declapract-typescript-ehmpathy 0.49.11 → 0.49.13

package/dist/.test/assets/expo-migration/declarations/practices/cicd-app-react-native-expo/__snapshots__/.declapract.integration.test.ts.snap

@@ -6,9 +6,9 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
 on:
   workflow_call:
     inputs:
-      stage:
+      access:
         type: string
-        description: "the stage of infrastructure to deploy against (e.g., prod, prep)"
+        description: "the access to deploy with (test | prep | prod)"
         required: true
       build:
         type: string
@@ -16,7 +16,7 @@ on:
         required: true
       github-environment:
         type: string
-        description: "the github environment that the apply step will be executed in"
+        description: "github environment for the deploy jobs"
         required: true
       creds-aws-region:
         type: string
@@ -53,7 +53,12 @@ jobs:
           - android
     name: \${{ matrix.platform }}
     runs-on: ubuntu-24.04
-    environment: \${{ inputs.github-environment }}
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: \${{ inputs.github-environment }}
+      deployment: false
     needs: [install]
     steps:
       - name: checkout
@@ -92,9 +97,14 @@ jobs:
   deploy-web:
     name: web
     runs-on: ubuntu-24.04
-    environment: \${{ inputs.github-environment }}
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: \${{ inputs.github-environment }}
+      deployment: false
     needs: [install]
-    if: \${{ inputs.stage == 'prod' && inputs.app-web-deployment-s3-bucket }}
+    if: \${{ inputs.access == 'prod' && inputs.app-web-deployment-s3-bucket }}
     steps:
       - name: checkout
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
@@ -137,7 +147,7 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
 on:
   workflow_call:
     inputs:
-      stage:
+      access:
         type: string
         required: true
 
