@yss123/cage-lint 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shunshunyue and Cage contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,19 @@
-# Temporary Holding Version
+# @yss123/cage-lint
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+dependency-cruiser 规则与 ESLint 插件
+
+Cage 是通过 TypeScript 声明业务、由框架统一执行权限和数据规则的中后台框架。此包是框架的一部分。
+
+## 使用
+
+```powershell
+pnpm add -D @yss123/cage-lint
+```
+
+首次使用建议通过脚手架创建完整项目，所需依赖由模板统一配置。需要 Node.js 24 或更新版本。
+
+- [完整使用说明](https://github.com/shunshunyue/cage/blob/main/docs/使用说明.md)
+- [框架源码与范例](https://github.com/shunshunyue/cage)
+- [问题反馈](https://github.com/shunshunyue/cage/issues)
+
+许可证：[MIT](https://github.com/shunshunyue/cage/blob/main/LICENSE)。

package/dependency-cruiser.cjs

@@ -0,0 +1,41 @@
+// 依赖规则（框架提供）：管「谁不能导入谁」。项目里的 .dependency-cruiser.cjs 只需要一行：
+//   module.exports = require('@yss123/cage-lint/dependency-cruiser.cjs');
+module.exports = {
+  forbidden: [
+    {
+      name: 'domain-no-io',
+      severity: 'error',
+      comment: '[CAGE-DEP-001] 声明和 handler 不能直接做 IO',
+      from: { path: '^packages/domain', pathNot: '\\.(test|spec)\\.' },
+      to: {
+        path: '^(node:)?(fs|net|http|https|http2|child_process|dgram|tls|worker_threads|cluster)$|node_modules/(pg|kysely|axios|undici|node-fetch|got)/|node_modules/@yss123/cage-http/',
+      },
+    },
+    {
+      name: 'adapters-write-via-commands',
+      severity: 'error',
+      comment: '[CAGE-DEP-002] 适配器必须通过命令网关写数据',
+      from: { path: '^packages/adapters' },
+      to: { path: 'node_modules/(pg|kysely)/' },
+    },
+    {
+      name: 'web-only-contracts',
+      severity: 'error',
+      comment: '[CAGE-DEP-003] 前端只能依赖 @app/contracts',
+      from: { path: '^apps/web' },
+      to: { path: '^packages/domain|node_modules/@yss123/cage-(kernel|http|admin|connectors|approval|testkit)/' },
+    },
+    {
+      name: 'no-generated-imports-from-domain',
+      severity: 'error',
+      comment: '[CAGE-DEP-005] domain 不能依赖生成物',
+      from: { path: '^packages/domain' },
+      to: { path: '^(generated|packages/contracts)/' },
+    },
+  ],
+  options: {
+    doNotFollow: { path: 'node_modules' },
+    tsPreCompilationDeps: true,
+    exclude: { path: '(^|/)(dist|generated/tests|node_modules)/' },
+  },
+};

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+import type { ESLint, Linter } from 'eslint';
+export declare const rules: {
+    'unsafe-needs-reason': import("eslint").Rule.RuleModule;
+    'no-sql-concat': import("eslint").Rule.RuleModule;
+    'no-secret-literal': import("eslint").Rule.RuleModule;
+    'no-manual-routes': import("eslint").Rule.RuleModule;
+};
+declare const plugin: ESLint.Plugin & {
+    configs: Record<string, Linter.Config[]>;
+};
+export default plugin;

