feat: enable ESLint waves 3-5 rules and fix no-unsafe-function-type violations

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

eslint.config.mjs

@@ -11,24 +11,26 @@ export default tseslint.config(
       rules: {
           "@typescript-eslint/no-explicit-any": "off",
           "@typescript-eslint/no-unused-vars": ["warn", { "argsIgnorePattern": "^_", "varsIgnorePattern": "^_", "caughtErrorsIgnorePattern": "^_" }],
-          "@typescript-eslint/no-require-imports": "off",
-          "@typescript-eslint/no-empty-object-type": "off",
+          "@typescript-eslint/no-require-imports": "error",
+          "@typescript-eslint/no-empty-object-type": "warn",
           "no-case-declarations": "error",
-          "no-useless-escape": "off",
+          "no-useless-escape": "error",
           "prefer-const": "error",
           "no-empty": "warn",
           "no-undef": "off",
           "no-useless-catch": "error",
           "no-console": "warn",
-          "@typescript-eslint/no-this-alias": "off",
-          "@typescript-eslint/no-unsafe-function-type": "off"
+          "@typescript-eslint/no-this-alias": "warn",
+          "@typescript-eslint/no-unsafe-function-type": "error"
       }
   },
   {
       // CLI and tools: console output is intentional for user-facing terminal output
+      // require() needed for dynamic module loading in CLI commands
       files: ["packages/tools/**/*.ts"],
       rules: {
-          "no-console": "off"
+          "no-console": "off",
+          "@typescript-eslint/no-require-imports": "off"
       }
   },
   {
@@ -38,6 +40,20 @@ export default tseslint.config(
           "no-console": "off"
       }
   },
+  {
+      // Platform-node: require() needed for dynamic module loading at runtime
+      files: ["packages/foundation/platform-node/**/*.ts"],
+      rules: {
+          "@typescript-eslint/no-require-imports": "off"
+      }
+  },
+  {
+      // Memory driver: require('fs') needed for persistence
+      files: ["packages/drivers/memory/src/index.ts", "packages/drivers/memory/test/index.test.ts"],
+      rules: {
+          "@typescript-eslint/no-require-imports": "off"
+      }
+  },
   {
       // SDK driver: logging is user-controlled via enableLogging flag
       files: ["packages/drivers/sdk/src/index.ts"],

packages/foundation/plugin-formula/src/formula-engine.ts

@@ -210,7 +210,7 @@ export class FormulaEngine {
 
       // Create and execute function
 
-      const func = new Function(...paramNames, wrappedExpression);
+      const func = new Function(...paramNames, wrappedExpression) as (...args: any[]) => unknown;
 
       // Execute with timeout protection
       const result = this.executeWithTimeout(func, paramValues, timeout);
@@ -289,7 +289,7 @@ export class FormulaEngine {
    * runtime; instead, formulas must be written to be fast and side-effect free.
    */
   private executeWithTimeout(
-    func: Function,
+    func: (...args: any[]) => unknown,
     args: any[],
     timeout: number
   ): unknown {

packages/foundation/plugin-multitenancy/__tests__/demo.spec.ts

@@ -17,10 +17,10 @@ describe('Multi-Tenancy E2E Demo', () => {
     });
 
     // Simulate kernel installation
-    const mockHooks = new Map<string, Function[]>();
+    const mockHooks = new Map<string, ((...args: any[]) => any)[]>();
     const mockKernel = {
       hooks: {
-        register: (name: string, handler: Function) => {
+        register: (name: string, handler: (...args: any[]) => any) => {
           if (!mockHooks.has(name)) {
             mockHooks.set(name, []);
           }
@@ -31,7 +31,7 @@ describe('Multi-Tenancy E2E Demo', () => {
 
     await plugin.install({
       engine: mockKernel,
-      hook: (name: string, handler: Function) => {
+      hook: (name: string, handler: (...args: any[]) => any) => {
         if (!mockHooks.has(name)) {
           mockHooks.set(name, []);
         }

packages/foundation/plugin-multitenancy/__tests__/integration.spec.ts

@@ -8,7 +8,7 @@ import { MultiTenancyPlugin, TenantIsolationError } from '../src';
 
 describe('MultiTenancyPlugin - Integration', () => {
   let plugin: MultiTenancyPlugin;
-  let mockHooks: Map<string, Function[]>;
+  let mockHooks: Map<string, ((...args: any[]) => any)[]>;
 
   beforeEach(() => {
     mockHooks = new Map();
@@ -23,15 +23,15 @@ describe('MultiTenancyPlugin - Integration', () => {
   const createMockContext = () => {
     const hooks = mockHooks;
     return {
-      hook: (name: string, handler: Function) => {
+      hook: (name: string, handler: (...args: any[]) => any) => {
         if (!hooks.has(name)) {
           hooks.set(name, []);
         }
         hooks.get(name)!.push(handler);
       },
       engine: {
         hooks: {
-          register: (name: string, handler: Function) => {
+          register: (name: string, handler: (...args: any[]) => any) => {
             if (!hooks.has(name)) {
               hooks.set(name, []);
             }

packages/foundation/plugin-security/__tests__/plugin.test.ts

@@ -36,10 +36,10 @@ const ACCOUNTS_PERM: PermissionConfig = {
 };
 
 function createMockKernel() {
-  const hooks: Record<string, Function[]> = {};
+  const hooks: Record<string, ((...args: any[]) => any)[]> = {};
   return {
     security: undefined as any,
-    use: jest.fn((hookName: string, handler: Function) => {
+    use: jest.fn((hookName: string, handler: (...args: any[]) => any) => {
       if (!hooks[hookName]) hooks[hookName] = [];
       hooks[hookName].push(handler);
     }),

packages/foundation/types/src/api.ts

@@ -97,7 +97,7 @@ export class ObjectQLError extends Error {
         this.details = error.details;
 
         // Preserve proper stack traces in Node.js environments
-        const ErrorConstructor = Error as unknown as { captureStackTrace?: (target: object, constructor: Function) => void };
+        const ErrorConstructor = Error as unknown as { captureStackTrace?: (target: object, constructor: new (...args: any[]) => any) => void };
         if (typeof ErrorConstructor.captureStackTrace === 'function') {
             ErrorConstructor.captureStackTrace(this, ObjectQLError);
         }

packages/protocols/json-rpc/src/features.e2e.test.ts

@@ -65,7 +65,7 @@ const createTestKernel = () => {
     };
 
     // Mock action registry
-    const actions = new Map<string, Function>();
+    const actions = new Map<string, (...args: any[]) => any>();
     actions.set('sendEmail', async (params: any) => {
         return {
             success: true,

packages/protocols/json-rpc/src/index.ts

@@ -146,7 +146,7 @@ export class JSONRPCPlugin implements RuntimePlugin {
 
     private engine?: any;
     private config: Required<JSONRPCPluginConfig>;
-    private methods: Map<string, Function>;
+    private methods: Map<string, (...args: any[]) => any>;
     private methodSignatures: Map<string, MethodSignature>;
     private sessions: Map<string, Session> = new Map();
     private progressClients: Map<string, Set<(data: string) => void>> = new Map();