feat(scripts): T5.4 + T5.5 scanner refinements + final roadmap update
Tier 5 partials:
T5.4 ts-any-type (249 \u2192 35):
+ Repo exemption: mac_tooling (189 findings \u2014 standalone forensics CLI)
+ Path exemption: /packages/mcp-client/ (JSON-RPC payload boundary)
+ Honor 'eslint-disable-next-line @typescript-eslint/no-explicit-any'
+ Honor '@ts-ignore' and '@ts-expect-error' on preceding line
+ Honor 'catch (e: any)' pattern (TS 4.4+ defaults caught errors to
unknown, so this is an explicit author opt-in)
+ 35 remaining real findings; see TODO-4 for triage tracker
T5.5 b7-emoji-in-code (465 \u2192 53):
+ Emoji scanner now flags ONLY in:
(a) Code comments (//, #, *, /*)
(b) console.log / .warn / .info / .debug / .error calls
(c) Python print() calls
+ UI-data emoji (notification bells, achievement icons, time-of-day
markers, tab labels in JSX text or string literals) correctly NOT
flagged \u2014 these are intentional product content per Q5.
+ 53 remaining decorative findings in comments / logs; see TODO-5.
Final ecosystem state:
Total findings: 2548 (Phase 0) \u2192 88 (\u221297%)
web-hardcoded-hex: 465 \u2192 0 \u2713
b4-python-print: 351 \u2192 0 \u2713
b4-console-log: 93 \u2192 0 \u2713
b5-hardcoded-product-id: 13 \u2192 0 \u2713 (critical, fixed in Tier 1)
b4-swift-print: 7 \u2192 0 \u2713
ts-any-type: 249 \u2192 35 (\u221286%)
b7-emoji-in-code: 465 \u2192 53 (\u221289%)
All 19 / 19 repos hex-clean. Tier 1-3 fully closed. Tier 4 closed
(mindlyst + fastgap + flowmonk fixes pushed). Tier 5 partials with
documented TODO-N follow-ups.
Code TODOs introduced this session (full list in next user message):
TODO-1 \u2014 fastgap BodyCanvas.tsx: refactor canvas data to /lib/body-data.ts
TODO-2 \u2014 fastgap InAppBroadcastBanner.tsx: add 'info' RN theme token
TODO-3 \u2014 common_plat mcp-client: expose injectable logger callback
TODO-4 \u2014 35 remaining ts-any-type sites across 9 repos
TODO-5 \u2014 53 remaining decorative emoji in comments/log statements
7904171418