@sarj/eslint-plugin 2.6.0 → 2.7.0

package/dist/index.js

@@ -2755,16 +2755,299 @@ var no_cors_wildcard_with_credentials_default = ESLintUtils21.RuleCreator(
   }
 });
 
+// src/rules/no-silent-promise-catch.ts
+import { AST_NODE_TYPES as AST_NODE_TYPES12, ESLintUtils as ESLintUtils22 } from "@typescript-eslint/utils";
+
+// src/rules/_paths.ts
+var TEST_FILE_RE = /(\.(test|spec)\.)|([\\/]__tests__[\\/])/;
+var SCRIPT_FILE_RE = /([\\/]scripts[\\/])|(\.mjs$)/;
+function isTestFile(filename) {
+  return TEST_FILE_RE.test(filename);
+}
+function isScriptFile(filename) {
+  return SCRIPT_FILE_RE.test(filename);
+}
+
+// src/rules/no-silent-promise-catch.ts
+function isBodyParseCall(node) {
+  return node.type === AST_NODE_TYPES12.CallExpression && node.arguments.length === 0 && node.callee.type === AST_NODE_TYPES12.MemberExpression && !node.callee.computed && node.callee.property.type === AST_NODE_TYPES12.Identifier && (node.callee.property.name === "json" || node.callee.property.name === "text");
+}
+function isSilentExpression(node) {
+  switch (node.type) {
+    case AST_NODE_TYPES12.Literal:
+      return !("regex" in node);
+    case AST_NODE_TYPES12.Identifier:
+      return node.name === "undefined";
+    case AST_NODE_TYPES12.UnaryExpression:
+      return node.operator === "void" && node.argument.type === AST_NODE_TYPES12.Literal;
+    case AST_NODE_TYPES12.ObjectExpression:
+      return node.properties.length === 0;
+    case AST_NODE_TYPES12.ArrayExpression:
+      return node.elements.length === 0;
+    case AST_NODE_TYPES12.TSAsExpression:
+      return isSilentExpression(node.expression);
+    default:
+      return false;
+  }
+}
+function isSilentHandler(handler) {
+  const body = handler.body;
+  if (body.type !== AST_NODE_TYPES12.BlockStatement) {
+    return isSilentExpression(body);
+  }
+  if (body.body.length === 0) {
+    return true;
+  }
+  if (body.body.length === 1) {
+    const only = body.body[0];
+    if (only !== void 0 && only.type === AST_NODE_TYPES12.ReturnStatement) {
+      return only.argument === null || isSilentExpression(only.argument);
+    }
+  }
+  return false;
+}
+var no_silent_promise_catch_default = ESLintUtils22.RuleCreator(
+  (name) => `https://github.com/sarj-ai/linting/blob/main/packages/typescript/src/rules/${name}.ts`
+)({
+  name: "no-silent-promise-catch",
+  meta: {
+    type: "problem",
+    docs: {
+      description: "Disallow `.catch()` handlers that silently swallow the rejection (e.g. `.catch(() => null)`); log, rethrow, or handle the error."
+    },
+    schema: [],
+    messages: {
+      silentCatch: "This `.catch()` swallows the rejection without logging, rethrowing, or handling it \u2014 failures become invisible and callers get an indistinguishable sentinel. Log the error (and only then map to a fallback), or let it propagate."
