@ttsc/lint 0.14.0-dev.20260529.2 → 0.14.0

package/lib/structures/rules/ITtscLintSecurityRules.d.ts

@@ -1,49 +1,47 @@
 import type { TtscLintRuleSetting } from "../TtscLintRuleSetting";
 /**
- * Security-focused TypeScript source rules from
- * `eslint-plugin-security`.
+ * Security-focused TypeScript source rules from `eslint-plugin-security`.
  *
- * Reports likely security smells — non-literal sinks for eval, file
- * I/O, regex construction, child-process spawning, cryptographic
- * primitives — that warrant human review even if no exploit is
- * statically provable.
+ * Reports likely security smells — non-literal sinks for eval, file I/O, regex
+ * construction, child-process spawning, cryptographic primitives — that warrant
+ * human review even if no exploit is statically provable.
  *
- * Treat findings as *hints*, not proofs.
+ * Treat findings as _hints_, not proofs.
  *
  * @reference https://github.com/eslint-community/eslint-plugin-security
  */
 export interface ITtscLintSecurityRules {
     /**
-     * Detect Trojan-Source bidi control characters (U+202A, U+202E,
-     * ...) hidden inside source.
+     * Detect Trojan-Source bidi control characters (U+202A, U+202E, ...) hidden
+     * inside source.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-bidi-characters.md
      */
     "security/detect-bidi-characters"?: TtscLintRuleSetting;
     /**
-     * Detect Buffer reads/writes called with `noAssert = true`, which
-     * skips Node's offset/length bounds checks.
+     * Detect Buffer reads/writes called with `noAssert = true`, which skips
+     * Node's offset/length bounds checks.
      *
-     * The flag lets the offset slide past the buffer end and read
-     * unrelated memory, so production code should never set it.
+     * The flag lets the offset slide past the buffer end and read unrelated
+     * memory, so production code should never set it.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-buffer-noassert.md
      */
     "security/detect-buffer-noassert"?: TtscLintRuleSetting;
     /**
-     * Detect any import of `child_process` and any `exec`/`execSync`
-     * call whose command argument is not a string literal.
+     * Detect any import of `child_process` and any `exec`/`execSync` call whose
+     * command argument is not a string literal.
      *
-     * Non-literal commands are the canonical shell-injection sink in
-     * Node services.
+     * Non-literal commands are the canonical shell-injection sink in Node
+     * services.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-child-process.md
      */
     "security/detect-child-process"?: TtscLintRuleSetting;
     /**
-     * Detect assignments setting `escapeMarkup = false` (or the
-     * equivalent option on Handlebars/Mustache-style engines), which
-     * turns off HTML entity escaping in template output.
+     * Detect assignments setting `escapeMarkup = false` (or the equivalent option
+     * on Handlebars/Mustache-style engines), which turns off HTML entity escaping
+     * in template output.
      *
      * Result: an unguarded XSS sink for caller-controlled strings.
      *
@@ -54,15 +52,14 @@ export interface ITtscLintSecurityRules {
      * Detect `eval(...)` calls whose argument is not a string literal.
      *
      * Any expression argument means caller-controlled data can reach a
-     * code-execution sink. The rule flags the call shape, not proven
-     * taint.
+     * code-execution sink. The rule flags the call shape, not proven taint.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-eval-with-expression.md
      */
     "security/detect-eval-with-expression"?: TtscLintRuleSetting;
     /**
-     * Detect `new Buffer(input)` constructions with non-literal
-     * input — historical source of allocation-disclosure bugs.
+     * Detect `new Buffer(input)` constructions with non-literal input —
+     * historical source of allocation-disclosure bugs.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-new-buffer.md
      */
@@ -75,40 +72,38 @@ export interface ITtscLintSecurityRules {
      */
     "security/detect-no-csrf-before-method-override"?: TtscLintRuleSetting;
     /**
-     * Detect `fs` calls (`readFile`, `writeFile`, `createReadStream`,
-     * ...) whose filename argument is not a string literal.
+     * Detect `fs` calls (`readFile`, `writeFile`, `createReadStream`, ...) whose
+     * filename argument is not a string literal.
      *
-     * Dynamic filenames are the standard path-traversal sink; sanitise
-     * or allow-list before the call.
+     * Dynamic filenames are the standard path-traversal sink; sanitise or
+     * allow-list before the call.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-fs-filename.md
      */
     "security/detect-non-literal-fs-filename"?: TtscLintRuleSetting;
     /**
-     * Detect `new RegExp(...)` construction whose pattern argument is
-     * not a string literal.
+     * Detect `new RegExp(...)` construction whose pattern argument is not a
+     * string literal.
