arkgate 2.8.3 → 2.9.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as IntentCreator, P as PolicyViolation, c as PolicySeverity, d as PolicyEnforcementMode, e as Policy, f as CreateArchitectureProfileOptions, g as ArchitectureProfile, h as ArkCheckConfig, i as CreateArchitectureProfileFromArkConfigOptions, j as CreateElevenLayerArkConfigOptions, k as DependencyGraph, G as GraphEdge, l as IntentRelationship, m as AuditStore, n as AuditRecord, o as AuditQuery, p as CreateAuditTrailOptions, q as AuditTrail, E as EventContractRegistry, r as EventContract, s as DomainEvent, t as EventContractValidationResult, O as OutboxStore, u as OutboxRecord, v as OutboxStatus, w as EventBusOptions, x as EventBus, y as CreateObservabilityReporterOptions, z as ObservabilityReporter, M as MetadataRegistry, R as ReadModelStore, B as CreateProjectionRegistryOptions, F as ProjectionRegistry, H as PolicyEngine, J as ArkManifest, W as WorkflowStore, S as SagaContext, K as WorkflowSnapshot, L as SagaDefinition, N as CreateWorkflowEngineOptions, Q as SagaInstance, T as WorkflowEngine, C as CreateArkKernelOptions, A as ArkKernel, U as ArkKernelConfig, V as CreateArkKernelFromConfigOptions, X as TraceRecordType, Y as TraceRecord, Z as ObservabilityDriftReport } from './types-CSJhEOk2.cjs';
-export { _ as ArchitectureLayer, $ as ArchitectureLayerConfig, a0 as ArchitectureRule, a1 as ArkManifestArchitecture, a2 as ArkManifestData, a3 as ArkManifestEntityLink, a4 as ArkManifestGraph, a5 as ArkManifestIntent, a6 as ArkManifestPolicy, a7 as ArkManifestProjection, a8 as AuditRecordInput, a9 as AuditRecordType, aa as CorrelationId, ab as EntityMeta, ac as EventContractIssue, ad as EventHandler, ae as EventInterceptionInfo, af as EventInterceptor, ag as EventInterceptorContext, ah as EventMetadata, ai as EventPayloadPatch, aj as EventPayloadSchema, ak as EventPublisher, al as EventSchemaField, am as EventSchemaFieldType, an as FieldMeta, ao as GraphNode, ap as IntentRelationshipKind, aq as ObservabilityFlow, ar as ObservedLayerFlowMode, as as PolicyEvaluationResult, at as ProjectionCheckpoint, au as ProjectionDefinition, av as PublishedEventRecord, aw as RetryPolicy, ax as SagaStatus, ay as SagaStep, az as TraceSink, aA as Unsubscribe, aB as WorkflowDefinition, aC as WorkflowStatus, aD as WorkflowStep } from './types-CSJhEOk2.cjs';
+import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as IntentCreator, P as PolicyViolation, c as PolicySeverity, d as PolicyEnforcementMode, e as Policy, f as CreateArchitectureProfileOptions, g as ArchitectureProfile, h as ArkCheckConfig, i as CreateArchitectureProfileFromArkConfigOptions, j as CreateElevenLayerArkConfigOptions, k as DependencyGraph, G as GraphEdge, l as IntentRelationship, m as AuditStore, n as AuditRecord, o as AuditQuery, p as CreateAuditTrailOptions, q as AuditTrail, E as EventContractRegistry, r as EventContract, s as DomainEvent, t as EventContractValidationResult, O as OutboxStore, u as OutboxRecord, v as OutboxStatus, w as EventBusOptions, x as EventBus, y as CreateObservabilityReporterOptions, z as ObservabilityReporter, M as MetadataRegistry, R as ReadModelStore, B as CreateProjectionRegistryOptions, F as ProjectionRegistry, H as PolicyEngine, J as ArkManifest, W as WorkflowStore, S as SagaContext, K as WorkflowSnapshot, L as SagaDefinition, N as CreateWorkflowEngineOptions, Q as SagaInstance, T as WorkflowEngine, C as CreateArkKernelOptions, A as ArkKernel, U as ArkKernelConfig, V as CreateArkKernelFromConfigOptions, X as TraceRecordType, Y as TraceRecord, Z as ObservabilityDriftReport } from './types-D6Q8WHes.cjs';
