arkgate 3.0.5 → 3.1.0

package/bin/lib/analysis-engine.mjs

@@ -1,1171 +1,9 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-// src/domain/analysis.ts
-var ANALYSIS_IR_SCHEMA_VERSION = "1.0";
-function deterministicHash(value) {
-  let hash = 2166136261;
-  for (let index = 0; index < value.length; index += 1) {
-    hash ^= value.charCodeAt(index);
-    hash = Math.imul(hash, 16777619);
-  }
-  return `fnv1a-${(hash >>> 0).toString(16).padStart(8, "0")}`;
-}
-function stableSerialize(value) {
-  if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return `[${value.map(stableSerialize).join(",")}]`;
-  const object = value;
-  return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableSerialize(object[key])}`).join(",")}}`;
-}
-
-// src/domain/configContract.ts
-var ARK_CONFIG_SCHEMA_VERSION = "1.0";
-var ARK_CONFIG_SCHEMA_URL = "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-var DEFAULT_LAYER_NAMES = [
-  "DomainModel",
-  "ApplicationOrchestration",
-  "PersistenceAdapters",
-  "IntegrationAdapters",
-  "WorkflowSagaEngine",
-  "BackgroundJobsScheduling",
-  "PresentationAdapters",
-  "ReportingReadModels",
-  "ExtensibilityMetadata",
-  "SecurityAuditObservability",
-  "Kernel"
-];
-var DEFAULT_ALLOWED_FLOWS = /* @__PURE__ */ new Set([
-  "PresentationAdapters->ApplicationOrchestration",
-  "ApplicationOrchestration->DomainModel",
-  "WorkflowSagaEngine->ApplicationOrchestration",
-  "WorkflowSagaEngine->DomainModel",
-  "BackgroundJobsScheduling->ApplicationOrchestration"
-]);
-function createDefaultRules() {
-  const rules = [];
-  for (const from of DEFAULT_LAYER_NAMES) {
-    for (const to of DEFAULT_LAYER_NAMES) {
-      if (from === to || DEFAULT_ALLOWED_FLOWS.has(`${from}->${to}`)) continue;
-      rules.push({ from, to, allowed: false });
-    }
-  }
-  return rules;
-}
-var DEFAULT_ARK_CONFIG_RULES = createDefaultRules();
-var stringArraySchema = {
-  type: "array",
-  items: { type: "string", minLength: 1 },
-  uniqueItems: true
-};
-var ARK_CONFIG_SCHEMA = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: ARK_CONFIG_SCHEMA_URL,
-  title: "ArkGate architecture contract",
-  description: "Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",
-  type: "object",
-  additionalProperties: false,
-  required: ["$schema", "schemaVersion", "include", "layers", "rules"],
-  properties: {
-    $schema: {
-      type: "string",
-      minLength: 1,
-      default: ARK_CONFIG_SCHEMA_URL,
-      description: "Editor-facing URL or local path for this JSON Schema."
-    },
-    schemaVersion: {
-      type: "string",
-      const: ARK_CONFIG_SCHEMA_VERSION,
-      default: ARK_CONFIG_SCHEMA_VERSION
-    },
-    name: { type: "string", minLength: 1 },
-    include: { ...stringArraySchema, minItems: 1, default: ["src"] },
-    exclude: { ...stringArraySchema, default: [] },
-    excludeGenerated: { type: "boolean", default: true },
-    frameworkOverlay: { type: "string", minLength: 1 },
-    layers: {
-      type: "array",
-      default: [],
-      items: { $ref: "#/$defs/layer" }
-    },
-    rules: {
-      type: "array",
-      default: DEFAULT_ARK_CONFIG_RULES,
-      items: { $ref: "#/$defs/rule" }
-    },
-    cyclePolicy: {
-      type: "string",
-      enum: ["strict", "soft", "framework-soft", "off"],
-      default: "strict"
-    },
-    dynamicImportAllowlist: { ...stringArraySchema, default: [] },
-    safety: {
-      $ref: "#/$defs/safety",
-      default: {
-        maxTsSuppressions: 0,
-        maxAnyCasts: 0,
-        allowInMemory: false,
-        allowDisabledPeerIsolation: false
-      }
-    }
-  },
-  $defs: {
-    layer: {
-      type: "object",
-      additionalProperties: false,
-      required: ["name", "patterns"],
-      properties: {
-        name: { type: "string", minLength: 1 },
-        patterns: { ...stringArraySchema, minItems: 1 },
-        exclude: stringArraySchema,
-        intentPrefixes: stringArraySchema,
-        description: { type: "string", minLength: 1 },
-        forbiddenGlobals: stringArraySchema,
-        mayImportInfrastructure: { type: "boolean" },
-        optional: { type: "boolean" }
-      }
-    },
-    rule: {
-      type: "object",
-      additionalProperties: false,
-      required: ["from", "to", "allowed"],
-      properties: {
-        from: { type: "string", minLength: 1 },
-        to: { type: "string", minLength: 1 },
-        allowed: { type: "boolean" },
-        message: { type: "string", minLength: 1 },
-        peerIsolation: { type: "boolean" },
-        sliceFolders: { ...stringArraySchema, minItems: 1 }
-      }
-    },
-    safety: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        maxTsSuppressions: { type: "integer", minimum: 0, default: 0 },
-        maxAnyCasts: { type: "integer", minimum: 0, default: 0 },
-        allowInMemory: { type: "boolean", default: false },
-        allowDisabledPeerIsolation: { type: "boolean", default: false }
-      }
-    }
-  }
-};
-var ArkConfigValidationError = class extends Error {
-  issues;
-  source;
-  constructor(source, issues) {
-    super(
-      `Invalid ArkGate config (${source}):
-${issues.map((issue) => `- ${issue.path}: ${issue.message}`).join("\n")}`
-    );
-    this.name = "ArkConfigValidationError";
-    this.source = source;
-    this.issues = issues;
-  }
-};
-function isObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function propertyPath(parent, key) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`;
-}
-function valueType(value) {
-  if (value === null) return "null";
-  if (Array.isArray(value)) return "array";
-  return typeof value;
-}
-function resolveSchemaRef(ref, root) {
-  const prefix = "#/$defs/";
-  if (!ref.startsWith(prefix)) return void 0;
-  return root.$defs[ref.slice(prefix.length)];
-}
-function validateNode(value, schema, path, root, issues) {
-  if (schema.$ref) {
-    const referenced = resolveSchemaRef(schema.$ref, root);
-    if (!referenced) {
-      issues.push({ path, message: `schema reference ${schema.$ref} cannot be resolved` });
-      return;
-    }
-    validateNode(value, referenced, path, root, issues);
-    return;
-  }
-  if (schema.const !== void 0 && !Object.is(value, schema.const)) {
-    issues.push({ path, message: `must equal ${JSON.stringify(schema.const)}` });
-    return;
-  }
-  if (schema.enum && !schema.enum.some((candidate) => Object.is(candidate, value))) {
-    issues.push({ path, message: `must be one of ${schema.enum.map(String).join(", ")}` });
-    return;
-  }
-  if (schema.type === "object") {
-    if (!isObject(value)) {
-      issues.push({ path, message: `must be an object; received ${valueType(value)}` });
-      return;
-    }
-    const properties = schema.properties ?? {};
-    for (const key of schema.required ?? []) {
-      if (value[key] === void 0) {
-        issues.push({ path: propertyPath(path, key), message: "is required" });
-      }
-    }
-    if (schema.additionalProperties === false) {
-      for (const key of Object.keys(value)) {
-        if (!(key in properties)) {
-          issues.push({ path: propertyPath(path, key), message: "unknown field" });
-        }
-      }
-    }
-    for (const [key, childSchema] of Object.entries(properties)) {
-      if (value[key] !== void 0) {
-        validateNode(value[key], childSchema, propertyPath(path, key), root, issues);
-      }
-    }
-    return;
-  }
-  if (schema.type === "array") {
-    if (!Array.isArray(value)) {
-      issues.push({ path, message: `must be an array; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minItems !== void 0 && value.length < schema.minItems) {
-      issues.push({ path, message: `must contain at least ${schema.minItems} item(s)` });
-    }
-    if (schema.uniqueItems) {
-      const serialized = value.map((entry) => JSON.stringify(entry));
-      if (new Set(serialized).size !== serialized.length) {
-        issues.push({ path, message: "must not contain duplicate items" });
-      }
-    }
-    if (schema.items) {
-      value.forEach(
