@orkestrel/scaffold 0.0.107 → 0.0.109

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@orkestrel/scaffold",
-	"version": "0.0.107",
+	"version": "0.0.109",
 	"description": "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	"keywords": [
 		"audit",
@@ -84,7 +84,7 @@
 		"test:templates": "vitest run --config vite.config.ts --no-cache --reporter=dot --project templates",
 		"test:distribution": "vitest run --config vite.config.ts --no-cache --reporter=dot --project distribution",
 		"test:probe": "vitest run --config vite.config.ts --no-cache --reporter=verbose --project probe",
-		"test:bench": "vitest bench --config vite.config.ts --no-cache --project probe",
+		"test:bench": "vitest bench --config vite.config.ts --no-cache --project \"probe (bench)\" --mode benchmark",
 		"test:setup": "vitest run --config vite.config.ts --no-cache --reporter=dot --project setup",
 		"build": "npm run clean && npm run build:src && npm run build:host && npm run build:skills && npm run build:inventory",
 		"build:src": "npm run build:src:core && npm run build:src:server && npm run build:src:bin",
@@ -106,20 +106,20 @@
 		"@orkestrel/template": "^0.0.10"
 	},
 	"devDependencies": {
-		"@microsoft/api-extractor": "^7.59.4",
+		"@microsoft/api-extractor": "^7.60.0",
 		"@orkestrel/browser": "^0.0.29",
 		"@orkestrel/guide": "^0.0.25",
 		"@orkestrel/html": "^0.0.12",
-		"@orkestrel/probe": "^0.0.24",
-		"@orkestrel/test": "^0.0.29",
+		"@orkestrel/probe": "^0.0.25",
+		"@orkestrel/test": "^0.0.30",
 		"@types/node": "^24.19.2",
-		"@vitest/browser-playwright": "^4.1.11",
-		"oxfmt": "^0.74.0",
-		"oxlint": "^1.89.0",
-		"playwright": "^1.63.0",
-		"typescript": "^6.0.3",
+		"@vitest/browser-playwright": "^5.0.5",
+		"oxfmt": "^0.75.0",
+		"oxlint": "^1.90.0",
+		"playwright": "^1.64.1",
+		"typescript": "^7.0.2",
 		"vite": "^8.3.5",
-		"vitest": "^4.1.12"
+		"vitest": "^5.0.5"
 	},
 	"engines": {
 		"node": ">=22.18.0"

package/dist/agents/skills/orkestrel-dispatch/scripts/helpers.js

@@ -1,283 +0,0 @@
-import { spawnSync } from 'node:child_process';
-import { existsSync, readdirSync, rmSync, statSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-/** Names the directories every tree walk in a skill script skips. */
-export const SKIPPED_DIRECTORIES = new Set([
-    'node_modules',
-    '.git',
-    'dist',
-    'tmp',
-    '.orkestrel',
-    '.idea',
-]);
-/** Names the manifest fields that hold specs, including nested overrides. */
-export const SPEC_FIELDS = Object.freeze([
-    'dependencies',
-    'devDependencies',
-    'peerDependencies',
-    'optionalDependencies',
-    'overrides',
-]);
-/** Matches npm local prefixes and path starts, including drive-relative paths. */
-export const LOCAL_SPEC_PATTERN = /^(?:file:|link:|\.|~[\\/]|[\\/]|[A-Za-z]:)/iu;
-/** Matches archive specs with no protocol and a tgz, tar.gz, or tar extension. */
-export const ARCHIVE_SPEC_PATTERN = /^[^:]+\.(?:tgz|tar\.gz|tar)$/iu;
-/** Matches hosted user/repository shorthand even when its name ends in an archive extension. */
-export const SHORTHAND_SPEC_PATTERN = /^[^:@%/\s.-][^:@%/\s]*\/[^:@\s/%]+$/u;
-/**
- * Checks whether a value is a non-null, non-array object.