+    }
+  },
+  defaultOptions: [],
+  create(context) {
+    if (isTestFile(context.filename)) {
+      return {};
+    }
+    return {
+      CallExpression(node) {
+        if (node.callee.type !== AST_NODE_TYPES12.MemberExpression || node.callee.computed || node.callee.property.type !== AST_NODE_TYPES12.Identifier || node.callee.property.name !== "catch") {
+          return;
+        }
+        if (isBodyParseCall(node.callee.object)) {
+          return;
+        }
+        if (node.arguments.length !== 1) {
+          return;
+        }
+        const handler = node.arguments[0];
+        if (handler === void 0 || handler.type !== AST_NODE_TYPES12.ArrowFunctionExpression && handler.type !== AST_NODE_TYPES12.FunctionExpression) {
+          return;
+        }
+        if (isSilentHandler(handler)) {
+          context.report({ node, messageId: "silentCatch" });
+        }
+      }
+    };
+  }
+});
+
+// src/rules/require-fetch-timeout.ts
+import {
+  AST_NODE_TYPES as AST_NODE_TYPES13,
+  ASTUtils,
+  ESLintUtils as ESLintUtils23
+} from "@typescript-eslint/utils";
+var GLOBAL_OBJECTS = /* @__PURE__ */ new Set([
+  "globalThis",
+  "window",
+  "self"
+]);
+function matchesAnyPattern2(filename, patterns) {
+  for (const pattern of patterns) {
+    const regexSource = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "::DOUBLESTAR::").replace(/\*/g, "[^/\\\\]*").replace(/::DOUBLESTAR::/g, ".*");
+    if (new RegExp(`^${regexSource}$`).test(filename)) {
+      return true;
+    }
+  }
+  return false;
+}
+function initProvablyLacksSignal(init) {
+  if (init.type !== AST_NODE_TYPES13.ObjectExpression) {
+    return false;
+  }
+  for (const prop of init.properties) {
+    if (prop.type === AST_NODE_TYPES13.SpreadElement) {
+      return false;
+    }
+    if (prop.key.type === AST_NODE_TYPES13.Identifier && prop.key.name === "signal" || prop.key.type === AST_NODE_TYPES13.Literal && prop.key.value === "signal") {
+      return false;
+    }
+    if (prop.computed) {
+      return false;
+    }
+  }
+  return true;
+}
+function isStringish(node) {
+  return node.type === AST_NODE_TYPES13.Literal && typeof node.value === "string" || node.type === AST_NODE_TYPES13.TemplateLiteral;
+}
+var require_fetch_timeout_default = ESLintUtils23.RuleCreator(
+  (name) => `https://github.com/sarj-ai/linting/blob/main/packages/typescript/src/rules/${name}.ts`
+)({
+  name: "require-fetch-timeout",
+  meta: {
+    type: "problem",
+    docs: {
+      description: "Require an abort `signal` (e.g. `AbortSignal.timeout(ms)`) on global `fetch()` calls so stalled upstreams cannot hang the caller forever."
+    },
+    schema: [
+      {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          allowIn: {
+            description: "Glob patterns for wrapper modules exempt from the rule. Matched against the ABSOLUTE file path, so anchor with a `**/` prefix (e.g. `**/http-client.ts`).",
+            type: "array",
+            items: { type: "string" }
+          }
+        }
+      }
+    ],
+    messages: {
+      missingSignal: "This `fetch()` has no abort `signal` \u2014 a stalled upstream will hang it forever. Pass `{ signal: AbortSignal.timeout(ms) }` or a signal from an AbortController."
