@orkestrel/scaffold 0.0.13 → 0.0.15

package/dist/host/claude/agents/orkestrel.md

@@ -29,44 +29,47 @@ descriptions never enter agent instruction context.
 
 | Package               | Version |
 | --------------------- | ------- |
-| @orkestrel/abort      | 0.0.3   |
-| @orkestrel/agent      | 0.0.8   |
-| @orkestrel/browser    | 0.0.3   |
-| @orkestrel/budget     | 0.0.3   |
-| @orkestrel/console    | 0.0.3   |
-| @orkestrel/contract   | 0.0.5   |
-| @orkestrel/csv        | 0.0.1   |
-| @orkestrel/database   | 0.0.5   |
-| @orkestrel/emitter    | 0.0.3   |
-| @orkestrel/guide      | 0.0.5   |
-| @orkestrel/indexeddb  | 0.0.4   |
-| @orkestrel/interpret  | 0.0.5   |
-| @orkestrel/markdown   | 0.0.5   |
-| @orkestrel/mcp        | 0.0.4   |
-| @orkestrel/middleware | 0.0.5   |
-| @orkestrel/msg        | 0.0.4   |
-| @orkestrel/ndjson     | 0.0.3   |
-| @orkestrel/ollama     | 0.0.6   |
-| @orkestrel/pool       | 0.0.3   |
-| @orkestrel/program    | 0.0.3   |
-| @orkestrel/qualifier  | 0.0.4   |
-| @orkestrel/queue      | 0.0.3   |
-| @orkestrel/rater      | 0.0.5   |
-| @orkestrel/reason     | 0.0.3   |
-| @orkestrel/relation   | 0.0.3   |
-| @orkestrel/router     | 0.0.4   |
-| @orkestrel/scaffold   | 0.0.1   |
-| @orkestrel/sea        | 0.0.3   |
-| @orkestrel/server     | 0.0.6   |
-| @orkestrel/sqlite     | 0.0.4   |
-| @orkestrel/sse        | 0.0.3   |
-| @orkestrel/template   | 0.0.1   |
-| @orkestrel/terminal   | 0.0.4   |
-| @orkestrel/timeout    | 0.0.3   |
-| @orkestrel/tool       | 0.0.3   |
-| @orkestrel/websocket  | 0.0.3   |
-| @orkestrel/worker     | 0.0.3   |
-| @orkestrel/workflow   | 0.0.6   |
+| @orkestrel/abort      | 0.0.4   |
+| @orkestrel/agent      | 0.0.11  |
+| @orkestrel/browser    | 0.0.8   |
+| @orkestrel/budget     | 0.0.4   |
+| @orkestrel/console    | 0.0.4   |
+| @orkestrel/contract   | 0.0.9   |
+| @orkestrel/csv        | 0.0.2   |
+| @orkestrel/database   | 0.0.6   |
+| @orkestrel/emitter    | 0.0.5   |
+| @orkestrel/guide      | 0.0.8   |
+| @orkestrel/html       | 0.0.1   |
+| @orkestrel/indexeddb  | 0.0.6   |
+| @orkestrel/interpret  | 0.0.7   |
+| @orkestrel/markdown   | 0.0.7   |
+| @orkestrel/mcp        | 0.0.7   |
+| @orkestrel/middleware | 0.0.6   |
+| @orkestrel/msg        | 0.0.5   |
+| @orkestrel/ndjson     | 0.0.5   |
+| @orkestrel/ollama     | 0.0.7   |
+| @orkestrel/pool       | 0.0.4   |
+| @orkestrel/program    | 0.0.6   |
+| @orkestrel/qualifier  | 0.0.7   |
+| @orkestrel/queue      | 0.0.4   |
+| @orkestrel/rater      | 0.0.8   |
+| @orkestrel/reason     | 0.0.4   |
+| @orkestrel/relation   | 0.0.6   |
+| @orkestrel/router     | 0.0.6   |
+| @orkestrel/scaffold   | 0.0.13  |
+| @orkestrel/sea        | 0.0.4   |
+| @orkestrel/server     | 0.0.7   |
+| @orkestrel/sqlite     | 0.0.6   |
+| @orkestrel/sse        | 0.0.4   |
+| @orkestrel/template   | 0.0.2   |
+| @orkestrel/terminal   | 0.0.5   |
+| @orkestrel/timeout    | 0.0.4   |
+| @orkestrel/tool       | 0.0.7   |
+| @orkestrel/toolbox    | 0.0.1   |
+| @orkestrel/websocket  | 0.0.7   |
+| @orkestrel/worker     | 0.0.4   |
+| @orkestrel/workflow   | 0.0.7   |
+| @orkestrel/workspace  | 0.0.1   |
 
