@okfit/engine 0.5.0 → 0.7.0

package/errors.js

@@ -104,6 +104,40 @@ var ConfigMalformedError = class extends Schema.TaggedError()("ConfigMalformedEr
 		return `malformed config ${this.path}: ${messageOf(this.cause)}`;
 	}
 };
+/**
+* Issue #140: `sync --staged` stamps the git index with a caller-given
+* instant instead of walking history, but a log group's date must come
+* from a commit, never from that stamp time -- so `runSync` refuses to
+* combine `staged` with log mode rather than write a fabricated date.
+*
+* @public
+*/
+var SyncStagedLogError = class extends Schema.TaggedError()("SyncStagedLogError", {}) {
+	[Runtime.errorExitCode] = 64;
+	get message() {
+		return "--staged cannot run log mode: a log group's date must come from a commit, not from the stamp time; use --only generated and/or --only index";
+	}
+};
+/**
+* Issue #138: `okfit verify`'s selection was contradictory or empty. Exit 64: a usage error.
+*
+* @public
+*/
+var VerifySelectionError = class extends Schema.TaggedError()("VerifySelectionError", {
+	reason: Schema.Literals([
+		"no-selection",
+		"id-and-batch",
+		"unknown-type"
+	]),
+	detail: Schema.optionalKey(Schema.String)
+}) {
+	[Runtime.errorExitCode] = 64;
+	get message() {
+		if (this.reason === "no-selection") return "verify needs a concept id, --all, or --type <Type>";
+		if (this.reason === "id-and-batch") return "verify takes either a concept id or --all/--type, not both";
+		return `type "${this.detail ?? ""}" is not declared in the config`;
+	}
+};
 
 //#endregion
-export { ConfigMalformedError, ConfigPathNotFoundError, InitOverwriteError, VerifyConceptNotFoundError, VerifyUnsupportedFrontmatterError };
+export { ConfigMalformedError, ConfigPathNotFoundError, InitOverwriteError, SyncStagedLogError, VerifyConceptNotFoundError, VerifySelectionError, VerifyUnsupportedFrontmatterError };

