ark-runtime-kernel 1.2.0 → 1.4.0

package/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 // src/version.ts
-var version = "1.2.0";
+var version = "1.4.0";
 
 // src/kernel/intent/IntentRegistry.ts
 var IntentRegistry = class {
@@ -1833,12 +1833,13 @@ var defaultElevenLayerDirectories = {
 function createElevenLayerArkConfig(options = {}) {
   const rootDir = options.rootDir ?? "src";
   const optional = options.optionalLayers ?? true;
+  const prefix = rootDir === "." ? "" : `${rootDir}/`;
   return {
     include: options.include ?? [rootDir],
     layers: elevenLayerProfile.layers.map((layer) => ({
       name: layer.name,
       patterns: (defaultElevenLayerDirectories[layer.name] ?? [layer.name]).map(
-        (directory) => `${rootDir}/${directory}/**`
+        (directory) => `${prefix}${directory}/**`
       ),
       intentPrefixes: layer.prefixes,
       optional
@@ -2100,6 +2101,33 @@ function tsPublishSourceLiteral(ts, node) {
   const rawMetadata = tsObjectPropertyValue(ts, firstArg, "metadata");
   return tsStringLiteralText(ts, tsObjectPropertyValue(ts, rawMetadata, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, secondArg, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, thirdArg, "source"));
 }
+function analyzeForbiddenGlobals(ts, source, filePath, layer, forbidden) {
+  const entries = new Set(forbidden);
+  if (entries.size === 0) return [];
+  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
+  const violations = [];
+  const flag = (name, node) => violations.push(
+    violation("FORBIDDEN_GLOBAL", `${layer} must not use the ambient global "${name}".`, {
+      line: sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1,
+      filePath,
+      target: name,
+      fromLayer: layer,
+      suggestion: "Inject the capability through a port (e.g. a Clock, IdGenerator, or HttpPort) instead of reaching for the ambient global."
+    })
+  );
+  const visit = (node) => {
+    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression)) {
+      const dotted = `${node.expression.text}.${node.name.text}`;
+      if (entries.has(dotted)) flag(dotted, node);
+      else if (entries.has(node.expression.text)) flag(node.expression.text, node);
+    } else if ((ts.isCallExpression(node) || ts.isNewExpression(node)) && node.expression && ts.isIdentifier(node.expression) && entries.has(node.expression.text)) {
+      flag(node.expression.text, node);
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return violations;
+}
 function analyzePublishAst(ts, source, context, profile) {
   const sourceFile = ts.createSourceFile(
     "generated.ts",
@@ -2298,6 +2326,26 @@ function createAICodeGate(options = {}) {
           }
         }
       }
+      if (options.typescript && contextLayer && options.forbiddenGlobals?.[contextLayer]?.length) {
+        try {
+          violations.push(
+            ...analyzeForbiddenGlobals(
+              options.typescript,
+              source,
+              filePath,
+              contextLayer,
+              options.forbiddenGlobals[contextLayer]
+            )
+          );
+        } catch (err) {
+          violations.push(
+            violation(
+              "AST_ANALYZER_ERROR",
+              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
+            )
+          );
+        }
+      }
       if (options.typescript) {
         try {
           violations.push(