 <!-- catalog:end -->
 

package/dist/host/guides/src/scaffold.md

@@ -187,10 +187,12 @@ environment contributes, its test-project label, and — on the `src` axis — i
 and build formats, or — on the `app` axis — its optional runtime entry.
 
 `ViteMachinery` names the three host-specific pipelines a workspace's generated `vite.config.ts` may
-carry: `browser` for the CSS pipeline and the Playwright-backed browser test project, `vue` for the
+carry: `browser` selects the shared root CSS-analysis and Playwright machinery, `vue` selects the
 single-file-component, HTML, and development-server machinery an application browser environment
-needs, and `output` for build-output containment. It never selects a boundary guarantee — those ship
-in every shape, as the compilers section sets out.
+needs, and `output` selects build-output containment. The root machinery selection never attaches a
+`css` property to a nonbrowser project: only the `srcBrowser` and `appBrowser` factories own
+`ENVIRONMENT_CSS`. It never selects a boundary guarantee — those ship in every shape, as the
+compilers section sets out.
 
 `ViteFacts` is the optional structural-fact slice shared by every root Vite compiler:
 `bin`, `integration`, and `service` each select their matching standalone project when `true`;
@@ -449,7 +451,10 @@ form. `HEX_PATTERN` requires whole lowercase byte pairs, and `SYNC_BASELINE_PATT
 `0.0.1`. `BASE_DEV_DEPENDENCIES` is the host-neutral tooling baseline every generated workspace
 gets; `SOURCE_BROWSER_DEV_DEPENDENCIES` adds the real browser providers a published browser environment
 needs, and `APP_BROWSER_DEV_DEPENDENCIES` extends that with the Vue toolchain a private browser
-application needs. `SCAFFOLD_RANGE` is the range generated workspaces pin this package at.
+application needs. Vite is minor-pinned at `~8.2.0`: the generated boundary consumes the reviewed
+8.2 `CSSOptions`, `preprocessCSS`, and `isCSSRequest` surface, while the selected
+`css.transformer` / `lightningcss` path is experimental and must not float into an unreviewed minor.
+`SCAFFOLD_RANGE` is the range generated workspaces pin this package at.
 `CHECKOUT_ACTION_SHA` and `SETUP_NODE_ACTION_SHA` pin the two official CI actions to immutable
 commits. `TYPESCRIPT_EXTENSIONS` is the module extension set every generated scoped check covers.
 `JSON_PRINT_WIDTH` and `JSON_TAB_WIDTH` mirror the formatter configuration, so computed JSON is
@@ -1081,8 +1086,9 @@ streams, `URL`, `AbortController`, the text encoders, `crypto`, timers, `console
 is one declaration set for a host-independent module, not a host. `viteHeader` renders the shared
 header — the alias block
 derived from the tsconfig paths, plus the environment-boundary plugin — and `viteMachinery` is the
-one place the header's axes are derived, read by `rootViteConfig`, `singleSrcViteConfig`,
-`applicationViteConfig`, and `configArtifacts` alike so no caller can invent a fourth answer.
+one place the root header's axes are derived, read by `rootViteConfig`, `singleSrcViteConfig`, and
+`applicationViteConfig`; `configArtifacts` delegates to those roots rather than deriving another
+answer.
 
