@orkestrel/scaffold 0.0.92 → 0.0.94

package/dist/host/guides/router.md

@@ -361,7 +361,7 @@ These invariants hold across `src/core` / `src/browser` / `src/server` ↔
     stated earlier.
 22. **Streaming both ways.** `buildRequest` streams a body-carrying method's
     message into the `Request` through a manual `ReadableStream` pump — a `for
-await` loop over the `IncomingMessage` enqueueing each chunk, with
+    await` loop over the `IncomingMessage` enqueueing each chunk, with
     `duplex: 'half'` set as Node's fetch implementation requires for a
     streamed request body; `sendResponse` streams a non-`null` `Response`
     body back to the `ServerResponse` chunk by chunk, ending the target when

package/dist/host/guides/scaffold.md

@@ -2098,8 +2098,13 @@ Nothing is fixed except the manifest.
   once into `browserOptions` and passes that to every `playwright()` provider it configures. The
   precedence is `PLAYWRIGHT_EXECUTABLE_PATH`, `PLAYWRIGHT_WS_ENDPOINT`, `PLAYWRIGHT_CHANNEL`, the
   managed Playwright Chromium, the container's bundled Chromium, a verified system channel, then the
-  platform default. An installed pinned revision returns empty options, so Playwright keeps its own
-  launch defaults. A pinned revision that is not installed falls through to a `chromium` alias or a
+  platform default. Set `PLAYWRIGHT_SCROLLBARS=classic` only for runs that measure scrollbar
+  compensation, never for a standing gate. Every Chromium launch in that run omits Playwright's
+  `--hide-scrollbars` default argument so classic scrollbars can take layout space in every case.
+  An empty or unset value preserves the launch defaults; any other value throws an `Error`.
+  Pairing `classic` with `PLAYWRIGHT_WS_ENDPOINT` throws an `Error`, even with an executable
+  override, because the server owns the launch. An installed pinned revision returns empty options
+  unless `classic` is set. A pinned revision that is not installed falls through to a `chromium` alias or a
   sibling `chromium-*` revision under the same browsers directory, because a managed container ships
   one usable build for many Playwright versions. It is its own file rather than a block in the
   vendored `configs/helpers.ts`, which every workspace receives byte-identical while only a browser

package/dist/host/guides/worker.md

@@ -164,10 +164,14 @@ These invariants hold across `src/core` ↔ `worker.md`:
    `null` reaches Queue or Pool validation. Queue's integer timeout contract is preserved:
    `timeout` must be in `0..2_147_483_647` milliseconds, and `0` disables the deadline.
    Queue is constructed successfully before the
-   pool option is read, and every declared pool member (`max`, `on`, `error`, `create`,
-   `destroy`, `validate`) is then captured once by direct access, preserving inherited and
-   non-enumerable structural options. Pool `max` still defaults to concurrency, so resources
-   match the jobs in flight by default. `stop` / `abort` / `clear` return the
+   pool option is read, and every declared pool member (`max`, `min`, `restarts`, `watch`,
+   `on`, `error`, `create`, `destroy`, `validate`) is then captured once by direct access,
+   preserving inherited and non-enumerable structural options. Pool validates the forwarded
+   members. Pool `max` defaults to concurrency only when both `max` and `min` are absent.
+   With `min`, Pool defaults `max` to `min` and refuses unequal explicit values or a missing
+   `restarts` bound. The worker starts the pool at construction, so a floor warms before
+   work arrives and can exceed queue concurrency. A spent floor's startup rejection is
+   observed internally; acquire reports the pool failure to jobs. `stop` / `abort` / `clear` return the
    queue's exact cleanup barriers. `destroy` installs one stable barrier before it invokes
    queue teardown (including synchronous abort-event reentry), awaits queue then pool
    settlement serially, aggregates the queue's failure and the pool's in that order, and
@@ -195,7 +199,7 @@ These invariants hold across `src/core` ↔ `worker.md`:
    `TResult` infer from the `input` and `result` guards, so a call site needs no type
    argument. The structured-clone boundary is crossed with no `as`: a `Dispatch` narrows each reply
    value through `options.result` (a value that fails it rejects with `'reply did not
-satisfy result guard'`), and the worker side narrows each payload through
+   satisfy result guard'`), and the worker side narrows each payload through
    `options.input` (a bad input replies `'input did not satisfy input guard'`) —
    `TInput` / `TResult` are reconstructed by validation, never asserted. A throwing
    caller guard is contained and rejects only that job; the pooled worker remains usable.
@@ -383,6 +387,33 @@ See [queue.md](queue.md) / [pool.md](pool.md) for the underlying
 listener's throw never prevents a sibling listener, and the throw reaches the emitter's
 `error` handler, so a buggy worker observer leaves the inner queue and pool intact.
 