package/index.d.ts

@@ -1,4 +1,4 @@
-import { BundleLoadError, ConceptId, Diagnostic, DiagnosticRange, DiagnosticSeverity, GraphLink, GraphNode, LinkGraph, LoadedBundle, OkfitConfig, OkfitConfigFile, StaleConcept, ValidationReport } from "@okfit/core";
+import { Actor, BundleLoadError, ConceptId, Diagnostic, DiagnosticRange, DiagnosticSeverity, GraphLink, GraphNode, LinkGraph, LoadedBundle, OkfitConfig, OkfitConfigFile, StaleConcept, ValidationReport } from "@okfit/core";
 import { Context, Crypto, DateTime, Effect, FileSystem, Layer, Option, Path, PlatformError, Runtime, Schema } from "effect";
 import { AppDirs, Xdg } from "@effected/xdg";
 import { ConfigReadError } from "@effected/config-file";
@@ -156,6 +156,32 @@ export declare class ConfigMalformedError extends ConfigMalformedError_base {
   readonly [Runtime.errorExitCode] = 3;
   get message(): string;
 }
+declare const SyncStagedLogError_base: Schema.Class<SyncStagedLogError, Schema.TaggedStruct<"SyncStagedLogError", {}>, import("effect/Cause").YieldableError>;
+/**
+ * Issue #140: `sync --staged` stamps the git index with a caller-given
+ * instant instead of walking history, but a log group's date must come
+ * from a commit, never from that stamp time -- so `runSync` refuses to
+ * combine `staged` with log mode rather than write a fabricated date.
+ *
+ * @public
+ */
+export declare class SyncStagedLogError extends SyncStagedLogError_base {
+  readonly [Runtime.errorExitCode] = 64;
+  get message(): string;
+}
+declare const VerifySelectionError_base: Schema.Class<VerifySelectionError, Schema.TaggedStruct<"VerifySelectionError", {
+  readonly reason: Schema.Literals<readonly ["no-selection", "id-and-batch", "unknown-type"]>;
+  readonly detail: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Issue #138: `okfit verify`'s selection was contradictory or empty. Exit 64: a usage error.
+ *
+ * @public
+ */
+export declare class VerifySelectionError extends VerifySelectionError_base {
+  readonly [Runtime.errorExitCode] = 64;
+  get message(): string;
+}
 //#endregion
 //#region src/config/layer.d.ts
 /**
@@ -353,8 +379,6 @@ export declare const runGraph: (options: GraphRunOptions) => Effect.Effect<Graph
 //#region src/init/scaffold.d.ts
 /** `.config/okfit.toml`, relative to the project root (C-10). @public */
 export declare const CONFIG_RELATIVE_PATH = ".config/okfit.toml";
-/** C-22's directive, plus the blank line Tombi requires. @public */
-export declare const SCHEMA_DIRECTIVE = "#:schema https://raw.githubusercontent.com/spencerbeggs/okfit/main/schemas/config/okfit-1.0.0.json\n\n";
 /** @public */
 interface ScaffoldOptions {
   /** Absolute. */
@@ -519,10 +543,15 @@ export type ContextTag = typeof ContextTag.Type;
  * consumer can tell "no profile configured" apart from "an unknown profile
  * was configured".
  *
+ * `config_schema_version` is `@okfit/core`'s `CONFIG_SCHEMA_VERSION`,
+ * stamped by {@link contextEnvelope} itself -- callers cannot pass or fake
+ * it (okfit #137).
+ *
  * @public
  */
 export declare const ContextEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
+  readonly config_schema_version: Schema.String;
   readonly project_root: Schema.String;
   readonly bundle_root: Schema.String;
   readonly config_path: Schema.NullOr<Schema.String>;
@@ -575,6 +604,29 @@ export declare const contextEnvelope: (input: {
   readonly config: OkfitConfig;
 }) => ContextEnvelope;
 //#endregion
+//#region src/render/distribution.d.ts
+/**
+ * The meta-package an okfit report's bins were installed through -- e.g.
+ * `@okfit/plugin` -- threaded into `main(options)` by that package's bin
+ * shims (okfit #137). `null` for a direct install of `@okfit/cli` or
+ * `@okfit/mcp`. This is packaging metadata, not a number to compare across
+ * reports; `engine_version` and `okf_version` are the pair a reader
