planr 1.4.0 → 1.5.0

package/presets/policies/max-quality.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "max-quality"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 4
-max_parallel_readers = 3
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 5
-max_wall_time_seconds = 7200
-max_tool_calls = 240
-review_reserve_percent = 40
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 1
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 2
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 5
-changed_lines_threshold = 200
-
-[execution]
-max_read_scope_entries = 12
-max_write_scope_entries = 6
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false

package/presets/policies/read-only-audit.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "read-only-audit"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 3
-max_parallel_readers = 3
-max_parallel_writers = 0
-max_depth = 1
-max_attempts = 2
-max_wall_time_seconds = 1800
-max_tool_calls = 80
-review_reserve_percent = 20
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 0
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 0
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 1
-changed_lines_threshold = 1
-
-[execution]
-max_read_scope_entries = 12
-max_write_scope_entries = 1
-
-[execution.roles.worker]
-tools = ["git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = []
-allow_overwrite = false

package/website/README.md

@@ -1,79 +0,0 @@
-# Planr Preset Catalog
-
-This directory is a dependency-free static website. Production catalog data is never authored by hand: `build-catalog.mjs` invokes Planr's canonical registry verifier, requires a trusted maintainer signature and safe policy/binding preview, binds status to the evaluation report, and writes `data/catalog.json`.
-
-The committed catalog is generated from the included `registry/manifest.toml`, canonical `registry/verification.json`, and separately pinned public maintainer trust store. Its private release and telemetry signing keys are intentionally not committed. If verification expires, is deprecated, or no longer earns recommendation, the generated catalog preserves the visible lifecycle state instead of inventing or retaining a recommendation.
-
-```sh
-node website/build-catalog.mjs \
-  --planr-bin ./target/release/planr \
-  --manifest website/registry/manifest.toml \
-  --content-root . \
-  --trust-store website/registry/trusted-maintainers.toml \
-  --entry balanced-codex=codex \
-  --at-unix 1783987200 \
-  --output website/data/catalog.json
-
-npm run site:test
-npm run site:serve
-```
-
-## Cloudflare test deployment
-
-Cloudflare infrastructure is owned by the repository-root `alchemy.run.ts`. The
-deployment publishes a clean `dist/website` containing only runtime assets; tests,
-fixtures, registry inputs, trust stores, and build tooling are never uploaded.
-
-Install the pinned development dependency and authenticate Cloudflare using an existing
-Alchemy/Cloudflare profile, Wrangler login, or a least-privilege API token. Set the
-account id from `.env.example` in the process environment when account inference would
-be ambiguous. Planr never runs login/configure commands and never changes user-level
-configuration. This static stack has no secret bindings, so it deliberately requires no
-`ALCHEMY_PASSWORD` or repository-local secret file.
-
-The published Planr CLI retains its declared Node.js 18+ compatibility. Repository
-dependency installation and the separate Cloudflare deployment toolchain require Node.js
-22+ because the pinned pnpm/Alchemy lockfile contains current tooling with that minimum.
-Select Node 22 or newer before invoking pnpm. On an unknown machine, this pnpm-free
-preflight is safe to run first even with Node 18 or 20:
-
-```sh
-node scripts/check-alchemy-runtime.mjs
-```
-
-The authoritative deployment launcher performs the same check before it starts pnpm or
-Alchemy, so older runtimes receive Planr's error instead of a Corepack or dependency crash.
-
-```sh
-pnpm install
-pnpm site:check
-node scripts/cloudflare-test.mjs deploy
-```
-
-After Node 22+ is active, `pnpm deploy:test` is an equivalent convenience alias.
-
-The committed `pnpm-workspace.yaml` is a repository-only dependency security policy:
-it allows the `esbuild` and `workerd` install scripts required by Alchemy and explicitly
-keeps the unused transitive `sharp` build disabled. It does not modify global pnpm state.
-
-`deploy:test` always targets the isolated Alchemy stage `test`. It creates a standalone
-Cloudflare Worker website and prints its Cloudflare-assigned `workers.dev` URL. The
-initial deployment deliberately configures no custom domain, DNS route, backend resource,
-or adoption of an existing Worker.
-
-Removing that test website is an explicit, separate operation:
-
-```sh
-node scripts/cloudflare-test.mjs destroy
-```
-
-After Node 22+ is active, `pnpm destroy:test` is an equivalent convenience alias.
-
-Never add private registry or telemetry signing keys to the deployment environment. The
-site deploy consumes only the already verified public `website/data/catalog.json`.
-
-Release operators must regenerate the evaluation report through `planr agents preset evaluate` with an independently pinned telemetry collector, update the manifest artifact digest, and sign the registry entry with the corresponding offline maintainer key before rebuilding this file. The public `registry/report.md` summarizes that evidence; the machine report and signature remain the verification source of truth.
-
-The report-wide `reproducible_evidence` flag summarizes the entire candidate matrix. Registry publication independently requires the selected candidate's complete reproducible evidence, passing thresholds, verified route receipts, and matching entry in `report.recommended`; candidates that fail those gates are not published as recommendations.
-
-The localhost-only `?fixture=recommended` query remains available for isolated UI regression checks. It is visibly labeled, ignored on non-local hosts, and never substitutes for live verification of the production `data/catalog.json` path.