+    }
+  },
+  defaultOptions: [{}],
+  create(context, [optionsArg]) {
+    if (isTestFile(context.filename) || isScriptFile(context.filename)) {
+      return {};
+    }
+    const allowIn = optionsArg?.allowIn ?? [];
+    if (allowIn.length > 0 && matchesAnyPattern2(context.filename, allowIn)) {
+      return {};
+    }
+    function resolvesToGlobal(identifier) {
+      const scope = context.sourceCode.getScope(identifier);
+      const variable = ASTUtils.findVariable(scope, identifier.name);
+      return variable === null || variable.defs.length === 0;
+    }
+    function isGlobalFetchCall(callee) {
+      if (callee.type === AST_NODE_TYPES13.Identifier) {
+        return callee.name === "fetch" && resolvesToGlobal(callee);
+      }
+      return callee.type === AST_NODE_TYPES13.MemberExpression && !callee.computed && callee.property.type === AST_NODE_TYPES13.Identifier && callee.property.name === "fetch" && callee.object.type === AST_NODE_TYPES13.Identifier && GLOBAL_OBJECTS.has(callee.object.name) && resolvesToGlobal(callee.object);
+    }
+    return {
+      CallExpression(node) {
+        if (!isGlobalFetchCall(node.callee)) {
+          return;
+        }
+        const [first, init] = node.arguments;
+        if (node.arguments.length === 1 && first !== void 0 && !isStringish(first)) {
+          return;
+        }
+        if (init === void 0 || initProvablyLacksSignal(init)) {
+          context.report({ node, messageId: "missingSignal" });
+        }
+      }
+    };
+  }
+});
+
+// src/rules/require-schema-validate-search.ts
+import { AST_NODE_TYPES as AST_NODE_TYPES14, ESLintUtils as ESLintUtils24 } from "@typescript-eslint/utils";
+var VALIDATOR_METHODS = /* @__PURE__ */ new Set([
+  "parse",
+  "safeParse",
+  "decode"
+]);
+function isConstTypeAnnotation(typeAnnotation) {
+  return typeAnnotation.type === AST_NODE_TYPES14.TSTypeReference && typeAnnotation.typeName.type === AST_NODE_TYPES14.Identifier && typeAnnotation.typeName.name === "const";
+}
+function isValidatorCall(node) {
+  return node.callee.type === AST_NODE_TYPES14.MemberExpression && !node.callee.computed && node.callee.property.type === AST_NODE_TYPES14.Identifier && VALIDATOR_METHODS.has(node.callee.property.name);
+}
+function findCastExpression(node, insideValidatorArg) {
+  if ((node.type === AST_NODE_TYPES14.TSAsExpression || node.type === AST_NODE_TYPES14.TSTypeAssertion) && !isConstTypeAnnotation(node.typeAnnotation) && !insideValidatorArg) {
+    return node;
+  }
+  if (node.type === AST_NODE_TYPES14.CallExpression && isValidatorCall(node)) {
+    const inCallee = findCastExpression(node.callee, insideValidatorArg);
+    if (inCallee !== null) {
+      return inCallee;
+    }
+    for (const arg of node.arguments) {
+      const found = findCastExpression(arg, true);
+      if (found !== null) {
+        return found;
+      }
+    }
+    return null;
+  }
+  for (const key of Object.keys(node)) {
+    if (key === "parent") {
+      continue;
+    }
+    const value = node[key];
+    const children = Array.isArray(value) ? value : [value];
+    for (const child of children) {
+      if (child !== null && typeof child === "object" && "type" in child && typeof child.type === "string") {
+        const found = findCastExpression(
+          child,
+          insideValidatorArg
+        );
+        if (found !== null) {
+          return found;
+        }
+      }
+    }
+  }
+  return null;
+}
+var require_schema_validate_search_default = ESLintUtils24.RuleCreator(
+  (name) => `https://github.com/sarj-ai/linting/blob/main/packages/typescript/src/rules/${name}.ts`
+)({
+  name: "require-schema-validate-search",
+  meta: {
+    type: "problem",
+    docs: {
+      description: "Disallow `as` casts inside hand-rolled `validateSearch` functions; use a schema validator (e.g. zodValidator) so search params are validated at runtime."
+    },
+    schema: [],
+    messages: {
+      castInValidateSearch: "This `validateSearch` asserts the search-param shape with `as` instead of validating it \u2014 malformed query params flow through typed as clean data. Use a schema validator (e.g. `zodValidator(searchSchema)` or `searchSchema.parse`) instead of casting."
