@orkestrel/scaffold 0.0.48 → 0.0.50

package/dist/bin/main.js

@@ -3,8 +3,8 @@ import { align, renderTable, strip, stripControls, width } from "@orkestrel/cons
 import { attempt, isRecord, isString, parseJSON } from "@orkestrel/contract";
 import { createMarkdown, flattenText, isTableNode } from "@orkestrel/markdown";
 import { executeSync } from "@orkestrel/process/server";
-import { BIN_ENTRY_PATH, CATALOG_AGENT_PATH, CONFORMANCE_TEST_PATH, Compiler, DEPENDENCY_NAME_PATTERN, DISTRIBUTION_TEST_PATH, ENVIRONMENTS, GLOBAL_SETUP_PATH, GROUPS, GUIDES_TEST_PATH, INTEGRATION_TEST_PATH, MAX_MANIFEST_BYTES, SERVICE_SETUP_PATH, SHOWCASE_CONFIG_PATH, ScaffoldError, blueprintToDevDependencies, blueprintToRootVite, blueprintToScripts, compareVersions, createBlueprint, extractRangeMajor, extractVersion, isScaffoldError, manifestToDependencies, manifestToName, nameToGuide, replacePlanRanges } from "../src/core/index.js";
-import { Materializer, Upstream, isExactCaseFile, isPhysicalDirectory, isRepository, listFiles, readFileText, readSnapshot, resolveContainedPath } from "../src/server/index.js";
+import { BIN_ENTRY_PATH, CATALOG_AGENT_PATH, CONFORMANCE_TEST_PATH, Compiler, DEPENDENCY_NAME_PATTERN, ENVIRONMENTS, GLOBAL_SETUP_PATH, GROUPS, GUIDES_TEST_PATH, HOST_PATHS, INTEGRATION_TEST_PATH, MAX_MANIFEST_BYTES, SERVICE_SETUP_PATH, SHOWCASE_CONFIG_PATH, ScaffoldError, blueprintToDevDependencies, blueprintToRootVite, blueprintToScripts, blueprintToTestArtifacts, blueprintToWritableScripts, compareVersions, createBlueprint, extractRangeMajor, extractVersion, isDeferredPath, isScaffoldError, manifestToDependencies, manifestToName, nameToGuide, replaceManifestScripts, replacePlanRanges } from "../src/core/index.js";
+import { Materializer, Upstream, filesToHost, isExactCaseFile, isPhysicalDirectory, isWorktree, listFiles, readFileText, readHostFloor, readSnapshot, resolveContainedPath } from "../src/server/index.js";
 import { parseArgs } from "node:util";
 //#region src/bin/constants.ts
 /**
@@ -86,6 +86,7 @@ var COMMAND_OPTIONS = Object.freeze({
 	groups: Object.freeze({ type: "string" }),
 	all: Object.freeze({ type: "boolean" }),
 	dirty: Object.freeze({ type: "boolean" }),
+	offline: Object.freeze({ type: "boolean" }),
 	from: Object.freeze({
 		type: "string",
 		multiple: true
@@ -109,10 +110,12 @@ var OPTION_SUMMARY = Object.freeze({
 	"--groups <list>": "the artifact groups to cover; every group when absent",
 	"--all": "fetch a guide for every package the organization publishes, not the declared ones alone",
 	"--dirty": "delete from a tree carrying uncommitted changes",
+	"--offline": "use the distributed dependency and vendored-host floors without reading upstream",
 	"--from <path>": "read the data root from a local path instead of the bundled one; catalog alone accepts it more than once",
 	"--target <path>": "the directory the verb operates on; the working directory when absent",
 	"--json": "emit one machine-readable value instead of a report",
-	ORKESTREL_SCAFFOLD_REGISTRY: "the registry base mapped to upstream.registry.base"
+	ORKESTREL_SCAFFOLD_REGISTRY: "the registry base mapped to upstream.registry.base",
+	ORKESTREL_SCAFFOLD_REPOSITORY: "the repository base mapped to upstream.repository.base"
 });
 /**
 * The options each verb takes, in usage order, frozen.
@@ -129,18 +132,21 @@ var VERB_OPTIONS = Object.freeze({
 		"--app <list>",
 		"--bin",
 		"--deps <list>",
+		"--offline",
 		"--from <path>",
 		"--target <path>",
 		"--json"
 	]),
 	audit: Object.freeze([
 		"--groups <list>",
+		"--offline",
 		"--from <path>",
 		"--target <path>",
 		"--json"
 	]),
 	repair: Object.freeze([
 		"--groups <list>",
+		"--offline",
 		"--from <path>",
 		"--target <path>",
 		"--json"
@@ -154,6 +160,7 @@ var VERB_OPTIONS = Object.freeze({
 	overwrite: Object.freeze([
 		"--groups <list>",
 		"--dirty",
+		"--offline",
 		"--from <path>",
 		"--target <path>",
 		"--json"
@@ -256,6 +263,22 @@ function optionToName(option) {
 	return token.startsWith("--") ? token.slice(2) : token;
 }
 /**
+* Project process environment endpoints into upstream reader options.
+*
+* @param environment - The process environment to read.
+* @returns The configured endpoint groups, or `undefined` when neither endpoint
+* is configured.
+*/
+function environmentToUpstream(environment) {
+	const registry = environment.ORKESTREL_SCAFFOLD_REGISTRY;
+	const repository = environment.ORKESTREL_SCAFFOLD_REPOSITORY;
+	if (registry === void 0 && repository === void 0) return void 0;
+	return {
+		...registry === void 0 ? {} : { registry: { base: registry } },
+		...repository === void 0 ? {} : { repository: { base: repository } }
+	};
+}
+/**
 * Render one verb's synopsis.