@@ -169,15 +179,15 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
 "{
   "name": "app-protools-native",
   "version": "1.0.0",
-  "packageManager": "pnpm@10.31.7",
+  "packageManager": "pnpm@10.34.5",
   "scripts": {
     "install:deps": "npm install",
     "start": "expo start",
     "start:hot:proxy": "npx local-ssl-proxy --source 3447 --target 8081",
-    "start:hot:prep": "STAGE=prep npx expo start --clear --dev-client",
+    "start:hot:prep": "ACCESS=prep npx expo start --clear --dev-client",
     "start:hot:prep:link": "echo '🚀 https://localhost.protools.prep.ahbode.dev:3447'",
     "start:hot:prep:proxy": "npm run start:hot:prep:link && npm run start:hot:proxy",
-    "start:hot:prod": "STAGE=prod npx expo start --clear --dev-client",
+    "start:hot:prod": "ACCESS=prod npx expo start --clear --dev-client",
     "start:hot:prod:link": "echo '🚀 https://localhost.protools.ahbode.dev:3447'",
     "start:hot:prod:proxy": "npm run start:hot:prod:link && npm run start:hot:proxy",
     "start:cold:proxy": "npx local-ssl-proxy --source 3449 --target 3000",
@@ -201,14 +211,14 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
     "open:store:android": "https://play.google.com/console/u/0/developers/",
     "open:store:ios": "browser https://appstoreconnect.apple.com/apps/",
     "fix": "npm run fix:format && npm run fix:lint",
-    "prepare": "if [ -e .git ] && [ -z $CI ]; then npm run prepare:husky && npm run prepare:rhachet; fi",
+    "prepare": "if [ -e .git ] && [ -z \\"\${CI:-}\\" ]; then npm run prepare:husky && npm run prepare:rhachet; fi",
     "prepush": "npm run test && npm run build",
     "preversion": "npm run prepush",
     "postversion": "git push origin HEAD --tags --no-verify",
-    "prepare:rhachet": "rhachet init --keys --hooks --roles mechanic behaver driver reviewer librarian ergonomist architect dispatcher learner operator observer deployer playwright enroller",
+    "prepare:rhachet": "rhachet init --keys --hooks --roles mechanic behaver driver reviewer librarian ergonomist architect dispatcher learner achiever telepath operator observer deployer playwright enroller",
     "upgrade:rhachet": "rhachet upgrade",
-    "test:unit": "set -eu && jest -c ./jest.unit.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
-    "test:integration": "set -eu && jest -c ./jest.integration.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test:unit": "set -eu && jest -c ./jest.unit.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=origin/main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test:integration": "set -eu && jest -c ./jest.integration.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=origin/main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
     "test:acceptance:locally": "set -eu && npm run build && LOCALLY=true jest -c ./jest.acceptance.config.ts --forceExit --verbose --runInBand --passWithNoTests $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
     "test": "set -eu && npm run test:commits && npm run test:types && npm run test:format && npm run test:lint && npm run test:unit && npm run test:integration && npm run test:acceptance:locally",
     "test:acceptance": "set -eu && npm run build && jest -c ./jest.acceptance.config.ts --forceExit --verbose --runInBand --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
@@ -218,35 +228,34 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
   },
   "devDependencies": {
     "expo": "54.0.0",
-    "rhachet": "1.43.1",
-    "rhachet-brains-anthropic": "0.4.1",
-    "rhachet-brains-fireworksai": "0.1.3",
+    "rhachet": "1.47.5",
+    "rhachet-brains-anthropic": "0.4.3",
+    "rhachet-brains-fireworksai": "0.1.6",
     "rhachet-brains-xai": "0.3.3",
-    "rhachet-roles-bhrain": "0.29.24",
+    "rhachet-roles-bhrain": "0.34.1",
     "rhachet-roles-bhrowser": "0.1.0",
-    "rhachet-roles-bhuild": "0.21.22",
-    "rhachet-roles-ehmpathy": "1.38.1",
-    "rhachet-roles-ghlitch": "0.2.5",
+    "rhachet-roles-bhuild": "0.21.36",
+    "rhachet-roles-ehmpathy": "1.38.12",
+    "rhachet-roles-ghlitch": "0.3.0",
     "rhachet-roles-rhachet": "0.1.7",
     "@jest/globals": "30.2.0",
     "@types/jest": "30.0.0",
     "jest": "30.2.0",
     "esbuild-register": "3.6.0",
-    "test-fns": "1.15.8",
+    "test-fns": "1.17.0",
     "tsx": "4.20.6",
-    "jest-expo": "54.0.0",
-    "@babel/core": "7.24.0",
-    "babel-preset-expo": "12.0.0",
-    "react-test-renderer": "19.0.0",
-    "isomorphic-fetch": "3.0.0",
+    "jest-expo": "^54.0.0",
+    "@babel/core": "^7.24.0",
+    "babel-preset-expo": "^12.0.0",
+    "isomorphic-fetch": "^3.0.0",
     "typescript": "5.4.5"
   },
   "dependencies": {
     "expo": "51.0.22",
     "expo-dev-client": "4.0.20",
     "expo-updates": "0.25.21",
-    "domain-objects": "0.31.13",
-    "type-fns": "1.21.3"
+    "domain-objects": "0.34.0",
+    "type-fns": "1.21.4"
   },
   "author": "ahbode",
   "repository": "ahbode/app-protools-native",
@@ -287,3 +296,5 @@ exports[`app-react-native-expo — graceful migration of an app-protools-shaped
 }
 "
 `;
+
+exports[`cicd-app-react-native-expo — prod test-gate precedence (silent-break clamp) given: [case1] the expo deploy.yml prod job when: [t1] the emitted prod-job gate is snapshotted for review then: the prod job \`if:\` gate matches snapshot: deploy.yml prod job if: (test-gate precedence) 1`] = `"((startsWith(github.ref, 'refs/tags/') && github.event_name != 'workflow_dispatch') || github.event.inputs.access == 'prod') && always() && (needs.test.result == 'success' || needs.test.result == 'skipped')"`;

package/dist/.test/assets/expo-migration/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/.deploy-expo.yml

