@orkestrel/scaffold 0.0.86 → 0.0.88

package/dist/host/guides/contract.md

@@ -473,7 +473,7 @@ Direct declaration populations are dense data arrays too. A sparse literal is re
 
 The precedence below assumes a readable node. A readable malformed keyword is ignored and widens according to the listed rule; a keyword access, enumeration, or recursive traversal that throws is not malformed schema vocabulary and is refused with `ContractError { code: 'structure', context: { shape: 'schema' } }`.
 
-`schemaToShape`'s precedence, top-down at each node (every keyword read is type-guarded; a malformed keyword is IGNORED, not thrown): (1) `enum` (≥ 1 string/number/boolean entry) → `literalShape`. (2) `oneOf` (≥ 1 record entry) → `oneOfShape` over the recursed variants, PROVIDED the record-entry count is at or under `INFER_BREADTH_LIMIT`; over the cap, building a subset union would be strictly narrower than the schema's full union, so the node widens to `rawShape` instead of sampling a subset. (3) `anyOf` identically → `unionShape`, with the same over-cap widen-to-`rawShape` rule rather than a subset union. (4) `type: 'string'/'number'/'integer'/'boolean'/'null'` → the matching primitive shape, with `minLength`/`maxLength`/`minimum`/`maximum` bounds kept only when well-formed and non-contradictory (a malformed or `min > max` pair drops to unbounded — widening, never narrowing). (5) `type: 'array'` → `arrayShape`, recursing into a record-valued `items` (else `rawShape`), with `minItems`/`maxItems` bounds. (6) `type: 'object'` (or no `type`/`enum`/`oneOf`/`anyOf` but a record `properties`) → `objectShape`: a property not listed in `required` is wrapped `optionalShape`; `additionalProperties: false` closes, a record value recurses into it (`objectShape` validates extras against that shape directly — no widening needed), and `true` / ABSENT / anything malformed leaves it open (`true`) — absent matches JSON Schema's own default, and `valueToSchema` / `samplesToSchema` always emit the keyword explicitly, so an absent value only arises from a hand-written schema. When `properties` has MORE keys than `INFER_BREADTH_LIMIT`, the schema's own `additionalProperties` is OVERRIDDEN and forced open (`true`) regardless of `false` or a record value — a key dropped past the sampling cap was never checked against a closed or record-valued rest shape, so forcing the object open is the only sound widening — mirroring the inferers' own `truncated ? true : !closed` rule. (7) Everything else — `{}`, an unrecognized `type`, exhausted depth (`INFER_DEPTH_LIMIT`), or a cyclic re-encounter — widens to `rawShape` (NOT `jsonShape`: `{}` is JSON Schema’s accept-anything schema, and `rawShape` is its exact inverse — its guard accepts every defined value and it re-emits `{}` verbatim, whereas `jsonShape`’s `isJSONValue` guard would reject the exotic originals (`Map`, `Set`, a class instance, a function, `NaN`) whose inferred schema is exactly `{}`). A `WeakMap` memo (keyed by schema-node identity + remaining depth), mirroring the inferers, guards a shared-reference schema DAG against exponential re-conversion. **Its key does not carry the active-ancestor set, and that is observable**: a node first reached through a CYCLIC path is cached with the shape it widened to at the back-edge, and a later ACYCLIC path is served that cached shape instead of descending further. Two schemas differing only in which sibling holds the cyclic node therefore convert to different shapes. Every such difference is a WIDENING — an accept-anything `rawShape` — so no value is wrongly rejected and the round-trip law is unaffected; what it costs is determinism ACROSS graphs, not within one, since the same input always converts the same way. This is stated as a limit rather than repaired because both repairs (dropping the ancestor set, or threading a cycle-affected flag through three public signatures) change the published surface.