 *
 * @param verb - The verb to describe.
@@ -355,6 +378,7 @@ function argvToCommand(argv) {
 	const src = typeof values.src === "string" ? values.src : void 0;
 	const app = typeof values.app === "string" ? values.app : void 0;
 	const bin = values.bin === true;
+	const offline = values.offline === true;
 	const dependencies = typeof values.deps === "string" ? values.deps : void 0;
 	const target = typeof values.target === "string" ? values.target : void 0;
 	const json = values.json === true;
@@ -374,6 +398,7 @@ function argvToCommand(argv) {
 				...src === void 0 ? {} : { src },
 				...app === void 0 ? {} : { app },
 				...bin ? { bin } : {},
+				...offline ? { offline } : {},
 				...dependencies === void 0 ? {} : { dependencies }
 			};
 		case "audit": return {
@@ -381,14 +406,16 @@ function argvToCommand(argv) {
 			json,
 			...location,
 			...source,
-			...selection
+			...selection,
+			...offline ? { offline } : {}
 		};
 		case "repair": return {
 			verb,
 			json,
 			...location,
 			...source,
-			...selection
+			...selection,
+			...offline ? { offline } : {}
 		};
 		case "catalog": return {
 			verb,
@@ -401,6 +428,7 @@ function argvToCommand(argv) {
 			verb,
 			json,
 			dirty: values.dirty === true,
+			...offline ? { offline } : {},
 			...location,
 			...source,
 			...selection
@@ -435,27 +463,43 @@ function auditToExit(audit) {
 	return blocked || drifted ? 1 : 0;
 }
 /**
-* Read the fleet rows and planned foreign tools a target manifest declares.
+* Read the runtime and development rows a writing verb may raise.
 *
 * @param manifest - The target manifest text.
 * @param blueprint - The workspace shape that supplies the planned tool set.
-* @returns The declared fleet rows followed by declared planned foreign rows.
+* @returns The declared fleet rows and planned foreign tools in their writable sections.
 */
-function manifestToPlannedDependencies(manifest, blueprint) {
-	const dependencies = [...dependenciesToFleet(manifestToDependencies(manifest))];
+function manifestToWritableDependencies(manifest, blueprint) {
+	const declared = manifestToDependencies(manifest);
+	const runtime = [...dependenciesToFleet(declared.runtime)];
+	const development = [...dependenciesToFleet(declared.development)];
 	const parsed = parseJSON(manifest);
-	if (!isRecord(parsed)) return dependencies;
-	const runtime = isRecord(parsed.dependencies) ? parsed.dependencies : {};
-	const development = isRecord(parsed.devDependencies) ? parsed.devDependencies : {};
+	if (!isRecord(parsed)) return {
+		runtime,
+		development
+	};
+	const runtimeRecord = isRecord(parsed.dependencies) ? parsed.dependencies : {};
+	const developmentRecord = isRecord(parsed.devDependencies) ? parsed.devDependencies : {};
 	for (const name of Object.keys(blueprintToDevDependencies(blueprint)).sort()) {
 		if (name.startsWith("@orkestrel/")) continue;
-		const range = runtime[name] ?? development[name];
-		if (isString(range)) dependencies.push({
+		const runtimeRange = runtimeRecord[name];
+		if (isString(runtimeRange)) {
+			runtime.push({
+				name,
+				range: runtimeRange
+			});
+			continue;
+		}
+		const developmentRange = developmentRecord[name];
+		if (isString(developmentRange)) development.push({
 			name,
-			range
+			range: developmentRange
 		});
 	}
-	return dependencies;
+	return {
+		runtime,
+		development
+	};
 }
 /**
 * Keep only dependencies published by the Orkestrel fleet.
@@ -467,6 +511,26 @@ function dependenciesToFleet(dependencies) {
 	return dependencies.filter((dependency) => dependency.name.startsWith("@orkestrel/"));
 }
 /**
+* Project declared concrete ranges to their distributed release floors.
+*
+* @param dependencies - The declarations whose floor versions to read.
+* @returns One found floor per declaration, or `undefined` when any range names
+* no concrete version.
+*/
+function dependenciesToFloors(dependencies) {
+	const releases = [];
+	for (const dependency of dependencies) {
+		const version = dependency.range.startsWith("^") || dependency.range.startsWith("~") ? dependency.range.slice(1) : dependency.range;
+		if (extractVersion(version) === void 0) return void 0;
+		releases.push({
+			...dependency,
+			lookup: "found",
+			latest: version
+		});
+	}
+	return releases;
+}
+/**
 * Read the exit code registry release evidence earns.
 *
 * @param releases - The release verdicts to measure.
