arkgate 2.11.0 → 2.13.0

package/CHANGELOG.md

@@ -4,6 +4,153 @@ All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are do
 
 ## Unreleased
 
+## 2.13.0 — 2026-07-11
+
+- Added the stable, deterministic analysis IR and public in-memory API: `loadContract`,
+  `analyzeProject`, `analyzeChange`, and `explainViolation`.
+
+### Fixed
+
+- **Temp-worktree release verification:** Codex multi-project fixtures now keep the simulated
+  primary project outside temp-root policy even when the repository itself is checked out under
+  `/tmp`, so the release confidence gate is reproducible without weakening fail-closed temp MCP
+  rewrites.
+- **Test and Codex-home isolation:** Vitest now redirects `CODEX_HOME` to a disposable test home,
+  so direct helper calls and spawned CLIs cannot rewrite the developer's real Codex config. Temp
+  project installs also recognize an explicitly exported default `~/.codex` as the real home and
+  skip implicit MCP rewiring unless `--codex-home` is requested.
+- **Workflow retry boundary:** `RetryPolicy` now retries only `step.execute` failures and
+  timeouts. A snapshot-store or completion-audit failure after a successful effect is terminal,
+  enters compensation, and never executes the completed effect again.
+- **Scanner bypass corpus:** forbidden-global checks now use single-file TypeScript symbols, so
+  local `fetch` / `Date` bindings do not false-positive while ambient aliases and
+  `globalThis.Date.now()` remain violations. CLI, AICodeGate, and ESLint share the verdict.
+  TypeScript `import x = require('...')` now creates a dependency edge, and direct
+  `require(expr)` emits `DYNAMIC_REQUIRE_NOT_ALLOWLISTED` (strict profiles fail unless the file
+  is reviewed in `dynamicImportAllowlist`). The scan cache is versioned past the old semantics.
+
+### Added
+
+- **Versioned configuration contract:** `ark.config.json` now carries `$schema` and
+  `schemaVersion: "1.0"`. One canonical loader validates and migrates the contract for CLI, MCP,
+  and ESLint with path-specific diagnostics and a fail-closed unknown-key policy. The generated
+  JSON Schema ships at the stable `arkgate/schema` subpath; unversioned configs from the previous
+  major migrate deterministically in memory.
+- **Active-host enforcement capabilities:** doctor and adoption checks now project
+  `hard-write`, `advisory-write`, `merge-gate`, and `repair-payload` from the active host only,
+  with evidence paths and a separate repo-wide inventory. Claude/Grok hooks can no longer make
+  Codex, Cursor, or an unknown host appear hard-enforced; human doctor output names the host and
+  separates advisory MCP checks from the shared CI check and its external required-status policy.
+- **Host-compatible enforcement profiles:** generated CI now uses `--strict-merge`, while
+  `--strict` remains a compatibility alias; neither depends on an editor hook. The optional
+  `--require-write-hook <host>` check verifies Claude/Grok explicitly, reports Cursor/Codex as
+  advisory-write plus the shared CI check only, and makes `ark start` reject impossible,
+  mismatched, or preserved-incompatible requests before writing project files.
+- **Executable regression confidence gate:** `npm run test:confidence` now combines the existing
+  broad Vitest coverage thresholds with real Stryker mutation testing over write-path detection,
+  dependency extraction, forbidden-global detection, baseline keys, and workflow retry logic.
+  CI and both npm release paths invoke the same gate; mutation score fails below 90%.
+- **Q2 repair dogfood closed:** deny → `ARK_REPAIR_JSON`/`autoPatch` → host re-inject →
+  revalidation allow proven via shipped `bin/ark-mcp.mjs` (Claude/Grok hooks already
+  `--hook-repair`; `doctor.writePath.mode = repair`).
+- **Q3 weakest-link sensors:** `bin/lib/weakest-link.mjs` + doctor adoption gaps
+  (`enforcement-ci-*`, config drift, pre-commit missing); maintained
+  `templates/hooks/pre-commit-ark`; optional `ARK_DOCTOR_GITHUB=1` branch-protection
+  report (honest unavailable / not-protected — never fake green).
+- **Q5 scale bench:** `scripts/ark-scale-bench.mjs` / `npm run bench:scale` (real
+  ark-check cold/warm p50/p95 on generated trees).
+- **Q6 module budgets:** `scripts/check-module-budgets.mjs` / `npm run check:module-budgets`.
+- **Q8 fault-injection tests:** compensation failure audit, cancellation-ignoring timeout,
+  outbox retry attempts + clear (durability boundary).
+- **Q9 threat model + package allowlist:** `docs/threat-model.md`,
+  `scripts/verify-package-files.mjs` / `npm run check:package-files`.
+
+### Changed
+
+- **Product identity retained:** ArkGate, `arkgate`, the `arkgate*` / `ark*` commands,
+  `ark.config.json`, `ark://`, `ARK_*`, the existing GitHub repository, and `arkgate.online` remain
+  canonical. The unpublished local rename experiment was reversed before any external cutover.
+- **Truthful host support matrix and runtime status:** one capability-backed matrix now drives
+  README and generated `AGENTS.md` guarantees for Claude, Grok, Cursor, and Codex. Doctor exposes
+  both the supported host profile and repository evidence; public docs distinguish hard local
+  hooks, advisory MCP, CI checks, and required-status merge blocking. The optional runtime/Nest
+  surface is explicitly experimental and is not required for architecture-gate adoption.
