@orkestrel/scaffold 0.0.27 → 0.0.28

package/dist/src/core/index.d.cts

@@ -104,7 +104,7 @@ export declare const ARTIFACT_TEMPLATES: Readonly<{
         readme: "# Guides\n\n## By concept\n\n- Package\n  - Spec: Not created. Create this file when the workspace has a public surface:\n    `guides/{{guide}}.md`\n  - Source:\n{{source}}\n  - Tests:\n{{tests}}\n\n## By directory\n\n{{directories}}\n";
     }>;
     orchestration: Readonly<{
-        service: "#!/usr/bin/env sh\nset -eu\n\nprintf '%s\\n' \\\n{{services}}\n";
+        service: "#!/usr/bin/env sh\nset -eu\n\nprintf '%s\\n' \\\n{{vendors}}\n";
     }>;
 }>;
 
@@ -235,14 +235,22 @@ export declare const BIN_ENTRY_PATH = "src/bin/main.ts";
  * application-only, and mixed workspaces are all first class. `dependencies`
  * and `peers` are runtime `@orkestrel/*` packages; `extras` are
  * package-specific development dependencies and may carry any valid npm name.
- * `bin`, `integration`, `services`, `global`, and `showcase` are structural
- * facts: each is set only when the workspace physically ships the directory or
- * exact-case file that defines it, never because of the workspace's name and
- * never because a sibling fact is set. An axis-dependent fact projects nothing
- * when its required axis is absent: `integration` projects only a published
- * `src`, and `showcase` projects only a browser `app`. The gate answers that case
- * with a non-blocking question, so a caller that set the flag learns it emitted
- * nothing and the compile still completes.
+ * `bin`, `integration`, `conformance`, `service`, `vendors`, `global`, and
+ * `showcase` are structural facts: each is set only when the workspace
+ * physically ships the directory or exact-case file that defines it, never
+ * because of the workspace's name and never because a sibling fact is set. An
+ * axis-dependent fact projects nothing when its required axis is absent:
+ * `integration` projects only a published `src`, and `showcase` projects only a
+ * browser `app`. The gate answers that case with a non-blocking question, so a
+ * caller that set the flag learns it emitted nothing and the compile still
+ * completes.
+ *
+ * `service` says the workspace runs a live-service Vitest project over
+ * `tests/service`, and it alone registers that project. `vendors` names each
+ * external service the workspace drives and emits the provisioner skeleton that
+ * starts them. Neither is derivable from the other: a workspace may declare
+ * vendors before it writes a suite, and a suite may drive a service the skeleton
+ * does not start.
  */
 export declare interface Blueprint {
     readonly name: string;
@@ -258,7 +266,9 @@ export declare interface Blueprint {
     readonly overrides: readonly Override[];
     readonly bin: boolean;
     readonly integration: boolean;
-    readonly services: readonly string[];
+    readonly conformance: boolean;
+    readonly service: boolean;
+    readonly vendors: readonly string[];
     readonly global: boolean;
     readonly showcase: boolean;
 }
@@ -401,10 +411,10 @@ export declare function blueprintToManifest(blueprint: Blueprint): string;
  * Compile the blueprint-dependent orchestration artifacts.
  *
  * @param blueprint - The workspace specification.
- * @returns A service inventory script when services are declared, otherwise none.
+ * @returns A vendor inventory script when vendors are declared, otherwise none.
  *
  * @remarks
- * A service name does not describe startup, readiness, or cleanup. The script
+ * A vendor name does not describe startup, readiness, or cleanup. The script
  * therefore records only the declared inventory and does not invent a service
  * runner or test project.
  */
@@ -499,8 +509,14 @@ export declare function blueprintToRootVite(blueprint: Blueprint): string;
  * to the axes the blueprint declares: a check and a test script per declared
  * environment, an aggregate over each axis, the policy and configuration
  * proofs every workspace can pass before it has a public API, and one build per
- * target that actually builds. The isolated installed-package integration
- * proof stays out of `test` and runs from `prepublishOnly` instead.
+ * target that actually builds.
+ *
+ * A proof leaves `test` when a real service or a real install answers it. The
+ * installed-package integration proof and the live-service proof therefore run
+ * from `prepublishOnly` instead. The conformance proof stays in `test`, because
+ * it measures this package against official tooling and drives nothing external:
+ * a conformance run may start a server, but it starts its own and reaches it
+ * over loopback, so the run stays hermetic.
