@geonosis/oxlint-plugin-biological-architecture 2.2.0 → 2.3.1

package/RULES.md

@@ -9,11 +9,13 @@ Read from the two source trees on 2026-08-29:
 One plugin name, two rule sets, no shared code. **33 rules had the same filename in both trees; only
 3 of those 33 were byte-identical.** A fix in one never reached the other.
 
-The union here is **54 rules**, plus twenty-two the kit wrote for itself — `layer-walls`,
-`emit-declares-attempts`, `cell-no-cross-feature-organelles`, the `backend-medusa` ten of 1.0.0,
+The union here is **54 rules**, plus twenty-eight the kit wrote for itself — `layer-walls`,
+`emit-declares-attempts`, `cell-no-cross-feature-organelles`, the `backend-medusa` ten,
 `no-unregistered-plugin-dir` + `router-schema-parity`, the `themekit` two,
 `no-mock-db-in-integration`, `todo-names-its-plan`, `boundary-time-is-primitive`,
-`durable-body-reads-through-steps` and `subpath-over-barrel` — **76**.
+`durable-body-reads-through-steps`, `subpath-over-barrel` and the six of the W67 batch — **82**.
+Every one of the twenty-eight is marked **written here** in the inventory, and the table below is
+held against that column rather than kept by hand.
 
 | | count |
 |---|---|
@@ -22,13 +24,8 @@ The union here is **54 rules**, plus twenty-two the kit wrote for itself — `la
 | dielime only | 3 |
 | during.day only | 18 |
 | **union** | **54** |
-| written here (`layer-walls`, `emit-declares-attempts`, `cell-no-cross-feature-organelles`) | 3 |
-| written here, `backend-medusa` (1.0.0) | 7 |
-| written here, the integration seam (1.0.0) | 2 |
-| **total** | **66** |
-| written here, `backend-medusa` (1.0.0) | 10 |
-| **total** | **67** |
-| written here, `themekit` (1.0.0) | 2 |
+| written here | 28 |
+| **total** | **82** |
 
 ## How divergence was resolved
 
@@ -88,6 +85,16 @@ decided the boundary or counts what accumulated on the far side — a consumer's
 took on seven unchartered exports, one of them a write, lint-free, in eleven commits. A list of
 module names is a number a reader can hold: a repo has one door, or it has three and knows it.
 
+Every other rule that grants by path now takes the same enumeration beside its pattern (#139).
+`time-through-the-door`'s `exempt`, `font-roles-only`'s `allow` and `tokens-only-colors`' `allow` —
+measured from the option table, and the only three path GRANTS the plugin has; `within`, `paths`,
+`roots` and `routers` are scopes — each accept `exemptModules`, a list of modules named in full,
+matched by path or by the tail a repo writes them as and never as a pattern. The patterns still
+work. What changed is that they are counted: each of those rules declares `meta.grants`
+(`{ paths, modules }`), and `geonosis-doctor`'s `exercised` line WARNs with the number of files the
+pattern exempts in THIS tree beside the number the enumeration names — so a grant nobody decided
+stops being a grant nobody can see.
+
 ### An enabled rule that cannot fire **refuses the run** (0.2.0)
 
