@sun-asterisk/sungen 3.1.1 → 3.1.2-beta.101

package/dist/orchestrator/templates/specs-api.js

@@ -0,0 +1,128 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.api = void 0;
+/* eslint-disable */
+/**
+ * Sungen API Driver — runtime helper (auto-generated into specs/api.ts).
+ *
+ * Runs a catalog-defined HTTP request and returns { status, ok, body, headers } — bound to a
+ * `{{name}}` variable by the `@api:<name>` annotation, asserted with `expect {{name.status}} …` /
+ * `{{name.body.<path>}}`. Base URL + auth come from a `kind: api` datasource in datasources.yaml,
+ * with `${VAR}` resolved from .env.qa / process.env — never inline.
+ *
+ * Safety: a datasource flagged `env: production` is refused unless SUNGEN_ALLOW_PROD=1.
+ * DO NOT EDIT — regenerated by `sungen generate`.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function loadEnvQa() {
+    for (const name of ['.env.qa', `.env.qa.${process.env.SUNGEN_ENV || ''}`]) {
+        const p = path.join(process.cwd(), name);
+        if (!name.endsWith('.') && fs.existsSync(p)) {
+            for (const line of fs.readFileSync(p, 'utf8').split('\n')) {
+                const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
+                if (m && process.env[m[1]] === undefined)
+                    process.env[m[1]] = m[2].replace(/^["']|["']$/g, '');
+            }
+        }
+    }
+}
+function loadConfig() {
+    loadEnvQa();
+    const file = [path.join(process.cwd(), 'datasources.yaml'), path.join(process.cwd(), 'qa', 'datasources.yaml')].find((f) => fs.existsSync(f));
+    if (!file)
+        throw new Error('API Driver: no datasources.yaml found (project root or qa/).');
+    const raw = fs.readFileSync(file, 'utf8').replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, k) => process.env[k] ?? '');
+    const { parse } = require('yaml');
+    const doc = parse(raw) || {};
+    return doc.datasources || {};
+}
+function substitute(text, params) {
+    return text.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (_m, p) => encodeURIComponent(String(params[p] ?? '')));
+}
+class ApiClient {
+    constructor() {
+        this.configs = null;
+    }
+    cfg(name) {
+        if (!this.configs)
+            this.configs = loadConfig();
+        const key = name || Object.keys(this.configs).find((k) => (this.configs[k].kind || 'api') === 'api') || Object.keys(this.configs)[0];
+        const conf = this.configs[key];
+        if (!conf)
+            throw new Error(`API Driver: datasource "${key}" not found in datasources.yaml`);
+        if (conf.env === 'production' && process.env.SUNGEN_ALLOW_PROD !== '1') {
+            throw new Error(`API Driver: datasource "${key}" is env: production — refused (set SUNGEN_ALLOW_PROD=1 to override).`);
+        }
+        return { key, conf };
+    }
+    /** Run a catalog request and return the response. `req` is embedded at compile time; `params` bind at runtime. */
+    async call(label, req, params = {}) {
+        const { conf } = this.cfg(req.datasource);
+        const base = (conf.base_url || conf.baseUrl || '').replace(/\/$/, '');
+        if (!base)
+            throw new Error(`API Driver: ${label} — datasource has no base_url (set it in .env.qa).`);
+        const url = base + substitute(req.path, params);
+        let body;
+        const headers = { ...(conf.headers || {}) };
+        if (req.body !== undefined && req.body !== null) {
+            const resolved = JSON.parse(JSON.stringify(req.body).replace(/":([A-Za-z_][A-Za-z0-9_]*)"/g, (_m, p) => JSON.stringify(params[p] ?? null)));
+            body = JSON.stringify(resolved);
+            if (!headers['content-type'] && !headers['Content-Type'])
+                headers['content-type'] = 'application/json';
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), conf.timeout_ms ?? 15000);
+        let res;
+        try {
+            res = await fetch(url, { method: req.method, headers, body, signal: controller.signal });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        const text = await res.text();
+        let parsed = text;
+        try {
+            parsed = text ? JSON.parse(text) : null;
+        }
+        catch { /* non-JSON → keep text */ }
+        const outHeaders = {};
+        res.headers.forEach((v, k) => { outHeaders[k] = v; });
+        return { status: res.status, ok: res.ok, body: parsed, headers: outHeaders };
+    }
+}
+exports.api = new ApiClient();
+//# sourceMappingURL=specs-api.js.map

