@geonosis/oxlint-plugin-biological-architecture 3.1.0 → 3.2.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # @geonosis/oxlint-plugin-biological-architecture
 
+## 3.2.0
+
+### Minor Changes
+
+- a4a7bba: Thirty-four rules the kit enables now declare a probe, so the doctor's `exercised` can ask them whether they reach anything and `probelessRules` falls with them. A direction rule declares its probe beside its scope.
+  
+  New rule `hermetic-e2e-no-wall-clock-waits` (preset `testbed`): in an end-to-end spec a fixed-time wait (`waitForTimeout`, a `setTimeout` sleep) is reported, and a `waitForResponse` on a list endpoint is reported for the endpoints `listEndpoints` names. `specs`, `clockWaits` and `networkWaits` are options.
+  
+  `worker-handles-are-scoped` accepts the wrapper as a member call (`cellOf(env).withConnection(...)`). `no-generic-utility-package` takes `allow: [{ package, exports }]` for the one door a generic name survives to hold, and reports a second export. `no-hook-in-component-disguise` takes `clientBoundary` (`false`, or the paths the directive is honoured under); its message no longer teaches the directive where it is withdrawn. `tissue-no-hooks` takes `contextHooks`, a list that is empty until the repo writes it and never excuses React's state hooks. `tokens-only-colors` reads a colour in a plain object, not only in a JSX style, an attribute or a default. `organelle-single-source` counts the sources of the sibling organelle hooks a file calls. `tissue-no-data-props` reads a props type named instead of written inline, from the declaration beside it or the file it is imported from, and its message says an inferred `any` belongs to the type-checker's rules. `cells-folder-index-is-barrel` reports a `cells/` file that only re-exports an organelle.
+  
+  `subpath-over-barrel` expands a door written as a pattern (`./icons/*`) by listing the files its target names, reads the workspace membership (`pnpm-workspace.yaml`, `package.json` `workspaces`) as the repo's own packages where the linker writes no `node_modules`, re-reads a manifest when its mtime changes, and says once a run when an opted-in package resolves to nothing or the tree resolves no package at all.
+  
+  A rule that throws a `SyntaxError` — a pattern option that is not a regular expression — is reported as one finding naming the rule, once a run, and no longer erases the file's other findings.
+- a4a7bba: A dynamic `import()` or `require()` that is destructured — `const { Real } = await import('../cells')` — takes the names the pattern spells, as `import { Real }` does, so the other names the barrel carries are not its reach; a rest element, a computed key or a result bound to one name still takes the whole module. A solution-style `tsconfig.json` (no `paths`, only `references`) leaves the aliases to the referenced project that declares `paths` and includes the importing directory.
+  
+  The tier folder is read in one place: a molecule, and the molecules/compounds/organelles/cells/layouts the card and prop-name rules police, are recognised when the path starts at the folder as well as when it is absolute, and a folder that only ends in a tier name is not that tier. `queue-loop-is-the-library` exempts a test through the shared reader, so a path relative to the working directory is exempt too. The cell and tissue private-sibling suffixes share one list.
+  
+  A refusal for a missing option reports `data: { option, rule }` beside its sentence. `src/registry.ts` is generated from the rule modules on disk (`pnpm generate:registry`), and `RULES.md` carries a generated inventory (presets, required option, presumed engine) and summary beside a hand-kept provenance table.
+- 58eaf3a: `organelle-dependency`, `tissue-no-organelles`, `atom-no-deps`, `molecule-atoms-only` and `compound-no-stores` judge a specifier that begins with a tier folder or `app/` (`cells/editor`, written against a baseUrl); `tissue-must-compose`, `molecule-must-compose`, `next-route-segment-is-thin-delegate` and `no-trivial-wrapper-component` no longer report a file whose composed import is spelled that way.
+- 58eaf3a: `no-inert-hidden-jsx` reads `className={'hidden'}` and a hole-free template literal as it reads `className="hidden"`.
+- 58eaf3a: `no-logic-in-component-files` counts a default-exported component and a component named in capitals (`FAQ`, `CTA`), which it skipped, and judges each declarator's own thinness. A capitalised name counts only when it is a function that returns JSX, so a helper such as `export const API = () => fetch(...)` stays out of the count.
+- 58eaf3a: `effect-hook-naming` reads `React.useEffect` and `React.useLayoutEffect`, and judges the name of a default-exported hook.
+- 58eaf3a: `no-runtime-dead-affordance` reads a handler as `on` followed by a capital, so a prop such as `only` or `once` no longer keeps a dead control alive. A lowercase `onclick` is no longer a handler either, and a control carrying only that is now reported: React does not attach it and warns, so it is a dead control there. A Preact-style tree that spells handlers in lowercase will see it.
+- 58eaf3a: `tokens-only-colors` and `font-roles-only` read an arbitrary value through Tailwind variants and the important modifier — `data-[state=open]:bg-[#fff]`, `[&>span]:bg-[#fff]`, `!bg-[#fff]` — which they skipped.
+- a4a7bba: `store-route-scopes-tenant-data` is in `backend-medusa` only. It presumes Medusa's `/api/store/**` route layout, and `tenant-scoping` is for a repo of any stack, so a Workers + D1 app that enabled `tenant-scoping` carried a rule that judged nothing there. A repo on Medusa that enables `tenant-scoping` without `backend-medusa` no longer gets this rule: add `backend-medusa`. A scaffold's Medusa answer already names both.
+- dd5f57a: A tier rule now declares the tier folder it reaches (`rule.tier`), and `unreachableTierRules` counts the tier rules enabled over a workspace that ships tier folders but none of that rule's tier: they have no possible finding and print what a clean tree prints. A workspace with no tier folder is not judged; a plugin that declares no tier is a refusal.
