@geonosis/oxlint-plugin-biological-architecture 3.1.0 → 3.3.0

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # @geonosis/oxlint-plugin-biological-architecture
 
+## 3.3.0
+
+### Minor Changes
+
+- 17dc880: `list-take-without-order` reads the D1 stack's three spellings of a page read in no order, and joins the `backend-d1` preset (#72): a Drizzle select chain with `.limit()` and no `.orderBy()`; a relational `findMany({ limit })` with no `orderBy`, or a `findFirst` — `LIMIT 1` — with no `orderBy`; and on the raw binding a `prepare()` SELECT with LIMIT and no ORDER BY, or a `.first()` over a SELECT with no ORDER BY (D1's `.first()` does not alter the statement). A `where` that is `eq(t.<unique>, …)`, or a SQL WHERE `<unique> = ?` with no OR, pins the row; the columns are the new `uniqueColumns` option (default `id`). An aggregate SELECT with no GROUP BY is one row. The rule now presumes no single engine. A `backend-d1` repo sees new findings where these spellings occur.
+
+### Patch Changes
+
+- fb08b28: A refusal that stands in for every file a rule did not read (a rule enabled without an option, a root import with no package resolving) is carried by the lexically first file the rule judges, not the first file oxlint happens to visit, so two runs of one tree print the same lines. The file is read off the command line, a JSON config and `git ls-files`; a run the plugin cannot read behaves as before. `unresolvedPackage` is now said once in a file, not once in a run. The varying counts reported for `ssot-no-inline-facts`, `constants-in-constants-file`, `max-comment-density` and `ssot-no-process-env` were not those rules: oxlint 1.87 on macOS drops lines of its stdout when it is a shell pipe, and a plugin with one rule that reports every string shows it. The README says so.
+- fb08b28: `GEONOSIS_LINT_TIMING=1` makes the plugin time each rule's visitor set-up and handlers and print the slowest ten to stderr when the run ends; `GEONOSIS_LINT_TIMING_TOP` lists more and `GEONOSIS_LINT_TIMING_FILE` writes every rule as JSON (#53). Without the variable nothing is measured. The timing found where one lint of this repo spent its time: the workspace and `node_modules` lookups read manifests on every import, every `directionRule` recomputed an import's landings, `no-orm-outside-db` computed them for imports of anything, and `test-no-clock-polling-for-promise-flips` walked every function of a test that names no `waitFor`. Lookups are now kept for one second, an import's landings are computed once for all direction rules, and the two rules skip what they cannot report; no rule's findings change, and the whole lint of this repo takes 29% less CPU (7.2 s to 5.1 s on average over five runs each).
+- fb08b28: `list-take-without-order` no longer judges test files by default (`__tests__/`, `.test.`, `.spec.`, `integration-tests/`): the row a fixture takes does not matter, and 72 of one tree's 198 findings were fixtures. `exempt` replaces that list and `exempt: []` judges test files again; a baseline keyed on the old count falls by the test findings. A literal `take` above 1 from the first row, whose result is iterated, counted or handed whole to another call, now gets the message `truncated` ("reads at most N rows and the code treats them as all of them") instead of "name the column", which left the dropped rows dropped. Since 3.2.1, a capped read used as if complete is reported even when it names an order, because ordering does not make the cap all the rows; the count may rise. Same rule id throughout, so no consumer's counter changes by key.
+- fb08b28: `tokens-only-colors`: since 3.2.0 the rule also reads colour literals in plain object properties, which is why a count rose without a change in the code (one Medusa storefront went from 3 to 69 findings; the 3.2.0 entry named only Tailwind variants). A theme passed to `defineTheme` (or to `compile`, `toDtcg`, `emitVariables`, `valueAt`) from `@geonosis/themekit` is the token layer and is no longer judged, whether the object is written in the call or held in a `const` of the same file. So is an object literal typed as a themekit palette type (`Theme`, `ThemeColors`, `ThemeMode` and the other types a `Theme` is made of) imported from `@geonosis/themekit`, by a `const` annotation, `satisfies` or `as`, so a brand theme defined in its own module is covered too; a local type of the same name is not. Their `exemptModules` entries can go. The new option `ignoreKeys` names property keys whose values are data that only look like colours (a shader's mask channels); it is empty by default and changes nothing until set.
+
+## 3.2.0
+
+### Minor Changes
+
+- a4a7bba: Thirty-four rules the kit enables now declare a probe, so the doctor's `exercised` can ask them whether they reach anything and `probelessRules` falls with them. A direction rule declares its probe beside its scope.
+  
+  New rule `hermetic-e2e-no-wall-clock-waits` (preset `testbed`): in an end-to-end spec a fixed-time wait (`waitForTimeout`, a `setTimeout` sleep) is reported, and a `waitForResponse` on a list endpoint is reported for the endpoints `listEndpoints` names. `specs`, `clockWaits` and `networkWaits` are options.
+  
+  `worker-handles-are-scoped` accepts the wrapper as a member call (`cellOf(env).withConnection(...)`). `no-generic-utility-package` takes `allow: [{ package, exports }]` for the one door a generic name survives to hold, and reports a second export. `no-hook-in-component-disguise` takes `clientBoundary` (`false`, or the paths the directive is honoured under); its message no longer teaches the directive where it is withdrawn. `tissue-no-hooks` takes `contextHooks`, a list that is empty until the repo writes it and never excuses React's state hooks. `tokens-only-colors` reads a colour in a plain object, not only in a JSX style, an attribute or a default. `organelle-single-source` counts the sources of the sibling organelle hooks a file calls. `tissue-no-data-props` reads a props type named instead of written inline, from the declaration beside it or the file it is imported from, and its message says an inferred `any` belongs to the type-checker's rules. `cells-folder-index-is-barrel` reports a `cells/` file that only re-exports an organelle.
+  
+  `subpath-over-barrel` expands a door written as a pattern (`./icons/*`) by listing the files its target names, reads the workspace membership (`pnpm-workspace.yaml`, `package.json` `workspaces`) as the repo's own packages where the linker writes no `node_modules`, re-reads a manifest when its mtime changes, and says once a run when an opted-in package resolves to nothing or the tree resolves no package at all.