  *
  * The configuration paths interpolated here are the same ones `SRC_MATRIX` and
  * `APP_MATRIX` list as each environment's configuration files, so a rename in
@@ -556,6 +572,12 @@ export declare function blueprintToSourceArtifacts(blueprint: Blueprint): readon
  * workspace and therefore follows the `src` axis as well as its structural
  * flag.
  *
+ * The conformance proof is not emitted either, for the reason the guide proof
+ * is not: it names an official artifact only the package knows, so a generated
+ * placeholder would read as a proof while measuring nothing. `service` emits its
+ * readiness setup alone, because the root configuration names that module by
+ * path.
+ *
  * @example
  * ```ts
  * import { blueprintToTestArtifacts, createBlueprint } from '@orkestrel/scaffold'
@@ -1021,6 +1043,8 @@ export declare class Compiler implements CompilerInterface {
               policy: "export const policy = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'policy', color: 'white' },\n\t\t\t\tinclude: ['tests/policy.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               config: "export const config = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'config', color: 'yellow' },\n\t\t\t\tinclude: ['tests/config.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               guides: "export const guides = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'guides', color: 'green' },\n\t\t\t\tinclude: ['tests/guides.test.ts'],\n\t\t\t\texclude: ['tests/src/**/*.test.ts', 'tests/app/**/*.test.ts', 'tests/setup.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              conformance: "// Where this package drifts from the official tooling it stays compatible with.\n// The subject is this package, so the proof is hermetic and stays in `npm test`.\nexport const conformance = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'conformance', color: 'magenta' },\n\t\t\t\tinclude: ['tests/conformance.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              service: "// The live external services this package drives. It starts nothing itself:\n// `scripts/service.sh` provisions, `tests/setupService.ts` proves readiness, and\n// the project stays out of `npm test` because a real service answers it.\nexport const service = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'service', color: 'red' },\n\t\t\t\tinclude: ['tests/service/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupService.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               probe: "// A workbench, not a proof. No gate selects this project.\nexport const probe = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'probe', color: 'gray' },\n\t\t\t\tinclude: ['tmp/probe/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
           }>;
@@ -1052,6 +1076,9 @@ export declare class Compiler implements CompilerInterface {
           }>;
       }>;
 
+      /** The official-tooling drift proof whose presence makes a workspace `conformance`. */
+      export declare const CONFORMANCE_TEST_PATH = "tests/conformance.test.ts";
+
       /** A text file produced by the template or computed compilation path. */
       export declare interface ContentArtifact extends ArtifactBase {
           readonly origin: 'template' | 'computed';
@@ -1094,8 +1121,8 @@ export declare class Compiler implements CompilerInterface {
            * blueprint.
            *
            * @remarks
-           * A blueprint is a closed record of sixteen fields, and most of them have one
-           * sensible starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
+           * A blueprint is a closed record, and most of its fields have one sensible
+           * starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
            * `DEFAULT_ENGINES`. Filling them here is what lets a caller state only what its
            * workspace actually declares.
            *
@@ -2588,6 +2615,12 @@ export declare class Compiler implements CompilerInterface {
         /** The provisioner skeleton a workspace with declared service vendors is given once. */
         export declare const SERVICE_SCRIPT_PATH = "scripts/service.sh";
 
+        /** The live-service readiness module whose presence makes a workspace `service`. */
+        export declare const SERVICE_SETUP_PATH = "tests/setupService.ts";
+
+        /** The include the live-service project covers, which is a directory rather than one proof. */
+        export declare const SERVICE_TEST_INCLUDE = "tests/service/**/*.test.ts";
+
         /** The Vite wrapper whose presence makes a workspace `showcase`. */
         export declare const SHOWCASE_CONFIG_PATH = "configs/app/vite.showcase.config.ts";
 

package/dist/src/core/index.d.ts

@@ -104,7 +104,7 @@ export declare const ARTIFACT_TEMPLATES: Readonly<{
         readme: "# Guides\n\n## By concept\n\n- Package\n  - Spec: Not created. Create this file when the workspace has a public surface:\n    `guides/{{guide}}.md`\n  - Source:\n{{source}}\n  - Tests:\n{{tests}}\n\n## By directory\n\n{{directories}}\n";
     }>;
     orchestration: Readonly<{
-        service: "#!/usr/bin/env sh\nset -eu\n\nprintf '%s\\n' \\\n{{services}}\n";
+        service: "#!/usr/bin/env sh\nset -eu\n\nprintf '%s\\n' \\\n{{vendors}}\n";
     }>;
 }>;
 
@@ -235,14 +235,22 @@ export declare const BIN_ENTRY_PATH = "src/bin/main.ts";
  * application-only, and mixed workspaces are all first class. `dependencies`
  * and `peers` are runtime `@orkestrel/*` packages; `extras` are
  * package-specific development dependencies and may carry any valid npm name.
