exadev-eslint-config 2.22.0 → 2.22.2

package/README.md

@@ -213,6 +213,11 @@ React support pairs `eslint-plugin-react`'s `flat/recommended` with its own `fla
       plugins: { exadev: plugin },
       extends: [plugin.configs.react], // throws if eslint-plugin-react isn't installed
     },
+    {
+      files: ['**/*.ts', '**/*.tsx'],
+      plugins: { exadev: plugin },
+      extends: [plugin.configs.nextjs], // throws if @next/eslint-plugin-next isn't installed
+    },
   );
   ```
 - **`exadevConfig({ react, nextjs })`** — see the tri-state table below.
@@ -350,7 +355,7 @@ Both entry points need `@eslint/json` resolvable (`pnpm add -D @eslint/json`), t
 | `root` | The workspace root directory. Defaults to the nearest ancestor of the linted file that owns a `pnpm-workspace.yaml`. |
 | `packages` | Workspace package globs, matching pnpm's own `pnpm-workspace.yaml` glob support (`*`, `**`, `[...]` character classes, `{...}` brace expansion, `!`-prefixed excludes; a wildcard segment never matches a name starting with "."; a `./` prefix, a `.`/`..` segment, and a repeated slash normalise the same way `path.posix.normalize` would, so `./packages/*`, `packages//*` and `a/../packages/*` all select the same projects). Defaults to that file's own top-level `packages:` block sequence, quoted or bare. A positive pattern that currently matches no directory (an empty group awaiting its first member, say) resolves to no packages, the same as pnpm itself. |
 | `dependencyFields` | `package.json` fields read as a package's declared dependencies. Defaults to `['dependencies']`. |
-| `groups` | The workspace's own directory taxonomy: `{ name, path?, rank?, slice?, naming? }`. `path` defaults to `name` (a group rooted at a directory of the same name). A group's own `naming` (`'drop-group'` \| `'keep-group'` \| `'basename'`, default `'drop-group'`) selects which segments of a package's path (after the group's own root) `package-name-mirrors-path` expects its declared name to derive: `'drop-group'` keeps every remaining path segment; `'keep-group'` additionally keeps the group's own name ahead of them (only the group's own last path segment, when its `path` nests more than one directory deep, never every container segment above it, so `{ path: 'packages/test' }` expects `test-e2e` for `packages/test/e2e`, not `packages-test-e2e`); `'basename'` keeps only the path's own final segment, dropping every intermediate directory. The joined segments are prefixed with `naming.scope` (when given) and separated with `naming.separator` (default `-`). |
+| `groups` | The workspace's own directory taxonomy: `{ name, path?, rank?, slice?, naming? }`. `path` defaults to `name` (a group rooted at a directory of the same name). A group's own `naming` (`'drop-group'` \| `'keep-group'` \| `'basename'`, default `'drop-group'`) selects which segments of a package's path (after the group's own root) `package-name-mirrors-path` expects its declared name to derive: `'drop-group'` keeps every remaining path segment, falling back to the group's own `name` when a package sits exactly at the group's own root (a standalone `docs` package under a `{ name: 'docs' }` group expects `docs`, never an empty or bare-scope name); `'keep-group'` additionally keeps the group's own `name` ahead of them, always, regardless of how deep its `path` nests (a group `{ name: 'test', path: 'packages/tests' }` expects `test-e2e` for `packages/tests/e2e`, never a path segment standing in for the name); `'basename'` keeps only the path's own final segment, dropping every intermediate directory. The joined segments are prefixed with `naming.scope` (when given) and separated with `naming.separator` (default `-`). |
 | `nameRanks` | The name-role rank model: `{ pattern, rank }[]`, a package's declared name checked against each `pattern` in order, first match wins, ahead of its own group's `rank`. Omit entirely for a pure group-rank model. pnpm allows a workspace package to declare no `name` at all; such a package has nothing for a pattern to match, so `nameRanks` is skipped for it entirely and its rank falls straight through to its own group's `rank` or `defaultRank`. |
 | `defaultRank` | The rank a package gets when neither `nameRanks` nor its own group resolves one. |
 | `rankSkip` | `{ maxDistance, exemptRanks }`. A dependency more than `maxDistance` ranks below its dependant, and not itself one of `exemptRanks` (typically a foundational rank 0), is a `rankSkip` violation. Omitted entirely, that check never runs. |
@@ -361,18 +366,15 @@ A group's own `slice` (`{ segment: N }` or `{ namePrefix: true }`) partitions it
 
 ### Example: a group-ranked repo
 
-Every group states its own `rank` directly; `test` keeps its own path segment in the derived name (`@novus/test-database`, not `@novus/database`), which every other group drops:
+Every group states its own `rank` directly; `test` keeps its own group name in the derived name (`@novus/test-database`, not `@novus/database`), which every other group drops:
 
 ```ts
 // eslint.config.ts
 import { defineConfig } from 'eslint/config';
-import { plugin, workspaceArchitectureConfig } from '@exadev/eslint-config';
+import { workspaceArchitectureConfig } from '@exadev/eslint-config';
 
 export default defineConfig(
   // ...your own config...
-  {
-    plugins: { exadev: plugin },
-  },
   ...workspaceArchitectureConfig({
     groups: [
       { name: 'core', rank: 0 },
@@ -386,6 +388,8 @@ export default defineConfig(
 );
 ```
 
+`workspaceArchitectureConfig()`'s own returned config block already registers `plugins: { exadev: plugin }` itself (see its own source), so a consumer using only this standalone export never wires the plugin by hand; that manual line is needed only alongside the "lighter option" section above, where nothing else in the array registers the plugin.
+
 ### Example: a name-ranked repo
 
 Rank comes from a package's own declared name, not its directory; `packages/targets` infers its slice from whichever feature/product vertical its own name is prefixed with, and `rankSkip` lets a target reach a rank-0 contract directly while still blocking it from skipping straight past `store-application-context` to an adapter:
@@ -442,10 +446,11 @@ export default exadevConfig({
 ### Build, test, and lint
 
 ```sh
-pnpm install    # requires Node >=20 and pnpm 11.6.0 (pinned via packageManager)
+pnpm install    # requires Node >=20 and the pnpm version pinned in package.json's packageManager field
 pnpm lint
 pnpm typecheck
 pnpm test
+pnpm test:mutation   # Stryker, 100% break threshold
 pnpm build
 ```
 
@@ -468,6 +473,7 @@ pnpm build
   - `recommended` ships `barrel-policy` at `mode: 'banned'`; `barrel` at `mode: 'single'`; `.react`/`.nextjs` call `buildReactConfig`/`buildNextjsConfig` with `enabled: true` (see below).
 - [`src/config-types.ts`](src/config-types.ts) holds `ConfigValue`/`ConfigArrayValue` (`ConfigArrayValue = Extract<ConfigValue, unknown[]>`, the array-only member of ESLint's own config-value union), shared by every file below rather than redefined per file.
   - *Why:* annotating a config array with the wider `ConfigValue` union directly broke `...exadev` with `TS2488` ("must have a Symbol.iterator method").
+  - It also holds `PublicConfigArray` (the default export's own `@eslint/core`-typed return shape) and `PublicPlugin` (the named `plugin` export's own boundary type, narrowing `configs` down to its four actual literal keys), the two public-boundary types [`src/to-public-config-array.ts`](src/to-public-config-array.ts)/[`src/to-public-plugin.ts`](src/to-public-plugin.ts) each cast into, isolated in their own single-cast modules for the reason each file's own comment gives.
 - [`src/optional-plugin.ts`](src/optional-plugin.ts) is the lazy-resolution helper behind React/Next.js support.
   - `tryRequire` wraps [`createRequire(import.meta.url)`](https://nodejs.org/api/module.html#modulecreaterequirefilename) in try/catch, returning `unknown` (never a cast) so every call site narrows explicitly before use.
   - `readFlatConfig` walks a property path through that `unknown` value via a real type guard, normalizing a stray legacy top-level `parserOptions` key into `languageOptions.parserOptions` along the way.
@@ -476,9 +482,16 @@ pnpm build
   - `[]` if unresolvable and not explicitly forced on; a thrown `Error` if explicitly forced on (`enabled: true`) and still unresolvable.
   - `react.ts`'s blocks are scoped to `files: ['**/*.jsx', '**/*.tsx']`; `nextjs.ts`'s is not (see [Optional React and Next.js support](#optional-react-and-nextjs-support) for why).
 - [`src/create-config.ts`](src/create-config.ts) is config assembly's single source of truth.
-  - `exadevConfig(options, ...userConfigs)` concatenates `recommendedTypeChecked` with both builders' output (each fed the matching tri-state option) and any trailing user configs.
+  - `exadevConfig(options, ...userConfigs)` concatenates, in order: `buildGitignoreConfig`, `recommendedTypeChecked`, `jsdocAndTsdoc`, `jsonCanonicalConfig`, `buildReactConfig`, `buildNextjsConfig`, `buildPackageJsonKeyOrderConfig` (each tri-state builder fed its matching option), `buildWorkspaceArchitectureConfig` (only when `workspaceArchitecture` is given; there is no auto-detected default), and any trailing user configs.
   - `defaultConfig` is `exadevConfig()` evaluated once, eagerly, at module load.
-- [`src/index.ts`](src/index.ts) is the entry point, still a pure re-export barrel: `export { defaultConfig as default, exadevConfig } from './create-config'; export { default as plugin } from './plugin';`.