+  
+  A rule that throws a `SyntaxError` — a pattern option that is not a regular expression — is reported as one finding naming the rule, once a run, and no longer erases the file's other findings.
+- a4a7bba: A dynamic `import()` or `require()` that is destructured — `const { Real } = await import('../cells')` — takes the names the pattern spells, as `import { Real }` does, so the other names the barrel carries are not its reach; a rest element, a computed key or a result bound to one name still takes the whole module. A solution-style `tsconfig.json` (no `paths`, only `references`) leaves the aliases to the referenced project that declares `paths` and includes the importing directory.
+  
+  The tier folder is read in one place: a molecule, and the molecules/compounds/organelles/cells/layouts the card and prop-name rules police, are recognised when the path starts at the folder as well as when it is absolute, and a folder that only ends in a tier name is not that tier. `queue-loop-is-the-library` exempts a test through the shared reader, so a path relative to the working directory is exempt too. The cell and tissue private-sibling suffixes share one list.
+  
+  A refusal for a missing option reports `data: { option, rule }` beside its sentence. `src/registry.ts` is generated from the rule modules on disk (`pnpm generate:registry`), and `RULES.md` carries a generated inventory (presets, required option, presumed engine) and summary beside a hand-kept provenance table.
+- 58eaf3a: `organelle-dependency`, `tissue-no-organelles`, `atom-no-deps`, `molecule-atoms-only` and `compound-no-stores` judge a specifier that begins with a tier folder or `app/` (`cells/editor`, written against a baseUrl); `tissue-must-compose`, `molecule-must-compose`, `next-route-segment-is-thin-delegate` and `no-trivial-wrapper-component` no longer report a file whose composed import is spelled that way.
+- 58eaf3a: `no-inert-hidden-jsx` reads `className={'hidden'}` and a hole-free template literal as it reads `className="hidden"`.
+- 58eaf3a: `no-logic-in-component-files` counts a default-exported component and a component named in capitals (`FAQ`, `CTA`), which it skipped, and judges each declarator's own thinness. A capitalised name counts only when it is a function that returns JSX, so a helper such as `export const API = () => fetch(...)` stays out of the count.
+- 58eaf3a: `effect-hook-naming` reads `React.useEffect` and `React.useLayoutEffect`, and judges the name of a default-exported hook.
+- 58eaf3a: `no-runtime-dead-affordance` reads a handler as `on` followed by a capital, so a prop such as `only` or `once` no longer keeps a dead control alive. A lowercase `onclick` is no longer a handler either, and a control carrying only that is now reported: React does not attach it and warns, so it is a dead control there. A Preact-style tree that spells handlers in lowercase will see it.
+- 58eaf3a: `tokens-only-colors` and `font-roles-only` read an arbitrary value through Tailwind variants and the important modifier — `data-[state=open]:bg-[#fff]`, `[&>span]:bg-[#fff]`, `!bg-[#fff]` — which they skipped.
+- a4a7bba: `store-route-scopes-tenant-data` is in `backend-medusa` only. It presumes Medusa's `/api/store/**` route layout, and `tenant-scoping` is for a repo of any stack, so a Workers + D1 app that enabled `tenant-scoping` carried a rule that judged nothing there. A repo on Medusa that enables `tenant-scoping` without `backend-medusa` no longer gets this rule: add `backend-medusa`. A scaffold's Medusa answer already names both.
+- dd5f57a: A tier rule now declares the tier folder it reaches (`rule.tier`), and `unreachableTierRules` counts the tier rules enabled over a workspace that ships tier folders but none of that rule's tier: they have no possible finding and print what a clean tree prints. A workspace with no tier folder is not judged; a plugin that declares no tier is a refusal.
+  
+  `geonosis-ratchet --prove` now plants the tool failing as well as a finding. A counter must answer a failing tool with a `CounterError`, and a counter that ships no `refuses` probe reads UNPROVEN. The report names a counter's halves (`PROVEN archViolations (command)`, `UNPROVEN archViolations (match)`) and the summary counts halves. A counter you wrote needs `refuses: { input?, command?, params? }` beside its `probe`.
+  
+  A named `roots` entry of `commentLines`, `suppressionCount` and `orphanTodos` that is not a directory is now a refusal rather than zero findings, and a `pnpm-workspace.yaml` that does not parse refuses the counters that read it.
+  
+  A win one counter measured is now written to the baseline even when another counter could not be measured (a floor whose `dist/` is not built no longer holds every other floor's win back); the run still fails at the refusal and says which number was lowered.
+  
+  `waitForBuild(root)` and `buildLockPath(root)` are exported for a tier that must not run beside a build.
+  
+  `typecheckErrors` takes a `report` in place of a `command`: it reads the `{ errors, tree }` file a typecheck step wrote and refuses one whose tree is not the working tree in front of it, naming both digests, so `verify:release` no longer runs the same tsc program twice. `treeHashOf(cwd)` is exported for the step that writes it.
+- a4a7bba: `tissue-no-fetch`, in the `frontend` preset: a file in a `tissues/` folder that contains an `await`, a `for await` loop or a call to `fetch` (bare, or through `globalThis`, `window` or `self`) waits for data, so the tissue owns it. A tissue arranges data it was handed; the read belongs in a loader the route segment calls. Tests, specs and stories beside a tissue are left alone, and so is every other tier. It needs no option to run.
+
+### Patch Changes
+
+- a4a7bba: The plugin README lists the five oxlint built-ins that fire on idioms the presets ask for (`no-await-in-loop`, `unicorn/no-useless-undefined`, `unicorn/consistent-function-scoping`, `unicorn/throw-new-error`, `no-underscore-dangle`), measured on oxlint 1.87.0, with the config that quiets the four an override or option can reach and the rewrite for the loop. The kit's `tiers.md` rule file says what "inert below the organelle" means: no app or shared state (no store, no data); local UI state such as an open flag is allowed in an atom or a molecule, and a compound holds none. `gates.md` separates adopting a counter, which the ratchet writes and does not judge, from raising a baseline to make a gate go green, which stays forbidden. `geonosis-doctor`'s `rules` check compares against these copies.
+- 58eaf3a: `icon-control-has-name` no longer reports a control whose icon names itself: an icon with its own `aria-label` or `aria-labelledby` (an icon component must forward it to its svg), or an `<svg>` holding a `<title>`, is the control's accessible name. A `title` attribute on an icon or an `<svg>` is not an accessible name and is still reported.