+    }
+  },
+  defaultOptions: [],
+  create(context) {
+    if (isTestFile(context.filename)) {
+      return {};
+    }
+    return {
+      Property(node) {
+        const isValidateSearchKey = !node.computed && node.key.type === AST_NODE_TYPES14.Identifier && node.key.name === "validateSearch" || node.key.type === AST_NODE_TYPES14.Literal && node.key.value === "validateSearch";
+        if (!isValidateSearchKey) {
+          return;
+        }
+        if (node.value.type !== AST_NODE_TYPES14.ArrowFunctionExpression && node.value.type !== AST_NODE_TYPES14.FunctionExpression) {
+          return;
+        }
+        const cast = findCastExpression(node.value.body, false);
+        if (cast !== null) {
+          context.report({ node: cast, messageId: "castInValidateSearch" });
+        }
+      }
+    };
+  }
+});
+
 // src/rules/no-fat-try-blocks.ts
 import {
-  ESLintUtils as ESLintUtils22,
-  AST_NODE_TYPES as AST_NODE_TYPES12
+  ESLintUtils as ESLintUtils25,
+  AST_NODE_TYPES as AST_NODE_TYPES15
 } from "@typescript-eslint/utils";
 var MAX_TRY_BODY_STATEMENTS = 3;
 var NESTED_FUNCTION_TYPES = /* @__PURE__ */ new Set([
-  AST_NODE_TYPES12.FunctionDeclaration,
-  AST_NODE_TYPES12.FunctionExpression,
-  AST_NODE_TYPES12.ArrowFunctionExpression
+  AST_NODE_TYPES15.FunctionDeclaration,
+  AST_NODE_TYPES15.FunctionExpression,
+  AST_NODE_TYPES15.ArrowFunctionExpression
 ]);
 var PURE_METHODS = /* @__PURE__ */ new Set([
   "map",
@@ -2862,20 +3145,20 @@ function isNode4(value) {
 }
 function isPureCall(node) {
   const callee = node.callee;
-  if (callee.type !== AST_NODE_TYPES12.MemberExpression) {
+  if (callee.type !== AST_NODE_TYPES15.MemberExpression) {
     return false;
   }
   const property = callee.property;
-  if (property.type !== AST_NODE_TYPES12.Identifier) {
+  if (property.type !== AST_NODE_TYPES15.Identifier) {
     return false;
   }
-  if (callee.object.type === AST_NODE_TYPES12.Identifier && PURE_NAMESPACES.has(callee.object.name)) {
+  if (callee.object.type === AST_NODE_TYPES15.Identifier && PURE_NAMESPACES.has(callee.object.name)) {
     return true;
   }
   return PURE_METHODS.has(property.name);
 }
 function isPureNew(node) {
-  return node.callee.type === AST_NODE_TYPES12.Identifier && PURE_CONSTRUCTORS.has(node.callee.name);
+  return node.callee.type === AST_NODE_TYPES15.Identifier && PURE_CONSTRUCTORS.has(node.callee.name);
 }
 function subtreeMatches(stmt, predicate) {
   let found = false;
@@ -2912,14 +3195,14 @@ function subtreeMatches(stmt, predicate) {
   visit(stmt);
   return found;
 }
-var hasAwait = (stmt) => subtreeMatches(stmt, (n) => n.type === AST_NODE_TYPES12.AwaitExpression);
+var hasAwait = (stmt) => subtreeMatches(stmt, (n) => n.type === AST_NODE_TYPES15.AwaitExpression);
 var hasThrowingCallOrNew = (stmt) => subtreeMatches(
   stmt,
-  (n) => n.type === AST_NODE_TYPES12.CallExpression && !isPureCall(n) || n.type === AST_NODE_TYPES12.NewExpression && !isPureNew(n)
+  (n) => n.type === AST_NODE_TYPES15.CallExpression && !isPureCall(n) || n.type === AST_NODE_TYPES15.NewExpression && !isPureNew(n)
 );
 function unwrap2(expr) {
   let current = expr;
-  while (current.type === AST_NODE_TYPES12.ChainExpression || current.type === AST_NODE_TYPES12.TSNonNullExpression) {
+  while (current.type === AST_NODE_TYPES15.ChainExpression || current.type === AST_NODE_TYPES15.TSNonNullExpression) {