@@ -3,9 +3,9 @@ name: .deploy-expo
 on:
   workflow_call:
     inputs:
-      stage:
+      access:
         type: string
-        description: "the stage of infrastructure to deploy against (e.g., prod, prep)"
+        description: "the access to deploy with (test | prep | prod)"
         required: true
       build:
         type: string
@@ -13,7 +13,7 @@ on:
         required: true
       github-environment:
         type: string
-        description: "the github environment that the apply step will be executed in"
+        description: "github environment for the deploy jobs"
         required: true
       creds-aws-region:
         type: string
@@ -50,7 +50,12 @@ jobs:
           - android
     name: ${{ matrix.platform }}
     runs-on: ubuntu-24.04
-    environment: ${{ inputs.github-environment }}
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: ${{ inputs.github-environment }}
+      deployment: false
     needs: [install]
     steps:
       - name: checkout
@@ -89,9 +94,14 @@ jobs:
   deploy-web:
     name: web
     runs-on: ubuntu-24.04
-    environment: ${{ inputs.github-environment }}
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: ${{ inputs.github-environment }}
+      deployment: false
     needs: [install]
-    if: ${{ inputs.stage == 'prod' && inputs.app-web-deployment-s3-bucket }}
+    if: ${{ inputs.access == 'prod' && inputs.app-web-deployment-s3-bucket }}
     steps:
       - name: checkout
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4

package/dist/.test/assets/expo-migration/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/deploy.yml

@@ -9,8 +9,8 @@ on:
       - 'master'
   workflow_dispatch:
     inputs:
-      stage:
-        description: 'which stage do you want to deploy to?'
+      access:
+        description: 'which access do you want to deploy with?'
         type: choice
         options:
           - prep
@@ -40,7 +40,7 @@ jobs:
     if: github.event_name != 'workflow_dispatch' || github.event.inputs.thoroughly == 'true'
     with:
       creds-aws-region: us-east-1
-      creds-aws-role-arn: arn:aws:iam::@declapract{variable.awsAccountId.prep}:role/@declapract{variable.projectName}-github-actions-prep
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }} # use aws auth via oidc, if this repo supplies it
     secrets: inherit # keyrack firewall in .test.yml filters to declared keys
 
   prep:
@@ -48,14 +48,14 @@ jobs:
     needs: [test]
     # dont deploy on merge to main by default, since builds are expensive
     if: |
-      ((github.ref == 'refs/heads/main' && github.event_name != 'workflow_dispatch' && false) || github.event.inputs.stage == 'prep') &&
+      ((github.ref == 'refs/heads/main' && github.event_name != 'workflow_dispatch' && false) || github.event.inputs.access == 'prep') &&
       always() && (needs.test.result == 'success' || needs.test.result == 'skipped')
     with:
-      stage: prep
+      access: prep
+      github-environment: preparation # deployment:false keeps the gate and suppresses the PR-timeline spam
       build: development
-      github-environment: prep
       creds-aws-region: us-east-1
-      creds-aws-role-arn: arn:aws:iam::@declapract{variable.awsAccountId.prep}:role/@declapract{variable.projectName}-github-actions-prep
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }}
     secrets:
       expo-token: ${{ secrets.EXPO_TOKEN }}
 
@@ -63,14 +63,14 @@ jobs:
     uses: ./.github/workflows/.deploy-expo.yml
     needs: [test]
     if: |
-      (startsWith(github.ref, 'refs/tags/') && github.event_name != 'workflow_dispatch') || (github.event.inputs.stage == 'prod') &&
+      ((startsWith(github.ref, 'refs/tags/') && github.event_name != 'workflow_dispatch') || github.event.inputs.access == 'prod') &&
       always() && (needs.test.result == 'success' || needs.test.result == 'skipped')
     with:
-      stage: prod
+      access: prod
       build: production
-      github-environment: prod
+      github-environment: ${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) && 'production-on-main' || 'production-on-else-apply' }} # main/tag => on-main; else => on-else-apply (actor_id-gated writer)
       creds-aws-region: us-east-1
-      creds-aws-role-arn: arn:aws:iam::@declapract{variable.awsAccountId.prod}:role/@declapract{variable.projectName}-github-actions-prod
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PROD_OIDC_APPLY_ROLE_ARN }}
       app-web-deployment-s3-bucket: s3://@declapract{variable.projectName}-@declapract{variable.infrastructureNamespaceId}-prod
     secrets:
       expo-token: ${{ secrets.EXPO_TOKEN }}

package/dist/.test/assets/expo-migration/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/test.yml

