@jterrazz/test 15.1.0 → 15.1.1

package/dist/oxlint.cjs

@@ -483,7 +483,7 @@ const RULE_DOCS = {
 	},
 	"f3-specs-public-entry": {
 		channel: "statique",
-		convention: "Depuis `specs/`, seul l’import en profondeur des INTERNES du framework est interdit : un chemin relatif résolvant dans `src/{specification,integrations,vitest,lint}/` du dépôt du framework, ou tout `@jterrazz/test/<subpath>` autre que `@jterrazz/test/oxlint`. Les imports de la source de SA PROPRE app par un consommateur sont toujours permis (c’est le motif documenté) ; seul `specs/integrations/` peut importer en profondeur `src/integrations/**`.",
+		convention: "Depuis `specs/`, seul l’import en profondeur des INTERNES du framework est interdit : un chemin relatif résolvant dans `src/{specification,integrations,vitest,lint}/` du dépôt du framework, ou tout `@jterrazz/test/<subpath>` que la map `exports` du paquet ne publie pas — les subpaths publiés sont exemptés, LUS du manifeste comme en F1, qui en tient la liste. Les imports de la source de SA PROPRE app par un consommateur sont toujours permis (c’est le motif documenté) ; seul `specs/integrations/` peut importer en profondeur `src/integrations/**`.",
 		family: "F",
 		id: "F3",
 		rationale: "Tester par la surface publique garde les specs découplées des chemins internes du framework, sans gêner le consommateur qui importe sa propre app."
@@ -2941,7 +2941,7 @@ const f1NoSubpathImport = {
 const TEST_FILE$4 = /\.(?:test|fixtures|specification)\.[cm]?[jt]sx?$/u;
 const CONFIG_FILE = /(?:^|[/\\])[\w.-]*\.config\.[cm]?[jt]s$/u;
 const TEST_IMPORT$1 = /\.(?:test|fixtures)(?:\.[cm]?[jt]sx?)?$/u;
-const TOOL_SUBPATH$1 = "@jterrazz/test/oxlint";
+const TOOL_SUBPATH = "@jterrazz/test/oxlint";
 /**
 * CONVENTIONS F2 — production code never imports a test artefact. In a
 * non-test file (not `*.test.ts` / `*.fixtures.ts` / `*.specification.ts`,
@@ -2960,7 +2960,7 @@ const f2NoTestImportsInProd = {
 		const file = context.filename;
 		if (TEST_FILE$4.test(file) || CONFIG_FILE.test(file) || isUnderSpecs(file)) return {};
 		return { ...importSourceVisitor(({ node, source }) => {
-			if (source === TOOL_SUBPATH$1) return;
+			if (source === TOOL_SUBPATH) return;
 			if (source === "vitest" || source.startsWith("vitest/")) context.report({
 				data: { source },
 				messageId: "testImport",
@@ -2987,7 +2987,6 @@ const f2NoTestImportsInProd = {
 //#endregion
 //#region src/lint/rules/f3-specs-public-entry.ts
 const PACKAGE = "@jterrazz/test";
-const TOOL_SUBPATH = "@jterrazz/test/oxlint";
 /**
 * The framework's own top-level `src/` layers. Deep-importing any of these from
 * a spec couples the spec to internals the public entry exists to hide. These
@@ -3005,12 +3004,19 @@ const FRAMEWORK_LAYERS = /* @__PURE__ */ new Set([
 /**
 * CONVENTIONS F3 — from `specs/`, deep-importing the FRAMEWORK's internals is
 * forbidden: a relative path resolving inside the framework repo's
-* `src/{specification,integrations,vitest,lint}/`, or any `@jterrazz/test/<subpath>`
-* other than the sanctioned tool-facing `@jterrazz/test/oxlint`. A consumer's
-* imports of its OWN app source are always allowed — that is the pattern.
+* `src/{specification,integrations,vitest,lint}/`, or a `@jterrazz/test/<subpath>`
+* the package does not publish. A consumer's imports of its OWN app source are
+* always allowed — that is the pattern.
+*
+* The exempt subpaths are not listed here: they are read from the package's own
+* `exports` map, the same source F1 uses. A published subpath IS the public
+* surface — reaching `@jterrazz/test/vitest` from a specs-tree `vitest.config.ts`
+* is the prescribed gesture, not a leak — so what a spec must not reach is what
+* the manifest never published. The root entry (`.`) is not a subpath and never
+* concerned this branch: `@jterrazz/test` is the public entry F3 points at.
 *
-* Distinct from F1 (which bans `@jterrazz/test/<subpath>` from any file): F3 is
-* the specs-specific guard that also reaches relative framework-internal paths.
