eslint-plugin-zod-mini 1.1.1 → 1.2.0

package/README.md

@@ -31,21 +31,23 @@ Find out more about [Oxlint's `jsPLugins`](https://oxc.rs/docs/guide/usage/linte
 🔧 Automatically fixable by the [`--fix` CLI option](https://eslint.org/docs/user-guide/command-line-interface#--fix).\
 💡 Manually fixable by [editor suggestions](https://eslint.org/docs/latest/use/core-concepts#rule-suggestions).
 
-| Name                                                                                     | Description                                                                                        | 💼  | 🔧  | 💡  |
-| :--------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------- | :-- | :-- | :-- |
-| [consistent-import](docs/rules/consistent-import.md)                                     | Enforce a consistent import style for Zod Mini                                                     | ✅  | 🔧  |     |
-| [consistent-import-source](docs/rules/consistent-import-source.md)                       | Enforce consistent source from Zod Mini imports                                                    |     |     | 💡  |
-| [consistent-object-schema-type](docs/rules/consistent-object-schema-type.md)             | Enforce consistent usage of Zod Mini schema methods                                                |     |     | 💡  |
-| [consistent-schema-output-type-style](docs/rules/consistent-schema-output-type-style.md) | Enforce consistent use of z.infer or z.output for schema type inference                            |     | 🔧  |     |
-| [consistent-schema-var-name](docs/rules/consistent-schema-var-name.md)                   | Enforce a consistent naming convention for Zod Mini schema variables                               | ✅  |     |     |
-| [no-any-schema](docs/rules/no-any-schema.md)                                             | Disallow usage of `z.any()` in Zod Mini schemas                                                    | ✅  |     | 💡  |
-| [no-empty-custom-schema](docs/rules/no-empty-custom-schema.md)                           | Disallow usage of `z.custom()` without arguments                                                   | ✅  |     |     |
-| [no-unknown-schema](docs/rules/no-unknown-schema.md)                                     | Disallow usage of `z.unknown()` in Zod Mini schemas                                                |     |     |     |
-| [prefer-enum-over-literal-union](docs/rules/prefer-enum-over-literal-union.md)           | Prefer `z.enum()` over `z.union()` when all members are string literals.                           | ✅  | 🔧  |     |
-| [prefer-meta](docs/rules/prefer-meta.md)                                                 | Enforce usage of `z.meta()` over `z.describe()`                                                    | ✅  | 🔧  |     |
-| [require-brand-type-parameter](docs/rules/require-brand-type-parameter.md)               | Require type parameter on `.brand()` functions                                                     | ✅  |     | 💡  |
-| [require-error-message](docs/rules/require-error-message.md)                             | Enforce that custom refinements include an error message                                           | ✅  | 🔧  |     |
-| [schema-error-property-style](docs/rules/schema-error-property-style.md)                 | Enforce consistent style for error messages in Zod Mini schema validation (using ESQuery patterns) |     |     |     |
+| Name                                                                                     | Description                                                                                                              | 💼  | 🔧  | 💡  |
+| :--------------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------- | :-- | :-- | :-- |
+| [consistent-import](docs/rules/consistent-import.md)                                     | Enforce a consistent import style for Zod Mini                                                                           | ✅  | 🔧  |     |
+| [consistent-import-source](docs/rules/consistent-import-source.md)                       | Enforce consistent source from Zod Mini imports                                                                          |     |     | 💡  |
+| [consistent-object-schema-type](docs/rules/consistent-object-schema-type.md)             | Enforce consistent usage of Zod Mini schema methods                                                                      |     |     | 💡  |
+| [consistent-schema-output-type-style](docs/rules/consistent-schema-output-type-style.md) | Enforce consistent use of z.infer or z.output for schema type inference                                                  |     | 🔧  |     |
+| [consistent-schema-var-name](docs/rules/consistent-schema-var-name.md)                   | Enforce a consistent naming convention for Zod Mini schema variables                                                     | ✅  |     |     |
+| [no-any-schema](docs/rules/no-any-schema.md)                                             | Disallow usage of `z.any()` in Zod Mini schemas                                                                          | ✅  |     | 💡  |
+| [no-empty-custom-schema](docs/rules/no-empty-custom-schema.md)                           | Disallow usage of `z.custom()` without arguments                                                                         | ✅  |     |     |
+| [no-throw-in-refine](docs/rules/no-throw-in-refine.md)                                   | Disallow throwing errors directly inside Zod Mini refine callbacks                                                       | ✅  |     |     |
+| [no-transform-in-record-key](docs/rules/no-transform-in-record-key.md)                   | Disallow transforms in z.record() key schemas, which can cause silent key mutations and data loss through key collisions |     |     |     |
+| [no-unknown-schema](docs/rules/no-unknown-schema.md)                                     | Disallow usage of `z.unknown()` in Zod Mini schemas                                                                      |     |     |     |
+| [prefer-enum-over-literal-union](docs/rules/prefer-enum-over-literal-union.md)           | Prefer `z.enum()` over `z.union()` when all members are string literals.                                                 | ✅  | 🔧  |     |
+| [prefer-meta](docs/rules/prefer-meta.md)                                                 | Enforce usage of `z.meta()` over `z.describe()`                                                                          | ✅  | 🔧  |     |
+| [require-brand-type-parameter](docs/rules/require-brand-type-parameter.md)               | Require type parameter on `.brand()` functions                                                                           | ✅  |     | 💡  |
+| [require-error-message](docs/rules/require-error-message.md)                             | Enforce that custom refinements include an error message                                                                 | ✅  | 🔧  |     |
+| [schema-error-property-style](docs/rules/schema-error-property-style.md)                 | Enforce consistent style for error messages in Zod Mini schema validation (using ESQuery patterns)                       |     |     |     |
 