+ * compares.
+ *
+ * @public
+ */
+interface Distribution {
+  readonly name: string;
+  readonly version: string;
+}
+/** Every envelope's `distribution` field: a `Distribution` or `null`. @public */
+export declare const DistributionField: Schema.NullOr<Schema.Struct<{
+  readonly name: Schema.String;
+  readonly version: Schema.String;
+}>>;
+/** @public */
+export type DistributionField = typeof DistributionField.Type;
+//#endregion
 //#region src/render/sort.d.ts
 /** Which producer a diagnostic came from; the JSON envelope's `source` (K-21). @public */
 type DiagnosticSource = "core.conformance" | "core.lint" | "profile";
@@ -680,7 +732,12 @@ export type GraphSummary = typeof GraphSummary.Type;
 export declare const GraphEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
   readonly producer: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
   readonly okf_version: Schema.String;
   readonly root: Schema.String;
   readonly profile: Schema.NullOr<Schema.String>;
@@ -716,6 +773,7 @@ export declare const graphEnvelope: (input: {
   readonly profile: string | null;
   readonly nodes: ReadonlyArray<GraphNode>;
   readonly edges: ReadonlyArray<GraphLink>;
+  readonly distribution?: Distribution;
 }) => GraphEnvelope;
 //#endregion
 //#region src/render/json.d.ts
@@ -744,18 +802,26 @@ export type JsonSummary = typeof JsonSummary.Type;
 /**
  * K-21's success envelope, snake_case. `exit_code` is `0 | 1 | 2` only: an
  * infrastructure failure never produces this envelope, it produces the
- * `JsonErrorEnvelope` (K-22). `okfit_version` names the version of the
- * package that produced the report (J-2), so the CLI and the MCP server
- * legitimately report different numbers over one bundle; `producer` names
- * that package (`okfit` or `@okfit/mcp`) so the difference reads as two
- * producers, not as drift (okfit #75).
+ * `JsonErrorEnvelope` (K-22). `okfit_version` and `producer` identify the
+ * PACKAGE that produced the report (J-2), so the CLI and the MCP server
+ * legitimately report different numbers over one bundle without that
+ * reading as drift (okfit #75); `engine_version` and `okf_version` are the
+ * pair that determines the report's content and the pair a reader should
+ * actually compare across two producers. `distribution` names the
+ * meta-package the bins were installed through (`@okfit/plugin`), or `null`
+ * for a direct install of `@okfit/cli`/`@okfit/mcp` (okfit #137).
  *
  * @public
  */
 export declare const JsonEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
   readonly producer: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
   readonly okf_version: Schema.String;
   readonly root: Schema.String;
   readonly profile: Schema.NullOr<Schema.String>;
@@ -779,11 +845,23 @@ export declare const JsonEnvelope: Schema.Struct<{
 }>;
 /** @public */
 export type JsonEnvelope = typeof JsonEnvelope.Type;
-/** K-22's envelope: the ONLY thing stdout carries under `--format json` on an exit-3 failure. @public */
+/**
+ * K-22's envelope: the ONLY thing stdout carries under `--format json` on an
+ * infrastructure failure. `exit_code` is `3` for most errors, or `64` for the
+ * usage-tier errors (`SyncStagedLogError`, `VerifySelectionError`) that carry
+ * their own `[Runtime.errorExitCode]`.
+ *
+ * @public
+ */
 export declare const JsonErrorEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
-  readonly exit_code: Schema.Literal<3>;
+  readonly engine_version: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
+  readonly exit_code: Schema.Literals<readonly [3, 64]>;
   readonly error: Schema.Struct<{
     readonly tag: Schema.String;
     readonly message: Schema.String;
@@ -811,9 +889,10 @@ export declare const json: (input: {
   readonly exitCode: 0 | 1 | 2;
   readonly concepts: number;
   readonly diagnostics: ReadonlyArray<RenderedDiagnostic>;