+- **Active host vs deferred Codex on upgrade/doctor:** `/ark-upgrade` greens the
+  **session host** first; Codex `$CODEX_HOME` prompts/MCP multi-project debt is
+  **deferred** when the session host is **known and not Codex** (Grok/Claude/Cursor).
+  Unknown host (CI/plain shell) keeps original severity. Doctor marks deferred gaps
+  `deferred: true` (severity `info`), prefixes the message, and omits them from Top
+  actions. Temp/upgrade MCP `--root` stays urgent (fail-closed). New helpers:
+  `detectActiveAgentHost`, `codexConcernIsActive` (do not treat `CODEX_HOME` alone
+  as Codex). `ark-check` advisory for stale Codex-home skills notes the deferral.
+  Completion contract adds **Active host** / **Deferred hosts**.
+- **ROADMAP Track Q:** Q2 `done`; Q3/Q5/Q6/Q8/Q9 `doing` with residual external/DoD
+  items listed; Q4/Q7/Q10 remain `todo` (no false complete).
+
+## 2.12.0 — 2026-07-10
+
+### Fixed
+
+- **Install agent gates on temp roots:** skip rewriting the developer's real
+  `~/.codex/config.toml` when the project root is a temp/upgrade scratch and
+  `CODEX_HOME` is unset. Home MCP wire failures no longer fail an otherwise
+  successful repo gate install (sandbox/EPERM). Explicit `CODEX_HOME` and
+  `--codex-home` still wire as before.
+- **Q1 coverage floors (broad include, 80/85/95):** Vitest thresholds statements/lines **≥80%**,
+  branches/functions **≥85%** on the **full product unit surface** (`src/**` + `bin/lib/**` +
+  `bin/ark-shared.mjs`; only process-entry shells excluded — no cherry-picked enforcement-core
+  include). Per-path critical floors: write-path-detect / auto-patch / prepare-write /
+  safety-diagnostics / baseline-key / graph-cycles at **≥95%** branch. Real branch-driving tests
+  under `tests/unit/static-check/` (critical + surface/topup/seam suites). Two consecutive
+  green `npm run test:coverage` captures (stmts/lines **92.71%**, branches **85%**, functions
+  **94.76%**; critical modules all **≥95%** branch).
+- **agent-gates modularization:** thin facade (`bin/lib/agent-gates.mjs` ~100 LOC) re-exports
+  `gate-files`, `skill-install`, `ci-and-commands`, `mcp-adoption`, `install-migrate`,
+  `typescript-host`, `hook-templates`, `write-path-detect`, plus field/codex helpers.
+  `detectDeployPathQuality` extracted to `bin/lib/deploy-path.mjs` so `mcp-adoption.mjs` stays
+  under the 600 LOC module budget. Import hygiene on extract modules; `loadTypeScript` uses
+  `__arkCheckCli` for the nested arkgate TypeScript fallback.
+- **Deny→repair CI proof:** `tests/unit/static-check/writePathDetect.test.ts` drives
+  shipped `bin/ark-mcp.mjs --hook --hook-repair` and asserts `ARK_REPAIR_JSON` /
+  `ARK_AUTOPATCH_JSON` on deny (exit 2); reject-only without repair flag still supported.
+- **Dogfood write path repair:** local Claude/Grok hooks use `--hook-repair`; doctor
+  reports `writePath.mode = repair` on this tree.
+- **Self-hosted AGENTS.md:** `--install-agent-gates --force` no longer overwrites library
+  mother-repo Identity (`skipped-self-hosted`).
+- **hexagonal-order-api:** `safety.allowInMemory` for ephemeral demo kernel; prefer
+  `arkgate/runtime` imports; `npm run check` green under `--strict-config`.
+- **multi-app / monorepo rules:** deny App→Persistence, Presentation→Domain, and
+  Persistence→Presentation (parity with crud-product starter).
+- **Generated CI Node default lags local npm (again):** when a project had no
+  `.nvmrc` / `engines.node`, the Ark architecture gate workflow defaulted to
+  Node 22. Lockfiles written on Node 24/26 then failed `npm ci` with
+  "Missing: … from lock file" before `ark-check` ran — CI green, Ark red.
+  Detection order is now `.nvmrc` / `.node-version` → `engines.node` → **highest
+  `node-version` from sibling workflows** (excludes `ark-check.yml` so a stale
+  gate cannot re-pin itself) → default **24**. Refresh existing gates with
+  `ark-check --install-agent-gates --force` (or edit `node-version` in
+  `.github/workflows/ark-check.yml`).
+
+### Changed
+
+- **Hook templates extracted** to `bin/lib/hook-templates.mjs` (agent-gates seam).
+- **Write-path detect extracted** to `bin/lib/write-path-detect.mjs` (doctor W5; re-exported
+  from agent-gates).
+- **Coverage thresholds** raised to Q1 floors on the broad include set: statements/lines **≥80**,
+  branches/functions **≥85**, critical write/safety modules **≥95%** branch (see Fixed above).
+- **`/ark-explore` skill:** decision-grade recon — field path (run starters/checks),
+  installed hooks vs install templates, coupling via fan-in/exports (not LOC alone),
+  ranked “así te lo re-soluciono” rows only when residual changes action; ENFORCE /
+  empty plan treated as baseline, not the story. **v2.1:** output modes (recon vs
+  dual-plan seed, no multi-week roadmaps by default); path-correct vs design-correct
+  + semantic false-green; success signals and kill-switches on bets (anti-vanity).
+- **`/ark-autopilot` skill:** explore-first (decision-grade), **dual plan** —
+  A remediation from `--plan` + B pattern/evolution bets (never auto-apply B as
+  mechanical-safe); empty plan no longer means “healthy” without explore/B.
+- **Day-zero origin first:** `ark start` / `ark init` freeze `.ark/reports/origin.*`
+  immediately after `ark.config.json` exists and **before** agent docs, skills, and CI
+  templates. Later `--report` still shows evolution vs that snapshot.
+
 ## 2.11.0 — 2026-07-10
 