+- f5632b7: `step-declares-compensation-or-none` declares a `probe`, so a repo that enables it for one directory (an override with a `files` glob) is judged by the doctor's `exercised` check instead of being skipped for want of a probe (#131).
+
 ## 3.1.0
 
 ### Minor Changes

package/README.md

@@ -1,6 +1,6 @@
 # @geonosis/oxlint-plugin-biological-architecture
 
-81 architecture rules as an oxlint JS plugin: which tier a file belongs to, what it may import,
+83 architecture rules as an oxlint JS plugin: which tier a file belongs to, what it may import,
 where state is allowed to live, and the backend invariants that go with them. Nothing is hardcoded
 to a repo — every list of brands, features, tables or paths is an option. A rule enabled without the
 options it needs says so once a run and judges nothing, rather than passing silently.
@@ -51,20 +51,21 @@ atoms → molecules → compounds → organelles → cells → tissues
 ```
 
 State lives **only** at the organelle and cell tiers. Everything above the cell arranges;
-everything below the organelle is inert. A cell never composes another cell.
+everything below the organelle holds no app or shared state (no store, no data) — local UI state
+such as an open flag is allowed there. A cell never composes another cell.
 
 ## Presets
 
 | preset | rules | what it is |
 | --- | --- | --- |
-| `frontend` (= `recommended`) | 38 | tier direction, state placement, element choice, file shape |
+| `frontend` (= `recommended`) | 39 | tier direction, state placement, element choice, file shape |
 | `backend-workflows` | 15 | workflows, time, the data layer, single source of truth |
 | `backend-medusa` | 13 | Medusa steps, emits, subscribers, loaders and the store route surface |
-| `tenant-scoping` | 4 | every row placed, scoped and narrowed to one tenant |
+| `tenant-scoping` | 3 | every row placed, scoped and narrowed to one tenant |
 | `tooling` | 3 | a repo's own layers as data, no generic `utils` package, debt markers name a plan |
-| `backend-d1` | 2 | Cloudflare D1 facts — false on an engine with transactions |
+| `backend-d1` | 3 | Cloudflare D1: no transactions, scoped handles, and a page read in no order (Drizzle and the raw binding) |
 | `themekit` | 2 | colours and fonts only through the theme's tokens and roles |
-| `testbed` | 2 | integration suites run on a real database; tests await rather than poll |
+| `testbed` | 3 | integration suites run on a real database; tests await rather than poll |
 | `backend-trpc` | 1 | every router has its schema, and every schema its router |
 | `backend-workflows-cf` | 1 | durable runs on Cloudflare Workflows — false of an inline run |
 | `failure-paths` | 1 | no catch that swallows the failure it caught |
@@ -75,6 +76,48 @@ everything below the organelle is inert. A cell never composes another cell.
 A rule that is false on another stack gets its own preset rather than riding along in a generic
 one: a preset carrying a repo fact is a repo fact wearing a preset's name.
 
+## Oxlint built-ins that disagree with an idiom
+
+Five built-in oxlint rules (measured on oxlint 1.87.0) fire on code the kit's own presets ask for.
+They are oxlint's rules, not this plugin's, and the fix for four of them is in the repo's
+`.oxlintrc.json`; an upstream change is oxc's to make. Turning a built-in off for a glob is law 2's
+"ask first" when the repo has it at `error`, and the reason goes beside the override.
+
+```json
+{
+  "rules": {
+    "no-underscore-dangle": ["error", { "allow": ["_tag"] }]
+  },
+  "overrides": [
+    {
+      "files": ["**/*.test.ts"],
+      "rules": {
+        "unicorn/consistent-function-scoping": "off",
+        "unicorn/no-useless-undefined": "off"
+      }
+    }
+  ]
+}
+```
+
+- **`no-await-in-loop`** has no small-bound allowance, and a bounded, deliberately sequential loop
+  (policy reads that journal, two iterations) is flagged. A `for await` loop is not flagged, so write
+  the sequence as one: an async generator that `yield`s each step's promise, consumed with
+  `for await`. The generator runs one step per pull. The other answer is an override naming the file
+  that holds the loop.
+- **`unicorn/no-useless-undefined`** fires on `mockResolvedValue(undefined)`, the idiom for "resolves
+  to nothing"; `null` changes the assertion. The override above is for test files.
+- **`unicorn/consistent-function-scoping`** hoists an arrange-act-assert helper out of the `describe`
+  that explains it. Same override.
+- **`unicorn/throw-new-error`** matches any call whose callee name ends in `Error`, including the
+  `extends` clause of `class SinkFailure extends TaggedError('SinkFailure')<…>() {}`, where nothing
+  is thrown. `better-result`'s factory is named `TaggedError`, so the first error class of a
+  `Result` posture trips it. Import the factory under another name (`import { TaggedError as tagged }
+  from 'better-result'`); that is a rename, not a suppression.
+- **`no-underscore-dangle`** flags `_tag`, `better-result`'s public discriminant. `allow: ["_tag"]`
+  above is the option the rule has for it; where a test can use `matchError` instead, that is the
+  behaviour anyway.
+
 ## Adopting
 
 A repo that already has its own copy of these rules does not delete it because the version numbers
@@ -199,6 +242,32 @@ Then find the stray copy, and mind that the answer is package-manager-specific:
   `.pnpm`. Read the links instead: `ls -l node_modules/@geonosis` in each workspace, and check the
   version in the target path.
 
+## Where the plugin spends its time
+
+`GEONOSIS_LINT_TIMING=1 oxlint …` prints, to stderr when the run ends, the rules that cost the most:
+the time each spent building its visitor (`create`, once per file) and inside its handlers
+(`visit`), and the files it was handed. `GEONOSIS_LINT_TIMING_TOP=25` lists more than the ten
+slowest, and `GEONOSIS_LINT_TIMING_FILE=timing.json` writes every rule as JSON. Without the variable
+nothing is measured and nothing is printed. A rule that pays for a shared index (the workspace and
+`node_modules` lookups, the export tables) pays on its first use, so read the numbers as where a run
+spent its time and not as what one rule costs on its own. The lookups are kept for one second, so a
+host that edits a `package.json` sees the edit within it.
