Route tests through a #testing alias, ban ../ imports, and document the alias ownership rule

src/auth.test.ts

@@ -9,7 +9,7 @@ import {
   retryInvalidToken,
   stageCodexAuth,
 } from "./auth.ts";
-import { currentGid, currentUid, IS_WINDOWS, makeTempDir } from "./testing.ts";
+import { currentGid, currentUid, IS_WINDOWS, makeTempDir } from "#testing";
 
 test("retries once after an invalid refresh token", async () => {
   let attempts = 0;

src/isolation.test.ts

@@ -10,7 +10,7 @@ import {
   readProfileFile,
 } from "./isolation.ts";
 import type { RuntimeProfile } from "./runtime.ts";
-import { currentUid, IS_ROOT, IS_WINDOWS, makeTempDir } from "./testing.ts";
+import { currentUid, IS_ROOT, IS_WINDOWS, makeTempDir } from "#testing";
 
 const profile = (uid: number, home: string): RuntimeProfile => ({
   index: uid - 20_000,

src/post.test.ts

@@ -6,7 +6,7 @@ import { isNotFound } from "./errors.ts";
 import { postRuntime } from "./post.ts";
 import type { PostContext } from "./post.ts";
 import type { RuntimeManifest, RuntimeOutcome } from "./runtime.ts";
-import { currentGid, currentUid, IS_WINDOWS, makeTempDir } from "./testing.ts";
+import { currentGid, currentUid, IS_WINDOWS, makeTempDir } from "#testing";
 
 const context: PostContext = {
   apiUrl: "https://gitea.example/api/v1",

src/runtime.test.ts

@@ -7,7 +7,7 @@ import { assert, expect, test } from "vite-plus/test";
 import { output } from "./command.ts";
 import { prepareRuntime } from "./runtime.ts";
 import type { RuntimeProfile } from "./runtime.ts";
-import { IS_ROOT, makeTempDir } from "./testing.ts";
+import { IS_ROOT, makeTempDir } from "#testing";
 
 const MASTER_KEY = "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8";
 const ENCRYPTED = "v1:ICEiIyQlJicoKSor:oV_FAgnsN3p1FyegJxwGVdyjfyPio6qDeSUwbA";

src/testing.ts

@@ -1,4 +1,6 @@
-// Test support: the current user's IDs and a fresh temporary directory.
+// Test support: the current user's IDs and a fresh temporary directory, plus
+// the source helpers that the repository-level tests in tests/ need. Those
+// tests sit outside src/ and reach it only through the `#testing` alias.
 import { mkdtemp } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -21,3 +23,8 @@ export const IS_WINDOWS: boolean = process.platform === "win32";
 export function makeTempDir(): Promise<string> {
   return mkdtemp(join(tmpdir(), "bot-agents-test-"));
 }
+
+export { output } from "./command.ts";
+export { isNotFound } from "./errors.ts";
+export { isMapping } from "./json.ts";
+export type { JsonObject } from "./json.ts";