@starci/eslint-canon-be 3.4.35 → 3.4.37

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 3.4.37 - 2026-10-24
+- Changed: the bundled canon pins select zod 4.6.7, @starci/hfs 4.7.29 and @starci/cli 1.7.29.
+
+## 3.4.36 - 2026-10-23
+- Changed: the bundled rule catalog and slot manifest name the specs that moved into this package (they drive its rules and fixtures and now pass from its own clean install); 3.4.35 was published with the old spec paths and is superseded.
+
 ## 3.4.35 - 2026-10-23
 - Changed: `BE_AMBIENT_ID` has no exemption for the test world (owner ruling 2026-10-22: a loosening is always red); the world asks the injected `Ids` port like everything else.
 - Changed: the bundled canon pins select @starci/hfs 4.7.28 and @starci/cli 1.7.28.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-canon-be",
-  "version": "3.4.35",
+  "version": "3.4.37",
   "description": "The StarCi back-end lint canon: every rule its laws publish, gathered as one flat-config plugin.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -29,14 +29,14 @@ pins:
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.35
+    version: 3.4.37
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 8.4.34
+    version: 8.4.36
     group: starci
     install: registry
     side: fe
@@ -76,14 +76,14 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.28
+    version: 1.7.29
     group: starci
     install: registry
     side: both
     source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.28
+    version: 4.7.29
     group: starci
     install: registry
     side: both
@@ -336,10 +336,10 @@ pins:
     side: fe
     why: 'the zod resolver of react-hook-form (fe-stack forms); version read from the starci-academy package-lock on 2026-10-13.'
   'zod':
-    version: 4.4.3
+    version: 4.6.7
     group: framework
     side: fe
-    why: 'the schema library of front-end forms and boundary parsing (fe-stack forms); version read from the starci-academy package-lock on 2026-10-13.'
+    why: 'the schema library of front-end forms and boundary parsing (fe-stack forms), also an npm override of every app root; 4.6.7 (the registry latest on 2026-10-24) closes GHSA-mrhx-c7xc-m3w5 (high, fixed in 4.6.6), which npm audit --audit-level=high reported against 4.4.3.'
   '@reduxjs/toolkit':
     version: 2.11.2
     group: framework

