@zukhruf/eslint 0.1.0

package/dist/base/options.js

@@ -0,0 +1,22 @@
+// Re-declaring a third-party rule replaces every option the base config gave
+// it: `'functional/no-let': ['error', { ignoreIdentifierPattern }]` drops
+// `allowInFunctions`, and every `let` inside a function becomes an error.
+// These factories return the complete options with the repo's entries
+// appended, so extending a base rule never loses the base's own.
+/** Options for `functional/no-let`: no mutable state at module scope; locals and loop counters stay legal. */
+export function noLet({ ignoreIdentifierPattern = [] } = {}) {
+    return { allowInFunctions: true, ignoreIdentifierPattern };
+}
+// node:test's test/it/describe/suite return a Promise the runner owns.
+const NODE_TEST_CALLS = {
+    from: 'package',
+    package: 'node:test',
+    name: ['test', 'it', 'describe', 'suite'],
+};
+/** Options for `@typescript-eslint/no-floating-promises`, with node:test's calls already allowed. */
+export function noFloatingPromises({ allowForKnownSafeCalls = [], } = {}) {
+    return {
+        allowForKnownSafeCalls: [NODE_TEST_CALLS, ...allowForKnownSafeCalls],
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/base/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/base/options.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,iEAAiE;AAOjE,8GAA8G;AAC9G,MAAM,UAAU,KAAK,CAAC,EAAE,uBAAuB,GAAG,EAAE,KAAmB,EAAE;IACvE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;AAC7D,CAAC;AAaD,uEAAuE;AACvE,MAAM,eAAe,GAAa;IAChC,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC;CAC1C,CAAC;AAEF,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,EACjC,sBAAsB,GAAG,EAAE,MACE,EAAE;IAC/B,OAAO;QACL,sBAAsB,EAAE,CAAC,eAAe,EAAE,GAAG,sBAAsB,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/concept.d.ts

@@ -0,0 +1,16 @@
+import type { ESLint, Linter, Rule } from 'eslint';
+/**
+ * One concern the package lints (React Router links, Tailwind classes, …): its
+ * rules and the config that turns them on. A consumer picks concerns by config
+ * name (`extends: ['zukhruf/react-router']`).
+ */
+export interface Concept {
+    /** The config's name; consumers extend `zukhruf/<name>`. */
+    readonly name: string;
+    readonly rules: Readonly<Record<string, Rule.RuleModule>>;
+    /** Builds the config; `plugins` registers this package's plugin. */
+    config(plugins: Readonly<Record<string, ESLint.Plugin>>): Linter.Config[];
+}
+/** `severity` for every rule of `rules`, under the plugin's `zukhruf/` prefix. */
+export declare function enable(rules: Readonly<Record<string, Rule.RuleModule>>, severity?: Linter.RuleSeverity): Linter.RulesRecord;
+//# sourceMappingURL=concept.d.ts.map

package/dist/concept.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concept.d.ts","sourceRoot":"","sources":["../src/concept.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEnD;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,oEAAoE;IACpE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;CAC3E;AAED,kFAAkF;AAClF,wBAAgB,MAAM,CACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAChD,QAAQ,GAAE,MAAM,CAAC,YAAsB,GACtC,MAAM,CAAC,WAAW,CAIpB"}

package/dist/concept.js

@@ -0,0 +1,5 @@
+/** `severity` for every rule of `rules`, under the plugin's `zukhruf/` prefix. */
+export function enable(rules, severity = 'error') {
+    return Object.fromEntries(Object.keys(rules).map((name) => [`zukhruf/${name}`, severity]));
+}
+//# sourceMappingURL=concept.js.map

package/dist/concept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concept.js","sourceRoot":"","sources":["../src/concept.ts"],"names":[],"mappings":"AAeA,kFAAkF;AAClF,MAAM,UAAU,MAAM,CACpB,KAAgD,EAChD,WAAgC,OAAO;IAEvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC"}

package/dist/diagnostics/config.d.ts

@@ -0,0 +1,4 @@
+import { type Concept } from '../concept.ts';
+/** Code that reports what happened: fallbacks, id matching, log event names. */
+export declare const diagnostics: Concept;
+//# sourceMappingURL=config.d.ts.map