 Fail-closed enforcement hardening: `--strict` now combines contract coverage, installed-gate

package/README.md

@@ -23,8 +23,8 @@ and makes sure a “green” check means something real.
 If you remember nothing else:
 
 ```text
-1.  npx arkgate start          ← install shape + gates + origin report
-2.  /ark-autopilot             ← in your agent: adopt, fix, leave gates on
+1.  npx arkgate start          ← walk tree → contract → **day-zero origin** → gates
+2.  /ark-autopilot             ← explore first, dual plan, safe fixes, leave gates on
 3.  npx arkgate-check --doctor ← “where am I?” anytime (one status screen)
 ```
 
@@ -43,15 +43,19 @@ commands above).
 
 ## What it is (30 seconds)
 
-**ArkGate** = a machine-readable architecture file (`ark.config.json`) enforced in two places
-you always care about:
+**ArkGate** = a machine-readable architecture file (`ark.config.json`) enforced at CI, with
+host-specific protection while an agent writes:
+
+**Name note:** this is the TypeScript architecture-enforcement package published as `arkgate`.
+It is not affiliated with the separate Archgate CLI project.
 
 | When | Tool |
 |------|------|
-| **While the AI writes** | `arkgate-mcp` write gate (blocks bad edits) |
-| **Before merge** | `arkgate-check` CI |
+| **While the AI writes** | Hard PreToolUse block on Claude/Grok; advisory MCP on Cursor/Codex |
+| **Before merge** | `arkgate-check` CI check; merge blocking requires it as a required status |
 
-Optional later: runtime kernel (`createArkKernel`) if you want event/intent governance.
+Optional later: the **experimental** runtime kernel (`createArkKernel`) if you want to evaluate
+event/intent governance. It is not required for gate adoption.
 
 It is **not** a web framework, ORM, or job runner.
 
@@ -82,7 +86,7 @@ mode you configure:
 |-------|--------|-----------|
 | **Suggest** | New/thin project | Finish `start` + autopilot |
 | **Adapt** | Not fully protected yet | Keep autopilot / adopt until clean |
-| **Enforce** | Gates can honestly protect you | Build features; fix with `/ark-fix` if blocked |
+| **Enforce** | Contract coverage is honest and checked edges are clean | Keep the host-appropriate write path; require the CI status if it must block merges |
 
 You **arrive** at Enforce. You never “turn on Enforce”.
 
@@ -106,7 +110,7 @@ Full checklist (CI, MCP, Codex, imports): **[docs/migrate-from-ark-runtime-kerne
 
 ```bash
 npm install -D arkgate typescript
-npx arkgate start                 # setup + origin report
+npx arkgate start                 # contract → day-zero origin → gates + plan
 # in agent:
 #   /ark-autopilot
 npx arkgate-check --doctor        # status light + next action
@@ -117,11 +121,13 @@ Aliases `ark` / `ark-check` / `ark-mcp` still work. **npm / pnpm / yarn**. No in
 <details>
 <summary>What <code>/ark-autopilot</code> does under the hood (optional detail)</summary>
 
-1. Setup if needed (`ark start`).
-2. Origin architecture report (before picture in `.ark/reports/`).
-3. Adoption: match contract to real folders, raise governed %.
-4. Plan + safe auto-fixes; judgment when you ask for full apply.
-5. Gates on + after report (evolution vs origin).
+1. Setup if needed (`ark start` — contract, then **day-zero origin**, then gates).
+2. **Explore pass** (decision-grade map of *this* product; field path when demos exist).
+3. **Dual plan:** **A** remediation from `--plan` (mechanical-safe only by default); **B** pattern/evolution bets (never auto-applied as mechanical-safe). Empty plan ≠ “healthy” without explore/B.
+4. Apply A → re-check; judgment only when you ask for full apply.
+5. Gates on + latest report (evolution vs frozen origin).
+
+Standalone recon without applying: `/ark-explore`.
 
 </details>
 
@@ -141,7 +147,7 @@ npx arkgate-check --coverage
 
 ## Other skills (only when you need them)
 
-Install once: `npx arkgate-check --install-agent-gates`  
+Install once: `npx arkgate-check --install-agent-gates`
 (`--tools claude,cursor,codex,grok` to pick hosts.)
 
 **Default is always `/ark-autopilot`.** The rest are escapes, not a second curriculum.
@@ -153,8 +159,9 @@ otherwise they **fall back to sequential**.
 
 **Write path (Track W):** Prefer MCP **`ark_prepare_write`** when you have a snippet (place +
 constrain + validate + optional `autoPatch` + `judgmentBrief`). PreToolUse hooks with
-`--hook-repair` emit machine-readable repair payloads on deny (still hard block; never silent
-write). See [docs/ai-gates.md](docs/ai-gates.md).
+`--hook-repair` on Claude/Grok emit machine-readable repair payloads on deny (still hard block;
+never silent write). Cursor/Codex MCP calls remain advisory. See
+[docs/ai-gates.md](docs/ai-gates.md).
 
 | Need | Skill |
 |------|--------|
@@ -168,11 +175,24 @@ write). See [docs/ai-gates.md](docs/ai-gates.md).
 | Edit `ark.config.json` safely | `/ark-contract` |
 | Plain-language tour of the report | `/ark-explain` |
 | Deep coverage + opportunities audit | `/ark-coverage` |
-| Migrate hand-rolled bus/outbox (TS) | `/ark-runtime` |
-| Bump ArkGate + refresh all agent hosts | `/ark-upgrade` |
+| Evaluate the experimental runtime against hand-rolled bus/outbox (TS) | `/ark-runtime` |
+| Bump ArkGate + refresh active host (defer Codex when not on Codex) | `/ark-upgrade` |
+
+### Host enforcement support
+
+<!-- arkgate-host-support:start -->
+| Host | Local write boundary | MCP validation | CI / merge path | Repair payload |
+|------|----------------------|----------------|-----------------|----------------|
+| Claude Code | Hard block for PreToolUse `Write` / `Edit` / `MultiEdit` | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | Emitted on hook deny; host must re-inject |
+| Grok Build | Hard block for PreToolUse `write` / `search_replace` (plus aliases) | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | Emitted on hook deny; host must re-inject |
+| Cursor | No hard hook; MCP/rules are advisory | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | No hard-boundary payload |
+| OpenAI Codex | No hard hook; MCP/rules are advisory | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | No hard-boundary payload |
+