+  readonly distribution?: Distribution;
 }) => JsonEnvelope;
 /** K-22. `tag` is the error's `_tag` when it has one, else its constructor name. @public */
-export declare const jsonError: (error: unknown, okfitVersion: string) => JsonErrorEnvelope;
+export declare const jsonError: (error: unknown, okfitVersion: string, distribution?: Distribution) => JsonErrorEnvelope;
 //#endregion
 //#region src/render/stale.d.ts
 /** One entry of the `items` array. @public */
@@ -843,7 +922,12 @@ export type StaleSummary = typeof StaleSummary.Type;
 export declare const StaleEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
   readonly producer: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
   readonly okf_version: Schema.String;
   readonly root: Schema.String;
   readonly profile: Schema.NullOr<Schema.String>;
@@ -876,6 +960,7 @@ export declare const staleEnvelope: (input: {
   readonly now: DateTime.Utc;
   readonly concepts: number;
   readonly items: ReadonlyArray<StaleConcept>;
+  readonly distribution?: Distribution;
 }) => StaleEnvelope;
 //#endregion
 //#region src/sync/run.d.ts
@@ -895,11 +980,17 @@ export type SkipReason = typeof SkipReason.Type;
 interface SyncOptions {
   /** Absolute bundle root, from `resolveProjectConfig`. */
   readonly bundleRoot: string;
-  /** Already merged `DEFAULTS < profile < file` by the caller (D-28); unused today (`sync` never calls `profile.check`) but carried for parity with `RunOptions`. */
+  /** Already merged `DEFAULTS < profile < file` by the caller (D-28). `actors.agent`, when set, is threaded into `syncGenerated` (issue #73) so a concept with no `generated` block gets one created; `sync` never calls `profile.check`. */
   readonly config: OkfitConfig;
   /** Members to actually RUN. Absent members still appear in {@link SyncResult}, `selected: false`. */
   readonly modes: ReadonlySet<SyncMode>;
   readonly dryRun: boolean;
+  /** Issue #18: log mode's inclusive floor (`YYYY-MM-DD`); default is the newest logged date. */
+  readonly logSince?: string;
+  /** Issue #140: stamp the concepts in the git index with this instant instead of walking history; log mode must not be selected. */
+  readonly staged?: {
+    readonly at: DateTime.Utc;
+  };
 }
 /** @public */
 interface SyncModeResult {
@@ -921,16 +1012,17 @@ interface SyncResult {
   readonly log: SyncModeResult;
 }
 /**
- * Contract §5's six-step algorithm: one `Bundle.load`, one
- * `Derivation.generatedAt` per concept shared by the generated and log
- * modes (skipped entirely when neither is selected), then the three modes
- * in a FIXED order — generated, index, log — regardless of `--only`'s own
- * occurrence order, so a generated write never invalidates an index or log
- * rendered in the same run (design §2).
+ * Contract §5's six-step algorithm: one `Bundle.load`, then a lazy
+ * `Derivation.generatedAt` walk shared by the generated and log modes
+ * (issue #21) — computed only for a concept that still needs one, not for
+ * every concept — then the three modes in a FIXED order — generated,
+ * index, log — regardless of `--only`'s own occurrence order, so a
+ * generated write never invalidates an index or log rendered in the same
+ * run (design §2).
  *
  * @public
  */
-export declare const runSync: (options: SyncOptions) => Effect.Effect<SyncResult, BundleLoadError | GeneratedAtError, Git | GitHistory | FileSystem.FileSystem | Path.Path | Crypto.Crypto>;
+export declare const runSync: (options: SyncOptions) => Effect.Effect<SyncResult, BundleLoadError | GeneratedAtError | SyncStagedLogError, Git | GitHistory | FileSystem.FileSystem | Path.Path | Crypto.Crypto>;
 //#endregion
 //#region src/render/sync.d.ts
 /** @public */
@@ -959,6 +1051,11 @@ export type SyncModeEnvelope = typeof SyncModeEnvelope.Type;
 export declare const SyncEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