package/dist/diagnostics/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/diagnostics/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAU,MAAM,eAAe,CAAC;AAYrD,gFAAgF;AAChF,eAAO,MAAM,WAAW,EAAE,OAYzB,CAAC"}

package/dist/diagnostics/config.js

@@ -0,0 +1,25 @@
+import { enable } from "../concept.js";
+import { SOURCE, TESTS } from "../files.js";
+import consistentEventName from "./consistent-event-name.js";
+import noFabricatedFallback from "./no-fabricated-fallback.js";
+import noHardcodedIdShape from "./no-hardcoded-id-shape.js";
+const rules = {
+    'no-fabricated-fallback': noFabricatedFallback,
+    'no-hardcoded-id-shape': noHardcodedIdShape,
+    'consistent-event-name': consistentEventName,
+};
+/** Code that reports what happened: fallbacks, id matching, log event names. */
+export const diagnostics = {
+    name: 'diagnostics',
+    rules,
+    config: (plugins) => [
+        {
+            name: 'zukhruf/diagnostics',
+            files: SOURCE,
+            ignores: TESTS,
+            plugins,
+            rules: enable(rules),
+        },
+    ],
+};
+//# sourceMappingURL=config.js.map

package/dist/diagnostics/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/diagnostics/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,MAAM,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,mBAAmB,MAAM,4BAA4B,CAAC;AAC7D,OAAO,oBAAoB,MAAM,6BAA6B,CAAC;AAC/D,OAAO,kBAAkB,MAAM,4BAA4B,CAAC;AAE5D,MAAM,KAAK,GAAG;IACZ,wBAAwB,EAAE,oBAAoB;IAC9C,uBAAuB,EAAE,kBAAkB;IAC3C,uBAAuB,EAAE,mBAAmB;CAC7C,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAY;IAClC,IAAI,EAAE,aAAa;IACnB,KAAK;IACL,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB;YACE,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,KAAK;YACd,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB;KACF;CACF,CAAC"}

package/dist/diagnostics/consistent-event-name.d.ts

@@ -0,0 +1,4 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=consistent-event-name.d.ts.map

package/dist/diagnostics/consistent-event-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consistent-event-name.d.ts","sourceRoot":"","sources":["../../src/diagnostics/consistent-event-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAuDnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAyBhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/diagnostics/consistent-event-name.js

@@ -0,0 +1,72 @@
+import { identifierName, isAstNode, isType, } from "../authoring/ast.js";
+/**
+ * Log event names are a query surface, not free text. A codebase that runs two
+ * conventions at once, dotted-lowercase in one service and snake_case in
+ * another, gives the same failure two names (`chat.run.failed` and
+ * `chat_run_failed`), and an alert or dashboard written against one name is
+ * blind to the other.
+ *
+ * Dotted-lowercase wins because it is hierarchical: `dashboard.*` and
+ * `*.failed` are prefix filters, and it matches OpenTelemetry's dotted
+ * attribute keys.
+ *
+ * Segments allow internal hyphens (`data-source.staged-file.cleanup.failed`,
+ * `auto-update.staged`) because some domains are genuinely two words.
+ */
+const EVENT_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*(?:\.[a-z0-9]+(?:-[a-z0-9]+)*)+$/;
+/** `event` written bare or quoted. */
+function isEventKey(node) {
+    if (identifierName(node) === 'event')
+        return true;
+    return isType(node, 'Literal') && node['value'] === 'event';
+}
+function literalString(node) {
+    if (!isType(node, 'Literal'))
+        return undefined;
+    const value = node['value'];
+    return typeof value === 'string' ? value : undefined;
+}
+/**
+ * Both arms of `cond ? 'a' : 'b'`, so a ternary event name is still checked.
+ *
+ * Takes `unknown` like the helpers in ast.ts: an ESTree `Expression` has no
+ * `parent`, so it is not assignable to `Rule.Node`. For the same reason a
+ * ternary's branches cannot be passed to `context.report`, and the report is
+ * anchored on the property instead.
+ */
+function candidateValues(node) {
+    if (isType(node, 'ConditionalExpression')) {
+        const consequent = node['consequent'];
+        const alternate = node['alternate'];
+        return [consequent, alternate].filter((v) => isAstNode(v));
+    }
+    return isAstNode(node) ? [node] : [];
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Require log event names to be dotted-lowercase, so one failure has one name everywhere it is logged.',
+        },
+        schema: [],
+        messages: {
+            badName: "Log event '{{name}}' is not dotted-lowercase. Event names are a query surface: two naming conventions give the same failure two names, and an alert written against one misses the other. Join lowercase segments with '.', e.g. 'dashboard.index.read.failed'.",
+        },
+    },
+    create(context) {
+        return {
+            Property(node) {
+                if (!isEventKey(node.key))
+                    return;
+                for (const candidate of candidateValues(node.value)) {
+                    const name = literalString(candidate);
+                    if (name === undefined || EVENT_NAME.test(name))
+                        continue;
+                    context.report({ node, messageId: 'badName', data: { name } });
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=consistent-event-name.js.map