+
+## A run reads the same every time
+
+Every rule's findings are a function of the tree alone. The one thing that was not is where a
+refusal lands: a rule enabled without an option reports once a run, "standing in for every file it did
+not read", and oxlint visits files in an order that changes between runs. When the plugin can read the
+run (oxlint started from the command line, a JSON config, a git checkout) the refusal is carried by the
+lexically first file the rule judges: files git ignores or `ignorePatterns` names are not candidates,
+nor is a file that switches the lint off, nor one an override for that rule matches. In any other run it
+lands on the first file visited, as before.
+
+oxlint 1.87 on macOS loses lines of its own output when its stdout is a shell pipe and the output passes
+the pipe's buffer (`oxlint … | sort`, 6,000 findings: 5,445 to 6,294 lines over six runs; a plugin with one
+rule that reports every string reproduces it). Written to a file, or read by a program that spawns it,
+the same run gives the same lines every time. Count findings from the file, not from a pipeline.
+
 ## Where to read on
 
 - `RULES.md` — in this tarball: every rule, its preset, which source tree it came from, how each

package/RULES.md

@@ -11,13 +11,15 @@ One plugin name, two rule sets, no shared code. **33 rules had the same filename
 
 The union here is **52 rules** — 54 when it was cut, less `document-sagas-are-generic` and
 `documents-share-one-table`, retired in 2.7.0 because both enforced one consumer's document kinds —
-plus twenty-nine the kit wrote for itself: `layer-walls`, `emit-declares-attempts`,
+plus thirty-one the kit wrote for itself: `layer-walls`, `emit-declares-attempts`,
 `cell-no-cross-feature-organelles`, the `backend-medusa` ten, `no-unregistered-plugin-dir` +
 `router-schema-parity`, the `themekit` two, `no-mock-db-in-integration`, `todo-names-its-plan`,
 `boundary-time-is-primitive`, `durable-body-reads-through-steps`, `subpath-over-barrel` and the six
-of the W67 batch, and `icon-control-has-name` — **81**. The two retired ids went in 3.0.0.
-Every one of the twenty-nine is marked **written here** in the inventory, and the table below is
-held against that column rather than kept by hand.
+of the W67 batch, `icon-control-has-name`, `tissue-no-fetch` and `hermetic-e2e-no-wall-clock-waits` — **83**. The two retired ids went in 3.0.0.
+Every one of the thirty-one is marked **written here** in the provenance table, and the counts below
+are generated from that column and from the rules the plugin exports.
+
+<!-- GENERATED: the rules by where they came from -->
 
 | | count |
 |---|---|
@@ -26,8 +28,10 @@ held against that column rather than kept by hand.
 | A Medusa storefront only | 3 |
 | A Workers + D1 app only | 16 |
 | **union** | **52** |
-| written here | 29 |
-| **total** | **81** |
+| written here | 31 |
+| **total** | **83** |
+
+<!-- END GENERATED SUMMARY -->
 
 ## How divergence was resolved
 
@@ -502,8 +506,8 @@ written out and is still reported.
 
 ### `store-route-scopes-tenant-data` (a Medusa storefront only) — Medusa-specific
 
-`/api/store/**/route.ts` is a Medusa convention. It is in `backend-medusa`, and also in
-`tenant-scoping` because that is what it enforces.
+`/api/store/**/route.ts` is a Medusa convention. It is in `backend-medusa` only: `tenant-scoping`
+is for a repo of any stack, and a repo on Medusa gets this rule from `backend-medusa`.
 
 ### `no-logic-in-component-files` — a Medusa storefront's narrowed version
 
@@ -706,94 +710,99 @@ name resolves to the same rules for ONE release and says so once, then goes. `pa
 their `exports` and the entry file behind each door — which is a fact about that repo's layout, not
 every repo's.
 
-| Rule | Preset(s) | Requires | Core | In a Medusa storefront | In a Workers + D1 app | Same code |
-|---|---|---|---|---|---|---|
-| `atom-no-deps` | frontend | — | `directionRule` | yes | yes | diverged |
-| `boundary-time-is-primitive` | backend-workflows | `types` | `nodes` + `paths` + `options` | — | — | **written here** (D-050, #145) |
-| `cell-must-be-stateful` | frontend | — | `paths` | yes | — | a Medusa storefront only |
-| `cell-must-not-compose-cell` | frontend | — | `directionRule` + `cells-barrel` | yes | yes | diverged |
-| `cell-no-cross-feature-organelles` | frontend | — | `directionRule` | — | — | **written here** |
-| `cell-no-tissues` | frontend | — | `directionRule` | yes | yes | diverged |
-| `cells-folder-index-is-barrel` | frontend | — | `paths` + `cells-barrel` | yes | yes | diverged |
-| `compound-must-be-stateless` | frontend | — | `paths` | yes | yes | diverged |
-| `compound-no-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `constants-in-constants-file` | backend-workflows | — | `paths` | — | yes | a Workers + D1 app only |
-| `dialect-through-the-seam` | backend-workflows | `seam` | `onImportSource` + `mergeVisitors` + `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `durable-body-reads-through-steps` | backend-workflows | `ports` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (#167, design-026 §8) |
-| `effect-hook-naming` | frontend | — | `paths` | yes | yes | diverged |
-| `icon-control-has-name` | frontend | — | `nodes` + `options` | — | — | **written here** |
-| `emit-declares-attempts` | backend-medusa | — | `options` | — | — | **written here** |
-| `font-roles-only` | themekit | `roles` | `paths` + `options` + `styling` | — | — | **written here** (U2) |
-| `layer-walls` | tooling | `layers` | `onImportSource` + `imports` + `paths` + `options` | — | — | **written here** |
-| `list-take-without-order` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (#21) |
-| `max-comment-density` | comment-ceiling | — | `paths` | — | yes | a Workers + D1 app only |
-| `molecule-atoms-only` | frontend | — | `directionRule` | yes | yes | diverged |
-| `molecule-must-compose` | frontend | — | — | yes | yes | diverged |
-| `mutating-step-declares-retry` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (a Medusa storefront's scan R5.2) |
-| `named-when-block` | backend-medusa | — | `nodes` + `options` | — | — | **written here** (a Medusa storefront's scan R5.5) |
-| `next-route-segment-is-thin-delegate` | frontend | — | `paths` | yes | yes | diverged |