package/dist/orchestrator/templates/specs-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs-api.js","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oBAAoB;AACpB;;;;;;;;;;GAUG;AACH,uCAAyB;AACzB,2CAA6B;AAW7B,SAAS,SAAS;IAChB,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,SAAS,EAAE,CAAC;IACZ,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9I,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrH,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,MAA2B;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,SAAS;IAAf;QACU,YAAO,GAAyC,IAAI,CAAC;IA+C/D,CAAC;IA7CS,GAAG,CAAC,IAAa;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,iCAAiC,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,GAAG,KAAK,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,uEAAuE,CAAC,CAAC;QACzH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,kHAAkH;IAClH,KAAK,CAAC,IAAI,CACR,KAAa,EACb,GAA0E,EAC1E,SAA8B,EAAE;QAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,oDAAoD,CAAC,CAAC;QACrG,MAAM,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEhD,IAAI,IAAwB,CAAC;QAC7B,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5I,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACzG,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;QAC7E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAQ,IAAI,CAAC;QACvB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACrF,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;CACF;AAEY,QAAA,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/orchestrator/templates/specs-api.ts

@@ -0,0 +1,101 @@
+/* eslint-disable */
+/**
+ * Sungen API Driver — runtime helper (auto-generated into specs/api.ts).
+ *
+ * Runs a catalog-defined HTTP request and returns { status, ok, body, headers } — bound to a
+ * `{{name}}` variable by the `@api:<name>` annotation, asserted with `expect {{name.status}} …` /
+ * `{{name.body.<path>}}`. Base URL + auth come from a `kind: api` datasource in datasources.yaml,
+ * with `${VAR}` resolved from .env.qa / process.env — never inline.
+ *
+ * Safety: a datasource flagged `env: production` is refused unless SUNGEN_ALLOW_PROD=1.
+ * DO NOT EDIT — regenerated by `sungen generate`.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+
+interface ApiDataSource {
+  kind?: string;
+  base_url?: string;
+  baseUrl?: string;
+  env?: string;
+  headers?: Record<string, string>;
+  timeout_ms?: number;
+}
+
+function loadEnvQa(): void {
+  for (const name of ['.env.qa', `.env.qa.${process.env.SUNGEN_ENV || ''}`]) {
+    const p = path.join(process.cwd(), name);
+    if (!name.endsWith('.') && fs.existsSync(p)) {
+      for (const line of fs.readFileSync(p, 'utf8').split('\n')) {
+        const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
+        if (m && process.env[m[1]] === undefined) process.env[m[1]] = m[2].replace(/^["']|["']$/g, '');
+      }
+    }
+  }
+}
+
+function loadConfig(): Record<string, ApiDataSource> {
+  loadEnvQa();
+  const file = [path.join(process.cwd(), 'datasources.yaml'), path.join(process.cwd(), 'qa', 'datasources.yaml')].find((f) => fs.existsSync(f));