+  
+  `geonosis-ratchet --prove` now plants the tool failing as well as a finding. A counter must answer a failing tool with a `CounterError`, and a counter that ships no `refuses` probe reads UNPROVEN. The report names a counter's halves (`PROVEN archViolations (command)`, `UNPROVEN archViolations (match)`) and the summary counts halves. A counter you wrote needs `refuses: { input?, command?, params? }` beside its `probe`.
+  
+  A named `roots` entry of `commentLines`, `suppressionCount` and `orphanTodos` that is not a directory is now a refusal rather than zero findings, and a `pnpm-workspace.yaml` that does not parse refuses the counters that read it.
+  
+  A win one counter measured is now written to the baseline even when another counter could not be measured (a floor whose `dist/` is not built no longer holds every other floor's win back); the run still fails at the refusal and says which number was lowered.
+  
+  `waitForBuild(root)` and `buildLockPath(root)` are exported for a tier that must not run beside a build.
+  
+  `typecheckErrors` takes a `report` in place of a `command`: it reads the `{ errors, tree }` file a typecheck step wrote and refuses one whose tree is not the working tree in front of it, naming both digests, so `verify:release` no longer runs the same tsc program twice. `treeHashOf(cwd)` is exported for the step that writes it.
+- a4a7bba: `tissue-no-fetch`, in the `frontend` preset: a file in a `tissues/` folder that contains an `await`, a `for await` loop or a call to `fetch` (bare, or through `globalThis`, `window` or `self`) waits for data, so the tissue owns it. A tissue arranges data it was handed; the read belongs in a loader the route segment calls. Tests, specs and stories beside a tissue are left alone, and so is every other tier. It needs no option to run.
+
+### Patch Changes
+
+- a4a7bba: The plugin README lists the five oxlint built-ins that fire on idioms the presets ask for (`no-await-in-loop`, `unicorn/no-useless-undefined`, `unicorn/consistent-function-scoping`, `unicorn/throw-new-error`, `no-underscore-dangle`), measured on oxlint 1.87.0, with the config that quiets the four an override or option can reach and the rewrite for the loop. The kit's `tiers.md` rule file says what "inert below the organelle" means: no app or shared state (no store, no data); local UI state such as an open flag is allowed in an atom or a molecule, and a compound holds none. `gates.md` separates adopting a counter, which the ratchet writes and does not judge, from raising a baseline to make a gate go green, which stays forbidden. `geonosis-doctor`'s `rules` check compares against these copies.
+- 58eaf3a: `icon-control-has-name` no longer reports a control whose icon names itself: an icon with its own `aria-label` or `aria-labelledby` (an icon component must forward it to its svg), or an `<svg>` holding a `<title>`, is the control's accessible name. A `title` attribute on an icon or an `<svg>` is not an accessible name and is still reported.
+- f5632b7: `step-declares-compensation-or-none` declares a `probe`, so a repo that enables it for one directory (an override with a `files` glob) is judged by the doctor's `exercised` check instead of being skipped for want of a probe (#131).
+
 ## 3.1.0
 
 ### Minor Changes

package/README.md

@@ -1,6 +1,6 @@
 # @geonosis/oxlint-plugin-biological-architecture
 
-81 architecture rules as an oxlint JS plugin: which tier a file belongs to, what it may import,
+83 architecture rules as an oxlint JS plugin: which tier a file belongs to, what it may import,
 where state is allowed to live, and the backend invariants that go with them. Nothing is hardcoded
 to a repo — every list of brands, features, tables or paths is an option. A rule enabled without the
 options it needs says so once a run and judges nothing, rather than passing silently.
@@ -51,20 +51,21 @@ atoms → molecules → compounds → organelles → cells → tissues
 ```
 
 State lives **only** at the organelle and cell tiers. Everything above the cell arranges;
-everything below the organelle is inert. A cell never composes another cell.
+everything below the organelle holds no app or shared state (no store, no data) — local UI state
+such as an open flag is allowed there. A cell never composes another cell.
 
 ## Presets
 
 | preset | rules | what it is |
 | --- | --- | --- |
-| `frontend` (= `recommended`) | 38 | tier direction, state placement, element choice, file shape |
+| `frontend` (= `recommended`) | 39 | tier direction, state placement, element choice, file shape |
 | `backend-workflows` | 15 | workflows, time, the data layer, single source of truth |
 | `backend-medusa` | 13 | Medusa steps, emits, subscribers, loaders and the store route surface |
-| `tenant-scoping` | 4 | every row placed, scoped and narrowed to one tenant |
+| `tenant-scoping` | 3 | every row placed, scoped and narrowed to one tenant |
 | `tooling` | 3 | a repo's own layers as data, no generic `utils` package, debt markers name a plan |
 | `backend-d1` | 2 | Cloudflare D1 facts — false on an engine with transactions |
 | `themekit` | 2 | colours and fonts only through the theme's tokens and roles |
-| `testbed` | 2 | integration suites run on a real database; tests await rather than poll |
+| `testbed` | 3 | integration suites run on a real database; tests await rather than poll |
 | `backend-trpc` | 1 | every router has its schema, and every schema its router |
 | `backend-workflows-cf` | 1 | durable runs on Cloudflare Workflows — false of an inline run |
 | `failure-paths` | 1 | no catch that swallows the failure it caught |
@@ -75,6 +76,48 @@ everything below the organelle is inert. A cell never composes another cell.
 A rule that is false on another stack gets its own preset rather than riding along in a generic
 one: a preset carrying a repo fact is a repo fact wearing a preset's name.
