@orkestrel/scaffold 0.0.4 → 0.0.6

package/dist/src/core/index.cjs

@@ -104,9 +104,12 @@ var APP_MATRIX = Object.freeze({
 * The root docs (`AGENTS.md` / `CLAUDE.md`), `LICENSE`, `.agents`, `.claude`, `.codex`,
 * the four SessionStart hook scripts (`scripts/deps.sh` / `scripts/cursor.sh` /
 * `scripts/codex.sh` / `scripts/ollama.sh`), the repository coding-law policy module,
-* the line's seven byte-identical root dotfiles, and the two guides-grouped mirrors every repo carries: the line-wide
-* dev-tooling guide (`guides/src/guide.md`) and the
-* scaffold engine's own self-guide (`guides/src/scaffold.md`).
+* the line's seven byte-identical root dotfiles, and the two guides-grouped
+* mirror candidates: the line-wide dev-tooling guide
+* (`guides/src/guide.md`) and the scaffold engine's own self-guide
+* (`guides/src/scaffold.md`). `stageHost` vendors both; each plan carries the
+* subset selected by `selectHostPaths`, omitting the target blueprint's own
+* guide.
 */
 var HOST_PATHS = Object.freeze([
 	"AGENTS.md",
@@ -218,15 +221,15 @@ var DEFAULT_VERSION = "0.0.1";
 /** The `engines.node` range the `blueprint` builder fills. */
 var DEFAULT_ENGINES = `>=${MINIMUM_NODE_VERSION}`;
 /** The devDependency range generated packages pin `@orkestrel/scaffold` at. */
-var SCAFFOLD_RANGE = "^0.0.4";
+var SCAFFOLD_RANGE = "^0.0.6";
 /** Tooling versions shared by scaffold and every generated workspace. */
 var BASE_DEV_DEPENDENCIES = Object.freeze({
 	"@microsoft/api-extractor": "^7.58.12",
 	"@orkestrel/guide": "^0.0.5",
 	"@orkestrel/scaffold": SCAFFOLD_RANGE,
-	"@types/node": "^26.1.1",
-	oxfmt: "^0.60.0",
-	oxlint: "^1.75.0",
+	"@types/node": "^26.1.2",
+	oxfmt: "^0.61.0",
+	oxlint: "^1.76.0",
 	typescript: "^6.0.3",
 	vite: "^8.1.5",
 	"vite-plugin-dts": "^5.0.3",
@@ -1140,6 +1143,22 @@ function snapshotOf(current) {
 	return Object.fromEntries(entries);
 }
 /**
+* Select host paths without the guide owned by the target blueprint.
+*
+* @param paths - Host artifact paths in deterministic input order.
+* @param name - The target blueprint's unscoped package name.
+* @returns Every host path except `guides/src/<name>.md`, in input order.
+*
+* @example
+* ```ts
+* selectHostPaths(['guides/src/guide.md', 'LICENSE'], 'guide') // ['LICENSE']
+* ```
+*/
+function selectHostPaths(paths, name) {
+	const guide = `guides/src/${name}.md`;
+	return paths.filter((path) => path !== guide);
+}
+/**
 * Find the first exact or portable case-insensitive path collision.
 *
 * @param paths - Portable paths in deterministic input order.
@@ -1442,6 +1461,29 @@ function manifestToDependencies(manifestText) {
 	return dependencies;
 }
 /**
+* Project a `package.json` text to its own string `name`.
+*
+* @param manifest - The `package.json` file content.
+* @returns The own string `name`, or `undefined` when the manifest exceeds its
+* byte ceiling, is malformed, has a non-object root, or has no own string
+* `name`.
+*
+* @example
+* ```ts
+* import { manifestToName } from '@orkestrel/scaffold'
+*
+* manifestToName('{"name":"@orkestrel/router"}') // '@orkestrel/router'
+* manifestToName('{}') // undefined
+* ```
+*/
+function manifestToName(manifest) {
+	if (manifest.length > 1048576 || contentByteLength(manifest) > 1048576) return;
+	const parsed = (0, _orkestrel_contract.parseJSON)(manifest);
+	if (!(0, _orkestrel_contract.isRecord)(parsed)) return void 0;
+	const name = ownDataValue(parsed, "name");
+	return typeof name === "string" ? name : void 0;
+}
+/**
 * Compare a declared range to the registry latest.
 *
 * @param range - The declared semver range.
@@ -2146,6 +2188,7 @@ var isPlan = (0, _orkestrel_contract.andOf)((0, _orkestrel_contract.andOf)((0, _
 function validatePlan(plan) {
 	const blueprintValidation = validateBlueprint(plan.blueprint);
 	const questions = [...blueprintValidation.questions];
+	const warnings = [...blueprintValidation.warnings];
 	if (!hasValidPlanBytes(plan)) questions.push({
 		field: "artifacts",
 		text: "Plan artifact content exceeds the retained byte limits",
@@ -2170,16 +2213,20 @@ function validatePlan(plan) {
 			});
 			continue;
 		}
-		if (artifact.path === "package.json") questions.push({
-			field: "overrides",
-			text: "Override path \"package.json\" targets the blueprint-owned publication boundary",
-			blocking: true
-		});
+		if (artifact.path === "package.json") {
+			questions.push({
+				field: "overrides",
+				text: "Override path \"package.json\" targets the blueprint-owned publication boundary",
+				blocking: true
+			});
+			continue;
+		}
+		warnings.push(`Override path "${item.path}" replaces its planned artifact content`);
 	}
 	return {
 		valid: questions.length === 0,
 		questions,
-		warnings: blueprintValidation.warnings
+		warnings
 	};
 }
 /** Determine whether every guide body fits the public UTF-8 artifact byte limit. */
@@ -5685,30 +5732,69 @@ function rootTsconfig(src, app = []) {
 	});
 }
 /**
+* Derive which host-specific machinery a workspace's generated root
+* `vite.config.ts` carries from its declared environments.
