@orkestrel/scaffold 0.0.102 → 0.0.103

package/dist/host/claude/rules/workspace.md

@@ -311,12 +311,9 @@ Build/check config alignment:
 
 - Typechecker: `vue-tsc` only where Vue SFCs are checked; `tsc` elsewhere.
 - Linter: Oxlint with `.oxlintrc.json`, independent from typechecking.
-- Place caller-selected local build inspection in `tools/artifacts/` or
-  `.orkestrel/<package>/instruments/**/tools/artifacts/`, and published runtime artifact
-  loaders in `src/server/artifacts/`. Permit computed ESM imports at those boundaries in
-  `.js`, `.mjs`, `.ts`, and `.mts` modules, and keep ordinary implementation dependencies
-  statically named. A source adapter admitted by a runtime loader remains a separately
-  selected inventory; it does not widen the loader's built-package admission.
+- Permit computed `import()` in every module, and refuse dynamic `require`. Name ordinary
+  implementation dependencies statically. In a module that imports a computed specifier,
+  document what selects it in the module's TSDoc.
 - Formatter: Oxfmt with `.oxfmtrc.json`.
 - Bundler: Vite.
 - Tests: Vitest; `@vitest/browser-playwright` for browser projects.

package/dist/host/configs/helpers.ts

@@ -911,9 +911,8 @@ export function declarationRollup(options: DeclarationRollupOptions): Plugin {
 				])
 				const entry = resolvePath(scratch, relative(scope.root, declaration))
 				// A literal `import()` of the extractor reddens `tsc` in a workspace that does not
-				// install it, and a variable specifier reddens `import/no-dynamic-require`, so the
-				// literal `createRequire` call is the form that clears every gate in an app-only
-				// workspace.
+				// install it, so the literal `createRequire` call is the form that clears the
+				// typecheck in an app-only workspace.
 				const loaded: unknown = load('@microsoft/api-extractor')
 				if (!isExtractorModule(loaded)) {
 					throw new Error(
@@ -999,19 +998,8 @@ export async function environmentAssetSources(
 					: specifier.type === 'TemplateLiteral' && specifier.expressions.length === 0
 						? specifier.quasis.map((quasi) => quasi.value.cooked ?? quasi.value.raw).join('')
 						: undefined
-			if (value === undefined) {
-				const location = workspacePath(path)
-				if (
-					location !== undefined &&
-					/^(?:src\/server\/artifacts\/|tools\/artifacts\/|\.orkestrel\/[^/]+\/instruments\/(?:[^/]+\/)*tools\/artifacts\/).+\.(?:js|mjs|ts|mts)$/.test(
-						location,
-					)
-				)
-					return
-				throw new Error(
-					'[orkestrel-environment-boundary] Dynamic imports must use static string values',
-				)
-			}
+			// A computed specifier names no module to inspect statically.
+			if (value === undefined) return
 			const decoded = decodeAssetSource(value)
 			if (decoded === undefined) {
 				throw new Error('[orkestrel-environment-boundary] Module URLs must use valid URI encoding')

package/dist/host/dotfiles/oxlintrc.json

@@ -38,7 +38,7 @@
 		],
 
 		"import/no-default-export": "error",
-		"import/no-dynamic-require": ["error", { "esmodule": true }],
+		"import/no-dynamic-require": ["error", { "esmodule": false }],
 		"import/extensions": "off",
 		"import/no-unassigned-import": [
 			"error",
@@ -70,16 +70,6 @@
 		"restriction": "off"
 	},
 	"overrides": [
-		{
-			"files": [
-				"src/server/artifacts/**/*.{js,mjs,ts,mts}",
-				"tools/artifacts/**/*.{js,mjs,ts,mts}",
-				".orkestrel/*/instruments/**/tools/artifacts/**/*.{js,mjs,ts,mts}"
-			],
-			"rules": {
-				"import/no-dynamic-require": ["error", { "esmodule": false }]
-			}
-		},
 		{
 			"files": ["*.config.ts", "*.config.js"],
 			"rules": {