package/website/_headers

@@ -1,7 +0,0 @@
-/*
-  Cache-Control: public, max-age=0, must-revalidate
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
-  Permissions-Policy: camera=(), geolocation=(), microphone=(), payment=(), usb=()
-  Referrer-Policy: no-referrer
-  X-Content-Type-Options: nosniff
-  X-Frame-Options: DENY

package/website/alchemy-runtime.test.mjs

@@ -1,21 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import {
-  assertAlchemyRuntime,
-  MINIMUM_ALCHEMY_NODE_MAJOR,
-} from "../scripts/check-alchemy-runtime.mjs";
-
-test("accepts the minimum supported Alchemy deployment runtime", () => {
-  assert.equal(assertAlchemyRuntime("22.0.0"), MINIMUM_ALCHEMY_NODE_MAJOR);
-});
-
-test("rejects Node runtimes supported by the Planr CLI but not by Alchemy", () => {
-  assert.throws(
-    () => assertAlchemyRuntime("18.16.1"),
-    /Cloudflare deployment requires Node\.js 22 or newer; current runtime is 18\.16\.1/,
-  );
-  assert.throws(
-    () => assertAlchemyRuntime("20.19.5"),
-    /Cloudflare deployment requires Node\.js 22 or newer/,
-  );
-});

