arkgate 2.10.0 → 2.12.0

package/dist/index.cjs

@@ -80,7 +80,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/version.ts
-var version = "2.10.0";
+var version = "2.12.0";
 
 // src/kernel/intent/IntentRegistry.ts
 var IntentRegistry = class {
@@ -2262,6 +2262,75 @@ function extractModuleSpecifiers(source) {
   }
   return matches.sort((a, b) => a.index - b.index);
 }
+function extractModuleSpecifiersAst(ts, source) {
+  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
+  const matches = [];
+  const push = (node, value, kind, typeOnly = false) => {
+    matches.push({
+      value,
+      index: node.getStart(sourceFile),
+      kind,
+      typeOnly
+    });
+  };
+  const visit = (node) => {
+    if (ts.isImportDeclaration(node) && ts.isStringLiteralLike(node.moduleSpecifier)) {
+      const clause = node.importClause;
+      const namedBindings = clause?.namedBindings;
+      const specifiersOnly = clause && !clause.name && namedBindings && ts.isNamedImports(namedBindings) && namedBindings.elements.length > 0 && namedBindings.elements.every((element) => element.isTypeOnly === true);
+      push(
+        node.moduleSpecifier,
+        node.moduleSpecifier.text,
+        "import",
+        Boolean(clause?.isTypeOnly || specifiersOnly)
+      );
+    } else if (ts.isExportDeclaration(node) && ts.isStringLiteralLike(node.moduleSpecifier)) {
+      const clause = node.exportClause;
+      const specifiersOnly = clause && ts.isNamedExports(clause) && clause.elements.length > 0 && clause.elements.every((element) => element.isTypeOnly === true);
+      push(
+        node.moduleSpecifier,
+        node.moduleSpecifier.text,
+        "export",
+        Boolean(node.isTypeOnly || specifiersOnly)
+      );
+    } else if (ts.isCallExpression(node) && node.arguments.length === 1) {
+      const argument = node.arguments[0];
+      const value = tsStringLiteralText(ts, argument);
+      if (value !== void 0 && node.expression.kind === ts.SyntaxKind.ImportKeyword) {
+        push(argument, value, "dynamic-import");
+      } else if (value !== void 0 && ts.isIdentifier(node.expression) && node.expression.text === "require") {
+        push(argument, value, "require");
+      }
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return matches.sort((a, b) => a.index - b.index);
+}
+function nonLiteralDynamicImportLines(ts, source) {
+  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
+  const lines = [];
+  const visit = (node) => {
+    if (ts.isCallExpression(node) && node.expression.kind === ts.SyntaxKind.ImportKeyword && (!node.arguments[0] || !ts.isStringLiteralLike(node.arguments[0]))) {
+      lines.push(sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1);
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return lines;
+}
+function extractQuotedStringsAst(ts, source) {
+  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
+  const matches = [];
+  const visit = (node) => {
+    if (ts.isStringLiteralLike(node)) {
+      matches.push({ value: node.text, index: node.getStart(sourceFile) });
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return matches;
+}
 function looksLikeIntentName(s) {
   return /^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(s);
 }
@@ -2456,6 +2525,19 @@ function createAICodeGate(options = {}) {
       const gateContext = context;
       const filePath = gateContext?.filePath;
       const contextLayer = gateContext?.layer;
+      const moduleSpecifiers = options.typescript ? extractModuleSpecifiersAst(options.typescript, source) : extractModuleSpecifiers(source);
+      const quotedStrings = options.typescript ? extractQuotedStringsAst(options.typescript, source) : extractQuotedStrings(source);
+      if (options.typescript && !options.allowNonLiteralDynamicImport?.(filePath)) {
+        for (const line of nonLiteralDynamicImportLines(options.typescript, source)) {
+          violations.push(
+            violation(
+              "DYNAMIC_IMPORT_NOT_ALLOWLISTED",
+              "Non-literal dynamic import cannot be resolved statically; add the reviewed file to dynamicImportAllowlist.",
+              { line, filePath }
+            )