+* Distinct from F1 (which judges the same specifiers from any file): F3 is the
+* specs-specific guard that also reaches relative framework-internal paths.
 * Documented exception: specs under `specs/integrations/` may deep-import the
 * integration module they cover (`src/integrations/**`).
 */
@@ -3018,12 +3024,17 @@ const f3SpecsPublicEntry = {
 	create(context) {
 		const anchor = specsAnchor(context.filename);
 		if (anchor === void 0) return {};
+		const published = new Set(declaredSubpaths());
+		const exempt = published.size === 0 ? "none" : [...published].join(", ");
 		const underIntegrations = anchor.relative[0] === "integrations";
 		return { ...importSourceVisitor(({ node, source }) => {
 			if (source.startsWith(`${PACKAGE}/`)) {
-				if (source === TOOL_SUBPATH) return;
+				if (published.has(source)) return;
 				context.report({
-					data: { source },
+					data: {
+						published: exempt,
+						source
+					},
 					messageId: "deepImport",
 					node
 				});
@@ -3035,7 +3046,10 @@ const f3SpecsPublicEntry = {
 			if (!FRAMEWORK_LAYERS.has(layer)) return;
 			if (underIntegrations && layer === "integrations") return;
 			context.report({
-				data: { source },
+				data: {
+					published: exempt,
+					source
+				},
 				messageId: "deepImport",
 				node
 			});
@@ -3043,7 +3057,7 @@ const f3SpecsPublicEntry = {
 	},
 	meta: {
 		docs: RULE_DOCS["f3-specs-public-entry"],
-		messages: { deepImport: "specs/ must not deep-import framework internals — reach the framework via its public entry (@jterrazz/test, or src/index.js in this repo), not \"{{source}}\" (F3 — see docs/13-linting.md; only @jterrazz/test/oxlint, and src/integrations/** from specs/integrations/, are exempt)." },
+		messages: { deepImport: "specs/ must not deep-import framework internals — reach the framework via its public entry (@jterrazz/test, or src/index.js in this repo), not \"{{source}}\" (F3 — see docs/13-linting.md). Exempt: the published subpaths {{published}}, and src/integrations/** from specs/integrations/." },
 		type: "problem"
 	}
 };

package/dist/oxlint.js

@@ -479,7 +479,7 @@ const RULE_DOCS = {
 	},
 	"f3-specs-public-entry": {
 		channel: "statique",
-		convention: "Depuis `specs/`, seul l’import en profondeur des INTERNES du framework est interdit : un chemin relatif résolvant dans `src/{specification,integrations,vitest,lint}/` du dépôt du framework, ou tout `@jterrazz/test/<subpath>` autre que `@jterrazz/test/oxlint`. Les imports de la source de SA PROPRE app par un consommateur sont toujours permis (c’est le motif documenté) ; seul `specs/integrations/` peut importer en profondeur `src/integrations/**`.",
+		convention: "Depuis `specs/`, seul l’import en profondeur des INTERNES du framework est interdit : un chemin relatif résolvant dans `src/{specification,integrations,vitest,lint}/` du dépôt du framework, ou tout `@jterrazz/test/<subpath>` que la map `exports` du paquet ne publie pas — les subpaths publiés sont exemptés, LUS du manifeste comme en F1, qui en tient la liste. Les imports de la source de SA PROPRE app par un consommateur sont toujours permis (c’est le motif documenté) ; seul `specs/integrations/` peut importer en profondeur `src/integrations/**`.",
 		family: "F",
 		id: "F3",
 		rationale: "Tester par la surface publique garde les specs découplées des chemins internes du framework, sans gêner le consommateur qui importe sa propre app."
