@ttsc/lint 0.14.0-dev.20260529.2 → 0.14.0

package/src/structures/rules/ITtscLintSecurityRules.ts

@@ -1,53 +1,51 @@
 import type { TtscLintRuleSetting } from "../TtscLintRuleSetting";
 
 /**
- * Security-focused TypeScript source rules from
- * `eslint-plugin-security`.
+ * Security-focused TypeScript source rules from `eslint-plugin-security`.
  *
- * Reports likely security smells — non-literal sinks for eval, file
- * I/O, regex construction, child-process spawning, cryptographic
- * primitives — that warrant human review even if no exploit is
- * statically provable.
+ * Reports likely security smells — non-literal sinks for eval, file I/O, regex
+ * construction, child-process spawning, cryptographic primitives — that warrant
+ * human review even if no exploit is statically provable.
  *
- * Treat findings as *hints*, not proofs.
+ * Treat findings as _hints_, not proofs.
  *
  * @reference https://github.com/eslint-community/eslint-plugin-security
  */
 export interface ITtscLintSecurityRules {
   /**
-   * Detect Trojan-Source bidi control characters (U+202A, U+202E,
-   * ...) hidden inside source.
+   * Detect Trojan-Source bidi control characters (U+202A, U+202E, ...) hidden
+   * inside source.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-bidi-characters.md
    */
   "security/detect-bidi-characters"?: TtscLintRuleSetting;
 
   /**
-   * Detect Buffer reads/writes called with `noAssert = true`, which
-   * skips Node's offset/length bounds checks.
+   * Detect Buffer reads/writes called with `noAssert = true`, which skips
+   * Node's offset/length bounds checks.
    *
-   * The flag lets the offset slide past the buffer end and read
-   * unrelated memory, so production code should never set it.
+   * The flag lets the offset slide past the buffer end and read unrelated
+   * memory, so production code should never set it.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-buffer-noassert.md
    */
   "security/detect-buffer-noassert"?: TtscLintRuleSetting;
 
   /**
-   * Detect any import of `child_process` and any `exec`/`execSync`
-   * call whose command argument is not a string literal.
+   * Detect any import of `child_process` and any `exec`/`execSync` call whose
+   * command argument is not a string literal.
    *
-   * Non-literal commands are the canonical shell-injection sink in
-   * Node services.
+   * Non-literal commands are the canonical shell-injection sink in Node
+   * services.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-child-process.md
    */
   "security/detect-child-process"?: TtscLintRuleSetting;
 
   /**
-   * Detect assignments setting `escapeMarkup = false` (or the
-   * equivalent option on Handlebars/Mustache-style engines), which
-   * turns off HTML entity escaping in template output.
+   * Detect assignments setting `escapeMarkup = false` (or the equivalent option
+   * on Handlebars/Mustache-style engines), which turns off HTML entity escaping
+   * in template output.
    *
    * Result: an unguarded XSS sink for caller-controlled strings.
    *
@@ -59,16 +57,15 @@ export interface ITtscLintSecurityRules {
    * Detect `eval(...)` calls whose argument is not a string literal.
    *
    * Any expression argument means caller-controlled data can reach a
-   * code-execution sink. The rule flags the call shape, not proven
-   * taint.
+   * code-execution sink. The rule flags the call shape, not proven taint.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-eval-with-expression.md
    */
   "security/detect-eval-with-expression"?: TtscLintRuleSetting;
 
   /**
-   * Detect `new Buffer(input)` constructions with non-literal
-   * input — historical source of allocation-disclosure bugs.
+   * Detect `new Buffer(input)` constructions with non-literal input —
+   * historical source of allocation-disclosure bugs.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-new-buffer.md
    */
@@ -83,43 +80,41 @@ export interface ITtscLintSecurityRules {
   "security/detect-no-csrf-before-method-override"?: TtscLintRuleSetting;
 
   /**
-   * Detect `fs` calls (`readFile`, `writeFile`, `createReadStream`,
-   * ...) whose filename argument is not a string literal.
+   * Detect `fs` calls (`readFile`, `writeFile`, `createReadStream`, ...) whose
+   * filename argument is not a string literal.
    *
-   * Dynamic filenames are the standard path-traversal sink; sanitise
-   * or allow-list before the call.
+   * Dynamic filenames are the standard path-traversal sink; sanitise or
+   * allow-list before the call.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-fs-filename.md
    */
   "security/detect-non-literal-fs-filename"?: TtscLintRuleSetting;
 