+*
+* @remarks
+* This is the SOLE derivation of that set; `rootViteConfig`,
+* `singleSrcViteConfig`, `applicationViteConfig`, and `configArtifacts` all
+* read it rather than recomputing an axis of their own. Nothing here selects
+* a boundary GUARANTEE — the environment-boundary plugin, its module-graph
+* AST audit, and stylesheet rejection ship in every shape.
+*
+* @param src - The declared published `Environment[]`.
+* @param app - The declared application `Environment[]`, defaulting to none.
+* @param engine - Whether the workspace also builds its own executable.
+* @returns The machinery set the generated header renders.
+*
+* @example
+* ```ts
+* viteMachinery(['core']) // { browser: false, vue: false, output: true }
+* viteMachinery([], ['core']) // { browser: false, vue: false, output: false }
+* ```
+*/
+function viteMachinery(src, app = [], engine = false) {
+	const unbuilt = src.length === 0 && app.length > 0 && !engine && app.every((environment) => environment === "core");
+	return {
+		browser: src.includes("browser") || app.includes("browser"),
+		vue: app.includes("browser"),
+		output: !unbuilt
+	};
+}
+/**
 * The rendered import / `resolve` header block every `rootViteConfig` shape
-* prefixes — the official Playwright provider import appears only when
-* `needsPlaywright`, per the three grounded `rootViteConfig`
-* shapes: unconditional for a multi-environment blueprint, conditional on the
-* sole environment being `'browser'` for a single non-`core` environment, absent for
-* `core`-only.
-*
-* @param needsPlaywright - Whether this shape ships a browser test project (and so needs Playwright).
-* @param needsVue - Whether the generated root imports the Vue Vite plugin.
+* prefixes — the environment boundary and every guarantee it enforces ship
+* unconditionally; `machinery` selects only the host-specific pipelines layered
+* over them, per the three grounded `rootViteConfig` shapes: browser machinery
+* unconditional for a multi-environment blueprint carrying `browser`,
+* conditional on the sole environment being `'browser'` for a single non-`core`
+* environment, absent for `core`-only.
+*
+* @param machinery - The host-specific machinery this shape carries, from `viteMachinery`.
 * @returns The rendered header block, newline-terminated.
 *
 * @example
 * ```ts
-* viteHeader(false).includes('@vitest/browser-playwright') // false
-* viteHeader(true).includes('@vitest/browser-playwright') // true
+* viteHeader(viteMachinery(['core'])).includes('@vitest/browser-playwright') // false
+* viteHeader(viteMachinery(['core', 'browser'])).includes('@vitest/browser-playwright') // true
 * ```
 */
-function viteHeader(needsPlaywright, needsVue = false) {
-	const playwrightImports = needsPlaywright ? `import { playwright } from '@vitest/browser-playwright'
+function viteHeader(machinery) {
+	const { browser: needsBrowser, vue: needsVue, output: needsOutput } = machinery;
+	const playwrightImports = needsBrowser ? `import { playwright } from '@vitest/browser-playwright'
 import { chromium } from 'playwright'
 ` : "";
 	const vueImports = needsVue ? `import vue from '@vitejs/plugin-vue'
 import { parse as parseVue } from 'vue/compiler-sfc'
 ` : "";
+	const viteTypeImports = needsVue ? `import type {
+	CSSOptions,
+	HtmlAssetSource,
+	HTMLOptions,
+	Plugin,
+	ResolvedConfig,
+	UserConfig,
+} from 'vite'` : needsBrowser ? `import type { CSSOptions, Plugin, ResolvedConfig, UserConfig } from 'vite'` : `import type { Plugin, UserConfig } from 'vite'`;
 	const vueBoundary = needsVue ? `,
 		transform: {
 			order: 'pre',
@@ -5868,11 +5954,10 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 				}
 				return restored === code ? null : restored
 			},
-		}` : `,
+		}` : needsBrowser ? `,
 		transform: {
 			order: 'pre',
 			async handler(code, id) {
-				const restored = /[?&]html-proxy(?:[=&]|$)/.test(id) ? restoreIgnoredHtml(code) : code
 				const target = workspacePath(id)
 				const physicalImporter = physicalPath(id)
 				const importerPackageRoot = trustedPackageRootFor(physicalImporter, trustedPackageRoots)
@@ -5886,15 +5971,13 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 				}
 				const environmentModule =
 					target !== undefined && /^(?:app|src)\\/(?:core|browser|server)\\//.test(target)
-				if (!environmentModule && importerPackageRoot === undefined) {
-					return restored === code ? null : restored
-				}
+				if (!environmentModule && importerPackageRoot === undefined) return null
 				if (isCSSRequest(id)) {
 					const config = resolvedConfig
 					if (config === undefined) {