package/runtime/knowledge/hfs/rules.yaml

@@ -393,15 +393,15 @@ rules:
       - {kind: eslint-fe, id: no-double-cast}
     proves:
       - {path: packages/hfs/src/hfs-ts-strict.spec.mjs, editions: [lite, full], codes: [HFS_TS_STRICT]}
-      - {path: packages/hfs/src/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
+      - {path: packages/eslint/fe/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
     exemplifiedBy:
       - {path: "packages/hfs/templates/be/tool-config/tsconfig.json", editions: ["lite", "full"]}
       - {path: "packages/hfs/templates/fe/tool-config/tsconfig.json", editions: ["lite", "full"]}
       - {path: packages/hfs/src/hfs-ts-strict.spec.mjs, editions: [lite, full], codes: [HFS_TS_STRICT]}
-      - {path: packages/hfs/src/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
+      - {path: packages/eslint/fe/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
     witness:
       - {path: packages/hfs/src/hfs-ts-strict.spec.mjs, editions: [lite, full], codes: [HFS_TS_STRICT]}
-      - {path: packages/hfs/src/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
+      - {path: packages/eslint/fe/hfs-ts-strict-rule-tester.spec.mjs, editions: [lite, full], codes: [FE_TYPE_ESCAPE]}
   - id: R23
     code: "HFS_CONTRACT_SNAPSHOT_DRIFT"
     editions: ["lite", "full"]
@@ -451,16 +451,16 @@ rules:
       - {kind: eslint-be, id: dead-exports}
       - {kind: eslint-fe, id: dead-exports}
     proves:
-      - {path: packages/hfs/src/hfs-unused-export.spec.mjs, editions: [lite, full], codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
+      - {path: packages/eslint/be/hfs-unused-export.spec.mjs, editions: [lite, full], codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
     exemplifiedBy:
       - {path: "packages/hfs/templates/be/skeleton-lite/apps/api/src/main.ts", edition: "lite"}
       - {path: "packages/hfs/templates/be/skeleton/apps/__app__/src/main.ts", edition: "full"}
       - {path: "packages/hfs/templates/fe/skeleton-lite/apps/web/src/app/[locale]/page.tsx", edition: "lite"}
       - {path: "packages/hfs/templates/fe/skeleton/apps/app/src/app/[locale]/page.tsx", edition: "full"}
-      - {path: packages/hfs/src/hfs-unused-export.spec.mjs, editions: [lite, full], codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
+      - {path: packages/eslint/be/hfs-unused-export.spec.mjs, editions: [lite, full], codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
     witness:
-      - {path: packages/hfs/src/hfs-unused-export.spec.mjs, edition: lite, codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
-      - {path: packages/hfs/src/hfs-unused-export.spec.mjs, edition: full, codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
+      - {path: packages/eslint/be/hfs-unused-export.spec.mjs, edition: lite, codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
+      - {path: packages/eslint/be/hfs-unused-export.spec.mjs, edition: full, codes: [HFS_UNUSED_EXPORT, HFS_UNUSED_FILE]}
   - id: R26
     code: "BE_TIER_DIRECTION"
     editions: [lite, full]
@@ -530,13 +530,13 @@ rules:
       - {kind: eslint-be, id: feature-layout}
       - {kind: eslint-be, id: application-never-imports-transport}
     proves:
-      - {path: packages/hfs/src/a16-r29-r31.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/be/a16-r29-r31.spec.mjs, editions: [lite, full]}
     exemplifiedBy:
       - {path: packages/hfs/templates/be/patterns/api/feature.module.ts.tpl, editions: [lite, full]}
-      - {path: packages/hfs/src/a16-r29-r31.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/be/a16-r29-r31.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/hfs/src/a16-r29-r31.spec.mjs, edition: lite}
-      - {path: packages/hfs/src/a16-r29-r31.spec.mjs, edition: full}
+      - {path: packages/eslint/be/a16-r29-r31.spec.mjs, edition: lite}
+      - {path: packages/eslint/be/a16-r29-r31.spec.mjs, edition: full}
   - id: R30
     code: "BE_PUBLIC_SURFACE"
     law: "Every owner has one `index.ts`; cross-owner imports use it, same-owner imports are relative and never go through it; it holds only named `export { }` lines, no `export *`, no alias re-export (`export { X as Y }`, `export const Y = X`, `export type Y = X`, `export interface Y extends X {}`: one declaration has one name), within the owner slot's `indexExports` budget (60 for domain and feature owners, 80 for `be.integrations` provider entries); cross-package imports use the package name and a declared export."
@@ -1064,13 +1064,13 @@ rules:
       - {kind: eslint-fe, id: no-hand-typed-wire}
       - {kind: hfs, id: wire-generated, at: scripts/hfs/rules/frontend-tree.mjs}
     proves:
-      - {path: packages/hfs/src/r52-wire-generated.spec.mjs, editions: [lite, full], codes: [FE_WIRE_GENERATED]}
+      - {path: packages/eslint/fe/r52-wire-generated.spec.mjs, editions: [lite, full], codes: [FE_WIRE_GENERATED]}
     exemplifiedBy:
       - {path: packages/hfs/templates/fe/table/graphql/query.types.ts.tpl, editions: [lite, full]}
-      - {path: packages/hfs/src/r52-wire-generated.spec.mjs, editions: [lite, full], codes: [FE_WIRE_GENERATED]}
+      - {path: packages/eslint/fe/r52-wire-generated.spec.mjs, editions: [lite, full], codes: [FE_WIRE_GENERATED]}
     witness:
-      - {path: packages/hfs/src/r52-wire-generated.spec.mjs, edition: lite, codes: [FE_WIRE_GENERATED]}
-      - {path: packages/hfs/src/r52-wire-generated.spec.mjs, edition: full, codes: [FE_WIRE_GENERATED]}
+      - {path: packages/eslint/fe/r52-wire-generated.spec.mjs, edition: lite, codes: [FE_WIRE_GENERATED]}
+      - {path: packages/eslint/fe/r52-wire-generated.spec.mjs, edition: full, codes: [FE_WIRE_GENERATED]}
   - id: R53
     code: "FE_ERROR_BOUNDARY_MISSING"
     editions: [lite, full]
@@ -1083,14 +1083,14 @@ rules:
       - {kind: eslint-fe, id: no-null-suspense-fallback}
       - {kind: machine, id: error-boundary-missing, at: scripts/hfs/architecture/required-files.mjs}
