project-tiny-context-harness 0.8.0 → 0.8.2

package/assets/skills/long-task-workflow/references/source-authoring.md

@@ -11,9 +11,9 @@ Do not create a Source Plan schema, CLI, Preflight, Compile, Receipt, cache, aut
 ## Input inventory
 
 1. Assign every proposal, selected design resource, screenshot, document, diagram, table and other attachment a stable input ID.
-2. Inspect all material pages/frames/screens/tables/visible states; never silently sample a multi-part artifact.
-3. Classify each input as user instruction, product requirement, technical constraint, existing proposal, selected target, repository/Context evidence, constraint, inspiration or background.
-4. For visual resources, preserve selection basis, classification (`exact-target`, `constraint` or `inspiration`), stable resource/surface/control/state/target keys, declared platform/viewport/mode/state/content applicability, source profile/canonical entry/dependency set, provider/project/run/entry provenance and immutable digest/snapshot, plus typed locators. A mutable link, metadata-only response, partial file set or prose locator is incomplete. Unselected candidates authorize no fidelity.
+2. Inspect all pages/frames/screens/tables/visible states; never silently sample a multi-part artifact. Every non-empty line in a declared Markdown Source file must ultimately belong to exactly one Material Source Item, one keyed and reasoned non-authoritative `ty-source-background:start/end` block, or the one validated `design-resource-handoff-v1` formal block.
+3. Classify each input as user instruction, product requirement, technical constraint, existing proposal, selected target, repository/Context evidence, constraint, inspiration or background. Background is a closed grammar: `markdown-structure` contains only text-free anchors or horizontal rules, and `provenance` contains only `ty-source-provenance input=<key> mode=<direct|derived|delegated|evidence-backed> [source=<key>] [sha256=<64-lowercase-hex>]` comments; non-direct modes require `source`. Text-bearing headings, free-form provenance and explanatory prose are material or unclassified even when intended as non-authoritative; background must never hide a qualifier, requirement, acceptance fact, architecture meaning, design meaning or other delivery authority.
+4. For visual resources, preserve selection basis, classification (`exact-target`, `constraint` or `inspiration`), stable resource/surface/control/state/target keys, declared platform/viewport/mode/state/content applicability, source profile/canonical entry/dependency set, provider/project/run/entry provenance and immutable digest/snapshot, plus typed locators. A mutable link, metadata-only response, partial file set or prose locator is incomplete. Unselected candidates authorize no fidelity.
 5. Record incorporated meaning and every unreadable, conflicting or intentionally unused part. Higher authority and user-stated precedence win; unresolved conflicts remain decisions.
 
 ## Preference and research gate
@@ -68,13 +68,15 @@ Use only applicable semantic types:
 
 ## UI and control completeness
 
-For each in-scope surface, record purpose, entry/exit/navigation, regions/overlays and included Control keys. For every material interactive control, independently preserve applicable:
+For each in-scope surface, record purpose, entry/exit/navigation, regions/overlays and included Control keys. For every real material interactive Control, close every canonical field independently:
 
-`surface`, `region`, `control type`, `label/content`, `location`, `user task`, `visibility`, `availability`, `trigger`, `input`, `validation`, `default`, `interaction`, `navigation/result`, `loading`, `empty`, `success`, `failure`, `recovery`, `permission`, `feedback` and `accessibility`.
+`surface`, `region`, `location`, `control type`, `label/content`, `user task`, `visibility`, `availability`, `trigger`, `input`, `validation`, `default`, `interaction`, `navigation/result`, `loading`, `empty`, `success`, `failure`, `recovery`, `permission`, `feedback` and `accessibility`.
+
+For each field record concrete `specified` meaning, an explicit justified `not_applicable` statement, or blocking `unresolved`; omission is not non-applicability. Also preserve every material cross-Control and system relation—including shared state, ordering/dependency, mutual exclusion, navigation, permission, recovery, validation and feedback chains—and explicitly close the Outcome as `not_applicable` only when no such relation exists. Each specified or not-applicable fact, including relation closure, must name its actual target, atomic condition/input/state dimensions and Given/When journey applicability.
 
