@orkestrel/scaffold 0.0.103 → 0.0.104

package/dist/host/claude/rules/writing.md

@@ -61,32 +61,40 @@
 
 ## Substitutions
 
-Replace each term with its replacement. A code identifier and a string inside a fence or a fixture are data and exempt.
-
-| Term                               | Replacement                                  |
-| ---------------------------------- | -------------------------------------------- |
-| `should`                           | `must`, `can`, `might`, or the imperative    |
-| `simply`, `easy`, `just`           | Delete                                       |
-| `currently`, `now`                 | Delete, or give the date                     |
-| `new`, `latest`                    | Delete, or give the version                  |
-| `utilize`, `leverage`              | `use`                                        |
-| `via`                              | `through`, `by using`                        |
-| `in order to`                      | `to`                                         |
-| `e.g.`, `i.e.`                     | `for example`, `that is`                     |
-| `etc.`                             | Bound the list, or recast the sentence       |
-| `performant`, `robust`             | The measured property                        |
-| `allows you to`                    | `lets you`                                   |
-| `and/or`                           | `and`, `or`, or `both`                       |
-| `since` (causal)                   | `because`                                    |
-| `once` (temporal)                  | `after`                                      |
-| `above`, `below` (cross-reference) | `preceding`, `following`, `earlier`, `later` |
-| `please`                           | Delete                                       |
-| `sanity check`                     | `quick check`                                |
-| `dummy`                            | `placeholder`                                |
-| `blacklist`, `whitelist`           | `denylist`, `allowlist`                      |
-| `master`, `slave`                  | `primary`, `replica`                         |
-
-- `policy/no-banned-term` reads comments and the prose sweep in `tests/setupPolicy.ts` reads authored Markdown; each matches the rows banned unconditionally. Rule a hit in `now`, `new`, `latest`, `once`, `since`, `above`, `below`, or `master` yourself by the banned sense.
+Replace each term with its replacement. A code identifier, an API name, and a string inside a fence or a fixture are data and exempt.
+
+| Term                                    | Replacement                                                     |
+| --------------------------------------- | --------------------------------------------------------------- |
+| `should`                                | `must`, `can`, `might`, or the imperative                       |
+| `simply`, `easy`, `just`                | Delete                                                          |
+| `currently`, `now`                      | Delete, or give the date                                        |
+| `new`, `latest`                         | Delete, or give the version                                     |
+| `utilize`, `leverage`                   | `use`                                                           |
+| `via`                                   | `through`, `by using`                                           |
+| `in order to`                           | `to`                                                            |
+| `e.g.`, `i.e.`                          | `for example`, `that is`                                        |
+| `etc.`                                  | Bound the list, or recast the sentence                          |
+| `performant`, `robust`                  | The measured property                                           |
+| `allows you to`                         | `lets you`                                                      |
+| `and/or`                                | `and`, `or`, or `both`                                          |
+| `since` (causal)                        | `because`                                                       |
+| `once` (temporal)                       | `after`                                                         |
+| `above`, `below` (cross-reference)      | `preceding`, `following`, `earlier`, `later`                    |
+| `please`                                | Delete                                                          |
+| `sanity check`                          | `quick check`                                                   |
+| `dummy`                                 | `placeholder`                                                   |
+| `blacklist`, `whitelist`                | `denylist`, `allowlist`                                         |
+| `master`, `slave`                       | `primary`, `replica`                                            |
+| `hostile`, `adversarial` (input, value) | `malformed`, `unexpected`, or `untrusted`                       |
+| `adversarial` (review, round, audit)    | `independent` or `skeptical`                                    |
+| `attack`, `break` (a claim)             | `test` or `falsify`                                             |
+| `forge`                                 | `fabricate`, `fake`, or `does not match`                        |
+| `bypass`                                | `skip`, or recast as reaching one thing without passing another |
+| `poison`                                | `corrupt`, `invalidate`, or `stale`                             |
+| `escape` (a root, a sandbox)            | `read outside` or `resolve outside`                             |
+| `exploit`, `payload` (attack sense)     | Name the defect, or `input`                                     |
+
+- `policy/no-banned-term` reads comments and the prose sweep in `tests/setupPolicy.ts` reads authored Markdown; each matches the rows banned unconditionally. Rule a hit in `now`, `new`, `latest`, `once`, `since`, `above`, `below`, `master`, `hostile`, `adversarial`, `attack`, `break`, `forge`, `bypass`, `poison`, `escape`, `exploit`, or `payload` yourself by the banned sense.
 - Sweep case-insensitively and across inflections. Name the pattern and the paths behind every sweep result.
 - Write singular `they` for a person of unstated gender.
 - `.claude/rules/names.md` § Fixed lifecycle vocabulary owns `execute`, `abort`, `kill`, `terminate`, and `run`.