     proves:
-      - {path: packages/hfs/src/r53-error-boundaries.spec.mjs, editions: [lite, full], codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
+      - {path: packages/eslint/fe/r53-error-boundaries.spec.mjs, editions: [lite, full], codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
     exemplifiedBy:
       - {path: packages/hfs/templates/fe/skeleton-lite/apps/web/src/app/global-error.tsx, edition: lite}
       - {path: packages/hfs/templates/fe/skeleton/apps/app/src/app/global-error.tsx, edition: full}
-      - {path: packages/hfs/src/r53-error-boundaries.spec.mjs, editions: [lite, full], codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
+      - {path: packages/eslint/fe/r53-error-boundaries.spec.mjs, editions: [lite, full], codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
     witness:
-      - {path: packages/hfs/src/r53-error-boundaries.spec.mjs, edition: lite, codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
-      - {path: packages/hfs/src/r53-error-boundaries.spec.mjs, edition: full, codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
+      - {path: packages/eslint/fe/r53-error-boundaries.spec.mjs, edition: lite, codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
+      - {path: packages/eslint/fe/r53-error-boundaries.spec.mjs, edition: full, codes: [FE_ERROR_BOUNDARY_MISSING, FE_SUSPENSE_NULL_FALLBACK]}
   - id: R54
     code: "FE_ROUTE_FILES_THIN"
     law: "Route files mount one owner; Next conventions (`proxy.ts`, metadata)."
@@ -1780,13 +1780,14 @@ rules:
     docs: ["docs/be-shape-coverage.md#r89"]
     gates: ["pre-commit","settle","land","ci"]
     proves:
-      - {path: packages/hfs/src/be-r89-source-form-coverage.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/be/be-r89-source-form-coverage.spec.mjs, editions: [lite, full]}
+      - {path: packages/hfs/src/be-r89-source-suffix.spec.mjs, editions: [lite, full], codes: [BE_SOURCE_FORM]}
     exemplifiedBy:
       - {path: packages/hfs/templates/be/patterns/api/graphql.input.ts.tpl, editions: [lite, full]}
-      - {path: packages/hfs/src/be-r89-source-form-coverage.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/be/be-r89-source-form-coverage.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/hfs/src/be-r89-source-form-coverage.spec.mjs, edition: lite, codes: [BE_SOURCE_FORM, BE_PUBLIC_CONTRACT_FORM]}
-      - {path: packages/hfs/src/be-r89-source-form-coverage.spec.mjs, edition: full, codes: [BE_SOURCE_FORM, BE_PUBLIC_CONTRACT_FORM]}
+      - {path: packages/eslint/be/be-r89-source-form-coverage.spec.mjs, edition: lite, codes: [BE_SOURCE_FORM, BE_PUBLIC_CONTRACT_FORM]}
+      - {path: packages/eslint/be/be-r89-source-form-coverage.spec.mjs, edition: full, codes: [BE_SOURCE_FORM, BE_PUBLIC_CONTRACT_FORM]}
   - id: R90
     code: "BE_INFRA_OWNER"
     law: "Each raw infrastructure library (HTTP, cache, queue, scheduler, logger, date, config, events) is imported or referenced only by its one owning platform or integration capability, and the `HttpClient` port of `platform/http` is called only by an `integrations` capability."
@@ -1891,13 +1892,13 @@ rules:
     templateNa: "Vendor boundary violations and installed Grammar package contracts are checked against consumer ownership; no managed template scaffolds a vendor install or a forbidden import."
     proves:
       - packages/eslint/fe/r93-vendor-coverage.spec.mjs
-      - packages/hfs/src/r93-grammar-ownership.spec.mjs
+      - packages/eslint/fe/r93-grammar-ownership.spec.mjs
     exemplifiedBy:
       - {path: packages/eslint/fe/r93-vendor-coverage.spec.mjs, editions: [lite, full]}
-      - {path: packages/hfs/src/r93-grammar-ownership.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full]}
     witness:
       - {path: packages/eslint/fe/r93-vendor-coverage.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
-      - {path: packages/hfs/src/r93-grammar-ownership.spec.mjs, editions: [lite, full], codes: [ARCH_GRAMMAR_CONTRACT_INVALID, ARCH_GRAMMAR_EXPORT_BYPASS]}
+      - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full], codes: [ARCH_GRAMMAR_CONTRACT_INVALID, ARCH_GRAMMAR_EXPORT_BYPASS]}
   - id: R94
     code: "FE_SLOT_FILE_ROLE"
     law: "A front-end file is owned by a slot and named by it: a slot that owns a directory (route, feature, components, hooks, api module) holds only the files its `allows` list names, and holds them inside a folder of its own."
@@ -2683,11 +2684,11 @@ rules:
     enforcers:
       - {kind: eslint-be, id: kind-isolation}
       - {kind: machine, id: tiers, at: scripts/hfs/architecture/tiers.mjs}
-    proves: [packages/hfs/src/architecture-kind-isolation-coverage.spec.mjs]
+    proves: [packages/eslint/be/architecture-kind-isolation-coverage.spec.mjs]
     exemplifiedBy:
-      - {path: packages/hfs/src/architecture-kind-isolation-coverage.spec.mjs, editions: [lite, full], codes: [BE_KIND_ISOLATION]}
+      - {path: packages/eslint/be/architecture-kind-isolation-coverage.spec.mjs, editions: [lite, full], codes: [BE_KIND_ISOLATION]}
     witness:
-      - {path: packages/hfs/src/architecture-kind-isolation-coverage.spec.mjs, editions: [lite, full], codes: [BE_KIND_ISOLATION]}
+      - {path: packages/eslint/be/architecture-kind-isolation-coverage.spec.mjs, editions: [lite, full], codes: [BE_KIND_ISOLATION]}
   - id: R157
     code: "BE_JOB_WRITE_OUTSIDE_OWNER"
     editions: [lite, full]

package/runtime/knowledge/hfs/slots.yaml

@@ -2276,7 +2276,7 @@ slots:
     why: the canonical GraphQL client output of codegen is local and never committed; this specific slot overrides the tracked API parent
     rules: [FE_WIRE_GENERATED]
     exemplifiedBy:
-      - {path: packages/hfs/src/r52-wire-generated.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/fe/r52-wire-generated.spec.mjs, editions: [lite, full]}
   - id: fe.transport.client
     since: 3.1.0
     profiles: [fe]