v8.0.0: Agentic programming guardrails

[shaunburdick]

Summary

Adds 20+ new ESLint rules targeting common AI coding agent anti-patterns, organized across three phases.

Phase 1 — Built-in & Unicorn Rules

Rule	Level
max-params: [error, 5]	Prevents parameter bloat
max-depth: [error, 4]	Prevents pyramid-of-doom
no-nested-ternary	AI nests ternaries excessively
id-length: [min: 2]	Single-letter vars
unicorn/throw-new-error	Raw string throws
unicorn/consistent-function-scoping	Inner functions
unicorn/expiring-todo-comments	TODOs without deadlines
6 TypeScript type-checked rules	Type safety

Phase 2 — eslint-plugin-llm-core Integration (New Dependency)

• Complexity config: max-file-length (500, skips blanks), max-function-length, max-nesting-depth, max-params
• Best-practices: no-async-array-callbacks, no-empty-catch, prefer-early-return, throw-error-objects, no-swallowed-errors, no-commented-out-code, no-llm-artifacts, no-magic-numbers

Phase 3 — React DOM Security Rules

• @eslint-react/dom-no-unsafe-target-blank — error (external links without rel="noopener noreferrer")
• @eslint-react/dom-no-missing-iframe-sandbox — warn (iframes without sandbox)
• @eslint-react/dom-no-missing-button-type — warn (buttons without explicit type)

Refactoring

• Test files updated to follow new rules (named constants, removed commented-out code)

Changed Files

 AGENTS.md                  |   7 +++-
 eslint/CHANGELOG.md        |  56 ++++++++++++++++++++++++++++
 eslint/es6/index.js        |  16 +++++++-
 eslint/es6/rules.js        |  92 ++++++++++++++++++++++++++++++++++++++++++++++
 eslint/package-lock.json   |  21 +++++++++++
 eslint/package.json        |   5 ++-
 eslint/react/rules.js      |  18 +++++++++
 eslint/test/test.js        |  10 +++--
 eslint/typescript/rules.js |  41 +++++++++++++++++++--
 9 files changed, 254 insertions(+), 12 deletions(-)

Closes: #2