arkgate 2.13.0 → 3.0.1

package/dist/runtime/index.js

@@ -1,3925 +0,0 @@
-// src/version.ts
-var version = "2.13.0";
-
-// src/kernel/intent/IntentRegistry.ts
-var IntentRegistry = class {
-  intents = /* @__PURE__ */ new Map();
-  dependencies = /* @__PURE__ */ new Map();
-  productions = /* @__PURE__ */ new Map();
-  /**
-   * Define/register a new intent.
-   *
-   * @param name - Semantic intent name following the convention (Domain.*, Application.*, etc.)
-   * @param options - Optional relationship declarations
-   * @throws Error if an intent with the same name is already registered
-   */
-  define(name, options) {
-    if (this.intents.has(name)) {
-      throw new Error(
-        `Intent "${name}" is already registered. Intent names must be unique within a registry.`
-      );
-    }
-    const fn = (payload) => ({
-      intent: name,
-      payload,
-      metadata: {
-        occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-        source: "unknown"
-      }
-    });
-    Object.defineProperty(fn, "name", {
-      value: name,
-      enumerable: true,
-      configurable: false,
-      writable: false
-    });
-    const creator = fn;
-    this.intents.set(name, creator);
-    if (options?.dependsOn) {
-      for (const dep of options.dependsOn) {
-        this.declareDependency(name, dep);
-      }
-    }
-    if (options?.produces) {
-      for (const prod of options.produces) {
-        this.declareProduction(name, prod);
-      }
-    }
-    return creator;
-  }
-  /**
-   * Declare that one intent depends on / relates to another.
-   * This information is used by the DependencyGraph (future iterations) and for policy checks.
-   *
-   * @param from - The source intent (e.g. an Application operation)
-   * @param to - The target intent it depends on (e.g. a Domain event or concept)
-   */
-  declareDependency(from, to) {
-    if (!this.dependencies.has(from)) {
-      this.dependencies.set(from, /* @__PURE__ */ new Set());
-    }
-    this.dependencies.get(from).add(to);
-  }
-  /**
-   * Declare that one intent produces / emits another (e.g. use case → domain event).
-   */
-  declareProduction(from, to) {
-    if (!this.productions.has(from)) {
-      this.productions.set(from, /* @__PURE__ */ new Set());
-    }
-    this.productions.get(from).add(to);
-  }
-  /**
-   * Retrieve a previously defined intent creator by name.
-   */
-  get(name) {
-    return this.intents.get(name);
-  }
-  /**
-   * List all registered intent creators.
-   */
-  list() {
-    return Array.from(this.intents.values());
-  }
-  /**
-   * Get all declared dependencies for a given intent.
-   */
-  getDependencies(intentName) {
-    const deps = this.dependencies.get(intentName);
-    return deps ? Array.from(deps) : [];
-  }
-  /**
-   * Get all intents produced / emitted by a given intent.
-   */
-  getProductions(intentName) {
-    const prods = this.productions.get(intentName);
-    return prods ? Array.from(prods) : [];
-  }
-  /**
-   * Get all declared relationships (useful for graph generation).
-   */
-  getAllRelationships() {
-    const result = [];
-    for (const [from, tos] of this.dependencies.entries()) {
-      for (const to of tos) {
-        result.push({ from, to, kind: "dependsOn" });
-      }
-    }
-    for (const [from, tos] of this.productions.entries()) {
-      for (const to of tos) {
-        result.push({ from, to, kind: "produces" });
-      }
-    }
-    return result;
-  }
-  /**
-   * Check if an intent name has been registered.
-   */
-  has(name) {
-    return this.intents.has(name);
-  }
-  /**
-   * Clear the registry. Primarily useful for tests.
-   */
-  clear() {
-    this.intents.clear();
-    this.dependencies.clear();
-    this.productions.clear();
-  }
-};
-
-// src/kernel/intent/defineIntent.ts
-var defaultRegistry = new IntentRegistry();
-function defineIntent(name, options) {
-  return defaultRegistry.define(name, options);
-}
-function createIntentRegistry() {
-  return new IntentRegistry();
-}
-var defaultIntentRegistry = defaultRegistry;
-
-// src/kernel/intent/validateIntentName.ts
-var ALLOWED_PREFIXES = [
-  "Domain.",
-  "Application.",
-  "Adapter.",
-  "Workflow.",
-  "Job.",
-  "Presentation.",
-  "Reporting.",
-  "Metadata.",
-  "Security.",
-  "Audit.",
-  "Observability.",
-  "Kernel."
-];
-function validateIntentName(name) {
-  if (!name || typeof name !== "string") {
-    return { valid: false, reason: "Intent name must be a non-empty string" };
-  }
-  if (!ALLOWED_PREFIXES.some((p) => name.startsWith(p))) {
-    return {
-      valid: false,
-      reason: `Intent "${name}" must start with one of: ${ALLOWED_PREFIXES.join(", ")}`
-    };
-  }
-  const rest = name.slice(name.indexOf(".") + 1);
-  if (!rest || !/^[A-Za-z][A-Za-z0-9_.]*$/.test(rest)) {
-    return {
-      valid: false,
-      reason: `Intent "${name}" has an invalid segment after the layer prefix`
-    };
-  }
-  return { valid: true };
-}
-
-// src/kernel/policy/PolicyViolationError.ts
-var PolicyViolationError = class extends Error {
-  violations;
-  constructor(violations) {
-    const messages = violations.map((v) => `- ${v.policyName}: ${v.message}`).join("\n");
-    super(`Hard policy violation(s) detected:
-${messages}`);
-    this.name = "PolicyViolationError";
-    this.violations = violations;
-  }
-};
-
-// src/kernel/policy/PolicyEngine.ts
-var PolicyEngine = class {
-  policies = [];
-  constructor(initialPolicies = []) {
-    for (const policy of initialPolicies) {
-      this.add(policy);
-    }
-  }
-  /**
-   * Adds a policy to the engine.
-   */
-  add(policy) {
-    if (this.policies.some((p) => p.name === policy.name)) {
-      throw new Error(`Policy "${policy.name}" is already registered in this engine.`);
-    }
-    this.policies.push(policy);
-  }
-  /**
-   * Returns all registered policies.
-   */
-  getPolicies() {
-    return [...this.policies];
-  }
-  /**
-   * Evaluates all policies against the provided context.
-   */
-  evaluate(context) {
-    const violations = [];
-    for (const policy of this.policies) {
-      const result = policy.check(context);
-      if (result === true) {
-        continue;
-      }
-      if (result === false) {
-        violations.push({
-          policyName: policy.name,
-          severity: policy.severity,
-          message: `Policy "${policy.name}" was violated.`
-        });
-        continue;
-      }
-      if (Array.isArray(result)) {
-        for (const v of result) {
-          violations.push({
-            policyName: policy.name,
-            severity: policy.severity,
-            message: v.message,
-            details: v.details
-          });
-        }
-      } else {
-        violations.push({
-          policyName: policy.name,
-          severity: policy.severity,
-          message: result.message,
-          details: result.details
-        });
-      }
-    }
-    const hardViolations = violations.filter((v) => v.severity === "hard");
-    const softViolations = violations.filter((v) => v.severity === "soft");
-    return {
-      passed: violations.length === 0,
-      violations,
-      hardViolations,
-      softViolations
-    };
-  }
-  /**
-   * Enforces all policies.
-   *
-   * - Soft violations are collected and can be observed (returned or logged).
-   * - Hard violations cause an error to be thrown (by default).
-   *
-   * @returns Evaluation result (including any soft violations)
-   * @throws Error if any hard policy is violated
-   */
-  enforce(context) {
-    const result = this.evaluate(context);
-    if (result.hardViolations.length > 0) {
-      throw new PolicyViolationError(result.hardViolations);
-    }
-    return result;
-  }
-  /**
-   * Clears all registered policies.
-   */
-  clear() {
-    this.policies.length = 0;
-  }
-};
-
-// src/kernel/policy/definePolicy.ts
-function definePolicy(options) {
-  const severity = options.severity ?? "soft";
-  const policy = {
-    name: options.name,
-    severity,
-    tags: options.tags,
-    owner: options.owner,
-    version: options.version,
-    rationale: options.rationale,
-    enforcementMode: options.enforcementMode,
-    deprecated: options.deprecated,
-    replacedBy: options.replacedBy,
-    check: options.check
-  };
-  return policy;
-}
-
-// src/kernel/policy/builtins.ts
-function defaultLayerOf(name) {
-  const dot = name.indexOf(".");
-  return dot >= 0 ? name.slice(0, dot) : name;
-}
-function resolveLayer(name, options) {
-  return options.resolveLayer?.(name) ?? defaultLayerOf(name);
-}
-function matchesRule(fromLayer, toLayer, rule) {
-  return fromLayer === rule.from && toLayer === rule.to;
-}
-function defineLayerPolicy(options) {
-  const name = options.name ?? "Layer isolation";
-  const severity = options.severity ?? "hard";
-  return definePolicy({
-    name,
-    severity,
-    tags: ["layer"],
-    check: (ctx) => {
-      const edges = [
-        ...(ctx.edges ?? []).filter((e) => e.kind === "declared" || e.kind === "produces").map((e) => ({ from: e.from, to: e.to })),
-        ...(ctx.relationships ?? []).filter((r) => r.kind === "dependsOn").map((r) => ({ from: r.from, to: r.to }))
-      ];
-      const violations = [];
-      for (const edge of edges) {
-        const fromLayer = resolveLayer(edge.from, options);
-        const toLayer = resolveLayer(edge.to, options);
-        for (const rule of options.rules) {
-          if (!rule.allowed && matchesRule(fromLayer, toLayer, rule)) {
-            violations.push({
-              policyName: name,
-              severity,
-              message: rule.message ?? `Layer violation: ${edge.from} (${fromLayer}) must not relate to ${edge.to} (${toLayer})`
-            });
-          }
-        }
-      }
-      return violations.length > 0 ? violations : true;
-    }
-  });
-}
-function isLayerPolicy(policy) {
-  return policy.tags?.includes("layer") ?? false;
-}
-var architecturalPolicies = {
-  /**
-   * @deprecated Use cleanArchitectureMatrix() for full layer rules.
-   * Blocks Domain → Adapter declared dependencies only.
-   */
-  layerIsolation() {
-    return architecturalPolicies.cleanArchitectureMatrix();
-  },
-  /**
-   * Clean-architecture dependency matrix (declared dependsOn / declared edges only).
-   * Does not block observed event flows (Domain events consumed by Application).
-   */
-  cleanArchitectureMatrix() {
-    return defineLayerPolicy({
-      name: "Clean architecture matrix",
-      severity: "hard",
-      rules: [
-        { from: "Domain", to: "Adapter", allowed: false },
-        { from: "Domain", to: "Application", allowed: false },
-        { from: "Adapter", to: "Application", allowed: false },
-        { from: "Adapter", to: "Domain", allowed: false }
-      ]
-    });
-  }
-};
-function defineArchitectureProfilePolicy(profile, options = {}) {
-  return defineLayerPolicy({
-    name: options.name ?? `${profile.name} layer policy`,
-    severity: options.severity ?? "hard",
-    rules: profile.rules,
-    resolveLayer: profile.resolveLayer
-  });
-}
-
-// src/kernel/event-bus/policyContext.ts
-function buildPublishPolicyContext(options) {
-  return (event) => ({
-    event,
-    relationships: options.intentRegistry?.getAllRelationships(),
-    edges: options.dependencyGraph?.getEdges()
-  });
-}
-function definePublishPolicy(options) {
-  return definePolicy(options);
-}
-
-// src/kernel/event-bus/errors.ts
-var UnregisteredIntentError = class extends Error {
-  intentName;
-  constructor(intentName) {
-    super(
-      `Intent "${intentName}" is not registered. Register it with IntentRegistry.define() before publish/subscribe, including metadata.source producer intents in strict mode.`
-    );
-    this.name = "UnregisteredIntentError";
-    this.intentName = intentName;
-  }
-};
-var InvalidIntentNameError = class extends Error {
-  intentName;
-  reason;
-  constructor(intentName, reason) {
-    super(`Invalid intent name "${intentName}": ${reason}`);
-    this.name = "InvalidIntentNameError";
-    this.intentName = intentName;
-    this.reason = reason;
-  }
-};
-var LayerPolicyContextError = class extends Error {
-  constructor() {
-    super(
-      "Layer/architecture policies require intentRegistry, dependencyGraph, or a custom getPolicyContext. Without graph/registry context, layer policies cannot inspect relationships."
