103.Literal && value.value === null || value.type === AST_NODE_TYPES103.Identifier && value.name === "undefined" && resolvesToGlobal(value) || value.type === AST_NODE_TYPES103.UnaryExpression && value.operator === "void" && value.argument.type === AST_NODE_TYPES103.Literal && value.argument.value === 0);
+      state = !prop.method ? emptySignal(prop.value, resolvesToGlobal) ?? "unknown" : "unknown";
+    } else if (!prop.computed && ASTUtils64.getPropertyName(prop) === "__proto__" && state === "absent") {
+      state = "unknown";
     } else if (prop.computed && prop.key.type !== AST_NODE_TYPES103.Literal) {
-      lacksSignal = false;
+      state = "unknown";
     }
   }
-  return lacksSignal;
+  return state;
+}
+function hasUnprovedPrototype(property) {
+  if (property.computed || property.method || property.shorthand || ASTUtils64.getPropertyName(property) !== "__proto__")
+    return false;
+  const prototype = unwrapExpression(property.value);
+  if (prototype.type === AST_NODE_TYPES103.Literal && prototype.value === null)
+    return false;
+  if (prototype.type !== AST_NODE_TYPES103.ObjectExpression) return true;
+  return prototype.properties.some(
+    (member) => member.type === AST_NODE_TYPES103.SpreadElement || member.kind !== "init" || !member.computed && ASTUtils64.getPropertyName(member) === "__proto__" || member.computed && member.key.type !== AST_NODE_TYPES103.Literal
+  );
 }
 function isInlineUrl(node, resolvesToGlobal) {
   node = unwrapExpression(node);
@@ -22244,40 +22356,50 @@ var require_fetch_timeout_default = createRule({
       return variable === null || variable.defs.length === 0;
     }
     function isGlobalFetchCall2(callee) {
+      callee = unwrapExpression(callee);
       if (callee.type === AST_NODE_TYPES103.Identifier) {
         return callee.name === "fetch" && resolvesToGlobal(callee);
       }
-      return callee.type === AST_NODE_TYPES103.MemberExpression && !callee.computed && callee.property.type === AST_NODE_TYPES103.Identifier && callee.property.name === "fetch" && callee.object.type === AST_NODE_TYPES103.Identifier && GLOBAL_OBJECTS2.has(callee.object.name) && resolvesToGlobal(callee.object);
+      const receiver = callee.type === AST_NODE_TYPES103.MemberExpression ? unwrapExpression(callee.object) : null;
+      return callee.type === AST_NODE_TYPES103.MemberExpression && ASTUtils64.getPropertyName(callee) === "fetch" && receiver?.type === AST_NODE_TYPES103.Identifier && GLOBAL_OBJECTS2.has(receiver.name) && resolvesToGlobal(receiver);
     }
-    function localConstInitProvablyLacksSignal(identifier) {
+    function localConstInitSignalState(identifier) {
       const variable = ASTUtils64.findVariable(
         context.sourceCode.getScope(identifier),
         identifier.name
       );
-      if (variable?.defs.length !== 1) return false;
+      if (variable?.defs.length !== 1) return "unknown";
       const definition = variable.defs[0];
-      if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init?.type !== AST_NODE_TYPES103.ObjectExpression || !initProvablyLacksSignal(definition.node.init, resolvesToGlobal)) {
-        return false;
+      if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || unwrapExpression(definition.node.init).type !== AST_NODE_TYPES103.ObjectExpression) {
+        return "unknown";
       }
       for (const reference of variable.references) {
         const ref = reference.identifier;
         if (ref === identifier || ref === definition.name) continue;
         const member = ref.parent;
-        if (member.type !== AST_NODE_TYPES103.MemberExpression || member.object !== ref || member.computed || member.property.type !== AST_NODE_TYPES103.Identifier || member.property.name === "signal" || member.parent.type !== AST_NODE_TYPES103.AssignmentExpression || member.parent.left !== member) {
-          return false;
+        if (member.type !== AST_NODE_TYPES103.MemberExpression || member.object !== ref || member.computed || member.property.type !== AST_NODE_TYPES103.Identifier || member.property.name === "signal" || member.property.name === "__proto__" || member.parent.type !== AST_NODE_TYPES103.AssignmentExpression || member.parent.left !== member) {
+          return "unknown";
         }
       }
-      return true;
+      return initSignalState(definition.node.init, resolvesToGlobal);
     }
     function isForwardedRequest(argument) {
-      let value = argument;
+      let value = unwrapExpression(argument);
       if (value.type === AST_NODE_TYPES103.Identifier) {
-        const binding = ASTUtils64.findVariable(context.sourceCode.getScope(value), value.name);
+        const binding = ASTUtils64.findVariable(
+          context.sourceCode.getScope(value),
+          value.name
+        );
         const definition = binding?.defs.length === 1 ? binding.defs[0] : void 0;
-        if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || binding?.references.some((reference) => reference.isWrite() && reference.init !== true)) return false;