+  if (!file) throw new Error('API Driver: no datasources.yaml found (project root or qa/).');
+  const raw = fs.readFileSync(file, 'utf8').replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, k) => process.env[k] ?? '');
+  const { parse } = require('yaml');
+  const doc = parse(raw) || {};
+  return doc.datasources || {};
+}
+
+function substitute(text: string, params: Record<string, any>): string {
+  return text.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (_m, p) => encodeURIComponent(String(params[p] ?? '')));
+}
+
+class ApiClient {
+  private configs: Record<string, ApiDataSource> | null = null;
+
+  private cfg(name?: string): { key: string; conf: ApiDataSource } {
+    if (!this.configs) this.configs = loadConfig();
+    const key = name || Object.keys(this.configs).find((k) => (this.configs![k].kind || 'api') === 'api') || Object.keys(this.configs)[0];
+    const conf = this.configs[key];
+    if (!conf) throw new Error(`API Driver: datasource "${key}" not found in datasources.yaml`);
+    if (conf.env === 'production' && process.env.SUNGEN_ALLOW_PROD !== '1') {
+      throw new Error(`API Driver: datasource "${key}" is env: production — refused (set SUNGEN_ALLOW_PROD=1 to override).`);
+    }
+    return { key, conf };
+  }
+
+  /** Run a catalog request and return the response. `req` is embedded at compile time; `params` bind at runtime. */
+  async call(
+    label: string,
+    req: { method: string; path: string; body?: unknown; datasource?: string },
+    params: Record<string, any> = {},
+  ): Promise<{ status: number; ok: boolean; body: any; headers: Record<string, string> }> {
+    const { conf } = this.cfg(req.datasource);
+    const base = (conf.base_url || conf.baseUrl || '').replace(/\/$/, '');
+    if (!base) throw new Error(`API Driver: ${label} — datasource has no base_url (set it in .env.qa).`);
+    const url = base + substitute(req.path, params);
+
+    let body: string | undefined;
+    const headers: Record<string, string> = { ...(conf.headers || {}) };
+    if (req.body !== undefined && req.body !== null) {
+      const resolved = JSON.parse(JSON.stringify(req.body).replace(/":([A-Za-z_][A-Za-z0-9_]*)"/g, (_m, p) => JSON.stringify(params[p] ?? null)));
+      body = JSON.stringify(resolved);
+      if (!headers['content-type'] && !headers['Content-Type']) headers['content-type'] = 'application/json';
+    }
+
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), conf.timeout_ms ?? 15000);
+    let res: Response;
+    try {
+      res = await fetch(url, { method: req.method, headers, body, signal: controller.signal });
+    } finally {
+      clearTimeout(timer);
+    }
+    const text = await res.text();
+    let parsed: any = text;
+    try { parsed = text ? JSON.parse(text) : null; } catch { /* non-JSON → keep text */ }
+    const outHeaders: Record<string, string> = {};
+    res.headers.forEach((v, k) => { outHeaders[k] = v; });
+    return { status: res.status, ok: res.ok, body: parsed, headers: outHeaders };
+  }
+}
+
+export const api = new ApiClient();

