@orkestrel/scaffold 0.0.30 → 0.0.32

package/dist/src/core/index.d.cts

@@ -95,7 +95,7 @@ export declare const ARTIFACT_TEMPLATES: Readonly<{
         global: "export function setup(): void {}\n";
         entry: "import * as entry from {{specifier}}\nimport { describe, expect, it } from 'vitest'\n\ndescribe({{label}}, () => {\n\tit('has no starter exports', () => {\n\t\texpect(Object.keys(entry)).toStrictEqual([])\n\t})\n})\n";
         bin: "import { describe, expect, it } from 'vitest'\n\ndescribe('bin entry', () => {\n\tit('has no starter exports', async () => {\n{{import}}\n\t\texpect(Object.keys(entry)).toStrictEqual([])\n\t})\n})\n";
-        integration: "import { spawnSync } from 'node:child_process'\nimport { globSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { dirname, join, resolve } from 'node:path'\nimport { fileURLToPath, pathToFileURL } from 'node:url'\nimport { describe, expect, it } from 'vitest'\n\nconst root = resolve(dirname(fileURLToPath(import.meta.url)), '..')\nconst npm = process.platform === 'win32' ? 'npm.cmd' : 'npm'\nconst registry =\n\tspawnSync(npm, ['ping', '--fetch-retries=0', '--fetch-timeout=1000', '--loglevel=silent'], {\n\t\tcwd: root,\n\t\tstdio: 'ignore',\n\t\ttimeout: 5_000,\n\t\twindowsHide: true,\n\t}).status === 0\n\ndescribe('installed package consumer', () => {\n\tit('loads the built package from a process outside the workspace', () => {\n\t\tconst workspace = mkdtempSync(join(tmpdir(), 'orkestrel-integration-driver-'))\n\t\ttry {\n\t\t\tconst manifest: unknown = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'))\n\t\t\tif (typeof manifest !== 'object' || manifest === null) {\n\t\t\t\tthrow new Error('The package manifest is not a record')\n\t\t\t}\n\t\t\tconst module: unknown = Object.getOwnPropertyDescriptor(manifest, 'module')?.value\n\t\t\tif (typeof module !== 'string')\n\t\t\t\tthrow new Error('The package manifest carries no module entry')\n\t\t\tconst entry = pathToFileURL(resolve(root, module)).href\n\t\t\tconst missing = pathToFileURL(resolve(root, 'dist/outside-integration-control.js')).href\n\t\t\tconst control = spawnSync(\n\t\t\t\tprocess.execPath,\n\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(missing) + ')'],\n\t\t\t\t{ cwd: workspace, encoding: 'utf8', windowsHide: true },\n\t\t\t)\n\t\t\texpect(control.status).not.toBe(0)\n\t\t\tconst driven = spawnSync(\n\t\t\t\tprocess.execPath,\n\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(entry) + ')'],\n\t\t\t\t{ cwd: workspace, encoding: 'utf8', windowsHide: true },\n\t\t\t)\n\t\t\texpect(driven.status).toBe(0)\n\t\t\texpect(driven.stderr).toBe('')\n\t\t} finally {\n\t\t\trmSync(workspace, { recursive: true, force: true })\n\t\t}\n\t})\n\n\tit.skipIf(!registry)(\n\t\t'installs the packed package into an outside consumer [requires a reachable npm registry]',\n\t\t() => {\n\t\t\tconst workspace = mkdtempSync(join(tmpdir(), 'orkestrel-integration-install-'))\n\t\t\tconst packed = join(workspace, 'packed')\n\t\t\tconst consumer = join(workspace, 'consumer')\n\t\t\ttry {\n\t\t\t\tmkdirSync(packed, { recursive: true })\n\t\t\t\tmkdirSync(consumer, { recursive: true })\n\t\t\t\tconst pack = spawnSync(\n\t\t\t\t\tnpm,\n\t\t\t\t\t['pack', '--json', '--ignore-scripts', '--pack-destination', packed],\n\t\t\t\t\t{ cwd: root, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(pack.status).toBe(0)\n\t\t\t\tconst archives = globSync('*.tgz', { cwd: packed })\n\t\t\t\texpect(archives).toHaveLength(1)\n\t\t\t\tconst archive = archives[0]\n\t\t\t\tif (archive === undefined) throw new Error('The package archive was not written')\n\t\t\t\twriteFileSync(\n\t\t\t\t\tjoin(consumer, 'package.json'),\n\t\t\t\t\t'{\"name\":\"outside-consumer\",\"private\":true,\"type\":\"module\"}\\n',\n\t\t\t\t)\n\t\t\t\tconst install = spawnSync(\n\t\t\t\t\tnpm,\n\t\t\t\t\t['install', '--ignore-scripts', '--no-audit', '--no-fund', join(packed, archive)],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(install.status).toBe(0)\n\t\t\t\tconst manifest: unknown = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'))\n\t\t\t\tif (typeof manifest !== 'object' || manifest === null) {\n\t\t\t\t\tthrow new Error('The package manifest is not a record')\n\t\t\t\t}\n\t\t\t\tconst name: unknown = Object.getOwnPropertyDescriptor(manifest, 'name')?.value\n\t\t\t\tif (typeof name !== 'string') throw new Error('The package manifest carries no name')\n\t\t\t\tconst control = spawnSync(\n\t\t\t\t\tprocess.execPath,\n\t\t\t\t\t[\n\t\t\t\t\t\t'--input-type=module',\n\t\t\t\t\t\t'--eval',\n\t\t\t\t\t\t'await import(' + JSON.stringify(name + '/outside-integration-control') + ')',\n\t\t\t\t\t],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(control.status).not.toBe(0)\n\t\t\t\tconst driven = spawnSync(\n\t\t\t\t\tprocess.execPath,\n\t\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(name) + ')'],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(driven.status).toBe(0)\n\t\t\t\texpect(driven.stderr).toBe('')\n\t\t\t} finally {\n\t\t\t\trmSync(workspace, { recursive: true, force: true })\n\t\t\t}\n\t\t},\n\t\t300_000,\n\t)\n})\n";
+        integration: "{{imports}}import { describe, expect, it } from 'vitest'\n\ndescribe('workspace integration', () => {\n\tit('loads every selected public barrel together as a composition seed', () => {\n\t\t// Replace this empty-barrel seed with one observable flow that passes one\n\t\t// environment's public result into another.\n\t\t{{actual}}{{expected}})\n\t})\n})\n";
     }>;
     docs: Readonly<{
         readme: "# {{package}}\n\n{{description}}\n\n## Development\n\n```sh\nnpm install\nnpm test\n```\n";
@@ -235,15 +235,14 @@ export declare const BIN_ENTRY_PATH = "src/bin/main.ts";
  * application-only, and mixed workspaces are all first class. `dependencies`
  * and `peers` are runtime `@orkestrel/*` packages; `extras` are
  * package-specific development dependencies and may carry any valid npm name.
- * `bin`, `integration`, `conformance`, `service`, `vendors`, `global`, and
- * `showcase` are structural facts: each is set only when the workspace
- * physically ships the directory or exact-case file that defines it, never
- * because of the workspace's name and never because a sibling fact is set. An
- * axis-dependent fact projects nothing when its required axis is absent:
- * `integration` projects only a published `src`, and `showcase` projects only a
- * browser `app`. The gate answers that case with a non-blocking question, so a
- * caller that set the flag learns it emitted nothing and the compile still
- * completes.
+ * `bin`, `guides`, `distribution`, `integration`, `conformance`, `service`,
+ * `vendors`, `global`, and `showcase` are structural facts: each is set only
+ * when the workspace physically ships the directory or exact-case file that
+ * defines it, never because of the workspace's name and never because a sibling
+ * fact is set.
+ * `showcase` projects only a browser `app`. The gate answers an absent browser
+ * axis with a non-blocking question, so a caller that set the flag learns it
+ * emitted nothing and the compile still completes.
  *
  * `service` says the workspace runs a live-service Vitest project over
  * `tests/service`, and it alone registers that project. `vendors` names each
@@ -265,6 +264,8 @@ export declare interface Blueprint {
     readonly engines: string;
     readonly overrides: readonly Override[];
     readonly bin: boolean;
+    readonly guides: boolean;
+    readonly distribution: boolean;
     readonly integration: boolean;
     readonly conformance: boolean;
     readonly service: boolean;
@@ -438,12 +439,19 @@ export declare function blueprintToOrchestrationArtifacts(blueprint: Blueprint):
  *
  * A question blocks when it describes a workspace this package cannot generate.
  * Three do not, because each describes a workspace it can describe honestly and
- * should not create: a published axis of several environments without core, whose
- * manifest names a core build the workspace never runs, and a structural flag