+- [`src/index.ts`](src/index.ts) is the entry point, still a pure re-export barrel:
+  ```ts
+  export { defaultConfig as default, exadevConfig } from './create-config';
+  export { publicPlugin as plugin } from './plugin';
+  export { workspaceArchitectureConfig } from './workspace-architecture';
+  export type { GroupSpec, NamingOptions, RankRule, RankSkipOptions, SliceSpec, WorkspaceArchitectureOptions } from './rules/workspace-options';
+  ```
+  - The named export is `publicPlugin`, not `plugin`'s own internal default export: `plugin` (src/plugin.ts) is typed against `@typescript-eslint/utils`' `TSESLint.FlatConfig.Plugin` for full rule-option checking while this package assembles it, then cast once, at the very end of that same file, to `PublicPlugin` (see `src/to-public-plugin.ts`) before re-export, mirroring how `defaultConfig` is built against the internal `ConfigArrayValue` and cast to `PublicConfigArray` at `exadevConfig`'s own boundary.
   - Required by `no-side-effects-in-index`/`no-non-barrel-reexport`, both of which assume this file contains nothing but `export ... from ...`.
   - All exports share one root module, so importing `{ plugin }` alone still resolves `typescript-eslint` via the sibling re-export — an accepted trade-off (an earlier separate-subpath split proved more awkward in practice).
   - React/Next.js support never adds to this cost: none of the four optional packages are ever statically imported, only passed as a runtime string to `createRequire`'s resolver, so their absence never affects module evaluation for a consumer who doesn't use them.
@@ -503,7 +516,7 @@ pnpm build
 
 ### Contributing
 
-Conventional commits are enforced by a husky `commit-msg` hook and re-checked in CI. CI runs commitlint, lint, and typecheck+test+build+attw on every push and pull request; the release job runs only on push to `main`, after all pass.
+Conventional commits are enforced by a husky `commit-msg` hook and re-checked in CI. CI runs commitlint, lint, typecheck+test+build+attw, and mutation testing (Stryker) on every pull request, on push to `main`, and on manual dispatch; the release job runs only on `main` (push or manual dispatch), after all four jobs pass.
 
 ### Release
 

package/dist/index.cjs

@@ -251,6 +251,11 @@ const jsonCanonicalConfig = [
 	}
 ];
 //#endregion
+//#region src/is-record.ts
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//#endregion
 //#region src/optional-plugin.ts
 const nodeRequire = (0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
 function tryRequire(specifier, requireFn = nodeRequire) {
@@ -260,13 +265,10 @@ function tryRequire(specifier, requireFn = nodeRequire) {
 		return;
 	}
 }
-function isRecord$4(value) {
-	return typeof value === "object" && value !== null;
-}
 function normalizeLegacyParserOptions(record) {
 	if (!("parserOptions" in record)) return record;
 	const { parserOptions, languageOptions, ...rest } = record;
-	const existingLanguageOptions = isRecord$4(languageOptions) ? languageOptions : {};
+	const existingLanguageOptions = isRecord(languageOptions) ? languageOptions : {};
 	return {
 		...rest,
 		languageOptions: {
@@ -278,10 +280,10 @@ function normalizeLegacyParserOptions(record) {
 function readFlatConfig(module, path) {
 	let current = module;
 	for (const key of path) {
-		if (!isRecord$4(current)) return void 0;
+		if (!isRecord(current)) return void 0;
 		current = current[key];
 	}
-	if (!isRecord$4(current)) return void 0;
+	if (!isRecord(current)) return void 0;
 	return normalizeLegacyParserOptions(current);
 }
 //#endregion
@@ -295,21 +297,18 @@ function buildNextjsConfig(options = {}) {
 }
 //#endregion
 //#region src/json-plugin.ts
-function isRecord$3(value) {
-	return typeof value === "object" && value !== null;
-}
 function isJsonLanguagePlugin(value) {
-	if (!isRecord$3(value)) return false;
+	if (!isRecord(value)) return false;
 	const languages = value["languages"];
-	return isRecord$3(languages) && "json" in languages;
+	return isRecord(languages) && "json" in languages;
 }
 function resolveJsonPlugin(value) {
-	if (isRecord$3(value) && isJsonLanguagePlugin(value["default"])) return value["default"];
+	if (isRecord(value) && isJsonLanguagePlugin(value["default"])) return value["default"];
 	return isJsonLanguagePlugin(value) ? value : void 0;
 }
 //#endregion
 //#region package.json
-var version = "2.22.0";
+var version = "2.22.2";
 //#endregion
 //#region src/react.ts
 const JSX_FILE_PATTERNS = ["**/*.jsx", "**/*.tsx"];
@@ -348,6 +347,11 @@ function buildReactConfig(options = {}) {
 	}));
 }
 //#endregion
+//#region src/to-public-plugin.ts
+function toPublicPlugin(built) {
+	return built;
+}
+//#endregion
 //#region src/rules/barrel-helpers.ts
 const INDEX_BASENAME$1 = /^index\.[cm]?[tj]sx?$/;
 function basenameOf(filename) {
@@ -486,13 +490,10 @@ const barrelDirectSiblingsOnly = {
 };
 //#endregion
 //#region src/rules/barrel-auto-detect.ts
-function isRecord$2(value) {
-	return typeof value === "object" && value !== null;
-}
 function hasRealExports(value) {
 	if (typeof value === "string") return value.length > 0;
 	if (Array.isArray(value)) return value.length > 0;
-	return isRecord$2(value) && Object.keys(value).length > 0;
+	return isRecord(value) && Object.keys(value).length > 0;
 }
 function decideAutoBarrelMode(packageJson) {
 	const hasExports = hasRealExports(packageJson["exports"]);
@@ -509,7 +510,7 @@ function findNearestPackageJson(startDir) {
 		const candidate = (0, node_path.join)(dir, "package.json");
 		if ((0, node_fs.existsSync)(candidate)) {
 			const parsed = JSON.parse((0, node_fs.readFileSync)(candidate, "utf8"));
-			const result = isRecord$2(parsed) ? parsed : void 0;
+			const result = isRecord(parsed) ? parsed : void 0;
 			packageJsonByStartDir.set(startDir, result);
 			return result;
 		}
@@ -838,20 +839,20 @@ function listSubdirectories(fs, dir) {
 function splitPathSegments(path) {
 	return path.split("/").filter((segment) => segment.length > 0);
 }
-//#endregion
-//#region src/rules/workspace-glob.ts
-/** Reads `text[index]`, throwing rather than reading past the end: every call site in this file only ever derives `index` from a `for` loop whose own condition (`index < text.length`) already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. Exported so this throw (unreachable through every real call site) can be tested directly, the same "Unreachable, tested directly rather than trusted on a comment" shape workspace-yaml.ts's own `requireLine` establishes. */
-function requireChar$1(text, index) {
+/** Reads `text[index]`, throwing rather than reading past the end: every real call site in workspace-yaml.ts and workspace-glob.ts derives `index` from a `for` loop whose own condition already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. Shared by both modules. Exported so this throw (unreachable through every real call site) can be tested directly, the same "Unreachable, tested directly rather than trusted on a comment" shape package-json-key-order.ts's own `at()` helper establishes. */
+function requireChar(text, index) {
 	const char = text[index];
 	if (char === void 0) throw new Error(`Unreachable: index ${String(index)} is out of bounds for a string of length ${String(text.length)}.`);
 	return char;
 }
+//#endregion
+//#region src/rules/workspace-glob.ts
 const REGEXP_SPECIAL_CHARS = /[.+^${}()|\]\\]/gu;
 const ESCAPE_ANY_REGEXP_CHAR = /[.*+?^${}()|[\]\\]/gu;
 function segmentToRegExp(segment) {
 	let source = "";
 	for (let index = 0; index < segment.length;) {
-		const char = requireChar$1(segment, index);
+		const char = requireChar(segment, index);
 		if (char === "\\") {
 			const next = segment[index + 1];
 			if (next === void 0) {
@@ -919,7 +920,7 @@ function walkPattern(fs, root, segments, matchedSoFar) {
 function findMatchingBrace(pattern, openIndex) {
 	let depth = 0;
 	for (let index = openIndex; index < pattern.length; index += 1) {
-		const char = requireChar$1(pattern, index);
+		const char = requireChar(pattern, index);
 		if (char === "{") depth += 1;
 		else if (char === "}") {
 			depth -= 1;
@@ -933,7 +934,7 @@ function splitTopLevelAlternatives(text) {
 	let depth = 0;
 	let start = 0;
 	for (let index = 0; index < text.length; index += 1) {
-		const char = requireChar$1(text, index);
+		const char = requireChar(text, index);
 		if (char === "{") depth += 1;
 		else if (char === "}") depth -= 1;
 		else if (char === "," && depth === 0) {
@@ -1020,12 +1021,6 @@ function requireMatch(pattern, text) {
 	if (match === null) throw new Error(`Unreachable: /${pattern.source}/ was already confirmed to match "${text}".`);
 	return match;
 }
-/** Reads `text[index]`, throwing rather than reading past the end: both real call sites below derive `index` from a `for` loop whose own condition (`index < text.length`) already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. A genuinely maybe-out-of-bounds neighbour check (this file's own "the character right before/after this one, if any" reads) stays a plain `charAt`, deliberately: those are never loop-bound-guaranteed and a missing neighbour is a real, legitimate outcome, not a bug. Exported for the same direct-test reason as requireLine above. */
-function requireChar(text, index) {
-	const char = text[index];
-	if (char === void 0) throw new Error(`Unreachable: index ${String(index)} is out of bounds for a string of length ${String(text.length)}.`);
-	return char;
-}
 /** Whether `value[index]` is a quote character, returning that exact character (not merely `true`) so a caller can go on to search for the SAME quote style's own matching close. Exported for direct testing of its own per-index decision, independent of commentSearchStart's own real-string scenarios below. */
 function quoteCharAt(value, index) {
 	const char = value.charAt(index);
@@ -1074,7 +1069,7 @@ function readWorkspacePackages(yamlText) {
 	if (keyLineIndex === -1) return [];
 	const keyLine = requireLine(lines, keyLineIndex);
 	const inlineWithoutComment = stripComment(requireCapture(requireMatch(PACKAGES_KEY_PATTERN, keyLine), 1));
