fix: detect imported any in restrict-plus-operands

[fireairforce]

Summary

Fixes #1285.

• Read explicit value and function return annotations from named imports in relative TypeScript modules, including function-valued constants and declaration files.
• Prefer TypeScript source and declaration files over JavaScript implementations when resolving these imported types.
• Feed imported type hints into @typescript-eslint/restrict-plus-operands so allowAny: false catches imported any values and call results while preserving shadowing and typeof narrowing.

Test Plan

• zig fmt --check build.zig src tests
• zig build test -Doptimize=ReleaseFast -j1 (including 77 rule snapshots)
• Regression cases cover function and constant imports, aliases, function-valued constants, declaration-only modules, JavaScript plus declaration companions, TypeScript resolution order, numeric controls, narrowing, and shadowing.
• Reproduced all four issue CLI cases with both files supplied: imported function/constant any each produce one diagnostic; the number controls produce none.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-26T10:05:02.186187Z	082dc55	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 082dc55914

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Inspect function-valued exported constants

When a named import refers to a common function-valued constant such as export const readAny = (): any => 1, the binding identifier has no type annotation, so this records an entirely unknown binding and readAny() + 1 remains unreported with allowAny: false. The same omission occurs for const readAny: () => any = ..., because the function type is treated only as an unknown value rather than a callable return type; inspect the initializer or callable annotation and populate return_type for these declarations.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Resolve extensionless imports to declaration files

For import { anyValue } from './values' backed only by values.d.ts, this resolution returns null because the shared resolver probes .ts, .tsx, JavaScript variants, and their index forms but never .d.ts. Consequently, exported declare values and functions annotated as any are skipped even though declaration files are the normal source of imported TypeScript types; this collector needs declaration-file probing for extensionless relative imports.

Useful? React with 👍 / 👎.

[codspeed]

Merging this PR will not alter performance

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

✅ 5 untouched benchmarks

---

_{Comparing zoomdong-1285-imported-any-operands (6508b8c) with main (cef5b7d)¹}

Footnotes

1. No successful run was found on main (9a90490) during the generation of this report, so cef5b7d was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