package/dist/diagnostics/consistent-event-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consistent-event-name.js","sourceRoot":"","sources":["../../src/diagnostics/consistent-event-name.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,cAAc,EACd,SAAS,EACT,MAAM,GACP,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,GAAG,2DAA2D,CAAC;AAE/E,sCAAsC;AACtC,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,sGAAsG;SACzG;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE;YACR,OAAO,EACL,iQAAiQ;SACpQ;KACF;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,QAAQ,CAAC,IAAI;gBACX,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,OAAO;gBAClC,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;oBACtC,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC1D,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/diagnostics/no-fabricated-fallback.d.ts

@@ -0,0 +1,4 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-fabricated-fallback.d.ts.map

package/dist/diagnostics/no-fabricated-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-fabricated-fallback.d.ts","sourceRoot":"","sources":["../../src/diagnostics/no-fabricated-fallback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AA2EnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA8ChB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/diagnostics/no-fabricated-fallback.js

@@ -0,0 +1,116 @@
+import { isRecord, isType, stringsAt } from "../authoring/ast.js";
+import { inRoots, isTestFile } from "../authoring/path-scope.js";
+/**
+ * A fallback that invents prose is not a default; it is a claim the code
+ * cannot support. `detail ?? 'No diagnostic detail was available.'` reads,
+ * downstream, as "we looked and there was nothing", when what actually happened
+ * is that a field arrived undefined and nobody asked why. The placeholder is
+ * indistinguishable from a real answer, so the bug it hides becomes invisible
+ * in exactly the surface built for diagnosing bugs.
+ *
+ * The shapes this catches pass review easily: `?? 'No diagnostic detail was
+ * available.'` on a log field, a `fallback = 'Unknown error'` parameter, and
+ * ``error.message || `Request failed ${status}` `` written without checking
+ * whether `message` can be empty at all. Each reads as harmless until someone
+ * reads it aloud.
+ *
+ * The rule is deliberately narrow: it fires only on text containing whitespace,
+ * because that is what separates a sentence a reader will believe from a machine
+ * value. Single tokens (`'production'`, `'utf8'`), identifier-shaped templates
+ * (`` `session:${id}` ``) and the empty string are left alone. That last
+ * exclusion is measured, not assumed: flagging `''` on a real backend produced
+ * dozens of hits and nearly all were boundary coercion (`message.text || ''`
+ * before `.trim()`, `match[1] ?? ''`, `sql[i] ?? ''` past the end), which is the
+ * identity element for a string operation rather than an invented answer.
+ * Narrow beats complete here: a rule that cries wolf gets disabled.
+ */
+function stringLiteralValue(node) {
+    return isType(node, 'Literal') && typeof node['value'] === 'string'
+        ? node['value']
+        : undefined;
+}
+/** The literal parts of a template, ignoring whatever `${}` interpolates. */
+function templateText(node) {
+    const quasis = node['quasis'];
+    if (!Array.isArray(quasis))
+        return undefined;
+    return quasis
+        .map((element) => {
+        if (!isRecord(element))
+            return '';
+        const value = element['value'];
+        if (!isRecord(value))
+            return '';
+        const cooked = value['cooked'];
+        return typeof cooked === 'string' ? cooked : '';
+    })
+        .join('');
+}
+/**
+ * Prose is text a reader would mistake for a real answer, and whitespace is
+ * what separates it from a machine value. `'Key validation failed'` is a
+ * sentence someone will read as a finding; `''`, `'utf8'` and `` `session:${id}` ``
+ * are normalization and identifiers. The empty string in particular is just
+ * the identity for a string operation, and flagging it drowns this rule in