+## Pool options
+
+The `pool` option takes Pool's resource options and refuses the `capacity` option, so each
+resource serves one job at a time. Pool owns validation of the forwarded options:
+
+| Member     | Behavior                                                                                             |
+| ---------- | ---------------------------------------------------------------------------------------------------- |
+| `create`   | Creates a resource on demand or while filling a configured floor.                                    |
+| `destroy`  | Disposes each resource during pool cleanup or loss.                                                  |
+| `validate` | Checks an idle resource before reuse.                                                                |
+| `max`      | Caps pool capacity; defaults to `concurrency` only when `min` is absent.                             |
+| `min`      | Sets a positive safe integer warm floor; Pool defaults `max` to it and requires equality.            |
+| `restarts` | Sets the required non-negative safe integer refill bound with `min`; invalid without `min`.          |
+| `watch`    | Observes each created resource; settlement declares loss while live, and disposal aborts its signal. |
+| `on`       | Installs initial pool lifecycle listeners.                                                           |
+| `error`    | Receives pool listener failures and live watch rejections or throws.                                 |
+
+Pool `start()` fills the floor when the worker is constructed. Without `min`, resources remain
+lazy. A `restarts: 1` bound permits another create after the first failure and spends the
+floor after the second failure. Jobs then receive Pool's `create` error with the last cause.
+A resource lost while idle adds a strike even if it served a job before its last release.
+With `min: 1` and `restarts: 0`, that loss spends the floor, and the next job rejects with
+Pool's `create` error without creating a replacement.
+Worker `start()` restarts queue loops only; it does not reset a spent pool's restart bound.
+See [Pool](pool.md), under “Warm floor and loss”, for refill, retained
+cleanup failures, and watch listener cleanup.
+
 ## Patterns
 
 ### A resource-backed worker
@@ -479,8 +510,9 @@ Follow these practices when you run a worker in production:
 - **Honour `context.signal`** — pass it through to the resource's operation and bail
   out when it fires, so timeouts and aborts actually stop work rather than abandoning
   its result.
-- **Size the pool through `concurrency`** — the pool's `max` defaults to it; override
-  `pool.max` explicitly only when the resource cap must diverge from the job cap.
+- **Size the pool through `concurrency`** — when neither `pool.max` nor `pool.min` is given,
+  the pool's `max` defaults to it. Set `pool.max` for a separate lazy resource cap, or
+  `pool.min` with `pool.restarts` for a warm floor independent of queue concurrency.
   Concurrency must be a positive safe integer; invalid values are rejected by Queue and
   are never normalized.
 - **`abort` is terminal** — a worker-level abort cancels in-flight work and stops the
@@ -524,6 +556,10 @@ These tests pin the behaviour this guide documents:
   returns the queue's cleanup barriers; constructor options and every declared pool option are
   captured once (including inherited / non-enumerable structural options), only explicit
   `undefined` defaults, runtime `null` reaches the Queue/Pool diagnostic,
+  the pool option type excludes `capacity`, `min` warms before work with Pool's `max` default,
+  `restarts` bounds failed creates and loss of a previously used idle resource,
+  `watch` receives each resource and an abort signal before disposal, conflicting `min`
+  and `max` values refuse at construction with Pool's error,
   and invalid Queue concurrency wins before the pool option is read; strict concurrency
   rejects zero, negative, fractional, `NaN`, and infinite values instead of normalizing
   them; `destroy` keeps one