-	if (inlineWithoutComment.length > 0) throw new Error(`pnpm-workspace.yaml's "packages:" key is written in flow style ("${inlineWithoutComment}"), which this package's minimal reader does not support. Rewrite it as a block sequence (one "- 'glob'" per line), or pass the "packages" rule option explicitly.`);
+	if (inlineWithoutComment.length > 0) throw new Error(`@exadev/eslint-config: pnpm-workspace.yaml's "packages:" key is written in flow style ("${inlineWithoutComment}"), which this package's minimal reader does not support. Rewrite it as a block sequence (one "- 'glob'" per line), or pass the "packages" rule option explicitly.`);
 	const items = [];
 	let sequenceIndent;
 	for (let index = keyLineIndex + 1; index < lines.length; index += 1) {
@@ -1082,7 +1077,7 @@ function readWorkspacePackages(yamlText) {
 		if (line.trim().length === 0 || line.trim().startsWith("#")) continue;
 		const itemMatch = SEQUENCE_ITEM_PATTERN.exec(line);
 		if (itemMatch === null) {
-			if (items.length === 0) throw new Error(`pnpm-workspace.yaml's "packages:" key is present but its next line ("${line.trim()}") is not a block-sequence item ("- 'glob'"). This package's minimal reader only supports a block sequence; rewrite it, or pass the "packages" rule option explicitly.`);
+			if (items.length === 0) throw new Error(`@exadev/eslint-config: pnpm-workspace.yaml's "packages:" key is present but its next line ("${line.trim()}") is not a block-sequence item ("- 'glob'"). This package's minimal reader only supports a block sequence; rewrite it, or pass the "packages" rule option explicitly.`);
 			break;
 		}
 		const indent = requireCapture(itemMatch, 1);
@@ -1214,9 +1209,6 @@ const MISCONFIGURATION_MESSAGE = "exadev workspace architecture rules require op
 function fail() {
 	throw new Error(MISCONFIGURATION_MESSAGE);
 }
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 const TOP_LEVEL_KEYS = [
 	"root",
 	"packages",
@@ -1265,7 +1257,7 @@ function isNonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function isSliceSpec(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if ("segment" in value) return hasOnlyKeys(value, SLICE_BY_SEGMENT_KEYS) && isNonNegativeInteger(value["segment"]);
 	return hasOnlyKeys(value, SLICE_BY_NAME_PREFIX_KEYS) && value["namePrefix"] === true;
 }
@@ -1273,7 +1265,7 @@ function isNamingStrategy(value) {
 	return value === "drop-group" || value === "keep-group" || value === "basename";
 }
 function isGroupSpec(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, GROUP_KEYS)) return false;
 	if (typeof value["name"] !== "string") return false;
 	const { path, rank, slice, naming } = value;
@@ -1298,7 +1290,7 @@ function findDuplicateGroupName(groups) {
 	}
 }
 function isRankRule(value) {
-	return isRecord$1(value) && hasOnlyKeys(value, RANK_RULE_KEYS) && typeof value["pattern"] === "string" && isInteger(value["rank"]);
+	return isRecord(value) && hasOnlyKeys(value, RANK_RULE_KEYS) && typeof value["pattern"] === "string" && isInteger(value["rank"]);
 }
 function validateRankRulePatterns(rankRules) {
 	for (const rule of rankRules) try {
@@ -1315,7 +1307,7 @@ function asOptionalRankRuleArray(value) {
 	return value;
 }
 function isRankSkipOptions(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, RANK_SKIP_KEYS)) return false;
 	if (!isNonNegativeInteger(value["maxDistance"])) return false;
 	const { exemptRanks } = value;
@@ -1335,7 +1327,7 @@ function asOptionalIsolatedGroups(value) {
 	return value;
 }
 function isNamingOptions(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, NAMING_KEYS)) return false;
 	const { scope, separator } = value;
 	if (scope !== void 0 && typeof scope !== "string") return false;
@@ -1350,7 +1342,7 @@ function asOptionalNaming(value) {
 * The runtime safety net behind workspaceArchitectureOptionsSchema above: ESLint's own schema validation does run whenever the config is used in a real lint (rejecting malformed rule options there too, the same division of labour barrel-policy.ts's readMode establishes for its own, much smaller options shape), but workspaceArchitectureConfig() (src/workspace-architecture.ts) builds its rule options by calling this reader on the caller's raw object BEFORE that validation ever inspects it, and previously reconstructed a whitelisted object that silently dropped any unknown or misspelled top-level key rather than rejecting it, leaving ESLint's own schema nothing left to catch. This reader now rejects an unknown key at every level it validates (top level, group, slice, rankSkip, naming, nameRanks entries) itself, so a genuinely malformed options object still fails loudly and specifically here, whichever entry point it arrives through, rather than crashing later with a confusing TypeError deep inside graph construction or being silently ignored.
 */
 function readWorkspaceArchitectureOptions(options) {
-	if (!isRecord$1(options)) fail();
+	if (!isRecord(options)) fail();
 	if (!hasOnlyKeys(options, TOP_LEVEL_KEYS)) fail();
 	const groups = asGroupSpecArray(options["groups"]);
 	const duplicateGroupName = findDuplicateGroupName(groups);
@@ -1437,9 +1429,6 @@ function sliceByNamePrefix(declaredName, knownSlices) {
 	const unscoped = stripScope(declaredName);
 	return [...knownSlices].filter((candidate) => unscoped === candidate || unscoped.startsWith(`${candidate}-`)).sort((a, b) => b.length - a.length)[0];
 }
-function isRecord(value) {
-	return typeof value === "object" && value !== null;
-}
 /**
 * Reads a candidate package directory's own package.json directly (plain JSON.parse, not momoa): this is data collection for the graph, not a file being linted, so no AST/location information is needed. No existsSync guard here: every relativeDir this is called with came from resolveWorkspacePackageDirs, which already only returns directories that own a real package.json, so its absence here would mean that guarantee broke, not a case to handle quietly. A manifest that is not a usable JSON object at all (parses to an array, a string, null) returns undefined: nothing this graph can identify a package by, regardless of any "name" field. A manifest that IS a usable object but declares no "name" (or a non-string one) is different: pnpm allows a workspace package with no declared name at all, so its own `name` comes back as undefined rather than dropping the whole manifest, letting collectCandidates below key such a package by its directory instead of silently skipping it (and every dependency it declares along with it).
 *
@@ -1507,6 +1496,7 @@ function collectCandidates(fs, root, options) {
 	const relativeDirs = resolveWorkspacePackageDirs(fs, root, resolveWorkspacePackagePatterns(fs, root, options.packages));
 	const candidates = [];
 	for (const relativeDir of relativeDirs) {
+		if (relativeDir === "") continue;
 		const group = findOwningGroup(relativeDir, options.groups);
 		if (group === void 0) throw new Error(`@exadev/eslint-config: workspace package directory "${relativeDir}" (matched by the "packages" globs) is not covered by any configured group's own "path". Add a "groups" entry whose path prefixes it, or narrow "packages" to exclude it: an uncovered package would otherwise be silently skipped by every workspace-architecture check.`);
 		const manifest = readDeclaredManifest(fs, (0, node_path.join)(root, relativeDir), resolveDependencyFields(options));
@@ -1684,14 +1674,14 @@ function last(array) {
 /**
 * The three per-group naming strategies' own segment selection, keyed by NamingStrategy's own three literal members rather than a chain of ternaries: `Record<NamingStrategy, ...>` requires every member to have its own entry, which is what makes 'drop-group' a genuine, independently-typed branch, not merely "whatever the ternary chain falls through to when nothing else matched". Stryker's own typescript checker rejects a mutant that replaces the `?? 'drop-group'` fallback with some other string, since indexing this record with a value outside NamingStrategy is a type error, caught before any test even runs.
 *
-* - **'drop-group'**: drop the group's own root path segments, keep what remains.
-* - **'keep-group'**: keep the group's OWN name (or, when its root path nests more than one segment deep, only that path's own last segment) ahead of `rest`, not every segment of `relativeDir` including whatever container directories sit above the group's own root: a group declared as `{ path: 'packages/test' }` derives "test-e2e" for `packages/test/e2e`, never "packages-test-e2e", the same way a group with no nested path at all already would. A test group whose packages are named "test-<feature>", mirroring the feature they test, needs its own "test" segment kept, just not any further container segment above it.
+* - **'drop-group'**: drop the group's own root path segments, keep what remains, falling back to the group's own `name` when nothing remains: a package sitting exactly at its group's own root (`relativeDir` equals the group's `path`, a group that IS a single package rather than a container of them, a standalone `docs` package under a `{ name: 'docs' }` group, say) has no path segments left of its own for `rest` to keep, so the group's declared identity stands in for them, exactly as it always does for 'keep-group'. Without this, such a group could never have a satisfiable expected name at all: every package in it would derive an empty (or bare-scope) name no real `package.json` can declare.
+* - **'keep-group'**: keep the group's OWN `name` ahead of `rest`, always, regardless of how deep its own `path` nests: a group declared `{ name: 'test', path: 'tests' }` derives "test-e2e" for `tests/e2e`, and one declared `{ name: 'test', path: 'packages/tests' }` derives "test-e2e" for `packages/tests/e2e` too, never "tests-e2e" (the group's declared identity, not whatever path segment sits above it). A test group whose packages are named "test-<feature>", mirroring the feature they test, needs its own "test" name kept, regardless of how many container directories its `path` nests under.
 * - **'basename'**: use only `relativeDir`'s own final segment, ignoring every intermediate directory, for a group whose intermediate structure exists purely for filesystem organisation and carries no naming intent of its own.