- *
- * @param value - The value to inspect.
- * @returns True if the value is an object other than null or an array; false otherwise.
- * @example
- * isRecord({ dependencies: {} }) // true
- * isRecord([]) // false
- */
-export function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-/**
- * Checks whether npm resolves a spec from the local host.
- *
- * @param spec - The package spec, with leading whitespace ignored.
- * @returns True if the spec names a local path or archive; false otherwise.
- * @example
- * matchesLocalSpec('file:../other') // true
- * matchesLocalSpec('owner/package.tgz') // false
- */
-export function matchesLocalSpec(spec) {
-    const text = spec.trimStart();
-    return (LOCAL_SPEC_PATTERN.test(text) ||
-        (ARCHIVE_SPEC_PATTERN.test(text) && !SHORTHAND_SPEC_PATTERN.test(text)));
-}
-/**
- * Collects string specs with the dotted path of each nested record member.
- *
- * @param path - The field path that prefixes each finding.
- * @param value - A string or finite, acyclic manifest record; other values contribute no specs.
- * @returns The path and spec pairs in record order.
- * @example
- * collectSpecs('overrides', { a: { b: 'file:../other' } })
- * // [['overrides.a.b', 'file:../other']]
- */
-export function collectSpecs(path, value) {
-    if (typeof value === 'string')
-        return [[path, value]];
-    if (!isRecord(value))
-        return [];
-    return Object.entries(value).flatMap(([key, child]) => collectSpecs(`${path}.${key}`, child));
-}
-/**
- * Finds local specs in the manifest's spec fields, including nested overrides.
- *
- * @param manifest - A finite, acyclic package manifest record.
- * @returns Each local spec's dotted field path and spec, in field and record order.
- * @example
- * scanLocalSpecs({ overrides: { a: { b: 'file:../other' } } })
- * // [['overrides.a.b', 'file:../other']]
- */
-export function scanLocalSpecs(manifest) {
-    return SPEC_FIELDS.flatMap((field) => collectSpecs(field, manifest[field]).filter(([, spec]) => matchesLocalSpec(spec)));
-}
-/**
- * Removes a tree with bounded retries for transient host removal errors.
- *
- * @param path - The directory to remove; a missing path succeeds.
- * @returns Nothing after the removal succeeds.
- * @throws Thrown when removal fails after the bounded retries or the host refuses the path.
- * @remarks
- * Uses Node's recursive removal with five retries and a 100 ms retry delay.
- * @example
- * removeTree(scratch.path)
- */
-export function removeTree(path) {
-    rmSync(path, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
-}
-/**
- * Reads the value that follows a flag.
- *
- * @remarks
- * Every skill script reads `--flag value` pairs: the first occurrence of a flag wins, a following
- * value that opens with `--` is a missing value, and the `--flag=value` form is not read.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--journal`.
- * @returns The value after the flag, or undefined when the flag is absent, last, or followed by
- * another flag.
- */
-export function readOption(argv, name) {
-    const index = argv.indexOf(name);
-    const value = index === -1 ? undefined : argv[index + 1];
-    return value === undefined || value.startsWith('--') ? undefined : value;
-}
-/**
- * Names the value flags a caller gave with no value.
- *
- * @param argv - The arguments after the script path.
- * @param names - The flags that take a value.
- * @returns Each named flag that appears last or is followed by another flag, in argument order.
- */
-export function readMissingFlags(argv, names) {
-    return names.filter((name) => argv.includes(name) && readOption(argv, name) === undefined);
-}
-/**
- * Reads every value that follows a repeatable flag.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--range`.
- * @returns The values in order, empty when the flag never appears.
- */
-export function readOptions(argv, name) {
-    return argv.flatMap((argument, index) => {
-        const value = argv[index + 1];
-        return argument === name && value !== undefined && !value.startsWith('--') ? [value] : [];
-    });
-}
-/**
- * Reads the values that follow a flag up to the next flag.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--tree`.