-    );
-    this.name = "LayerPolicyContextError";
-  }
-};
-var EventContractViolationError = class extends Error {
-  intentName;
-  issues;
-  constructor(intentName, issues) {
-    super(
-      `Event contract violation for "${intentName}". Register a matching event contract/version or fix the payload before publishing.`
-    );
-    this.name = "EventContractViolationError";
-    this.intentName = intentName;
-    this.issues = issues;
-  }
-};
-var UnknownEventSourceError = class extends Error {
-  intentName;
-  source;
-  constructor(intentName, source) {
-    super(
-      source ? `Event "${intentName}" metadata.source "${source}" is not registered. Register the producer intent or publish from a known source.` : `Event "${intentName}" must include metadata.source. Strict Ark uses source to enforce observed layer flow.`
-    );
-    this.name = "UnknownEventSourceError";
-    this.intentName = intentName;
-    this.source = source;
-  }
-};
-var SourceMetadataOverrideError = class extends Error {
-  boundSource;
-  attemptedSource;
-  constructor(boundSource, attemptedSource) {
-    super(
-      `Source-bound publisher for "${boundSource}" cannot publish with metadata.source "${attemptedSource}". Create a publisher for the intended source instead.`
-    );
-    this.name = "SourceMetadataOverrideError";
-    this.boundSource = boundSource;
-    this.attemptedSource = attemptedSource;
-  }
-};
-var ObservedLayerFlowViolationError = class extends Error {
-  source;
-  intentName;
-  fromLayer;
-  toLayer;
-  constructor(source, intentName, fromLayer, toLayer, message) {
-    super(
-      message ?? `Observed layer violation: "${source}" (${fromLayer}) must not produce "${intentName}" (${toLayer}). Route this through an allowed layer or adjust the architecture profile rule.`
-    );
-    this.name = "ObservedLayerFlowViolationError";
-    this.source = source;
-    this.intentName = intentName;
-    this.fromLayer = fromLayer;
-    this.toLayer = toLayer;
-  }
-};
-
-// src/kernel/event-bus/publishGuards.ts
-function assertIntentAllowed(intentName, options) {
-  if (!options.strictRegistry && !options.validateIntentNaming) {
-    return;
-  }
-  if (options.validateIntentNaming) {
-    const validation = validateIntentName(intentName);
-    if (!validation.valid) {
-      throw new InvalidIntentNameError(intentName, validation.reason);
-    }
-  }
-  if (options.strictRegistry && options.intentRegistry && !options.intentRegistry.has(intentName)) {
-    throw new UnregisteredIntentError(intentName);
-  }
-}
-function assertSourceAllowed(event, options) {
-  if (!options.requireKnownSource) return;
-  if (!event.metadata.source || event.metadata.source === "unknown") {
-    throw new UnknownEventSourceError(event.intent);
-  }
-  if (options.intentRegistry && !options.intentRegistry.has(event.metadata.source)) {
-    throw new UnknownEventSourceError(event.intent, event.metadata.source);
-  }
-}
-function assertContractAllowed(event, options) {
-  if (!options.eventContracts) return;
-  const result = options.eventContracts.validate(event);
-  if (!result.ok && (options.strictEventContracts || result.contract)) {
-    throw new EventContractViolationError(event.intent, result.issues);
-  }
-}
-
-// src/kernel/event-bus/payloadPatch.ts
-function isPlainRecord(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return false;
-  }
-  const proto = Object.getPrototypeOf(value);
-  return proto === Object.prototype || proto === null;
-}
-function clonePatchValue(value) {
-  if (Array.isArray(value)) return value.map(clonePatchValue);
-  if (isPlainRecord(value)) {
-    return Object.fromEntries(
-      Object.entries(value).map(([key, child]) => [key, clonePatchValue(child)])
-    );
-  }
-  return value;
-}
-function mergeRecordPatch(target, patch, path = "payload") {
-  const next = { ...target };
-  for (const [key, value] of Object.entries(patch)) {
-    const childPath = `${path}.${key}`;
-    if (!(key in next) || next[key] === void 0) {
-      next[key] = clonePatchValue(value);
-      continue;
-    }
-    if (isPlainRecord(next[key]) && isPlainRecord(value)) {
-      next[key] = mergeRecordPatch(next[key], value, childPath);
-      continue;
-    }
-    if (Array.isArray(next[key]) && Array.isArray(value)) {
-      next[key] = mergeArrayPatch(next[key], value, childPath);
-      continue;
-    }
-    throw new Error(`Interceptor patch cannot overwrite existing ${childPath}.`);
-  }
-  return next;
-}
-function mergeArrayPatch(target, patch, path = "payload") {
-  const next = [...target];
-  patch.forEach((value, index) => {
-    const childPath = `${path}[${index}]`;
-    if (index >= next.length || next[index] === void 0) {
-      next[index] = clonePatchValue(value);
-      return;
-    }
-    if (isPlainRecord(next[index]) && isPlainRecord(value)) {
-      next[index] = mergeRecordPatch(next[index], value, childPath);
-      return;
-    }
-    if (Array.isArray(next[index]) && Array.isArray(value)) {
-      next[index] = mergeArrayPatch(next[index], value, childPath);
-      return;
-    }
-    throw new Error(`Interceptor patch cannot overwrite existing ${childPath}.`);
-  });
-  return next;
-}
-function applyPayloadPatch(payload, patch) {
-  if (Array.isArray(patch)) {
-    if (payload === void 0) return clonePatchValue(patch);
-    if (!Array.isArray(payload)) {
-      throw new Error("Array interceptor patch requires an array payload.");
-    }
-    return mergeArrayPatch(payload, patch);
-  }
-  if (payload === void 0) return clonePatchValue(patch);
-  if (!isPlainRecord(payload)) {
-    throw new Error("Object interceptor patch requires an object payload.");
-  }
-  return mergeRecordPatch(payload, patch);
-}
-
-// src/kernel/event-bus/publishInterceptors.ts
-async function applyInterceptors(event, deps) {
-  if (event.metadata.allowInterception === false) {
-    return event;
-  }
-  const matching = [...deps.interceptorsForIntent(event.intent)];
-  let current = event;
-  for (const registration of matching) {
-    const patches = [];
-    try {
-      await Promise.resolve(
-        registration.interceptor({
-          event: current,
-          intercept: (patch) => {
-            patches.push(patch);
-          }
-        })
-      );
-      if (patches.length === 0) {
-        continue;
-      }
-      const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-      let candidate = {
-        ...current,
-        metadata: {
-          ...current.metadata,
-          interceptions: [
-            ...current.metadata.interceptions ?? [],
-            { interceptorId: registration.interceptorId, timestamp }
-          ]
-        }
-      };
-      for (const patch of patches) {
-        candidate = {
-          ...candidate,
-          payload: applyPayloadPatch(candidate.payload, patch),
-          metadata: { ...candidate.metadata }
-        };
-      }
-      assertContractAllowed(candidate, {
-        eventContracts: deps.eventContracts,
-        strictEventContracts: deps.strictEventContracts
-      });
-      current = candidate;
-      registration.lastInterceptedAt = timestamp;
-      deps.appendTrace({
-        type: "event.intercepted",
-        timestamp,
-        intent: current.intent,
-        correlationId: current.metadata.correlationId,
-        traceId: current.metadata.traceId,
-        spanId: current.metadata.spanId,
-        details: {
-          registrationId: registration.registrationId,
-          interceptorId: registration.interceptorId,
-          patchesApplied: patches.length
-        }
-      });
-      await deps.recordAudit("event.intercepted", current, {
-        registrationId: registration.registrationId,
-        interceptorId: registration.interceptorId,
-        patchesApplied: patches.length
-      });
-    } catch (err) {
-      await recordInterceptorError(registration, current, err, deps);
-    }
-  }
-  return current;
-}
-async function recordInterceptorError(interceptor, event, error, deps) {
-  const message = error instanceof Error ? error.message : String(error);
-  deps.appendTrace({
-    type: "interceptor.error",
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    intent: event.intent,
-    correlationId: event.metadata.correlationId,
-    traceId: event.metadata.traceId,
-    spanId: event.metadata.spanId,
-    details: {
-      registrationId: interceptor.registrationId,
-      interceptorId: interceptor.interceptorId,
-      error: message
-    }
-  });
-  await deps.recordAudit("interceptor.error", event, {
-    registrationId: interceptor.registrationId,
-    interceptorId: interceptor.interceptorId,
-    error: message
-  });
-}
-
-// src/domain/layerMatch.ts
-var regexpCache = /* @__PURE__ */ new Map();
-function escapeLiteral(ch) {
-  return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
-}
-function normalizeGlobSeparators(pattern) {
-  let out = "";
-  for (let i = 0; i < pattern.length; i += 1) {
-    const c = pattern[i];
-    if (c === "\\" && i + 1 < pattern.length) {
-      const next = pattern[i + 1];
-      if ("*?{}[],".includes(next) || next === "\\") {
-        out += "\\" + next;
-        i += 1;
-        continue;
-      }
-      out += "/";
-      continue;
-    }
-    out += c;
-  }
-  return out;
-}
-function bracesBalanced(glob) {
-  let depth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\") {
-      i += 1;
-      continue;
-    }
-    if (c === "{") depth += 1;
-    else if (c === "}") {
-      depth -= 1;
-      if (depth < 0) return false;
-    }
-  }
-  return depth === 0;
-}
-function globToRegExp(pattern) {
-  const cached = regexpCache.get(pattern);
-  if (cached) return cached;
-  const glob = normalizeGlobSeparators(pattern);
-  const useBraces = bracesBalanced(glob);
-  let out = "";
-  let braceDepth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\" && i + 1 < glob.length) {
-      out += escapeLiteral(glob[i + 1]);
-      i += 1;
-    } else if (c === "*") {
-      if (glob[i + 1] === "*") {
-        if (glob[i + 2] === "/") {
-          out += "(?:.*/)?";
-          i += 2;
-        } else {
-          out += ".*";
-          i += 1;
-        }
-      } else {
-        out += "[^/]*";
-      }
-    } else if (c === "?") {
-      out += "[^/]";
-    } else if (c === "{" && useBraces) {
-      out += "(?:";
-      braceDepth += 1;
-    } else if (c === "}" && useBraces && braceDepth > 0) {
-      out += ")";
-      braceDepth -= 1;
-    } else if (c === "," && useBraces && braceDepth > 0) {
-      out += "|";
-    } else {
-      out += escapeLiteral(c);
-    }
-  }
-  const re = new RegExp(`^${out}$`);
-  regexpCache.set(pattern, re);
-  return re;
-}
-function patternSpecificity(pattern) {
-  const glob = normalizeGlobSeparators(String(pattern));
-  const beforeWildcard = glob.split("*")[0];
-  const literalSegments = beforeWildcard.split("/").filter(Boolean).length;
-  const literalLength = glob.replace(/\*/g, "").length;
-  return literalSegments * 1e4 + literalLength;
-}
-function layerForRelativePath(relPath, layers) {
-  const rel = String(relPath).split(/[/\\]/).join("/");
-  let bestName;
-  let bestScore = -1;
-  for (const layer of layers ?? []) {
-    if ((layer.exclude ?? []).some((pattern) => globToRegExp(pattern).test(rel))) {
-      continue;
-    }
-    for (const pattern of layer.patterns ?? []) {
-      if (globToRegExp(pattern).test(rel)) {
-        const score = patternSpecificity(pattern);
-        if (score > bestScore) {
-          bestScore = score;
-          bestName = layer.name;
-        }
-      }
-    }
-  }
-  return bestName;
-}
-function sliceIdForPath(relPath, sliceFolders) {
-  if (!sliceFolders?.length) return void 0;
-  const parts = String(relPath).split(/[/\\]/).filter(Boolean);
-  const folders = new Set(sliceFolders.map((s) => String(s).toLowerCase()));
-  for (let i = 0; i < parts.length - 1; i += 1) {
-    if (folders.has(parts[i].toLowerCase())) {
-      return `${parts[i]}/${parts[i + 1]}`;
-    }
-  }
-  return void 0;
-}
-function inferSliceFoldersFromPatterns(patterns) {
-  const out = /* @__PURE__ */ new Set();
-  for (const pattern of patterns ?? []) {
-    const glob = normalizeGlobSeparators(String(pattern));
-    const parts = glob.split("/").filter(Boolean);
-    for (let i = 0; i < parts.length; i += 1) {
-      const part = parts[i];
-      if ((part === "**" || part === "*") && i > 0) {
-        const prev = parts[i - 1];
-        if (prev && !prev.includes("*") && !prev.includes("{") && !prev.includes("}")) {
-          out.add(prev);
-        }
-      }
-    }
-  }
-  return [...out];
-}
-function resolveSliceFolders(rule, layerName, layers) {
-  if (Array.isArray(rule.sliceFolders) && rule.sliceFolders.length > 0) {
-    return rule.sliceFolders.filter((s) => typeof s === "string" && s.length > 0);
-  }
-  const layer = (layers ?? []).find((l) => l.name === layerName);
-  return inferSliceFoldersFromPatterns(layer?.patterns);
-}
-function findDeniedEdgeRule(rules, from, to, options) {
-  for (const rule of rules ?? []) {
-    if (rule.from !== from || rule.to !== to) continue;
-    if (rule.allowed !== false) continue;
-    if (rule.peerIsolation) {
-      const fromPath = options?.fromPath;
-      const toPath = options?.toPath;
-      if (!fromPath || !toPath) continue;
-      const folders = resolveSliceFolders(rule, from, options?.layers);
-      if (folders.length === 0) continue;
-      const fromSlice = sliceIdForPath(fromPath, folders);
-      const toSlice = sliceIdForPath(toPath, folders);
-      if (!fromSlice || !toSlice) continue;
-      if (fromSlice !== toSlice) return rule;
-      continue;
-    }
-    if (from === to) continue;
-    return rule;
-  }
-  return void 0;
-}
-
-// src/kernel/event-bus/observedLayerFlow.ts
-async function assertObservedLayerFlowAllowed(event, deps) {
-  if (deps.mode === "off" || !deps.architectureProfile) {
-    return;
-  }
-  const source = event.metadata.source;
-  if (!source || source === "unknown") return;
-  const profile = deps.architectureProfile;
-  const fromLayer = profile.resolveLayer(source);
-  const toLayer = profile.resolveLayer(event.intent);
-  if (!fromLayer || !toLayer) return;
-  const blocked = findDeniedEdgeRule(profile.rules, fromLayer, toLayer);
-  if (!blocked) return;
-  const severity = deps.mode;
-  const message = blocked.message ?? `Observed layer violation: "${source}" (${fromLayer}) must not produce "${event.intent}" (${toLayer}).`;
-  const details = {
-    source,
-    intent: event.intent,
-    fromLayer,
-    toLayer,
-    severity,
-    message,
-    rule: blocked
-  };
-  deps.appendTrace({
-    type: "layer.observedViolation",
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    intent: event.intent,
-    correlationId: event.metadata.correlationId,
-    traceId: event.metadata.traceId,
-    spanId: event.metadata.spanId,
-    details
-  });
-  await deps.recordAudit("layer.observedViolation", event, details);
-  if (severity === "hard") {
-    throw new ObservedLayerFlowViolationError(
-      source,
-      event.intent,
-      fromLayer,
-      toLayer,
-      message
-    );
-  }
-}
-
-// src/kernel/event-bus/publishPolicy.ts
-async function enforcePublishPolicy(event, deps) {
-  const ctx = deps.getPolicyContext(event);
-  let policyResult;
-  try {
-    policyResult = deps.policyEngine.enforce(ctx);
-  } catch (err) {
-    if (err instanceof PolicyViolationError) {
-      deps.appendTrace({
-        type: "policy.hardViolation",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        intent: event.intent,
-        correlationId: event.metadata.correlationId,
-        traceId: event.metadata.traceId,
-        spanId: event.metadata.spanId,
-        details: { violations: err.violations }
-      });
-      await deps.recordAudit("policy.hardViolation", event, {
-        violations: err.violations
-      });
-    }
-    throw err;
-  }
-  if (policyResult.softViolations.length > 0) {
-    deps.appendTrace({
-      type: "policy.softViolation",
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      intent: event.intent,
-      correlationId: event.metadata.correlationId,
-      traceId: event.metadata.traceId,
-      spanId: event.metadata.spanId,
-      details: { violations: policyResult.softViolations }
-    });
-    await deps.recordAudit("policy.softViolation", event, {
-      violations: policyResult.softViolations
-    });
-    if (deps.onSoftViolation) {
-      await deps.safeHook(
-        () => deps.onSoftViolation(policyResult, event),
-        "onSoftViolation",
-        event
-      );
-    }
-  }
-}
-
-// src/kernel/event-bus/publishRecording.ts
-function appendHistory(buffers, record) {
-  buffers.history.push(record);
-  if (buffers.maxHistorySize !== void 0 && buffers.history.length > buffers.maxHistorySize) {
-    buffers.history.splice(0, buffers.history.length - buffers.maxHistorySize);
-  }
-}
-function appendTrace(buffers, record) {
-  buffers.trace.push(record);
-  if (buffers.maxHistorySize !== void 0 && buffers.trace.length > buffers.maxHistorySize) {
-    buffers.trace.splice(0, buffers.trace.length - buffers.maxHistorySize);
-  }
-  for (const sink of buffers.traceSinks) {
-    try {
-      sink(record);
-    } catch {
-    }
-  }
-}
-async function recordAudit(buffers, type, event, details) {
-  if (!buffers.auditTrail) return;
-  try {
-    await buffers.auditTrail.record({
-      type,
-      source: event.metadata.source,
-      intent: event.intent,
-      correlationId: event.metadata.correlationId,
-      causationId: event.metadata.causationId,
-      subject: event.intent,
-      details
-    });
-  } catch (err) {
-    appendTrace(buffers, {
-      type: "hook.error",
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      intent: event.intent,
-      correlationId: event.metadata.correlationId,
-      traceId: event.metadata.traceId,
-      spanId: event.metadata.spanId,
-      details: {
-        hook: "auditTrail",
-        error: err instanceof Error ? err.message : String(err)
-      }
-    });
-  }
-}
-async function recordRawPublishDiagnostic(buffers, event) {
-  const details = {
-    intent: event.intent,
-    source: event.metadata.source,
-    suggestion: "Publish through a registered intent creator so strict registry, contracts, and agent tooling share one source of truth."