-| `no-unregistered-plugin-dir` | integrations | `roots` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs; flat seam #36) |
-| `no-mock-db-in-integration` | testbed | `integrationDirs` | `options` + `paths` | — | — | **written here** (Midday's 35 mocked router suites) |
-| `router-schema-parity` | backend-trpc | `routers` | `options` + `paths` | — | — | **written here** (a Workers + D1 app's mirror) |
-| `no-brand-names` | frontend | `brands` | `paths` + `options` | yes | — | a Medusa storefront only |
-| `no-card-shaped-div` | frontend | — | — | yes | yes | diverged |
-| `no-cross-feature-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `no-d1-transaction` | backend-d1 | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-date-string-compare` | backend-workflows | — | `nodes` + `options` | — | — | **written here** (#20) |
-| `no-duplicate-jsx-patterns` | frontend | — | `paths` | yes | yes | diverged |
-| `no-generic-utility-package` | tooling | — | `paths` + `options` | — | — | **written here** (#171) |
-| `no-hook-in-component-disguise` | frontend | — | `paths` | yes | yes | diverged |
-| `no-index-count-as-exact` | backend-medusa | — | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
-| `no-inert-hidden-jsx` | frontend | — | `paths` | yes | yes | diverged |
-| `no-inline-data-in-jsx` | frontend | — | `paths` | yes | yes | diverged |
-| `no-invalid-feature-folders` | frontend | — | `paths` | yes | yes | diverged |
-| `no-loader-side-effect-in-index-file` | backend-medusa | — | `nodes` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan #15442) |
-| `no-logic-in-component-files` | frontend | — | `paths` | yes | yes | diverged |
-| `plugin-route-namespaced` | backend-medusa | `packages` | `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R3.8) |
-| `no-orm-outside-db` | backend-workflows | — | `directionRule` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-raw-html-atoms` | frontend | `element→atom map` | `tiers` + `options` | yes | yes | diverged |
-| `no-raw-sql-outside-allowed` | backend-workflows | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `no-react-namespace` | frontend | — | — | yes | yes | **identical** |
-| `no-renamed-html-props` | frontend | — | — | yes | yes | **identical** |
-| `no-render-prop-reader` | frontend | — | `paths` | yes | yes | diverged |
-| `no-swallowed-catch` | failure-paths | `paths` | `nodes` + `paths` + `options` | — | — | **written here** (#3) |
-| `no-runtime-dead-affordance` | frontend | `element→atom map` | `options` | — | — | **written here** (#5) |
-| `no-trivial-wrapper-component` | frontend | — | `paths` | yes | yes | diverged |
-| `no-ts-in-bio-folders` | frontend | — | `paths` | yes | yes | diverged |
-| `no-type-definitions-in-components` | frontend | — | `paths` | yes | yes | diverged |
-| `no-void-port` | backend-workflows | — | — | — | yes | a Workers + D1 app only |
-| `organelle-dependency` | frontend | — | `directionRule` | yes | yes | diverged |
-| `organelle-single-source` | frontend | — | `onImportSource` + `mergeVisitors` + `paths` | yes | yes | diverged |
-| `queries-require-org-scope` | tenant-scoping | `queries` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `queue-loop-is-the-library` | backend-workflows | — | — | — | yes | a Workers + D1 app only |
-| `route-no-inline-mutation` | backend-medusa | — | `nodes` + `paths` + `comments` + `options` | — | — | **written here** (a Medusa storefront's scan R5.1) |
-| `service-name-not-reserved` | backend-medusa | — | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
-| `ssot-no-inline-facts` | backend-workflows | — | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `ssot-no-process-env` | backend-workflows | — | `paths` | — | yes | a Workers + D1 app only |
-| `step-declares-compensation-or-none` | backend-medusa + backend-workflows | — | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (Medusa source) |
-| `step-opens-its-own-cell` | backend-workflows-cf | `within` | `nodes` + `objects` + `paths` + `options` | — | yes | a Workers + D1 app only, re-targeted |
-| `store-route-scopes-tenant-data` | backend-medusa + tenant-scoping | — | `nodes` + `imports` + `paths` + `options` | yes | — | a Medusa storefront only, de-hardcoded |
-| `subpath-over-barrel` | package-subpaths | — | `nodes` + `options` | — | — | **written here** (#180, a Workers + D1 app asked) |
-| `subscriber-declares-id` | backend-medusa | — | `objects` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R5.4) |
-| `tables-declare-their-plane` | backend-workflows + tenant-scoping | `schema` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `tenant-tables-carry-org-id` | tenant-scoping | `tenant` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `test-no-clock-polling-for-promise-flips` | testbed | — | `nodes` + `paths` + `options` | — | — | **written here** (#4) |
-| `tokens-only-colors` | themekit | `tokenPrefix` | `paths` + `options` + `styling` + `colors` | — | — | **written here** (U2) |
-| `time-through-the-door` | backend-workflows | `door` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
-| `tissue-must-compose` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-data-props` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-hooks` | frontend | — | `paths` | yes | yes | diverged |
-| `tissue-no-organelles` | frontend | — | `directionRule` | yes | yes | diverged |
-| `tissue-no-stores` | frontend | — | `directionRule` | yes | yes | diverged |
-| `todo-names-its-plan` | tooling | `markers` | `comments` + `options` | — | — | **written here** (W28) |
-| `unique-query-step-name` | backend-medusa | `queryStepCalls` | `nodes` + `objects` + `options` | — | — | **written here** (a Medusa storefront's scan R4.3) |
-| `worker-handles-are-scoped` | backend-d1 | `within` | `paths` + `options` | — | yes (as `cell-handles-are-scoped`) | a Workers + D1 app only, de-hardcoded |
-| `zustand-v5-best-practices` | frontend | — | — | yes | yes | **identical** |
-
-Preset sizes: frontend 36 · backend-workflows 16 · backend-medusa 12 · tenant-scoping 4 ·
-backend-d1 2 · tooling 2 · themekit 2 · backend-workflows-cf 1 · backend-trpc 1 · integrations 1 ·
-package-subpaths 1 · testbed 1 · comment-ceiling 1 (+ `capitalized-comments`, which is oxlint's own
-and only makes sense alongside the density rule).
