code-standards 8.141.0__tar.gz → 8.142.1__tar.gz

{code_standards-8.141.0 → code_standards-8.142.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-standards
-Version: 8.141.0
+Version: 8.142.1
 Summary: One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy.
 Project-URL: Homepage, https://code-standards.sarj.ai/
 Project-URL: Documentation, https://code-standards.sarj.ai/cli/
@@ -30,10 +30,10 @@ Requires-Dist: pyyaml==6.0.3
 Requires-Dist: referencing==0.37.0
 Requires-Dist: repo-standards==6.13.0
 Requires-Dist: ruff==0.17.2
-Requires-Dist: sarj-iac-lint==0.30.2
-Requires-Dist: sarj-python-lint==1.82.0
+Requires-Dist: sarj-iac-lint==0.30.3
+Requires-Dist: sarj-python-lint==1.83.0
 Requires-Dist: sarj-rule-contracts==0.4.2
-Requires-Dist: sarj-sql-lint==0.29.0
+Requires-Dist: sarj-sql-lint==0.30.1
 Requires-Dist: shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')
 Requires-Dist: typer==0.27.3
 Description-Content-Type: text/markdown

{code_standards-8.141.0 → code_standards-8.142.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "code-standards"
-version = "8.141.0"
+version = "8.142.1"
 description = "One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy."
 readme = "README.md"
 requires-python = ">=3.14"
@@ -31,9 +31,9 @@ dependencies = [
   "repo-standards==6.13.0",
   "ruff==0.17.2",
   "shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')",
-  "sarj-iac-lint==0.30.2",
-  "sarj-python-lint==1.82.0",
-  "sarj-sql-lint==0.29.0",
+  "sarj-iac-lint==0.30.3",
+  "sarj-python-lint==1.83.0",
+  "sarj-sql-lint==0.30.1",
   "typer==0.27.3",
 ]
 

{code_standards-8.141.0 → code_standards-8.142.1}/src/sarj_standards/configs/cli-reference.v1.json

@@ -3316,6 +3316,6 @@
   },
   "program": "code-standards",
   "schemaVersion": 1,
-  "summary": "Adopt, check, fix, diagnose, and update sarj-ai standards (v8.141.0).",
-  "version": "8.141.0"
+  "summary": "Adopt, check, fix, diagnose, and update sarj-ai standards (v8.142.1).",
+  "version": "8.142.1"
 }

{code_standards-8.141.0 → code_standards-8.142.1}/src/sarj_standards/configs/eslint.peers.json

@@ -19,7 +19,7 @@
     "@eslint-community/eslint-plugin-eslint-comments": "4.8.1",
     "@eslint/compat": "2.1.1",
     "@eslint/js": "10.0.1",
-    "@sarj/eslint-plugin": "16.31.0",
+    "@sarj/eslint-plugin": "16.32.0",
     "@shadcn/lint": "0.2.3",
     "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/eslint-plugin": "1.6.28",
@@ -45,7 +45,7 @@
     "eslint-plugin-regexp": "3.3.1"
   },
   "ageGatePreapprovals": {
-    "@sarj/eslint-plugin": "16.31.0"
+    "@sarj/eslint-plugin": "16.32.0"
   },
   "yarnIdentityPins": {
     "@typescript-eslint/eslint-plugin": "8.72.0",

{code_standards-8.141.0 → code_standards-8.142.1}/src/sarj_standards/configs/eslint.strict.mjs

@@ -1736,13 +1736,13 @@ export function createConfig(options = {}) {
                 "@sarj/no-excess-jsx-props": "warn",
                 "@sarj/no-redundant-consumer-union": "warn",
                 "@sarj/prefer-minimal-parameter-contract": "warn",
-                "@sarj/no-invalid-typed-mutation": "warn",
-                "@sarj/no-contradictory-type-predicate": "warn",
-                "@sarj/no-partial-type-predicate": "warn",
+                "@sarj/no-invalid-typed-mutation": "error",
+                "@sarj/no-contradictory-type-predicate": "error",
+                "@sarj/no-partial-type-predicate": "error",
                 "sonarjs/no-selector-parameter": "off",
                 "@sarj/no-boolean-selector-parameter": "warn",
-                "@sarj/no-invalid-zod-custom-parse": "warn",
-                "@sarj/no-contradictory-overload-return": "warn",
+                "@sarj/no-invalid-zod-custom-parse": "error",
+                "@sarj/no-contradictory-overload-return": "error",
                 "@sarj/no-broad-return-type": "error",
                 "@sarj/prefer-typed-reflection": "error",
                 "@sarj/no-conditional-empty-object-spread": "error",

{code_standards-8.141.0 → code_standards-8.142.1}/src/sarj_standards/configs/eslint.strict.ts