-        value = definition.node.init;
+        if (definition?.type !== "Variable" || definition.parent.kind !== "const" || definition.node.init === null || binding?.references.some(
+          (reference) => reference.isWrite() && reference.init !== true
+        ))
+          return false;
+        value = unwrapExpression(definition.node.init);
       }
-      return value.type === AST_NODE_TYPES103.NewExpression && value.callee.type === AST_NODE_TYPES103.Identifier && value.callee.name === "Request" && resolvesToGlobal(value.callee);
+      if (value.type !== AST_NODE_TYPES103.NewExpression) return false;
+      const callee = unwrapExpression(value.callee);
+      return callee.type === AST_NODE_TYPES103.Identifier && callee.name === "Request" && resolvesToGlobal(callee);
     }
     return {
       CallExpression(node) {
@@ -22285,11 +22407,13 @@ var require_fetch_timeout_default = createRule({
         if (!isGlobalFetchCall2(unwrappedNodeCallee)) {
           return;
         }
-        const [first, init] = node.arguments;
-        if (first !== void 0 && (node.arguments.length === 1 && !isInlineUrl(first, resolvesToGlobal) || isForwardedRequest(first))) {
+        const [first, rawInit] = node.arguments;
+        const init = rawInit === void 0 ? void 0 : unwrapExpression(rawInit);
+        const state = init === void 0 ? "unknown" : init.type === AST_NODE_TYPES103.Identifier ? localConstInitSignalState(init) : initSignalState(init, resolvesToGlobal);
+        if (first !== void 0 && (node.arguments.length === 1 && !isInlineUrl(first, resolvesToGlobal) || isForwardedRequest(first) && state !== "null")) {
           return;
         }
-        if (init === void 0 || initProvablyLacksSignal(init, resolvesToGlobal) || init.type === AST_NODE_TYPES103.Identifier && localConstInitProvablyLacksSignal(init)) {
+        if (init === void 0 || state !== "unknown" || first !== void 0 && isInlineUrl(first, resolvesToGlobal) && emptySignal(init, resolvesToGlobal) !== null) {
           context.report({ node, messageId: "missingSignal" });
         }
       }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sarj/eslint-plugin",
-  "version": "16.9.0",
-  "packageManager": "npm@12.1.0",
+  "version": "16.11.0",
+  "packageManager": "npm@12.2.0",
   "description": "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -54,48 +54,49 @@
   "author": "sarj-ai",
   "license": "MIT",
   "dependencies": {
-    "@typescript-eslint/typescript-estree": "^8.70.1",
-    "@typescript-eslint/utils": "^8.70.1",
+    "@typescript-eslint/typescript-estree": "^8.71.2",
+    "@typescript-eslint/utils": "^8.71.2",
     "jsonc-parser": "^3.3.1"
   },
   "devDependencies": {
     "@eslint-community/eslint-plugin-eslint-comments": "^4.8.1",
     "@eslint/compat": "^2.1.1",
     "@eslint/js": "10.0.1",
-    "@shadcn/lint": "0.2.0",
-    "@types/node": "26.6.2",
-    "@typescript-eslint/parser": "8.70.1",
-    "@typescript-eslint/rule-tester": "8.70.1",
-    "@typescript-eslint/utils": "8.70.1",
+    "@shadcn/lint": "0.2.1",
+    "@types/node": "26.6.5",
+    "@typescript-eslint/parser": "8.71.2",
+    "@typescript-eslint/rule-tester": "8.71.2",
+    "@typescript-eslint/utils": "8.71.2",
     "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/eslint-plugin": "1.6.27",
-    "eslint": "10.11.0",
-    "eslint-node-test": "0.4.0",
-    "eslint-plugin-better-tailwindcss": "^4.7.0",
-    "eslint-plugin-jest": "29.16.6",
-    "eslint-plugin-jsdoc": "64.5.4",
-    "eslint-plugin-n": "^18.3.0",
+    "eslint": "10.12.0",
+    "eslint-node-test": "1.0.1",
+    "eslint-plugin-better-tailwindcss": "^4.9.0",
+    "eslint-plugin-jest": "29.17.0",
+    "eslint-plugin-jsdoc": "65.3.1",
+    "eslint-plugin-n": "^18.4.1",
     "eslint-plugin-perfectionist": "5.12.1",
-    "eslint-plugin-playwright": "2.12.0",
+    "eslint-plugin-playwright": "2.12.1",
     "eslint-plugin-promise": "^7.3.0",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-simple-import-sort": "^14.0.0",
     "eslint-plugin-testing-library": "7.16.2",
-    "eslint-plugin-unicorn": "^76.0.0",
-    "eslint-plugin-zod": "^4.14.2",
-    "globals": "15.15.0",
-    "tsup": "latest",
+    "eslint-plugin-unicorn": "^78.0.0",
+    "eslint-plugin-zod": "^5.0.1",
+    "globals": "17.13.0",
+    "tsup": "8.5.1",
     "typescript": "npm:@typescript/typescript6@6.0.2",
-    "typescript-eslint": "^8.70.1",
-    "vitest": "5.0.1"
+    "typescript-eslint": "^8.71.2",
+    "vitest": "5.0.4",
+    "zod": "4.6.7"
   },
   "peerDependencies": {
     "eslint": ">=9.39.4",
     "typescript": ">=5.0.0"
   },
   "engines": {
-    "node": ">=22.22.2"
+    "node": "^22.22.2 || >=24.15.0"
   },
   "allowScripts": {
     "esbuild@0.28.2": true,
@@ -107,11 +108,11 @@
     }
   },
   "overrides": {
-    "brace-expansion@^5.0.0": "5.0.9",
+    "brace-expansion@^5.0.0": "5.0.12",
     "esbuild": "0.28.2",
-    "nanoid@<3.3.18": "3.3.18",
     "eslint-plugin-react": {
       "eslint": "$eslint"
-    }
+    },
+    "nanoid@<3.3.20": "3.3.20"
   }
 }