@sarj/eslint-plugin 15.6.6 → 15.6.8

package/dist/index.cjs

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  advisoryRules: () => advisoryRules,
   applicationOnlyRules: () => applicationOnlyRules,
   default: () => index_default,
   publicDocumentation: () => publicDocumentation,
@@ -474,7 +475,7 @@ var duplicateTestBodyDocumentation = {
       outcome: "no-match",
       files: [{
         path: "src/user.test.ts",
-        source: "test.each(['a', 'b'])('parses %s', (value) => { const x = parse(value); expect(x.ok).toBe(true); expect(x.value).toBe(value); });"
+        source: "test.each(['a', 'b'])('accepts %s', (value) => { const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });"
       }],
       focusPath: "src/user.test.ts",
       expectedCount: 0,
@@ -486,7 +487,7 @@ var duplicateTestBodyDocumentation = {
       outcome: "match",
       files: [{
         path: "src/user.test.ts",
-        source: "test('accepts a', () => { const result = parse('a'); expect(result.ok).toBe(true); expect(result.value).toBeDefined(); });\ntest('accepts b', () => { const result = parse('b'); expect(result.ok).toBe(true); expect(result.value).toBeDefined(); });"
+        source: "test('accepts a', () => { const value = 'a'; const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });\ntest('accepts b', () => { const value = 'b'; const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });"
       }],
       focusPath: "src/user.test.ts",
       expectedCount: 1,
@@ -14784,8 +14785,290 @@ var stepdown_default = createRule({
   }
 });
 
-// src/rules/zod-naming-convention.ts
+// src/rules/source-coupled-test.ts
 var import_utils70 = require("@typescript-eslint/utils");
+var SOURCE_SUFFIX_RE = /\.(?:bash|hcl|sh|tf|tfvars|ya?ml|py|[cm]?[jt]s)$/iu;
+var FS_MODULES = /* @__PURE__ */ new Set(["fs", "node:fs", "fs/promises", "node:fs/promises"]);
+var FS_READERS = /* @__PURE__ */ new Set(["readFile", "readFileSync"]);
+var TEXT_TRANSFORMS = /* @__PURE__ */ new Set([
+  "slice",
+  "substring",
+  "substr",
+  "toLowerCase",
+  "toString",
+  "toUpperCase",
+  "trim",
+  "trimEnd",
+  "trimStart",
+  "replace",
+  "replaceAll"
+]);
+var TEXT_PREDICATES = /* @__PURE__ */ new Set(["endsWith", "includes", "indexOf", "lastIndexOf", "match", "matchAll", "search", "startsWith"]);
+var REGEXP_PREDICATES = /* @__PURE__ */ new Set(["exec", "test"]);
+var EXPECT_MATCHERS = /* @__PURE__ */ new Set([
+  "toBe",
+  "toBeFalsy",
+  "toBeGreaterThan",
+  "toBeGreaterThanOrEqual",
+  "toBeLessThan",
+  "toBeLessThanOrEqual",
+  "toBeNull",
+  "toBeTruthy",
+  "toContain",
+  "toEqual",
+  "toHaveLength",
+  "toMatch",
+  "toMatchSnapshot",
+  "toStrictEqual"
+]);
+var EXPECT_MODIFIERS = /* @__PURE__ */ new Set(["not", "rejects", "resolves"]);
+var ASSERT_MATCHERS = /* @__PURE__ */ new Set(["deepEqual", "doesNotMatch", "equal", "match", "notDeepEqual", "notEqual", "notStrictEqual", "ok", "strictEqual"]);
+var sourceCoupledTestDocumentation = {
+  summary: "Disallow raw repository source text as a test oracle; parse or execute the artifact instead.",
+  rationale: "Substring and regex checks can pass on comments or unreachable configuration and fail after behavior-preserving formatting changes.",
+  remediation: "Parse the artifact, execute its validator, or assert on Terraform plan JSON or another runtime contract.",
+  category: "testing",
+  limitations: [
+    "The rule follows lexical aliases, source-path collections, awaited reads, and common text operations; interprocedural flows remain unreported.",
+    "When raw representation is genuinely the contract (for example a golden or compatibility sentinel), use an exact line suppression with the reason."
+  ],
+  examples: [
+    {
+      id: "parsed-policy-contract",
+      title: "Assert on parsed policy behavior",
+      outcome: "no-match",
+      files: [{ path: "src/policy.test.ts", source: "import { readFileSync } from 'node:fs'; test('policy', () => { const policy = JSON.parse(readFileSync('policy.json', 'utf8')); expect(validate(policy)).toEqual([]); });" }],
+      focusPath: "src/policy.test.ts",
+      expectedCount: 0,
+      public: true
+    },
+    {
+      id: "terraform-substring-contract",
+      title: "Do not prove Terraform behavior with a regex",
+      outcome: "match",
+      files: [{ path: "src/policy.test.ts", source: "import { readFileSync } from 'node:fs'; test('policy', () => { const source = readFileSync('main.tf', 'utf8'); expect(source).toMatch(/prevent_destroy/); });" }],
+      focusPath: "src/policy.test.ts",
+      expectedCount: 1,
+      public: true
+    }
+  ]
+};
+function staticMemberName5(node) {
+  if (!node.computed && node.property.type === import_utils70.AST_NODE_TYPES.Identifier) return node.property.name;
+  if (node.computed && node.property.type === import_utils70.AST_NODE_TYPES.Literal && typeof node.property.value === "string") return node.property.value;
+  return null;
+}
+function unwrap5(node) {
+  if (node.type === import_utils70.AST_NODE_TYPES.AwaitExpression) return unwrap5(node.argument);
+  if (node.type === import_utils70.AST_NODE_TYPES.ChainExpression) return unwrap5(node.expression);
+  if (node.type === import_utils70.AST_NODE_TYPES.TSAsExpression || node.type === import_utils70.AST_NODE_TYPES.TSNonNullExpression || node.type === import_utils70.AST_NODE_TYPES.TSTypeAssertion) return unwrap5(node.expression);
+  return node;
+}
+function stringValue(node) {
+  const current = unwrap5(node);
+  if (current.type === import_utils70.AST_NODE_TYPES.Literal && typeof current.value === "string") return current.value;
+  if (current.type === import_utils70.AST_NODE_TYPES.TemplateLiteral && current.expressions.length === 0) return current.quasis[0]?.value.cooked ?? null;
+  return null;
+}
+function importSource(node) {
+  return typeof node.source.value === "string" ? node.source.value : null;
+}
+function requireSource(node) {
+  const current = unwrap5(node);
+  if (current.type !== import_utils70.AST_NODE_TYPES.CallExpression || current.callee.type !== import_utils70.AST_NODE_TYPES.Identifier || current.callee.name !== "require" || current.arguments.length !== 1 || current.arguments[0]?.type === import_utils70.AST_NODE_TYPES.SpreadElement) return null;
+  return stringValue(current.arguments[0]);
+}
+function newScope() {
+  return { collections: /* @__PURE__ */ new Set(), declared: /* @__PURE__ */ new Set(), fsObjects: /* @__PURE__ */ new Set(), fsReaders: /* @__PURE__ */ new Set(), paths: /* @__PURE__ */ new Set(), rawOrigins: /* @__PURE__ */ new Map() };
+}
+var source_coupled_test_default = createRule({
+  name: "source-coupled-test",
+  documentation: sourceCoupledTestDocumentation,
+  meta: {
+    type: "suggestion",
+    docs: { description: sourceCoupledTestDocumentation.summary },