 This replaces the "does nothing until configured" posture below, and it is the one breaking change
@@ -710,20 +717,23 @@ has, and one a kit that guessed at it would keep stale on somebody else's behalf
 | `emit-declares-attempts` | backend-medusa | — | `options` | — | — | **written here** |
 | `font-roles-only` | themekit | `roles` | `paths` + `options` + `styling` | — | — | **written here** (U2) |
 | `layer-walls` | tooling | `layers` | `onImportSource` + `imports` + `paths` + `options` | — | — | **written here** |
+| `list-take-without-order` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (#21) |
 | `max-comment-density` | comment-ceiling | — | `paths` | — | yes | during only |
 | `molecule-atoms-only` | frontend | — | `directionRule` | yes | yes | diverged |
 | `molecule-must-compose` | frontend | — | — | yes | yes | diverged |
 | `mutating-step-declares-retry` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (dielime scan R5.2) |
 | `named-when-block` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (dielime scan R5.5) |
 | `next-route-segment-is-thin-delegate` | frontend | — | `paths` | yes | yes | diverged |
-| `no-unregistered-plugin-dir` | integrations | `roots` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs) |
+| `no-unregistered-plugin-dir` | integrations | `roots` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs; flat seam #36) |
 | `no-mock-db-in-integration` | testbed | `integrationDirs` | `options` + `paths` | — | — | **written here** (Midday's 35 mocked router suites) |
 | `router-schema-parity` | backend-trpc | `routers` | `options` + `paths` | — | — | **written here** (during.day's mirror) |
 | `no-brand-names` | frontend | `brands` | `paths` + `options` | yes | — | dielime only |
 | `no-card-shaped-div` | frontend | — | — | yes | yes | diverged |
 | `no-cross-feature-stores` | frontend | — | `directionRule` | yes | yes | diverged |
 | `no-d1-transaction` | backend-d1 | — | `paths` | — | yes | during only |
+| `no-date-string-compare` | backend-workflows | — | `nodes` + `options` | — | — | **written here** (#20) |
 | `no-duplicate-jsx-patterns` | frontend | — | `paths` | yes | yes | diverged |
+| `no-generic-utility-package` | tooling | — | `paths` + `options` | — | — | **written here** (#171) |
 | `no-hook-in-component-disguise` | frontend | — | `paths` | yes | yes | diverged |
 | `no-index-count-as-exact` | backend-medusa | — | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
 | `no-inert-hidden-jsx` | frontend | — | `paths` | yes | yes | diverged |
@@ -738,6 +748,8 @@ has, and one a kit that guessed at it would keep stale on somebody else's behalf
 | `no-react-namespace` | frontend | — | — | yes | yes | **identical** |
 | `no-renamed-html-props` | frontend | — | — | yes | yes | **identical** |
 | `no-render-prop-reader` | frontend | — | `paths` | yes | yes | diverged |
+| `no-swallowed-catch` | failure-paths | — | `nodes` + `paths` + `options` | — | — | **written here** (#3) |
+| `no-runtime-dead-affordance` | frontend | — | `options` | — | — | **written here** (#5) |
 | `no-trivial-wrapper-component` | frontend | — | `paths` | yes | yes | diverged |
 | `no-ts-in-bio-folders` | frontend | — | `paths` | yes | yes | diverged |
 | `no-type-definitions-in-components` | frontend | — | `paths` | yes | yes | diverged |
@@ -752,11 +764,12 @@ has, and one a kit that guessed at it would keep stale on somebody else's behalf
 | `ssot-no-process-env` | backend-workflows | — | `paths` | — | yes | during only |
 | `step-declares-compensation-or-none` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (Medusa source) |
 | `step-opens-its-own-cell` | backend-workflows-cf | `within` | `nodes` + `objects` + `paths` + `options` | — | yes | during only, re-targeted |
-| `store-route-scopes-tenant-data` | backend-medusa + tenant-scoping | — | `paths` | yes | — | dielime only |
+| `store-route-scopes-tenant-data` | backend-medusa + tenant-scoping | — | `nodes` + `imports` + `paths` + `options` | yes | — | dielime only, de-hardcoded |
 | `subpath-over-barrel` | package-subpaths | `packages` | `nodes` + `options` | — | — | **written here** (#180, during.day asked) |