 
+## Oxlint built-ins that disagree with an idiom
+
+Five built-in oxlint rules (measured on oxlint 1.87.0) fire on code the kit's own presets ask for.
+They are oxlint's rules, not this plugin's, and the fix for four of them is in the repo's
+`.oxlintrc.json`; an upstream change is oxc's to make. Turning a built-in off for a glob is law 2's
+"ask first" when the repo has it at `error`, and the reason goes beside the override.
+
+```json
+{
+  "rules": {
+    "no-underscore-dangle": ["error", { "allow": ["_tag"] }]
+  },
+  "overrides": [
+    {
+      "files": ["**/*.test.ts"],
+      "rules": {
+        "unicorn/consistent-function-scoping": "off",
+        "unicorn/no-useless-undefined": "off"
+      }
+    }
+  ]
+}
+```
+
+- **`no-await-in-loop`** has no small-bound allowance, and a bounded, deliberately sequential loop
+  (policy reads that journal, two iterations) is flagged. A `for await` loop is not flagged, so write
+  the sequence as one: an async generator that `yield`s each step's promise, consumed with
+  `for await`. The generator runs one step per pull. The other answer is an override naming the file
+  that holds the loop.
+- **`unicorn/no-useless-undefined`** fires on `mockResolvedValue(undefined)`, the idiom for "resolves
+  to nothing"; `null` changes the assertion. The override above is for test files.
+- **`unicorn/consistent-function-scoping`** hoists an arrange-act-assert helper out of the `describe`
+  that explains it. Same override.
+- **`unicorn/throw-new-error`** matches any call whose callee name ends in `Error`, including the
+  `extends` clause of `class SinkFailure extends TaggedError('SinkFailure')<…>() {}`, where nothing
+  is thrown. `better-result`'s factory is named `TaggedError`, so the first error class of a
+  `Result` posture trips it. Import the factory under another name (`import { TaggedError as tagged }
+  from 'better-result'`); that is a rename, not a suppression.
+- **`no-underscore-dangle`** flags `_tag`, `better-result`'s public discriminant. `allow: ["_tag"]`
+  above is the option the rule has for it; where a test can use `matchError` instead, that is the
+  behaviour anyway.
+
 ## Adopting
 
 A repo that already has its own copy of these rules does not delete it because the version numbers

package/RULES.md

@@ -11,13 +11,15 @@ One plugin name, two rule sets, no shared code. **33 rules had the same filename
 
 The union here is **52 rules** — 54 when it was cut, less `document-sagas-are-generic` and
 `documents-share-one-table`, retired in 2.7.0 because both enforced one consumer's document kinds —
-plus twenty-nine the kit wrote for itself: `layer-walls`, `emit-declares-attempts`,
+plus thirty the kit wrote for itself: `layer-walls`, `emit-declares-attempts`,
 `cell-no-cross-feature-organelles`, the `backend-medusa` ten, `no-unregistered-plugin-dir` +
 `router-schema-parity`, the `themekit` two, `no-mock-db-in-integration`, `todo-names-its-plan`,
 `boundary-time-is-primitive`, `durable-body-reads-through-steps`, `subpath-over-barrel` and the six
-of the W67 batch, and `icon-control-has-name` — **81**. The two retired ids went in 3.0.0.
-Every one of the twenty-nine is marked **written here** in the inventory, and the table below is
-held against that column rather than kept by hand.
+of the W67 batch, `icon-control-has-name` and `tissue-no-fetch` — **82**. The two retired ids went in 3.0.0.
+Every one of the thirty is marked **written here** in the provenance table, and the counts below
+are generated from that column and from the rules the plugin exports.
+
+<!-- GENERATED: the rules by where they came from -->
 
 | | count |
 |---|---|
@@ -26,8 +28,10 @@ held against that column rather than kept by hand.
 | A Medusa storefront only | 3 |
 | A Workers + D1 app only | 16 |
 | **union** | **52** |
-| written here | 29 |
-| **total** | **81** |
+| written here | 31 |
+| **total** | **83** |
+
+<!-- END GENERATED SUMMARY -->
 
 ## How divergence was resolved
 
@@ -502,8 +506,8 @@ written out and is still reported.
 
 ### `store-route-scopes-tenant-data` (a Medusa storefront only) — Medusa-specific
 
-`/api/store/**/route.ts` is a Medusa convention. It is in `backend-medusa`, and also in
-`tenant-scoping` because that is what it enforces.
+`/api/store/**/route.ts` is a Medusa convention. It is in `backend-medusa` only: `tenant-scoping`
+is for a repo of any stack, and a repo on Medusa gets this rule from `backend-medusa`.
 
 ### `no-logic-in-component-files` — a Medusa storefront's narrowed version
 
@@ -706,94 +710,99 @@ name resolves to the same rules for ONE release and says so once, then goes. `pa
 their `exports` and the entry file behind each door — which is a fact about that repo's layout, not
 every repo's.