+ * boundary coercions (`message.text || ''` before `.trim()`).
+ */
+function isProse(text, allowed) {
+    if (allowed.includes(text))
+        return false;
+    return /\s/.test(text);
+}
+function isFabricatedProse(node, allowed) {
+    const literal = stringLiteralValue(node);
+    if (literal !== undefined)
+        return isProse(literal, allowed);
+    if (!isType(node, 'TemplateLiteral'))
+        return false;
+    const text = templateText(node);
+    return text === undefined ? false : isProse(text, allowed);
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Forbid fallbacks that fabricate prose (a sentence, or a template whose literal text has whitespace) for a value the code failed to obtain.',
+        },
+        schema: [
+            {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    allow: { type: 'array', items: { type: 'string' } },
+                    roots: { type: 'array', items: { type: 'string' } },
+                },
+            },
+        ],
+        defaultOptions: [{ allow: [], roots: [] }],
+        messages: {
+            fabricatedFallback: 'This fallback invents text for a value you did not obtain, and downstream cannot tell it from a real one. Cite the line in the producing code where the value can legitimately be absent — if you cannot, the absence is a bug to trace, not a string to paper over. If it genuinely can be absent, let it be absent (omit the key, narrow the type) instead of filling it in.',
+        },
+    },
+    create(context) {
+        const filename = context.physicalFilename;
+        const roots = stringsAt(context.options[0], 'roots');
+        if (isTestFile(filename) || !inRoots(filename, roots))
+            return {};
+        const allowed = stringsAt(context.options[0], 'allow');
+        function check(right, node) {
+            if (isFabricatedProse(right, allowed)) {
+                context.report({ node, messageId: 'fabricatedFallback' });
+            }
+        }
+        return {
+            LogicalExpression(node) {
+                if (node.operator !== '??' && node.operator !== '||')
+                    return;
+                check(node.right, node);
+            },
+            AssignmentPattern(node) {
+                check(node.right, node);
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-fabricated-fallback.js.map

package/dist/diagnostics/no-fabricated-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-fabricated-fallback.js","sourceRoot":"","sources":["../../src/diagnostics/no-fabricated-fallback.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,SAAS,kBAAkB,CAAC,IAAa;IACvC,OAAO,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ;QACjE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACf,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,IAAY,EAAE,OAA0B;IACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,OAA0B;IAClE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,4IAA4I;SAC/I;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBACnD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACpD;aACF;SACF;QACD,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC1C,QAAQ,EAAE;YACR,kBAAkB,EAChB,gXAAgX;SACnX;KACF;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEvD,SAAS,KAAK,CAAC,KAAc,EAAE,IAAe;YAC5C,IAAI,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,CAAC,IAAI;gBACpB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;oBAAE,OAAO;gBAC7D,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,iBAAiB,CAAC,IAAI;gBACpB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/diagnostics/no-hardcoded-id-shape.d.ts

@@ -0,0 +1,4 @@
+import type { Rule } from 'eslint';
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-hardcoded-id-shape.d.ts.map

package/dist/diagnostics/no-hardcoded-id-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-id-shape.d.ts","sourceRoot":"","sources":["../../src/diagnostics/no-hardcoded-id-shape.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AA+CnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAkChB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/diagnostics/no-hardcoded-id-shape.js

