ark-runtime-kernel 1.3.0 → 1.5.0

package/dist/index.d.cts

@@ -2,7 +2,7 @@ import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as In
 export { X as ArchitectureLayer, Y as ArchitectureLayerConfig, Z as ArchitectureRule, _ as ArkManifestArchitecture, $ as ArkManifestData, a0 as ArkManifestEntityLink, a1 as ArkManifestGraph, a2 as ArkManifestIntent, a3 as ArkManifestPolicy, a4 as ArkManifestProjection, a5 as AuditRecordInput, a6 as AuditRecordType, a7 as CorrelationId, a8 as EntityMeta, a9 as EventContractIssue, aa as EventHandler, ab as EventInterceptionInfo, ac as EventInterceptor, ad as EventInterceptorContext, ae as EventMetadata, af as EventPayloadPatch, ag as EventPayloadSchema, ah as EventPublisher, ai as EventSchemaField, aj as EventSchemaFieldType, ak as FieldMeta, al as GraphNode, am as IntentRelationshipKind, an as ObservabilityFlow, ao as ObservedLayerFlowMode, ap as PolicyEvaluationResult, aq as ProjectionCheckpoint, ar as ProjectionDefinition, as as PublishedEventRecord, at as RetryPolicy, au as SagaStatus, av as SagaStep, aw as TraceSink, ax as Unsubscribe, ay as WorkflowDefinition, az as WorkflowStatus, aA as WorkflowStep } from './types-7K_KQCgS.cjs';
 
 /** Ark library version — single source of truth. */
-declare const version = "1.3.0";
+declare const version = "1.5.0";
 
 /**
  * defineIntent
@@ -537,6 +537,12 @@ interface AICodeGateOptions<Context = AICodeGateContext> {
      * for publish misuse without taking a runtime dependency on TypeScript.
      */
     typescript?: unknown;
+    /**
+     * Ambient globals forbidden per layer (layer name → entries such as "fetch" or
+     * "Date.now"). Checked only when `typescript` is provided and context.layer resolves
+     * to a listed layer — mirrors ark-check's FORBIDDEN_GLOBAL rule.
+     */
+    forbiddenGlobals?: Record<string, string[]>;
 }
 declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
 

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as In
 export { X as ArchitectureLayer, Y as ArchitectureLayerConfig, Z as ArchitectureRule, _ as ArkManifestArchitecture, $ as ArkManifestData, a0 as ArkManifestEntityLink, a1 as ArkManifestGraph, a2 as ArkManifestIntent, a3 as ArkManifestPolicy, a4 as ArkManifestProjection, a5 as AuditRecordInput, a6 as AuditRecordType, a7 as CorrelationId, a8 as EntityMeta, a9 as EventContractIssue, aa as EventHandler, ab as EventInterceptionInfo, ac as EventInterceptor, ad as EventInterceptorContext, ae as EventMetadata, af as EventPayloadPatch, ag as EventPayloadSchema, ah as EventPublisher, ai as EventSchemaField, aj as EventSchemaFieldType, ak as FieldMeta, al as GraphNode, am as IntentRelationshipKind, an as ObservabilityFlow, ao as ObservedLayerFlowMode, ap as PolicyEvaluationResult, aq as ProjectionCheckpoint, ar as ProjectionDefinition, as as PublishedEventRecord, at as RetryPolicy, au as SagaStatus, av as SagaStep, aw as TraceSink, ax as Unsubscribe, ay as WorkflowDefinition, az as WorkflowStatus, aA as WorkflowStep } from './types-7K_KQCgS.js';
 
 /** Ark library version — single source of truth. */
-declare const version = "1.3.0";
+declare const version = "1.5.0";
 
 /**
  * defineIntent
@@ -537,6 +537,12 @@ interface AICodeGateOptions<Context = AICodeGateContext> {
      * for publish misuse without taking a runtime dependency on TypeScript.
      */
     typescript?: unknown;
+    /**
+     * Ambient globals forbidden per layer (layer name → entries such as "fetch" or
+     * "Date.now"). Checked only when `typescript` is provided and context.layer resolves
+     * to a listed layer — mirrors ark-check's FORBIDDEN_GLOBAL rule.
+     */
+    forbiddenGlobals?: Record<string, string[]>;
 }
 declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
 

package/dist/index.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var version = "1.3.0";
+var version = "1.5.0";
 
 // src/kernel/intent/IntentRegistry.ts
 var IntentRegistry = class {
@@ -2099,6 +2099,33 @@ function tsPublishSourceLiteral(ts, node) {
   const rawMetadata = tsObjectPropertyValue(ts, firstArg, "metadata");
   return tsStringLiteralText(ts, tsObjectPropertyValue(ts, rawMetadata, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, secondArg, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, thirdArg, "source"));
 }
+function analyzeForbiddenGlobals(ts, source, filePath, layer, forbidden) {
+  const entries = new Set(forbidden);
+  if (entries.size === 0) return [];
+  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
+  const violations = [];
+  const flag = (name, node) => violations.push(
+    violation("FORBIDDEN_GLOBAL", `${layer} must not use the ambient global "${name}".`, {
+      line: sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1,
+      filePath,
+      target: name,
+      fromLayer: layer,
+      suggestion: "Inject the capability through a port (e.g. a Clock, IdGenerator, or HttpPort) instead of reaching for the ambient global."
+    })
+  );
+  const visit = (node) => {
+    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression)) {
+      const dotted = `${node.expression.text}.${node.name.text}`;
+      if (entries.has(dotted)) flag(dotted, node);
+      else if (entries.has(node.expression.text)) flag(node.expression.text, node);
+    } else if ((ts.isCallExpression(node) || ts.isNewExpression(node)) && node.expression && ts.isIdentifier(node.expression) && entries.has(node.expression.text)) {
+      flag(node.expression.text, node);
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return violations;
+}
 function analyzePublishAst(ts, source, context, profile) {
   const sourceFile = ts.createSourceFile(
     "generated.ts",
@@ -2297,6 +2324,26 @@ function createAICodeGate(options = {}) {
           }
         }
       }
+      if (options.typescript && contextLayer && options.forbiddenGlobals?.[contextLayer]?.length) {
+        try {
+          violations.push(
+            ...analyzeForbiddenGlobals(
+              options.typescript,
+              source,
+              filePath,
+              contextLayer,
+              options.forbiddenGlobals[contextLayer]
+            )
+          );
+        } catch (err) {
+          violations.push(
+            violation(
+              "AST_ANALYZER_ERROR",
+              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
+            )
+          );
+        }
+      }
       if (options.typescript) {
         try {
           violations.push(