package/dist/index.js

@@ -0,0 +1,38 @@
+// @yss123/cage-lint：ESLint 插件与推荐配置。项目里的 eslint.config.js：
+//   import cage from '@yss123/cage-lint';
+//   export default [...cage.configs.recommended];
+import tsParser from '@typescript-eslint/parser';
+import noManualRoutes from './rules/no-manual-routes.js';
+import noSecretLiteral from './rules/no-secret-literal.js';
+import noSqlConcat from './rules/no-sql-concat.js';
+import unsafeNeedsReason from './rules/unsafe-needs-reason.js';
+export const rules = {
+    'unsafe-needs-reason': unsafeNeedsReason,
+    'no-sql-concat': noSqlConcat,
+    'no-secret-literal': noSecretLiteral,
+    'no-manual-routes': noManualRoutes,
+};
+const plugin = {
+    meta: { name: '@yss123/cage-lint', version: '0.1.0' },
+    rules: rules,
+    configs: {},
+};
+plugin.configs.recommended = [
+    { ignores: ['**/node_modules/**', '**/dist/**', 'generated/**', 'packages/contracts/**', '.cage/**'] },
+    {
+        files: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.mjs'],
+        languageOptions: {
+            parser: tsParser,
+            parserOptions: { ecmaVersion: 'latest', sourceType: 'module', ecmaFeatures: { jsx: true } },
+        },
+        plugins: { cage: plugin },
+        rules: {
+            'cage/unsafe-needs-reason': 'error',
+            'cage/no-sql-concat': 'error',
+            'cage/no-secret-literal': 'error',
+            'cage/no-manual-routes': 'error',
+        },
+    },
+];
+export default plugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,0CAA0C;AAC1C,kDAAkD;AAClD,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,OAAO,cAAc,MAAM,6BAA6B,CAAC;AACzD,OAAO,eAAe,MAAM,8BAA8B,CAAC;AAC3D,OAAO,WAAW,MAAM,0BAA0B,CAAC;AACnD,OAAO,iBAAiB,MAAM,gCAAgC,CAAC;AAE/D,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,qBAAqB,EAAE,iBAAiB;IACxC,eAAe,EAAE,WAAW;IAC5B,mBAAmB,EAAE,eAAe;IACpC,kBAAkB,EAAE,cAAc;CACnC,CAAC;AAEF,MAAM,MAAM,GAAiE;IAC3E,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE;IACrD,KAAK,EAAE,KAAY;IACnB,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG;IAC3B,EAAE,OAAO,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,UAAU,CAAC,EAAE;IACtG;QACE,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;QACrD,eAAe,EAAE;YACf,MAAM,EAAE,QAAe;YACvB,aAAa,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;SAC5F;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzB,KAAK,EAAE;YACL,0BAA0B,EAAE,OAAO;YACnC,oBAAoB,EAAE,OAAO;YAC7B,wBAAwB,EAAE,OAAO;YACjC,uBAAuB,EAAE,OAAO;SACjC;KACF;CACF,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/rules/no-manual-routes.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;

package/dist/rules/no-manual-routes.js

@@ -0,0 +1,28 @@
+const METHODS = new Set(['get', 'post', 'put', 'patch', 'delete', 'route', 'all', 'head', 'options']);
+const RECEIVERS = /^(app|server|fastify|router|api|instance)$/i;
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: { description: '禁止在业务项目里手写 HTTP 路由' },
+        messages: { route: '[CAGE-ROUTE-001] 不要手写路由 {{call}}：在 domain 里声明命令或查询，路由由框架生成' },
+        schema: [],
+    },
+    create(context) {
+        return {
+            CallExpression(node) {
+                const c = node.callee;
+                if (c.type !== 'MemberExpression' || c.property?.type !== 'Identifier' || !METHODS.has(c.property.name))
+                    return;
+                const recv = c.object?.type === 'Identifier' ? c.object.name : c.object?.type === 'MemberExpression' ? c.object.property?.name : '';
+                const first = node.arguments[0];
+                const isPath = (first?.type === 'Literal' && typeof first.value === 'string' && first.value.startsWith('/')) ||
+                    (first?.type === 'TemplateLiteral' && String(first.quasis[0]?.value?.raw ?? '').startsWith('/')) ||
+                    (first?.type === 'ObjectExpression' && first.properties.some((p) => (p.key?.name ?? p.key?.value) === 'url'));
+                if (RECEIVERS.test(recv ?? '') && isPath)
+                    context.report({ node, messageId: 'route', data: { call: `${recv}.${c.property.name}()` } });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-manual-routes.js.map

package/dist/rules/no-manual-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-manual-routes.js","sourceRoot":"","sources":["../../src/rules/no-manual-routes.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACtG,MAAM,SAAS,GAAG,6CAA6C,CAAC;AAEhE,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE;QAC3C,QAAQ,EAAE,EAAE,KAAK,EAAE,4DAA4D,EAAE;QACjF,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,cAAc,CAAC,IAAS;gBACtB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO;gBAChH,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpI,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,MAAM,GACV,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAC7F,CAAC,KAAK,EAAE,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAChG,CAAC,KAAK,EAAE,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;gBACrH,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACzI,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AACF,eAAe,IAAI,CAAC"}

package/dist/rules/no-secret-literal.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;

