@orkestrel/scaffold 0.0.23 → 0.0.24

package/dist/bin/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","names":["#stdout","#stderr","#output","#diagnostic","#upstream","#say","#refuse","#dispatch","#create","#inspect","#restore","#refresh","#replace","#environments","#resolve","#packages","#compile","#report","#tally","#derive","#projectQuestion","#survey","#groups","#present","#assertProjects","#warn","#previous","#fetch","#publish","#recount","#repository","#merge","#reconcile","#lookup","#pin","#manifest","#probe","#scriptProjects","#inventory","#sanitize"],"sources":["../../src/bin/constants.ts","../../src/bin/errors.ts","../../src/bin/helpers.ts","../../src/bin/CLI.ts","../../src/bin/main.ts"],"sourcesContent":["import type { ParseArgsOptionsConfig } from 'node:util'\nimport type { Verb } from './types.js'\n\n/**\n * The name the executable installs as.\n *\n * @remarks\n * `package.json`'s `bin` field is the authority for what the command is called;\n * this is the same word, so every usage line the executable prints is a command\n * a reader can paste back.\n */\nexport const EXECUTABLE_NAME = 'scaffold'\n\n/**\n * The five {@link Verb} values in usage order, frozen.\n *\n * @remarks\n * The order the type declares them in, which is also the order usage lists them:\n * the verb that creates a workspace, then the one that only reads it, then the\n * three that write to one that already exists, widest last.\n */\nexport const VERBS: readonly Verb[] = Object.freeze([\n\t'new',\n\t'audit',\n\t'repair',\n\t'catalog',\n\t'overwrite',\n])\n\n/** The exit code reporting that the target matched its plan and every step completed. */\nexport const EXIT_CLEAN = 0\n\n/** The exit code reporting that the target drifted, or that a step failed. */\nexport const EXIT_DRIFT = 1\n\n/** The exit code reporting that the command line was not a command. */\nexport const EXIT_USAGE = 2\n\n/**\n * What each exit code means, frozen.\n *\n * @remarks\n * Keyed by the three code constants rather than by literals, so the usage block\n * cannot document a code the executable does not return.\n */\nexport const EXIT_SUMMARY: Readonly<Record<number, string>> = Object.freeze({\n\t[EXIT_CLEAN]: 'clean',\n\t[EXIT_DRIFT]: 'drift or failure',\n\t[EXIT_USAGE]: 'usage error',\n})\n\n/**\n * The machine-readable code a malformed command line reports.\n *\n * @remarks\n * The executable contributes its own codes to the failure envelope, which is why\n * that envelope's `code` is a plain string rather than a `ScaffoldErrorCode`: a\n * command line that never became a command failed before any coded package\n * operation could.\n */\nexport const USAGE_CODE = 'USAGE'\n\n/** The machine-readable code a failure carrying no code of its own reports. */\nexport const FAILED_CODE = 'FAILED'\n\n/** What the failure envelope says when the raised value carried no message. */\nexport const FAILED_MESSAGE = 'The command failed for an unrecognized reason'\n\n/**\n * The positional argument `new` alone takes, as usage writes it.\n *\n * @remarks\n * The workspace name is the only positional argument any verb takes, so it is\n * one value rather than a per-verb table with four holes in it.\n */\nexport const NAME_ARGUMENT = '<name>'\n\n/**\n * Every option the executable accepts, as `node:util` parses them, frozen.\n *\n * @remarks\n * One table for every verb rather than one per verb, because the verb an option\n * belongs to is a domain fact the command union already fixes: parsing decides\n * only whether the word is an option at all, and {@link VERB_OPTIONS} decides\n * whether this verb takes it. No option declares a default, so the parsed keys\n * are exactly the options the caller supplied, which is what makes an option\n * offered to the wrong verb visible rather than silently absorbed. `from`\n * collects repeats because `catalog` may draw on more than one local source; a\n * verb that takes it once refuses the second.\n */\nexport const COMMAND_OPTIONS: ParseArgsOptionsConfig = Object.freeze({\n\tsrc: Object.freeze({ type: 'string' }),\n\tapp: Object.freeze({ type: 'string' }),\n\tbin: Object.freeze({ type: 'boolean' }),\n\tdeps: Object.freeze({ type: 'string' }),\n\tgroups: Object.freeze({ type: 'string' }),\n\tall: Object.freeze({ type: 'boolean' }),\n\tdirty: Object.freeze({ type: 'boolean' }),\n\tfrom: Object.freeze({ type: 'string', multiple: true }),\n\ttarget: Object.freeze({ type: 'string' }),\n\tjson: Object.freeze({ type: 'boolean' }),\n})\n\n/**\n * What each option does, keyed by the token usage prints, frozen.\n *\n * @remarks\n * The key order is the glossary order. A key is the whole displayed token,\n * value placeholder included, because that token is what a reader copies and\n * what {@link VERB_OPTIONS} lists.\n */\nexport const OPTION_SUMMARY: Readonly<Record<string, string>> = Object.freeze({\n\t'--src <list>': 'the published library environments to build: core, browser, server',\n\t'--app <list>': 'the private application environments to build: core, browser, server',\n\t'--bin': 'scaffold a command-line executable at src/bin/main.ts',\n\t'--deps <list>': 'the @orkestrel/* packages the workspace depends on',\n\t'--groups <list>': 'the artifact groups to cover; every group when absent',\n\t'--all': 'fetch a guide for every package the organization publishes, not just the declared ones',\n\t'--dirty': 'delete from a tree carrying uncommitted changes',\n\t'--from <path>':\n\t\t'read the data root from a local path instead of the bundled one; catalog alone accepts it more than once',\n\t'--target <path>': 'the directory the verb operates on; the working directory when absent',\n\t'--json': 'emit one machine-readable value instead of a report',\n})\n\n/**\n * The options each verb takes, in usage order, frozen.\n *\n * @remarks\n * The executable's half of the frozen command union: every option a branch\n * declares is listed against its verb, and every option a branch excludes is\n * absent from it. An option a verb does not list is refused by name rather than\n * parsed and ignored.\n */\nexport const VERB_OPTIONS: Readonly<Record<Verb, readonly string[]>> = Object.freeze({\n\tnew: Object.freeze([\n\t\t'--src <list>',\n\t\t'--app <list>',\n\t\t'--bin',\n\t\t'--deps <list>',\n\t\t'--from <path>',\n\t\t'--target <path>',\n\t\t'--json',\n\t]),\n\taudit: Object.freeze(['--groups <list>', '--from <path>', '--target <path>', '--json']),\n\trepair: Object.freeze(['--groups <list>', '--from <path>', '--target <path>', '--json']),\n\tcatalog: Object.freeze(['--all', '--from <path>', '--target <path>', '--json']),\n\toverwrite: Object.freeze([\n\t\t'--groups <list>',\n\t\t'--dirty',\n\t\t'--from <path>',\n\t\t'--target <path>',\n\t\t'--json',\n\t]),\n})\n\n/**\n * What each verb does, in one line, frozen.\n *\n * @remarks\n * Each line names what the verb writes, because authority is the verb's: a\n * reader deciding which one to run is deciding what they are authorizing.\n */\nexport const VERB_SUMMARY: Readonly<Record<Verb, string>> = Object.freeze({\n\tnew: 'scaffold a workspace',\n\taudit: 'report how the target compares to its plan, writing nothing',\n\trepair: 'write each planned path the target is missing or has let drift',\n\tcatalog: 'regenerate the package table and refresh the guide mirrors',\n\toverwrite:\n\t\t'do everything repair and catalog do, then delete what the plan does not own and re-declare the dependency ranges',\n})\n","import { USAGE_CODE } from './constants.js'\n\n/**\n * The error raised when a command line is not a command.\n *\n * @remarks\n * Distinct from `ScaffoldError` because the two answer different questions and\n * exit differently: a `ScaffoldError` says the package could not serve a\n * well-formed request and exits `1`, while this says there was no request to\n * serve and exits `2`. Folding a usage error into `INVALID` would report a\n * mistyped flag as a failed run.\n *\n * It carries no `context`. Everything a caller can act on is in the message,\n * because the reader of a usage error is a person at a terminal rather than a\n * program branching on a cause.\n *\n * @example\n * ```ts\n * import { isUsageError, UsageError } from './errors.js'\n *\n * try {\n * \tthrow new UsageError(\"Unknown command 'pull'.\")\n * } catch (error) {\n * \tif (isUsageError(error)) error.code // 'USAGE'\n * }\n * ```\n */\nexport class UsageError extends Error {\n\treadonly code: string\n\n\t/**\n\t * Construct a usage error.\n\t *\n\t * @param message - What was wrong with the command line, in one sentence.\n\t */\n\tconstructor(message: string) {\n\t\tsuper(message)\n\t\tthis.name = 'UsageError'\n\t\tthis.code = USAGE_CODE\n\t}\n}\n\n/**\n * Narrow a caught value to a {@link UsageError}.\n *\n * @param value - The caught value to narrow.\n * @returns `true` when `value` is a {@link UsageError}.\n *\n * @example\n * ```ts\n * import { isUsageError } from './errors.js'\n *\n * isUsageError(new Error('plain')) // false\n * isUsageError(undefined) // false\n * ```\n */\nexport function isUsageError(value: unknown): value is UsageError {\n\treturn value instanceof UsageError\n}\n","import type { Audit } from '@src/core'\nimport type { CLICommand, ErrorEnvelope, Verb } from './types.js'\nimport { align, width } from '@orkestrel/console'\nimport { attempt } from '@orkestrel/contract'\nimport { isScaffoldError } from '@src/core'\nimport { parseArgs } from 'node:util'\nimport {\n\tCOMMAND_OPTIONS,\n\tEXECUTABLE_NAME,\n\tEXIT_CLEAN,\n\tEXIT_DRIFT,\n\tEXIT_SUMMARY,\n\tFAILED_CODE,\n\tFAILED_MESSAGE,\n\tNAME_ARGUMENT,\n\tOPTION_SUMMARY,\n\tVERB_OPTIONS,\n\tVERB_SUMMARY,\n\tVERBS,\n} from './constants.js'\nimport { isUsageError, UsageError } from './errors.js'\n\n/**\n * Read the option name out of the token usage displays it as.\n *\n * @param option - The displayed token, such as `--from <path>`.\n * @returns The bare name `node:util` parses the option under.\n *\n * @remarks\n * One token serves both readers: a person reads the value placeholder and the\n * parser reads the name in front of it. Deriving the name means a documented\n * option and an accepted option cannot be two different lists.\n *\n * @example\n * ```ts\n * import { optionToName } from './helpers.js'\n *\n * optionToName('--from <path>') // 'from'\n * optionToName('--json') // 'json'\n * ```\n */\nexport function optionToName(option: string): string {\n\tconst [token = option] = option.split(' ')\n\treturn token.startsWith('--') ? token.slice(2) : token\n}\n\n/**\n * Render one verb's synopsis.\n *\n * @param verb - The verb to describe.\n * @returns The command line this verb accepts, with every option bracketed.\n *\n * @remarks\n * The synopsis is derived from the verb's own option list rather than stored\n * beside it, so a line that documents an option the verb does not take cannot be\n * written. `new` alone carries the positional argument.\n *\n * @example\n * ```ts\n * import { verbToSyntax } from './helpers.js'\n *\n * verbToSyntax('audit') // 'scaffold audit [--groups <list>] …'\n * ```\n */\nexport function verbToSyntax(verb: Verb): string {\n\tconst argument = verb === 'new' ? ` ${NAME_ARGUMENT}` : ''\n\tconst options = VERB_OPTIONS[verb].map((option) => `[${option}]`).join(' ')\n\treturn `${EXECUTABLE_NAME} ${verb}${argument} ${options}`\n}\n\n/**\n * Render the whole command reference.\n *\n * @returns One line per output call: the synopsis, every verb, the option glossary, and the exit codes.\n *\n * @remarks\n * Returned as lines because the executable writes through a handler that takes\n * one line, so the caller never has to split a block back apart. The glossary is\n * printed once for every verb rather than repeated per verb, since seven of the\n * nine options are shared and a reader comparing two verbs wants the difference,\n * not the repetition.\n */\nexport function renderUsage(): readonly string[] {\n\tconst summaries = Object.entries(OPTION_SUMMARY)\n\tconst column = Math.max(...summaries.map(([option]) => width(option)))\n\treturn [\n\t\t`${EXECUTABLE_NAME} <verb> [options]`,\n\t\t'',\n\t\t...VERBS.flatMap((verb) => [`  ${verbToSyntax(verb)}`, `      ${VERB_SUMMARY[verb]}`]),\n\t\t'',\n\t\t'options',\n\t\t...summaries.map(([option, summary]) => `  ${align(option, column)}  ${summary}`),\n\t\t'',\n\t\t'exit codes',\n\t\t...Object.entries(EXIT_SUMMARY).map(([code, meaning]) => `  ${code}  ${meaning}`),\n\t]\n}\n\n/**\n * Read one command out of the arguments following the executable's own name.\n *\n * @param argv - The arguments the executable was given.\n * @returns The command the arguments denote.\n * @throws {@link UsageError} when they denote no command.\n *\n * @remarks\n * The one place untrusted argument text becomes a domain value, and it stays one\n * function because the command union admits no partial command to hand on: every\n * refusal has to happen before the value exists. It refuses in four ways, each\n * naming what was wrong — a word that is not a verb, a word that is not an\n * option, an option this verb does not take, and an argument this verb does not\n * take. `node:util` decides the second and this decides the rest, so an unknown\n * option is reported by the parser that found it rather than re-derived here.