+`schemaToShape`'s precedence, top-down at each node (every keyword read is type-guarded; a malformed keyword is IGNORED, not thrown): (1) `enum` (≥ 1 string/number/boolean entry) → `literalShape`. (2) `oneOf` (≥ 1 record entry) → `oneOfShape` over the recursed variants, PROVIDED the record-entry count is at or under `INFER_BREADTH_LIMIT`; over the cap, building a subset union would be strictly narrower than the schema's full union, so the node widens to `rawShape` instead of sampling a subset. (3) `anyOf` identically → `unionShape`, with the same over-cap widen-to-`rawShape` rule rather than a subset union. (4) An array-valued `type` → `unionShape` over each distinct recognized name, converting `{ ...schema, type: member }` at the same depth so bounds, `items`, `properties`, and `description` apply to each member. A single distinct name returns its shape directly. An empty array or any unrecognized member widens the whole node to `rawShape`, even when `properties` is present; no member is dropped to narrow the union. The distinct-name count is checked against `INFER_BREADTH_LIMIT`; the recognized vocabulary fits below that cap, so repeated names do not exhaust it. This is runtime conversion support: the declared `JSONSchema.type` remains a single name because direct raw-schema validation supports only that vocabulary. (5) `type: 'string'/'number'/'integer'/'boolean'/'null'` → the matching primitive shape, with `minLength`/`maxLength`/`minimum`/`maximum` bounds kept only when well-formed and non-contradictory (a malformed or `min > max` pair drops to unbounded — widening, never narrowing). (6) `type: 'array'` → `arrayShape`, recursing into a record-valued `items` (else `rawShape`), with `minItems`/`maxItems` bounds. (7) `type: 'object'` (or no `type`/`enum`/`oneOf`/`anyOf` but a record `properties`) → `objectShape`: a property not listed in `required` is wrapped `optionalShape`; `additionalProperties: false` closes, a record value recurses into it (`objectShape` validates extras against that shape directly — no widening needed), and `true` / ABSENT / anything malformed leaves it open (`true`) — absent matches JSON Schema's own default, and `valueToSchema` / `samplesToSchema` always emit the keyword explicitly, so an absent value only arises from a hand-written schema. When `properties` has MORE keys than `INFER_BREADTH_LIMIT`, the schema's own `additionalProperties` is OVERRIDDEN and forced open (`true`) regardless of `false` or a record value — a key dropped past the sampling cap was never checked against a closed or record-valued rest shape, so forcing the object open is the only sound widening — mirroring the inferers' own `truncated ? true : !closed` rule. (8) Everything else — `{}`, an unrecognized `type`, exhausted depth (`INFER_DEPTH_LIMIT`), or a cyclic re-encounter — widens to `rawShape` (NOT `jsonShape`: `{}` is JSON Schema’s accept-anything schema, and `rawShape` is its exact inverse — its guard accepts every defined value and it re-emits `{}` verbatim, whereas `jsonShape`’s `isJSONValue` guard would reject the exotic originals (`Map`, `Set`, a class instance, a function, `NaN`) whose inferred schema is exactly `{}`). A `WeakMap` memo (keyed by schema-node identity + remaining depth), mirroring the inferers, guards a shared-reference schema DAG against exponential re-conversion. **Its key does not carry the active-ancestor set, and that is observable**: a node first reached through a CYCLIC path is cached with the shape it widened to at the back-edge, and a later ACYCLIC path is served that cached shape instead of descending further. Two schemas differing only in which sibling holds the cyclic node therefore convert to different shapes. Every such difference is a WIDENING — an accept-anything `rawShape` — so no value is wrongly rejected and the round-trip law is unaffected; what it costs is determinism ACROSS graphs, not within one, since the same input always converts the same way. This is stated as a limit rather than repaired because both repairs (dropping the ancestor set, or threading a cycle-affected flag through three public signatures) change the published surface.
 