     current = current.expression;
   }
   return current;
@@ -2928,7 +3211,7 @@ function canThrow(stmt) {
   if (hasAwait(stmt)) {
     return true;
   }
-  if (stmt.type === AST_NODE_TYPES12.ExpressionStatement && unwrap2(stmt.expression).type === AST_NODE_TYPES12.CallExpression) {
+  if (stmt.type === AST_NODE_TYPES15.ExpressionStatement && unwrap2(stmt.expression).type === AST_NODE_TYPES15.CallExpression) {
     return false;
   }
   return hasThrowingCallOrNew(stmt);
@@ -2939,9 +3222,9 @@ function handlerRethrows(handler) {
   }
   const body = handler.body.body;
   const last = body[body.length - 1];
-  return last !== void 0 && last.type === AST_NODE_TYPES12.ThrowStatement;
+  return last !== void 0 && last.type === AST_NODE_TYPES15.ThrowStatement;
 }
-var no_fat_try_blocks_default = ESLintUtils22.RuleCreator(
+var no_fat_try_blocks_default = ESLintUtils25.RuleCreator(
   (name) => `https://github.com/sarj-ai/standards/blob/main/packages/typescript/src/rules/${name}.ts`
 )({
   name: "no-fat-try-blocks",
@@ -2982,7 +3265,7 @@ var no_fat_try_blocks_default = ESLintUtils22.RuleCreator(
 });
 
 // src/rules/no-secret-in-log.ts
-import { ESLintUtils as ESLintUtils23 } from "@typescript-eslint/utils";
+import { ESLintUtils as ESLintUtils26 } from "@typescript-eslint/utils";
 var LOG_METHODS2 = /* @__PURE__ */ new Set([
   "debug",
   "info",
@@ -3180,7 +3463,7 @@ function propertyKeyName2(prop) {
   }
   return null;
 }
-var no_secret_in_log_default = ESLintUtils23.RuleCreator(
+var no_secret_in_log_default = ESLintUtils26.RuleCreator(
   (name) => `https://github.com/sarj-ai/standards/blob/main/packages/typescript/src/rules/${name}.ts`
 )({
   name: "no-secret-in-log",
@@ -3248,15 +3531,15 @@ var no_secret_in_log_default = ESLintUtils23.RuleCreator(
 });
 
 // src/rules/no-unsafe-cast.ts
-import { ESLintUtils as ESLintUtils24 } from "@typescript-eslint/utils";
-import { AST_NODE_TYPES as AST_NODE_TYPES13 } from "@typescript-eslint/utils";
+import { ESLintUtils as ESLintUtils27 } from "@typescript-eslint/utils";
+import { AST_NODE_TYPES as AST_NODE_TYPES16 } from "@typescript-eslint/utils";
 function isAnyAnnotation(node) {
-  return node.type === AST_NODE_TYPES13.TSAnyKeyword;
+  return node.type === AST_NODE_TYPES16.TSAnyKeyword;
 }
 function isConstAssertion(typeAnnotation) {
-  return typeAnnotation.type === AST_NODE_TYPES13.TSTypeReference && typeAnnotation.typeName.type === AST_NODE_TYPES13.Identifier && typeAnnotation.typeName.name === "const";
+  return typeAnnotation.type === AST_NODE_TYPES16.TSTypeReference && typeAnnotation.typeName.type === AST_NODE_TYPES16.Identifier && typeAnnotation.typeName.name === "const";
 }
-var no_unsafe_cast_default = ESLintUtils24.RuleCreator(
+var no_unsafe_cast_default = ESLintUtils27.RuleCreator(
   (name) => `https://github.com/sarj-ai/linting/blob/main/packages/typescript/src/rules/${name}.ts`
 )({
   name: "no-unsafe-cast",
@@ -3282,7 +3565,7 @@ var no_unsafe_cast_default = ESLintUtils24.RuleCreator(
         return;
       }
       const inner = node.expression;
-      if (inner.type === AST_NODE_TYPES13.TSAsExpression || inner.type === AST_NODE_TYPES13.TSTypeAssertion) {
+      if (inner.type === AST_NODE_TYPES16.TSAsExpression || inner.type === AST_NODE_TYPES16.TSTypeAssertion) {
         context.report({ node, messageId: "doubleCast" });
       }
     }
@@ -3295,8 +3578,8 @@ var no_unsafe_cast_default = ESLintUtils24.RuleCreator(
 