+<!-- GENERATED: the preset, option and engine of each rule -->
+
+| Rule | Preset(s) | Requires | Presumes |
+|---|---|---|---|
+| `atom-no-deps` | frontend | — | — |
+| `boundary-time-is-primitive` | backend-workflows | `types` | — |
+| `cell-must-be-stateful` | frontend | — | — |
+| `cell-must-not-compose-cell` | frontend | — | — |
+| `cell-no-cross-feature-organelles` | frontend | — | — |
+| `cell-no-tissues` | frontend | — | — |
+| `cells-folder-index-is-barrel` | frontend | — | — |
+| `compound-must-be-stateless` | frontend | — | — |
+| `compound-no-stores` | frontend | — | — |
+| `constants-in-constants-file` | backend-workflows | — | — |
+| `dialect-through-the-seam` | backend-workflows | `seam` | — |
+| `durable-body-reads-through-steps` | backend-workflows | `ports` | — |
+| `effect-hook-naming` | frontend | — | — |
+| `emit-declares-attempts` | backend-medusa | — | Medusa |
+| `font-roles-only` | themekit | `roles` | — |
+| `hermetic-e2e-no-wall-clock-waits` | testbed | — | — |
+| `icon-control-has-name` | frontend | — | — |
+| `layer-walls` | tooling | `layers` | — |
+| `list-take-without-order` | backend-d1 + backend-medusa | — | — |
+| `max-comment-density` | comment-ceiling | — | — |
+| `molecule-atoms-only` | frontend | — | — |
+| `molecule-must-compose` | frontend | — | — |
+| `mutating-step-declares-retry` | backend-medusa + backend-workflows | — | — |
+| `named-when-block` | backend-medusa | — | Medusa |
+| `next-route-segment-is-thin-delegate` | frontend | — | — |
+| `no-brand-names` | frontend | `brands` | — |
+| `no-card-shaped-div` | frontend | — | — |
+| `no-cross-feature-stores` | frontend | — | — |
+| `no-d1-transaction` | backend-d1 | — | — |
+| `no-date-string-compare` | backend-workflows | — | — |
+| `no-duplicate-jsx-patterns` | frontend | — | — |
+| `no-generic-utility-package` | tooling | — | — |
+| `no-hook-in-component-disguise` | frontend | — | — |
+| `no-index-count-as-exact` | backend-medusa | — | Medusa |
+| `no-inert-hidden-jsx` | frontend | — | — |
+| `no-inline-data-in-jsx` | frontend | — | — |
+| `no-invalid-feature-folders` | frontend | — | — |
+| `no-loader-side-effect-in-index-file` | backend-medusa | — | Medusa |
+| `no-logic-in-component-files` | frontend | — | — |
+| `no-mock-db-in-integration` | testbed | `integrationDirs` | — |
+| `no-orm-outside-db` | backend-workflows | — | — |
+| `no-raw-html-atoms` | frontend | `element→atom map` | — |
+| `no-raw-sql-outside-allowed` | backend-workflows | — | — |
+| `no-react-namespace` | frontend | — | — |
+| `no-renamed-html-props` | frontend | — | — |
+| `no-render-prop-reader` | frontend | — | — |
+| `no-runtime-dead-affordance` | frontend | `element→atom map` | — |
+| `no-swallowed-catch` | failure-paths | `paths` | — |
+| `no-trivial-wrapper-component` | frontend | — | — |
+| `no-ts-in-bio-folders` | frontend | — | — |
+| `no-type-definitions-in-components` | frontend | — | — |
+| `no-unregistered-plugin-dir` | integrations | `roots` | — |
+| `no-void-port` | backend-workflows | — | — |
+| `organelle-dependency` | frontend | — | — |
+| `organelle-single-source` | frontend | — | — |
+| `plugin-route-namespaced` | backend-medusa | `packages` | Medusa |
+| `queries-require-org-scope` | tenant-scoping | `queries` | — |
+| `queue-loop-is-the-library` | backend-workflows | — | — |
+| `route-no-inline-mutation` | backend-medusa | — | Medusa |
+| `router-schema-parity` | backend-trpc | `routers` | — |
+| `service-name-not-reserved` | backend-medusa | — | Medusa |
+| `ssot-no-inline-facts` | backend-workflows | — | — |
+| `ssot-no-process-env` | backend-workflows | — | — |
+| `step-declares-compensation-or-none` | backend-medusa + backend-workflows | — | — |
+| `step-opens-its-own-cell` | backend-workflows-cf | `within` | — |
+| `store-route-scopes-tenant-data` | backend-medusa | — | Medusa |
+| `subpath-over-barrel` | package-subpaths | — | — |
+| `subscriber-declares-id` | backend-medusa | — | Medusa |
+| `tables-declare-their-plane` | backend-workflows + tenant-scoping | `schema` | — |
+| `tenant-tables-carry-org-id` | tenant-scoping | `tenant` | — |
+| `test-no-clock-polling-for-promise-flips` | testbed | — | — |
+| `time-through-the-door` | backend-workflows | `door` | — |
+| `tissue-must-compose` | frontend | — | — |
+| `tissue-no-data-props` | frontend | — | — |
+| `tissue-no-fetch` | frontend | — | — |
+| `tissue-no-hooks` | frontend | — | — |
+| `tissue-no-organelles` | frontend | — | — |
+| `tissue-no-stores` | frontend | — | — |
+| `todo-names-its-plan` | tooling | `markers` | — |
+| `tokens-only-colors` | themekit | `tokenPrefix` | — |
+| `unique-query-step-name` | backend-medusa | `queryStepCalls` | Medusa |
+| `worker-handles-are-scoped` | backend-d1 | `within` | — |
+| `zustand-v5-best-practices` | frontend | — | — |
+
+Preset sizes: frontend 39 · backend-workflows 15 · backend-medusa 13 · backend-d1 3 · tenant-scoping 3 · testbed 3 · tooling 3 · themekit 2 · backend-workflows-cf 1 · backend-trpc 1 · integrations 1 · package-subpaths 1 · comment-ceiling 1 · failure-paths 1.
+
+<!-- END GENERATED INVENTORY -->
+
+`comment-ceiling` also carries `capitalized-comments`, which is oxlint's own and only makes sense alongside the density rule.