- * whose required axis is absent, which emits nothing. Blocking those closed the
- * gate for every verb, and the verbs that read an existing workspace need the
- * plan the gate refused. The caller that chooses the shape refuses the advisory;
- * the callers that read one report it.
+ * should not create: a published axis of several environments without core,
+ * whose manifest names a core build the workspace never runs; a showcase flag
+ * whose required browser axis is absent, which emits nothing; and an
+ * integration flag over fewer than two environments, whose seed does emit and
+ * has nothing to compose across. Blocking any of them closed the gate for every
+ * verb. The verbs that read an existing workspace need the plan the gate
+ * refused. The caller that chooses the shape refuses the advisory; the callers
+ * that read one report it.
+ *
+ * The integration advisory counts both axes together, because the proof it
+ * seeds spans environments rather than published ones: an application of two
+ * environments composes, and a package publishing one does not. Reading either
+ * axis alone withdrew the proof from a workspace that does compose.
  *
  * An environment question carries `ENVIRONMENTS` as its candidates, so a caller
  * reads the accepted values from the question instead of from the documentation.
@@ -511,12 +519,13 @@ export declare function blueprintToRootVite(blueprint: Blueprint): string;
  * proofs every workspace can pass before it has a public API, and one build per
  * target that actually builds.
  *
- * A proof leaves `test` when a real service or a real install answers it. The
- * installed-package integration proof and the live-service proof therefore run
- * from `prepublishOnly` instead. The conformance proof stays in `test`, because
- * it measures this package against official tooling and drives nothing external:
- * a conformance run may start a server, but it starts its own and reaches it
- * over loopback, so the run stays hermetic.
+ * A publishing workspace isolates distribution and live-service proofs from
+ * `test` and runs them from `prepublishOnly` instead. A private workspace has
+ * no publish lifecycle, so it omits distribution and runs a live-service proof
+ * from `test`. Integration and conformance stay in `test` because they neither
+ * pack nor install the workspace and drive no external service. A conformance
+ * run may start a server, but it starts its own and reaches it over loopback,
+ * so the run stays hermetic.
  *
  * The configuration paths interpolated here are the same ones `SRC_MATRIX` and
  * `APP_MATRIX` list as each environment's configuration files, so a rename in
@@ -562,15 +571,14 @@ export declare function blueprintToSourceArtifacts(blueprint: Blueprint): readon
  * Compile every artifact in the `tests` group that is not vendored from the host.
  *
  * @param blueprint - The workspace specification.
- * @returns Shared setup modules, axis tests, and the optional install proof.
+ * @returns Shared setup modules, axis tests, and the optional integration seed.
  *
  * @remarks
  * `tests/setupPolicy.ts`, `tests/policy.test.ts`, and `tests/config.test.ts` are
  * fleet-invariant host artifacts and therefore do not appear here. A guide
  * proof is not emitted while the workspace intentionally has empty barrels and
- * no package guide. The install proof is meaningful only for a published
- * workspace and therefore follows the `src` axis as well as its structural
- * flag.
+ * no package guide. The integration seed follows its structural flag and loads
+ * every selected environment through its public barrel.
  *
  * The conformance proof is not emitted either, for the reason the guide proof
  * is not: it names an official artifact only the package knows, so a generated
@@ -1026,18 +1034,18 @@ export declare class Compiler implements CompilerInterface {
       export declare const CONFIG_TEMPLATES: Readonly<{
           root: Readonly<{
               tsconfig: "{\n\t\"compilerOptions\": {\n\t\t\"target\": \"ESNext\",\n\t\t\"module\": \"ESNext\",\n\t\t\"moduleResolution\": \"bundler\",\n\t\t\"allowImportingTsExtensions\": true,\n\t\t\"lib\": [\"ESNext\", \"DOM\", \"DOM.Iterable\"],\n\t\t\"types\": [\"node\", \"vite/client\", \"vitest/globals\"],\n\t\t\"moduleDetection\": \"force\",\n\t\t\"resolveJsonModule\": true,\n\t\t\"strict\": true,\n\t\t\"verbatimModuleSyntax\": true,\n\t\t\"noUncheckedIndexedAccess\": true,\n\t\t\"noUncheckedSideEffectImports\": true,\n\t\t\"exactOptionalPropertyTypes\": true,\n\t\t\"noUnusedLocals\": true,\n\t\t\"noUnusedParameters\": true,\n\t\t\"noImplicitOverride\": true,\n\t\t\"noFallthroughCasesInSwitch\": true,\n\t\t\"forceConsistentCasingInFileNames\": true,\n\t\t\"skipLibCheck\": true,\n\t\t\"noEmit\": true,\n\t\t\"paths\": {\n{{paths}}\n\t\t}\n\t},\n\t\"exclude\": [\"node_modules\", \"dist\", \"tmp\"]\n}\n";
-              vite: "import type { {{viteTypes}} } from 'vite'\n{{imports}}import { defineConfig, mergeConfig } from 'vitest/config'\nimport tsconfig from './tsconfig.json' with { type: 'json' }\n{{helpers}}{{browsers}}import { lstatSync, readdirSync, realpathSync } from 'node:fs'\nimport { basename, join, parse, relative, resolve as resolvePath, sep } from 'node:path'\nimport { fileURLToPath, URL } from 'node:url'\n\n{{options}}export function resolveWorkspacePath(relativePath: string): string {\n\treturn fileURLToPath(new URL(relativePath, import.meta.url))\n}\n\n// A generated root config must classify its own fixed proof without importing\n// package source, so the exact-case check stays self-contained over Node APIs.\nfunction isExactCaseFile(path: string): boolean {\n\tconst full = resolvePath(path)\n\ttry {\n\t\tconst status = lstatSync(full)\n\t\tif (!status.isFile() || status.isSymbolicLink() || status.nlink !== 1) return false\n\t\tconst root = parse(full).root\n\t\tconst segments = relative(root, full).split(sep)\n\t\tlet parent = root\n\t\tfor (const segment of segments) {\n\t\t\ttry {\n\t\t\t\tif (!readdirSync(parent).includes(segment)) return false\n\t\t\t} catch {\n\t\t\t\tif (basename(realpathSync.native(join(parent, segment))) !== segment) return false\n\t\t\t}\n\t\t\tparent = join(parent, segment)\n\t\t}\n\t\treturn true\n\t} catch {\n\t\treturn false\n\t}\n}\n\nconst resolve = {\n\talias: Object.entries(tsconfig.compilerOptions.paths).reduce((aliases, [key, values]) => {\n\t\tconst [path] = values\n\t\tif (path === undefined) throw new Error('tsconfig path alias ' + key + ' has no target')\n\t\treturn Object.assign(aliases, { [key]: resolveWorkspacePath(path) })\n\t}, {}),\n}\n\n{{factories}}export default defineConfig({\n\tresolve,\n\ttest: {\n{{projects}}\n\t},\n})\n";
+              vite: "import type { {{viteTypes}} } from 'vite'\n{{imports}}import { defineConfig, mergeConfig } from 'vitest/config'\nimport tsconfig from './tsconfig.json' with { type: 'json' }\n{{helpers}}{{browsers}}import { fileURLToPath, URL } from 'node:url'\n\n{{options}}export function resolveWorkspacePath(relativePath: string): string {\n\treturn fileURLToPath(new URL(relativePath, import.meta.url))\n}\n\nconst resolve = {\n\talias: Object.entries(tsconfig.compilerOptions.paths).reduce((aliases, [key, values]) => {\n\t\tconst [path] = values\n\t\tif (path === undefined) throw new Error('tsconfig path alias ' + key + ' has no target')\n\t\treturn Object.assign(aliases, { [key]: resolveWorkspacePath(path) })\n\t}, {}),\n}\n\n{{factories}}export default defineConfig({\n\tresolve,\n\ttest: {\n{{projects}}\n\t},\n})\n";
           }>;
           factories: Readonly<{
               src: Readonly<{
                   core: "export const srcCore = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:core', color: 'magenta' },\n\t\t\t\tinclude: ['tests/src/core/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