+This table describes the supported profile **after its files are installed and the host loads/trusts them**. A hard local boundary covers only the listed hook operations; alternate tools, direct filesystem writes, and human edits still rely on CI. MCP validation is advisory because the agent must call it. The CI check blocks a merge only when the repository makes that status required. Repair payloads never write code silently: the host must re-inject the candidate and ArkGate revalidates it. Run `arkgate-check --doctor` for the evidence actually detected in the current repository.
+<!-- arkgate-host-support:end -->
+
+Detailed setup: [docs/ai-gates.md](docs/ai-gates.md).
 
-Hosts with full MCP/hooks: **Claude Code**, **Cursor**, **Codex**, **Grok Build**.  
-More: [docs/ai-gates.md](docs/ai-gates.md). Health: **`npx arkgate-check --doctor`**.
 ---
 
 ## How it works (short)
@@ -180,19 +200,27 @@ More: [docs/ai-gates.md](docs/ai-gates.md). Health: **`npx arkgate-check --docto
 ```
 ark.config.json
       │
-      ├─► Write gate (arkgate-mcp)  — agent PreToolUse / MCP tools
-      ├─► CI gate (arkgate-check)   — PR / main
-      └─► Runtime kernel (opt-in)   — only if you call it
+      ├─► Write path (arkgate-mcp)  — hard hook or advisory MCP, by host
+      ├─► CI check (arkgate-check)  — merge block only when status is required
+      └─► Runtime kernel            — experimental opt-in; gates do not need it
 ```
 
 - **Presets:** hexagonal, layered, feature-sliced, monorepo, ui-surface, vertical-slice, ddd-bounded-contexts (+ aliases clean-architecture / onion-architecture). Layers start optional; doctor suggests tightening populated cores. Cross-slice / cross-context bans use optional `peerIsolation` rules.
+- **Versioned config:** generated contracts include `$schema` + `schemaVersion`; CLI, MCP, and
+  ESLint validate through the same loader. Unknown keys fail with their JSON path. See the
+  [configuration and editor guide](docs/configuration.md).
 - **Frameworks:** Nest / Next / express / library layouts get sensible globs on init so day-one coverage is real.
 - **Brownfield:** baseline ratchet, refuse to freeze a wrong contract, `/ark-adopt` for mature trees.
-- **Agents:** skills install into Claude / Cursor / Codex / Grok; `ark start` freezes an origin report under `.ark/reports/`.
+- **Agents:** skills install into Claude / Cursor / Codex / Grok; `ark start` freezes **day-zero origin** under `.ark/reports/` **before** agent docs/CI templates.
 - **Write protocol (2.10 / Track W):** mechanical-safe **autoPatch** on the write gate (`import type`); MCP **`ark_prepare_write`** (place + validate + patch + judgmentBrief); opt-in hook **`--hook-repair`** (`ARK_REPAIR_JSON`); doctor **`writePath`** (repair vs reject-only); loop-cost eval (`npm run eval:loop-cost`). Port-proof inject is **judgment** (arity change), not silent auto-apply.
-- **Fail-closed CI (2.11):** `--strict` combines config coverage, required CI/MCP/write gates,
-  PreToolUse hook presence, and bypass diagnostics for dynamic imports, TypeScript suppressions,
-  explicit `any` casts, InMemory runtime defaults, and disabled peer isolation.
+- **Fail-closed CI (2.11):** `--strict-merge` combines config coverage, shared gate-file
+  presence, and bypass diagnostics for dynamic imports, TypeScript suppressions, explicit `any`
+  casts, InMemory runtime defaults, and disabled peer isolation. `--strict` is a compatibility
+  alias. Neither requires an editor hook; use `--require-write-hook claude|grok` when that local
+  guarantee is part of the check.
+- **Trust / coverage (2.12):** package unit-test floors on the broad product surface
+  (statements/lines **≥80%**, branches/functions **≥85%**; enforcement-critical modules **≥95%**
+  branch). Explore dual-plan + day-zero origin first (see above). Roadmap next: Q2 repair dogfood matrix.
 - **TypeScript:** project compilers 5.x / 6.x / 7.x — gate falls back to a nested JS-API TypeScript when TS 7’s main export is version-only ([docs/typescript-support.md](docs/typescript-support.md)).
 
 ### Why not only ESLint / dependency-cruiser / Nx?
@@ -200,7 +228,7 @@ ark.config.json
 | | ArkGate | Typical boundary linter |
 |--|:---:|:---:|
 | CI import rules | ✅ | ✅ |
-| Block **AI writes** before they land | ✅ | ❌ |
+| Hard-block supported-host AI writes before they land | ✅ (Claude/Grok hooks) | ❌ |
 | Contract agents can read (`ark://manifest`) | ✅ | ❌ |
 | Placement tools (`ark_place`, …) | ✅ | ❌ |
 | Honest governed % + adoption path | ✅ | ❌ |
@@ -214,13 +242,13 @@ ark.config.json
 ## Common commands
 