 // src/rules/prefer-string-literal-union.ts
 import {
-  ESLintUtils as ESLintUtils25,
-  AST_NODE_TYPES as AST_NODE_TYPES14
+  ESLintUtils as ESLintUtils28,
+  AST_NODE_TYPES as AST_NODE_TYPES17
 } from "@typescript-eslint/utils";
 import * as ts from "typescript";
 var CHOICE_TOKENS = /* @__PURE__ */ new Set([
@@ -3340,19 +3623,19 @@ function isChoiceLikeName(name) {
   return CHOICE_TOKENS.has(lastWord(name));
 }
 function keyName(key) {
-  if (key.type === AST_NODE_TYPES14.Identifier) {
+  if (key.type === AST_NODE_TYPES17.Identifier) {
     return key.name;
   }
-  if (key.type === AST_NODE_TYPES14.Literal && typeof key.value === "string") {
+  if (key.type === AST_NODE_TYPES17.Literal && typeof key.value === "string") {
     return key.value;
   }
   return null;
 }
 function isStringLiteralMember(t) {
-  return t.type === AST_NODE_TYPES14.TSLiteralType && t.literal.type === AST_NODE_TYPES14.Literal && typeof t.literal.value === "string";
+  return t.type === AST_NODE_TYPES17.TSLiteralType && t.literal.type === AST_NODE_TYPES17.Literal && typeof t.literal.value === "string";
 }
 function isStringLiteralUnion(node) {
-  if (node?.type !== AST_NODE_TYPES14.TSUnionType) {
+  if (node?.type !== AST_NODE_TYPES17.TSUnionType) {
     return false;
   }
   return node.types.filter(isStringLiteralMember).length >= MIN_CLUSTER_SIZE;
@@ -3381,12 +3664,12 @@ function bindingSourceExpression(decl) {
   return ts.isForOfStatement(node) ? node.expression : node.initializer;
 }
 function refKey(node) {
-  if (node.type === AST_NODE_TYPES14.Identifier) {
+  if (node.type === AST_NODE_TYPES17.Identifier) {
     return node.name;
   }
-  if (node.type === AST_NODE_TYPES14.MemberExpression && !node.computed) {
+  if (node.type === AST_NODE_TYPES17.MemberExpression && !node.computed) {
     const inner = refKey(node.object);
-    if (inner === null || node.property.type !== AST_NODE_TYPES14.Identifier) {
+    if (inner === null || node.property.type !== AST_NODE_TYPES17.Identifier) {
       return null;
     }
     return `${inner}.${node.property.name}`;
@@ -3394,12 +3677,12 @@ function refKey(node) {
   return null;
 }
 function strLiteral(node) {
-  if (node.type === AST_NODE_TYPES14.Literal && typeof node.value === "string") {
+  if (node.type === AST_NODE_TYPES17.Literal && typeof node.value === "string") {
     return node.value;
   }
   return null;
 }
-var prefer_string_literal_union_default = ESLintUtils25.RuleCreator(
+var prefer_string_literal_union_default = ESLintUtils28.RuleCreator(
   (name) => `https://github.com/sarj-ai/linting/blob/main/packages/typescript/src/rules/${name}.ts`
 )({
   name: "prefer-string-literal-union",
@@ -3423,7 +3706,7 @@ var prefer_string_literal_union_default = ESLintUtils25.RuleCreator(
     }
     let services;
     try {
-      services = ESLintUtils25.getParserServices(context);
+      services = ESLintUtils28.getParserServices(context);
     } catch {
       services = null;
     }
@@ -3507,7 +3790,7 @@ var prefer_string_literal_union_default = ESLintUtils25.RuleCreator(
         containersWithUnion.add(container);
         return;
       }
-      if (typeNode?.type !== AST_NODE_TYPES14.TSStringKeyword) {
+      if (typeNode?.type !== AST_NODE_TYPES17.TSStringKeyword) {
         return;
       }
       const name = keyName(key);
@@ -3595,10 +3878,10 @@ var prefer_string_literal_union_default = ESLintUtils25.RuleCreator(