- * `bin`, `integration`, `services`, `global`, and `showcase` are structural
- * facts: each is set only when the workspace physically ships the directory or
- * exact-case file that defines it, never because of the workspace's name and
- * never because a sibling fact is set. An axis-dependent fact projects nothing
- * when its required axis is absent: `integration` projects only a published
- * `src`, and `showcase` projects only a browser `app`. The gate answers that case
- * with a non-blocking question, so a caller that set the flag learns it emitted
- * nothing and the compile still completes.
+ * `bin`, `integration`, `conformance`, `service`, `vendors`, `global`, and
+ * `showcase` are structural facts: each is set only when the workspace
+ * physically ships the directory or exact-case file that defines it, never
+ * because of the workspace's name and never because a sibling fact is set. An
+ * axis-dependent fact projects nothing when its required axis is absent:
+ * `integration` projects only a published `src`, and `showcase` projects only a
+ * browser `app`. The gate answers that case with a non-blocking question, so a
+ * caller that set the flag learns it emitted nothing and the compile still
+ * completes.
+ *
+ * `service` says the workspace runs a live-service Vitest project over
+ * `tests/service`, and it alone registers that project. `vendors` names each
+ * external service the workspace drives and emits the provisioner skeleton that
+ * starts them. Neither is derivable from the other: a workspace may declare
+ * vendors before it writes a suite, and a suite may drive a service the skeleton
+ * does not start.
  */
 export declare interface Blueprint {
     readonly name: string;
@@ -258,7 +266,9 @@ export declare interface Blueprint {
     readonly overrides: readonly Override[];
     readonly bin: boolean;
     readonly integration: boolean;
-    readonly services: readonly string[];
+    readonly conformance: boolean;
+    readonly service: boolean;
+    readonly vendors: readonly string[];
     readonly global: boolean;
     readonly showcase: boolean;
 }
@@ -401,10 +411,10 @@ export declare function blueprintToManifest(blueprint: Blueprint): string;
  * Compile the blueprint-dependent orchestration artifacts.
  *
  * @param blueprint - The workspace specification.
- * @returns A service inventory script when services are declared, otherwise none.
+ * @returns A vendor inventory script when vendors are declared, otherwise none.
  *
  * @remarks
- * A service name does not describe startup, readiness, or cleanup. The script
+ * A vendor name does not describe startup, readiness, or cleanup. The script
  * therefore records only the declared inventory and does not invent a service
  * runner or test project.
  */
@@ -499,8 +509,14 @@ export declare function blueprintToRootVite(blueprint: Blueprint): string;
  * to the axes the blueprint declares: a check and a test script per declared
  * environment, an aggregate over each axis, the policy and configuration
  * proofs every workspace can pass before it has a public API, and one build per
- * target that actually builds. The isolated installed-package integration
- * proof stays out of `test` and runs from `prepublishOnly` instead.
+ * target that actually builds.
+ *
+ * A proof leaves `test` when a real service or a real install answers it. The
+ * installed-package integration proof and the live-service proof therefore run
+ * from `prepublishOnly` instead. The conformance proof stays in `test`, because
+ * it measures this package against official tooling and drives nothing external:
+ * a conformance run may start a server, but it starts its own and reaches it
+ * over loopback, so the run stays hermetic.
  *
  * The configuration paths interpolated here are the same ones `SRC_MATRIX` and
  * `APP_MATRIX` list as each environment's configuration files, so a rename in
@@ -556,6 +572,12 @@ export declare function blueprintToSourceArtifacts(blueprint: Blueprint): readon
  * workspace and therefore follows the `src` axis as well as its structural
  * flag.
  *
+ * The conformance proof is not emitted either, for the reason the guide proof
+ * is not: it names an official artifact only the package knows, so a generated
+ * placeholder would read as a proof while measuring nothing. `service` emits its
+ * readiness setup alone, because the root configuration names that module by
+ * path.