- * @returns The values between the flag and the next `--` argument, empty when the flag is absent.
- */
-export function readList(argv, name) {
-    const index = argv.indexOf(name);
-    if (index === -1)
-        return [];
-    const rest = argv.slice(index + 1);
-    const end = rest.findIndex((argument) => argument.startsWith('--'));
-    return end === -1 ? rest : rest.slice(0, end);
-}
-/**
- * Normalizes a host path to forward slashes.
- *
- * @param path - A host path.
- * @returns The same path with every backslash replaced by a slash.
- */
-export function normalizeSlashes(path) {
-    return path.split('\\').join('/');
-}
-/**
- * Lists every regular file beneath a directory, skipping the directories skill scripts never read.
- *
- * @remarks
- * A skipped name matches a directory at any depth, exactly and case-sensitively, so a
- * `src/dist/` directory is skipped with the build output and a `Node_Modules/` directory is not.
- *
- * @param directory - The directory to walk.
- * @param skipped - The directory names to skip. Default: {@link SKIPPED_DIRECTORIES}.
- * @returns Each file's forward-slash path and modification time, in walk order.
- * @throws Thrown when `directory` does not exist or cannot be read; check `existsSync` first.
- */
-export function listFiles(directory, skipped = SKIPPED_DIRECTORIES) {
-    const files = [];
-    const pending = [directory];
-    while (pending.length > 0) {
-        const current = pending.pop();
-        if (current === undefined)
-            break;
-        for (const entry of readdirSync(current, { withFileTypes: true })) {
-            if (skipped.has(entry.name))
-                continue;
-            const path = join(current, entry.name);
-            if (entry.isDirectory())
-                pending.push(path);
-            else if (entry.isFile()) {
-                files.push({ path: normalizeSlashes(path), modified: statSync(path).mtimeMs });
-            }
-        }
-    }
-    return files;
-}
-/**
- * Reads the last non-empty line of a text as a JSON object.
- *
- * @param text - Text whose last line a script printed as JSON.
- * @returns The parsed object, or undefined when the last line is not a JSON object.
- */
-export function readJsonObject(text) {
-    const line = text
-        .split(/\r\n|\n/)
-        .filter((candidate) => candidate.trim() !== '')
-        .at(-1);
-    if (line === undefined)
-        return undefined;
-    try {
-        const parsed = JSON.parse(line);
-        if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
-            return Object.fromEntries(Object.entries(parsed));
-        }
-    }
-    catch { }
-    return undefined;
-}
-/**
- * Parses a whole text as one JSON object.
- *
- * @param text - A JSON document, formatted or not, such as a manifest or `npm view --json` output.
- * @returns The parsed object, or undefined when the text is not a JSON object.
- */
-export function parseJsonRecord(text) {
-    try {
-        const parsed = JSON.parse(text);
-        if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
-            return Object.fromEntries(Object.entries(parsed));
-        }
-    }
-    catch { }
-    return undefined;
-}
-/**
- * Reads a string member of a record.
- *
- * @param record - The record, or undefined.
- * @param key - The member name.
- * @returns The string, or undefined when the member is absent or not a string.
- */
-export function readString(record, key) {
-    const value = record?.[key];
-    return typeof value === 'string' ? value : undefined;
-}
-/**
- * Reads a finite number member of a record.
- *
- * @param record - The record, or undefined.
- * @param key - The member name.
- * @returns The number, or undefined when the member is absent, not a number, or not finite.
- */
-export function readNumber(record, key) {
-    const value = record?.[key];
-    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
-}
-/**
- * Resolves the npm command for this host.
- *
- * @remarks
- * The `npm-cli.js` entry beside the running Node binary spawns without a shell on every host; the
- * `npm` shim on Windows is a `.cmd` file that needs one, so that path is the fallback alone.