@@ -20,8 +20,6 @@ jobs:
   suite:
     uses: ./.github/workflows/.test.yml
     with:
-      aws-region: us-east-1
-      aws-account-id: '@declapract{variable.awsAccountId.prep}'
-    secrets:
-      aws-access-key-id: ${{ secrets.PREP_AWS_ACCESS_KEY_ID }}
-      aws-secret-access-key: ${{ secrets.PREP_AWS_SECRET_ACCESS_KEY }}
+      creds-aws-region: us-east-1
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }} # use aws auth via oidc, if this repo supplies it
+    secrets: inherit # keyrack firewall in .test.yml filters to declared keys

package/dist/.test/assets/expo-migration/declarations/practices/cicd-app-react-native-expo/best-practice/package.json

@@ -6,10 +6,10 @@
   },
   "scripts": {
     "start:hot:proxy": "npx local-ssl-proxy --source 3447 --target 8081",
-    "start:hot:prep": "STAGE=prep npx expo start --clear --dev-client",
+    "start:hot:prep": "ACCESS=prep npx expo start --clear --dev-client",
     "start:hot:prep:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prep}:@declapract{variable.app.web.port.hot}'",
     "start:hot:prep:proxy": "npm run start:hot:prep:link && npm run start:hot:proxy",
-    "start:hot:prod": "STAGE=prod npx expo start --clear --dev-client",
+    "start:hot:prod": "ACCESS=prod npx expo start --clear --dev-client",
     "start:hot:prod:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prod}:@declapract{variable.app.web.port.hot}'",
     "start:hot:prod:proxy": "npm run start:hot:prod:link && npm run start:hot:proxy",
     "start:cold:proxy": "npx local-ssl-proxy --source 3449 --target 3000",

package/dist/.test/assets/expo-migration/declarations/practices/domain/.declapract.integration.test.ts