package/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@sun-asterisk/sungen",
-  "version": "3.1.1",
+  "version": "3.1.2-beta.101",
   "description": "Deterministic E2E Test Compiler - Gherkin + Selectors → Playwright tests",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "main": "src/index.ts",
+  "types": "src/index.ts",
   "bin": {
     "sungen": "./bin/sungen.js"
   },
   "scripts": {
-    "build": "tsc && npm run copy-templates",
+    "build": "rm -rf dist && tsc && npm run copy-templates",
     "copy-templates": "mkdir -p dist/generators/test-generator/adapters/playwright/templates/steps && mkdir -p dist/generators/test-generator/templates && mkdir -p dist/orchestrator/templates && mkdir -p dist/dashboard/templates && cp -r src/generators/test-generator/adapters/playwright/templates/*.hbs dist/generators/test-generator/adapters/playwright/templates/ 2>/dev/null || true && cp -r src/generators/test-generator/adapters/playwright/templates/steps dist/generators/test-generator/adapters/playwright/templates/ && cp src/generators/test-generator/templates/*.hbs dist/generators/test-generator/templates/ 2>/dev/null || true && cp -r src/orchestrator/templates/* dist/orchestrator/templates/ && cp src/dashboard/templates/index.html dist/dashboard/templates/index.html && mkdir -p dist/harness/catalog && cp src/harness/catalog/*.yaml dist/harness/catalog/",
-    "build:dashboard": "cd dashboard && npm install --silent && npm run build && cd .. && cp dashboard/dist/index.html src/dashboard/templates/index.html",
+    "build:dashboard": "cd ../../dashboard && npm install --silent && npm run build && cd - && cp ../../dashboard/dist/index.html src/dashboard/templates/index.html",
     "dev": "tsx src/cli/index.ts",
-    "test": "tsx tests/golden/run.ts && tsx tests/audit/run.ts && tsx tests/ingest/run.ts && tsx tests/eval/run.ts",
+    "test": "tsx tests/golden/run.ts && tsx tests/audit/run.ts && tsx tests/ingest/run.ts && tsx tests/eval/run.ts && tsx tests/exporter/run.ts && tsx tests/capabilities/run.ts && tsx tests/openapi/run.ts && tsx tests/packaging/run.ts",
     "test:update": "tsx tests/golden/run.ts --update && tsx tests/audit/run.ts --update && tsx tests/ingest/run.ts --update",
     "prepublishOnly": "npm run build:dashboard && npm run build"
   },
@@ -33,6 +33,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
+    "@sungen/driver-ui": "3.1.2-beta.101",
     "@anthropic-ai/sdk": "^0.71.0",
     "@babel/parser": "^7.28.5",
     "@babel/traverse": "^7.28.5",
@@ -52,37 +53,13 @@
     "yaml": "^2.8.2",
     "zod": "^4.1.13"
   },
-  "devDependencies": {
-    "@playwright/test": "^1.57.0",
-    "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/react": "^16.3.0",
-    "@types/jsdom": "^27.0.0",
-    "@types/node": "^20",
-    "jsdom": "^27.3.0",
-    "react": "^19.2.3",
-    "react-dom": "^19.2.3",
-    "typescript": "^5"
-  },
   "peerDependencies": {
     "@playwright/test": "^1.57.0"
   },
-  "overrides": {
-    "brace-expansion": "^5.0.6",
-    "uuid": "^11.1.1",
-    "tmp": "^0.2.6",
-    "esbuild": "^0.28.1"
-  },
-  "resolutions": {
-    "brace-expansion": "^5.0.6",
-    "uuid": "^11.1.1",
-    "tmp": "^0.2.6",
-    "esbuild": "^0.28.1"
-  },
   "files": [
     "dist",
     "bin",
     "src",
-    "docs/orchestration-spec.md",
     "README.md",
     "LICENSE"
   ]