-  };
-  appendTrace(buffers, {
-    type: "event.rawPublish",
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    intent: event.intent,
-    correlationId: event.metadata.correlationId,
-    traceId: event.metadata.traceId,
-    spanId: event.metadata.spanId,
-    details
-  });
-  await recordAudit(buffers, "event.rawPublish", event, details);
-}
-async function recordSuccessfulPublish(buffers, event, subscribersNotified) {
-  const record = {
-    event,
-    publishedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    subscribersNotified
-  };
-  appendHistory(buffers, record);
-  await buffers.outbox?.enqueue(event);
-  appendTrace(buffers, {
-    type: "event.published",
-    timestamp: record.publishedAt,
-    intent: event.intent,
-    correlationId: event.metadata.correlationId,
-    traceId: event.metadata.traceId,
-    spanId: event.metadata.spanId,
-    details: { subscribersNotified }
-  });
-  await recordAudit(buffers, "event.published", event, {
-    subscribersNotified
-  });
-  return record;
-}
-function enrichMetadata(base, extra, instanceId) {
-  return {
-    ...base,
-    ...extra,
-    occurredAt: extra.occurredAt || base.occurredAt || (/* @__PURE__ */ new Date()).toISOString(),
-    source: extra.source || base.source || "unknown",
-    kernelInstanceId: extra.kernelInstanceId ?? base.kernelInstanceId ?? instanceId,
-    eventVersion: extra.eventVersion ?? base.eventVersion,
-    schemaVersion: extra.schemaVersion ?? base.schemaVersion,
-    allowInterception: extra.allowInterception ?? base.allowInterception,
-    interceptions: extra.interceptions ?? base.interceptions,
-    correlationId: extra.correlationId ?? base.correlationId,
-    causationId: extra.causationId ?? base.causationId,
-    traceId: extra.traceId ?? base.traceId,
-    spanId: extra.spanId ?? base.spanId,
-    parentSpanId: extra.parentSpanId ?? base.parentSpanId
-  };
-}
-
-// src/kernel/event-bus/EventBus.ts
-var interceptorSequence = 0;
-function nextInterceptorRegistrationId() {
-  interceptorSequence += 1;
-  return `interceptor-${Date.now()}-${interceptorSequence}`;
-}
-var EventBusImpl = class {
-  subscriptions = [];
-  subscriptionsByIntent = /* @__PURE__ */ new Map();
-  interceptors = [];
-  interceptorsByIntent = /* @__PURE__ */ new Map();
-  recording;
-  onPublish;
-  onSoftViolation;
-  onHandlerError;
-  eventContracts;
-  strictEventContracts;
-  requireKnownSource;
-  architectureProfile;
-  enforceObservedLayerFlowMode;
-  rethrowHandlerErrors;
-  policyEngine;
-  getPolicyContext;
-  intentRegistry;
-  dependencyGraph;
-  strictRegistry;
-  validateIntentNaming;
-  constructor(options = {}) {
-    this.onPublish = options.onPublish;
-    this.onSoftViolation = options.onSoftViolation;
-    this.onHandlerError = options.onHandlerError;
-    this.eventContracts = options.eventContracts;
-    this.strictEventContracts = options.strictEventContracts ?? false;
-    this.requireKnownSource = options.requireKnownSource ?? false;
-    this.architectureProfile = options.architectureProfile;
-    this.enforceObservedLayerFlowMode = options.enforceObservedLayerFlow ?? "off";
-    this.rethrowHandlerErrors = options.rethrowHandlerErrors ?? false;
-    this.intentRegistry = options.intentRegistry;
-    this.dependencyGraph = options.dependencyGraph;
-    this.strictRegistry = options.strictRegistry ?? options.intentRegistry !== void 0;
-    this.validateIntentNaming = options.validateIntentNaming ?? this.strictRegistry;
-    this.recording = {
-      history: [],
-      trace: [],
-      maxHistorySize: options.maxHistorySize,
-      traceSinks: [...options.traceSinks ?? []],
-      auditTrail: options.auditTrail,
-      outbox: options.outbox,
-      instanceId: options.instanceId
-    };
-    if (options.policyEngine) {
-      this.policyEngine = options.policyEngine;
-    } else if (options.policies && options.policies.length > 0) {
-      this.policyEngine = new PolicyEngine(options.policies);
-    }
-    const allPolicies = this.policyEngine?.getPolicies() ?? options.policies ?? [];
-    if (allPolicies.some(isLayerPolicy) && !options.intentRegistry && !options.dependencyGraph && !options.getPolicyContext) {
-      throw new LayerPolicyContextError();
-    }
-    if (options.getPolicyContext) {
-      this.getPolicyContext = options.getPolicyContext;
-    } else if (options.intentRegistry || options.dependencyGraph) {
-      this.getPolicyContext = buildPublishPolicyContext({
-        intentRegistry: options.intentRegistry,
-        dependencyGraph: options.dependencyGraph
-      });
-    } else {
-      this.getPolicyContext = (event) => ({ event });
-    }
-  }
-  async publish(eventOrCreator, payloadOrMeta, metadata) {
-    let event;
-    const rawPublish = typeof eventOrCreator !== "function";
-    if (!rawPublish) {
-      const creator = eventOrCreator;
-      const payload = payloadOrMeta;
-      const extraMeta = metadata ?? {};
-      const created = creator(payload);
-      event = {
-        ...created,
-        metadata: enrichMetadata(
-          created.metadata,
-          extraMeta,
-          this.recording.instanceId
-        )
-      };
-    } else {
-      const rawEvent = eventOrCreator;
-      const extraMeta = metadata ?? payloadOrMeta ?? {};
-      event = {
-        ...rawEvent,
-        metadata: enrichMetadata(
-          rawEvent.metadata,
-          extraMeta,
-          this.recording.instanceId
-        )
-      };
-    }
-    if (rawPublish && this.strictRegistry) {
-      await recordRawPublishDiagnostic(this.recording, event);
-    }
-    assertIntentAllowed(event.intent, {
-      strictRegistry: this.strictRegistry,
-      validateIntentNaming: this.validateIntentNaming,
-      intentRegistry: this.intentRegistry
-    });
-    assertSourceAllowed(event, {
-      requireKnownSource: this.requireKnownSource,
-      intentRegistry: this.intentRegistry
-    });
-    assertContractAllowed(event, {
-      eventContracts: this.eventContracts,
-      strictEventContracts: this.strictEventContracts
-    });
-    event = await applyInterceptors(event, {
-      interceptorsForIntent: (intent) => this.interceptorsByIntent.get(intent) ?? [],
-      eventContracts: this.eventContracts,
-      strictEventContracts: this.strictEventContracts,
-      appendTrace: (r) => this.appendTrace(r),
-      recordAudit: (type, e, details) => this.recordAudit(type, e, details)
-    });
-    assertContractAllowed(event, {
-      eventContracts: this.eventContracts,
-      strictEventContracts: this.strictEventContracts
-    });
-    await assertObservedLayerFlowAllowed(event, {
-      mode: this.enforceObservedLayerFlowMode,
-      architectureProfile: this.architectureProfile,
-      appendTrace: (r) => this.appendTrace(r),
-      recordAudit: (type, e, details) => this.recordAudit(type, e, details)
-    });
-    this.dependencyGraph?.registerEventFlow(event.metadata.source, event.intent);
-    const matching = [...this.subscriptionsByIntent.get(event.intent) ?? []];
-    if (this.policyEngine) {
-      await enforcePublishPolicy(event, {
-        policyEngine: this.policyEngine,
-        getPolicyContext: this.getPolicyContext,
-        appendTrace: (r) => this.appendTrace(r),
-        recordAudit: (type, e, details) => this.recordAudit(type, e, details),
-        onSoftViolation: this.onSoftViolation,
-        safeHook: (fn, name, e) => this.safeHook(fn, name, e)
-      });
-    }
-    await recordSuccessfulPublish(
-      this.recording,
-      event,
-      matching.length
-    );
-    await Promise.all(
-      matching.map((sub) => this.invokeHandler(sub, event))
-    );
-    if (this.onPublish) {
-      await this.safeHook(
-        () => this.onPublish(event),
-        "onPublish",
-        event
-      );
-    }
-  }
-  createPublisher(source) {
-    const sourceName = typeof source === "string" ? source : source.name;
-    assertIntentAllowed(sourceName, {
-      strictRegistry: this.strictRegistry,
-      validateIntentNaming: this.validateIntentNaming,
-      intentRegistry: this.intentRegistry
-    });
-    return {
-      source: sourceName,
-      publish: async (intent, payload, metadata = {}) => {
-        if (metadata.source && metadata.source !== sourceName) {
-          throw new SourceMetadataOverrideError(sourceName, metadata.source);
-        }
-        await this.publish(intent, payload, {
-          ...metadata,
-          source: sourceName
-        });
-      }
-    };
-  }
-  subscribe(intent, handler) {
-    const intentName = typeof intent === "string" ? intent : intent.name;
-    assertIntentAllowed(intentName, {
-      strictRegistry: this.strictRegistry,
-      validateIntentNaming: this.validateIntentNaming,
-      intentRegistry: this.intentRegistry
-    });
-    const sub = {
-      intentName,
-      handler
-    };
-    this.subscriptions.push(sub);
-    const subscriptionsForIntent = this.subscriptionsByIntent.get(intentName) ?? [];
-    subscriptionsForIntent.push(sub);
-    this.subscriptionsByIntent.set(intentName, subscriptionsForIntent);
-    return () => {
-      const idx = this.subscriptions.indexOf(sub);
-      if (idx >= 0) this.subscriptions.splice(idx, 1);
-      const byIntent = this.subscriptionsByIntent.get(intentName);
-      if (!byIntent) return;
-      const intentIdx = byIntent.indexOf(sub);
-      if (intentIdx >= 0) byIntent.splice(intentIdx, 1);
-      if (byIntent.length === 0) this.subscriptionsByIntent.delete(intentName);
-    };
-  }
-  registerInterceptor(intent, interceptor, interceptorId) {
-    const intentName = typeof intent === "string" ? intent : intent.name;
-    assertIntentAllowed(intentName, {
-      strictRegistry: this.strictRegistry,
-      validateIntentNaming: this.validateIntentNaming,
-      intentRegistry: this.intentRegistry
-    });
-    const registration = {
-      registrationId: nextInterceptorRegistrationId(),
-      interceptorId: interceptorId ?? intentName,
-      intentName,
-      interceptor,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    this.interceptors.push(registration);
-    const interceptorsForIntent = this.interceptorsByIntent.get(intentName) ?? [];
-    interceptorsForIntent.push(registration);
-    this.interceptorsByIntent.set(intentName, interceptorsForIntent);
-    return registration.registrationId;
-  }
-  unregisterInterceptor(registrationId) {
-    const interceptor = this.interceptors.find(
-      (candidate) => candidate.registrationId === registrationId
-    );
-    if (!interceptor) return false;
-    const idx = this.interceptors.indexOf(interceptor);
-    if (idx >= 0) this.interceptors.splice(idx, 1);
-    const byIntent = this.interceptorsByIntent.get(interceptor.intentName);
-    if (byIntent) {
-      const intentIdx = byIntent.indexOf(interceptor);
-      if (intentIdx >= 0) byIntent.splice(intentIdx, 1);
-      if (byIntent.length === 0) this.interceptorsByIntent.delete(interceptor.intentName);
-    }
-    return true;
-  }
-  listInterceptors(intent) {
-    return this.interceptors.filter((interceptor) => !intent || interceptor.intentName === intent).map((interceptor) => ({
-      registrationId: interceptor.registrationId,
-      interceptorId: interceptor.interceptorId,
-      intent: interceptor.intentName,
-      createdAt: interceptor.createdAt,
-      lastInterceptedAt: interceptor.lastInterceptedAt
-    }));
-  }
-  getHistory() {
-    return [...this.recording.history];
-  }
-  clearHistory() {
-    this.recording.history.length = 0;
-  }
-  getTrace() {
-    return [...this.recording.trace];
-  }
-  clearTrace() {
-    this.recording.trace.length = 0;
-  }
-  appendTrace(record) {
-    appendTrace(this.recording, record);
-  }
-  async recordAudit(type, event, details) {
-    await recordAudit(this.recording, type, event, details);
-  }
-  async invokeHandler(sub, event) {
-    try {
-      await Promise.resolve(sub.handler(event));
-    } catch (err) {
-      this.appendTrace({
-        type: "handler.error",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        intent: event.intent,
-        correlationId: event.metadata.correlationId,
-        traceId: event.metadata.traceId,
-        spanId: event.metadata.spanId,
-        details: { error: err instanceof Error ? err.message : String(err) }
-      });
-      await this.recordAudit("handler.error", event, {
-        handlerIntent: sub.intentName,
-        error: err instanceof Error ? err.message : String(err)
-      });
-      if (this.onHandlerError) {
-        await this.safeHook(
-          () => this.onHandlerError(err, event, sub.intentName),
-          "onHandlerError",
-          event
-        );
-      }
-      if (this.rethrowHandlerErrors) {
-        throw err;
-      }
-    }
-  }
-  async safeHook(fn, hookName, event) {
-    try {
-      await Promise.resolve(fn());
-    } catch (err) {
-      this.appendTrace({
-        type: "hook.error",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        intent: event.intent,
-        correlationId: event.metadata.correlationId,
-        traceId: event.metadata.traceId,
-        spanId: event.metadata.spanId,
-        details: {
-          hook: hookName,
-          error: err instanceof Error ? err.message : String(err)
-        }
-      });
-      await this.recordAudit("hook.error", event, {
-        hook: hookName,
-        error: err instanceof Error ? err.message : String(err)
-      });
-    }
-  }
-};
-function createEventBus(options) {
-  return new EventBusImpl(options);
-}
-
-// src/kernel/event-contracts/EventContractRegistry.ts
-function formatStandardSchemaPath(path) {
-  if (!path || path.length === 0) return void 0;
-  return path.map(
-    (segment) => typeof segment === "object" && segment !== null && "key" in segment ? String(segment.key) : String(segment)
-  ).join(".");
-}
-function actualType(value) {
-  if (Array.isArray(value)) return "array";
-  if (value === null) return "object";
-  const type = typeof value;
-  if (type === "string" || type === "number" || type === "boolean" || type === "object") {
-    return type;
-  }
-  return "unknown";
-}
-function formatPath(parent, field) {
-  return parent ? `${parent}.${field}` : field;
-}
-function validateSchemaField(value, fieldSchema, path, contract, issues) {
-  const valueType2 = actualType(value);
-  if (fieldSchema.type !== "unknown" && valueType2 !== fieldSchema.type) {
-    issues.push({
-      intent: contract.intent,
-      version: contract.version,
-      field: path,
-      message: `Expected ${fieldSchema.type}, received ${valueType2}.`
-    });
-    return;
-  }
-  if (fieldSchema.enum && !fieldSchema.enum.some((allowed) => Object.is(allowed, value))) {
-    issues.push({
-      intent: contract.intent,
-      version: contract.version,
-      field: path,
-      message: "Value is not allowed by event contract enum."
-    });
-  }
-  if (fieldSchema.type === "object" && fieldSchema.fields) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
-      issues.push({
-        intent: contract.intent,
-        version: contract.version,
-        field: path,
-        message: "Nested object field must be a non-array object."
-      });
-      return;
-    }
-    validateObjectSchema(
-      value,
-      fieldSchema.fields,
-      contract,
-      issues,
-      path
-    );
-  }
-  if (fieldSchema.type === "array" && fieldSchema.items && Array.isArray(value)) {
-    value.forEach((item, index) => {
-      validateSchemaField(
-        item,
-        fieldSchema.items,
-        `${path}[${index}]`,
-        contract,
-        issues
-      );
-    });
-  }
-}
-function validateObjectSchema(payload, schema, contract, issues, parentPath) {
-  for (const [field, fieldSchema] of Object.entries(schema)) {
-    const path = formatPath(parentPath, field);
-    const value = payload[field];
-    if (value === void 0) {
-      if (fieldSchema.required) {
-        issues.push({
-          intent: contract.intent,
-          version: contract.version,
-          field: path,
-          message: "Required field is missing."
-        });
-      }
-      continue;
-    }
-    validateSchemaField(value, fieldSchema, path, contract, issues);
-  }
-}
-var EventContractRegistryImpl = class {
-  contracts = /* @__PURE__ */ new Map();
-  register(contract) {
-    const key = this.key(contract.intent, contract.version);
-    if (this.contracts.has(key)) {
-      throw new Error(`Event contract "${key}" is already registered.`);
-    }
-    this.contracts.set(key, { allowAdditionalFields: true, ...contract });
-  }
-  get(intent, version2) {
-    if (version2) return this.contracts.get(this.key(intent, version2));
-    return this.list(intent).at(-1);
-  }
-  list(intent) {
-    return Array.from(this.contracts.values()).filter(
-      (contract) => !intent || contract.intent === intent
-    );
-  }
-  validate(event) {
-    const version2 = event.metadata.eventVersion;
-    const contract = this.get(event.intent, version2);
-    const issues = [];
-    if (!contract) {
-      return {
-        ok: false,
-        issues: [
-          {
-            intent: event.intent,
-            version: version2,
-            message: version2 ? `No event contract registered for version "${version2}".` : "No event contract registered for intent."
-          }
-        ]
-      };
-    }
-    if (contract.deprecated) {
-      issues.push({
-        intent: event.intent,
-        version: contract.version,
-        message: typeof contract.deprecated === "string" ? contract.deprecated : "Event contract is deprecated."
-      });
-    }
-    const payload = event.payload != null && typeof event.payload === "object" ? event.payload : void 0;
-    if (contract.schema) {
-      if (!payload) {
-        issues.push({
-          intent: event.intent,
-          version: contract.version,
-          message: "Payload must be an object for schema validation."
-        });
-      } else {
-        validateObjectSchema(payload, contract.schema, contract, issues);
-        if (contract.allowAdditionalFields === false) {
-          for (const field of Object.keys(payload)) {
-            if (!contract.schema[field]) {
-              issues.push({
-                intent: event.intent,
-                version: contract.version,
-                field,
-                message: "Additional field is not allowed by event contract."
-              });
-            }
-          }
-        }
-      }
-    }
-    if (contract.standardSchema) {
-      const result = contract.standardSchema["~standard"].validate(event.payload);
-      if (result instanceof Promise) {
-        issues.push({
-          intent: event.intent,
-          version: contract.version,
-          message: "Standard Schema validator returned a Promise; event contract validation is synchronous."