@@ -0,0 +1,115 @@
+import { relative } from 'node:path';
+
+import { given, then, useBeforeAll, when } from 'test-fns';
+
+import { getAllPathsUnderDir } from '../../utils/getAllPathsUnderDir';
+
+/**
+ * .what = holds the `domain` best-practice to the go-forward `src/domain.objects/` layout, so it
+ *         can never again require a file that its kin `directory-structure-src`'s `domain-dir`
+ *         bad-practice forbids (D51 / #574).
+ * .why  = both practices sit in `typescript-project-core`, so every service repo carries both.
+ *         `domain-dir` forbids EVERY file under `src/**​/domain/**` and its fix RELOCATES them to
+ *         `src/domain.objects/`. while `domain` required `src/domain/objects/index.ts`, a repo that
+ *         satisfied `domain` VIOLATED `domain-dir`, and `domain-dir`'s fix moved the required file
+ *         AWAY — a terminal, unrepairable state. keyed on `domain.objects`, the two agree:
+ *         `domain-dir`'s fix produces exactly what `domain` requires.
+ * .note = this is an INTEGRATION test by the same rule the sibling `actionPins` walk cites — it
+ *         reads the filesystem (`readdirSync` over the `domain` best-practice tree), and
+ *         `rule.forbid.unit.remote-boundaries` puts any filesystem-crossing test in the integration
+ *         suite. it needs no credential and no network; the boundary alone classifies it.
+ * .note = this is the FOCUSED clamp for the one collision D51 named. the wish's broader durable
+ *         guard — "no best-practice path is matched by a bad-practice glob in the SAME usecase,
+ *         across every practice" — is owed as a follow-on; it must land with a full collision audit,
+ *         since a repo-wide lint may surface other overlaps already present that each need a verdict.
+ */
+
+const BEST_PRACTICE_DIR = `${__dirname}/best-practice`;
+
+// the `schematic-joi-model` bad-practice DETECTS joi models by content and rewrites them to
+// domain-objects. its subject glob scopes WHERE it looks; keyed at the deprecated `src/domain/`
+// path it is inert on any migrated repo (D51 / #574, ask 2) — the go-forward path is
+// `src/domain.objects/`, exactly where `directory-structure-src`'s `domain-dir` relocates files.
+const JOI_DETECTOR_DIR = `${__dirname}/bad-practices/schematic-joi-model`;
+
+/**
+ * .what = the CONSUMER target path a declaration governs, relative to a practice-half base dir.
+ *         a `*.declapract.ts` declaration governs its filename minus that suffix; any other file is
+ *         a template that governs itself.
+ */
+const asConsumerTargetPath = (input: { absPath: string; baseDir: string }): string => {
+  const rel = relative(input.baseDir, input.absPath);
+  return rel.replace(/\.declapract\.ts$/, '');
+};
+
+/**
+ * .what = does a consumer target path sit under a bare `domain/` path segment?
+ * .why = that is precisely the set `domain-dir`'s `src/**​/domain/**` glob forbids. a
+ *        `domain.objects` segment is NOT a `domain` segment (the `.objects` makes it a distinct
+ *        directory name), so the go-forward layout reads false here.
+ */
+const isUnderBareDomainSegment = (input: { targetPath: string }): boolean =>
+  input.targetPath.split('/').includes('domain');
+
+/**
+ * .what = every declared CONSUMER target path under a practice-half dir — the walk minus the files
+ *         that are not governed consumer paths (readmes, todos, `.test.ts`, `__snapshots__`).
+ * .why  = both scenes below gather the same set from different base dirs; one named transformer
+ *         holds the exclusion list in one place rather than an inline `.filter` chain a reader
+ *         must simulate twice (rule.require.named-transformers).
+ */
+const getConsumerTargetPaths = (input: { dir: string }): string[] =>
+  getAllPathsUnderDir({ dir: input.dir, skip: null })
+    .filter((path) => !/\.declapract\.readme\.md$/.test(path))
+    .filter((path) => !/\.declapract\.todo\.md$/.test(path))
+    // a test file is not a governed consumer path — exclude it so the walk holds
+    // only real declarations to the layout, not `.test.ts` / `__snapshots__`
+    .filter((path) => !/\.test\.ts$/.test(path))
+    .filter((path) => !/\/__snapshots__\//.test(path))
+    .map((absPath) => asConsumerTargetPath({ absPath, baseDir: input.dir }));
+
+describe('domain practice — go-forward layout (D51 clamp)', () => {
+  given('[case1] the `domain` best-practice tree', () => {
+    const scene = useBeforeAll(() => ({
+      targetPaths: getConsumerTargetPaths({ dir: BEST_PRACTICE_DIR }),
+    }));
+
+    when('[t0] its declared consumer target paths are gathered', () => {
+      then('none sits under a bare `domain/` segment that `domain-dir` forbids', () => {
+        // teeth: the pre-fix declaration at `src/domain/objects/index.ts.declapract.ts` targets
+        // `src/domain/objects/index.ts`, whose `domain` segment is exactly what `domain-dir`
+        // relocates — so a revert of the move to the deprecated path reddens this assertion.
+        const offenders = scene.targetPaths.filter((targetPath) =>
+          isUnderBareDomainSegment({ targetPath }),
+        );
+        expect(offenders).toEqual([]);
+      });
+
+      then('the objects index is declared at the `src/domain.objects/` path', () => {
+        expect(scene.targetPaths).toContain('src/domain.objects/index.ts');
+      });
+    });
+  });
+
+  given('[case2] the `schematic-joi-model` bad-practice tree', () => {
+    const scene = useBeforeAll(() => ({
+      targetPaths: getConsumerTargetPaths({ dir: JOI_DETECTOR_DIR }),
+    }));
+
+    when('[t0] its declared subject glob paths are gathered', () => {
+      then('none sits under a bare `domain/` segment (else the detector is inert post-migration)', () => {
+        // teeth: revert the glob to `src/domain/**/*.ts.declapract.ts` and its subject path
+        // `src/domain/**/*.ts` carries a bare `domain` segment — the deprecated location a
+        // migrated repo no longer holds — so this assertion reddens.
+        const offenders = scene.targetPaths.filter((targetPath) =>
+          isUnderBareDomainSegment({ targetPath }),
+        );
+        expect(offenders).toEqual([]);
+      });
+
+      then('the joi detector targets the go-forward `src/domain.objects/` path', () => {
+        expect(scene.targetPaths).toContain('src/domain.objects/**/*.ts');
+      });
+    });
+  });
+});

package/dist/{practices/domain/bad-practices/schematic-joi-model/src/domain → .test/assets/expo-migration/declarations/practices/domain/bad-practices/schematic-joi-model/src/domain.objects}/<star><star>/<star>.ts.declapract.ts

