eslint-plugin-import-next 2.0.1

package/AGENTS.md

@@ -0,0 +1,95 @@
+# AGENTS.md
+
+> Context for AI coding agents working on eslint-plugin-import-next
+
+## Setup Commands
+
+```bash
+# Install dependencies (from monorepo root)
+pnpm install
+
+# Build this package
+nx build eslint-plugin-import-next
+
+# Run tests
+nx test eslint-plugin-import-next
+
+# Run tests with coverage
+nx test eslint-plugin-import-next --coverage
+
+# Lint this package
+nx lint eslint-plugin-import-next
+```
+
+## Code Style
+
+- TypeScript strict mode with `@interlace/eslint-devkit` types
+- Use `AST_NODE_TYPES` constants, never string literals for node types
+- Use `formatLLMMessage()` for all rule error messages
+- Use `c8 ignore` comments with documented reasons for untestable code
+- Single-pass AST traversal patterns (O(n) complexity)
+
+## Testing Instructions
+
+- Tests use `@typescript-eslint/rule-tester` with Vitest
+- Each rule has `index.ts` (implementation) and `*.test.ts` (tests) in same directory
+- Run specific rule test: `nx test eslint-plugin-import-next --testPathPattern="no-circular"`
+- Coverage target: ≥90% lines, ≥95% functions
+- All tests must pass before committing
+
+## Project Structure
+
+```
+src/
+├── index.ts          # Plugin entry, 6 configs
+└── rules/            # 30 rule directories
+    └── [rule-name]/
+        ├── index.ts       # Rule implementation
+        └── *.test.ts      # Rule tests
+```
+
+## Plugin Purpose
+
+ESLint plugin for **dependency management** with 30 LLM-optimized rules. Covers module resolution, ES module enforcement, architecture boundaries, export/import style, and dependency management.
+
+## Available Presets
+
+| Preset              | Description                                 |
+| ------------------- | ------------------------------------------- |
+| `recommended`       | Balanced configuration (13 rules)           |
+| `strict`            | All 30 rules as errors                      |
+| `module-resolution` | Focus on import/export validation (7 rules) |
+| `import-style`      | Focus on import formatting (5 rules)        |
+| `esm`               | Enforce ES Modules only (3 rules)           |
+| `architecture`      | Enforce module boundaries (6 rules)         |
+
+## Rule Categories
+
+| Category              | Rules                                                                                                                                                             |
+| --------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Module Resolution     | `no-unresolved`, `named`, `default`, `namespace`, `extensions`, `no-self-import`, `no-duplicates`                                                                 |
+| Module System         | `no-amd`, `no-commonjs`, `no-nodejs-modules`                                                                                                                      |
+| Dependency Boundaries | `no-circular-dependencies`, `no-internal-modules`, `no-cross-domain-imports`, `enforce-dependency-direction`, `no-restricted-paths`, `no-relative-parent-imports` |
+| Export Style          | `no-default-export`, `no-named-export`, `prefer-default-export`, `no-anonymous-default-export`, `no-mutable-exports`, `no-deprecated`                             |
+| Import Style          | `enforce-import-order`, `first`, `newline-after-import`, `no-unassigned-import`                                                                                   |
+| Dependency Management | `no-extraneous-dependencies`, `no-unused-modules`, `max-dependencies`, `prefer-node-protocol`                                                                     |
+
+## Common Fix Patterns
+
+```typescript
+// Circular dependencies (CWE-407)
+// BAD: A.ts imports B.ts, B.ts imports A.ts
+// GOOD: Extract shared code to types.ts, break cycle
+
+// Node.js protocol
+// BAD: import { readFile } from 'fs'
+// GOOD: import { readFile } from 'node:fs'
+
+// Import order
+// BAD: import local from './local'; import external from 'external';
+// GOOD: import external from 'external'; import local from './local';
+
+// No CommonJS
+// BAD: const x = require('./module')
+// GOOD: import x from './module'
+```

package/CHANGELOG.md

@@ -0,0 +1,52 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2024-12-05
+
+### Added
+
+- Initial release with 30 LLM-optimized dependency rules
+- **Module Resolution Rules** (7 rules):
+  - `no-unresolved` - Ensure imports resolve to a module
+  - `named` - Ensure named imports exist
+  - `default` - Ensure default export exists
+  - `namespace` - Ensure namespace imports are valid
+  - `extensions` - Enforce file extension usage