-        });
-      } else if (result.issues) {
-        for (const issue of result.issues) {
-          issues.push({
-            intent: event.intent,
-            version: contract.version,
-            field: formatStandardSchemaPath(issue.path),
-            message: issue.message
-          });
-        }
-      }
-    }
-    return { ok: issues.length === 0, contract, issues };
-  }
-  clear() {
-    this.contracts.clear();
-  }
-  key(intent, version2) {
-    return `${intent}@${version2}`;
-  }
-};
-function createEventContractRegistry() {
-  return new EventContractRegistryImpl();
-}
-
-// src/kernel/outbox/InMemoryOutboxStore.ts
-var outboxSequence = 0;
-function nextOutboxId() {
-  outboxSequence += 1;
-  return `outbox-${Date.now()}-${outboxSequence}`;
-}
-function cloneRecord(record) {
-  return {
-    ...record,
-    event: {
-      ...record.event,
-      metadata: { ...record.event.metadata }
-    }
-  };
-}
-var InMemoryOutboxStore = class {
-  records = /* @__PURE__ */ new Map();
-  async enqueue(event) {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const record = {
-      id: nextOutboxId(),
-      event,
-      status: "pending",
-      attempts: 0,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.records.set(record.id, record);
-    return cloneRecord(record);
-  }
-  async markDispatched(id) {
-    const record = this.records.get(id);
-    if (!record) return;
-    record.status = "dispatched";
-    record.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  }
-  async markFailed(id, error) {
-    const record = this.records.get(id);
-    if (!record) return;
-    record.status = "failed";
-    record.attempts += 1;
-    record.error = error instanceof Error ? error.message : String(error);
-    record.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  }
-  async list(status) {
-    return Array.from(this.records.values()).filter((record) => !status || record.status === status).map(cloneRecord);
-  }
-  async clear() {
-    this.records.clear();
-  }
-};
-
-// src/kernel/observability/ObservabilityReporter.ts
-function flowKey(flow) {
-  return `${flow.from}->${flow.to}`;
-}
-function uniqueFlows(flows) {
-  const seen = /* @__PURE__ */ new Set();
-  const result = [];
-  for (const flow of flows) {
-    const key = flowKey(flow);
-    if (seen.has(key)) continue;
-    seen.add(key);
-    result.push(flow);
-  }
-  return result;
-}
-function difference(left, right) {
-  const rightKeys = new Set(right.map(flowKey));
-  return left.filter((flow) => !rightKeys.has(flowKey(flow)));
-}
-function createObservabilityReporter(options) {
-  const registry = options.registry;
-  const eventBus = options.eventBus;
-  const graph = options.graph;
-  return {
-    report() {
-      const declaredFromRegistry = registry ? registry.getAllRelationships().filter((relationship) => relationship.kind === "produces").map((relationship) => ({
-        from: relationship.from,
-        to: relationship.to
-      })) : [];
-      const declaredFromGraph = declaredFromRegistry.length > 0 || !graph ? [] : graph.getEdges().filter((edge) => edge.kind === "produces").map((edge) => ({ from: edge.from, to: edge.to }));
-      const observedFromHistory = eventBus?.getHistory().map((record) => ({
-        from: record.event.metadata.source,
-        to: record.event.intent
-      })) ?? [];
-      const observedFromGraph = observedFromHistory.length > 0 || !graph ? [] : graph.getEdges().filter((edge) => edge.kind === "observed").map((edge) => ({ from: edge.from, to: edge.to }));
-      const declaredProductions = uniqueFlows([
-        ...declaredFromRegistry,
-        ...declaredFromGraph
-      ]);
-      const observedProductions = uniqueFlows([
-        ...observedFromHistory,
-        ...observedFromGraph
-      ]);
-      const unknownSources = observedProductions.filter(
-        (flow) => !flow.from || flow.from === "unknown"
-      );
-      const unregisteredObservedSources = registry ? Array.from(
-        new Set(
-          observedProductions.map((flow) => flow.from).filter(
-            (source) => source && source !== "unknown" && !registry.has(source)
-          )
-        )
-      ) : [];
-      const unregisteredObservedIntents = registry ? Array.from(
-        new Set(
-          observedProductions.map((flow) => flow.to).filter((intent) => !registry.has(intent))
-        )
-      ) : [];
-      const observedIntentNames = new Set(
-        observedProductions.flatMap((flow) => [flow.from, flow.to])
-      );
-      const registeredButNeverObserved = registry ? registry.list().map((intent) => intent.name).filter((intent) => !observedIntentNames.has(intent)) : [];
-      return {
-        generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        declaredProductions,
-        observedProductions,
-        declaredButUnobserved: difference(declaredProductions, observedProductions),
-        observedButUndeclared: difference(
-          observedProductions.filter((flow) => flow.from !== "unknown"),
-          declaredProductions
-        ),
-        unknownSources,
-        unregisteredObservedSources,
-        unregisteredObservedIntents,
-        registeredButNeverObserved
-      };
-    }
-  };
-}
-
-// src/kernel/testing/ArkTestHarness.ts
-function createArkTestHarness(kernel) {
-  return {
-    events(intent) {
-      return kernel.eventBus.getHistory().map((record) => record.event).filter((event) => !intent || event.intent === intent);
-    },
-    traces(type) {
-      return kernel.eventBus.getTrace().filter((record) => !type || record.type === type);
-    },
-    audit(query) {
-      return kernel.auditTrail.query(query);
-    },
-    outbox(status) {
-      return kernel.outbox.list(status);
-    },
-    observability() {
-      kernel.syncGraph();
-      return kernel.observability.report();
-    },
-    async snapshot() {
-      return {
-        events: this.events(),
-        traces: this.traces(),
-        audit: await this.audit(),
-        outbox: await this.outbox(),
-        observability: this.observability()
-      };
-    },
-    async clear() {
-      kernel.eventBus.clearHistory();
-      kernel.eventBus.clearTrace();
-      await kernel.auditTrail.clear();
-      await kernel.outbox.clear();
-    }
-  };
-}
-
-// src/kernel/audit/AuditTrail.ts
-var auditSequence = 0;
-function createAuditId() {
-  auditSequence += 1;
-  return `audit-${Date.now()}-${auditSequence}`;
-}
-function matchesQuery(record, query) {
-  if (query.type && record.type !== query.type) return false;
-  if (query.intent && record.intent !== query.intent) return false;
-  if (query.correlationId && record.correlationId !== query.correlationId) return false;
-  if (query.subject && record.subject !== query.subject) return false;
-  if (query.since && record.timestamp < query.since) return false;
-  if (query.until && record.timestamp > query.until) return false;
-  return true;
-}
-var InMemoryAuditStore = class {
-  constructor(maxRecords) {
-    this.maxRecords = maxRecords;
-  }
-  maxRecords;
-  records = [];
-  append(record) {
-    this.records.push(record);
-    if (this.maxRecords !== void 0 && this.records.length > this.maxRecords) {
-      this.records.splice(0, this.records.length - this.maxRecords);
-    }
-  }
-  query(query = {}) {
-    const records = this.records.filter((record) => matchesQuery(record, query));
-    return query.limit === void 0 ? [...records] : records.slice(-query.limit);
-  }
-  clear() {
-    this.records.length = 0;
-  }
-};
-var AuditTrailImpl = class {
-  constructor(store) {
-    this.store = store;
-  }
-  store;
-  async record(input) {
-    const record = {
-      id: createAuditId(),
-      timestamp: input.timestamp ?? (/* @__PURE__ */ new Date()).toISOString(),
-      type: input.type,
-      source: input.source,
-      actor: input.actor,
-      intent: input.intent,
-      correlationId: input.correlationId,
-      causationId: input.causationId,
-      subject: input.subject,
-      details: input.details
-    };
-    await this.store.append(record);
-    return record;
-  }
-  async query(query) {
-    return this.store.query(query);
-  }
-  async clear() {
-    await this.store.clear();
-  }
-};
-function createAuditTrail(options = {}) {
-  return new AuditTrailImpl(
-    options.store ?? new InMemoryAuditStore(options.maxRecords)
-  );
-}
-
-// src/kernel/graph/DependencyGraph.ts
-var DependencyGraphImpl = class {
-  nodes = /* @__PURE__ */ new Map();
-  edges = [];
-  registerDependency(from, to, kind = "declared") {
-    this.ensureNode(from);
-    this.ensureNode(to);
-    this.addEdge({ from, to, kind });
-  }
-  registerEventFlow(producer, consumer) {
-    this.ensureNode(producer);
-    this.ensureNode(consumer);
-    this.addEdge({ from: producer, to: consumer, kind: "observed" });
-  }
-  getNodes() {
-    return Array.from(this.nodes.values());
-  }
-  getEdges() {
-    return [...this.edges];
-  }
-  toJSON() {
-    return {
-      nodes: this.getNodes(),
-      edges: this.getEdges()
-    };
-  }
-  toMermaid() {
-    let out = "flowchart TD\n";
-    for (const edge of this.edges) {
-      const label = edge.kind ? `|${edge.kind}|` : "";
-      out += `  ${this.safeId(edge.from)} -->${label} ${this.safeId(edge.to)}
-`;
-    }
-    const connected = new Set(
-      this.edges.flatMap((e) => [e.from, e.to])
-    );
-    for (const node of this.nodes.keys()) {
-      if (!connected.has(node)) {
-        out += `  ${this.safeId(node)}
-`;
-      }
-    }
-    return out.trim();
-  }
-  toLayerMermaid(profile) {
-    const nodesByLayer = /* @__PURE__ */ new Map();
-    for (const node of this.nodes.keys()) {
-      const layer = profile.resolveLayer(node) ?? "Unclassified";
-      const current = nodesByLayer.get(layer) ?? [];
-      current.push(node);
-      nodesByLayer.set(layer, current);
-    }
-    let out = "flowchart TD\n";
-    for (const layer of profile.layers) {
-      const nodes = nodesByLayer.get(layer.name) ?? [];
-      if (nodes.length === 0) continue;
-      out += `  subgraph ${this.safeId(layer.name)}[${layer.name}]
-`;
-      for (const node of nodes) {
-        out += `    ${this.safeId(node)}[${node}]
-`;
-      }
-      out += "  end\n";
-    }
-    const unclassified = nodesByLayer.get("Unclassified") ?? [];
-    if (unclassified.length > 0) {
-      out += "  subgraph Unclassified[Unclassified]\n";
-      for (const node of unclassified) {
-        out += `    ${this.safeId(node)}[${node}]
-`;
-      }
-      out += "  end\n";
-    }
-    for (const edge of this.edges) {
-      const label = edge.kind ? `|${edge.kind}|` : "";
-      out += `  ${this.safeId(edge.from)} -->${label} ${this.safeId(edge.to)}
-`;
-    }
-    return out.trim();
-  }
-  detectViolations(rules = []) {
-    const violations = [];
-    const cycles = this.findSimpleCycles();
-    if (cycles.length > 0) {
-      violations.push(`Cycle detected: ${cycles.map((c) => c.join("->")).join(", ")}`);
-    }
-    for (const rule of rules) {
-      try {
-        const res = rule(this.edges);
-        if (res && res.length) violations.push(...res);
-      } catch (e) {
-        violations.push(`Rule error: ${e.message}`);
-      }
-    }
-    return violations;
-  }
-  ensureNode(id) {
-    if (!this.nodes.has(id)) {
-      this.nodes.set(id, { id });
-    }
-  }
-  addEdge(edge) {
-    const exists = this.edges.some(
-      (e) => e.from === edge.from && e.to === edge.to && e.kind === edge.kind
-    );
-    if (!exists) {
-      this.edges.push(edge);
-    }
-  }
-  // Very naive cycle detection for small graphs
-  findSimpleCycles() {
-    const graph = /* @__PURE__ */ new Map();
-    for (const e of this.edges) {
-      if (!graph.has(e.from)) graph.set(e.from, []);
-      graph.get(e.from).push(e.to);
-    }
-    const cycles = [];
-    const visited = /* @__PURE__ */ new Set();
-    const stack = [];
-    const dfs = (node) => {
-      visited.add(node);
-      stack.push(node);
-      for (const nei of graph.get(node) || []) {
-        if (!visited.has(nei)) {
-          dfs(nei);
-        } else if (stack.includes(nei)) {
-          const cycleStart = stack.indexOf(nei);
-          const cycle = stack.slice(cycleStart).concat(nei);
-          cycles.push(cycle);
-        }
-      }
-      stack.pop();
-    };
-    for (const node of graph.keys()) {
-      if (!visited.has(node)) dfs(node);
-    }
-    const unique = new Set(cycles.map((c) => c.join("->")));
-    return Array.from(unique).map((s) => s.split("->"));
-  }
-  safeId(id) {
-    return id.replace(/[^a-zA-Z0-9_]/g, "_");
-  }
-};
-function createDependencyGraph() {
-  return new DependencyGraphImpl();
-}
-
-// src/kernel/graph/sync.ts
-function syncRegistryToGraph(registry, graph, options = {}) {
-  const requireRegistered = options.requireRegisteredTargets ?? false;
-  for (const rel of registry.getAllRelationships()) {
-    if (requireRegistered && !registry.has(rel.to)) {
-      continue;
-    }
-    if (rel.kind === "dependsOn") {
-      graph.registerDependency(rel.from, rel.to, "declared");
-    } else {
-      graph.registerDependency(rel.from, rel.to, "produces");
-    }
-  }
-}
-
-// src/domain/configContract.ts
-var ARK_CONFIG_SCHEMA_VERSION = "1.0";
-var ARK_CONFIG_SCHEMA_URL = "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-var DEFAULT_LAYER_NAMES = [
-  "DomainModel",
-  "ApplicationOrchestration",
-  "PersistenceAdapters",
-  "IntegrationAdapters",
-  "WorkflowSagaEngine",
-  "BackgroundJobsScheduling",
-  "PresentationAdapters",
-  "ReportingReadModels",
-  "ExtensibilityMetadata",
-  "SecurityAuditObservability",
-  "Kernel"
-];
-var DEFAULT_ALLOWED_FLOWS = /* @__PURE__ */ new Set([
-  "PresentationAdapters->ApplicationOrchestration",
-  "ApplicationOrchestration->DomainModel",
-  "WorkflowSagaEngine->ApplicationOrchestration",
-  "WorkflowSagaEngine->DomainModel",
-  "BackgroundJobsScheduling->ApplicationOrchestration"
-]);
-function createDefaultRules() {
-  const rules = [];
-  for (const from of DEFAULT_LAYER_NAMES) {
-    for (const to of DEFAULT_LAYER_NAMES) {
-      if (from === to || DEFAULT_ALLOWED_FLOWS.has(`${from}->${to}`)) continue;
-      rules.push({ from, to, allowed: false });
-    }
-  }
-  return rules;
-}
-var DEFAULT_ARK_CONFIG_RULES = createDefaultRules();
-var stringArraySchema = {
-  type: "array",
-  items: { type: "string", minLength: 1 },
-  uniqueItems: true
-};
-var ARK_CONFIG_SCHEMA = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: ARK_CONFIG_SCHEMA_URL,
-  title: "ArkGate architecture contract",
-  description: "Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",
-  type: "object",
-  additionalProperties: false,
-  required: ["$schema", "schemaVersion", "include", "layers", "rules"],
-  properties: {
-    $schema: {
-      type: "string",
-      minLength: 1,
-      default: ARK_CONFIG_SCHEMA_URL,
-      description: "Editor-facing URL or local path for this JSON Schema."