package/dist/host/claude/settings.json

@@ -183,6 +183,8 @@
 			"Bash(npm run test:guides *)",
 			"Bash(npm run test:conformance)",
 			"Bash(npm run test:conformance *)",
+			"Bash(npm run test:tree)",
+			"Bash(npm run test:tree *)",
 			"Bash(npm run test:integration)",
 			"Bash(npm run test:integration *)",
 			"Bash(npm run test:distribution)",

package/dist/host/claude/skills/orkestrel-debrief/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: orkestrel-debrief
-description: Look back at a long campaign to learn from its mistakes and successes and improve the agents, rules, skills, and processes that ran it. Use after a campaign or milestone closes to run the retrospective - field evidence, layer and boundary audits, package promotion, an adversarial audit of the instruction set itself, process doctrine - and to land every learning as a refinement that propagates, then retire the campaign folder.
+description: Look back at a long campaign to learn from its mistakes and successes and improve the agents, rules, skills, and processes that ran it. Use after a campaign or milestone closes to run the retrospective - field evidence, layer and boundary audits, package promotion, an independent audit of the instruction set itself, process doctrine - and to land every learning as a refinement that propagates, then retire the campaign folder.
 ---
 
 # Load the canonical workflow

package/dist/host/claude/skills/orkestrel-falsify/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: orkestrel-falsify
 description: >-
-  Run one adversarial audit round against finished work: write the subject as numbered falsifiable claims, dispatch independent auditors instructed to break them, reconcile their evidence, and rule. Use when the size gate in `.agents/orchestration.md` names a review, before a fix round is accepted, before a version bump or publication, or when a defect has recurred across rounds. Do not use it for a small change, a mechanical rename, or a round with no added or repaired claim to attack.
+  Run one skeptical audit round against finished work: write the subject as numbered falsifiable claims, dispatch independent auditors instructed to falsify them, reconcile their evidence, and rule. Use when the size gate in `.agents/orchestration.md` names a review, before a fix round is accepted, before a version bump or publication, or when a defect has recurred across rounds. Do not use it for a small change, a mechanical rename, or a round with no added or repaired claim to test.
 ---
 
 # Load the canonical workflow

package/dist/host/codex/agents/analyst.toml

@@ -12,12 +12,12 @@ Hold the lane the dispatch names and say which: objective (correctness under adv
 what the contracts and installed declarations permit, dependency and range truth, test
 sufficiency, the letter of the rules) or subjective (shape, naming, ergonomics, design fit).
 
-Attack each numbered claim with a concrete input, state, or interleaving. Before confirming a
-claim about a proof, name the mutation that would make the proof fail and whether the assertions
+Try to falsify each numbered claim with a concrete input, state, or interleaving. Before
+confirming a claim about a proof, name the mutation that would make the proof fail and whether the assertions
 distinguish it. Rule a claim whose only evidence is the writer's report UNRESOLVED. Mark a
 rendered-surface claim the capture cannot show NOT-EVIDENCED.
 