- *
- * @returns The file to spawn, the arguments that precede npm's own, and whether a shell is needed.
- */
-export function resolveNpm() {
-    const cli = join(dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npm-cli.js');
-    if (existsSync(cli))
-        return { file: process.execPath, prefix: [cli], shell: false };
-    return { file: 'npm', prefix: [], shell: process.platform === 'win32' };
-}
-/**
- * Runs npm with the given arguments and returns the finished child.
- *
- * @param args - The npm arguments, such as `['view', '@orkestrel/scaffold', 'version']`.
- * @param cwd - The working directory. Default: the current directory.
- * @returns The spawn result with `utf8` stdout and stderr.
- */
-export function runNpm(args, cwd) {
-    const npm = resolveNpm();
-    return spawnSync(npm.file, [...npm.prefix, ...args], {
-        encoding: 'utf8',
-        windowsHide: true,
-        shell: npm.shell,
-        maxBuffer: 64 * 1024 * 1024,
-        ...(cwd === undefined ? {} : { cwd }),
-    });
-}

package/dist/host/agents/skills/orkestrel-dispatch/references/bench.md

@@ -1,25 +0,0 @@
-# Bench lanes
-
-An external engine widens capacity and inherits no authority. Treat every bench output as a proposal until the Orchestrator verifies it against the tree. `.agents/transports/<harness>.md` owns each bench's command, sandbox, and recovery; this file owns what is true of every bench.
-
-## Before the lane
-
-- Probe the bench once per session with `node .agents/skills/orkestrel-dispatch/scripts/bench.ts --cursor`, `--codex`, or `--claude` before its first lane, and again at any dispatch after a failure. `live: false` records the bench dark. A version string or a login status is not liveness.
-- Write the brief with `scripts/brief.ts --unit <unit> --lane <bench>`; briefs never travel as shell arguments. Run `scripts/brief.ts --check` on it and fix every missing path.
-- Name in the brief the host restrictions the transport contract records that this unit will meet. A proof that needs a restricted capability is taken on the host by the Orchestrator, and the unit records it as an observation naming the exact command.
-- When the sandbox rejects a write, the unit stops and reports the rejection. It never tries another write mechanism, and the brief says so.
-- A bench unit writes only its owned files and its checkout's `tmp/`. Name its report path there, or take the report from the last-message file.
-- Launch one Grok lane at a time. An empty lane beside a live probe is starvation, so cut concurrency and re-run rather than recording the bench dark.
-
-## During the lane
-
-- The journal under `tmp/<bench>/` is the liveness signal and the recovery handle; `scripts/result.ts` reads both. Register the lane in the session task registry with subject, journal path, and session id.
-- Never poll the bench from inside the driver. The Orchestrator owns the cap and the watch.
-
-## After the lane
-
-- Refuse a result whose journal path and session id are absent: it ran on the driver's engine.
-- Read the answer with `scripts/result.ts`, never from stdout. Run `scripts/cite.ts` over it before reading it.
-- Verify a writing lane with `git status --porcelain`, the diff, and scoped validation before integrating.
-- A dispatch that fails on auth, quota, model access, or network is a fresh liveness result: record the bench dark and re-plan the lane on the substitute engine.
-- Delete the brief, journal, `.err`, and last-message files when the unit is accepted.

package/dist/host/agents/skills/orkestrel-dispatch/scripts/helpers.ts

@@ -1,333 +0,0 @@
-// What the skill scripts share: argument reading, tree walking, JSON line reading, and the npm
-// command. This module runs nothing. Import it from a sibling or another skill's script with the
-// `.ts` extension, for example `import { readOption } from '../../orkestrel-dispatch/scripts/helpers.ts'`.
