golem15/msd-core
3
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
Files
fe3ed0669103d6a8edd1caffaaa47caf6a4b7eba
msd-core/eslint.config.mjs
Jakub Zych 6cfa0c55d2 refactor: drop 12 runtimes, keep Claude, Codex, OpenCode, Cursor, ZCode, Antigravity 
Removes kilo, kimi, kimi-code, copilot, windsurf, augment, trae, qwen, hermes,
cline, codebuddy and pi end to end: capability descriptors, installer branches
and converters (bin/install.js 14.9k -> 11.2k lines), TypeScript converters,
hook surfaces and runtime homes, review lanes qwen/kimi-code, the two pi
migrations, Kimi payload normalization in the hook guards, dead hostBehaviors
vocabulary, launcher home probes, fixtures, runtime-specific tests and the
prose that presented them as supported.

Installer output for the six kept runtimes is byte-identical to before the
prune. The Kimi tool-vocabulary tests in workflow-guard, read-guard and
read-injection-scanner are left in place pending a decision.
2026-10-06 20:02:40 +02:00

883 lines
47 KiB
JavaScript
Raw Blame History

import js from '@eslint/js';
import tseslint from 'typescript-eslint';
import globals from 'globals';
import pluginN from 'eslint-plugin-n';
import noOnlyTests from 'eslint-plugin-no-only-tests';
import { dirname } from 'path';
import { fileURLToPath } from 'url';
import { createRequire } from 'module';
const __dirname = dirname(fileURLToPath(import.meta.url));
const require = createRequire(import.meta.url);
// Local plugin with custom AST rules
import noSourceGrep from './eslint-rules/no-source-grep.cjs';
import noMagicSleepInTests from './eslint-rules/no-magic-sleep-in-tests.cjs';
import noElapsedAssertion from './eslint-rules/no-elapsed-assertion.cjs';
import noRawRmsyncInTests from './eslint-rules/no-raw-rmsync-in-tests.cjs';
import noTautologicalAssert from './eslint-rules/no-tautological-assert.cjs';
import noAdhocMarkdownParsing from './eslint-rules/no-adhoc-markdown-parsing.cjs';
import noAdhocRegexEscape from './eslint-rules/no-adhoc-regex-escape.cjs';
import noPathLiteralInAssert from './eslint-rules/no-path-literal-in-assert.cjs';
import noPosixModeBitAssert from './eslint-rules/no-posix-mode-bit-assert.cjs';
import noUnguardedNonportableExec from './eslint-rules/no-unguarded-nonportable-exec.cjs';
import noCrlfFragileSplit from './eslint-rules/no-crlf-fragile-split.cjs';
import noUnboundedQuantifier from './eslint-rules/no-unbounded-quantifier.cjs';
import noHardcodedTmp from './eslint-rules/no-hardcoded-tmp.cjs';
import noBareNpmExec from './eslint-rules/no-bare-npm-exec.cjs';
import requireUserprofileWithHome from './eslint-rules/require-userprofile-with-home.cjs';
import requireFullTmpdirTriad from './eslint-rules/require-full-tmpdir-triad.cjs';
import noUnboundedDirnameWalk from './eslint-rules/no-unbounded-dirname-walk.cjs';
import normalizePathInContent from './eslint-rules/normalize-path-in-content.cjs';
import requireFsOpFallback from './eslint-rules/require-fs-op-fallback.cjs';
import noUnboundedSpawn from './eslint-rules/no-unbounded-spawn.cjs';
import noDuplicateFoldMarker from './eslint-rules/no-duplicate-fold-marker.cjs';
import requireSubprocessTimeout from './eslint-rules/require-subprocess-timeout.cjs';
import noExternalRequireInBin from './eslint-rules/no-external-require-in-bin.cjs';
import noPrivateBinaryResolution from './eslint-rules/no-private-binary-resolution.cjs';
import requireRegisteredExit from './eslint-rules/require-registered-exit.cjs';
import noSwallowedPrecondition from './eslint-rules/no-swallowed-precondition.cjs';
import noExactCaseEnvAccess from './eslint-rules/no-exact-case-env-access.cjs';
import noAdhocTimeoutLiteral from './eslint-rules/no-adhoc-timeout-literal.cjs';
import noRenderedTextLengthAssert from './eslint-rules/no-rendered-text-length-assert.cjs';
import noUnconfinedPathJoin from './eslint-rules/no-unconfined-path-join.cjs';
const unconfinedPathJoinAllowlist = require('./eslint-rules/no-unconfined-path-join.allowlist.json');
const localPlugin = {
rules: {
'no-source-grep': noSourceGrep,
'no-magic-sleep-in-tests': noMagicSleepInTests,
'no-elapsed-assertion': noElapsedAssertion,
'no-raw-rmsync-in-tests': noRawRmsyncInTests,
'no-tautological-assert': noTautologicalAssert,
'no-adhoc-markdown-parsing': noAdhocMarkdownParsing,
'no-adhoc-regex-escape': noAdhocRegexEscape,
'no-path-literal-in-assert': noPathLiteralInAssert,
'no-posix-mode-bit-assert': noPosixModeBitAssert,
'no-unguarded-nonportable-exec': noUnguardedNonportableExec,
'no-crlf-fragile-split': noCrlfFragileSplit,
'no-unbounded-quantifier': noUnboundedQuantifier,
'no-hardcoded-tmp': noHardcodedTmp,
'no-bare-npm-exec': noBareNpmExec,
'require-userprofile-with-home': requireUserprofileWithHome,
'require-full-tmpdir-triad': requireFullTmpdirTriad,
'no-unbounded-dirname-walk': noUnboundedDirnameWalk,
'normalize-path-in-content': normalizePathInContent,
'require-fs-op-fallback': requireFsOpFallback,
'no-unbounded-spawn': noUnboundedSpawn,
'no-duplicate-fold-marker': noDuplicateFoldMarker,
'require-subprocess-timeout': requireSubprocessTimeout,
'no-external-require-in-bin': noExternalRequireInBin,
'no-private-binary-resolution': noPrivateBinaryResolution,
'require-registered-exit': requireRegisteredExit,
'no-swallowed-precondition': noSwallowedPrecondition,
'no-exact-case-env-access': noExactCaseEnvAccess,
'no-adhoc-timeout-literal': noAdhocTimeoutLiteral,
'no-rendered-text-length-assert': noRenderedTextLengthAssert,
'no-unconfined-path-join': noUnconfinedPathJoin,
},
};
export default tseslint.config(
// ── Global ignores ─────────────────────────────────────────────────────────
{
ignores: [
'node_modules/**',
'**/dist/**',
'.worktrees/**',
'.claude/**',
'coverage/**',
// #4141: Stryker's sandbox (tempDirName in stryker.config.mjs, also gitignored
// and always-ignored by Stryker itself). A run that dies before cleanup leaves a
// copy of the tree here; linting it reports the path-scoped `local/*` rules as
// undefined, which reads as the plugin being broken rather than as scratch space.
'.stryker-tmp/**',
'**/*.generated.cjs',
// ADR-457: tsc-generated runtime artifact — lint the src/*.cts source, not the emitted .cjs.
'msd-core/bin/lib/claude-orchestration.cjs',
'msd-core/bin/lib/claude-orchestration-command-router.cjs',
'msd-core/bin/lib/semver-compare.cjs',
'msd-core/bin/lib/host-integration.cjs',
'msd-core/bin/lib/host-runtime-detection.cjs',
'msd-core/bin/lib/handshake-serialized.cjs',
'msd-core/bin/lib/host-integration-sdk.cjs',
'msd-core/bin/lib/install-effort-resolver.cjs',
// #2875 Part 2 (epic #2866 Phase 6): tsc-generated runtime artifact —
// lint the src/install-model-override-resolver.cts source, not this.
'msd-core/bin/lib/install-model-override-resolver.cjs',
'msd-core/bin/lib/install-engine.cjs',
// #3712: tsc-generated runtime artifact — lint src/real-home-guard.cts, not this.
'msd-core/bin/lib/real-home-guard.cjs',
// #2874 (epic #2866 Phase 5): tsc-generated runtime artifact — lint the
// src/install-fs-adapter.cts source, not this.
'msd-core/bin/lib/install-fs-adapter.cjs',
// #2875 (epic #2866 Phase 6): tsc-generated runtime artifact — lint the
// src/user-artifact-staging.cts source, not this.
'msd-core/bin/lib/user-artifact-staging.cjs',
'msd-core/bin/lib/commonjs-marker.cjs',
'msd-core/bin/lib/capability-loader.cjs',
'msd-core/bin/lib/capability-source.cjs',
'msd-core/bin/lib/capability-ledger.cjs',
'msd-core/bin/lib/capability-trust.cjs',
'msd-core/bin/lib/capability-lifecycle.cjs',
'msd-core/bin/lib/capability-consent.cjs',
'msd-core/bin/lib/capability-lock.cjs',
'msd-core/bin/lib/resolution.cjs',
'msd-core/bin/lib/unusable-input.cjs',
'msd-core/bin/lib/plan-drift-guard.cjs',
// #4917 (epic #4906 Phase 1, ADR-4910): lint src/planning-document.cts, not this.
'msd-core/bin/lib/planning-document.cjs',
// #2401: tsc-generated runtime artifact — lint the src/verify-command-grounding.cts source.
'msd-core/bin/lib/verify-command-grounding.cjs',
'msd-core/bin/lib/cli-exit.cjs',
'msd-core/bin/lib/external-job.cjs',
'msd-core/bin/lib/edge-probe.cjs',
'msd-core/bin/lib/probe-core.cjs',
'msd-core/bin/lib/spec-section.cjs',
'msd-core/bin/lib/prohibition-enforcement.cjs',
// #3770: tsc-generated runtime artifact — lint the src/tdd-red-evidence.cts source.
'msd-core/bin/lib/tdd-red-evidence.cjs',
// #4145: tsc-generated runtime artifact — lint the src/pristine-baseline.cts source.
'msd-core/bin/lib/pristine-baseline.cjs',
'msd-core/bin/lib/ui-consideration-probe.cjs',
'msd-core/bin/lib/code-review-flags.cjs',
'msd-core/bin/lib/code-review-depth.cjs',
'msd-core/bin/lib/context-utilization.cjs',
'msd-core/bin/lib/broken-windows.cjs',
'msd-core/bin/lib/complexity-trigger.cjs',
// issue #1953: tsc-generated runtime artifact — lint the src/refactor-trigger-command-router.cts source.
'msd-core/bin/lib/refactor-trigger-command-router.cjs',
'msd-core/bin/lib/api-coverage.cjs',
'msd-core/bin/lib/artifacts.cjs',
'msd-core/bin/lib/assumption-delta.cjs',
'msd-core/bin/lib/state-transition.cjs',
// #3873: tsc-generated runtime artifact — lint the src/state-md-schema.cts source, not this.
'msd-core/bin/lib/state-md-schema.cjs',
'msd-core/bin/lib/command-arg-projection.cjs',
'msd-core/bin/lib/clock.cjs',
'msd-core/bin/lib/ui-safety-gate.cjs',
// #3312: tsc-generated runtime artifact — lint the src/ui-frontend-evidence.cts source.
'msd-core/bin/lib/ui-frontend-evidence.cjs',
'msd-core/bin/lib/review-reviewer-selection.cjs',
'msd-core/bin/lib/review-lane-descriptor.cjs',
'msd-core/bin/lib/review-lane-invocation.cjs',
'msd-core/bin/lib/review-lane-runner.cjs',
'msd-core/bin/lib/reviewer-step-dispatch.cjs',
'msd-core/bin/lib/clusters.cjs',
'msd-core/bin/lib/installer-migrations/001-legacy-orphan-files.cjs',
'msd-core/bin/lib/observability/redaction.cjs',
'msd-core/bin/lib/installer-migration-report.cjs',
'msd-core/bin/lib/prompt-budget.cjs',
'msd-core/bin/lib/secrets.cjs',
'msd-core/bin/lib/smart-entry.cjs',
'msd-core/bin/lib/phase-lifecycle.cjs',
// #3227: tsc-generated artifact — lint src/state-contract.cts, not this.
'msd-core/bin/lib/state-contract.cjs',
'msd-core/bin/lib/workstream-name-policy.cjs',
'msd-core/bin/lib/decisions.cjs',
'msd-core/bin/lib/validate.cjs',
'msd-core/bin/lib/schema-detect.cjs',
'msd-core/bin/lib/runtime-name-policy.cjs',
'msd-core/bin/lib/runtime-slash.cjs',
'msd-core/bin/lib/observability/event.cjs',
'msd-core/bin/lib/workstream-inventory-builder.cjs',
'msd-core/bin/lib/plan-scan.cjs',
'msd-core/bin/lib/fallow-runner.cjs',
'msd-core/bin/lib/project-root.cjs',
'msd-core/bin/lib/installer-migration-authoring.cjs',
'msd-core/bin/lib/update-context.cjs',
'msd-core/bin/lib/installer-migrations/000-first-time-baseline.cjs',
'msd-core/bin/lib/installer-migrations/008-cursor-retire-commands-surface.cjs',
'msd-core/bin/lib/retired-artifact-cleanup.cjs',
'msd-core/bin/lib/runtime-homes.cjs',
'msd-core/bin/lib/model-catalog.cjs',
'msd-core/bin/lib/configuration.cjs',
'msd-core/bin/lib/state-document.cjs',
'msd-core/bin/lib/planning-snapshot.cjs',
// #2790: tsc-generated runtime artifacts — lint the src/*.cts sources
// (src/planning-inspect.cts, src/planning-command-router.cts,
// src/plan-document.cts), not these emitted .cjs files.
'msd-core/bin/lib/planning-inspect.cjs',
'msd-core/bin/lib/planning-command-router.cjs',
'msd-core/bin/lib/plan-document.cjs',
'msd-core/bin/lib/pattern.cjs',
'msd-core/bin/lib/text-lines.cjs',
'msd-core/bin/lib/token-scanner.cjs',
// #3311: tsc-generated runtime artifact — lint src/milestone-lock.cts, not this.
'msd-core/bin/lib/milestone-lock.cjs',
'msd-core/bin/lib/health-diagnostic-types.cjs',
'msd-core/bin/lib/health-diagnostic.cjs',
'msd-core/bin/lib/health-diagnostic-rules/root-existence.cjs',
'msd-core/bin/lib/health-diagnostic-rules/state-consistency.cjs',
'msd-core/bin/lib/health-diagnostic-rules/config-validation.cjs',
'msd-core/bin/lib/health-diagnostic-rules/phase-structure.cjs',
'msd-core/bin/lib/health-diagnostic-rules/agent-install.cjs',
'msd-core/bin/lib/health-diagnostic-rules/roadmap-disk-consistency.cjs',
'msd-core/bin/lib/health-diagnostic-rules/worktree-health.cjs',
'msd-core/bin/lib/health-diagnostic-rules/milestone-archive-hygiene.cjs',
'msd-core/bin/lib/health-diagnostic-rules/consistency.cjs',
// #2873 (epic #2866 Phase 4): tsc-generated runtime artifact — lint the
// src/health-diagnostic-rules/install-surface-shadowing.cts source.
'msd-core/bin/lib/health-diagnostic-rules/install-surface-shadowing.cjs',
'msd-core/bin/lib/shell-command-projection.cjs',
'msd-core/bin/lib/security.cjs',
'msd-core/bin/lib/command-aliases.cjs',
'msd-core/bin/lib/config-schema.cjs',
'msd-core/bin/lib/model-profiles.cjs',
'msd-core/bin/lib/model-resolver.cjs',
'msd-core/bin/lib/loop-resolver.cjs',
'msd-core/bin/lib/capability-state.cjs',
'msd-core/bin/lib/capability-activation.cjs',
'msd-core/bin/lib/federated-config.cjs',
'msd-core/bin/lib/installer-migrations/002-codex-legacy-hooks-json.cjs',
'msd-core/bin/lib/installer-migrations/003-rename-get-shit-done-to-msd-core.cjs',
'msd-core/bin/lib/installer-migrations/004-prune-stale-pristine-snapshots.cjs',
'msd-core/bin/lib/installer-migrations/005-opencode-baseline-commands-dir.cjs',
// 007 is tsc output like its siblings, but unlike 006 it imports node
// builtins — so tsc emits its `__importDefault` helper, which uses `var`
// and trips no-var. ADR-457: the linted source is the .cts.
'msd-core/bin/lib/installer-migrations/007-retire-config-root-commonjs-marker.cjs',
// 009 also imports node builtins (fs, path) like 007, so tsc emits the
// same `__importDefault` helper. ADR-457: the linted source is the .cts.
// 010 also imports node builtins (fs, path) like 007/009, so tsc emits
// the same `__importDefault` helper. ADR-457: the linted source is the .cts.
'msd-core/bin/lib/installer-migrations/010-antigravity-retire-confighome-artifacts.cjs',
'msd-core/bin/lib/observability/logger.cjs',
'msd-core/bin/lib/active-workstream-store.cjs',
'msd-core/bin/lib/adr-parser.cjs',
'msd-core/bin/lib/graphify.cjs',
'msd-core/bin/lib/graphify-command-router.cjs',
'msd-core/bin/lib/audit-command-router.cjs',
'msd-core/bin/lib/intel-command-router.cjs',
'msd-core/bin/lib/install-profiles.cjs',
'msd-core/bin/lib/intel.cjs',
'msd-core/bin/lib/installer-migrations.cjs',
'msd-core/bin/lib/worktree-safety.cjs',
'msd-core/bin/lib/worktree-base-ref.cjs',
'msd-core/bin/lib/planning-workspace.cjs',
'msd-core/bin/lib/planning-scope.cjs',
'msd-core/bin/lib/command-roster.cjs',
'msd-core/bin/lib/runtime-artifact-conversion.cjs',
'msd-core/bin/lib/runtime-artifact-install-plan.cjs',
'msd-core/bin/lib/runtime-artifact-layout.cjs',
'msd-core/bin/lib/install-scope.cjs',
'msd-core/bin/lib/installed-surface-resolver.cjs',
// #2873 (epic #2866 Phase 4): tsc-generated runtime artifact — lint the
// src/install-shadow-report.cts source.
'msd-core/bin/lib/install-shadow-report.cjs',
'msd-core/bin/lib/runtime-config-adapter-registry.cjs',
'msd-core/bin/lib/runtime-hooks-surface.cjs',
'msd-core/bin/lib/command-routing-hub.cjs',
'msd-core/bin/lib/core-utils.cjs',
'msd-core/bin/lib/io.cjs',
'msd-core/bin/lib/phase-id.cjs',
'msd-core/bin/lib/phase-id-card.cjs',
'msd-core/bin/lib/phase-id-display.cjs',
'msd-core/bin/lib/phase-estimation.cjs',
'msd-core/bin/lib/estimate-cli.cjs',
'msd-core/bin/lib/normalize-test-command.cjs',
'msd-core/bin/lib/config-loader.cjs',
'msd-core/bin/lib/phase-locator.cjs',
'msd-core/bin/lib/plan-dependency-graph.cjs',
// #3674: tsc-generated runtime artifact — lint the src/file-overlap-partitioner.cts source, not this.
'msd-core/bin/lib/file-overlap-partitioner.cjs',
// #3675: tsc-generated runtime artifact — lint the src/quick-batch.cts source, not this.
'msd-core/bin/lib/quick-batch.cjs',
// #3676: tsc-generated runtime artifacts — lint the
// src/quick-batch-dispatch.cts / src/quick-batch-command-router.cts
// sources, not these emitted .cjs files.
'msd-core/bin/lib/quick-batch-dispatch.cjs',
'msd-core/bin/lib/quick-batch-command-router.cjs',
'msd-core/bin/lib/roadmap-parser.cjs',
'msd-core/bin/lib/drift.cjs',
'msd-core/bin/lib/cjs-command-router-adapter.cjs',
'msd-core/bin/lib/phase-command-router.cjs',
'msd-core/bin/lib/surface.cjs',
'msd-core/bin/lib/roadmap-upgrade.cjs',
'msd-core/bin/lib/config-types.cjs',
'msd-core/bin/lib/phases-command-router.cjs',
'msd-core/bin/lib/verify-command-router.cjs',
'msd-core/bin/lib/verification.cjs',
'msd-core/bin/lib/verification-command-router.cjs',
'msd-core/bin/lib/eval.cjs',
'msd-core/bin/lib/eval-command-router.cjs',
'msd-core/bin/lib/init-command-router.cjs',
'msd-core/bin/lib/onboard-projection.cjs',
'msd-core/bin/lib/agent-command-router.cjs',
'msd-core/bin/lib/agent-install-check.cjs',
// ADR-2313 Phase 3 (#3243): tsc-generated runtime artifact — lint the src/codex-agent-toml.cts source.
'msd-core/bin/lib/codex-agent-toml.cjs',
'msd-core/bin/lib/task-command-router.cjs',
'msd-core/bin/lib/validate-command-router.cjs',
'msd-core/bin/lib/workstream-inventory.cjs',
'msd-core/bin/lib/roadmap-command-router.cjs',
'msd-core/bin/lib/state-command-router.cjs',
'msd-core/bin/lib/gap-checker.cjs',
'msd-core/bin/lib/gate-predicate-evaluator.cjs',
'msd-core/bin/lib/config.cjs',
'msd-core/bin/lib/profile-output.cjs',
'msd-core/bin/lib/commands.cjs',
'msd-core/bin/lib/state.cjs',
'msd-core/bin/lib/milestone.cjs',
'msd-core/bin/lib/phase.cjs',
'msd-core/bin/lib/verify.cjs',
'msd-core/bin/lib/init.cjs',
'msd-core/bin/lib/docs.cjs',
'msd-core/bin/lib/check-command-router.cjs',
'msd-core/bin/lib/frontmatter.cjs',
'msd-core/bin/lib/learnings.cjs',
'msd-core/bin/lib/gsd2-import.cjs',
'msd-core/bin/lib/profile-pipeline.cjs',
'msd-core/bin/lib/template.cjs',
'msd-core/bin/lib/uat.cjs',
'msd-core/bin/lib/coverage.cjs',
'msd-core/bin/lib/uat-predicate.cjs',
'msd-core/bin/lib/workstream.cjs',
'msd-core/bin/lib/roadmap.cjs',
'msd-core/bin/lib/audit.cjs',
'msd-core/bin/lib/research-store.cjs',
'msd-core/bin/lib/research-provider.cjs',
'msd-core/bin/lib/package-legitimacy.cjs',
// ADR-457: tsc-generated runtime artifact — lint the src/git-base-branch.cts source.
'msd-core/bin/lib/git-base-branch.cjs',
// ADR-1213: tsc-generated runtime artifact — lint the src/capability-writer.cts source.
'msd-core/bin/lib/capability-writer.cjs',
// issue #1754: tsc-generated runtime artifact — lint the src/cli-skew-check.cts source.
'msd-core/bin/lib/cli-skew-check.cjs',
// issue #3146: tsc-generated runtime artifact — lint the src/runtime-identity.cts source.
'msd-core/bin/lib/runtime-identity.cjs',
// issue #1355: tsc-generated runtime artifact — lint the src/teams-status.cts source.
'msd-core/bin/lib/teams-status.cjs',
// ADR-1372: tsc-generated runtime artifact — lint the src/markdown-sectionizer.cts source.
'msd-core/bin/lib/markdown-sectionizer.cjs',
// ADR-2143: tsc-generated runtime artifact — lint the src/markdown-table.cts source.
'msd-core/bin/lib/markdown-table.cjs',
// ADR-2143: tsc-generated runtime artifact — lint the src/write-set.cts source.
'msd-core/bin/lib/write-set.cjs',
// ADR-1239 Phase C-1 (#1680): tsc-generated — lint src/embedding-adapter.cts + src/adapter-declarative.cts.
'msd-core/bin/lib/embedding-adapter.cjs',
'msd-core/bin/lib/adapter-declarative.cjs',
'msd-core/bin/lib/adapter-imperative.cjs',
'msd-core/bin/lib/model-adapter.cjs',
'msd-core/bin/lib/hook-bus.cjs',
'msd-core/bin/lib/state-io.cjs',
'msd-core/bin/lib/external-descriptor-trust.cjs',
'msd-core/bin/lib/mcp-server.cjs',
// #3072: tsc-generated runtime artifact — lint the src/mcp-catalog.cts source.
'msd-core/bin/lib/mcp-catalog.cjs',
// ADR-1671 (#2928): tsc-generated runtime artifact — lint the src/context-predicates.cts source.
'msd-core/bin/lib/context-predicates.cjs',
// #2929: tsc-generated runtime artifact — lint the src/context-composer.cts source.
'msd-core/bin/lib/context-composer.cjs',
// ADR-1671 (#2930): tsc-generated runtime artifact — lint the src/workflow-fragments.cts source.
'msd-core/bin/lib/workflow-fragments.cjs',
// ADR-1671 Phase 5 (#2932): tsc-generated runtime artifact — lint the src/section-manifest.cts source.
'msd-core/bin/lib/section-manifest.cjs',
// #3477 follow-up: verbatim third-party artifact vendored so msd-core/bin/**
// carries zero external requires (installed trees have no node_modules).
// See msd-core/bin/lib/vendor/README.md; never lint/edit these by hand.
'msd-core/bin/lib/vendor/**',
// Source-side twin of the same vendored .d.cts (needed so tsc resolves
// types for the relative './vendor/re2js.cjs' import from
// src/pattern.cts — module resolution for a .cts source is relative to
// src/, not the output dir). Same verbatim-third-party exemption.
'src/vendor/**',
// #3970 (ADR-3646 Phase 1): tsc-generated runtime artifact — the
// default `import childProcess from 'node:child_process'` import emits
// tsc's `__importDefault` helper (uses `var`), same class as 007/009/010
// above. Lint the src/task-content-resolution.cts source, not this.
'msd-core/bin/lib/task-content-resolution.cjs',
// #3904 (ADR-3889 Phase 0): tsc-generated runtime artifact — generated
// by scripts/gen-scripts-cli-exit.cjs from a fresh compile of
// src/cli-exit.cts, and byte-guarded by `npm run lint:generated-sync`
// (stricter than lint: it forbids ANY hand edit, not just bad ones).
// Lint the src/cli-exit.cts source, not this emitted copy.
'scripts/lib/cli-exit.cjs',
// #3911 (ADR-3889 Phase 7): tsc-generated runtime artifact — generated
// by scripts/gen-hooks-cli-exit.cjs from the SAME fresh compile of
// src/cli-exit.cts (sibling registry require rewritten to `.js`), and
// byte-guarded by `npm run lint:generated-sync`. Lint the
// src/cli-exit.cts source, not this emitted copy.
'hooks/lib/cli-exit.js',
],
},
// ── src/**/*.cts — TypeScript runtime sources (ADR-457 build-at-publish) ─────
// First-class type-aware linting on the migrated source. The TS compiler
// (`npm run build:lib`, strict + noEmitOnError) is the primary type gate;
// these rules add lint-level coverage. warn-first per the harness convention.
{
files: ['src/**/*.cts'],
plugins: {
local: localPlugin,
},
extends: [tseslint.configs.recommendedTypeChecked],
languageOptions: {
parserOptions: {
project: './tsconfig.build.json',
tsconfigRootDir: __dirname,
},
},
rules: {
'@typescript-eslint/no-unused-vars': ['warn', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }],
// ADR-1372 T7: enforce use of the markdown-sectionizer seam; grandfather
// pre-migration sites with // allow-adhoc-markdown: <reason>
'local/no-adhoc-markdown-parsing': 'error',
// ADR-3212 Phase 1 (#3412): enforce the pattern-construction seam
// (src/pattern.cts's escapeRegex/literalPattern) — flags a re-inlined
// escape-all-metachars .replace() helper or an unrouted new RegExp()
// from a runtime value.
'local/no-adhoc-regex-escape': 'error',
// ADR-3212 Phase 2 (#3413): widen the CRLF-fragile-split prohibition from tests/ to src/.
'local/no-crlf-fragile-split': 'error',
// ADR-3212 Phase 4 (#3415): bound quantifiers over document content (CWE-1333, #2128 class).
'local/no-unbounded-quantifier': 'error',
// ADR-1703 Phase 5: flag path-returning calls interpolated into content
// (markdown @-references, workflow files, generated docs) without POSIX
// normalization. Promoted to 'error' after precision review (path.basename
// excluded; content heuristic tightened to genuine reference/config-dir
// markers). See RULESET.CONTENT-PATH-NORMALIZATION in CONTEXT.md.
'local/normalize-path-in-content': 'error',
// ADR-1703 Phase 6: flag an unguarded fs.rename/fs.renameSync (the
// atomic-publish primitive) that lacks a transient-errno fallback
// (EPERM/EBUSY/EACCES retry or a Windows platform guard). See
// DEFECT.WINDOWS-FS-OPS in CONTEXT.md.
'local/require-fs-op-fallback': 'error',
// Flag execSync/execFileSync/spawnSync without a `timeout` option — an
// unbounded sync subprocess hangs indefinitely on a stuck remote/large
// repo/missing network (DEFECT.UNBOUNDED-SUBPROCESS in CONTEXT.md).
// The 8 pre-existing call sites this surfaced were migrated in #2896.
'local/require-subprocess-timeout': 'error',
// #3477 follow-up: every src/**/*.cts module compiles 1:1 into
// msd-core/bin/lib/*.cjs, which ships into installed trees with no
// node_modules — and the emitted mirror is almost always
// eslint-ignored as a generated artifact (see the src/pattern.cts note
// in eslint-rules/no-external-require-in-bin.cjs), so this is the ONLY
// place a bad external import in an already-migrated module is still
// visible to lint.
'local/no-external-require-in-bin': 'error',
// #3619 (epic #3411 Phase 3): flag a re-implemented Windows binary
// resolver — a PATHEXT read or a hardcoded exe-extension list — outside
// the platform seam (src/shell-command-projection.cts, exempt by path).
// See .msd/phase/chore-3619-no-bare-binary-spawn/40-design.md.
'local/no-private-binary-resolution': 'error',
// #3910 (epic #3889 Phase 6): ban raw process.exit() outside
// terminateNow — the only sanctioned terminator (src/cli-exit.cts).
// Load-bearing that this is registered HERE, not only on the emitted
// .cjs globs: the compiled msd-core/bin/lib/*.cjs mirrors are globally
// eslint-ignored (ADR-457), so a rule registered only on the emitted
// surface never sees the real .cts sources (#3496).
'local/require-registered-exit': 'error',
// #3987 (issue #1884 class): flag a swallowed mkdirSync/openSync/
// platformEnsureDir failure inside a function that also references a
// *_ERRNOS retry/tolerate set — a fatal EACCES/ENOSPC/EROFS creating a
// precondition can be laundered into a retryable errno downstream. See
// eslint-rules/no-swallowed-precondition.cjs for the measured predicate
// and its known gap (inline-literal errno classification is not caught;
// fixed directly at the call site instead — capability-lock.cts).
'local/no-swallowed-precondition': 'error',
// #3624 (epic #3411 Phase 4): flag an exact-case env-var read off a
// non-process.env receiver. See CONTEXT.md DEFECT.WINDOWS-EXACT-CASE-ENV-ACCESS.
'local/no-exact-case-env-access': 'error',
},
},
// ── bin/install.js + scripts/build-hooks.js — ADR-1703 Phase 6 glob expansion ─
// The top-level `bin/install.js` (generated installer) and `scripts/build-hooks.js`
// (the build-side atomic-replace helper) are the two production surfaces named by
// DEFECT.WINDOWS-FS-OPS that were NOT covered by the src/**/*.cts / msd-core/bin/**/*.cjs
// globs (ADR-1703 L124-126). This block brings them under the two production
// portability rules. It deliberately does NOT apply the full js.recommended set —
// bin/install.js is ~12k lines of generated code; the ADR's mandate is the
// portability defect surface, not a broader generated-code style sweep.
{
files: ['bin/install.js', 'bin/msd-mcp-server.js', 'scripts/build-hooks.js'],
plugins: {
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
'local/normalize-path-in-content': 'error',
'local/require-fs-op-fallback': 'error',
// ADR-3212 Phase 1 (#3412): pattern-construction seam prohibition —
// scripts/build-hooks.js is a .js file, so it falls outside the
// scripts/**/*.cjs glob below and needs it registered here too.
'local/no-adhoc-regex-escape': 'error',
},
},
// ── msd-core/bin/**/*.cjs + scripts/**/*.cjs ───────────────────────────
// CommonJS Node files: js.recommended + eslint-plugin-n + local plugin rules
// eslint-rules/**, bin/lib/**, pi/**, examples/**, vscode/*.js, .kilo/plugins/*.js,
// and .opencode/plugins/*.js were previously unmatched by every glob in this config
// (drift guard scripts/lint-eslint-glob-coverage.cjs, #3059). All are CommonJS
// (require/module.exports); folded into this block rather than duplicated.
{
files: [
'msd-core/bin/**/*.cjs',
'scripts/**/*.cjs',
'eslint-rules/**/*.cjs',
'bin/lib/**/*.cjs',
'examples/**/*.cjs',
'vscode/*.js',
'.opencode/plugins/*.js',
],
plugins: {
n: pluginN,
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
...js.configs.recommended.rules,
// Generic quality rules
'no-var': 'error',
'prefer-const': 'warn',
'no-unused-vars': ['warn', {
argsIgnorePattern: '^_',
varsIgnorePattern: '^_',
caughtErrors: 'none',
}],
'no-empty': ['warn', { allowEmptyCatch: true }],
// Downgraded from recommended error → warn (pre-existing violations; follow-up to fix)
'no-useless-escape': 'warn',
'no-unsafe-finally': 'warn',
// eslint-plugin-n rules
'n/no-process-exit': 'error',
'n/no-path-concat': 'error',
// Promoted to error (#3313) — a fresh non-cached `npx eslint .` run found
// zero live violations of this rule in this glob at promotion time.
'local/no-source-grep': 'error',
// ADR-3212 Phase 1 (#3412): pattern-construction seam prohibition —
// see the src/**/*.cts block above for detail.
'local/no-adhoc-regex-escape': 'error',
// ADR-1372 T7 widening (#3951 Rung B): reach extended from src/**/*.cts
// to scripts/**/*.cjs — see the src/**/*.cts block above for detail.
// The rule self-gates on filename too (eslint-rules/no-adhoc-markdown-parsing.cjs),
// so registering here alone would be inert without that gate change.
'local/no-adhoc-markdown-parsing': 'error',
},
},
// ── msd-core/bin/**/*.cjs only — no-external-require-in-bin ────────────────
// A NARROWER block than the combined glob above on purpose: msd-core/bin/**
// is the ONLY surface in that shared glob that is copied verbatim into
// installed trees with no node_modules (scripts/**, eslint-rules/**,
// bin/lib/**, pi/**, examples/**, vscode/*.js, .kilo/plugins/*.js, and
// .opencode/plugins/*.js all run inside THIS repo checkout, where
// node_modules exists, and legitimately require npm packages). Registering
// this rule on the shared block above would falsely flag every one of
// those. #3477 follow-up: re2js was the live instance of this defect —
// src/pattern.cts (compiled to msd-core/bin/lib/pattern.cjs) shipped
// `import { RE2JS } from 're2js'` and broke `verify` for every installed
// user until the dependency was vendored under msd-core/bin/lib/vendor/.
{
files: ['msd-core/bin/**/*.cjs'],
plugins: {
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
'local/no-external-require-in-bin': 'error',
// #3619 (epic #3411 Phase 3): see the src/**/*.cts block above for detail.
'local/no-private-binary-resolution': 'error',
// #3910 (epic #3889 Phase 6): see the src/**/*.cts block above for detail.
'local/require-registered-exit': 'error',
// #3624: see the src/**/*.cts block above for detail.
'local/no-exact-case-env-access': 'error',
},
},
// ── scripts/**/*.cjs only — no-private-binary-resolution ───────────────────
// A NARROWER block than the combined CommonJS glob above, on purpose:
// eslint-rules/** is deliberately OUTSIDE this rule's surface, because
// eslint-rules/lib/portability-vocab.cjs is the single source of truth for
// the Windows executable-extension set (ADR-1703 rule 4) — its own
// WINDOWS_EXECUTABLE_EXTENSIONS vocabulary array would trip the rule it
// feeds. Registering on the shared `msd-core/bin/**/*.cjs + scripts/**/*.cjs
// + eslint-rules/**/*.cjs + ...` block would flag that file; this block
// covers scripts/**/*.cjs only, so the rule still lints every other script
// in the tree without the vocabulary file self-flagging.
{
files: ['scripts/**/*.cjs'],
plugins: {
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
// #3619 (epic #3411 Phase 3): see the src/**/*.cts block above for detail.
'local/no-private-binary-resolution': 'error',
// #3910 (epic #3889 Phase 6): see the src/**/*.cts block above for detail.
'local/require-registered-exit': 'error',
// #3624: see the src/**/*.cts block above for detail.
'local/no-exact-case-env-access': 'error',
// #4244 (origin #4020 / #4220): scripts/run-tests.cjs is the actual site
// of the shipped Windows CI hang — registered here (not only on
// tests/**/*.cjs below) so the rule covers the real bug's own location.