      *
-     * Caller-controlled patterns can both trigger catastrophic
-     * backtracking and let an attacker reshape the matcher to bypass
-     * intended validation.
+     * Caller-controlled patterns can both trigger catastrophic backtracking and
+     * let an attacker reshape the matcher to bypass intended validation.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-regexp.md
      */
     "security/detect-non-literal-regexp"?: TtscLintRuleSetting;
     /**
-     * Detect `require(...)` calls whose specifier is computed at
-     * runtime.
+     * Detect `require(...)` calls whose specifier is computed at runtime.
      *
-     * A dynamic specifier lets caller-controlled data choose the module
-     * to load, bypassing any module allow-list on Node.
+     * A dynamic specifier lets caller-controlled data choose the module to load,
+     * bypassing any module allow-list on Node.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-require.md
      */
     "security/detect-non-literal-require"?: TtscLintRuleSetting;
     /**
-     * Detect dynamic bracket-access such as `obj[req.body.x] = ...`,
-     * which can let caller-controlled keys overwrite prototype-shaped
-     * properties or pull out unintended fields.
+     * Detect dynamic bracket-access such as `obj[req.body.x] = ...`, which can
+     * let caller-controlled keys overwrite prototype-shaped properties or pull
+     * out unintended fields.
      *
      * Fires on virtually any computed property access; expect a high
      * false-positive rate in normal application code.
@@ -117,30 +112,28 @@ export interface ITtscLintSecurityRules {
      */
     "security/detect-object-injection"?: TtscLintRuleSetting;
     /**
-     * Detect direct equality comparisons involving secret-like
-     * identifiers (`if (token === expected)`) — use
-     * `crypto.timingSafeEqual` instead.
+     * Detect direct equality comparisons involving secret-like identifiers (`if
+     * (token === expected)`) — use `crypto.timingSafeEqual` instead.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-possible-timing-attacks.md
      */
     "security/detect-possible-timing-attacks"?: TtscLintRuleSetting;
     /**
-     * Detect `crypto.pseudoRandomBytes`, which produces values that
-     * are not cryptographically secure.
+     * Detect `crypto.pseudoRandomBytes`, which produces values that are not
+     * cryptographically secure.
      *
-     * Tokens, session ids, and key material must use
-     * `crypto.randomBytes` (or Web Crypto's `getRandomValues`) instead.
+     * Tokens, session ids, and key material must use `crypto.randomBytes` (or Web
+     * Crypto's `getRandomValues`) instead.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-pseudoRandomBytes.md
      */
     "security/detect-pseudoRandomBytes"?: TtscLintRuleSetting;
     /**
-     * Detect regex literals with catastrophic backtracking potential
-     * (ReDoS) — typically nested or overlapping quantifiers over the
-     * same character set.
+     * Detect regex literals with catastrophic backtracking potential (ReDoS) —
+     * typically nested or overlapping quantifiers over the same character set.
      *
-     * Matching caller-controlled input against such a pattern can
-     * block the event loop for seconds.
+     * Matching caller-controlled input against such a pattern can block the event
+     * loop for seconds.
      *
      * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-unsafe-regex.md
      */

package/lib/structures/rules/ITtscLintSolidRules.d.ts

@@ -2,64 +2,63 @@ import type { TtscLintRuleSetting } from "../TtscLintRuleSetting";
 /**
  * Solid TSX rules from `eslint-plugin-solid`.
  *
- * Solid components compile to fine-grained reactivity, so patterns
- * that look correct in React (destructuring props, calling
- * `useEffect`-style hooks with array deps) silently break reactivity
- * in Solid. This family captures the common Solid-only pitfalls.
+ * Solid components compile to fine-grained reactivity, so patterns that look
+ * correct in React (destructuring props, calling `useEffect`-style hooks with
+ * array deps) silently break reactivity in Solid. This family captures the
+ * common Solid-only pitfalls.
  *
  * @reference https://github.com/solidjs-community/eslint-plugin-solid
  */
 export interface ITtscLintSolidRules {
     /**
-     * Reject early and conditional `return` from a Solid component
-     * — Solid components must return exactly once at the top level.
+     * Reject early and conditional `return` from a Solid component — Solid
+     * components must return exactly once at the top level.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/components-return-once.md
      */
     "solid/components-return-once"?: TtscLintRuleSetting;
     /**
-     * Require DOM event handler props to use canonical Solid casing
-     * (`onClick`, not `onclick` / `onClIcK`) so the compiler recognizes
-     * them as events. Also flags `on*`-named props bound to non-function
-     * values, which look like handlers but are not.