 
-| Rule | Preset(s) | Requires | Core | In a Medusa storefront | In a Workers + D1 app | Same code |
-|---|---|---|---|---|---|---|
-| `atom-no-deps` | frontend | — | `directionRule` | yes | yes | diverged |
-| `boundary-time-is-primitive` | backend-workflows | `types` | `nodes` + `paths` + `options` | — | — | **written here** (D-050, #145) |
-| `cell-must-be-stateful` | frontend | — | `paths` | yes | — | a Medusa storefront only |
-| `cell-must-not-compose-cell` | frontend | — | `directionRule` + `cells-barrel` | yes | yes | diverged |
-| `cell-no-cross-feature-organelles` | frontend | — | `directionRule` | — | — | **written here** |
-| `cell-no-tissues` | frontend | — | `directionRule` | yes | yes | diverged |
-| `cells-folder-index-is-barrel` | frontend | — | `paths` + `cells-barrel` | yes | yes | diverged |
-| `compound-must-be-stateless` | frontend | — | `paths` | yes | yes | diverged |
-| `compound-no-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `constants-in-constants-file` | backend-workflows | — | `paths` | — | yes | a Workers + D1 app only |
-| `dialect-through-the-seam` | backend-workflows | `seam` | `onImportSource` + `mergeVisitors` + `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `durable-body-reads-through-steps` | backend-workflows | `ports` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (#167, design-026 §8) |
-| `effect-hook-naming` | frontend | — | `paths` | yes | yes | diverged |
-| `icon-control-has-name` | frontend | — | `nodes` + `options` | — | — | **written here** |
-| `emit-declares-attempts` | backend-medusa | — | `options` | — | — | **written here** |
-| `font-roles-only` | themekit | `roles` | `paths` + `options` + `styling` | — | — | **written here** (U2) |
-| `layer-walls` | tooling | `layers` | `onImportSource` + `imports` + `paths` + `options` | — | — | **written here** |
-| `list-take-without-order` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (#21) |
-| `max-comment-density` | comment-ceiling | — | `paths` | — | yes | a Workers + D1 app only |
-| `molecule-atoms-only` | frontend | — | `directionRule` | yes | yes | diverged |
-| `molecule-must-compose` | frontend | — | — | yes | yes | diverged |
-| `mutating-step-declares-retry` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (a Medusa storefront's scan R5.2) |
-| `named-when-block` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (a Medusa storefront's scan R5.5) |
-| `next-route-segment-is-thin-delegate` | frontend | — | `paths` | yes | yes | diverged |
-| `no-unregistered-plugin-dir` | integrations | `roots` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs; flat seam #36) |
-| `no-mock-db-in-integration` | testbed | `integrationDirs` | `options` + `paths` | — | — | **written here** (Midday's 35 mocked router suites) |
-| `router-schema-parity` | backend-trpc | `routers` | `options` + `paths` | — | — | **written here** (a Workers + D1 app's mirror) |
-| `no-brand-names` | frontend | `brands` | `paths` + `options` | yes | — | a Medusa storefront only |
-| `no-card-shaped-div` | frontend | — | — | yes | yes | diverged |
-| `no-cross-feature-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `no-d1-transaction` | backend-d1 | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-date-string-compare` | backend-workflows | — | `nodes` + `options` | — | — | **written here** (#20) |
-| `no-duplicate-jsx-patterns` | frontend | — | `paths` | yes | yes | diverged |
-| `no-generic-utility-package` | tooling | — | `paths` + `options` | — | — | **written here** (#171) |
-| `no-hook-in-component-disguise` | frontend | — | `paths` | yes | yes | diverged |
-| `no-index-count-as-exact` | backend-medusa | — | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
-| `no-inert-hidden-jsx` | frontend | — | `paths` | yes | yes | diverged |
-| `no-inline-data-in-jsx` | frontend | — | `paths` | yes | yes | diverged |
-| `no-invalid-feature-folders` | frontend | — | `paths` | yes | yes | diverged |
-| `no-loader-side-effect-in-index-file` | backend-medusa | — | `nodes` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan #15442) |
-| `no-logic-in-component-files` | frontend | — | `paths` | yes | yes | diverged |
-| `plugin-route-namespaced` | backend-medusa | `packages` | `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R3.8) |
-| `no-orm-outside-db` | backend-workflows | — | `directionRule` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-raw-html-atoms` | frontend | `element→atom map` | `tiers` + `options` | yes | yes | diverged |
-| `no-raw-sql-outside-allowed` | backend-workflows | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-react-namespace` | frontend | — | — | yes | yes | **identical** |
-| `no-renamed-html-props` | frontend | — | — | yes | yes | **identical** |
-| `no-render-prop-reader` | frontend | — | `paths` | yes | yes | diverged |
-| `no-swallowed-catch` | failure-paths | `paths` | `nodes` + `paths` + `options` | — | — | **written here** (#3) |
-| `no-runtime-dead-affordance` | frontend | `element→atom map` | `options` | — | — | **written here** (#5) |
-| `no-trivial-wrapper-component` | frontend | — | `paths` | yes | yes | diverged |
-| `no-ts-in-bio-folders` | frontend | — | `paths` | yes | yes | diverged |
-| `no-type-definitions-in-components` | frontend | — | `paths` | yes | yes | diverged |
-| `no-void-port` | backend-workflows | — | — | — | yes | a Workers + D1 app only |
-| `organelle-dependency` | frontend | — | `directionRule` | yes | yes | diverged |