package/dist/host/manifest.json

@@ -34,7 +34,7 @@
 			"storage": "agents/skills/enterprise-bootstrap/references/bootstrap-reference.md",
 			"destination": ".agents/skills/enterprise-bootstrap/references/bootstrap-reference.md",
 			"executable": false,
-			"digest": "08336f02280eef5c7266052bc3cbe4d85c4268eb82dbb198b680940dd62d83ed"
+			"digest": "5fe9a1fc675fa566e44816cedf0a8421f387a5276409000ea20c98c876e3ac80"
 		},
 		{
 			"storage": "agents/skills/enterprise-bootstrap/references/color-modes.md",
@@ -70,13 +70,13 @@
 			"storage": "agents/skills/enterprise-bootstrap/references/responsive-layout.md",
 			"destination": ".agents/skills/enterprise-bootstrap/references/responsive-layout.md",
 			"executable": false,
-			"digest": "44e709e8df187495e6343048891ca9ff1ff9d3f30d86e00ad8cbd97c8e29bf20"
+			"digest": "f401dd3aa97b1098a6d97c8862bc7be7713a8a98ae1546a918abb66ee25cd8ad"
 		},
 		{
 			"storage": "agents/skills/enterprise-bootstrap/references/utilities.md",
 			"destination": ".agents/skills/enterprise-bootstrap/references/utilities.md",
 			"executable": false,
-			"digest": "8cec05a193672bc543439a3aa46cf7b4ffc5573527b3fe047ad575fbe73f4a2c"
+			"digest": "84a7c3eec5d280ba67b103418a69b4643434b9fa9fe39ee8c1b305f1ba4f94c0"
 		},
 		{
 			"storage": "agents/skills/orkestrel-align/SKILL.md",
@@ -322,7 +322,7 @@
 			"storage": "agents/skills/orkestrel-journey/references/statechart.md",
 			"destination": ".agents/skills/orkestrel-journey/references/statechart.md",
 			"executable": false,
-			"digest": "89e53c15a8f02dfa335611b45c39d05cc3509e390156d6e569582227f0487802"
+			"digest": "b5866b5a756e2b42feb24e7ea2bdcb7c2c0ecc8d9863488263aeddffb63a44da"
 		},
 		{
 			"storage": "agents/skills/orkestrel-journey/references/styles.md",
@@ -496,7 +496,7 @@
 			"storage": "claude/agents/orkestrel.md",
 			"destination": ".claude/agents/orkestrel.md",
 			"executable": false,
-			"digest": "36afc2242e9becbb7662aeece1b0f81a12162aacfd360a48a07a3ec7eaf7d639"
+			"digest": "7c081ea4deffe54305f4a43685adbde2a5941d4f69c3ed386690ab409372a638"
 		},
 		{
 			"storage": "claude/agents/planner.md",
@@ -580,7 +580,7 @@
 			"storage": "claude/rules/styles.md",
 			"destination": ".claude/rules/styles.md",
 			"executable": false,
-			"digest": "ae1c97f23d71c53ef117b2cd661df6258712988ec86de6c60a1cbad4670eb996"
+			"digest": "156572b7c26740411e64726255f76e0f6e6e4e55e800a26262a923210866eb77"
 		},
 		{
 			"storage": "claude/rules/tests.md",
@@ -826,7 +826,7 @@
 			"storage": "dotfiles/oxlintrc.json",
 			"destination": ".oxlintrc.json",
 			"executable": false,
-			"digest": "043a5c3eb0fb52d6cd841590e77c94ce03797b4b6a742fd57127bc9b9242153c"
+			"digest": "c3777d98a2c48a4007397ef90912b2530d7e40bc4d2f85155830e6d1135dc241"
 		},
 		{