+ *
  * @example
  * ```ts
  * import { blueprintToTestArtifacts, createBlueprint } from '@orkestrel/scaffold'
@@ -1021,6 +1043,8 @@ export declare class Compiler implements CompilerInterface {
               policy: "export const policy = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'policy', color: 'white' },\n\t\t\t\tinclude: ['tests/policy.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               config: "export const config = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'config', color: 'yellow' },\n\t\t\t\tinclude: ['tests/config.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               guides: "export const guides = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'guides', color: 'green' },\n\t\t\t\tinclude: ['tests/guides.test.ts'],\n\t\t\t\texclude: ['tests/src/**/*.test.ts', 'tests/app/**/*.test.ts', 'tests/setup.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              conformance: "// Where this package drifts from the official tooling it stays compatible with.\n// The subject is this package, so the proof is hermetic and stays in `npm test`.\nexport const conformance = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'conformance', color: 'magenta' },\n\t\t\t\tinclude: ['tests/conformance.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              service: "// The live external services this package drives. It starts nothing itself:\n// `scripts/service.sh` provisions, `tests/setupService.ts` proves readiness, and\n// the project stays out of `npm test` because a real service answers it.\nexport const service = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'service', color: 'red' },\n\t\t\t\tinclude: ['tests/service/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupService.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               probe: "// A workbench, not a proof. No gate selects this project.\nexport const probe = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'probe', color: 'gray' },\n\t\t\t\tinclude: ['tmp/probe/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
           }>;
@@ -1052,6 +1076,9 @@ export declare class Compiler implements CompilerInterface {
           }>;
       }>;
 
+      /** The official-tooling drift proof whose presence makes a workspace `conformance`. */
+      export declare const CONFORMANCE_TEST_PATH = "tests/conformance.test.ts";
+
       /** A text file produced by the template or computed compilation path. */
       export declare interface ContentArtifact extends ArtifactBase {
           readonly origin: 'template' | 'computed';
@@ -1094,8 +1121,8 @@ export declare class Compiler implements CompilerInterface {
            * blueprint.
            *
            * @remarks
-           * A blueprint is a closed record of sixteen fields, and most of them have one
-           * sensible starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
+           * A blueprint is a closed record, and most of its fields have one sensible
+           * starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
            * `DEFAULT_ENGINES`. Filling them here is what lets a caller state only what its
            * workspace actually declares.
            *
@@ -2588,6 +2615,12 @@ export declare class Compiler implements CompilerInterface {
         /** The provisioner skeleton a workspace with declared service vendors is given once. */
         export declare const SERVICE_SCRIPT_PATH = "scripts/service.sh";
 
+        /** The live-service readiness module whose presence makes a workspace `service`. */
+        export declare const SERVICE_SETUP_PATH = "tests/setupService.ts";
+
+        /** The include the live-service project covers, which is a directory rather than one proof. */
+        export declare const SERVICE_TEST_INCLUDE = "tests/service/**/*.test.ts";
+
         /** The Vite wrapper whose presence makes a workspace `showcase`. */
         export declare const SHOWCASE_CONFIG_PATH = "configs/app/vite.showcase.config.ts";
 

package/dist/src/core/index.js

@@ -200,6 +200,12 @@ var GLOBAL_SETUP_PATH = "tests/setupGlobal.ts";
 var GUIDES_TEST_PATH = "tests/guides.test.ts";
 /** The installed-package proof whose presence makes a workspace `integration`. */
 var INTEGRATION_TEST_PATH = "tests/integration.test.ts";
+/** The official-tooling drift proof whose presence makes a workspace `conformance`. */
+var CONFORMANCE_TEST_PATH = "tests/conformance.test.ts";
+/** The live-service readiness module whose presence makes a workspace `service`. */
+var SERVICE_SETUP_PATH = "tests/setupService.ts";
+/** The include the live-service project covers, which is a directory rather than one proof. */
+var SERVICE_TEST_INCLUDE = "tests/service/**/*.test.ts";
 /** The Vite wrapper whose presence makes a workspace `showcase`. */
 var SHOWCASE_CONFIG_PATH = "configs/app/vite.showcase.config.ts";
 /** The bare workspace name syntax: lowercase alphanumeric with hyphens, letter first. */
@@ -283,7 +289,7 @@ var DEFAULT_ENGINES = `>=${MINIMUM_NODE_VERSION}`;
 var BASE_DEV_DEPENDENCIES = Object.freeze({
 	"@microsoft/api-extractor": "^7.58.12",
 	"@orkestrel/guide": "^0.0.10",
-	"@orkestrel/scaffold": "^0.0.27",
+	"@orkestrel/scaffold": "^0.0.28",
 	"@types/node": "^26.2.0",
 	oxfmt: "^0.62.0",
 	oxlint: "^1.77.0",
@@ -675,6 +681,44 @@ export function appBrowser(...options: never[]): UserConfig {
 		},
 		options ?? {},
 	)
+`,
+		conformance: `// Where this package drifts from the official tooling it stays compatible with.