+  - `no-self-import` - Prevent module from importing itself
+  - `no-duplicates` - Prevent duplicate imports
+- **Module System Rules** (3 rules):
+  - `no-amd` - Disallow AMD imports
+  - `no-commonjs` - Disallow CommonJS imports
+  - `no-nodejs-modules` - Disallow Node.js built-in modules
+- **Dependency Boundaries Rules** (6 rules):
+  - `no-circular-dependencies` - Detect circular dependency chains
+  - `no-internal-modules` - Forbid deep/internal module imports
+  - `no-cross-domain-imports` - Enforce domain boundaries
+  - `enforce-dependency-direction` - Enforce layered architecture
+  - `no-restricted-paths` - Restrict imports between paths
+  - `no-relative-parent-imports` - Disallow `../` imports
+- **Export Style Rules** (6 rules):
+  - `no-default-export` - Disallow default exports
+  - `no-named-export` - Disallow named exports
+  - `prefer-default-export` - Prefer default for single exports
+  - `no-anonymous-default-export` - Disallow anonymous default exports
+  - `no-mutable-exports` - Disallow mutable exports
+  - `no-deprecated` - Disallow deprecated exports
+- **Import Style Rules** (4 rules):
+  - `enforce-import-order` - Enforce import ordering
+  - `first` - Ensure imports are at the top
+  - `newline-after-import` - Require newline after imports
+  - `no-unassigned-import` - Disallow side-effect imports
+- **Dependency Management Rules** (4 rules):
+  - `no-extraneous-dependencies` - Disallow unlisted dependencies
+  - `no-unused-modules` - Detect unused exports/modules
+  - `max-dependencies` - Limit number of dependencies
+  - `prefer-node-protocol` - Prefer `node:` protocol for builtins
+- Preset configurations: `recommended`, `strict`, `module-resolution`, `import-style`, `esm`, `architecture`
+- Full ESLint 9 flat config support
+- ESLint MCP integration for AI assistants
+- TypeScript type exports for all rule options

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2024 Ofri Peretz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,157 @@
+# eslint-plugin-import-next
+
+> **The high-performance, agentic alternative to `eslint-plugin-import`.** Detect cycles 100x faster with caching, and fix them automatically with AI-optimized suggestions.
+
+[![npm version](https://img.shields.io/npm/v/eslint-plugin-import-next.svg)](https://www.npmjs.com/package/eslint-plugin-import-next)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![codecov](https://codecov.io/gh/ofri-peretz/eslint/graph/badge.svg?component=import_next)](https://app.codecov.io/gh/ofri-peretz/eslint/components?components%5B0%5D=import_next)
+
+---
+
+## 💡 What you get
+
+- **100x faster cycle detection:** Uses **shared filesystem caching** for instant feedback, even in large monorepos.
+- **LLM-optimized & MCP-ready:** Structured 2-line messages with CWE + concrete fixes so humans _and_ AI auto-fixers stay aligned.
+- **Smart refactoring suggestions:** Doesn't just say "Cycle Detected" - tells you exactly how to refactor (e.g., "Extract types to `types.ts`" vs "Use Dependency Injection").
+- **Tiered presets:** `recommended`, `architecture` for fast policy rollout.
+- **Zero false positives:** Precise detection with incremental caching.
+
+---
+
+## 📊 OWASP Coverage Matrix
+
+> **Note:** This plugin focuses on **code architecture and dependency management** rather than OWASP security. For security rules, see [`eslint-plugin-secure-coding`](https://www.npmjs.com/package/eslint-plugin-secure-coding).
+
+| Category                  | CWE      | Rules                                                 |
+| ------------------------- | -------- | ----------------------------------------------------- |
+| **Circular Dependencies** | CWE-407  | `no-circular-dependencies`                            |
+| **Module Resolution**     | CWE-829  | `no-unresolved`, `no-self-import`, `no-duplicates`    |
+| **Architecture**          | CWE-1047 | `no-internal-modules`, `enforce-dependency-direction` |
+
+---
+
+## ⚡ Performance: The "Killer Feature"
+
+`import/no-cycle` is notorious for slowing down builds because it re-analyzes the entire graph for every file.
+**`import-next/no-circular-dependencies`** uses a **smart incremental cache** that persists across lint runs.
+
+| Rule                                       | Time (10k files)   | Memory |
+| ------------------------------------------ | ------------------ | ------ |
+| `import/no-cycle`                          | ~45s               | High   |
+| **`import-next/no-circular-dependencies`** | **~0.4s** (cached) | Low    |
+
+---
+
+## 🤖 Smart Fixes (Agentic)
+
+Unlike legacy plugins, we analyze the _type_ of cycle and suggest the correct architectural pattern.