-| `organelle-single-source` | frontend | — | `onImportSource` + `mergeVisitors` + `paths` | yes | yes | diverged |
-| `queries-require-org-scope` | tenant-scoping | `queries` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `queue-loop-is-the-library` | backend-workflows | — | — | — | yes | a Workers + D1 app only |
-| `route-no-inline-mutation` | backend-medusa | — | `nodes` + `paths` + `comments` + `options` | — | — | **written here** (a Medusa storefront's scan R5.1) |
-| `service-name-not-reserved` | backend-medusa | — | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
-| `ssot-no-inline-facts` | backend-workflows | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `ssot-no-process-env` | backend-workflows | — | `paths` | — | yes | a Workers + D1 app only |
-| `step-declares-compensation-or-none` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (Medusa source) |
-| `step-opens-its-own-cell` | backend-workflows-cf | `within` | `nodes` + `objects` + `paths` + `options` | — | yes | a Workers + D1 app only, re-targeted |
-| `store-route-scopes-tenant-data` | backend-medusa + tenant-scoping | — | `nodes` + `imports` + `paths` + `options` | yes | — | a Medusa storefront only, de-hardcoded |
-| `subpath-over-barrel` | package-subpaths | — | `nodes` + `options` | — | — | **written here** (#180, a Workers + D1 app asked) |
-| `subscriber-declares-id` | backend-medusa | — | `objects` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R5.4) |
-| `tables-declare-their-plane` | backend-workflows + tenant-scoping | `schema` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `tenant-tables-carry-org-id` | tenant-scoping | `tenant` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `test-no-clock-polling-for-promise-flips` | testbed | — | `nodes` + `paths` + `options` | — | — | **written here** (#4) |
-| `tokens-only-colors` | themekit | `tokenPrefix` | `paths` + `options` + `styling` + `colors` | — | — | **written here** (U2) |
-| `time-through-the-door` | backend-workflows | `door` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `tissue-must-compose` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-data-props` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-hooks` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-organelles` | frontend | — | `directionRule` | yes | yes | diverged |
-| `tissue-no-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `todo-names-its-plan` | tooling | `markers` | `comments` + `options` | — | — | **written here** (W28) |
-| `unique-query-step-name` | backend-medusa | `queryStepCalls` | `nodes` + `objects` + `options` | — | — | **written here** (a Medusa storefront's scan R4.3) |
-| `worker-handles-are-scoped` | backend-d1 | `within` | `paths` + `options` | — | yes (as `cell-handles-are-scoped`) | a Workers + D1 app only, de-hardcoded |
-| `zustand-v5-best-practices` | frontend | — | — | yes | yes | **identical** |
-
-Preset sizes: frontend 36 · backend-workflows 16 · backend-medusa 12 · tenant-scoping 4 ·
-backend-d1 2 · tooling 2 · themekit 2 · backend-workflows-cf 1 · backend-trpc 1 · integrations 1 ·
-package-subpaths 1 · testbed 1 · comment-ceiling 1 (+ `capitalized-comments`, which is oxlint's own
-and only makes sense alongside the density rule).
+<!-- GENERATED: the preset, option and engine of each rule -->
+
+| Rule | Preset(s) | Requires | Presumes |
+|---|---|---|---|
+| `atom-no-deps` | frontend | — | — |
+| `boundary-time-is-primitive` | backend-workflows | `types` | — |
+| `cell-must-be-stateful` | frontend | — | — |
+| `cell-must-not-compose-cell` | frontend | — | — |
+| `cell-no-cross-feature-organelles` | frontend | — | — |
+| `cell-no-tissues` | frontend | — | — |
+| `cells-folder-index-is-barrel` | frontend | — | — |
+| `compound-must-be-stateless` | frontend | — | — |
+| `compound-no-stores` | frontend | — | — |
+| `constants-in-constants-file` | backend-workflows | — | — |
+| `dialect-through-the-seam` | backend-workflows | `seam` | — |
+| `durable-body-reads-through-steps` | backend-workflows | `ports` | — |
+| `effect-hook-naming` | frontend | — | — |
+| `emit-declares-attempts` | backend-medusa | — | Medusa |
+| `font-roles-only` | themekit | `roles` | — |
+| `hermetic-e2e-no-wall-clock-waits` | testbed | — | — |
+| `icon-control-has-name` | frontend | — | — |
+| `layer-walls` | tooling | `layers` | — |
+| `list-take-without-order` | backend-medusa | — | Medusa |
+| `max-comment-density` | comment-ceiling | — | — |
+| `molecule-atoms-only` | frontend | — | — |
+| `molecule-must-compose` | frontend | — | — |
+| `mutating-step-declares-retry` | backend-medusa + backend-workflows | — | — |
+| `named-when-block` | backend-medusa | — | Medusa |
+| `next-route-segment-is-thin-delegate` | frontend | — | — |
+| `no-brand-names` | frontend | `brands` | — |
+| `no-card-shaped-div` | frontend | — | — |
+| `no-cross-feature-stores` | frontend | — | — |
+| `no-d1-transaction` | backend-d1 | — | — |
+| `no-date-string-compare` | backend-workflows | — | — |
+| `no-duplicate-jsx-patterns` | frontend | — | — |
+| `no-generic-utility-package` | tooling | — | — |
+| `no-hook-in-component-disguise` | frontend | — | — |
+| `no-index-count-as-exact` | backend-medusa | — | Medusa |
+| `no-inert-hidden-jsx` | frontend | — | — |
+| `no-inline-data-in-jsx` | frontend | — | — |
+| `no-invalid-feature-folders` | frontend | — | — |
+| `no-loader-side-effect-in-index-file` | backend-medusa | — | Medusa |
+| `no-logic-in-component-files` | frontend | — | — |