 			"storage": "dotfiles/prettierignore",
@@ -862,7 +862,7 @@
 			"storage": "guides/browser.md",
 			"destination": "guides/browser.md",
 			"executable": false,
-			"digest": "deec731bfc8733f880021cbf9a8cf450e51a93bc23f2f963fb3e1bf750554ba8"
+			"digest": "dfeb5feef6751bac487cf0205736a6763995b259ef1ee9bee8a606bb12f50e33"
 		},
 		{
 			"storage": "guides/budget.md",
@@ -952,7 +952,7 @@
 			"storage": "guides/mcp.md",
 			"destination": "guides/mcp.md",
 			"executable": false,
-			"digest": "8cc580a9819d11771b585e8a915fcc6b7bd3ff4a575b6c6482cd76c501367664"
+			"digest": "d7363cdbde8cde24503915b0fdc78e30543e3b81e68e105500dfda3ffee7702e"
 		},
 		{
 			"storage": "guides/middleware.md",
@@ -982,13 +982,13 @@
 			"storage": "guides/pool.md",
 			"destination": "guides/pool.md",
 			"executable": false,
-			"digest": "c49d3d2d3d5a2dc4518a8cebb94c82ba2dbcdc03222d5ad3885df13c46dfe8e2"
+			"digest": "a8bbdd91006afeb577d9e43a3f04ffe37cae989db954058b2e67197a3ca62572"
 		},
 		{
 			"storage": "guides/probe.md",
 			"destination": "guides/probe.md",
 			"executable": false,
-			"digest": "8082bfb642ba16d64e06aba0e1c5d0774ecebd77443d500821e4482bb0916cbe"
+			"digest": "11ddbf59ab6dd29e24f25ad1076dd6976b6e3bcdda1d95cb5186871b082ce560"
 		},
 		{
 			"storage": "guides/process.md",
@@ -1036,13 +1036,13 @@
 			"storage": "guides/router.md",
 			"destination": "guides/router.md",
 			"executable": false,
-			"digest": "73c88d2692d756c7f902424e75ba45c09c64c3ba78bdad5e800c6abe18551f26"
+			"digest": "890c46d9749875a48f5ec1981e9a8da90c93ad961b2ed092549172d83546f4e9"
 		},
 		{
 			"storage": "guides/scaffold.md",
 			"destination": "guides/scaffold.md",
 			"executable": false,
-			"digest": "02922fe230a3d85e58ad16aa9e3b2e93afd42e9d3d66b88f60bbd68b1b90e19e"
+			"digest": "a5c97efa111d3fe4832380638c025b9cd4f536819b595753c463d7ef2f094889"
 		},
 		{
 			"storage": "guides/sea.md",
@@ -1126,7 +1126,7 @@
 			"storage": "guides/worker.md",
 			"destination": "guides/worker.md",
 			"executable": false,
-			"digest": "b72964712b7187a987e4ba08bec95d72487c4afeb6e4c43c631d14b4c3cbff63"
+			"digest": "441c0c0a3a5b425fb91034d953e2e6a1d05d3dcb29702c600a43e048bac24afd"
 		},
 		{
 			"storage": "guides/workflow.md",
@@ -1168,7 +1168,7 @@
 			"storage": "tests/config.test.ts",
 			"destination": "tests/config.test.ts",
 			"executable": false,
-			"digest": "ac12462cfc786b77c23e8996c0a050f9719d870db08abe7f3a8994cbbf778e2d"
+			"digest": "6d5079e1eed5b45c74ef788c966527e336444f32dc15afde19b7ae360e046854"
 		},
 		{
 			"storage": "tests/policy.test.ts",
@@ -2144,5 +2144,5 @@
 			]
 		}
 	],
-	"digest": "09b047e9598599db3dca2e26b55b897293e600defd7c35147dbab8a771816c0b"
+	"digest": "ffc221eacdfb7e9c96f1374ebb04666839c32a4fe53d02979f8cae0a0e2b4e7b"
 }