 **Round-trip law:** for any READABLE value `v` — including `NaN`, `±Infinity`, a `Map`, a `Set`, a class instance, a function, a symbol, a bigint, and readable cyclic hosts — `compileGuard(schemaToShape(valueToSchema(v)))(v) === true`, with widening as the ONLY source of looseness, never narrowing. An unreadable host is refused before the law produces a schema. The law otherwise retains its three limits: JSON absence, `Date` serialization, and unstable reads between inference and validation. A widened node cannot be auto-generated: `createContract(schemaToShape(x)).generate()` throws when the conversion widened anywhere; its parser returns `undefined` for readable invalid input and propagates the shared coded refusal when a required read fails.
 

package/dist/host/guides/guide.md

@@ -129,7 +129,7 @@ directly.
 | `extractSourceLines`    | function | `(source: string) => readonly SourceLine[]`                                                                              | Extracts aligned physical source-line records in one character traversal. Real line and block comments and complete template tokens become spaces in `SourceLine.code`, while ordinary code, quoted strings, and recognized regex literals retain their columns. Genuine JSDoc opened from reflection code is retained span by span at its exact physical column in `SourceLine.jsdoc`; faux openers in comments and templates are excluded. Membership remains each consumer's separate anchored grammar.                                                                                                                                                                |
 | `extractExports`        | function | `(source: string) => readonly SurfaceSymbol[]`                                                                           | Extracts the module-scope exports declared in one file's source text — the declaration keys `collectKeys` reports, each split back into the keyword and name that built it, deduped by (keyword, name).                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | `extractHidden`         | function | `(source: string) => readonly SurfaceSymbol[]`                                                                           | Extracts the module-scope declarations lacking the `export` keyword in one file's source text — the mirror image of `extractExports`'s grammar, anchored the same way (column 0, so an indented inner declaration never matches).                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| `joinHead`              | function | `(lines: readonly string[], start: number) => DeclarationHead \| undefined`                                              | Joins the declaration head starting at `start` into one space-separated line, consuming lines until the first that ends with `{`.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| `joinHead`              | function | `(lines: readonly string[], start: number) => DeclarationHead \| undefined`                                              | Joins the declaration head starting at `start` into one space-separated line, consuming lines until the first that opens a body: one that ends with `{`, or one that closes an empty body with `{}` or `{ }`.                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `escapeRegExp`          | function | `(value: string) => string`                                                                                              | Escapes every regex metacharacter in a literal string so it reads as text inside a larger `RegExp` source rather than as syntax.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | `collectDeclarations`   | function | `(source: string) => ReadonlyMap<string, Declaration>`                                                                   | Collects every `export class` / `export interface` declaration one file's source text declares, each keyed `${keyword} ${name}` and carrying the body lines and the base identifiers read from its own head, so a body and a heritage clause always come from the same declaration.                                                                                                                                                                                                                                                                                                                                                                                       |
 | `extractDeclaration`    | function | `(source: string, keyword: DeclarationKeyword, name: string) => Declaration \| undefined`                                | Locates the named `export class` / `export interface` declaration in one file's source text and returns its body lines and its base identifiers read from that one head, so a body and a heritage clause always come from the same declaration, or `undefined` when the file declares no such head.                                                                                                                                                                                                                                                                                                                                                                       |
@@ -577,7 +577,9 @@ keyed `${keyword} ${name}`. One collector is what keeps a body and a heritage cl
 declaration. The identifier is the head's own run up to its generic parameter list or its heritage
 clause, so it enters the key as literal text: a name carrying a regex metacharacter reaches no
 `RegExp`, and a lookup of that name matches the character rather than a wildcard. A head that opens
-no column-zero close records nothing, and a later head of a key already collected adds nothing.
+no column-zero close records nothing, a head whose last line closes its own body with `{}` or
+`{ }` records an empty body, and a later head of a key already collected adds nothing unless the
+earlier head recorded neither a body nor bases, which the later head then replaces.
 `extractDeclaration` is the named lookup over that map: it spells the `${keyword} ${name}` key so a
 consumer reading one name never writes that convention, and it collects the file afresh on every
 call. A consumer reading many names from one file calls `collectDeclarations` once and reads the
@@ -592,12 +594,15 @@ reads as `Base`, and a class's `implements` clause is excluded. `Source.methods(
 located declaration's own members with those of every declaration it extends, following each base
 through the same module scope and keeping the keyword it started from — an interface chain resolves
 through interfaces, a class chain through classes, so an interface extending a name only a class
-declares gets nothing from it. One declaration answers for a name: the module scope's files are read
-in sorted key order, and the first one whose located head has a body or has bases supplies both the
-members and the bases; a head with neither a body nor bases does not count as declared, so an empty
-`export interface X {}` is skipped and the scan continues to a later file or falls through to a
-same-named class, and a second file declaring the same name after one is found adds nothing. The
-inventory is the further bound: a base the selected directories do not declare, whether it is
+declares gets nothing from it. One declaration answers under each keyword: the module scope's files
+are read in sorted key order, and the first one whose located head has a body or has bases supplies
+both the members and the bases; a head with neither a body nor bases does not count as declared, so
+an empty `export interface X {}` is skipped and the scan continues to a later file, and a second
+file declaring the same name under that keyword adds nothing. The interface answers for a name, and
+the class answers when no interface declares it. Where one file declares a name as both an interface
+and a class, which TypeScript merges into one type, both answer: each shape's own members come ahead
+of inherited ones, the interface's own first. Shapes from two files stay separate declarations, and
+Parity lets the class of a merge the barrel exports answer for its interface half. The inventory is the further bound: a base the selected directories do not declare, whether it is
 imported from another package or written as a qualified name such as `external.Store`, contributes
 no members and is not an error, and one visited set per call collapses a cycle and a diamond to a
 single visit. `Source.examples(name)` is deliberately asymmetric with it — it reads only the named