package/dist/host/manifest.json

@@ -604,7 +604,7 @@
 			"storage": "claude/rules/workspace.md",
 			"destination": ".claude/rules/workspace.md",
 			"executable": false,
-			"digest": "2d48495981e0fa29c5db11807c64d01e4e463cddb0e45b1345cfa96b34a7e647"
+			"digest": "39660cc58ad9173f2947834d2417a36937d1be69b9f87258f4b037e393a5377e"
 		},
 		{
 			"storage": "claude/rules/writing.md",
@@ -772,7 +772,7 @@
 			"storage": "configs/helpers.ts",
 			"destination": "configs/helpers.ts",
 			"executable": false,
-			"digest": "a830951623b8a216dd2f62776d19b83403c7d13b5bff9a3e9baf6053169dfd7a"
+			"digest": "ab778a034b699137d723be586cee9cde2ca806cfec49e20cc97c71b5ca638578"
 		},
 		{
 			"storage": "configs/policy.ts",
@@ -832,7 +832,7 @@
 			"storage": "dotfiles/oxlintrc.json",
 			"destination": ".oxlintrc.json",
 			"executable": false,
-			"digest": "75c465335e5f14291262b66897e9622f9320f227bcf1b41e864c17459a6d93ea"
+			"digest": "58ad7a7bd67ea6f66afc76e17efcc407571bf9bc07d59b09a1db6d757731d4fd"
 		},
 		{
 			"storage": "dotfiles/prettierignore",
@@ -1186,7 +1186,7 @@
 			"storage": "tests/config.test.ts",
 			"destination": "tests/config.test.ts",
 			"executable": false,
-			"digest": "325f8de835dd57524e44332b8dce1748d780ac083a05367a994d9190de2c4848"
+			"digest": "6c896b80c309ef15cdf21d01fdf5f3d41dfca9aef800d564531463c800d3fa36"
 		},
 		{
 			"storage": "tests/policy.test.ts",
@@ -1198,7 +1198,7 @@
 			"storage": "tests/setupPolicy.ts",
 			"destination": "tests/setupPolicy.ts",
 			"executable": false,
-			"digest": "97de92603cb37f8b5f2981c7f98c2cd856f509b862f6e163a364a7950bf6d03e"
+			"digest": "142d0d4681f0c6b119f99295d8b51c1c2ab4b69b9077cb94f45fb10b93b521b5"
 		}
 	],
 	"roots": [
@@ -2126,5 +2126,5 @@
 			]
 		}
 	],
-	"digest": "0b8273c6d80ce1316e405dbc3275e0ce8a505717e415ba767caf791390e58bf0"
+	"digest": "f8bb837441194dffdb3439fc3bd791a31c1af726b3071c8940ace7807d8e4f22"
 }

package/dist/host/tests/config.test.ts

@@ -70,7 +70,7 @@ import configuration, { resolveWorkspacePath } from '../vite.config.js'
 import * as rootConfiguration from '../vite.config.js'
 import tsconfig from '../tsconfig.json' with { type: 'json' }
 import {
-	ARTIFACT_IMPORT_CASES,
+	COMPUTED_IMPORT_PATHS,
 	collectSheets,
 	collectStudies,
 	collectFrameworks,
@@ -2821,8 +2821,25 @@ createSomething({
 		expect(DATA_SOURCE_FILES).not.toContain('plugins.ts')
 	})
 
-	it('admits computed ESM imports only in artifact loaders while refusing computed require', () => {
-		const fixture = createPolicyScratch({ prefix: 'artifact-imports-' })
+	it('pins the global dynamic-require setting to esmodule false with no override touching it', () => {
+		const configured = readConfigRecord(
+			JSON.parse(readFileSync(resolve(POLICY_ROOT, '.oxlintrc.json'), 'utf8')),
+		)
+		expect(readConfigRecord(configured.rules)['import/no-dynamic-require']).toEqual([
+			'error',
+			{ esmodule: false },
+		])
+		if (!Array.isArray(configured.overrides)) throw new Error('Missing lint overrides')
+		const touching = configured.overrides
+			.map(readConfigRecord)
+			.filter(
+				(override) => readConfigRecord(override.rules)['import/no-dynamic-require'] !== undefined,
+			)
+		expect(touching).toEqual([])
+	})
+
+	it('permits a computed import() and refuses a computed require at every module path', () => {
+		const fixture = createPolicyScratch({ prefix: 'computed-imports-' })
 		try {
 			fixture.write(
 				'configs/policy.ts',
@@ -2831,64 +2848,50 @@ createSomething({
 			const configured = readConfigRecord(
 				JSON.parse(readFileSync(resolve(POLICY_ROOT, '.oxlintrc.json'), 'utf8')),
 			)
+			const required = COMPUTED_IMPORT_PATHS.map((path) => path.replace(/\.(\w+)$/u, '.require.$1'))
+			for (const path of COMPUTED_IMPORT_PATHS) {
+				fixture.write(path, 'const selected = process.argv[2]\nvoid import(selected)\ndebugger\n')
+			}
+			for (const path of required) {
+				fixture.write(path, 'const selected = process.argv[2]\nvoid require(selected)\ndebugger\n')
+			}
+			const paths = [...COMPUTED_IMPORT_PATHS, ...required]
 			// Include campaign fixtures even when the workspace's default lint walk ignores them.
 			fixture.write('.oxlintrc.json', JSON.stringify({ ...configured, ignorePatterns: [] }))
-			const written = ARTIFACT_IMPORT_CASES.map(([path, admitted]) => {
-				fixture.write(path, 'const selected = process.argv[2]\nvoid import(selected)\ndebugger\n')
-				const required = admitted ? path.replace(/\.(\w+)$/u, '.require.$1') : undefined
-				if (required !== undefined) {
-					fixture.write(
-						required,
-						'const selected = process.argv[2]\nvoid require(selected)\ndebugger\n',
-					)
-				}
-				return { path, required }
-			})
-			const paths = written.map(({ path }) => path)
-			const requires = written.flatMap(({ required }) => (required === undefined ? [] : [required]))
-			const codes = readImportDiagnostics(fixture.path, [...paths, ...requires])
-			for (const [path, admitted] of ARTIFACT_IMPORT_CASES) {
+			const codes = readImportDiagnostics(fixture.path, paths)
+			for (const path of COMPUTED_IMPORT_PATHS) {
 				expect({ path, refused: codes.has('import(no-dynamic-require) ' + path) }).toEqual({
 					path,
-					refused: !admitted,
+					refused: false,
 				})
-				expect(codes.has('eslint(no-debugger) ' + path)).toBe(true)
 			}
-			for (const path of requires) {
-				expect(codes.has('import(no-dynamic-require) ' + path)).toBe(true)
-				expect(codes.has('eslint(no-debugger) ' + path)).toBe(true)
+			for (const path of required) {
+				expect({ path, refused: codes.has('import(no-dynamic-require) ' + path) }).toEqual({
+					path,
+					refused: true,
+				})
 			}
+			// The sentinel proves each fixture was linted, so an unlinted path cannot read as permitted.
+			for (const path of paths) expect(codes.has('eslint(no-debugger) ' + path)).toBe(true)
 