-        (entry, index) => validateNode(entry, schema.items, `${path}[${index}]`, root, issues)
-      );
-    }
-    return;
-  }
-  if (schema.type === "string") {
-    if (typeof value !== "string") {
-      issues.push({ path, message: `must be a string; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minLength !== void 0 && value.length < schema.minLength) {
-      issues.push({ path, message: `must contain at least ${schema.minLength} character(s)` });
-    }
-    return;
-  }
-  if (schema.type === "boolean") {
-    if (typeof value !== "boolean") {
-      issues.push({ path, message: `must be a boolean; received ${valueType(value)}` });
-    }
-    return;
-  }
-  if (schema.type === "integer") {
-    if (!Number.isInteger(value)) {
-      issues.push({ path, message: `must be an integer; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minimum !== void 0 && value < schema.minimum) {
-      issues.push({ path, message: `must be at least ${schema.minimum}` });
-    }
-  }
-}
-function defaultedConfig(input) {
-  return {
-    ...input,
-    $schema: input.$schema === void 0 ? ARK_CONFIG_SCHEMA_URL : input.$schema,
-    schemaVersion: input.schemaVersion === void 0 ? ARK_CONFIG_SCHEMA_VERSION : input.schemaVersion,
-    include: input.include === void 0 ? ["src"] : input.include,
-    layers: input.layers === void 0 ? [] : input.layers,
-    rules: input.rules === void 0 ? DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule })) : input.rules
-  };
-}
-function migrateArkConfig(input, source = "ark.config.json") {
-  if (!isObject(input)) {
-    throw new ArkConfigValidationError(source, [
-      { path: "$", message: `must be an object; received ${valueType(input)}` }
-    ]);
-  }
-  const migratedFrom = input.schemaVersion === void 0 ? "unversioned" : null;
-  if (input.schemaVersion !== void 0 && input.schemaVersion !== ARK_CONFIG_SCHEMA_VERSION) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$.schemaVersion",
-        message: `unsupported version ${JSON.stringify(input.schemaVersion)}; expected ${ARK_CONFIG_SCHEMA_VERSION}`
-      }
-    ]);
-  }
-  return { candidate: defaultedConfig(input), migratedFrom };
-}
-function loadArkConfigContract(input, source = "ark.config.json") {
-  const { candidate, migratedFrom } = migrateArkConfig(input, source);
-  const issues = [];
-  validateNode(
-    candidate,
-    ARK_CONFIG_SCHEMA,
-    "$",
-    ARK_CONFIG_SCHEMA,
-    issues
-  );
-  if (issues.length > 0) throw new ArkConfigValidationError(source, issues);
-  return { config: candidate, migratedFrom };
-}
-function parseArkConfigJson(json, source = "ark.config.json") {
-  let input;
-  try {
-    input = JSON.parse(json);
-  } catch (error) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$",
-        message: `invalid JSON: ${error instanceof Error ? error.message : String(error)}`
-      }
-    ]);
-  }
-  return loadArkConfigContract(input, source);
-}
-
-// src/domain/layerMatch.ts
-var regexpCache = /* @__PURE__ */ new Map();
-function escapeLiteral(ch) {
-  return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
-}
-function normalizeGlobSeparators(pattern) {
-  let out = "";
-  for (let i = 0; i < pattern.length; i += 1) {
-    const c = pattern[i];
-    if (c === "\\" && i + 1 < pattern.length) {
-      const next = pattern[i + 1];
-      if ("*?{}[],".includes(next) || next === "\\") {
-        out += "\\" + next;
-        i += 1;
-        continue;
-      }
-      out += "/";
-      continue;
-    }
-    out += c;
-  }
-  return out;
-}
-function bracesBalanced(glob) {
-  let depth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\") {
-      i += 1;
-      continue;
-    }
-    if (c === "{") depth += 1;
-    else if (c === "}") {
-      depth -= 1;
-      if (depth < 0) return false;
-    }
-  }
-  return depth === 0;
-}
-function globToRegExp(pattern) {
-  const cached = regexpCache.get(pattern);
-  if (cached) return cached;
-  const glob = normalizeGlobSeparators(pattern);
-  const useBraces = bracesBalanced(glob);
-  let out = "";
-  let braceDepth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\" && i + 1 < glob.length) {
-      out += escapeLiteral(glob[i + 1]);
-      i += 1;
-    } else if (c === "*") {
-      if (glob[i + 1] === "*") {
-        if (glob[i + 2] === "/") {
-          out += "(?:.*/)?";
-          i += 2;
-        } else {
-          out += ".*";
-          i += 1;
-        }
-      } else {
-        out += "[^/]*";
-      }
-    } else if (c === "?") {
-      out += "[^/]";
-    } else if (c === "{" && useBraces) {
-      out += "(?:";
-      braceDepth += 1;
-    } else if (c === "}" && useBraces && braceDepth > 0) {
-      out += ")";
-      braceDepth -= 1;
-    } else if (c === "," && useBraces && braceDepth > 0) {
-      out += "|";
-    } else {
-      out += escapeLiteral(c);
-    }
-  }
-  const re = new RegExp(`^${out}$`);
-  regexpCache.set(pattern, re);
-  return re;
-}
-function patternSpecificity(pattern) {
-  const glob = normalizeGlobSeparators(String(pattern));
-  const beforeWildcard = glob.split("*")[0];
-  const literalSegments = beforeWildcard.split("/").filter(Boolean).length;
-  const literalLength = glob.replace(/\*/g, "").length;
-  return literalSegments * 1e4 + literalLength;
-}
-function layerForRelativePath(relPath, layers) {
-  const rel = String(relPath).split(/[/\\]/).join("/");
-  let bestName;
-  let bestScore = -1;
-  for (const layer of layers ?? []) {
-    if ((layer.exclude ?? []).some((pattern) => globToRegExp(pattern).test(rel))) {
-      continue;
-    }
-    for (const pattern of layer.patterns ?? []) {
-      if (globToRegExp(pattern).test(rel)) {
-        const score = patternSpecificity(pattern);
-        if (score > bestScore) {
-          bestScore = score;
-          bestName = layer.name;
-        }
-      }
-    }
-  }
-  return bestName;
-}
-function sliceIdForPath(relPath, sliceFolders) {
-  if (!sliceFolders?.length) return void 0;
-  const parts = String(relPath).split(/[/\\]/).filter(Boolean);
-  const folders = new Set(sliceFolders.map((s) => String(s).toLowerCase()));
-  for (let i = 0; i < parts.length - 1; i += 1) {
-    if (folders.has(parts[i].toLowerCase())) {
-      return `${parts[i]}/${parts[i + 1]}`;
-    }
-  }
-  return void 0;
-}
-function inferSliceFoldersFromPatterns(patterns) {
-  const out = /* @__PURE__ */ new Set();
-  for (const pattern of patterns ?? []) {
-    const glob = normalizeGlobSeparators(String(pattern));
-    const parts = glob.split("/").filter(Boolean);
-    for (let i = 0; i < parts.length; i += 1) {
-      const part = parts[i];
-      if ((part === "**" || part === "*") && i > 0) {
-        const prev = parts[i - 1];
-        if (prev && !prev.includes("*") && !prev.includes("{") && !prev.includes("}")) {
-          out.add(prev);
-        }
-      }
-    }
-  }
-  return [...out];
-}
-function resolveSliceFolders(rule, layerName, layers) {
-  if (Array.isArray(rule.sliceFolders) && rule.sliceFolders.length > 0) {
-    return rule.sliceFolders.filter((s) => typeof s === "string" && s.length > 0);
-  }
-  const layer = (layers ?? []).find((l) => l.name === layerName);
-  return inferSliceFoldersFromPatterns(layer?.patterns);
-}
-function findDeniedEdgeRule(rules, from, to, options) {
-  for (const rule of rules ?? []) {
-    if (rule.from !== from || rule.to !== to) continue;
-    if (rule.allowed !== false) continue;
-    if (rule.peerIsolation) {
-      const fromPath = options?.fromPath;
-      const toPath = options?.toPath;
-      if (!fromPath || !toPath) continue;
-      const folders = resolveSliceFolders(rule, from, options?.layers);
-      if (folders.length === 0) continue;
-      const fromSlice = sliceIdForPath(fromPath, folders);
-      const toSlice = sliceIdForPath(toPath, folders);
-      if (!fromSlice || !toSlice) continue;
-      if (fromSlice !== toSlice) return rule;
-      continue;
-    }
-    if (from === to) continue;
-    return rule;
-  }
-  return void 0;
-}
-
-// src/kernel/semanticAnalysis.ts
-function literalText(ts, node) {