 */
 const NAME_SEGMENTS_BY_STRATEGY = {
 	basename: ({ segments }) => [last(segments)],
-	"keep-group": ({ rest, groupNameSegment }) => [groupNameSegment, ...rest],
-	"drop-group": ({ rest }) => rest
+	"keep-group": ({ rest, group }) => [group.name, ...rest],
+	"drop-group": ({ rest, group }) => rest.length === 0 ? [group.name] : rest
 };
 /**
 * The package name package-name-mirrors-path expects a package at `relativeDir` (workspace-root-relative, forward-slash-joined) to declare, given its own matched group and the workspace's global naming options. See NAME_SEGMENTS_BY_STRATEGY above for the three per-group strategies' own segment selection. The joined segments are prefixed with `naming.scope` (when given) and joined to it with "/"; segments themselves join with `naming.separator` (default "-").
@@ -1701,15 +1691,27 @@ function expectedPackageName(relativeDir, group, naming) {
 	const segments = splitPathSegments(relativeDir);
 	const groupPathSegments = splitPathSegments(group.path ?? group.name);
 	const rest = segments.slice(groupPathSegments.length);
-	const groupNameSegment = last(groupPathSegments);
 	const joined = NAME_SEGMENTS_BY_STRATEGY[group.naming ?? "drop-group"]({
 		segments,
 		rest,
-		groupNameSegment
+		group
 	}).join(separator);
 	return naming.scope === void 0 ? joined : `${naming.scope}/${joined}`;
 }
 //#endregion
+//#region src/rules/json-member-key.ts
+function isStringNamed(name) {
+	return name.type === "String";
+}
+/**
+* Shared by package-json-key-order.ts and workspace-json-helpers.ts: momoa's own MemberNode.name is typed StringNode | IdentifierNode because momoa's grammar also covers JSON5 (unquoted identifier keys), but every rule that calls this only ever sets meta.languages to json/json or json/jsonc, where an unquoted key is a genuine parse error, never a value this function is asked to name. Exported so that guarantee is checked directly against a deliberately IdentifierNode-shaped input, rather than trusted on the strength of this comment alone.
+*/
+function getMemberKeyName(member) {
+	const { name } = member;
+	if (!isStringNamed(name)) throw new Error(`Unreachable: JSON member names are only read under json/json or json/jsonc, where an unquoted (Identifier) member name is a parse error, got a "${name.type}" name instead.`);
+	return name.value;
+}
+//#endregion
 //#region src/rules/workspace-json-helpers.ts
 function isStringNode$1(node) {
 	return node.type === "String";
@@ -1717,7 +1719,7 @@ function isStringNode$1(node) {
 /** package.json's own declared "name" field, read directly off a confirmed-top-level Object node. Returns undefined for a manifest with no "name" at all, or one whose value is not a plain string (a shape other JSON tooling would already flag elsewhere, not this rule's concern). */
 function readDeclaredName(rootObject) {
 	for (const member of rootObject.members) {
-		if (!isStringNode$1(member.name) || member.name.value !== "name") continue;
+		if (getMemberKeyName(member) !== "name") continue;
 		if (!isStringNode$1(member.value)) return void 0;
 		return {
 			name: member.value.value,
@@ -1732,15 +1734,12 @@ function collectTopLevelDependencies(rootObject, dependencyFields) {
 	const fields = new Set(dependencyFields);
 	const results = [];
 	for (const member of rootObject.members) {
-		if (!isStringNode$1(member.name) || !fields.has(member.name.value)) continue;
+		if (!fields.has(getMemberKeyName(member))) continue;
 		if (member.value.type !== "Object") continue;
-		for (const dependency of member.value.members) {
-			if (!isStringNode$1(dependency.name)) continue;
-			results.push({
-				name: dependency.name.value,
-				node: dependency
-			});
-		}
+		for (const dependency of member.value.members) results.push({
+			name: getMemberKeyName(dependency),
+			node: dependency
+		});
 	}
 	return results;
 }
@@ -1763,7 +1762,7 @@ function createNoDependencyCycleRule(deps = {}) {
 				description: "Disallow a cyclic workspace dependency.",
 				url: "https://github.com/ExaDev/eslint-config/blob/main/src/rules/no-dependency-cycle.ts"
 			},
-			messages: { cycle: "\"{{from}}\" depends on \"{{to}}\", which depends back on \"{{from}}\": a workspace cycle. Move the shared code into a package both can depend on, or invert one edge behind a contract." }
+			messages: { cycle: "\"{{from}}\" depends on \"{{to}}\", which can reach back to \"{{from}}\": a workspace cycle. Move the shared code into a package both can depend on, or invert one edge behind a contract." }
 		},
 		create(context) {
 			const options = readWorkspaceArchitectureOptions(context.options[0]);
@@ -2595,14 +2594,6 @@ function isIdentityPermutation(permutation) {
 function isStringNode(node) {
 	return node.type === "String";
 }
-function isStringNamed(name) {
-	return name.type === "String";
-}
-function getMemberKeyName(member) {
-	const { name } = member;
-	if (!isStringNamed(name)) throw new Error(`Unreachable: package-json-key-order only supports json/json and json/jsonc, where an unquoted (Identifier) member name is a parse error — got a "${name.type}" name instead.`);
-	return name.value;
-}
 function rangeOf(node) {
 	if (node.range === void 0) throw new Error("Unreachable: every node reaching this function was produced by a JSON language that always requests range tracking.");
 	return node.range;
@@ -2854,11 +2845,11 @@ const FUNCTION_LIKE_SELECTOR$2 = [
 function isOptionalParam(param) {
 	if (param.type === _typescript_eslint_utils.AST_NODE_TYPES.TSParameterProperty) return isOptionalParam(param.parameter);
 	if (param.type === _typescript_eslint_utils.AST_NODE_TYPES.AssignmentPattern) return true;
-	if (param.type === _typescript_eslint_utils.AST_NODE_TYPES.Identifier) return param.optional;
+	if (param.type === _typescript_eslint_utils.AST_NODE_TYPES.Identifier || param.type === _typescript_eslint_utils.AST_NODE_TYPES.ObjectPattern || param.type === _typescript_eslint_utils.AST_NODE_TYPES.ArrayPattern) return param.optional;
 	return false;
 }
 function getTrailingOptionalRun(params) {
-	const hasTrailingRest = params.length > 0 && params[params.length - 1]?.type === _typescript_eslint_utils.AST_NODE_TYPES.RestElement;
+	const hasTrailingRest = params[params.length - 1]?.type === _typescript_eslint_utils.AST_NODE_TYPES.RestElement;
 	const run = [];
 	for (let i = params.length - (hasTrailingRest ? 2 : 1); i >= 0; i--) {
 		const param = params[i];
@@ -2868,7 +2859,6 @@ function getTrailingOptionalRun(params) {
 	return run;
 }
 function resolveFixableParam(param) {
-	if (param.type === _typescript_eslint_utils.AST_NODE_TYPES.TSParameterProperty) return void 0;
 	const identifierNode = param.type === _typescript_eslint_utils.AST_NODE_TYPES.AssignmentPattern ? param.left.type === _typescript_eslint_utils.AST_NODE_TYPES.Identifier ? param.left : void 0 : param.type === _typescript_eslint_utils.AST_NODE_TYPES.Identifier ? param : void 0;
 	if (identifierNode === void 0) return void 0;
 	const typeNode = identifierNode.typeAnnotation?.typeAnnotation;
@@ -2962,7 +2952,7 @@ const preferOptionsObjectParam = createRule$2({
 			const allResolvable = resolvedParams.length === run.length;
 			const hasRestParam = node.params.some((param) => param.type === _typescript_eslint_utils.AST_NODE_TYPES.RestElement);
 			const body = getBlockBody(node);
-			let isFixable = allResolvable && !hasRestParam && body !== void 0;
+			let isFixable = allResolvable && !hasRestParam;
 			if (isFixable) {
 				const jsdocComment = getLeadingJSDocComment(sourceCode, node);
 				const jsDocBail = jsdocComment !== void 0 && resolvedParams.some((info) => jsDocMentionsParam(jsdocComment.value, info.identifierNode.name));
@@ -3305,6 +3295,7 @@ const plugin = {
 		}
 	}
 };
+const publicPlugin = toPublicPlugin(plugin);
 //#endregion
 //#region src/package-json-key-order.ts
 const SYNCPACK_CONFIG_FILENAMES = [
@@ -3448,11 +3439,13 @@ function toPublicConfigArray(built) {
 //#endregion
 //#region src/workspace-architecture.ts
 /**
-* Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. This is the named export a repo not using the full `exadevConfig()`/default-export bundle (hive, which builds its own `eslint.config.ts` from `plugin` directly) wires in on its own, exactly the same way `plugin`'s own recommended/barrel configs serve a consumer of the lighter `plugin` export.
+* Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. Internal: consumed by create-config.ts as one more `ConfigArrayValue` entry among the rest of `exadevConfig`'s own internally-typed build (see recommendedTypeChecked, buildReactConfig, buildNextjsConfig et al. for the same shape), before that whole array is converted once at `exadevConfig`'s own outer boundary. Never exported directly; a standalone consumer wants `workspaceArchitectureConfig` below instead.
 *
 * Unlike buildPackageJsonKeyOrderConfig, this has no auto-detecting tri-state: workspace architecture rules require real configuration (`groups` has no sensible default), so this is off unless a consumer calls it at all, and, once called, always requires `@eslint/json` to be resolvable (there is no "silently do nothing" case to fall back to the way an unconfigured, purely auto-detected feature can).