       }
     };
     function refKeyText(node) {
-      if (node.type === AST_NODE_TYPES14.BinaryExpression) {
+      if (node.type === AST_NODE_TYPES17.BinaryExpression) {
         return refKey(node.left) ?? refKey(node.right) ?? "value";
       }
-      if (node.type === AST_NODE_TYPES14.SwitchStatement) {
+      if (node.type === AST_NODE_TYPES17.SwitchStatement) {
         return refKey(node.discriminant) ?? "value";
       }
       return "value";
@@ -3607,7 +3890,7 @@ var prefer_string_literal_union_default = ESLintUtils25.RuleCreator(
 });
 
 // src/rules/single-public-export.ts
-import { ESLintUtils as ESLintUtils26, AST_NODE_TYPES as AST_NODE_TYPES15 } from "@typescript-eslint/utils";
+import { ESLintUtils as ESLintUtils29, AST_NODE_TYPES as AST_NODE_TYPES18 } from "@typescript-eslint/utils";
 var JUNK_DRAWER_STEMS = /* @__PURE__ */ new Set([
   "util",
   "utils",
@@ -3630,7 +3913,7 @@ var ACRONYM_OVERRIDES = [
   [/gRPC/g, "Grpc"]
 ];
 var CAMEL_BOUNDARY_RE = /(?<=[a-z0-9])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/g;
-var TEST_FILE_RE = /\.(test|spec)\.[cm]?[jt]sx?$/i;
+var TEST_FILE_RE2 = /\.(test|spec)\.[cm]?[jt]sx?$/i;
 var SCRIPT_EXT_RE = /\.[cm]?[jt]sx?$/i;
 var basename = (filename) => filename.split(/[/\\]/).pop() ?? filename;
 var stemOf = (base) => base.replace(SCRIPT_EXT_RE, "");
@@ -3641,12 +3924,12 @@ var kebabCase2 = (name) => {
   }
   return normalized.replace(CAMEL_BOUNDARY_RE, "-").toLowerCase();
 };
-var isFunctionExpression = (node) => node !== null && (node.type === AST_NODE_TYPES15.ArrowFunctionExpression || node.type === AST_NODE_TYPES15.FunctionExpression);
+var isFunctionExpression = (node) => node !== null && (node.type === AST_NODE_TYPES18.ArrowFunctionExpression || node.type === AST_NODE_TYPES18.FunctionExpression);
 var functionConstName = (decl) => {
   if (decl.declarations.length !== 1) return null;
   const [declarator] = decl.declarations;
   if (declarator === void 0) return null;
-  if (declarator.id.type !== AST_NODE_TYPES15.Identifier) return null;
+  if (declarator.id.type !== AST_NODE_TYPES18.Identifier) return null;
   if (!isFunctionExpression(declarator.init)) return null;
   return declarator.id.name;
 };
@@ -3660,20 +3943,20 @@ var summarizeExports = (body) => {
   };
   for (const statement of body) {
     switch (statement.type) {
-      case AST_NODE_TYPES15.ExportAllDeclaration:
+      case AST_NODE_TYPES18.ExportAllDeclaration:
         hasReExport = true;
         break;
-      case AST_NODE_TYPES15.ExportDefaultDeclaration: {
+      case AST_NODE_TYPES18.ExportDefaultDeclaration: {
         names += 1;
         const decl = statement.declaration;
-        if (decl.type === AST_NODE_TYPES15.FunctionDeclaration && decl.id !== null) {
+        if (decl.type === AST_NODE_TYPES18.FunctionDeclaration && decl.id !== null) {
           candidate = { name: decl.id.name, node: statement };
-        } else if (decl.type === AST_NODE_TYPES15.ClassDeclaration && decl.id !== null) {
+        } else if (decl.type === AST_NODE_TYPES18.ClassDeclaration && decl.id !== null) {
           candidate = { name: decl.id.name, node: statement };
         }
         break;
       }
-      case AST_NODE_TYPES15.ExportNamedDeclaration: {
+      case AST_NODE_TYPES18.ExportNamedDeclaration: {
         if (statement.source !== null) {
           hasReExport = true;
           break;