-  return node && ts.isStringLiteralLike(node) ? node.text : void 0;
-}
-function lineOf(sourceFile, node) {
-  return sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
-}
-function isTypeOnlyReference(ts, node) {
-  if (ts.isImportDeclaration(node)) {
-    const clause = node.importClause;
-    if (!clause) return false;
-    if (clause.isTypeOnly) return true;
-    const named = clause.namedBindings;
-    return Boolean(
-      named && ts.isNamedImports(named) && named.elements.length > 0 && named.elements.every((element) => element.isTypeOnly)
-    );
-  }
-  if (ts.isExportDeclaration(node)) {
-    if (node.isTypeOnly) return true;
-    const clause = node.exportClause;
-    return Boolean(
-      clause && ts.isNamedExports(clause) && clause.elements.length > 0 && clause.elements.every((element) => element.isTypeOnly)
-    );
-  }
-  return false;
-}
-function singleFileChecker(ts, sourceFile) {
-  const options = { noLib: true, noResolve: true, target: ts.ScriptTarget.Latest };
-  const host = ts.createCompilerHost(options, true);
-  host.getSourceFile = (fileName) => fileName === sourceFile.fileName ? sourceFile : void 0;
-  host.fileExists = (fileName) => fileName === sourceFile.fileName;
-  host.readFile = (fileName) => fileName === sourceFile.fileName ? sourceFile.text : void 0;
-  return ts.createProgram([sourceFile.fileName], options, host).getTypeChecker();
-}
-function symbolAt(checker, node) {
-  try {
-    return checker.getSymbolAtLocation(node);
-  } catch {
-    return void 0;
-  }
-}
-function localDeclaration(ts, checker, sourceFile, node) {
-  const shorthand = node.parent && ts.isShorthandPropertyAssignment(node.parent) && node.parent.name === node;
-  let symbol;
-  try {
-    symbol = shorthand ? checker.getShorthandAssignmentValueSymbol(node.parent) : symbolAt(checker, node);
-  } catch {
-    symbol = void 0;
-  }
-  return Boolean(
-    symbol?.declarations?.some(
-      (declaration) => declaration.getSourceFile().fileName === sourceFile.fileName
-    )
-  );
-}
-function extractSemanticDependencies(ts, sourceFile) {
-  let checker;
-  const dependencies = [];
-  const add = (node, kind, specifier, typeOnly = false) => dependencies.push({
-    specifier,
-    kind,
-    line: lineOf(sourceFile, node),
-    typeOnly,
-    unresolved: specifier === void 0,
-    node
-  });
-  const visit = (node) => {
-    if (ts.isImportDeclaration(node)) {
-      add(node, "import", literalText(ts, node.moduleSpecifier), isTypeOnlyReference(ts, node));
-    } else if (ts.isExportDeclaration(node) && node.moduleSpecifier) {
-      add(node, "export", literalText(ts, node.moduleSpecifier), isTypeOnlyReference(ts, node));
-    } else if (ts.isImportEqualsDeclaration(node) && ts.isExternalModuleReference(node.moduleReference)) {
-      add(node, "require", literalText(ts, node.moduleReference.expression));
-    } else if (ts.isCallExpression(node)) {
-      const dynamicImport = node.expression.kind === ts.SyntaxKind.ImportKeyword;
-      const requireCall = ts.isIdentifier(node.expression) && node.expression.text === "require";
-      const directRequire = requireCall && !localDeclaration(
-        ts,
-        checker ?? (checker = singleFileChecker(ts, sourceFile)),
-        sourceFile,
-        node.expression
-      );
-      if (dynamicImport || directRequire) {
-        add(node, directRequire ? "require" : "dynamic-import", literalText(ts, node.arguments[0]));
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return dependencies;
-}
-function staticAccessPath(ts, node) {
-  const segments = [];
-  let current = node;
-  while (ts.isPropertyAccessExpression(current) || ts.isElementAccessExpression(current)) {
-    if (ts.isPropertyAccessExpression(current)) segments.unshift(current.name.text);
-    else {
-      const property = literalText(ts, current.argumentExpression);
-      if (property === void 0) return void 0;
-      segments.unshift(property);
-    }
-    current = current.expression;
-  }
-  if (!ts.isIdentifier(current)) return void 0;
-  segments.unshift(current.text);
-  return { root: current, segments };
-}
-function runtimeIdentifierReference(ts, node) {
-  const parent = node.parent;
-  if (ts.isPropertyAccessExpression(parent) || ts.isElementAccessExpression(parent)) return false;
-  return ts.isExpressionNode(node) && !ts.isInTypeQuery(node) || ts.isShorthandPropertyAssignment(parent) && parent.name === node;
-}
-function bestForbiddenMatch(entries, segments) {
-  const normalized = segments[0] === "globalThis" ? segments.slice(1) : segments;
-  for (let length = normalized.length; length >= 1; length -= 1) {
-    const candidate = normalized.slice(0, length).join(".");
-    if (entries.has(candidate)) return candidate;
-  }
-  return void 0;
-}
-function collectForbiddenCapabilityUses(ts, sourceFile, forbidden) {
-  if (forbidden.length === 0) return [];
-  const entries = new Set(forbidden);
-  const checker = singleFileChecker(ts, sourceFile);
-  const aliases = /* @__PURE__ */ new Map();
-  const topLevelNames = /* @__PURE__ */ new Set();
-  for (const statement of sourceFile.statements) {
-    if (ts.isVariableStatement(statement)) {
-      for (const declaration of statement.declarationList.declarations) {
-        if (ts.isIdentifier(declaration.name)) topLevelNames.add(declaration.name.text);
-      }
-    }
-  }
-  const resolvePath = (node) => {
-    const path = staticAccessPath(ts, node);
-    if (!path) return void 0;
-    const symbol = symbolAt(checker, path.root);
-    const alias = symbol ? aliases.get(symbol) : void 0;
-    if (alias) return [...alias, ...path.segments.slice(1)];
-    return localDeclaration(ts, checker, sourceFile, path.root) || topLevelNames.has(path.root.text) ? void 0 : path.segments;
-  };
-  for (const statement of sourceFile.statements) {
-    if (!ts.isVariableStatement(statement)) continue;
-    for (const declaration of statement.declarationList.declarations) {
-      if (!declaration.initializer || !ts.isIdentifier(declaration.name)) continue;
-      const path = resolvePath(declaration.initializer);
-      const symbol = symbolAt(checker, declaration.name);
-      if (!path || !symbol) continue;
-      aliases.set(symbol, path);
-    }
-  }
-  const uses = [];
-  const seen = /* @__PURE__ */ new Set();
-  const flag = (name, node) => {
-    const line = lineOf(sourceFile, node);
-    const key = `${name}:${node.getStart(sourceFile)}`;
-    if (seen.has(key)) return;
-    seen.add(key);
-    uses.push({ name, line, node });
-  };
-  const visit = (node) => {
-    const parentContinuesPath = node.parent && (ts.isPropertyAccessExpression(node.parent) || ts.isElementAccessExpression(node.parent)) && node.parent.expression === node;
-    if ((ts.isPropertyAccessExpression(node) || ts.isElementAccessExpression(node)) && !parentContinuesPath) {
-      const path = resolvePath(node);
-      const match = path ? bestForbiddenMatch(entries, path) : void 0;
-      if (match) flag(match, node);
-    } else if (ts.isIdentifier(node) && entries.has(node.text) && runtimeIdentifierReference(ts, node) && !localDeclaration(ts, checker, sourceFile, node)) {
-      flag(node.text, node);
-    }
-    if (ts.isVariableDeclaration(node) && ts.isObjectBindingPattern(node.name) && node.initializer) {
-      const base = resolvePath(node.initializer);
-      if (base) {
-        for (const element of node.name.elements) {
-          if (!ts.isIdentifier(element.name)) continue;
-          const property = element.propertyName ? literalText(ts, element.propertyName) ?? element.propertyName.text : element.name.text;
-          const match = bestForbiddenMatch(entries, [...base, property]);
-          if (match) flag(match, node.initializer);
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return uses;
-}
-
-// src/domain/sourcePolicy.ts
-var SOURCE_POLICY_MESSAGES = {
-  RAW_EVENT_PUBLISH: "Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",
-  PUBLISH_MISSING_SOURCE: "Strict Ark publish calls must include metadata.source."