@@ -1488,14 +1488,14 @@ export function createConfig(options: ConfigOptions = {}): Linter.Config[] {
       "@sarj/no-excess-jsx-props": "warn",
       "@sarj/no-redundant-consumer-union": "warn",
       "@sarj/prefer-minimal-parameter-contract": "warn",
-      "@sarj/no-invalid-typed-mutation": "warn",
-      "@sarj/no-contradictory-type-predicate": "warn",
-      "@sarj/no-partial-type-predicate": "warn",
+      "@sarj/no-invalid-typed-mutation": "error",
+      "@sarj/no-contradictory-type-predicate": "error",
+      "@sarj/no-partial-type-predicate": "error",
       // One calibrated owner prevents duplicate native selector reports.
       "sonarjs/no-selector-parameter": "off",
       "@sarj/no-boolean-selector-parameter": "warn",
-      "@sarj/no-invalid-zod-custom-parse": "warn",
-      "@sarj/no-contradictory-overload-return": "warn",
+      "@sarj/no-invalid-zod-custom-parse": "error",
+      "@sarj/no-contradictory-overload-return": "error",
       "@sarj/no-broad-return-type": "error",
       "@sarj/prefer-typed-reflection": "error",
       "@sarj/no-conditional-empty-object-spread": "error",

{code_standards-8.141.0 → code_standards-8.142.1}/src/sarj_standards/configs/rule-calibration-campaign.v1.json