+    schema: [],
+    messages: { rawSourceOracle: "Raw repository source text is the oracle. Parse or execute the artifact so comments, formatting, and unreachable blocks cannot satisfy the contract." }
+  },
+  defaultOptions: [],
+  create(context) {
+    if (!isTestFile(context.filename) || isGeneratedFile(context.filename, context.sourceCode.text)) return {};
+    const scopes = [newScope()];
+    const reportedOrigins = /* @__PURE__ */ new Set();
+    const currentScope = () => scopes.at(-1) ?? scopes[0];
+    const visible = (kind, name) => {
+      for (let index = scopes.length - 1; index >= 0; index--) {
+        const scope = scopes[index];
+        if (scope.declared.has(name)) return scope[kind].has(name);
+      }
+      return false;
+    };
+    const visibleRawOrigins = (name) => {
+      for (let index = scopes.length - 1; index >= 0; index--) {
+        const scope = scopes[index];
+        if (scope.declared.has(name)) return scope.rawOrigins.get(name) ?? /* @__PURE__ */ new Set();
+      }
+      return /* @__PURE__ */ new Set();
+    };
+    const sourcePath = (node) => {
+      const current = unwrap5(node);
+      const value = stringValue(current);
+      if (value !== null) return SOURCE_SUFFIX_RE.test(value);
+      if (current.type === import_utils70.AST_NODE_TYPES.Identifier) return visible("paths", current.name);
+      if (current.type === import_utils70.AST_NODE_TYPES.BinaryExpression && current.operator === "+") {
+        return sourcePath(current.left) || sourcePath(current.right);
+      }
+      if (current.type === import_utils70.AST_NODE_TYPES.TemplateLiteral) return current.expressions.some(sourcePath);
+      if (current.type === import_utils70.AST_NODE_TYPES.CallExpression || current.type === import_utils70.AST_NODE_TYPES.NewExpression) {
+        return current.arguments.some((argument) => argument.type !== import_utils70.AST_NODE_TYPES.SpreadElement && sourcePath(argument));
+      }
+      if (current.type === import_utils70.AST_NODE_TYPES.MemberExpression) return sourcePath(current.object);
+      return false;
+    };
+    const rawRead = (node) => {
+      const current = unwrap5(node);
+      if (current.type !== import_utils70.AST_NODE_TYPES.CallExpression || current.arguments.length === 0) return false;
+      const callee = unwrap5(current.callee);
+      if (callee.type === import_utils70.AST_NODE_TYPES.Identifier) {
+        return visible("fsReaders", callee.name) && sourcePath(current.arguments[0]);
+      }
+      if (callee.type !== import_utils70.AST_NODE_TYPES.MemberExpression) return false;
+      const name = staticMemberName5(callee);
+      const object = unwrap5(callee.object);
+      return name !== null && FS_READERS.has(name) && object.type === import_utils70.AST_NODE_TYPES.Identifier && visible("fsObjects", object.name) && sourcePath(current.arguments[0]);
+    };
+    const rawOrigins = (node) => {
+      const current = unwrap5(node);
+      if (current.type === import_utils70.AST_NODE_TYPES.Identifier) return visibleRawOrigins(current.name);
+      if (rawRead(current)) return /* @__PURE__ */ new Set([`${current.range[0]}:${current.range[1]}`]);
+      if (current.type === import_utils70.AST_NODE_TYPES.BinaryExpression && current.operator === "+") return /* @__PURE__ */ new Set([...rawOrigins(current.left), ...rawOrigins(current.right)]);
+      if (current.type !== import_utils70.AST_NODE_TYPES.CallExpression) return /* @__PURE__ */ new Set();
+      const callee = unwrap5(current.callee);
+      if (callee.type !== import_utils70.AST_NODE_TYPES.MemberExpression) return /* @__PURE__ */ new Set();
+      const name = staticMemberName5(callee);
+      return name !== null && TEXT_TRANSFORMS.has(name) ? rawOrigins(callee.object) : /* @__PURE__ */ new Set();
+    };
+    const evidenceOrigins = (node) => {
+      const current = unwrap5(node);
+      const direct = rawOrigins(current);
+      if (direct.size > 0) return direct;
+      if (current.type === import_utils70.AST_NODE_TYPES.BinaryExpression || current.type === import_utils70.AST_NODE_TYPES.LogicalExpression) return /* @__PURE__ */ new Set([...evidenceOrigins(current.left), ...evidenceOrigins(current.right)]);
+      if (current.type === import_utils70.AST_NODE_TYPES.UnaryExpression) return evidenceOrigins(current.argument);
+      if (current.type !== import_utils70.AST_NODE_TYPES.CallExpression) return /* @__PURE__ */ new Set();
+      const callee = unwrap5(current.callee);
+      if (callee.type !== import_utils70.AST_NODE_TYPES.MemberExpression) return /* @__PURE__ */ new Set();
+      const name = staticMemberName5(callee);
+      if (name !== null && TEXT_PREDICATES.has(name)) return rawOrigins(callee.object);
+      if (name !== null && REGEXP_PREDICATES.has(name)) return new Set(current.arguments.flatMap((argument) => argument.type === import_utils70.AST_NODE_TYPES.SpreadElement ? [] : [...rawOrigins(argument)]));
+      return /* @__PURE__ */ new Set();
+    };
+    const rawAssertionOrigins = (node) => {
+      const callee = unwrap5(node.callee);
+      if (callee.type === import_utils70.AST_NODE_TYPES.Identifier && callee.name === "assert") {
+        return new Set(node.arguments.flatMap((argument) => argument.type === import_utils70.AST_NODE_TYPES.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+      }
+      if (callee.type !== import_utils70.AST_NODE_TYPES.MemberExpression) return /* @__PURE__ */ new Set();
+      const matcher = staticMemberName5(callee);
+      if (matcher === null) return /* @__PURE__ */ new Set();
+      let receiver = unwrap5(callee.object);
+      while (receiver.type === import_utils70.AST_NODE_TYPES.MemberExpression && EXPECT_MODIFIERS.has(staticMemberName5(receiver) ?? "")) receiver = unwrap5(receiver.object);
+      if (receiver.type === import_utils70.AST_NODE_TYPES.CallExpression && receiver.callee.type === import_utils70.AST_NODE_TYPES.Identifier && receiver.callee.name === "expect") {
+        if (!EXPECT_MATCHERS.has(matcher)) return /* @__PURE__ */ new Set();
+        return new Set([...receiver.arguments, ...node.arguments].flatMap((argument) => argument.type === import_utils70.AST_NODE_TYPES.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+      }
+      if (receiver.type !== import_utils70.AST_NODE_TYPES.Identifier || receiver.name !== "assert" || !ASSERT_MATCHERS.has(matcher)) return /* @__PURE__ */ new Set();
+      return new Set(node.arguments.flatMap((argument) => argument.type === import_utils70.AST_NODE_TYPES.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+    };
+    const declare = (name, state) => {
+      const scope = currentScope();
+      scope.declared.add(name);
+      scope.collections.delete(name);