 Do not invent controls for a non-interface delivery. A coarse frame or configured design system does not supply unshown states. Selected design resources and product/technical Source remain parallel: visuals cannot invent business/data/permission/algorithmic rules.
 
-For every selected exact/constraint target, preserve the declared platform/viewport/mode/state/content conditions and identify which surface and Control keys it governs. Separately record any design-resource acceptance blocker supplied by the Source. File identity, hashes, provider/export success, registry membership and resource counts are integrity facts only; they do not state that a production owner, real-user journey or rendered interaction conforms.
+For every selected exact/constraint target, preserve the declared platform/viewport/mode/state/content conditions and identify which surface and Control keys it governs. Separately record any design-resource acceptance blocker supplied by the Source, including its exact Source items, verification methods and non-empty runtime-observation `required_capabilities`. Do not weaken a physical-device, sensor, camera, orientation, haptic, assistive-technology, pixel-density, safe-area or other target-local need into a generic browser/runtime label merely because the proxy is available. File identity, hashes, provider/export success, registry membership and resource counts are integrity facts only; they do not state that a production owner, real-user journey or rendered interaction conforms.
 
 ## Acceptance and risk
 
@@ -87,15 +89,16 @@ Use the Runtime's exact risk Fact names when marking risk. Data migration is `da
 Before Preflight/Compile confirm:
 
 1. Every material original statement and qualifier is preserved.
-2. Every supplied input is incorporated or has an explicit unreadable/unused/conflict disposition.
+2. Every supplied input is incorporated or has an explicit unreadable/unused/conflict disposition, and every non-empty Source line is owned by a Material Item, closed-grammar structure/provenance background block or validated formal block.
 3. Distinct requirements and independently decidable Outcomes were not collapsed.
-4. Every material UI surface/control/state is explicit or marked not applicable/unresolved.
-5. Every REQ and material CTRL state has acceptance, external confirmation, decision or explicit exception.
+4. Every real Control has all 22 canonical fields closed as specified, justified not applicable or unresolved; every material cross-Control/shared-state/navigation/permission/recovery relation is specified or the Outcome explicitly declares that no such relation exists.
+5. Every REQ, specified/not-applicable CTRL field and Control relation has exact applicability plus acceptance, external confirmation, decision or explicit exception; unresolved coverage blocks.
 6. Derived/delegated/evidence-backed items have traceable basis and no hidden product expansion.
 7. Non-goals, forbidden shortcuts, risks and recovery are concrete.
 8. No unsupported number, threshold, metric or external claim appears.
 9. Selected design resources retain stable identity and exact declared coverage; candidates remain non-authoritative.
-10. Every material UI surface/control can be mapped to a production target/owner, real-user entry journey and acceptance route, while every declared design blocker has an explicit machine or target-blocking external-confirmation disposition. Removing one from scope requires an explicit Source revision; Contract prose cannot waive it.
-11. The Source is self-contained enough to own every mapped Draft semantic and names every still-required external artifact.
+10. Every material UI surface/control can be mapped to a production target/owner, real-user entry journey and acceptance route, while every declared design blocker has an explicit machine or target-blocking external-confirmation disposition. Removing one from scope requires an explicit Source revision; Contract prose cannot waive it.
+11. The Source is self-contained enough to own every mapped Draft semantic and names every still-required external artifact.
+12. At least one marked `technical_obligation` carries `aspect=architecture`, preserves the selected owner/dependency/debt conclusion, and maps to an independently falsifiable architecture obligation rather than only a Result Claim.
 