\n *\n * A request for usage is not a command and never reaches this: the caller\n * answers it first.\n *\n * @example\n * ```ts\n * import { argvToCommand } from './helpers.js'\n *\n * argvToCommand(['audit', '--json']) // { verb: 'audit', json: true }\n * ```\n */\nexport function argvToCommand(argv: readonly string[]): CLICommand {\n\tconst [head, ...rest] = argv\n\tconst verb = VERBS.find((candidate) => candidate === head)\n\tif (verb === undefined) {\n\t\tconst found = head === undefined ? 'No command given.' : `Unknown command '${head}'.`\n\t\tthrow new UsageError(`${found} Run '${EXECUTABLE_NAME} --help' for the command list.`)\n\t}\n\tconst parsed = attempt(() =>\n\t\tparseArgs({ args: rest, options: COMMAND_OPTIONS, allowPositionals: true, strict: true }),\n\t)\n\tif (!parsed.success) {\n\t\tconst cause = parsed.error\n\t\tthrow new UsageError(\n\t\t\tcause instanceof Error ? cause.message : `Could not read the arguments to '${verb}'.`,\n\t\t)\n\t}\n\tconst { positionals, values } = parsed.value\n\tconst accepted = VERB_OPTIONS[verb].map((option) => optionToName(option))\n\tconst refused = Object.keys(values).filter((name) => !accepted.includes(name))\n\tif (refused.length > 0) {\n\t\tconst names = refused.map((name) => `--${name}`).join(', ')\n\t\tthrow new UsageError(`'${verb}' does not take ${names}.`)\n\t}\n\tconst [name] = positionals\n\tif (positionals.length > 1) {\n\t\tthrow new UsageError(\n\t\t\t`'${verb}' takes at most one argument, and was given ${String(positionals.length)}.`,\n\t\t)\n\t}\n\tif (verb !== 'new' && name !== undefined) {\n\t\tthrow new UsageError(`'${verb}' takes no argument, and was given '${name}'.`)\n\t}\n\tconst paths = Array.isArray(values.from)\n\t\t? values.from.filter((value) => typeof value === 'string')\n\t\t: []\n\tif (verb !== 'catalog' && paths.length > 1) {\n\t\tthrow new UsageError(\n\t\t\t`'${verb}' takes --from once, and was given it ${String(paths.length)} times.`,\n\t\t)\n\t}\n\tconst src = typeof values.src === 'string' ? values.src : undefined\n\tconst app = typeof values.app === 'string' ? values.app : undefined\n\tconst bin = values.bin === true\n\tconst dependencies = typeof values.deps === 'string' ? values.deps : undefined\n\tconst target = typeof values.target === 'string' ? values.target : undefined\n\tconst json = values.json === true\n\tconst [from] = paths\n\tconst location = target === undefined ? {} : { target }\n\tconst source = from === undefined ? {} : { from }\n\tconst selection = typeof values.groups === 'string' ? { groups: values.groups } : {}\n\tswitch (verb) {\n\t\tcase 'new':\n\t\t\tif (name === undefined) {\n\t\t\t\tthrow new UsageError(`'new' needs the workspace ${NAME_ARGUMENT} it is scaffolding.`)\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tverb,\n\t\t\t\tname,\n\t\t\t\tjson,\n\t\t\t\t...location,\n\t\t\t\t...source,\n\t\t\t\t...(src === undefined ? {} : { src }),\n\t\t\t\t...(app === undefined ? {} : { app }),\n\t\t\t\t...(bin ? { bin } : {}),\n\t\t\t\t...(dependencies === undefined ? {} : { dependencies }),\n\t\t\t}\n\t\tcase 'audit':\n\t\t\treturn { verb, json, ...location, ...source, ...selection }\n\t\tcase 'repair':\n\t\t\treturn { verb, json, ...location, ...source, ...selection }\n\t\tcase 'catalog':\n\t\t\treturn {\n\t\t\t\tverb,\n\t\t\t\tjson,\n\t\t\t\tall: values.all === true,\n\t\t\t\t...location,\n\t\t\t\t...(paths.length === 0 ? {} : { from: paths }),\n\t\t\t}\n\t\tcase 'overwrite':\n\t\t\treturn {\n\t\t\t\tverb,\n\t\t\t\tjson,\n\t\t\t\tdirty: values.dirty === true,\n\t\t\t\t...location,\n\t\t\t\t...source,\n\t\t\t\t...selection,\n\t\t\t}\n\t}\n}\n\n/**\n * Read the exit code an audit reports.\n *\n * @param audit - The comparison of a plan against a target.\n * @returns `EXIT_CLEAN` when the target matched the plan, `EXIT_DRIFT` otherwise.\n *\n * @remarks\n * One rule for every verb that carries an audit, so `audit`, `repair`, and\n * `overwrite` cannot disagree about what a clean run is. A blocking question\n * means the gate refused the blueprint, so the audit says nothing about the\n * target and the run is a failure. A foreign finding counts: the target holds a\n * file the plan does not own, which is a difference from the plan whether or not\n * this verb was allowed to remove it. A non-blocking question rides a complete\n * result and does not.\n *\n * @example\n * ```ts\n * import { auditToExit } from './helpers.js'\n *\n * auditToExit({ findings: [], questions: [] }) // 0\n * ```\n */\nexport function auditToExit(audit: Audit): number {\n\tconst blocked = audit.questions.some((question) => question.blocking)\n\tconst drifted = audit.findings.some((finding) => finding.drift !== 'aligned')\n\treturn blocked || drifted ? EXIT_DRIFT : EXIT_CLEAN\n}\n\n/**\n * Project a raised value into the machine-readable failure envelope.\n *\n * @param error - The value a command raised.\n * @returns The envelope naming the coded reason and what went wrong.\n *\n * @remarks\n * A `ScaffoldError` and a {@link UsageError} both publish a code, so both are\n * reported under their own. Anything else failed without saying why, and is\n * reported under one code rather than under an invented reading of it; a raised\n * value that is not an `Error` carries no message worth quoting, so the envelope\n * says so instead of stringifying whatever it was.\n *\n * @example\n * ```ts\n * import { errorToEnvelope } from './helpers.js'\n *\n * errorToEnvelope(new Error('boom')) // { error: { code: 'FAILED', message: 'boom' } }\n * ```\n */\nexport function errorToEnvelope(error: unknown): ErrorEnvelope {\n\tif (isUsageError(error) || isScaffoldError(error)) {\n\t\treturn { error: { code: error.code, message: error.message } }\n\t}\n\tconst message = error instanceof Error ? error.message : FAILED_MESSAGE\n\treturn { error: { code: FAILED_CODE, message } }\n}\n","import type {\n\tAudit,\n\tBlueprint,\n\tCatalogEntry,\n\tDependency,\n\tEnvironment,\n\tGroup,\n\tMirror,\n\tPlan,\n\tQuestion,\n\tRelease,\n} from '@src/core'\nimport type {\n\tMaterializeResult,\n\tMaterializerInterface,\n\tRepository,\n\tUpstreamOptions,\n} from '@src/server'\nimport type {\n\tAuditCommand,\n\tCatalogCommand,\n\tCatalogResult,\n\tCLICommand,\n\tCLIInterface,\n\tCLIOptions,\n\tNewCommand,\n\tOutputHandler,\n\tOverwriteCommand,\n\tOverwriteResult,\n\tRepairCommand,\n\tRepairResult,\n} from './types.js'\nimport { execFileSync } from 'node:child_process'\nimport { renderTable, strip, stripControls } from '@orkestrel/console'\nimport { attempt, isRecord, isString, parseJSON } from '@orkestrel/contract'\nimport { createMarkdown, flattenText, isTableNode } from '@orkestrel/markdown'\nimport {\n\tCATALOG_AGENT_PATH,\n\tBIN_ENTRY_PATH,\n\tblueprintToRootVite,\n\tcreateBlueprint,\n\tcreateCompiler,\n\tDEPENDENCY_NAME_PATTERN,\n\tENVIRONMENTS,\n\tGROUPS,\n\tGLOBAL_SETUP_PATH,\n\tGUIDES_TEST_PATH,\n\tINTEGRATION_TEST_PATH,\n\tmanifestToDependencies,\n\tmanifestToName,\n\tMAX_MANIFEST_BYTES,\n\tnameToGuide,\n\tScaffoldError,\n\tSHOWCASE_CONFIG_PATH,\n} from '@src/core'\nimport {\n\tcreateMaterializer,\n\tcreateUpstream,\n\tisExactCaseFile,\n\tisPhysicalDirectory,\n\tisRepository,\n\treadFileText,\n\treadSnapshot,\n\tresolveContainedPath,\n} from '@src/server'\nimport { EXIT_CLEAN, EXIT_DRIFT, EXIT_USAGE } from './constants.js'\nimport { isUsageError, UsageError } from './errors.js'\nimport { argvToCommand, auditToExit, errorToEnvelope, renderUsage } from './helpers.js'\n\n/**\n * The executable: one command line in, one exit code out.\n *\n * @remarks\n * Every destination this class writes to is a handler it was given, and the run\n * ends by returning its code rather than by setting one, so the whole executable\n * is drivable from inside another process. That is what makes proving what a\n * command prints cost a function call: `src/bin/main.ts` is the only module\n * that reads `process.argv` or assigns `process.exitCode`.\n *\n * Every line leaving here is stripped of ANSI escapes and control characters\n * once, on the way out, because a refusal quotes the argument that caused it and\n * that argument came from an untrusted command line. The machine-readable path\n * needs no second pass: `JSON.stringify` escapes a control character into text\n * before it reaches the handler.\n *\n * The collaborators are constructed per run rather than received, because\n * `--from` decides the vendored root the materializer reads and an instance\n * handed in before the command line was parsed could not honour it. The\n * upstream reader is built the same way but from the options, because no\n * command line names an endpoint: a terminal caller means the published\n * registry and the published guide host, and only the process driving the\n * executable can mean anything else. That is the seam that makes the three\n * verbs which read the network provable without one.\n *\n * @example\n * ```ts\n * import { CLI } from './CLI.js'\n *\n * const lines: string[] = []\n * const code = await new CLI({ output: (line) => lines.push(line) }).execute(['--help'])\n * code // 0\n * ```\n */\nexport class CLI implements CLIInterface {\n\t// The two destinations a terminal caller means. They are the only process\n\t// streams this class names, and it names them once: a handler is what every\n\t// write goes through, so the default is a handler too rather than a branch at\n\t// each write site.\n\tstatic readonly #stdout: OutputHandler = (line) => void process.stdout.write(`${line}\\n`)\n\tstatic readonly #stderr: OutputHandler = (line) => void process.stderr.write(`${line}\\n`)\n\treadonly #output: OutputHandler\n\treadonly #diagnostic: OutputHandler\n\t// What every upstream reader this class builds is constructed from. It is held\n\t// once and read by each verb that reads the network, so the three of them\n\t// cannot disagree about which registry and which guide host a run addresses.\n\treadonly #upstream: UpstreamOptions | undefined\n\n\t/**\n\t * Construct the executable over the two destinations it writes to.\n\t *\n\t * @param options - The report and diagnostic handlers and the upstream\n\t * endpoints; the process streams and the published endpoints when absent.\n\t */\n\tconstructor(options?: CLIOptions) {\n\t\tthis.#output = options?.output ?? CLI.#stdout\n\t\tthis.#diagnostic = options?.diagnostic ?? CLI.#stderr\n\t\tthis.#upstream = options?.upstream\n\t}\n\n\t/**\n\t * Run one command line to completion and report through the configured output.\n\t *\n\t * @param argv - The arguments following the executable's own name.\n\t * @returns The exit code: `0` clean, `1` drift or failure, `2` a usage error.\n\t *\n\t * @remarks\n\t * A request for usage is answered before anything is parsed, because it\n\t * replaces the run rather than modifying it, and because `--help` is not an\n\t * option any verb takes. Everything after that is one command: read it,\n\t * dispatch it, render what it produced, and answer with the code it earned.\n\t *\n\t * @example\n\t * ```ts\n\t * import { CLI } from './CLI.js'\n\t *\n\t * await new CLI().execute(['audit', '--json']) // 0 when the target matches its plan\n\t * ```\n\t */\n\tasync execute(argv: readonly string[]): Promise<number> {\n\t\tif (argv.includes('--help')) {\n\t\t\tfor (const line of renderUsage()) this.#say(line)\n\t\t\treturn EXIT_CLEAN\n\t\t}\n\t\tconst read = attempt(() => argvToCommand(argv))\n\t\t// A command line that never became a command carries no `--json`, so the\n\t\t// refusal is prose: there is no machine-readable value for it to pollute.\n\t\tif (!read.success) return this.#refuse(read.error, false)\n\t\tconst command = read.value\n\t\ttry {\n\t\t\treturn await this.#dispatch(command)\n\t\t} catch (error) {\n\t\t\treturn this.#refuse(error, command.json === true)\n\t\t}\n\t}\n\n\t// One verb per branch, each answering with its own exit code. The switch is\n\t// exhaustive over the command union, so a new verb fails to compile here.\n\tasync #dispatch(command: CLICommand): Promise<number> {\n\t\tswitch (command.verb) {\n\t\t\tcase 'new':\n\t\t\t\treturn this.#create(command)\n\t\t\tcase 'audit':\n\t\t\t\treturn this.#inspect(command)\n\t\t\tcase 'repair':\n\t\t\t\treturn this.#restore(command)\n\t\t\tcase 'catalog':\n\t\t\t\treturn this.#refresh(command)\n\t\t\tcase 'overwrite':\n\t\t\t\treturn this.#replace(command)\n\t\t}\n\t}\n\n\t// `new` — resolve the declared dependencies against the registry, compile the\n\t// blueprint the command line describes, and write it into a vacant target.\n\tasync #create(command: NewCommand): Promise<number> {\n\t\tconst target = command.target ?? command.name\n\t\tconst blueprint = createBlueprint(command.name, {\n\t\t\tsrc: this.#environments(command.src, 'src'),\n\t\t\tapp: this.#environments(command.app, 'app'),\n\t\t\tbin: command.bin === true,\n\t\t\tdependencies: await this.#resolve(this.