+          );
+        }
+      }
       const exemptFromInfraHeuristics = contextLayer !== void 0 && (explicitInfraLayers.has(contextLayer) || layerHasInfrastructureRole(contextLayer));
       const infraLayerEscapeHatch = contextLayer !== void 0 ? ` If "${contextLayer}" is an infrastructure layer, mark it in ark.config.json with "mayImportInfrastructure": true (or name it with an infra token like Adapters/Persistence/Repository).` : "";
       for (const pat of userForbidden) {
@@ -2481,7 +2563,7 @@ function createAICodeGate(options = {}) {
           );
         }
       }
-      for (const specifier of extractModuleSpecifiers(source)) {
+      for (const specifier of moduleSpecifiers) {
         const targetHit = options.resolveImportTarget?.(specifier.value, filePath) ?? (options.resolveImportLayer ? { layer: options.resolveImportLayer(specifier.value, filePath) } : void 0);
         const sourceHit = typeof filePath === "string" ? options.resolveImportTarget?.(filePath) ?? (options.resolveImportLayer ? { layer: contextLayer, relPath: void 0 } : void 0) : void 0;
         const targetLayer = targetHit?.layer;
@@ -2572,7 +2654,7 @@ function createAICodeGate(options = {}) {
         }
       }
       if (enforceAllowlist && intentNames.size > 0) {
-        for (const literal of extractQuotedStrings(source)) {
+        for (const literal of quotedStrings) {
           if (looksLikeIntentName(literal.value) && !intentNames.has(literal.value)) {
             violations.push(
               violation(
@@ -2590,7 +2672,7 @@ function createAICodeGate(options = {}) {
         }
       }
       if (options.architectureProfile && contextLayer) {
-        for (const literal of extractQuotedStrings(source)) {
+        for (const literal of quotedStrings) {
           if (!looksLikeIntentName(literal.value)) continue;
           const targetLayer = options.architectureProfile.resolveLayer(literal.value);
           if (!targetLayer) continue;
@@ -2866,15 +2948,18 @@ function sleep(ms) {
   });
 }
 async function withTimeout(operation, timeoutMs, stepName) {
-  if (timeoutMs === void 0) return operation;
+  const controller = new AbortController();
+  if (timeoutMs === void 0) return operation(controller.signal);
   let timeout;
   const timeoutPromise = new Promise((_, reject) => {
     timeout = setTimeout(() => {
-      reject(new Error(`Workflow step "${stepName}" timed out after ${timeoutMs}ms.`));
+      const error = new Error(`Workflow step "${stepName}" timed out after ${timeoutMs}ms.`);
+      controller.abort(error);
+      reject(error);
     }, timeoutMs);
   });
   try {
-    return await Promise.race([operation, timeoutPromise]);
+    return await Promise.race([operation(controller.signal), timeoutPromise]);
   } finally {
     if (timeout) clearTimeout(timeout);
   }
@@ -2909,6 +2994,15 @@ var WorkflowEngineImpl = class {
     if (this.definitions.has(definition.name)) {
       throw new Error(`Workflow "${definition.name}" is already registered.`);
     }
+    const names = /* @__PURE__ */ new Set();
+    for (const step of definition.steps) {
+      if (names.has(step.name)) {
+        throw new Error(
+          `Workflow "${definition.name}" has duplicate step name "${step.name}".`
+        );
+      }
+      names.add(step.name);
+    }
     this.definitions.set(definition.name, definition);
     if (definition.startOn) {
       const trigger = definition.startOn;
@@ -2949,6 +3043,7 @@ var WorkflowEngineImpl = class {
     } catch (err) {
       await this.compensate(snapshot, definition.steps, err);
       snapshot.status = "failed";
+      snapshot.currentStep = void 0;
       snapshot.error = errorMessage(err);
       snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
       await this.store.save(snapshot);
@@ -2977,7 +3072,7 @@ var WorkflowEngineImpl = class {
       await this.store.save(snapshot);
       try {
         const result = await withTimeout(
-          Promise.resolve(step.execute(snapshot.context, this.bus)),
+          (signal) => Promise.resolve(step.execute(snapshot.context, this.bus, signal)),
           step.timeoutMs,
           step.name
         );