   /**
-   * Detect `new RegExp(...)` construction whose pattern argument is
-   * not a string literal.
+   * Detect `new RegExp(...)` construction whose pattern argument is not a
+   * string literal.
    *
-   * Caller-controlled patterns can both trigger catastrophic
-   * backtracking and let an attacker reshape the matcher to bypass
-   * intended validation.
+   * Caller-controlled patterns can both trigger catastrophic backtracking and
+   * let an attacker reshape the matcher to bypass intended validation.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-regexp.md
    */
   "security/detect-non-literal-regexp"?: TtscLintRuleSetting;
 
   /**
-   * Detect `require(...)` calls whose specifier is computed at
-   * runtime.
+   * Detect `require(...)` calls whose specifier is computed at runtime.
    *
-   * A dynamic specifier lets caller-controlled data choose the module
-   * to load, bypassing any module allow-list on Node.
+   * A dynamic specifier lets caller-controlled data choose the module to load,
+   * bypassing any module allow-list on Node.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-non-literal-require.md
    */
   "security/detect-non-literal-require"?: TtscLintRuleSetting;
 
   /**
-   * Detect dynamic bracket-access such as `obj[req.body.x] = ...`,
-   * which can let caller-controlled keys overwrite prototype-shaped
-   * properties or pull out unintended fields.
+   * Detect dynamic bracket-access such as `obj[req.body.x] = ...`, which can
+   * let caller-controlled keys overwrite prototype-shaped properties or pull
+   * out unintended fields.
    *
    * Fires on virtually any computed property access; expect a high
    * false-positive rate in normal application code.
@@ -129,32 +124,30 @@ export interface ITtscLintSecurityRules {
   "security/detect-object-injection"?: TtscLintRuleSetting;
 
   /**
-   * Detect direct equality comparisons involving secret-like
-   * identifiers (`if (token === expected)`) — use
-   * `crypto.timingSafeEqual` instead.
+   * Detect direct equality comparisons involving secret-like identifiers (`if
+   * (token === expected)`) — use `crypto.timingSafeEqual` instead.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-possible-timing-attacks.md
    */
   "security/detect-possible-timing-attacks"?: TtscLintRuleSetting;
 
   /**
-   * Detect `crypto.pseudoRandomBytes`, which produces values that
-   * are not cryptographically secure.
+   * Detect `crypto.pseudoRandomBytes`, which produces values that are not
+   * cryptographically secure.
    *
-   * Tokens, session ids, and key material must use
-   * `crypto.randomBytes` (or Web Crypto's `getRandomValues`) instead.
+   * Tokens, session ids, and key material must use `crypto.randomBytes` (or Web
+   * Crypto's `getRandomValues`) instead.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-pseudoRandomBytes.md
    */
   "security/detect-pseudoRandomBytes"?: TtscLintRuleSetting;
 
   /**
-   * Detect regex literals with catastrophic backtracking potential
-   * (ReDoS) — typically nested or overlapping quantifiers over the
-   * same character set.
+   * Detect regex literals with catastrophic backtracking potential (ReDoS) —
+   * typically nested or overlapping quantifiers over the same character set.
    *
-   * Matching caller-controlled input against such a pattern can
-   * block the event loop for seconds.
+   * Matching caller-controlled input against such a pattern can block the event
+   * loop for seconds.
    *
    * @reference https://github.com/eslint-community/eslint-plugin-security/blob/main/docs/rules/detect-unsafe-regex.md
    */

package/src/structures/rules/ITtscLintSolidRules.ts

@@ -3,27 +3,27 @@ import type { TtscLintRuleSetting } from "../TtscLintRuleSetting";
 /**
  * Solid TSX rules from `eslint-plugin-solid`.
  *
- * Solid components compile to fine-grained reactivity, so patterns
- * that look correct in React (destructuring props, calling
- * `useEffect`-style hooks with array deps) silently break reactivity
- * in Solid. This family captures the common Solid-only pitfalls.
+ * Solid components compile to fine-grained reactivity, so patterns that look
+ * correct in React (destructuring props, calling `useEffect`-style hooks with
+ * array deps) silently break reactivity in Solid. This family captures the
+ * common Solid-only pitfalls.
  *
  * @reference https://github.com/solidjs-community/eslint-plugin-solid
  */
 export interface ITtscLintSolidRules {
   /**
-   * Reject early and conditional `return` from a Solid component
-   * — Solid components must return exactly once at the top level.
+   * Reject early and conditional `return` from a Solid component — Solid
+   * components must return exactly once at the top level.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/components-return-once.md
    */
   "solid/components-return-once"?: TtscLintRuleSetting;
 
   /**
-   * Require DOM event handler props to use canonical Solid casing
-   * (`onClick`, not `onclick` / `onClIcK`) so the compiler recognizes
-   * them as events. Also flags `on*`-named props bound to non-function
-   * values, which look like handlers but are not.
+   * Require DOM event handler props to use canonical Solid casing (`onClick`,
+   * not `onclick` / `onClIcK`) so the compiler recognizes them as events. Also
+   * flags `on*`-named props bound to non-function values, which look like
+   * handlers but are not.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/event-handlers.md
    */
@@ -31,42 +31,41 @@ export interface ITtscLintSolidRules {
 