                   browser: "export const srcBrowser = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/browser/index.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'index.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/src/browser',\n\t\t\t\trolldownOptions: {\n\t\t\t\t\t{{external}}\n{{output}}\n\t\t\t\t},\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:browser', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/browser/**/*.test.ts'],\n{{exclude}}\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n{{global}}\n\t\t\t\tbrowser: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t\t},\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
                   server: "export const srcServer = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/server/index.ts'),\n\t\t\t\t\tformats: ['es', 'cjs'],\n\t\t\t\t\tfileName: (format: string) => (format === 'es' ? 'index.js' : 'index.cjs'),\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/src/server',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: {\n\t\t\t\t\tplatform: 'node',\n\t\t\t\t\t{{external}}\n{{output}}\n\t\t\t\t},\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:server', color: 'red' },\n\t\t\t\tinclude: ['tests/src/server/**/*.test.ts'],\n{{exclude}}\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-                  bin: "export const srcBin = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/bin')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/bin/main.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'main.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/bin',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: [/^node:/, /^@orkestrel\\//, /^@src\\//] },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:bin', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/bin/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+                  bin: "export const srcBin = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/bin')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/bin/main.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'main.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/bin',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: [/^node:/, /^@orkestrel\\//, /^@src\\//] },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:bin', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/bin/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\t// A bin test drives the real executable over a real temporary repository, so it\n\t\t\t\t// spends seconds in process startup and filesystem work rather than milliseconds.\n\t\t\t\t// Vitest's five-second default clears one alone and times out under a full suite.\n\t\t\t\ttestTimeout: 15_000,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               }>;
               app: Readonly<{
                   core: "export const appCore = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [environmentBoundary('app/core')],\n\t\t\ttest: {\n\t\t\t\tname: { label: 'app:core', color: 'cyan' },\n\t\t\t\tinclude: ['tests/app/core/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-                  browser: "function applicationBrowser(showcase: boolean): UserConfig {\n\tconst output = showcase ? 'dist/showcase' : 'dist/app/browser'\n{{showcasePlugins}}\treturn {\n\t\tresolve,\n{{plugins}}\t\troot: resolveWorkspacePath('app/browser'),\n\t\tpublicDir: false,\n\t\tbuild: {\n{{showcaseBuild}}\t\t\temptyOutDir: true,\n\t\t\toutDir: resolveWorkspacePath(output),\n\t\t\trolldownOptions: { input: resolveWorkspacePath('app/browser/index.html') },\n\t\t},\n\t\ttest: {\n\t\t\tname: { label: 'app:browser', color: 'blue' },\n\t\t\troot: resolveWorkspacePath('.'),\n\t\t\tdir: resolveWorkspacePath('.'),\n\t\t\tinclude: ['tests/app/browser/**/*.test.ts'],\n\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n\t\t\tbrowser: {\n\t\t\t\tenabled: true,\n\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t},\n\t\t\tfileParallelism: false,\n\t\t},\n\t}\n}\n\nexport function appBrowser(...options: never[]): UserConfig {\n\tif (options.length > 0) throw new Error('Browser configuration overrides are not permitted')\n\treturn applicationBrowser(false)\n}\n{{showcaseFactory}}";
+                  browser: "function applicationBrowser(showcase: boolean): UserConfig {\n\tconst output = showcase ? 'dist/showcase' : 'dist/app/browser'\n{{showcasePlugins}}\treturn {\n\t\tresolve,\n{{plugins}}\t\troot: resolveWorkspacePath('app/browser'),\n\t\tpublicDir: false,\n\t\tbuild: {\n{{showcaseBuild}}\t\t\temptyOutDir: true,\n\t\t\toutDir: resolveWorkspacePath(output),\n\t\t\trolldownOptions: { input: resolveWorkspacePath('app/browser/index.html') },\n\t\t},\n\t\ttest: {\n\t\t\tname: { label: 'app:browser', color: 'blue' },\n\t\t\troot: resolveWorkspacePath('.'),\n\t\t\tdir: resolveWorkspacePath('.'),\n\t\t\tinclude: ['tests/app/browser/**/*.test.ts'],\n\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n\t\t\tbrowser: {\n\t\t\t\tenabled: true,\n\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t},\n\t\t\tfileParallelism: false,\n\t\t},\n\t}\n}\n\nexport function appBrowser(): UserConfig {\n\treturn applicationBrowser(false)\n}\n{{showcaseFactory}}";
                   server: "export const appServer = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/app/server'), environmentBoundary('app/server')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('app/server/main.ts'),\n\t\t\t\t\tformats: ['cjs'],\n\t\t\t\t\tfileName: () => 'main.cjs',\n\t\t\t\t},\n\t\t\t\toutDir: resolveWorkspacePath('dist/app/server'),\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: (id: string) => id.startsWith('node:') },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'app:server', color: 'green' },\n\t\t\t\tinclude: ['tests/app/server/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               }>;
               policy: "export const policy = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'policy', color: 'white' },\n\t\t\t\tinclude: ['tests/policy.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
@@ -1045,8 +1053,9 @@ export declare class Compiler implements CompilerInterface {
               guides: "export const guides = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'guides', color: 'green' },\n\t\t\t\tinclude: ['tests/guides.test.ts'],\n\t\t\t\texclude: ['tests/src/**/*.test.ts', 'tests/app/**/*.test.ts', 'tests/setup.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               conformance: "// Where this package drifts from the official tooling it stays compatible with.\n// The subject is this package, so the proof is hermetic and stays in `npm test`.\nexport const conformance = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'conformance', color: 'magenta' },\n\t\t\t\tinclude: ['tests/conformance.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               service: "// The live external services this package drives. It starts nothing itself:\n// `scripts/service.sh` provisions, `tests/setupService.ts` proves readiness, and\n// the project stays out of `npm test` because a real service answers it.\nexport const service = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'service', color: 'red' },\n\t\t\t\tinclude: ['tests/service/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupService.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              distribution: "export const distribution = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'distribution', color: 'cyan' },\n\t\t\t\tinclude: ['tests/distribution.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               probe: "// A workbench, not a proof. No gate selects this project.\nexport const probe = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'probe', color: 'gray' },\n\t\t\t\tinclude: ['tmp/probe/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-              integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
           }>;
           tsconfigs: Readonly<{
               src: Readonly<{
@@ -1169,6 +1178,9 @@ export declare class Compiler implements CompilerInterface {
             */
         export declare function createCompiler(options?: CompilerOptions): CompilerInterface;
 