-			expect(readConfigRecord(configured.rules)['import/no-dynamic-require']).toEqual([
-				'error',
-				{ esmodule: true },
-			])
-			if (!Array.isArray(configured.overrides)) throw new Error('Missing lint overrides')
-			const overrides = configured.overrides.map(readConfigRecord)
-			const artifact = overrides.filter(
-				(override) => readConfigRecord(override.rules)['import/no-dynamic-require'] !== undefined,
-			)
-			expect(artifact).toEqual([
-				{
-					files: [
-						'src/server/artifacts/**/*.{js,mjs,ts,mts}',
-						'tools/artifacts/**/*.{js,mjs,ts,mts}',
-						'.orkestrel/*/instruments/**/tools/artifacts/**/*.{js,mjs,ts,mts}',
-					],
-					rules: { 'import/no-dynamic-require': ['error', { esmodule: false }] },
-				},
-			])
+			// The control restores the ESM setting and must refuse the same computed imports.
 			fixture.write(
 				'.oxlintrc.json',
 				JSON.stringify({
 					...configured,
 					ignorePatterns: [],
-					overrides: overrides.filter((override) => !artifact.includes(override)),
+					rules: {
+						...readConfigRecord(configured.rules),
+						'import/no-dynamic-require': ['error', { esmodule: true }],
+					},
 				}),
 			)
-			const original = readImportDiagnostics(fixture.path, [...paths, ...requires])
-			for (const path of [...paths, ...requires]) {
-				expect(original.has('import(no-dynamic-require) ' + path)).toBe(true)
+			const strict = readImportDiagnostics(fixture.path, paths)
+			for (const path of paths) {
+				expect({ path, refused: strict.has('import(no-dynamic-require) ' + path) }).toEqual({
+					path,
+					refused: true,
+				})
 			}
 		} finally {
 			fixture.destroy()
@@ -3930,36 +3933,22 @@ describe('configuration helpers', () => {
 		)
 	})
 
-	it('admits computed artifact imports through Vite while retaining literal boundary inspection', async () => {
-		for (const [path] of ARTIFACT_IMPORT_CASES.filter(([, admitted]) => admitted)) {
+	it('admits a computed import() through Vite at every module path while collecting literal specifiers', async () => {
+		for (const path of [...COMPUTED_IMPORT_PATHS, '../outside/src/server/load.ts']) {
 			await expect(
 				configHelpers.environmentAssetSources(
 					'void import(process.argv[2])',
 					resolve(POLICY_ROOT, path),
 				),
 			).resolves.toEqual([])
-		}
-		for (const [path] of ARTIFACT_IMPORT_CASES.filter(([, admitted]) => !admitted)) {
 			await expect(
 				configHelpers.environmentAssetSources(
-					'void import(process.argv[2])',
+					"void import('@src/browser')",
 					resolve(POLICY_ROOT, path),
 				),
-			).rejects.toThrow('Dynamic imports must use static string values')
+			).resolves.toEqual(['@src/browser'])
 		}
-		await expect(
-			configHelpers.environmentAssetSources(
-				"void import('@src/browser')",
-				resolve(POLICY_ROOT, 'src/server/artifacts/Artifacts.ts'),
-			),
-		).resolves.toEqual(['@src/browser'])
 		expect(configHelpers.environmentSourceError('src/server', '@src/browser')).toBeDefined()
-		await expect(
-			configHelpers.environmentAssetSources(
-				'void import(process.argv[2])',
-				resolve(POLICY_ROOT, '../outside/src/server/artifacts/Artifacts.ts'),
-			),
-		).rejects.toThrow('Dynamic imports must use static string values')
 	})
 