-    },
-    schemaVersion: {
-      type: "string",
-      const: ARK_CONFIG_SCHEMA_VERSION,
-      default: ARK_CONFIG_SCHEMA_VERSION
-    },
-    name: { type: "string", minLength: 1 },
-    include: { ...stringArraySchema, minItems: 1, default: ["src"] },
-    exclude: { ...stringArraySchema, default: [] },
-    excludeGenerated: { type: "boolean", default: true },
-    frameworkOverlay: { type: "string", minLength: 1 },
-    layers: {
-      type: "array",
-      default: [],
-      items: { $ref: "#/$defs/layer" }
-    },
-    rules: {
-      type: "array",
-      default: DEFAULT_ARK_CONFIG_RULES,
-      items: { $ref: "#/$defs/rule" }
-    },
-    cyclePolicy: {
-      type: "string",
-      enum: ["strict", "soft", "framework-soft", "off"],
-      default: "strict"
-    },
-    dynamicImportAllowlist: { ...stringArraySchema, default: [] },
-    safety: {
-      $ref: "#/$defs/safety",
-      default: {
-        maxTsSuppressions: 0,
-        maxAnyCasts: 0,
-        allowInMemory: false,
-        allowDisabledPeerIsolation: false
-      }
-    }
-  },
-  $defs: {
-    layer: {
-      type: "object",
-      additionalProperties: false,
-      required: ["name", "patterns"],
-      properties: {
-        name: { type: "string", minLength: 1 },
-        patterns: { ...stringArraySchema, minItems: 1 },
-        exclude: stringArraySchema,
-        intentPrefixes: stringArraySchema,
-        description: { type: "string", minLength: 1 },
-        forbiddenGlobals: stringArraySchema,
-        mayImportInfrastructure: { type: "boolean" },
-        optional: { type: "boolean" }
-      }
-    },
-    rule: {
-      type: "object",
-      additionalProperties: false,
-      required: ["from", "to", "allowed"],
-      properties: {
-        from: { type: "string", minLength: 1 },
-        to: { type: "string", minLength: 1 },
-        allowed: { type: "boolean" },
-        message: { type: "string", minLength: 1 },
-        peerIsolation: { type: "boolean" },
-        sliceFolders: { ...stringArraySchema, minItems: 1 }
-      }
-    },
-    safety: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        maxTsSuppressions: { type: "integer", minimum: 0, default: 0 },
-        maxAnyCasts: { type: "integer", minimum: 0, default: 0 },
-        allowInMemory: { type: "boolean", default: false },
-        allowDisabledPeerIsolation: { type: "boolean", default: false }
-      }
-    }
-  }
-};
-var ArkConfigValidationError = class extends Error {
-  issues;
-  source;
-  constructor(source, issues) {
-    super(
-      `Invalid ArkGate config (${source}):
-${issues.map((issue) => `- ${issue.path}: ${issue.message}`).join("\n")}`
-    );
-    this.name = "ArkConfigValidationError";
-    this.source = source;
-    this.issues = issues;
-  }
-};
-function isObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function propertyPath(parent, key) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`;
-}
-function valueType(value) {
-  if (value === null) return "null";
-  if (Array.isArray(value)) return "array";
-  return typeof value;
-}
-function resolveSchemaRef(ref, root) {
-  const prefix = "#/$defs/";
-  if (!ref.startsWith(prefix)) return void 0;
-  return root.$defs[ref.slice(prefix.length)];
-}
-function validateNode(value, schema, path, root, issues) {
-  if (schema.$ref) {
-    const referenced = resolveSchemaRef(schema.$ref, root);
-    if (!referenced) {
-      issues.push({ path, message: `schema reference ${schema.$ref} cannot be resolved` });
-      return;
-    }
-    validateNode(value, referenced, path, root, issues);
-    return;
-  }
-  if (schema.const !== void 0 && !Object.is(value, schema.const)) {
-    issues.push({ path, message: `must equal ${JSON.stringify(schema.const)}` });
-    return;
-  }
-  if (schema.enum && !schema.enum.some((candidate) => Object.is(candidate, value))) {
-    issues.push({ path, message: `must be one of ${schema.enum.map(String).join(", ")}` });
-    return;
-  }
-  if (schema.type === "object") {
-    if (!isObject(value)) {
-      issues.push({ path, message: `must be an object; received ${valueType(value)}` });
-      return;
-    }
-    const properties = schema.properties ?? {};
-    for (const key of schema.required ?? []) {
-      if (value[key] === void 0) {
-        issues.push({ path: propertyPath(path, key), message: "is required" });
-      }
-    }
-    if (schema.additionalProperties === false) {
-      for (const key of Object.keys(value)) {
-        if (!(key in properties)) {
-          issues.push({ path: propertyPath(path, key), message: "unknown field" });
-        }
-      }
-    }
-    for (const [key, childSchema] of Object.entries(properties)) {
-      if (value[key] !== void 0) {
-        validateNode(value[key], childSchema, propertyPath(path, key), root, issues);
-      }
-    }
-    return;
-  }
-  if (schema.type === "array") {
-    if (!Array.isArray(value)) {
-      issues.push({ path, message: `must be an array; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minItems !== void 0 && value.length < schema.minItems) {
-      issues.push({ path, message: `must contain at least ${schema.minItems} item(s)` });
-    }
-    if (schema.uniqueItems) {
-      const serialized = value.map((entry) => JSON.stringify(entry));
-      if (new Set(serialized).size !== serialized.length) {
-        issues.push({ path, message: "must not contain duplicate items" });
-      }
-    }
-    if (schema.items) {
-      value.forEach(
-        (entry, index) => validateNode(entry, schema.items, `${path}[${index}]`, root, issues)
-      );
-    }
-    return;
-  }
-  if (schema.type === "string") {
-    if (typeof value !== "string") {
-      issues.push({ path, message: `must be a string; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minLength !== void 0 && value.length < schema.minLength) {
-      issues.push({ path, message: `must contain at least ${schema.minLength} character(s)` });
-    }
-    return;
-  }
-  if (schema.type === "boolean") {
-    if (typeof value !== "boolean") {
-      issues.push({ path, message: `must be a boolean; received ${valueType(value)}` });
-    }
-    return;
-  }
-  if (schema.type === "integer") {
-    if (!Number.isInteger(value)) {
-      issues.push({ path, message: `must be an integer; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minimum !== void 0 && value < schema.minimum) {
-      issues.push({ path, message: `must be at least ${schema.minimum}` });
-    }
-  }
-}
-function defaultedConfig(input) {
-  return {
-    ...input,
-    $schema: input.$schema === void 0 ? ARK_CONFIG_SCHEMA_URL : input.$schema,
-    schemaVersion: input.schemaVersion === void 0 ? ARK_CONFIG_SCHEMA_VERSION : input.schemaVersion,
-    include: input.include === void 0 ? ["src"] : input.include,
-    layers: input.layers === void 0 ? [] : input.layers,
-    rules: input.rules === void 0 ? DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule })) : input.rules
-  };
-}
-function migrateArkConfig(input, source = "ark.config.json") {
-  if (!isObject(input)) {
-    throw new ArkConfigValidationError(source, [
-      { path: "$", message: `must be an object; received ${valueType(input)}` }
-    ]);
-  }
-  const migratedFrom = input.schemaVersion === void 0 ? "unversioned" : null;
-  if (input.schemaVersion !== void 0 && input.schemaVersion !== ARK_CONFIG_SCHEMA_VERSION) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$.schemaVersion",
-        message: `unsupported version ${JSON.stringify(input.schemaVersion)}; expected ${ARK_CONFIG_SCHEMA_VERSION}`
-      }
-    ]);
-  }
-  return { candidate: defaultedConfig(input), migratedFrom };
-}
-function loadArkConfigContract(input, source = "ark.config.json") {
-  const { candidate, migratedFrom } = migrateArkConfig(input, source);
-  const issues = [];
-  validateNode(
-    candidate,
-    ARK_CONFIG_SCHEMA,
-    "$",
-    ARK_CONFIG_SCHEMA,
-    issues
-  );
-  if (issues.length > 0) throw new ArkConfigValidationError(source, issues);
-  return { config: candidate, migratedFrom };
-}
-function parseArkConfigJson(json, source = "ark.config.json") {
-  let input;
-  try {
-    input = JSON.parse(json);
-  } catch (error) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$",
-        message: `invalid JSON: ${error instanceof Error ? error.message : String(error)}`
-      }
-    ]);
-  }
-  return loadArkConfigContract(input, source);
-}
-function withArkConfigMetadata(config) {
-  const result = {
-    $schema: typeof config.$schema === "string" && config.$schema.length > 0 ? config.$schema : ARK_CONFIG_SCHEMA_URL,
-    schemaVersion: ARK_CONFIG_SCHEMA_VERSION
-  };
-  for (const [key, value] of Object.entries(config)) {
-    if (key !== "$schema" && key !== "schemaVersion") result[key] = value;
-  }
-  return result;
-}
-
-// src/kernel/layers/ArchitectureProfile.ts
-function normalizePrefix(prefix) {
-  return prefix.endsWith(".") ? prefix : `${prefix}.`;
-}
-function byLongestPrefix(a, b) {
-  const maxA = a.prefixes.length ? Math.max(...a.prefixes.map((p) => p.length)) : 0;
-  const maxB = b.prefixes.length ? Math.max(...b.prefixes.map((p) => p.length)) : 0;
-  return maxB - maxA;
-}
-function createArchitectureProfile(options) {
-  const layers = options.layers.map((layer) => ({
-    ...layer,
-    prefixes: layer.prefixes.map(normalizePrefix)
-  }));
-  const sortedLayers = [...layers].sort(byLongestPrefix);
-  const rules = [...options.rules ?? []];
-  return {
-    name: options.name,
-    layers,
-    rules,
-    resolveLayer(name) {
-      return layers.find((layer) => layer.match?.(name))?.name ?? sortedLayers.find(
-        (layer) => layer.prefixes.some((prefix) => name.startsWith(prefix))
-      )?.name;
-    }
-  };
-}
-function createArchitectureProfileFromArkConfig(config, options = {}) {
-  return createArchitectureProfile({
-    name: options.name ?? config.name ?? "ark.config.json",
-    layers: config.layers.map((layer, index) => ({
-      name: layer.name,
-      prefixes: layer.intentPrefixes ?? [],
-      description: layer.description,
-      order: index + 1
-    })),
-    rules: config.rules ?? []
-  });
-}
-var elevenLayerProfileLayers = [
-  {
-    name: "DomainModel",
-    prefixes: ["Domain"],
-    description: "Rich domain model, business rules, and domain events.",
-    order: 1
-  },
-  {
-    name: "ApplicationOrchestration",
-    prefixes: ["Application"],
-    description: "Use cases and command orchestration.",
-    order: 2
-  },
-  {
-    name: "PersistenceAdapters",
-    prefixes: ["Adapter.Persistence", "Adapter.Repository"],
-    description: "Database, repository, and storage adapters.",
-    order: 3
-  },
-  {
-    name: "IntegrationAdapters",
-    prefixes: ["Adapter.Integration", "Adapter.External"],
-    description: "External systems, APIs, and integration adapters.",
-    order: 4
-  },
-  {
-    name: "WorkflowSagaEngine",
-    prefixes: ["Workflow"],
-    description: "Sagas, workflows, and long-running processes.",
-    order: 5
-  },
-  {
-    name: "BackgroundJobsScheduling",
-    prefixes: ["Job"],
-    description: "Background jobs, scheduled work, and async processors.",
-    order: 6
-  },
-  {
-    name: "PresentationAdapters",
-    prefixes: ["Presentation", "Adapter.Presentation", "Adapter.Api"],
-    description: "API, UI, controller, and presentation adapters.",
-    order: 7
-  },
-  {
-    name: "ReportingReadModels",
-    prefixes: ["Reporting"],
-    description: "Read models, projections, and reporting surfaces.",
-    order: 8
-  },
-  {
-    name: "ExtensibilityMetadata",
-    prefixes: ["Metadata"],
-    description: "Metadata, extensions, and schema contracts.",
-    order: 9
-  },
-  {
-    name: "SecurityAuditObservability",
-    prefixes: ["Security", "Audit", "Observability"],
-    description: "Security, audit, and observability concerns.",
-    order: 10
-  },
-  {
-    name: "Kernel",
-    prefixes: ["Kernel"],
-    description: "Ark-owned governance and kernel signals.",
-    order: 11
-  }
-];
-var elevenLayerProfile = createArchitectureProfile({
-  name: "Ark 11-layer Hexagonal Event-Driven Profile",
-  layers: elevenLayerProfileLayers,
-  rules: DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule }))
-});
-var defaultElevenLayerDirectories = {
-  DomainModel: ["domain"],
-  ApplicationOrchestration: ["application", "app"],
-  PersistenceAdapters: [
-    "adapters/persistence",
-    "adapters/repository",
-    "repositories",
-    "infra/persistence"
-  ],
-  IntegrationAdapters: ["adapters/integration", "adapters/external", "integrations"],
-  WorkflowSagaEngine: ["workflows", "sagas"],
-  BackgroundJobsScheduling: ["jobs", "schedules"],
-  PresentationAdapters: ["presentation", "adapters/presentation", "adapters/api"],
-  ReportingReadModels: ["reporting", "read-models", "projections"],
-  ExtensibilityMetadata: ["metadata", "extensions"],
-  SecurityAuditObservability: ["security", "audit", "observability"],
-  Kernel: ["kernel"]
-};
-function createElevenLayerArkConfig(options = {}) {
-  const rootDir = options.rootDir ?? "src";
-  const optional = options.optionalLayers ?? true;
-  const prefix = rootDir === "." ? "" : `${rootDir}/`;
-  return withArkConfigMetadata({
-    include: options.include ?? [rootDir],
-    layers: elevenLayerProfile.layers.map((layer) => ({
-      name: layer.name,
-      patterns: (defaultElevenLayerDirectories[layer.name] ?? [layer.name]).map(
-        (directory) => `${prefix}${directory}/**`
-      ),
-      intentPrefixes: layer.prefixes,
-      optional
-    })),
-    rules: [...elevenLayerProfile.rules]
-  });
-}
-
-// src/kernel/metadata/MetadataRegistry.ts
-var MetadataRegistryImpl = class {
-  entities = /* @__PURE__ */ new Map();
-  entity(name, meta, options = {}) {
-    if (this.entities.has(name) && !options.allowOverwrite) {
-      throw new Error(`Entity metadata "${name}" is already registered.`);
-    }
-    const full = { name, fields: {}, ...meta };
-    this.entities.set(name, full);
-    return full;
-  }
-  getEntity(name) {
-    return this.entities.get(name);
-  }
-  listEntities() {
-    return Array.from(this.entities.values());
-  }
-  findEntitiesByIntent(intentName) {
-    return this.listEntities().filter(
-      (entity) => entity.emits?.includes(intentName) || entity.consumes?.includes(intentName)
-    );
-  }
-  validate() {
-    const issues = [];
-    for (const entity of this.entities.values()) {
-      if (!entity.name.trim()) {
-        issues.push({ entity: entity.name, message: "Entity name is required." });
-      }
-      for (const [fieldName, field] of Object.entries(entity.fields)) {
-        if (!fieldName.trim()) {
-          issues.push({ entity: entity.name, field: fieldName, message: "Field name is required." });
-        }
-        if (!field.type || typeof field.type !== "string") {
-          issues.push({
-            entity: entity.name,
-            field: fieldName,
-            message: "Field type must be a non-empty string."