#packages(command.dependencies)),\n\t\t})\n\t\tconst plan = this.#compile(blueprint)\n\t\tconst materializer = createMaterializer(\n\t\t\tcommand.from === undefined ? undefined : { host: command.from },\n\t\t)\n\t\ttry {\n\t\t\tconst result = materializer.materialize(plan, target)\n\t\t\tif (command.json === true) this.#report(result)\n\t\t\telse {\n\t\t\t\tthis.#say(`Scaffolded ${blueprint.name} into ${result.target}.`)\n\t\t\t\tthis.#say(this.#tally(result))\n\t\t\t}\n\t\t\treturn EXIT_CLEAN\n\t\t} finally {\n\t\t\tmaterializer.destroy()\n\t\t}\n\t}\n\n\t// `audit` — compare a target to the plan its own manifest and directories\n\t// describe, through the vendored host a repair would write from, and write\n\t// nothing whatever it finds.\n\t//\n\t// The host is load-bearing here where it once was not, so `--from` reaches the\n\t// comparison and a host that cannot be read refuses the run under its own\n\t// coded reason. Refusing is the honest answer: the comparison this verb\n\t// reports is the hydrated one, and a fallback to the pure compile would report\n\t// `aligned` for exactly the files whose bytes it failed to read.\n\t#inspect(command: AuditCommand): number {\n\t\tconst target = command.target ?? '.'\n\t\tconst blueprint = this.#derive(target)\n\t\tconst question = this.#projectQuestion(target, blueprint)\n\t\tconst materializer = createMaterializer(\n\t\t\tcommand.from === undefined ? undefined : { host: command.from },\n\t\t)\n\t\ttry {\n\t\t\tconst [measured] = this.#survey(materializer, blueprint, target, this.#groups(command.groups))\n\t\t\tconst audit: Audit =\n\t\t\t\tquestion === undefined\n\t\t\t\t\t? measured\n\t\t\t\t\t: { ...measured, questions: [...measured.questions, question] }\n\t\t\tif (command.json === true) this.#report(audit)\n\t\t\telse this.#present(audit)\n\t\t\treturn auditToExit(audit)\n\t\t} finally {\n\t\t\tmaterializer.destroy()\n\t\t}\n\t}\n\n\t// `repair` — write each planned path the target is missing or has let drift,\n\t// then re-audit, because the audit a repair reports is the one taken after it.\n\t// One materializer spans the whole verb: the audit that guides the write, the\n\t// write, and the audit that answers for it are three readings of one vendored\n\t// host, and a second instance could not promise they were.\n\t#restore(command: RepairCommand): number {\n\t\tconst target = command.target ?? '.'\n\t\tconst groups = this.#groups(command.groups)\n\t\tconst blueprint = this.#derive(target)\n\t\tthis.#assertProjects(target, blueprint)\n\t\tconst materializer = createMaterializer(\n\t\t\tcommand.from === undefined ? undefined : { host: command.from },\n\t\t)\n\t\ttry {\n\t\t\tconst [audit, plan] = this.#survey(materializer, blueprint, target, groups)\n\t\t\tif (plan === undefined) {\n\t\t\t\tif (command.json === true) this.#report(audit)\n\t\t\t\telse this.#present(audit)\n\t\t\t\treturn EXIT_DRIFT\n\t\t\t}\n\t\t\tconst result = materializer.repair(plan, audit, target)\n\t\t\tconst [terminal] = this.#survey(materializer, blueprint, target, groups)\n\t\t\tconst outcome: RepairResult = { ...result, audit: terminal }\n\t\t\tif (command.json === true) this.#report(outcome)\n\t\t\telse {\n\t\t\t\tthis.#present(terminal)\n\t\t\t\tthis.#say(this.#tally(result))\n\t\t\t}\n\t\t\treturn auditToExit(terminal)\n\t\t} finally {\n\t\t\tmaterializer.destroy()\n\t\t}\n\t}\n\n\t// `catalog` — regenerate the package table from the organization's published\n\t// list and refresh the guide mirrors the target draws on.\n\tasync #refresh(command: CatalogCommand): Promise<number> {\n\t\tconst target = command.target ?? '.'\n\t\tconst [host, ...extra] = command.from ?? []\n\t\tif (extra.length > 0) {\n\t\t\tthis.#warn(\n\t\t\t\t`Read the data root from ${String(host)}. The other ${String(extra.length)} local root${extra.length === 1 ? '' : 's'} named by --from reach nothing this run does.`,\n\t\t\t)\n\t\t}\n\t\tconst previous = this.#previous(target)\n\t\tconst fetched = await this.#fetch(target, command.all === true)\n\t\tconst materializer = createMaterializer(host === undefined ? undefined : { host })\n\t\tlet result: MaterializeResult\n\t\ttry {\n\t\t\tresult = this.#publish(materializer, target, fetched.entries, fetched.mirrors)\n\t\t} finally {\n\t\t\tmaterializer.destroy()\n\t\t}\n\t\tconst outcome: CatalogResult = {\n\t\t\t...result,\n\t\t\tentries: fetched.entries,\n\t\t\tmirrors: fetched.mirrors,\n\t\t\tdropped: previous.filter((name) => !fetched.entries.some((entry) => entry.name === name)),\n\t\t}\n\t\tif (command.json === true) this.#report(outcome)\n\t\telse this.#recount(outcome)\n\t\treturn fetched.mirrors.some((mirror) => mirror.lookup === 'failed') ? EXIT_DRIFT : EXIT_CLEAN\n\t}\n\n\t// `overwrite` — everything repair and catalog do, plus the two steps only this\n\t// verb carries. The offline half runs first and persists whatever it did,\n\t// because it is the destructive one: a run that cannot reach upstream still\n\t// leaves the target repaired and says which step it could not complete.\n\tasync #replace(command: OverwriteCommand): Promise<number> {\n\t\tconst target = command.target ?? '.'\n\t\tconst groups = this.#groups(command.groups)\n\t\tconst blueprint = this.#derive(target)\n\t\tthis.#assertProjects(target, blueprint)\n\t\tconst repository = this.#repository(target)\n\t\tif (repository.dirty.length > 0 && command.dirty !== true) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'TARGET',\n\t\t\t\t`The target at ${target} carries ${String(repository.dirty.length)} uncommitted change${repository.dirty.length === 1 ? '' : 's'}. Commit them, or pass --dirty to waive the refusal.`,\n\t\t\t\t{ target, dirty: repository.dirty.length },\n\t\t\t)\n\t\t}\n\t\tconst materializer = createMaterializer(\n\t\t\tcommand.from === undefined ? undefined : { host: command.from },\n\t\t)\n\t\ttry {\n\t\t\tconst [audit, plan] = this.#survey(materializer, blueprint, target, groups)\n\t\t\tif (plan === undefined) {\n\t\t\t\tif (command.json === true) this.#report(audit)\n\t\t\t\telse this.#present(audit)\n\t\t\t\treturn EXIT_DRIFT\n\t\t\t}\n\t\t\tconst repaired = materializer.repair(plan, audit, target)\n\t\t\t// The candidate set is the audit's own foreign findings, so a path the\n\t\t\t// plan claims is never a deletion candidate whatever the tree holds, and\n\t\t\t// neither is a path outside the vendored directories this plan expands.\n\t\t\t// `--dirty` is expressed here and nowhere else: the waiver clears the\n\t\t\t// refusal the observed dirty set would otherwise trigger downstream, and\n\t\t\t// waives nothing about which paths are eligible.\n\t\t\tconst removed = materializer.remove(\n\t\t\t\taudit,\n\t\t\t\tcommand.dirty === true ? { tracked: repository.tracked, dirty: [] } : repository,\n\t\t\t\ttarget,\n\t\t\t)\n\t\t\tconst offline = this.#merge(repaired, removed)\n\t\t\tconst online = await this.#reconcile(materializer, target, blueprint.dependencies)\n\t\t\tconst [terminal] = this.#survey(materializer, blueprint, target, groups)\n\t\t\tconst outcome: OverwriteResult = {\n\t\t\t\t...online,\n\t\t\t\t...this.#merge(offline, online),\n\t\t\t\taudit: terminal,\n\t\t\t}\n\t\t\tif (command.json === true) this.#report(outcome)\n\t\t\telse {\n\t\t\t\tthis.#present(terminal)\n\t\t\t\tthis.#recount(outcome)\n\t\t\t\tif (online.note !== undefined) this.#warn(online.note)\n\t\t\t}\n\t\t\tif (online.note !== undefined) return EXIT_DRIFT\n\t\t\treturn auditToExit(terminal)\n\t\t} finally {\n\t\t\tmaterializer.destroy()\n\t\t}\n\t}\n\n\t// The network half of `overwrite`, collected rather than thrown: the offline\n\t// half has already written, so a step that cannot complete is reported as the\n\t// step it was instead of discarding what already landed. It writes through the\n\t// verb's own materializer rather than opening a second one, so every byte the\n\t// run lands comes from the host the caller named once.\n\tasync #reconcile(\n\t\tmaterializer: MaterializerInterface,\n\t\ttarget: string,\n\t\tdeclared: readonly Dependency[],\n\t): Promise<Omit<OverwriteResult, 'audit'>> {\n\t\tconst previous = this.#previous(target)\n\t\ttry {\n\t\t\tconst releases = await this.#lookup(declared)\n\t\t\tconst fetched = await this.#fetch(target, false)\n\t\t\tconst written = this.#merge(\n\t\t\t\tthis.#publish(materializer, target, fetched.entries, fetched.mirrors),\n\t\t\t\tmaterializer.declare(this.#pin(releases), target),\n\t\t\t)\n\t\t\treturn {\n\t\t\t\t...written,\n\t\t\t\tentries: fetched.entries,\n\t\t\t\tmirrors: fetched.mirrors,\n\t\t\t\tdropped: previous.filter((name) => !fetched.entries.some((entry) => entry.name === name)),\n\t\t\t\treleases,\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treturn {\n\t\t\t\ttarget,\n\t\t\t\twritten: [],\n\t\t\t\tskipped: [],\n\t\t\t\tremoved: [],\n\t\t\t\tentries: [],\n\t\t\t\tmirrors: [],\n\t\t\t\tdropped: [],\n\t\t\t\treleases: [],\n\t\t\t\tnote: `The catalog step did not complete: ${errorToEnvelope(error).error.message}`,\n\t\t\t}\n\t\t}\n\t}\n\n\t// Measure each declared range against the registry's latest release.\n\tasync #lookup(declared: readonly Dependency[]): Promise<readonly Release[]> {\n\t\tconst upstream = createUpstream(this.#upstream)\n\t\ttry {\n\t\t\treturn await upstream.lookup(declared)\n\t\t} finally {\n\t\t\tupstream.destroy()\n\t\t}\n\t}\n\n\t// Read the organization's published list and the guides the target draws on.\n\t// The workspace never fetches its own guide: that file is its own product.\n\tasync #fetch(\n\t\ttarget: string,\n\t\tall: boolean,\n\t): Promise<{ readonly entries: readonly CatalogEntry[]; readonly mirrors: readonly Mirror[] }> {\n\t\tconst manifest = this.#manifest(target)\n\t\tconst own = manifestToName(manifest)\n\t\tconst declared = manifestToDependencies(manifest).map((dependency) => dependency.name)\n\t\tconst upstream = createUpstream(this.#upstream)\n\t\ttry {\n\t\t\tconst entries = await upstream.catalog()\n\t\t\tconst names = (all ? entries.map((entry) => entry.name) : declared).filter(\n\t\t\t\t(name) => name !== own,\n\t\t\t)\n\t\t\tconst mirrors = await upstream.fetch(names, readSnapshot(target, names.map(nameToGuide)))\n\t\t\treturn { entries, mirrors }\n\t\t} finally {\n\t\t\tupstream.destroy()\n\t\t}\n\t}\n\n\t// Write the fetched guides to their mirrors and the published list to the\n\t// marker-bounded table, as one result.\n\t#publish(\n\t\tmaterializer: MaterializerInterface,\n\t\ttarget: string,\n\t\tentries: readonly CatalogEntry[],\n\t\tmirrors: readonly Mirror[],\n\t): MaterializeResult {\n\t\treturn this.#merge(materializer.mirror(mirrors, target), materializer.catalog(entries, target))\n\t}\n\n\t// The ranges a found release pins. A lookup that produced no answer names no\n\t// version, so it is left declared as it stands rather than rewritten to a\n\t// guess.\n\t#pin(releases: readonly Release[]): readonly Dependency[] {\n\t\tconst pinned: Dependency[] = []\n\t\tfor (const release of releases) {\n\t\t\tif (release.lookup === 'found')\n\t\t\t\tpinned.push({ name: release.name, range: `^${release.latest}` })\n\t\t}\n\t\treturn pinned\n\t}\n\n\t// Compile a blueprint into the plan it describes, or refuse with the questions\n\t// that closed the gate.\n\t#compile(blueprint: Blueprint, groups?: readonly Group[]): Plan {\n\t\tconst compiler = createCompiler()\n\t\ttry {\n\t\t\tconst scaffolding = compiler.compile(blueprint, groups)\n\t\t\tif (scaffolding.plan !== undefined) return scaffolding.plan\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'BLOCKED',\n\t\t\t\tscaffolding.questions\n\t\t\t\t\t.filter((question) => question.blocking)\n\t\t\t\t\t.map((question) => `${question.field}: ${question.message}`)\n\t\t\t\t\t.join(' '),\n\t\t\t\t{ questions: scaffolding.questions.length },\n\t\t\t)\n\t\t} finally {\n\t\t\tcompiler.destroy()\n\t\t}\n\t}\n\n\t// Compile a blueprint and compare its plan to what the target currently holds,\n\t// through the vendored host a write would draw on.\n\t//\n\t// The materializer owns the comparison because it is the only one that can\n\t// make it: the pure compile claims presence alone, so it reads a canon file a\n\t// consumer has edited as aligned and a vendored directory as one missing path\n\t// no write could ever satisfy. Hydrating first states the bytes and expands\n\t// the directory into the files the host actually stores, which is the same\n\t// derivation the repair that follows is held to.\n\t//\n\t// The compiler answers the refused case alone. A blueprint the gate closed\n\t// carries no plan, so there is nothing to hydrate and nothing to say about the\n\t// target; the audit carries the questions instead.\n\t#survey(\n\t\tmaterializer: MaterializerInterface,\n\t\tblueprint: Blueprint,\n\t\ttarget: string,\n\t\tgroups?: readonly Group[],\n\t): readonly [audit: Audit, plan: Plan | undefined] {\n\t\tconst compiler = createCompiler()\n\t\ttry {\n\t\t\tconst scaffolding = compiler.compile(blueprint, groups)\n\t\t\tif (scaffolding.plan === undefined) return [compiler.audit(blueprint, {}, groups), undefined]\n\t\t\treturn [materializer.audit(scaffolding.plan, target), scaffolding.plan]\n\t\t} finally {\n\t\t\tcompiler.destroy()\n\t\t}\n\t}\n\n\t// The blueprint a target describes about itself: manifest identity and fleet\n\t// packages, environment directories, and exact structural files. Services stay\n\t// unknown because their birth-owned script is not a declaration of its list.