package/dist/rules/no-secret-literal.js

@@ -0,0 +1,46 @@
+const PATTERNS = [
+    [/AKIA[0-9A-Z]{16}/, 'AWS 访问密钥'],
+    [/-----BEGIN (RSA |EC |OPENSSH )?PRIVATE KEY-----/, '私钥'],
+    [/\b(sk|rk|pk)_(live|test)_[0-9a-zA-Z]{16,}/, '支付平台密钥'],
+    [/\bsk-[A-Za-z0-9_-]{20,}/, 'API 密钥'],
+    [/\bgh[pousr]_[A-Za-z0-9]{30,}/, 'GitHub 令牌'],
+    [/\bxox[baprs]-[A-Za-z0-9-]{10,}/, 'Slack 令牌'],
+    [/eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/, 'JWT'],
+];
+const NAME_RE = /(password|passwd|secret|token|api[_-]?key|access[_-]?key|private[_-]?key)$/i;
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: { description: '禁止密钥字面量' },
+        messages: { secret: '[CAGE-SECRET-002] 疑似{{what}}写在了代码里：密钥只写名字，值由密钥管理服务注入' },
+        schema: [],
+    },
+    create(context) {
+        const check = (node, value, name) => {
+            for (const [re, what] of PATTERNS) {
+                if (re.test(value)) {
+                    context.report({ node, messageId: 'secret', data: { what } });
+                    return;
+                }
+            }
+            // 名字像密钥、值又不像「密钥名」（全大写下划线）的长字符串
+            if (name && NAME_RE.test(name) && value.length >= 12 && !/^[A-Z][A-Z0-9_]+$/.test(value) && !/\s/.test(value)) {
+                context.report({ node, messageId: 'secret', data: { what: '密钥' } });
+            }
+        };
+        return {
+            Literal(node) {
+                if (typeof node.value !== 'string')
+                    return;
+                const p = node.parent;
+                const name = p?.type === 'VariableDeclarator' ? p.id?.name
+                    : p?.type === 'Property' ? (p.key?.name ?? p.key?.value)
+                        : p?.type === 'AssignmentExpression' ? p.left?.property?.name
+                            : undefined;
+                check(node, node.value, name);
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-secret-literal.js.map

package/dist/rules/no-secret-literal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-secret-literal.js","sourceRoot":"","sources":["../../src/rules/no-secret-literal.ts"],"names":[],"mappings":"AAGA,MAAM,QAAQ,GAAuB;IACnC,CAAC,kBAAkB,EAAE,UAAU,CAAC;IAChC,CAAC,iDAAiD,EAAE,IAAI,CAAC;IACzD,CAAC,2CAA2C,EAAE,QAAQ,CAAC;IACvD,CAAC,yBAAyB,EAAE,QAAQ,CAAC;IACrC,CAAC,8BAA8B,EAAE,WAAW,CAAC;IAC7C,CAAC,gCAAgC,EAAE,UAAU,CAAC;IAC9C,CAAC,kEAAkE,EAAE,KAAK,CAAC;CAC5E,CAAC;AACF,MAAM,OAAO,GAAG,6EAA6E,CAAC;AAE9F,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;QAChC,QAAQ,EAAE,EAAE,MAAM,EAAE,sDAAsD,EAAE;QAC5E,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,CAAC,IAAS,EAAE,KAAa,EAAE,IAAa,EAAE,EAAE;YACxD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnB,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO;gBACT,CAAC;YACH,CAAC;YACD,+BAA+B;YAC/B,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9G,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QACF,OAAO;YACL,OAAO,CAAC,IAAS;gBACf,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO;gBAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACtB,MAAM,IAAI,GACR,CAAC,EAAE,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI;oBAC3C,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;wBACtD,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;4BAC3D,CAAC,CAAC,SAAS,CAAC;gBACpB,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AACF,eAAe,IAAI,CAAC"}

package/dist/rules/no-sql-concat.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;