@@ -56,7 +56,7 @@
       "ruleId": "no-invalid-zod-custom-parse",
       "state": "complete",
       "evidence": "Second ordered fifty-pass expert type-design review2026-10-16. A direct import-proven native Zod v4 custom<T>().parse(primitive literal) without a validator returns that literal unchanged outside its promised primitive value domain. Preserve validators/compositions, unknown, enums, brands, opaque targets and ambiguous or escaped factory namespaces. Actual native compiler/runtime proofs, labeled controls, inspected immutable corpus calibration, final source pins, bounded performance and verification records: packages/standards/benchmarks/expert-type-design-50-passes.json. Synthetic matrices and reused source files are not independent precision observations; no unseeded new-rule positives means empirical precision is not estimable.",
-      "outcome": "Ship at warning severity without autofix. Require canonical verification and exact-head CI before administrative merge. Retain native/upstream ownership and valid public/domain boundaries; no blanket guard or type-style ban."
+      "outcome": "Current 2026-10-27 decision: promote to ERROR for source-proven contract contradictions, as reviewed in packages/standards/benchmarks/comment-contract-reaudit-20261027.json. Canonical verification and exact-head CI remain required before administrative merge. Earlier warning admission retained as history: Ship at warning severity without autofix. Require canonical verification and exact-head CI before administrative merge. Retain native/upstream ownership and valid public/domain boundaries; no blanket guard or type-style ban."
     },
     {
       "task": "rule-audit/typescript/no-contradictory-overload-return",
@@ -64,7 +64,7 @@
       "ruleId": "no-contradictory-overload-return",
       "state": "complete",
       "evidence": "Second ordered fifty-pass expert type-design review2026-10-16. Unique direct single-literal overload inputs select a sole strict-equality conditional whose pure scalar or flat-record literal values contradict the advertised result. Preserve compiler-invalid envelopes, duplicate/broad/opaque inputs, effectful branches and loose-null masked overloads. Actual native compiler/runtime proofs, labeled controls, inspected immutable corpus calibration, final source pins, bounded performance and verification records: packages/standards/benchmarks/expert-type-design-50-passes.json. Synthetic matrices and reused source files are not independent precision observations; no unseeded new-rule positives means empirical precision is not estimable.",
-      "outcome": "Ship at warning severity without autofix. Require canonical verification and exact-head CI before administrative merge. Retain native/upstream ownership and valid public/domain boundaries; no blanket guard or type-style ban."
+      "outcome": "Current 2026-10-27 decision: promote to ERROR for source-proven contract contradictions, as reviewed in packages/standards/benchmarks/comment-contract-reaudit-20261027.json. Canonical verification and exact-head CI remain required before administrative merge. Earlier warning admission retained as history: Ship at warning severity without autofix. Require canonical verification and exact-head CI before administrative merge. Retain native/upstream ownership and valid public/domain boundaries; no blanket guard or type-style ban."
     },
     {
       "task": "rule-audit/python/no-shallow-record-type-guard",
@@ -80,7 +80,7 @@
       "ruleId": "no-partial-type-predicate",
       "state": "complete",
       "evidence": "Fifty substantive guard-design review decisions completed with reproducible counterexamples and valid-boundary controls. An explicit broad primitive predicate can reject a valid member and make its false branch unsafe. Numeric enum witnesses must belong to the actual input domain; preserve overloads, contextual/public callable contracts, refinements, ambient and transformed functions. Exact TS5.0.4 replay175/175 and native6.0.3 proofs pass. Corpus findings, final source hashes and performance are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json. 2026-10-27 extension: UUID parse-success predicates claiming broad string use a local official native-schema witness; every admitted safeParse call requires one direct non-spread argument, with exported-schema assumptions and mutation exclusions explicit. Fresh revision 3 qualification inspects all nine findings: seven new true positives across six cases and two preserved response findings, with no inspected false positives, duplicates, unclassified findings or non-target changes. Seven labeled safe cases, one support module, two unsupported positives, four boundary abstentions, two actual suppression controls and one deliberate parser gap remain separate. All 40 hash-ranked sample zeroes are unlabeled; 37 have compiler/dependency profile gaps. Three paired rounds retain all observations: the cold median rises 13.95%, the warm median falls 9.33%, and process RSS is near baseline under shared-VM variation. No speedup or general overhead bound is claimed. The full affected native TypeScript suite passes 316 cases with clean lint/types and original/repaired probes. See packages/standards/benchmarks/source-audit-typescript-qualification-20261026.json. Canonical verification, independent commit review and required head CI remain separate delivery gates; new coverage stays WARNING without new autofix and field calibration remains pending. A later upstream integration changes only project/tooling incremental build-state flags in the TypeScript frame. A normal native build and pinned input checks prove identical emitted JavaScript; revision 3 runtime measurements retain their original baseline and timestamps with explicit reuse limits. A subsequent supervised normal build after scoped-React integration preserves all four emitted JS/CJS files, six declarations and recorded TypeScript runtime, compiler, dependency, fixture and tool inputs under the documented unchanged locked-installation assumption. Revision 3 retains its original frame and timing values. The exact two-path Makefile/mise verification-only follow-up permits only the reviewed Makefile transition among 491 tracked execution inputs, requires empty PYTEST_ARGS and PYTEST_ADDOPTS, and preserves the historical native wrapper and supervisor; it is not a new build, corpus run or whole-make completion claim.",
-      "outcome": "Ship at warning severity without autofix. Use an ordinary boolean filter for value selection or prove both branches of a narrowing predicate. Canonical verification and exact-head CI must pass before administrative merge."
+      "outcome": "Current 2026-10-27 decision: promote to ERROR for source-proven contract contradictions, as reviewed in packages/standards/benchmarks/comment-contract-reaudit-20261027.json. Canonical verification and exact-head CI remain required before administrative merge. Earlier warning admission retained as history: Ship at warning severity without autofix. Use an ordinary boolean filter for value selection or prove both branches of a narrowing predicate. Canonical verification and exact-head CI must pass before administrative merge."
     },
     {
       "task": "rule-audit/python/no-invalid-pydantic-bypass",
@@ -112,7 +112,7 @@
       "ruleId": "no-invalid-typed-mutation",
       "state": "complete",
       "evidence": "Expert type-safety calibration 2026-10-16. A native Object.assign, Reflect.set or value descriptor demonstrably writes a value outside an explicit local property contract. Require a stable unescaped own-data object; preserve opaque/proxy/accessor targets, ambiguous native namespaces, descriptor effects and unsupported optional/mapped/generic contracts. Native compiler/runtime checks cover exact optional writes, readonly value compatibility and inherited descriptor accessors. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects.",
-      "outcome": "Stage eslint:no-invalid-typed-mutation at warning severity without autofix. Report only source-proven contradictions; abstain at ambiguous domain or runtime boundaries. Preserve external contracts and intentional refinements. Require exact-head CI before administrative merge."
+      "outcome": "Current 2026-10-27 decision: promote to ERROR for source-proven contract contradictions, as reviewed in packages/standards/benchmarks/comment-contract-reaudit-20261027.json. Canonical verification and exact-head CI remain required before administrative merge. Earlier warning admission retained as history: Stage eslint:no-invalid-typed-mutation at warning severity without autofix. Report only source-proven contradictions; abstain at ambiguous domain or runtime boundaries. Preserve external contracts and intentional refinements. Require exact-head CI before administrative merge."
     },
     {
       "task": "rule-audit/typescript/no-contradictory-type-predicate",
@@ -120,7 +120,7 @@
       "ruleId": "no-contradictory-type-predicate",
       "state": "complete",
       "evidence": "Additional hundred-question expert type-safety review2026-10-17. A native Array.isArray test cannot establish primitive element contracts from unknown input. Require exact stable native identity and plain primitive-array target; preserve complete validators, opaque/public/contextual contracts and source-visible Array, host, alias or array-constructor replacements. Decisions, primary/native proofs, independent review, fixed-pin historical and fresh labeled calibration, exact sources, bounded selected/normal performance and validation are recorded in packages/standards/benchmarks/expert-type-safety-100-passes.json. Reused corpora, matrix vectors and closing regression probes are not additional passes or independent precision observations.",
-      "outcome": "Retain warning severity without autofix. Preserve every legitimate domain/public state and existing native ownership. Canonical verification and latest exact-head CI remain required before administrative merge; finite calibration does not guarantee universal precision."
+      "outcome": "Current 2026-10-27 decision: promote to ERROR for source-proven contract contradictions, as reviewed in packages/standards/benchmarks/comment-contract-reaudit-20261027.json. Canonical verification and exact-head CI remain required before administrative merge. Earlier warning admission retained as history: Retain warning severity without autofix. Preserve every legitimate domain/public state and existing native ownership. Canonical verification and latest exact-head CI remain required before administrative merge; finite calibration does not guarantee universal precision."
     },
     {
       "task": "rule-audit/python/prefer-discriminated-model-union",