+
+### Scenario A: Type-only Cycle
+
+**Error:**
+
+```bash
+Cycle: User.ts -> Post.ts -> User.ts
+Message: 🧩 CWE-407 | Circular dependency detected (Types only)
+         Fix: Extract shared types to 'types.ts'
+```
+
+### Scenario B: Hard Dependency
+
+**Error:**
+
+```bash
+Cycle: ServiceA.ts -> ServiceB.ts -> ServiceA.ts
+Message: 🏗️ CWE-407 | Circular dependency detected (Hard Coupling)
+         Fix: Use Dependency Injection pattern or split 'ServiceA' into Core/Extended
+```
+
+---
+
+## 📦 Installation
+
+```bash
+npm install --save-dev eslint-plugin-dependencies
+# or
+pnpm add -D eslint-plugin-dependencies
+```
+
+## 🚀 Quick Start (Flat Config)
+
+```javascript
+// eslint.config.js
+import dependencies from 'eslint-plugin-dependencies';
+
+export default [
+  // 1. Recommended (Balanced)
+  dependencies.configs.recommended,
+
+  // 2. OR Architecture Strict (Good for Monorepos)
+  dependencies.configs.architecture,
+];
+```
+
+---
+
+## 🔧 Rule Categories
+
+### ⚡ Performance & Architecture (The Good Stuff)
+
+| Rule                                                                           | Description                                                    | Fix      |
+| ------------------------------------------------------------------------------ | -------------------------------------------------------------- | -------- |
+| [`no-circular-dependencies`](./docs/rules/no-circular-dependencies.md)         | **Fast**, cached cycle detection.                              | 🧠 Smart |
+| [`no-internal-modules`](./docs/rules/no-internal-modules.md)                   | Enforce entry points (no `import .../dist/utils`).             |          |
+| [`enforce-dependency-direction`](./docs/rules/enforce-dependency-direction.md) | Enforce layered architecture (e.g., `feature` imports `core`). |          |
+
+### 📦 Module Resolution
+
+| Rule                                               | Description                      |
+| -------------------------------------------------- | -------------------------------- |
+| [`no-unresolved`](./docs/rules/no-unresolved.md)   | Ensure imports verify.           |
+| [`no-duplicates`](./docs/rules/no-duplicates.md)   | Merge duplicate imports.         |
+| [`no-self-import`](./docs/rules/no-self-import.md) | Prevent importing the same file. |
+
+### 🧹 Clean Code
+
+| Rule                                                                       | Description                                |
+| -------------------------------------------------------------------------- | ------------------------------------------ |
+| [`enforce-import-order`](./docs/rules/enforce-import-order.md)             | Group imports automatically.               |
+| [`no-unused-modules`](./docs/rules/no-unused-modules.md)                   | Find dead code.                            |
+| [`no-extraneous-dependencies`](./docs/rules/no-extraneous-dependencies.md) | Prevent importing devDependencies in prod. |
+
+---
+
+## 🤖 LLM & MCP Integration
+
+This plugin is optimized for **Cursor** and **GitHub Copilot**. Add this to your `.cursor/mcp.json` to let the AI run and fix these rules directly:
+
+```json
+{
+  "mcpServers": {
+    "eslint": {
+      "command": "npx",
+      "args": ["@eslint/mcp@latest"]
+    }
+  }
+}
+```
+
+---
+
+## 🔗 Related ESLint Plugins
+
+Part of the **Forge-JS ESLint Ecosystem** — AI-native security plugins with LLM-optimized error messages:
+
+| Plugin                                                                                               | Description                                                  | Rules |
+| ---------------------------------------------------------------------------------------------------- | ------------------------------------------------------------ | :---: |
+| [`eslint-plugin-secure-coding`](https://www.npmjs.com/package/eslint-plugin-secure-coding)           | Universal security (OWASP Top 10 Web + Mobile)               |  89   |
+| [`eslint-plugin-jwt`](https://www.npmjs.com/package/eslint-plugin-jwt)                               | JWT security (algorithm confusion, weak secrets, claims)     |  13   |
+| [`eslint-plugin-crypto`](https://www.npmjs.com/package/eslint-plugin-crypto)                         | Cryptographic best practices (weak algorithms, key handling) |  24   |
+| [`eslint-plugin-pg`](https://www.npmjs.com/package/eslint-plugin-pg)                                 | PostgreSQL/node-postgres security                            |  13   |
+| [`eslint-plugin-vercel-ai-security`](https://www.npmjs.com/package/eslint-plugin-vercel-ai-security) | Vercel AI SDK security                                       |  19   |
+
+---
+
+## License
+
+MIT © [Ofri Peretz](https://github.com/ofri-peretz)

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "eslint-plugin-import-next",
+  "version": "2.0.1",
+  "description": "Drop-in replacement for eslint-plugin-import. 100x faster no-cycle detection, AI-optimized fixes, zero config migration.",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.js"
+    },
+    "./types": {
+      "types": "./src/types/index.d.ts",
+      "default": "./src/types/index.js"
+    }
+  },
+  "author": "Ofri Peretz <ofriperetzdev@gmail.com>",
+  "license": "MIT",
+  "homepage": "https://github.com/ofri-peretz/eslint#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ofri-peretz/eslint.git",