 Return the orkestrel-falsify verdict shape: numbered verdicts with evidence, findings outside the
-claims, attacked-and-held, one terminal line. Never edit, implement, reconcile, accept, or spawn.
+claims, tested-and-held, one terminal line. Never edit, implement, reconcile, accept, or spawn.
 Your final message is the verdict.
 """

package/dist/host/codex/agents/reviewer.toml

@@ -4,7 +4,7 @@ model = "gpt-6-astra"
 model_reasoning_effort = "high"
 sandbox_mode = "read-only"
 developer_instructions = """
-Review one dispatched unit on GPT-6 Astra by trying to break its claims. Use read-only inspection
+Review one dispatched unit on GPT-6 Astra by trying to falsify its claims. Use read-only inspection
 commands. Never edit, run a mutating command, or spawn. Use a clean context; never review work you wrote.
 
 Read the claims file, the actual diff and git status --porcelain the dispatch supplies,
@@ -16,14 +16,14 @@ names and boundaries, the right layer, each concept's purpose, guide parity. Obj
 correctness under adverse orderings, what contracts and installed declarations permit,
 dependency and range truth, test sufficiency, and the letter of the rules.
 
-Attack each claim with a concrete input, state, or interleaving. Before confirming a proof,
-name the mutation that would make it fail and whether its assertions distinguish it. Rule a
+Try to falsify each claim with a concrete input, state, or interleaving. Before confirming a
+proof, name the mutation that would make it fail and whether its assertions distinguish it. Rule a
 claim whose only evidence is the writer's report UNRESOLVED. Cite a capture for every rendered
 surface claim; mark what the portfolio cannot show NOT-EVIDENCED. Refer a question outside your
 lane to the other lane or the Orchestrator with evidence; never rule on it. Treat a bench finding
 as a proposal to test against the code, never as authority.
 
 Return the orkestrel-falsify verdict shape: numbered verdicts with evidence, findings outside the
-claims, attacked-and-held, one terminal line. Each required change carries file:line, what is
+claims, tested-and-held, one terminal line. Each required change carries file:line, what is
 wrong, and what right looks like. Nothing else. Your final message is the verdict.
 """

package/dist/host/configs/policy.ts

@@ -386,8 +386,9 @@ export const POLICY_BANNED_TERMS: readonly PolicyTerm[] = Object.freeze([
  *
  * @remarks
  * Each row carries a permitted sense: a date value, a version value, a causal clause, the name a
- * replication topology takes, and a comparative or spatial relation. The currency check proves each
- * row is registered here.
+ * replication topology takes, a comparative or spatial relation, and a literal engineering term such
+ * as a string escape, a loop `break`, or a request payload. The currency check proves each row is
+ * registered here.
  */
 export const POLICY_JUDGED_TERMS: readonly string[] = Object.freeze([
 	'now',
@@ -398,6 +399,16 @@ export const POLICY_JUDGED_TERMS: readonly string[] = Object.freeze([
 	'above',
 	'below',
 	'master',
+	'hostile',
+	'adversarial',
+	'attack',
+	'break',
+	'forge',
+	'bypass',
+	'poison',
+	'escape',
+	'exploit',
+	'payload',
 ])
 
 /** Returns the file name a policy rule keys on, read from either host separator. */

package/dist/host/dotfiles/editorconfig

@@ -14,4 +14,3 @@ indent_size = 2
 
 [*.md]
 trim_trailing_whitespace = false
-

package/dist/host/dotfiles/gitattributes

@@ -1,3 +1,2 @@
 # Enforce LF line endings everywhere — prevents CRLF/LF churn on Windows
 * text=auto eol=lf
-