 **The boundary guarantees do not vary by blueprint.** Every generated `vite.config.ts` — a
 `core`-only library, an application of `app/core` alone, or the full six-environment workspace —
@@ -1095,12 +1101,12 @@ module graph never records — has no other enforcement point in workspace-owned
 and toolchain modules are outside that ownership boundary. Only host-specific pipelines vary,
 along the three `ViteMachinery` axes:
 
-| Machinery                                                         | Emitted when                         |
-| ----------------------------------------------------------------- | ------------------------------------ |
-| CSS pipeline (`ENVIRONMENT_CSS`, `preprocessCSS`, `isCSSRequest`) | a `src` or `app` browser environment |
-| Playwright provider and `resolveChromium`                         | a `src` or `app` browser environment |
-| Vue plugin, HTML boundary, browser development server             | an `app` browser environment         |
-| Output containment (`outputBoundary`, `enforceOutputPath`)        | anything the workspace builds        |
+| Machinery                                                                | Emitted when                         |
+| ------------------------------------------------------------------------ | ------------------------------------ |
+| Shared CSS analysis (`ENVIRONMENT_CSS`, `preprocessCSS`, `isCSSRequest`) | a `src` or `app` browser environment |
+| Playwright provider and `resolveChromium`                                | a `src` or `app` browser environment |
+| Vue plugin, HTML boundary, browser development server                    | an `app` browser environment         |
+| Output containment (`outputBoundary`, `enforceOutputPath`)               | anything the workspace builds        |
 
 An application of `app/core` alone is the sole shape that builds nothing, so it is the sole shape
 without output containment — and it still carries every boundary guarantee above.
@@ -1120,7 +1126,9 @@ slice carries `global` to integration and the source-browser compiler without ad
 project.
 
 `coreViteConfig`, `srcViteConfig`, `binViteConfig`, and `appViteConfig` emit the thin per-target
-wrappers, while `binTsconfig` emits the executable declaration scope; `rootViteConfig`,
+wrappers. `coreViteConfig()` is parameterless and never imports or attaches browser CSS machinery;
+the root `srcCore` factory and its wrapper stay host-independent even when the workspace also owns a
+browser target. `binTsconfig` emits the executable declaration scope; `rootViteConfig`,
 `singleSrcViteConfig`, and `applicationViteConfig` emit the root configuration for a library-only,
 single non-core `src` environment, and application-bearing workspace respectively; and
 `policyViteProject`, `guidesViteProject`, `integrationViteProject`, and `serviceViteProject` emit
@@ -1671,10 +1679,13 @@ What it rejects is equally deliberate:
 Unsupported stylesheet `@import` or `url()` syntax is an error rather than a silently skipped
 dependency. **`publicDir` is disabled on every generated build target**: an asset that is not
 reachable through the module graph is not silently copied past the boundary. The output plugin
-fails during configuration when a caller attempts to enable `publicDir`; browser builds likewise
-reject a nonzero `assetsInlineLimit`, keeping asset bytes external and visible to output auditing
-before any output directory mutation. A caller-supplied Rolldown `output.dir` or `output.file` is
-also rejected during configuration; the exact generated `build.outDir` is the sole write root.
+fails during configuration when a caller attempts to enable `publicDir`. Published `srcBrowser`
+targets use Vite library mode, where assets are always inlined and `assetsInlineLimit` is ignored,
+so their generated shapes omit that ineffective option. The normal `appBrowser` build retains
+`assetsInlineLimit: 0`, and the output plugin rejects a nonzero limit only for that non-library
+browser build, keeping application asset bytes external and visible to output auditing before any
+output directory mutation. A caller-supplied Rolldown `output.dir` or `output.file` is also rejected
+during configuration; the exact generated `build.outDir` is the sole write root.
 
 **The policy suite.** [`tests/setupPolicy.ts`](../../tests/setupPolicy.ts) is a narrow structural
 policy pass built on the official TypeScript compiler. It exists for exactly the laws a linter