   readonly root: Schema.String;
   readonly dry_run: Schema.Boolean;
   readonly exit_code: Schema.Literal<0>;
@@ -1004,6 +1101,7 @@ export declare const syncEnvelope: (input: {
   readonly root: string;
   readonly dryRun: boolean;
   readonly result: SyncResult;
+  readonly distribution?: Distribution;
 }) => SyncEnvelope;
 //#endregion
 //#region src/render/verify.d.ts
@@ -1019,6 +1117,11 @@ export declare const syncEnvelope: (input: {
 export declare const VerifyEnvelope: Schema.Struct<{
   readonly schema: Schema.Literal<1>;
   readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
   readonly id: Schema.String;
   readonly path: Schema.String;
   readonly verified: Schema.Struct<{
@@ -1045,7 +1148,60 @@ export declare const verifyEnvelope: (input: {
   readonly by: string;
   readonly at: string;
   readonly dryRun: boolean;
+  readonly distribution?: Distribution;
 }) => VerifyEnvelope;
+/**
+ * Issue #138's batch success envelope, schema 1, the same snake_case
+ * convention as `VerifyEnvelope`. `concepts` carries every concept
+ * `okfit verify --all`/`--type` attested (or would attest under a dry run),
+ * in write order; `skipped` carries every candidate it declined, with why.
+ *
+ * @public
+ */
+export declare const VerifyBatchEnvelope: Schema.Struct<{
+  readonly schema: Schema.Literal<1>;
+  readonly okfit_version: Schema.String;
+  readonly engine_version: Schema.String;
+  readonly distribution: Schema.NullOr<Schema.Struct<{
+    readonly name: Schema.String;
+    readonly version: Schema.String;
+  }>>;
+  readonly verified_by: Schema.String;
+  readonly verified_at: Schema.String;
+  readonly concepts: Schema.$Array<Schema.Struct<{
+    readonly id: Schema.String;
+    readonly path: Schema.String;
+  }>>;
+  readonly skipped: Schema.$Array<Schema.Struct<{
+    readonly id: Schema.String;
+    readonly reason: Schema.Literals<readonly ["draft", "already-verified"]>;
+  }>>;
+  readonly dry_run: Schema.Boolean;
+  readonly exit_code: Schema.Literal<0>;
+}>;
+/** @public */
+export type VerifyBatchEnvelope = typeof VerifyBatchEnvelope.Type;
+/**
+ * `concepts[].path` is already the display form, the same convention
+ * {@link verifyEnvelope} uses for its own `path`.
+ *
+ * @public
+ */
+export declare const verifyBatchEnvelope: (input: {
+  readonly okfitVersion: string;
+  readonly by: string;
+  readonly at: string;
+  readonly concepts: ReadonlyArray<{
+    readonly id: string;
+    readonly path: string;
+  }>;
+  readonly skipped: ReadonlyArray<{
+    readonly id: string;
+    readonly reason: "draft" | "already-verified";
+  }>;
+  readonly dryRun: boolean;
+  readonly distribution?: Distribution;
+}) => VerifyBatchEnvelope;
 //#endregion
 //#region src/stale/run.d.ts
 /** @public */
@@ -1180,6 +1336,51 @@ interface VerifyResult {
   /** The exact bytes `splice`'s edit would insert, written or not. */
   readonly fragment: string;
 }
+/**
+ * Issue #138: options for {@link runVerifyBatch}. `types` restricts the
+ * selected concept types; empty selects every type whose `config.types`
+ * declaration sets `require_verified = true`.
+ *
+ * @public
+ */
+interface VerifyBatchOptions {
+  readonly bundleRoot: string;
+  readonly projectRoot: string;
+  readonly config: OkfitConfig;
+  readonly at: DateTime.Utc;
+  readonly dryRun: boolean;
+  /** Restrict to these types; empty = every type with `require_verified = true`. */
+  readonly types: ReadonlyArray<string>;
+}
+/**
+ * Why {@link runVerifyBatch} skipped a candidate concept: `"draft"` for
+ * `status === "draft"`, `"already-verified"` when the resolved actor already
+ * carries a `verified` entry.
+ *
+ * @public
+ */
+type VerifyBatchSkipReason = "draft" | "already-verified";
+/**
+ * The result of {@link runVerifyBatch}.
+ *
+ * @public
+ */
+interface VerifyBatchResult {