+        /** The development dependencies that emit declarations for published source or an executable. */
+        export declare const DECLARATION_DEV_DEPENDENCIES: Readonly<Record<string, string>>;
+
         /** The `engines.node` range a workspace starts with. */
         export declare const DEFAULT_ENGINES = ">=22.12.0";
 
@@ -1235,6 +1247,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare const DEPENDENCY_NAME_PATTERN: RegExp;
 
+        /** The packed-package proof whose presence makes a workspace `distribution`. */
+        export declare const DISTRIBUTION_TEST_PATH = "tests/distribution.test.ts";
+
         /**
          * How one target path compares to the artifact planned for it.
          *
@@ -1385,7 +1400,7 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare const GROUPS: readonly Group[];
 
-        /** The guide-parity proof whose physical file selects the fixed `guides` project. */
+        /** The guide-parity proof whose presence selects the planned `guides` project. */
         export declare const GUIDES_TEST_PATH = "tests/guides.test.ts";
 
         /** Exact lowercase hexadecimal bytes: two digits per byte, and empty content is valid. */
@@ -1416,7 +1431,9 @@ export declare class Compiler implements CompilerInterface {
          * exist. That is why the ownership here is narrowed away from `content`: a
          * claim over bytes nobody has read is a claim that cannot be checked. Reading
          * the vendored root turns the ones scaffold owns the bytes of into
-         * {@link HydratedArtifact}.
+         * {@link HydratedArtifact}. Workspace-owned paths and paths whose bytes belong
+         * to another verb stay plain host artifacts, because this writer claims only
+         * their presence.
          */
         export declare interface HostArtifact extends ArtifactBase {
             readonly origin: 'host';
@@ -1508,7 +1525,7 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function inferGroup(path: string): Group;
 
-        /** The installed-package proof whose presence makes a workspace `integration`. */
+        /** The cross-environment composition proof whose presence makes a workspace `integration`. */
         export declare const INTEGRATION_TEST_PATH = "tests/integration.test.ts";
 
         /** Visible characters a target-relative path and a Markdown path cell both forbid. */
@@ -1962,6 +1979,29 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function matchesOrchestrationPath(path: string): boolean;
 
+        /**
+         * Test whether one emitted line fits the vendored formatter width.
+         *
+         * @param line - One emitted line, leading tabs included.
+         * @returns `true` when the expanded line fits.
+         *
+         * @remarks
+         * A generator writes source the formatter then reads back, so a line packed
+         * past the vendored width is rewrapped on the next `format` run and the emitted
+         * bytes stop matching the plan the audit compares against. The generator
+         * therefore measures a candidate line and chooses the shape the formatter would
+         * have chosen. Tabs are expanded first because the formatter counts them as
+         * `TAB_WIDTH` columns rather than as one character.
+         *
+         * @example
+         * ```ts
+         * import { matchesPrintWidth } from '@orkestrel/scaffold'
+         *
+         * matchesPrintWidth('\t\tprojects: [core],') // true
+         * ```
+         */
+        export declare function matchesPrintWidth(line: string): boolean;
+
         /**
          * Test whether a declared range already admits a published version.
          *
@@ -2470,6 +2510,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function planToSummary(plan: Plan): PlanSummary;
 
+        /** Columns one emitted line may occupy, matching `printWidth` in `.oxfmtrc.json`. */
+        export declare const PRINT_WIDTH = 100;
+
         /**
          * One validation issue raised against a blueprint or a plan.
          *
@@ -2771,6 +2814,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function srcToRoot(src: readonly Environment[]): Environment | undefined;
 
+        /** Columns one tab occupies when the formatter measures a line, matching `tabWidth`. */
+        export declare const TAB_WIDTH = 2;
+
         /** The exact three-component version syntax a blueprint declares. */
         export declare const VERSION_PATTERN: RegExp;
 
@@ -2793,4 +2839,15 @@ export declare class Compiler implements CompilerInterface {
             readonly showcase: boolean;
         }
 
+        /**
+         * The vendored paths whose present bytes belong to each workspace, frozen.
+         *
+         * @remarks
+         * These paths are copied into a workspace when absent and are never compared
+         * or replaced while present. A workspace therefore stops receiving later
+         * canonical updates to them. `.gitignore` takes that trade because its correct
+         * rules differ by workspace, so scaffold cannot own its bytes.
+         */
+        export declare const WORKSPACE_OWNED_PATHS: readonly string[];
+
         export { }