+export { _ as ArchitectureLayer, $ as ArchitectureLayerConfig, a0 as ArchitectureRule, a1 as ArkManifestArchitecture, a2 as ArkManifestData, a3 as ArkManifestEntityLink, a4 as ArkManifestGraph, a5 as ArkManifestIntent, a6 as ArkManifestPolicy, a7 as ArkManifestProjection, a8 as AuditRecordInput, a9 as AuditRecordType, aa as CorrelationId, ab as EntityMeta, ac as EventContractIssue, ad as EventHandler, ae as EventInterceptionInfo, af as EventInterceptor, ag as EventInterceptorContext, ah as EventMetadata, ai as EventPayloadPatch, aj as EventPayloadSchema, ak as EventPublisher, al as EventSchemaField, am as EventSchemaFieldType, an as FieldMeta, ao as GraphNode, ap as IntentRelationshipKind, aq as ObservabilityFlow, ar as ObservedLayerFlowMode, as as PolicyEvaluationResult, at as ProjectionCheckpoint, au as ProjectionDefinition, av as PublishedEventRecord, aw as RetryPolicy, ax as SagaStatus, ay as SagaStep, az as TraceSink, aA as Unsubscribe, aB as WorkflowDefinition, aC as WorkflowStatus, aD as WorkflowStep } from './types-D6Q8WHes.cjs';
 
 /** ArkGate library version — single source of truth. */
-declare const version = "2.8.3";
+declare const version = "2.9.0";
 
 /**
  * defineIntent
@@ -583,14 +583,26 @@ interface AICodeGateOptions<Context = AICodeGateContext> {
      */
     infrastructureLayers?: string[];
     /**
-     * Resolve an import specifier to the architecture layer of its TARGET file, if that target
-     * is governed by a declared layer (else undefined). When provided, the gate lets the
-     * layer RULES decide a governed edge instead of the infrastructure path-heuristic — so the
-     * write gate honors `ark.config.json` exactly like `ark-check`, and the heuristic only
-     * applies to ungoverned targets (external packages, paths no layer covers). The caller
-     * (ark-mcp) supplies this using the config's layer globs + tsconfig path aliases.
+     * Preferred single resolve step: import specifier or absolute source file →
+     * `{ layer, relPath }` for contract + peerIsolation. Prefer this over the
+     * legacy layer-only callback.
+     */
+    resolveImportTarget?: (specifierOrFilePath: string, fromFilePath?: string) => {
+        layer?: string;
+        relPath?: string;
+    } | undefined;
+    /**
+     * @deprecated Prefer resolveImportTarget. Layer-only resolve for governed imports.
      */
     resolveImportLayer?: (specifier: string, fromFilePath?: string) => string | undefined;
+    /**
+     * Layer configs (patterns) used to infer sliceFolders when a peerIsolation rule
+     * omits an explicit list.
+     */
+    architectureLayers?: Array<{
+        name: string;
+        patterns?: string[];
+    }>;
 }
 declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
 

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as IntentCreator, P as PolicyViolation, c as PolicySeverity, d as PolicyEnforcementMode, e as Policy, f as CreateArchitectureProfileOptions, g as ArchitectureProfile, h as ArkCheckConfig, i as CreateArchitectureProfileFromArkConfigOptions, j as CreateElevenLayerArkConfigOptions, k as DependencyGraph, G as GraphEdge, l as IntentRelationship, m as AuditStore, n as AuditRecord, o as AuditQuery, p as CreateAuditTrailOptions, q as AuditTrail, E as EventContractRegistry, r as EventContract, s as DomainEvent, t as EventContractValidationResult, O as OutboxStore, u as OutboxRecord, v as OutboxStatus, w as EventBusOptions, x as EventBus, y as CreateObservabilityReporterOptions, z as ObservabilityReporter, M as MetadataRegistry, R as ReadModelStore, B as CreateProjectionRegistryOptions, F as ProjectionRegistry, H as PolicyEngine, J as ArkManifest, W as WorkflowStore, S as SagaContext, K as WorkflowSnapshot, L as SagaDefinition, N as CreateWorkflowEngineOptions, Q as SagaInstance, T as WorkflowEngine, C as CreateArkKernelOptions, A as ArkKernel, U as ArkKernelConfig, V as CreateArkKernelFromConfigOptions, X as TraceRecordType, Y as TraceRecord, Z as ObservabilityDriftReport } from './types-CSJhEOk2.js';