+  readonly bundleRoot: string;
+  readonly by: string;
+  readonly at: string;
+  readonly dryRun: boolean;
+  /** In bundle iteration order; each carries the exact fragment written (or that would be). */
+  readonly verified: ReadonlyArray<{
+    readonly id: string;
+    readonly conceptPath: string;
+    readonly fragment: string;
+  }>;
+  readonly skipped: ReadonlyArray<{
+    readonly id: string;
+    readonly reason: VerifyBatchSkipReason;
+  }>;
+}
 /**
  * Contract §2.3 steps 6–15. Loads the bundle, resolves the id, resolves the
  * human actor from git, splices exactly one entry into the concept's
@@ -1194,12 +1395,52 @@ export declare const runVerify: (options: VerifyOptions) => Effect.Effect<{
   id: ConceptId;
   bundleRoot: string;
   conceptPath: string;
-  by: import("@okfit/core").Actor;
+  by: Actor;
   at: string;
   priorAt: string[];
   dryRun: boolean;
   fragment: string;
 }, import("effect/PlatformError").PlatformError | VerifyConceptNotFoundError | VerifyUnsupportedFrontmatterError | import("@effected/yaml").YamlParseError | import("@okfit/core").BundleLoadError | import("@okfit/profiles").GeneratedByError, FileSystem.FileSystem | import("@effected/git").Git | Path.Path>;
+/**
+ * Issue #138. Attests every concept selected by `options.types` (or, when
+ * empty, every type whose declaration sets `require_verified = true`) that
+ * is not a draft and does not already carry a `verified` entry by the
+ * resolved actor. Every candidate is located FIRST -- an unsupported
+ * `verified` shape on any one of them fails the whole batch with nothing
+ * written, mirroring `runVerify`'s own fail-closed rule at batch scale.
+ *
+ * @public
+ */
+export declare const runVerifyBatch: (options: VerifyBatchOptions) => Effect.Effect<{
+  bundleRoot: string;
+  by: Actor;
+  at: string;
+  dryRun: boolean;
+  verified: {
+    id: string;
+    conceptPath: string;
+    fragment: string;
+  }[];
+  skipped: {
+    readonly id: string;
+    readonly reason: VerifyBatchSkipReason;
+  }[];
+}, import("effect/PlatformError").PlatformError | VerifySelectionError | VerifyUnsupportedFrontmatterError | import("@effected/yaml").YamlParseError | import("@okfit/core").BundleLoadError | import("@okfit/profiles").GeneratedByError, FileSystem.FileSystem | import("@effected/git").Git | Path.Path>;
+//#endregion
+//#region src/version.d.ts
+/**
+ * The version this engine reports as `engine_version` in every JSON
+ * envelope. `@savvy-web/bundler` replaces `process.env.__PACKAGE_VERSION__`
+ * with this package's own version at build time (K-32), so a release can
+ * never desync from the printed version. `"0.0.0"` is the unbuilt-source
+ * fallback and reads as dev mode. This is the ONE `process` read this
+ * package's own `boundaries.test.ts` allowlists — see that file and this
+ * package's `CLAUDE.md` for why it is safe here even though every other
+ * `process` read is forbidden.
+ *
+ * @public
+ */
+export declare const ENGINE_VERSION: string;
 //#endregion
-export type { ContextResult, ContextRunOptions, DiagnosticSource, DiscoveredConfig, GraphRunOptions, GraphRunResult, RenderedDiagnostic, ResolveProjectConfigInput, ResolvedProjectConfig, RunOptions, RunResult, ScaffoldFile, ScaffoldOptions, StaleRunOptions, StaleRunResult, SyncMode, SyncModeResult, SyncOptions, SyncResult, Tally, VerifyOptions, VerifyResult };
+export type { ContextResult, ContextRunOptions, DiagnosticSource, DiscoveredConfig, Distribution, GraphRunOptions, GraphRunResult, RenderedDiagnostic, ResolveProjectConfigInput, ResolvedProjectConfig, RunOptions, RunResult, ScaffoldFile, ScaffoldOptions, StaleRunOptions, StaleRunResult, SyncMode, SyncModeResult, SyncOptions, SyncResult, Tally, VerifyBatchOptions, VerifyBatchResult, VerifyBatchSkipReason, VerifyOptions, VerifyResult };
 //# sourceMappingURL=index.d.ts.map