package/dist/host/manifest.json

@@ -280,7 +280,7 @@
 			"storage": "agents/skills/orkestrel-harden/scripts/discovery.ts",
 			"destination": ".agents/skills/orkestrel-harden/scripts/discovery.ts",
 			"executable": false,
-			"digest": "fad5a6093f42f02c9fc0ee955d7f94fede22f3c69f8d049c80dfb779cda89f39"
+			"digest": "06128d912f79de527522075e7ebb3ccf24be864fad1015f4db5e456744201f7d"
 		},
 		{
 			"storage": "agents/skills/orkestrel-journey/SKILL.md",
@@ -496,7 +496,7 @@
 			"storage": "claude/agents/orkestrel.md",
 			"destination": ".claude/agents/orkestrel.md",
 			"executable": false,
-			"digest": "6b3af62e323ff6725680f6a13c3505904154e1d2c0afcb8ba7151a00ff5875c2"
+			"digest": "565dee392dced6c3e1e632295739eeb9465ca4828d26c18d02b57f106fdc5f38"
 		},
 		{
 			"storage": "claude/agents/planner.md",
@@ -538,7 +538,7 @@
 			"storage": "claude/rules/architecture.md",
 			"destination": ".claude/rules/architecture.md",
 			"executable": false,
-			"digest": "e30f034c8de38ce7c86506dfaa51844201d745181caed45ef427d0325e80afd3"
+			"digest": "5fb146c532f74910f5afa88070a7da03fd782c2f420f07d9581d2635d768807b"
 		},
 		{
 			"storage": "claude/rules/browser.md",
@@ -556,7 +556,7 @@
 			"storage": "claude/rules/names.md",
 			"destination": ".claude/rules/names.md",
 			"executable": false,
-			"digest": "1c9aeda4a47d94ef174e1f513da7b2710fe2a162e56a450270572ad942c95a7d"
+			"digest": "6606f4f8b219c6631029235f4081f29b055952a635e76477dfd6febdbe61afe2"
 		},
 		{
 			"storage": "claude/rules/patterns.md",
@@ -772,7 +772,7 @@
 			"storage": "configs/policy.ts",
 			"destination": "configs/policy.ts",
 			"executable": false,
-			"digest": "2ba8395040b41b30245a0e09de3a87b10546f29eab359a2884b5cde76aff4fc8"
+			"digest": "bf4ba1f29a04040f9bf953ad4641af08a2b0662e2dd6d6f8f3d7ae8282587158"
 		},
 		{
 			"storage": "cursor/mcp.json",
@@ -826,7 +826,7 @@
 			"storage": "dotfiles/oxlintrc.json",
 			"destination": ".oxlintrc.json",
 			"executable": false,
-			"digest": "8deab17f02176cb061f4c80a068eead4ac44ffc62cbb388587a962dc6afd8431"
+			"digest": "043a5c3eb0fb52d6cd841590e77c94ce03797b4b6a742fd57127bc9b9242153c"
 		},
 		{
 			"storage": "dotfiles/prettierignore",
@@ -862,7 +862,7 @@
 			"storage": "guides/browser.md",
 			"destination": "guides/browser.md",
 			"executable": false,
-			"digest": "2bd000da61376666df785bb4f51f3e7988ac821f29d9b3174abc8b716d503086"
+			"digest": "4dd8f7377b165d840dd3060f0af955458fff193612f833aadd04d37c34734afe"
 		},
 		{
 			"storage": "guides/budget.md",
@@ -886,7 +886,7 @@
 			"storage": "guides/contract.md",
 			"destination": "guides/contract.md",
 			"executable": false,
-			"digest": "2aa2ebffe3cb466e0c6845a8bbd1cc81f16e526f952f938430e3cfcb700cdee5"
+			"digest": "5339c1ba3a1ffe9ffe5415d70bd4868a73f9ef2661c4ce97e22dc8a30054569c"
 		},
 		{
 			"storage": "guides/csv.md",
@@ -916,7 +916,7 @@
 			"storage": "guides/guide.md",
 			"destination": "guides/guide.md",
 			"executable": false,
-			"digest": "1cdcd2e03b005cd8e7e12319f083ef31847a96682b4f9e33a084ea249c6a857c"
+			"digest": "4749d6a2a7da1d8d89a8c3ee3b60c5f21fcfb112074db80d7b1a2edcdef93afd"
 		},
 		{
 			"storage": "guides/html.md",
@@ -1168,7 +1168,7 @@
 			"storage": "tests/config.test.ts",
 			"destination": "tests/config.test.ts",
 			"executable": false,
-			"digest": "6550d3edb31603777ce713985b6648063e105c1ce2bee82c66570382faed7c67"
+			"digest": "5cb647597fb27442d2be85a75b446805dd33d05b9ca93808595497ab7587387f"
 		},
 		{
 			"storage": "tests/policy.test.ts",
@@ -2144,5 +2144,5 @@
 			]
 		}
 	],
-	"digest": "ccbd92a2462e0a17fb972b7582bf05e6deec0c1f11cf4d2d17e6ebec5cc431bf"
+	"digest": "e53117186fbcf5d34fce9dcecef09fc8581335b11561f9ccd264a0d9f7fb52f3"
 }