package/website/app.mjs

@@ -1,216 +0,0 @@
-import { formatBasisPoints, previewCommand, statusLabel, visibleCompositions } from "./catalog-model.mjs";
-
-const nodes = {
-  selectA: document.querySelector("#composition-a"),
-  selectB: document.querySelector("#composition-b"),
-  cardA: document.querySelector("#comparison-a"),
-  cardB: document.querySelector("#comparison-b"),
-  comparison: document.querySelector("#comparison"),
-  empty: document.querySelector("#empty-state"),
-  emptyMessage: document.querySelector("#empty-message"),
-  filter: document.querySelector("#recommended-only"),
-  published: document.querySelector("#stat-published"),
-  recommended: document.querySelector("#stat-recommended"),
-  trust: document.querySelector("#stat-trust"),
-  generated: document.querySelector("#generated-at"),
-  copyStatus: document.querySelector("#copy-status"),
-  fixtureBanner: document.querySelector("#fixture-banner"),
-};
-
-function catalogLocation() {
-  const local = ["127.0.0.1", "localhost"].includes(location.hostname);
-  const fixture = new URLSearchParams(location.search).get("fixture");
-  if (local && fixture === "recommended") {
-    nodes.fixtureBanner.hidden = false;
-    return "./test-fixtures/recommended.json";
-  }
-  return "./data/catalog.json";
-}
-
-function text(parent, element, value, className) {
-  const node = document.createElement(element);
-  if (className) node.className = className;
-  node.textContent = value;
-  parent.append(node);
-  return node;
-}
-
-function formatDate(unix) {
-  if (!Number.isFinite(unix)) return "Not published";
-  return new Intl.DateTimeFormat("en", { dateStyle: "medium", timeZone: "UTC" }).format(new Date(unix * 1000));
-}
-
-function formatNumber(value) {
-  return Number.isFinite(Number(value)) ? new Intl.NumberFormat("en").format(Number(value)) : "—";
-}
-
-function optionLabel(entry) {
-  return `${entry.policy.id} + ${entry.binding.id} · ${statusLabel(entry.status)}`;
-}
-
-function fillSelect(select, entries, preferredIndex) {
-  const previous = select.value;
-  select.replaceChildren();
-  for (const entry of entries) {
-    const option = document.createElement("option");
-    option.value = entry.id;
-    option.textContent = optionLabel(entry);
-    select.append(option);
-  }
-  select.value = entries.some((entry) => entry.id === previous) ? previous : entries[Math.min(preferredIndex, entries.length - 1)]?.id ?? "";
-}
-
-function metric(parent, label, value) {
-  const wrapper = document.createElement("div");
-  wrapper.className = "metric";
-  text(wrapper, "span", label);
-  text(wrapper, "strong", value);
-  parent.append(wrapper);
-}
-
-function section(parent, title) {
-  const wrapper = document.createElement("section");
-  wrapper.className = "card-section";
-  text(wrapper, "h4", title);
-  parent.append(wrapper);
-  return wrapper;
-}
-
-function definitionRow(list, termValue, detailValue) {
-  const row = document.createElement("div");
-  text(row, "dt", termValue);
-  text(row, "dd", detailValue);
-  list.append(row);
-}
-
-function renderCard(card, entry) {
-  card.replaceChildren();
-  if (!entry) return;
-  card.dataset.compositionId = entry.id;
-
-  const top = document.createElement("div");
-  top.className = "card-top";
-  const title = document.createElement("div");
-  text(title, "span", `${entry.binding.id} · ${entry.binding.host}`, "binding-name");
-  text(title, "h3", entry.policy.id);
-  const badge = text(top, "span", statusLabel(entry.status), `badge status-${entry.status}`);
-  badge.setAttribute("aria-label", `Status: ${statusLabel(entry.status)}`);
-  top.prepend(title);
-  card.append(top);
-  text(card, "p", `Policy ${entry.policy.version} · Binding ${entry.binding.version} · Entry ${entry.entryVersion}`, "meta-line");
-
-  const metrics = document.createElement("div");
-  metrics.className = "metric-grid";
-  metric(metrics, "Active agents", formatNumber(entry.policy.usage.max_active_agents));
-  metric(metrics, "Parallel writers", formatNumber(entry.policy.usage.max_parallel_writers));
-  metric(metrics, "Max depth", formatNumber(entry.policy.usage.max_depth));
-  metric(metrics, "Metering", entry.policy.usage.metering ?? "unavailable");
-  card.append(metrics);
-
-  const compatibility = section(card, "Compatibility");
-  const compatibilityList = document.createElement("dl");
-  compatibilityList.className = "compatibility-list";
-  definitionRow(
-    compatibilityList,
-    "Supported hosts",
-    entry.compatibility.hosts?.length ? entry.compatibility.hosts.join(", ") : "No compatible host declared",
-  );
-  definitionRow(
-    compatibilityList,
-    "Planr versions",