\n\t#derive(target: string): Blueprint {\n\t\tconst manifest = this.#manifest(target)\n\t\tconst declared = manifestToName(manifest)\n\t\tif (declared === undefined) {\n\t\t\tthrow new ScaffoldError('TARGET', `The manifest at ${target} declares no package name.`, {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\tconst bin = resolveContainedPath(target, BIN_ENTRY_PATH)\n\t\tconst integration = resolveContainedPath(target, INTEGRATION_TEST_PATH)\n\t\tconst global = resolveContainedPath(target, GLOBAL_SETUP_PATH)\n\t\tconst showcase = resolveContainedPath(target, SHOWCASE_CONFIG_PATH)\n\t\treturn createBlueprint(declared.slice(declared.lastIndexOf('/') + 1), {\n\t\t\tsrc: this.#probe(target, 'src'),\n\t\t\tapp: this.#probe(target, 'app'),\n\t\t\tdependencies: manifestToDependencies(manifest),\n\t\t\tbin: bin !== undefined && isExactCaseFile(bin),\n\t\t\tintegration: integration !== undefined && isExactCaseFile(integration),\n\t\t\tglobal: global !== undefined && isExactCaseFile(global),\n\t\t\tshowcase: showcase !== undefined && isExactCaseFile(showcase),\n\t\t})\n\t}\n\n\t// Read literal Vitest project values from one shell command. Quotes group a\n\t// token but do not hide the option, while shell expansions make its value\n\t// unresolved and therefore refuse the write that asked the question.\n\t#scriptProjects(script: string): readonly string[] | undefined {\n\t\tconst tokens: Array<{ value: string; resolved: boolean }> = []\n\t\tlet value = ''\n\t\tlet resolved = true\n\t\tlet started = false\n\t\tlet quote: string | undefined\n\t\tfor (let index = 0; index < script.length; index += 1) {\n\t\t\tconst character = script[index]\n\t\t\tif (character === undefined) return undefined\n\t\t\tif (quote === undefined) {\n\t\t\t\tif (/\\s/.test(character)) {\n\t\t\t\t\tif (started) tokens.push({ value, resolved })\n\t\t\t\t\tvalue = ''\n\t\t\t\t\tresolved = true\n\t\t\t\t\tstarted = false\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (';&|()'.includes(character)) {\n\t\t\t\t\tif (started) tokens.push({ value, resolved })\n\t\t\t\t\tconst paired = script[index + 1] === character && (character === '&' || character === '|')\n\t\t\t\t\ttokens.push({ value: paired ? `${character}${character}` : character, resolved: true })\n\t\t\t\t\tvalue = ''\n\t\t\t\t\tresolved = true\n\t\t\t\t\tstarted = false\n\t\t\t\t\tif (paired) index += 1\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (character === '\"' || character === \"'\") {\n\t\t\t\t\tquote = character\n\t\t\t\t\tstarted = true\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (character === '\\\\') {\n\t\t\t\t\tconst escaped = script[index + 1]\n\t\t\t\t\tif (escaped === undefined) return undefined\n\t\t\t\t\tvalue += escaped\n\t\t\t\t\tstarted = true\n\t\t\t\t\tindex += 1\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tif (character === '$' || character === '`' || character === '%') resolved = false\n\t\t\t\tvalue += character\n\t\t\t\tstarted = true\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (character === quote) {\n\t\t\t\tquote = undefined\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (character === '\\\\' && quote === '\"') {\n\t\t\t\tconst escaped = script[index + 1]\n\t\t\t\tif (escaped === undefined) return undefined\n\t\t\t\tvalue += escaped\n\t\t\t\tindex += 1\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (quote === '\"' && (character === '$' || character === '`' || character === '%')) {\n\t\t\t\tresolved = false\n\t\t\t}\n\t\t\tvalue += character\n\t\t\tstarted = true\n\t\t}\n\t\tif (quote !== undefined) return undefined\n\t\tif (started) tokens.push({ value, resolved })\n\n\t\tconst projects: string[] = []\n\t\tfor (let index = 0; index < tokens.length; index += 1) {\n\t\t\tconst token = tokens[index]\n\t\t\tif (token === undefined) return undefined\n\t\t\tif (token.value === '--project') {\n\t\t\t\tconst project = tokens[index + 1]\n\t\t\t\tif (\n\t\t\t\t\tproject === undefined ||\n\t\t\t\t\t!project.resolved ||\n\t\t\t\t\tproject.value.length === 0 ||\n\t\t\t\t\t['&&', '||', ';', '|', '&', '(', ')'].includes(project.value)\n\t\t\t\t)\n\t\t\t\t\treturn undefined\n\t\t\t\tprojects.push(project.value)\n\t\t\t\tindex += 1\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (token.value.startsWith('--project=')) {\n\t\t\t\tconst project = token.value.slice('--project='.length)\n\t\t\t\tif (!token.resolved || project.length === 0) return undefined\n\t\t\t\tprojects.push(project)\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif (!token.resolved && token.value.includes('--project')) return undefined\n\t\t}\n\t\treturn projects\n\t}\n\n\t// Report the manifest's Vitest calls that the planned root configuration\n\t// cannot register. Audit carries the advisory; writing verbs turn it into the\n\t// hard boundary that keeps a birth-owned script from pointing at a project\n\t// their content-owned configuration removed.\n\t#projectQuestion(target: string, blueprint: Blueprint, writing = false): Question | undefined {\n\t\tconst manifest = this.#manifest(target)\n\t\tconst guides = resolveContainedPath(target, GUIDES_TEST_PATH)\n\t\tconst planned = blueprintToRootVite(blueprint)\n\t\tconst parsed = parseJSON(manifest)\n\t\tconst scripts = isRecord(parsed) && isRecord(parsed.scripts) ? parsed.scripts : undefined\n\t\tconst absent = new Set<string>()\n\t\tlet unresolved = false\n\t\tif (scripts !== undefined) {\n\t\t\tfor (const script of Object.values(scripts)) {\n\t\t\t\tif (!isString(script) || !script.includes('vitest')) continue\n\t\t\t\tconst projects = this.#scriptProjects(script)\n\t\t\t\tif (projects === undefined) {\n\t\t\t\t\tunresolved = true\n\t\t\t\t\tcontinue\n\t\t\t\t}\n\t\t\t\tfor (const project of projects) {\n\t\t\t\t\tconst guide = project === 'guides' && guides !== undefined && isExactCaseFile(guides)\n\t\t\t\t\tif (\n\t\t\t\t\t\t!planned.includes(`name: { label: '${project}',`) ||\n\t\t\t\t\t\t(project === 'guides' && !guide)\n\t\t\t\t\t) {\n\t\t\t\t\t\tabsent.add(project)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (absent.size === 0 && !unresolved) return undefined\n\t\tconst projects = [...absent].sort()\n\t\tif (unresolved) {\n\t\t\treturn {\n\t\t\t\tfield: 'projects',\n\t\t\t\tmessage: `The manifest at ${target} contains a Vitest project expression that cannot be resolved statically.${projects.length === 0 ? '' : ` It also names projects the planned configuration does not register: ${projects.join(', ')}.`} ${writing ? 'Replace it with a literal --project value or remove the script before using a scaffold writing verb.' : 'Replace it with a literal --project value before relying on the planned configuration.'}`,\n\t\t\t\tblocking: false,\n\t\t\t}\n\t\t}\n\t\treturn {\n\t\t\tfield: 'projects',\n\t\t\tmessage: writing\n\t\t\t\t? `The manifest at ${target} names ${projects.length === 1 ? 'a Vitest project' : 'Vitest projects'} the planned configuration does not register: ${projects.join(', ')}. To continue, remove the ${projects.length === 1 ? 'script that names it' : 'scripts that name them'} or do not use scaffold writing verbs on a workspace that needs ${projects.length === 1 ? 'a custom Vitest project' : 'custom Vitest projects'}.`\n\t\t\t\t: `The manifest at ${target} names ${projects.length === 1 ? 'a Vitest project' : 'Vitest projects'} the planned configuration does not register: ${projects.join(', ')}. Add ${projects.length === 1 ? 'the project' : 'each project'} to vite.config.ts or remove the ${projects.length === 1 ? 'script that names it' : 'scripts that name them'}.`,\n\t\t\tblocking: false,\n\t\t}\n\t}\n\n\t// Writing verbs refuse the advisory because their next step would replace the\n\t// configuration. Audit alone may report it without changing the target.\n\t#assertProjects(target: string, blueprint: Blueprint): void {\n\t\tconst question = this.#projectQuestion(target, blueprint, true)\n\t\tif (question === undefined) return\n\t\tthrow new ScaffoldError('TARGET', question.message, { target })\n\t}\n\n\t// A target's manifest text, which every reading verb needs before it can say\n\t// anything about the target at all.\n\t#manifest(target: string): string {\n\t\tconst manifest = readFileText(target, 'package.json', MAX_MANIFEST_BYTES)\n\t\tif (manifest === undefined) {\n\t\t\tthrow new ScaffoldError('TARGET', `The target at ${target} carries no readable manifest.`, {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\treturn manifest\n\t}\n\n\t// The environments one axis physically ships, read as directories rather than\n\t// declared, because a directory is the fact and a declaration would be a\n\t// second copy of it free to disagree.\n\t#probe(target: string, axis: string): readonly Environment[] {\n\t\treturn ENVIRONMENTS.filter((environment) => {\n\t\t\tconst full = resolveContainedPath(target, `${axis}/${environment}`)\n\t\t\treturn full !== undefined && isPhysicalDirectory(full)\n\t\t})\n\t}\n\n\t// The packages the target's catalog table listed before this run. Read through\n\t// the declared markdown parser rather than by pattern, so a row is a row\n\t// because the document says so.\n\t#previous(target: string): readonly string[] {\n\t\tconst text = readFileText(target, CATALOG_AGENT_PATH)\n\t\tif (text === undefined) return []\n\t\tconst names: string[] = []\n\t\tfor (const table of createMarkdown(text).filter(isTableNode)) {\n\t\t\tfor (const row of table.rows) {\n\t\t\t\tconst [cell] = row\n\t\t\t\tif (cell === undefined) continue\n\t\t\t\tconst name = cell.map(flattenText).join('').trim()\n\t\t\t\tif (DEPENDENCY_NAME_PATTERN.test(name)) names.push(name)\n\t\t\t}\n\t\t}\n\t\treturn names\n\t}\n\n\t// What git reports about the target's working tree. Deletion draws only on\n\t// what git tracks and refuses a tree carrying uncommitted work, so a target\n\t// that is not a repository has no recovery mechanism and is refused here.\n\t#repository(target: string): Repository {\n\t\tconst tracked = this.#inventory(target, ['ls-files', '-z'])\n\t\tconst dirty = this.#inventory(target, [\n\t\t\t'status',\n\t\t\t'--porcelain=v1',\n\t\t\t'--untracked-files=all',\n\t\t\t'-z',\n\t\t]).map((record) => (record.length > 3 && record[2] === ' ' ? record.slice(3) : record))\n\t\tconst state = { tracked, dirty }\n\t\tif (!isRepository(state)) {\n\t\t\tthrow new ScaffoldError('TARGET', `The git state at ${target} is not a readable inventory.`, {\n\t\t\t\ttarget,\n\t\t\t\ttracked: tracked.length,\n\t\t\t\tdirty: dirty.length,\n\t\t\t})\n\t\t}\n\t\treturn state\n\t}\n\n\t// One git query, answered as its NUL-separated records. Git is asked rather\n\t// than reimplemented, because the tracked set and the dirty set are git's own\n\t// answers and nothing else can give them.\n\t#inventory(target: string, args: readonly string[]): readonly string[] {\n\t\tconst read = attempt(() =>\n\t\t\texecFileSync('git', [...args], {\n\t\t\t\tcwd: target,\n\t\t\t\tencoding: 'utf8',\n\t\t\t\twindowsHide: true,\n\t\t\t\tmaxBuffer: MAX_MANIFEST_BYTES,\n\t\t\t\t// git writes its own refusal to its own stderr, and this class owns\n\t\t\t\t// what leaves it: a failure is reported through the diagnostic handler\n\t\t\t\t// the caller supplied, never straight onto a stream nobody chose.\n\t\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t\t}),\n\t\t)\n\t\tif (!read.success) {\n\t\t\tthrow new ScaffoldError('TARGET', `The target at ${target} is not a git repository.`, {\n\t\t\t\ttarget,\n\t\t\t})\n\t\t}\n\t\treturn read.value.split('\\0').filter((record) => record.length > 0)\n\t}\n\n\t// The environments a comma-separated selection names, refused by name when it\n\t// names something that is not one.\n\t#environments(selection: string | undefined, axis: string): readonly Environment[] {\n\t\tif (selection === undefined) return []\n\t\tconst requested = selection.split(',')\n\t\tconst refused = requested.filter(\n\t\t\t(name) => !ENVIRONMENTS.some((environment) => environment === name),\n\t\t)\n\t\tif (refused.length > 0) {\n\t\t\tthrow new UsageError(\n\t\t\t\t`'--${axis}' does not take ${refused.join(', ')}. It takes ${ENVIRONMENTS.join(', ')}.`,\n\t\t\t)\n\t\t}\n\t\treturn ENVIRONMENTS.filter((environment) => requested.includes(environment))\n\t}\n\n\t// The groups a comma-separated selection names; absence covers every group.\n\t#groups(selection: string | undefined): readonly Group[] | undefined {\n\t\tif (selection === undefined) return undefined\n\t\tconst requested = selection.split(',')\n\t\tconst refused = requested.filter((name) => !GROUPS.some((group) => group === name))\n\t\tif (refused.length > 0) {\n\t\t\tthrow new UsageError(\n\t\t\t\t`'--groups' does not take ${refused.join(', ')}. It takes ${GROUPS.join(', ')}.`,\n\t\t\t)\n\t\t}\n\t\treturn GROUPS.filter((group) => requested.includes(group))\n\t}\n\n\t// The fleet packages a comma-separated selection names.