-Complete non-rendering `ty-source-item:start/end` markers in the real Markdown Source without rewriting direct text, and finish the corresponding Contract mapping in the same loop. Neither markers nor this audit delay opening the Draft; all are fail-closed convergence requirements before Preflight/Compile.
+Complete non-rendering `ty-source-item:start/end` markers in the real Markdown Source without rewriting direct text, wrap only recognized Markdown structure or structured provenance in uniquely keyed and reasoned `ty-source-background:start/end` blocks, retain at most one schema-valid `design-resource-handoff-v1` formal block, and finish the corresponding Contract mapping in the same loop. Unclassified text, arbitrary prose inside background, a background block used to hide material meaning, unresolved Control coverage or missing applicability blocks Preflight/Compile. Neither markers nor this audit delay opening the Draft.

package/assets/skills/normal-long-task/SKILL.md

@@ -1,12 +1,12 @@
----
-name: normal-long-task
-description: Retired compatibility pointer for users who explicitly invoke /normal-long-task. Direct them to /long-task-workflow and do not create legacy checklist, prompt, audit, matrix, verdict, or plan artifacts.
----
-
-# Retired: Normal Long Task
-
-`/normal-long-task` no longer defines a second long-task artifact workflow.
-
-Use `/long-task-workflow` for one Canonical Delivery Contract, the current platform-native Goal, rolling implementation in the current workspace, targeted repair verification, a same-snapshot Final Gate and Stop freshness.
-
-Do not create a preserved-source/checklist pair, target-mode prompt, Local Audit, matrix, verdict or second plan from this compatibility invocation.
+---
+name: normal-long-task
+description: Retired compatibility pointer for users who explicitly invoke /normal-long-task. Direct them to /long-task-workflow and do not create legacy checklist, prompt, audit, matrix, verdict, or plan artifacts.
+---
+
+# Retired: Normal Long Task
+
+`/normal-long-task` no longer defines a second long-task artifact workflow.
+
+Use `/long-task-workflow` for one Canonical Delivery Contract, the current platform-native Goal, rolling implementation in the current workspace, targeted repair verification, a same-snapshot Final Gate and Stop freshness.
+
+Do not create a preserved-source/checklist pair, target-mode prompt, Local Audit, matrix, verdict or second plan from this compatibility invocation.

package/dist/commands/design-resource.js

@@ -26,7 +26,7 @@ export async function designResource(args) {
     console.log(`Acceptance blockers: ${result.counts.acceptance_blockers}`);
 }
 function help() {
-    console.log(`ty-context design-resource commands:
-  preflight <handoff.md> [--json]
+    console.log(`ty-context design-resource commands:
+  preflight <handoff.md> [--json]
                        Validate one selected implementation handoff`);
 }