package/src/capabilities/builtins.ts

@@ -0,0 +1,85 @@
+/**
+ * In-core capability registrations (Capability SPI).
+ *
+ * `ui` has moved to `@sungen/driver-ui` (R5.4); `db` and `api` still register from here via
+ * `LOCAL_DRIVERS` (they relocate in R5.5/R5.6), and `core` (the generic expect/lint/verification
+ * layer) always stays in core. Discovery (`discover.ts`) loads the external driver(s) first, then
+ * these, then `core` — preserving the historical pattern composition order, so compiled output is
+ * byte-identical (golden + audit snapshots are the proof).
+ */
+import type { CapabilityRegistry } from './registry';
+import type { Sensor, AdvisoryScanInput, GateInput } from './sensor';
+import { lintDataDriven } from '../harness/data-driven-lint';
+import { resolveQuery, lintCatalog } from '../harness/query-catalog';
+import { expectPatterns } from '../generators/test-generator/patterns/expect-patterns';
+
+/** Advisory @cases/@query lint, exposed through the Sensor SPI (generate-time). */
+const dataDrivenLintSensor: Sensor<AdvisoryScanInput> = {
+  id: 'data-driven-lint',
+  capability: 'core',
+  kind: 'advisory',
+  run: ({ dir, cwd }) =>
+    lintDataDriven(dir, cwd).map((w) => ({
+      sensorId: 'data-driven-lint',
+      capability: 'core',
+      scenario: w.scenario,
+      message: w.message,
+      severity: 'warn' as const,
+    })),
+};
+
+/**
+ * Generic `verification` gate sensor: every referenced named query (`@query`) must resolve in its
+ * catalog, and the catalog must lint clean. An unresolved/invalid reference is a gate-level error.
+ * (On a project with no `@query` refs it yields nothing.) `query-catalog` lives in core's harness —
+ * shared with the data-driven advisory lint. The `@api` counterpart now lives in
+ * `@sungen/driver-api`'s `api-verification` gate sensor. Message prefix unchanged → audit byte-identical.
+ */
+const verificationGateSensor: Sensor<GateInput> = {
+  id: 'verification',
+  capability: 'core',
+  kind: 'gate',
+  run: ({ screenName, scenarios, cwd }) => {
+    const findings = [] as ReturnType<Sensor['run']>;
+    const fail = (msg: string) => findings.push({ sensorId: 'verification', capability: 'core', message: `VERIFICATION-FAIL: ${msg}`, severity: 'error' });
+
+    const queryRefs = new Set<string>();
+    for (const s of scenarios) for (const r of s.queryRefs ?? []) queryRefs.add(r);
+    for (const name of queryRefs) {
+      try { resolveQuery(name, screenName, cwd); } catch (e: any) { fail(e?.message || `query "${name}" does not resolve`); }
+    }
+    if (queryRefs.size) {
+      try { for (const err of lintCatalog(screenName, null, cwd).errors) fail(err); } catch { /* no catalog */ }
+    }
+    return findings;
+  },
+};
+
+/**
+ * core — generic, capability-agnostic steps (data-vs-data `expect`) + the advisory @cases/@query
+ * lint and the gate-level `verification` sensor. Stays in core (not a driver) — the always-present
+ * generic layer. All three real capabilities (ui/db/api) now ship as `@sungen/driver-*` packages.
+ */
+export function registerCoreCapability(registry: CapabilityRegistry): void {
+  registry.register({
+    id: 'core',
+    patterns: [...expectPatterns],
+    sensors: [dataDrivenLintSensor, verificationGateSensor],
+  });
+}
+
+/**
+ * In-core driver manifest — now empty: `ui`, `db`, and `api` all ship as `@sungen/driver-*` packages
+ * loaded by discovery (`discover.ts`). Kept (empty) as the seam for any future in-core capability;
+ * `core` itself registers separately via `registerCoreCapability`.
+ */
+export const LOCAL_DRIVERS: ReadonlyArray<{ capability: string; register: (r: CapabilityRegistry) => void }> = [];
+
+/**
+ * @deprecated Use `discoverAndRegisterCapabilities()` from `./discover`. Kept as a thin alias so
+ * existing call-sites/tests don't break during R5; removed once everything routes through discovery.
+ */
+export function registerBuiltinCapabilities(): void {
+  // Lazy import avoids a cycle (discover imports builtins).
+  require('./discover').discoverAndRegisterCapabilities();
+}