-import type { SpawnSyncReturns } from 'node:child_process'
-import { spawnSync } from 'node:child_process'
-import { existsSync, readdirSync, rmSync, statSync } from 'node:fs'
-import { dirname, join } from 'node:path'
-
-/** Names the directories every tree walk in a skill script skips. */
-export const SKIPPED_DIRECTORIES: ReadonlySet<string> = new Set([
-	'node_modules',
-	'.git',
-	'dist',
-	'tmp',
-	'.orkestrel',
-	'.idea',
-])
-
-/** Names the manifest fields that hold specs, including nested overrides. */
-export const SPEC_FIELDS: readonly string[] = Object.freeze([
-	'dependencies',
-	'devDependencies',
-	'peerDependencies',
-	'optionalDependencies',
-	'overrides',
-])
-
-/** Matches npm local prefixes and path starts, including drive-relative paths. */
-export const LOCAL_SPEC_PATTERN = /^(?:file:|link:|\.|~[\\/]|[\\/]|[A-Za-z]:)/iu
-
-/** Matches archive specs with no protocol and a tgz, tar.gz, or tar extension. */
-export const ARCHIVE_SPEC_PATTERN = /^[^:]+\.(?:tgz|tar\.gz|tar)$/iu
-
-/** Matches hosted user/repository shorthand even when its name ends in an archive extension. */
-export const SHORTHAND_SPEC_PATTERN = /^[^:@%/\s.-][^:@%/\s]*\/[^:@\s/%]+$/u
-
-/** Describes one file a tree walk found, with the modification time the sweep reads. */
-export interface WalkedFile {
-	readonly path: string
-	readonly modified: number
-}
-
-/** Describes how to spawn npm on this host without a shell where the CLI entry is present. */
-export interface NpmCommand {
-	readonly file: string
-	readonly prefix: readonly string[]
-	readonly shell: boolean
-}
-
-/**
- * Checks whether a value is a non-null, non-array object.
- *
- * @param value - The value to inspect.
- * @returns True if the value is an object other than null or an array; false otherwise.
- * @example
- * isRecord({ dependencies: {} }) // true
- * isRecord([]) // false
- */
-export function isRecord(value: unknown): value is Record<string, unknown> {
-	return typeof value === 'object' && value !== null && !Array.isArray(value)
-}
-
-/**
- * Checks whether npm resolves a spec from the local host.
- *
- * @param spec - The package spec, with leading whitespace ignored.
- * @returns True if the spec names a local path or archive; false otherwise.
- * @example
- * matchesLocalSpec('file:../other') // true
- * matchesLocalSpec('owner/package.tgz') // false
- */
-export function matchesLocalSpec(spec: string): boolean {
-	const text = spec.trimStart()
-	return (
-		LOCAL_SPEC_PATTERN.test(text) ||
-		(ARCHIVE_SPEC_PATTERN.test(text) && !SHORTHAND_SPEC_PATTERN.test(text))
-	)
-}
-
-/**
- * Collects string specs with the dotted path of each nested record member.
- *
- * @param path - The field path that prefixes each finding.
- * @param value - A string or finite, acyclic manifest record; other values contribute no specs.
- * @returns The path and spec pairs in record order.
- * @example
- * collectSpecs('overrides', { a: { b: 'file:../other' } })
- * // [['overrides.a.b', 'file:../other']]
- */
-export function collectSpecs(
-	path: string,
-	value: unknown,
-): ReadonlyArray<readonly [string, string]> {
-	if (typeof value === 'string') return [[path, value]]
-	if (!isRecord(value)) return []
-	return Object.entries(value).flatMap(([key, child]) => collectSpecs(`${path}.${key}`, child))
-}
-
-/**
- * Finds local specs in the manifest's spec fields, including nested overrides.
- *
- * @param manifest - A finite, acyclic package manifest record.
- * @returns Each local spec's dotted field path and spec, in field and record order.