-export { _ as ArchitectureLayer, $ as ArchitectureLayerConfig, a0 as ArchitectureRule, a1 as ArkManifestArchitecture, a2 as ArkManifestData, a3 as ArkManifestEntityLink, a4 as ArkManifestGraph, a5 as ArkManifestIntent, a6 as ArkManifestPolicy, a7 as ArkManifestProjection, a8 as AuditRecordInput, a9 as AuditRecordType, aa as CorrelationId, ab as EntityMeta, ac as EventContractIssue, ad as EventHandler, ae as EventInterceptionInfo, af as EventInterceptor, ag as EventInterceptorContext, ah as EventMetadata, ai as EventPayloadPatch, aj as EventPayloadSchema, ak as EventPublisher, al as EventSchemaField, am as EventSchemaFieldType, an as FieldMeta, ao as GraphNode, ap as IntentRelationshipKind, aq as ObservabilityFlow, ar as ObservedLayerFlowMode, as as PolicyEvaluationResult, at as ProjectionCheckpoint, au as ProjectionDefinition, av as PublishedEventRecord, aw as RetryPolicy, ax as SagaStatus, ay as SagaStep, az as TraceSink, aA as Unsubscribe, aB as WorkflowDefinition, aC as WorkflowStatus, aD as WorkflowStep } from './types-CSJhEOk2.js';
+import { I as IntentRegistry, a as IntentName, D as DefineIntentOptions, b as IntentCreator, P as PolicyViolation, c as PolicySeverity, d as PolicyEnforcementMode, e as Policy, f as CreateArchitectureProfileOptions, g as ArchitectureProfile, h as ArkCheckConfig, i as CreateArchitectureProfileFromArkConfigOptions, j as CreateElevenLayerArkConfigOptions, k as DependencyGraph, G as GraphEdge, l as IntentRelationship, m as AuditStore, n as AuditRecord, o as AuditQuery, p as CreateAuditTrailOptions, q as AuditTrail, E as EventContractRegistry, r as EventContract, s as DomainEvent, t as EventContractValidationResult, O as OutboxStore, u as OutboxRecord, v as OutboxStatus, w as EventBusOptions, x as EventBus, y as CreateObservabilityReporterOptions, z as ObservabilityReporter, M as MetadataRegistry, R as ReadModelStore, B as CreateProjectionRegistryOptions, F as ProjectionRegistry, H as PolicyEngine, J as ArkManifest, W as WorkflowStore, S as SagaContext, K as WorkflowSnapshot, L as SagaDefinition, N as CreateWorkflowEngineOptions, Q as SagaInstance, T as WorkflowEngine, C as CreateArkKernelOptions, A as ArkKernel, U as ArkKernelConfig, V as CreateArkKernelFromConfigOptions, X as TraceRecordType, Y as TraceRecord, Z as ObservabilityDriftReport } from './types-D6Q8WHes.js';
+export { _ as ArchitectureLayer, $ as ArchitectureLayerConfig, a0 as ArchitectureRule, a1 as ArkManifestArchitecture, a2 as ArkManifestData, a3 as ArkManifestEntityLink, a4 as ArkManifestGraph, a5 as ArkManifestIntent, a6 as ArkManifestPolicy, a7 as ArkManifestProjection, a8 as AuditRecordInput, a9 as AuditRecordType, aa as CorrelationId, ab as EntityMeta, ac as EventContractIssue, ad as EventHandler, ae as EventInterceptionInfo, af as EventInterceptor, ag as EventInterceptorContext, ah as EventMetadata, ai as EventPayloadPatch, aj as EventPayloadSchema, ak as EventPublisher, al as EventSchemaField, am as EventSchemaFieldType, an as FieldMeta, ao as GraphNode, ap as IntentRelationshipKind, aq as ObservabilityFlow, ar as ObservedLayerFlowMode, as as PolicyEvaluationResult, at as ProjectionCheckpoint, au as ProjectionDefinition, av as PublishedEventRecord, aw as RetryPolicy, ax as SagaStatus, ay as SagaStep, az as TraceSink, aA as Unsubscribe, aB as WorkflowDefinition, aC as WorkflowStatus, aD as WorkflowStep } from './types-D6Q8WHes.js';
 
 /** ArkGate library version — single source of truth. */
-declare const version = "2.8.3";
+declare const version = "2.9.0";
 
 /**
  * defineIntent
@@ -583,14 +583,26 @@ interface AICodeGateOptions<Context = AICodeGateContext> {
      */
     infrastructureLayers?: string[];
     /**
-     * Resolve an import specifier to the architecture layer of its TARGET file, if that target
-     * is governed by a declared layer (else undefined). When provided, the gate lets the
-     * layer RULES decide a governed edge instead of the infrastructure path-heuristic — so the
-     * write gate honors `ark.config.json` exactly like `ark-check`, and the heuristic only
-     * applies to ungoverned targets (external packages, paths no layer covers). The caller
-     * (ark-mcp) supplies this using the config's layer globs + tsconfig path aliases.