-          });
-        }
-        if (field.relation && !this.entities.has(field.relation.entity)) {
-          issues.push({
-            entity: entity.name,
-            field: fieldName,
-            message: `Related entity "${field.relation.entity}" is not registered.`
-          });
-        }
-      }
-    }
-    return { ok: issues.length === 0, issues };
-  }
-  toJSON() {
-    return this.listEntities();
-  }
-};
-function createMetadataRegistry() {
-  return new MetadataRegistryImpl();
-}
-
-// src/kernel/adapters/ports.ts
-function definePort(name, options = {}) {
-  return {
-    name,
-    ownerLayer: options.ownerLayer,
-    intent: options.intent,
-    allowedAdapters: options.allowedAdapters ? [...options.allowedAdapters] : void 0
-  };
-}
-function createAdapter(port, impl, requiredKeysOrOptions, adapterOptions = {}) {
-  const options = Array.isArray(requiredKeysOrOptions) ? { ...adapterOptions, requiredKeys: requiredKeysOrOptions } : { ...requiredKeysOrOptions ?? {} };
-  const requiredKeys = options.requiredKeys;
-  if (requiredKeys && requiredKeys.length > 0) {
-    const missing = requiredKeys.filter((k) => !hasMember(impl, k));
-    if (missing.length > 0) {
-      throw new Error(
-        `Adapter for port "${port.name}" is missing required members: ${missing.join(", ")}`
-      );
-    }
-  }
-  const adapter = {
-    name: options.name,
-    layer: options.layer,
-    intent: options.intent,
-    port,
-    impl
-  };
-  const governance = checkAdapterGovernance(adapter);
-  if (!governance.ok) {
-    throw new Error(governance.issues.map((issue) => issue.message).join("\n"));
-  }
-  return adapter;
-}
-function checkContract(impl, requiredKeys = []) {
-  const missing = requiredKeys.filter((k) => !hasMember(impl, k));
-  return missing.length === 0 ? { ok: true } : { ok: false, missing };
-}
-function checkAdapterGovernance(adapter) {
-  const allowed = adapter.port.allowedAdapters ?? [];
-  if (allowed.length === 0) {
-    return { ok: true, issues: [] };
-  }
-  const adapterNames = [adapter.name, adapter.intent].filter(
-    (value) => typeof value === "string" && value.length > 0
-  );
-  const matched = adapterNames.some((name) => allowed.includes(name));
-  if (matched) {
-    return { ok: true, issues: [] };
-  }
-  return {
-    ok: false,
-    issues: [
-      {
-        ruleId: "ADAPTER_NOT_ALLOWED_FOR_PORT",
-        port: adapter.port.name,
-        adapter: adapter.name ?? adapter.intent,
-        message: `Adapter "${adapter.name ?? adapter.intent ?? "unknown"}" is not allowed for port "${adapter.port.name}".`
-      }
-    ]
-  };
-}
-function hasMember(value, key) {
-  return value != null && (typeof value === "object" || typeof value === "function") && key in value;
-}
-
-// src/kernel/ai-gate/AICodeGate.ts
-function violation(ruleId, message, extra) {
-  return { ruleId, code: ruleId, message, ...extra };
-}
-function lineOf(source, index) {
-  return source.slice(0, index).split("\n").length;
-}
-function extractQuotedStrings(source) {
-  const matches = [];
-  const re = /['"`]([A-Za-z][A-Za-z0-9_.]*)['"`]/g;
-  let m;
-  while ((m = re.exec(source)) !== null) {
-    matches.push({ value: m[1], index: m.index });
-  }
-  return matches;
-}
-function extractModuleSpecifiers(source) {
-  const matches = [];
-  const patterns = [
-    {
-      kind: "import",
-      re: /\bimport\s+(?:type\s+)?(?:[^'"]*?\s+from\s*)?['"]([^'"]+)['"]/g
-    },
-    {
-      kind: "export",
-      re: /\bexport\s+(?:type\s+)?[^'"]*?\s+from\s*['"]([^'"]+)['"]/g
-    },
-    {
-      kind: "dynamic-import",
-      re: /\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g
-    },
-    {
-      kind: "require",
-      re: /\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g
-    }
-  ];
-  for (const pattern of patterns) {
-    let match;
-    while ((match = pattern.re.exec(source)) !== null) {
-      const index = match.index + match[0].indexOf(match[1]);
-      const raw = match[0];
-      const typeOnly = pattern.kind === "import" && /\bimport\s+type\b/.test(raw) || pattern.kind === "export" && /\bexport\s+type\b/.test(raw);
-      matches.push({ value: match[1], index, kind: pattern.kind, typeOnly });
-    }
-  }
-  return matches.sort((a, b) => a.index - b.index);
-}
-function extractModuleSpecifiersAst(ts, source) {
-  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
-  const matches = [];
-  const push = (node, value, kind, typeOnly = false) => {
-    matches.push({
-      value,
-      index: node.getStart(sourceFile),
-      kind,
-      typeOnly
-    });
-  };
-  const visit = (node) => {
-    if (ts.isImportDeclaration(node) && ts.isStringLiteralLike(node.moduleSpecifier)) {
-      const clause = node.importClause;
-      const namedBindings = clause?.namedBindings;
-      const specifiersOnly = clause && !clause.name && namedBindings && ts.isNamedImports(namedBindings) && namedBindings.elements.length > 0 && namedBindings.elements.every((element) => element.isTypeOnly === true);
-      push(
-        node.moduleSpecifier,
-        node.moduleSpecifier.text,
-        "import",
-        Boolean(clause?.isTypeOnly || specifiersOnly)
-      );
-    } else if (ts.isExportDeclaration(node) && ts.isStringLiteralLike(node.moduleSpecifier)) {
-      const clause = node.exportClause;
-      const specifiersOnly = clause && ts.isNamedExports(clause) && clause.elements.length > 0 && clause.elements.every((element) => element.isTypeOnly === true);
-      push(
-        node.moduleSpecifier,
-        node.moduleSpecifier.text,
-        "export",
-        Boolean(node.isTypeOnly || specifiersOnly)
-      );
-    } else if (ts.isImportEqualsDeclaration(node) && ts.isExternalModuleReference(node.moduleReference)) {
-      const argument = node.moduleReference.expression;
-      const value = tsStringLiteralText(ts, argument);
-      if (value !== void 0) push(argument, value, "require");
-    } else if (ts.isCallExpression(node)) {
-      const argument = node.arguments[0];
-      const value = tsStringLiteralText(ts, argument);
-      if (value !== void 0 && node.expression.kind === ts.SyntaxKind.ImportKeyword) {
-        push(argument, value, "dynamic-import");
-      } else if (value !== void 0 && ts.isIdentifier(node.expression) && node.expression.text === "require") {
-        push(argument, value, "require");
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return matches.sort((a, b) => a.index - b.index);
-}
-function nonLiteralDynamicDependencies(ts, source) {
-  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
-  const uses = [];
-  const visit = (node) => {
-    if (ts.isCallExpression(node)) {
-      const dynamicImport = node.expression.kind === ts.SyntaxKind.ImportKeyword;
-      const directRequire = ts.isIdentifier(node.expression) && node.expression.text === "require";
-      const argument = node.arguments[0];
-      if ((dynamicImport || directRequire) && (!argument || !ts.isStringLiteralLike(argument))) {
-        uses.push({
-          line: sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1,
-          kind: directRequire ? "require" : "import"
-        });
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return uses;
-}
-function extractQuotedStringsAst(ts, source) {
-  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
-  const matches = [];
-  const visit = (node) => {
-    if (ts.isStringLiteralLike(node)) {
-      matches.push({ value: node.text, index: node.getStart(sourceFile) });
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return matches;
-}
-function looksLikeIntentName(s) {
-  return /^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(s);
-}
-function hasInfrastructureToken(specifier) {
-  const tokens = specifier.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean);
-  return [
-    "adapter",
-    "adapters",
-    "infra",
-    "infrastructure",
-    "persistence",
-    "repository",
-    "repositories",
-    "integration",
-    "database",
-    "db"
-  ].some((token) => tokens.includes(token));
-}
-function isKnownInfrastructurePackage(specifier) {
-  const normalized = specifier.toLowerCase();
-  return ["sequelize", "prisma", "typeorm", "mongoose", "knex"].some(
-    (name) => normalized === name || normalized.startsWith(`${name}/`)
-  );
-}
-function layerHasInfrastructureRole(layerName) {
-  const normalized = layerName.toLowerCase();
-  return [
-    "adapter",
-    "infra",
-    "persistence",
-    "repository",
-    "repositories",
-    "integration",
-    "database"
-  ].some((token) => normalized.includes(token));
-}
-function tsStringLiteralText(ts, node) {
-  return node && ts.isStringLiteralLike(node) ? node.text : void 0;
-}
-function tsPropertyName(ts, node) {
-  if (!node) return void 0;
-  if (ts.isIdentifier(node) || ts.isStringLiteralLike(node)) return node.text;
-  return void 0;
-}
-function tsObjectProperty(ts, node, name) {
-  if (!node || !ts.isObjectLiteralExpression(node)) return void 0;
-  return node.properties.find((property) => {
-    if (!ts.isPropertyAssignment(property) && !ts.isShorthandPropertyAssignment(property)) {
-      return false;
-    }
-    return tsPropertyName(ts, property.name) === name;
-  });
-}
-function tsObjectHasProperty(ts, node, name) {
-  return tsObjectProperty(ts, node, name) !== void 0;
-}
-function tsObjectPropertyValue(ts, node, name) {
-  const property = tsObjectProperty(ts, node, name);
-  return property && ts.isPropertyAssignment(property) ? property.initializer : void 0;
-}
-function tsObjectHasMetadataSource(ts, node) {
-  const metadata = tsObjectPropertyValue(ts, node, "metadata");
-  return tsObjectHasProperty(ts, metadata, "source");
-}
-function tsLooksLikeIntentCreatorExpression(ts, node) {
-  if (!node) return false;
-  if (ts.isIdentifier(node)) return /^[A-Z]/.test(node.text);
-  if (ts.isPropertyAccessExpression(node)) {
-    return tsLooksLikeIntentCreatorExpression(ts, node.name);
-  }
-  return false;
-}
-function tsIsPublishCall(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const expression = node.expression;
-  if (ts.isPropertyAccessExpression(expression)) {
-    return expression.name.text === "publish";
-  }
-  return ts.isIdentifier(expression) && expression.text === "publish";
-}
-function tsIsArkPublishCandidate(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const firstArg = node.arguments[0];
-  const rawIntent = tsStringLiteralText(ts, firstArg);
-  return rawIntent !== void 0 && looksLikeIntentName(rawIntent) || tsObjectHasProperty(ts, firstArg, "intent") || tsLooksLikeIntentCreatorExpression(ts, firstArg);
-}
-function tsPublishHasSource(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const [firstArg, secondArg, thirdArg] = node.arguments;
-  return tsObjectHasMetadataSource(ts, firstArg) || tsObjectHasProperty(ts, secondArg, "source") || tsObjectHasProperty(ts, thirdArg, "source");
-}
-function tsPublishSourceLiteral(ts, node) {
-  if (!ts.isCallExpression(node)) return void 0;
-  const [firstArg, secondArg, thirdArg] = node.arguments;
-  const rawMetadata = tsObjectPropertyValue(ts, firstArg, "metadata");
-  return tsStringLiteralText(ts, tsObjectPropertyValue(ts, rawMetadata, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, secondArg, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, thirdArg, "source"));
-}
-function singleFileTypeChecker(ts, sourceFile) {
-  const options = {
-    noLib: true,
-    noResolve: true,
-    target: ts.ScriptTarget.Latest
-  };
-  const host = ts.createCompilerHost(options, true);
-  host.getSourceFile = (fileName) => fileName === sourceFile.fileName ? sourceFile : void 0;
-  host.fileExists = (fileName) => fileName === sourceFile.fileName;
-  host.readFile = (fileName) => fileName === sourceFile.fileName ? sourceFile.text : void 0;
-  return ts.createProgram([sourceFile.fileName], options, host).getTypeChecker();
-}
-function propertyAccessPath(ts, node) {
-  const segments = [];
-  let current = node;
-  while (ts.isPropertyAccessExpression(current)) {
-    segments.unshift(current.name.text);
-    current = current.expression;
-  }
-  if (!ts.isIdentifier(current)) return void 0;
-  segments.unshift(current.text);
-  return { root: current, segments };
-}
-function isRuntimeIdentifierReference(ts, node) {
-  if (ts.isPropertyAccessExpression(node.parent) && node.parent.name === node) return false;
-  return ts.isExpressionNode(node) && !ts.isInTypeQuery(node) || ts.isShorthandPropertyAssignment(node.parent) && node.parent.name === node;
-}
-function hasLocalDeclaration(ts, checker, sourceFile, node) {
-  const shorthand = ts.isShorthandPropertyAssignment(node.parent) && node.parent.name === node;
-  const symbol = shorthand ? checker.getShorthandAssignmentValueSymbol(node.parent) : checker.getSymbolAtLocation(node);
-  return Boolean(
-    symbol?.declarations?.some((declaration) => declaration.getSourceFile() === sourceFile)
-  );
-}
-function analyzeForbiddenGlobals(ts, source, filePath, layer, forbidden) {
-  const entries = new Set(forbidden);
-  if (entries.size === 0) return [];
-  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
-  const checker = singleFileTypeChecker(ts, sourceFile);
-  const violations = [];
-  const flag = (name, node) => violations.push(
-    violation("FORBIDDEN_GLOBAL", `${layer} must not use the ambient global "${name}".`, {
-      line: sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1,
-      filePath,
-      target: name,
-      fromLayer: layer,
-      suggestion: "Inject the capability through a port (e.g. a Clock, IdGenerator, or HttpPort) instead of reaching for the ambient global."
-    })
-  );
-  const visit = (node) => {
-    const nestedPropertyAccess = ts.isPropertyAccessExpression(node) && ts.isPropertyAccessExpression(node.parent) && node.parent.expression === node;
-    if (ts.isPropertyAccessExpression(node) && !nestedPropertyAccess) {
-      const path = propertyAccessPath(ts, node);
-      if (path && !hasLocalDeclaration(ts, checker, sourceFile, path.root)) {
-        const explicitGlobalThis = path.segments[0] === "globalThis";
-        const normalized = explicitGlobalThis ? path.segments.slice(1) : path.segments;
-        let match;
-        for (let length = normalized.length; length >= (explicitGlobalThis ? 1 : 2); length -= 1) {
-          const candidate = normalized.slice(0, length).join(".");
-          if (entries.has(candidate)) {
-            match = candidate;
-            break;
-          }
-        }
-        if (match) flag(match, node);
-      }
-    } else if (ts.isIdentifier(node) && entries.has(node.text) && isRuntimeIdentifierReference(ts, node) && !hasLocalDeclaration(ts, checker, sourceFile, node)) {
-      flag(node.text, node);
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return violations;
-}
-function analyzePublishAst(ts, source, context, profile) {
-  const sourceFile = ts.createSourceFile(
-    "generated.ts",
-    source,
-    ts.ScriptTarget.Latest,
-    true
-  );
-  const gateContext = context;
-  const filePath = gateContext?.filePath;
-  const contextLayer = gateContext?.layer;
-  const violations = [];
-  const lineForNode = (node) => sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
-  const visit = (node) => {
-    if (tsIsPublishCall(ts, node)) {
-      const firstArg = node.arguments[0];
-      const rawIntent = tsStringLiteralText(ts, firstArg);
-      if (rawIntent && looksLikeIntentName(rawIntent) || tsObjectHasProperty(ts, firstArg, "intent")) {
-        violations.push(
-          violation("RAW_EVENT_PUBLISH", "Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.", {
-            line: lineForNode(node),
-            filePath
-          })
-        );
-      }
-      if (tsIsArkPublishCandidate(ts, node) && !tsPublishHasSource(ts, node)) {
-        violations.push(
-          violation("PUBLISH_MISSING_SOURCE", "Strict Ark publish calls must include metadata.source.", {
-            line: lineForNode(node),
-            filePath
-          })
-        );
-      }
-      const sourceIntent = tsPublishSourceLiteral(ts, node);
-      if (profile && contextLayer && sourceIntent && looksLikeIntentName(sourceIntent)) {
-        const sourceLayer = profile.resolveLayer(sourceIntent);
-        if (sourceLayer && sourceLayer !== contextLayer) {
-          violations.push(
-            violation(
-              "PUBLISH_SOURCE_LAYER_MISMATCH",
-              `Publish source "${sourceIntent}" resolves to ${sourceLayer}, but the target file is classified as ${contextLayer}.`,
-              {
-                line: lineForNode(node),
-                filePath,
-                target: sourceIntent,
-                fromLayer: contextLayer,
-                toLayer: sourceLayer
-              }
-            )
-          );
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return violations;
-}
-function createAICodeGate(options = {}) {
-  const intentNames = new Set(
-    (options.intents || []).map((i) => typeof i === "string" ? i : i.name)
-  );
-  const userForbidden = options.forbiddenPatterns || [];
-  const explicitInfraLayers = new Set(options.infrastructureLayers ?? []);
-  const enforceAllowlist = options.enforceIntentAllowlist ?? intentNames.size > 0;
-  return {
-    validate(source, context) {
-      const violations = [];
-      const gateContext = context;
-      const filePath = gateContext?.filePath;
-      const contextLayer = gateContext?.layer;
-      const moduleSpecifiers2 = options.typescript ? extractModuleSpecifiersAst(options.typescript, source) : extractModuleSpecifiers(source);
-      const quotedStrings = options.typescript ? extractQuotedStringsAst(options.typescript, source) : extractQuotedStrings(source);
-      if (options.typescript && !options.allowNonLiteralDynamicImport?.(filePath)) {
-        for (const dependency of nonLiteralDynamicDependencies(options.typescript, source)) {
-          const isRequire = dependency.kind === "require";
-          violations.push(
-            violation(
-              isRequire ? "DYNAMIC_REQUIRE_NOT_ALLOWLISTED" : "DYNAMIC_IMPORT_NOT_ALLOWLISTED",