@@ -3684,15 +3967,15 @@ var summarizeExports = (body) => {
           break;
         }
         switch (decl.type) {
-          case AST_NODE_TYPES15.FunctionDeclaration:
+          case AST_NODE_TYPES18.FunctionDeclaration:
             if (decl.id !== null) addCandidate(decl.id.name, statement);
             else names += 1;
             break;
-          case AST_NODE_TYPES15.ClassDeclaration:
+          case AST_NODE_TYPES18.ClassDeclaration:
             if (decl.id !== null) addCandidate(decl.id.name, statement);
             else names += 1;
             break;
-          case AST_NODE_TYPES15.VariableDeclaration: {
+          case AST_NODE_TYPES18.VariableDeclaration: {
             const fnName = functionConstName(decl);
             if (fnName !== null && decl.declarations.length === 1) {
               addCandidate(fnName, statement);
@@ -3712,7 +3995,7 @@ var summarizeExports = (body) => {
   }
   return { names, hasReExport, candidate };
 };
-var single_public_export_default = ESLintUtils26.RuleCreator(
+var single_public_export_default = ESLintUtils29.RuleCreator(
   (name) => `https://github.com/sarj-ai/standards/blob/main/packages/typescript/src/rules/${name}.ts`
 )({
   name: "single-public-export",
@@ -3730,7 +4013,7 @@ var single_public_export_default = ESLintUtils26.RuleCreator(
   create(context) {
     const base = basename(context.filename);
     if (base.endsWith(".d.ts")) return {};
-    if (TEST_FILE_RE.test(base)) return {};
+    if (TEST_FILE_RE2.test(base)) return {};
     const stem = stemOf(base);
     if (!JUNK_DRAWER_STEMS.has(stem.toLowerCase())) return {};
     return {
@@ -3778,12 +4061,15 @@ var rules = {
   "no-secret-in-log": no_secret_in_log_default,
   "no-unsafe-cast": no_unsafe_cast_default,
   "prefer-string-literal-union": prefer_string_literal_union_default,
-  "single-public-export": single_public_export_default
+  "single-public-export": single_public_export_default,
+  "no-silent-promise-catch": no_silent_promise_catch_default,
+  "require-fetch-timeout": require_fetch_timeout_default,
+  "require-schema-validate-search": require_schema_validate_search_default
 };
 var plugin = {
   meta: {
     name: "@sarj/eslint-plugin",
-    version: "2.6.0"
+    version: "2.7.0"
   },
   rules,
   configs: {
@@ -3815,7 +4101,11 @@ var plugin = {
         "@sarj/no-secret-in-log": "warn",
         "@sarj/no-unsafe-cast": "warn",
         "@sarj/single-public-export": "warn",
-        "@sarj/prefer-string-literal-union": "warn"
+        "@sarj/prefer-string-literal-union": "warn",
+        // Mined from 2y of PR review feedback + 5-repo code-smell audit (2026-07).
+        "@sarj/require-fetch-timeout": "warn",
+        "@sarj/no-silent-promise-catch": "warn",
+        "@sarj/require-schema-validate-search": "warn"
       }
     },
     strict: {
@@ -3851,7 +4141,11 @@ var plugin = {
         "@sarj/no-unsafe-cast": "warn",
         "@sarj/single-public-export": "error",
         // High-volume/stylistic — warn until rollout proves FP rate.
-        "@sarj/prefer-string-literal-union": "warn"
+        "@sarj/prefer-string-literal-union": "warn",
+        // Mined from 2y of PR review feedback + 5-repo code-smell audit (2026-07).
+        "@sarj/require-fetch-timeout": "error",
+        "@sarj/no-silent-promise-catch": "error",
+        "@sarj/require-schema-validate-search": "error"
       }
     }
   }