chore: Enable more lint rules, disable some that trigger a lot. Will clean up later.

src/security/audit-extra.ts

@@ -661,7 +661,7 @@ async function collectIncludePathsRecursive(params: {
       if (!rawText) continue;
       const nestedParsed = (() => {
         try {
-          return JSON5.parse(rawText) as unknown;
+          return JSON5.parse(rawText);
         } catch {
           return null;
         }

src/security/audit.ts

@@ -264,7 +264,7 @@ function collectGatewayConfigFindings(
   const hasPassword = typeof auth.password === "string" && auth.password.trim().length > 0;
   const hasSharedSecret =
     (auth.mode === "token" && hasToken) || (auth.mode === "password" && hasPassword);
-  const hasTailscaleAuth = auth.allowTailscale === true && tailscaleMode === "serve";
+  const hasTailscaleAuth = auth.allowTailscale && tailscaleMode === "serve";
   const hasGatewayAuth = hasSharedSecret || hasTailscaleAuth;
 
   if (bind !== "loopback" && !hasSharedSecret) {
@@ -918,7 +918,7 @@ export async function runSecurityAudit(opts: SecurityAuditOptions): Promise<Secu
         })
       : undefined;
 
-  if (deep?.gateway?.attempted && deep.gateway.ok === false) {
+  if (deep?.gateway?.attempted && !deep.gateway.ok) {
     findings.push({
       checkId: "gateway.probe_failed",
       severity: "warn",

src/security/fix.test.ts

@@ -132,7 +132,7 @@ describe("security fix", () => {
 
     const parsed = JSON.parse(await fs.readFile(configPath, "utf-8")) as Record<string, unknown>;
     const channels = parsed.channels as Record<string, Record<string, unknown>>;
-    const whatsapp = channels.whatsapp as Record<string, unknown>;
+    const whatsapp = channels.whatsapp;
     const accounts = whatsapp.accounts as Record<string, Record<string, unknown>>;
 
     expect(accounts.a1.groupPolicy).toBe("allowlist");

src/security/fix.ts

@@ -330,7 +330,7 @@ async function collectIncludePathsRecursive(params: {
       if (!rawText) continue;
       const nestedParsed = (() => {
         try {
-          return JSON5.parse(rawText) as unknown;
+          return JSON5.parse(rawText);
         } catch {
           return null;
         }