@useinsider/eslint-config 2.0.0 → 3.0.0

package/dist/merge-8QYHxTjU.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-8QYHxTjU.cjs","names":[],"sources":["../../utils/dist/index.js","../src/utils/merge.ts"],"sourcesContent":["//#region src/merge.ts\nvar UNSAFE_KEYS = new Set([\n\t\"__proto__\",\n\t\"constructor\",\n\t\"prototype\",\n\t\"toString\",\n\t\"valueOf\",\n\t\"hasOwnProperty\",\n\t\"isPrototypeOf\",\n\t\"propertyIsEnumerable\",\n\t\"toLocaleString\"\n]);\nvar defaultOptions = {\n\tallowUndefinedOverrides: true,\n\tmergeArrays: true,\n\tuniqueArrayItems: true\n};\nfunction isMergeableObject(value) {\n\tif (typeof value !== \"object\" || value === null) return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\treturn prototype === Object.prototype || prototype === null;\n}\nfunction combineArrays(options, previous, next) {\n\tif (!options.mergeArrays) return next;\n\treturn options.uniqueArrayItems ? [...new Set([...previous, ...next])] : [...previous, ...next];\n}\nfunction mergeSources(options, sources) {\n\treturn sources.reduce((result, source) => {\n\t\tif (Array.isArray(source)) throw new TypeError(\"Arguments provided to merge must be objects, not arrays.\");\n\t\tObject.keys(source).forEach((key) => {\n\t\t\tif (UNSAFE_KEYS.has(key)) return;\n\t\t\tconst previous = result[key];\n\t\t\tconst next = source[key];\n\t\t\tif (Array.isArray(previous) && Array.isArray(next)) result[key] = combineArrays(options, previous, next);\n\t\t\telse if (isMergeableObject(previous) && isMergeableObject(next)) result[key] = mergeSources(options, [previous, next]);\n\t\t\telse result[key] = next === void 0 && !options.allowUndefinedOverrides ? previous : next;\n\t\t});\n\t\treturn result;\n\t}, {});\n}\n/**\n* Recursively merges `sources` left to right into a fresh object, skipping keys that would\n* poison `Object.prototype`.\n* @example\n* deepMerge({ branches: ['main'] }, { branches: ['beta'] });\n* // => { branches: ['main', 'beta'] }\n*/\nfunction deepMerge(...sources) {\n\treturn mergeSources(defaultOptions, sources);\n}\n/**\n* {@link deepMerge} with the merge strategy tuned per call.\n* @example\n* deepMergeWithOptions({ mergeArrays: false }, { branches: ['main'] }, { branches: ['beta'] });\n* // => { branches: ['beta'] }\n* @param options Only the fields being overridden; every omitted field keeps its default.\n*/\nfunction deepMergeWithOptions(options, ...sources) {\n\treturn mergeSources({\n\t\t...defaultOptions,\n\t\t...options\n\t}, sources);\n}\n//#endregion\nexport { deepMerge, deepMergeWithOptions };\n\n//# sourceMappingURL=index.js.map","// eslint-disable-next-line import-x/no-extraneous-dependencies -- private workspace package, bundled into dist/ at build time; a runtime dependency entry would be unresolvable for consumers\nimport { deepMergeWithOptions } from '@useinsider/utils';\n\nexport function merge<Arguments extends NonNullable<unknown>[]> (...args: Arguments): Arguments[number] {\n    return deepMergeWithOptions({ mergeArrays: false }, ...args);\n}\n\n/* v8 ignore start */\nif (import.meta.vitest) {\n    const { describe, test, expect } = import.meta.vitest;\n\n    describe('merge', () => {\n        test('later arguments override earlier ones on overlapping keys', () => {\n            const result = merge(\n                { rules: { 'no-console': 'error' } },\n                { rules: { 'no-console': 'off' } }\n            );\n\n            expect(result).toStrictEqual({ rules: { 'no-console': 'off' } });\n        });\n\n        test('precedence holds across three or more arguments', () => {\n            const result = merge(\n                { rules: { indent: 'off' } },\n                { rules: { indent: 'warn' } },\n                { rules: { indent: 'error' } }\n            );\n\n            expect(result).toStrictEqual({ rules: { indent: 'error' } });\n        });\n\n        test('non-overlapping keys from every argument are preserved', () => {\n            const result = merge(\n                { rules: { 'no-console': 'error' } },\n                { rules: { 'no-debugger': 'warn' } },\n                { languageOptions: { ecmaVersion: 2022 } }\n            );\n\n            expect(result).toStrictEqual({\n                rules: {\n                    'no-console': 'error',\n                    'no-debugger': 'warn',\n                },\n                languageOptions: { ecmaVersion: 2022 },\n            });\n        });\n\n        test('rule option arrays are replaced wholesale, never concatenated', () => {\n            const result = merge(\n                { rules: { quotes: ['error', 'double'] } },\n                { rules: { quotes: ['error', 'single', { avoidEscape: true }] } }\n            );\n\n            expect(result).toStrictEqual({\n                rules: { quotes: ['error', 'single', { avoidEscape: true }] },\n            });\n        });\n\n        test('files arrays are replaced so a later block fully owns its globs', () => {\n            const result = merge(\n                { files: ['**/*.js'] },\n                { files: ['**/*.ts'] }\n            );\n\n            expect(result).toStrictEqual({ files: ['**/*.ts'] });\n        });\n\n        test('deeply nested settings merge key-by-key with later winning', () => {\n            const result = merge(\n                { settings: { jsdoc: { mode: 'typescript', tagNamePreference: { returns: 'returns' } } } },\n                { settings: { jsdoc: { tagNamePreference: { returns: 'return' } } } }\n            );\n\n            expect(result).toStrictEqual({\n                settings: {\n                    jsdoc: {\n                        mode: 'typescript',\n                        tagNamePreference: { returns: 'return' },\n                    },\n                },\n            });\n        });\n\n        test('self-referential plugin objects merge without unbounded recursion', () => {\n            const plugin: Record<string, unknown> = { rules: {} };\n\n            plugin.configs = { recommended: { plugins: { fake: plugin } } };\n\n            const result = merge({}, { plugins: { fake: plugin } }) as { plugins: { fake: unknown } };\n\n            expect(result.plugins.fake).toBe(plugin);\n        });\n\n        test('prototype-polluting keys never reach Object.prototype', () => {\n            const payload = JSON.parse('{\"__proto__\":{\"polluted\":true},\"constructor\":{\"polluted\":true}}') as object;\n\n            merge({}, payload);\n\n            expect(({} as Record<string, unknown>).polluted).toBeUndefined();\n            expect(Object.prototype).not.toHaveProperty('polluted');\n        });\n\n        test('Object.prototype method keys are dropped so the result stays usable as a string', () => {\n            const payload = {\n                toString: 'not-a-function',\n                valueOf: 1,\n                hasOwnProperty: null,\n                isPrototypeOf: 0,\n                propertyIsEnumerable: false,\n                toLocaleString: ['nope'],\n            };\n\n            const result = merge({ rules: { semi: 'error' } }, payload) as Record<string, unknown>;\n            // eslint-disable-next-line @typescript-eslint/no-base-to-string -- default stringification is exactly what this CVE regression asserts\n            const stringify = () => String(result);\n\n            expect(Object.keys(result)).toStrictEqual(['rules']);\n            expect(typeof result.toString).toBe('function');\n            expect(typeof result.valueOf).toBe('function');\n            expect(typeof result.hasOwnProperty).toBe('function');\n            expect(stringify).not.toThrow();\n            expect(stringify()).toBe('[object Object]');\n        });\n\n        test('nested Object.prototype method keys are dropped too', () => {\n            const result = merge(\n                { settings: { shared: { name: 'insider' } } },\n                { settings: { shared: { toString: 'not-a-function' } } }\n            ) as { settings: { shared: Record<string, unknown> } };\n\n            expect(result.settings.shared).toStrictEqual({ name: 'insider' });\n            // eslint-disable-next-line @typescript-eslint/no-base-to-string -- default