+     * Require DOM event handler props to use canonical Solid casing (`onClick`,
+     * not `onclick` / `onClIcK`) so the compiler recognizes them as events. Also
+     * flags `on*`-named props bound to non-function values, which look like
+     * handlers but are not.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/event-handlers.md
      */
     "solid/event-handlers"?: TtscLintRuleSetting;
     /**
      * Route each Solid export to the correct entry point (`solid-js`,
-     * `solid-js/web`, or `solid-js/store`) and merge duplicate imports
-     * from the same entry.
+     * `solid-js/web`, or `solid-js/store`) and merge duplicate imports from the
+     * same entry.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/imports.md
      */
     "solid/imports"?: TtscLintRuleSetting;
     /**
-     * Reject duplicate JSX props on the same Solid element. Unlike
-     * React, Solid silently keeps the first value, so the duplicate is
-     * dead code and almost always a typo.
+     * Reject duplicate JSX props on the same Solid element. Unlike React, Solid
+     * silently keeps the first value, so the duplicate is dead code and almost
+     * always a typo.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-duplicate-props.md
      */
     "solid/jsx-no-duplicate-props"?: TtscLintRuleSetting;
     /**
-     * Reject `javascript:` URLs in Solid JSX attributes (`href`, `src`,
-     * ...) — they evaluate the suffix as code in the page context and
-     * are a long-standing XSS vector.
+     * Reject `javascript:` URLs in Solid JSX attributes (`href`, `src`, ...) —
+     * they evaluate the suffix as code in the page context and are a
+     * long-standing XSS vector.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-script-url.md
      */
     "solid/jsx-no-script-url"?: TtscLintRuleSetting;
     /**
-     * Reject Solid JSX component names that are not declared or
-     * imported in scope.
+     * Reject Solid JSX component names that are not declared or imported in
+     * scope.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-undef.md
      */
     "solid/jsx-no-undef"?: TtscLintRuleSetting;
     /**
-     * Scope-marker compatibility rule (mirrors ESLint's
-     * `react/jsx-uses-vars`).
+     * Scope-marker compatibility rule (mirrors ESLint's `react/jsx-uses-vars`).
      *
      * The native engine emits no diagnostics for this id.
      *
@@ -67,32 +66,32 @@ export interface ITtscLintSolidRules {
      */
     "solid/jsx-uses-vars"?: TtscLintRuleSetting;
     /**
-     * Reject array values passed as Solid event handlers — Solid
-     * does not unwrap the array form React supports.
+     * Reject array values passed as Solid event handlers — Solid does not unwrap
+     * the array form React supports.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-array-handlers.md
      */
     "solid/no-array-handlers"?: TtscLintRuleSetting;
     /**
-     * Reject destructured Solid component props — destructuring breaks
-     * reactivity by reading the property eagerly.
+     * Reject destructured Solid component props — destructuring breaks reactivity
+     * by reading the property eagerly.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-destructure.md
      */
     "solid/no-destructure"?: TtscLintRuleSetting;
     /**
-     * Reject `innerHTML` JSX attributes because they bypass sanitization
-     * and are a common XSS sink. A static string literal is still
-     * allowed by default; flip `allowStatic` off to ban that form too.
+     * Reject `innerHTML` JSX attributes because they bypass sanitization and are
+     * a common XSS sink. A static string literal is still allowed by default;
+     * flip `allowStatic` off to ban that form too.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-innerhtml.md
      */
     "solid/no-innerhtml"?: TtscLintRuleSetting;
     /**
      * Reject Solid APIs that rely on ES6 `Proxy` (including `new Proxy`,
-     * `Proxy.revocable`, imports from `solid-js/store`, and dynamic
-     * spread shapes through `mergeProps`). For shipping to runtimes
-     * without `Proxy` support; off by default.
+     * `Proxy.revocable`, imports from `solid-js/store`, and dynamic spread shapes
+     * through `mergeProps`). For shipping to runtimes without `Proxy` support;
+     * off by default.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-proxy-apis.md
      */
@@ -105,24 +104,24 @@ export interface ITtscLintSolidRules {
      */
     "solid/no-react-deps"?: TtscLintRuleSetting;
     /**
-     * Reject React-specific JSX props such as `className` and
-     * `htmlFor` — Solid uses `class` and `for`.
+     * Reject React-specific JSX props such as `className` and `htmlFor` — Solid
+     * uses `class` and `for`.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-react-specific-props.md
      */
     "solid/no-react-specific-props"?: TtscLintRuleSetting;
     /**
-     * Restrict namespaced JSX attributes (`ns:name={...}`) to the
-     * built-in Solid namespaces (`on:`, `oncapture:`, `use:`, `prop:`,
-     * `attr:`, `bool:`, `style:`, `class:`). Extra names can be allowed
-     * through the `allowedNamespaces` option.