package/dist/host/tests/config.test.ts

@@ -36,6 +36,7 @@ import policyPlugin, {
 	MOCKING_RULE,
 	NESTED_RULE,
 	PARSER_RULE,
+	PLUGIN_RULE,
 	POLICY_BANNED_TERMS,
 	POLICY_ENDING_GLOBS,
 	POLICY_JUDGED_TERMS,
@@ -1614,6 +1615,12 @@ createSomething({
 				code: 'const COUNT = 1',
 				errors: [{ messageId: 'hidden' }],
 			},
+			{
+				name: 'rejects a hidden plugin factory [membership: declarations in a centralized file without an export]',
+				filename: 'src/worker/plugins.ts',
+				code: 'function createModalPlugin(): void {}',
+				errors: [{ messageId: 'hidden' }],
+			},
 		],
 	})
 
@@ -1721,6 +1728,11 @@ createSomething({
 				filename: 'src/worker/helpers.ts',
 				code: 'export function buildValue(): void {}',
 			},
+			{
+				name: 'accepts a plugin factory in plugins.ts',
+				filename: 'src/worker/plugins.ts',
+				code: 'export function createModalPlugin(): void {}',
+			},
 			{
 				name: 'accepts a module in a registered function domain',
 				filename: 'app/browser/composables/useTheme.ts',
@@ -1871,6 +1883,18 @@ createSomething({
 				code: 'export const coerceValue = () => undefined',
 				errors: [{ messageId: 'parser' }],
 			},
+			{
+				name: 'rejects an unprefixed export alias [membership: parsers.ts functions whose name does not start with parse]',
+				filename: 'app/edge/parsers.ts',
+				code: 'function parseValue(): void {}\nexport { parseValue as coerceValue }',
+				errors: [{ messageId: 'parser' }],
+			},
+			{
+				name: 'rejects an unprefixed exported import alias [membership: parsers.ts functions whose name does not start with parse]',
+				filename: 'app/edge/parsers.ts',
+				code: 'export import coerceValue = Values.parseValue',
+				errors: [{ messageId: 'parser' }],
+			},
 		],
 	})
 