@@ -682,71 +746,101 @@ var CLI = class CLI {
 		const plan = this.#compile(blueprint);
 		const manifest = plan.artifacts.find((artifact) => artifact.path === "package.json" && artifact.origin !== "host");
 		if (manifest === void 0 || manifest.origin === "host") throw new ScaffoldError("BLOCKED", "The compiled plan carries no replaceable manifest.");
-		const releases = await this.#lookup(dependenciesToFleet(manifestToDependencies(manifest.content)));
-		const resolved = replacePlanRanges(plan, this.#pin(releases));
+		const declarations = manifestToDependencies(manifest.content);
+		const versions = await this.#versions({
+			runtime: dependenciesToFleet(declarations.runtime),
+			development: dependenciesToFleet(declarations.development)
+		}, command.offline === true);
+		this.#assertVersions(versions);
+		const resolved = replacePlanRanges(plan, versions.pins);
 		if (resolved === void 0) throw new ScaffoldError("BLOCKED", "The compiled plan ranges could not be replaced.");
-		const materializer = new Materializer(command.from === void 0 ? void 0 : { host: command.from });
+		const host = await this.#host(command.from, void 0, command.offline === true);
 		try {
-			const result = materializer.materialize(resolved, target);
-			if (command.json === true) this.#report(result);
+			const result = host.materializer.materialize(resolved, target);
+			const outcome = {
+				...result,
+				provenance: {
+					...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+					...host.baseline === void 0 ? {} : { host: host.baseline }
+				}
+			};
+			if (command.json === true) this.#report(outcome);
 			else {
 				this.#say(`Scaffolded ${blueprint.name} into ${result.target}.`);
 				this.#say(this.#tally(result));
 			}
+			if (versions.forced || host.forced) this.#reportBaselines(outcome.provenance);
 			return 0;
 		} finally {
-			materializer.destroy();
+			host.materializer.destroy();
 		}
 	}
 	async #inspect(command) {
 		const target = command.target ?? ".";
 		const manifest = this.#manifest(target);
 		const blueprint = this.#derive(target);
-		const declared = manifestToPlannedDependencies(manifest, blueprint);
-		const releases = await this.#lookup(declared);
-		const questions = [...this.#targetQuestions(target, blueprint), ...releasesToQuestions(releases)];
-		const materializer = new Materializer(command.from === void 0 ? void 0 : { host: command.from });
+		const groups = this.#groups(command.groups);
+		const declared = manifestToWritableDependencies(manifest, blueprint);
+		const versions = await this.#versions(declared, command.offline === true);
+		const questions = [...this.#targetQuestions(target, blueprint, groups), ...releasesToQuestions(versions.releases)];
+		const host = await this.#host(command.from, target, command.offline === true);
 		try {
-			const [measured] = this.#survey(materializer, blueprint, target, this.#groups(command.groups));
+			const [measured] = this.#survey(host.materializer, blueprint, target, groups);
 			const audit = questions.length === 0 ? measured : {
 				...measured,
 				questions: [...measured.questions, ...questions]
 			};
 			const outcome = {
 				...audit,
-				releases
+				releases: versions.releases,
+				provenance: {
+					...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+					...host.baseline === void 0 ? {} : { host: host.baseline }
+				}
 			};
 			if (command.json === true) this.#report(outcome);
 			else {
 				this.#present(audit);
-				this.#reportReleases(releases);
+				if (command.offline !== true) this.#reportReleases(versions.releases);
 			}
-			return Math.max(auditToExit(audit), releasesToExit(releases));
+			if (versions.forced || host.forced) this.#reportBaselines(outcome.provenance);
+			if (command.offline === true) return auditToExit(audit);
+			return Math.max(auditToExit(audit), releasesToExit(versions.releases), versions.forced || host.forced ? 1 : 0);
 		} finally {
-			materializer.destroy();
+			host.materializer.destroy();
 		}
 	}
 	async #restore(command) {
 		const target = command.target ?? ".";
 		const groups = this.#groups(command.groups);
 		const blueprint = this.#derive(target);
-		this.#assertTarget(target, blueprint);
-		const materializer = new Materializer(command.from === void 0 ? void 0 : { host: command.from });
+		this.#assertTarget(target, blueprint, groups);
+		const host = await this.#host(command.from, target, command.offline === true);
 		try {
-			const [audit, plan] = this.#survey(materializer, blueprint, target, groups);
+			const [audit, plan] = this.#survey(host.materializer, blueprint, target, groups);
 			if (plan === void 0) {
-				if (command.json === true) this.#report(audit);
+				if (command.json === true) this.#report({
+					...audit,
+					provenance: { ...host.baseline === void 0 ? {} : { host: host.baseline } }
+				});
 				else this.#present(audit);
 				return 1;
 			}
-			const releases = await this.#lookup(manifestToPlannedDependencies(this.#manifest(target), blueprint));
-			const pins = this.#pin(releases);
-			const result = this.#merge(materializer.repair(plan, audit, target), materializer.declare(pins, target));
-			const [terminal] = this.#survey(materializer, this.#derive(target), target, groups);
+			const versions = await this.#versions(manifestToWritableDependencies(this.#manifest(target), blueprint), command.offline === true);
+			this.#assertVersions(versions);
+			const result = this.#merge(host.materializer.repair(plan, audit, target), host.materializer.declare({
+				pins: versions.pins,
+				scripts: blueprintToWritableScripts(blueprint)
+			}, target));
+			const [terminal] = this.#survey(host.materializer, this.#derive(target), target, groups);
 			const outcome = {
 				...result,
 				audit: terminal,
-				releases
+				releases: versions.releases,
+				provenance: {
+					...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+					...host.baseline === void 0 ? {} : { host: host.baseline }
+				}
 			};
 			if (command.json === true) this.#report(outcome);
 			else {
@@ -754,9 +848,11 @@ var CLI = class CLI {
 				this.#reportReplacements(audit, terminal);