package/dist/host/dotfiles/gitignore

@@ -47,4 +47,3 @@ playwright-report/
 
 # Agent worktrees (created by an isolated subagent dispatch, never committed)
 .claude/worktrees/
-

package/dist/host/dotfiles/oxlintrc.json

@@ -220,6 +220,10 @@
 							{
 								"regex": "^(?:node:|(?:_(?:http_(?:agent|client|common|incoming|outgoing|server)|stream_(?:duplex|passthrough|readable|transform|wrap|writable)|tls_(?:common|wrap))|assert(?:/strict)?|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns(?:/promises)?|domain|events|fs(?:/promises)?|http|http2|https|inspector(?:/promises)?|module|net|os|path(?:/(?:posix|win32))?|perf_hooks|process|punycode|querystring|readline(?:/promises)?|repl|sqlite|stream(?:/(?:consumers|promises|web))?|string_decoder|sys|timers(?:/promises)?|tls|trace_events|tty|url|util(?:/types)?|v8|vm|wasi|worker_threads|zlib)(?:[/?#]|$)|@src/server(?:[/?#]|$)|@orkestrel/[^/]+/server(?:[/?#]|$)|(?:\\.\\./)+(?:server|src/server|app/server)(?:[/?#]|$))",
 								"message": "src/browser must not depend on Node or server-only modules"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?core(?:[/?#]|$)",
+								"message": "src/browser must import src/core through the @src/core alias"
 							}
 						]
 					}
@@ -436,6 +440,14 @@
 							{
 								"regex": "^(?:node:|(?:_(?:http_(?:agent|client|common|incoming|outgoing|server)|stream_(?:duplex|passthrough|readable|transform|wrap|writable)|tls_(?:common|wrap))|assert(?:/strict)?|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns(?:/promises)?|domain|events|fs(?:/promises)?|http|http2|https|inspector(?:/promises)?|module|net|os|path(?:/(?:posix|win32))?|perf_hooks|process|punycode|querystring|readline(?:/promises)?|repl|sqlite|stream(?:/(?:consumers|promises|web))?|string_decoder|sys|timers(?:/promises)?|tls|trace_events|tty|url|util(?:/types)?|v8|vm|wasi|worker_threads|zlib)(?:[/?#]|$)|@src/server(?:[/?#]|$)|@orkestrel/[^/]+/server(?:[/?#]|$)|(?:\\.\\./)+(?:server|src/server|app/server)(?:[/?#]|$))",
 								"message": "src/vue must not depend on Node or server-only modules"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?core(?:[/?#]|$)",
+								"message": "src/vue must import src/core through the @src/core alias"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?browser(?:[/?#]|$)",
+								"message": "src/vue must import src/browser through the @src/browser alias"
 							}
 						]
 					}
@@ -488,6 +500,10 @@
 							{
 								"regex": "^(?:(?:vue|vite)(?:[/?#]|$)|@(?:vue|vitejs)/|@src/browser(?:[/?#]|$)|@orkestrel/[^/]+/browser(?:[/?#]|$)|(?:\\.\\./)+(?:browser|src/browser|app/browser)(?:[/?#]|$))",
 								"message": "src/server must not depend on Vue or browser-only modules"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?core(?:[/?#]|$)",
+								"message": "src/server must import src/core through the @src/core alias"
 							}
 						]
 					}
@@ -720,6 +736,14 @@
 							{
 								"regex": "^(?:(?:vue|vite)(?:[/?#]|$)|@(?:vue|vitejs)/|@src/(?:browser|vue)(?:[/?#]|$)|@orkestrel/[^/]+/(?:browser|vue)(?:[/?#]|$)|(?:\\.\\./)+(?:browser|vue|src/(?:browser|vue)|app/browser)(?:[/?#]|$))",
 								"message": "src/bin must not depend on browser-only modules"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?core(?:[/?#]|$)",
+								"message": "src/bin must import src/core through the @src/core alias"
+							},
+							{
+								"regex": "^(?:\\.\\./)+(?:src/)?server(?:[/?#]|$)",
+								"message": "src/bin must import src/server through the @src/server alias"
 							}
 						]
 					}