package/dist/host/tests/config.test.ts

@@ -2595,7 +2595,7 @@ createSomething({
 					const pattern = readConfigRecord(patternValue)
 					const message = pattern.message
 					if (typeof message !== 'string') throw new Error('Missing pattern message')
-					const sources: ReadonlyArray<readonly [string, boolean]> = message.includes('URL schemes')
+					let sources: ReadonlyArray<readonly [string, boolean]> = message.includes('URL schemes')
 						? [
 								['https://host/x', true],
 								['data:text/plain,x', true],
@@ -2661,6 +2661,24 @@ createSomething({
 											true,
 										],
 									]
+					if (message.includes('another styles face')) {
+						const face =
+							typeof pattern.regex === 'string'
+								? /@src\/(bootstrap|tailwindcss|styles)\(/u.exec(pattern.regex)?.[1]
+								: undefined
+						if (face === undefined) throw new Error('Missing styles face in restriction pattern')
+						sources = [
+							[`@src/${face}`, true],
+							[`@src/${face}?raw`, true],
+							[`@orkestrel/x/${face}`, true],
+							[`../${face}/index.js`, true],
+							[`../src/${face}/index.js`, true],
+							[`../../src/${face}/index.js`, true],
+							['@src/browser', false],
+							[`@src/${face}x`, false],
+							[`../${face}.ext/index.js`, false],
+						]
+					}
 					const owner =
 						Array.isArray(block.files) && typeof block.files[0] === 'string'
 							? block.files[0].split('/**')[0]
@@ -2730,6 +2748,9 @@ createSomething({
 				'src/vue',
 				'app/vue',
 				'src/browser',
+				'src/bootstrap',
+				'src/tailwindcss',
+				'src/styles',
 				'app/browser',
 				'src/core',
 				'app/core',
@@ -2737,7 +2758,7 @@ createSomething({
 				'app/server',
 				'src/bin',
 			]) {
-				const refused = owner.endsWith('/vue')
+				const refused: Array<string | readonly [string, string]> = owner.endsWith('/vue')
 					? [
 							'node:fs',
 							'@src/server',
@@ -2773,6 +2794,24 @@ createSomething({
 								: []),
 						]
 					: ['@src/core']
+				if (owner === 'src/core') refused.push('@src/browser', './index.css')
+				if (['src/bootstrap', 'src/tailwindcss', 'src/styles'].includes(owner)) {
+					refused.push('node:fs', '@src/server', '../server/index.js', '@app/core')
+					for (const face of ['bootstrap', 'tailwindcss', 'styles']) {
+						if (owner === `src/${face}`) continue
+						refused.push(
+							`@src/${face}`,
+							`@orkestrel/x/${face}`,
+							`../${face}/index.js`,
+							`../src/${face}/index.js`,
+							`../../src/${face}/index.js`,
+							['export * from', `@src/${face}`],
+							['import type * as boundary from', `@src/${face}`],
+						)
+						admitted.push(`@src/${face}x`, `../${face}.ext/index.js`)
+					}
+					admitted.push('@src/browser', './sheet.js', '@orkestrel/contract')
+				}
 				for (const [sources, refusal] of [
 					[
 						[
@@ -2799,7 +2838,11 @@ createSomething({
 						mkdirSync(dirname(resolve(scratch, file)), { recursive: true })
 						writeFileSync(
 							resolve(scratch, file),
-							'import * as boundary from ' + JSON.stringify(source) + '\nvoid boundary\ndebugger\n',
+							typeof source === 'string'
+								? 'import * as boundary from ' +
+										JSON.stringify(source) +
+										'\nvoid boundary\ndebugger\n'
+								: source[0] + ' ' + JSON.stringify(source[1]) + '\ndebugger\n',
 						)
 						expected.set(file, refusal)
 					}