-};
-function looksLikeArkIntent(value) {
-  return /^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(
-    value
-  );
-}
-function classifyPublishFacts(facts) {
-  if (!facts.publishCall) return [];
-  const findings = [];
-  if (facts.rawIntentName !== void 0 && looksLikeArkIntent(facts.rawIntentName) || facts.objectHasIntent) {
-    findings.push({
-      ruleId: "RAW_EVENT_PUBLISH",
-      message: SOURCE_POLICY_MESSAGES.RAW_EVENT_PUBLISH
-    });
-  }
-  if (facts.arkPublishCandidate && !facts.hasSource) {
-    findings.push({
-      ruleId: "PUBLISH_MISSING_SOURCE",
-      message: SOURCE_POLICY_MESSAGES.PUBLISH_MISSING_SOURCE
-    });
-  }
-  return findings;
-}
-
-// src/kernel/analysis.ts
-function loadContract(input, source) {
-  const loaded = typeof input === "string" ? parseArkConfigJson(input, source) : loadArkConfigContract(input, source);
-  return { ...loaded, policyHash: deterministicHash(stableSerialize(loaded.config)) };
-}
-function normalizePath(value) {
-  return value.replace(/\\/g, "/").replace(/^\.\//, "");
-}
-function isIdentifierCharacter(value) {
-  return value !== void 0 && /[A-Za-z0-9_$]/.test(value);
-}
-function skipWhitespace(source, index) {
-  while (index < source.length && /\s/.test(source[index])) index += 1;
-  return index;
-}
-function readString(source, index) {
-  const quote = source[index];
-  if (quote !== "'" && quote !== '"') return void 0;
-  const start = index;
-  let value = "";
-  for (index += 1; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === quote) {
-      return { value, offset: start, excerpt: source.slice(start, index + 1) };
-    }
-    if (current === "\\" && index + 1 < source.length) {
-      value += source[index + 1];
-      index += 1;
-    } else {
-      value += current;
-    }
-  }
-  return void 0;
-}
-function isWordAt(source, word, index) {
-  return source.startsWith(word, index) && !isIdentifierCharacter(source[index - 1]) && !isIdentifierCharacter(source[index + word.length]);
-}
-function specifierAfterImport(source, index) {
-  index = skipWhitespace(source, index + "import".length);
-  if (source[index] === "(") return readString(source, skipWhitespace(source, index + 1));
-  return specifierInStaticStatement(source, index, true);
-}
-function specifierAfterExport(source, index) {
-  return specifierInStaticStatement(source, index + "export".length, false);
-}
-function specifierInStaticStatement(source, index, allowDirectSpecifier) {
-  for (; index < source.length; index += 1) {
-    if (source[index] === ";") return void 0;
-    if (isWordAt(source, "from", index)) {
-      return readString(source, skipWhitespace(source, index + "from".length));
-    }
-    if (allowDirectSpecifier && (source[index] === "'" || source[index] === '"')) {
-      return readString(source, index);
-    }
-    if (index > 0 && (isWordAt(source, "import", index) || isWordAt(source, "export", index))) {
-      return void 0;
-    }
-  }
-  return void 0;
-}
-function moduleSpecifiers(source) {
-  const result = [];
-  for (let index = 0; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === "/" && source[index + 1] === "/") {
-      index = source.indexOf("\n", index + 2);
-      if (index < 0) break;
-      continue;
-    }
-    if (current === "/" && source[index + 1] === "*") {
-      const end = source.indexOf("*/", index + 2);
-      if (end < 0) break;
-      index = end + 1;
-      continue;
-    }
-    if (current === "'" || current === '"' || current === "`") {
-      const string = readString(source, index);
-      if (string) index = string.offset + string.excerpt.length - 1;
-      continue;
-    }
-    const specifier = isWordAt(source, "import", index) ? specifierAfterImport(source, index) : isWordAt(source, "export", index) ? specifierAfterExport(source, index) : void 0;
-    if (specifier) result.push(specifier);
-  }
-  return result;
-}
-function importEdges(file, files) {
-  const edges = [];
-  for (const moduleSpecifier of moduleSpecifiers(file.content)) {
-    const specifier = moduleSpecifier.value;
-    if (!specifier.startsWith(".")) continue;
-    const line = file.content.slice(0, moduleSpecifier.offset).split("\n").length;
-    const evidence = {
-      kind: "import",
-      file: file.path,
-      line,
-      excerpt: moduleSpecifier.excerpt
-    };
-    const target = resolveSpecifier(file.path, specifier, files);
-    edges.push({
-      from: file.path,
-      specifier,
-      to: target?.path ?? null,
-      resolution: target ? "resolved" : "unresolved",
-      fromLayer: file.layer,
-      toLayer: target?.layer ?? null,
-      evidence
-    });
-  }
-  return edges;
-}
-function resolveSpecifier(from, specifier, files) {
-  const segments = from.split("/");
-  segments.pop();
-  for (const segment of specifier.split("/")) {
-    if (segment === "." || segment === "") continue;
-    if (segment === "..") segments.pop();
-    else segments.push(segment);
-  }
-  const base = segments.join("/");
-  for (const candidate of [base, `${base}.ts`, `${base}.tsx`, `${base}.mts`, `${base}.cts`, `${base}/index.ts`, `${base}/index.tsx`]) {
-    const found = files.get(candidate);
-    if (found) return found;
-  }
-  return void 0;
-}
-function violationsFor(edges, config) {
-  const violations = [];
-  for (const edge of edges) {
-    if (!edge.to || !edge.fromLayer || !edge.toLayer) continue;
-    const rule = findDeniedEdgeRule(config.rules, edge.fromLayer, edge.toLayer, {
-      fromPath: edge.from,
-      toPath: edge.to,
-      layers: config.layers
-    });
-    if (!rule) continue;
-    violations.push({
-      ruleId: `layer-dependency:${rule.from}->${rule.to}`,
-      message: rule.message ?? `${rule.from} must not depend on ${rule.to}.`,
-      edge,
-      evidence: edge.evidence
-    });
-  }
-  return violations;
-}
-function analyzeProject(input) {
-  const files = input.files.map((inputFile) => {
-    const path = normalizePath(inputFile.path);
-    return {
-      path,
-      content: inputFile.content,
-      contentHash: deterministicHash(inputFile.content),
-      layer: layerForRelativePath(path, input.contract.config.layers) ?? null
-    };
-  }).sort((left, right) => left.path.localeCompare(right.path));
-  const fileByPath = new Map(files.map((file) => [file.path, file]));
-  const edges = files.flatMap((file) => importEdges(file, fileByPath));
-  const capabilityUses = [];
-  const violations = violationsFor(edges, input.contract.config);
-  return {
-    ir: {
-      schemaVersion: ANALYSIS_IR_SCHEMA_VERSION,
-      policyHash: input.contract.policyHash,
-      compilerOptionsHash: deterministicHash(stableSerialize(input.compilerOptions ?? {})),
-      files,
-      layers: input.contract.config.layers.map((layer) => layer.name),
-      edges,
-      capabilityUses,
-      violations
-    }
-  };
-}
-function analyzeChange(input) {
-  const files = new Map(input.files.map((file) => [normalizePath(file.path), file]));
-  for (const change of input.changes) {
-    const path = normalizePath(change.path);
-    if ("delete" in change && change.delete) files.delete(path);
-    else if ("content" in change) files.set(path, { path, content: change.content });
-  }
-  return analyzeProject({
-    contract: input.contract,
-    files: [...files.values()],
-    compilerOptions: input.compilerOptions
-  });
-}
-function explainViolation(violation) {
-  const location = `${violation.evidence.file}:${violation.evidence.line}`;
-  if (!violation.edge) return `${violation.ruleId} at ${location}: ${violation.message}`;
-  const target = violation.edge.to ?? violation.edge.specifier;
-  return `${violation.ruleId} at ${location}: ${violation.edge.from} imports ${target}. ${violation.message}`;
-}
-function detectArchitectureCycles(graph) {
-  let index = 0;
-  const indices = /* @__PURE__ */ new Map();
-  const low = /* @__PURE__ */ new Map();
-  const onStack = /* @__PURE__ */ new Set();
-  const stack = [];
-  const components = [];
-  const connect = (file) => {
-    indices.set(file, index);
-    low.set(file, index);
-    index += 1;
-    stack.push(file);
-    onStack.add(file);
-    for (const target of [...graph.get(file) ?? []].sort()) {
-      if (!graph.has(target)) continue;
-      if (!indices.has(target)) {
-        connect(target);
-        low.set(file, Math.min(low.get(file) ?? 0, low.get(target) ?? 0));
-      } else if (onStack.has(target)) {
-        low.set(file, Math.min(low.get(file) ?? 0, indices.get(target) ?? 0));
-      }
-    }
-    if (low.get(file) !== indices.get(file)) return;
-    const component = [];
-    let member;
-    do {
-      member = stack.pop();
-      if (member === void 0) break;
-      onStack.delete(member);
