@orkestrel/scaffold 0.0.100 → 0.0.101

package/dist/host/claude/rules/workspace.md

@@ -293,6 +293,12 @@ Build/check config alignment:
 
 - Typechecker: `vue-tsc` only where Vue SFCs are checked; `tsc` elsewhere.
 - Linter: Oxlint with `.oxlintrc.json`, independent from typechecking.
+- Place caller-selected local build inspection in `tools/artifacts/` or
+  `.orkestrel/<package>/instruments/**/tools/artifacts/`, and published runtime artifact
+  loaders in `src/server/artifacts/`. Permit computed ESM imports at those boundaries in
+  `.js`, `.mjs`, `.ts`, and `.mts` modules, and keep ordinary implementation dependencies
+  statically named. A source adapter admitted by a runtime loader remains a separately
+  selected inventory; it does not widen the loader's built-package admission.
 - Formatter: Oxfmt with `.oxfmtrc.json`.
 - Bundler: Vite.
 - Tests: Vitest; `@vitest/browser-playwright` for browser projects.

package/dist/host/configs/helpers.ts

@@ -912,6 +912,14 @@ export async function environmentAssetSources(
 			} else if (node.source.type === 'TemplateLiteral' && node.source.expressions.length === 0) {
 				value = node.source.quasis.map((quasi) => quasi.value.cooked ?? quasi.value.raw).join('')
 			} else {
+				const location = workspacePath(path)
+				if (
+					location !== undefined &&
+					/^(?:src\/server\/artifacts\/|tools\/artifacts\/|\.orkestrel\/[^/]+\/instruments\/(?:[^/]+\/)*tools\/artifacts\/).+\.(?:js|mjs|ts|mts)$/.test(
+						location,
+					)
+				)
+					return
 				throw new Error(
 					'[orkestrel-environment-boundary] Dynamic imports must use static string values',
 				)

package/dist/host/dotfiles/gitignore

@@ -47,3 +47,4 @@ playwright-report/
 
 # Agent worktrees (created by an isolated subagent dispatch, never committed)
 .claude/worktrees/
+

package/dist/host/dotfiles/oxlintrc.json

@@ -70,6 +70,16 @@
 		"restriction": "off"
 	},
 	"overrides": [
+		{
+			"files": [
+				"src/server/artifacts/**/*.{js,mjs,ts,mts}",
+				"tools/artifacts/**/*.{js,mjs,ts,mts}",
+				".orkestrel/*/instruments/**/tools/artifacts/**/*.{js,mjs,ts,mts}"
+			],
+			"rules": {
+				"import/no-dynamic-require": ["error", { "esmodule": false }]
+			}
+		},
 		{
 			"files": ["*.config.ts", "*.config.js"],
 			"rules": {

package/dist/host/manifest.json

@@ -598,7 +598,7 @@
 			"storage": "claude/rules/workspace.md",
 			"destination": ".claude/rules/workspace.md",
 			"executable": false,
-			"digest": "f62b3c7321444d6fc30b587d9221915d0835ea3bb78204868e27beeb3ea5450b"
+			"digest": "6a30bd6e76ebebd5abf62562444e5865120957081530cdd8c6e6095d73ff2eac"
 		},
 		{
 			"storage": "claude/rules/writing.md",
@@ -766,7 +766,7 @@
 			"storage": "configs/helpers.ts",
 			"destination": "configs/helpers.ts",
 			"executable": false,
-			"digest": "ae5a045cf6f535037fcc38a32e2d0bfc8fdae1f1549472bf3b19737a3db490cf"
+			"digest": "04b835f736602dcb3c491c126fc9192ae6af68833c4269acd1ef2625047f6141"
 		},
 		{
 			"storage": "configs/policy.ts",
@@ -802,7 +802,7 @@
 			"storage": "dotfiles/gitignore",
 			"destination": ".gitignore",
 			"executable": false,
-			"digest": "e8789a7b46ab16a8a4127127fa5e9f131f7fb559936c878ef07d59afafcc08cb"
+			"digest": "2472976473578fb70df5569db6d0e752352ea909d11f18d0d7212c61417f4480"
 		},
 		{
 			"storage": "dotfiles/mcp.json",
@@ -826,7 +826,7 @@
 			"storage": "dotfiles/oxlintrc.json",
 			"destination": ".oxlintrc.json",
 			"executable": false,
-			"digest": "c3777d98a2c48a4007397ef90912b2530d7e40bc4d2f85155830e6d1135dc241"
+			"digest": "75c465335e5f14291262b66897e9622f9320f227bcf1b41e864c17459a6d93ea"
 		},
 		{
 			"storage": "dotfiles/prettierignore",
@@ -1180,7 +1180,7 @@
 			"storage": "tests/config.test.ts",
 			"destination": "tests/config.test.ts",
 			"executable": false,
-			"digest": "6d5079e1eed5b45c74ef788c966527e336444f32dc15afde19b7ae360e046854"
+			"digest": "df4c527b6192ec5b2f8a6b0f7b7e7b22eec88f78e962c9aef6ef46da8745f71b"
 		},
 		{
 			"storage": "tests/policy.test.ts",
@@ -1192,7 +1192,7 @@
 			"storage": "tests/setupPolicy.ts",
 			"destination": "tests/setupPolicy.ts",
 			"executable": false,
-			"digest": "2571274f92e75e6caffa86b2703ef9a38828db4ec8f51a7b38510f8bc48c6aee"
+			"digest": "1219f0c1d5b8fecd155c3231902d3a7d0b2507a722365ce398ba22e3bc005633"
 		}
 	],
 	"roots": [
@@ -2120,5 +2120,5 @@
 			]
 		}
 	],
-	"digest": "2eb5a827baa67b121d77f333051acf59bd11b1572c9f26f7364444b1b4d9a9f4"
+	"digest": "f5c512aa30b4d0d93c7d7bd860c18718aed7b5370093acb88d549d83166edf5f"
 }