+     * Preferred single resolve step: import specifier or absolute source file →
+     * `{ layer, relPath }` for contract + peerIsolation. Prefer this over the
+     * legacy layer-only callback.
+     */
+    resolveImportTarget?: (specifierOrFilePath: string, fromFilePath?: string) => {
+        layer?: string;
+        relPath?: string;
+    } | undefined;
+    /**
+     * @deprecated Prefer resolveImportTarget. Layer-only resolve for governed imports.
      */
     resolveImportLayer?: (specifier: string, fromFilePath?: string) => string | undefined;
+    /**
+     * Layer configs (patterns) used to infer sliceFolders when a peerIsolation rule
+     * omits an explicit list.
+     */
+    architectureLayers?: Array<{
+        name: string;
+        patterns?: string[];
+    }>;
 }
 declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
 

package/dist/index.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var version = "2.8.3";
+var version = "2.9.0";
 
 // src/kernel/intent/IntentRegistry.ts
 var IntentRegistry = class {
@@ -662,6 +662,82 @@ async function recordInterceptorError(interceptor, event, error, deps) {
   });
 }
 
+// src/domain/layerMatch.ts
+function normalizeGlobSeparators(pattern) {
+  let out = "";
+  for (let i = 0; i < pattern.length; i += 1) {
+    const c = pattern[i];
+    if (c === "\\" && i + 1 < pattern.length) {
+      const next = pattern[i + 1];
+      if ("*?{}[],".includes(next) || next === "\\") {
+        out += "\\" + next;
+        i += 1;
+        continue;
+      }
+      out += "/";
+      continue;
+    }
+    out += c;
+  }
+  return out;
+}
+function sliceIdForPath(relPath, sliceFolders) {
+  if (!sliceFolders?.length) return void 0;
+  const parts = String(relPath).split(/[/\\]/).filter(Boolean);
+  const folders = new Set(sliceFolders.map((s) => String(s).toLowerCase()));
+  for (let i = 0; i < parts.length - 1; i += 1) {
+    if (folders.has(parts[i].toLowerCase())) {
+      return `${parts[i]}/${parts[i + 1]}`;
+    }
+  }
+  return void 0;
+}
+function inferSliceFoldersFromPatterns(patterns) {
+  const out = /* @__PURE__ */ new Set();
+  for (const pattern of patterns ?? []) {
+    const glob = normalizeGlobSeparators(String(pattern));
+    const parts = glob.split("/").filter(Boolean);
+    for (let i = 0; i < parts.length; i += 1) {
+      const part = parts[i];
+      if ((part === "**" || part === "*") && i > 0) {
+        const prev = parts[i - 1];
+        if (prev && !prev.includes("*") && !prev.includes("{") && !prev.includes("}")) {
+          out.add(prev);
+        }
+      }
+    }
+  }
+  return [...out];
+}
+function resolveSliceFolders(rule, layerName, layers) {
+  if (Array.isArray(rule.sliceFolders) && rule.sliceFolders.length > 0) {
+    return rule.sliceFolders.filter((s) => typeof s === "string" && s.length > 0);
+  }
+  const layer = (layers ?? []).find((l) => l.name === layerName);
+  return inferSliceFoldersFromPatterns(layer?.patterns);
+}
+function findDeniedEdgeRule(rules, from, to, options) {
+  for (const rule of rules ?? []) {
+    if (rule.from !== from || rule.to !== to) continue;
+    if (rule.allowed !== false) continue;
+    if (rule.peerIsolation) {
+      const fromPath = options?.fromPath;
+      const toPath = options?.toPath;
+      if (!fromPath || !toPath) continue;
+      const folders = resolveSliceFolders(rule, from, options?.layers);
+      if (folders.length === 0) continue;
+      const fromSlice = sliceIdForPath(fromPath, folders);
+      const toSlice = sliceIdForPath(toPath, folders);
+      if (!fromSlice || !toSlice) continue;
+      if (fromSlice !== toSlice) return rule;
+      continue;
+    }
+    if (from === to) continue;
+    return rule;
+  }
+  return void 0;
+}
+
 // src/kernel/event-bus/observedLayerFlow.ts
 async function assertObservedLayerFlowAllowed(event, deps) {
   if (deps.mode === "off" || !deps.architectureProfile) {
@@ -673,9 +749,7 @@ async function assertObservedLayerFlowAllowed(event, deps) {
   const fromLayer = profile.resolveLayer(source);
   const toLayer = profile.resolveLayer(event.intent);
