dangernoodle-io / breadboard / 28974582344

100%

push

github

feat: add lint leak-ratchet rules for header leaks, REQUIRES hygiene, Kconfig bridging, raw timestamps (#780)

- broaden public-header-leak to catch lwip/mbedtls/mdns/nvs/httpd/sdkconfig leaks
- add public-requires-unused: decisive-test check scoped to platform/third-party REQUIRES deps only (any token not starting with bb_) - internal bb_*-to-bb_* coupling is deliberately out of scope (the filename-stem heuristic can't follow transitive/cross-header includes, so evaluating bb_* tokens produced ~76 false positives); collapses to the genuine bb_wifi/esp_netif leak. Carries over the 6 legitimate (component, dep) allowlist exceptions. Stays warn severity - bb_wifi/esp_netif is a known unfixed leak; promote to error once it's fixed
- retire public-requires-watchlist: superseded by the scoped public-requires-unused above
- add kconfig-bridge-shadow: catches Kconfig knobs silently shadowed by a bare #ifndef fallback
- add raw-timestamp-divide: catches raw ms conversions bypassing bb_clock outside bb_clock/bb_timer

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

3443 of 3443 branches covered (100.0%)

Branch coverage included in aggregate %.

5453 of 5453 relevant lines covered (100.0%)

9972.72 hits per line