@@ -0,0 +1,73 @@
+import { identifierName, isType } from "../authoring/ast.js";
+/**
+ * Entity ids are a schema decision, not a text format. One table declares
+ * `id String @id @default(cuid())`, another takes its ids from `randomUUID()`.
+ * A regex that hardcodes one of those shapes keeps compiling, keeps passing a
+ * test whose fixture uses the matching shape, and silently stops matching the
+ * moment the shape changes. A parser that matched a UUID shape against a cuid
+ * column never matched in production, while its test stayed green on a UUID
+ * fixture.
+ *
+ * Anchor on the surrounding literal text instead: `/created\s+(\S+)/` cares
+ * about the sentence the program prints, which is a contract you own, rather
+ * than the id format, which the schema owns.
+ */
+/** `[0-9a-f]{8}-[0-9a-f]{4}` and its case/shorthand variants. */
+const UUID_SHAPE = /\[[^\]]{2,}\]\{8\}-\[[^\]]{2,}\]\{4\}/;
+/** `c[a-z0-9]{24}`, `[a-z0-9]{25}`, `[a-z0-9]{20,32}`: cuid/cuid2 lengths. */
+const CUID_SHAPE = /\[a-z0-9\]\{2\d(?:,\d*)?\}/i;
+function idShapeOf(pattern) {
+    if (UUID_SHAPE.test(pattern))
+        return 'uuid';
+    if (CUID_SHAPE.test(pattern))
+        return 'cuid';
+    return undefined;
+}
+/** `/…/` literals carry `regex`; string and bigint literals do not. */
+function regexPatternOf(node) {
+    return 'regex' in node ? node.regex.pattern : undefined;
+}
+/** The string a `new RegExp('…')` / `RegExp('…')` compiles, when it is literal. */
+function regExpSourceArgument(node) {
+    if (identifierName(node.callee) !== 'RegExp')
+        return undefined;
+    const [first] = node.arguments;
+    return isType(first, 'Literal') && typeof first['value'] === 'string'
+        ? first['value']
+        : undefined;
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallow regexes that hardcode an entity-id shape (uuid/cuid); anchor on surrounding text instead.',
+        },
+        schema: [],
+        messages: {
+            idShape: 'This regex hardcodes a {{shape}} id shape. Ids are a schema decision (`@default(cuid())` / `randomUUID()`), so a shape change silently stops the match. Anchor on the surrounding literal text (e.g. /created\\s+(\\S+)/) instead.',
+        },
+    },
+    create(context) {
+        function report(node, pattern) {
+            if (pattern === undefined)
+                return;
+            const shape = idShapeOf(pattern);
+            if (shape) {
+                context.report({ node, messageId: 'idShape', data: { shape } });
+            }
+        }
+        return {
+            Literal(node) {
+                report(node, regexPatternOf(node));
+            },
+            CallExpression(node) {
+                report(node, regExpSourceArgument(node));
+            },
+            NewExpression(node) {
+                report(node, regExpSourceArgument(node));
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-hardcoded-id-shape.js.map

package/dist/diagnostics/no-hardcoded-id-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-id-shape.js","sourceRoot":"","sources":["../../src/diagnostics/no-hardcoded-id-shape.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AAEH,iEAAiE;AACjE,MAAM,UAAU,GAAG,uCAAuC,CAAC;AAE3D,8EAA8E;AAC9E,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,IAAe;IACrC,OAAO,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,IAG7B;IACC,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;QACnE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,oGAAoG;SACvG;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE;YACR,OAAO,EACL,oOAAoO;SACvO;KACF;IACD,MAAM,CAAC,OAAO;QACZ,SAAS,MAAM,CAAC,IAAe,EAAE,OAA2B;YAC1D,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,CAAC,IAAI;gBACV,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,cAAc,CAAC,IAAI;gBACjB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,aAAa,CAAC,IAAI;gBAChB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/environment/config.d.ts

@@ -0,0 +1,7 @@
+import { type Concept } from '../concept.ts';
+/**
+ * A service that validates its environment once, in a startup zod schema
+ * (`const env = z.object({...})`), and reads it only through declared keys.
+ */
+export declare const env: Concept;
+//# sourceMappingURL=config.d.ts.map

package/dist/environment/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/environment/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAU,MAAM,eAAe,CAAC;AAYrD;;;GAGG;AACH,eAAO,MAAM,GAAG,EAAE,OAYjB,CAAC"}