package/dist/rules/no-sql-concat.js

@@ -0,0 +1,50 @@
+const SQL_RE = /\b(select|insert|update|delete)\b[\s\S]*\b(from|into|set|where)\b/i;
+function isSqlish(node) {
+    if (!node)
+        return false;
+    if (node.type === 'Literal' && typeof node.value === 'string')
+        return SQL_RE.test(node.value);
+    if (node.type === 'TemplateLiteral')
+        return node.quasis.some((q) => SQL_RE.test(q.value.raw));
+    if (node.type === 'BinaryExpression')
+        return isSqlish(node.left) || isSqlish(node.right);
+    return false;
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: { description: '禁止字符串拼接 SQL' },
+        messages: {
+            concat: '[CAGE-SQL-001] 不要拼接 SQL 字符串，改用 sql 标签模板或查询构建器（值会自动参数化）',
+            raw: '[CAGE-SQL-002] sql.raw() 只能接收字面量',
+        },
+        schema: [],
+    },
+    create(context) {
+        return {
+            TemplateLiteral(node) {
+                if (node.parent?.type === 'TaggedTemplateExpression')
+                    return; // sql`...` 是安全的
+                if (node.expressions.length > 0 && isSqlish(node))
+                    context.report({ node, messageId: 'concat' });
+            },
+            BinaryExpression(node) {
+                if (node.operator !== '+' || node.parent?.type === 'BinaryExpression')
+                    return;
+                if (isSqlish(node) && (node.left.type !== 'Literal' || node.right.type !== 'Literal'))
+                    context.report({ node, messageId: 'concat' });
+            },
+            CallExpression(node) {
+                const c = node.callee;
+                if (c.type === 'MemberExpression' && c.object?.name === 'sql' && c.property?.name === 'raw') {
+                    const a = node.arguments[0];
+                    const literal = a && (a.type === 'Literal' || (a.type === 'TemplateLiteral' && a.expressions.length === 0));
+                    if (!literal)
+                        context.report({ node, messageId: 'raw' });
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-sql-concat.js.map

package/dist/rules/no-sql-concat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-sql-concat.js","sourceRoot":"","sources":["../../src/rules/no-sql-concat.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,GAAG,oEAAoE,CAAC;AAEpF,SAAS,QAAQ,CAAC,IAAS;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;QACpC,QAAQ,EAAE;YACR,MAAM,EAAE,wDAAwD;YAChE,GAAG,EAAE,kCAAkC;SACxC;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,eAAe,CAAC,IAAS;gBACvB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,0BAA0B;oBAAE,OAAO,CAAC,gBAAgB;gBAC9E,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,gBAAgB,CAAC,IAAS;gBACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB;oBAAE,OAAO;gBAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvI,CAAC;YACD,cAAc,CAAC,IAAS;gBACtB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC5F,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC5B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC5G,IAAI,CAAC,OAAO;wBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AACF,eAAe,IAAI,CAAC"}

package/dist/rules/unsafe-needs-reason.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;

package/dist/rules/unsafe-needs-reason.js

@@ -0,0 +1,27 @@
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: { description: 'unsafe(...) 必须写明 reason 和 owner' },
+        messages: { missing: '[CAGE-UNSAFE-001] unsafe 必须写明 reason 和 owner（详见 docs/errors/CAGE-UNSAFE-001.md）' },
+        schema: [],
+    },
+    create(context) {
+        return {
+            CallExpression(node) {
+                if (node.callee.type !== 'Identifier' || node.callee.name !== 'unsafe')
+                    return;
+                const arg = node.arguments[0];
+                const props = arg?.type === 'ObjectExpression' ? arg.properties : [];
+                const val = (k) => props.find((p) => (p.key?.name ?? p.key?.value) === k)?.value;
+                const filled = (k) => {
+                    const v = val(k);
+                    return !!v && !(v.type === 'Literal' && String(v.value).trim() === '');
+                };
+                if (!filled('reason') || !filled('owner'))
+                    context.report({ node, messageId: 'missing' });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=unsafe-needs-reason.js.map

package/dist/rules/unsafe-needs-reason.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-needs-reason.js","sourceRoot":"","sources":["../../src/rules/unsafe-needs-reason.ts"],"names":[],"mappings":"AAGA,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;QACxD,QAAQ,EAAE,EAAE,OAAO,EAAE,iFAAiF,EAAE;QACxG,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,cAAc,CAAC,IAAS;gBACtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO;gBAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,KAAK,GAAU,GAAG,EAAE,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;gBACzF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE;oBAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzE,CAAC,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5F,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AACF,eAAe,IAAI,CAAC"}

package/package.json

@@ -1,6 +1,50 @@
 {
   "name": "@yss123/cage-lint",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "dependency-cruiser 规则与 ESLint 插件",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./dependency-cruiser.cjs": "./dependency-cruiser.cjs"
+  },
+  "files": [
+    "dist",
+    "dependency-cruiser.cjs"
+  ],
+  "dependencies": {
+    "@typescript-eslint/parser": "^8.42.0"
+  },
+  "peerDependencies": {
+    "eslint": "^9.0.0"
+  },
+  "devDependencies": {
+    "eslint": "^9.35.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shunshunyue/cage.git",
+    "directory": "packages/lint"
+  },
+  "homepage": "https://github.com/shunshunyue/cage#readme",
+  "bugs": {
+    "url": "https://github.com/shunshunyue/cage/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }