Docs/CLI, authoring and agent tooling
toolPackage manifestv2.0.4

tools.eslint-plugin-no-implicit-sensitivefields

ESLint rule enforcing that every defineReferenceKind() call declares an explicit sensitiveFields array (closes F-4).

@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields
Markdown ↓Structured data ↓
Source, release and verification context

Source snapshot bcc79fcc · Declared package version 2.0.4. This page combines the checked-in package guide and manifest; commands and runtime behavior were not executed in this review.

Package source ↗ Manifest ↗
servernode
EXPLORE THE PACKAGE

See where this package fits.

Follow a declared connection, inspect an import, then open the source guide when you need the detail.

THIS PACKAGEtools.eslint-plugin-no-implicit-sensitivefieldstools

Arrows point from a package to its direct dependency. Each count is derived from the captured manifests.

0 declarationsSELECT TO INSPECT

No Runtime dependencies are declared here.

PACKAGE GUIDERead at source ↗

@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields

ESLint plugin that enforces explicit sensitiveFields declarations on every defineReferenceKind() call from @lssm-tech/lib.contracts-spec/rich-reference.

Closes plan slice S-1b (architect NR-2 / F-4 mitigation): the contracts-spec runtime already throws when sensitiveFields is missing or non-array, but the runtime cannot enforce the additional repository policy that an empty array (sensitiveFields: []) must be accompanied by an inline confirmation comment. This rule catches both issues at lint time.

Install

bash
bun add -d @lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields

eslint (>=8, <11) is a peer dependency.

Flat config (ESLint 9+)

js
import noImplicitSensitiveFields from '@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields';

export default [
  {
    plugins: { 'no-implicit-sensitivefields': noImplicitSensitiveFields },
    rules: { 'no-implicit-sensitivefields/no-implicit-sensitivefields': 'error' },
  },
];

Or apply the bundled recommended flat config in one line:

js
import { configs } from '@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields';

export default [configs.recommended];

What the rule does

For every call expression whose callee is defineReferenceKind (or <obj>.defineReferenceKind):

  1. If the object literal argument lacks a sensitiveFields property → reports missing.
  2. If sensitiveFields: [] appears without a nearby comment containing confirmed: no sensitive fields → reports emptyWithoutComment.

A "nearby" comment is one whose line number is within ±1 line of the sensitiveFields property — covering the common authoring shapes: a leading comment, a same-line trailing comment, or an in-block comment immediately after.

Valid

ts
defineReferenceKind({
  id: 'ticket',
  schema,
  sensitiveFields: ['title'],
  defaultPreview: 'inline-card',
  defaultPanel: 'drawer',
  icon: 'ticket',
});

defineReferenceKind({
  id: 'public-doc',
  schema,
  // confirmed: no sensitive fields
  sensitiveFields: [],
  defaultPreview: 'inline-card',
  defaultPanel: 'drawer',
  icon: 'doc',
});

defineReferenceKind({
  id: 'public-doc-2',
  schema,
  sensitiveFields: [], // confirmed: no sensitive fields
  defaultPreview: 'inline-card',
  defaultPanel: 'drawer',
  icon: 'doc',
});

Invalid

ts
// Missing sensitiveFields entirely
defineReferenceKind({
  id: 'bad-1',
  schema,
  defaultPreview: 'inline-card',
  defaultPanel: 'drawer',
  icon: 'bad',
}); // error: missing

// Empty list without the confirmation marker
defineReferenceKind({
  id: 'bad-2',
  schema,
  sensitiveFields: [],
  defaultPreview: 'inline-card',
  defaultPanel: 'drawer',
  icon: 'bad',
}); // error: emptyWithoutComment

Test

bash
bun test

Declared capabilities.

This manifest does not declare a capability catalogue. Use the guide, import map and source to assess the package.

Imports and export paths.

2 entries

These are package-manifest entry points. Named symbols listed above come from the capability catalogue; this is not an exhaustive TypeScript symbol reference.

2 imports

@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields
./src/index.ts
@lssm-tech/tools.eslint-plugin-no-implicit-sensitivefields/rule
./src/rule.ts

Dependencies and related packages.

Peer dependencies 1
eslint
>=10.10.0
Development dependencies 5
@types/estree
^1.0.9
eslint
^10.10.0
typescript
catalog:

Package scripts.

Commands declared by this package. Review its setup requirements before running them; no command here was executed by this review.

buildcontractspec-bun-build build
build:bundlecontractspec-bun-build transpile
build:typescontractspec-bun-build types
cleanrimraf dist .turbo
lintbun run lint:fix
lint:fixnode ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .
lint:checknode ../../../scripts/biome.cjs check .
testbun test
typechecktsgo --noEmit
prebuildcontractspec-bun-build prebuild
← Package directoryMore in CLI, authoring and agent tooling →
Your view

Make room for your context.

Shape the presentation around this moment. You can change it whenever you need.

Your context

The different parts of you

Choose a starting point

A useful mix of context, visuals and gentle guidance.

Tune each dimension
Each dimension can change independently. Product permissions and available actions stay unchanged.

Support the way you begin and return

Tune your support

Reading comfort

Choose your language

Interface language changes text only. Markets, prices and workflows keep their own settings.

Translation coverage

Original source

Navigation151
Graph616
Categories378
Portfolio833
Examples2,035
Source preview1,542

More translations will be added as content is reviewed.

This preference is saved on this browser.

Search the website

Useful starting points

No results. Try a shorter phrase, an operation name or another search area.

A LITTLE ROOM TO EXPLORE

Find something to explore.

Open a closer look on this page, try a different perspective, or follow the detail into its own page.

How previews and controls work
01

Look before you leave

Hover a link or focus it with Tab to see a preview. Clicking the original link or pressing Enter always opens its destination.

02

Stay with the context

Move into the preview to explore its sections. Use Alt + ↓ from a focused link to enter it with the keyboard. Escape closes it.

03

Open the possibilities

Disclosure rows, perspective choices and highlighted controls reveal more. Your view changes reading comfort and the context you explore.

A separate button for a closer look

Show small preview buttons beside links where there is room. Tap the eye to inspect, or tap the link to go straight there. This choice stays in this tab.

No browsing history is collected. Reduced motion follows your device and Your view.