stringification is exactly what this CVE regression asserts\n            expect(String(result.settings.shared)).toBe('[object Object]');\n        });\n\n        test('null-prototype objects are still merged key-by-key', () => {\n            const bare = Object.create(null) as Record<string, unknown>;\n\n            bare.semi = 'error';\n\n            const result = merge({ rules: bare }, { rules: { quotes: 'error' } }) as { rules: unknown };\n\n            expect(result.rules).toStrictEqual({ semi: 'error', quotes: 'error' });\n        });\n\n        test('array arguments are rejected', () => {\n            expect(() => merge({}, ['not-an-object'])).toThrow(TypeError);\n        });\n    });\n}\n"],"mappings":";AACA,IAAI,cAAc,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAI,iBAAiB;CACpB,yBAAyB;CACzB,aAAa;CACb,kBAAkB;AACnB;AACA,SAAS,kBAAkB,OAAO;CACjC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AACxD;AACA,SAAS,cAAc,SAAS,UAAU,MAAM;CAC/C,IAAI,CAAC,QAAQ,aAAa,OAAO;CACjC,OAAO,QAAQ,mBAAmB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI;AAC/F;AACA,SAAS,aAAa,SAAS,SAAS;CACvC,OAAO,QAAQ,QAAQ,QAAQ,WAAW;EACzC,IAAI,MAAM,QAAQ,MAAM,GAAG,MAAM,IAAI,UAAU,0DAA0D;EACzG,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ;GACpC,IAAI,YAAY,IAAI,GAAG,GAAG;GAC1B,MAAM,WAAW,OAAO;GACxB,MAAM,OAAO,OAAO;GACpB,IAAI,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ,IAAI,GAAG,OAAO,OAAO,cAAc,SAAS,UAAU,IAAI;QAClG,IAAI,kBAAkB,QAAQ,KAAK,kBAAkB,IAAI,GAAG,OAAO,OAAO,aAAa,SAAS,CAAC,UAAU,IAAI,CAAC;QAChH,OAAO,OAAO,SAAS,KAAK,KAAK,CAAC,QAAQ,0BAA0B,WAAW;EACrF,CAAC;EACD,OAAO;CACR,GAAG,CAAC,CAAC;AACN;;;;;;;;AAkBA,SAAS,qBAAqB,SAAS,GAAG,SAAS;CAClD,OAAO,aAAa;EACnB,GAAG;EACH,GAAG;CACJ,GAAG,OAAO;AACX;;;AC3DA,SAAgB,MAAiD,GAAG,MAAe;CAC/E,OAAO,qBAAqB,EAAE,aAAa,MAAK,GAAI,GAAG,IAAI;AAC/D"}

package/dist/merge-CXnhrNEt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge-CXnhrNEt.js","names":[],"sources":["../../utils/dist/index.js","../src/utils/merge.ts"],"sourcesContent":["//#region src/merge.ts\nvar UNSAFE_KEYS = new Set([\n\t\"__proto__\",\n\t\"constructor\",\n\t\"prototype\",\n\t\"toString\",\n\t\"valueOf\",\n\t\"hasOwnProperty\",\n\t\"isPrototypeOf\",\n\t\"propertyIsEnumerable\",\n\t\"toLocaleString\"\n]);\nvar defaultOptions = {\n\tallowUndefinedOverrides: true,\n\tmergeArrays: true,\n\tuniqueArrayItems: true\n};\nfunction isMergeableObject(value) {\n\tif (typeof value !== \"object\" || value === null) return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\treturn prototype === Object.prototype || prototype === null;\n}\nfunction combineArrays(options, previous, next) {\n\tif (!options.mergeArrays) return next;\n\treturn options.uniqueArrayItems ? [...new Set([...previous, ...next])] : [...previous, ...next];\n}\nfunction mergeSources(options, sources) {\n\treturn sources.reduce((result, source) => {\n\t\tif (Array.isArray(source)) throw new TypeError(\"Arguments provided to merge must be objects, not arrays.\");\n\t\tObject.keys(source).forEach((key) => {\n\t\t\tif (UNSAFE_KEYS.has(key)) return;\n\t\t\tconst previous = result[key];\n\t\t\tconst next = source[key];\n\t\t\tif (Array.isArray(previous) && Array.isArray(next)) result[key] = combineArrays(options, previous, next);\n\t\t\telse if (isMergeableObject(previous) && isMergeableObject(next)) result[key] = mergeSources(options, [previous, next]);\n\t\t\telse result[key] = next === void 0 && !options.allowUndefinedOverrides ? previous : next;\n\t\t});\n\t\treturn result;\n\t}, {});\n}\n/**\n* Recursively merges `sources` left to right into a fresh object, skipping keys that would\n* poison `Object.prototype`.\n* @example\n* deepMerge({ branches: ['main'] }, { branches: ['beta'] });\n* // => { branches: ['main', 'beta'] }\n*/\nfunction deepMerge(...sources) {\n\treturn mergeSources(defaultOptions, sources);\n}\n/**\n* {@link deepMerge} with the merge strategy tuned per call.\n* @example\n* deepMergeWithOptions({ mergeArrays: false }, { branches: ['main'] }, { branches: ['beta'] });\n* // => { branches: ['beta'] }\n* @param options Only the fields being overridden; every omitted field keeps its default.