 | `subscriber-declares-id` | backend-medusa | — | `objects` + `paths` + `options` | — | — | **written here** (dielime scan R5.4) |
 | `tables-declare-their-plane` | backend-workflows + tenant-scoping | — | `paths` + `literal-call` | — | yes | during only |
 | `tenant-tables-carry-org-id` | tenant-scoping | — | `paths` + `literal-call` | — | yes | during only |
+| `test-no-clock-polling-for-promise-flips` | testbed | — | `nodes` + `paths` + `options` | — | — | **written here** (#4) |
 | `tokens-only-colors` | themekit | `tokenPrefix` | `paths` + `options` + `styling` + `colors` | — | — | **written here** (U2) |
 | `time-through-the-door` | backend-workflows | `door` | `paths` + `options` | — | yes | during only, de-hardcoded |
 | `tissue-must-compose` | frontend | — | `paths` | yes | yes | diverged |
@@ -856,11 +869,12 @@ option not named here is one no rule reads.
 | `dialect-through-the-seam` | — |
 | `document-sagas-are-generic` | `factories`, `perKindPrefixes`, `within` |
 | `documents-share-one-table` | `perKindTables` |
-| `durable-body-reads-through-steps` | `durableKey`, `durableValue`, `ports`, `stepFactories`, `workflowFactories` |
+| `durable-body-reads-through-steps` | `durableKey`, `durableValue`, `ports`, `stepFactories`, `stepProxies`, `workflowFactories` |
 | `effect-hook-naming` | — |
 | `emit-declares-attempts` | `budgetHelpers`, `emitters` |
-| `font-roles-only` | `allow`, `prefix`, `roles` |
+| `font-roles-only` | `allow`, `exemptModules`, `prefix`, `roles` |
 | `layer-walls` | `externals`, `layers`, `typeOnly` |
+| `list-take-without-order` | `callees`, `orderKeys` |
 | `max-comment-density` | — |
 | `molecule-atoms-only` | — |
 | `molecule-must-compose` | — |
@@ -871,7 +885,9 @@ option not named here is one no rule reads.
 | `no-card-shaped-div` | — |
 | `no-cross-feature-stores` | — |
 | `no-d1-transaction` | — |
+| `no-date-string-compare` | `fieldPattern` |
 | `no-duplicate-jsx-patterns` | — |
+| `no-generic-utility-package` | `entries`, `names` |
 | `no-hook-in-component-disguise` | — |
 | `no-index-count-as-exact` | `estimateFields`, `labelKey` |
 | `no-inert-hidden-jsx` | — |
@@ -886,6 +902,8 @@ option not named here is one no rule reads.
 | `no-react-namespace` | — |
 | `no-renamed-html-props` | — |
 | `no-render-prop-reader` | — |
+| `no-runtime-dead-affordance` | (a positional list) |
+| `no-swallowed-catch` | `paths` |
 | `no-trivial-wrapper-component` | — |
 | `no-ts-in-bio-folders` | — |
 | `no-type-definitions-in-components` | — |
@@ -899,23 +917,24 @@ option not named here is one no rule reads.
 | `route-no-inline-mutation` | `inlineMutationOk`, `mutationPrefixes`, `paths` |
 | `router-schema-parity` | `ignore`, `mounts`, `routers`, `schemas`, `suffix` |
 | `service-name-not-reserved` | `moduleFactories`, `reserved` |
-| `ssot-no-inline-facts` | — |
+| `ssot-no-inline-facts` | `declarationCallees` |
 | `ssot-no-process-env` | — |
 | `step-declares-compensation-or-none` | `stepFactories` |
 | `step-opens-its-own-cell` | `engine`, `hosts`, `scopeKey`, `within`, `wrapper` |
-| `store-route-scopes-tenant-data` | — |
+| `store-route-scopes-tenant-data` | `entities`, `evidenceCalls`, `routes`, `scopingCalls` |
 | `subpath-over-barrel` | `packages` |
 | `subscriber-declares-id` | `paths` |
 | `tables-declare-their-plane` | — |
 | `tenant-tables-carry-org-id` | — |
-| `time-through-the-door` | `door`, `exempt`, `libraries` |
+| `test-no-clock-polling-for-promise-flips` | `pollers`, `testGlobs` |
+| `time-through-the-door` | `door`, `exempt`, `exemptModules`, `libraries` |
 | `tissue-must-compose` | — |
 | `tissue-no-data-props` | — |
 | `tissue-no-hooks` | — |
 | `tissue-no-organelles` | — |
 | `tissue-no-stores` | — |
 | `todo-names-its-plan` | `id`, `markers` |
-| `tokens-only-colors` | `allow`, `tokenPrefix` |
+| `tokens-only-colors` | `allow`, `exemptModules`, `tokenPrefix` |
 | `unique-query-step-name` | `queryStepCalls`, `workflowFactories` |
 | `worker-handles-are-scoped` | `within`, `wrapper` |
 | `zustand-v5-best-practices` | — |