+// The subject is this package, so the proof is hermetic and stays in \`npm test\`.
+export const conformance = (options?: UserConfig): UserConfig =>
+	mergeConfig(
+		{
+			resolve,
+			test: {
+				name: { label: 'conformance', color: 'magenta' },
+				include: ['${CONFORMANCE_TEST_PATH}'],
+				setupFiles: ['./tests/setup.ts'],
+				environment: 'node',
+				browser: { enabled: false },
+			},
+		},
+		options ?? {},
+	)
+`,
+		service: `// The live external services this package drives. It starts nothing itself:
+// \`scripts/service.sh\` provisions, \`tests/setupService.ts\` proves readiness, and
+// the project stays out of \`npm test\` because a real service answers it.
+export const service = (options?: UserConfig): UserConfig =>
+	mergeConfig(
+		{
+			resolve,
+			test: {
+				name: { label: 'service', color: 'red' },
+				include: ['${SERVICE_TEST_INCLUDE}'],
+				setupFiles: ['./tests/setup.ts', './tests/setupService.ts'],
+				environment: 'node',
+				browser: { enabled: false },
+				testTimeout: 120_000,
+				hookTimeout: 120_000,
+				fileParallelism: false,
+			},
+		},
+		options ?? {},
+	)
 `,
 		probe: `// A workbench, not a proof. No gate selects this project.
 export const probe = (options?: UserConfig): UserConfig =>
@@ -1149,7 +1193,7 @@ npm test
 set -eu
 
 printf '%s\\n' \\
-{{services}}
+{{vendors}}
 ` })
 });
 //#endregion
@@ -1436,7 +1480,9 @@ var isBlueprint = recordOf({
 	overrides: andOf(isCollection, arrayOf(isOverride)),
 	bin: isBoolean,
 	integration: isBoolean,
-	services: andOf(isCollection, arrayOf(isString)),
+	conformance: isBoolean,
+	service: isBoolean,
+	vendors: andOf(isCollection, arrayOf(isString)),
 	global: isBoolean,
 	showcase: isBoolean
 }, ["description"]);
@@ -2672,8 +2718,14 @@ function blueprintToDevDependencies(blueprint) {
 * to the axes the blueprint declares: a check and a test script per declared
 * environment, an aggregate over each axis, the policy and configuration
 * proofs every workspace can pass before it has a public API, and one build per
-* target that actually builds. The isolated installed-package integration
-* proof stays out of `test` and runs from `prepublishOnly` instead.
+* target that actually builds.
+*
+* A proof leaves `test` when a real service or a real install answers it. The
+* installed-package integration proof and the live-service proof therefore run
+* from `prepublishOnly` instead. The conformance proof stays in `test`, because
+* it measures this package against official tooling and drives nothing external:
+* a conformance run may start a server, but it starts its own and reaches it
+* over loopback, so the run stays hermetic.
 *
 * The configuration paths interpolated here are the same ones `SRC_MATRIX` and
 * `APP_MATRIX` list as each environment's configuration files, so a rename in
@@ -2720,7 +2772,8 @@ function blueprintToScripts(blueprint) {
 		...compiles ? ["npm run test:src"] : [],
 		...blueprint.app.length > 0 ? ["npm run test:app"] : [],
 		"npm run test:policy",
-		"npm run test:config"
+		"npm run test:config",
+		...blueprint.conformance ? ["npm run test:conformance"] : []
 	].join(" && ");
 	if (compiles) {
 		scripts["test:src"] = [
@@ -2737,8 +2790,10 @@ function blueprintToScripts(blueprint) {
 	}
 	scripts["test:policy"] = `${vitest} --project policy`;
 	scripts["test:config"] = `${vitest} --project config`;
+	if (blueprint.conformance) scripts["test:conformance"] = `${vitest} --project conformance`;
 	scripts["test:probe"] = "vitest run --config vite.config.ts --no-cache --reporter=verbose --project probe";
 	if (integrates) scripts["test:integration"] = `${vitest} --project integration`;
+	if (blueprint.service) scripts["test:service"] = `${vitest} --project service`;
 	scripts.build = [
 		"npm run clean",
 		...compiles ? ["npm run build:src"] : [],
@@ -2768,7 +2823,11 @@ function blueprintToScripts(blueprint) {
 		scripts.serve = "node dist/app/server/main.cjs";
 		scripts["serve:build"] = "npm run build:app:server && npm run serve";
 	}
-	scripts.prepublishOnly = ["npm run format:check && npm run lint:check && npm run check && npm run build && npm test", ...integrates ? ["npm run test:integration"] : []].join(" && ");
+	scripts.prepublishOnly = [
+		"npm run format:check && npm run lint:check && npm run check && npm run build && npm test",
+		...integrates ? ["npm run test:integration"] : [],
+		...blueprint.service ? ["npm run test:service"] : []