package/dist/commands/index.js

@@ -36,32 +36,32 @@ export const commands = {
     package: packageSource,
 };
 export function help() {
-    console.log(`ty-context commands:
-  init [--adopt] [--harness-folder <path>]
-                       Initialize/adopt a project; without --harness-folder, choose target agent first
-  enable long-task     Install Long-Task Skill, Source Plan pointer, Stop Hook and templates
-  disable long-task    Remove only package-owned long-task profile assets
-  sync                 Refresh managed assets; does not run migrations
-  upgrade [--check] [--json]
-                       Run safe migrations, sync managed assets and doctor
-  doctor               Diagnose project configuration and drift
-  check-modularity --touched|--file <path>|--base <ref> [--limit 300] [--fail-on-warning]
-                       Warn when selected handwritten source files exceed a line-count limit
-  export-context --full|--code|--all|--source-pack|--code-index|--task-context
-                       Export temporary Context, code snapshot or bounded Source Pack artifacts
-  validate <gate>      Run a Harness validation gate
-  validate-context     Validate Minimal Context fact-source recoverability
-  validate-code-modularity
-                       Enforce touched handwritten source file modularity
-  validate-harness     Run validate-context and validate-code-modularity
-  design-resource <subcommand>
-                       Validate a selected design-resource implementation handoff
-  long-task <subcommand>
-                       Manage one Canonical Delivery Contract in the current workspace
-  delivery-set <subcommand>
-                       Retired; use one complete Contract with semantic Outcomes
-  composite-long-task Retired command; use ty-context long-task
-  composite-campaign  Retired command; use ty-context long-task
+    console.log(`ty-context commands:
+  init [--adopt] [--harness-folder <path>]
+                       Initialize/adopt a project; without --harness-folder, choose target agent first
+  enable long-task     Install Long-Task Skill, Source Plan pointer, Stop Hook and templates
+  disable long-task    Remove only package-owned long-task profile assets
+  sync                 Refresh managed assets; does not run migrations
+  upgrade [--check] [--json]
+                       Run safe migrations, sync managed assets and doctor
+  doctor               Diagnose project configuration and drift
+  check-modularity --touched|--file <path>|--base <ref> [--limit 300] [--fail-on-warning]
+                       Warn when selected handwritten source files exceed a line-count limit
+  export-context --full|--code|--all|--source-pack|--code-index|--task-context
+                       Export temporary Context, code snapshot or bounded Source Pack artifacts
+  validate <gate>      Run a Harness validation gate
+  validate-context     Validate Minimal Context fact-source recoverability
+  validate-code-modularity
+                       Enforce touched handwritten source file modularity
+  validate-harness     Run validate-context and validate-code-modularity
+  design-resource <subcommand>
+                       Validate a selected design-resource implementation handoff
+  long-task <subcommand>
+                       Manage one Canonical Delivery Contract in the current workspace
+  delivery-set <subcommand>
+                       Retired; use one complete Contract with semantic Outcomes
+  composite-long-task Retired command; use ty-context long-task
+  composite-campaign  Retired command; use ty-context long-task
   package <subcommand> Maintain package canonical source`);
 }
 async function withLongTaskProfile(args, handler) {