   if (!fromLayer || !toLayer) return;
-  const blocked = profile.rules.find(
-    (rule) => !rule.allowed && rule.from === fromLayer && rule.to === toLayer
-  );
+  const blocked = findDeniedEdgeRule(profile.rules, fromLayer, toLayer);
   if (!blocked) return;
   const severity = deps.mode;
   const message = blocked.message ?? `Observed layer violation: "${source}" (${fromLayer}) must not produce "${event.intent}" (${toLayer}).`;
@@ -2325,16 +2399,26 @@ function createAICodeGate(options = {}) {
         }
       }
       for (const specifier of extractModuleSpecifiers(source)) {
-        const targetLayer = options.resolveImportLayer?.(specifier.value, filePath);
-        if (targetLayer && contextLayer && targetLayer !== contextLayer) {
-          const blocked = options.architectureProfile?.rules.find(
-            (rule) => !rule.allowed && rule.from === contextLayer && rule.to === targetLayer
+        const targetHit = options.resolveImportTarget?.(specifier.value, filePath) ?? (options.resolveImportLayer ? { layer: options.resolveImportLayer(specifier.value, filePath) } : void 0);
+        const sourceHit = typeof filePath === "string" ? options.resolveImportTarget?.(filePath) ?? (options.resolveImportLayer ? { layer: contextLayer, relPath: void 0 } : void 0) : void 0;
+        const targetLayer = targetHit?.layer;
+        if (targetLayer && contextLayer) {
+          const blocked = findDeniedEdgeRule(
+            options.architectureProfile?.rules,
+            contextLayer,
+            targetLayer,
+            {
+              fromPath: sourceHit?.relPath,
+              toPath: targetHit?.relPath,
+              layers: options.architectureLayers
+            }
           );
           if (blocked) {
+            const peer = Boolean(blocked.peerIsolation);
             violations.push(
               violation(
                 "LAYER_IMPORT_VIOLATION",
-                blocked.message ?? `Layer "${contextLayer}" must not import "${targetLayer}".`,
+                blocked.message ?? (peer ? `Layer "${contextLayer}" must not import across slices into "${targetLayer}".` : `Layer "${contextLayer}" must not import "${targetLayer}".`),
                 {
                   line: lineOf(source, specifier.index),
                   source: specifier.value,
@@ -2342,13 +2426,16 @@ function createAICodeGate(options = {}) {
                   filePath,
                   fromLayer: contextLayer,
                   toLayer: targetLayer,
-                  suggestion: "Depend on a port/interface owned by an inner layer instead, or move this code to a layer allowed to make this import.",
-                  details: { importKind: specifier.kind }
+                  suggestion: peer ? "Extract shared code to a shared layer, or coordinate slices via events/ports \u2014 do not import across feature/context slices." : "Depend on a port/interface owned by an inner layer instead, or move this code to a layer allowed to make this import.",
+                  details: { importKind: specifier.kind, peerIsolation: peer }
                 }
               )
             );
+            continue;
+          }
+          if (targetLayer !== contextLayer) {
+            continue;
           }
-          continue;
         }
         if (exemptFromInfraHeuristics) continue;
         if (!hasInfrastructureToken(specifier.value) && !isKnownInfrastructurePackage(specifier.value)) {
@@ -2417,8 +2504,10 @@ function createAICodeGate(options = {}) {
           if (!looksLikeIntentName(literal.value)) continue;
           const targetLayer = options.architectureProfile.resolveLayer(literal.value);
           if (!targetLayer) continue;
-          const blocked = options.architectureProfile.rules.find(
-            (rule) => !rule.allowed && rule.from === contextLayer && rule.to === targetLayer
+          const blocked = findDeniedEdgeRule(
+            options.architectureProfile.rules,
+            contextLayer,
+            targetLayer
           );
           if (blocked) {
             violations.push(