+*
+* Takes `WorkspaceArchitectureConfigOptions` (the `requireFn` test seam included) rather than the public `workspaceArchitectureConfig` export's own `WorkspaceArchitectureOptions`, so this internal builder's own tests (workspace-architecture.unit.test.ts) can still simulate an unresolvable `@eslint/json` directly, without the seam ever reaching the public function's parameter type or dist/index.d.ts.
 */
-function workspaceArchitectureConfig(options) {
+function buildWorkspaceArchitectureConfig(options) {
 	const { requireFn, ...ruleOptions } = options;
 	const validated = readWorkspaceArchitectureOptions(ruleOptions);
 	const jsonPlugin = resolveJsonPlugin(tryRequire("@eslint/json", requireFn));
@@ -3471,6 +3464,12 @@ function workspaceArchitectureConfig(options) {
 		}
 	}];
 }
+/**
+* Wires the three workspace-architecture rules (`no-uphill-dependency`, `no-dependency-cycle`, and, when the shared `naming` option is given, `package-name-mirrors-path`) onto `**\/package.json` from one `WorkspaceArchitectureOptions` object, returning ESLint core's own `Config[]` so the result spreads directly into `defineConfig(...)` (`...workspaceArchitectureConfig(options)`, the README's own standalone usage) alongside a consumer's own configuration.
+*/
+function workspaceArchitectureConfig(options) {
+	return toPublicConfigArray(buildWorkspaceArchitectureConfig(options));
+}
 //#endregion
 //#region src/create-config.ts
 function exadevConfig(options = {}, ...userConfigs) {
@@ -3482,7 +3481,7 @@ function exadevConfig(options = {}, ...userConfigs) {
 		...buildReactConfig({ enabled: options.react }),
 		...buildNextjsConfig({ enabled: options.nextjs }),
 		...buildPackageJsonKeyOrderConfig({ enabled: options.packageJsonKeyOrder }),
-		...options.workspaceArchitecture !== void 0 ? workspaceArchitectureConfig(options.workspaceArchitecture) : [],
+		...options.workspaceArchitecture !== void 0 ? buildWorkspaceArchitectureConfig(options.workspaceArchitecture) : [],
 		...userConfigs
 	]);
 }
@@ -3490,5 +3489,5 @@ const defaultConfig = exadevConfig();
 //#endregion
 exports.default = defaultConfig;
 exports.exadevConfig = exadevConfig;
-exports.plugin = plugin;
+exports.plugin = publicPlugin;
 exports.workspaceArchitectureConfig = workspaceArchitectureConfig;

package/dist/index.d.cts

@@ -1,9 +1,11 @@
 import { TSESLint } from "@typescript-eslint/utils";
-import { Config } from "eslint/config";
+import { Config, ConfigObject } from "eslint/config";
 //#region src/config-types.d.ts
-type ConfigValue = NonNullable<TSESLint.FlatConfig.Plugin['configs']>[string];
-type ConfigArrayValue = Extract<ConfigValue, unknown[]>;
 type PublicConfigArray = Config[];
+type PublicConfigObject = ConfigObject | ConfigObject[];
+type PublicPlugin = Omit<NonNullable<ConfigObject['plugins']>[string], 'configs'> & {
+  readonly configs: Readonly<Record<'recommended' | 'barrel' | 'react' | 'nextjs', PublicConfigObject>>;
+};
 //#endregion
 //#region src/rules/workspace-options.d.ts
 interface SliceBySegment {
@@ -57,20 +59,12 @@ declare function exadevConfig(options?: ExadevConfigOptions, ...userConfigs: rea
 declare const defaultConfig: PublicConfigArray;
 //#endregion
 //#region src/plugin.d.ts
-declare const plugin: TSESLint.FlatConfig.Plugin;
-//#endregion
-//#region src/optional-plugin.d.ts
-type RequireFn = (specifier: string) => unknown;
+declare const publicPlugin: PublicPlugin;
 //#endregion
 //#region src/workspace-architecture.d.ts
-interface WorkspaceArchitectureConfigOptions extends WorkspaceArchitectureOptions {
-  readonly requireFn?: RequireFn;
-}
 /**
- * Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. This is the named export a repo not using the full `exadevConfig()`/default-export bundle (hive, which builds its own `eslint.config.ts` from `plugin` directly) wires in on its own, exactly the same way `plugin`'s own recommended/barrel configs serve a consumer of the lighter `plugin` export.
- *
- * Unlike buildPackageJsonKeyOrderConfig, this has no auto-detecting tri-state: workspace architecture rules require real configuration (`groups` has no sensible default), so this is off unless a consumer calls it at all, and, once called, always requires `@eslint/json` to be resolvable (there is no "silently do nothing" case to fall back to the way an unconfigured, purely auto-detected feature can).
+ * Wires the three workspace-architecture rules (`no-uphill-dependency`, `no-dependency-cycle`, and, when the shared `naming` option is given, `package-name-mirrors-path`) onto `**\/package.json` from one `WorkspaceArchitectureOptions` object, returning ESLint core's own `Config[]` so the result spreads directly into `defineConfig(...)` (`...workspaceArchitectureConfig(options)`, the README's own standalone usage) alongside a consumer's own configuration.
  */
-declare function workspaceArchitectureConfig(options: WorkspaceArchitectureConfigOptions): ConfigArrayValue;
+declare function workspaceArchitectureConfig(options: WorkspaceArchitectureOptions): PublicConfigArray;
 //#endregion
-export { type GroupSpec, type NamingOptions, type RankRule, type RankSkipOptions, type SliceSpec, type WorkspaceArchitectureOptions, defaultConfig as default, exadevConfig, plugin, workspaceArchitectureConfig };
+export { type GroupSpec, type NamingOptions, type RankRule, type RankSkipOptions, type SliceSpec, type WorkspaceArchitectureOptions, defaultConfig as default, exadevConfig, publicPlugin as plugin, workspaceArchitectureConfig };

package/dist/index.d.ts

@@ -1,9 +1,11 @@
 import { TSESLint } from "@typescript-eslint/utils";
-import { Config } from "eslint/config";
+import { Config, ConfigObject } from "eslint/config";
 //#region src/config-types.d.ts
-type ConfigValue = NonNullable<TSESLint.FlatConfig.Plugin['configs']>[string];
-type ConfigArrayValue = Extract<ConfigValue, unknown[]>;
 type PublicConfigArray = Config[];
+type PublicConfigObject = ConfigObject | ConfigObject[];
+type PublicPlugin = Omit<NonNullable<ConfigObject['plugins']>[string], 'configs'> & {
+  readonly configs: Readonly<Record<'recommended' | 'barrel' | 'react' | 'nextjs', PublicConfigObject>>;
+};
 //#endregion
 //#region src/rules/workspace-options.d.ts
 interface SliceBySegment {
@@ -57,20 +59,12 @@ declare function exadevConfig(options?: ExadevConfigOptions, ...userConfigs: rea
 declare const defaultConfig: PublicConfigArray;
 //#endregion
 //#region src/plugin.d.ts
-declare const plugin: TSESLint.FlatConfig.Plugin;
-//#endregion
-//#region src/optional-plugin.d.ts
-type RequireFn = (specifier: string) => unknown;
+declare const publicPlugin: PublicPlugin;
 //#endregion
 //#region src/workspace-architecture.d.ts
-interface WorkspaceArchitectureConfigOptions extends WorkspaceArchitectureOptions {
-  readonly requireFn?: RequireFn;
-}
 /**
- * Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. This is the named export a repo not using the full `exadevConfig()`/default-export bundle (hive, which builds its own `eslint.config.ts` from `plugin` directly) wires in on its own, exactly the same way `plugin`'s own recommended/barrel configs serve a consumer of the lighter `plugin` export.
- *
- * Unlike buildPackageJsonKeyOrderConfig, this has no auto-detecting tri-state: workspace architecture rules require real configuration (`groups` has no sensible default), so this is off unless a consumer calls it at all, and, once called, always requires `@eslint/json` to be resolvable (there is no "silently do nothing" case to fall back to the way an unconfigured, purely auto-detected feature can).
+ * Wires the three workspace-architecture rules (`no-uphill-dependency`, `no-dependency-cycle`, and, when the shared `naming` option is given, `package-name-mirrors-path`) onto `**\/package.json` from one `WorkspaceArchitectureOptions` object, returning ESLint core's own `Config[]` so the result spreads directly into `defineConfig(...)` (`...workspaceArchitectureConfig(options)`, the README's own standalone usage) alongside a consumer's own configuration.