+| `no-mock-db-in-integration` | testbed | `integrationDirs` | — |
+| `no-orm-outside-db` | backend-workflows | — | — |
+| `no-raw-html-atoms` | frontend | `element→atom map` | — |
+| `no-raw-sql-outside-allowed` | backend-workflows | — | — |
+| `no-react-namespace` | frontend | — | — |
+| `no-renamed-html-props` | frontend | — | — |
+| `no-render-prop-reader` | frontend | — | — |
+| `no-runtime-dead-affordance` | frontend | `element→atom map` | — |
+| `no-swallowed-catch` | failure-paths | `paths` | — |
+| `no-trivial-wrapper-component` | frontend | — | — |
+| `no-ts-in-bio-folders` | frontend | — | — |
+| `no-type-definitions-in-components` | frontend | — | — |
+| `no-unregistered-plugin-dir` | integrations | `roots` | — |
+| `no-void-port` | backend-workflows | — | — |
+| `organelle-dependency` | frontend | — | — |
+| `organelle-single-source` | frontend | — | — |
+| `plugin-route-namespaced` | backend-medusa | `packages` | Medusa |
+| `queries-require-org-scope` | tenant-scoping | `queries` | — |
+| `queue-loop-is-the-library` | backend-workflows | — | — |
+| `route-no-inline-mutation` | backend-medusa | — | Medusa |
+| `router-schema-parity` | backend-trpc | `routers` | — |
+| `service-name-not-reserved` | backend-medusa | — | Medusa |
+| `ssot-no-inline-facts` | backend-workflows | — | — |
+| `ssot-no-process-env` | backend-workflows | — | — |
+| `step-declares-compensation-or-none` | backend-medusa + backend-workflows | — | — |
+| `step-opens-its-own-cell` | backend-workflows-cf | `within` | — |
+| `store-route-scopes-tenant-data` | backend-medusa | — | Medusa |
+| `subpath-over-barrel` | package-subpaths | — | — |
+| `subscriber-declares-id` | backend-medusa | — | Medusa |
+| `tables-declare-their-plane` | backend-workflows + tenant-scoping | `schema` | — |
+| `tenant-tables-carry-org-id` | tenant-scoping | `tenant` | — |
+| `test-no-clock-polling-for-promise-flips` | testbed | — | — |
+| `time-through-the-door` | backend-workflows | `door` | — |
+| `tissue-must-compose` | frontend | — | — |
+| `tissue-no-data-props` | frontend | — | — |
+| `tissue-no-fetch` | frontend | — | — |
+| `tissue-no-hooks` | frontend | — | — |
+| `tissue-no-organelles` | frontend | — | — |
+| `tissue-no-stores` | frontend | — | — |
+| `todo-names-its-plan` | tooling | `markers` | — |
+| `tokens-only-colors` | themekit | `tokenPrefix` | — |
+| `unique-query-step-name` | backend-medusa | `queryStepCalls` | Medusa |
+| `worker-handles-are-scoped` | backend-d1 | `within` | — |
+| `zustand-v5-best-practices` | frontend | — | — |
+
+Preset sizes: frontend 39 · backend-workflows 15 · backend-medusa 13 · tenant-scoping 3 · testbed 3 · tooling 3 · backend-d1 2 · themekit 2 · backend-workflows-cf 1 · backend-trpc 1 · integrations 1 · package-subpaths 1 · comment-ceiling 1 · failure-paths 1.
+
+<!-- END GENERATED INVENTORY -->
+
+`comment-ceiling` also carries `capitalized-comments`, which is oxlint's own and only makes sense alongside the density rule.
 
 `backend-workflows` and `backend-medusa` OVERLAP by two: `mutating-step-declares-retry` and
 `step-declares-compensation-or-none` reach both engines' spellings — measured in 026-W2, and true of
@@ -803,6 +812,96 @@ downgrade wearing a preset change. `unique-query-step-name` stays Medusa's alone
 reports is that framework's step-handler map last-winning, and a repeated step name on the org
 engine is DEFINED rather than lost (`reserve`, `reserve#2`, the engine's `reserveName`).
 
+## Where each rule came from
+
+Hand-kept: the two source trees are history, and no source object carries which of them held a rule. A rule the kit wrote is a row here marked **written here**; the counts at the top and the inventory under Presets are generated (`pnpm generate:rules-doc`).
+
+| Rule | Core | In a Medusa storefront | In a Workers + D1 app | Same code |
+|---|---|---|---|---|
+| `atom-no-deps` | `directionRule` | yes | yes | diverged |
+| `boundary-time-is-primitive` | `nodes` + `paths` + `options` | — | — | **written here** (D-050, #145) |
+| `cell-must-be-stateful` | `paths` | yes | — | a Medusa storefront only |
+| `cell-must-not-compose-cell` | `directionRule` + `cells-barrel` | yes | yes | diverged |
+| `cell-no-cross-feature-organelles` | `directionRule` | — | — | **written here** |
+| `cell-no-tissues` | `directionRule` | yes | yes | diverged |
+| `cells-folder-index-is-barrel` | `paths` + `cells-barrel` | yes | yes | diverged |
+| `compound-must-be-stateless` | `paths` | yes | yes | diverged |
+| `compound-no-stores` | `directionRule` | yes | yes | diverged |
+| `constants-in-constants-file` | `paths` | — | yes | a Workers + D1 app only |
+| `dialect-through-the-seam` | `onImportSource` + `mergeVisitors` + `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `durable-body-reads-through-steps` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (#167, design-026 §8) |
+| `effect-hook-naming` | `paths` | yes | yes | diverged |
+| `hermetic-e2e-no-wall-clock-waits` | `nodes` + `paths` + `options` | — | — | **written here** (#6) |
+| `icon-control-has-name` | `nodes` + `options` | — | — | **written here** |
+| `emit-declares-attempts` | `options` | — | — | **written here** |
+| `font-roles-only` | `paths` + `options` + `styling` | — | — | **written here** (U2) |
+| `layer-walls` | `onImportSource` + `imports` + `paths` + `options` | — | — | **written here** |
+| `list-take-without-order` | `nodes` + `options` | — | — | **written here** (#21) |