-    `${entry.compatibility.minPlanrVersion ?? "Any"} through ${entry.compatibility.maxPlanrVersion ?? "latest"}`,
-  );
-  definitionRow(
-    compatibilityList,
-    "Lifecycle",
-    entry.replacement
-      ? `${statusLabel(entry.status)}; replace with ${entry.replacement}`
-      : statusLabel(entry.status),
-  );
-  compatibility.append(compatibilityList);
-
-  const enforcement = section(card, "Enforcement matrix");
-  const list = document.createElement("dl");
-  list.className = "enforcement-list";
-  for (const item of entry.enforcement) {
-    const row = document.createElement("div");
-    const term = text(row, "dt", item.dimension);
-    text(term, "span", item.state.replaceAll("_", " "), "state");
-    text(row, "dd", item.detail);
-    list.append(row);
-  }
-  enforcement.append(list);
-
-  const evidence = section(card, "Evaluation & provenance");
-  text(evidence, "p", `${entry.evaluation.suiteId} ${entry.evaluation.suiteVersion} · evaluated ${formatDate(entry.evaluation.evaluatedAtUnix)} · review ${formatDate(entry.evaluation.reviewAtUnix)}`, "meta-line");
-  text(evidence, "p", `Quality ${formatBasisPoints(entry.evaluation.metrics?.average_quality_score_bps)} · runs ${formatNumber(entry.evaluation.metrics?.runs)} · oracle passes ${formatNumber(entry.evaluation.metrics?.oracle_passes)}`, "meta-line");
-  text(evidence, "p", `Manifest ${entry.registry.manifestSha256}`, "hash");
-  text(evidence, "p", `Signer ${entry.registry.signer} · signature verified · trusted maintainer`, "meta-line");
-
-  const commandSection = section(card, "Preview safely");
-  const commandBlock = document.createElement("div");
-  commandBlock.className = "command-block";
-  const command = previewCommand(entry.policy.id, entry.binding.id);
-  text(commandBlock, "code", command);
-  const button = text(commandBlock, "button", "Copy preview command", "copy-button");
-  button.type = "button";
-  button.dataset.command = command;
-  commandSection.append(commandBlock);
-}
-
-function wireCopy() {
-  document.addEventListener("click", async (event) => {
-    const button = event.target.closest("button[data-command]");
-    if (!button) return;
-    try {
-      await navigator.clipboard.writeText(button.dataset.command);
-      button.textContent = "Copied";
-      nodes.copyStatus.textContent = `Copied preview command for ${button.closest(".preset-card").dataset.compositionId}`;
-      setTimeout(() => { button.textContent = "Copy preview command"; }, 1400);
-    } catch {
-      nodes.copyStatus.textContent = "Clipboard access was unavailable; select the command text to copy it manually.";
-    }
-  });
-}
-
-function render(catalog) {
-  const entries = visibleCompositions(catalog, nodes.filter.checked);
-  nodes.published.textContent = formatNumber(catalog.compositions.length);
-  nodes.recommended.textContent = formatNumber(catalog.compositions.filter((entry) => entry.recommended).length);
-  nodes.trust.textContent = catalog.source?.state === "verified_registry_projection" ? "Signed registry" : "Publication gated";
-  nodes.generated.textContent = Number.isFinite(catalog.generatedAtUnix)
-    ? `Projection generated ${formatDate(catalog.generatedAtUnix)} · ${catalog.source.trust}`
-    : "No signed registry projection published.";
-  fillSelect(nodes.selectA, entries, 0);
-  fillSelect(nodes.selectB, entries, 1);
-  const empty = entries.length === 0;
-  nodes.empty.hidden = !empty;
-  nodes.comparison.hidden = empty;
-  if (empty) {
-    nodes.emptyMessage.textContent = catalog.source?.message ?? (nodes.filter.checked ? "No published composition currently carries an evaluation-backed recommendation." : "No trusted compositions are published.");
-    return;
-  }
-  const find = (id) => entries.find((entry) => entry.id === id);
-  renderCard(nodes.cardA, find(nodes.selectA.value));
-  renderCard(nodes.cardB, find(nodes.selectB.value));
-}
-
-async function start() {
-  wireCopy();
-  const response = await fetch(catalogLocation(), { cache: "no-store" });
-  if (!response.ok) throw new Error(`catalog request failed with HTTP ${response.status}`);
-  const catalog = await response.json();
-  if (catalog.schemaVersion !== 1 || !Array.isArray(catalog.compositions)) throw new Error("unsupported catalog data");
-  const update = () => render(catalog);
-  nodes.filter.addEventListener("change", update);
-  nodes.selectA.addEventListener("change", update);
-  nodes.selectB.addEventListener("change", update);
-  update();
-}
-
-start().catch((error) => {
-  nodes.empty.hidden = false;
-  nodes.comparison.hidden = true;
-  nodes.emptyMessage.textContent = `Catalog unavailable: ${error.message}`;
-  nodes.trust.textContent = "Unavailable";
-});