+      scope.fsObjects.delete(name);
+      scope.fsReaders.delete(name);
+      scope.paths.delete(name);
+      scope.rawOrigins.delete(name);
+      if (state.collection === true) scope.collections.add(name);
+      if (state.fsObject === true) scope.fsObjects.add(name);
+      if (state.fsReader === true) scope.fsReaders.add(name);
+      if (state.path === true) scope.paths.add(name);
+      if (state.rawOrigins !== void 0 && state.rawOrigins.size > 0) {
+        scope.rawOrigins.set(name, state.rawOrigins);
+      }
+    };
+    const sourceCollection = (node) => {
+      const current = unwrap5(node);
+      return current.type === import_utils70.AST_NODE_TYPES.ArrayExpression && current.elements.length > 0 && current.elements.every((element) => element !== null && element.type !== import_utils70.AST_NODE_TYPES.SpreadElement && sourcePath(element));
+    };
+    const declaredNames2 = (node) => {
+      const current = unwrap5(node);
+      if (current.type === import_utils70.AST_NODE_TYPES.Identifier) return [current.name];
+      if (current.type === import_utils70.AST_NODE_TYPES.AssignmentPattern) return declaredNames2(current.left);
+      if (current.type === import_utils70.AST_NODE_TYPES.RestElement) return declaredNames2(current.argument);
+      if (current.type === import_utils70.AST_NODE_TYPES.ArrayPattern) return current.elements.flatMap((element) => element === null ? [] : declaredNames2(element));
+      if (current.type === import_utils70.AST_NODE_TYPES.ObjectPattern) return current.properties.flatMap((property) => property.type === import_utils70.AST_NODE_TYPES.RestElement ? declaredNames2(property.argument) : declaredNames2(property.value));
+      return [];
+    };
+    const enterFunction = (node) => {
+      scopes.push(newScope());
+      for (const parameter of node.params) for (const name of declaredNames2(parameter)) declare(name, {});
+    };
+    const exitFunction = () => {
+      scopes.pop();
+    };
+    return {
+      ImportDeclaration(node) {
+        const source = importSource(node);
+        if (source === null || !FS_MODULES.has(source)) return;
+        for (const specifier of node.specifiers) {
+          if (specifier.type === import_utils70.AST_NODE_TYPES.ImportSpecifier) {
+            const imported = specifier.imported.type === import_utils70.AST_NODE_TYPES.Identifier ? specifier.imported.name : String(specifier.imported.value);
+            if (FS_READERS.has(imported)) declare(specifier.local.name, { fsReader: true });
+          } else {
+            declare(specifier.local.name, { fsObject: true });
+          }
+        }
+      },
+      ":function": enterFunction,
+      ":function:exit": exitFunction,
+      VariableDeclarator(node) {
+        if (node.init === null) return;
+        const required = requireSource(node.init);
+        if (required !== null && FS_MODULES.has(required) && node.id.type === import_utils70.AST_NODE_TYPES.Identifier) {
+          declare(node.id.name, { fsObject: true });
+          return;
+        }
+        if (node.id.type === import_utils70.AST_NODE_TYPES.ObjectPattern && required !== null && FS_MODULES.has(required)) {
+          for (const property of node.id.properties) {
+            if (property.type !== import_utils70.AST_NODE_TYPES.Property || property.value.type !== import_utils70.AST_NODE_TYPES.Identifier) continue;
+            const key = property.key.type === import_utils70.AST_NODE_TYPES.Identifier ? property.key.name : property.key.type === import_utils70.AST_NODE_TYPES.Literal ? String(property.key.value) : "";
+            if (FS_READERS.has(key)) declare(property.value.name, { fsReader: true });
+          }
+          return;
+        }
+        if (node.id.type !== import_utils70.AST_NODE_TYPES.Identifier) return;
+        declare(node.id.name, { collection: sourceCollection(node.init), path: sourcePath(node.init), rawOrigins: rawOrigins(node.init) });
+      },
+      AssignmentExpression(node) {
+        if (node.left.type === import_utils70.AST_NODE_TYPES.Identifier) declare(node.left.name, { path: sourcePath(node.right), rawOrigins: rawOrigins(node.right) });
+      },
+      ForOfStatement(node) {
+        const right = unwrap5(node.right);
+        const collection = right.type === import_utils70.AST_NODE_TYPES.Identifier && visible("collections", right.name);
+        const left = node.left.type === import_utils70.AST_NODE_TYPES.VariableDeclaration ? node.left.declarations[0]?.id : node.left;
+        if (collection && left?.type === import_utils70.AST_NODE_TYPES.Identifier) declare(left.name, { path: true });
+      },
+      CallExpression(node) {
+        const origins = rawAssertionOrigins(node);
+        if (origins.size === 0 || [...origins].every((origin) => reportedOrigins.has(origin))) return;
+        for (const origin of origins) reportedOrigins.add(origin);
+        context.report({ node, messageId: "rawSourceOracle" });
+      }
+    };
+  }
+});
+
+// src/rules/zod-naming-convention.ts
+var import_utils71 = require("@typescript-eslint/utils");
 var zodNamingConventionDocumentation = {
   summary: "Enforce a consistent Zod schema naming convention \u2014 a `Z` prefix (`ZUser`) or a `Schema` suffix (`userSchema`); both are accepted by default.",
   rationale: "A recognizable schema name distinguishes runtime validators from ordinary values at each use site.",
@@ -14826,18 +15109,18 @@ var NON_SCHEMA_TERMINALS = /* @__PURE__ */ new Set([
   "prettifyError",
   "treeifyError"
 ]);
-var terminalMethodName = (callee) => !callee.computed && callee.property.type === import_utils70.AST_NODE_TYPES.Identifier ? callee.property.name : null;
+var terminalMethodName = (callee) => !callee.computed && callee.property.type === import_utils71.AST_NODE_TYPES.Identifier ? callee.property.name : null;
 var calleeChainRoot = (node) => {
   let current = node;
   for (; ; ) {
-    if (current.type === import_utils70.AST_NODE_TYPES.Identifier) {
+    if (current.type === import_utils71.AST_NODE_TYPES.Identifier) {
       return current;
     }
-    if (current.type === import_utils70.AST_NODE_TYPES.MemberExpression) {
+    if (current.type === import_utils71.AST_NODE_TYPES.MemberExpression) {
       current = current.object;
       continue;
     }
-    if (current.type === import_utils70.AST_NODE_TYPES.CallExpression) {
+    if (current.type === import_utils71.AST_NODE_TYPES.CallExpression) {
       current = current.callee;
       continue;
     }
@@ -14877,7 +15160,7 @@ var zod_naming_convention_default = createRule({
     const acceptsSchemaWord = convention !== "prefix";
     const zodBindings = /* @__PURE__ */ new Set();
     function resolvedBinding(identifier) {
-      return import_utils70.ASTUtils.findVariable(
+      return import_utils71.ASTUtils.findVariable(