 ```bash
-npx arkgate start                         # guided setup + plan + origin report
+npx arkgate start                         # guided setup: contract → origin → gates → plan
 npx arkgate-check --doctor                # health + Adoption gaps (not just fitness)
 npx arkgate-check --doctor --json         # machine-readable doctor.adoption
 npx arkgate-check --strict                # fail-closed CI + installed-gate/safety checks
 npx arkgate-check --plan                  # safe-to-auto-fix vs your call
 npx arkgate-check --coverage              # Governed: N%
-npx arkgate-check --report ark-report.html  # showcase HTML + Adoption card + origin/latest
+npx arkgate-check --report ark-report.html  # showcase HTML (opens in browser on local TTY; --no-open to skip)
 npx arkgate-check --baseline              # only NEW violations fail
 npx arkgate upgrade                       # package + gates/skills + MCP/Codex normalize
 ```
@@ -234,10 +262,11 @@ CI (example):
 
 ---
 
-## Optional: runtime kernel
+## Optional experimental runtime kernel
 
-Gates need **no app code changes**. If you also want runtime intent/event contracts,
-use the **opt-in** subpath (preferred):
+Gates need **no app code changes**. The runtime API is currently **experimental** and is not a
+production-readiness claim. If you want to evaluate runtime intent/event contracts, use the
+opt-in subpath (preferred):
 
 ```ts
 import { createStrictArkKernelFromConfig } from 'arkgate/runtime';
@@ -245,7 +274,7 @@ import { createStrictArkKernelFromConfig } from 'arkgate/runtime';
 ```
 
 Root `import { … } from 'arkgate'` still re-exports kernel symbols for compatibility
-in this major; prefer `arkgate/runtime` for new code.
+in this major; use `arkgate/runtime` when evaluating the experimental surface.
 
 NestJS: `arkgate/nestjs` (optional peer `@nestjs/common`).
 
@@ -264,7 +293,7 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Audience | Link |
 |----------|------|
 | New builders (plain language) | [docs/enthusiast/](docs/enthusiast/README.md) |
-| **Package surface (stable vs opt-in)** | [docs/package-surface.md](docs/package-surface.md) |
+| **Package surface (stable vs experimental)** | [docs/package-surface.md](docs/package-surface.md) |
 | Wire Claude / Cursor / Codex / Grok + **ESLint (CI-parity)** | [docs/ai-gates.md](docs/ai-gates.md) |
 | **TypeScript 5 / 6 / 7 support** | [docs/typescript-support.md](docs/typescript-support.md) |
 | Migrate from `ark-runtime-kernel` | [docs/migrate-from-ark-runtime-kernel.md](docs/migrate-from-ark-runtime-kernel.md) |
@@ -285,11 +314,11 @@ npm run typecheck
 npm run check:architecture   # Ark gates itself
 ```
 
-**Website:** [arkgate.online](https://www.arkgate.online/)  
-**npm:** [`arkgate`](https://www.npmjs.com/package/arkgate) · formerly `ark-runtime-kernel`  
-**Product:** **ArkGate** — architecture co-pilot / gate for AI TypeScript (not a runtime kernel).  
-CLI: `arkgate` · `arkgate-check` · `arkgate-mcp` (aliases `ark` / `ark-check` / `ark-mcp` still work for one major).  
-MCP registry: `io.github.pedroknigge/arkgate`.  
+**Website:** [arkgate.online](https://www.arkgate.online/)
+**npm:** [`arkgate`](https://www.npmjs.com/package/arkgate) · formerly `ark-runtime-kernel`
+**Product:** **ArkGate** — architecture co-pilot / gate for AI TypeScript (not a runtime kernel).
+CLI: `arkgate` · `arkgate-check` · `arkgate-mcp` (aliases `ark` / `ark-check` / `ark-mcp` still work for one major).
+MCP registry: `io.github.pedroknigge/arkgate`.
 **Source:** [github.com/pedroknigge/arkgate](https://github.com/pedroknigge/arkgate)
 
 Node ≥ 18 · **MIT**.