package/dist/src/core/index.d.ts

@@ -95,7 +95,7 @@ export declare const ARTIFACT_TEMPLATES: Readonly<{
         global: "export function setup(): void {}\n";
         entry: "import * as entry from {{specifier}}\nimport { describe, expect, it } from 'vitest'\n\ndescribe({{label}}, () => {\n\tit('has no starter exports', () => {\n\t\texpect(Object.keys(entry)).toStrictEqual([])\n\t})\n})\n";
         bin: "import { describe, expect, it } from 'vitest'\n\ndescribe('bin entry', () => {\n\tit('has no starter exports', async () => {\n{{import}}\n\t\texpect(Object.keys(entry)).toStrictEqual([])\n\t})\n})\n";
-        integration: "import { spawnSync } from 'node:child_process'\nimport { globSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { dirname, join, resolve } from 'node:path'\nimport { fileURLToPath, pathToFileURL } from 'node:url'\nimport { describe, expect, it } from 'vitest'\n\nconst root = resolve(dirname(fileURLToPath(import.meta.url)), '..')\nconst npm = process.platform === 'win32' ? 'npm.cmd' : 'npm'\nconst registry =\n\tspawnSync(npm, ['ping', '--fetch-retries=0', '--fetch-timeout=1000', '--loglevel=silent'], {\n\t\tcwd: root,\n\t\tstdio: 'ignore',\n\t\ttimeout: 5_000,\n\t\twindowsHide: true,\n\t}).status === 0\n\ndescribe('installed package consumer', () => {\n\tit('loads the built package from a process outside the workspace', () => {\n\t\tconst workspace = mkdtempSync(join(tmpdir(), 'orkestrel-integration-driver-'))\n\t\ttry {\n\t\t\tconst manifest: unknown = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'))\n\t\t\tif (typeof manifest !== 'object' || manifest === null) {\n\t\t\t\tthrow new Error('The package manifest is not a record')\n\t\t\t}\n\t\t\tconst module: unknown = Object.getOwnPropertyDescriptor(manifest, 'module')?.value\n\t\t\tif (typeof module !== 'string')\n\t\t\t\tthrow new Error('The package manifest carries no module entry')\n\t\t\tconst entry = pathToFileURL(resolve(root, module)).href\n\t\t\tconst missing = pathToFileURL(resolve(root, 'dist/outside-integration-control.js')).href\n\t\t\tconst control = spawnSync(\n\t\t\t\tprocess.execPath,\n\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(missing) + ')'],\n\t\t\t\t{ cwd: workspace, encoding: 'utf8', windowsHide: true },\n\t\t\t)\n\t\t\texpect(control.status).not.toBe(0)\n\t\t\tconst driven = spawnSync(\n\t\t\t\tprocess.execPath,\n\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(entry) + ')'],\n\t\t\t\t{ cwd: workspace, encoding: 'utf8', windowsHide: true },\n\t\t\t)\n\t\t\texpect(driven.status).toBe(0)\n\t\t\texpect(driven.stderr).toBe('')\n\t\t} finally {\n\t\t\trmSync(workspace, { recursive: true, force: true })\n\t\t}\n\t})\n\n\tit.skipIf(!registry)(\n\t\t'installs the packed package into an outside consumer [requires a reachable npm registry]',\n\t\t() => {\n\t\t\tconst workspace = mkdtempSync(join(tmpdir(), 'orkestrel-integration-install-'))\n\t\t\tconst packed = join(workspace, 'packed')\n\t\t\tconst consumer = join(workspace, 'consumer')\n\t\t\ttry {\n\t\t\t\tmkdirSync(packed, { recursive: true })\n\t\t\t\tmkdirSync(consumer, { recursive: true })\n\t\t\t\tconst pack = spawnSync(\n\t\t\t\t\tnpm,\n\t\t\t\t\t['pack', '--json', '--ignore-scripts', '--pack-destination', packed],\n\t\t\t\t\t{ cwd: root, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(pack.status).toBe(0)\n\t\t\t\tconst archives = globSync('*.tgz', { cwd: packed })\n\t\t\t\texpect(archives).toHaveLength(1)\n\t\t\t\tconst archive = archives[0]\n\t\t\t\tif (archive === undefined) throw new Error('The package archive was not written')\n\t\t\t\twriteFileSync(\n\t\t\t\t\tjoin(consumer, 'package.json'),\n\t\t\t\t\t'{\"name\":\"outside-consumer\",\"private\":true,\"type\":\"module\"}\\n',\n\t\t\t\t)\n\t\t\t\tconst install = spawnSync(\n\t\t\t\t\tnpm,\n\t\t\t\t\t['install', '--ignore-scripts', '--no-audit', '--no-fund', join(packed, archive)],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(install.status).toBe(0)\n\t\t\t\tconst manifest: unknown = JSON.parse(readFileSync(resolve(root, 'package.json'), 'utf8'))\n\t\t\t\tif (typeof manifest !== 'object' || manifest === null) {\n\t\t\t\t\tthrow new Error('The package manifest is not a record')\n\t\t\t\t}\n\t\t\t\tconst name: unknown = Object.getOwnPropertyDescriptor(manifest, 'name')?.value\n\t\t\t\tif (typeof name !== 'string') throw new Error('The package manifest carries no name')\n\t\t\t\tconst control = spawnSync(\n\t\t\t\t\tprocess.execPath,\n\t\t\t\t\t[\n\t\t\t\t\t\t'--input-type=module',\n\t\t\t\t\t\t'--eval',\n\t\t\t\t\t\t'await import(' + JSON.stringify(name + '/outside-integration-control') + ')',\n\t\t\t\t\t],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(control.status).not.toBe(0)\n\t\t\t\tconst driven = spawnSync(\n\t\t\t\t\tprocess.execPath,\n\t\t\t\t\t['--input-type=module', '--eval', 'await import(' + JSON.stringify(name) + ')'],\n\t\t\t\t\t{ cwd: consumer, encoding: 'utf8', windowsHide: true },\n\t\t\t\t)\n\t\t\t\texpect(driven.status).toBe(0)\n\t\t\t\texpect(driven.stderr).toBe('')\n\t\t\t} finally {\n\t\t\t\trmSync(workspace, { recursive: true, force: true })\n\t\t\t}\n\t\t},\n\t\t300_000,\n\t)\n})\n";
+        integration: "{{imports}}import { describe, expect, it } from 'vitest'\n\ndescribe('workspace integration', () => {\n\tit('loads every selected public barrel together as a composition seed', () => {\n\t\t// Replace this empty-barrel seed with one observable flow that passes one\n\t\t// environment's public result into another.\n\t\t{{actual}}{{expected}})\n\t})\n})\n";
     }>;
     docs: Readonly<{
         readme: "# {{package}}\n\n{{description}}\n\n## Development\n\n```sh\nnpm install\nnpm test\n```\n";
@@ -235,15 +235,14 @@ export declare const BIN_ENTRY_PATH = "src/bin/main.ts";
  * application-only, and mixed workspaces are all first class. `dependencies`
  * and `peers` are runtime `@orkestrel/*` packages; `extras` are
  * package-specific development dependencies and may carry any valid npm name.
- * `bin`, `integration`, `conformance`, `service`, `vendors`, `global`, and
- * `showcase` are structural facts: each is set only when the workspace
- * physically ships the directory or exact-case file that defines it, never
- * because of the workspace's name and never because a sibling fact is set. An
- * axis-dependent fact projects nothing when its required axis is absent:
- * `integration` projects only a published `src`, and `showcase` projects only a
- * browser `app`. The gate answers that case with a non-blocking question, so a
- * caller that set the flag learns it emitted nothing and the compile still
- * completes.
+ * `bin`, `guides`, `distribution`, `integration`, `conformance`, `service`,
+ * `vendors`, `global`, and `showcase` are structural facts: each is set only
+ * when the workspace physically ships the directory or exact-case file that
+ * defines it, never because of the workspace's name and never because a sibling
+ * fact is set.
+ * `showcase` projects only a browser `app`. The gate answers an absent browser
+ * axis with a non-blocking question, so a caller that set the flag learns it
+ * emitted nothing and the compile still completes.
  *
  * `service` says the workspace runs a live-service Vitest project over
  * `tests/service`, and it alone registers that project. `vendors` names each
@@ -265,6 +264,8 @@ export declare interface Blueprint {
     readonly engines: string;
     readonly overrides: readonly Override[];
     readonly bin: boolean;
+    readonly guides: boolean;
+    readonly distribution: boolean;
     readonly integration: boolean;
     readonly conformance: boolean;
     readonly service: boolean;
@@ -438,12 +439,19 @@ export declare function blueprintToOrchestrationArtifacts(blueprint: Blueprint):
  *
  * A question blocks when it describes a workspace this package cannot generate.
  * Three do not, because each describes a workspace it can describe honestly and
- * should not create: a published axis of several environments without core, whose
- * manifest names a core build the workspace never runs, and a structural flag
- * whose required axis is absent, which emits nothing. Blocking those closed the
- * gate for every verb, and the verbs that read an existing workspace need the
- * plan the gate refused. The caller that chooses the shape refuses the advisory;
- * the callers that read one report it.