package/dist/src/core/index.cjs

@@ -227,7 +227,7 @@ var DEFAULT_VERSION = "0.0.1";
 /** The `engines.node` range the `blueprint` builder fills. */
 var DEFAULT_ENGINES = `>=${MINIMUM_NODE_VERSION}`;
 /** The devDependency range generated packages pin `@orkestrel/scaffold` at. */
-var SCAFFOLD_RANGE = "^0.0.12";
+var SCAFFOLD_RANGE = "^0.0.15";
 /** Tooling versions shared by scaffold and every generated workspace. */
 var BASE_DEV_DEPENDENCIES = Object.freeze({
 	"@microsoft/api-extractor": "^7.58.12",
@@ -237,14 +237,14 @@ var BASE_DEV_DEPENDENCIES = Object.freeze({
 	oxfmt: "^0.61.0",
 	oxlint: "^1.76.0",
 	typescript: "^6.0.3",
-	vite: "^8.1.5",
+	vite: "~8.2.0",
 	"vite-plugin-dts": "^5.0.3",
 	vitest: "^4.1.10"
 });
 /** Additional development dependency required by a published browser source environment. */
 var SOURCE_BROWSER_DEV_DEPENDENCIES = Object.freeze({
 	"@vitest/browser-playwright": "^4.1.10",
-	playwright: "^1.62.0"
+	playwright: "^1.62.1"
 });
 /** Additional development dependencies required by a private Vue browser application. */
 var APP_BROWSER_DEV_DEPENDENCIES = Object.freeze({
@@ -5937,7 +5937,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 					if (isCSSRequest(id)) {
 						const config = resolvedConfig
 						if (config === undefined) {
-							this.error('Environment boundary requires resolved Vite configuration')
+							return this.error('Environment boundary requires resolved Vite configuration')
 						}
 						const stylesheet = await preprocessCSS(restored, id, config)
 						for (const dependency of stylesheet.deps ?? []) {
@@ -5983,7 +5983,9 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 										? undefined
 										: packageRootOf(packageName, physicalSource)
 								if (packageRoot === undefined || !containedPath(packageRoot, physicalSource)) {
-									this.error('Resolved dependencies must remain inside their physical package root')
+									return this.error(
+										'Resolved dependencies must remain inside their physical package root',
+									)
 								}
 								trustedPackageRoots.add(packageRoot)
 							}
@@ -5991,7 +5993,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 						}
 						const resolvedSource = workspacePath(physicalSource)
 						if (resolvedSource === undefined) {
-							this.error('Environment modules cannot import files outside the workspace')
+							return this.error('Environment modules cannot import files outside the workspace')
 						}
 						const assetError = environmentPathError(owner, resolvedSource)
 						if (assetError !== undefined) this.error(assetError)
@@ -6020,7 +6022,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 						)
 						const resolvedSource = workspacePath(resolution?.id ?? fallbackSource)
 						if (resolvedSource === undefined) {
-							this.error('Environment modules cannot import files outside the workspace')
+							return this.error('Environment modules cannot import files outside the workspace')
 						}
 						const pathError = environmentPathError('app/browser', resolvedSource)
 						if (pathError !== undefined) this.error(pathError)
@@ -6038,7 +6040,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 					if (source === undefined) continue
 					const decodedSource = decodeAssetSource(source)
 					if (decodedSource === undefined) {
-						this.error('Vue block URLs must use valid URI encoding')
+						return this.error('Vue block URLs must use valid URI encoding')
 					}
 					const normalizedSource = decodedSource.replaceAll('\\\\', '/')
 					const sourceError = environmentSourceError('app/browser', normalizedSource)
@@ -6096,7 +6098,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 				if (isCSSRequest(id)) {
 					const config = resolvedConfig
 					if (config === undefined) {
-						this.error('Environment boundary requires resolved Vite configuration')
+						return this.error('Environment boundary requires resolved Vite configuration')
 					}