 						this.error('Environment boundary requires resolved Vite configuration')
 					}
-					const stylesheet = await preprocessCSS(restored, id, config)
+					const stylesheet = await preprocessCSS(code, id, config)
 					for (const dependency of stylesheet.deps ?? []) {
 						const physicalDependency = physicalPath(dependency)
 						const dependencyTarget = workspacePath(physicalDependency)
@@ -5908,7 +5991,7 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 						if (dependencyError !== undefined) this.error(dependencyError)
 					}
 				}
-				for (const source of await environmentAssetSources(restored, id)) {
+				for (const source of await environmentAssetSources(code, id)) {
 					const normalizedSource = source.replaceAll('\\\\', '/')
 					const sourceError = environmentSourceError(owner, normalizedSource)
 					if (sourceError !== undefined) this.error(sourceError)
@@ -5951,12 +6034,74 @@ import { parse as parseVue } from 'vue/compiler-sfc'
 					const assetError = environmentPathError(owner, resolvedSource)
 					if (assetError !== undefined) this.error(assetError)
 				}
-				return restored === code ? null : restored
+				return null
+			},
+		}` : `,
+		transform: {
+			order: 'pre',
+			async handler(code, id) {
+				const target = workspacePath(id)
+				const physicalImporter = physicalPath(id)
+				const importerPackageRoot = trustedPackageRootFor(physicalImporter, trustedPackageRoots)
+				if (target === undefined) {
+					if (isOutsideWorkspacePath(id) && importerPackageRoot === undefined) {
+						this.error('Environment modules cannot import files outside the workspace')
+					}
+				} else {
+					const pathError = environmentPathError(owner, target)
+					if (pathError !== undefined) this.error(pathError)
+				}
+				const environmentModule =
+					target !== undefined && /^(?:app|src)\\/(?:core|browser|server)\\//.test(target)
+				if (!environmentModule && importerPackageRoot === undefined) return null
+				for (const source of await environmentAssetSources(code, id)) {
+					const normalizedSource = source.replaceAll('\\\\', '/')
+					const sourceError = environmentSourceError(owner, normalizedSource)
+					if (sourceError !== undefined) this.error(sourceError)
+					const [sourcePath] = normalizedSource.split(/[?#]/)
+					if (sourcePath !== undefined && isBuiltin(sourcePath)) continue
+					const resolution = await this.resolve(normalizedSource, id, { skipSelf: true })
+					const fallbackSource = sourceFallback(physicalImporter, normalizedSource)
+					const physicalSource = physicalPath(resolution?.id ?? fallbackSource)
+					if (importerPackageRoot !== undefined) {
+						const pathLike =
+							normalizedSource.startsWith('.') ||
+							normalizedSource.startsWith('/') ||
+							/^file:/i.test(normalizedSource) ||
+							/^[A-Za-z]:[\\\\/]/.test(normalizedSource)
+						if (pathLike && !containedPath(importerPackageRoot, physicalSource)) {
+							this.error(
+								'Dependency modules cannot import files outside their physical package root',
+							)
+						}
+						if (!pathLike && !containedPath(importerPackageRoot, physicalSource)) {
+							const packageName = packageNameOf(normalizedSource)
+							const packageRoot = normalizedSource.startsWith('#')
+								? workspacePath(physicalSource) === undefined
+									? packageRootForResolved(physicalSource)
+									: undefined
+								: packageName === undefined
+									? undefined
+									: packageRootOf(packageName, physicalSource)
+							if (packageRoot === undefined || !containedPath(packageRoot, physicalSource)) {
+								this.error('Resolved dependencies must remain inside their physical package root')
+							}
+							trustedPackageRoots.add(packageRoot)
+						}
+						continue
+					}
+					const resolvedSource = workspacePath(physicalSource)
+					if (resolvedSource === undefined) {
+						this.error('Environment modules cannot import files outside the workspace')
+					}
+					const assetError = environmentPathError(owner, resolvedSource)
+					if (assetError !== undefined) this.error(assetError)
+				}
+				return null
 			},
 		}`;
 	const environmentBoundary = `
-${CONST_KEYWORD} WORKSPACE_ROOT = realpathSync.native(dirname(fileURLToPath(import.meta.url)))
-${EXPORT_KEYWORD} ${CONST_KEYWORD} IMPORT_META_ENV_PREFIX = 'import.meta.env.'
+${CONST_KEYWORD} WORKSPACE_ROOT = realpathSync.native(dirname(fileURLToPath(import.meta.url)))${needsVue ? `\n${EXPORT_KEYWORD} ${CONST_KEYWORD} IMPORT_META_ENV_PREFIX = 'import.meta.env.'` : ""}
 
 ${EXPORT_KEYWORD} function physicalPath(path: string): string {
 	const [pathWithoutQuery] = path.split('?')