package/dist/environment/config.js

@@ -0,0 +1,28 @@
+import { enable } from "../concept.js";
+import { TESTS, TYPESCRIPT } from "../files.js";
+import noDefaultForPathEnv from "./no-default-for-path-env.js";
+import noSingleEnvReadWrapper from "./no-single-env-read-wrapper.js";
+import noUndeclaredProcessEnv from "./no-undeclared-process-env.js";
+const rules = {
+    'no-undeclared-process-env': noUndeclaredProcessEnv,
+    'no-single-env-read-wrapper': noSingleEnvReadWrapper,
+    'no-default-for-path-env': noDefaultForPathEnv,
+};
+/**
+ * A service that validates its environment once, in a startup zod schema
+ * (`const env = z.object({...})`), and reads it only through declared keys.
+ */
+export const env = {
+    name: 'env',
+    rules,
+    config: (plugins) => [
+        {
+            name: 'zukhruf/env',
+            files: TYPESCRIPT,
+            ignores: TESTS,
+            plugins,
+            rules: enable(rules),
+        },
+    ],
+};
+//# sourceMappingURL=config.js.map

package/dist/environment/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/environment/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,MAAM,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,mBAAmB,MAAM,8BAA8B,CAAC;AAC/D,OAAO,sBAAsB,MAAM,iCAAiC,CAAC;AACrE,OAAO,sBAAsB,MAAM,gCAAgC,CAAC;AAEpE,MAAM,KAAK,GAAG;IACZ,2BAA2B,EAAE,sBAAsB;IACnD,4BAA4B,EAAE,sBAAsB;IACpD,yBAAyB,EAAE,mBAAmB;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,GAAG,GAAY;IAC1B,IAAI,EAAE,KAAK;IACX,KAAK;IACL,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,KAAK;YACd,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB;KACF;CACF,CAAC"}

package/dist/environment/no-default-for-path-env.d.ts

@@ -0,0 +1,10 @@
+import type { Rule } from 'eslint';
+/**
+ * A deployment path (a data directory, a socket) is backed by a volume mount
+ * the deployment declares. A code default lets the two drift apart silently:
+ * the app writes to a path nothing mounts. Each key listed in `pathEnvKeys`
+ * must therefore be a required `z.string()` in the startup schema.
+ */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-default-for-path-env.d.ts.map

package/dist/environment/no-default-for-path-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-default-for-path-env.d.ts","sourceRoot":"","sources":["../../src/environment/no-default-for-path-env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAmEnC;;;;;GAKG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/environment/no-default-for-path-env.js