package/index.js

@@ -1,22 +1,24 @@
 import { resolveBundleRoot, resolveProjectRoot } from "./config/anchor.js";
-import { ConfigMalformedError, ConfigPathNotFoundError, InitOverwriteError, VerifyConceptNotFoundError, VerifyUnsupportedFrontmatterError } from "./errors.js";
+import { ConfigMalformedError, ConfigPathNotFoundError, InitOverwriteError, SyncStagedLogError, VerifyConceptNotFoundError, VerifySelectionError, VerifyUnsupportedFrontmatterError } from "./errors.js";
 import { buildConfigLayer, provideConfig } from "./config/layer.js";
 import { DEFAULT_PROFILE_NAME, resolveProjectConfig } from "./config/resolve.js";
 import { runContext } from "./context/run.js";
 import { runGraph } from "./graph/run.js";
-import { CONFIG_RELATIVE_PATH, SCHEMA_DIRECTIVE, configValue, files, targetPaths } from "./init/scaffold.js";
+import { CONFIG_RELATIVE_PATH, configValue, files, targetPaths } from "./init/scaffold.js";
 import { OkfitPlatform } from "./platform.js";
 import { ContextEnvelope, ContextField, ContextFieldValue, ContextTag, ContextType, contextEnvelope } from "./render/context.js";
+import { DistributionField } from "./render/distribution.js";
 import { forDiagnostics, tally } from "./render/exit.js";
+import { ENGINE_VERSION } from "./version.js";
 import { GraphEdgeEnvelope, GraphEnvelope, GraphNodeEnvelope, GraphSummary, graphEnvelope } from "./render/graph.js";
 import { collect, sort } from "./render/sort.js";
 import { JsonDiagnostic, JsonEnvelope, JsonErrorEnvelope, JsonSummary, json, jsonError } from "./render/json.js";
 import { StaleEnvelope, StaleItem, StaleSummary, staleEnvelope } from "./render/stale.js";
 import { SkipReason, runSync } from "./sync/run.js";
 import { SyncEnvelope, SyncModeEnvelope, syncEnvelope } from "./render/sync.js";
-import { VerifyEnvelope, verifyEnvelope } from "./render/verify.js";
+import { VerifyBatchEnvelope, VerifyEnvelope, verifyBatchEnvelope, verifyEnvelope } from "./render/verify.js";
 import { runStale } from "./stale/run.js";
 import { Now, run } from "./validate/run.js";
-import { runVerify } from "./verify/run.js";
+import { runVerify, runVerifyBatch } from "./verify/run.js";
 
-export { CONFIG_RELATIVE_PATH, ConfigMalformedError, ConfigPathNotFoundError, ContextEnvelope, ContextField, ContextFieldValue, ContextTag, ContextType, DEFAULT_PROFILE_NAME, GraphEdgeEnvelope, GraphEnvelope, GraphNodeEnvelope, GraphSummary, InitOverwriteError, JsonDiagnostic, JsonEnvelope, JsonErrorEnvelope, JsonSummary, Now, OkfitPlatform, SCHEMA_DIRECTIVE, SkipReason, StaleEnvelope, StaleItem, StaleSummary, SyncEnvelope, SyncModeEnvelope, VerifyConceptNotFoundError, VerifyEnvelope, VerifyUnsupportedFrontmatterError, buildConfigLayer, collect, configValue, contextEnvelope, files, forDiagnostics, graphEnvelope, json, jsonError, provideConfig, resolveBundleRoot, resolveProjectConfig, resolveProjectRoot, run, runContext, runGraph, runStale, runSync, runVerify, sort, staleEnvelope, syncEnvelope, tally, targetPaths, verifyEnvelope };
+export { CONFIG_RELATIVE_PATH, ConfigMalformedError, ConfigPathNotFoundError, ContextEnvelope, ContextField, ContextFieldValue, ContextTag, ContextType, DEFAULT_PROFILE_NAME, DistributionField, ENGINE_VERSION, GraphEdgeEnvelope, GraphEnvelope, GraphNodeEnvelope, GraphSummary, InitOverwriteError, JsonDiagnostic, JsonEnvelope, JsonErrorEnvelope, JsonSummary, Now, OkfitPlatform, SkipReason, StaleEnvelope, StaleItem, StaleSummary, SyncEnvelope, SyncModeEnvelope, SyncStagedLogError, VerifyBatchEnvelope, VerifyConceptNotFoundError, VerifyEnvelope, VerifySelectionError, VerifyUnsupportedFrontmatterError, buildConfigLayer, collect, configValue, contextEnvelope, files, forDiagnostics, graphEnvelope, json, jsonError, provideConfig, resolveBundleRoot, resolveProjectConfig, resolveProjectRoot, run, runContext, runGraph, runStale, runSync, runVerify, runVerifyBatch, sort, staleEnvelope, syncEnvelope, tally, targetPaths, verifyBatchEnvelope, verifyEnvelope };

package/init/scaffold.js

@@ -21,8 +21,6 @@ const PROJECT_CONFIG_NAMES = [
 	"okfit.toml",
 	".config/okfit.toml"
 ];
-/** C-22's directive, plus the blank line Tombi requires. @public */
-const SCHEMA_DIRECTIVE = "#:schema https://raw.githubusercontent.com/spencerbeggs/okfit/main/schemas/config/okfit-1.0.0.json\n\n";
 /**
 * K-23: the THIN override only — never the merged config. `bundle.path` is
 * the bundle root relative to the project root; `extensions: {}` satisfies
@@ -171,4 +169,4 @@ const files = (options) => Effect.gen(function* () {
 });
 