@@ -6001,9 +6146,9 @@ ${EXPORT_KEYWORD} function containedPath(root: string, target: string): boolean
 		relativePath === '' ||
 		(relativePath !== '..' && !relativePath.startsWith(\`..\${sep}\`) && !isAbsolute(relativePath))
 	)
-}
+}${needsVue ? `
 
-${needsVue ? `${EXPORT_KEYWORD} function browserServerRoots(): readonly string[] {
+${EXPORT_KEYWORD} function browserServerRoots(): readonly string[] {
 	const roots: string[] = []
 	for (const path of [
 		'app/browser',
@@ -6285,7 +6430,7 @@ ${EXPORT_KEYWORD} function environmentSourceError(owner: string, source: string)
 	return undefined
 }
 
-${EXPORT_KEYWORD} function stylesheetAssetError(
+${needsBrowser ? `${EXPORT_KEYWORD} function stylesheetAssetError(
 	source: string | undefined,
 	value: string,
 ): string | undefined {
@@ -6332,7 +6477,7 @@ ${EXPORT_KEYWORD} function stylesheetAssetError(
 	return undefined
 }
 
-${EXPORT_KEYWORD} function enforceOutputPath(configured: string, expected: string): void {
+` : ""}${needsOutput ? `${EXPORT_KEYWORD} function enforceOutputPath(configured: string, expected: string): void {
 	if (relative(expected, configured) !== '') {
 		throw new Error(
 			'[orkestrel-output-boundary] Build output must use its exact configured workspace directory',
@@ -6399,7 +6544,7 @@ ${EXPORT_KEYWORD} function outputBoundary(output: string): Plugin {
 	}
 }
 
-${EXPORT_KEYWORD} function decodeAssetSource(source: string): string | undefined {
+` : ""}${EXPORT_KEYWORD} function decodeAssetSource(source: string): string | undefined {
 	try {
 		return decodeURI(source)
 	} catch {
@@ -6407,7 +6552,7 @@ ${EXPORT_KEYWORD} function decodeAssetSource(source: string): string | undefined
 	}
 }
 
-${EXPORT_KEYWORD} function filterHtmlAssetSource(
+${needsVue ? `${EXPORT_KEYWORD} function filterHtmlAssetSource(
 	data: Parameters<NonNullable<HtmlAssetSource['filter']>>[0],
 ): boolean {
 	const decoded = decodeAssetSource(data.value)
@@ -6552,7 +6697,7 @@ ${EXPORT_KEYWORD} function maskIgnoredHtml(environmentKeys: ReadonlySet<string>,
 	)
 }
 
-${EXPORT_KEYWORD} function restoreIgnoredHtml(code: string): string {
+` : ""}${needsVue ? `${EXPORT_KEYWORD} function restoreIgnoredHtml(code: string): string {
 	const literals = code.replace(
 		/(?<prefix>[vV][iI][tT][eE])&#45;(?<suffix>[iI][gG][nN][oO][rR][eE])/gu,
 		'$<prefix>-$<suffix>',
@@ -6608,7 +6753,7 @@ ${EXPORT_KEYWORD} function finalizeHtml(): Plugin {
 	}
 }
 
-${EXPORT_KEYWORD} async function environmentAssetSources(
+` : ""}${EXPORT_KEYWORD} async function environmentAssetSources(
 	code: string,
 	id: string,
 	emitted = false,
@@ -6693,23 +6838,19 @@ ${EXPORT_KEYWORD} async function environmentAssetSources(
 			}
 		},
 	})
-	visitor.visit(parseAst(transformed.code, null, path))
+	visitor.visit(parseSync(path, transformed.code).program)
 	return sources
 }
 
 ${EXPORT_KEYWORD} function environmentBoundary(
 	owner: 'src/core' | 'src/browser' | 'src/server' | 'app/core' | 'app/browser' | 'app/server',
 ): Plugin {
-	const trustedPackageRoots = new Set<string>()
-	let environmentRoot = WORKSPACE_ROOT
-	let resolvedConfig: ResolvedConfig | undefined
+	const trustedPackageRoots = new Set<string>()${needsOutput ? "\n	let environmentRoot = WORKSPACE_ROOT" : ""}${needsBrowser ? "\n	let resolvedConfig: ResolvedConfig | undefined" : ""}
 	return {
 		name: 'orkestrel-environment-boundary',
-		enforce: 'pre',
-		configResolved(config) {
-			environmentRoot = physicalPath(config.root)
-			resolvedConfig = config
-		},
+		enforce: 'pre',${needsOutput || needsBrowser ? `
+		configResolved(config) {${needsOutput ? "\n			environmentRoot = physicalPath(config.root)" : ""}${needsBrowser ? "\n			resolvedConfig = config" : ""}
+		},` : ""}
 ${needsVue ? `		configureServer(server) {
 			if (owner !== 'app/browser') return
 			const roots = browserServerRoots()
@@ -6842,7 +6983,7 @@ ${needsVue ? `		configureServer(server) {
 				}
 			}
 			return null
-		},
+		},${needsOutput ? `
 		async generateBundle(_options, bundle) {
 			for (const output of Object.values(bundle)) {
 				if (output.type === 'chunk') {
@@ -6872,7 +7013,7 @@ ${needsVue ? `		configureServer(server) {
 					if (pathError !== undefined) this.error(pathError)
 				}
 			}
-		},
+		},` : ""}
 		buildEnd(error) {
 			if (error !== undefined) return
 			for (const id of this.getModuleIds()) {
@@ -6893,16 +7034,10 @@ ${needsVue ? `		configureServer(server) {