+	].join(" && ");
 	return scripts;
 }
 /**
@@ -3050,6 +3109,14 @@ export function appShowcase(...options: never[]): UserConfig {
 	projects.push("config");
 	factories.push(CONFIG_TEMPLATES.factories.guides);
 	projects.push(`...(isExactCaseFile(resolveWorkspacePath('${GUIDES_TEST_PATH}')) ? [guides] : [])`);
+	if (blueprint.conformance) {
+		factories.push(CONFIG_TEMPLATES.factories.conformance);
+		projects.push("conformance");
+	}
+	if (blueprint.service) {
+		factories.push(CONFIG_TEMPLATES.factories.service);
+		projects.push("service");
+	}
 	if (blueprint.src.length > 0 && blueprint.integration) {
 		factories.push(fillTemplate(CONFIG_TEMPLATES.factories.integration, { global: blueprint.global ? "				globalSetup: ['./tests/setupGlobal.ts'],\n" : "" }));
 		projects.push("integration");
@@ -3270,6 +3337,12 @@ function blueprintToSourceArtifacts(blueprint) {
 * workspace and therefore follows the `src` axis as well as its structural
 * flag.
 *
+* The conformance proof is not emitted either, for the reason the guide proof
+* is not: it names an official artifact only the package knows, so a generated
+* placeholder would read as a proof while measuring nothing. `service` emits its
+* readiness setup alone, because the root configuration names that module by
+* path.
+*
 * @example
 * ```ts
 * import { blueprintToTestArtifacts, createBlueprint } from '@orkestrel/scaffold'
@@ -3303,6 +3376,13 @@ function blueprintToTestArtifacts(blueprint) {
 		environment: "server",
 		content: ARTIFACT_TEMPLATES.tests.setup
 	});
+	if (blueprint.service) artifacts.push({
+		path: SERVICE_SETUP_PATH,
+		group: "tests",
+		ownership: "birth",
+		origin: "template",
+		content: ARTIFACT_TEMPLATES.tests.setup
+	});
 	if (blueprint.global) artifacts.push({
 		path: GLOBAL_SETUP_PATH,
 		group: "tests",
@@ -3416,22 +3496,22 @@ function blueprintToDocumentArtifacts(blueprint) {
 * Compile the blueprint-dependent orchestration artifacts.
 *
 * @param blueprint - The workspace specification.
-* @returns A service inventory script when services are declared, otherwise none.
+* @returns A vendor inventory script when vendors are declared, otherwise none.
 *
 * @remarks
-* A service name does not describe startup, readiness, or cleanup. The script
+* A vendor name does not describe startup, readiness, or cleanup. The script
 * therefore records only the declared inventory and does not invent a service
 * runner or test project.
 */
 function blueprintToOrchestrationArtifacts(blueprint) {
-	if (blueprint.services.length === 0) return [];
-	const services = blueprint.services.map((service, index) => `\t'${service}'${index === blueprint.services.length - 1 ? "" : " \\"}`).join("\n");
+	if (blueprint.vendors.length === 0) return [];
+	const vendors = blueprint.vendors.map((vendor, index) => `\t'${vendor}'${index === blueprint.vendors.length - 1 ? "" : " \\"}`).join("\n");
 	return [{
 		path: SERVICE_SCRIPT_PATH,
 		group: "orchestration",
 		ownership: "birth",
 		origin: "template",
-		content: fillTemplate(ARTIFACT_TEMPLATES.orchestration.service, { services })
+		content: fillTemplate(ARTIFACT_TEMPLATES.orchestration.service, { vendors })
 	}];
 }
 /**
@@ -3787,19 +3867,19 @@ function blueprintToQuestions(blueprint) {
 		message: "integration projects a published src, and this workspace declares none, so it emits nothing.",
 		blocking: false
 	});
-	const services = /* @__PURE__ */ new Set();
-	for (const service of blueprint.services) {
-		if (!NAME_PATTERN.test(service)) questions.push({
-			field: "services",
-			message: `${service} is not a lowercase alphanumeric service name starting with a letter.`,
+	const vendors = /* @__PURE__ */ new Set();
+	for (const vendor of blueprint.vendors) {
+		if (!NAME_PATTERN.test(vendor)) questions.push({
+			field: "vendors",
+			message: `${vendor} is not a lowercase alphanumeric vendor name starting with a letter.`,
 			blocking: true
 		});
-		else if (services.has(service)) questions.push({
-			field: "services",
-			message: `${service} is declared more than once on services.`,
+		else if (vendors.has(vendor)) questions.push({
+			field: "vendors",
+			message: `${vendor} is declared more than once on vendors.`,
 			blocking: true
 		});
-		services.add(service);
+		vendors.add(vendor);
 	}
 	if (blueprint.showcase && !blueprint.app.includes("browser")) questions.push({
 		field: "showcase",
@@ -4267,8 +4347,8 @@ var Compiler = class {
 * blueprint.