 					const stylesheet = await preprocessCSS(code, id, config)
 					for (const dependency of stylesheet.deps ?? []) {
@@ -6142,7 +6144,9 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 									? undefined
 									: packageRootOf(packageName, physicalSource)
 							if (packageRoot === undefined || !containedPath(packageRoot, physicalSource)) {
-								this.error('Resolved dependencies must remain inside their physical package root')
+								return this.error(
+									'Resolved dependencies must remain inside their physical package root',
+								)
 							}
 							trustedPackageRoots.add(packageRoot)
 						}
@@ -6150,7 +6154,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 					}
 					const resolvedSource = workspacePath(physicalSource)
 					if (resolvedSource === undefined) {
-						this.error('Environment modules cannot import files outside the workspace')
+						return this.error('Environment modules cannot import files outside the workspace')
 					}
 					const assetError = environmentPathError(owner, resolvedSource)
 					if (assetError !== undefined) this.error(assetError)
@@ -6709,7 +6713,11 @@ ${EXPORT_KEYWORD} function outputBoundary(output: string): Plugin {
 					'[orkestrel-output-boundary] Public directories are disabled; every output must come from the audited graph',
 				)
 			}
-			if (output.endsWith('/browser') && config.build.assetsInlineLimit !== 0) {
+			if (
+				output.endsWith('/browser') &&
+				config.build.lib === false &&
+				config.build.assetsInlineLimit !== 0
+			) {
 				throw new Error(
 					'[orkestrel-output-boundary] Browser assets must remain external for output auditing',
 				)
@@ -7112,7 +7120,7 @@ ${needsVue ? `		configureServer(server) {
 							? packageRootForResolved(physicalResolution)
 							: undefined
 					if (mappedPackageRoot === undefined) {
-						this.error(
+						return this.error(
 							'Dependency package imports must resolve inside an exact physical package root',
 						)
 					}
@@ -7131,7 +7139,7 @@ ${needsVue ? `		configureServer(server) {
 				const packageRoot =
 					packageName === undefined ? undefined : packageRootOf(packageName, physicalResolution)
 				if (packageRoot === undefined || !containedPath(packageRoot, physicalResolution)) {
-					this.error('Resolved dependencies must remain inside their physical package root')
+					return this.error('Resolved dependencies must remain inside their physical package root')
 				}
 				trustedPackageRoots.add(packageRoot)
 			}
@@ -7162,7 +7170,7 @@ ${needsVue ? `		configureServer(server) {
 			}
 			const code = readBoundedFile(physicalImporter, ENVIRONMENT_MODULE_BYTES)
 			if (code === undefined) {
-				this.error('Dependency module source must be a bounded regular file')
+				return this.error('Dependency module source must be a bounded regular file')
 			}
 			for (const source of await environmentAssetSources(code, id)) {
 				const normalizedSource = source.replaceAll('\\\\', '/')
@@ -7399,7 +7407,7 @@ ${EXPORT_KEYWORD} ${CONST_KEYWORD} ENVIRONMENT_CSS = Object.freeze({
 						'value' in rule && rule.value !== null && 'loc' in rule.value
 							? sources[rule.value.loc.source_index]
 							: undefined
-					if (rule.type !== 'import') return
+					if (rule.type !== 'import' || rule.value === null) return
 					const error = stylesheetAssetError(source, rule.value.url)
 					if (error !== undefined) {
 						throw new Error(\`[orkestrel-environment-boundary] \${error}\`)
@@ -7620,7 +7628,6 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 			publicDir: false,
 			plugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],
 			build: {
-				assetsInlineLimit: 0,
 				emptyOutDir: true,
 				sourcemap: true,
 				minify: false,
@@ -7671,7 +7678,7 @@ ${renderedTest}
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
+			resolve,
 			publicDir: false,
 			plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 			build: {