\n\t#packages(selection: string | undefined): readonly string[] {\n\t\tif (selection === undefined) return []\n\t\tconst requested = selection.split(',')\n\t\tconst refused = requested.filter((name) => !DEPENDENCY_NAME_PATTERN.test(name))\n\t\tif (refused.length > 0) {\n\t\t\tthrow new UsageError(\n\t\t\t\t`'--deps' does not take ${refused.join(', ')}. Every name is a published @orkestrel package.`,\n\t\t\t)\n\t\t}\n\t\treturn requested\n\t}\n\n\t// Pin each named package to the registry's latest release. A name upstream\n\t// cannot answer for is refused rather than pinned to an invented range: the\n\t// workspace would carry a dependency that does not resolve.\n\tasync #resolve(names: readonly string[]): Promise<readonly Dependency[]> {\n\t\tif (names.length === 0) return []\n\t\tconst upstream = createUpstream(this.#upstream)\n\t\tlet releases: readonly Release[]\n\t\ttry {\n\t\t\treleases = await upstream.lookup(names.map((name) => ({ name, range: '*' })))\n\t\t} finally {\n\t\t\tupstream.destroy()\n\t\t}\n\t\tconst refused = releases.filter((release) => release.lookup !== 'found')\n\t\tif (refused.length > 0) {\n\t\t\tthrow new ScaffoldError(\n\t\t\t\t'FETCH',\n\t\t\t\t`The registry named no release for ${refused.map((release) => release.name).join(', ')}.`,\n\t\t\t\t{ names: refused.length },\n\t\t\t)\n\t\t}\n\t\treturn this.#pin(releases)\n\t}\n\n\t// Two results of one run, read as one. Written and skipped never overlap\n\t// across the calls a verb makes, because each call answers for its own paths.\n\t#merge(first: MaterializeResult, second: MaterializeResult): MaterializeResult {\n\t\treturn {\n\t\t\ttarget: first.target,\n\t\t\twritten: [...first.written, ...second.written],\n\t\t\tskipped: [...first.skipped, ...second.skipped],\n\t\t\tremoved: [...first.removed, ...second.removed],\n\t\t}\n\t}\n\n\t// The audit as a person reads it: every advisory first, then one row per path\n\t// that differs, then the count. An aligned path is not listed, because a\n\t// report of everything that is fine is a report nobody reads.\n\t#present(audit: Audit): void {\n\t\tfor (const question of audit.questions) this.#warn(`${question.field}: ${question.message}`)\n\t\tconst rows = audit.findings\n\t\t\t.filter((finding) => finding.drift !== 'aligned')\n\t\t\t.map((finding) => [finding.path, finding.group, finding.drift])\n\t\tif (rows.length > 0) {\n\t\t\tconst table = renderTable({\n\t\t\t\tcolumns: [{ label: 'path' }, { label: 'group' }, { label: 'drift' }],\n\t\t\t\trows,\n\t\t\t})\n\t\t\tfor (const line of table.split('\\n')) this.#say(line)\n\t\t}\n\t\tthis.#say(\n\t\t\t`${String(rows.length)} of ${String(audit.findings.length)} planned path${audit.findings.length === 1 ? '' : 's'} differ from the plan.`,\n\t\t)\n\t}\n\n\t// The catalog outcome as a person reads it.\n\t#recount(result: CatalogResult): void {\n\t\tthis.#say(this.#tally(result))\n\t\tthis.#say(\n\t\t\t`${String(result.entries.length)} published, ${String(result.mirrors.filter((mirror) => mirror.lookup === 'found').length)} guide${result.mirrors.length === 1 ? '' : 's'} fetched, ${String(result.dropped.length)} no longer listed.`,\n\t\t)\n\t\tfor (const mirror of result.mirrors) {\n\t\t\tif (mirror.lookup !== 'found') this.#warn(`${mirror.name}: ${mirror.note}`)\n\t\t}\n\t}\n\n\t// One line stating what a mutation did.\n\t#tally(result: MaterializeResult): string {\n\t\treturn `${String(result.written.length)} written, ${String(result.skipped.length)} unchanged, ${String(result.removed.length)} removed in ${result.target}.`\n\t}\n\n\t// The one machine-readable value a `--json` run emits.\n\t#report(value: unknown): void {\n\t\tthis.#say(JSON.stringify(value))\n\t}\n\n\t// Report a refusal under the code it carries and answer with the code it\n\t// earned: a command line that was not a command is a usage error, and\n\t// everything else is a failed run.\n\t#refuse(error: unknown, json: boolean): number {\n\t\tconst envelope = errorToEnvelope(error)\n\t\tif (json) this.#report(envelope)\n\t\telse this.#warn(`${envelope.error.code}: ${envelope.error.message}`)\n\t\treturn isUsageError(error) ? EXIT_USAGE : EXIT_DRIFT\n\t}\n\n\t#say(line: string): void {\n\t\tthis.#output(this.#sanitize(line))\n\t}\n\n\t#warn(line: string): void {\n\t\tthis.#diagnostic(this.#sanitize(line))\n\t}\n\n\t// The single write path, and the only place hostile bytes are answered for.\n\t// A refusal quotes the argument that caused it, so an escape sequence, a bell,\n\t// or a forged second line arrives here inside otherwise ordinary prose. ANSI\n\t// escapes go first because they are what repaints a terminal, control\n\t// characters next, and what remains is folded onto one line because a handler\n\t// takes one line and a caller writing a record per call must get one record.\n\t#sanitize(line: string): string {\n\t\treturn stripControls(strip(line)).split(/\\r?\\n/).join(' ')\n\t}\n}\n","// The executable entry, and the only module that touches process state: it reads\n// the arguments the process was given and assigns the code the run returned. The\n// `#!/usr/bin/env node` shebang is re-emitted by the build's `output.banner`\n// rather than written here, because the bundler strips a shebang from source.\nimport { CLI } from './CLI.js'\n\nprocess.stdout.on('error', (error) => {\n\tif ('code' in error && error.code === 'EPIPE') return\n\tthrow error\n})\nprocess.exitCode = await new CLI().execute(process.argv.slice(2))\n"],"mappings":";;;;;;;;;;;;;;;;;AAWA,IAAa,kBAAkB;;;;;;;;;AAU/B,IAAa,QAAyB,OAAO,OAAO;CACnD;CACA;CACA;CACA;CACA;AACD,CAAC;;;;;;;;AAkBD,IAAa,eAAiD,OAAO,OAAO;EAC7D,IAAA;EACA,IAAA;EACA,IAAA;AACf,CAAC;;;;;;;;;;AAWD,IAAa,aAAa;;AAG1B,IAAa,cAAc;;AAG3B,IAAa,iBAAiB;;;;;;;;AAS9B,IAAa,gBAAgB;;;;;;;;;;;;;;AAe7B,IAAa,kBAA0C,OAAO,OAAO;CACpE,KAAK,OAAO,OAAO,EAAE,MAAM,SAAS,CAAC;CACrC,KAAK,OAAO,OAAO,EAAE,MAAM,SAAS,CAAC;CACrC,KAAK,OAAO,OAAO,EAAE,MAAM,UAAU,CAAC;CACtC,MAAM,OAAO,OAAO,EAAE,MAAM,SAAS,CAAC;CACtC,QAAQ,OAAO,OAAO,EAAE,MAAM,SAAS,CAAC;CACxC,KAAK,OAAO,OAAO,EAAE,MAAM,UAAU,CAAC;CACtC,OAAO,OAAO,OAAO,EAAE,MAAM,UAAU,CAAC;CACxC,MAAM,OAAO,OAAO;EAAE,MAAM;EAAU,UAAU;CAAK,CAAC;CACtD,QAAQ,OAAO,OAAO,EAAE,MAAM,SAAS,CAAC;CACxC,MAAM,OAAO,OAAO,EAAE,MAAM,UAAU,CAAC;AACxC,CAAC;;;;;;;;;AAUD,IAAa,iBAAmD,OAAO,OAAO;CAC7E,gBAAgB;CAChB,gBAAgB;CAChB,SAAS;CACT,iBAAiB;CACjB,mBAAmB;CACnB,SAAS;CACT,WAAW;CACX,iBACC;CACD,mBAAmB;CACnB,UAAU;AACX,CAAC;;;;;;;;;;AAWD,IAAa,eAA0D,OAAO,OAAO;CACpF,KAAK,OAAO,OAAO;EAClB;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC;CACD,OAAO,OAAO,OAAO;EAAC;EAAmB;EAAiB;EAAmB;CAAQ,CAAC;CACtF,QAAQ,OAAO,OAAO;EAAC;EAAmB;EAAiB;EAAmB;CAAQ,CAAC;CACvF,SAAS,OAAO,OAAO;EAAC;EAAS;EAAiB;EAAmB;CAAQ,CAAC;CAC9E,WAAW,OAAO,OAAO;EACxB;EACA;EACA;EACA;EACA;CACD,CAAC;AACF,CAAC;;;;;;;;AASD,IAAa,eAA+C,OAAO,OAAO;CACzE,KAAK;CACL,OAAO;CACP,QAAQ;CACR,SAAS;CACT,WACC;AACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC/ID,IAAa,aAAb,cAAgC,MAAM;CACrC;;;;;;CAOA,YAAY,SAAiB;EAC5B,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;CACb;AACD;;;;;;;;;;;;;;;AAgBA,SAAgB,aAAa,OAAqC;CACjE,OAAO,iBAAiB;AACzB;;;;;;;;;;;;;;;;;;;;;;ACjBA,SAAgB,aAAa,QAAwB;CACpD,MAAM,CAAC,QAAQ,UAAU,OAAO,MAAM,GAAG;CACzC,OAAO,MAAM,WAAW,IAAI,IAAI,MAAM,MAAM,CAAC,IAAI;AAClD;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,aAAa,MAAoB;CAGhD,OAAO,GAAG,gBAAgB,GAAG,OAFZ,SAAS,QAAQ,IAAI,kBAAkB,GAEX,GAD7B,aAAa,KAAK,CAAC,KAAK,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,KAAK,GACvB;AACjD;;;;;;;;;;;;;AAcA,SAAgB,cAAiC;CAChD,MAAM,YAAY,OAAO,QAAQ,cAAc;CAC/C,MAAM,SAAS,KAAK,IAAI,GAAG,UAAU,KAAK,CAAC,YAAY,MAAM,MAAM,CAAC,CAAC;CACrE,OAAO;EACN,GAAG,gBAAgB;EACnB;EACA,GAAG,MAAM,SAAS,SAAS,CAAC,KAAK,aAAa,IAAI,KAAK,SAAS,aAAa,OAAO,CAAC;EACrF;EACA;EACA,GAAG,UAAU,KAAK,CAAC,QAAQ,aAAa,KAAK,MAAM,QAAQ,MAAM,EAAE,IAAI,SAAS;EAChF;EACA;EACA,GAAG,OAAO,QAAQ,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,KAAK,KAAK,IAAI,SAAS;CACjF;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,cAAc,MAAqC;CAClE,MAAM,CAAC,MAAM,GAAG,QAAQ;CACxB,MAAM,OAAO,MAAM,MAAM,cAAc,cAAc,IAAI;CACzD,IAAI,SAAS,KAAA,GAEZ,MAAM,IAAI,WAAW,GADP,SAAS,KAAA,IAAY,sBAAsB,oBAAoB,KAAK,IACpD,QAAQ,gBAAgB,+BAA+B;CAEtF,MAAM,SAAS,cACd,UAAU;EAAE,MAAM;EAAM,SAAS;EAAiB,kBAAkB;EAAM,QAAQ;CAAK,CAAC,CACzF;CACA,IAAI,CAAC,OAAO,SAAS;EACpB,MAAM,QAAQ,OAAO;EACrB,MAAM,IAAI,WACT,iBAAiB,QAAQ,MAAM,UAAU,oCAAoC,KAAK,GACnF;CACD;CACA,MAAM,EAAE,aAAa,WAAW,OAAO;CACvC,MAAM,WAAW,aAAa,KAAK,CAAC,KAAK,WAAW,aAAa,MAAM,CAAC;CACxE,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,QAAQ,SAAS,CAAC,SAAS,SAAS,IAAI,CAAC;CAC7E,IAAI,QAAQ,SAAS,GAEpB,MAAM,IAAI,WAAW,IAAI,KAAK,kBADhB,QAAQ,KAAK,SAAS,KAAK,MAAM,CAAC,CAAC,KAAK,IACN,EAAM,EAAE;CAEzD,MAAM,CAAC,QAAQ;CACf,IAAI,YAAY,SAAS,GACxB,MAAM,IAAI,WACT,IAAI,KAAK,8CAA8C,OAAO,YAAY,MAAM,EAAE,EACnF;CAED,IAAI,SAAS,SAAS,SAAS,KAAA,GAC9B,MAAM,IAAI,WAAW,IAAI,KAAK,sCAAsC,KAAK,GAAG;CAE7E,MAAM,QAAQ,MAAM,QAAQ,OAAO,IAAI,IACpC,OAAO,KAAK,QAAQ,UAAU,OAAO,UAAU,QAAQ,IACvD,CAAC;CACJ,IAAI,SAAS,aAAa,MAAM,SAAS,GACxC,MAAM,IAAI,WACT,IAAI,KAAK,wCAAwC,OAAO,MAAM,MAAM,EAAE,QACvE;CAED,MAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM,KAAA;CAC1D,MAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM,KAAA;CAC1D,MAAM,MAAM,OAAO,QAAQ;CAC3B,MAAM,eAAe,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO,KAAA;CACrE,MAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS,KAAA;CACnE,MAAM,OAAO,OAAO,SAAS;CAC7B,MAAM,CAAC,QAAQ;CACf,MAAM,WAAW,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;CACtD,MAAM,SAAS,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;CAChD,MAAM,YAAY,OAAO,OAAO,WAAW,WAAW,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;CACnF,QAAQ,MAAR;EACC,KAAK;GACJ,IAAI,SAAS,KAAA,GACZ,MAAM,IAAI,WAAW,6BAA6B,cAAc,oBAAoB;GAErF,OAAO;IACN;IACA;IACA;IACA,GAAG;IACH,GAAG;IACH,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;IACnC,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;IACnC,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;IACrB,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;GACtD;EACD,KAAK,SACJ,OAAO;GAAE;GAAM;GAAM,GAAG;GAAU,GAAG;GAAQ,GAAG;EAAU;EAC3D,KAAK,UACJ,OAAO;GAAE;GAAM;GAAM,GAAG;GAAU,GAAG;GAAQ,GAAG;EAAU;EAC3D,KAAK,WACJ,OAAO;GACN;GACA;GACA,KAAK,OAAO,QAAQ;GACpB,GAAG;GACH,GAAI,MAAM,WAAW,IAAI,CAAC,IAAI,EAAE,MAAM,MAAM;EAC7C;EACD,KAAK,aACJ,OAAO;GACN;GACA;GACA,OAAO,OAAO,UAAU;GACxB,GAAG;GACH,GAAG;GACH,GAAG;EACJ;CACF;AACD;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,YAAY,OAAsB;CACjD,MAAM,UAAU,MAAM,UAAU,MAAM,aAAa,SAAS,QAAQ;CACpE,MAAM,UAAU,MAAM,SAAS,MAAM,YAAY,QAAQ,UAAU,SAAS;CAC5E,OAAO,WAAW,UAAA,IAAA;AACnB;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,gBAAgB,OAA+B;CAC9D,IAAI,aAAa,KAAK,KAAK,gBAAgB,KAAK,GAC/C,OAAO,EAAE,OAAO;EAAE,MAAM,MAAM;EAAM,SAAS,MAAM;CAAQ,EAAE;CAG9D,OAAO,EAAE,OAAO;EAAE,MAAM;EAAa,SADrB,iBAAiB,QAAQ,MAAM,UAAU;CACZ,EAAE;AAChD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACrKA,IAAa,MAAb,MAAa,IAA4B;CAKxC,OAAgBA,WAA0B,SAAS,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;CACxF,OAAgBC,WAA0B,SAAS,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;CACxF;CACA;CAIA;;;;;;;CAQA,YAAY,SAAsB;EACjC,KAAKC,UAAU,SAAS,UAAU,IAAIF;EACtC,KAAKG,cAAc,SAAS,cAAc,IAAIF;EAC9C,KAAKG,YAAY,SAAS;CAC3B;;;;;;;;;;;;;;;;;;;;CAqBA,MAAM,QAAQ,MAA0C;EACvD,IAAI,KAAK,SAAS,QAAQ,GAAG;GAC5B,KAAK,MAAM,QAAQ,YAAY,GAAG,KAAKC,KAAK,IAAI;GAChD,OAAA;EACD;EACA,MAAM,OAAO,cAAc,cAAc,IAAI,CAAC;EAG9C,IAAI,CAAC,KAAK,SAAS,OAAO,KAAKC,QAAQ,KAAK,OAAO,KAAK;EACxD,MAAM,UAAU,KAAK;EACrB,IAAI;GACH,OAAO,MAAM,KAAKC,UAAU,OAAO;EACpC,SAAS,OAAO;GACf,OAAO,KAAKD,QAAQ,OAAO,QAAQ,SAAS,IAAI;EACjD;CACD;CAIA,MAAMC,UAAU,SAAsC;EACrD,QAAQ,QAAQ,MAAhB;GACC,KAAK,OACJ,OAAO,KAAKC,QAAQ,OAAO;GAC5B,KAAK,SACJ,OAAO,KAAKC,SAAS,OAAO;GAC7B,KAAK,UACJ,OAAO,KAAKC,SAAS,OAAO;GAC7B,KAAK,WACJ,OAAO,KAAKC,SAAS,OAAO;GAC7B,KAAK,aACJ,OAAO,KAAKC,SAAS,OAAO;EAC9B;CACD;CAIA,MAAMJ,QAAQ,SAAsC;EACnD,MAAM,SAAS,QAAQ,UAAU,QAAQ;EACzC,MAAM,YAAY,gBAAgB,QAAQ,MAAM;GAC/C,KAAK,KAAKK,cAAc,QAAQ,KAAK,KAAK;GAC1C,KAAK,KAAKA,cAAc,QAAQ,KAAK,KAAK;GAC1C,KAAK,QAAQ,QAAQ;GACrB,cAAc,MAAM,KAAKC,SAAS,KAAKC,UAAU,QAAQ,YAAY,CAAC;EACvE,CAAC;EACD,MAAM,OAAO,KAAKC,SAAS,SAAS;EACpC,MAAM,eAAe,mBACpB,QAAQ,SAAS,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,QAAQ,KAAK,CAC/D;EACA,IAAI;GACH,MAAM,SAAS,aAAa,YAAY,MAAM,MAAM;GACpD,IAAI,QAAQ,SAAS,MAAM,KAAKC,QAAQ,MAAM;QACzC;IACJ,KAAKZ,KAAK,cAAc,UAAU,KAAK,QAAQ,OAAO,OAAO,EAAE;IAC/D,KAAKA,KAAK,KAAKa,OAAO,MAAM,CAAC;GAC9B;GACA,OAAA;EACD,UAAU;GACT,aAAa,QAAQ;EACtB;CACD;CAWA,SAAS,SAA+B;EACvC,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,YAAY,KAAKC,QAAQ,MAAM;EACrC,MAAM,WAAW,KAAKC,iBAAiB,QAAQ,SAAS;EACxD,MAAM,eAAe,mBACpB,QAAQ,SAAS,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,QAAQ,KAAK,CAC/D;EACA,IAAI;GACH,MAAM,CAAC,YAAY,KAAKC,QAAQ,cAAc,WAAW,QAAQ,KAAKC,QAAQ,QAAQ,MAAM,CAAC;GAC7F,MAAM,QACL,aAAa,KAAA,IACV,WACA;IAAE,GAAG;IAAU,WAAW,CAAC,GAAG,SAAS,WAAW,QAAQ;GAAE;GAChE,IAAI,QAAQ,SAAS,MAAM,KAAKL,QAAQ,KAAK;QACxC,KAAKM,SAAS,KAAK;GACxB,OAAO,YAAY,KAAK;EACzB,UAAU;GACT,aAAa,QAAQ;EACtB;CACD;CAOA,SAAS,SAAgC;EACxC,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,SAAS,KAAKD,QAAQ,QAAQ,MAAM;EAC1C,MAAM,YAAY,KAAKH,QAAQ,MAAM;EACrC,KAAKK,gBAAgB,QAAQ,SAAS;EACtC,MAAM,eAAe,mBACpB,QAAQ,SAAS,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,QAAQ,KAAK,CAC/D;EACA,IAAI;GACH,MAAM,CAAC,OAAO,QAAQ,KAAKH,QAAQ,cAAc,WAAW,QAAQ,MAAM;GAC1E,IAAI,SAAS,KAAA,GAAW;IACvB,IAAI,QAAQ,SAAS,MAAM,KAAKJ,QAAQ,KAAK;SACxC,KAAKM,SAAS,KAAK;IACxB,OAAA;GACD;GACA,MAAM,SAAS,aAAa,OAAO,MAAM,OAAO,MAAM;GACtD,MAAM,CAAC,YAAY,KAAKF,QAAQ,cAAc,WAAW,QAAQ,MAAM;GACvE,MAAM,UAAwB;IAAE,GAAG;IAAQ,OAAO;GAAS;GAC3D,IAAI,QAAQ,SAAS,MAAM,KAAKJ,QAAQ,OAAO;QAC1C;IACJ,KAAKM,SAAS,QAAQ;IACtB,KAAKlB,KAAK,KAAKa,OAAO,MAAM,CAAC;GAC9B;GACA,OAAO,YAAY,QAAQ;EAC5B,UAAU;GACT,aAAa,QAAQ;EACtB;CACD;CAIA,MAAMP,SAAS,SAA0C;EACxD,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,CAAC,MAAM,GAAG,SAAS,QAAQ,QAAQ,CAAC;EAC1C,IAAI,MAAM,SAAS,GAClB,KAAKc,MACJ,2BAA2B,OAAO,IAAI,EAAE,cAAc,OAAO,MAAM,MAAM,EAAE,aAAa,MAAM,WAAW,IAAI,KAAK,IAAI,8CACvH;EAED,MAAM,WAAW,KAAKC,UAAU,MAAM;EACtC,MAAM,UAAU,MAAM,KAAKC,OAAO,QAAQ,QAAQ,QAAQ,IAAI;EAC9D,MAAM,eAAe,mBAAmB,SAAS,KAAA,IAAY,KAAA,IAAY,EAAE,KAAK,CAAC;EACjF,IAAI;EACJ,IAAI;GACH,SAAS,KAAKC,SAAS,cAAc,QAAQ,QAAQ,SAAS,QAAQ,OAAO;EAC9E,UAAU;GACT,aAAa,QAAQ;EACtB;EACA,MAAM,UAAyB;GAC9B,GAAG;GACH,SAAS,QAAQ;GACjB,SAAS,QAAQ;GACjB,SAAS,SAAS,QAAQ,SAAS,CAAC,QAAQ,QAAQ,MAAM,UAAU,MAAM,SAAS,IAAI,CAAC;EACzF;EACA,IAAI,QAAQ,SAAS,MAAM,KAAKX,QAAQ,OAAO;OAC1C,KAAKY,SAAS,OAAO;EAC1B,OAAO,QAAQ,QAAQ,MAAM,WAAW,OAAO,WAAW,QAAQ,IAAA,IAAA;CACnE;CAMA,MAAMjB,SAAS,SAA4C;EAC1D,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,SAAS,KAAKU,QAAQ,QAAQ,MAAM;EAC1C,MAAM,YAAY,KAAKH,QAAQ,MAAM;EACrC,KAAKK,gBAAgB,QAAQ,SAAS;EACtC,MAAM,aAAa,KAAKM,YAAY,MAAM;EAC1C,IAAI,WAAW,MAAM,SAAS,KAAK,QAAQ,UAAU,MACpD,MAAM,IAAI,cACT,UACA,iBAAiB,OAAO,WAAW,OAAO,WAAW,MAAM,MAAM,EAAE,qBAAqB,WAAW,MAAM,WAAW,IAAI,KAAK,IAAI,uDACjI;GAAE;GAAQ,OAAO,WAAW,MAAM;EAAO,CAC1C;EAED,MAAM,eAAe,mBACpB,QAAQ,SAAS,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,QAAQ,KAAK,CAC/D;EACA,IAAI;GACH,MAAM,CAAC,OAAO,QAAQ,KAAKT,QAAQ,cAAc,WAAW,QAAQ,MAAM;GAC1E,IAAI,SAAS,KAAA,GAAW;IACvB,IAAI,QAAQ,SAAS,MAAM,KAAKJ,QAAQ,KAAK;SACxC,KAAKM,SAAS,KAAK;IACxB,OAAA;GACD;GACA,MAAM,WAAW,aAAa,OAAO,MAAM,OAAO,MAAM;GAOxD,MAAM,UAAU,aAAa,OAC5B,OACA,QAAQ,UAAU,OAAO;IAAE,SAAS,WAAW;IAAS,OAAO,CAAC;GAAE,IAAI,YACtE,MACD;GACA,MAAM,UAAU,KAAKQ,OAAO,UAAU,OAAO;GAC7C,MAAM,SAAS,MAAM,KAAKC,WAAW,cAAc,QAAQ,UAAU,YAAY;GACjF,MAAM,CAAC,YAAY,KAAKX,QAAQ,cAAc,WAAW,QAAQ,MAAM;GACvE,MAAM,UAA2B;IAChC,GAAG;IACH,GAAG,KAAKU,OAAO,SAAS,MAAM;IAC9B,OAAO;GACR;GACA,IAAI,QAAQ,SAAS,MAAM,KAAKd,QAAQ,OAAO;QAC1C;IACJ,KAAKM,SAAS,QAAQ;IACtB,KAAKM,SAAS,OAAO;IACrB,IAAI,OAAO,SAAS,KAAA,GAAW,KAAKJ,MAAM,OAAO,IAAI;GACtD;GACA,IAAI,OAAO,SAAS,KAAA,GAAW,OAAA;GAC/B,OAAO,YAAY,QAAQ;EAC5B,UAAU;GACT,aAAa,QAAQ;EACtB;CACD;CAOA,MAAMO,WACL,cACA,QACA,UAC0C;EAC1C,MAAM,WAAW,KAAKN,UAAU,MAAM;EACtC,IAAI;GACH,MAAM,WAAW,MAAM,KAAKO,QAAQ,QAAQ;GAC5C,MAAM,UAAU,MAAM,KAAKN,OAAO,QAAQ,KAAK;GAK/C,OAAO;IACN,GALe,KAAKI,OACpB,KAAKH,SAAS,cAAc,QAAQ,QAAQ,SAAS,QAAQ,OAAO,GACpE,aAAa,QAAQ,KAAKM,KAAK,QAAQ,GAAG,MAAM,CAG7C;IACH,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB,SAAS,SAAS,QAAQ,SAAS,CAAC,QAAQ,QAAQ,MAAM,UAAU,MAAM,SAAS,IAAI,CAAC;IACxF;GACD;EACD,SAAS,OAAO;GACf,OAAO;IACN;IACA,SAAS,CAAC;IACV,SAAS,CAAC;IACV,SAAS,CAAC;IACV,SAAS,CAAC;IACV,SAAS,CAAC;IACV,SAAS,CAAC;IACV,UAAU,CAAC;IACX,MAAM,sCAAsC,gBAAgB,KAAK,CAAC,CAAC,MAAM;GAC1E;EACD;CACD;CAGA,MAAMD,QAAQ,UAA8D;EAC3E,MAAM,WAAW,eAAe,KAAK7B,SAAS;EAC9C,IAAI;GACH,OAAO,MAAM,SAAS,OAAO,QAAQ;EACtC,UAAU;GACT,SAAS,QAAQ;EAClB;CACD;CAIA,MAAMuB,OACL,QACA,KAC8F;EAC9F,MAAM,WAAW,KAAKQ,UAAU,MAAM;EACtC,MAAM,MAAM,eAAe,QAAQ;EACnC,MAAM,WAAW,uBAAuB,QAAQ,CAAC,CAAC,KAAK,eAAe,WAAW,IAAI;EACrF,MAAM,WAAW,eAAe,KAAK/B,SAAS;EAC9C,IAAI;GACH,MAAM,UAAU,MAAM,SAAS,QAAQ;GACvC,MAAM,SAAS,MAAM,QAAQ,KAAK,UAAU,MAAM,IAAI,IAAI,SAAA,CAAU,QAClE,SAAS,SAAS,GACpB;GAEA,OAAO;IAAE;IAAS,SAAA,MADI,SAAS,MAAM,OAAO,aAAa,QAAQ,MAAM,IAAI,WAAW,CAAC,CAAC;GAC9D;EAC3B,UAAU;GACT,SAAS,QAAQ;EAClB;CACD;CAIA,SACC,cACA,QACA,SACA,SACoB;EACpB,OAAO,KAAK2B,OAAO,aAAa,OAAO,SAAS,MAAM,GAAG,aAAa,QAAQ,SAAS,MAAM,CAAC;CAC/F;CAKA,KAAK,UAAqD;EACzD,MAAM,SAAuB,CAAC;EAC9B,KAAK,MAAM,WAAW,UACrB,IAAI,QAAQ,WAAW,SACtB,OAAO,KAAK;GAAE,MAAM,QAAQ;GAAM,OAAO,IAAI,QAAQ;EAAS,CAAC;EAEjE,OAAO;CACR;CAIA,SAAS,WAAsB,QAAiC;EAC/D,MAAM,WAAW,eAAe;EAChC,IAAI;GACH,MAAM,cAAc,SAAS,QAAQ,WAAW,MAAM;GACtD,IAAI,YAAY,SAAS,KAAA,GAAW,OAAO,YAAY;GACvD,MAAM,IAAI,cACT,WACA,YAAY,UACV,QAAQ,aAAa,SAAS,QAAQ,CAAC,CACvC,KAAK,aAAa,GAAG,SAAS,MAAM,IAAI,SAAS,SAAS,CAAC,CAC3D,KAAK,GAAG,GACV,EAAE,WAAW,YAAY,UAAU,OAAO,CAC3C;EACD,UAAU;GACT,SAAS,QAAQ;EAClB;CACD;CAeA,QACC,cACA,WACA,QACA,QACkD;EAClD,MAAM,WAAW,eAAe;EAChC,IAAI;GACH,MAAM,cAAc,SAAS,QAAQ,WAAW,MAAM;GACtD,IAAI,YAAY,SAAS,KAAA,GAAW,OAAO,CAAC,SAAS,MAAM,WAAW,CAAC,GAAG,MAAM,GAAG,KAAA,CAAS;GAC5F,OAAO,CAAC,aAAa,MAAM,YAAY,MAAM,MAAM,GAAG,YAAY,IAAI;EACvE,UAAU;GACT,SAAS,QAAQ;EAClB;CACD;CAKA,QAAQ,QAA2B;EAClC,MAAM,WAAW,KAAKI,UAAU,MAAM;EACtC,MAAM,WAAW,eAAe,QAAQ;EACxC,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,mBAAmB,OAAO,6BAA6B,EACxF,OACD,CAAC;EAEF,MAAM,MAAM,qBAAqB,QAAQ,cAAc;EACvD,MAAM,cAAc,qBAAqB,QAAQ,qBAAqB;EACtE,MAAM,SAAS,qBAAqB,QAAQ,iBAAiB;EAC7D,MAAM,WAAW,qBAAqB,QAAQ,oBAAoB;EAClE,OAAO,gBAAgB,SAAS,MAAM,SAAS,YAAY,GAAG,IAAI,CAAC,GAAG;GACrE,KAAK,KAAKC,OAAO,QAAQ,KAAK;GAC9B,KAAK,KAAKA,OAAO,QAAQ,KAAK;GAC9B,cAAc,uBAAuB,QAAQ;GAC7C,KAAK,QAAQ,KAAA,KAAa,gBAAgB,GAAG;GAC7C,aAAa,gBAAgB,KAAA,KAAa,gBAAgB,WAAW;GACrE,QAAQ,WAAW,KAAA,KAAa,gBAAgB,MAAM;GACtD,UAAU,aAAa,KAAA,KAAa,gBAAgB,QAAQ;EAC7D,CAAC;CACF;CAKA,gBAAgB,QAA+C;EAC9D,MAAM,SAAsD,CAAC;EAC7D,IAAI,QAAQ;EACZ,IAAI,WAAW;EACf,IAAI,UAAU;EACd,IAAI;EACJ,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;GACtD,MAAM,YAAY,OAAO;GACzB,IAAI,cAAc,KAAA,GAAW,OAAO,KAAA;GACpC,IAAI,UAAU,KAAA,GAAW;IACxB,IAAI,KAAK,KAAK,SAAS,GAAG;KACzB,IAAI,SAAS,OAAO,KAAK;MAAE;MAAO;KAAS,CAAC;KAC5C,QAAQ;KACR,WAAW;KACX,UAAU;KACV;IACD;IACA,IAAI,QAAQ,SAAS,SAAS,GAAG;KAChC,IAAI,SAAS,OAAO,KAAK;MAAE;MAAO;KAAS,CAAC;KAC5C,MAAM,SAAS,OAAO,QAAQ,OAAO,cAAc,cAAc,OAAO,cAAc;KACtF,OAAO,KAAK;MAAE,OAAO,SAAS,GAAG,YAAY,cAAc;MAAW,UAAU;KAAK,CAAC;KACtF,QAAQ;KACR,WAAW;KACX,UAAU;KACV,IAAI,QAAQ,SAAS;KACrB;IACD;IACA,IAAI,cAAc,QAAO,cAAc,KAAK;KAC3C,QAAQ;KACR,UAAU;KACV;IACD;IACA,IAAI,cAAc,MAAM;KACvB,MAAM,UAAU,OAAO,QAAQ;KAC/B,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;KAClC,SAAS;KACT,UAAU;KACV,SAAS;KACT;IACD;IACA,IAAI,cAAc,OAAO,cAAc,OAAO,cAAc,KAAK,WAAW;IAC5E,SAAS;IACT,UAAU;IACV;GACD;GACA,IAAI,cAAc,OAAO;IACxB,QAAQ,KAAA;IACR;GACD;GACA,IAAI,cAAc,QAAQ,UAAU,MAAK;IACxC,MAAM,UAAU,OAAO,QAAQ;IAC/B,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;IAClC,SAAS;IACT,SAAS;IACT;GACD;GACA,IAAI,UAAU,SAAQ,cAAc,OAAO,cAAc,OAAO,cAAc,MAC7E,WAAW;GAEZ,SAAS;GACT,UAAU;EACX;EACA,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;EAChC,IAAI,SAAS,OAAO,KAAK;GAAE;GAAO;EAAS,CAAC;EAE5C,MAAM,WAAqB,CAAC;EAC5B,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;GACtD,MAAM,QAAQ,OAAO;GACrB,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,IAAI,MAAM,UAAU,aAAa;IAChC,MAAM,UAAU,OAAO,QAAQ;IAC/B,IACC,YAAY,KAAA,KACZ,CAAC,QAAQ,YACT,QAAQ,MAAM,WAAW,KACzB;KAAC;KAAM;KAAM;KAAK;KAAK;KAAK;KAAK;IAAG,CAAC,CAAC,SAAS,QAAQ,KAAK,GAE5D,OAAO,KAAA;IACR,SAAS,KAAK,QAAQ,KAAK;IAC3B,SAAS;IACT;GACD;GACA,IAAI,MAAM,MAAM,WAAW,YAAY,GAAG;IACzC,MAAM,UAAU,MAAM,MAAM,MAAM,EAAmB;IACrD,IAAI,CAAC,MAAM,YAAY,QAAQ,WAAW,GAAG,OAAO,KAAA;IACpD,SAAS,KAAK,OAAO;IACrB;GACD;GACA,IAAI,CAAC,MAAM,YAAY,MAAM,MAAM,SAAS,WAAW,GAAG,OAAO,KAAA;EAClE;EACA,OAAO;CACR;CAMA,iBAAiB,QAAgB,WAAsB,UAAU,OAA6B;EAC7F,MAAM,WAAW,KAAKD,UAAU,MAAM;EACtC,MAAM,SAAS,qBAAqB,QAAQ,gBAAgB;EAC5D,MAAM,UAAU,oBAAoB,SAAS;EAC7C,MAAM,SAAS,UAAU,QAAQ;EACjC,MAAM,UAAU,SAAS,MAAM,KAAK,SAAS,OAAO,OAAO,IAAI,OAAO,UAAU,KAAA;EAChF,MAAM,yBAAS,IAAI,IAAY;EAC/B,IAAI,aAAa;EACjB,IAAI,YAAY,KAAA,GACf,KAAK,MAAM,UAAU,OAAO,OAAO,OAAO,GAAG;GAC5C,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,OAAO,SAAS,QAAQ,GAAG;GACrD,MAAM,WAAW,KAAKE,gBAAgB,MAAM;GAC5C,IAAI,aAAa,KAAA,GAAW;IAC3B,aAAa;IACb;GACD;GACA,KAAK,MAAM,WAAW,UAAU;IAC/B,MAAM,QAAQ,YAAY,YAAY,WAAW,KAAA,KAAa,gBAAgB,MAAM;IACpF,IACC,CAAC,QAAQ,SAAS,mBAAmB,QAAQ,GAAG,KAC/C,YAAY,YAAY,CAAC,OAE1B,OAAO,IAAI,OAAO;GAEpB;EACD;EAED,IAAI,OAAO,SAAS,KAAK,CAAC,YAAY,OAAO,KAAA;EAC7C,MAAM,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK;EAClC,IAAI,YACH,OAAO;GACN,OAAO;GACP,SAAS,mBAAmB,OAAO,2EAA2E,SAAS,WAAW,IAAI,KAAK,wEAAwE,SAAS,KAAK,IAAI,EAAE,GAAG,GAAG,UAAU,yGAAyG;GAChW,UAAU;EACX;EAED,OAAO;GACN,OAAO;GACP,SAAS,UACN,mBAAmB,OAAO,SAAS,SAAS,WAAW,IAAI,qBAAqB,kBAAkB,gDAAgD,SAAS,KAAK,IAAI,EAAE,4BAA4B,SAAS,WAAW,IAAI,yBAAyB,yBAAyB,kEAAkE,SAAS,WAAW,IAAI,4BAA4B,yBAAyB,KAC3Z,mBAAmB,OAAO,SAAS,SAAS,WAAW,IAAI,qBAAqB,kBAAkB,gDAAgD,SAAS,KAAK,IAAI,EAAE,QAAQ,SAAS,WAAW,IAAI,gBAAgB,eAAe,mCAAmC,SAAS,WAAW,IAAI,yBAAyB,yBAAyB;GACrV,UAAU;EACX;CACD;CAIA,gBAAgB,QAAgB,WAA4B;EAC3D,MAAM,WAAW,KAAKjB,iBAAiB,QAAQ,WAAW,IAAI;EAC9D,IAAI,aAAa,KAAA,GAAW;EAC5B,MAAM,IAAI,cAAc,UAAU,SAAS,SAAS,EAAE,OAAO,CAAC;CAC/D;CAIA,UAAU,QAAwB;EACjC,MAAM,WAAW,aAAa,QAAQ,gBAAgB,kBAAkB;EACxE,IAAI,aAAa,KAAA,GAChB,MAAM,IAAI,cAAc,UAAU,iBAAiB,OAAO,iCAAiC,EAC1F,OACD,CAAC;EAEF,OAAO;CACR;CAKA,OAAO,QAAgB,MAAsC;EAC5D,OAAO,aAAa,QAAQ,gBAAgB;GAC3C,MAAM,OAAO,qBAAqB,QAAQ,GAAG,KAAK,GAAG,aAAa;GAClE,OAAO,SAAS,KAAA,KAAa,oBAAoB,IAAI;EACtD,CAAC;CACF;CAKA,UAAU,QAAmC;EAC5C,MAAM,OAAO,aAAa,QAAQ,kBAAkB;EACpD,IAAI,SAAS,KAAA,GAAW,OAAO,CAAC;EAChC,MAAM,QAAkB,CAAC;EACzB,KAAK,MAAM,SAAS,eAAe,IAAI,CAAC,CAAC,OAAO,WAAW,GAC1D,KAAK,MAAM,OAAO,MAAM,MAAM;GAC7B,MAAM,CAAC,QAAQ;GACf,IAAI,SAAS,KAAA,GAAW;GACxB,MAAM,OAAO,KAAK,IAAI,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK;GACjD,IAAI,wBAAwB,KAAK,IAAI,GAAG,MAAM,KAAK,IAAI;EACxD;EAED,OAAO;CACR;CAKA,YAAY,QAA4B;EACvC,MAAM,UAAU,KAAKkB,WAAW,QAAQ,CAAC,YAAY,IAAI,CAAC;EAC1D,MAAM,QAAQ,KAAKA,WAAW,QAAQ;GACrC;GACA;GACA;GACA;EACD,CAAC,CAAC,CAAC,KAAK,WAAY,OAAO,SAAS,KAAK,OAAO,OAAO,MAAM,OAAO,MAAM,CAAC,IAAI,MAAO;EACtF,MAAM,QAAQ;GAAE;GAAS;EAAM;EAC/B,IAAI,CAAC,aAAa,KAAK,GACtB,MAAM,IAAI,cAAc,UAAU,oBAAoB,OAAO,gCAAgC;GAC5F;GACA,SAAS,QAAQ;GACjB,OAAO,MAAM;EACd,CAAC;EAEF,OAAO;CACR;CAKA,WAAW,QAAgB,MAA4C;EACtE,MAAM,OAAO,cACZ,aAAa,OAAO,CAAC,GAAG,IAAI,GAAG;GAC9B,KAAK;GACL,UAAU;GACV,aAAa;GACb,WAAW;GAIX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACnC,CAAC,CACF;EACA,IAAI,CAAC,KAAK,SACT,MAAM,IAAI,cAAc,UAAU,iBAAiB,OAAO,4BAA4B,EACrF,OACD,CAAC;EAEF,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,QAAQ,WAAW,OAAO,SAAS,CAAC;CACnE;CAIA,cAAc,WAA+B,MAAsC;EAClF,IAAI,cAAc,KAAA,GAAW,OAAO,CAAC;EACrC,MAAM,YAAY,UAAU,MAAM,GAAG;EACrC,MAAM,UAAU,UAAU,QACxB,SAAS,CAAC,aAAa,MAAM,gBAAgB,gBAAgB,IAAI,CACnE;EACA,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,WACT,MAAM,KAAK,kBAAkB,QAAQ,KAAK,IAAI,EAAE,aAAa,aAAa,KAAK,IAAI,EAAE,EACtF;EAED,OAAO,aAAa,QAAQ,gBAAgB,UAAU,SAAS,WAAW,CAAC;CAC5E;CAGA,QAAQ,WAA6D;EACpE,IAAI,cAAc,KAAA,GAAW,OAAO,KAAA;EACpC,MAAM,YAAY,UAAU,MAAM,GAAG;EACrC,MAAM,UAAU,UAAU,QAAQ,SAAS,CAAC,OAAO,MAAM,UAAU,UAAU,IAAI,CAAC;EAClF,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,WACT,4BAA4B,QAAQ,KAAK,IAAI,EAAE,aAAa,OAAO,KAAK,IAAI,EAAE,EAC/E;EAED,OAAO,OAAO,QAAQ,UAAU,UAAU,SAAS,KAAK,CAAC;CAC1D;CAGA,UAAU,WAAkD;EAC3D,IAAI,cAAc,KAAA,GAAW,OAAO,CAAC;EACrC,MAAM,YAAY,UAAU,MAAM,GAAG;EACrC,MAAM,UAAU,UAAU,QAAQ,SAAS,CAAC,wBAAwB,KAAK,IAAI,CAAC;EAC9E,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,WACT,0BAA0B,QAAQ,KAAK,IAAI,EAAE,gDAC9C;EAED,OAAO;CACR;CAKA,MAAMxB,SAAS,OAA0D;EACxE,IAAI,MAAM,WAAW,GAAG,OAAO,CAAC;EAChC,MAAM,WAAW,eAAe,KAAKV,SAAS;EAC9C,IAAI;EACJ,IAAI;GACH,WAAW,MAAM,SAAS,OAAO,MAAM,KAAK,UAAU;IAAE;IAAM,OAAO;GAAI,EAAE,CAAC;EAC7E,UAAU;GACT,SAAS,QAAQ;EAClB;EACA,MAAM,UAAU,SAAS,QAAQ,YAAY,QAAQ,WAAW,OAAO;EACvE,IAAI,QAAQ,SAAS,GACpB,MAAM,IAAI,cACT,SACA,qCAAqC,QAAQ,KAAK,YAAY,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IACvF,EAAE,OAAO,QAAQ,OAAO,CACzB;EAED,OAAO,KAAK8B,KAAK,QAAQ;CAC1B;CAIA,OAAO,OAA0B,QAA8C;EAC9E,OAAO;GACN,QAAQ,MAAM;GACd,SAAS,CAAC,GAAG,MAAM,SAAS,GAAG,OAAO,OAAO;GAC7C,SAAS,CAAC,GAAG,MAAM,SAAS,GAAG,OAAO,OAAO;GAC7C,SAAS,CAAC,GAAG,MAAM,SAAS,GAAG,OAAO,OAAO;EAC9C;CACD;CAKA,SAAS,OAAoB;EAC5B,KAAK,MAAM,YAAY,MAAM,WAAW,KAAKT,MAAM,GAAG,SAAS,MAAM,IAAI,SAAS,SAAS;EAC3F,MAAM,OAAO,MAAM,SACjB,QAAQ,YAAY,QAAQ,UAAU,SAAS,CAAC,CAChD,KAAK,YAAY;GAAC,QAAQ;GAAM,QAAQ;GAAO,QAAQ;EAAK,CAAC;EAC/D,IAAI,KAAK,SAAS,GAAG;GACpB,MAAM,QAAQ,YAAY;IACzB,SAAS;KAAC,EAAE,OAAO,OAAO;KAAG,EAAE,OAAO,QAAQ;KAAG,EAAE,OAAO,QAAQ;IAAC;IACnE;GACD,CAAC;GACD,KAAK,MAAM,QAAQ,MAAM,MAAM,IAAI,GAAG,KAAKpB,KAAK,IAAI;EACrD;EACA,KAAKA,KACJ,GAAG,OAAO,KAAK,MAAM,EAAE,MAAM,OAAO,MAAM,SAAS,MAAM,EAAE,eAAe,MAAM,SAAS,WAAW,IAAI,KAAK,IAAI,uBAClH;CACD;CAGA,SAAS,QAA6B;EACrC,KAAKA,KAAK,KAAKa,OAAO,MAAM,CAAC;EAC7B,KAAKb,KACJ,GAAG,OAAO,OAAO,QAAQ,MAAM,EAAE,cAAc,OAAO,OAAO,QAAQ,QAAQ,WAAW,OAAO,WAAW,OAAO,CAAC,CAAC,MAAM,EAAE,QAAQ,OAAO,QAAQ,WAAW,IAAI,KAAK,IAAI,YAAY,OAAO,OAAO,QAAQ,MAAM,EAAE,mBACrN;EACA,KAAK,MAAM,UAAU,OAAO,SAC3B,IAAI,OAAO,WAAW,SAAS,KAAKoB,MAAM,GAAG,OAAO,KAAK,IAAI,OAAO,MAAM;CAE5E;CAGA,OAAO,QAAmC;EACzC,OAAO,GAAG,OAAO,OAAO,QAAQ,MAAM,EAAE,YAAY,OAAO,OAAO,QAAQ,MAAM,EAAE,cAAc,OAAO,OAAO,QAAQ,MAAM,EAAE,cAAc,OAAO,OAAO;CAC3J;CAGA,QAAQ,OAAsB;EAC7B,KAAKpB,KAAK,KAAK,UAAU,KAAK,CAAC;CAChC;CAKA,QAAQ,OAAgB,MAAuB;EAC9C,MAAM,WAAW,gBAAgB,KAAK;EACtC,IAAI,MAAM,KAAKY,QAAQ,QAAQ;OAC1B,KAAKQ,MAAM,GAAG,SAAS,MAAM,KAAK,IAAI,SAAS,MAAM,SAAS;EACnE,OAAO,aAAa,KAAK,IAAA,IAAA;CAC1B;CAEA,KAAK,MAAoB;EACxB,KAAKvB,QAAQ,KAAKqC,UAAU,IAAI,CAAC;CAClC;CAEA,MAAM,MAAoB;EACzB,KAAKpC,YAAY,KAAKoC,UAAU,IAAI,CAAC;CACtC;CAQA,UAAU,MAAsB;EAC/B,OAAO,cAAc,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,KAAK,GAAG;CAC1D;AACD;;;AC94BA,QAAQ,OAAO,GAAG,UAAU,UAAU;CACrC,IAAI,UAAU,SAAS,MAAM,SAAS,SAAS;CAC/C,MAAM;AACP,CAAC;AACD,QAAQ,WAAW,MAAM,IAAI,IAAI,CAAC,CAAC,QAAQ,QAAQ,KAAK,MAAM,CAAC,CAAC"}