-      component.push(member);
-    } while (member !== file);
-    if (component.length > 1) components.push(component.sort());
-  };
-  for (const file of [...graph.keys()].sort()) {
-    if (!indices.has(file)) connect(file);
-  }
-  return components.sort((left, right) => left[0].localeCompare(right[0])).map((members) => ({
-    ruleId: "CIRCULAR_DEPENDENCY",
-    file: members[0],
-    line: 1,
-    target: members.join(" \u2192 "),
-    message: `Circular dependency among ${members.length} files: ${members.join(" \u2192 ")} \u2192 ${members[0]}.`,
-    cycleKind: "value"
-  }));
-}
-function evaluateArchitectureGraph(input) {
-  const violations = input.contentViolations.map((violation) => ({ ...violation }));
-  const warnings = (input.warnings ?? []).map((warning) => ({ ...warning }));
-  const graph = new Map(
-    input.files.map((file) => [file, /* @__PURE__ */ new Set()])
-  );
-  for (const edge of input.edges) {
-    if (edge.to && edge.to !== edge.from && !edge.typeOnly && graph.has(edge.from)) {
-      graph.get(edge.from)?.add(edge.to);
-    }
-    if (!edge.to || !edge.toLayer) continue;
-    const rule = findDeniedEdgeRule(input.rules, edge.fromLayer, edge.toLayer, {
-      fromPath: edge.from,
-      toPath: edge.to,
-      layers: input.config.layers
-    });
-    if (!rule) continue;
-    const peerIsolation = Boolean(rule.peerIsolation);
-    violations.push({
-      ruleId: "LAYER_IMPORT_VIOLATION",
-      file: edge.from,
-      line: edge.line,
-      fromLayer: edge.fromLayer,
-      toLayer: edge.toLayer,
-      target: edge.to,
-      ...edge.typeOnly ? { typeOnly: true } : {},
-      ...edge.targetTypeOnlyExports ? { targetTypeOnlyExports: true } : {},
-      ...edge.sourcePureTypeModule ? { sourcePureTypeModule: true } : {},
-      ...edge.namedBindingsTypeOnly ? { namedBindingsTypeOnly: true } : {},
-      ...!peerIsolation && edge.portProofEligible ? { portProofEligible: true } : {},
-      ...edge.kind ? { edgeKind: edge.kind } : {},
-      ...peerIsolation ? { peerIsolation: true } : {},
-      message: rule.message ?? (peerIsolation ? `${edge.fromLayer} must not ${edge.kind} another slice of ${edge.toLayer} (${edge.from} \u2192 ${edge.to}). Extract shared code or use events/ports across slices.` : `${edge.fromLayer} must not ${edge.kind} ${edge.toLayer}.`)
-    });
-  }
-  const cyclePolicy = String(input.config.cyclePolicy ?? "strict").toLowerCase();
-  if (cyclePolicy !== "off") {
-    const cycles = detectArchitectureCycles(graph);
-    if (cyclePolicy === "soft" || cyclePolicy === "framework-soft") {
-      warnings.push(
-        ...cycles.map((cycle) => ({
-          ...cycle,
-          message: `${cycle.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,
-          failsStrict: false
-        }))
-      );
-    } else {
-      violations.push(...cycles);
-    }
-  }
-  return { violations, warnings, safety: input.safety };
-}
-function configWarning(ruleId, message, extra = {}) {
-  return { ruleId, message, ...extra };
-}
-function collectAnalysisConfigWarnings(input) {
-  const { config, rules, files, manifest } = input;
-  const warnings = [];
-  if (config.dynamicImportAllowlist !== void 0 && (!Array.isArray(config.dynamicImportAllowlist) || config.dynamicImportAllowlist.some((entry) => typeof entry !== "string"))) {
-    warnings.push(
-      configWarning(
-        "CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST",
-        "dynamicImportAllowlist must be an array of file globs."
-      )
-    );
-  }
-  if (config.safety !== void 0 && (config.safety === null || typeof config.safety !== "object" || Array.isArray(config.safety))) {
-    warnings.push(configWarning("CONFIG_INVALID_SAFETY", "safety must be an object."));
-  } else if (config.safety) {
-    for (const key of ["maxTsSuppressions", "maxAnyCasts"]) {
-      const value = config.safety[key];
-      if (value !== void 0 && (!Number.isInteger(value) || value < 0)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_INVALID_SAFETY_THRESHOLD",
-            `safety.${key} must be a non-negative integer.`
-          )
-        );
-      }
-    }
-  }
-  const layers = Array.isArray(config.layers) ? config.layers : [];
-  const manifestLayers = Array.isArray(manifest?.architecture?.layers) ? manifest.architecture.layers : [];
-  const knownLayers = /* @__PURE__ */ new Set([
-    ...layers.map((layer) => layer.name).filter(Boolean),
-    ...manifestLayers.map((layer) => layer.name).filter((name) => Boolean(name))
-  ]);
-  if (layers.length === 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_NO_LAYERS",
-        "No file layers are configured; ark-check cannot classify files for import-boundary enforcement."
-      )
-    );
-  }
-  const seenLayers = /* @__PURE__ */ new Set();
-  const duplicateLayers = /* @__PURE__ */ new Set();
-  for (const layer of layers) {
-    if (!layer.name) {
-      warnings.push(configWarning("CONFIG_LAYER_WITHOUT_NAME", "A configured layer is missing a name."));
-      continue;
-    }
-    if (seenLayers.has(layer.name)) duplicateLayers.add(layer.name);
-    seenLayers.add(layer.name);
-    if (layer.forbiddenGlobals !== void 0 && (!Array.isArray(layer.forbiddenGlobals) || layer.forbiddenGlobals.some((entry) => typeof entry !== "string"))) {
-      warnings.push(
-        configWarning(
-          "CONFIG_INVALID_FORBIDDEN_GLOBALS",
-          `Layer "${layer.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,
-          { layer: layer.name }
-        )
-      );
-    }
-    const patterns = Array.isArray(layer.patterns) ? layer.patterns : [];
-    if (patterns.length === 0) {
-      warnings.push(
-        configWarning(
-          "CONFIG_LAYER_WITHOUT_PATTERNS",
-          `Layer "${layer.name}" has no file patterns and will never classify files.`,
-          { layer: layer.name }
-        )
-      );
-      continue;
-    }
-    for (const pattern of patterns) {
-      let expression;
-      try {
-        expression = globToRegExp(pattern);
-      } catch (error) {
-        warnings.push(
-          configWarning(
-            "CONFIG_INVALID_LAYER_PATTERN",
-            `Layer "${layer.name}" has an invalid pattern "${pattern}": ${error instanceof Error ? error.message : String(error)}`,
-            { layer: layer.name, pattern }
-          )
-        );
-        continue;
-      }
-      if (!files.some((file) => expression.test(file)) && !layer.optional) {
-        warnings.push(
-          configWarning(
-            "CONFIG_LAYER_PATTERN_NO_MATCHES",
-            `Layer "${layer.name}" pattern "${pattern}" matched no included files.`,
-            { layer: layer.name, pattern, failsStrict: false }
-          )
-        );
-      }
-    }
-  }
-  for (const name of duplicateLayers) {
-    warnings.push(
-      configWarning("CONFIG_DUPLICATE_LAYER", `Layer "${name}" is configured more than once.`, {
-        layer: name
-      })
-    );
-  }
-  if (knownLayers.size > 0) {
-    for (const rule of rules ?? []) {
-      if (rule.from && !knownLayers.has(rule.from)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_RULE_UNKNOWN_FROM_LAYER",
-            `Rule references unknown source layer "${rule.from}".`,
-            { fromLayer: rule.from, toLayer: rule.to }
-          )
-        );
-      }
-      if (rule.to && !knownLayers.has(rule.to)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_RULE_UNKNOWN_TO_LAYER",
-            `Rule references unknown target layer "${rule.to}".`,
-            { fromLayer: rule.from, toLayer: rule.to }
-          )
-        );
-      }
-    }
-  }
-  const ambiguousPairs = /* @__PURE__ */ new Set();
-  if (layers.length > 1) {
-    for (const file of files) {
-      let topScore = -1;
-      let topLayers = [];
-      for (const layer of layers) {
-        for (const pattern of layer.patterns ?? []) {
-          if (!globToRegExp(pattern).test(file)) continue;
-          const score = patternSpecificity(pattern);
-          if (score > topScore) {
-            topScore = score;
-            topLayers = [layer.name];
-          } else if (score === topScore && !topLayers.includes(layer.name)) {
-            topLayers.push(layer.name);
-          }
-        }
-      }
-      if (topLayers.length > 1) ambiguousPairs.add([...topLayers].sort().join(" + "));
-    }
-  }
-  if (ambiguousPairs.size > 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_AMBIGUOUS_LAYERS",
-        `Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...ambiguousPairs].join(", ")}.`,
-        { pairs: [...ambiguousPairs] }
-      )
-    );
-  }
-  const unclassified = files.filter((file) => !layerForRelativePath(file, layers));
-  if (unclassified.length > 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_UNCLASSIFIED_FILES",