package/dist/commands/long-task-authoring.js

@@ -39,8 +39,10 @@ task:
       role: product
       runtime_family: process
       root_entrypoint: tests/replace-oracle.mjs
+      capabilities: [process-runtime, cold-start, production-root]
   source_paths: [plans/replace-me.md]
   context_refs: [project_context/areas/replace-me.md]
+  context_snapshot_mode: full
 source_claims:
   - key: replace-requirement
     source_ref: plans/replace-me.md#replace-requirement
@@ -48,6 +50,12 @@ source_claims:
     disposition:
       type: claim
       refs: [replace-outcome.requirement.replace-requirement]
+  - key: replace-architecture
+    source_ref: plans/replace-me.md#replace-architecture
+    statement: Preserve the declared owner, dependency direction, verifier boundary and architecture conformance.
+    disposition:
+      type: claim
+      refs: [replace-outcome.obligation.architecture]
 stages:
   - key: delivery
     title: Delivery
@@ -55,13 +63,22 @@ stages:
     gate_outcome: replace-outcome
 risk:
   facts: {}
-global: {}
+global:
+  applicability: []
 outcomes:
   - key: replace-outcome
     title: Replace outcome
     stage: delivery
+    applicability:
+      - key: root-success
+        target_ref: replace-runtime
+        journey_role: success
+        dimensions: [{key: delivery-state, value: ready}]
+        given_refs: [source-ready]
+        when_refs: [inspect-result]
     product:
       observable_result: Describe what a user or system can observe.
+      result_applicability_refs: [root-success]
       success_path_required: true
       degradation_path_required: false
       owner:
@@ -72,7 +89,17 @@ outcomes:
         - key: replace-requirement
           statement: Preserve one atomic source requirement.
           required_proof_surfaces: [runtime_behavior]
+          applicability_refs: [root-success]
+      control_relation_closure:
+        state: not_applicable
+        statement: This Outcome declares no user-visible Controls.
+        applicability_refs: [root-success]
     technical:
+      obligations:
+        - key: architecture
+          statement: Preserve the declared owner, dependency direction, verifier boundary and architecture conformance.
+          required_proof_surfaces: [runtime_behavior]
+          applicability_refs: [root-success]
       expected_change_paths: ["src/**"]
       bindings:
         - key: replace-carrier
@@ -97,21 +124,68 @@ outcomes:
           input_paths: [src/replace-me.ts]
           expected_output_paths: [src/replace-me.ts]
           positive_assertions:
-            - key: replace-success
-              criterion: The declared outcome and requirement are observable.
-              claims: [result, requirement.replace-requirement]
+            - key: replace-result
+              criterion: The declared outcome is observable.
+              claims: [result]
+              applicability_ref: root-success
               observation: result
               evidence_capabilities: [state_delta, target_runtime]
               operator: equals
               expected: true
+            - key: replace-requirement
+              criterion: The atomic Source requirement is observable.
+              claims: [requirement.replace-requirement]
+              applicability_ref: root-success
+              observation: requirement_result
+              evidence_capabilities: [state_delta, target_runtime]
+              operator: equals
+              expected: true
+            - key: replace-architecture
+              criterion: The declared architecture obligation remains conformant.
+              claims: [obligation.architecture]
+              applicability_ref: root-success
+              observation: architecture_result
+              evidence_capabilities: [state_delta, target_runtime]
+              operator: equals
+              expected: true
+            - key: replace-liveness
+              criterion: The declared target remains live under semantic mutation.
+              claims: []
+              observation: target_live
+              evidence_capabilities: [target_runtime]
+              operator: equals
+              expected: true
+          negative_assertions:
+            - key: replace-relations-na
+              criterion: Cross-Control relations remain inapplicable when no Controls are declared.
+              claims: [control_relation_closure]
+              applicability_ref: root-success
+              observation: relations_applicable
+              evidence_capabilities: [state_delta, target_runtime]
+              operator: equals
+              expected: false
       counterfactual_controls:
-        - key: remove-replace-carrier
+        - key: replace-semantic-carrier
+          binding_key: replace-carrier
+          claims: [result, requirement.replace-requirement, obligation.architecture]
+          check_key: replace-check
+          mutation:
+            type: replace_text
+            path: src/replace-me.ts
+            match: IMPLEMENTED_STATE
+            replacement: SEMANTIC_FAILURE_STATE
+          expected_assertion_failures: [replace-result, replace-requirement, replace-architecture]
+          preserved_assertions: [replace-liveness]
+        - key: replace-relation-applicability
           binding_key: replace-carrier
-          claims: [result, requirement.replace-requirement]
+          claims: [control_relation_closure]
           check_key: replace-check
           mutation:
-            type: remove_paths
-            paths: [src/replace-me.ts]
-          expected_assertion_failures: [replace-success]
+            type: replace_text
+            path: src/replace-me.ts
+            match: NO_CROSS_CONTROL_RELATIONS
+            replacement: CROSS_CONTROL_RELATIONS_APPLY
+          expected_assertion_failures: [replace-relations-na]
+          preserved_assertions: [replace-liveness]
 `;
 }

package/dist/commands/long-task.js

@@ -124,20 +124,20 @@ async function finalGate(workdir, args) {
         process.exitCode = 1;
 }
 function help() {
-    console.log(`ty-context long-task commands:
-  init <workdir>
-  preflight <workdir>
-  compile <workdir>
-  compile <workdir> --revise
-  diagnose-revision <workdir> [--outcome <key>] [--check <key>]
-  approve-authority-revision <workdir> --revision <sha>
-  explain <workdir>
-  verify <workdir> [--outcome <key>] [--check <key>] [--explain]
-  status <workdir>
-  resume <workdir>
-  doctor <workdir>
-  final-gate <workdir>
-  stop-check <workdir> [--message <text>]
-  close <workdir>
+    console.log(`ty-context long-task commands:
+  init <workdir>
+  preflight <workdir>
+  compile <workdir>
+  compile <workdir> --revise
+  diagnose-revision <workdir> [--outcome <key>] [--check <key>]
+  approve-authority-revision <workdir> --revision <sha>
+  explain <workdir>
+  verify <workdir> [--outcome <key>] [--check <key>] [--explain]
+  status <workdir>
+  resume <workdir>
+  doctor <workdir>
+  final-gate <workdir>
+  stop-check <workdir> [--message <text>]
+  close <workdir>
   abandon <workdir> [--force-corrupt-state]`);
 }