package/website/build-catalog.mjs

@@ -1,135 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from "node:child_process";
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { mkdir } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { dirname, isAbsolute, join, resolve } from "node:path";
-import { projectComposition, safeIdentifier } from "./catalog-model.mjs";
-
-function usage(message) {
-  if (message) console.error(message);
-  console.error(
-    "usage: node website/build-catalog.mjs --manifest <registry.toml> --content-root <dir> --trust-store <trusted.toml> --entry <id=host> [--entry <id=host> ...] --at-unix <unix> --output <catalog.json> [--planr-bin <planr>]",
-  );
-  process.exit(2);
-}
-
-function parseArgs(argv) {
-  const values = { entries: [], planrBin: "planr" };
-  for (let index = 0; index < argv.length; index += 1) {
-    const flag = argv[index];
-    const value = argv[index + 1];
-    if (!value) usage(`missing value for ${flag}`);
-    index += 1;
-    if (flag === "--entry") values.entries.push(value);
-    else if (flag === "--manifest") values.manifest = value;
-    else if (flag === "--content-root") values.contentRoot = value;
-    else if (flag === "--trust-store") values.trustStore = value;
-    else if (flag === "--at-unix") values.atUnix = Number(value);
-    else if (flag === "--output") values.output = value;
-    else if (flag === "--planr-bin") values.planrBin = value;
-    else usage(`unknown argument ${flag}`);
-  }
-  if (
-    !values.manifest ||
-    !values.contentRoot ||
-    !values.trustStore ||
-    !values.output ||
-    !Number.isSafeInteger(values.atUnix) ||
-    values.entries.length === 0
-  ) {
-    usage("all required arguments must be provided");
-  }
-  return values;
-}
-
-function runJson(binary, args, cwd) {
-  const result = spawnSync(binary, args, { cwd, encoding: "utf8" });
-  if (result.error) throw result.error;
-  if (result.status !== 0) {
-    throw new Error(result.stderr.trim() || result.stdout.trim() || `${binary} exited ${result.status}`);
-  }
-  try {
-    return JSON.parse(result.stdout);
-  } catch (error) {
-    throw new Error(`${binary} returned invalid JSON: ${error.message}`);
-  }
-}
-
-function entrySpec(raw) {
-  const separator = raw.lastIndexOf("=");
-  if (separator < 1 || separator === raw.length - 1) usage(`invalid --entry ${raw}; expected id=host`);
-  return { id: raw.slice(0, separator), host: raw.slice(separator + 1) };
-}
-
-function artifactPath(verified, kind, contentRoot) {
-  const matches = verified.entry.artifacts.filter((artifact) => artifact.kind === kind);
-  if (matches.length !== 1) throw new Error(`entry ${verified.entry.id} must contain one ${kind}`);
-  return resolve(contentRoot, matches[0].path);
-}
-
-const options = parseArgs(process.argv.slice(2));
-const invocationRoot = process.cwd();
-const planrBin =
-  isAbsolute(options.planrBin) || !options.planrBin.includes("/")
-    ? options.planrBin
-    : resolve(invocationRoot, options.planrBin);
-const manifest = resolve(invocationRoot, options.manifest);
-const contentRoot = resolve(invocationRoot, options.contentRoot);
-const trustStore = resolve(invocationRoot, options.trustStore);
-const scratch = mkdtempSync(join(tmpdir(), "planr-preset-site-"));
-
-try {
-  const compositions = options.entries.map((raw) => {
-    const { id, host } = entrySpec(raw);
-    const verified = runJson(
-      planrBin,
-      [
-        "--json",
-        "agents",
-        "preset",
-        "registry",
-        "verify",
-        manifest,
-        "--entry",
-        id,
-        "--content-root",
-        contentRoot,
-        "--trust-store",
-        trustStore,
-        "--at-unix",
-        String(options.atUnix),
-        "--host",
-        host,
-      ],
-      scratch,
-    );
-    const verificationPath = artifactPath(verified, "verification", contentRoot);
-    const policyId = safeIdentifier(verified.entry.evaluation?.policy_id, "policy id");
-    const bindingId = safeIdentifier(verified.entry.evaluation?.binding_id, "binding id");
-    const preview = runJson(
-      planrBin,
-      ["--json", "agents", "preset", "apply", policyId, "--binding", bindingId],
-      scratch,
-    );
-    const verificationEnvelope = JSON.parse(readFileSync(verificationPath, "utf8"));
-    return projectComposition({ verified, preview, verificationEnvelope });
-  });
-  const catalog = {
-    schemaVersion: 1,
-    generatedAtUnix: options.atUnix,
-    source: {
-      state: "verified_registry_projection",
-      manifest: options.manifest,
-      entryCount: compositions.length,
-      trust: "planr_registry_v1",
-    },
-    compositions,
-  };
-  const output = resolve(invocationRoot, options.output);
-  await mkdir(dirname(output), { recursive: true });
-  writeFileSync(output, `${JSON.stringify(catalog, null, 2)}\n`, { mode: 0o644 });
-  console.log(`wrote ${compositions.length} verified composition(s) to ${output}`);
-} finally {
-  rmSync(scratch, { recursive: true, force: true });
-}