-        `${unclassified.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,
-        { count: unclassified.length, samples: unclassified.slice(0, 5) }
-      )
-    );
-  }
-  return warnings;
-}
-export {
-  SOURCE_POLICY_MESSAGES,
-  analyzeChange,
-  analyzeProject,
-  classifyPublishFacts,
-  collectAnalysisConfigWarnings,
-  collectForbiddenCapabilityUses,
-  detectArchitectureCycles,
-  evaluateArchitectureGraph,
-  explainViolation,
-  extractSemanticDependencies,
-  loadContract,
-  looksLikeArkIntent
-};
+function $(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}function E(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(E).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${E(t[n])}`).join(",")}}`}var K="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",ie=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Ee=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function we(){let e=[];for(let t of ie)for(let n of ie)t===n||Ee.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}var se=we();var w={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ae={$schema:"https://json-schema.org/draft/2020-12/schema",$id:K,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:K,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.0",default:"1.0"},name:{type:"string",minLength:1},include:{...w,minItems:1,default:["src"]},exclude:{...w,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:se,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...w,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...w,minItems:1},exclude:w,intentPrefixes:w,description:{type:"string",minLength:1},forbiddenGlobals:w,mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...w,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}}}},P=class extends Error{issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+${n.map(r=>`- ${r.path}: ${r.message}`).join(`
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function oe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function B(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}function R(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function $e(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}function F(e,t,n,r,i){if(t.$ref){let a=$e(t.$ref,r);if(!a){i.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}F(e,a,n,r,i);return}if(t.const!==void 0&&!Object.is(e,t.const)){i.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){i.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!oe(e)){i.push({path:n,message:`must be an object; received ${R(e)}`});return}let a=t.properties??{};for(let o of t.required??[])e[o]===void 0&&i.push({path:B(n,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in a||i.push({path:B(n,o),message:"unknown field"});for(let[o,l]of Object.entries(a))e[o]!==void 0&&F(e[o],l,B(n,o),r,i);return}if(t.type==="array"){if(!Array.isArray(e)){i.push({path:n,message:`must be an array; received ${R(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&i.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(o=>JSON.stringify(o));new Set(a).size!==a.length&&i.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((a,o)=>F(a,t.items,`${n}[${o}]`,r,i));return}if(t.type==="string"){if(typeof e!="string"){i.push({path:n,message:`must be a string; received ${R(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&i.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&i.push({path:n,message:`must be a boolean; received ${R(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){i.push({path:n,message:`must be an integer; received ${R(e)}`});return}t.minimum!==void 0&&e<t.minimum&&i.push({path:n,message:`must be at least ${t.minimum}`})}}function Oe(e){return{...e,$schema:e.$schema===void 0?K:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.0":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?se.map(t=>({...t})):e.rules}}function Re(e,t="ark.config.json"){if(!oe(e))throw new P(t,[{path:"$",message:`must be an object; received ${R(e)}`}]);let n=e.schemaVersion===void 0?"unversioned":null;if(e.schemaVersion!==void 0&&e.schemaVersion!=="1.0")throw new P(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.0`}]);return{candidate:Oe(e),migratedFrom:n}}function q(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=Re(e,t),i=[];if(F(n,ae,"$",ae,i),i.length>0)throw new P(t,i);return{config:n,migratedFrom:r}}function ce(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new P(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return q(n,t)}var le=new Map;function de(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function z(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let i=e[n+1];if("*?{}[],".includes(i)||i==="\\"){t+="\\"+i,n+=1;continue}t+="/";continue}t+=r}return t}function Pe(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}function _(e){let t=le.get(e);if(t)return t;let n=z(e),r=Pe(n),i="",a=0;for(let l=0;l<n.length;l+=1){let d=n[l];d==="\\"&&l+1<n.length?(i+=de(n[l+1]),l+=1):d==="*"?n[l+1]==="*"?n[l+2]==="/"?(i+="(?:.*/)?",l+=2):(i+=".*",l+=1):i+="[^/]*":d==="?"?i+="[^/]":d==="{"&&r?(i+="(?:",a+=1):d==="}"&&r&&a>0?(i+=")",a-=1):d===","&&r&&a>0?i+="|":i+=de(d)}let o=new RegExp(`^${i}$`);return le.set(e,o),o}function Y(e){let t=z(String(e)),r=t.split("*")[0].split("/").filter(Boolean).length,i=t.replace(/\*/g,"").length;return r*1e4+i}function M(e,t){let n=String(e).split(/[/\\]/).join("/"),r,i=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>_(o).test(n))){for(let o of a.patterns??[])if(_(o).test(n)){let l=Y(o);l>i&&(i=l,r=a.name)}}return r}function pe(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(i=>String(i).toLowerCase()));for(let i=0;i<n.length-1;i+=1)if(r.has(n[i].toLowerCase()))return`${n[i]}/${n[i+1]}`}function Le(e){let t=new Set;for(let n of e??[]){let i=z(String(n)).split("/").filter(Boolean);for(let a=0;a<i.length;a+=1){let o=i[a];if((o==="**"||o==="*")&&a>0){let l=i[a-1];l&&!l.includes("*")&&!l.includes("{")&&!l.includes("}")&&t.add(l)}}}return[...t]}function ve(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(i=>typeof i=="string"&&i.length>0);let r=(n??[]).find(i=>i.name===t);return Le(r?.patterns)}function W(e,t,n,r){for(let i of e??[])if(!(i.from!==t||i.to!==n)&&i.allowed===!1){if(i.peerIsolation){let a=r?.fromPath,o=r?.toPath;if(!a||!o)continue;let l=ve(i,t,r?.layers);if(l.length===0)continue;let d=pe(a,l),u=pe(o,l);if(!d||!u)continue;if(d!==u)return i;continue}if(t!==n)return i}}function C(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}function S(e){return[...new Set(e??[])].sort()}function L(e,t,n,r,i){let a=S(n),o=S(r),l=new Set(a),d=new Set(o),u=o.filter(g=>!l.has(g)),m=a.filter(g=>!d.has(g));u.length===0&&m.length===0||(u.length>0&&C(e,{kind:"added",path:t,classification:i.added,message:i.addedMessage,before:a,after:o}),m.length>0&&C(e,{kind:"removed",path:t,classification:i.removed,message:i.removedMessage,before:a,after:o}))}function j(e,t,n,r,i,a,o){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?i:i==="strengthening"?"weakening":"strengthening",message:r?a:o,before:n,after:r})}function H(e,t){let n=new Map,r=new Set;for(let i of e){let a=t(i);n.has(a)?r.add(a):n.set(a,i)}return{values:n,duplicates:[...r].sort()}}function _e(e,t,n){let r=H(t,a=>a.name),i=H(n,a=>a.name);(r.duplicates.length>0||i.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:i.duplicates});for(let a of[...new Set([...r.values.keys(),...i.values.keys()])].sort()){let o=r.values.get(a),l=i.values.get(a),d=`$.layers[${a}]`;if(!o&&l){C(e,{kind:"layer-added",path:d,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:l});continue}if(o&&!l){C(e,{kind:"layer-removed",path:d,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:o});continue}!o||!l||(L(e,`${d}.patterns`,o.patterns,l.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),L(e,`${d}.exclude`,o.exclude,l.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."}),L(e,`${d}.forbiddenGlobals`,o.forbiddenGlobals,l.forbiddenGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),S(o.intentPrefixes).join("\0")!==S(l.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${d}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:S(o.intentPrefixes),after:S(l.intentPrefixes)}),j(e,`${d}.mayImportInfrastructure`,o.mayImportInfrastructure===!0,l.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),j(e,`${d}.optional`,o.optional===!0,l.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active."))}}function Me(e,t,n){let r=o=>`${o.from}->${o.to}`,i=H(t,r),a=H(n,r);(i.duplicates.length>0||a.