 				this.#say(this.#tally(result));
 			}
+			if (versions.forced || host.forced) this.#reportBaselines(outcome.provenance);
+			if (command.offline !== true && (versions.forced || host.forced)) return 1;
 			return auditToExit(terminal);
 		} finally {
-			materializer.destroy();
+			host.materializer.destroy();
 		}
 	}
 	async #refresh(command) {
@@ -765,13 +861,22 @@ var CLI = class CLI {
 		if (extra.length > 0) this.#warn(`Read the data root from ${String(host)}. The other ${String(extra.length)} local root${extra.length === 1 ? "" : "s"} named by --from reach nothing this run does.`);
 		const previous = this.#previous(target);
 		const fetched = await this.#fetch(target, command.all === true);
-		const releases = this.#catalogReleases(dependenciesToFleet(manifestToDependencies(this.#manifest(target))), fetched.entries);
-		const pins = this.#pin(releases);
+		const declarations = manifestToDependencies(this.#manifest(target));
+		const writable = {
+			runtime: dependenciesToFleet(declarations.runtime),
+			development: dependenciesToFleet(declarations.development)
+		};
+		const releases = this.#catalogReleases([...writable.runtime, ...writable.development], fetched.entries);
+		const pins = this.#pin(releases, writable);
 		this.#assertFetched(fetched.entries, fetched.mirrors);
-		const materializer = new Materializer(host === void 0 ? void 0 : { host });
+		const guides = fetched.mirrors.length === 0 ? void 0 : fetched.mirrors.some((mirror) => mirror.lookup === "failed") ? "floor" : "live";
+		const materializer = new Materializer({ host: host ?? readHostFloor() });
 		let result;
 		try {
-			result = this.#merge(this.#publish(materializer, target, fetched.entries, fetched.mirrors), materializer.declare(pins, target));
+			result = this.#merge(this.#publish(materializer, target, fetched.entries, fetched.mirrors), materializer.declare({
+				pins,
+				scripts: []
+			}, target));
 		} finally {
 			materializer.destroy();
 		}
@@ -780,38 +885,49 @@ var CLI = class CLI {
 			entries: fetched.entries,
 			mirrors: fetched.mirrors,
 			dropped: previous.filter((name) => !fetched.entries.some((entry) => entry.name === name)),
-			releases
+			releases,
+			provenance: {
+				versions: "live",
+				...guides === void 0 ? {} : { guides }
+			}
 		};
 		if (command.json === true) this.#report(outcome);
 		else this.#recount(outcome);
-		return 0;
+		return guides === "floor" ? 1 : 0;
 	}
 	async #replace(command) {
 		const target = command.target ?? ".";
 		const groups = this.#groups(command.groups);
 		const blueprint = this.#derive(target);
-		this.#assertTarget(target, blueprint);
-		const repository = this.#repository(target);
-		if (repository.dirty.length > 0 && command.dirty !== true) throw new ScaffoldError("TARGET", `The target at ${target} carries ${String(repository.dirty.length)} uncommitted change${repository.dirty.length === 1 ? "" : "s"}. Commit them, or pass --dirty to waive the refusal.`, {
+		this.#assertTarget(target, blueprint, groups);
+		const worktree = this.#worktree(target);
+		if (worktree.dirty.length > 0 && command.dirty !== true) throw new ScaffoldError("TARGET", `The target at ${target} carries ${String(worktree.dirty.length)} uncommitted change${worktree.dirty.length === 1 ? "" : "s"}. Commit them, or pass --dirty to waive the refusal.`, {
 			target,
-			dirty: repository.dirty.length
+			dirty: worktree.dirty.length
 		});
-		const materializer = new Materializer(command.from === void 0 ? void 0 : { host: command.from });
+		const host = await this.#host(command.from, target, command.offline === true);
 		try {
-			const [audit, plan] = this.#survey(materializer, blueprint, target, groups);
+			const [audit, plan] = this.#survey(host.materializer, blueprint, target, groups);
 			if (plan === void 0) {
-				if (command.json === true) this.#report(audit);
+				if (command.json === true) this.#report({
+					...audit,
+					provenance: { ...host.baseline === void 0 ? {} : { host: host.baseline } }
+				});
 				else this.#present(audit);
 				return 1;
 			}
-			const repaired = materializer.repair(plan, audit, target);
-			const removed = materializer.remove(plan, audit, command.dirty === true ? {
-				tracked: repository.tracked,
+			const declared = {
+				pins: manifestToWritableDependencies(this.#manifest(target), blueprint),
+				scripts: blueprintToWritableScripts(blueprint)
+			};
+			const repaired = host.materializer.repair(plan, audit, target);
+			const removed = host.materializer.remove(plan, audit, command.dirty === true ? {
+				tracked: worktree.tracked,
 				dirty: []
-			} : repository, target);
+			} : worktree, target);
 			const offline = this.#merge(repaired, removed);
-			const online = await this.#reconcile(materializer, target, manifestToPlannedDependencies(this.#manifest(target), blueprint));
-			const [terminal] = this.#survey(materializer, blueprint, target, groups);
+			const online = command.offline === true ? await this.#offline(host.materializer, target, declared, host.baseline) : await this.#reconcile(host.materializer, target, declared, host.baseline, host.forced);
+			const [terminal] = this.#survey(host.materializer, blueprint, target, groups);
 			const outcome = {
 				...online,
 				...this.#merge(offline, online),
@@ -827,23 +943,64 @@ var CLI = class CLI {
 			if (online.note !== void 0) return 1;
 			return auditToExit(terminal);
 		} finally {
-			materializer.destroy();
+			host.materializer.destroy();
 		}
 	}
-	async #reconcile(materializer, target, declared) {
+	async #offline(materializer, target, declared, host) {
+		const versions = await this.#versions(declared.pins, true);
+		this.#assertVersions(versions);
+		return {
+			...materializer.declare({
+				pins: versions.pins,
+				scripts: declared.scripts
+			}, target),
+			entries: [],
+			mirrors: [],
+			dropped: [],
+			releases: versions.releases,
+			provenance: {
+				...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+				...host === void 0 ? {} : { host }
+			},
+			note: "The catalog step did not complete: USAGE: 'catalog' does not take --offline."