         context.sourceCode.getScope(identifier),
         identifier.name
       );
@@ -14899,7 +15182,7 @@ var zod_naming_convention_default = createRule({
       ImportDeclaration(node) {
         if (!isZodModule(node.source.value)) return;
         for (const specifier of node.specifiers) {
-          if (specifier.type === import_utils70.AST_NODE_TYPES.ImportNamespaceSpecifier || specifier.type === import_utils70.AST_NODE_TYPES.ImportDefaultSpecifier || specifier.type === import_utils70.AST_NODE_TYPES.ImportSpecifier && (specifier.imported.type === import_utils70.AST_NODE_TYPES.Identifier ? specifier.imported.name === "z" : specifier.imported.value === "z")) {
+          if (specifier.type === import_utils71.AST_NODE_TYPES.ImportNamespaceSpecifier || specifier.type === import_utils71.AST_NODE_TYPES.ImportDefaultSpecifier || specifier.type === import_utils71.AST_NODE_TYPES.ImportSpecifier && (specifier.imported.type === import_utils71.AST_NODE_TYPES.Identifier ? specifier.imported.name === "z" : specifier.imported.value === "z")) {
             recordZodBinding(specifier.local);
           }
         }
@@ -14907,13 +15190,13 @@ var zod_naming_convention_default = createRule({
       VariableDeclarator(node) {
         const init = node.init;
         if (init === null || init === void 0) return;
-        if (init.type !== import_utils70.AST_NODE_TYPES.CallExpression) return;
+        if (init.type !== import_utils71.AST_NODE_TYPES.CallExpression) return;
         const callee = init.callee;
-        if (callee.type !== import_utils70.AST_NODE_TYPES.MemberExpression) return;
+        if (callee.type !== import_utils71.AST_NODE_TYPES.MemberExpression) return;
         if (!isZodChain(callee)) return;
         const terminal = terminalMethodName(callee);
         if (terminal !== null && NON_SCHEMA_TERMINALS.has(terminal)) return;
-        if (node.id.type !== import_utils70.AST_NODE_TYPES.Identifier) return;
+        if (node.id.type !== import_utils71.AST_NODE_TYPES.Identifier) return;
         if (test.test(node.id.name)) return;
         if (acceptsSchemaWord && CONTAINS_SCHEMA_RE.test(node.id.name)) return;
         context.report({
@@ -15070,17 +15353,19 @@ var rules = {
   "require-zod-form-validation": require_zod_form_validation_default,
   "store-insert-requires-on-conflict": store_insert_requires_on_conflict_default,
   "stepdown": stepdown_default,
+  "source-coupled-test": source_coupled_test_default,
   "zod-naming-convention": zod_naming_convention_default
 };
 var meta = {
   name: "@sarj/eslint-plugin",
-  version: "15.6.6"
+  version: "15.6.8"
 };
 var applicationOnlyRules = [
   "no-restricted-library-load",
   "prefer-native-random-uuid",
   "prefer-shadcn-primitives"
 ];
+var advisoryRules = ["source-coupled-test"];
 var recommendedRules = {
   "@sarj/duplicate-test-body": "error",
   "@sarj/enforce-file-structure": "error",
@@ -15138,6 +15423,7 @@ var recommendedRules = {
   "@sarj/require-zod-form-validation": "error",
   "@sarj/store-insert-requires-on-conflict": "error",
   "@sarj/stepdown": "error",
+  "@sarj/source-coupled-test": "warn",
   "@sarj/zod-naming-convention": "error"
 };
 var strictRules = {
@@ -15201,6 +15487,7 @@ var strictRules = {
   "@sarj/require-zod-form-validation": "error",
   "@sarj/store-insert-requires-on-conflict": "error",
   "@sarj/stepdown": "error",
+  "@sarj/source-coupled-test": "warn",
   "@sarj/zod-naming-convention": "error"
 };
 var plugin = {
@@ -15225,6 +15512,7 @@ var plugin = {
 var index_default = plugin;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  advisoryRules,
   applicationOnlyRules,
   publicDocumentation,
   recommendedRules,

package/dist/index.d.cts

@@ -274,12 +274,15 @@ declare const rules: {
     readonly "require-zod-form-validation": DocumentedRule<readonly [], "missingZodValidation">;
     readonly "store-insert-requires-on-conflict": DocumentedRule<readonly [], "storeInsertRequiresOnConflict">;
     readonly stepdown: DocumentedRule<[], "helperAboveOnlyCaller">;
+    readonly "source-coupled-test": DocumentedRule<readonly [], "rawSourceOracle">;
     readonly "zod-naming-convention": DocumentedRule<readonly [{
         convention?: "prefix" | "suffix" | "either";
     }?], "zPrefix" | "schemaSuffix" | "zodSchemaName">;
 };
 /** Rules registered for application-profile configs but intentionally absent from general presets. */
 declare const applicationOnlyRules: readonly ["no-restricted-library-load", "prefer-native-random-uuid", "prefer-shadcn-primitives"];
+/** Calibrated rules that intentionally remain warnings until consumer-corpus precision is proven. */
+declare const advisoryRules: readonly ["source-coupled-test"];
 declare const recommendedRules: {
     readonly "@sarj/duplicate-test-body": "error";
     readonly "@sarj/enforce-file-structure": "error";
@@ -341,6 +344,7 @@ declare const recommendedRules: {
     readonly "@sarj/require-zod-form-validation": "error";
     readonly "@sarj/store-insert-requires-on-conflict": "error";
     readonly "@sarj/stepdown": "error";
+    readonly "@sarj/source-coupled-test": "warn";
     readonly "@sarj/zod-naming-convention": "error";
 };
 declare const strictRules: {
@@ -408,6 +412,7 @@ declare const strictRules: {
     readonly "@sarj/require-zod-form-validation": "error";
     readonly "@sarj/store-insert-requires-on-conflict": "error";
     readonly "@sarj/stepdown": "error";
+    readonly "@sarj/source-coupled-test": "warn";
     readonly "@sarj/zod-naming-convention": "error";
 };
 type FlatPreset = {
@@ -418,7 +423,7 @@ type FlatPreset = {
 declare const plugin: {
     readonly meta: {
         readonly name: "@sarj/eslint-plugin";
-        readonly version: "15.6.6";
+        readonly version: "15.6.8";
     };
     readonly rules: {
         readonly "duplicate-test-body": DocumentedRule<readonly [], "duplicateTestBody">;
@@ -507,6 +512,7 @@ declare const plugin: {
         readonly "require-zod-form-validation": DocumentedRule<readonly [], "missingZodValidation">;
         readonly "store-insert-requires-on-conflict": DocumentedRule<readonly [], "storeInsertRequiresOnConflict">;
         readonly stepdown: DocumentedRule<[], "helperAboveOnlyCaller">;
+        readonly "source-coupled-test": DocumentedRule<readonly [], "rawSourceOracle">;
         readonly "zod-naming-convention": DocumentedRule<readonly [{
             convention?: "prefix" | "suffix" | "either";
         }?], "zPrefix" | "schemaSuffix" | "zodSchemaName">;
@@ -518,4 +524,4 @@ declare const plugin: {
     };
 };
 
-export { type RetiredRule, applicationOnlyRules, plugin as default, publicDocumentation, recommendedRules, renamedRules, retiredRules, rules, strictRules };