package/src/capabilities/context-router.ts

@@ -0,0 +1,66 @@
+/**
+ * ContextRouter (Capability SPI, R1 — skeleton).
+ *
+ * The overload guard: for each unit of work it decides the minimal slice of Context + the relevant
+ * capabilities + the gate to load, so a project with many drivers doesn't gather everything for
+ * every artifact (cost scales by *target*, not *repo × drivers*). See
+ * `docs/spec/sungen_capability_spi_spec.md` §5.
+ *
+ * R1 scope (skeleton, deterministic, not yet enforced in the pipeline): it computes the routing
+ * plan — which capabilities apply (the default/implicit one + any whose annotation tags appear),
+ * and which sensors gate the task. Scope-trimming/token-budget enforcement is wired in a later step;
+ * for now `scope.budget` is a placeholder (null = unbounded) and the plan is advisory.
+ */
+import { capabilityRegistry } from './registry';
+
+export interface RouteTask {
+  /** What is being worked on now. */
+  target: { kind: string; id: string };
+  /** What artifact is being produced/checked: 'feature' | 'scenario' | 'selectors' | 'apis.yaml' | … */
+  artifact: string;
+  /** Capability tags present on the target (e.g. ['@query'], ['@api'], ['@cases']). */
+  tags?: string[];
+}
+
+export interface RoutePlan {
+  /** Applicable capability ids: the default/implicit one + any whose annotations match the tags. */
+  capabilities: string[];
+  /** Gate sensors to run for this task (ids). */
+  gateSensorIds: string[];
+  /** Advisory sensors to run for this task (ids). */
+  advisorySensorIds: string[];
+  /** Scope: the target slice + a token/context budget (null = unbounded for now). */
+  scope: { target: RouteTask['target']; budget: number | null };
+}
+
+class ContextRouter {
+  /** Which capabilities a set of tags activates: the default capability + any owning a present tag. */
+  capabilitiesFor(tags: string[] = []): string[] {
+    const ids = new Set<string>();
+    const def = capabilityRegistry.defaultCapabilityId();
+    if (def) ids.add(def);
+    for (const cap of capabilityRegistry.all()) {
+      if ((cap.annotations ?? []).some((a) => tags.includes(a))) ids.add(cap.id);
+    }
+    return [...ids];
+  }
+
+  /** Compute the routing plan for a task (deterministic). */
+  route(task: RouteTask): RoutePlan {
+    const capabilities = this.capabilitiesFor(task.tags ?? []);
+    // Generic sensors (no capability, or the always-on `core`) run regardless of the task's tags;
+    // capability-specific sensors run only when their capability is in scope.
+    const inScope = (capId?: string) => capId == null || capId === 'core' || capabilities.includes(capId);
+    const gateSensorIds = capabilityRegistry.sensors('gate').filter((s) => inScope(s.capability)).map((s) => s.id);
+    const advisorySensorIds = capabilityRegistry.sensors('advisory').filter((s) => inScope(s.capability)).map((s) => s.id);
+    return {
+      capabilities,
+      gateSensorIds,
+      advisorySensorIds,
+      scope: { target: task.target, budget: null },
+    };
+  }
+}
+
+/** Process-wide singleton. */
+export const contextRouter = new ContextRouter();