package/dist/lib/context-graph-snapshot.js

@@ -15,6 +15,13 @@ export async function captureContextGraphSnapshot(repositoryRoot, contextRefs, m
     const explicitlySelected = new Set();
     if (mode === "full") {
         allFiles.forEach((file) => selected.add(file));
+        for (const contextRef of contextRefs) {
+            const normalized = normalizeRepoPath(contextRef);
+            if (!available.has(normalized)) {
+                throw new Error(`context_ref_invalid:${contextRef}`);
+            }
+            explicitlySelected.add(normalized);
+        }
     }
     else {
         for (const required of [

package/dist/lib/design-md.js

@@ -124,8 +124,9 @@ function designMdTemplate() {
         "",
         "- Authored exact-value token source: not selected.",
         "- Generation direction and generated token targets: not selected.",
-        "- Durable design references: none selected.",
-        "- For each selected reference, record a stable id, surface/route/component, `exact-target` / `constraint` / `inspiration` interpretation, viewport/theme/state coverage, a readable immutable adopted path/URI plus digest, and the editable upstream owner/locator/update route (or an explicit manual/external-update boundary).",
+        "- Canonical project/system/component-family target records: none selected.",
+        "- Every adopted target has exactly one canonical record. Record project/system/component-family targets here; for a screen-specific target record only its stable id plus owning Screen Contract anchor.",
+        "- A canonical record owns interpretation, selection basis, declared condition coverage, a readable immutable adopted path/URI plus digest, and the editable upstream owner/locator/update route (or an explicit manual/external-update boundary). Do not duplicate that metadata in both `DESIGN.md` and a Screen Contract.",
         "- Relevant product/design/development work must open affected selected exact targets/constraints; an index entry alone is not resource consumption.",
         "",
         "## Colors",
@@ -141,7 +142,7 @@ function designMdTemplate() {
         "## Layout",
         "",
         "- This scaffold declares no production page composition, information hierarchy or responsive layout.",
-        "- Put durable screen responsibility and interaction structure in `project_context/**`; reference selected visual targets in the Design Authority Index.",
+        "- Put durable screen responsibility, interaction structure and screen-specific canonical target records in `project_context/**`; keep project/system/component-family target records in this Design Authority Index.",
         "",
         "## Components",
         "",
@@ -161,7 +162,7 @@ function designMdTemplate() {
         "- Read this file before creating design drafts, redesigning UI, changing visual systems or implementing material production UI.",
         "- When there is a scan target such as UI source, page files, build output or a local/remote URL, run `npx impeccable detect <target>` before finalizing design changes.",
         "- Treat Impeccable findings as design-review signals: fix issues that affect clarity, consistency, accessibility or trust, and note when there is no suitable scan target.",
-        "- After design decisions stabilize, replace the unconfigured marker, index the selected targets and authored token source/generation direction, and record durable tokens, component rules and do/don't guidance.",
+        "- After design decisions stabilize, replace the unconfigured marker, record the authored token source/generation direction and each selected target at its exactly-one canonical owner, and record durable tokens, component rules and do/don't guidance.",
         "- Change an adopted target through its recorded upstream route, create or approve a new immutable version/digest, and update its index entry; never overwrite the adopted baseline in place.",
         "",
     ].join("\n");