+		};
+	}
+	async #reconcile(materializer, target, declared, host, hostForced) {
 		const previous = this.#previous(target);
 		let releases = [];
+		let provenance = { ...host === void 0 ? {} : { host } };
 		try {
-			releases = await this.#lookup(declared);
-			const pins = this.#pin(releases);
+			const versions = await this.#versions(declared.pins, false);
+			releases = versions.releases;
+			provenance = {
+				...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+				...host === void 0 ? {} : { host }
+			};
+			this.#assertVersions(versions);
 			const fetched = await this.#fetch(target, false);
 			this.#assertFetched(fetched.entries, fetched.mirrors);
+			const guides = fetched.mirrors.length === 0 ? void 0 : fetched.mirrors.some((mirror) => mirror.lookup === "failed") ? "floor" : "live";
+			provenance = {
+				...versions.baseline === void 0 ? {} : { versions: versions.baseline },
+				...guides === void 0 ? {} : { guides },
+				...host === void 0 ? {} : { host }
+			};
+			const written = this.#merge(this.#publish(materializer, target, fetched.entries, fetched.mirrors), materializer.declare({
+				pins: versions.pins,
+				scripts: declared.scripts
+			}, target));
+			const floors = [];
+			if (hostForced) floors.push("host");
+			if (versions.forced) floors.push("versions");
+			if (guides === "floor") floors.push("guides");
 			return {
-				...this.#merge(this.#publish(materializer, target, fetched.entries, fetched.mirrors), materializer.declare(pins, target)),
+				...written,
 				entries: fetched.entries,
 				mirrors: fetched.mirrors,
 				dropped: previous.filter((name) => !fetched.entries.some((entry) => entry.name === name)),
-				releases
+				releases,
+				provenance,
+				...floors.length === 0 ? {} : { note: `The ${floors.join(", ")} step used the distributed floor after its upstream read did not complete.` }
 			};
 		} catch (error) {
 			return {
@@ -855,10 +1012,121 @@ var CLI = class CLI {
 				mirrors: [],
 				dropped: [],
 				releases,
+				provenance,
 				note: `The catalog step did not complete: ${errorToEnvelope(error).error.message}`
 			};
 		}
 	}
+	async #host(from, target, offline) {
+		if (from !== void 0) return {
+			materializer: new Materializer({ host: from }),
+			forced: false
+		};
+		const floor = readHostFloor();
+		if (offline) return {
+			materializer: new Materializer({ host: floor }),
+			baseline: "floor",
+			forced: false
+		};
+		const paths = floor.manifest.entries.filter((entry) => !isDeferredPath(entry.destination)).map((entry) => entry.destination);
+		const current = target === void 0 ? floor.bytes : readSnapshot(target, paths);
+		const upstream = new Upstream(this.#upstream);
+		try {
+			const files = await upstream.read(paths, current);
+			const live = filesToHost(files, floor);
+			return {
+				materializer: new Materializer({ host: live ?? floor }),
+				baseline: live === void 0 ? "floor" : "live",
+				forced: live === void 0
+			};
+		} finally {
+			upstream.destroy();
+		}
+	}
+	async #versions(declared, offline) {
+		const dependencies = [...declared.runtime, ...declared.development];
+		if (dependencies.length === 0) return {
+			releases: [],
+			pins: {
+				runtime: [],
+				development: []
+			},
+			forced: false,
+			complete: true
+		};
+		const floors = dependenciesToFloors(dependencies);
+		const floorPins = floors === void 0 ? void 0 : {
+			runtime: floors.slice(0, declared.runtime.length).map((release) => ({
+				name: release.name,
+				range: release.range
+			})),
+			development: floors.slice(declared.runtime.length).map((release) => ({
+				name: release.name,
+				range: release.range
+			}))
+		};
+		if (offline) {
+			if (floors === void 0 || floorPins === void 0) return {
+				releases: [],
+				pins: {
+					runtime: [],
+					development: []
+				},
+				baseline: "floor",
+				forced: false,
+				complete: false
+			};
+			return {
+				releases: floors,
+				pins: floorPins,
+				baseline: "floor",
+				forced: false,
+				complete: true
+			};
+		}
+		const releases = await this.#lookup(dependencies);
+		if (releases.filter((release) => release.lookup === "missing" || release.lookup === "unmatched").length > 0) return {
+			releases,
+			pins: {
+				runtime: [],
+				development: []
+			},
+			baseline: "live",
+			forced: false,
+			complete: false
+		};
+		if (releases.some((release) => release.lookup === "failed")) {
+			if (floorPins === void 0) return {
+				releases,
+				pins: {
+					runtime: [],
+					development: []
+				},
+				baseline: "floor",
+				forced: true,
+				complete: false
+			};
+			return {
+				releases,
+				pins: floorPins,
+				baseline: "floor",
+				forced: true,
+				complete: true
+			};
+		}
+		return {
+			releases,
+			pins: this.#pin(releases, declared),
+			baseline: "live",
+			forced: false,
+			complete: true
+		};
+	}
+	#assertVersions(versions) {
+		if (versions.complete) return;
+		const names = versions.releases.filter((release) => release.lookup !== "found").map((release) => release.name);
+		throw new ScaffoldError("FETCH", names.length === 0 ? "A declared dependency names no concrete floor." : `The registry named no release for ${names.join(", ")}.`, { names: names.length });
+	}
 	async #lookup(declared) {
 		if (declared.length === 0) return [];
 		const upstream = new Upstream(this.#upstream);
@@ -889,7 +1157,12 @@ var CLI = class CLI {
 	async #fetch(target, all) {
 		const manifest = this.#manifest(target);
 		const own = manifestToName(manifest);