package/src/capabilities/context.ts

@@ -0,0 +1,46 @@
+/**
+ * Orchestration phase-hook SPIs (Capability SPI, R1 — phase hooks).
+ *
+ * The kernel owns the pipeline (Plan → Discover → Contextualize → Generate → Gate → Repair →
+ * Deliver); a capability fills the domain-specific phases via these hooks:
+ *  - `DiscoveryProvider` — sources → a slice of the normalized `Context`.
+ *  - `ContextMapper`     — `Context` → generation units + the capability's MODES
+ *                          (ui: screen|flow; api: matrix|flow|async; db: query-catalog).
+ *
+ * R1 scope: these are **declared** (the contract) and attachable to a CapabilityDescriptor, but
+ * the kernel does not consume them yet — the pipeline still runs as before. R2 (driver-ui) is the
+ * first conformer that implements them; the orchestration is rewired to call them then.
+ * See `docs/spec/sungen_capability_spi_spec.md` §3–§6 and `sungen_ui_driver_spec.md`.
+ */
+
+/** Normalized, capability-tagged discovery output. Lazy/sliced — never materialized whole. */
+export interface Context {
+  target: { kind: string; id: string; capability?: string };
+  /** Lazy source handles (spec/viewpoint/openapi/routes/schema/liveSnapshot/figma/…). */
+  sources: Record<string, unknown>;
+  /** Capability-specific normalized facts (ui: elements/states/pageType; api: endpoints; db: tables). */
+  facts: Record<string, unknown>;
+  /** For run-time-connected capabilities (api/db): reachability probe result. */
+  connectivity?: { reachable: boolean; baseUrl?: string; probedAt?: string };
+}
+
+/** One unit of generation work the kernel will drive through Generate → Gate → Repair. */
+export interface GenerationUnit {
+  /** Capability-defined mode: 'screen' | 'flow' | 'matrix' | 'async' | 'query-catalog' | … */
+  mode: string;
+  /** The slice of Context this unit covers (a screen, an endpoint group, a query set, …). */
+  targetSlice: unknown;
+  /** Band weight hint (source-aware) — the kernel supplies the band targets. */
+  weight?: number;
+}
+
+export interface DiscoveryProvider {
+  appliesTo(target: Context['target']): boolean;
+  /** Produce this capability's slice of the Context for the given target + requested scope. */
+  discover(target: Context['target'], scope: unknown): Promise<Partial<Context>>;
+}
+
+export interface ContextMapper {
+  /** Turn the Context into generation units (+ modes), honouring the kernel's band targets. */
+  decompose(ctx: Context, bands?: Record<string, number>): GenerationUnit[];
+}

package/src/capabilities/discover.ts

@@ -0,0 +1,42 @@
+/**
+ * Capability discovery (R5 packaging seam).
+ *
+ * Core registers capabilities without importing any driver package statically. External
+ * `@sungen/driver-*` packages are loaded at runtime via their `sungenDriver.register` entry point;
+ * the capabilities still in core (`db`, `api`) register from `LOCAL_DRIVERS`; the generic `core`
+ * capability registers last. Idempotent (guards on `registry.isPopulated()`).
+ *
+ * Ordering is deterministic and behaviour-preserving: external drivers (currently `@sungen/driver-ui`)
+ * load first, then `LOCAL_DRIVERS` (db → api), then `core` — i.e. the historical ui → db → api → core
+ * composition order, so pattern composition / compiled output is byte-identical.
+ *
+ * A driver that isn't installed is simply skipped (capabilities are opt-in). Errors thrown *inside* a
+ * present driver propagate — only a genuinely absent package is swallowed (resolve-then-require).
+ */
+import { capabilityRegistry } from './registry';
+import { LOCAL_DRIVERS, registerCoreCapability } from './builtins';
+
+/**
+ * Driver packages relocated out of core, loaded before the in-core `LOCAL_DRIVERS`. As `db`/`api`
+ * move to their packages (R5.5/R5.6) they join this list and leave `LOCAL_DRIVERS`; eventually this
+ * becomes a scan of installed `@sungen/driver-*` packages (R5.7).
+ */
+const EXTERNAL_DRIVERS = ['@sungen/driver-ui', '@sungen/driver-db', '@sungen/driver-api'];
+
+function loadExternalDriver(name: string): void {
+  try {
+    require.resolve(name);
+  } catch {
+    return; // not installed — capabilities are opt-in, so skip silently
+  }
+  const mod = require(name); // present: let any error thrown inside the driver propagate (don't mask)
+  const register: ((r: typeof capabilityRegistry) => void) | undefined = mod?.sungenDriver?.register ?? mod?.register;
+  if (typeof register === 'function') register(capabilityRegistry);
+}
+
+export function discoverAndRegisterCapabilities(): void {
+  if (capabilityRegistry.isPopulated()) return;
+  for (const name of EXTERNAL_DRIVERS) loadExternalDriver(name); // ui (external) — first, default capability
+  for (const driver of LOCAL_DRIVERS) driver.register(capabilityRegistry); // db, api (in-core for now)
+  registerCoreCapability(capabilityRegistry); // generic layer, always present, registered last
+}