 
 `backend-workflows` and `backend-medusa` OVERLAP by two: `mutating-step-declares-retry` and
 `step-declares-compensation-or-none` reach both engines' spellings — measured in 026-W2, and true of
@@ -803,6 +812,96 @@ downgrade wearing a preset change. `unique-query-step-name` stays Medusa's alone
 reports is that framework's step-handler map last-winning, and a repeated step name on the org
 engine is DEFINED rather than lost (`reserve`, `reserve#2`, the engine's `reserveName`).
 
+## Where each rule came from
+
+Hand-kept: the two source trees are history, and no source object carries which of them held a rule. A rule the kit wrote is a row here marked **written here**; the counts at the top and the inventory under Presets are generated (`pnpm generate:rules-doc`).
+
+| Rule | Core | In a Medusa storefront | In a Workers + D1 app | Same code |
+|---|---|---|---|---|
+| `atom-no-deps` | `directionRule` | yes | yes | diverged |
+| `boundary-time-is-primitive` | `nodes` + `paths` + `options` | — | — | **written here** (D-050, #145) |
+| `cell-must-be-stateful` | `paths` | yes | — | a Medusa storefront only |
+| `cell-must-not-compose-cell` | `directionRule` + `cells-barrel` | yes | yes | diverged |
+| `cell-no-cross-feature-organelles` | `directionRule` | — | — | **written here** |
+| `cell-no-tissues` | `directionRule` | yes | yes | diverged |
+| `cells-folder-index-is-barrel` | `paths` + `cells-barrel` | yes | yes | diverged |
+| `compound-must-be-stateless` | `paths` | yes | yes | diverged |
+| `compound-no-stores` | `directionRule` | yes | yes | diverged |
+| `constants-in-constants-file` | `paths` | — | yes | a Workers + D1 app only |
+| `dialect-through-the-seam` | `onImportSource` + `mergeVisitors` + `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `durable-body-reads-through-steps` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (#167, design-026 §8) |
+| `effect-hook-naming` | `paths` | yes | yes | diverged |
+| `hermetic-e2e-no-wall-clock-waits` | `nodes` + `paths` + `options` | — | — | **written here** (#6) |
+| `icon-control-has-name` | `nodes` + `options` | — | — | **written here** |
+| `emit-declares-attempts` | `options` | — | — | **written here** |
+| `font-roles-only` | `paths` + `options` + `styling` | — | — | **written here** (U2) |
+| `layer-walls` | `onImportSource` + `imports` + `paths` + `options` | — | — | **written here** |
+| `list-take-without-order` | `nodes` + `options` | — | — | **written here** (#21) |
+| `max-comment-density` | `paths` | — | yes | a Workers + D1 app only |
+| `molecule-atoms-only` | `directionRule` | yes | yes | diverged |
+| `molecule-must-compose` | — | yes | yes | diverged |
+| `mutating-step-declares-retry` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (a Medusa storefront's scan R5.2) |
+| `named-when-block` | `nodes` + `options` | — | — | **written here** (a Medusa storefront's scan R5.5) |
+| `next-route-segment-is-thin-delegate` | `paths` | yes | yes | diverged |
+| `no-unregistered-plugin-dir` | `options` + `paths` | — | — | **written here** (Midday's 8 dead dirs; flat seam #36) |
+| `no-mock-db-in-integration` | `options` + `paths` | — | — | **written here** (Midday's 35 mocked router suites) |
+| `router-schema-parity` | `options` + `paths` | — | — | **written here** (a Workers + D1 app's mirror) |
+| `no-brand-names` | `paths` + `options` | yes | — | a Medusa storefront only |
+| `no-card-shaped-div` | — | yes | yes | diverged |
+| `no-cross-feature-stores` | `directionRule` | yes | yes | diverged |
+| `no-d1-transaction` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-date-string-compare` | `nodes` + `options` | — | — | **written here** (#20) |
+| `no-duplicate-jsx-patterns` | `paths` | yes | yes | diverged |
+| `no-generic-utility-package` | `paths` + `options` | — | — | **written here** (#171) |
+| `no-hook-in-component-disguise` | `paths` | yes | yes | diverged |
+| `no-index-count-as-exact` | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
+| `no-inert-hidden-jsx` | `paths` | yes | yes | diverged |
+| `no-inline-data-in-jsx` | `paths` | yes | yes | diverged |
+| `no-invalid-feature-folders` | `paths` | yes | yes | diverged |
+| `no-loader-side-effect-in-index-file` | `nodes` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan #15442) |
+| `no-logic-in-component-files` | `paths` | yes | yes | diverged |
+| `plugin-route-namespaced` | `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R3.8) |
+| `no-orm-outside-db` | `directionRule` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-raw-html-atoms` | `tiers` + `options` | yes | yes | diverged |
+| `no-raw-sql-outside-allowed` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `no-react-namespace` | — | yes | yes | **identical** |
+| `no-renamed-html-props` | — | yes | yes | **identical** |
+| `no-render-prop-reader` | `paths` | yes | yes | diverged |
+| `no-swallowed-catch` | `nodes` + `paths` + `options` | — | — | **written here** (#3) |
+| `no-runtime-dead-affordance` | `options` | — | — | **written here** (#5) |
+| `no-trivial-wrapper-component` | `paths` | yes | yes | diverged |
+| `no-ts-in-bio-folders` | `paths` | yes | yes | diverged |
+| `no-type-definitions-in-components` | `paths` | yes | yes | diverged |
+| `no-void-port` | — | — | yes | a Workers + D1 app only |
+| `organelle-dependency` | `directionRule` | yes | yes | diverged |
+| `organelle-single-source` | `onImportSource` + `mergeVisitors` + `paths` | yes | yes | diverged |
+| `queries-require-org-scope` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `queue-loop-is-the-library` | — | — | yes | a Workers + D1 app only |