  */
-declare function workspaceArchitectureConfig(options: WorkspaceArchitectureConfigOptions): ConfigArrayValue;
+declare function workspaceArchitectureConfig(options: WorkspaceArchitectureOptions): PublicConfigArray;
 //#endregion
-export { type GroupSpec, type NamingOptions, type RankRule, type RankSkipOptions, type SliceSpec, type WorkspaceArchitectureOptions, defaultConfig as default, exadevConfig, plugin, workspaceArchitectureConfig };
+export { type GroupSpec, type NamingOptions, type RankRule, type RankSkipOptions, type SliceSpec, type WorkspaceArchitectureOptions, defaultConfig as default, exadevConfig, publicPlugin as plugin, workspaceArchitectureConfig };

package/dist/index.js

@@ -217,6 +217,11 @@ const jsonCanonicalConfig = [
 	}
 ];
 //#endregion
+//#region src/is-record.ts
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//#endregion
 //#region src/optional-plugin.ts
 const nodeRequire = createRequire(import.meta.url);
 function tryRequire(specifier, requireFn = nodeRequire) {
@@ -226,13 +231,10 @@ function tryRequire(specifier, requireFn = nodeRequire) {
 		return;
 	}
 }
-function isRecord$4(value) {
-	return typeof value === "object" && value !== null;
-}
 function normalizeLegacyParserOptions(record) {
 	if (!("parserOptions" in record)) return record;
 	const { parserOptions, languageOptions, ...rest } = record;
-	const existingLanguageOptions = isRecord$4(languageOptions) ? languageOptions : {};
+	const existingLanguageOptions = isRecord(languageOptions) ? languageOptions : {};
 	return {
 		...rest,
 		languageOptions: {
@@ -244,10 +246,10 @@ function normalizeLegacyParserOptions(record) {
 function readFlatConfig(module, path) {
 	let current = module;
 	for (const key of path) {
-		if (!isRecord$4(current)) return void 0;
+		if (!isRecord(current)) return void 0;
 		current = current[key];
 	}
-	if (!isRecord$4(current)) return void 0;
+	if (!isRecord(current)) return void 0;
 	return normalizeLegacyParserOptions(current);
 }
 //#endregion
@@ -261,21 +263,18 @@ function buildNextjsConfig(options = {}) {
 }
 //#endregion
 //#region src/json-plugin.ts
-function isRecord$3(value) {
-	return typeof value === "object" && value !== null;
-}
 function isJsonLanguagePlugin(value) {
-	if (!isRecord$3(value)) return false;
+	if (!isRecord(value)) return false;
 	const languages = value["languages"];
-	return isRecord$3(languages) && "json" in languages;
+	return isRecord(languages) && "json" in languages;
 }
 function resolveJsonPlugin(value) {
-	if (isRecord$3(value) && isJsonLanguagePlugin(value["default"])) return value["default"];
+	if (isRecord(value) && isJsonLanguagePlugin(value["default"])) return value["default"];
 	return isJsonLanguagePlugin(value) ? value : void 0;
 }
 //#endregion
 //#region package.json
-var version = "2.22.0";
+var version = "2.22.2";
 //#endregion
 //#region src/react.ts
 const JSX_FILE_PATTERNS = ["**/*.jsx", "**/*.tsx"];
@@ -314,6 +313,11 @@ function buildReactConfig(options = {}) {
 	}));
 }
 //#endregion
+//#region src/to-public-plugin.ts
+function toPublicPlugin(built) {
+	return built;
+}
+//#endregion
 //#region src/rules/barrel-helpers.ts
 const INDEX_BASENAME$1 = /^index\.[cm]?[tj]sx?$/;
 function basenameOf(filename) {
@@ -452,13 +456,10 @@ const barrelDirectSiblingsOnly = {
 };
 //#endregion
 //#region src/rules/barrel-auto-detect.ts
-function isRecord$2(value) {
-	return typeof value === "object" && value !== null;
-}
 function hasRealExports(value) {
 	if (typeof value === "string") return value.length > 0;
 	if (Array.isArray(value)) return value.length > 0;
-	return isRecord$2(value) && Object.keys(value).length > 0;
+	return isRecord(value) && Object.keys(value).length > 0;
 }
 function decideAutoBarrelMode(packageJson) {
 	const hasExports = hasRealExports(packageJson["exports"]);
@@ -475,7 +476,7 @@ function findNearestPackageJson(startDir) {
 		const candidate = join(dir, "package.json");
 		if (existsSync(candidate)) {
 			const parsed = JSON.parse(readFileSync(candidate, "utf8"));
-			const result = isRecord$2(parsed) ? parsed : void 0;
+			const result = isRecord(parsed) ? parsed : void 0;
 			packageJsonByStartDir.set(startDir, result);
 			return result;
 		}
@@ -804,20 +805,20 @@ function listSubdirectories(fs, dir) {
 function splitPathSegments(path) {
 	return path.split("/").filter((segment) => segment.length > 0);
 }
-//#endregion
-//#region src/rules/workspace-glob.ts
-/** Reads `text[index]`, throwing rather than reading past the end: every call site in this file only ever derives `index` from a `for` loop whose own condition (`index < text.length`) already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. Exported so this throw (unreachable through every real call site) can be tested directly, the same "Unreachable, tested directly rather than trusted on a comment" shape workspace-yaml.ts's own `requireLine` establishes. */
-function requireChar$1(text, index) {
+/** Reads `text[index]`, throwing rather than reading past the end: every real call site in workspace-yaml.ts and workspace-glob.ts derives `index` from a `for` loop whose own condition already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. Shared by both modules. Exported so this throw (unreachable through every real call site) can be tested directly, the same "Unreachable, tested directly rather than trusted on a comment" shape package-json-key-order.ts's own `at()` helper establishes. */
+function requireChar(text, index) {
 	const char = text[index];
 	if (char === void 0) throw new Error(`Unreachable: index ${String(index)} is out of bounds for a string of length ${String(text.length)}.`);
 	return char;
 }
+//#endregion
+//#region src/rules/workspace-glob.ts
 const REGEXP_SPECIAL_CHARS = /[.+^${}()|\]\\]/gu;
 const ESCAPE_ANY_REGEXP_CHAR = /[.*+?^${}()|[\]\\]/gu;
 function segmentToRegExp(segment) {
 	let source = "";
 	for (let index = 0; index < segment.length;) {
-		const char = requireChar$1(segment, index);
+		const char = requireChar(segment, index);
 		if (char === "\\") {
 			const next = segment[index + 1];
 			if (next === void 0) {
@@ -885,7 +886,7 @@ function walkPattern(fs, root, segments, matchedSoFar) {
 function findMatchingBrace(pattern, openIndex) {
 	let depth = 0;
 	for (let index = openIndex; index < pattern.length; index += 1) {
-		const char = requireChar$1(pattern, index);
+		const char = requireChar(pattern, index);
 		if (char === "{") depth += 1;
 		else if (char === "}") {
 			depth -= 1;
@@ -899,7 +900,7 @@ function splitTopLevelAlternatives(text) {
 	let depth = 0;
 	let start = 0;
 	for (let index = 0; index < text.length; index += 1) {
-		const char = requireChar$1(text, index);
+		const char = requireChar(text, index);
 		if (char === "{") depth += 1;
 		else if (char === "}") depth -= 1;
 		else if (char === "," && depth === 0) {
@@ -986,12 +987,6 @@ function requireMatch(pattern, text) {
 	if (match === null) throw new Error(`Unreachable: /${pattern.source}/ was already confirmed to match "${text}".`);
 	return match;
 }
-/** Reads `text[index]`, throwing rather than reading past the end: both real call sites below derive `index` from a `for` loop whose own condition (`index < text.length`) already guarantees it in range, so an out-of-bounds read here would mean that loop's own invariant broke, not a case to handle quietly. A genuinely maybe-out-of-bounds neighbour check (this file's own "the character right before/after this one, if any" reads) stays a plain `charAt`, deliberately: those are never loop-bound-guaranteed and a missing neighbour is a real, legitimate outcome, not a bug. Exported for the same direct-test reason as requireLine above. */
-function requireChar(text, index) {
-	const char = text[index];
-	if (char === void 0) throw new Error(`Unreachable: index ${String(index)} is out of bounds for a string of length ${String(text.length)}.`);
-	return char;
-}
 /** Whether `value[index]` is a quote character, returning that exact character (not merely `true`) so a caller can go on to search for the SAME quote style's own matching close. Exported for direct testing of its own per-index decision, independent of commentSearchStart's own real-string scenarios below. */
 function quoteCharAt(value, index) {
 	const char = value.charAt(index);
@@ -1040,7 +1035,7 @@ function readWorkspacePackages(yamlText) {
 	if (keyLineIndex === -1) return [];
 	const keyLine = requireLine(lines, keyLineIndex);
 	const inlineWithoutComment = stripComment(requireCapture(requireMatch(PACKAGES_KEY_PATTERN, keyLine), 1));
-	if (inlineWithoutComment.length > 0) throw new Error(`pnpm-workspace.yaml's "packages:" key is written in flow style ("${inlineWithoutComment}"), which this package's minimal reader does not support. Rewrite it as a block sequence (one "- 'glob'" per line), or pass the "packages" rule option explicitly.`);
+	if (inlineWithoutComment.length > 0) throw new Error(`@exadev/eslint-config: pnpm-workspace.yaml's "packages:" key is written in flow style ("${inlineWithoutComment}"), which this package's minimal reader does not support. Rewrite it as a block sequence (one "- 'glob'" per line), or pass the "packages" rule option explicitly.`);
 	const items = [];
 	let sequenceIndent;
 	for (let index = keyLineIndex + 1; index < lines.length; index += 1) {
@@ -1048,7 +1043,7 @@ function readWorkspacePackages(yamlText) {
 		if (line.trim().length === 0 || line.trim().startsWith("#")) continue;
 		const itemMatch = SEQUENCE_ITEM_PATTERN.exec(line);
 		if (itemMatch === null) {
-			if (items.length === 0) throw new Error(`pnpm-workspace.yaml's "packages:" key is present but its next line ("${line.trim()}") is not a block-sequence item ("- 'glob'"). This package's minimal reader only supports a block sequence; rewrite it, or pass the "packages" rule option explicitly.`);
+			if (items.length === 0) throw new Error(`@exadev/eslint-config: pnpm-workspace.yaml's "packages:" key is present but its next line ("${line.trim()}") is not a block-sequence item ("- 'glob'"). This package's minimal reader only supports a block sequence; rewrite it, or pass the "packages" rule option explicitly.`);
 			break;
 		}
 		const indent = requireCapture(itemMatch, 1);
@@ -1180,9 +1175,6 @@ const MISCONFIGURATION_MESSAGE = "exadev workspace architecture rules require op
 function fail() {
 	throw new Error(MISCONFIGURATION_MESSAGE);
 }
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 const TOP_LEVEL_KEYS = [
 	"root",
 	"packages",
@@ -1231,7 +1223,7 @@ function isNonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function isSliceSpec(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if ("segment" in value) return hasOnlyKeys(value, SLICE_BY_SEGMENT_KEYS) && isNonNegativeInteger(value["segment"]);
 	return hasOnlyKeys(value, SLICE_BY_NAME_PREFIX_KEYS) && value["namePrefix"] === true;
 }
@@ -1239,7 +1231,7 @@ function isNamingStrategy(value) {
 	return value === "drop-group" || value === "keep-group" || value === "basename";
 }
 function isGroupSpec(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, GROUP_KEYS)) return false;
 	if (typeof value["name"] !== "string") return false;
 	const { path, rank, slice, naming } = value;
@@ -1264,7 +1256,7 @@ function findDuplicateGroupName(groups) {
 	}
 }
 function isRankRule(value) {
-	return isRecord$1(value) && hasOnlyKeys(value, RANK_RULE_KEYS) && typeof value["pattern"] === "string" && isInteger(value["rank"]);
+	return isRecord(value) && hasOnlyKeys(value, RANK_RULE_KEYS) && typeof value["pattern"] === "string" && isInteger(value["rank"]);
 }
 function validateRankRulePatterns(rankRules) {
 	for (const rule of rankRules) try {
@@ -1281,7 +1273,7 @@ function asOptionalRankRuleArray(value) {
 	return value;
 }
 function isRankSkipOptions(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, RANK_SKIP_KEYS)) return false;
 	if (!isNonNegativeInteger(value["maxDistance"])) return false;
 	const { exemptRanks } = value;
@@ -1301,7 +1293,7 @@ function asOptionalIsolatedGroups(value) {
 	return value;
 }
 function isNamingOptions(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (!hasOnlyKeys(value, NAMING_KEYS)) return false;
 	const { scope, separator } = value;
 	if (scope !== void 0 && typeof scope !== "string") return false;
@@ -1316,7 +1308,7 @@ function asOptionalNaming(value) {
 * The runtime safety net behind workspaceArchitectureOptionsSchema above: ESLint's own schema validation does run whenever the config is used in a real lint (rejecting malformed rule options there too, the same division of labour barrel-policy.ts's readMode establishes for its own, much smaller options shape), but workspaceArchitectureConfig() (src/workspace-architecture.ts) builds its rule options by calling this reader on the caller's raw object BEFORE that validation ever inspects it, and previously reconstructed a whitelisted object that silently dropped any unknown or misspelled top-level key rather than rejecting it, leaving ESLint's own schema nothing left to catch. This reader now rejects an unknown key at every level it validates (top level, group, slice, rankSkip, naming, nameRanks entries) itself, so a genuinely malformed options object still fails loudly and specifically here, whichever entry point it arrives through, rather than crashing later with a confusing TypeError deep inside graph construction or being silently ignored.
