arkgate 2.6.1 → 2.8.0

package/CHANGELOG.md

@@ -2,6 +2,68 @@
 
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here.
 
+## 2.8.0 — 2026-07-09
+
+Co-pilot quality release (roadmap **R5–R7**): labeled eval corpus, fourth mechanical-safe kind,
+and Codex multi-project MCP without silent primary overwrite. **No intentional CLI flag or JSON
+shape breaks** for the gate/co-pilot path.
+
+### Added
+
+- **R5 — labeled eval corpus:** 16 cases under `eval/cases/` (themes + labels).
+  `npm run eval:corpus` / `evalCorpus.test.ts` gate without a live agent.
+- **R6 — `import-type-of-type-exports`:** named type-only exports from mixed modules →
+  `import type` / `export type`. Dual-space names and targets with top-level side effects stay
+  **judgment**. Scan flags `namedBindingsTypeOnly` (+ `hasTopLevelSideEffects`).
+- **R7 — Codex multi-project MCP DX:** no silent primary steal; scoped
+  `[mcp_servers.ark_<slug>_<hash>]`; doctor gap `codex-home-multi-project`. Codex home logic in
+  `bin/lib/codex-home.mjs`.
+
+### Changed
+
+- Scan cache schema **v6** (typeOnlyExportNames, namedBindings, hasTopLevelSideEffects;
+  invalidates v5 after non-export side-effect honesty fix).
+- Classifier: single early judgment for `require` / `dynamic-import` on layer edges.
+- R6 honesty: impure value-export initializers (`export const db = connect()`) count as
+  top-level side effects — named type imports of those modules stay **judgment**.
+- R6 honesty: non-exported impure top-level initializers (`const boot = setup()`) and
+  non-exported class static field calls also count as side effects (same skip-on-import-type risk).
+- Codex home: single `upsertCodexMcpTable` path for primary and secondary MCP tables.
+
+## 2.7.0 — 2026-07-09
+
+Maintainability release (roadmap **R1–R4**): single-source layer matching, package surface policy,
+`ark-check` orchestration split, and typed pure CLI helpers. **No intentional CLI flag or JSON
+shape breaks** for the gate/co-pilot path.
+
+### Added
+
+- **`arkgate/runtime`** package subpath (ESM/CJS + types) — preferred entry for the optional
+  runtime kernel. Root `arkgate` still re-exports kernel symbols for this major (compat).
+- **`docs/package-surface.md`** — stable surfaces (CLI JSON, MCP, `ark.config`) vs opt-in runtime.
+- **Generated pure CLI helpers:** `bin/lib/remediation.mjs`, `bin/lib/baseline-key.mjs` from
+  Domain TS (`npm run generate:cli-pure` / `check:cli-pure`).
+- **`ark-check` scan pipeline modules** under `bin/lib/`: `scan-files`, `config-warnings`,
+  `ts-resolve`, `ast-scan`, `graph-cycles`, `architecture-scan`.
+
+### Changed
+
+- **R1 — layer globs SoT:** canonical `src/domain/layerMatch.ts` → generated
+  `bin/ark-layer-match.mjs`; `npm run check:layer-match` drift guard in CI.
+  `normalizeGlobSeparators` keeps Windows path seps without eating glob escapes.
+- **R2 — package surface = product wedge:** README / agent-guide / migrate / production-hardening
+  recommend `arkgate/runtime` for kernel usage.
+- **R3 — `ark-check` entry slim-down:** entry is orchestration-only (~2.4k → ~1.4k LOC);
+  `runArchitectureScan` owns the check pipeline. Flags and JSON shapes unchanged.
+- **R4 — typed pure core:** `classifyRemediation`, `enrichViolationWithFixClass`, and
+  `baselineKey` live in `src/domain/*` with generated CLI load paths; unit tests import Domain
+  sources without spawning the CLI.
+
+### Docs / CI
+
+- CI steps for layer-match and cli-pure drift guards.
+- CONTRIBUTING / AGENTS: regenerate commands after editing pure Domain algorithms.
+
 ## 2.6.1 — 2026-07-09
 
 Field-test release: Next/monorepo honesty (deer-flow-style hosts), simplified **one-flow** UX for

package/README.md

@@ -218,13 +218,17 @@ CI (example):
 
 ## Optional: runtime kernel
 
-Gates need **no app code changes**. If you also want runtime intent/event contracts:
+Gates need **no app code changes**. If you also want runtime intent/event contracts,
+use the **opt-in** subpath (preferred):
 
 ```ts
-import { createStrictArkKernelFromConfig } from 'arkgate';
-// see docs/production-hardening.md and package exports
+import { createStrictArkKernelFromConfig } from 'arkgate/runtime';
+// see docs/production-hardening.md and docs/package-surface.md
 ```
 
+Root `import { … } from 'arkgate'` still re-exports kernel symbols for compatibility
+in this major; prefer `arkgate/runtime` for new code.
+
 NestJS: `arkgate/nestjs` (optional peer `@nestjs/common`).
 
 ---
@@ -234,6 +238,7 @@ NestJS: `arkgate/nestjs` (optional peer `@nestjs/common`).
 | Audience | Link |
 |----------|------|
 | New builders (plain language) | [docs/enthusiast/](docs/enthusiast/README.md) |
+| **Package surface (stable vs opt-in)** | [docs/package-surface.md](docs/package-surface.md) |
 | Wire Claude / Cursor / Codex / Grok + **ESLint (CI-parity)** | [docs/ai-gates.md](docs/ai-gates.md) |
 | **TypeScript 5 / 6 / 7 support** | [docs/typescript-support.md](docs/typescript-support.md) |
 | Migrate from `ark-runtime-kernel` | [docs/migrate-from-ark-runtime-kernel.md](docs/migrate-from-ark-runtime-kernel.md) |