 <!-- end auto-generated rules list -->
 

package/dist/index.cjs

@@ -6,6 +6,8 @@ const require_consistent_schema_output_type_style = require("./rules/consistent-
 const require_consistent_schema_var_name = require("./rules/consistent-schema-var-name.cjs");
 const require_no_any_schema = require("./rules/no-any-schema.cjs");
 const require_no_empty_custom_schema = require("./rules/no-empty-custom-schema.cjs");
+const require_no_throw_in_refine = require("./rules/no-throw-in-refine.cjs");
+const require_no_transform_in_record_key = require("./rules/no-transform-in-record-key.cjs");
 const require_no_unknown_schema = require("./rules/no-unknown-schema.cjs");
 const require_prefer_enum_over_literal_union = require("./rules/prefer-enum-over-literal-union.cjs");
 const require_prefer_meta = require("./rules/prefer-meta.cjs");
@@ -26,6 +28,8 @@ const eslintPluginZodMini = {
 		"consistent-schema-var-name": require_consistent_schema_var_name.consistentSchemaVarName,
 		"no-any-schema": require_no_any_schema.noAnySchema,
 		"no-empty-custom-schema": require_no_empty_custom_schema.noEmptyCustomSchema,
+		"no-throw-in-refine": require_no_throw_in_refine.noThrowInRefine,
+		"no-transform-in-record-key": require_no_transform_in_record_key.noTransformInRecordKey,
 		"no-unknown-schema": require_no_unknown_schema.noUnknownSchema,
 		"prefer-enum-over-literal-union": require_prefer_enum_over_literal_union.preferEnumOverLiteralUnion,
 		"prefer-meta": require_prefer_meta.preferMeta,
@@ -43,6 +47,7 @@ const recommendedConfig = {
 		"zod-mini/consistent-schema-var-name": "error",
 		"zod-mini/no-any-schema": "error",
 		"zod-mini/no-empty-custom-schema": "error",
+		"zod-mini/no-throw-in-refine": "error",
 		"zod-mini/prefer-enum-over-literal-union": "error",
 		"zod-mini/prefer-meta": "error",
 		"zod-mini/require-brand-type-parameter": "error",