@@ -1900,6 +1924,150 @@ createSomething({
 				code: 'export const buildValue = () => undefined',
 				errors: [{ messageId: 'factory' }],
 			},
+			{
+				name: 'rejects an unprefixed export alias [membership: factories.ts functions whose name does not start with create]',
+				filename: 'app/edge/factories.ts',
+				code: 'function createValue(): void {}\nexport { createValue as buildValue }',
+				errors: [{ messageId: 'factory' }],
+			},
+			{
+				name: 'rejects an unprefixed exported import alias [membership: factories.ts functions whose name does not start with create]',
+				filename: 'app/edge/factories.ts',
+				code: 'export import buildValue = Values.createValue',
+				errors: [{ messageId: 'factory' }],
+			},
+		],
+	})
+
+	tester.run('no-misnamed-plugin', PLUGIN_RULE, {
+		valid: [
+			{
+				name: 'accepts a create-prefixed plugin factory',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createModalPlugin(): void {}',
+			},
+			{
+				name: 'accepts a create-prefixed plugin collection factory',
+				filename: 'src/edge/plugins.ts',
+				code: 'export const createBootstrapPlugins = () => undefined',
+			},
+			{
+				name: 'accepts a plugin-suffixed name outside plugins.ts',
+				filename: 'src/edge/helpers.ts',
+				code: 'export function registerPlugin(): void {}',
+			},
+			{
+				name: 'reads no binding nested inside a plugin factory',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createModalPlugin(): void {\n\tfunction build(): void {}\n\tbuild()\n}',
+			},
+			{
+				name: 'accepts an export specifier in the plugin form',
+				filename: 'src/edge/plugins.ts',
+				code: 'function createModalPlugin(): void {}\nexport { createModalPlugin as createDialogPlugin }',
+			},
+			{
+				name: 'accepts an exported import alias in the plugin form',
+				filename: 'src/edge/plugins.ts',
+				code: 'export import createDialogPlugin = Factories.createModalPlugin',
+			},
+			{
+				name: 'accepts an exported import alias outside plugins.ts',
+				filename: 'src/edge/helpers.ts',
+				code: 'export import registerModal = Factories.createModalPlugin',
+			},
+		],
+		invalid: [
+			{
+				name: 'rejects a plugin-suffixed name without the create prefix [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function registerModalPlugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a lowercase segment before the plugin suffix [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createmodalPlugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a name that runs past the plugin suffix [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createModalPluginHost(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a plugin factory with no entity segment [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createPlugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a misnamed declared signature [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export declare function registerModal(): void',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects an anonymous default function [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export default function (): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects an export alias outside the plugin form [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'function createModalPlugin(): void {}\nexport { createModalPlugin as registerModal }',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a re-export outside the plugin form [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: "export { registerModal } from './modal.js'",
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a star re-export whose names the form cannot read [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: "export * from './modal.js'",
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a register-prefixed plugin factory [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function registerModal(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a create-prefixed name without the plugin suffix [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export const createModal = () => undefined',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a bare plugin-suffixed name [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function modalPlugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects a lowercase entity after create [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createplugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects an underscore in the entity segment [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export function createModal_Plugin(): void {}',
+				errors: [{ messageId: 'plugin' }],
+			},
+			{
+				name: 'rejects an exported import alias outside the plugin form [membership: plugins.ts functions whose name is not create…Plugin or create…Plugins]',
+				filename: 'src/edge/plugins.ts',
+				code: 'export import registerModal = Factories.createModalPlugin',
+				errors: [{ messageId: 'plugin' }],
+			},
 		],
 	})
 
@@ -2385,6 +2553,12 @@ createSomething({
 		expect(CENTRAL_SOURCE_FILES).toContain('handlers.ts')
 	})
 