@@ -0,0 +1,124 @@
+import { identifierName, isType, stringsAt, } from "../authoring/ast.js";
+const BANNED_METHODS = [
+    'default',
+    'optional',
+    'transform',
+    'catch',
+    'nullable',
+];
+const SCHEMA_VARIABLE = 'env';
+// Resolve the object literal of the startup schema, i.e. the `{...}` in
+// `const env = z.object({...})`. Keyed on the `.object(...)` call shape rather
+// than the `z` identifier, so an aliased zod import still resolves.
+function schemaObjectLiteral(init) {
+    if (!isType(init, 'CallExpression')) {
+        return undefined;
+    }
+    const callee = init['callee'];
+    if (!isType(callee, 'MemberExpression') ||
+        identifierName(callee['property']) !== 'object') {
+        return undefined;
+    }
+    const args = init['arguments'];
+    const schema = Array.isArray(args) ? args[0] : undefined;
+    return isType(schema, 'ObjectExpression') ? schema : undefined;
+}
+function propertyKeyName(property) {
+    if (property['computed'] === true) {
+        return undefined;
+    }
+    const key = property['key'];
+    const name = identifierName(key);
+    if (name !== undefined) {
+        return name;
+    }
+    if (isType(key, 'Literal') && typeof key['value'] === 'string') {
+        return key['value'];
+    }
+    return undefined;
+}
+function bannedMethodInChain(value) {
+    let current = value;
+    while (isType(current, 'CallExpression')) {
+        const callee = current['callee'];
+        if (isType(callee, 'MemberExpression') &&
+            BANNED_METHODS.includes(identifierName(callee['property']) ?? '')) {
+            return identifierName(callee['property']);
+        }
+        current = isType(callee, 'MemberExpression') ? callee['object'] : undefined;
+    }
+    return undefined;
+}
+/**
+ * A deployment path (a data directory, a socket) is backed by a volume mount
+ * the deployment declares. A code default lets the two drift apart silently:
+ * the app writes to a path nothing mounts. Each key listed in `pathEnvKeys`
+ * must therefore be a required `z.string()` in the startup schema.
+ */
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallow code defaults/optional/transform on deployment-path env vars in the startup zod schema — the deployment owns the path',
+        },
+        messages: {
+            noDefault: 'Env var "{{key}}" is a deployment path — it must be a required `z.string()` with no `.{{method}}()`. A code default lets the path drift from the volume mount that backs it; the deployment must own and set it explicitly.',
+        },
+        schema: [
+            {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    pathEnvKeys: {
+                        type: 'array',
+                        items: { type: 'string' },
+                    },
+                },
+            },
+        ],
+        defaultOptions: [{ pathEnvKeys: [] }],
+    },
+    create(context) {
+        const pathEnvKeys = new Set(stringsAt(context.options[0], 'pathEnvKeys'));
+        if (pathEnvKeys.size === 0) {
+            return {};
+        }
+        return {
+            VariableDeclarator(node) {
+                if (!isType(node, 'VariableDeclarator')) {
+                    return;
+                }
+                if (identifierName(node['id']) !== SCHEMA_VARIABLE) {
+                    return;
+                }
+                const schema = schemaObjectLiteral(node['init']);
+                if (!schema) {
+                    return;
+                }
+                const properties = schema['properties'];
+                if (!Array.isArray(properties)) {
+                    return;
+                }
+                for (const property of properties) {
+                    if (!isType(property, 'Property')) {
+                        continue;
+                    }
+                    const key = propertyKeyName(property);
+                    if (!key || !pathEnvKeys.has(key)) {
+                        continue;
+                    }
+                    const method = bannedMethodInChain(property['value']);
+                    if (method) {
+                        context.report({
+                            node: property,
+                            messageId: 'noDefault',
+                            data: { key, method },
+                        });
+                    }
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-default-for-path-env.js.map

package/dist/environment/no-default-for-path-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-default-for-path-env.js","sourceRoot":"","sources":["../../src/environment/no-default-for-path-env.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,cAAc,EACd,MAAM,EACN,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B,MAAM,cAAc,GAAG;IACrB,SAAS;IACT,UAAU;IACV,WAAW;IACX,OAAO;IACP,UAAU;CACX,CAAC;AACF,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,wEAAwE;AACxE,+EAA+E;AAC/E,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACnC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,QAAQ,EAC/C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAY,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,QAAiB;IACxC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IACE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;YAClC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EACjE,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,gIAAgI;SACnI;QACD,QAAQ,EAAE;YACR,SAAS,EACP,6NAA6N;SAChO;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,WAAW,EAAE;wBACX,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC1B;iBACF;aACF;SACF;QACD,cAAc,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;KACtC;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,kBAAkB,CAAC,IAAI;gBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;oBACxC,OAAO;gBACT,CAAC;gBACD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;oBAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;wBAClC,SAAS;oBACX,CAAC;oBACD,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClC,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;oBACtD,IAAI,MAAM,EAAE,CAAC;wBACX,OAAO,CAAC,MAAM,CAAC;4BACb,IAAI,EAAE,QAAQ;4BACd,SAAS,EAAE,WAAW;4BACtB,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;yBACtB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/environment/no-single-env-read-wrapper.d.ts

@@ -0,0 +1,10 @@
+import type { Rule } from 'eslint';
+/**
+ * An accessor that only returns `process.env.X` (or `process.env.X ?? 'literal'`)
+ * hides which variable a call site reads and invites validation to grow there
+ * instead of in the startup schema. Async and generator functions change the
+ * return type, so inlining them is not equivalent and they are left alone.
+ */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-single-env-read-wrapper.d.ts.map

package/dist/environment/no-single-env-read-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-single-env-read-wrapper.d.ts","sourceRoot":"","sources":["../../src/environment/no-single-env-read-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAkDnC;;;;;GAKG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAgChB,CAAC;AAEF,eAAe,IAAI,CAAC"}