-		const declared = manifestToDependencies(manifest).map((dependency) => dependency.name);
+		const dependencies = manifestToDependencies(manifest);
+		const declared = [...new Set([
+			...dependencies.runtime,
+			...dependencies.development,
+			...dependencies.peer
+		].map((dependency) => dependency.name))];
 		const upstream = new Upstream(this.#upstream);
 		try {
 			const entries = await upstream.catalog();
@@ -921,20 +1194,30 @@ var CLI = class CLI {
 		});
 	}
 	#assertFetched(entries, mirrors) {
-		const failed = [...entries.filter((entry) => entry.lookup !== "found").map((entry) => entry.name), ...mirrors.filter((mirror) => mirror.lookup !== "found").map((mirror) => mirror.name)];
+		const failed = [...entries.filter((entry) => entry.lookup !== "found").map((entry) => entry.name), ...mirrors.filter((mirror) => mirror.lookup !== "found" && mirror.lookup !== "failed").map((mirror) => mirror.name)];
 		if (failed.length === 0) return;
 		throw new ScaffoldError("FETCH", `Upstream produced no complete catalog answer for ${failed.join(", ")}.`, { names: failed.length });
 	}
-	#pin(releases) {
+	#pin(releases, declared) {
 		const refused = releases.filter((release) => release.lookup !== "found");
 		if (refused.length > 0) throw new ScaffoldError("FETCH", `The registry named no release for ${refused.map((release) => release.name).join(", ")}.`, { names: refused.length });
-		return releases.map((release) => {
+		const dependencies = [...declared.runtime, ...declared.development];
+		const pins = [];
+		for (let index = 0; index < releases.length; index += 1) {
+			const release = releases[index];
+			const dependency = dependencies[index];
+			if (release === void 0 || dependency === void 0) throw new ScaffoldError("FETCH", "The release answer has no matching declaration.");
 			if (release.lookup !== "found") throw new ScaffoldError("FETCH", `The registry named no release for ${release.name}.`);
-			return {
-				name: release.name,
+			pins.push({
+				name: dependency.name,
 				range: `^${release.latest}`
-			};
-		});
+			});
+		}
+		if (pins.length !== dependencies.length) throw new ScaffoldError("FETCH", "The release answer does not match the declaration set.");
+		return {
+			runtime: pins.slice(0, declared.runtime.length),
+			development: pins.slice(declared.runtime.length)
+		};
 	}
 	#compile(blueprint, groups) {
 		const compiler = new Compiler();
@@ -967,7 +1250,6 @@ var CLI = class CLI {
 		const bin = resolveContainedPath(target, BIN_ENTRY_PATH);
 		const tests = resolveContainedPath(target, "tests");
 		const guides = resolveContainedPath(target, GUIDES_TEST_PATH);
-		const distribution = resolveContainedPath(target, DISTRIBUTION_TEST_PATH);
 		const integration = resolveContainedPath(target, INTEGRATION_TEST_PATH);
 		const conformance = resolveContainedPath(target, CONFORMANCE_TEST_PATH);
 		const service = resolveContainedPath(target, SERVICE_SETUP_PATH);
@@ -976,7 +1258,7 @@ var CLI = class CLI {
 		return createBlueprint(declared.slice(declared.lastIndexOf("/") + 1), {
 			src: this.#probe(target, "src"),
 			app: this.#probe(target, "app"),
-			dependencies: manifestToDependencies(manifest),
+			dependencies: manifestToDependencies(manifest).runtime,
 			bin: bin !== void 0 && isExactCaseFile(bin),
 			setup: tests !== void 0 && listFiles(tests).some((path) => {
 				if (path.includes("/") || !path.startsWith("setup") || !path.endsWith(".test.ts")) return false;
@@ -984,7 +1266,6 @@ var CLI = class CLI {
 				return proof !== void 0 && isExactCaseFile(proof);
 			}),
 			guides: guides !== void 0 && isExactCaseFile(guides),
-			distribution: distribution !== void 0 && isExactCaseFile(distribution),
 			integration: integration !== void 0 && isExactCaseFile(integration),
 			conformance: conformance !== void 0 && isExactCaseFile(conformance),
 			service: service !== void 0 && isExactCaseFile(service),
@@ -1115,7 +1396,8 @@ var CLI = class CLI {
 		};
 	}
 	#projectQuestion(target, blueprint, writing = false) {
-		const manifest = this.#manifest(target);
+		const text = this.#manifest(target);
+		const manifest = replaceManifestScripts(text, blueprintToWritableScripts(blueprint)) ?? text;
 		const planned = blueprintToRootVite(blueprint);
 		const parsed = parseJSON(manifest);
 		const scripts = isRecord(parsed) && isRecord(parsed.scripts) ? parsed.scripts : {};
@@ -1135,13 +1417,15 @@ var CLI = class CLI {
 		const projects = [...absent].sort();
 		if (unresolved) return {
 			field: "projects",
-			message: `The manifest at ${target} contains a Vitest project expression that cannot be resolved statically.${projects.length === 0 ? "" : ` It also names projects the planned configuration does not register: ${projects.join(", ")}.`} ${writing ? "Replace it with a literal --project value or remove the script before using a scaffold writing verb." : "Replace it with a literal --project value before relying on the planned configuration."}`,
-			blocking: false
+			message: `The manifest at ${target} contains a Vitest project expression that cannot be resolved statically.${projects.length === 0 ? "" : ` It also names projects the planned vite.config.ts does not register: ${projects.join(", ")}.`} ${writing ? "The configs group is blocked. Replace the expression with a literal --project value before selecting configs, or exclude configs from --groups." : "Replace it with a literal --project value before relying on the planned configuration."}`,
+			blocking: false,