+ * should not create: a published axis of several environments without core,
+ * whose manifest names a core build the workspace never runs; a showcase flag
+ * whose required browser axis is absent, which emits nothing; and an
+ * integration flag over fewer than two environments, whose seed does emit and
+ * has nothing to compose across. Blocking any of them closed the gate for every
+ * verb. The verbs that read an existing workspace need the plan the gate
+ * refused. The caller that chooses the shape refuses the advisory; the callers
+ * that read one report it.
+ *
+ * The integration advisory counts both axes together, because the proof it
+ * seeds spans environments rather than published ones: an application of two
+ * environments composes, and a package publishing one does not. Reading either
+ * axis alone withdrew the proof from a workspace that does compose.
  *
  * An environment question carries `ENVIRONMENTS` as its candidates, so a caller
  * reads the accepted values from the question instead of from the documentation.
@@ -511,12 +519,13 @@ export declare function blueprintToRootVite(blueprint: Blueprint): string;
  * proofs every workspace can pass before it has a public API, and one build per
  * target that actually builds.
  *
- * A proof leaves `test` when a real service or a real install answers it. The
- * installed-package integration proof and the live-service proof therefore run
- * from `prepublishOnly` instead. The conformance proof stays in `test`, because
- * it measures this package against official tooling and drives nothing external:
- * a conformance run may start a server, but it starts its own and reaches it
- * over loopback, so the run stays hermetic.
+ * A publishing workspace isolates distribution and live-service proofs from
+ * `test` and runs them from `prepublishOnly` instead. A private workspace has
+ * no publish lifecycle, so it omits distribution and runs a live-service proof
+ * from `test`. Integration and conformance stay in `test` because they neither
+ * pack nor install the workspace and drive no external service. A conformance
+ * run may start a server, but it starts its own and reaches it over loopback,
+ * so the run stays hermetic.
  *
  * The configuration paths interpolated here are the same ones `SRC_MATRIX` and
  * `APP_MATRIX` list as each environment's configuration files, so a rename in
@@ -562,15 +571,14 @@ export declare function blueprintToSourceArtifacts(blueprint: Blueprint): readon
  * Compile every artifact in the `tests` group that is not vendored from the host.
  *
  * @param blueprint - The workspace specification.
- * @returns Shared setup modules, axis tests, and the optional install proof.
+ * @returns Shared setup modules, axis tests, and the optional integration seed.
  *
  * @remarks
  * `tests/setupPolicy.ts`, `tests/policy.test.ts`, and `tests/config.test.ts` are
  * fleet-invariant host artifacts and therefore do not appear here. A guide
  * proof is not emitted while the workspace intentionally has empty barrels and
- * no package guide. The install proof is meaningful only for a published
- * workspace and therefore follows the `src` axis as well as its structural
- * flag.
+ * no package guide. The integration seed follows its structural flag and loads
+ * every selected environment through its public barrel.
  *
  * The conformance proof is not emitted either, for the reason the guide proof
  * is not: it names an official artifact only the package knows, so a generated
@@ -1026,18 +1034,18 @@ export declare class Compiler implements CompilerInterface {
       export declare const CONFIG_TEMPLATES: Readonly<{
           root: Readonly<{
               tsconfig: "{\n\t\"compilerOptions\": {\n\t\t\"target\": \"ESNext\",\n\t\t\"module\": \"ESNext\",\n\t\t\"moduleResolution\": \"bundler\",\n\t\t\"allowImportingTsExtensions\": true,\n\t\t\"lib\": [\"ESNext\", \"DOM\", \"DOM.Iterable\"],\n\t\t\"types\": [\"node\", \"vite/client\", \"vitest/globals\"],\n\t\t\"moduleDetection\": \"force\",\n\t\t\"resolveJsonModule\": true,\n\t\t\"strict\": true,\n\t\t\"verbatimModuleSyntax\": true,\n\t\t\"noUncheckedIndexedAccess\": true,\n\t\t\"noUncheckedSideEffectImports\": true,\n\t\t\"exactOptionalPropertyTypes\": true,\n\t\t\"noUnusedLocals\": true,\n\t\t\"noUnusedParameters\": true,\n\t\t\"noImplicitOverride\": true,\n\t\t\"noFallthroughCasesInSwitch\": true,\n\t\t\"forceConsistentCasingInFileNames\": true,\n\t\t\"skipLibCheck\": true,\n\t\t\"noEmit\": true,\n\t\t\"paths\": {\n{{paths}}\n\t\t}\n\t},\n\t\"exclude\": [\"node_modules\", \"dist\", \"tmp\"]\n}\n";
-              vite: "import type { {{viteTypes}} } from 'vite'\n{{imports}}import { defineConfig, mergeConfig } from 'vitest/config'\nimport tsconfig from './tsconfig.json' with { type: 'json' }\n{{helpers}}{{browsers}}import { lstatSync, readdirSync, realpathSync } from 'node:fs'\nimport { basename, join, parse, relative, resolve as resolvePath, sep } from 'node:path'\nimport { fileURLToPath, URL } from 'node:url'\n\n{{options}}export function resolveWorkspacePath(relativePath: string): string {\n\treturn fileURLToPath(new URL(relativePath, import.meta.url))\n}\n\n// A generated root config must classify its own fixed proof without importing\n// package source, so the exact-case check stays self-contained over Node APIs.\nfunction isExactCaseFile(path: string): boolean {\n\tconst full = resolvePath(path)\n\ttry {\n\t\tconst status = lstatSync(full)\n\t\tif (!status.isFile() || status.isSymbolicLink() || status.nlink !== 1) return false\n\t\tconst root = parse(full).root\n\t\tconst segments = relative(root, full).split(sep)\n\t\tlet parent = root\n\t\tfor (const segment of segments) {\n\t\t\ttry {\n\t\t\t\tif (!readdirSync(parent).includes(segment)) return false\n\t\t\t} catch {\n\t\t\t\tif (basename(realpathSync.native(join(parent, segment))) !== segment) return false\n\t\t\t}\n\t\t\tparent = join(parent, segment)\n\t\t}\n\t\treturn true\n\t} catch {\n\t\treturn false\n\t}\n}\n\nconst resolve = {\n\talias: Object.entries(tsconfig.compilerOptions.paths).reduce((aliases, [key, values]) => {\n\t\tconst [path] = values\n\t\tif (path === undefined) throw new Error('tsconfig path alias ' + key + ' has no target')\n\t\treturn Object.assign(aliases, { [key]: resolveWorkspacePath(path) })\n\t}, {}),\n}\n\n{{factories}}export default defineConfig({\n\tresolve,\n\ttest: {\n{{projects}}\n\t},\n})\n";
+              vite: "import type { {{viteTypes}} } from 'vite'\n{{imports}}import { defineConfig, mergeConfig } from 'vitest/config'\nimport tsconfig from './tsconfig.json' with { type: 'json' }\n{{helpers}}{{browsers}}import { fileURLToPath, URL } from 'node:url'\n\n{{options}}export function resolveWorkspacePath(relativePath: string): string {\n\treturn fileURLToPath(new URL(relativePath, import.meta.url))\n}\n\nconst resolve = {\n\talias: Object.entries(tsconfig.compilerOptions.paths).reduce((aliases, [key, values]) => {\n\t\tconst [path] = values\n\t\tif (path === undefined) throw new Error('tsconfig path alias ' + key + ' has no target')\n\t\treturn Object.assign(aliases, { [key]: resolveWorkspacePath(path) })\n\t}, {}),\n}\n\n{{factories}}export default defineConfig({\n\tresolve,\n\ttest: {\n{{projects}}\n\t},\n})\n";
           }>;
           factories: Readonly<{
               src: Readonly<{
                   core: "export const srcCore = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:core', color: 'magenta' },\n\t\t\t\tinclude: ['tests/src/core/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
                   browser: "export const srcBrowser = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/browser/index.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'index.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/src/browser',\n\t\t\t\trolldownOptions: {\n\t\t\t\t\t{{external}}\n{{output}}\n\t\t\t\t},\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:browser', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/browser/**/*.test.ts'],\n{{exclude}}\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n{{global}}\n\t\t\t\tbrowser: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t\t},\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