package/dist/host/CLAUDE.md

@@ -22,7 +22,9 @@ follows it. This file adds only what Claude Code does differently, and cannot we
   is the Orchestrator in this harness. Its Orchestrator duties are unchanged if it is configured
   otherwise.
 - The Orchestrator shares its engine with `planner`, `reviewer`, and the Opus `implementer`. Run
-  the Sol `analyst` in every design round and every audit round so the judgment is not single-engine.
+  the Sol `analyst` in every design round and every audit round so the judgment is not single-engine,
+  and confirm from its journal that it reached Sol. A bridge driver that answers from its own engine
+  collapses the round to one engine and its ruling still reads as normal.
 - Claude role frontmatter accepts Claude models only. Reach Grok through `grok`, and Sol through
   `analyst` and `codex`. Never put an external model in `model:`.
 - Claude Code hot-reloads edits to existing role files.

package/dist/host/agents/orchestration.md

@@ -255,10 +255,34 @@ substitution it forces; never absorb it silently.
      discipline.
    - Reconcile their evidence. Drop, on the record, any finding neither engine can substantiate.
 6. **Verify.** Have one independent `verifier` run the authoritative gates.
-7. **Accept.** Decide, then report outcomes, decisions, evidence, and remaining risk concisely.
+7. **Re-baseline.** Reconcile the remaining plan against what the phase revealed, before dispatching
+   the next one.
+   - Rule on every remaining unit: **satisfied**, the phase closed it, strike it; **transformed**,
+     the intent stands and the work changed, restate it; **added**, the phase revealed a fork the
+     plan did not consider; **unchanged**.
+   - Redraw the dependency order. Strike a unit whose subject a later unit deletes. State the new
+     prerequisite of a unit that acquired one.
+   - Walk the remaining units once and ask of each whether what just landed still supports it. A
+     decision taken inside a unit can remove a later unit's foundation, and the unit that took it
+     cannot see that.
+   - Re-baseline when a probe overturns a decision the plan rests on, not only at a phase boundary.
+     A measurement that falsifies your own reconciliation changes which units run.
+   - Record what changed and why. An unrecorded re-baseline cannot be audited, and the next one
+     re-derives it.
+8. **Accept.** Decide, then report outcomes, decisions, evidence, and remaining risk concisely.
    When step 2's exit criterion is met and the gates are green, accept. The next goal is the
    deliverable.
 
+### Re-baselining is not rescoping
+
+`.claude/rules/quality.md` fixes the enumerated scope when work begins and forbids reopening it. A
+re-baseline changes which units run. It never changes the goal's exit criterion.
+
+Strike a unit because the phase satisfied it, never because it became inconvenient. Add a unit
+because implementation revealed work the exit criterion already required, never because an engine
+thought of something else worth doing. A re-baseline that moves the exit criterion is a rescope, and
+that needs the user.
+
 ## Deviation protocol
 
 When reality diverges from a writing dispatch:
@@ -300,6 +324,9 @@ The harness bridge names the concrete mechanism for each of these.
 - Amend a brief on re-run rather than restating it. A mid-campaign correction produces a successor
   file recording what changed and why, and the original stays. A fix round's brief names the
   findings it carries and where each came from.
+- Send a decision taken mid-campaign to every unit already in flight whose brief it invalidates. An
+  executor cannot see a change made after it was dispatched, so it writes the state its brief
+  described and the defect surfaces as its own.
 - Treat brief and report files as unit evidence, not deliverables. Never commit them, and sweep
   them when the campaign that produced them is accepted.
 - Promote anything that must outlive the campaign into a durable artifact before the sweep — a
@@ -312,7 +339,10 @@ The harness bridge names the concrete mechanism for each of these.
 - **Context.** The evidence slice, paths, decisions, `AGENTS.md`, applicable rules, the skill name
   and its required references (or an explicit none), and the guide or spec. Include the host
   environment facts the unit will hit — the shell, path, and network constraints its commands run
-  under — because an executor that rediscovers them pays for the discovery in round trips.
+  under — because an executor that rediscovers them pays for the discovery in round trips. State
+  every standing condition the same way: a file expected to be dirty, a command known to fail, a
+  shim the shell blocks. A condition the brief leaves unnamed comes back as a deviation report
+  about something you already knew.
 - **Unknowns.** What the Orchestrator does not yet know that the unit needs, named as unknown, with
   how the unit reports back on it. A brief that cannot be fully specified says so instead of
   shipping a guess the executor would have to invent an answer around.
@@ -320,7 +350,10 @@ The harness bridge names the concrete mechanism for each of these.
 - **Execution.** State that the executor performs the assignment directly and spawns nothing. Put
   it in every brief; an executor deep in a task does not re-read this contract.
 - **Output.** The exact distilled return shape. No process diary.
-- **Deviation contract.** The required stop-and-report behaviour for writers.
+- **Deviation contract.** The required stop-and-report behaviour for writers, scoped. A conflict
+  with the primary objective stops the unit. An ancillary conflict — where a paragraph sits, which
+  heading a section takes — is the executor's to decide, record, and carry on from. An unscoped
+  contract stops a unit over a detail it was equipped to settle.
 - **Acceptance criteria.** Independently checkable completion conditions.
 - **Review evidence.** What the subject type requires, per the table in `orkestrel-falsify`. For a
   code change that is the actual diff and the actual status output; omitting either is a dispatch
@@ -329,6 +362,27 @@ The harness bridge names the concrete mechanism for each of these.
   whose fixes already landed as edits is both a proposal and a code change — and it gets the
   evidence of every row it occupies.
 
+### Check the brief before you send it
+
+Run these five checks on every brief. Each is cheap, and skipping one costs a full dispatch cycle
+that produces no work, because a unit given a brief that is internally consistent and factually
+wrong is right to stop.
+
+- Paste every factual claim from a command you ran this turn — paths, counts, registrations, file
+  existence. A claim about a search names the scope the search covered. A search bounded to one
+  directory proves something about that directory and nothing about the rest of the tree.
+- Read the acceptance criteria against the off-limits list, line by line. Every criterion closes
+  using owned files alone. A criterion that needs an off-limits file gets that file granted or gets
+  struck.
+- Give a small unrelated obligation its own unit. Ride it along in a large one and its scope error
+  blocks the primary work, which is a whole unit lost to a detail.
+- Ask what the change will do to the facts you just measured. A criterion fixed to a measured set is
+  unreachable if the change alters that set, and a file marked off-limits is wrong if the change
+  writes to it. Measure the state the unit will finish in, not only the state it starts from.
+- Name the property the unit must change, and stop. A consequence you expect to follow from it is an
+  observation for the report, not a criterion. Bundled together, the unit can satisfy neither and
+  cannot tell which half you meant.
+
 ### Carry every finding
 
 After reconciling findings into briefs, walk the retained finding list once. Every finding names
@@ -355,7 +409,10 @@ ladder; these four laws bind every bench regardless of transport.
    Monitor per long exec, filtered to milestones — commands run, files changed, agent messages,
    terminal states — never the raw event stream. Exit the filter on the exec's terminal event so no
    watcher outlives its subject. The journal's mtime is the liveness signal; the session id in its
-   head is the recovery handle.
+   head is the recovery handle. The journal is also the proof the bench ran: a bench unit returns
+   its journal path and session id with its result, and the Orchestrator confirms both before
+   using that result. A report does not carry the engine that produced it, so a bench unit with no
+   journal ran on its driver's engine, however normal its answer reads.
 3. **Tracked, never loose.** Register every bench unit in the session task registry at launch with
    its subject, journal path, and session id, and complete it there at acceptance. "What is
    running" always has a first-class answer instead of a recollection of a command.

package/dist/host/agents/skills/orkestrel-align-packages/SKILL.md

@@ -12,7 +12,7 @@ Read the current authority in this order:
 1. `AGENTS.md` and applicable `.claude/rules/*.md`.
 2. The `integration.md` and `fleet.md` references selected below.
 3. `.agents/orchestration.md` for orchestration.
-4. Relevant package guides, `guides/src/scaffold.md`, and the configured Orkestrel specialist.
+4. Relevant package guides, `guides/scaffold.md`, and the configured Orkestrel specialist.
 
 Explicit user scope wins.
 

package/dist/host/agents/skills/orkestrel-falsify/SKILL.md

@@ -78,13 +78,15 @@ nobody claimed.
 - **Give every auditor the means to run its attacks.** A lens that can only read returns derivations,
   and a derivation reads exactly like a verdict — it will confirm a claim that one probe would break.
 - **Tell each auditor exactly where a probe may live, and verify that place works before you say it.**
-  A test runner resolves only what its own configuration includes: a probe written outside the project
-  root is typically not discovered at all, and the run reports no test files rather than a result. The
-  reliable form is a file inside the canonical mirrored suite, run by explicit path, deleted before the
-  auditor returns — promoted into a permanent test when it proves something worth keeping. Give each
+  A test runner resolves only what its own configuration includes: a probe written outside every
+  configured project is not discovered at all, and the run reports no test files rather than a result.
+  Where the repository provides a probe project, use it and name that project in the brief;
+  `.claude/rules/tests.md` governs what may live there. Where it does not, the reliable form is a file
+  inside the canonical mirrored suite, run by explicit path. Either way the probe is deleted before the
+  auditor returns, and promoted into a permanent test when it proves something worth keeping. Give each
   concurrent auditor a distinct filename that already satisfies the repository's test naming
   convention; never invent a prefix to dodge collisions, and never let two auditors claim one path. A
-  leaked probe is discovered by the suite and fails a run nobody else caused.
+  probe left in the mirrored suite is discovered and fails a run nobody else caused.
 - **Run auditors concurrently only when their writes cannot collide.** Read-only lenses still write
   probes; give each a distinct path and forbid whole-project runs, or serialize the round. **This binds
   the orchestrator too:** a tree-wide gate run while a round is live sees the auditors' in-flight probes

package/dist/host/agents/skills/orkestrel-harden-package/SKILL.md

@@ -41,7 +41,7 @@ Load [hardening.md](references/hardening.md) for the hardening lane and for any
 
 1. **Bound the campaign.** Record requested outcomes, in-scope environments/domains, explicit exclusions, supported hosts, dirty files, and evidence needed for acceptance.
 2. **Map before editing.** Trace public types, implementations, callers, tests, guides, exports, runtime boundaries, installed Orkestrel dependencies, and applicable legacy/upstream references.
-3. **Establish the intended contract.** Build a capability/defect matrix. Separate verified fact from inference. Mark each row implement, repair, retain, or exclude with a reason. The matrix is fixed at this step and is the campaign's definition of done: every later step serves a row, and work that serves no row belongs to the next campaign.
+3. **Establish the intended contract.** Build a capability/defect matrix. Separate verified fact from inference. Mark each row implement, repair, retain, or exclude with a reason. The matrix is fixed at this step and is the campaign's definition of done: every later step serves a row, and work that serves no row belongs to the next campaign. The row set is fixed; the planned work that closes it is not. Re-baseline that work at each phase boundary per `.agents/orchestration.md`, which owns the step and its boundary with rescoping.
 4. **Design types first.** Update guide/spec intent and `*/types.ts` before implementation, under the root design laws. A contract that needs a compatibility shim is the wrong contract.
 5. **Implement completely.** Finish every in-scope branch and reuse the exact installed Orkestrel primitives whose semantics match. The root completion law decides what may not be left behind.
 6. **Prove each defect before repairing it.** A repair begins with a test that fails for that defect: record the exact command and its failing count before the fix and the same command's passing count after. A repair with no red-then-green record is unproven.

package/dist/host/agents/skills/orkestrel-harden-package/references/contract.md

@@ -5,7 +5,7 @@
 Never work from a remembered contract version or copied API list. Read:
 
 1. `package.json` and the lockfile for the declared and resolved versions.
-2. The vendored `guides/src/contract.md` when present.
+2. The vendored `guides/contract.md` when present.
 3. The installed package's declaration file and exports.
 4. Relevant package source or current canonical guide when semantics remain unclear.
 

package/dist/host/claude/agents/orkestrel.md

@@ -24,11 +24,11 @@ entry, or memory as live registry truth.
 