- * @example
- * scanLocalSpecs({ overrides: { a: { b: 'file:../other' } } })
- * // [['overrides.a.b', 'file:../other']]
- */
-export function scanLocalSpecs(
-	manifest: Readonly<Record<string, unknown>>,
-): ReadonlyArray<readonly [string, string]> {
-	return SPEC_FIELDS.flatMap((field) =>
-		collectSpecs(field, manifest[field]).filter(([, spec]) => matchesLocalSpec(spec)),
-	)
-}
-
-/**
- * Removes a tree with bounded retries for transient host removal errors.
- *
- * @param path - The directory to remove; a missing path succeeds.
- * @returns Nothing after the removal succeeds.
- * @throws Thrown when removal fails after the bounded retries or the host refuses the path.
- * @remarks
- * Uses Node's recursive removal with five retries and a 100 ms retry delay.
- * @example
- * removeTree(scratch.path)
- */
-export function removeTree(path: string): void {
-	rmSync(path, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 })
-}
-
-/**
- * Reads the value that follows a flag.
- *
- * @remarks
- * Every skill script reads `--flag value` pairs: the first occurrence of a flag wins, a following
- * value that opens with `--` is a missing value, and the `--flag=value` form is not read.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--journal`.
- * @returns The value after the flag, or undefined when the flag is absent, last, or followed by
- * another flag.
- */
-export function readOption(argv: readonly string[], name: string): string | undefined {
-	const index = argv.indexOf(name)
-	const value = index === -1 ? undefined : argv[index + 1]
-	return value === undefined || value.startsWith('--') ? undefined : value
-}
-
-/**
- * Names the value flags a caller gave with no value.
- *
- * @param argv - The arguments after the script path.
- * @param names - The flags that take a value.
- * @returns Each named flag that appears last or is followed by another flag, in argument order.
- */
-export function readMissingFlags(
-	argv: readonly string[],
-	names: readonly string[],
-): readonly string[] {
-	return names.filter((name) => argv.includes(name) && readOption(argv, name) === undefined)
-}
-
-/**
- * Reads every value that follows a repeatable flag.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--range`.
- * @returns The values in order, empty when the flag never appears.
- */
-export function readOptions(argv: readonly string[], name: string): readonly string[] {
-	return argv.flatMap((argument, index) => {
-		const value = argv[index + 1]
-		return argument === name && value !== undefined && !value.startsWith('--') ? [value] : []
-	})
-}
-
-/**
- * Reads the values that follow a flag up to the next flag.
- *
- * @param argv - The arguments after the script path.
- * @param name - The flag, such as `--tree`.
- * @returns The values between the flag and the next `--` argument, empty when the flag is absent.
- */
-export function readList(argv: readonly string[], name: string): readonly string[] {
-	const index = argv.indexOf(name)
-	if (index === -1) return []
-	const rest = argv.slice(index + 1)
-	const end = rest.findIndex((argument) => argument.startsWith('--'))
-	return end === -1 ? rest : rest.slice(0, end)
-}
-
-/**
- * Normalizes a host path to forward slashes.
- *
- * @param path - A host path.
- * @returns The same path with every backslash replaced by a slash.
- */
-export function normalizeSlashes(path: string): string {
-	return path.split('\\').join('/')
-}
-
-/**
- * Lists every regular file beneath a directory, skipping the directories skill scripts never read.
- *
- * @remarks
- * A skipped name matches a directory at any depth, exactly and case-sensitively, so a
- * `src/dist/` directory is skipped with the build output and a `Node_Modules/` directory is not.
- *
- * @param directory - The directory to walk.
- * @param skipped - The directory names to skip. Default: {@link SKIPPED_DIRECTORIES}.
- * @returns Each file's forward-slash path and modification time, in walk order.
- * @throws Thrown when `directory` does not exist or cannot be read; check `existsSync` first.