package/dist/src/core/index.cjs

@@ -4,7 +4,7 @@ let _orkestrel_template = require("@orkestrel/template");
 let _orkestrel_emitter = require("@orkestrel/emitter");
 var package_default = {
 	name: "@orkestrel/scaffold",
-	version: "0.0.92",
+	version: "0.0.94",
 	description: "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	keywords: [
 		"audit",
@@ -103,16 +103,16 @@ var package_default = {
 		"@orkestrel/template": "^0.0.9"
 	},
 	devDependencies: {
-		"@microsoft/api-extractor": "^7.59.3",
-		"@orkestrel/browser": "^0.0.24",
+		"@microsoft/api-extractor": "^7.59.4",
+		"@orkestrel/browser": "^0.0.26",
 		"@orkestrel/guide": "^0.0.24",
 		"@orkestrel/html": "^0.0.12",
-		"@orkestrel/probe": "^0.0.20",
+		"@orkestrel/probe": "^0.0.21",
 		"@orkestrel/test": "^0.0.24",
 		"@types/node": "^26.6.4",
 		"@vitest/browser-playwright": "^4.1.11",
-		"oxfmt": "^0.71.0",
-		"oxlint": "^1.86.0",
+		"oxfmt": "^0.72.0",
+		"oxlint": "^1.87.0",
 		"playwright": "^1.63.0",
 		"typescript": "^6.0.3",
 		"vite": "^8.3.2",
@@ -2171,11 +2171,18 @@ export function resolveSystemBrowser(
  * discovery and is returned exactly as given: none of those environment values is checked
  * against the filesystem, because verifying an override would defeat the override. The pinned
  * managed revision outranks anything found on the host because it is deterministic. The installed
- * pinned revision returns empty options so Playwright keeps its own default launch semantics. Only
- * a discovered system channel is verified before it is named. The platform default is unverified
+ * pinned revision returns empty options unless \`PLAYWRIGHT_SCROLLBARS=classic\` is set. Only a
+ * discovered system channel is verified before it is named. The platform default is unverified
  * as well and exists only as a last resort: Windows takes \`msedge\`, which ships with the OS and
  * never collides with a foreground Chrome.
  *
+ * Set \`PLAYWRIGHT_SCROLLBARS=classic\` only for runs that measure scrollbar compensation, never
+ * for a standing gate. Every Chromium launch in that run omits Playwright's \`--hide-scrollbars\`
+ * default argument so classic scrollbars can take layout space in every case. An empty or unset
+ * value preserves the launch defaults; any other value throws an \`Error\`. Pairing \`classic\`
+ * with \`PLAYWRIGHT_WS_ENDPOINT\` throws an \`Error\`, even with an executable override, because the
+ * server owns the launch.
+ *
  * The resolver and the gate cover Chromium alone. Reopen engine selection when another
  * Playwright engine is installed and launches on the host with a \`captureFrame\` reading
  * back at its declared size, or when a journey or style divergence is recorded.
@@ -2191,26 +2198,38 @@ export function resolveBrowser(
 	environment: NodeJS.ProcessEnv,
 	root: string = BUNDLED_BROWSERS_ROOT,
 ): PlaywrightProviderOptions {
+	const scrollbars = environment.PLAYWRIGHT_SCROLLBARS
+	if (scrollbars !== undefined && scrollbars.length > 0 && scrollbars !== 'classic') {
+		throw new Error('PLAYWRIGHT_SCROLLBARS must be classic or empty')
+	}
+	const endpoint = environment.PLAYWRIGHT_WS_ENDPOINT
+	if (scrollbars === 'classic' && endpoint !== undefined && endpoint.length > 0) {
+		throw new Error('PLAYWRIGHT_SCROLLBARS=classic cannot be used with PLAYWRIGHT_WS_ENDPOINT')
+	}
+	const launch: PlaywrightProviderOptions['launchOptions'] =
+		scrollbars === 'classic' ? { ignoreDefaultArgs: ['--hide-scrollbars'] } : {}
 	const executable = environment.PLAYWRIGHT_EXECUTABLE_PATH
 	if (executable !== undefined && executable.length > 0) {
-		return { launchOptions: { executablePath: executable } }
+		return { launchOptions: { executablePath: executable, ...launch } }
 	}
-	const endpoint = environment.PLAYWRIGHT_WS_ENDPOINT
 	if (endpoint !== undefined && endpoint.length > 0) {
 		return { connectOptions: { wsEndpoint: endpoint } }
 	}
 	const requested = environment.PLAYWRIGHT_CHANNEL
 	if (requested !== undefined && requested.length > 0) {
-		return { launchOptions: { channel: requested } }
+		return { launchOptions: { channel: requested, ...launch } }
 	}
 	const managed = pinned === undefined ? undefined : resolveManagedBrowser(pinned)
 	if (managed !== undefined) {
-		return managed === pinned ? {} : { launchOptions: { executablePath: managed } }
+		if (managed === pinned) return scrollbars === 'classic' ? { launchOptions: launch } : {}
+		return { launchOptions: { executablePath: managed, ...launch } }
 	}
 	const bundled = resolveBundledBrowser(platform, root)
-	if (bundled !== undefined) return { launchOptions: { executablePath: bundled } }
+	if (bundled !== undefined) return { launchOptions: { executablePath: bundled, ...launch } }
 	const fallback = platform === 'win32' ? 'msedge' : 'chrome'
-	return { launchOptions: { channel: resolveSystemBrowser(platform, environment) ?? fallback } }
+	return {
+		launchOptions: { channel: resolveSystemBrowser(platform, environment) ?? fallback, ...launch },
+	}
 }
 `
 });