 	it('drives each plugin through its real Vite hooks', async () => {

package/dist/host/tests/setupPolicy.ts

@@ -4578,35 +4578,24 @@ export function inspectSheetConfiguration(project: unknown, script?: string): re
 	]
 }
 
-/** Lists artifact-loader paths and the computed ESM imports each boundary admits. */
-export const ARTIFACT_IMPORT_CASES: ReadonlyArray<readonly [string, boolean]> = Object.freeze([
-	['src/server/artifacts/Artifacts.ts', true],
-	['src/server/artifacts/nested/inspect.mts', true],
-	['src/server/artifacts/inspect.js', true],
-	['src/server/artifacts/inspect.mjs', true],
-	['src/server/artifacts-lookalike/inspect.ts', false],
-	['src/browser/artifacts/inspect.ts', false],
-	['src/core/artifacts/inspect.ts', false],
-	['app/server/artifacts/inspect.ts', false],
-	['src/server/artifacts/inspect.cts', false],
-	['src/server/artifacts/inspect.cjs', false],
-	['tools/artifacts/inspect.ts', true],
-	['tools/artifacts/nested/inspect.mts', true],
-	['tools/artifacts/inspect.js', true],
-	['tools/artifacts/inspect.mjs', true],
-	['.orkestrel/sample/instruments/tools/artifacts/inspect.ts', true],
-	['.orkestrel/sample/instruments/harness/tools/artifacts/nested/inspect.mts', true],
-	['.orkestrel/sample/instruments/harness/tools/artifacts/inspect.js', true],
-	['.orkestrel/sample/instruments/harness/tools/artifacts/inspect.mjs', true],
-	['src/server/inspect.ts', false],
-	['src/server/tools/artifacts/inspect.ts', false],
-	['configs/inspect.ts', false],
-	['scripts/inspect.ts', false],
-	['.orkestrel/sample/instruments/harness/inspect.ts', false],
-	['tools/artifacts-lookalike/inspect.ts', false],
-	['.orkestrel/sample/instruments/harness/tools/artifacts-lookalike/inspect.ts', false],
-	['tools/artifacts/inspect.cts', false],
-	['tools/artifacts/inspect.cjs', false],
+/** Lists source, application, test, configuration, script, and campaign paths for uniform computed-import proofs. */
+export const COMPUTED_IMPORT_PATHS: readonly string[] = Object.freeze([
+	'src/core/load.ts',
+	'src/browser/load.ts',
+	'src/server/load.ts',
+	'src/server/load.mts',
+	'src/server/load.js',
+	'src/server/load.mjs',
+	'src/server/load.cts',
+	'src/server/load.cjs',
+	'app/server/load.ts',
+	'tests/load.ts',
+	'tests/src/server/load.test.ts',
+	'configs/load.ts',
+	'scripts/load.ts',
+	'.orkestrel/sample/load.ts',
+	'.orkestrel/sample/instruments/harness/load.ts',
+	'.orkestrel/sample/instruments/harness/load.mts',
 ])
 
 /**

package/dist/src/core/index.cjs

@@ -4,7 +4,7 @@ let _orkestrel_template = require("@orkestrel/template");
 let _orkestrel_emitter = require("@orkestrel/emitter");
 var package_default = {
 	name: "@orkestrel/scaffold",
-	version: "0.0.102",
+	version: "0.0.103",
 	description: "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	keywords: [
 		"audit",
@@ -108,7 +108,7 @@ var package_default = {
 		"@orkestrel/guide": "^0.0.24",
 		"@orkestrel/html": "^0.0.12",
 		"@orkestrel/probe": "^0.0.23",
-		"@orkestrel/test": "^0.0.26",
+		"@orkestrel/test": "^0.0.27",
 		"@types/node": "^26.6.4",
 		"@vitest/browser-playwright": "^4.1.11",
 		"oxfmt": "^0.72.0",