+			groups: ["configs"]
 		};
 		if (projects.length > 0) return {
 			field: "projects",
-			message: writing ? `The manifest at ${target} names ${projects.length === 1 ? "a Vitest project" : "Vitest projects"} the planned configuration does not register: ${projects.join(", ")}. To continue, remove the ${projects.length === 1 ? "script that names it" : "scripts that name them"} or do not use scaffold writing verbs on a workspace that needs ${projects.length === 1 ? "a custom Vitest project" : "custom Vitest projects"}.` : `The manifest at ${target} names ${projects.length === 1 ? "a Vitest project" : "Vitest projects"} the planned configuration does not register: ${projects.join(", ")}. Add ${projects.length === 1 ? "the project" : "each project"} to vite.config.ts or remove the ${projects.length === 1 ? "script that names it" : "scripts that name them"}.`,
-			blocking: false
+			message: writing ? `The configs group is blocked because the manifest at ${target} names ${projects.length === 1 ? "a Vitest project" : "Vitest projects"} the planned vite.config.ts does not register: ${projects.join(", ")}. Remove the ${projects.length === 1 ? "script that names it" : "scripts that name them"} before selecting configs, or exclude configs from --groups.` : `The manifest at ${target} names ${projects.length === 1 ? "a Vitest project" : "Vitest projects"} the planned configuration does not register: ${projects.join(", ")}. Add ${projects.length === 1 ? "the project" : "each project"} to vite.config.ts or remove the ${projects.length === 1 ? "script that names it" : "scripts that name them"}.`,
+			blocking: false,
+			groups: ["configs"]
 		};
 		const expected = blueprintToScripts(blueprint);
 		const expectedLines = /* @__PURE__ */ new Map();
@@ -1175,8 +1459,9 @@ var CLI = class CLI {
 		}
 		if (unresolved) return {
 			field: "projects",
-			message: `The manifest at ${target} contains a ${gateNames} chain that cannot be resolved statically. ${writing ? "Replace it with literal npm run script names before using a scaffold writing verb." : "Replace it with literal npm run script names before relying on the planned configuration."}`,
-			blocking: false
+			message: `The manifest at ${target} contains a ${gateNames} chain that cannot be resolved statically. ${writing ? "The configs group is blocked. Replace it with literal npm run script names before selecting configs, or exclude configs from --groups." : "Replace it with literal npm run script names before relying on the planned configuration."}`,
+			blocking: false,
+			groups: ["configs"]
 		};
 		const missing = [...expectedLines].filter(([project]) => !reachable.has(project)).sort(([left], [right]) => left.localeCompare(right));
 		if (missing.length === 0) return void 0;
@@ -1194,8 +1479,9 @@ var CLI = class CLI {
 		}
 		return {
 			field: "projects",
-			message: `The manifest at ${target} does not reach ${names.length === 1 ? "a Vitest project" : "Vitest projects"} the planned configuration registers: ${names.join(", ")}. No chain from ${gateNames} invokes ${names.length === 1 ? "it" : "them"}. ${remedies.join(" ")}`,
-			blocking: false
+			message: `${writing ? "The configs group is blocked because " : ""}the manifest at ${target} does not reach ${names.length === 1 ? "a Vitest project" : "Vitest projects"} the planned configuration registers: ${names.join(", ")}. No chain from ${gateNames} invokes ${names.length === 1 ? "it" : "them"}. ${remedies.join(" ")}${writing ? " Exclude configs from --groups to write another group." : ""}`,
+			blocking: false,
+			groups: ["configs"]
 		};
 	}
 	#dependencyQuestion(target, blueprint, writing = false) {
@@ -1204,8 +1490,9 @@ var CLI = class CLI {
 		const malformed = ["dependencies", "devDependencies"].filter((section) => parsed[section] !== void 0 && !isRecord(parsed[section]));
 		if (malformed.length > 0) return {
 			field: "dependencies",
-			message: `The manifest at ${target} declares ${malformed.join(" and ")} as ${malformed.length === 1 ? "a value" : "values"} that ${malformed.length === 1 ? "is" : "are"} not ${malformed.length === 1 ? "an object" : "objects"}. Replace ${malformed.length === 1 ? "it" : "them"} with ${malformed.length === 1 ? "an object" : "objects"} before ${writing ? "using a scaffold writing verb" : "relying on the planned dependency set"}.`,
-			blocking: false
+			message: `The manifest at ${target} declares ${malformed.join(" and ")} as ${malformed.length === 1 ? "a value" : "values"} that ${malformed.length === 1 ? "is" : "are"} not ${malformed.length === 1 ? "an object" : "objects"}. ${writing ? `The configs and tests groups are blocked. Replace ${malformed.length === 1 ? "it" : "them"} with ${malformed.length === 1 ? "an object" : "objects"} before selecting configs or tests, or exclude those groups from --groups.` : `Replace ${malformed.length === 1 ? "it" : "them"} with ${malformed.length === 1 ? "an object" : "objects"} before relying on the planned dependency set.`}`,
+			blocking: false,
+			groups: ["configs", "tests"]
 		};
 		const dependencies = isRecord(parsed.dependencies) ? parsed.dependencies : {};
 		const development = isRecord(parsed.devDependencies) ? parsed.devDependencies : {};
@@ -1215,20 +1502,56 @@ var CLI = class CLI {
 		const lines = missing.map(([name, range]) => `${JSON.stringify(name)}: ${JSON.stringify(range)},`);
 		return {
 			field: "dependencies",