 	}
 }
 `;
-	return `import type {
-	CSSOptions,
-	HtmlAssetSource,
-	HTMLOptions,
-	Plugin,
-	ResolvedConfig,
-	UserConfig,
-} from 'vite'
-import { isCSSRequest, parseAst, preprocessCSS, transformWithOxc, Visitor } from 'vite'
-import { defineConfig, mergeConfig } from 'vitest/config'
+	return `${viteTypeImports}
+${needsBrowser ? `import { isCSSRequest, parseSync, preprocessCSS, transformWithOxc, Visitor } from 'vite'
+` : `import { parseSync, transformWithOxc, Visitor } from 'vite'
+`}import { defineConfig, mergeConfig } from 'vitest/config'
 import tsconfig from './tsconfig.json' with { type: 'json' }
 import { fileURLToPath, URL } from 'node:url'
 import { isBuiltin } from 'node:module'
@@ -6917,8 +7052,7 @@ import {
 	realpathSync,
 } from 'node:fs'
 import { dirname, isAbsolute, relative, resolve as resolvePath, sep } from 'node:path'
-${playwrightImports}${vueImports}
-${needsPlaywright ? `${CONST_KEYWORD} hasChromium = existsSync(chromium.executablePath())\n` : ""}
+${playwrightImports}${vueImports}${needsBrowser ? `\n${CONST_KEYWORD} hasChromium = existsSync(chromium.executablePath())\n` : ""}
 ${EXPORT_KEYWORD} function resolveWorkspacePath(relativePath: string): string {
 	return fileURLToPath(new URL(relativePath, import.meta.url))
 }
@@ -6939,7 +7073,7 @@ ${CONST_KEYWORD} resolve = {
 	}, {}),
 }
 
-${EXPORT_KEYWORD} ${CONST_KEYWORD} ENVIRONMENT_CSS = Object.freeze({
+${needsBrowser ? `${EXPORT_KEYWORD} ${CONST_KEYWORD} ENVIRONMENT_CSS = Object.freeze({
 	transformer: 'lightningcss',
 	lightningcss: {
 		visitor: () => {
@@ -6970,7 +7104,7 @@ ${EXPORT_KEYWORD} ${CONST_KEYWORD} ENVIRONMENT_CSS = Object.freeze({
 		},
 	},
 } satisfies CSSOptions)
-${EXPORT_KEYWORD} ${CONST_KEYWORD} PACKAGE_MANIFEST_BYTES = 1_048_576
+` : ""}${EXPORT_KEYWORD} ${CONST_KEYWORD} PACKAGE_MANIFEST_BYTES = 1_048_576
 ${EXPORT_KEYWORD} ${CONST_KEYWORD} ENVIRONMENT_MODULE_BYTES = 8_388_608
 ${environmentBoundary}`;
 }
@@ -7007,18 +7141,17 @@ function policyViteProject() {
 * ```
 */
 function singleSrcViteConfig(environment) {
-	const header = viteHeader(environment === "browser");
+	const machinery = viteMachinery([environment]);
+	const header = viteHeader(machinery);
 	if (environment === "browser") return `${header}
+if (!hasChromium) console.warn('browser projects skipped: Chromium absent (${SRC_MATRIX.browser.project})')
 ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
 			resolve,
 			css: ENVIRONMENT_CSS,
 			publicDir: false,
-			plugins: [
-				outputBoundary('dist/src/browser'),
-				environmentBoundary('src/browser'),
-			],
+			plugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],
 			build: {
 				assetsInlineLimit: 0,
 				emptyOutDir: true,
@@ -7070,7 +7203,7 @@ ${EXPORT_KEYWORD} const guides = (config?: UserConfig): UserConfig =>
 export default defineConfig({
 	resolve,
 	test: {
-		projects: [srcBrowser, policy, guides],
+		projects: [...(hasChromium ? [srcBrowser] : []), policy, guides],
 	},
 })
 `;
@@ -7078,13 +7211,9 @@ export default defineConfig({
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,
-			css: ENVIRONMENT_CSS,
+			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
 			publicDir: false,
-			plugins: [
-				outputBoundary('dist/src/server'),
-				environmentBoundary('src/server'),
-			],
+			plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 			build: {
 				emptyOutDir: true,
 				sourcemap: true,
@@ -7166,7 +7295,8 @@ export default defineConfig({
 function rootViteConfig(src, engine = false) {
 	const hasCore = src.includes("core");
 	const nonCore = src.filter((environment) => environment !== "core");
-	const header = viteHeader(src.includes("browser"));
+	const machinery = viteMachinery(src);
+	const header = viteHeader(machinery);
 	if (!hasCore) {
 		const [onlyEnvironment] = nonCore;
 		if (onlyEnvironment === "browser" || onlyEnvironment === "server") return singleSrcViteConfig(onlyEnvironment);
@@ -7178,10 +7308,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 			{
 				css: ENVIRONMENT_CSS,
 				publicDir: false,
-				plugins: [
-					outputBoundary('dist/src/browser'),
-					environmentBoundary('src/browser'),
-				],
+				plugins: [outputBoundary('dist/src/browser'), environmentBoundary('src/browser')],
 				build: {
 					assetsInlineLimit: 0,
 					lib: {
@@ -7217,13 +7344,9 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	srcCore(