\n*/\nfunction deepMergeWithOptions(options, ...sources) {\n\treturn mergeSources({\n\t\t...defaultOptions,\n\t\t...options\n\t}, sources);\n}\n//#endregion\nexport { deepMerge, deepMergeWithOptions };\n\n//# sourceMappingURL=index.js.map","// eslint-disable-next-line import-x/no-extraneous-dependencies -- private workspace package, bundled into dist/ at build time; a runtime dependency entry would be unresolvable for consumers\nimport { deepMergeWithOptions } from '@useinsider/utils';\n\nexport function merge<Arguments extends NonNullable<unknown>[]> (...args: Arguments): Arguments[number] {\n    return deepMergeWithOptions({ mergeArrays: false }, ...args);\n}\n\n/* v8 ignore start */\nif (import.meta.vitest) {\n    const { describe, test, expect } = import.meta.vitest;\n\n    describe('merge', () => {\n        test('later arguments override earlier ones on overlapping keys', () => {\n            const result = merge(\n                { rules: { 'no-console': 'error' } },\n                { rules: { 'no-console': 'off' } }\n            );\n\n            expect(result).toStrictEqual({ rules: { 'no-console': 'off' } });\n        });\n\n        test('precedence holds across three or more arguments', () => {\n            const result = merge(\n                { rules: { indent: 'off' } },\n                { rules: { indent: 'warn' } },\n                { rules: { indent: 'error' } }\n            );\n\n            expect(result).toStrictEqual({ rules: { indent: 'error' } });\n        });\n\n        test('non-overlapping keys from every argument are preserved', () => {\n            const result = merge(\n                { rules: { 'no-console': 'error' } },\n                { rules: { 'no-debugger': 'warn' } },\n                { languageOptions: { ecmaVersion: 2022 } }\n            );\n\n            expect(result).toStrictEqual({\n                rules: {\n                    'no-console': 'error',\n                    'no-debugger': 'warn',\n                },\n                languageOptions: { ecmaVersion: 2022 },\n            });\n        });\n\n        test('rule option arrays are replaced wholesale, never concatenated', () => {\n            const result = merge(\n                { rules: { quotes: ['error', 'double'] } },\n                { rules: { quotes: ['error', 'single', { avoidEscape: true }] } }\n            );\n\n            expect(result).toStrictEqual({\n                rules: { quotes: ['error', 'single', { avoidEscape: true }] },\n            });\n        });\n\n        test('files arrays are replaced so a later block fully owns its globs', () => {\n            const result = merge(\n                { files: ['**/*.js'] },\n                { files: ['**/*.ts'] }\n            );\n\n            expect(result).toStrictEqual({ files: ['**/*.ts'] });\n        });\n\n        test('deeply nested settings merge key-by-key with later winning', () => {\n            const result = merge(\n                { settings: { jsdoc: { mode: 'typescript', tagNamePreference: { returns: 'returns' } } } },\n                { settings: { jsdoc: { tagNamePreference: { returns: 'return' } } } }\n            );\n\n            expect(result).toStrictEqual({\n                settings: {\n                    jsdoc: {\n                        mode: 'typescript',\n                        tagNamePreference: { returns: 'return' },\n                    },\n                },\n            });\n        });\n\n        test('self-referential plugin objects merge without unbounded recursion', () => {\n            const plugin: Record<string, unknown> = { rules: {} };\n\n            plugin.configs = { recommended: { plugins: { fake: plugin } } };\n\n            const result = merge({}, { plugins: { fake: plugin } }) as { plugins: { fake: unknown } };\n\n            expect(result.plugins.fake).toBe(plugin);\n        });\n\n        test('prototype-polluting keys never reach Object.prototype', () => {\n            const payload = JSON.parse('{\"__proto__\":{\"polluted\":true},\"constructor\":{\"polluted\":true}}') as object;\n\n            merge({}, payload);\n\n            