 //#endregion
-export { CONFIG_RELATIVE_PATH, PROJECT_CONFIG_NAMES, SCHEMA_DIRECTIVE, configValue, files, targetPaths };
+export { CONFIG_RELATIVE_PATH, PROJECT_CONFIG_NAMES, configValue, files, targetPaths };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@okfit/engine",
-	"version": "0.5.0",
+	"version": "0.7.0",
 	"private": false,
 	"description": "The okfit engine: platform layer, config discovery, and the validate, verify, sync, init and context programs shared by the okfit CLI and MCP server.",
 	"keywords": [
@@ -46,8 +46,8 @@
 		"@effected/walker": "^0.9.0",
 		"@effected/xdg": "^0.5.2",
 		"@effected/yaml": "^0.15.1",
-		"@okfit/core": "0.5.0",
-		"@okfit/profiles": "0.7.0",
+		"@okfit/core": "0.7.0",
+		"@okfit/profiles": "0.7.2",
 		"effect": "4.0.0-rc.115"
 	},
 	"engines": {

package/render/context.js

@@ -1,3 +1,4 @@
+import { CONFIG_SCHEMA_VERSION } from "@okfit/core";
 import { Schema } from "effect";
 
 //#region src/render/context.ts
@@ -64,10 +65,15 @@ const ContextTag = Schema.Struct({
 * consumer can tell "no profile configured" apart from "an unknown profile
 * was configured".
 *
+* `config_schema_version` is `@okfit/core`'s `CONFIG_SCHEMA_VERSION`,
+* stamped by {@link contextEnvelope} itself -- callers cannot pass or fake
+* it (okfit #137).
+*
 * @public
 */
 const ContextEnvelope = Schema.Struct({
 	schema: Schema.Literal(1),
+	config_schema_version: Schema.String,
 	project_root: Schema.String,
 	bundle_root: Schema.String,
 	config_path: Schema.NullOr(Schema.String),
@@ -89,6 +95,7 @@ const ContextEnvelope = Schema.Struct({
 */
 const contextEnvelope = (input) => ({
 	schema: 1,
+	config_schema_version: CONFIG_SCHEMA_VERSION,
 	project_root: input.projectRoot,
 	bundle_root: input.bundleRoot,
 	config_path: input.configPath,

package/render/distribution.js

@@ -0,0 +1,11 @@
+import { Schema } from "effect";
+
+//#region src/render/distribution.ts
+/** Every envelope's `distribution` field: a `Distribution` or `null`. @public */
+const DistributionField = Schema.NullOr(Schema.Struct({
+	name: Schema.String,
+	version: Schema.String
+}));
+
+//#endregion
+export { DistributionField };

package/render/graph.js

@@ -1,3 +1,5 @@
+import { DistributionField } from "./distribution.js";
+import { ENGINE_VERSION } from "../version.js";
 import { Schema } from "effect";
 
 //#region src/render/graph.ts
@@ -33,7 +35,9 @@ const GraphSummary = Schema.Struct({
 const GraphEnvelope = Schema.Struct({
 	schema: Schema.Literal(1),
 	okfit_version: Schema.String,
+	engine_version: Schema.String,
 	producer: Schema.String,
+	distribution: DistributionField,
 	okf_version: Schema.String,
 	root: Schema.String,
 	profile: Schema.NullOr(Schema.String),
@@ -61,7 +65,9 @@ const toEdge = (edge) => ({
 const graphEnvelope = (input) => ({
 	schema: 1,
 	okfit_version: input.okfitVersion,
+	engine_version: ENGINE_VERSION,
 	producer: input.producer,
+	distribution: input.distribution ?? null,
 	okf_version: input.okfVersion,
 	root: input.root,
 	profile: input.profile,