 		mergeConfig(
-			{
-				css: ENVIRONMENT_CSS,
+			{${machinery.browser ? "\n				css: ENVIRONMENT_CSS," : ""}
 				publicDir: false,
-				plugins: [
-					outputBoundary('dist/src/server'),
-					environmentBoundary('src/server'),
-				],
+				plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 				build: {
 					lib: {
 						entry: resolveWorkspacePath('src/server/index.ts'),
@@ -7306,14 +7429,18 @@ ${EXPORT_KEYWORD} const integration = (config?: UserConfig): UserConfig =>
 	const blocks = nonCore.map((environment) => environment === "browser" ? browserBlock : serverBlock).join("") + binBlock;
 	const projectNames = [
 		...hasCore ? ["srcCore"] : [],
-		...nonCore.map((environment) => `src${pascalCase(environment)}`),
+		...nonCore.map((environment) => environment === "browser" ? "...(hasChromium ? [srcBrowser] : [])" : `src${pascalCase(environment)}`),
 		"policy",
 		"guides",
 		...engine ? ["srcBin"] : [],
 		...engine ? ["integration"] : []
 	];
+	const inlineProjects = `		projects: [${projectNames.join(", ")}],`;
+	const renderedProjects = computeColumnWidth(inlineProjects) <= 100 ? inlineProjects : `		projects: [
+${projectNames.map((project) => `			${project},`).join("\n")}
+		],`;
 	return `${header}
-${EXPORT_KEYWORD} const srcCore = (config?: UserConfig): UserConfig =>
+${machinery.browser ? `if (!hasChromium) console.warn('browser projects skipped: Chromium absent (${SRC_MATRIX.browser.project})')\n` : ""}${EXPORT_KEYWORD} const srcCore = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
 			resolve,
@@ -7352,7 +7479,7 @@ ${blocks}
 export default defineConfig({
 	resolve,
 	test: {
-		projects: [${projectNames.join(", ")}],
+${renderedProjects}
 	},
 })
 `;
@@ -7373,7 +7500,8 @@ export default defineConfig({
 */
 function applicationViteConfig(src, app, engine = false) {
 	const hasSourceCore = src.includes("core");
-	const header = viteHeader(src.includes("browser") || app.includes("browser"), app.includes("browser"));
+	const machinery = viteMachinery(src, app, engine);
+	const header = viteHeader(machinery);
 	const projects = [];
 	const blocks = [];
 	if (src.includes("core")) {
@@ -7382,8 +7510,7 @@ function applicationViteConfig(src, app, engine = false) {
 ${EXPORT_KEYWORD} const srcCore = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,
-			css: ENVIRONMENT_CSS,
+			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
 			publicDir: false,
 			plugins: [environmentBoundary('src/core')],
 			build: { emptyOutDir: true, sourcemap: true, minify: false },
@@ -7400,7 +7527,7 @@ ${EXPORT_KEYWORD} const srcCore = (config?: UserConfig): UserConfig =>
 `);
 	}
 	if (src.includes("browser")) {
-		projects.push("srcBrowser");
+		projects.push("...(hasChromium ? [srcBrowser] : [])");
 		const coreOutput = hasSourceCore ? `
 					output: { paths: { '@src/core': '../core/index.js' } },` : "";
 		const coreExternal = hasSourceCore ? `id === '@src/core' || ` : "";
@@ -7465,8 +7592,7 @@ ${EXPORT_KEYWORD} const srcBrowser = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,
-			css: ENVIRONMENT_CSS,
+			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
 			publicDir: false,
 			plugins: [outputBoundary('dist/src/server'), environmentBoundary('src/server')],
 			build: {
@@ -7502,8 +7628,7 @@ ${EXPORT_KEYWORD} const srcServer = (config?: UserConfig): UserConfig =>
 ${EXPORT_KEYWORD} const appCore = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,
-			css: ENVIRONMENT_CSS,
+			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
 			publicDir: false,
 			plugins: [environmentBoundary('app/core')],
 			test: {
@@ -7519,7 +7644,7 @@ ${EXPORT_KEYWORD} const appCore = (config?: UserConfig): UserConfig =>
 `);
 	}
 	if (app.includes("browser")) {
-		projects.push("appBrowser()");
+		projects.push("...(hasChromium ? [appBrowser()] : [])");
 		blocks.push(`
 ${EXPORT_KEYWORD} function appBrowser(...config: readonly never[]): UserConfig {
 	if (config.length > 0) {
@@ -7580,8 +7705,7 @@ ${EXPORT_KEYWORD} function appBrowser(...config: readonly never[]): UserConfig {
 ${EXPORT_KEYWORD} const appServer = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
-			resolve,
-			css: ENVIRONMENT_CSS,
+			resolve,${machinery.browser ? "\n			css: ENVIRONMENT_CSS," : ""}
 			publicDir: false,
 			plugins: [outputBoundary('dist/app/server'), environmentBoundary('app/server')],
 			build: {