+	it('registers plugins as a central function kind', () => {
+		expect(FUNCTION_SOURCE_FILES).toContain('plugins.ts')
+		expect(CENTRAL_SOURCE_FILES).toContain('plugins.ts')
+		expect(DATA_SOURCE_FILES).not.toContain('plugins.ts')
+	})
+
 	it('matches every isolated import pattern with refused and admitted fixtures', () => {
 		const fixture = createPolicyScratch({ prefix: 'propagation-patterns-' })
 		const scratch = fixture.path
@@ -2734,6 +2908,7 @@ createSomething({
 			)
 			scratch.write('src/violations/parsers.ts', 'export function coerceValue(): void {}\n')
 			scratch.write('src/violations/factories.ts', 'export function buildValue(): void {}\n')
+			scratch.write('src/violations/plugins.ts', 'export function registerModal(): void {}\n')
 			scratch.write('src/violations/constants.ts', 'export const values = []\n')
 			scratch.write('src/violations/composables.ts', "export const READY = 'yes'\n")
 			scratch.write('app/browser/composables/useTheme.ts', 'export function useMode(): void {}\n')
@@ -2837,6 +3012,7 @@ createSomething({
 				{ code: 'policy(no-hidden-declaration)', filename: 'src/violations/helpers.ts' },
 				{ code: 'policy(no-misnamed-parser)', filename: 'src/violations/parsers.ts' },
 				{ code: 'policy(no-misnamed-factory)', filename: 'src/violations/factories.ts' },
+				{ code: 'policy(no-misnamed-plugin)', filename: 'src/violations/plugins.ts' },
 				{ code: 'policy(no-malformed-constant)', filename: 'src/violations/constants.ts' },
 				{ code: 'policy(no-malformed-domain)', filename: 'src/violations/composables.ts' },
 				{

package/dist/src/core/index.cjs

@@ -4,7 +4,7 @@ let _orkestrel_template = require("@orkestrel/template");
 let _orkestrel_emitter = require("@orkestrel/emitter");
 var package_default = {
 	name: "@orkestrel/scaffold",
-	version: "0.0.86",
+	version: "0.0.88",
 	description: "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	keywords: [
 		"audit",
@@ -103,8 +103,8 @@ var package_default = {
 	},
 	devDependencies: {
 		"@microsoft/api-extractor": "^7.59.3",
-		"@orkestrel/browser": "^0.0.20",
-		"@orkestrel/guide": "^0.0.22",
+		"@orkestrel/browser": "^0.0.21",
+		"@orkestrel/guide": "^0.0.24",
 		"@orkestrel/html": "^0.0.12",
 		"@orkestrel/probe": "^0.0.19",
 		"@orkestrel/test": "^0.0.24",
@@ -900,6 +900,7 @@ function isNamedPlugin(plugin: PluginOption): plugin is { name: string } {
 				instances: [{ browser: 'chromium', headless: true }],
 			},
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -959,6 +960,7 @@ export function srcVue(override?: UserConfig): UserConfig {
 				instances: [{ browser: 'chromium', headless: true }],
 			},
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1001,6 +1003,7 @@ export function srcBrowser(override?: UserConfig): UserConfig {
 				instances: [{ browser: 'chromium', headless: true }],
 			},
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1135,6 +1138,7 @@ export function srcBin(override?: UserConfig): UserConfig {
 				instances: [{ browser: 'chromium', headless: true }],
 			},
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1428,6 +1432,7 @@ export function service(override?: UserConfig): UserConfig {
 			testTimeout: 120_000,
 			hookTimeout: 120_000,
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1444,6 +1449,7 @@ export function service(override?: UserConfig): UserConfig {
 			testTimeout: 120_000,
 			hookTimeout: 120_000,
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1464,6 +1470,7 @@ export function probe(override?: UserConfig): UserConfig {
 			environment: 'node',
 			browser: { enabled: false },
 			fileParallelism: false,
+			sequence: { groupOrder: 1 },
 			pool: 'threads',
 			benchmark: { include: ['tmp/probes/**/*.test.ts', 'tests/**/*.test.ts'] },
 		},