package/dist/host/tests/config.test.ts

@@ -57,6 +57,7 @@ import configuration, { resolveWorkspacePath } from '../vite.config.js'
 import * as rootConfiguration from '../vite.config.js'
 import tsconfig from '../tsconfig.json' with { type: 'json' }
 import {
+	ARTIFACT_IMPORT_CASES,
 	collectSheets,
 	collectFrameworks,
 	readConfigRecord,
@@ -2575,6 +2576,78 @@ createSomething({
 		expect(DATA_SOURCE_FILES).not.toContain('plugins.ts')
 	})
 
+	it('admits computed ESM imports only in artifact loaders while refusing computed require', () => {
+		const fixture = createPolicyScratch({ prefix: 'artifact-imports-' })
+		try {
+			fixture.write('configs/policy.ts', readFileSync(resolve(root, 'configs/policy.ts'), 'utf8'))
+			const configured = readConfigRecord(
+				JSON.parse(readFileSync(resolve(root, '.oxlintrc.json'), 'utf8')),
+			)
+			// Include campaign fixtures even when the workspace's default lint walk ignores them.
+			fixture.write('.oxlintrc.json', JSON.stringify({ ...configured, ignorePatterns: [] }))
+			const paths: string[] = []
+			const requires: string[] = []
+			for (const [path, admitted] of ARTIFACT_IMPORT_CASES) {
+				fixture.write(path, 'const selected = process.argv[2]\nvoid import(selected)\ndebugger\n')
+				paths.push(path)
+				if (admitted) {
+					const required = path.replace(/\.(\w+)$/u, '.require.$1')
+					fixture.write(
+						required,
+						'const selected = process.argv[2]\nvoid require(selected)\ndebugger\n',
+					)
+					requires.push(required)
+				}
+			}
+			const codes = readImportDiagnostics(fixture.path, [...paths, ...requires])
+			for (const [path, admitted] of ARTIFACT_IMPORT_CASES) {
+				expect({ path, refused: codes.has('import(no-dynamic-require) ' + path) }).toEqual({
+					path,
+					refused: !admitted,
+				})
+				expect(codes.has('eslint(no-debugger) ' + path)).toBe(true)
+			}
+			for (const path of requires) {
+				expect(codes.has('import(no-dynamic-require) ' + path)).toBe(true)
+				expect(codes.has('eslint(no-debugger) ' + path)).toBe(true)
+			}
+
+			expect(readConfigRecord(configured.rules)['import/no-dynamic-require']).toEqual([
+				'error',
+				{ esmodule: true },
+			])
+			if (!Array.isArray(configured.overrides)) throw new Error('Missing lint overrides')
+			const overrides = configured.overrides.map(readConfigRecord)
+			const artifact = overrides.filter(
+				(override) => readConfigRecord(override.rules)['import/no-dynamic-require'] !== undefined,
+			)
+			expect(artifact).toEqual([
+				{
+					files: [
+						'src/server/artifacts/**/*.{js,mjs,ts,mts}',
+						'tools/artifacts/**/*.{js,mjs,ts,mts}',
+						'.orkestrel/*/instruments/**/tools/artifacts/**/*.{js,mjs,ts,mts}',
+					],
+					rules: { 'import/no-dynamic-require': ['error', { esmodule: false }] },
+				},
+			])
+			fixture.write(
+				'.oxlintrc.json',
+				JSON.stringify({
+					...configured,
+					ignorePatterns: [],
+					overrides: overrides.filter((override) => !artifact.includes(override)),
+				}),
+			)
+			const original = readImportDiagnostics(fixture.path, [...paths, ...requires])
+			for (const path of [...paths, ...requires]) {
+				expect(original.has('import(no-dynamic-require) ' + path)).toBe(true)
+			}
+		} finally {
+			fixture.destroy()
+		}
+	})
+
 	it('matches every isolated import pattern with refused and admitted fixtures', () => {
 		const fixture = createPolicyScratch({ prefix: 'propagation-patterns-' })
 		const scratch = fixture.path
@@ -3409,6 +3482,32 @@ describe('configuration helpers', () => {
 		)
 	})
 