@@ -7654,8 +7778,22 @@ ${EXPORT_KEYWORD} const integration = (config?: UserConfig): UserConfig =>
 	)
 `);
 	}
+	const projectNames = [
+		...projects,
+		"policy",
+		"guides"
+	];
+	const inlineProjects = `		projects: [${projectNames.join(", ")}],`;
+	const renderedProjects = computeColumnWidth(inlineProjects) <= 100 ? inlineProjects : `		projects: [
+${projectNames.map((project) => `			${project},`).join("\n")}
+		],`;
+	const browserProjects = [...src.includes("browser") ? [SRC_MATRIX.browser.project] : [], ...app.includes("browser") ? [APP_MATRIX.browser.project] : []];
+	const browserNotice = serializeTypeScriptString(`browser projects skipped: Chromium absent (${browserProjects.join(", ")})`);
+	const inlineBrowserNotice = `if (!hasChromium) console.warn(${browserNotice})`;
+	const renderedBrowserNotice = browserProjects.length === 0 ? void 0 : computeColumnWidth(inlineBrowserNotice) <= 100 ? inlineBrowserNotice : `if (!hasChromium)
+	console.warn(${browserNotice})`;
 	return `${header}
-${policyViteProject()}
+${renderedBrowserNotice === void 0 ? "" : `${renderedBrowserNotice}\n`}${policyViteProject()}
 ${EXPORT_KEYWORD} const guides = (config?: UserConfig): UserConfig =>
 	mergeConfig(
 		{
@@ -7675,17 +7813,13 @@ ${blocks.join("")}
 export default defineConfig({
 	resolve,
 	test: {
-		projects: [${[
-		...projects,
-		"policy",
-		"guides"
-	].join(", ")}],
+${renderedProjects}
 	},
 })
 `;
 }
 /**
-* `configs/src/tsconfig.core.json` — unchanged core shape.
+* `configs/src/tsconfig.core.json` — host-neutral core with web interop declarations.
 *
 * @returns The core environment `tsconfig` file content, newline-terminated.
 *
@@ -7698,7 +7832,7 @@ function coreTsconfig() {
 	return formatJson({
 		extends: "../../tsconfig.json",
 		compilerOptions: {
-			lib: ["ESNext"],
+			lib: ["ESNext", "WebWorker"],
 			types: [],
 			noEmit: false,
 			declaration: true,
@@ -7713,6 +7847,7 @@ function coreTsconfig() {
 * `configs/src/vite.core.config.ts` — inlines its own `build.lib` /
 * `rolldownOptions` (core's `srcCore` root export carries no build.lib).
 *
+* @param browser - Whether a declared browser environment enables the shared CSS pipeline.
 * @returns The core environment `vite.config.ts` file content, newline-terminated.
 *
 * @example
@@ -7720,12 +7855,11 @@ function coreTsconfig() {
 * coreViteConfig().includes('srcCore(') // true
 * ```
 */
-function coreViteConfig() {
+function coreViteConfig(browser = true) {
 	return `import { defineConfig } from 'vite'
 import dts from 'vite-plugin-dts'
 import {
-	ENVIRONMENT_CSS,
-	environmentBoundary,
+${browser ? "	ENVIRONMENT_CSS,\n" : ""}	environmentBoundary,
 	outputBoundary,
 	srcCore,
 	resolveWorkspacePath,
@@ -7733,8 +7867,7 @@ import {
 
 export default defineConfig(
 	srcCore({
-		css: ENVIRONMENT_CSS,
-		publicDir: false,
+${browser ? "		css: ENVIRONMENT_CSS,\n" : ""}		publicDir: false,
 		plugins: [
 			outputBoundary('dist/src/core'),
 			environmentBoundary('src/core'),
@@ -7854,7 +7987,7 @@ function appTsconfig(environment, hasCore) {
 				"ESNext",
 				"DOM",
 				"DOM.Iterable"
-			] : ["ESNext"],
+			] : environment === "core" ? ["ESNext", "WebWorker"] : ["ESNext"],
 			types: environment === "browser" ? ["vite/client", "vue"] : environment === "server" ? ["node"] : []
 		},
 		include
@@ -7956,6 +8089,7 @@ ${spec.engine || spec.src.includes("browser") || spec.app.includes("browser") ?
 * ```
 */
 function configArtifacts(spec) {
+	const machinery = viteMachinery(spec.src, spec.app, spec.engine);
 	const artifacts = [{
 		path: "tsconfig.json",
 		group: "configs",
@@ -7971,7 +8105,7 @@ function configArtifacts(spec) {
 		const row = SRC_MATRIX[environment];
 		for (const path of row.configs) {
 			const isTsconfig = path.endsWith(".json");
-			const content = environment === "core" ? isTsconfig ? coreTsconfig() : coreViteConfig() : isTsconfig ? srcTsconfig(environment) : srcViteConfig(environment);
+			const content = environment === "core" ? isTsconfig ? coreTsconfig() : coreViteConfig(machinery.browser) : isTsconfig ? srcTsconfig(environment) : srcViteConfig(environment);
 			artifacts.push({
 				path,
 				group: "configs",
@@ -8455,12 +8589,15 @@ function guideTests(spec, pascal) {
 }
 /**
 * Draft the `guides` group's artifacts — the package's own filled guide stub,
-* the guides index, and any vendored dependency guide mirrors.