 */
 function readWorkspaceArchitectureOptions(options) {
-	if (!isRecord$1(options)) fail();
+	if (!isRecord(options)) fail();
 	if (!hasOnlyKeys(options, TOP_LEVEL_KEYS)) fail();
 	const groups = asGroupSpecArray(options["groups"]);
 	const duplicateGroupName = findDuplicateGroupName(groups);
@@ -1403,9 +1395,6 @@ function sliceByNamePrefix(declaredName, knownSlices) {
 	const unscoped = stripScope(declaredName);
 	return [...knownSlices].filter((candidate) => unscoped === candidate || unscoped.startsWith(`${candidate}-`)).sort((a, b) => b.length - a.length)[0];
 }
-function isRecord(value) {
-	return typeof value === "object" && value !== null;
-}
 /**
 * Reads a candidate package directory's own package.json directly (plain JSON.parse, not momoa): this is data collection for the graph, not a file being linted, so no AST/location information is needed. No existsSync guard here: every relativeDir this is called with came from resolveWorkspacePackageDirs, which already only returns directories that own a real package.json, so its absence here would mean that guarantee broke, not a case to handle quietly. A manifest that is not a usable JSON object at all (parses to an array, a string, null) returns undefined: nothing this graph can identify a package by, regardless of any "name" field. A manifest that IS a usable object but declares no "name" (or a non-string one) is different: pnpm allows a workspace package with no declared name at all, so its own `name` comes back as undefined rather than dropping the whole manifest, letting collectCandidates below key such a package by its directory instead of silently skipping it (and every dependency it declares along with it).
 *
@@ -1473,6 +1462,7 @@ function collectCandidates(fs, root, options) {
 	const relativeDirs = resolveWorkspacePackageDirs(fs, root, resolveWorkspacePackagePatterns(fs, root, options.packages));
 	const candidates = [];
 	for (const relativeDir of relativeDirs) {
+		if (relativeDir === "") continue;
 		const group = findOwningGroup(relativeDir, options.groups);
 		if (group === void 0) throw new Error(`@exadev/eslint-config: workspace package directory "${relativeDir}" (matched by the "packages" globs) is not covered by any configured group's own "path". Add a "groups" entry whose path prefixes it, or narrow "packages" to exclude it: an uncovered package would otherwise be silently skipped by every workspace-architecture check.`);
 		const manifest = readDeclaredManifest(fs, join(root, relativeDir), resolveDependencyFields(options));
@@ -1650,14 +1640,14 @@ function last(array) {
 /**
 * The three per-group naming strategies' own segment selection, keyed by NamingStrategy's own three literal members rather than a chain of ternaries: `Record<NamingStrategy, ...>` requires every member to have its own entry, which is what makes 'drop-group' a genuine, independently-typed branch, not merely "whatever the ternary chain falls through to when nothing else matched". Stryker's own typescript checker rejects a mutant that replaces the `?? 'drop-group'` fallback with some other string, since indexing this record with a value outside NamingStrategy is a type error, caught before any test even runs.
 *
-* - **'drop-group'**: drop the group's own root path segments, keep what remains.
-* - **'keep-group'**: keep the group's OWN name (or, when its root path nests more than one segment deep, only that path's own last segment) ahead of `rest`, not every segment of `relativeDir` including whatever container directories sit above the group's own root: a group declared as `{ path: 'packages/test' }` derives "test-e2e" for `packages/test/e2e`, never "packages-test-e2e", the same way a group with no nested path at all already would. A test group whose packages are named "test-<feature>", mirroring the feature they test, needs its own "test" segment kept, just not any further container segment above it.
+* - **'drop-group'**: drop the group's own root path segments, keep what remains, falling back to the group's own `name` when nothing remains: a package sitting exactly at its group's own root (`relativeDir` equals the group's `path`, a group that IS a single package rather than a container of them, a standalone `docs` package under a `{ name: 'docs' }` group, say) has no path segments left of its own for `rest` to keep, so the group's declared identity stands in for them, exactly as it always does for 'keep-group'. Without this, such a group could never have a satisfiable expected name at all: every package in it would derive an empty (or bare-scope) name no real `package.json` can declare.
+* - **'keep-group'**: keep the group's OWN `name` ahead of `rest`, always, regardless of how deep its own `path` nests: a group declared `{ name: 'test', path: 'tests' }` derives "test-e2e" for `tests/e2e`, and one declared `{ name: 'test', path: 'packages/tests' }` derives "test-e2e" for `packages/tests/e2e` too, never "tests-e2e" (the group's declared identity, not whatever path segment sits above it). A test group whose packages are named "test-<feature>", mirroring the feature they test, needs its own "test" name kept, regardless of how many container directories its `path` nests under.
 * - **'basename'**: use only `relativeDir`'s own final segment, ignoring every intermediate directory, for a group whose intermediate structure exists purely for filesystem organisation and carries no naming intent of its own.
 */
 const NAME_SEGMENTS_BY_STRATEGY = {
 	basename: ({ segments }) => [last(segments)],
-	"keep-group": ({ rest, groupNameSegment }) => [groupNameSegment, ...rest],
-	"drop-group": ({ rest }) => rest
+	"keep-group": ({ rest, group }) => [group.name, ...rest],
+	"drop-group": ({ rest, group }) => rest.length === 0 ? [group.name] : rest
 };
 /**
 * The package name package-name-mirrors-path expects a package at `relativeDir` (workspace-root-relative, forward-slash-joined) to declare, given its own matched group and the workspace's global naming options. See NAME_SEGMENTS_BY_STRATEGY above for the three per-group strategies' own segment selection. The joined segments are prefixed with `naming.scope` (when given) and joined to it with "/"; segments themselves join with `naming.separator` (default "-").
@@ -1667,15 +1657,27 @@ function expectedPackageName(relativeDir, group, naming) {
 	const segments = splitPathSegments(relativeDir);
 	const groupPathSegments = splitPathSegments(group.path ?? group.name);
 	const rest = segments.slice(groupPathSegments.length);
-	const groupNameSegment = last(groupPathSegments);
 	const joined = NAME_SEGMENTS_BY_STRATEGY[group.naming ?? "drop-group"]({
 		segments,
 		rest,
-		groupNameSegment
+		group
 	}).join(separator);
 	return naming.scope === void 0 ? joined : `${naming.scope}/${joined}`;
 }
 //#endregion
+//#region src/rules/json-member-key.ts
+function isStringNamed(name) {
+	return name.type === "String";
+}
+/**
+* Shared by package-json-key-order.ts and workspace-json-helpers.ts: momoa's own MemberNode.name is typed StringNode | IdentifierNode because momoa's grammar also covers JSON5 (unquoted identifier keys), but every rule that calls this only ever sets meta.languages to json/json or json/jsonc, where an unquoted key is a genuine parse error, never a value this function is asked to name. Exported so that guarantee is checked directly against a deliberately IdentifierNode-shaped input, rather than trusted on the strength of this comment alone.