   /**
    * Route each Solid export to the correct entry point (`solid-js`,
-   * `solid-js/web`, or `solid-js/store`) and merge duplicate imports
-   * from the same entry.
+   * `solid-js/web`, or `solid-js/store`) and merge duplicate imports from the
+   * same entry.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/imports.md
    */
   "solid/imports"?: TtscLintRuleSetting;
 
   /**
-   * Reject duplicate JSX props on the same Solid element. Unlike
-   * React, Solid silently keeps the first value, so the duplicate is
-   * dead code and almost always a typo.
+   * Reject duplicate JSX props on the same Solid element. Unlike React, Solid
+   * silently keeps the first value, so the duplicate is dead code and almost
+   * always a typo.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-duplicate-props.md
    */
   "solid/jsx-no-duplicate-props"?: TtscLintRuleSetting;
 
   /**
-   * Reject `javascript:` URLs in Solid JSX attributes (`href`, `src`,
-   * ...) — they evaluate the suffix as code in the page context and
-   * are a long-standing XSS vector.
+   * Reject `javascript:` URLs in Solid JSX attributes (`href`, `src`, ...) —
+   * they evaluate the suffix as code in the page context and are a
+   * long-standing XSS vector.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-script-url.md
    */
   "solid/jsx-no-script-url"?: TtscLintRuleSetting;
 
   /**
-   * Reject Solid JSX component names that are not declared or
-   * imported in scope.
+   * Reject Solid JSX component names that are not declared or imported in
+   * scope.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/jsx-no-undef.md
    */
   "solid/jsx-no-undef"?: TtscLintRuleSetting;
 
   /**
-   * Scope-marker compatibility rule (mirrors ESLint's
-   * `react/jsx-uses-vars`).
+   * Scope-marker compatibility rule (mirrors ESLint's `react/jsx-uses-vars`).
    *
    * The native engine emits no diagnostics for this id.
    *
@@ -75,25 +74,25 @@ export interface ITtscLintSolidRules {
   "solid/jsx-uses-vars"?: TtscLintRuleSetting;
 
   /**
-   * Reject array values passed as Solid event handlers — Solid
-   * does not unwrap the array form React supports.
+   * Reject array values passed as Solid event handlers — Solid does not unwrap
+   * the array form React supports.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-array-handlers.md
    */
   "solid/no-array-handlers"?: TtscLintRuleSetting;
 
   /**
-   * Reject destructured Solid component props — destructuring breaks
-   * reactivity by reading the property eagerly.
+   * Reject destructured Solid component props — destructuring breaks reactivity
+   * by reading the property eagerly.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-destructure.md
    */
   "solid/no-destructure"?: TtscLintRuleSetting;
 
   /**
-   * Reject `innerHTML` JSX attributes because they bypass sanitization
-   * and are a common XSS sink. A static string literal is still
-   * allowed by default; flip `allowStatic` off to ban that form too.
+   * Reject `innerHTML` JSX attributes because they bypass sanitization and are
+   * a common XSS sink. A static string literal is still allowed by default;
+   * flip `allowStatic` off to ban that form too.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-innerhtml.md
    */
@@ -101,9 +100,9 @@ export interface ITtscLintSolidRules {
 
   /**
    * Reject Solid APIs that rely on ES6 `Proxy` (including `new Proxy`,
-   * `Proxy.revocable`, imports from `solid-js/store`, and dynamic
-   * spread shapes through `mergeProps`). For shipping to runtimes
-   * without `Proxy` support; off by default.
+   * `Proxy.revocable`, imports from `solid-js/store`, and dynamic spread shapes
+   * through `mergeProps`). For shipping to runtimes without `Proxy` support;
+   * off by default.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-proxy-apis.md
    */
@@ -118,26 +117,26 @@ export interface ITtscLintSolidRules {
   "solid/no-react-deps"?: TtscLintRuleSetting;
 
   /**
-   * Reject React-specific JSX props such as `className` and
-   * `htmlFor` — Solid uses `class` and `for`.
+   * Reject React-specific JSX props such as `className` and `htmlFor` — Solid
+   * uses `class` and `for`.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-react-specific-props.md
    */
   "solid/no-react-specific-props"?: TtscLintRuleSetting;
 
