test: assert the src/ and scripts/ module-resolution contract (tests/module-imports.test.mjs)

[kubestellar-hive]

Test Improvement

Adds tests/module-imports.test.mjs — the only file this PR touches.

Nothing in the suite previously opened a source file to read an import
statement. This test reads every specifier in src/**/*.js and
scripts/**/*.mjs (22 files, 26 distinct specifiers at 00b44df) and
asserts each one resolves to something real.

Assertions

test	rule
the import scan finds source files and specifiers	non-vacuity guard — a regex regression cannot silently empty the five below
every node: specifier names a real Node builtin	module.isBuiltin
every relative import in src/ resolves to a file	webpack rules: optional extension, /index entry
every relative import in scripts/ resolves exactly, extension included	plain Node ESM — ./lib/github throws ERR_MODULE_NOT_FOUND even though webpack accepts it
every @site/ alias resolves from the repository root	Docusaurus project-root alias
every bare import is declared in package.json	dependencies/devDependencies; @docusaurus/* subpath aliases are satisfied by @docusaurus/core

Verification

• Green on main: node --test → 61 tests pass (55 before, 6 added),
  node v26.8.2 at parent rev 00b44df. No production change; the contract
  already holds.
• Mutation-validated: each of the five substantive assertions was proven to
  fail, with a precise message, against a deliberately broken tree —
  node:fs→node:fsx, ../hooks/useFocusTrap→...Trapp,
  ./lib/validate-utils.mjs→./lib/validate-utils,
  @site/data/projects-born.json→...projects-gone.json, react→reakt.
  All mutations reverted; the diff is the one new test file.
• npx prettier --check clean. No new dependencies.

Scope and disjointness

This PR claims exactly one cluster: module specifier resolution in
src/**/*.js and scripts/**/*.mjs, file tests/module-imports.test.mjs.

• test: cover the package.json script and CI command wiring contract #278 (tests/workflow-scripts.test.mjs) checks the wiring contract —
  npm run targets, node scripts/... paths named in package.json, linter
  config files. It never opens a source file or reads an import. Disjoint.
• test: cover docs/ and blog/ MDX component import and prop contract (tests/mdx-components.test.mjs) #298 covers import statements inside docs//blog/ MDX. This test
  reads no MDX. Disjoint.
• [quality] test: cover src/components/ArchitectureFilters filterArchitectures and add a JSX import path (tests/tools/jsx-hooks.mjs + tests/helpers-jsx.mjs + tests/architecture-filters.test.mjs) #229 tests filterArchitectures behaviour and adds a JSX loader; this
  PR checks only that specifiers resolve, never which named exports a module
  provides, and adds no loader or harness. Disjoint.
• [quality] CSS Module class-name contract is untested; src/theme/Footer references an undeclared .iconLink and ships an orphan .orgText #319 (CSS Module class names), test: verify local /img static asset references resolve under static/ (tests/static-assets.test.mjs) #289 (/img static asset paths),
  [quality] src/css/custom.css <-> static/fonts/ contract is untested; 27 italic faces (764K) shipped but never declared #317 (static/fonts/), [quality] static/images (16M) and static/social (148K) ship unreferenced on every deploy; static/ has no orphan guard #321 (static/ orphans) all concern assets or
  CSS, not module graphs. Disjoint.
• No open PR modifies tests/module-imports.test.mjs, and this PR modifies no
  file any other open PR touches — including tests/helpers.mjs ([quality] test: cover validate-architecture-assets.mjs --fix write mode (tests/helpers.mjs args/readBack + tests/validate-architecture-assets.test.mjs) #231, [quality] test: report coverage of fixture-sandbox runs (tests/tools/coverage-report.mjs) #225).

Related Issue

Closes #326 — merging this lands every box in that issue's recommendation, so
nothing is left for it to track.

---

Filed by quality agent (hold-gated mode). Human review required.

— hive: agent=quality backend=copilot model=claude-opus-5

[kubestellar-hive]

Important

Held for human review by the hive's ACMM level gate.

This PR was opened by the "quality" agent while Hive policy required a human checkpoint for that agent. Non-outreach agents are held at ACMM L3–L5; the outreach agent is always held because it publishes project-facing communication.

Hive will automatically remove the hold label once current policy no longer requires a level hold for "quality". If this is an outreach PR, a human must review it and remove the label.