package/corpus/.oxlintrc.json

@@ -60,7 +60,11 @@
       {
         "ports": [
           "store",
-          "billing"
+          "billing",
+          "q"
+        ],
+        "stepProxies": [
+          "q"
         ]
       }
     ],
@@ -106,6 +110,7 @@
         ]
       }
     ],
+    "biological-architecture/list-take-without-order": "error",
     "biological-architecture/max-comment-density": "error",
     "biological-architecture/molecule-atoms-only": "error",
     "biological-architecture/molecule-must-compose": "error",
@@ -126,7 +131,9 @@
     "biological-architecture/no-card-shaped-div": "error",
     "biological-architecture/no-cross-feature-stores": "error",
     "biological-architecture/no-d1-transaction": "error",
+    "biological-architecture/no-date-string-compare": "error",
     "biological-architecture/no-duplicate-jsx-patterns": "error",
+    "biological-architecture/no-generic-utility-package": "error",
     "biological-architecture/no-hook-in-component-disguise": "error",
     "biological-architecture/no-index-count-as-exact": "error",
     "biological-architecture/no-inert-hidden-jsx": "error",
@@ -149,6 +156,14 @@
       }
     ],
     "biological-architecture/no-orm-outside-db": "error",
+    "biological-architecture/no-swallowed-catch": [
+      "error",
+      {
+        "paths": [
+          "(?:__fixtures__|corpus)/failure/"
+        ]
+      }
+    ],
     "biological-architecture/no-raw-html-atoms": [
       "error",
       [
@@ -161,6 +176,16 @@
     ],
     "biological-architecture/no-raw-sql-outside-allowed": "error",
     "biological-architecture/no-react-namespace": "error",
+    "biological-architecture/no-runtime-dead-affordance": [
+      "error",
+      [
+        {
+          "element": "button",
+          "atom": "Button",
+          "importPath": "@kit/ui/atoms/button"
+        }
+      ]
+    ],
     "biological-architecture/no-renamed-html-props": "error",
     "biological-architecture/no-render-prop-reader": "error",
     "biological-architecture/no-trivial-wrapper-component": "error",
@@ -170,11 +195,16 @@
       "error",
       {
         "roots": [
-          "integrations/providers"
+          "integrations/providers",
+          {
+            "path": "messaging/providers",
+            "files": true
+          }
         ],
         "registry": [
           "integrations/registry.ts",
-          "integrations/registry.fulfillment.ts"
+          "integrations/registry.fulfillment.ts",
+          "messaging/registry.ts"
         ],
         "manifests": [
           "index.ts"
@@ -235,7 +265,14 @@
         "wrapper": "(?:__fixtures__|corpus)/workflows/step\\.ts$"
       }
     ],
-    "biological-architecture/store-route-scopes-tenant-data": "error",
+    "biological-architecture/store-route-scopes-tenant-data": [
+      "error",
+      {
+        "evidenceCalls": [
+          "assertTrackingEvidence"
+        ]
+      }
+    ],
     "biological-architecture/subpath-over-barrel": [
       "error",
       {
@@ -260,12 +297,13 @@
     "biological-architecture/subscriber-declares-id": "error",
     "biological-architecture/tables-declare-their-plane": "error",
     "biological-architecture/tenant-tables-carry-org-id": "error",
+    "biological-architecture/test-no-clock-polling-for-promise-flips": "error",
     "biological-architecture/time-through-the-door": [
       "error",
       {
         "door": "(?:__fixtures__|corpus)/time/door\\.ts$",
-        "exempt": [
-          "(?:__fixtures__|corpus)/time/generated/"
+        "exemptModules": [
+          "time/generated/from-openapi.ts"
         ]
       }
     ],
@@ -310,8 +348,8 @@
           "body",
           "display"
         ],
-        "allow": [
-          "__fixtures__/tokens/theme/"
+        "exemptModules": [
+          "tokens/theme/palette.tsx"
         ]
       }
     ],
@@ -322,8 +360,8 @@
           "--mc-",
           "--theme-"
         ],
-        "allow": [
-          "__fixtures__/tokens/theme/"
+        "exemptModules": [
+          "tokens/theme/palette.tsx"
         ]
       }
     ]