@@ -3,7 +3,10 @@ import type { FileCheckFunction, FileFixFunction } from 'declapract';
 export const check: FileCheckFunction = (contents) => {
   if (contents?.includes('SchematicJoiModel')) return; // if it includes that, then this file matches a bad practice
   if (contents?.includes('schematic-joi-model')) return; // if it includes that, then this file matches a bad practice
-  throw new Error('passes'); // otherwise, does not match the bad practice
+  // otherwise, does not match the bad practice: no SchematicJoiModel import or schematic-joi-model reference found
+  throw new Error(
+    'does not match bad practice: no SchematicJoiModel or schematic-joi-model reference found',
+  );
 };
 export const fix: FileFixFunction = (contents) => {
   if (!contents) return {}; // shouldnt be called if file does not exist, but handle it in case anyway

package/dist/.test/assets/expo-migration/declarations/practices/domain/best-practice/package.json

@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "domain-objects": "@declapract{check.minVersion('0.31.13')}",
-    "type-fns": "@declapract{check.minVersion('1.21.3')}"
+    "domain-objects": "@declapract{check.minVersion('0.34.0')}",
+    "type-fns": "@declapract{check.minVersion('1.21.4')}"
   }
 }

package/dist/.test/assets/expo-migration/declarations/practices/domain/best-practice/src/domain.objects/index.ts.declapract.ts

@@ -0,0 +1,12 @@
+import { FileCheckType } from 'declapract';
+
+// a project should declare domain objects — otherwise, what does the service operate on?
+//
+// this requires the `src/domain.objects/` layout that `directory-structure-src`'s `domain-dir`
+// bad-practice enforces. it deliberately does NOT require the deprecated `src/domain/objects/`
+// path: `domain-dir` forbids every file under `src/**/domain/**` and its fix relocates them to
+// `src/domain.objects/`, so a check that required `src/domain/objects/index.ts` (D51) contradicted
+// its own kin — `domain-dir`'s fix moved the required file away, so a repo reached a terminal,
+// unrepairable state. keyed on the go-forward layout, the two practices agree: `domain-dir`'s fix
+// produces exactly this path.
+export const check = FileCheckType.EXISTS;

package/dist/.test/assets/expo-migration/declarations/practices/git/.declapract.integration.test.ts

@@ -5,7 +5,10 @@ import path from 'node:path';
 import { executeApply } from 'declapract';
 import { genTempDir, given, then, useBeforeAll, useThen, when } from 'test-fns';
 
-import { check as checkOfRhachet } from '../rhachet/best-practice/.gitignore.declapract';
+import {
+  check as checkOfRhachet,
+  fix as fixOfRhachet,
+} from '../rhachet/best-practice/.gitignore.declapract';
 import { check as checkOfGit } from './best-practice/.gitignore.declapract';
 
 // executeApply is slow (90+ seconds per invocation due to full practice evaluation)
@@ -305,14 +308,61 @@ describe('gitignore practices', () => {
        *         if that ever drifts, `declapract fix` rewrites the file on every run,
        *         forever -- and a hoisted negation turns inert, which silently
        *         un-ignores the test-fixture node_modules the tail exists to protect.
+       * .note = rhachet is DISJOINT from git, not a subset, so a rhachet apply on top of
+       *         git's output ADDS its own line(s) rather than a no-op. this test asserts
+       *         only that git's lines SURVIVE the second declarer -- the settle/no-loss
+       *         property. it does NOT name rhachet's specific line: that line is rhachet's
+       *         to own and assert (its own unit suite + snapshot do), and a git test that
+       *         pinned it would reach across the practice boundary
+       *         (rule.require.entool-requests-as-practices -- the practice that creates an
+       *         artifact declares and asserts it). the full settled artifact, both
+       *         practices' lines included, is the `[t3]` snapshot.
        */
-      then('the file is byte-identical -- the practices converge', async () => {
+      then('the second declarer preserves every git line', async () => {
         const contentsAfterRhachet = await fs.readFile(
           path.join(tempDir, '.gitignore'),
           'utf-8',
         );
 