+     * Restrict namespaced JSX attributes (`ns:name={...}`) to the built-in Solid
+     * namespaces (`on:`, `oncapture:`, `use:`, `prop:`, `attr:`, `bool:`,
+     * `style:`, `class:`). Extra names can be allowed through the
+     * `allowedNamespaces` option.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-unknown-namespaces.md
      */
     "solid/no-unknown-namespaces"?: TtscLintRuleSetting;
     /**
-     * Rewrite `class={cn({ ... })}` / `clsx(...)` / `classnames(...)`
-     * calls to the reactive `classlist={{ ... }}` prop.
+     * Rewrite `class={cn({ ... })}` / `clsx(...)` / `classnames(...)` calls to
+     * the reactive `classlist={{ ... }}` prop.
      *
      * Deprecated and off by default upstream.
      *
@@ -130,50 +129,48 @@ export interface ITtscLintSolidRules {
      */
     "solid/prefer-classlist"?: TtscLintRuleSetting;
     /**
-     * Replace inline `array.map(item => <JSX />)` with Solid's `<For>`
-     * component so the iteration stays keyed and reactive instead of
-     * re-creating every child on each update.
+     * Replace inline `array.map(item => <JSX />)` with Solid's `<For>` component
+     * so the iteration stays keyed and reactive instead of re-creating every
+     * child on each update.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/prefer-for.md
      */
     "solid/prefer-for"?: TtscLintRuleSetting;
     /**
      * Rewrite `{cond && <JSX />}` short-circuits in JSX to `<Show
-     * when={cond}>...</Show>`. Stylistic only — Solid's compiler
-     * already handles the boolean form — so it is off by default.
+     * when={cond}>...</Show>`. Stylistic only — Solid's compiler already handles
+     * the boolean form — so it is off by default.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/prefer-show.md
      */
     "solid/prefer-show"?: TtscLintRuleSetting;
     /**
-     * Reject common Solid reactivity breakages — reading a signal
-     * outside a tracking scope, destructuring a `Store`, etc.
+     * Reject common Solid reactivity breakages — reading a signal outside a
+     * tracking scope, destructuring a `Store`, etc.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/reactivity.md
      */
     "solid/reactivity"?: TtscLintRuleSetting;
     /**
      * Collapse JSX elements with no children to the self-closing form
-     * (`<Foo></Foo>` to `<Foo />`). Configurable per component vs HTML
-     * element, including a `"void"` mode that only enforces it for void
-     * tags.
+     * (`<Foo></Foo>` to `<Foo />`). Configurable per component vs HTML element,
+     * including a `"void"` mode that only enforces it for void tags.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/self-closing-comp.md
      */
     "solid/self-closing-comp"?: TtscLintRuleSetting;
     /**
      * Require `style={{...}}` keys to be valid kebab-case CSS properties
-     * (`"font-size"`, not React's `fontSize`) and dimensioned values to
-     * be strings — Solid does not append implicit `px`.
+     * (`"font-size"`, not React's `fontSize`) and dimensioned values to be
+     * strings — Solid does not append implicit `px`.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/style-prop.md
      */
     "solid/style-prop"?: TtscLintRuleSetting;
     /**
-     * Reject JSX nestings that the HTML parser would silently restructure
-     * at runtime — `<p>` cannot contain block-level children, `<a>` cannot
-     * contain another `<a>`, and `<button>` cannot contain other
-     * interactive elements.
+     * Reject JSX nestings that the HTML parser would silently restructure at
+     * runtime — `<p>` cannot contain block-level children, `<a>` cannot contain
+     * another `<a>`, and `<button>` cannot contain other interactive elements.
      *
      * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/validate-jsx-nesting.md
      */

package/lib/structures/rules/ITtscLintStorybookRuleOptions.d.ts

@@ -7,15 +7,14 @@
 /** `storybook/no-uninstalled-addons` rule options. */
 export interface ITtscLintStorybookNoUninstalledAddonsRuleOptions {
     /**
-     * Explicit `package.json` path used to validate configured Storybook
-     * addons. When omitted, the rule walks upward from the linted config
-     * file.
+     * Explicit `package.json` path used to validate configured Storybook addons.
+     * When omitted, the rule walks upward from the linted config file.
      */
     packageJsonLocation?: string;
     /**
      * Addon package names to skip when checking installation status.
      *
-     * @default []
+     * @default [ ]
      */
     ignore?: readonly string[];
 }