'local/no-unbounded-dirname-walk': 'error',
},
},
// ── hooks/**/*.js — enforcement hooks (#3059) ──────────────────────────────
{
files: ['hooks/**/*.js', 'hooks/**/*.cjs'],
plugins: { n: pluginN, local: localPlugin },
languageOptions: { sourceType: 'commonjs', globals: { ...globals.node } },
rules: {
...js.configs.recommended.rules,
'no-var': 'error',
'prefer-const': 'warn',
'no-unused-vars': ['warn', { argsIgnorePattern: '^_', varsIgnorePattern: '^_', caughtErrors: 'none' }],
'no-empty': ['warn', { allowEmptyCatch: true }],
'no-useless-escape': 'warn',
'n/no-path-concat': 'error',
// ADR-3212 Phase 1 (#3412): pattern-construction seam prohibition.
'local/no-adhoc-regex-escape': 'error',
// #3619 (epic #3411 Phase 3): see the src/**/*.cts block above for detail.
'local/no-private-binary-resolution': 'error',
// #3910 (epic #3889 Phase 6): Phase 7 (#3911) migrated every enforcement
// hook onto terminateNow's write-then-terminate seam (hooks/lib/cli-exit.js),
// so the raw-process.exit escape hatch this block used to grant hooks
// (n/no-process-exit: 'off') is now dead — see the src/**/*.cts block
// above for detail on the rule itself.
'local/require-registered-exit': 'error',
// #3624: see the src/**/*.cts block above for detail.
'local/no-exact-case-env-access': 'error',
},
},
// ── first-party source — no-unconfined-path-join (#4636) ──────────────────
// No single existing block covers this exact shape (src/**/*.cts + src/**/*.ts
// + scripts/**/*.cjs + msd-core/bin/**/*.cjs + hooks/**/*.js), so this is a
// NEW block rather than a reuse. tests/** is deliberately excluded — a test
// may legitimately construct a hand-rolled containment shape as a fixture.
{
files: ['src/**/*.cts', 'src/**/*.ts', 'scripts/**/*.cjs', 'msd-core/bin/**/*.cjs', 'hooks/**/*.js'],
// These four shipped installer-migration bodies are checksum-locked
// (tests/installer-migrations.test.cjs, #670): `migrationChecksum` hashes
// `migration.plan.toString()`, which includes comments, so neither a code
// fix nor a suppression marker can be added to these bodies without
// drifting EXPECTED_CHECKSUMS. Listed by exact path (not a directory
// wildcard) so a NEW migration file still gets linted — only these four
// already-shipped bodies are exempt. This leaves the corresponding
// containment comparisons in these four files permanently un-ratcheted;
// the remedy is a fix-forward migration, never an edit to a shipped body.
ignores: [
'src/installer-migrations/003-rename-get-shit-done-to-msd-core.cts',
'src/installer-migrations/004-prune-stale-pristine-snapshots.cts',
'src/installer-migrations/010-antigravity-retire-confighome-artifacts.cts',
],
plugins: {
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
// #4636: bans a hand-rolled containment comparison (`x.startsWith(y + sep)`,
// a plain string-prefix test with no symlink resolution or `..` normalization)
// and a discarded containment answer (a bare-statement call to one of the
// src/security.cts containment predicates whose return value is thrown away —
// "validate one path, use another" recurred five times across this epic). A
// justified holdout on the first arm can suppress a single occurrence with a
// trailing same-line `// allow-handrolled-containment: <reason>` comment. Like
// `no-unbounded-spawn`, the allowlist is seeded empty and stays empty — this
// epic migrated every call site, so the rule runs with no exemption surface.
'local/no-unconfined-path-join': ['error', { allowlist: unconfinedPathJoinAllowlist }],
},
},
// ── root *.mjs config files (#3059) ────────────────────────────────────────
{
files: ['*.mjs'],
languageOptions: { sourceType: 'module', globals: { ...globals.node } },
rules: { ...js.configs.recommended.rules },
},
// ── tests/**/*.test.cjs ─────────────────────────────────────────────────────
{
files: ['tests/**/*.cjs'],
plugins: {
'no-only-tests': noOnlyTests,
local: localPlugin,
},
languageOptions: {
sourceType: 'commonjs',
globals: {
...globals.node,
},
},
rules: {
...js.configs.recommended.rules,
'no-only-tests/no-only-tests': 'error',
// Timing anti-patterns — ratcheted to error after cleanup (all violations fixed)
'local/no-magic-sleep-in-tests': 'error',
// Promoted warn->error by #3331 once #3314 delivered its precondition (ADR-456 §(a) amended,
// direct-use modules backfilled with deterministic time control) — see TESTING-STANDARDS.md.
'local/no-elapsed-assertion': 'error',
// Ban raw fs.rmSync in tests — use helpers.cleanup() for Windows-EBUSY retry budget
'local/no-raw-rmsync-in-tests': 'error',
// Ban tautological assertions (always-truthy arg or identical-literal equality)
'local/no-tautological-assert': 'error',
// Ban source-grep pattern in tests — use require() + behavior assertions instead
'local/no-source-grep': 'error',
// Ban path-returning calls compared to hardcoded POSIX-slash literals (fails on Windows)
'local/no-path-literal-in-assert': 'error',
// Ban POSIX mode-bit assertions compared to octal literals (fails on Windows)
'local/no-posix-mode-bit-assert': 'error',
// Ban unguarded chmod exec-bit + sh/bash -c combos (fails on Windows Git Bash)
'local/no-unguarded-nonportable-exec': 'error',
// Ban CRLF-fragile file-content splits and regex patterns (ADR-1703 Phase 4)
'local/no-crlf-fragile-split': 'error',
// ADR-3212 Phase 4 (#3415): bound quantifiers over document content (CWE-1333, #2128 class).
'local/no-unbounded-quantifier': 'error',
// Ban hardcoded /tmp/ paths in fs.* calls (ADR-1703 Phase 4)
'local/no-hardcoded-tmp': 'error',
// Ban bare npm exec without shell:true (ADR-1703 Phase 4)
'local/no-bare-npm-exec': 'error',
// Require USERPROFILE alongside HOME assignments (ADR-1703 Phase 4)
'local/require-userprofile-with-home': 'error',
// Require TEMP+TMP alongside any TMPDIR override — TMPDIR is never read on
// Windows, so a TMPDIR-only redirect silently no-ops there (#4220).
'local/require-full-tmpdir-triad': 'error',
// Require a fixed-point termination guard on any dirname() ancestor walk —
// a length/equality-only bound spins forever at a Windows drive root (#4020 / #4220).