                   server: "export const srcServer = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/server/index.ts'),\n\t\t\t\t\tformats: ['es', 'cjs'],\n\t\t\t\t\tfileName: (format: string) => (format === 'es' ? 'index.js' : 'index.cjs'),\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/src/server',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: {\n\t\t\t\t\tplatform: 'node',\n\t\t\t\t\t{{external}}\n{{output}}\n\t\t\t\t},\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:server', color: 'red' },\n\t\t\t\tinclude: ['tests/src/server/**/*.test.ts'],\n{{exclude}}\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-                  bin: "export const srcBin = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/bin')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/bin/main.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'main.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/bin',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: [/^node:/, /^@orkestrel\\//, /^@src\\//] },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:bin', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/bin/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+                  bin: "export const srcBin = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/bin')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tsourcemap: true,\n\t\t\t\tminify: false,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('src/bin/main.ts'),\n\t\t\t\t\tformats: ['es'],\n\t\t\t\t\tfileName: () => 'main.js',\n\t\t\t\t},\n\t\t\t\toutDir: 'dist/bin',\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: [/^node:/, /^@orkestrel\\//, /^@src\\//] },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'src:bin', color: 'yellow' },\n\t\t\t\tinclude: ['tests/src/bin/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\t// A bin test drives the real executable over a real temporary repository, so it\n\t\t\t\t// spends seconds in process startup and filesystem work rather than milliseconds.\n\t\t\t\t// Vitest's five-second default clears one alone and times out under a full suite.\n\t\t\t\ttestTimeout: 15_000,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               }>;
               app: Readonly<{
                   core: "export const appCore = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [environmentBoundary('app/core')],\n\t\t\ttest: {\n\t\t\t\tname: { label: 'app:core', color: 'cyan' },\n\t\t\t\tinclude: ['tests/app/core/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-                  browser: "function applicationBrowser(showcase: boolean): UserConfig {\n\tconst output = showcase ? 'dist/showcase' : 'dist/app/browser'\n{{showcasePlugins}}\treturn {\n\t\tresolve,\n{{plugins}}\t\troot: resolveWorkspacePath('app/browser'),\n\t\tpublicDir: false,\n\t\tbuild: {\n{{showcaseBuild}}\t\t\temptyOutDir: true,\n\t\t\toutDir: resolveWorkspacePath(output),\n\t\t\trolldownOptions: { input: resolveWorkspacePath('app/browser/index.html') },\n\t\t},\n\t\ttest: {\n\t\t\tname: { label: 'app:browser', color: 'blue' },\n\t\t\troot: resolveWorkspacePath('.'),\n\t\t\tdir: resolveWorkspacePath('.'),\n\t\t\tinclude: ['tests/app/browser/**/*.test.ts'],\n\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n\t\t\tbrowser: {\n\t\t\t\tenabled: true,\n\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t},\n\t\t\tfileParallelism: false,\n\t\t},\n\t}\n}\n\nexport function appBrowser(...options: never[]): UserConfig {\n\tif (options.length > 0) throw new Error('Browser configuration overrides are not permitted')\n\treturn applicationBrowser(false)\n}\n{{showcaseFactory}}";
+                  browser: "function applicationBrowser(showcase: boolean): UserConfig {\n\tconst output = showcase ? 'dist/showcase' : 'dist/app/browser'\n{{showcasePlugins}}\treturn {\n\t\tresolve,\n{{plugins}}\t\troot: resolveWorkspacePath('app/browser'),\n\t\tpublicDir: false,\n\t\tbuild: {\n{{showcaseBuild}}\t\t\temptyOutDir: true,\n\t\t\toutDir: resolveWorkspacePath(output),\n\t\t\trolldownOptions: { input: resolveWorkspacePath('app/browser/index.html') },\n\t\t},\n\t\ttest: {\n\t\t\tname: { label: 'app:browser', color: 'blue' },\n\t\t\troot: resolveWorkspacePath('.'),\n\t\t\tdir: resolveWorkspacePath('.'),\n\t\t\tinclude: ['tests/app/browser/**/*.test.ts'],\n\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupBrowser.ts'],\n\t\t\tbrowser: {\n\t\t\t\tenabled: true,\n\t\t\t\tprovider: playwright(browserOptions),\n\t\t\t\tinstances: [{ browser: 'chromium', headless: true }],\n\t\t\t},\n\t\t\tfileParallelism: false,\n\t\t},\n\t}\n}\n\nexport function appBrowser(): UserConfig {\n\treturn applicationBrowser(false)\n}\n{{showcaseFactory}}";
                   server: "export const appServer = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\tpublicDir: false,\n\t\t\tplugins: [outputBoundary('dist/app/server'), environmentBoundary('app/server')],\n\t\t\tbuild: {\n\t\t\t\temptyOutDir: true,\n\t\t\t\tlib: {\n\t\t\t\t\tentry: resolveWorkspacePath('app/server/main.ts'),\n\t\t\t\t\tformats: ['cjs'],\n\t\t\t\t\tfileName: () => 'main.cjs',\n\t\t\t\t},\n\t\t\t\toutDir: resolveWorkspacePath('dist/app/server'),\n\t\t\t\ttarget: 'node22',\n\t\t\t\trolldownOptions: { external: (id: string) => id.startsWith('node:') },\n\t\t\t},\n\t\t\ttest: {\n\t\t\t\tname: { label: 'app:server', color: 'green' },\n\t\t\t\tinclude: ['tests/app/server/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupServer.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               }>;
               policy: "export const policy = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'policy', color: 'white' },\n\t\t\t\tinclude: ['tests/policy.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
@@ -1045,8 +1053,9 @@ export declare class Compiler implements CompilerInterface {
               guides: "export const guides = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'guides', color: 'green' },\n\t\t\t\tinclude: ['tests/guides.test.ts'],\n\t\t\t\texclude: ['tests/src/**/*.test.ts', 'tests/app/**/*.test.ts', 'tests/setup.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               conformance: "// Where this package drifts from the official tooling it stays compatible with.\n// The subject is this package, so the proof is hermetic and stays in `npm test`.\nexport const conformance = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'conformance', color: 'magenta' },\n\t\t\t\tinclude: ['tests/conformance.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               service: "// The live external services this package drives. It starts nothing itself:\n// `scripts/service.sh` provisions, `tests/setupService.ts` proves readiness, and\n// the project stays out of `npm test` because a real service answers it.\nexport const service = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'service', color: 'red' },\n\t\t\t\tinclude: ['tests/service/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts', './tests/setupService.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              distribution: "export const distribution = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'distribution', color: 'cyan' },\n\t\t\t\tinclude: ['tests/distribution.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
               probe: "// A workbench, not a proof. No gate selects this project.\nexport const probe = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'probe', color: 'gray' },\n\t\t\t\tinclude: ['tmp/probe/**/*.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n\t\t\t\tenvironment: 'node',\n\t\t\t\tbrowser: { enabled: false },\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
-              integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t\ttestTimeout: 120_000,\n\t\t\t\thookTimeout: 120_000,\n\t\t\t\tfileParallelism: false,\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
+              integration: "export const integration = (options?: UserConfig): UserConfig =>\n\tmergeConfig(\n\t\t{\n\t\t\tresolve,\n\t\t\ttest: {\n\t\t\t\tname: { label: 'integration', color: 'blue' },\n\t\t\t\tinclude: ['tests/integration.test.ts'],\n\t\t\t\tsetupFiles: ['./tests/setup.ts'],\n{{global}}\t\t\t\tenvironment: 'node',\n\t\t\t},\n\t\t},\n\t\toptions ?? {},\n\t)\n";
           }>;
           tsconfigs: Readonly<{
               src: Readonly<{
@@ -1169,6 +1178,9 @@ export declare class Compiler implements CompilerInterface {
             */
         export declare function createCompiler(options?: CompilerOptions): CompilerInterface;
 