package/corpus/affordances/bad-dead-control.tsx

@@ -0,0 +1,6 @@
+// BREACH: it renders, it looks pressable, and pressing it does nothing.
+import { Button } from '@kit/ui/atoms/button'
+
+export const DielineDownload = (): JSX.Element => (
+  <Button type="button">Download the dieline</Button>
+)

package/corpus/affordances/good-live-control.tsx

@@ -0,0 +1,12 @@
+// ACCEPTED: one carries a handler, one hands the press to the child, one is the form's submit.
+import { Button } from '@kit/ui/atoms/button'
+
+export const Downloads = ({ download }: { download: () => void }): JSX.Element => (
+  <form>
+    <Button onClick={download}>Download</Button>
+    <Button asChild>
+      <a href="/dieline.pdf">Open</a>
+    </Button>
+    <Button type="submit">Save</Button>
+  </form>
+)

package/corpus/api/store/history/find-orders.ts

@@ -0,0 +1,8 @@
+// BREACH, one file sideways: the read the route delegates, narrowed to nobody.
+export const findOrders = async (query: {
+  graph: (c: unknown) => Promise<{ data: unknown[] }>
+}): Promise<unknown[]> => {
+  const { data } = await query.graph({ entity: 'order', fields: ['id'] })
+
+  return data
+}

package/corpus/api/store/history/route.ts

@@ -0,0 +1,7 @@
+// BREACH: the route itself names no entity — the read is in the module beside it.
+import { findOrders } from './find-orders'
+
+export async function GET(req: unknown, res: { json: (b: unknown) => void }): Promise<void> {
+  const query = { graph: async (_c: unknown) => ({ data: [] as unknown[] }) }
+  res.json({ orders: await findOrders(query) })
+}

package/corpus/api/store/track/find-tracked-order.ts

@@ -0,0 +1,12 @@
+// ACCEPTED: a public route scoped by caller-supplied evidence — a reference and an email.
+export const findTrackedOrder = async (
+  query: { graph: (c: unknown) => Promise<{ data: unknown[] }> },
+  input: { email: string; reference: string },
+): Promise<unknown> => {
+  assertTrackingEvidence(input)
+  const { data } = await query.graph({ entity: 'order', fields: ['id'] })
+
+  return data[0]
+}
+
+declare function assertTrackingEvidence(input: { email: string; reference: string }): void

package/corpus/api/store/track/route.ts

@@ -0,0 +1,10 @@
+// ACCEPTED: the evidence check the config names stands in for a session.
+import { findTrackedOrder } from './find-tracked-order'
+
+export async function GET(
+  req: { body: { email: string; reference: string } },
+  res: { json: (b: unknown) => void },
+): Promise<void> {
+  const query = { graph: async (_c: unknown) => ({ data: [] as unknown[] }) }
+  res.json({ order: await findTrackedOrder(query, req.body) })
+}

package/corpus/dates/bad-string-order.ts

@@ -0,0 +1,7 @@
+// BREACH: "newest first" becomes "starts with F" — the sort is stable, plausible and wrong.
+type Load = { created_at: Date; id: string; updatedAt: Date }
+
+export const newestFirst = (loads: Load[]): Load[] =>
+  [...loads].sort((a, b) => String(b.created_at).localeCompare(String(a.created_at)))
+
+export const changedSince = (load: Load, cut: string): boolean => `${load.updatedAt}` > cut