package/dist/index.mjs

@@ -6,6 +6,8 @@ import { consistentSchemaOutputTypeStyle } from "./rules/consistent-schema-outpu
 import { consistentSchemaVarName } from "./rules/consistent-schema-var-name.mjs";
 import { noAnySchema } from "./rules/no-any-schema.mjs";
 import { noEmptyCustomSchema } from "./rules/no-empty-custom-schema.mjs";
+import { noThrowInRefine } from "./rules/no-throw-in-refine.mjs";
+import { noTransformInRecordKey } from "./rules/no-transform-in-record-key.mjs";
 import { noUnknownSchema } from "./rules/no-unknown-schema.mjs";
 import { preferEnumOverLiteralUnion } from "./rules/prefer-enum-over-literal-union.mjs";
 import { preferMeta } from "./rules/prefer-meta.mjs";
@@ -26,6 +28,8 @@ const eslintPluginZodMini = {
 		"consistent-schema-var-name": consistentSchemaVarName,
 		"no-any-schema": noAnySchema,
 		"no-empty-custom-schema": noEmptyCustomSchema,
+		"no-throw-in-refine": noThrowInRefine,
+		"no-transform-in-record-key": noTransformInRecordKey,
 		"no-unknown-schema": noUnknownSchema,
 		"prefer-enum-over-literal-union": preferEnumOverLiteralUnion,
 		"prefer-meta": preferMeta,
@@ -43,6 +47,7 @@ const recommendedConfig = {
 		"zod-mini/consistent-schema-var-name": "error",
 		"zod-mini/no-any-schema": "error",
 		"zod-mini/no-empty-custom-schema": "error",
+		"zod-mini/no-throw-in-refine": "error",
 		"zod-mini/prefer-enum-over-literal-union": "error",
 		"zod-mini/prefer-meta": "error",
 		"zod-mini/require-brand-type-parameter": "error",

package/dist/rules/no-throw-in-refine.cjs

@@ -0,0 +1,17 @@
+const require_create_plugin_rule = require("../utils/create-plugin-rule.cjs");
+let _eslint_zod_utils = require("@eslint-zod/utils");
+let _eslint_zod_utils_rule_builders_no_throw_in_refine = require("@eslint-zod/utils/rule-builders/no-throw-in-refine");
+//#region src/rules/no-throw-in-refine.ts
+const noThrowInRefine = require_create_plugin_rule.createZodMiniPluginRule({
+	name: "no-throw-in-refine",
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow throwing errors directly inside Zod Mini refine callbacks" },
+		messages: { noThrowInRefine: "Do not throw errors directly inside a z.refine callback." },
+		schema: []
+	},
+	defaultOptions: [],
+	create: (0, _eslint_zod_utils_rule_builders_no_throw_in_refine.buildNoThrowInRefineCreate)(_eslint_zod_utils.zodMiniImportScope)
+});
+//#endregion
+exports.noThrowInRefine = noThrowInRefine;

package/dist/rules/no-throw-in-refine.mjs

@@ -0,0 +1,17 @@
+import { createZodMiniPluginRule } from "../utils/create-plugin-rule.mjs";
+import { zodMiniImportScope } from "@eslint-zod/utils";
+import { buildNoThrowInRefineCreate } from "@eslint-zod/utils/rule-builders/no-throw-in-refine";
+//#region src/rules/no-throw-in-refine.ts
+const noThrowInRefine = createZodMiniPluginRule({
+	name: "no-throw-in-refine",
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow throwing errors directly inside Zod Mini refine callbacks" },
+		messages: { noThrowInRefine: "Do not throw errors directly inside a z.refine callback." },
+		schema: []
+	},
+	defaultOptions: [],
+	create: buildNoThrowInRefineCreate(zodMiniImportScope)
+});
+//#endregion
+export { noThrowInRefine };