+| `max-comment-density` | `paths` | — | yes | a Workers + D1 app only |
+| `molecule-atoms-only` | `directionRule` | yes | yes | diverged |
+| `molecule-must-compose` | — | yes | yes | diverged |
+| `mutating-step-declares-retry` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (a Medusa storefront's scan R5.2) |
+| `named-when-block` | `nodes` + `options` | — | — | **written here** (a Medusa storefront's scan R5.5) |
+| `next-route-segment-is-thin-delegate` | `paths` | yes | yes | diverged |
+| `no-unregistered-plugin-dir` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs; flat seam #36) |
+| `no-mock-db-in-integration` | `options` + `paths` | — | — | **written here** (Midday's 35 mocked router suites) |
+| `router-schema-parity` | `options` + `paths` | — | — | **written here** (a Workers + D1 app's mirror) |
+| `no-brand-names` | `paths` + `options` | yes | — | a Medusa storefront only |
+| `no-card-shaped-div` | — | yes | yes | diverged |
+| `no-cross-feature-stores` | `directionRule` | yes | yes | diverged |
+| `no-d1-transaction` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-date-string-compare` | `nodes` + `options` | — | — | **written here** (#20) |
+| `no-duplicate-jsx-patterns` | `paths` | yes | yes | diverged |
+| `no-generic-utility-package` | `paths` + `options` | — | — | **written here** (#171) |
+| `no-hook-in-component-disguise` | `paths` | yes | yes | diverged |
+| `no-index-count-as-exact` | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
+| `no-inert-hidden-jsx` | `paths` | yes | yes | diverged |
+| `no-inline-data-in-jsx` | `paths` | yes | yes | diverged |
+| `no-invalid-feature-folders` | `paths` | yes | yes | diverged |
+| `no-loader-side-effect-in-index-file` | `nodes` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan #15442) |
+| `no-logic-in-component-files` | `paths` | yes | yes | diverged |
+| `plugin-route-namespaced` | `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R3.8) |
+| `no-orm-outside-db` | `directionRule` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-raw-html-atoms` | `tiers` + `options` | yes | yes | diverged |
+| `no-raw-sql-outside-allowed` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-react-namespace` | — | yes | yes | **identical** |
+| `no-renamed-html-props` | — | yes | yes | **identical** |
+| `no-render-prop-reader` | `paths` | yes | yes | diverged |
+| `no-swallowed-catch` | `nodes` + `paths` + `options` | — | — | **written here** (#3) |
+| `no-runtime-dead-affordance` | `options` | — | — | **written here** (#5) |
+| `no-trivial-wrapper-component` | `paths` | yes | yes | diverged |
+| `no-ts-in-bio-folders` | `paths` | yes | yes | diverged |
+| `no-type-definitions-in-components` | `paths` | yes | yes | diverged |
+| `no-void-port` | — | — | yes | a Workers + D1 app only |
+| `organelle-dependency` | `directionRule` | yes | yes | diverged |
+| `organelle-single-source` | `onImportSource` + `mergeVisitors` + `paths` | yes | yes | diverged |
+| `queries-require-org-scope` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `queue-loop-is-the-library` | — | — | yes | a Workers + D1 app only |
+| `route-no-inline-mutation` | `nodes` + `paths` + `comments` + `options` | — | — | **written here** (a Medusa storefront's scan R5.1) |
+| `service-name-not-reserved` | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
+| `ssot-no-inline-facts` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `ssot-no-process-env` | `paths` | — | yes | a Workers + D1 app only |
+| `step-declares-compensation-or-none` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (Medusa source) |
+| `step-opens-its-own-cell` | `nodes` + `objects` + `paths` + `options` | — | yes | a Workers + D1 app only, re-targeted |
+| `store-route-scopes-tenant-data` | `nodes` + `imports` + `paths` + `options` | yes | — | a Medusa storefront only, de-hardcoded |
+| `subpath-over-barrel` | `nodes` + `options` | — | — | **written here** (#180, a Workers + D1 app asked) |
+| `subscriber-declares-id` | `objects` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R5.4) |
+| `tables-declare-their-plane` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `tenant-tables-carry-org-id` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `test-no-clock-polling-for-promise-flips` | `nodes` + `paths` + `options` | — | — | **written here** (#4) |
+| `tokens-only-colors` | `paths` + `options` + `styling` + `colors` | — | — | **written here** (U2) |
+| `time-through-the-door` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `tissue-must-compose` | `paths` | yes | yes | diverged |
+| `tissue-no-data-props` | `paths` | yes | yes | diverged |
+| `tissue-no-fetch` | `paths` | — | — | **written here** (D-095 9) |
+| `tissue-no-hooks` | `paths` | yes | yes | diverged |
+| `tissue-no-organelles` | `directionRule` | yes | yes | diverged |
+| `tissue-no-stores` | `directionRule` | yes | yes | diverged |
+| `todo-names-its-plan` | `comments` + `options` | — | — | **written here** (W28) |
+| `unique-query-step-name` | `nodes` + `objects` + `options` | — | — | **written here** (a Medusa storefront's scan R4.3) |
+| `worker-handles-are-scoped` | `paths` + `options` | — | yes (as `cell-handles-are-scoped`) | a Workers + D1 app only, de-hardcoded |
+| `zustand-v5-best-practices` | — | yes | yes | **identical** |
+
 ## The build
 
 Two builds existed. A Workers + D1 app's `package.json` resolves `.` through a `bun` condition to
@@ -879,6 +978,7 @@ option not named here is one no rule reads.