+export { type RetiredRule, advisoryRules, applicationOnlyRules, plugin as default, publicDocumentation, recommendedRules, renamedRules, retiredRules, rules, strictRules };

package/dist/index.d.ts

@@ -274,12 +274,15 @@ declare const rules: {
     readonly "require-zod-form-validation": DocumentedRule<readonly [], "missingZodValidation">;
     readonly "store-insert-requires-on-conflict": DocumentedRule<readonly [], "storeInsertRequiresOnConflict">;
     readonly stepdown: DocumentedRule<[], "helperAboveOnlyCaller">;
+    readonly "source-coupled-test": DocumentedRule<readonly [], "rawSourceOracle">;
     readonly "zod-naming-convention": DocumentedRule<readonly [{
         convention?: "prefix" | "suffix" | "either";
     }?], "zPrefix" | "schemaSuffix" | "zodSchemaName">;
 };
 /** Rules registered for application-profile configs but intentionally absent from general presets. */
 declare const applicationOnlyRules: readonly ["no-restricted-library-load", "prefer-native-random-uuid", "prefer-shadcn-primitives"];
+/** Calibrated rules that intentionally remain warnings until consumer-corpus precision is proven. */
+declare const advisoryRules: readonly ["source-coupled-test"];
 declare const recommendedRules: {
     readonly "@sarj/duplicate-test-body": "error";
     readonly "@sarj/enforce-file-structure": "error";
@@ -341,6 +344,7 @@ declare const recommendedRules: {
     readonly "@sarj/require-zod-form-validation": "error";
     readonly "@sarj/store-insert-requires-on-conflict": "error";
     readonly "@sarj/stepdown": "error";
+    readonly "@sarj/source-coupled-test": "warn";
     readonly "@sarj/zod-naming-convention": "error";
 };
 declare const strictRules: {
@@ -408,6 +412,7 @@ declare const strictRules: {
     readonly "@sarj/require-zod-form-validation": "error";
     readonly "@sarj/store-insert-requires-on-conflict": "error";
     readonly "@sarj/stepdown": "error";
+    readonly "@sarj/source-coupled-test": "warn";
     readonly "@sarj/zod-naming-convention": "error";
 };
 type FlatPreset = {
@@ -418,7 +423,7 @@ type FlatPreset = {
 declare const plugin: {
     readonly meta: {
         readonly name: "@sarj/eslint-plugin";
-        readonly version: "15.6.6";
+        readonly version: "15.6.8";
     };
     readonly rules: {
         readonly "duplicate-test-body": DocumentedRule<readonly [], "duplicateTestBody">;
@@ -507,6 +512,7 @@ declare const plugin: {
         readonly "require-zod-form-validation": DocumentedRule<readonly [], "missingZodValidation">;
         readonly "store-insert-requires-on-conflict": DocumentedRule<readonly [], "storeInsertRequiresOnConflict">;
         readonly stepdown: DocumentedRule<[], "helperAboveOnlyCaller">;
+        readonly "source-coupled-test": DocumentedRule<readonly [], "rawSourceOracle">;
         readonly "zod-naming-convention": DocumentedRule<readonly [{
             convention?: "prefix" | "suffix" | "either";
         }?], "zPrefix" | "schemaSuffix" | "zodSchemaName">;
@@ -518,4 +524,4 @@ declare const plugin: {
     };
 };
 
-export { type RetiredRule, applicationOnlyRules, plugin as default, publicDocumentation, recommendedRules, renamedRules, retiredRules, rules, strictRules };
+export { type RetiredRule, advisoryRules, applicationOnlyRules, plugin as default, publicDocumentation, recommendedRules, renamedRules, retiredRules, rules, strictRules };

package/dist/index.js

@@ -431,7 +431,7 @@ var duplicateTestBodyDocumentation = {
       outcome: "no-match",
       files: [{
         path: "src/user.test.ts",
-        source: "test.each(['a', 'b'])('parses %s', (value) => { const x = parse(value); expect(x.ok).toBe(true); expect(x.value).toBe(value); });"
+        source: "test.each(['a', 'b'])('accepts %s', (value) => { const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });"
       }],
       focusPath: "src/user.test.ts",
       expectedCount: 0,
@@ -443,7 +443,7 @@ var duplicateTestBodyDocumentation = {
       outcome: "match",
       files: [{
         path: "src/user.test.ts",
-        source: "test('accepts a', () => { const result = parse('a'); expect(result.ok).toBe(true); expect(result.value).toBeDefined(); });\ntest('accepts b', () => { const result = parse('b'); expect(result.ok).toBe(true); expect(result.value).toBeDefined(); });"
+        source: "test('accepts a', () => { const value = 'a'; const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });\ntest('accepts b', () => { const value = 'b'; const result = parse(value); expect(result.ok).toBe(true); expect(result.value).toBe(value); });"
       }],
       focusPath: "src/user.test.ts",
       expectedCount: 1,
@@ -14762,9 +14762,291 @@ var stepdown_default = createRule({
   }
 });
 
+// src/rules/source-coupled-test.ts
+import { AST_NODE_TYPES as AST_NODE_TYPES56 } from "@typescript-eslint/utils";
+var SOURCE_SUFFIX_RE = /\.(?:bash|hcl|sh|tf|tfvars|ya?ml|py|[cm]?[jt]s)$/iu;
+var FS_MODULES = /* @__PURE__ */ new Set(["fs", "node:fs", "fs/promises", "node:fs/promises"]);
+var FS_READERS = /* @__PURE__ */ new Set(["readFile", "readFileSync"]);
+var TEXT_TRANSFORMS = /* @__PURE__ */ new Set([
+  "slice",
+  "substring",
+  "substr",
+  "toLowerCase",
+  "toString",
+  "toUpperCase",
+  "trim",
+  "trimEnd",
+  "trimStart",
+  "replace",
+  "replaceAll"
+]);
+var TEXT_PREDICATES = /* @__PURE__ */ new Set(["endsWith", "includes", "indexOf", "lastIndexOf", "match", "matchAll", "search", "startsWith"]);
+var REGEXP_PREDICATES = /* @__PURE__ */ new Set(["exec", "test"]);
+var EXPECT_MATCHERS = /* @__PURE__ */ new Set([
+  "toBe",
+  "toBeFalsy",
+  "toBeGreaterThan",
+  "toBeGreaterThanOrEqual",
+  "toBeLessThan",
+  "toBeLessThanOrEqual",
+  "toBeNull",
+  "toBeTruthy",
+  "toContain",
+  "toEqual",
+  "toHaveLength",
+  "toMatch",
+  "toMatchSnapshot",
+  "toStrictEqual"
+]);
+var EXPECT_MODIFIERS = /* @__PURE__ */ new Set(["not", "rejects", "resolves"]);
+var ASSERT_MATCHERS = /* @__PURE__ */ new Set(["deepEqual", "doesNotMatch", "equal", "match", "notDeepEqual", "notEqual", "notStrictEqual", "ok", "strictEqual"]);
+var sourceCoupledTestDocumentation = {
+  summary: "Disallow raw repository source text as a test oracle; parse or execute the artifact instead.",
+  rationale: "Substring and regex checks can pass on comments or unreachable configuration and fail after behavior-preserving formatting changes.",
+  remediation: "Parse the artifact, execute its validator, or assert on Terraform plan JSON or another runtime contract.",
+  category: "testing",
+  limitations: [
+    "The rule follows lexical aliases, source-path collections, awaited reads, and common text operations; interprocedural flows remain unreported.",
+    "When raw representation is genuinely the contract (for example a golden or compatibility sentinel), use an exact line suppression with the reason."