package/dist/rules/no-transform-in-record-key.cjs

@@ -0,0 +1,29 @@
+const require_create_plugin_rule = require("../utils/create-plugin-rule.cjs");
+let _eslint_zod_utils = require("@eslint-zod/utils");
+let _typescript_eslint_utils = require("@typescript-eslint/utils");
+let _eslint_zod_utils_rule_builders_no_transform_in_record_key = require("@eslint-zod/utils/rule-builders/no-transform-in-record-key");
+//#region src/rules/no-transform-in-record-key.ts
+const noTransformInRecordKey = require_create_plugin_rule.createZodMiniPluginRule({
+	name: "no-transform-in-record-key",
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow transforms in z.record() key schemas, which can cause silent key mutations and data loss through key collisions" },
+		messages: { noTransformInRecordKey: "Transforms in z.record() key schemas cause silent key mutation and potential data loss. Use validators like z.minLength() instead of mutating checks like z.trim() or z.toLowerCase()." },
+		schema: []
+	},
+	defaultOptions: [],
+	create: (0, _eslint_zod_utils_rule_builders_no_transform_in_record_key.buildNoTransformInRecordKeyCreate)(_eslint_zod_utils.zodMiniImportScope, { findTransformNode(keySchema, { detectZodSchemaRootNode, collectZodChainMethods }) {
+		if (keySchema.type !== _typescript_eslint_utils.AST_NODE_TYPES.CallExpression) return null;
+		for (const method of collectZodChainMethods(keySchema)) {
+			if (method.name !== "check") continue;
+			for (const argument of method.node.arguments) {
+				if (argument.type !== _typescript_eslint_utils.AST_NODE_TYPES.CallExpression) continue;
+				const zodCheck = detectZodSchemaRootNode(argument);
+				if (zodCheck && _eslint_zod_utils.ZOD_MUTATING_CHECK_NAMES.includes(zodCheck.schemaType)) return argument;
+			}
+		}
+		return null;
+	} })
+});
+//#endregion
+exports.noTransformInRecordKey = noTransformInRecordKey;

package/dist/rules/no-transform-in-record-key.mjs

@@ -0,0 +1,29 @@
+import { createZodMiniPluginRule } from "../utils/create-plugin-rule.mjs";
+import { ZOD_MUTATING_CHECK_NAMES, zodMiniImportScope } from "@eslint-zod/utils";
+import { AST_NODE_TYPES } from "@typescript-eslint/utils";
+import { buildNoTransformInRecordKeyCreate } from "@eslint-zod/utils/rule-builders/no-transform-in-record-key";
+//#region src/rules/no-transform-in-record-key.ts
+const noTransformInRecordKey = createZodMiniPluginRule({
+	name: "no-transform-in-record-key",
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow transforms in z.record() key schemas, which can cause silent key mutations and data loss through key collisions" },
+		messages: { noTransformInRecordKey: "Transforms in z.record() key schemas cause silent key mutation and potential data loss. Use validators like z.minLength() instead of mutating checks like z.trim() or z.toLowerCase()." },
+		schema: []
+	},
+	defaultOptions: [],
+	create: buildNoTransformInRecordKeyCreate(zodMiniImportScope, { findTransformNode(keySchema, { detectZodSchemaRootNode, collectZodChainMethods }) {
+		if (keySchema.type !== AST_NODE_TYPES.CallExpression) return null;
+		for (const method of collectZodChainMethods(keySchema)) {
+			if (method.name !== "check") continue;
+			for (const argument of method.node.arguments) {
+				if (argument.type !== AST_NODE_TYPES.CallExpression) continue;
+				const zodCheck = detectZodSchemaRootNode(argument);
+				if (zodCheck && ZOD_MUTATING_CHECK_NAMES.includes(zodCheck.schemaType)) return argument;
+			}
+		}
+		return null;
+	} })
+});
+//#endregion
+export { noTransformInRecordKey };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-zod-mini",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "description": "ESLint plugin that adds custom linting rules to enforce best practices when using Zod Mini",
   "keywords": [
     "eslint",
@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "@typescript-eslint/utils": "^8.57.0",
-    "@eslint-zod/utils": "2.0.0"
+    "@eslint-zod/utils": "2.1.0"
   },
   "devDependencies": {
     "@marcalexiei/prettier-config": "2.0.0",