+| `route-no-inline-mutation` | `nodes` + `paths` + `comments` + `options` | — | — | **written here** (a Medusa storefront's scan R5.1) |
+| `service-name-not-reserved` | `nodes` + `objects` + `options` | — | — | **written here** (Medusa source) |
+| `ssot-no-inline-facts` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `ssot-no-process-env` | `paths` | — | yes | a Workers + D1 app only |
+| `step-declares-compensation-or-none` | `nodes` + `objects` + `steps` + `options` | — | — | **written here** (Medusa source) |
+| `step-opens-its-own-cell` | `nodes` + `objects` + `paths` + `options` | — | yes | a Workers + D1 app only, re-targeted |
+| `store-route-scopes-tenant-data` | `nodes` + `imports` + `paths` + `options` | yes | — | a Medusa storefront only, de-hardcoded |
+| `subpath-over-barrel` | `nodes` + `options` | — | — | **written here** (#180, a Workers + D1 app asked) |
+| `subscriber-declares-id` | `objects` + `paths` + `options` | — | — | **written here** (a Medusa storefront's scan R5.4) |
+| `tables-declare-their-plane` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `tenant-tables-carry-org-id` | `paths` + `literal-call` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `test-no-clock-polling-for-promise-flips` | `nodes` + `paths` + `options` | — | — | **written here** (#4) |
+| `tokens-only-colors` | `paths` + `options` + `styling` + `colors` | — | — | **written here** (U2) |
+| `time-through-the-door` | `paths` + `options` | — | yes | a Workers + D1 app only, de-hardcoded |
+| `tissue-must-compose` | `paths` | yes | yes | diverged |
+| `tissue-no-data-props` | `paths` | yes | yes | diverged |
+| `tissue-no-fetch` | `paths` | — | — | **written here** (D-095 9) |
+| `tissue-no-hooks` | `paths` | yes | yes | diverged |
+| `tissue-no-organelles` | `directionRule` | yes | yes | diverged |
+| `tissue-no-stores` | `directionRule` | yes | yes | diverged |
+| `todo-names-its-plan` | `comments` + `options` | — | — | **written here** (W28) |
+| `unique-query-step-name` | `nodes` + `objects` + `options` | — | — | **written here** (a Medusa storefront's scan R4.3) |
+| `worker-handles-are-scoped` | `paths` + `options` | — | yes (as `cell-handles-are-scoped`) | a Workers + D1 app only, de-hardcoded |
+| `zustand-v5-best-practices` | — | yes | yes | **identical** |
+
 ## The build
 
 Two builds existed. A Workers + D1 app's `package.json` resolves `.` through a `bun` condition to
@@ -879,9 +978,10 @@ option not named here is one no rule reads.
 | `effect-hook-naming` | — |
 | `emit-declares-attempts` | `budgetHelpers`, `emitters` |
 | `font-roles-only` | `allow`, `exemptModules`, `prefix`, `roles` |
+| `hermetic-e2e-no-wall-clock-waits` | `clockWaits`, `listEndpoints`, `networkWaits`, `specs` |
 | `icon-control-has-name` | `controls`, `icons` |
 | `layer-walls` | `externals`, `layers`, `typeOnly` |
-| `list-take-without-order` | `callees`, `orderKeys` |
+| `list-take-without-order` | `callees`, `exempt`, `orderKeys`, `uniqueColumns` |
 | `max-comment-density` | — |
 | `molecule-atoms-only` | — |
 | `molecule-must-compose` | — |
@@ -894,8 +994,8 @@ option not named here is one no rule reads.
 | `no-d1-transaction` | `except`, `transacts` |
 | `no-date-string-compare` | `fieldPattern` |
 | `no-duplicate-jsx-patterns` | — |
-| `no-generic-utility-package` | `entries`, `names` |
-| `no-hook-in-component-disguise` | — |
+| `no-generic-utility-package` | `allow`, `entries`, `names` |
+| `no-hook-in-component-disguise` | `clientBoundary` |
 | `no-index-count-as-exact` | `estimateFields`, `labelKey` |
 | `no-inert-hidden-jsx` | — |
 | `no-inline-data-in-jsx` | — |
@@ -937,11 +1037,12 @@ option not named here is one no rule reads.
 | `time-through-the-door` | `door`, `exempt`, `exemptModules`, `libraries` |
 | `tissue-must-compose` | — |
 | `tissue-no-data-props` | — |
-| `tissue-no-hooks` | — |
+| `tissue-no-fetch` | — |
+| `tissue-no-hooks` | `contextHooks` |
 | `tissue-no-organelles` | — |
 | `tissue-no-stores` | — |
 | `todo-names-its-plan` | `id`, `markers` |
-| `tokens-only-colors` | `allow`, `exemptModules`, `tokenPrefix` |
+| `tokens-only-colors` | `allow`, `exemptModules`, `ignoreKeys`, `tokenPrefix` |
 | `unique-query-step-name` | `queryStepCalls`, `workflowFactories` |
 | `worker-handles-are-scoped` | `within`, `wrapper` |
 | `zustand-v5-best-practices` | — |

package/corpus/.oxlintrc.json

@@ -171,6 +171,10 @@
       ]
     ],
     "biological-architecture/no-raw-sql-outside-allowed": "error",
+    "biological-architecture/hermetic-e2e-no-wall-clock-waits": [
+      "error",
+      { "listEndpoints": ["corpus-orders$"] }
+    ],
     "biological-architecture/icon-control-has-name": "error",
     "biological-architecture/no-react-namespace": "error",
     "biological-architecture/no-runtime-dead-affordance": [
@@ -331,6 +335,7 @@
       }
     ],
     "biological-architecture/tissue-no-data-props": "error",
+    "biological-architecture/tissue-no-fetch": "error",
     "biological-architecture/tissue-no-hooks": "error",
     "biological-architecture/tissue-no-organelles": "error",
     "biological-architecture/tissue-no-stores": "error",

package/corpus/data/bad-dynamic-orm.ts

@@ -0,0 +1,5 @@
+export const load = async () => {
+  const { eq } = await import('drizzle-orm')
+
+  return eq
+}

package/corpus/data/bad-type-only-orm.ts

@@ -0,0 +1,3 @@
+import type { SQL } from 'drizzle-orm'
+
+export type Predicate = SQL

package/corpus/e2e/bad-list-response.spec.ts

@@ -0,0 +1,5 @@
+declare const page: { waitForResponse: (match: RegExp) => Promise<void> }
+
+export const buys = async (): Promise<void> => {
+  await page.waitForResponse(/corpus-orders/)
+}