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:i.duplicates,after:a.duplicates});for(let o of[...new Set([...i.values.keys(),...a.values.keys()])].sort()){let l=i.values.get(o),d=a.values.get(o),u=`$.rules[${o}]`;if(!l&&d){d.allowed===!1&&C(e,{kind:"deny-added",path:u,classification:"strengthening",message:"A denied dependency edge was added.",after:d});continue}if(l&&!d){l.allowed===!1&&C(e,{kind:"deny-removed",path:u,classification:"weakening",message:"A denied dependency edge was removed.",before:l});continue}if(!l||!d)continue;l.allowed!==d.allowed&&C(e,{kind:d.allowed?"deny-disabled":"deny-enabled",path:`${u}.allowed`,classification:d.allowed?"weakening":"strengthening",message:d.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:l.allowed,after:d.allowed});let m=l.peerIsolation===!0,g=d.peerIsolation===!0;if(m!==g){let s=l.from===l.to&&d.from===d.to;C(e,{kind:g?"peer-isolation-enabled":"peer-isolation-disabled",path:`${u}.peerIsolation`,classification:s?g?"strengthening":"weakening":"judgment-required",message:s?g?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:m,after:g})}S(l.sliceFolders).join("\0")!==S(d.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${u}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:S(l.sliceFolders),after:S(d.sliceFolders)})}}function Ne(e,t,n){let r=t.safety??{},i=n.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let o=r[a]??0,l=i[a]??0;o!==l&&C(e,{kind:l>o?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:l>o?"weakening":"strengthening",message:l>o?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:o,after:l})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])j(e,`$.safety.${a}`,r[a]===!0,i[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}function De(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}function fe(e,t){let n=[];L(n,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),L(n,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),L(n,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),j(n,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let r={off:0,soft:1,"framework-soft":1,strict:2},i=e.cyclePolicy??"strict",a=t.cyclePolicy??"strict";if(i!==a){let o=r[a]===r[i]?"judgment-required":r[a]>r[i]?"strengthening":"weakening";C(n,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:o,message:"The cycle enforcement level changed.",before:i,after:a})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(n,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),_e(n,e.layers,t.layers),Me(n,e.rules,t.rules),Ne(n,e,t),n.sort((o,l)=>o.path.localeCompare(l.path)||o.id.localeCompare(l.id)),{schemaVersion:"1.0",classification:De(n),findings:n}}function ue(e,t){if(!e||e.schemaVersion!=="1.0"||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(i=>typeof i!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=S(e.findingIds),r=S(t.findingIds);return n.length===r.length&&n.every((i,a)=>i===r[a])}function k(e){return`${e.from}->${e.to}`}function N(e,t,n,r="dependency"){return{id:`${e}:${r}:${k(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${k(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${k(t)}, then preflight again.`}:e==="unplanned"?{nextAction:`Remove the unplanned dependency ${k(t)} from the candidate, then preflight again.`}:{}}}function J(e){let t=[],n=new Map(e.changeMap.map.files.map(s=>[s.path,s])),r=new Map(e.changes.map(s=>[s.path,s])),i=new Map(e.changeMap.map.dependencies.map(s=>[k(s),s])),a=new Map(e.baseDependencies.map(s=>[k(s),s])),o=new Map(e.candidateDependencies.map(s=>[k(s),s]));for(let s of[...n.values()].sort((c,p)=>c.path.localeCompare(p.path))){let c=r.get(s.path);c?c.operation!==s.operation?t.push({id:`contradictory:file:${s.path}`,classification:"contradictory",subject:"file",path:s.path,expectedOperation:s.operation,actualOperation:c.operation,message:`${s.path} was planned as ${s.operation} but the actual operation is ${c.operation}.`,nextAction:`Change ${s.path} to the planned ${s.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${s.path}`,classification:"satisfied",subject:"file",path:s.path,expectedOperation:s.operation,actualOperation:c.operation,message:`${s.path} matches the planned ${s.operation} operation.`}):t.push({id:`missing:file:${s.path}`,classification:"missing",subject:"file",path:s.path,expectedOperation:s.operation,message:`${s.path} was planned as ${s.operation} but is absent from the actual change.`,nextAction:`${s.operation[0].toUpperCase()}${s.operation.slice(1)} ${s.path} in the complete change set, then preflight again.`})}for(let s of[...r.values()].sort((c,p)=>c.path.localeCompare(p.path)))n.has(s.path)||t.push({id:`unplanned:file:${s.path}`,classification:"unplanned",subject:"file",path:s.path,actualOperation:s.operation,message:`${s.path} has an unplanned ${s.operation} operation.`,nextAction:`Remove ${s.path} from the change set, then preflight again.`});let l=new Set;for(let s of[...i.values()].sort((c,p)=>k(c).localeCompare(k(p)))){if(o.has(k(s))){t.push(N("satisfied",s,`${s.from} -> ${s.to} exists in the candidate architecture.`));continue}let c={from:s.to,to:s.from};o.has(k(c))?(l.add(k(c)),t.push(N("contradictory",s,`${s.from} -> ${s.to} was planned, but the candidate contains the reverse edge.`))):t.push(N("missing",s,`${s.from} -> ${s.to} is absent from the candidate architecture.`))}let d=new Set([...n.keys(),...r.keys()]);for(let[s,c]of[...o].sort(([p],[f])=>p.localeCompare(f)))a.has(s)||i.has(s)||l.has(s)||!d.has(c.from)&&!d.has(c.to)||t.push({...N("unplanned",c,`${c.from} -> ${c.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let u=new Set(e.changeMap.map.files.filter(s=>s.operation==="delete").map(s=>s.path));for(let[s,c]of[...a].sort(([p],[f])=>p.localeCompare(f)))o.has(s)||u.has(c.from)||u.has(c.to)||!d.has(c.from)&&!d.has(c.to)||t.push({...N("unplanned",c,`${c.from} -> ${c.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let m={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((s,c)=>m[s.classification]-m[c.classification]||(s.subject===c.subject?0:s.subject==="file"?-1:1)||s.id.localeCompare(c.id));let g={satisfied:t.filter(s=>s.classification==="satisfied").length,missing:t.filter(s=>s.classification==="missing").length,contradictory:t.filter(s=>s.classification==="contradictory").length,unplanned:t.filter(s=>s.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:g.missing===0&&g.contradictory===0&&g.unplanned===0,behavioralCompletion:"not-evaluated",summary:g,findings:t}}function ge(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly?"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.":e.peerIsolation?"Extract the shared dependency to a shared layer, then preflight again.":`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, then preflight again.`;case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}var Z="1.0";var V=class extends Error{issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+${n.map(r=>`- ${r.path}: ${r.message}`).join(`
+`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Q(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function X(e,t,n,r){for(let i of Object.keys(e))t.includes(i)||r.push({path:`${n}.${i}`,message:"unknown field"})}function O(e,t,n,r){let i=e[t];if(typeof i=="string"&&i.length>0)return i;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}function Te(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let i of t.split("/"))if(!(!i||i==="."))if(i===".."){if(n.length===0)return;n.pop()}else n.push(i);let r=n.join("/");return r&&r===t?r:void 0}function Fe(e,t,n="architecture change map"){let r=[];if(!Q(e))throw new V(n,[{path:"$",message:"must be an object"}]);X(e,["$schema","schemaVersion","files","dependencies"],"$",r);let i=O(e,"$schema","$",r),a=O(e,"schemaVersion","$",r);a&&a!==Z&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${Z}`});let o=new Set(t.layers.map(p=>p.name)),l=[],d=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((p,f)=>{let h=`$.files[${f}]`;if(!Q(p)){r.push({path:h,message:"must be an object"});return}X(p,["path","operation","layer"],h,r);let y=O(p,"path",h,r),A=O(p,"operation",h,r),b=O(p,"layer",h,r),x=y?Te(y):void 0;y&&!x&&r.push({path:`${h}.path`,message:"must be a canonical project-relative path"}),A&&!["create","update","delete"].includes(A)&&r.push({path:`${h}.operation`,message:"must be create, update, or delete"}),b&&!o.has(b)&&r.push({path:`${h}.layer`,message:`references unknown layer ${JSON.stringify(b)}`}),x&&d.has(x)&&r.push({path:`${h}.path`,message:`duplicates planned path ${x}`}),x&&d.add(x);let U=x?M(x,t.layers):void 0;x&&b&&o.has(b)&&U!==b&&r.push({path:`${h}.layer`,message:U?`${x} resolves to ${U}, not ${b}`:`${x} is not assigned to an architecture layer`}),x&&A&&["create","update","delete"].includes(A)&&b&&l.push({path:x,operation:A,layer:b})});let u=[],m=new Map(l.map(p=>[p.path,p.operation])),g=new Set,s=e.dependencies??