 | `effect-hook-naming` | — |
 | `emit-declares-attempts` | `budgetHelpers`, `emitters` |
 | `font-roles-only` | `allow`, `exemptModules`, `prefix`, `roles` |
+| `hermetic-e2e-no-wall-clock-waits` | `clockWaits`, `listEndpoints`, `networkWaits`, `specs` |
 | `icon-control-has-name` | `controls`, `icons` |
 | `layer-walls` | `externals`, `layers`, `typeOnly` |
 | `list-take-without-order` | `callees`, `orderKeys` |
@@ -894,8 +994,8 @@ option not named here is one no rule reads.
 | `no-d1-transaction` | `except`, `transacts` |
 | `no-date-string-compare` | `fieldPattern` |
 | `no-duplicate-jsx-patterns` | — |
-| `no-generic-utility-package` | `entries`, `names` |
-| `no-hook-in-component-disguise` | — |
+| `no-generic-utility-package` | `allow`, `entries`, `names` |
+| `no-hook-in-component-disguise` | `clientBoundary` |
 | `no-index-count-as-exact` | `estimateFields`, `labelKey` |
 | `no-inert-hidden-jsx` | — |
 | `no-inline-data-in-jsx` | — |
@@ -937,7 +1037,8 @@ option not named here is one no rule reads.
 | `time-through-the-door` | `door`, `exempt`, `exemptModules`, `libraries` |
 | `tissue-must-compose` | — |
 | `tissue-no-data-props` | — |
-| `tissue-no-hooks` | — |
+| `tissue-no-fetch` | — |
+| `tissue-no-hooks` | `contextHooks` |
 | `tissue-no-organelles` | — |
 | `tissue-no-stores` | — |
 | `todo-names-its-plan` | `id`, `markers` |

package/corpus/.oxlintrc.json

@@ -171,6 +171,10 @@
       ]
     ],
     "biological-architecture/no-raw-sql-outside-allowed": "error",
+    "biological-architecture/hermetic-e2e-no-wall-clock-waits": [
+      "error",
+      { "listEndpoints": ["corpus-orders$"] }
+    ],
     "biological-architecture/icon-control-has-name": "error",
     "biological-architecture/no-react-namespace": "error",
     "biological-architecture/no-runtime-dead-affordance": [
@@ -331,6 +335,7 @@
       }
     ],
     "biological-architecture/tissue-no-data-props": "error",
+    "biological-architecture/tissue-no-fetch": "error",
     "biological-architecture/tissue-no-hooks": "error",
     "biological-architecture/tissue-no-organelles": "error",
     "biological-architecture/tissue-no-stores": "error",

package/corpus/data/bad-dynamic-orm.ts

@@ -0,0 +1,5 @@
+export const load = async () => {
+  const { eq } = await import('drizzle-orm')
+
+  return eq
+}

package/corpus/data/bad-type-only-orm.ts

@@ -0,0 +1,3 @@
+import type { SQL } from 'drizzle-orm'
+
+export type Predicate = SQL

package/corpus/e2e/bad-list-response.spec.ts

@@ -0,0 +1,5 @@
+declare const page: { waitForResponse: (match: RegExp) => Promise<void> }
+
+export const buys = async (): Promise<void> => {
+  await page.waitForResponse(/corpus-orders/)
+}

package/corpus/e2e/bad-timeout.spec.ts

@@ -0,0 +1,5 @@
+declare const page: { waitForTimeout: (ms: number) => Promise<void> }
+
+export const buys = async (): Promise<void> => {
+  await page.waitForTimeout(2000)
+}

package/corpus/e2e/good-detail-response.spec.ts

@@ -0,0 +1,5 @@
+declare const page: { waitForResponse: (match: RegExp) => Promise<void> }
+
+export const buys = async (): Promise<void> => {
+  await page.waitForResponse(/corpus-orders-one/)
+}

package/corpus/e2e/good-state.spec.ts

@@ -0,0 +1,5 @@
+declare const expectVisible: (name: string) => Promise<void>
+
+export const buys = async (): Promise<void> => {
+  await expectVisible('order placed')
+}

package/corpus/manifest.json

@@ -16,6 +16,7 @@
     "biological-architecture/effect-hook-naming",
     "biological-architecture/emit-declares-attempts",
     "biological-architecture/font-roles-only",
+    "biological-architecture/hermetic-e2e-no-wall-clock-waits",
     "biological-architecture/icon-control-has-name",
     "biological-architecture/layer-walls",
     "biological-architecture/list-take-without-order",
@@ -74,6 +75,7 @@
     "biological-architecture/time-through-the-door",
     "biological-architecture/tissue-must-compose",
     "biological-architecture/tissue-no-data-props",
+    "biological-architecture/tissue-no-fetch",
     "biological-architecture/tissue-no-hooks",
     "biological-architecture/tissue-no-organelles",
     "biological-architecture/tissue-no-stores",

package/corpus/tissues/bad-awaits-data.tsx

@@ -0,0 +1,8 @@
+import { ProductGrid } from '../cells/product-grid'
+import { loadProducts } from '../lib/load-products'
+
+export async function BadAwaitsData() {
+  const products = await loadProducts()
+
+  return <ProductGrid products={products} />
+}

package/corpus/tissues/bad-fetches-data.tsx

@@ -0,0 +1,7 @@
+import { ProductGrid } from '../cells/product-grid'
+
+export function BadFetchesData() {
+  const pending = fetch('/api/products')
+
+  return <ProductGrid pending={pending} />
+}

package/corpus/tissues/good-takes-products.tsx

@@ -0,0 +1,5 @@
+import { ProductGrid } from '../cells/product-grid'
+
+export function GoodTakesProducts({ products }: { products: string[] }) {
+  return <ProductGrid products={products} />
+}