+    "directory": "packages/eslint-plugin-import-next"
+  },
+  "bugs": {
+    "url": "https://github.com/ofri-peretz/eslint/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "src/",
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "AGENTS.md"
+  ],
+  "keywords": [
+    "eslint",
+    "eslint-plugin",
+    "eslintplugin",
+    "eslint-plugin-import",
+    "eslint-plugin-import-alternative",
+    "import",
+    "imports",
+    "no-cycle",
+    "circular-dependencies",
+    "import-order",
+    "modules",
+    "module-resolution",
+    "commonjs",
+    "esm",
+    "llm-optimized",
+    "ai-assistant",
+    "auto-fix",
+    "typescript",
+    "static-analysis",
+    "mcp",
+    "agentic"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "typescript": "^5.9.3"
+  },
+  "dependencies": {
+    "tslib": "^2.3.0",
+    "@interlace/eslint-devkit": "workspace:*"
+  },
+  "devDependencies": {
+    "@typescript-eslint/parser": "^8.46.2",
+    "@typescript-eslint/rule-tester": "^8.46.2",
+    "vitest": "^4.0.4"
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,98 @@
+/**
+ * eslint-plugin-import-next
+ *
+ * Drop-in replacement for eslint-plugin-import with 30 LLM-optimized rules.
+ * Covers import validation, module resolution, circular dependencies,
+ * and export style enforcement.
+ *
+ * Compatible with ESLint 8+ and ESLint 9+
+ *
+ * @see https://eslint.org/docs/latest/extend/plugins - ESLint Plugin Documentation
+ */
+import { clearCircularDependencyCache } from './rules/no-circular-dependencies';
+/**
+ * Collection of all ESLint rules provided by this plugin
+ */
+export declare const rules: {
+    'no-duplicates': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    named: ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    default: ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    namespace: ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    extensions: ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-self-import': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-unresolved': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-amd': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-commonjs': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-nodejs-modules': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-circular-dependencies': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-internal-modules': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-cross-domain-imports': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'enforce-dependency-direction': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-restricted-paths': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-relative-parent-imports': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-default-export': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-named-export': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'prefer-default-export': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-anonymous-default-export': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-mutable-exports': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-deprecated': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'enforce-import-order': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-unassigned-import': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    first: ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'newline-after-import': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-extraneous-dependencies': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'no-unused-modules': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'max-dependencies': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+    'prefer-node-protocol': ESLintUtils.RuleModule<MessageIds, Options, unknown, ESLintUtils.RuleListener>;
+};
+/**
+ * ESLint Plugin object following the official plugin structure
+ */
+export declare const plugin: TSESLint.FlatConfig.Plugin;
+/**
+ * Preset configurations for common use cases
+ */
+export declare const configs: {
+    /**
+     * Recommended configuration for most projects
+     *
+     * Includes essential rules with sensible defaults:
+     * - Errors on unresolved imports
+     * - Errors on circular dependencies
+     * - Warns on module system violations
+     * - Warns on import order issues
+     */
+    recommended: TSESLint.FlatConfig.Config;
+    /**
+     * Strict configuration for maximum enforcement
+     *
+     * All rules set to error for production-ready code
+     */
+    strict: TSESLint.FlatConfig.Config;
+    /**
+     * Module resolution focused configuration
+     *
+     * Ensures all imports resolve correctly
+     */
+    'module-resolution': TSESLint.FlatConfig.Config;
+    /**
+     * Import style focused configuration
+     *
+     * Enforces consistent import formatting
+     */
+    'import-style': TSESLint.FlatConfig.Config;
+    /**
+     * ESM-only configuration
+     *
+     * Enforces ES Modules and prohibits CommonJS/AMD
+     */
+    esm: TSESLint.FlatConfig.Config;
+    /**
+     * Architecture boundaries configuration
+     *
+     * Enforces clean architecture and module boundaries
+     */
+    architecture: TSESLint.FlatConfig.Config;
+};
+export { clearCircularDependencyCache };
+export default plugin;