-        expect(contentsAfterRhachet).toEqual(fileBefore.contents);
+        // every line git emitted survives the second declarer -- no loss
+        fileBefore.contents
+          .split('\n')
+          .filter((line) => line)
+          .forEach((line) => expect(contentsAfterRhachet).toContain(line));
+      });
+
+      /**
+       * .what = the settled file is EXACTLY rhachet's fix of git's output -- so the
+       *         second declarer adds no line but what it declares, and reorders none
+       * .why  = the survival loop above proves no git line is LOST, but a per-line
+       *         `toContain` is blind to two things: a reorder of the lines, and an
+       *         extraneous line appended beyond the union. this strict form closes both
+       *         -- the bytes on disk must equal what rhachet's own `fix` emits from
+       *         git's output, whole and in order.
+       * .note = the expectation is DERIVED from rhachet's own declaration (`fixOfRhachet`),
+       *         never a literal copied here -- so rhachet still owns and declares its line
+       *         (`rule.require.entool-requests-as-practices` holds), while the git test
+       *         still proves the second declarer emits no line but what it declares. a
+       *         `toEqual(fileBefore.contents)` would be WRONG: rhachet legitimately unions
+       *         its own `.agent/.cache/` line in, so the file GAINS a line -- deriving the
+       *         expectation THROUGH rhachet's fix accounts for exactly that gain.
+       * .note = the pipeline writes through `writeFileAsync`, which rewrites the final
+       *         newline (`content.replace(/\n$/, '') + '\n'` -- the seam `[t3]` names), so
+       *         both sides are compared with that one final newline stripped.
+       */
+      then("the settled file is exactly rhachet's fix of git's output", async () => {
+        const contentsAfterRhachet = await fs.readFile(
+          path.join(tempDir, '.gitignore'),
+          'utf-8',
+        );
+
+        const expected =
+          (await fixOfRhachet(fileBefore.contents, {} as any)).contents ?? '';
+
+        // strip the one final newline the pipeline's writeFileAsync rewrites
+        const asStripped = (value: string): string => value.replace(/\n$/, '');
+
+        expect(asStripped(contentsAfterRhachet)).toEqual(asStripped(expected));
       });
 
       then('both cache paths are still ignored', () => {
@@ -334,9 +384,10 @@ describe('gitignore practices', () => {
        *         different input -- one already full of git's 17 lines, rather than the
        *         3-line file `[case2]` hands it. a union or tail defect can behave
        *         differently on that input, and this is the only place it is reachable.
-       * .note = `the practices converge` would go red too, but only as a DISAGREEMENT
-       *         between the two declarers. a reader who saw that alone would look at
-       *         the ordered tail, not at lost lines. these name the actual loss.
+       * .note = `the second declarer preserves every git line` covers the gross no-loss,
+       *         but these name the SPECIFIC union/tail guarantees -- a repo's own custom
+       *         line, no duplicate, a live negation -- each of which a defect could break
+       *         while the gross no-loss still held.
        */
       then("the repo's own custom ignores survive the second apply", () => {
         expect(fileAfterRhachet.lines).toContain('.idea');

package/dist/.test/assets/expo-migration/declarations/practices/git/__snapshots__/.declapract.integration.test.ts.snap

@@ -16,6 +16,7 @@ exports[`gitignore practices given: [case1] a repo whose .gitignore lacks both c
 .agent/.cache/
 .artifact
 .cache/
+.claude/scheduled_tasks*
 .env
 .idea
 .log/slowtest/
@@ -42,6 +43,7 @@ node_modules
 
 exports[`gitignore practices given: [case2] a repo whose use case has rhachet but NOT git when: [t1] the rhachet practice is applied then: the settled file matches snapshot: .gitignore -- rhachet only 1`] = `
 ".agent/.cache/
+.claude/scheduled_tasks*
 .idea
 dist
 node_modules