+*/
+function getMemberKeyName(member) {
+	const { name } = member;
+	if (!isStringNamed(name)) throw new Error(`Unreachable: JSON member names are only read under json/json or json/jsonc, where an unquoted (Identifier) member name is a parse error, got a "${name.type}" name instead.`);
+	return name.value;
+}
+//#endregion
 //#region src/rules/workspace-json-helpers.ts
 function isStringNode$1(node) {
 	return node.type === "String";
@@ -1683,7 +1685,7 @@ function isStringNode$1(node) {
 /** package.json's own declared "name" field, read directly off a confirmed-top-level Object node. Returns undefined for a manifest with no "name" at all, or one whose value is not a plain string (a shape other JSON tooling would already flag elsewhere, not this rule's concern). */
 function readDeclaredName(rootObject) {
 	for (const member of rootObject.members) {
-		if (!isStringNode$1(member.name) || member.name.value !== "name") continue;
+		if (getMemberKeyName(member) !== "name") continue;
 		if (!isStringNode$1(member.value)) return void 0;
 		return {
 			name: member.value.value,
@@ -1698,15 +1700,12 @@ function collectTopLevelDependencies(rootObject, dependencyFields) {
 	const fields = new Set(dependencyFields);
 	const results = [];
 	for (const member of rootObject.members) {
-		if (!isStringNode$1(member.name) || !fields.has(member.name.value)) continue;
+		if (!fields.has(getMemberKeyName(member))) continue;
 		if (member.value.type !== "Object") continue;
-		for (const dependency of member.value.members) {
-			if (!isStringNode$1(dependency.name)) continue;
-			results.push({
-				name: dependency.name.value,
-				node: dependency
-			});
-		}
+		for (const dependency of member.value.members) results.push({
+			name: getMemberKeyName(dependency),
+			node: dependency
+		});
 	}
 	return results;
 }
@@ -1729,7 +1728,7 @@ function createNoDependencyCycleRule(deps = {}) {
 				description: "Disallow a cyclic workspace dependency.",
 				url: "https://github.com/ExaDev/eslint-config/blob/main/src/rules/no-dependency-cycle.ts"
 			},
-			messages: { cycle: "\"{{from}}\" depends on \"{{to}}\", which depends back on \"{{from}}\": a workspace cycle. Move the shared code into a package both can depend on, or invert one edge behind a contract." }
+			messages: { cycle: "\"{{from}}\" depends on \"{{to}}\", which can reach back to \"{{from}}\": a workspace cycle. Move the shared code into a package both can depend on, or invert one edge behind a contract." }
 		},
 		create(context) {
 			const options = readWorkspaceArchitectureOptions(context.options[0]);
@@ -2561,14 +2560,6 @@ function isIdentityPermutation(permutation) {
 function isStringNode(node) {
 	return node.type === "String";
 }
-function isStringNamed(name) {
-	return name.type === "String";
-}
-function getMemberKeyName(member) {
-	const { name } = member;
-	if (!isStringNamed(name)) throw new Error(`Unreachable: package-json-key-order only supports json/json and json/jsonc, where an unquoted (Identifier) member name is a parse error — got a "${name.type}" name instead.`);
-	return name.value;
-}
 function rangeOf(node) {
 	if (node.range === void 0) throw new Error("Unreachable: every node reaching this function was produced by a JSON language that always requests range tracking.");
 	return node.range;
@@ -2820,11 +2811,11 @@ const FUNCTION_LIKE_SELECTOR$2 = [
 function isOptionalParam(param) {
 	if (param.type === AST_NODE_TYPES.TSParameterProperty) return isOptionalParam(param.parameter);
 	if (param.type === AST_NODE_TYPES.AssignmentPattern) return true;
-	if (param.type === AST_NODE_TYPES.Identifier) return param.optional;
+	if (param.type === AST_NODE_TYPES.Identifier || param.type === AST_NODE_TYPES.ObjectPattern || param.type === AST_NODE_TYPES.ArrayPattern) return param.optional;
 	return false;
 }
 function getTrailingOptionalRun(params) {
-	const hasTrailingRest = params.length > 0 && params[params.length - 1]?.type === AST_NODE_TYPES.RestElement;
+	const hasTrailingRest = params[params.length - 1]?.type === AST_NODE_TYPES.RestElement;
 	const run = [];
 	for (let i = params.length - (hasTrailingRest ? 2 : 1); i >= 0; i--) {
 		const param = params[i];
@@ -2834,7 +2825,6 @@ function getTrailingOptionalRun(params) {
 	return run;
 }
 function resolveFixableParam(param) {
-	if (param.type === AST_NODE_TYPES.TSParameterProperty) return void 0;
 	const identifierNode = param.type === AST_NODE_TYPES.AssignmentPattern ? param.left.type === AST_NODE_TYPES.Identifier ? param.left : void 0 : param.type === AST_NODE_TYPES.Identifier ? param : void 0;
 	if (identifierNode === void 0) return void 0;
 	const typeNode = identifierNode.typeAnnotation?.typeAnnotation;
@@ -2928,7 +2918,7 @@ const preferOptionsObjectParam = createRule$2({
 			const allResolvable = resolvedParams.length === run.length;
 			const hasRestParam = node.params.some((param) => param.type === AST_NODE_TYPES.RestElement);
 			const body = getBlockBody(node);
-			let isFixable = allResolvable && !hasRestParam && body !== void 0;
+			let isFixable = allResolvable && !hasRestParam;
 			if (isFixable) {
 				const jsdocComment = getLeadingJSDocComment(sourceCode, node);
 				const jsDocBail = jsdocComment !== void 0 && resolvedParams.some((info) => jsDocMentionsParam(jsdocComment.value, info.identifierNode.name));
@@ -3271,6 +3261,7 @@ const plugin = {
 		}
 	}
 };
+const publicPlugin = toPublicPlugin(plugin);
 //#endregion
 //#region src/package-json-key-order.ts
 const SYNCPACK_CONFIG_FILENAMES = [
@@ -3414,11 +3405,13 @@ function toPublicConfigArray(built) {
 //#endregion
 //#region src/workspace-architecture.ts
 /**
-* Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. This is the named export a repo not using the full `exadevConfig()`/default-export bundle (hive, which builds its own `eslint.config.ts` from `plugin` directly) wires in on its own, exactly the same way `plugin`'s own recommended/barrel configs serve a consumer of the lighter `plugin` export.
+* Wires the three workspace-architecture rules (no-uphill-dependency, no-dependency-cycle, and, when the shared `naming` option is given, package-name-mirrors-path) onto `**\/package.json`, all three sharing the one options object given here. Internal: consumed by create-config.ts as one more `ConfigArrayValue` entry among the rest of `exadevConfig`'s own internally-typed build (see recommendedTypeChecked, buildReactConfig, buildNextjsConfig et al. for the same shape), before that whole array is converted once at `exadevConfig`'s own outer boundary. Never exported directly; a standalone consumer wants `workspaceArchitectureConfig` below instead.
 *
 * Unlike buildPackageJsonKeyOrderConfig, this has no auto-detecting tri-state: workspace architecture rules require real configuration (`groups` has no sensible default), so this is off unless a consumer calls it at all, and, once called, always requires `@eslint/json` to be resolvable (there is no "silently do nothing" case to fall back to the way an unconfigured, purely auto-detected feature can).
+*
+* Takes `WorkspaceArchitectureConfigOptions` (the `requireFn` test seam included) rather than the public `workspaceArchitectureConfig` export's own `WorkspaceArchitectureOptions`, so this internal builder's own tests (workspace-architecture.unit.test.ts) can still simulate an unresolvable `@eslint/json` directly, without the seam ever reaching the public function's parameter type or dist/index.d.ts.
 */
-function workspaceArchitectureConfig(options) {
+function buildWorkspaceArchitectureConfig(options) {
 	const { requireFn, ...ruleOptions } = options;
 	const validated = readWorkspaceArchitectureOptions(ruleOptions);
 	const jsonPlugin = resolveJsonPlugin(tryRequire("@eslint/json", requireFn));
@@ -3437,6 +3430,12 @@ function workspaceArchitectureConfig(options) {
 		}
 	}];
 }
+/**
+* Wires the three workspace-architecture rules (`no-uphill-dependency`, `no-dependency-cycle`, and, when the shared `naming` option is given, `package-name-mirrors-path`) onto `**\/package.json` from one `WorkspaceArchitectureOptions` object, returning ESLint core's own `Config[]` so the result spreads directly into `defineConfig(...)` (`...workspaceArchitectureConfig(options)`, the README's own standalone usage) alongside a consumer's own configuration.
+*/
+function workspaceArchitectureConfig(options) {
+	return toPublicConfigArray(buildWorkspaceArchitectureConfig(options));
+}
 //#endregion
 //#region src/create-config.ts
 function exadevConfig(options = {}, ...userConfigs) {
@@ -3448,10 +3447,10 @@ function exadevConfig(options = {}, ...userConfigs) {
 		...buildReactConfig({ enabled: options.react }),
 		...buildNextjsConfig({ enabled: options.nextjs }),
 		...buildPackageJsonKeyOrderConfig({ enabled: options.packageJsonKeyOrder }),
-		...options.workspaceArchitecture !== void 0 ? workspaceArchitectureConfig(options.workspaceArchitecture) : [],
+		...options.workspaceArchitecture !== void 0 ? buildWorkspaceArchitectureConfig(options.workspaceArchitecture) : [],
 		...userConfigs
 	]);
 }
 const defaultConfig = exadevConfig();
 //#endregion
-export { defaultConfig as default, exadevConfig, plugin, workspaceArchitectureConfig };
+export { defaultConfig as default, exadevConfig, publicPlugin as plugin, workspaceArchitectureConfig };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "exadev-eslint-config",
   "description": "Shared custom ESLint rules and plugin for ExaDev projects",
-  "version": "2.22.0",
+  "version": "2.22.2",
   "dependencies": {
     "@eslint/js": "^10.0.1",
     "@typescript-eslint/utils": "8.67.0",