Merge remote-tracking branch 'origin/v2/main' into v2/feat/2082-file-secret-store-lock

clients/cli/package.json

@@ -27,7 +27,7 @@
     "test:cli-headers": "vitest run headers.test.ts",
     "test:cli-metadata": "vitest run metadata.test.ts",
     "pretest": "npm run test-servers:build && npm run build",
-    "lint": "eslint .",
+    "lint": "eslint . --max-warnings 0",
     "format": "prettier --write src __tests__ \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "format:check": "prettier --check src __tests__ \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\""
   },

clients/launcher/package.json

@@ -14,7 +14,7 @@
   "scripts": {
     "build": "tsc",
     "postbuild": "node scripts/make-executable.js",
-    "lint": "eslint .",
+    "lint": "eslint . --max-warnings 0",
     "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
     "format": "prettier --write src __tests__ scripts \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "format:check": "prettier --check src __tests__ scripts \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",

clients/tui/eslint.config.js

@@ -27,7 +27,8 @@ export default defineConfig([
     },
     rules: {
       "react-hooks/rules-of-hooks": "error",
-      "react-hooks/exhaustive-deps": "warn",
+      // `error`, not `warn` — see the web config (#2085).
+      "react-hooks/exhaustive-deps": "error",
     },
   },
   {

clients/tui/package.json

@@ -22,7 +22,7 @@
     "validate": "npm run format:check && npm run lint && npm run typecheck && npm run build && npm run test",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
-    "lint": "eslint .",
+    "lint": "eslint . --max-warnings 0",
     "format": "prettier --write src __tests__ \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "format:check": "prettier --check src __tests__ \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\""
   },

clients/web/eslint.config.js

@@ -27,6 +27,14 @@ export default defineConfig([
       ecmaVersion: 2020,
       globals: globals.browser,
     },
+    rules: {
+      // Promoted from the recommended set's `warn` (#2085). A stale-closure
+      // defect was reported correctly on every run and still reached review,
+      // because `lint` fails only on errors. `--max-warnings 0` now fails the
+      // gate either way; this makes the severity read correctly in an editor
+      // too, rather than depending on a CLI flag.
+      "react-hooks/exhaustive-deps": "error",
+    },
   },
   {
     // Test setup files re-export utilities and mix components with helpers — the

clients/web/package.json

@@ -25,7 +25,7 @@
     "test:integration": "npm run test-servers:build && vitest run --project=integration",
     "test:integration:watch": "npm run test-servers:build && vitest --project=integration",
     "test-servers:build": "tsc -p ../../test-servers --noCheck",
-    "lint": "eslint .",
+    "lint": "eslint . --max-warnings 0",
     "format": "prettier --write src server .storybook \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "format:check": "prettier --check src server .storybook \"*.{ts,tsx,mts,cts,js,jsx,mjs,cjs}\"",
     "preview": "vite preview",