package/dist/lib/design-resource-handoff-shape-evidence.js

@@ -1,6 +1,7 @@
 import { DESIGN_RESOURCE_DIMENSIONS, DESIGN_RESOURCE_EVIDENCE_KINDS, DESIGN_RESOURCE_LOCATOR_KINDS, } from "./design-resource-handoff-types.js";
 import { contractKey, contractKeys, sourceItemKeys, stableKey, stableKeys, verificationMethods, } from "./design-resource-handoff-shape-primitives.js";
 import { array, literal, object, string, } from "./long-task-shape-primitives.js";
+import { EXECUTION_TARGET_CAPABILITIES } from "./execution-target-capabilities.js";
 export function parseDesignResourceHandoffEvidence(value) {
     return array(value, "design_resource_handoff.evidence").map((item, index) => {
         const label = `design_resource_handoff.evidence[${index}]`;
@@ -69,6 +70,7 @@ export function parseDesignResourceHandoffBlockers(value) {
             "dimensions",
             "source_item_refs",
             "verification_methods",
+            "required_capabilities",
             "description",
         ]);
         return {
@@ -78,6 +80,7 @@ export function parseDesignResourceHandoffBlockers(value) {
             dimensions: array(row.dimensions, `${label}.dimensions`).map((dimension, itemIndex) => literal(dimension, DESIGN_RESOURCE_DIMENSIONS, `${label}.dimensions[${itemIndex}]`)),
             source_item_refs: sourceItemKeys(row.source_item_refs, `${label}.source_item_refs`),
             verification_methods: verificationMethods(row.verification_methods, `${label}.verification_methods`),
+            required_capabilities: array(row.required_capabilities, `${label}.required_capabilities`).map((capability, capabilityIndex) => literal(capability, EXECUTION_TARGET_CAPABILITIES, `${label}.required_capabilities[${capabilityIndex}]`)),
             description: string(row.description, `${label}.description`),
         };
     });

package/dist/lib/design-resource-handoff-shape-primitives.js

@@ -33,9 +33,7 @@ export function verificationMethods(value, label) {
     return array(value, label).map((item, index) => literal(item, DESIGN_RESOURCE_VERIFICATION_METHODS, `${label}[${index}]`));
 }
 export function positiveInteger(value, label) {
-    if (typeof value !== "number" ||
-        !Number.isSafeInteger(value) ||
-        value <= 0)
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0)
         designResourceShapeFail(label, "must be a positive safe integer");
     return value;
 }

package/dist/lib/design-resource-handoff-types.d.ts

@@ -1,3 +1,4 @@
+import type { ExecutionTargetCapabilityV2 } from "./execution-target-capabilities.js";
 export declare const DESIGN_RESOURCE_DIMENSIONS: readonly ["surface_flow", "visual_content", "component_control", "state_interaction", "motion", "adaptation_input", "accessibility", "assets"];
 export type DesignResourceDimension = (typeof DESIGN_RESOURCE_DIMENSIONS)[number];
 export declare const DESIGN_RESOURCE_EVIDENCE_KINDS: readonly ["frame", "component_variant", "prototype_state", "prototype_transition", "motion_spec", "motion_capture", "responsive_spec", "input_spec", "accessibility_spec", "semantic_tree", "token_spec", "asset", "annotation"];
@@ -115,6 +116,7 @@ export interface DesignResourceHandoffBlockerV1 {
     dimensions: DesignResourceDimension[];
     source_item_refs: string[];
     verification_methods: DesignResourceVerificationMethod[];
+    required_capabilities: ExecutionTargetCapabilityV2[];
     description: string;
 }
 export interface ParsedDesignResourceHandoffV1 {

package/dist/lib/design-resource-handoff-validation-coverage.js

@@ -80,6 +80,7 @@ export function validateDesignResourceBlockers(handoff, subjects, targets, sourc
             ["dimensions", blocker.dimensions],
             ["source_item_refs", blocker.source_item_refs],
             ["verification_methods", blocker.verification_methods],
+            ["required_capabilities", blocker.required_capabilities],
         ]) {
             requireNonemptyDesignResourceValues(values, `acceptance_blocker_${name}_required:${blocker.key}`);
             requireUniqueDesignResourceValues(values, `acceptance_blocker_${name}_duplicate:${blocker.key}`);