+* the guides index, and vendored dependency guide mirrors whose paths are
+* neither the package's own guide nor already carried by the selected host
+* set.
 *
 * @param spec - The `Blueprint` to derive guide artifacts from.
 * @param pascal - The package's PascalCase entity name.
 * @param members - The blueprint's derived `Member[]`.
-* @returns The `guides` group's `Artifact[]`.
+* @returns The `guides` group's `Artifact[]`, with one contributor per guide
+* path.
 *
 * @example
 * ```ts
@@ -8513,14 +8650,16 @@ function guideArtifacts(spec, pascal, members) {
 		]]),
 		directory: alignTable(["Directory", "Guide"], sourceDirectories.map((directory) => [directory, `[\`${spec.name}.md\`](src/${spec.name}.md)`]))
 	})];
+	const guidePath = `guides/src/${spec.name}.md`;
 	for (const dep of spec.dependencies) {
 		if (!vendoredGuides.includes(dep.name)) continue;
-		const short = dep.name.replace("@orkestrel/", "");
+		const path = `guides/src/${dep.name.replace("@orkestrel/", "")}.md`;
+		if (HOST_PATHS.includes(path) || path === guidePath) continue;
 		artifacts.push({
-			path: `guides/src/${short}.md`,
+			path,
 			group: "guides",
 			origin: "host",
-			source: `guides/src/${short}.md`
+			source: path
 		});
 	}
 	return artifacts;
@@ -8556,7 +8695,7 @@ function applyOverrides(artifacts, overrides) {
 /**
 * The full pure compilation: draft a blueprint's artifacts — the manifest and
 * exports combination rules over the per-environment `SRC_MATRIX` rows, plus
-* `HOST_PATHS` and `overrides` — then pin.
+* the `selectHostPaths` selection of `HOST_PATHS` and `overrides` — then pin.
 *
 * @param blueprint - The `Blueprint` to compile.
 * @param groups - An optional `Group[]` selection (default: all groups).
@@ -8600,7 +8739,7 @@ npm install @orkestrel/${blueprint.name}
 		origin: "computed",
 		content: ciWorkflow(blueprint)
 	});
-	for (const path of HOST_PATHS) {
+	for (const path of selectHostPaths(HOST_PATHS, blueprint.name)) {
 		const group = hostGroup(path);
 		if (!selected.includes(group)) continue;
 		artifacts.push({
@@ -8723,7 +8862,10 @@ var Compiler = class Compiler {
 			this.#emitter.emit("audit", result);
 			return result;
 		}
-		const result = diffPlan(scaffolding.plan, current);
+		const result = {
+			...diffPlan(scaffolding.plan, current),
+			questions: scaffolding.questions
+		};
 		this.#emitter.emit("audit", result);
 		return result;
 	}
@@ -8787,7 +8929,16 @@ var Compiler = class Compiler {
 		const validation = validatePlan(draft);
 		const dependencyQuestions = this.#dependencyQuestions(blueprint);
 		const blocking = [...validation.questions];
-		const questions = [...blocking, ...dependencyQuestions];
+		const warningQuestions = validation.warnings.map((text) => ({
+			field: "overrides",
+			text,
+			blocking: false
+		}));
+		const questions = [
+			...blocking,
+			...warningQuestions,
+			...dependencyQuestions
+		];
 		stages.push({
 			stage: "gate",
 			input: draft,
@@ -8880,9 +9031,11 @@ var Compiler = class Compiler {
 	}
 	#pointerArtifacts(blueprint) {
 		const artifacts = [];
+		const guidePath = `guides/src/${blueprint.name}.md`;
 		for (const item of blueprint.dependencies) {
 			if (Compiler.#vendored.includes(item.name)) continue;
 			const path = `guides/src/${item.name.replace("@orkestrel/", "")}.md`;
+			if (path === guidePath || HOST_PATHS.includes(path)) continue;
 			artifacts.push({
 				path,
 				group: "guides",
@@ -9235,6 +9388,7 @@ exports.isScaffoldError = isScaffoldError;
 exports.isSyncReport = isSyncReport;
 exports.isWorkspaceName = isWorkspaceName;
 exports.manifestToDependencies = manifestToDependencies;
+exports.manifestToName = manifestToName;
 exports.member = member;
 exports.memberShape = memberShape;
 exports.override = override;
@@ -9263,6 +9417,7 @@ exports.renderObject = renderObject;
 exports.renderValue = renderValue;
 exports.rootTsconfig = rootTsconfig;
 exports.rootViteConfig = rootViteConfig;
+exports.selectHostPaths = selectHostPaths;
 exports.serializeTypeScriptString = serializeTypeScriptString;
 exports.singleSrcViteConfig = singleSrcViteConfig;
 exports.snapshotOf = snapshotOf;
@@ -9280,5 +9435,6 @@ exports.validateBlueprint = validateBlueprint;
 exports.validateDependencyArray = validateDependencyArray;
 exports.validatePlan = validatePlan;
 exports.viteHeader = viteHeader;
+exports.viteMachinery = viteMachinery;
 
 //# sourceMappingURL=index.cjs.map