+  ],
+  examples: [
+    {
+      id: "parsed-policy-contract",
+      title: "Assert on parsed policy behavior",
+      outcome: "no-match",
+      files: [{ path: "src/policy.test.ts", source: "import { readFileSync } from 'node:fs'; test('policy', () => { const policy = JSON.parse(readFileSync('policy.json', 'utf8')); expect(validate(policy)).toEqual([]); });" }],
+      focusPath: "src/policy.test.ts",
+      expectedCount: 0,
+      public: true
+    },
+    {
+      id: "terraform-substring-contract",
+      title: "Do not prove Terraform behavior with a regex",
+      outcome: "match",
+      files: [{ path: "src/policy.test.ts", source: "import { readFileSync } from 'node:fs'; test('policy', () => { const source = readFileSync('main.tf', 'utf8'); expect(source).toMatch(/prevent_destroy/); });" }],
+      focusPath: "src/policy.test.ts",
+      expectedCount: 1,
+      public: true
+    }
+  ]
+};
+function staticMemberName5(node) {
+  if (!node.computed && node.property.type === AST_NODE_TYPES56.Identifier) return node.property.name;
+  if (node.computed && node.property.type === AST_NODE_TYPES56.Literal && typeof node.property.value === "string") return node.property.value;
+  return null;
+}
+function unwrap5(node) {
+  if (node.type === AST_NODE_TYPES56.AwaitExpression) return unwrap5(node.argument);
+  if (node.type === AST_NODE_TYPES56.ChainExpression) return unwrap5(node.expression);
+  if (node.type === AST_NODE_TYPES56.TSAsExpression || node.type === AST_NODE_TYPES56.TSNonNullExpression || node.type === AST_NODE_TYPES56.TSTypeAssertion) return unwrap5(node.expression);
+  return node;
+}
+function stringValue(node) {
+  const current = unwrap5(node);
+  if (current.type === AST_NODE_TYPES56.Literal && typeof current.value === "string") return current.value;
+  if (current.type === AST_NODE_TYPES56.TemplateLiteral && current.expressions.length === 0) return current.quasis[0]?.value.cooked ?? null;
+  return null;
+}
+function importSource(node) {
+  return typeof node.source.value === "string" ? node.source.value : null;
+}
+function requireSource(node) {
+  const current = unwrap5(node);
+  if (current.type !== AST_NODE_TYPES56.CallExpression || current.callee.type !== AST_NODE_TYPES56.Identifier || current.callee.name !== "require" || current.arguments.length !== 1 || current.arguments[0]?.type === AST_NODE_TYPES56.SpreadElement) return null;
+  return stringValue(current.arguments[0]);
+}
+function newScope() {
+  return { collections: /* @__PURE__ */ new Set(), declared: /* @__PURE__ */ new Set(), fsObjects: /* @__PURE__ */ new Set(), fsReaders: /* @__PURE__ */ new Set(), paths: /* @__PURE__ */ new Set(), rawOrigins: /* @__PURE__ */ new Map() };
+}
+var source_coupled_test_default = createRule({
+  name: "source-coupled-test",
+  documentation: sourceCoupledTestDocumentation,
+  meta: {
+    type: "suggestion",
+    docs: { description: sourceCoupledTestDocumentation.summary },
+    schema: [],
+    messages: { rawSourceOracle: "Raw repository source text is the oracle. Parse or execute the artifact so comments, formatting, and unreachable blocks cannot satisfy the contract." }
+  },
+  defaultOptions: [],
+  create(context) {
+    if (!isTestFile(context.filename) || isGeneratedFile(context.filename, context.sourceCode.text)) return {};
+    const scopes = [newScope()];
+    const reportedOrigins = /* @__PURE__ */ new Set();
+    const currentScope = () => scopes.at(-1) ?? scopes[0];
+    const visible = (kind, name) => {
+      for (let index = scopes.length - 1; index >= 0; index--) {
+        const scope = scopes[index];
+        if (scope.declared.has(name)) return scope[kind].has(name);
+      }
+      return false;
+    };
+    const visibleRawOrigins = (name) => {
+      for (let index = scopes.length - 1; index >= 0; index--) {
+        const scope = scopes[index];
+        if (scope.declared.has(name)) return scope.rawOrigins.get(name) ?? /* @__PURE__ */ new Set();
+      }
+      return /* @__PURE__ */ new Set();
+    };
+    const sourcePath = (node) => {
+      const current = unwrap5(node);
+      const value = stringValue(current);
+      if (value !== null) return SOURCE_SUFFIX_RE.test(value);
+      if (current.type === AST_NODE_TYPES56.Identifier) return visible("paths", current.name);
+      if (current.type === AST_NODE_TYPES56.BinaryExpression && current.operator === "+") {
+        return sourcePath(current.left) || sourcePath(current.right);
+      }
+      if (current.type === AST_NODE_TYPES56.TemplateLiteral) return current.expressions.some(sourcePath);
+      if (current.type === AST_NODE_TYPES56.CallExpression || current.type === AST_NODE_TYPES56.NewExpression) {
+        return current.arguments.some((argument) => argument.type !== AST_NODE_TYPES56.SpreadElement && sourcePath(argument));
+      }
+      if (current.type === AST_NODE_TYPES56.MemberExpression) return sourcePath(current.object);
+      return false;
+    };
+    const rawRead = (node) => {
+      const current = unwrap5(node);
+      if (current.type !== AST_NODE_TYPES56.CallExpression || current.arguments.length === 0) return false;
+      const callee = unwrap5(current.callee);
+      if (callee.type === AST_NODE_TYPES56.Identifier) {
+        return visible("fsReaders", callee.name) && sourcePath(current.arguments[0]);
+      }
+      if (callee.type !== AST_NODE_TYPES56.MemberExpression) return false;
+      const name = staticMemberName5(callee);
+      const object = unwrap5(callee.object);
+      return name !== null && FS_READERS.has(name) && object.type === AST_NODE_TYPES56.Identifier && visible("fsObjects", object.name) && sourcePath(current.arguments[0]);
+    };
+    const rawOrigins = (node) => {
+      const current = unwrap5(node);
+      if (current.type === AST_NODE_TYPES56.Identifier) return visibleRawOrigins(current.name);
+      if (rawRead(current)) return /* @__PURE__ */ new Set([`${current.range[0]}:${current.range[1]}`]);
+      if (current.type === AST_NODE_TYPES56.BinaryExpression && current.operator === "+") return /* @__PURE__ */ new Set([...rawOrigins(current.left), ...rawOrigins(current.right)]);
+      if (current.type !== AST_NODE_TYPES56.CallExpression) return /* @__PURE__ */ new Set();
+      const callee = unwrap5(current.callee);