- */
-export function listFiles(
-	directory: string,
-	skipped: ReadonlySet<string> = SKIPPED_DIRECTORIES,
-): readonly WalkedFile[] {
-	const files: WalkedFile[] = []
-	const pending = [directory]
-	while (pending.length > 0) {
-		const current = pending.pop()
-		if (current === undefined) break
-		for (const entry of readdirSync(current, { withFileTypes: true })) {
-			if (skipped.has(entry.name)) continue
-			const path = join(current, entry.name)
-			if (entry.isDirectory()) pending.push(path)
-			else if (entry.isFile()) {
-				files.push({ path: normalizeSlashes(path), modified: statSync(path).mtimeMs })
-			}
-		}
-	}
-	return files
-}
-
-/**
- * Reads the last non-empty line of a text as a JSON object.
- *
- * @param text - Text whose last line a script printed as JSON.
- * @returns The parsed object, or undefined when the last line is not a JSON object.
- */
-export function readJsonObject(text: string): Record<string, unknown> | undefined {
-	const line = text
-		.split(/\r\n|\n/)
-		.filter((candidate) => candidate.trim() !== '')
-		.at(-1)
-	if (line === undefined) return undefined
-	try {
-		const parsed: unknown = JSON.parse(line)
-		if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
-			return Object.fromEntries(Object.entries(parsed))
-		}
-	} catch {}
-	return undefined
-}
-
-/**
- * Parses a whole text as one JSON object.
- *
- * @param text - A JSON document, formatted or not, such as a manifest or `npm view --json` output.
- * @returns The parsed object, or undefined when the text is not a JSON object.
- */
-export function parseJsonRecord(text: string): Record<string, unknown> | undefined {
-	try {
-		const parsed: unknown = JSON.parse(text)
-		if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
-			return Object.fromEntries(Object.entries(parsed))
-		}
-	} catch {}
-	return undefined
-}
-
-/**
- * Reads a string member of a record.
- *
- * @param record - The record, or undefined.
- * @param key - The member name.
- * @returns The string, or undefined when the member is absent or not a string.
- */
-export function readString(
-	record: Record<string, unknown> | undefined,
-	key: string,
-): string | undefined {
-	const value = record?.[key]
-	return typeof value === 'string' ? value : undefined
-}
-
-/**
- * Reads a finite number member of a record.
- *
- * @param record - The record, or undefined.
- * @param key - The member name.
- * @returns The number, or undefined when the member is absent, not a number, or not finite.
- */
-export function readNumber(
-	record: Record<string, unknown> | undefined,
-	key: string,
-): number | undefined {
-	const value = record?.[key]
-	return typeof value === 'number' && Number.isFinite(value) ? value : undefined
-}
-
-/**
- * Resolves the npm command for this host.
- *
- * @remarks
- * The `npm-cli.js` entry beside the running Node binary spawns without a shell on every host; the
- * `npm` shim on Windows is a `.cmd` file that needs one, so that path is the fallback alone.
- *
- * @returns The file to spawn, the arguments that precede npm's own, and whether a shell is needed.
- */
-export function resolveNpm(): NpmCommand {
-	const cli = join(dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npm-cli.js')
-	if (existsSync(cli)) return { file: process.execPath, prefix: [cli], shell: false }
-	return { file: 'npm', prefix: [], shell: process.platform === 'win32' }
-}
-
-/**
- * Runs npm with the given arguments and returns the finished child.
- *
- * @param args - The npm arguments, such as `['view', '@orkestrel/scaffold', 'version']`.
- * @param cwd - The working directory. Default: the current directory.
- * @returns The spawn result with `utf8` stdout and stderr.
- */
-export function runNpm(args: readonly string[], cwd?: string): SpawnSyncReturns<string> {
-	const npm = resolveNpm()
-	return spawnSync(npm.file, [...npm.prefix, ...args], {
-		encoding: 'utf8',
-		windowsHide: true,
-		shell: npm.shell,
-		maxBuffer: 64 * 1024 * 1024,
-		...(cwd === undefined ? {} : { cwd }),
-	})
-}