+	it('admits computed artifact imports through Vite while retaining literal boundary inspection', async () => {
+		for (const [path] of ARTIFACT_IMPORT_CASES.filter(([, admitted]) => admitted)) {
+			await expect(
+				configHelpers.environmentAssetSources('void import(process.argv[2])', resolve(root, path)),
+			).resolves.toEqual([])
+		}
+		for (const [path] of ARTIFACT_IMPORT_CASES.filter(([, admitted]) => !admitted)) {
+			await expect(
+				configHelpers.environmentAssetSources('void import(process.argv[2])', resolve(root, path)),
+			).rejects.toThrow('Dynamic imports must use static string values')
+		}
+		await expect(
+			configHelpers.environmentAssetSources(
+				"void import('@src/browser')",
+				resolve(root, 'src/server/artifacts/Artifacts.ts'),
+			),
+		).resolves.toEqual(['@src/browser'])
+		expect(configHelpers.environmentSourceError('src/server', '@src/browser')).toBeDefined()
+		await expect(
+			configHelpers.environmentAssetSources(
+				'void import(process.argv[2])',
+				resolve(root, '../outside/src/server/artifacts/Artifacts.ts'),
+			),
+		).rejects.toThrow('Dynamic imports must use static string values')
+	})
+
 	it('drives each plugin through its real Vite hooks', async () => {
 		const environments: ReadonlyArray<
 			'src/core' | 'src/browser' | 'src/server' | 'app/core' | 'app/browser' | 'app/server'

package/dist/host/tests/setupPolicy.ts

@@ -3968,6 +3968,37 @@ export function inspectSheetConfiguration(project: unknown, script?: string): re
 	return failures
 }
 
+/** Lists artifact-loader paths and the computed ESM imports each boundary admits. */
+export const ARTIFACT_IMPORT_CASES: ReadonlyArray<readonly [string, boolean]> = Object.freeze([
+	['src/server/artifacts/Artifacts.ts', true],
+	['src/server/artifacts/nested/inspect.mts', true],
+	['src/server/artifacts/inspect.js', true],
+	['src/server/artifacts/inspect.mjs', true],
+	['src/server/artifacts-lookalike/inspect.ts', false],
+	['src/browser/artifacts/inspect.ts', false],
+	['src/core/artifacts/inspect.ts', false],
+	['app/server/artifacts/inspect.ts', false],
+	['src/server/artifacts/inspect.cts', false],
+	['src/server/artifacts/inspect.cjs', false],
+	['tools/artifacts/inspect.ts', true],
+	['tools/artifacts/nested/inspect.mts', true],
+	['tools/artifacts/inspect.js', true],
+	['tools/artifacts/inspect.mjs', true],
+	['.orkestrel/sample/instruments/tools/artifacts/inspect.ts', true],
+	['.orkestrel/sample/instruments/harness/tools/artifacts/nested/inspect.mts', true],
+	['.orkestrel/sample/instruments/harness/tools/artifacts/inspect.js', true],
+	['.orkestrel/sample/instruments/harness/tools/artifacts/inspect.mjs', true],
+	['src/server/inspect.ts', false],
+	['src/server/tools/artifacts/inspect.ts', false],
+	['configs/inspect.ts', false],
+	['scripts/inspect.ts', false],
+	['.orkestrel/sample/instruments/harness/inspect.ts', false],
+	['tools/artifacts-lookalike/inspect.ts', false],
+	['.orkestrel/sample/instruments/harness/tools/artifacts-lookalike/inspect.ts', false],
+	['tools/artifacts/inspect.cts', false],
+	['tools/artifacts/inspect.cjs', false],
+])
+
 /**
  * Reads import restrictions and collection sentinels from the installed linter.
  * @param directory - The fixture workspace containing the lint configuration.

package/dist/src/core/index.cjs

@@ -4,7 +4,7 @@ let _orkestrel_template = require("@orkestrel/template");
 let _orkestrel_emitter = require("@orkestrel/emitter");
 var package_default = {
 	name: "@orkestrel/scaffold",
-	version: "0.0.100",
+	version: "0.0.101",
 	description: "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	keywords: [
 		"audit",