@@ -2937,7 +2937,7 @@ const f1NoSubpathImport = {
 const TEST_FILE$4 = /\.(?:test|fixtures|specification)\.[cm]?[jt]sx?$/u;
 const CONFIG_FILE = /(?:^|[/\\])[\w.-]*\.config\.[cm]?[jt]s$/u;
 const TEST_IMPORT$1 = /\.(?:test|fixtures)(?:\.[cm]?[jt]sx?)?$/u;
-const TOOL_SUBPATH$1 = "@jterrazz/test/oxlint";
+const TOOL_SUBPATH = "@jterrazz/test/oxlint";
 /**
 * CONVENTIONS F2 — production code never imports a test artefact. In a
 * non-test file (not `*.test.ts` / `*.fixtures.ts` / `*.specification.ts`,
@@ -2956,7 +2956,7 @@ const f2NoTestImportsInProd = {
 		const file = context.filename;
 		if (TEST_FILE$4.test(file) || CONFIG_FILE.test(file) || isUnderSpecs(file)) return {};
 		return { ...importSourceVisitor(({ node, source }) => {
-			if (source === TOOL_SUBPATH$1) return;
+			if (source === TOOL_SUBPATH) return;
 			if (source === "vitest" || source.startsWith("vitest/")) context.report({
 				data: { source },
 				messageId: "testImport",
@@ -2983,7 +2983,6 @@ const f2NoTestImportsInProd = {
 //#endregion
 //#region src/lint/rules/f3-specs-public-entry.ts
 const PACKAGE = "@jterrazz/test";
-const TOOL_SUBPATH = "@jterrazz/test/oxlint";
 /**
 * The framework's own top-level `src/` layers. Deep-importing any of these from
 * a spec couples the spec to internals the public entry exists to hide. These
@@ -3001,12 +3000,19 @@ const FRAMEWORK_LAYERS = /* @__PURE__ */ new Set([
 /**
 * CONVENTIONS F3 — from `specs/`, deep-importing the FRAMEWORK's internals is
 * forbidden: a relative path resolving inside the framework repo's
-* `src/{specification,integrations,vitest,lint}/`, or any `@jterrazz/test/<subpath>`
-* other than the sanctioned tool-facing `@jterrazz/test/oxlint`. A consumer's
-* imports of its OWN app source are always allowed — that is the pattern.
+* `src/{specification,integrations,vitest,lint}/`, or a `@jterrazz/test/<subpath>`
+* the package does not publish. A consumer's imports of its OWN app source are
+* always allowed — that is the pattern.
+*
+* The exempt subpaths are not listed here: they are read from the package's own
+* `exports` map, the same source F1 uses. A published subpath IS the public
+* surface — reaching `@jterrazz/test/vitest` from a specs-tree `vitest.config.ts`
+* is the prescribed gesture, not a leak — so what a spec must not reach is what
+* the manifest never published. The root entry (`.`) is not a subpath and never
+* concerned this branch: `@jterrazz/test` is the public entry F3 points at.
 *
-* Distinct from F1 (which bans `@jterrazz/test/<subpath>` from any file): F3 is
-* the specs-specific guard that also reaches relative framework-internal paths.
+* Distinct from F1 (which judges the same specifiers from any file): F3 is the
+* specs-specific guard that also reaches relative framework-internal paths.
 * Documented exception: specs under `specs/integrations/` may deep-import the
 * integration module they cover (`src/integrations/**`).
 */
@@ -3014,12 +3020,17 @@ const f3SpecsPublicEntry = {
 	create(context) {
 		const anchor = specsAnchor(context.filename);
 		if (anchor === void 0) return {};
+		const published = new Set(declaredSubpaths());
+		const exempt = published.size === 0 ? "none" : [...published].join(", ");
 		const underIntegrations = anchor.relative[0] === "integrations";
 		return { ...importSourceVisitor(({ node, source }) => {
 			if (source.startsWith(`${PACKAGE}/`)) {
-				if (source === TOOL_SUBPATH) return;
+				if (published.has(source)) return;
 				context.report({
-					data: { source },
+					data: {
+						published: exempt,
+						source
+					},
 					messageId: "deepImport",
 					node
 				});
@@ -3031,7 +3042,10 @@ const f3SpecsPublicEntry = {
 			if (!FRAMEWORK_LAYERS.has(layer)) return;
 			if (underIntegrations && layer === "integrations") return;
 			context.report({
-				data: { source },
+				data: {
+					published: exempt,
+					source
+				},
 				messageId: "deepImport",
 				node
 			});
@@ -3039,7 +3053,7 @@ const f3SpecsPublicEntry = {
 	},
 	meta: {
 		docs: RULE_DOCS["f3-specs-public-entry"],
-		messages: { deepImport: "specs/ must not deep-import framework internals — reach the framework via its public entry (@jterrazz/test, or src/index.js in this repo), not \"{{source}}\" (F3 — see docs/13-linting.md; only @jterrazz/test/oxlint, and src/integrations/** from specs/integrations/, are exempt)." },
+		messages: { deepImport: "specs/ must not deep-import framework internals — reach the framework via its public entry (@jterrazz/test, or src/index.js in this repo), not \"{{source}}\" (F3 — see docs/13-linting.md). Exempt: the published subpaths {{published}}, and src/integrations/** from specs/integrations/." },
 		type: "problem"
 	}
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@jterrazz/test",
-    "version": "15.1.0",
+    "version": "15.1.1",
     "description": "Declarative testing framework for HTTP APIs, CLIs, and background jobs — one entry point, real infrastructure, golden-file assertions, plus an oxlint convention plugin.",
     "keywords": [
         "api-testing",