package/website/build-site.test.mjs

@@ -1,69 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdtemp, mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import test from "node:test";
-import {
-  buildSite,
-  PUBLIC_SITE_FILES,
-  verifyPublication,
-} from "../scripts/build-site.mjs";
-
-async function fixture() {
-  const root = await mkdtemp(join(tmpdir(), "planr-site-build-"));
-  const sourceRoot = join(root, "website");
-  const outputRoot = join(root, "dist", "website");
-  for (const relativePath of PUBLIC_SITE_FILES) {
-    const path = join(sourceRoot, relativePath);
-    await mkdir(join(path, ".."), { recursive: true });
-    await writeFile(path, `public:${relativePath}\n`);
-  }
-  return { root, sourceRoot, outputRoot };
-}
-
-test("builds only the public runtime allowlist and preserves nested catalog bytes", async (t) => {
-  const paths = await fixture();
-  t.after(() => rm(paths.root, { recursive: true, force: true }));
-  await writeFile(join(paths.sourceRoot, "build-catalog.mjs"), "must not be public\n");
-  await mkdir(join(paths.sourceRoot, "registry"), { recursive: true });
-  await writeFile(join(paths.sourceRoot, "registry", "trusted-maintainers.toml"), "not public\n");
-
-  const files = await buildSite(paths);
-
-  assert.deepEqual(files, [...PUBLIC_SITE_FILES].sort());
-  assert.equal(
-    await readFile(join(paths.outputRoot, "data", "catalog.json"), "utf8"),
-    "public:data/catalog.json\n",
-  );
-});
-
-test("fails before replacing output when a required source artifact is missing", async (t) => {
-  const paths = await fixture();
-  t.after(() => rm(paths.root, { recursive: true, force: true }));
-  await mkdir(paths.outputRoot, { recursive: true });
-  await writeFile(join(paths.outputRoot, "sentinel"), "keep on validation failure\n");
-  await rm(join(paths.sourceRoot, "styles.css"));
-
-  await assert.rejects(() => buildSite(paths), /missing public website artifact: styles\.css/);
-  assert.equal(await readFile(join(paths.outputRoot, "sentinel"), "utf8"), "keep on validation failure\n");
-});
-
-test("publication verification rejects unexpected nested output", async (t) => {
-  const paths = await fixture();
-  t.after(() => rm(paths.root, { recursive: true, force: true }));
-  await buildSite(paths);
-  await mkdir(join(paths.outputRoot, "registry"), { recursive: true });
-  await writeFile(join(paths.outputRoot, "registry", "manifest.toml"), "unexpected\n");
-
-  await assert.rejects(() => verifyPublication(paths.outputRoot), /publish output mismatch/);
-});
-
-test("refuses an output directory inside the source tree", async (t) => {
-  const paths = await fixture();
-  t.after(() => rm(paths.root, { recursive: true, force: true }));
-
-  await assert.rejects(
-    () => buildSite({ sourceRoot: paths.sourceRoot, outputRoot: join(paths.sourceRoot, "dist") }),
-    /must not be inside/,
-  );
-});