[eslint-refiner] ESLint Refiner Daily Report — 2026-09-14

[github-actions[bot]]

ESLint Refiner — Daily Report (2026-09-14)

Reviewed 7 previously-unexamined eslint-factory rules against the live actions/setup/js/** corpus. Filed 1 grounded false-positive finding; 6 hypotheses were disproven under live-corpus grounding and correctly not filed.

Key metrics

• Rules registered: 62 (unchanged since 2026-09-10)
• Rules reviewed this run: 7 (0 previously touched by memory)
• Issues filed: 1
• Hypotheses investigated and disproven (no issue): 6
• Known open eslint-factory issues (post-dedup check): 8 (one prior snapshot entry, eslint-factory: require-error-code-for-github-api-throw does not recognize octokit.request() calls #58933, disappeared since yesterday — fixed or expired, not reinvestigated)

Issue filed

no-string-fallback-for-non-string-message: false positive on a type-narrowed catch-param alias

Live site: actions/setup/js/safeoutputs_cli.cjs:45-48. The rule flags String(error) as "stringifying the wrong container" because it structurally compares identifier names (error vs. the tested err.message chain) without recognizing that err is declared as const err = /** @type {...} */ error ?? {} — a type-narrowing alias of the same value, not an unrelated container. String(error) and String(err) are identical whenever error is truthy, and String(error) is actually more correct than String(err) would be in the one case they diverge (falsy error). No existing test covers this alias shape.

Detail: rules reviewed with no issue filed

6 rules/hypotheses investigated, no grounded gap found

• prefer-core-logging — zero live console.log/info/debug(...) call sites in the corpus; the one reference-not-call in frontmatter_hash_pure.cjs:70 is correctly unflagged by design.
• require-page-counter-increment-in-while-true-loop — checked all 8 live while (true) loops in the corpus; each either isn't a page-counter loop (uses reader.read(), readBuffer.readMessage(), byte-count loops, GraphQL cursors, etc.) or correctly increments its counter.
• require-nan-check-after-split-index-parse — zero live parseInt/parseFloat(...split(...)[index]) call sites in the corpus.
• no-throw-plain-object — exhaustively checked all 35 live throw {...} sites across mcp_server_core.cjs (11) and safe_outputs_handlers.cjs (24); every one is a clean {code: <negative literal>, message, data?} JSON-RPC shape, correctly exempted.
• no-core-error-then-{setfailed,process-exit,process-exitcode} family — hypothesized a nested-if-block blind spot (a process.exit/exitCode nested inside an if after core.error(...) isn't correlated since IfStatement isn't a recognized control-transfer statement). Zero live matches found via corpus search — disproven, doesn't meet the "latent but broadly-applicable idiom" bar from a prior precedent (which required a 23-file idiom; this hypothesis has zero occurrences).
• prefer-actions-exec-over-child-process — reviewed at source level only (mature design: handles promisify(), ChildProcess-handle retention, and async-conversion cascades). Not yet exhaustively grounded against live call sites — carried forward as a next-run priority rather than filed speculatively.

Next actions

• Finish grounding prefer-actions-exec-over-child-process against the ~18 non-test files that both require("child_process") and carry the @actions/github-script reference marker.
• Sample require-error-code-in-thrown-error (100+ importing files — needs a targeted strategy, not exhaustive review).
• ~28 of 62 rules remain never reviewed by memory; candidates recorded in repo-memory nextPriorities.

References:

• no-string-fallback-for-non-string-message rule source
• safeoutputs_cli.cjs

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by 🤖 ESLint Refiner · claude · agent · 357.2 AIC · ⌖ 7.35 AIC · ⊞ 5.8K · ◷

• expires on Sep 14, 2026, 9:37 PM UTC-08:00

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-09-15T05:37:55.673Z.

Closed by Workflow