package/corpus/dates/good-time-order.ts

@@ -0,0 +1,7 @@
+// ACCEPTED: one orders by the time, the other by the ISO string the API returned.
+type Load = { created_at: Date; id: string; shipped_at: string }
+
+export const newestFirst = (loads: Load[]): Load[] =>
+  [...loads].sort((a, b) => b.created_at.getTime() - a.created_at.getTime())
+
+export const shippedSince = (load: Load, cut: string): boolean => load.shipped_at > cut

package/corpus/engine/good-durable-read-through-step-proxy.ts

@@ -0,0 +1,13 @@
+import { createWorkflow } from '@corpus/workflows'
+
+// ACCEPTED: `q` is the engine's step proxy, so every call through it is a step — journalled under
+// its own name and answered from the record on a replay.
+export const settle = createWorkflow(
+  'invoice.settle',
+  async (id: string, ctx: { q: { getInvoice: (id: string) => Promise<{ status: string }> } }) => {
+    const doc = await ctx.q.getInvoice(id)
+
+    return doc.status
+  },
+  { durable: true },
+)

package/corpus/failure/good-refresh.ts

@@ -0,0 +1,17 @@
+// ACCEPTED: the failure is written where the caller reads it, and the other one is rethrown.
+export const refresh = (
+  load: () => Promise<void>,
+  setError: (message: string) => void,
+): void => {
+  load().catch((error: Error) => {
+    setError(error.message)
+  })
+}
+
+export const reload = async (load: () => Promise<void>): Promise<void> => {
+  try {
+    await load()
+  } catch (error) {
+    throw error
+  }
+}

package/corpus/failure/logged.ts

@@ -0,0 +1,6 @@
+// BREACH: a log is not a state the caller can read — downstream, this refresh succeeded.
+export const refresh = (load: () => Promise<void>): void => {
+  load().catch((error: Error) => {
+    console.error('refresh failed', error)
+  })
+}

package/corpus/failure/refresh.ts

@@ -0,0 +1,4 @@
+// BREACH: the refresh that failed reads as a refresh that succeeded.
+export const refresh = (load: () => Promise<void>): void => {
+  load().catch(() => {})
+}

package/corpus/failure/reload.ts

@@ -0,0 +1,6 @@
+// BREACH: an empty catch block, and a handler whose only answer is a log.
+export const reload = async (load: () => Promise<void>): Promise<void> => {
+  try {
+    await load()
+  } catch {}
+}

package/corpus/manifest.json

@@ -19,6 +19,7 @@
     "biological-architecture/emit-declares-attempts",
     "biological-architecture/font-roles-only",
     "biological-architecture/layer-walls",
+    "biological-architecture/list-take-without-order",
     "biological-architecture/max-comment-density",
     "biological-architecture/molecule-atoms-only",
     "biological-architecture/molecule-must-compose",
@@ -29,7 +30,9 @@
     "biological-architecture/no-card-shaped-div",
     "biological-architecture/no-cross-feature-stores",
     "biological-architecture/no-d1-transaction",
+    "biological-architecture/no-date-string-compare",
     "biological-architecture/no-duplicate-jsx-patterns",
+    "biological-architecture/no-generic-utility-package",
     "biological-architecture/no-hook-in-component-disguise",
     "biological-architecture/no-index-count-as-exact",
     "biological-architecture/no-inert-hidden-jsx",
@@ -44,6 +47,8 @@
     "biological-architecture/no-react-namespace",
     "biological-architecture/no-renamed-html-props",
     "biological-architecture/no-render-prop-reader",
+    "biological-architecture/no-runtime-dead-affordance",
+    "biological-architecture/no-swallowed-catch",
     "biological-architecture/no-trivial-wrapper-component",
     "biological-architecture/no-ts-in-bio-folders",
     "biological-architecture/no-type-definitions-in-components",
@@ -66,6 +71,7 @@
     "biological-architecture/subscriber-declares-id",
     "biological-architecture/tables-declare-their-plane",
     "biological-architecture/tenant-tables-carry-org-id",
+    "biological-architecture/test-no-clock-polling-for-promise-flips",
     "biological-architecture/time-through-the-door",
     "biological-architecture/tissue-must-compose",
     "biological-architecture/tissue-no-data-props",