-			message: `The manifest at ${target} does not declare ${names.length === 1 ? "a planned dependency" : "planned dependencies"}: ${names.join(", ")}. ${writing ? "To continue, add" : "Add"} ${lines.length === 1 ? "this exact dependency line" : "these exact dependency lines"} to dependencies or devDependencies in package.json: ${lines.join(" ")}`,
-			blocking: false
+			message: `The manifest at ${target} does not declare ${names.length === 1 ? "a planned dependency" : "planned dependencies"}: ${names.join(", ")}. ${writing ? "The configs and tests groups are blocked. Add" : "Add"} ${lines.length === 1 ? "this exact dependency line" : "these exact dependency lines"} to dependencies or devDependencies in package.json: ${lines.join(" ")}${writing ? " Add the dependency before selecting configs or tests, or exclude those groups from --groups." : ""}`,
+			blocking: false,
+			groups: ["configs", "tests"]
+		};
+	}
+	#setupQuestion(target, blueprint) {
+		const tests = resolveContainedPath(target, "tests");
+		if (tests === void 0) return void 0;
+		const entries = listFiles(tests).filter((path) => !path.includes("/"));
+		const proofs = new Set(entries.filter((path) => path.endsWith(".test.ts")));
+		const seeds = new Map(blueprintToTestArtifacts(blueprint).map(({ path, content }) => [path, content.trim()]));
+		const modules = entries.filter((path) => {
+			if (!path.startsWith("setup") || !path.endsWith(".ts")) return false;
+			if (path.endsWith(".test.ts") || HOST_PATHS.includes(`tests/${path}`)) return false;
+			if (proofs.has(`${path.slice(0, -3)}.test.ts`)) return false;
+			if (resolveContainedPath(tests, path) === void 0) return false;
+			const content = (readFileText(tests, path) ?? "").trim();
+			return content !== "" && content !== (seeds.get(`tests/${path}`) ?? "");
+		}).sort();
+		if (modules.length === 0) return void 0;
+		const single = modules.length === 1;
+		const named = modules.map((path) => `tests/${path}`).join(", ");
+		const remedies = modules.map((path) => `tests/${path.slice(0, -3)}.test.ts`).join(", ");
+		const remedy = single ? `Add ${remedies} to cover it.` : `Add ${remedies}, each covering the module of the same name.`;
+		return {
+			field: "setup",
+			message: `The target at ${target} carries ${single ? "a test setup module" : "test setup modules"} that no proof covers: ${named}. ${remedy} The proof's subject is behavior only this workspace can assert, so scaffold does not write it.`,
+			blocking: false,
+			groups: ["tests"]
 		};
 	}
-	#targetQuestions(target, blueprint, writing = false) {
+	#targetQuestions(target, blueprint, groups, writing = false) {
 		const questions = [];
 		const project = this.#projectQuestion(target, blueprint, writing);
 		if (project !== void 0) questions.push(project);
 		const dependency = this.#dependencyQuestion(target, blueprint, writing);
 		if (dependency !== void 0) questions.push(dependency);
-		return questions;
+		if (!writing) {
+			const setup = this.#setupQuestion(target, blueprint);
+			if (setup !== void 0) questions.push(setup);
+		}
+		return questions.filter((question) => groups === void 0 || question.groups.some((group) => groups.includes(group))).map(({ field, message, blocking, candidates }) => ({
+			field,
+			message,
+			blocking,
+			...candidates === void 0 ? {} : { candidates }
+		}));
 	}
-	#assertTarget(target, blueprint) {
-		const questions = this.#targetQuestions(target, blueprint, true);
+	#assertTarget(target, blueprint, groups) {
+		const questions = this.#targetQuestions(target, blueprint, groups, true);
 		if (questions.length === 0) return;
 		throw new ScaffoldError("TARGET", questions.map((question) => question.message).join(" "), { target });
 	}
@@ -1255,7 +1578,7 @@ var CLI = class CLI {
 		}
 		return names;
 	}
-	#repository(target) {
+	#worktree(target) {
 		const tracked = this.#inventory(target, ["ls-files", "-z"]);
 		const dirty = this.#inventory(target, [
 			"status",
@@ -1267,7 +1590,7 @@ var CLI = class CLI {
 			tracked,
 			dirty
 		};
-		if (!isRepository(state)) throw new ScaffoldError("TARGET", `The git state at ${target} is not a readable inventory.`, {
+		if (!isWorktree(state)) throw new ScaffoldError("TARGET", `The git state at ${target} is not a readable inventory.`, {
 			target,
 			tracked: tracked.length,
 			dirty: dirty.length
@@ -1315,6 +1638,13 @@ var CLI = class CLI {
 			removed: [...first.removed, ...second.removed]
 		};
 	}
+	#reportBaselines(provenance) {
+		const baselines = [];
+		if (provenance.versions !== void 0) baselines.push(`versions=${provenance.versions}`);
+		if (provenance.guides !== void 0) baselines.push(`guides=${provenance.guides}`);
+		if (provenance.host !== void 0) baselines.push(`host=${provenance.host}`);
+		this.#warn(`Upstream fallback selected the distributed baseline: ${baselines.join(", ")}.`);
+	}
 	#present(audit) {
 		for (const question of audit.questions) this.#warn(`${question.field}: ${question.message}`);
 		const rows = audit.findings.filter((finding) => finding.drift !== "aligned").map((finding) => [
@@ -1393,7 +1723,7 @@ process.stdout.on("error", (error) => {
 	if ("code" in error && error.code === "EPIPE") return;
 	throw error;
 });
-process.exitCode = await new CLI(process.env.ORKESTREL_SCAFFOLD_REGISTRY === void 0 ? void 0 : { upstream: { registry: { base: process.env.ORKESTREL_SCAFFOLD_REGISTRY } } }).execute(process.argv.slice(2));
+process.exitCode = await new CLI({ upstream: environmentToUpstream(process.env) }).execute(process.argv.slice(2));
 //#endregion
 
 //# sourceMappingURL=main.js.map