merge: main (déblocage CI) dans spark-vault-dir

tests/frontend/unit.test.mjs

@@ -112,8 +112,10 @@ function testModulesHaveImports() {
     { file: 'navfacets.js', reason: 'pure helpers — no deps, imported by vaulthome.js' },
         { file: 'sidebar_raw.js', reason: 'legacy file — excluded' },
         { file: 'desktop.js', reason: 'standalone — reads window.__TAURI__ global, no imports needed' },
+        { file: 'recherche.js', reason: 'standalone — vanilla sans dépendance, vendangé tel quel par chaque hôte (#68)', noExport: true },
       ];
   const expectNoImport = new Set(expected.map(e => e.file));
+  const expectNoExport = new Set(expected.filter(e => e.noExport).map(e => e.file));
 
   for (const file of files) {
     const content = readFileSync(join(JS_DIR, file), 'utf-8');
@@ -123,7 +125,7 @@ function testModulesHaveImports() {
     if (!expectNoImport.has(file)) {
       assert.ok(hasImport, `${file} should have at least one import`);
     }
-    if (file !== 'state.js' && file !== 'app.js') {
+    if (file !== 'state.js' && file !== 'app.js' && !expectNoExport.has(file)) {
       assert.ok(hasExport, `${file} should have at least one export`);
     }
   }

tests/test_draco_barre.py

@@ -99,7 +99,8 @@ def test_panneau_console_surimpression_222():
     assert "draco-console-sur" in panneau
     assert "assurerSurimpression" in panneau
     assert "draco-console-styles" in panneau
-    assert 'surCadre.src = urlConsole()' in panneau
+    assert 'var url = urlConsole()' in panneau
+    assert 'surCadre.src = url' in panneau
     assert 'surEl.style.width = "100%"' in panneau
     assert 'data-dc="sidebar"' in panneau
     assert "Mode sidebar" in panneau
@@ -116,7 +117,8 @@ def test_csp_ouvre_le_service_d_agents_218():
     # dérivée de la configuration (backend.draco_config.agent_origine,
     # testée via la config dans tests/test_security_headers.py).
     main = (Path(__file__).resolve().parent.parent / "backend" / "main.py").read_text(encoding="utf-8")
-    ligne = next(l for l in main.splitlines() if "connect-src" in l)
+    ligne = next(l for l in main.splitlines()
+                 if "connect-src" in l and not l.strip().startswith("#"))
     assert "agent_origine" in main
     assert "{agent}" in ligne