@@ -7754,7 +7761,6 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 				publicDir: false,
 				plugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],
 				build: {
-					assetsInlineLimit: 0,
 					lib: {
 						entry: resolveWorkspacePath('src/browser/index.ts'),
 						formats: ['es'],
@@ -7799,7 +7805,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	srcCore(
 		mergeConfig(
-			{${machinery.browser ? "\n				css: ENVIRONMENT_CSS," : ""}
+			{
 				publicDir: false,
 				plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 				build: {
@@ -7891,7 +7897,7 @@ function applicationViteConfig(src, app, facts = {}) {
 ${EXPORT_KEYWORD} const srcCore = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
+			resolve,
 			publicDir: false,
 			plugins: [environmentBoundary('src/core')],
 			build: { emptyOutDir: true, sourcemap: true, minify: false },
@@ -7919,7 +7925,6 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 			publicDir: false,
 			plugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],
 			build: {
-				assetsInlineLimit: 0,
 				emptyOutDir: true,
 				sourcemap: true,
 				minify: false,
@@ -7981,7 +7986,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
+			resolve,
 			publicDir: false,
 			plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 			build: {
@@ -8015,7 +8020,7 @@ ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const appCore = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
+			resolve,
 			publicDir: false,
 			plugins: [environmentBoundary('app/core')],
 			test: {
@@ -8092,7 +8097,7 @@ ${EXPORT_KEYWORD} function appBrowser(...config: readonly never[]): UserConfig {
 ${EXPORT_KEYWORD} const appServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
+			resolve,
 			publicDir: false,
 			plugins: [outputBoundary('dist/app/server'), environmentBoundary('app/server')],
 			build: {
@@ -8158,7 +8163,6 @@ function coreTsconfig() {
 * `configs/src/vite.core.config.ts` — inlines its own `build.lib` /
 * `rolldownOptions` (core's `srcCore` root export carries no build.lib).
 *
-* @param browser - Whether a declared browser environment enables the shared CSS pipeline.
 * @returns The core environment `vite.config.ts` file content, newline-terminated.
 *
 * @example
@@ -8166,11 +8170,11 @@ function coreTsconfig() {
 * coreViteConfig().includes('srcCore(') // true
 * ```
 */
-function coreViteConfig(browser = true) {
+function coreViteConfig() {
 	return `import { defineConfig } from 'vite'
 import dts from 'vite-plugin-dts'
 import {
-${browser ? "	ENVIRONMENT_CSS,\n" : ""}	environmentBoundary,
+	environmentBoundary,
 	outputBoundary,
 	srcCore,
 	resolveWorkspacePath,
@@ -8178,7 +8182,7 @@ ${browser ? "	ENVIRONMENT_CSS,\n" : ""}	environmentBoundary,
 
 export default defineConfig(
 	srcCore({
-${browser ? "		css: ENVIRONMENT_CSS,\n" : ""}		publicDir: false,
+		publicDir: false,
 		plugins: [
 			outputBoundary('dist/src/core'),
 			environmentBoundary('src/core'),
@@ -8467,7 +8471,6 @@ ${browser}
 * ```
 */
 function configArtifacts(spec) {
-	const machinery = viteMachinery(spec.src, spec.app, spec.bin);
 	const artifacts = [{
 		path: "tsconfig.json",
 		group: "configs",
@@ -8483,7 +8486,7 @@ function configArtifacts(spec) {
 		const row = SRC_MATRIX[environment];
 		for (const path of row.configs) {
 			const isTsconfig = path.endsWith(".json");
-			const content = environment === "core" ? isTsconfig ? coreTsconfig() : coreViteConfig(machinery.browser) : isTsconfig ? srcTsconfig(environment) : srcViteConfig(environment);
+			const content = environment === "core" ? isTsconfig ? coreTsconfig() : coreViteConfig() : isTsconfig ? srcTsconfig(environment) : srcViteConfig(environment);
 			artifacts.push({
 				path,
 				group: "configs",
@@ -8615,24 +8618,20 @@ function paritySpecifiers(spec) {
 	for (const environment of spec.app) modules[`@app/${environment}`] = `app/${environment}`;
 	const specifierItems = selfSpecifiers.map((specifier) => `'${specifier}'`);