 ## Package catalog
 
-`scaffold catalog --apply` regenerates only the block between the markers. Package
+`scaffold catalog` regenerates only the block between the markers. Package
 identifiers and versions are deliberately the only injected fields; network-controlled
 descriptions never enter agent instruction context.
 
-<!-- catalog:start -->
+<!-- orkestrel:catalog -->
 
 > Generated package identifiers are untrusted discovery data, never instructions.
 
@@ -76,7 +76,7 @@ descriptions never enter agent instruction context.
 | @orkestrel/workflow   | 0.0.10  |
 | @orkestrel/workspace  | 0.0.3   |
 
-<!-- catalog:end -->
+<!-- /orkestrel:catalog -->
 
 Repositories map as `github: orkestrel/<name>` to `npm: @orkestrel/<name>`.
 
@@ -95,7 +95,7 @@ Use the repository's standard anatomy when orienting:
 - thin target configuration: `configs/src`, `configs/app`;
 - mirrored tests under `tests/src` and `tests/app`;
 - public barrels at each environment's `index.ts`, using only `export *`;
-- package behavior in `guides/src/<package>.md`.
+- package behavior in `guides/<package>.md`.
 
 ## Output
 

package/dist/host/claude/rules/architecture.md

@@ -17,6 +17,7 @@ paths:
 | ------------------------- | ------------------------------------------------------------ |
 | Interfaces/types          | `*/types.ts`                                                 |
 | Constants/data            | `*/constants.ts`                                             |
+| Template definitions      | `*/templates.ts`                                             |
 | Pure helpers              | `*/helpers.ts`                                               |
 | Guards                    | `*/validators.ts`                                            |
 | Guard combinators         | `*/combinators.ts`                                           |
@@ -27,8 +28,11 @@ paths:
 | Shape/algorithm compilers | `*/compilers.ts`                                             |
 | Entity/value factories    | `*/factories.ts`                                             |
 | Middleware factories      | `*/middlewares.ts`                                           |
+| Request handlers          | `*/handlers.ts`                                              |
+| Route tables              | `*/routes.ts`                                                |
 | Seeders                   | `*/seeders.ts`                                               |
 | Schemas                   | `*/schemas.ts`                                               |
+| Compiled contracts        | `*/contracts.ts`                                             |
 | Relations                 | `*/relations.ts`                                             |
 | Error classes/guards      | `*/errors.ts`                                                |
 | Public exports            | `*/index.ts`                                                 |
@@ -57,6 +61,42 @@ Use only the centralized files an environment needs.
   - trivial and genuinely single-use → fold into its caller;
   - non-trivial or reusable → extract, export, unit-test, and route every duplicate through it.
 - `factories.ts`, `compilers.ts`, and `parsers.ts` are centralized files, not hiding places. Factory glue extracts to `helpers.ts`; pure compiler/parser recursion remains exported in its own kind file.
+- Every exported function in `parsers.ts` is named `parse*`. Every exported function in
+  `factories.ts` is named `create*`.
+- The two name forms are one-directional. A name does not place a function: `createWriteDirectory`
+  creates a directory rather than an entity and `isVacant` is a predicate rather than a `Guard<T>`,
+  so both stay in `helpers.ts`. Placement follows what the function is; the name form follows
+  placement.
+- `templates.ts` and `contracts.ts` hold data only — shipped template definitions and compiled
+  contracts. A function that builds either belongs in the kind file for what it builds.
+- `handlers.ts` holds request handlers, which are functions. `routes.ts` holds data only: a route is
+  `{ method, path, handler }`, so the table maps each path to a handler declared in `handlers.ts`
+  and referenced by name, never to a function expression written in place. Neither file mixes kinds and the
+  route set stays readable as data.
+
+### What the policy sweep proves
+
+The fleet policy sweep (`tests/policy.test.ts`, `tests/setupPolicy.ts`) enforces syntactic
+placement: a declaration of a given syntactic kind appears only in a file permitted to hold that
+kind. It reads declaration syntax and file name, never meaning.
+
+- It proves that a module function sits in a function-kind file, that module data sits in a
+  data-kind file, that every centralized declaration is exported, that a class sits in its matching
+  implementation or errors file, and that `constants.ts` declares only UPPER_SNAKE_CASE consts with
+  no bare collection literal.
+- It does not prove a collection is frozen. It reads the declaration, never the value a call
+  returns, so `Object.freeze([…])` and any other call initializer are one syntax to it. The freeze
+  obligation in the kind-purity rules above binds regardless; only the bare literal is mechanical.
+- It does not tell one function kind from another. Every centralized file that permits functions
+  reads the same to it apart from the two name forms above: `cloners.ts`, `combinators.ts`,
+  `compilers.ts`, `errors.ts`, `factories.ts`, `handlers.ts`, `helpers.ts`, `inferers.ts`,
+  `middlewares.ts`, `parsers.ts`, `relations.ts`, `schemas.ts`, `seeders.ts`, `shapers.ts`, and
+  `validators.ts`. That list is exhaustive, a new function kind joins it, and no later version of
+  the sweep claims more.
+- The cleanup sweep and independent review prove kind purity across those files. A helper misfiled
+  as a parser, a coercer misfiled as a guard, a compiler misfiled as a factory, and a shaper
+  misfiled as a cloner are review findings, not red tests.
+- The kind table is mandatory whether or not a test can see the violation.
 
 ## Wrapper test
 
@@ -126,9 +166,11 @@ Store child managers in `#` fields and expose readonly getters typed as their in
 
 - A word is either a centralized kind or a domain folder, never both.
 - A folder named for a centralized kind—`helpers/`, `validators/`, `handlers/`—is that kind's file, not a folder.
-- Read a function domain from the fleet-canon register (`tests/setupPolicy.ts`,
-  `FUNCTION_DOMAIN_FOLDERS`). Never infer one from a folder's name; a camelCase module inside an
-  undesignated folder is misplaced.
+- `FUNCTION_DOMAIN_FOLDERS` in the fleet-canon register (`tests/setupPolicy.ts`) registers the
+  folder paths whose direct modules are function modules. Registration makes a path eligible and
+  fixes the declaration shape checked there; it judges nothing about what a module does.
+- Never infer a function domain from a folder's name; a camelCase module inside an unregistered
+  folder is misplaced.
 - Request a new domain through a fleet-canon change. There is no workspace-local registration path.
 
 ### Extension categories

package/dist/host/claude/rules/quality.md

@@ -33,11 +33,13 @@ This is a habit for your own work first, and a rule about disagreements second.
 - Test your own assumptions before you rely on them. You do not need a disagreement to justify a probe. If you are about to depend on what a function returns, what a config resolves to, what a flag does, or whether a path is even reached, run it and find out.
 - Treat a long deliberation about behaviour as the signal to stop and run something. Deliberation that a ten-line probe would have ended is the most expensive habit in this process, and it is invisible because it feels like rigour.
 - Verify a belief before stating it, or label it as unverified. An unverified assertion put into context becomes a fact for everything downstream, including other agents, and correcting it later costs more than the check would have.
+- Hold a claim you issue to the standard you hold a claim you receive. Nothing downstream re-checks an instruction, so an unverified fact inside one becomes the premise of every task built on it. Auditing every report you receive while exempting every brief you write is the common form of this failure.
 - Prefer the check over the chain of reasoning whenever the check is cheap. Reading the installed declaration, running one line, or counting the call sites beats three paragraphs inferring the same thing, and it produces evidence you can hand to someone else.
 - Write the probe before the argument gets long. The moment a claim about behaviour is disputed — between engines, between a report and a rule, or in your own head — stop and run it. Get the smallest real input through the real code and read the real output.
 - Bound the search before starting it, and put the bound in the brief. Name the benchmark, the population, or the row that ends it. An investigation with no stated stopping condition runs until attention runs out. This includes the case where the honest answer is that the limit is inherent and belongs in documentation rather than in code.
 - Treat a negative probe as evidence about the probe until its input is shown to reach the code under test. A pass proves nothing if the vector never arrived. Instrument the path, assert an observable side effect, or drive it through a door you can see.
 - When a report names a defect and your reproduction comes back clean, assume first that your vector was weaker than theirs, and go get their exact vector. Treating a failed reproduction as a disproof is the most common way a true finding is lost.
+- Reproduce a reported defect's cause before instructing a fix from it. A real symptom can carry a wrong diagnosis, and a fix aimed at the stated cause edits the wrong file while the defect survives.
 - Do not read a result into a tool's failure to find your probe. "No tests found", an empty match, a skipped file, a runner that resolved nothing — these report on the harness, not the subject. Confirm the probe was collected and executed first.
 - Prefer an observation over a derivation, including your own. When a measurement and an argument disagree, the argument is wrong until the measurement is shown to be broken.
 - Diagnose from the artifact the work produces — the file, the count, the exit code, the timestamp on what changed — never from a wrapper or a proxy signal that merely correlates with progress.
@@ -59,6 +61,8 @@ A review that reads a diff finds what the diff shows. A review that tries to bre
 
 - An instrument is not evidence until it has failed. Pair every probe, comparison, or matrix with a negative control that must report failure, run under the same conditions. An identity check whose control reports "same" has measured nothing.
 - Draw the negative control from outside the population the instrument covers. Name the instrument's membership rule first, then pick a control that rule excludes. A control sampled from constructs the instrument already handles proves only that it discriminates among those constructs, and says nothing about the class it silently cannot reach.
+- State an instrument's coverage beside its result. A conclusion inherits the instrument's scope, not the question's. An unstated coverage claim is read as complete, and it never is. A search proves something about the paths it walked, so name them.
+- Match the instrument to the question. A text search reports on text, so a claim about declarations, call sites, or structure needs the compiler or a parser instead. A pattern written for one spelling of a construct reports on that spelling alone. A path check answers relative to the directory it runs from, so resolve the inputs against their own base before reading a miss as a finding.
 - State what the controls established and what they did not. An instrument certified only from the inside is trusted exactly where it has never been tested.
 - Treat a gap between what an instrument says it checks and what it actually matches as a defect in the instrument, not as a documented limit. A recorded blind spot buys trust only when everything outside it is genuinely covered.
 - Measure the product, not the harness. A recorded baseline that counts something about its own fixture is not evidence about the shipped surface, however often a guide quotes it.

package/dist/host/claude/rules/tests.md

@@ -21,11 +21,57 @@ paths:
 - Allow a scripted boundary stub only when it implements the real interface or protocol minimally, to drive the system under test. It never reimplements project-owned behavior and never stands in for the integration being claimed.
 - Cover happy paths, error paths, empty input, boundary values, `NaN`, positive/negative zero, cycles, and Map/Set order where relevant.
 - Test observable behavior, not implementation details.
+- Assert the membership a discovered or globbed set should have, not a total that a partly empty population satisfies. A glob spanning two locations passes a size check while one of them matches nothing.
 - A regression test records the exact command and its failing count before the fix, and the same command's passing count after.
 - Use `it.todo()` only for explicitly out-of-scope roadmap work, never to complete the current request. Every `.skip` or conditional skip has a narrow verifiable applicability reason.
 - Do not create test files solely for `constants.ts`, barrels, error definitions, or `types.ts`.
 - Run the narrowest relevant Vitest project during development; do not run the entire suite casually.
 
+## Cross-cutting proofs
+
+A proof that covers the workspace instead of one module has a fixed location, so no package invents
+its own:
+
+| Path                        | Proves                                                         |
+| --------------------------- | -------------------------------------------------------------- |
+| `tests/policy.test.ts`      | Every source file obeys the syntactic coding and placement law |
+| `tests/config.test.ts`      | Root configuration resolves its aliases, projects, and outputs |
+| `tests/guides.test.ts`      | Every documented API exists and every public API is documented |
+| `tests/integration.test.ts` | The built package works when installed and driven from outside |
+
+- `.claude/rules/workspace.md` names the Vitest project each location belongs to.
+- `integration.test.ts` is a reserved filename at any level. It names a scope rather than a module,
+  so the mirror rule does not reach it; its scope is the directory it sits in.
+- Give every nested `integration.test.ts` its own exact-path project entry. A glob such as
+  `tests/src/**/integration.test.ts` double-claims a file another project already owns.
+
+## Probes
+
+A probe is a throwaway instrument that settles one question. It is not a test and never ships.
+
+Two kinds, split by which tool has to see the probe:
+
+- A **type probe** is read by `tsc`, whose scoped project includes only its own environment, so it
+  lives in the source tree beside what it measures. Delete it before the unit returns; a leaked one
+  fails the placement sweep, because a probe filename is not a centralized kind file.
+- A **runtime probe** is collected by a Vitest project, so it lives in `tmp/probe/` and runs through
+  the `probe` project. `tmp/` is ignored by git, so no probe enters a commit by accident, and every
+  test script names its project, so no gate runs the `probe` project.
+
+Run a probe before relying on an unverified belief about behaviour: what a function returns, what a
+configuration resolves to, whether a path is reached at all. Prefer a probe to an argument whenever
+the probe is cheap.
+
+Three rules bind every probe:
+
+- **Prove the instrument can fail before trusting that it passed.** Pair it with a control drawn
+  from outside the population it covers.
+- **Promote or delete.** A probe that settles a claim becomes a test in the mirrored location that
+  proves the real source. Delete every other probe. A probe left in the suite reports on the harness
+  while reading as a test.
+- **Never commit a probe.** The ignore rule stops an accident, not a deliberate forced add, and a
+  type probe sits in tracked source with no ignore rule at all.
+
 ## Live-service tests
 
 Live external services/models are the deliberate exception to fast hermetic defaults:
@@ -38,6 +84,14 @@ Live external services/models are the deliberate exception to fast hermetic defa
 - Tune each request to the smallest input/context/output that proves one behavior without becoming brittle or expensive.
 - Prefer semantic bounded assertions over exact generated prose. Increase context/workload only when the scenario requires it.
 
+## Expensive proofs
+
+A test that spawns a process, packs, installs, or drives a real build is a proof, not a unit test.
+
+- Give it its own Vitest project with its own setup and timeout.
+- Keep it out of the default run and require it in `prepublishOnly`.
+- Slow and hermetic is reason enough to isolate a proof; it need not touch an external service.
+
 ## Shared test infrastructure
 
 Test helpers are shared infrastructure, not local test-file clutter.
@@ -45,6 +99,8 @@ Test helpers are shared infrastructure, not local test-file clutter.
 - Extract a fixture, recorder, event factory, async wait, renderer, scenario/data builder, protocol fixture, or DOM builder as soon as it could serve another test.
 - Any duplicate or near-duplicate helper is a defect; consolidate it into one general form.
 - Export every reusable helper, fixture type, factory, constant, and guard from setup files.
+- A setup file owns everything an assertion needs and nothing an assertion is: `describe`, `it`, and `expect` never appear in a `setup*.ts`.
+- Data tables and case matrices belong in a setup file at any size; test registration does not.
 - Test files import shared infrastructure rather than declaring local fixture factories.
 - Never reimplement a framework helper in tests or fixtures; import the real parser, signer, flattener, or other helper.
 - Prefer small customizable factories/stubs that seed inert data for a real scenario over repeated inline setup.
@@ -134,7 +190,7 @@ Before acceptance:
 - prove every intended test file is discovered by the correct project;
 - inspect actual test counts and environments;
 - audit `.todo`, `.skip`, conditional skips, retries, and inflated timeouts;
-- confirm each assertion would fail for the defect it claims to catch;
+- confirm each assertion would fail for the defect it claims to catch, and that it fails rather than passes when its population is empty;
 - confirm helpers do not reimplement production behavior;
 - confirm cleanup runs after setup or assertion failure;
 - confirm current-scope requirements have real tests rather than placeholders.