+        /** The development dependencies that emit declarations for published source or an executable. */
+        export declare const DECLARATION_DEV_DEPENDENCIES: Readonly<Record<string, string>>;
+
         /** The `engines.node` range a workspace starts with. */
         export declare const DEFAULT_ENGINES = ">=22.12.0";
 
@@ -1235,6 +1247,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare const DEPENDENCY_NAME_PATTERN: RegExp;
 
+        /** The packed-package proof whose presence makes a workspace `distribution`. */
+        export declare const DISTRIBUTION_TEST_PATH = "tests/distribution.test.ts";
+
         /**
          * How one target path compares to the artifact planned for it.
          *
@@ -1385,7 +1400,7 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare const GROUPS: readonly Group[];
 
-        /** The guide-parity proof whose physical file selects the fixed `guides` project. */
+        /** The guide-parity proof whose presence selects the planned `guides` project. */
         export declare const GUIDES_TEST_PATH = "tests/guides.test.ts";
 
         /** Exact lowercase hexadecimal bytes: two digits per byte, and empty content is valid. */
@@ -1416,7 +1431,9 @@ export declare class Compiler implements CompilerInterface {
          * exist. That is why the ownership here is narrowed away from `content`: a
          * claim over bytes nobody has read is a claim that cannot be checked. Reading
          * the vendored root turns the ones scaffold owns the bytes of into
-         * {@link HydratedArtifact}.
+         * {@link HydratedArtifact}. Workspace-owned paths and paths whose bytes belong
+         * to another verb stay plain host artifacts, because this writer claims only
+         * their presence.
          */
         export declare interface HostArtifact extends ArtifactBase {
             readonly origin: 'host';
@@ -1508,7 +1525,7 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function inferGroup(path: string): Group;
 
-        /** The installed-package proof whose presence makes a workspace `integration`. */
+        /** The cross-environment composition proof whose presence makes a workspace `integration`. */
         export declare const INTEGRATION_TEST_PATH = "tests/integration.test.ts";
 
         /** Visible characters a target-relative path and a Markdown path cell both forbid. */
@@ -1962,6 +1979,29 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function matchesOrchestrationPath(path: string): boolean;
 
+        /**
+         * Test whether one emitted line fits the vendored formatter width.
+         *
+         * @param line - One emitted line, leading tabs included.
+         * @returns `true` when the expanded line fits.
+         *
+         * @remarks
+         * A generator writes source the formatter then reads back, so a line packed
+         * past the vendored width is rewrapped on the next `format` run and the emitted
+         * bytes stop matching the plan the audit compares against. The generator
+         * therefore measures a candidate line and chooses the shape the formatter would
+         * have chosen. Tabs are expanded first because the formatter counts them as
+         * `TAB_WIDTH` columns rather than as one character.
+         *
+         * @example
+         * ```ts
+         * import { matchesPrintWidth } from '@orkestrel/scaffold'
+         *
+         * matchesPrintWidth('\t\tprojects: [core],') // true
+         * ```
+         */
+        export declare function matchesPrintWidth(line: string): boolean;
+
         /**
          * Test whether a declared range already admits a published version.
          *
@@ -2470,6 +2510,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function planToSummary(plan: Plan): PlanSummary;
 
+        /** Columns one emitted line may occupy, matching `printWidth` in `.oxfmtrc.json`. */
+        export declare const PRINT_WIDTH = 100;
+
         /**
          * One validation issue raised against a blueprint or a plan.
          *
@@ -2771,6 +2814,9 @@ export declare class Compiler implements CompilerInterface {
          */
         export declare function srcToRoot(src: readonly Environment[]): Environment | undefined;
 
+        /** Columns one tab occupies when the formatter measures a line, matching `tabWidth`. */
+        export declare const TAB_WIDTH = 2;
+
         /** The exact three-component version syntax a blueprint declares. */
         export declare const VERSION_PATTERN: RegExp;
 
@@ -2793,4 +2839,15 @@ export declare class Compiler implements CompilerInterface {
             readonly showcase: boolean;
         }
 
+        /**
+         * The vendored paths whose present bytes belong to each workspace, frozen.
+         *
+         * @remarks
+         * These paths are copied into a workspace when absent and are never compared
+         * or replaced while present. A workspace therefore stops receiving later
+         * canonical updates to them. `.gitignore` takes that trade because its correct
+         * rules differ by workspace, so scaffold cannot own its bytes.
+         */
+        export declare const WORKSPACE_OWNED_PATHS: readonly string[];
+
         export { }