   /**
-   * Restrict namespaced JSX attributes (`ns:name={...}`) to the
-   * built-in Solid namespaces (`on:`, `oncapture:`, `use:`, `prop:`,
-   * `attr:`, `bool:`, `style:`, `class:`). Extra names can be allowed
-   * through the `allowedNamespaces` option.
+   * Restrict namespaced JSX attributes (`ns:name={...}`) to the built-in Solid
+   * namespaces (`on:`, `oncapture:`, `use:`, `prop:`, `attr:`, `bool:`,
+   * `style:`, `class:`). Extra names can be allowed through the
+   * `allowedNamespaces` option.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/no-unknown-namespaces.md
    */
   "solid/no-unknown-namespaces"?: TtscLintRuleSetting;
 
   /**
-   * Rewrite `class={cn({ ... })}` / `clsx(...)` / `classnames(...)`
-   * calls to the reactive `classlist={{ ... }}` prop.
+   * Rewrite `class={cn({ ... })}` / `clsx(...)` / `classnames(...)` calls to
+   * the reactive `classlist={{ ... }}` prop.
    *
    * Deprecated and off by default upstream.
    *
@@ -146,9 +145,9 @@ export interface ITtscLintSolidRules {
   "solid/prefer-classlist"?: TtscLintRuleSetting;
 
   /**
-   * Replace inline `array.map(item => <JSX />)` with Solid's `<For>`
-   * component so the iteration stays keyed and reactive instead of
-   * re-creating every child on each update.
+   * Replace inline `array.map(item => <JSX />)` with Solid's `<For>` component
+   * so the iteration stays keyed and reactive instead of re-creating every
+   * child on each update.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/prefer-for.md
    */
@@ -156,16 +155,16 @@ export interface ITtscLintSolidRules {
 
   /**
    * Rewrite `{cond && <JSX />}` short-circuits in JSX to `<Show
-   * when={cond}>...</Show>`. Stylistic only — Solid's compiler
-   * already handles the boolean form — so it is off by default.
+   * when={cond}>...</Show>`. Stylistic only — Solid's compiler already handles
+   * the boolean form — so it is off by default.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/prefer-show.md
    */
   "solid/prefer-show"?: TtscLintRuleSetting;
 
   /**
-   * Reject common Solid reactivity breakages — reading a signal
-   * outside a tracking scope, destructuring a `Store`, etc.
+   * Reject common Solid reactivity breakages — reading a signal outside a
+   * tracking scope, destructuring a `Store`, etc.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/reactivity.md
    */
@@ -173,9 +172,8 @@ export interface ITtscLintSolidRules {
 
   /**
    * Collapse JSX elements with no children to the self-closing form
-   * (`<Foo></Foo>` to `<Foo />`). Configurable per component vs HTML
-   * element, including a `"void"` mode that only enforces it for void
-   * tags.
+   * (`<Foo></Foo>` to `<Foo />`). Configurable per component vs HTML element,
+   * including a `"void"` mode that only enforces it for void tags.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/self-closing-comp.md
    */
@@ -183,18 +181,17 @@ export interface ITtscLintSolidRules {
 
   /**
    * Require `style={{...}}` keys to be valid kebab-case CSS properties
-   * (`"font-size"`, not React's `fontSize`) and dimensioned values to
-   * be strings — Solid does not append implicit `px`.
+   * (`"font-size"`, not React's `fontSize`) and dimensioned values to be
+   * strings — Solid does not append implicit `px`.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/style-prop.md
    */
   "solid/style-prop"?: TtscLintRuleSetting;
 
   /**
-   * Reject JSX nestings that the HTML parser would silently restructure
-   * at runtime — `<p>` cannot contain block-level children, `<a>` cannot
-   * contain another `<a>`, and `<button>` cannot contain other
-   * interactive elements.
+   * Reject JSX nestings that the HTML parser would silently restructure at
+   * runtime — `<p>` cannot contain block-level children, `<a>` cannot contain
+   * another `<a>`, and `<button>` cannot contain other interactive elements.
    *
    * @reference https://github.com/solidjs-community/eslint-plugin-solid/blob/main/packages/eslint-plugin-solid/docs/validate-jsx-nesting.md
    */

package/src/structures/rules/ITtscLintStorybookRuleOptions.ts

@@ -8,16 +8,15 @@
 /** `storybook/no-uninstalled-addons` rule options. */
 export interface ITtscLintStorybookNoUninstalledAddonsRuleOptions {
   /**
-   * Explicit `package.json` path used to validate configured Storybook
-   * addons. When omitted, the rule walks upward from the linted config
-   * file.
+   * Explicit `package.json` path used to validate configured Storybook addons.
+   * When omitted, the rule walks upward from the linted config file.
    */
   packageJsonLocation?: string;
 
   /**
    * Addon package names to skip when checking installation status.
    *
-   * @default []
+   * @default [ ]
    */
   ignore?: readonly string[];
 }