package/corpus/medusa/queries/bad-unordered-page.ts

@@ -0,0 +1,20 @@
+// BREACH: the stage before this one wrote the plan, and this page never sees it.
+declare const query: { graph: (config: unknown) => Promise<{ data: unknown[] }> }
+declare function listPlannedOrders(filters: unknown, config: unknown): Promise<unknown[]>
+
+export const latestPlan = async (orderId: string): Promise<unknown> => {
+  const { data } = await query.graph({
+    entity: 'planned_order',
+    fields: ['id'],
+    filters: { order_id: orderId },
+    pagination: { take: 1 },
+  })
+
+  return data[0]
+}
+
+export const firstOpen = async (orderId: string): Promise<unknown> => {
+  const rows = await listPlannedOrders({ order_id: orderId }, { take: 1 })
+
+  return rows[0]
+}

package/corpus/medusa/queries/good-ordered-page.ts

@@ -0,0 +1,23 @@
+// ACCEPTED: the page names the column it is a page of, so the first row is the first row.
+declare const query: { graph: (config: unknown) => Promise<{ data: unknown[] }> }
+declare function listPlannedOrders(filters: unknown, config: unknown): Promise<unknown[]>
+
+export const latestPlan = async (orderId: string): Promise<unknown> => {
+  const { data } = await query.graph({
+    entity: 'planned_order',
+    fields: ['id'],
+    filters: { order_id: orderId },
+    pagination: { order: { created_at: 'DESC' }, take: 1 },
+  })
+
+  return data[0]
+}
+
+export const firstOpen = async (orderId: string): Promise<unknown> => {
+  const rows = await listPlannedOrders(
+    { order_id: orderId },
+    { order: { created_at: 'ASC' }, take: 1 },
+  )
+
+  return rows[0]
+}

package/corpus/messaging/providers/email-gmail.ts

@@ -0,0 +1,2 @@
+// ACCEPTED: the registry names this file.
+export default { channel: 'email' }

package/corpus/messaging/providers/sms-twilio.ts

@@ -0,0 +1,2 @@
+// ACCEPTED: the registry names this file too.
+export default { channel: 'sms' }

package/corpus/messaging/providers/whatsapp-360dialog.ts

@@ -0,0 +1,2 @@
+// BREACH: a provider file nothing reaches — it reads as a channel and behaves as dead weight.
+export default { channel: 'whatsapp' }

package/corpus/messaging/registry.ts

@@ -0,0 +1,5 @@
+// The flat seam's registry: providers are FILES here, one per channel.
+export const providers = {
+  email: './providers/email-gmail',
+  sms: './providers/sms-twilio',
+}

package/corpus/packages/pricing/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "@corpus/pricing",
+  "version": "0.0.0",
+  "private": true
+}

package/corpus/packages/pricing/src/index.ts

@@ -0,0 +1,2 @@
+// ACCEPTED: named for what it does, so a wrong import is obviously wrong.
+export const priceOf = (cents: number, quantity: number): number => cents * quantity

package/corpus/packages/utils/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "@corpus/utils",
+  "version": "0.0.0",
+  "private": true
+}

package/corpus/packages/utils/src/index.ts

@@ -0,0 +1,4 @@
+// BREACH: named for nothing, so nothing can be refused entry and everything arrived.
+export const formatMoney = (cents: number): string => `${(cents / 100).toFixed(2)}`
+export const SUPPORT_EMAIL = 'support@corpus.example'
+export const slugify = (value: string): string => value.toLowerCase().replaceAll(' ', '-')