+      if (callee.type !== AST_NODE_TYPES56.MemberExpression) return /* @__PURE__ */ new Set();
+      const name = staticMemberName5(callee);
+      return name !== null && TEXT_TRANSFORMS.has(name) ? rawOrigins(callee.object) : /* @__PURE__ */ new Set();
+    };
+    const evidenceOrigins = (node) => {
+      const current = unwrap5(node);
+      const direct = rawOrigins(current);
+      if (direct.size > 0) return direct;
+      if (current.type === AST_NODE_TYPES56.BinaryExpression || current.type === AST_NODE_TYPES56.LogicalExpression) return /* @__PURE__ */ new Set([...evidenceOrigins(current.left), ...evidenceOrigins(current.right)]);
+      if (current.type === AST_NODE_TYPES56.UnaryExpression) return evidenceOrigins(current.argument);
+      if (current.type !== AST_NODE_TYPES56.CallExpression) return /* @__PURE__ */ new Set();
+      const callee = unwrap5(current.callee);
+      if (callee.type !== AST_NODE_TYPES56.MemberExpression) return /* @__PURE__ */ new Set();
+      const name = staticMemberName5(callee);
+      if (name !== null && TEXT_PREDICATES.has(name)) return rawOrigins(callee.object);
+      if (name !== null && REGEXP_PREDICATES.has(name)) return new Set(current.arguments.flatMap((argument) => argument.type === AST_NODE_TYPES56.SpreadElement ? [] : [...rawOrigins(argument)]));
+      return /* @__PURE__ */ new Set();
+    };
+    const rawAssertionOrigins = (node) => {
+      const callee = unwrap5(node.callee);
+      if (callee.type === AST_NODE_TYPES56.Identifier && callee.name === "assert") {
+        return new Set(node.arguments.flatMap((argument) => argument.type === AST_NODE_TYPES56.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+      }
+      if (callee.type !== AST_NODE_TYPES56.MemberExpression) return /* @__PURE__ */ new Set();
+      const matcher = staticMemberName5(callee);
+      if (matcher === null) return /* @__PURE__ */ new Set();
+      let receiver = unwrap5(callee.object);
+      while (receiver.type === AST_NODE_TYPES56.MemberExpression && EXPECT_MODIFIERS.has(staticMemberName5(receiver) ?? "")) receiver = unwrap5(receiver.object);
+      if (receiver.type === AST_NODE_TYPES56.CallExpression && receiver.callee.type === AST_NODE_TYPES56.Identifier && receiver.callee.name === "expect") {
+        if (!EXPECT_MATCHERS.has(matcher)) return /* @__PURE__ */ new Set();
+        return new Set([...receiver.arguments, ...node.arguments].flatMap((argument) => argument.type === AST_NODE_TYPES56.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+      }
+      if (receiver.type !== AST_NODE_TYPES56.Identifier || receiver.name !== "assert" || !ASSERT_MATCHERS.has(matcher)) return /* @__PURE__ */ new Set();
+      return new Set(node.arguments.flatMap((argument) => argument.type === AST_NODE_TYPES56.SpreadElement ? [] : [...evidenceOrigins(argument)]));
+    };
+    const declare = (name, state) => {
+      const scope = currentScope();
+      scope.declared.add(name);
+      scope.collections.delete(name);
+      scope.fsObjects.delete(name);
+      scope.fsReaders.delete(name);
+      scope.paths.delete(name);
+      scope.rawOrigins.delete(name);
+      if (state.collection === true) scope.collections.add(name);
+      if (state.fsObject === true) scope.fsObjects.add(name);
+      if (state.fsReader === true) scope.fsReaders.add(name);
+      if (state.path === true) scope.paths.add(name);
+      if (state.rawOrigins !== void 0 && state.rawOrigins.size > 0) {
+        scope.rawOrigins.set(name, state.rawOrigins);
+      }
+    };
+    const sourceCollection = (node) => {
+      const current = unwrap5(node);
+      return current.type === AST_NODE_TYPES56.ArrayExpression && current.elements.length > 0 && current.elements.every((element) => element !== null && element.type !== AST_NODE_TYPES56.SpreadElement && sourcePath(element));
+    };
+    const declaredNames2 = (node) => {
+      const current = unwrap5(node);
+      if (current.type === AST_NODE_TYPES56.Identifier) return [current.name];
+      if (current.type === AST_NODE_TYPES56.AssignmentPattern) return declaredNames2(current.left);
+      if (current.type === AST_NODE_TYPES56.RestElement) return declaredNames2(current.argument);
+      if (current.type === AST_NODE_TYPES56.ArrayPattern) return current.elements.flatMap((element) => element === null ? [] : declaredNames2(element));
+      if (current.type === AST_NODE_TYPES56.ObjectPattern) return current.properties.flatMap((property) => property.type === AST_NODE_TYPES56.RestElement ? declaredNames2(property.argument) : declaredNames2(property.value));
+      return [];
+    };
+    const enterFunction = (node) => {
+      scopes.push(newScope());
+      for (const parameter of node.params) for (const name of declaredNames2(parameter)) declare(name, {});
+    };
+    const exitFunction = () => {
+      scopes.pop();
+    };
+    return {
+      ImportDeclaration(node) {
+        const source = importSource(node);
+        if (source === null || !FS_MODULES.has(source)) return;
+        for (const specifier of node.specifiers) {
+          if (specifier.type === AST_NODE_TYPES56.ImportSpecifier) {
+            const imported = specifier.imported.type === AST_NODE_TYPES56.Identifier ? specifier.imported.name : String(specifier.imported.value);
+            if (FS_READERS.has(imported)) declare(specifier.local.name, { fsReader: true });
+          } else {
+            declare(specifier.local.name, { fsObject: true });
+          }
+        }
+      },
+      ":function": enterFunction,
+      ":function:exit": exitFunction,
+      VariableDeclarator(node) {
+        if (node.init === null) return;
+        const required = requireSource(node.init);
+        if (required !== null && FS_MODULES.has(required) && node.id.type === AST_NODE_TYPES56.Identifier) {
+          declare(node.id.name, { fsObject: true });
+          return;
+        }
+        if (node.id.type === AST_NODE_TYPES56.ObjectPattern && required !== null && FS_MODULES.has(required)) {
+          for (const property of node.id.properties) {
+            if (property.type !== AST_NODE_TYPES56.Property || property.value.type !== AST_NODE_TYPES56.Identifier) continue;