-              `Non-literal ${isRequire ? "require call" : "dynamic import"} cannot be resolved statically; add the reviewed file to dynamicImportAllowlist.`,
-              { line: dependency.line, filePath }
-            )
-          );
-        }
-      }
-      const exemptFromInfraHeuristics = contextLayer !== void 0 && (explicitInfraLayers.has(contextLayer) || layerHasInfrastructureRole(contextLayer));
-      const infraLayerEscapeHatch = contextLayer !== void 0 ? ` If "${contextLayer}" is an infrastructure layer, mark it in ark.config.json with "mayImportInfrastructure": true (or name it with an infra token like Adapters/Persistence/Repository).` : "";
-      for (const pat of userForbidden) {
-        if (pat instanceof RegExp) {
-          pat.lastIndex = 0;
-          const match = pat.exec(source);
-          pat.lastIndex = 0;
-          if (match) {
-            violations.push(
-              violation("FORBIDDEN_PATTERN", `Forbidden pattern matched: ${pat}`, {
-                line: match.index === void 0 ? void 0 : lineOf(source, match.index),
-                filePath,
-                suggestion: "Remove infrastructure imports from domain/application layers." + infraLayerEscapeHatch
-              })
-            );
-          }
-        } else if (source.includes(pat)) {
-          violations.push(
-            violation("FORBIDDEN_SUBSTRING", `Forbidden substring: ${pat}`, {
-              line: lineOf(source, source.indexOf(pat)),
-              filePath
-            })
-          );
-        }
-      }
-      for (const specifier of moduleSpecifiers2) {
-        const targetHit = options.resolveImportTarget?.(specifier.value, filePath) ?? (options.resolveImportLayer ? { layer: options.resolveImportLayer(specifier.value, filePath) } : void 0);
-        const sourceHit = typeof filePath === "string" ? options.resolveImportTarget?.(filePath) ?? (options.resolveImportLayer ? { layer: contextLayer, relPath: void 0 } : void 0) : void 0;
-        const targetLayer = targetHit?.layer;
-        if (targetLayer && contextLayer) {
-          const blocked = findDeniedEdgeRule(
-            options.architectureProfile?.rules,
-            contextLayer,
-            targetLayer,
-            {
-              fromPath: sourceHit?.relPath,
-              toPath: targetHit?.relPath,
-              layers: options.architectureLayers
-            }
-          );
-          if (blocked) {
-            if (specifier.typeOnly && !blocked.peerIsolation) {
-              continue;
-            }
-            const peer = Boolean(blocked.peerIsolation);
-            violations.push(
-              violation(
-                "LAYER_IMPORT_VIOLATION",
-                blocked.message ?? (peer ? `Layer "${contextLayer}" must not import across slices into "${targetLayer}".` : `Layer "${contextLayer}" must not import "${targetLayer}".`),
-                {
-                  line: lineOf(source, specifier.index),
-                  source: specifier.value,
-                  target: specifier.value,
-                  filePath,
-                  fromLayer: contextLayer,
-                  toLayer: targetLayer,
-                  suggestion: peer ? "Extract shared code to a shared layer, or coordinate slices via events/ports \u2014 do not import across feature/context slices." : "Depend on a port/interface owned by an inner layer instead, or move this code to a layer allowed to make this import.",
-                  details: {
-                    importKind: specifier.kind,
-                    peerIsolation: peer,
-                    ...specifier.typeOnly ? { typeOnly: true } : {}
-                  }
-                }
-              )
-            );
-            continue;
-          }
-          if (targetLayer !== contextLayer) {
-            continue;
-          }
-        }
-        if (exemptFromInfraHeuristics || specifier.typeOnly) continue;
-        if (!hasInfrastructureToken(specifier.value) && !isKnownInfrastructurePackage(specifier.value)) {
-          continue;
-        }
-        violations.push(
-          violation(
-            "FORBIDDEN_IMPORT",
-            `Forbidden ${specifier.kind} target: "${specifier.value}".`,
-            {
-              line: lineOf(source, specifier.index),
-              source: specifier.value,
-              target: specifier.value,
-              filePath,
-              suggestion: "Route infrastructure access through an allowed adapter or port boundary." + infraLayerEscapeHatch,
-              details: { importKind: specifier.kind }
-            }
-          )
-        );
-      }
-      if (options.policies) {
-        for (const policy of options.policies) {
-          const res = policy.check({ source, context });
-          if (res !== true) {
-            if (Array.isArray(res)) {
-              for (const v of res) {
-                violations.push(
-                  violation("POLICY_VIOLATION", v.message, {
-                    filePath,
-                    suggestion: `Fix violation of policy "${policy.name}".`
-                  })
-                );
-              }
-            } else if (res === false) {
-              violations.push(
-                violation("POLICY_VIOLATION", `Policy ${policy.name} failed on generated code`)
-              );
-            } else {
-              violations.push(
-                violation("POLICY_VIOLATION", res.message)
-              );
-            }
-          }
-        }
-      }
-      if (enforceAllowlist && intentNames.size > 0) {
-        for (const literal of quotedStrings) {
-          if (looksLikeIntentName(literal.value) && !intentNames.has(literal.value)) {
-            violations.push(
-              violation(
-                "UNKNOWN_INTENT",
-                `Unknown intent reference: "${literal.value}"`,
-                {
-                  line: lineOf(source, literal.index),
-                  filePath,
-                  target: literal.value,
-                  suggestion: `Register intent "${literal.value}" via defineIntent() or remove the reference.`
-                }
-              )
-            );
-          }
-        }
-      }
-      if (options.architectureProfile && contextLayer) {
-        for (const literal of quotedStrings) {
-          if (!looksLikeIntentName(literal.value)) continue;
-          const targetLayer = options.architectureProfile.resolveLayer(literal.value);
-          if (!targetLayer) continue;
-          const blocked = findDeniedEdgeRule(
-            options.architectureProfile.rules,
-            contextLayer,
-            targetLayer
-          );
-          if (blocked) {
-            violations.push(
-              violation(
-                "LAYER_REFERENCE_VIOLATION",
-                blocked.message ?? `Layer "${contextLayer}" must not reference "${targetLayer}" through "${literal.value}".`,
-                {
-                  line: lineOf(source, literal.index),
-                  filePath,
-                  target: literal.value,
-                  fromLayer: contextLayer,
-                  toLayer: targetLayer,
-                  suggestion: "Route the dependency through an allowed intent, port, or event.",
-                  details: { rule: blocked }
-                }
-              )
-            );
-          }
-        }
-      }
-      if (options.extensions) {
-        for (const ext of options.extensions) {
-          try {
-            const extViolations = ext.analyze(source, context);
-            violations.push(...extViolations);
-          } catch (err) {
-            violations.push(
-              violation(
-                "EXTENSION_ERROR",
-                `Extension "${ext.name}" failed: ${err instanceof Error ? err.message : String(err)}`
-              )
-            );
-          }
-        }
-      }
-      if (options.typescript && contextLayer && options.forbiddenGlobals?.[contextLayer]?.length) {
-        try {
-          violations.push(
-            ...analyzeForbiddenGlobals(
-              options.typescript,
-              source,
-              filePath,
-              contextLayer,
-              options.forbiddenGlobals[contextLayer]
-            )
-          );
-        } catch (err) {
-          violations.push(
-            violation(
-              "AST_ANALYZER_ERROR",
-              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
-            )
-          );
-        }
-      }
-      if (options.typescript) {
-        try {
-          violations.push(
-            ...analyzePublishAst(
-              options.typescript,
-              source,
-              context,
-              options.architectureProfile
-            )
-          );
-        } catch (err) {
-          violations.push(
-            violation(
-              "AST_ANALYZER_ERROR",
-              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
-            )
-          );
-        }
-      }
-      return {
-        valid: violations.length === 0,
-        violations
-      };
-    }
-  };
-}
-
-// src/domain/analysis.ts
-var ANALYSIS_IR_SCHEMA_VERSION = "1.0";
-function deterministicHash(value) {
-  let hash = 2166136261;
-  for (let index = 0; index < value.length; index += 1) {
-    hash ^= value.charCodeAt(index);
-    hash = Math.imul(hash, 16777619);
-  }
-  return `fnv1a-${(hash >>> 0).toString(16).padStart(8, "0")}`;
-}
-function stableSerialize(value) {
-  if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return `[${value.map(stableSerialize).join(",")}]`;
-  const object = value;
-  return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableSerialize(object[key])}`).join(",")}}`;
-}
-
-// src/kernel/analysis.ts
-function loadContract(input, source) {
-  const loaded = typeof input === "string" ? parseArkConfigJson(input, source) : loadArkConfigContract(input, source);
-  return { ...loaded, policyHash: deterministicHash(stableSerialize(loaded.config)) };
-}
-function normalizePath(value) {
-  return value.replace(/\\/g, "/").replace(/^\.\//, "");
-}
-function isIdentifierCharacter(value) {
-  return value !== void 0 && /[A-Za-z0-9_$]/.test(value);
-}
-function skipWhitespace(source, index) {
-  while (index < source.length && /\s/.test(source[index])) index += 1;
-  return index;
-}
-function readString(source, index) {
-  const quote = source[index];
-  if (quote !== "'" && quote !== '"') return void 0;
-  const start = index;
-  let value = "";
-  for (index += 1; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === quote) {
-      return { value, offset: start, excerpt: source.slice(start, index + 1) };
-    }
-    if (current === "\\" && index + 1 < source.length) {
-      value += source[index + 1];
-      index += 1;
-    } else {
-      value += current;
-    }
-  }
-  return void 0;
-}
-function isWordAt(source, word, index) {
-  return source.startsWith(word, index) && !isIdentifierCharacter(source[index - 1]) && !isIdentifierCharacter(source[index + word.length]);
-}
-function specifierAfterImport(source, index) {
-  index = skipWhitespace(source, index + "import".length);
-  if (source[index] === "(") return readString(source, skipWhitespace(source, index + 1));
-  return specifierInStaticStatement(source, index, true);
-}
-function specifierAfterExport(source, index) {
-  return specifierInStaticStatement(source, index + "export".length, false);
-}
-function specifierInStaticStatement(source, index, allowDirectSpecifier) {
-  for (; index < source.length; index += 1) {
-    if (source[index] === ";") return void 0;
-    if (isWordAt(source, "from", index)) {
-      return readString(source, skipWhitespace(source, index + "from".length));
-    }
-    if (allowDirectSpecifier && (source[index] === "'" || source[index] === '"')) {
-      return readString(source, index);
-    }
-    if (index > 0 && (isWordAt(source, "import", index) || isWordAt(source, "export", index))) {
-      return void 0;
-    }
-  }
-  return void 0;
-}
-function moduleSpecifiers(source) {
-  const result = [];
-  for (let index = 0; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === "/" && source[index + 1] === "/") {
-      index = source.indexOf("\n", index + 2);
-      if (index < 0) break;
-      continue;
-    }
-    if (current === "/" && source[index + 1] === "*") {
-      const end = source.indexOf("*/", index + 2);
-      if (end < 0) break;
-      index = end + 1;
-      continue;
-    }
-    if (current === "'" || current === '"' || current === "`") {
-      const string = readString(source, index);
-      if (string) index = string.offset + string.excerpt.length - 1;
-      continue;
-    }
-    const specifier = isWordAt(source, "import", index) ? specifierAfterImport(source, index) : isWordAt(source, "export", index) ? specifierAfterExport(source, index) : void 0;
-    if (specifier) result.push(specifier);
-  }
-  return result;
-}
-function importEdges(file, files) {
-  const edges = [];
-  for (const moduleSpecifier of moduleSpecifiers(file.content)) {
-    const specifier = moduleSpecifier.value;
-    if (!specifier.startsWith(".")) continue;
-    const line = file.content.slice(0, moduleSpecifier.offset).split("\n").length;
-    const evidence = {
-      kind: "import",
-      file: file.path,
-      line,
-      excerpt: moduleSpecifier.excerpt
-    };
-    const target = resolveSpecifier(file.path, specifier, files);
-    edges.push({
-      from: file.path,
-      specifier,
-      to: target?.path ?? null,
-      resolution: target ? "resolved" : "unresolved",
-      fromLayer: file.layer,
-      toLayer: target?.layer ?? null,
-      evidence
-    });
-  }
-  return edges;
-}
-function resolveSpecifier(from, specifier, files) {
-  const segments = from.split("/");
-  segments.pop();
-  for (const segment of specifier.split("/")) {
-    if (segment === "." || segment === "") continue;
-    if (segment === "..") segments.pop();
-    else segments.push(segment);
-  }
-  const base = segments.join("/");
-  for (const candidate of [base, `${base}.ts`, `${base}.tsx`, `${base}.mts`, `${base}.cts`, `${base}/index.ts`, `${base}/index.tsx`]) {
-    const found = files.get(candidate);
-    if (found) return found;
-  }
-  return void 0;
-}
-function violationsFor(edges, config) {
-  const violations = [];
-  for (const edge of edges) {
-    if (!edge.to || !edge.fromLayer || !edge.toLayer) continue;
-    const rule = findDeniedEdgeRule(config.rules, edge.fromLayer, edge.toLayer, {
-      fromPath: edge.from,
-      toPath: edge.to,
-      layers: config.layers
-    });
-    if (!rule) continue;
-    violations.push({
-      ruleId: `layer-dependency:${rule.from}->${rule.to}`,
-      message: rule.message ?? `${rule.from} must not depend on ${rule.to}.`,
-      edge,
-      evidence: edge.evidence
-    });
-  }
-  return violations;
-}
-function analyzeProject(input) {
-  const files = input.files.map((inputFile) => {
-    const path = normalizePath(inputFile.path);
-    return {
-      path,
-      content: inputFile.content,
-      contentHash: deterministicHash(inputFile.content),
-      layer: layerForRelativePath(path, input.contract.config.layers) ?? null
-    };
-  }).sort((left, right) => left.path.localeCompare(right.path));
-  const fileByPath = new Map(files.map((file) => [file.path, file]));
-  const edges = files.flatMap((file) => importEdges(file, fileByPath));
-  const capabilityUses = [];
-  const violations = violationsFor(edges, input.contract.config);
-  return {
-    ir: {
-      schemaVersion: ANALYSIS_IR_SCHEMA_VERSION,
-      policyHash: input.contract.policyHash,
-      compilerOptionsHash: deterministicHash(stableSerialize(input.compilerOptions ?? {})),
-      files,
-      layers: input.contract.config.layers.map((layer) => layer.name),
-      edges,
-      capabilityUses,
-      violations
-    }
-  };
-}
-function analyzeChange(input) {
-  const files = new Map(input.files.map((file) => [normalizePath(file.path), file]));
-  for (const change of input.changes) {
-    const path = normalizePath(change.path);
-    if ("delete" in change && change.delete) files.delete(path);
-    else if ("content" in change) files.set(path, { path, content: change.content });
-  }
-  return analyzeProject({
-    contract: input.contract,
-    files: [...files.values()],
-    compilerOptions: input.compilerOptions
-  });
-}
-function explainViolation(violation2) {
-  const location = `${violation2.evidence.file}:${violation2.evidence.line}`;
-  if (!violation2.edge) return `${violation2.ruleId} at ${location}: ${violation2.message}`;
-  const target = violation2.edge.to ?? violation2.edge.specifier;
-  return `${violation2.ruleId} at ${location}: ${violation2.edge.from} imports ${target}. ${violation2.message}`;
-}
-
-// src/kernel/projections/ProjectionRegistry.ts
-var InMemoryReadModelStore = class {
-  states = /* @__PURE__ */ new Map();
-  load(name) {
-    return this.states.get(name);
-  }
-  save(name, state) {
-    this.states.set(name, state);
-  }
-  clear(name) {
-    if (name) {
-      this.states.delete(name);
-    } else {
-      this.states.clear();
-    }
-  }
-};
-function initialState(definition) {
-  return typeof definition.initialState === "function" ? definition.initialState() : definition.initialState;
-}
-var ProjectionRegistryImpl = class {
-  definitions = /* @__PURE__ */ new Map();
-  checkpoints = /* @__PURE__ */ new Map();
-  store;
-  auditTrail;
-  constructor(options = {}) {
-    this.store = options.store ?? new InMemoryReadModelStore();
-    this.auditTrail = options.auditTrail;
-  }
-  register(definition) {
-    if (this.definitions.has(definition.name)) {
-      throw new Error(`Projection "${definition.name}" is already registered.`);
-    }
-    this.definitions.set(definition.name, definition);
-    this.checkpoints.set(definition.name, {
-      projection: definition.name,
-      appliedCount: 0
-    });
-  }
-  list() {
-    return Array.from(this.definitions.values());
-  }
-  async apply(event) {
-    const applied = [];