'local/no-unbounded-dirname-walk': 'error',
// #4590 (epic #4589 Phase 1): ban length/substring assertions on a
// template literal that interpolates an OS-derived path (tmpdir/homedir
// length differs by OS — the #4421 incident shape). Does NOT flag a bare
// path-returning call probed directly (e.g. `.endsWith('.md')`,
// `.length > 0`) — only path-in-rendered-text embedding. See ADR-456
// §(c) typed-surface mandate.
'local/no-rendered-text-length-assert': 'error',
// Ban unbounded sync child_process spawns in tests (DEFECT.UNBOUNDED-SUBPROCESS).
// No allowlist: the epic (#3064) migrated every site; the rule runs with no
// exemption surface. The only sanctioned escapes are an explicit `timeout` on
// a raw spawn or the `// allow-spawn-timeout-ceiling: <reason>` marker.
'local/no-unbounded-spawn': 'error',
// Ban a bare numeric `timeout`/`timeoutMs` literal in tests (DEFECT.AD-HOC-TIMEOUT-LITERAL,
// #4428): two independently-guessed copies of the same magic number can drift apart, or
// collide exactly into a zero-margin race. No allowlist: the epic (#4445) migrated every
// site; the rule runs with no exemption surface.
'local/no-adhoc-timeout-literal': 'error',
// Ban a consolidation-epic folded suite appearing twice in one host file (#3271).
// A second copy runs the same tests twice on every lane and drifts silently.
'local/no-duplicate-fold-marker': 'error',
// ADR-3212 Phase 1 (#3412): pattern-construction seam prohibition —
// see the src/**/*.cts block above for detail. The historical oracle
// inlined in tests/pattern.test.cjs is exempted per-finding with
// // allow-adhoc-regex-escape: comments (design doc Notes: "not a 13th
// production copy").
'local/no-adhoc-regex-escape': 'error',
// ADR-1372 T7 widening (#3951 Rung B): reach extended from src/**/*.cts
// to tests/**/*.cjs — see the src/**/*.cts block above for detail.
// The rule self-gates on filename too (eslint-rules/no-adhoc-markdown-parsing.cjs),
// so registering here alone would be inert without that gate change.
'local/no-adhoc-markdown-parsing': 'error',
// Ban raw setTimeout sync + elapsed/duration-style assertions via no-restricted-syntax
'no-restricted-syntax': [
'error',
{
selector: 'AwaitExpression > NewExpression[callee.name="Promise"] ArrowFunctionExpression CallExpression[callee.name="setTimeout"]',
message: 'Raw setTimeout used for synchronization in tests. Use proper async patterns instead.',
},
{
selector: 'CallExpression[callee.object.name="Atomics"][callee.property.name="wait"]',
message: 'Atomics.wait() used as a sleep in tests. Use a proper async wait pattern instead.',
},
],
'no-unused-vars': ['warn', {
argsIgnorePattern: '^_',
varsIgnorePattern: '^_',
caughtErrors: 'none',
}],
'no-empty': ['warn', { allowEmptyCatch: true }],
// Downgraded from recommended error → warn (pre-existing violations; follow-up to fix)
'no-useless-escape': 'warn',
'no-regex-spaces': 'warn',
'no-control-regex': 'error',
'no-irregular-whitespace': 'warn',
},
},
// ── #1279 lint-rule fail-first fixture ──────────────────────────────────────
// `tests/_ff_lint_violation.cjs` is a PLAIN `.cjs` (NOT `*.test.cjs`) on purpose: it is a KNOWN
// `local/no-source-grep` violation that `defaultProveFailFirst` lints to machine-prove the rule
// has teeth, and it must stay OFF the `node --test` runner glob (executing it ENOENTs on the
// intentional `lib/foo.cjs` path). It still needs the `local` plugin registered so its inline
// `/* eslint-disable local/no-source-grep */` resolves (otherwise `eslint .` errors "rule not
// found") and the violation lands in `suppressedMessages` (which the prover reads), keeping the
// project's own `eslint .` green. (#1279)
{
files: ['tests/_ff_lint_violation.cjs'],
plugins: { local: localPlugin },
languageOptions: { sourceType: 'commonjs', globals: { ...globals.node } },
rules: { 'local/no-source-grep': 'error' },
},
// ── #2126 lint-rule CLEAN fixture ───────────────────────────────────────────
// `tests/_ff_lint_clean.cjs` is the KNOWN-CLEAN companion to the violation fixture: the
// prohibition-enforcement real-runner tests lint it as their non-vacuous "clean target" instead of
// a type-aware `src/**/*.cts` file, so each eslint spawn is ~0.8s (non-type-aware) not ~2s
// (whole-tsconfig-program load) — removing the CPU starvation that blew the 60s bound under
// --test-concurrency. Rule enabled (as error) so the pass is non-vacuous; the file is clean so it
// greens. PLAIN `.cjs`, kept OFF the `*.test.cjs` runner glob. (#2126)
{
files: ['tests/_ff_lint_clean.cjs'],
plugins: { local: localPlugin },
languageOptions: { sourceType: 'commonjs', globals: { ...globals.node } },
rules: { 'local/no-source-grep': 'error' },
},
// ── #2453 Command Routing Hub: uniform handler signature ────────────────────
// Every route handler in msd-tools.cjs is declared with the SAME destructured
// signature — `function routeX({ args, cwd, raw, error })` — whether or not it
// uses all four members. That uniformity is the point: it is the dispatch
// contract, so a handler can be moved or added without re-deriving which
// members exist.
//
// `argsIgnorePattern: '^_'` is structurally in conflict with that convention:
// satisfying it would mean `_`-prefixing ~50 parameters, which makes the
// signature non-uniform across the table and defeats the contract. So args
// checking is disabled HERE ONLY.
//
// `varsIgnorePattern` is deliberately left intact: genuinely dead *variables*
// (the #2379 case — unused `require()` results) must still surface. This
// narrows the exemption to the one category the convention actually forces.
//
// Decision deferred by #732 ("Severities stay `warn` (no config change in this
// pass)"), resolved by #2453 option 1.
{
files: ['msd-core/bin/msd-tools.cjs'],
rules: {
'no-unused-vars': ['warn', {
args: 'none',
varsIgnorePattern: '^_',
caughtErrors: 'none',
}],
},
},
);
Reference in New Issue View Git Blame Copy Permalink