+            const key = property.key.type === AST_NODE_TYPES56.Identifier ? property.key.name : property.key.type === AST_NODE_TYPES56.Literal ? String(property.key.value) : "";
+            if (FS_READERS.has(key)) declare(property.value.name, { fsReader: true });
+          }
+          return;
+        }
+        if (node.id.type !== AST_NODE_TYPES56.Identifier) return;
+        declare(node.id.name, { collection: sourceCollection(node.init), path: sourcePath(node.init), rawOrigins: rawOrigins(node.init) });
+      },
+      AssignmentExpression(node) {
+        if (node.left.type === AST_NODE_TYPES56.Identifier) declare(node.left.name, { path: sourcePath(node.right), rawOrigins: rawOrigins(node.right) });
+      },
+      ForOfStatement(node) {
+        const right = unwrap5(node.right);
+        const collection = right.type === AST_NODE_TYPES56.Identifier && visible("collections", right.name);
+        const left = node.left.type === AST_NODE_TYPES56.VariableDeclaration ? node.left.declarations[0]?.id : node.left;
+        if (collection && left?.type === AST_NODE_TYPES56.Identifier) declare(left.name, { path: true });
+      },
+      CallExpression(node) {
+        const origins = rawAssertionOrigins(node);
+        if (origins.size === 0 || [...origins].every((origin) => reportedOrigins.has(origin))) return;
+        for (const origin of origins) reportedOrigins.add(origin);
+        context.report({ node, messageId: "rawSourceOracle" });
+      }
+    };
+  }
+});
+
 // src/rules/zod-naming-convention.ts
 import {
-  AST_NODE_TYPES as AST_NODE_TYPES56,
+  AST_NODE_TYPES as AST_NODE_TYPES57,
   ASTUtils as ASTUtils16
 } from "@typescript-eslint/utils";
 var zodNamingConventionDocumentation = {
@@ -14807,18 +15089,18 @@ var NON_SCHEMA_TERMINALS = /* @__PURE__ */ new Set([
   "prettifyError",
   "treeifyError"
 ]);
-var terminalMethodName = (callee) => !callee.computed && callee.property.type === AST_NODE_TYPES56.Identifier ? callee.property.name : null;
+var terminalMethodName = (callee) => !callee.computed && callee.property.type === AST_NODE_TYPES57.Identifier ? callee.property.name : null;
 var calleeChainRoot = (node) => {
   let current = node;
   for (; ; ) {
-    if (current.type === AST_NODE_TYPES56.Identifier) {
+    if (current.type === AST_NODE_TYPES57.Identifier) {
       return current;
     }
-    if (current.type === AST_NODE_TYPES56.MemberExpression) {
+    if (current.type === AST_NODE_TYPES57.MemberExpression) {
       current = current.object;
       continue;
     }
-    if (current.type === AST_NODE_TYPES56.CallExpression) {
+    if (current.type === AST_NODE_TYPES57.CallExpression) {
       current = current.callee;
       continue;
     }
@@ -14880,7 +15162,7 @@ var zod_naming_convention_default = createRule({
       ImportDeclaration(node) {
         if (!isZodModule(node.source.value)) return;
         for (const specifier of node.specifiers) {
-          if (specifier.type === AST_NODE_TYPES56.ImportNamespaceSpecifier || specifier.type === AST_NODE_TYPES56.ImportDefaultSpecifier || specifier.type === AST_NODE_TYPES56.ImportSpecifier && (specifier.imported.type === AST_NODE_TYPES56.Identifier ? specifier.imported.name === "z" : specifier.imported.value === "z")) {
+          if (specifier.type === AST_NODE_TYPES57.ImportNamespaceSpecifier || specifier.type === AST_NODE_TYPES57.ImportDefaultSpecifier || specifier.type === AST_NODE_TYPES57.ImportSpecifier && (specifier.imported.type === AST_NODE_TYPES57.Identifier ? specifier.imported.name === "z" : specifier.imported.value === "z")) {
             recordZodBinding(specifier.local);
           }
         }
@@ -14888,13 +15170,13 @@ var zod_naming_convention_default = createRule({
       VariableDeclarator(node) {
         const init = node.init;
         if (init === null || init === void 0) return;
-        if (init.type !== AST_NODE_TYPES56.CallExpression) return;
+        if (init.type !== AST_NODE_TYPES57.CallExpression) return;
         const callee = init.callee;
-        if (callee.type !== AST_NODE_TYPES56.MemberExpression) return;
+        if (callee.type !== AST_NODE_TYPES57.MemberExpression) return;
         if (!isZodChain(callee)) return;
         const terminal = terminalMethodName(callee);
         if (terminal !== null && NON_SCHEMA_TERMINALS.has(terminal)) return;
-        if (node.id.type !== AST_NODE_TYPES56.Identifier) return;
+        if (node.id.type !== AST_NODE_TYPES57.Identifier) return;
         if (test.test(node.id.name)) return;
         if (acceptsSchemaWord && CONTAINS_SCHEMA_RE.test(node.id.name)) return;
         context.report({
@@ -15051,17 +15333,19 @@ var rules = {
   "require-zod-form-validation": require_zod_form_validation_default,
   "store-insert-requires-on-conflict": store_insert_requires_on_conflict_default,
   "stepdown": stepdown_default,
+  "source-coupled-test": source_coupled_test_default,
   "zod-naming-convention": zod_naming_convention_default
 };
 var meta = {
   name: "@sarj/eslint-plugin",
-  version: "15.6.6"
+  version: "15.6.8"
 };
 var applicationOnlyRules = [
   "no-restricted-library-load",
   "prefer-native-random-uuid",
   "prefer-shadcn-primitives"
 ];
+var advisoryRules = ["source-coupled-test"];
 var recommendedRules = {
   "@sarj/duplicate-test-body": "error",
   "@sarj/enforce-file-structure": "error",
@@ -15119,6 +15403,7 @@ var recommendedRules = {
   "@sarj/require-zod-form-validation": "error",
   "@sarj/store-insert-requires-on-conflict": "error",
   "@sarj/stepdown": "error",
+  "@sarj/source-coupled-test": "warn",
   "@sarj/zod-naming-convention": "error"
 };
 var strictRules = {
@@ -15182,6 +15467,7 @@ var strictRules = {
   "@sarj/require-zod-form-validation": "error",
   "@sarj/store-insert-requires-on-conflict": "error",
   "@sarj/stepdown": "error",
+  "@sarj/source-coupled-test": "warn",
   "@sarj/zod-naming-convention": "error"
 };
 var plugin = {
@@ -15205,6 +15491,7 @@ var plugin = {
 };
 var index_default = plugin;
 export {
+  advisoryRules,
   applicationOnlyRules,
   index_default as default,
   publicDocumentation,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sarj/eslint-plugin",
-  "version": "15.6.6",
+  "version": "15.6.8",
   "packageManager": "npm@12.0.2",
   "description": "Custom ESLint rules for hypermodern TypeScript / React / Next.js projects",
   "type": "module",