-    for (const definition of this.definitions.values()) {
-      if (!definition.sourceIntents.includes(event.intent)) continue;
-      const current = await this.store.load(definition.name) ?? initialState(definition);
-      const next = await definition.project(event, current);
-      await this.store.save(definition.name, next);
-      const previous = this.checkpoints.get(definition.name);
-      this.checkpoints.set(definition.name, {
-        projection: definition.name,
-        appliedCount: (previous?.appliedCount ?? 0) + 1,
-        lastIntent: event.intent,
-        lastCorrelationId: event.metadata.correlationId,
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      });
-      await this.auditTrail?.record({
-        type: "projection.applied",
-        source: "Kernel.ProjectionRegistry",
-        intent: event.intent,
-        correlationId: event.metadata.correlationId,
-        causationId: event.metadata.causationId,
-        subject: definition.name,
-        details: { projection: definition.name }
-      });
-      applied.push(definition.name);
-    }
-    return applied;
-  }
-  async getState(name) {
-    return this.store.load(name);
-  }
-  getCheckpoint(name) {
-    return this.checkpoints.get(name);
-  }
-  getCheckpoints() {
-    return Array.from(this.checkpoints.values());
-  }
-  async clear() {
-    await this.store.clear();
-    for (const definition of this.definitions.values()) {
-      this.checkpoints.set(definition.name, {
-        projection: definition.name,
-        appliedCount: 0
-      });
-    }
-  }
-};
-function createProjectionRegistry(options) {
-  return new ProjectionRegistryImpl(options);
-}
-
-// src/kernel/manifest/constants.ts
-var MANIFEST_SCHEMA_VERSION = "1.0";
-
-// src/kernel/manifest/createArkManifest.ts
-function policyId(name) {
-  return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-}
-var ArkManifestImpl = class {
-  constructor(data) {
-    this.data = data;
-  }
-  data;
-  toJSON() {
-    return { ...this.data };
-  }
-};
-function createArkManifest(options = {}) {
-  const registry = options.registry;
-  const policyEngine = options.policyEngine;
-  const metadata = options.metadata;
-  const graph = options.graph;
-  const profile = options.profile;
-  const projections = options.projections;
-  const eventContracts = options.eventContracts;
-  const observability = options.observability;
-  const intents = registry ? registry.list().map((creator) => ({
-    name: creator.name,
-    dependencies: registry.getDependencies(creator.name),
-    productions: registry.getProductions(creator.name)
-  })) : [];
-  const relationships = registry ? registry.getAllRelationships() : [];
-  const policies = policyEngine ? policyEngine.getPolicies().map((p) => ({
-    id: policyId(p.name),
-    name: p.name,
-    severity: p.severity,
-    tags: p.tags ? [...p.tags] : void 0,
-    owner: p.owner,
-    version: p.version,
-    rationale: p.rationale,
-    enforcementMode: p.enforcementMode,
-    deprecated: p.deprecated,
-    replacedBy: p.replacedBy,
-    description: p.tags?.includes("layer") ? "Enforces clean-architecture layer dependency rules on declared relationships." : void 0
-  })) : [];
-  const entities = metadata ? metadata.toJSON() : [];
-  const graphData = graph ? graph.toJSON() : { nodes: [], edges: [] };
-  const entityIntents = entities.filter((e) => (e.emits?.length ?? 0) > 0 || (e.consumes?.length ?? 0) > 0).map((e) => ({
-    entity: e.name,
-    emits: e.emits,
-    consumes: e.consumes
-  }));
-  const projectionData = projections ? projections.list().map((projection) => ({
-    name: projection.name,
-    sourceIntents: projection.sourceIntents,
-    checkpoint: projections.getCheckpoint(projection.name)
-  })) : [];
-  const data = {
-    schemaVersion: MANIFEST_SCHEMA_VERSION,
-    version,
-    exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    intents,
-    relationships,
-    policies,
-    entities,
-    graph: graphData,
-    architecture: profile ? {
-      profile: profile.name,
-      layers: profile.layers,
-      rules: profile.rules
-    } : void 0,
-    projections: projectionData,
-    eventContracts: eventContracts?.list() ?? [],
-    observability: observability?.report(),
-    links: { entityIntents }
-  };
-  return new ArkManifestImpl(data);
-}
-
-// src/kernel/workflow/Saga.ts
-var workflowSequence = 0;
-function createWorkflowId(prefix) {
-  workflowSequence += 1;
-  return `${prefix}-${Date.now()}-${workflowSequence}`;
-}
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-function sleep(ms) {
-  return new Promise((resolve) => {
-    setTimeout(resolve, ms);
-  });
-}
-async function withTimeout(operation, timeoutMs, stepName) {
-  const controller = new AbortController();
-  if (timeoutMs === void 0) return operation(controller.signal);
-  let timeout;
-  const timeoutPromise = new Promise((_, reject) => {
-    timeout = setTimeout(() => {
-      const error = new Error(`Workflow step "${stepName}" timed out after ${timeoutMs}ms.`);
-      controller.abort(error);
-      reject(error);
-    }, timeoutMs);
-  });
-  try {
-    return await Promise.race([operation(controller.signal), timeoutPromise]);
-  } finally {
-    if (timeout) clearTimeout(timeout);
-  }
-}
-var InMemoryWorkflowStore = class {
-  snapshots = /* @__PURE__ */ new Map();
-  save(snapshot) {
-    this.snapshots.set(snapshot.id, { ...snapshot, context: { ...snapshot.context } });
-  }
-  get(id) {
-    const snapshot = this.snapshots.get(id);
-    return snapshot ? { ...snapshot, context: { ...snapshot.context } } : void 0;
-  }
-  list(workflowName) {
-    return Array.from(this.snapshots.values()).filter((snapshot) => !workflowName || snapshot.workflowName === workflowName).map((snapshot) => ({ ...snapshot, context: { ...snapshot.context } }));
-  }
-  clear() {
-    this.snapshots.clear();
-  }
-};
-var WorkflowEngineImpl = class {
-  constructor(bus, options = {}) {
-    this.bus = bus;
-    this.options = options;
-    this.store = options.store ?? new InMemoryWorkflowStore();
-  }
-  bus;
-  options;
-  definitions = /* @__PURE__ */ new Map();
-  store;
-  register(definition) {
-    if (this.definitions.has(definition.name)) {
-      throw new Error(`Workflow "${definition.name}" is already registered.`);
-    }
-    const names = /* @__PURE__ */ new Set();
-    for (const step of definition.steps) {
-      if (names.has(step.name)) {
-        throw new Error(
-          `Workflow "${definition.name}" has duplicate step name "${step.name}".`
-        );
-      }
-      names.add(step.name);
-    }
-    this.definitions.set(definition.name, definition);
-    if (definition.startOn) {
-      const trigger = definition.startOn;
-      this.bus.subscribe(trigger.intent, async (event) => {
-        await this.start(definition.name, trigger.mapEventToPayload(event));
-      });
-    }
-  }
-  async start(workflowName, initialPayload, options = {}) {
-    const definition = this.definitions.get(workflowName);
-    if (!definition) {
-      throw new Error(`Workflow "${workflowName}" is not registered.`);
-    }
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const snapshot = {
-      id: options.id ?? createWorkflowId(workflowName),
-      workflowName,
-      status: "running",
-      context: { ...initialPayload },
-      completedSteps: [],
-      attempts: {},
-      startedAt: now,
-      updatedAt: now
-    };
-    await this.store.save(snapshot);
-    await this.audit("workflow.started", snapshot, { workflowName });
-    try {
-      for (const step of definition.steps) {
-        await this.runStep(snapshot, step);
-      }
-      snapshot.status = "completed";
-      snapshot.currentStep = void 0;
-      snapshot.completedAt = (/* @__PURE__ */ new Date()).toISOString();
-      snapshot.updatedAt = snapshot.completedAt;
-      await this.store.save(snapshot);
-      await this.audit("workflow.completed", snapshot, { workflowName });
-      return { ...snapshot, context: { ...snapshot.context } };
-    } catch (err) {
-      await this.compensate(snapshot, definition.steps, err);
-      snapshot.status = "failed";
-      snapshot.currentStep = void 0;
-      snapshot.error = errorMessage(err);
-      snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-      await this.store.save(snapshot);
-      await this.audit("workflow.failed", snapshot, {
-        workflowName,
-        error: snapshot.error,
-        failedStep: snapshot.failedStep
-      });
-      throw err;
-    }
-  }
-  async get(id) {
-    return this.store.get(id);
-  }
-  async list(workflowName) {
-    return this.store.list(workflowName);
-  }
-  async runStep(snapshot, step) {
-    const retry = step.retry ?? this.options.defaultRetry ?? { attempts: 1 };
-    const maxAttempts = Math.max(1, retry.attempts);
-    snapshot.currentStep = step.name;
-    snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-    await this.store.save(snapshot);
-    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
-      snapshot.attempts[step.name] = attempt;
-      await this.store.save(snapshot);
-      let result;
-      try {
-        result = await withTimeout(
-          (signal) => Promise.resolve(step.execute(snapshot.context, this.bus, signal)),
-          step.timeoutMs,
-          step.name
-        );
-      } catch (err) {
-        if (attempt < maxAttempts) {
-          if (retry.delayMs) await sleep(retry.delayMs);
-          continue;
-        }
-        snapshot.failedStep = step.name;
-        snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-        await this.store.save(snapshot);
-        await this.audit("workflow.step.failed", snapshot, {
-          step: step.name,
-          attempt,
-          error: errorMessage(err)
-        });
-        throw err;
-      }
-      if (result) Object.assign(snapshot.context, result);
-      snapshot.completedSteps.push(step.name);
-      snapshot.currentStep = void 0;
-      snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-      await this.store.save(snapshot);
-      await this.audit("workflow.step.completed", snapshot, {
-        step: step.name,
-        attempt
-      });
-      return;
-    }
-    throw new Error(`Workflow step "${step.name}" did not complete.`);
-  }
-  async compensate(snapshot, steps, error) {
-    snapshot.status = "compensating";
-    snapshot.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-    await this.store.save(snapshot);
-    const completed = steps.filter(
-      (step) => snapshot.completedSteps.includes(step.name)
-    );
-    for (let index = completed.length - 1; index >= 0; index -= 1) {
-      const step = completed[index];
-      if (!step.compensate) continue;
-      try {
-        await Promise.resolve(step.compensate(snapshot.context, this.bus, error));
-        await this.audit("workflow.compensation.completed", snapshot, {
-          step: step.name
-        });
-      } catch (compensationError) {
-        await this.audit("workflow.step.failed", snapshot, {
-          step: step.name,
-          compensation: true,
-          error: errorMessage(compensationError)
-        });
-      }
-    }
-  }
-  async audit(type, snapshot, details) {
-    await this.options.auditTrail?.record({
-      type,
-      source: "Kernel.WorkflowEngine",
-      subject: snapshot.id,
-      details
-    });
-  }
-};
-function createWorkflowEngine(bus, options) {
-  return new WorkflowEngineImpl(bus, options);
-}
-function createSaga(def, bus, options = {}) {
-  const engine = createWorkflowEngine(bus, options);
-  const definition = { name: def.name, steps: def.steps };
-  engine.register(definition);
-  const sagaId = options.id ?? createWorkflowId(def.name);
-  let status = "idle";
-  let completedStepNames = [];
-  return {
-    id: sagaId,
-    definition: def,
-    get status() {
-      return status;
-    },
-    get completedSteps() {
-      return [...completedStepNames];
-    },
-    async run(initialPayload) {
-      status = "running";
-      completedStepNames = [];
-      try {
-        const snapshot = await engine.start(def.name, initialPayload, { id: sagaId });
-        status = snapshot.status === "waiting" ? "idle" : snapshot.status;
-        completedStepNames = [...snapshot.completedSteps];
-      } catch (err) {
-        const snapshot = await engine.get(sagaId);
-        status = snapshot?.status === "waiting" ? "idle" : snapshot?.status ?? "failed";
-        completedStepNames = snapshot?.completedSteps ?? [];
-        throw err;
-      }
-    }
-  };
-}
-
-// src/kernel/runtime/createArkKernel.ts
-var DEFAULT_MAX_HISTORY_SIZE = 1e3;
-var kernelSequence = 0;
-function nextKernelInstanceId() {
-  kernelSequence += 1;
-  return `ark-kernel-${Date.now()}-${kernelSequence}`;
-}
-function createArkKernel(options = {}) {
-  const strict = options.strict ?? true;
-  const instanceId = options.instanceId ?? nextKernelInstanceId();
-  const profile = options.profile ?? elevenLayerProfile;
-  const maxHistorySize = options.maxHistorySize ?? DEFAULT_MAX_HISTORY_SIZE;
-  const registry = createIntentRegistry();
-  const graph = createDependencyGraph();
-  const metadata = options.metadata ?? createMetadataRegistry();
-  const auditTrail = options.auditTrail ?? createAuditTrail({ maxRecords: maxHistorySize });
-  const eventContracts = options.eventContracts ?? createEventContractRegistry();
-  const outbox = options.outbox ?? new InMemoryOutboxStore();
-  const projections = options.projections ?? createProjectionRegistry({ auditTrail });
-  const policyEngine = new PolicyEngine([
-    defineArchitectureProfilePolicy(profile),
-    ...options.policies ?? []
-  ]);
-  const syncGraph = () => {
-    syncRegistryToGraph(registry, graph, { requireRegisteredTargets: true });
-  };
-  const eventBus = createEventBus({
-    intentRegistry: registry,
-    dependencyGraph: graph,
-    policyEngine,
-    strictRegistry: true,
-    validateIntentNaming: true,
-    auditTrail,
-    eventContracts,
-    strictEventContracts: options.strictEventContracts ?? strict,
-    requireKnownSource: options.requireKnownSource ?? true,
-    architectureProfile: profile,
-    enforceObservedLayerFlow: options.enforceObservedLayerFlow ?? (strict ? "hard" : "off"),
-    outbox,
-    instanceId,
-    maxHistorySize,
-    onPublish: options.autoApplyProjections === false ? void 0 : async (event) => {
-      await projections.apply(event);
-    }
-  });
-  const workflowEngine = createWorkflowEngine(eventBus, { auditTrail });
-  const observability = createObservabilityReporter({
-    registry,
-    eventBus,
-    graph
-  });
-  return {
-    instanceId,
-    profile,
-    registry,
-    graph,
-    metadata,
-    auditTrail,
-    eventContracts,
-    outbox,
-    projections,
-    policyEngine,
-    eventBus,
-    workflowEngine,
-    observability,
-    publisher(source) {
-      return eventBus.createPublisher(source);
-    },
-    syncGraph,
-    manifest() {
-      syncGraph();
-      return createArkManifest({
-        registry,
-        policyEngine,
-        metadata,
-        graph,
-        profile,
-        projections,
-        eventContracts,
-        observability
-      });
-    }
-  };
-}
-function createStrictArkKernel(options = {}) {
-  return createArkKernel({
-    ...options,
-    strict: true,
-    strictEventContracts: options.strictEventContracts ?? true,
-    requireKnownSource: options.requireKnownSource ?? true,
-    enforceObservedLayerFlow: options.enforceObservedLayerFlow ?? "hard"
-  });
-}
-function createOptionsFromConfig(config, options = {}) {
-  const { profileName, ...kernelOptions } = options;
-  return {
-    ...kernelOptions,
-    profile: createArchitectureProfileFromArkConfig(config, { name: profileName })
-  };
-}
-function createArkKernelFromConfig(config, options = {}) {
-  return createArkKernel(createOptionsFromConfig(config, options));
-}
-function createStrictArkKernelFromConfig(config, options = {}) {
-  return createStrictArkKernel(createOptionsFromConfig(config, options));
-}
-function createLenientArkKernelFromConfig(config, options = {}) {
-  return createLenientArkKernel(createOptionsFromConfig(config, options));
-}
-function createLenientArkKernel(options = {}) {
-  return createArkKernel({
-    ...options,
-    strict: false,
-    strictEventContracts: options.strictEventContracts ?? false,
-    enforceObservedLayerFlow: options.enforceObservedLayerFlow ?? "off"
-  });
-}
-export {
-  ANALYSIS_IR_SCHEMA_VERSION,
-  DEFAULT_MAX_HISTORY_SIZE,
-  EventContractRegistryImpl,
-  EventContractViolationError,
-  InMemoryAuditStore,
-  InMemoryOutboxStore,
-  InMemoryReadModelStore,
-  InMemoryWorkflowStore,
-  IntentRegistry,
-  InvalidIntentNameError,
-  LayerPolicyContextError,
-  MANIFEST_SCHEMA_VERSION,
-  ObservedLayerFlowViolationError,
-  PolicyEngine,
-  PolicyViolationError,
-  SourceMetadataOverrideError,
-  UnknownEventSourceError,
-  UnregisteredIntentError,
-  analyzeChange,
-  analyzeProject,
-  architecturalPolicies,
-  buildPublishPolicyContext,
-  checkAdapterGovernance,
-  checkContract,
-  createAICodeGate,
-  createAdapter,
-  createArchitectureProfile,
-  createArchitectureProfileFromArkConfig,
-  createArkKernel,
-  createArkKernelFromConfig,
-  createArkManifest,
-  createArkTestHarness,
-  createAuditTrail,
-  createDependencyGraph,
-  createElevenLayerArkConfig,
-  createEventBus,
-  createEventContractRegistry,
-  createIntentRegistry,
-  createLenientArkKernel,
-  createLenientArkKernelFromConfig,
-  createMetadataRegistry,
-  createObservabilityReporter,
-  createProjectionRegistry,
-  createSaga,
-  createStrictArkKernel,
-  createStrictArkKernelFromConfig,
-  createWorkflowEngine,
-  defaultIntentRegistry,
-  defineArchitectureProfilePolicy,
-  defineIntent,
-  defineLayerPolicy,
-  definePolicy,
-  definePort,
-  definePublishPolicy,
-  deterministicHash,
-  elevenLayerProfile,
-  explainViolation,
-  isLayerPolicy,
-  loadContract,
-  stableSerialize,
-  syncRegistryToGraph,
-  validateIntentName,
-  version
-};
-//# sourceMappingURL=index.js.map