 	const inlineSpecifierList = `[${specifierItems.join(", ")}]`;
-	return `${EXPORT_KEYWORD} ${CONST_KEYWORD} SELF_SPECIFIERS = ${fitsPrintWidth(`const SELF_SPECIFIERS = ${inlineSpecifierList}`) ? inlineSpecifierList : `[
-${specifierItems.map((specifier) => `\t${specifier},`).join("\n")}
-]`}
-
-${EXPORT_KEYWORD} ${CONST_KEYWORD} SPECIFIER_MODULES: Readonly<Record<string, string>> = {
-${Object.entries(modules).map(([specifier, module]) => `\t'${specifier}': '${module}',`).join("\n")}
-}
-${EXPORT_KEYWORD} ${CONST_KEYWORD} SPECIFIER_SOURCES = new Map<string, ReturnType<typeof createSource>>()
-${EXPORT_KEYWORD} ${FUNCTION_KEYWORD} exportsFor(specifier: string): readonly string[] {
-	const module = SPECIFIER_MODULES[specifier]
-	if (module === undefined) return []
-	let source = SPECIFIER_SOURCES.get(module)
-	if (source === undefined) {
-		source = createSource({ files: GUIDE_FILES, module })
-		SPECIFIER_SOURCES.set(module, source)
-	}
-	return source.exports().map((symbol) => symbol.name)
-}`;
+	const lines = fitsPrintWidth(`const SELF_SPECIFIERS = ${inlineSpecifierList}`) ? [`${EXPORT_KEYWORD} ${CONST_KEYWORD} SELF_SPECIFIERS = ${inlineSpecifierList}`] : [
+		`${EXPORT_KEYWORD} ${CONST_KEYWORD} SELF_SPECIFIERS = [`,
+		...specifierItems.map((specifier) => `\t${specifier},`),
+		"]"
+	];
+	lines.push("", [
+		EXPORT_KEYWORD,
+		CONST_KEYWORD,
+		"SPECIFIER_MODULES:",
+		"Readonly<Record<string, string>>",
+		"=",
+		"{"
+	].join(" "), ...Object.entries(modules).map(([specifier, module]) => `\t'${specifier}': '${module}',`), "}", `${EXPORT_KEYWORD} ${CONST_KEYWORD} SPECIFIER_SOURCES = new Map<string, ReturnType<typeof createSource>>()`, `${EXPORT_KEYWORD} ${FUNCTION_KEYWORD} exportsFor(specifier: string): readonly string[] {`, "	const module = SPECIFIER_MODULES[specifier]", "	if (module === undefined) return []", "	let source = SPECIFIER_SOURCES.get(module)", "	if (source === undefined) {", "		source = createSource({ files: GUIDE_FILES, module })", "		SPECIFIER_SOURCES.set(module, source)", "	}", "	return source.exports().map((symbol) => symbol.name)", "}");
+	return lines.join("\n");
 }
 /**
 * Draft the `tests` group's `template` artifacts — the shared recorder
@@ -8653,8 +8652,8 @@ ${EXPORT_KEYWORD} ${FUNCTION_KEYWORD} exportsFor(specifier: string): readonly st
 function testArtifacts(spec, pascal) {
 	const hasBrowser = spec.src.includes("browser") || spec.app.includes("browser");
 	const hasVue = spec.app.includes("browser");
-	const browserPolicySpecifier = hasBrowser ? ", existsSync" : "";
-	const browserPolicyImport = hasBrowser ? "import { chromium } from 'playwright'" : "";
+	const browserPolicySpecifier = hasBrowser ? ", accessSync, constants as FS_CONSTANTS, statSync" : "";
+	const browserPolicyImport = hasBrowser ? "import { chromium } from 'playwright'\nimport { resolveChromium } from '../vite.config.js'" : "";
 	const vuePolicyImport = hasVue ? "import { parse as parseVue } from 'vue/compiler-sfc'" : "";
 	const workspacePolicyAssertion = hasVue ? `expect(
 			inspectCodingWorkspace(process.cwd(), (path, content) => {
@@ -8666,12 +8665,13 @@ function testArtifacts(spec, pascal) {
 			}),
 		).toEqual([])` : "expect(inspectCodingWorkspace(process.cwd())).toEqual([])";
 	const browserPolicyTest = hasBrowser ? `
-	it.skipIf(!existsSync(chromium.executablePath()))(
-		'runs browser suites only when the real Chromium executable is installed',
-		() => {
-			expect(existsSync(chromium.executablePath())).toBe(true)
-		},
-	)` : "";
+	it('resolves Chromium only to a real executable file', () => {
+		const chromiumPath = resolveChromium(chromium.executablePath())
+		if (chromiumPath === undefined) return
+
+		expect(statSync(chromiumPath).isFile()).toBe(true)
+		expect(() => accessSync(chromiumPath, FS_CONSTANTS.X_OK)).not.toThrow()
+	})` : "";
 	const artifacts = [fillArtifact("tests/setup.ts", "tests", "setup", {}), fillArtifact("tests/policy.test.ts", "tests", "policyTest", {
 		browserPolicySpecifier,
 		browserPolicyImport,