package/corpus/suites/__tests__/awaits.ts

@@ -0,0 +1,17 @@
+// ACCEPTED: the promise is awaited where it was created, and the assertion runs once after it.
+declare function waitFor(check: () => void): Promise<void>
+declare function expect(value: unknown): { toBe: (other: unknown) => void }
+
+export const savesTheCart = async (
+  save: () => Promise<void>,
+  subject: { done: boolean },
+): Promise<void> => {
+  await save()
+  expect(subject.done).toBe(true)
+}
+
+export const rendersTheRow = async (subject: { done: boolean }): Promise<void> => {
+  await waitFor(() => {
+    expect(subject.done).toBe(true)
+  })
+}

package/corpus/suites/__tests__/settles.ts

@@ -0,0 +1,14 @@
+// BREACH: the test holds the promise and polls the clock for the flip it decides.
+declare function waitFor(check: () => void): Promise<void>
+declare function expect(value: unknown): { toBe: (other: unknown) => void }
+
+export const savesTheCart = async (
+  save: () => Promise<void>,
+  subject: { done: boolean },
+): Promise<void> => {
+  const settled = save()
+  await waitFor(() => {
+    expect(subject.done).toBe(true)
+  })
+  await settled
+}

package/dist/{chunk-LTDP2733.js → chunk-KV7JRNAP.js}

@@ -25,6 +25,7 @@ var FRONTEND = [
   "no-react-namespace",
   "no-renamed-html-props",
   "no-render-prop-reader",
+  "no-runtime-dead-affordance",
   "no-trivial-wrapper-component",
   "no-ts-in-bio-folders",
   "no-type-definitions-in-components",
@@ -45,6 +46,7 @@ var BACKEND_WORKFLOWS = [
   "documents-share-one-table",
   "durable-body-reads-through-steps",
   "mutating-step-declares-retry",
+  "no-date-string-compare",
   "no-orm-outside-db",
   "no-raw-sql-outside-allowed",
   "no-void-port",
@@ -71,6 +73,7 @@ var announceRename = (from) => {
 };
 var BACKEND_MEDUSA = [
   "emit-declares-attempts",
+  "list-take-without-order",
   "mutating-step-declares-retry",
   "named-when-block",
   "no-index-count-as-exact",
@@ -83,6 +86,7 @@ var BACKEND_MEDUSA = [
   "subscriber-declares-id",
   "unique-query-step-name"
 ];
+var FAILURE_PATHS = ["no-swallowed-catch"];
 var INTEGRATIONS = ["no-unregistered-plugin-dir"];
 var BACKEND_TRPC = ["router-schema-parity"];
 var TENANT_SCOPING = [
@@ -91,9 +95,9 @@ var TENANT_SCOPING = [
   "tables-declare-their-plane",
   "tenant-tables-carry-org-id"
 ];
-var TOOLING = ["layer-walls", "todo-names-its-plan"];
+var TOOLING = ["layer-walls", "no-generic-utility-package", "todo-names-its-plan"];
 var THEMEKIT = ["font-roles-only", "tokens-only-colors"];
-var TESTBED = ["no-mock-db-in-integration"];
+var TESTBED = ["no-mock-db-in-integration", "test-no-clock-polling-for-promise-flips"];
 var PACKAGE_SUBPATHS = ["subpath-over-barrel"];
 var RULE_PREFIX = "biological-architecture";
 var asRules = (names) => Object.fromEntries(names.map((name) => [`${RULE_PREFIX}/${name}`, "error"]));
@@ -123,6 +127,7 @@ var PRESETS = {
   "backend-workflows": { rules: asRules(BACKEND_WORKFLOWS) },
   "backend-workflows-cf": { rules: asRules(BACKEND_WORKFLOWS_CF) },
   "comment-ceiling": COMMENT_CEILING,
+  "failure-paths": { rules: asRules(FAILURE_PATHS) },
   frontend: { rules: asRules(FRONTEND) },
   integrations: { rules: asRules(INTEGRATIONS) },
   "package-subpaths": { rules: asRules(PACKAGE_SUBPATHS) },