 *
 * @remarks
-* A blueprint is a closed record of sixteen fields, and most of them have one
-* sensible starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
+* A blueprint is a closed record, and most of its fields have one sensible
+* starting value: an empty list, a cleared flag, `DEFAULT_VERSION`, and
 * `DEFAULT_ENGINES`. Filling them here is what lets a caller state only what its
 * workspace actually declares.
 *
@@ -4309,7 +4389,9 @@ function createBlueprint(name, input) {
 		overrides: input?.overrides ?? [],
 		bin: input?.bin ?? false,
 		integration: input?.integration ?? false,
-		services: input?.services ?? [],
+		conformance: input?.conformance ?? false,
+		service: input?.service ?? false,
+		vendors: input?.vendors ?? [],
 		global: input?.global ?? false,
 		showcase: input?.showcase ?? false
 	}));
@@ -4336,6 +4418,6 @@ function createCompiler(options) {
 	return new Compiler(options);
 }
 //#endregion
-export { APP_BROWSER_DEV_DEPENDENCIES, APP_DEV_DEPENDENCIES, APP_MATRIX, APP_SERVER_DEV_DEPENDENCIES, ARTIFACT_TEMPLATES, BASE_DEV_DEPENDENCIES, BIN_CONFIGS, BIN_ENTRY_PATH, CATALOG_AGENT_PATH, CONFIG_TEMPLATES, CONTROL_CHARACTER_PATTERN, Compiler, DEFAULT_ENGINES, DEFAULT_VERSION, DEPENDENCY_NAME_PATTERN, ENGINES_PATTERN, ENVIRONMENTS, EXECUTABLE_PATHS, EXTRA_NAME_PATTERN, EXTRA_RANGE_PATTERN, GLOBAL_SETUP_PATH, GROUPS, GUIDES_TEST_PATH, HEX_PATTERN, HOST_PATHS, INTEGRATION_TEST_PATH, INVALID_PATH_CHARACTER_PATTERN, MAX_ARTIFACT_BYTES, MAX_ARTIFACT_HEX_LENGTH, MAX_AUDIT_FINDINGS, MAX_COLLECTION_ITEMS, MAX_DEPENDENCY_NAME_LENGTH, MAX_MANIFEST_BYTES, MAX_NAME_LENGTH, MAX_PATH_LENGTH, MAX_RANGE_LENGTH, MAX_TOTAL_ARTIFACT_BYTES, MINIMUM_NODE_VERSION, NAME_PATTERN, ORCHESTRATION_PATH_NAMES, ORCHESTRATION_PATH_PREFIXES, ORKESTREL_RANGE_PATTERN, SERVICE_SCRIPT_PATH, SHOWCASE_CONFIG_PATH, SHOWCASE_DEV_DEPENDENCIES, SOURCE_BROWSER_DEV_DEPENDENCIES, SRC_MATRIX, ScaffoldError, VERSION_PATTERN, applyOverrides, artifactToFinding, artifactToHex, artifactsToQuestions, blueprintToConfigArtifacts, blueprintToDevDependencies, blueprintToDocumentArtifacts, blueprintToGuideArtifacts, blueprintToMachinery, blueprintToManifest, blueprintToOrchestrationArtifacts, blueprintToQuestions, blueprintToRootTsconfig, blueprintToRootVite, blueprintToScripts, blueprintToSourceArtifacts, blueprintToTestArtifacts, bytesToHex, catalogToLayers, cloneValue, compareVersions, computeBytes, computeHash, contentToHex, createBlueprint, createCompiler, dependenciesToQuestions, extractVersion, inferDrift, inferGroup, isArtifact, isAudit, isBlueprint, isCatalogEntry, isCollection, isCompilerHooks, isCompilerOptions, isContent, isDependency, isDependencyName, isEnvironment, isFinding, isGroup, isGroups, isHex, isMirror, isOverride, isPath, isPlan, isQuestion, isScaffoldError, isSnapshot, manifestToDependencies, manifestToName, matchesDriftReachability, matchesEngines, matchesOrchestrationPath, matchesRange, nameToGuide, nameToHostArtifacts, overridesToQuestions, parseBlueprint, parseCompilerOptions, parseGroups, parseSnapshot, pathToCondition, planToFindings, planToHash, planToSummary, selectGroups, selectHostPaths, serializeTypeScriptString, srcToEntry, srcToExports, srcToRoot };
+export { APP_BROWSER_DEV_DEPENDENCIES, APP_DEV_DEPENDENCIES, APP_MATRIX, APP_SERVER_DEV_DEPENDENCIES, ARTIFACT_TEMPLATES, BASE_DEV_DEPENDENCIES, BIN_CONFIGS, BIN_ENTRY_PATH, CATALOG_AGENT_PATH, CONFIG_TEMPLATES, CONFORMANCE_TEST_PATH, CONTROL_CHARACTER_PATTERN, Compiler, DEFAULT_ENGINES, DEFAULT_VERSION, DEPENDENCY_NAME_PATTERN, ENGINES_PATTERN, ENVIRONMENTS, EXECUTABLE_PATHS, EXTRA_NAME_PATTERN, EXTRA_RANGE_PATTERN, GLOBAL_SETUP_PATH, GROUPS, GUIDES_TEST_PATH, HEX_PATTERN, HOST_PATHS, INTEGRATION_TEST_PATH, INVALID_PATH_CHARACTER_PATTERN, MAX_ARTIFACT_BYTES, MAX_ARTIFACT_HEX_LENGTH, MAX_AUDIT_FINDINGS, MAX_COLLECTION_ITEMS, MAX_DEPENDENCY_NAME_LENGTH, MAX_MANIFEST_BYTES, MAX_NAME_LENGTH, MAX_PATH_LENGTH, MAX_RANGE_LENGTH, MAX_TOTAL_ARTIFACT_BYTES, MINIMUM_NODE_VERSION, NAME_PATTERN, ORCHESTRATION_PATH_NAMES, ORCHESTRATION_PATH_PREFIXES, ORKESTREL_RANGE_PATTERN, SERVICE_SCRIPT_PATH, SERVICE_SETUP_PATH, SERVICE_TEST_INCLUDE, SHOWCASE_CONFIG_PATH, SHOWCASE_DEV_DEPENDENCIES, SOURCE_BROWSER_DEV_DEPENDENCIES, SRC_MATRIX, ScaffoldError, VERSION_PATTERN, applyOverrides, artifactToFinding, artifactToHex, artifactsToQuestions, blueprintToConfigArtifacts, blueprintToDevDependencies, blueprintToDocumentArtifacts, blueprintToGuideArtifacts, blueprintToMachinery, blueprintToManifest, blueprintToOrchestrationArtifacts, blueprintToQuestions, blueprintToRootTsconfig, blueprintToRootVite, blueprintToScripts, blueprintToSourceArtifacts, blueprintToTestArtifacts, bytesToHex, catalogToLayers, cloneValue, compareVersions, computeBytes, computeHash, contentToHex, createBlueprint, createCompiler, dependenciesToQuestions, extractVersion, inferDrift, inferGroup, isArtifact, isAudit, isBlueprint, isCatalogEntry, isCollection, isCompilerHooks, isCompilerOptions, isContent, isDependency, isDependencyName, isEnvironment, isFinding, isGroup, isGroups, isHex, isMirror, isOverride, isPath, isPlan, isQuestion, isScaffoldError, isSnapshot, manifestToDependencies, manifestToName, matchesDriftReachability, matchesEngines, matchesOrchestrationPath, matchesRange, nameToGuide, nameToHostArtifacts, overridesToQuestions, parseBlueprint, parseCompilerOptions, parseGroups, parseSnapshot, pathToCondition, planToFindings, planToHash, planToSummary, selectGroups, selectHostPaths, serializeTypeScriptString, srcToEntry, srcToExports, srcToRoot };
 
 //# sourceMappingURL=index.js.map