package/dist/lib/design-resource-handoff-validation-structure.js

@@ -17,6 +17,8 @@ export function validateDesignResourceConditions(handoff) {
         ]) {
             requireNonemptyDesignResourceValues(values, `condition_${name}_required:${condition.key}`);
             requireUniqueDesignResourceValues(values, `condition_${name}_duplicate:${condition.key}`);
+            if (values.length !== 1)
+                invalidDesignResourceHandoff(`condition_${name}_must_be_atomic`, condition.key);
         }
     }
 }

package/dist/lib/doctor.js

@@ -49,12 +49,12 @@ export async function runDoctor(projectRoot) {
         const footprint = await inspectDefaultContextFootprint(projectRoot);
         report.info.push(`default Context read path: ${footprint.files.length} file(s), ${footprint.total_bytes} bytes`);
         if (footprint.total_bytes > DEFAULT_CONTEXT_TOTAL_SOFT_BUDGET_BYTES) {
-            report.warnings.push(`default Context read path is ${footprint.total_bytes} bytes, above the ${DEFAULT_CONTEXT_TOTAL_SOFT_BUDGET_BYTES}-byte soft budget; shorten near-universal facts or move specialized role Context to read_policy=\"on-demand\"`);
+            report.warnings.push(`default Context read path is ${footprint.total_bytes} bytes, above the ${DEFAULT_CONTEXT_TOTAL_SOFT_BUDGET_BYTES}-byte soft budget; review duplication or specialized placement only when complete, readable recovery semantics remain intact—required near-universal facts take precedence`);
         }
         for (const file of footprint.files) {
             if (file.bytes <= DEFAULT_CONTEXT_FILE_SOFT_BUDGET_BYTES)
                 continue;
-            report.warnings.push(`default Context file ${file.path} is ${file.bytes} bytes, above the ${DEFAULT_CONTEXT_FILE_SOFT_BUDGET_BYTES}-byte per-file soft budget`);
+            report.warnings.push(`default Context file ${file.path} is ${file.bytes} bytes, above the ${DEFAULT_CONTEXT_FILE_SOFT_BUDGET_BYTES}-byte per-file soft budget; this is advisory only and required readable facts take precedence`);
         }
         for (const group of footprint.duplicate_groups) {
             report.warnings.push(`default Context contains byte-identical files: ${group.join(", ")}; keep one owning fact source and replace duplicates with a short pointer`);

package/dist/lib/execution-target-capabilities.d.ts

@@ -0,0 +1,2 @@
+export declare const EXECUTION_TARGET_CAPABILITIES: readonly ["browser-runtime", "native-runtime", "desktop-runtime", "service-runtime", "process-runtime", "external-runtime", "cold-start", "production-root", "pointer-input", "keyboard-input", "touch-input", "viewport-control", "pixel-density-observation", "safe-area-observation", "motion-observation", "reduced-motion", "color-scheme-control", "text-scale-control", "assistive-technology", "screen-reader", "physical-device", "device-orientation", "sensor-input", "camera-input", "haptic-output", "thermal-observation", "power-mode-control", "persistent-storage", "network-boundary"];
+export type ExecutionTargetCapabilityV2 = (typeof EXECUTION_TARGET_CAPABILITIES)[number];

package/dist/lib/execution-target-capabilities.js

@@ -0,0 +1,31 @@
+export const EXECUTION_TARGET_CAPABILITIES = [
+    "browser-runtime",
+    "native-runtime",
+    "desktop-runtime",
+    "service-runtime",
+    "process-runtime",
+    "external-runtime",
+    "cold-start",
+    "production-root",
+    "pointer-input",
+    "keyboard-input",
+    "touch-input",
+    "viewport-control",
+    "pixel-density-observation",
+    "safe-area-observation",
+    "motion-observation",
+    "reduced-motion",
+    "color-scheme-control",
+    "text-scale-control",
+    "assistive-technology",
+    "screen-reader",
+    "physical-device",
+    "device-orientation",
+    "sensor-input",
+    "camera-input",
+    "haptic-output",
+    "thermal-observation",
+    "power-mode-control",
+    "persistent-storage",
+    "network-boundary",
+];