expect(({} as Record<string, unknown>).polluted).toBeUndefined();\n            expect(Object.prototype).not.toHaveProperty('polluted');\n        });\n\n        test('Object.prototype method keys are dropped so the result stays usable as a string', () => {\n            const payload = {\n                toString: 'not-a-function',\n                valueOf: 1,\n                hasOwnProperty: null,\n                isPrototypeOf: 0,\n                propertyIsEnumerable: false,\n                toLocaleString: ['nope'],\n            };\n\n            const result = merge({ rules: { semi: 'error' } }, payload) as Record<string, unknown>;\n            // eslint-disable-next-line @typescript-eslint/no-base-to-string -- default stringification is exactly what this CVE regression asserts\n            const stringify = () => String(result);\n\n            expect(Object.keys(result)).toStrictEqual(['rules']);\n            expect(typeof result.toString).toBe('function');\n            expect(typeof result.valueOf).toBe('function');\n            expect(typeof result.hasOwnProperty).toBe('function');\n            expect(stringify).not.toThrow();\n            expect(stringify()).toBe('[object Object]');\n        });\n\n        test('nested Object.prototype method keys are dropped too', () => {\n            const result = merge(\n                { settings: { shared: { name: 'insider' } } },\n                { settings: { shared: { toString: 'not-a-function' } } }\n            ) as { settings: { shared: Record<string, unknown> } };\n\n            expect(result.settings.shared).toStrictEqual({ name: 'insider' });\n            // eslint-disable-next-line @typescript-eslint/no-base-to-string -- default stringification is exactly what this CVE regression asserts\n            expect(String(result.settings.shared)).toBe('[object Object]');\n        });\n\n        test('null-prototype objects are still merged key-by-key', () => {\n            const bare = Object.create(null) as Record<string, unknown>;\n\n            bare.semi = 'error';\n\n            const result = merge({ rules: bare }, { rules: { quotes: 'error' } }) as { rules: unknown };\n\n            expect(result.rules).toStrictEqual({ semi: 'error', quotes: 'error' });\n        });\n\n        test('array arguments are rejected', () => {\n            expect(() => merge({}, ['not-an-object'])).toThrow(TypeError);\n        });\n    });\n}\n"],"mappings":";AACA,IAAI,cAAc,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAI,iBAAiB;CACpB,yBAAyB;CACzB,aAAa;CACb,kBAAkB;AACnB;AACA,SAAS,kBAAkB,OAAO;CACjC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AACxD;AACA,SAAS,cAAc,SAAS,UAAU,MAAM;CAC/C,IAAI,CAAC,QAAQ,aAAa,OAAO;CACjC,OAAO,QAAQ,mBAAmB,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI;AAC/F;AACA,SAAS,aAAa,SAAS,SAAS;CACvC,OAAO,QAAQ,QAAQ,QAAQ,WAAW;EACzC,IAAI,MAAM,QAAQ,MAAM,GAAG,MAAM,IAAI,UAAU,0DAA0D;EACzG,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ;GACpC,IAAI,YAAY,IAAI,GAAG,GAAG;GAC1B,MAAM,WAAW,OAAO;GACxB,MAAM,OAAO,OAAO;GACpB,IAAI,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ,IAAI,GAAG,OAAO,OAAO,cAAc,SAAS,UAAU,IAAI;QAClG,IAAI,kBAAkB,QAAQ,KAAK,kBAAkB,IAAI,GAAG,OAAO,OAAO,aAAa,SAAS,CAAC,UAAU,IAAI,CAAC;QAChH,OAAO,OAAO,SAAS,KAAK,KAAK,CAAC,QAAQ,0BAA0B,WAAW;EACrF,CAAC;EACD,OAAO;CACR,GAAG,CAAC,CAAC;AACN;;;;;;;;AAkBA,SAAS,qBAAqB,SAAS,GAAG,SAAS;CAClD,OAAO,aAAa;EACnB,GAAG;EACH,GAAG;CACJ,GAAG,OAAO;AACX;;;AC3DA,SAAgB,MAAiD,GAAG,MAAe;CAC/E,OAAO,qBAAqB,EAAE,aAAa,MAAK,GAAI,GAAG,IAAI;AAC/D"}

package/dist/typescript-node-BjpTUbKF.cjs

@@ -1,11 +0,0 @@
-const require_chunk = require("./chunk-D6vf50IK.cjs");
-const require_merge = require("./merge-8QYHxTjU.cjs");
-const require_typescript = require("./typescript-BDc8Y6Hc.cjs");
-let globals = require("globals");
-globals = require_chunk.__toESM(globals, 1);
-//#region src/configs/typescript-node/index.ts
-var scope = require_merge.merge(require_typescript.default, { languageOptions: { globals: { ...globals.default.node } } });
-//#endregion
-exports.default = scope;
-
-//# sourceMappingURL=typescript-node-BjpTUbKF.cjs.map