[];if(Array.isArray(s)?s.forEach((p,f)=>{let h=`$.dependencies[${f}]`;if(!Q(p)){r.push({path:h,message:"must be an object"});return}X(p,["from","to"],h,r);let y=O(p,"from",h,r),A=O(p,"to",h,r);y&&!d.has(y)&&r.push({path:`${h}.from`,message:`must reference a planned file path: ${y}`}),A&&!d.has(A)&&r.push({path:`${h}.to`,message:`must reference a planned file path: ${A}`}),y&&m.get(y)==="delete"&&r.push({path:`${h}.from`,message:`cannot depend from deleted file ${y}`}),A&&m.get(A)==="delete"&&r.push({path:`${h}.to`,message:`cannot depend on deleted file ${A}`}),y&&A&&y===A&&r.push({path:h,message:"must not declare a self dependency"});let b=y&&A?`${y}\0${A}`:void 0;b&&g.has(b)&&r.push({path:h,message:`duplicates dependency ${y} -> ${A}`}),b&&g.add(b),y&&A&&u.push({from:y,to:A})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new V(n,r);let c={$schema:i,schemaVersion:Z,files:l.sort((p,f)=>p.path.localeCompare(f.path)),dependencies:u.sort((p,f)=>p.from.localeCompare(f.from)||p.to.localeCompare(f.to))};return{map:c,hash:$(E(c))}}function v(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}function me(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}function he(e,t){if(e.isImportDeclaration(t)){let n=t.importClause;if(!n)return!1;if(n.isTypeOnly)return!0;let r=n.namedBindings;return!!(r&&e.isNamedImports(r)&&r.elements.length>0&&r.elements.every(i=>i.isTypeOnly))}if(e.isExportDeclaration(t)){if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}return!1}function Ae(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=i=>i===t.fileName?t:void 0,r.fileExists=i=>i===t.fileName,r.readFile=i=>i===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}function ee(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}function te(e,t,n,r){let i=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=i?t.getShorthandAssignmentValueSymbol(r.parent):ee(t,r)}catch{a=void 0}return!!a?.declarations?.some(o=>o.getSourceFile().fileName===n.fileName)}function je(e,t){let n,r=[],i=(o,l,d,u=!1)=>r.push({specifier:d,kind:l,line:me(t,o),typeOnly:u,unresolved:d===void 0,node:o}),a=o=>{if(e.isImportDeclaration(o))i(o,"import",v(e,o.moduleSpecifier),he(e,o));else if(e.isExportDeclaration(o)&&o.moduleSpecifier)i(o,"export",v(e,o.moduleSpecifier),he(e,o));else if(e.isImportEqualsDeclaration(o)&&e.isExternalModuleReference(o.moduleReference))i(o,"require",v(e,o.moduleReference.expression));else if(e.isCallExpression(o)){let l=o.expression.kind===e.SyntaxKind.ImportKeyword,u=e.isIdentifier(o.expression)&&o.expression.text==="require"&&!te(e,n??(n=Ae(e,t)),t,o.expression);(l||u)&&i(o,u?"require":"dynamic-import",v(e,o.arguments[0]))}e.forEachChild(o,a)};return a(t),r}function He(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let i=v(e,r.argumentExpression);if(i===void 0)return;n.unshift(i)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}function Ve(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}function ye(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let i=n.slice(0,r).join(".");if(e.has(i))return i}}function Ge(e,t,n){if(n.length===0)return[];let r=new Set(n),i=Ae(e,t),a=new Map,o=new Set;for(let s of t.statements)if(e.isVariableStatement(s))for(let c of s.declarationList.declarations)e.isIdentifier(c.name)&&o.add(c.name.text);let l=s=>{let c=He(e,s);if(!c)return;let p=ee(i,c.root),f=p?a.get(p):void 0;return f?[...f,...c.segments.slice(1)]:te(e,i,t,c.root)||o.has(c.root.text)?void 0:c.segments};for(let s of t.statements)if(e.isVariableStatement(s))for(let c of s.declarationList.declarations){if(!c.initializer||!e.isIdentifier(c.name))continue;let p=l(c.initializer),f=ee(i,c.name);!p||!f||a.set(f,p)}let d=[],u=new Set,m=(s,c)=>{let p=me(t,c),f=`${s}:${c.getStart(t)}`;u.has(f)||(u.add(f),d.push({name:s,line:p,node:c}))},g=s=>{let c=s.parent&&(e.isPropertyAccessExpression(s.parent)||e.isElementAccessExpression(s.parent))&&s.parent.expression===s;if((e.isPropertyAccessExpression(s)||e.isElementAccessExpression(s))&&!c){let p=l(s),f=p?ye(r,p):void 0;f&&m(f,s)}else e.isIdentifier(s)&&r.has(s.text)&&Ve(e,s)&&!te(e,i,t,s)&&m(s.text,s);if(e.isVariableDeclaration(s)&&e.isObjectBindingPattern(s.name)&&s.initializer){let p=l(s.initializer);if(p)for(let f of s.name.elements){if(!e.isIdentifier(f.name))continue;let h=f.propertyName?v(e,f.propertyName)??f.propertyName.text:f.name.text,y=ye(r,[...p,h]);y&&m(y,s.initializer)}}e.forEachChild(s,g)};return g(t),d}var ne={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."};function Ce(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function Ue(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Ce(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ne.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ne.PUBLISH_MISSING_SOURCE}),t}function be(e,t){let n=typeof e=="string"?ce(e,t):q(e,t);return{...n,policyHash:$(E(n.config))}}function mt(e){let t=be(e.baseConfig,e.baseSource??"base ark.config.json"),n=be(e.candidateConfig,e.candidateSource??"candidate ark.config.json"),r=fe(t.config,n.config),i=r.findings.filter(l=>l.classification==="weakening"||l.classification==="judgment-required").map(l=>l.id).sort(),a=i.length>0,o=a&&ue(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:i});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:i,requiresAcknowledgement:a,acknowledged:o,valid:!a||o}}function T(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}function Ie(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}function re(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}function G(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,i="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===n)return{value:i,offset:r,excerpt:e.slice(r,t+1)};a==="\\"&&t+1<e.length?(i+=e[t+1],t+=1):i+=a}}function D(e,t,n){return e.startsWith(t,n)&&!Ie(e[n-1])&&!Ie(e[n+t.length])}function Ke(e,t){return t=re(e,t+6),e[t]==="("?G(e,re(e,t+1)):Se(e,t,!0)}function qe(e,t){return Se(e,t+6,!1)}function Se(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(D(e,"from",t))return G(e,re(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return G(e,t);if(t>0&&(D(e,"import",t)||D(e,"export",t)))return}}function ze(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let a=e.indexOf("*/",n+2);if(a<0)break;n=a+1;continue}if(r==="'"||r==='"'||r==="`"){let a=G(e,n);a&&(n=a.offset+a.excerpt.length-1);continue}let i=D(e,"import",n)?Ke(e,n):D(e,"export",n)?qe(e,n):void 0;i&&t.push(i)}return t}function Ye(e,t){let n=[];for(let r of ze(e.content)){let i=r.value;if(!i.startsWith("."))continue;let a=e.content.slice(0,r.offset).split(`
+`).length,o={kind:"import",file:e.path,line:a,excerpt:r.excerpt},l=We(e.path,i,t);n.push({from:e.path,specifier:i,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:o})}return n}function We(e,t,n){let r=e.split("/");r.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?r.pop():r.push(a));let i=r.join("/");for(let a of[i,`${i}.ts`,`${i}.tsx`,`${i}.mts`,`${i}.cts`,`${i}/index.ts`,`${i}/index.tsx`]){let o=n.get(a);if(o)return o}}function Je(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let i=W(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});i&&n.push({ruleId:`layer-dependency:${i.from}->${i.to}`,message:i.message??`${i.from} must not depend on ${i.to}.`,edge:r,evidence:r.evidence})}return n}function ke(e){let t=e.files.map(o=>{let l=T(o.path);return{path:l,content:o.content,contentHash:$(o.content),layer:M(l,e.contract.config.layers)??null}}).sort((o,l)=>o.path.localeCompare(l.path)),n=new Map(t.map(o=>[o.path,o])),r=t.flatMap(o=>Ye(o,n)),i=[],a=Je(r,e.contract.config);return{ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:$(E(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(o=>o.name),edges:r,capabilityUses:i,violations:a}}}function Ze(e){let t=new Map(e.files.map(n=>[T(n.path),n]));for(let n of e.changes){let r=T(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return ke({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}function At(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}function Qe(e){let t=0,n=new Map,r=new Map,i=new Set,a=[],o=[],l=d=>{n.set(d,t),r.set(d,t),t+=1,a.push(d),i.add(d);for(let g of[...e.get(d)??[]].sort())e.has(g)&&(n.has(g)?i.has(g)&&r.set(d,Math.min(r.get(d)??0,n.get(g)??0)):(l(g),r.set(d,Math.min(r.get(d)??0,r.get(g)??0))));if(r.get(d)!==n.get(d))return;let u=[],m;do{if(m=a.pop(),m===void 0)break;i.delete(m),u.push(m)}while(m!==d);u.length>1&&o.push(u.sort())};for(let d of[...e.keys()].sort())n.has(d)||l(d);return o.sort((d,u)=>d[0].localeCompare(u[0])).map(d=>({ruleId:"CIRCULAR_DEPENDENCY",file:d[0],line:1,target:d.join(" \u2192 "),message:`Circular dependency among ${d.length} files: ${d.join(" \u2192 ")} \u2192 ${d[0]}.`,cycleKind:"value"}))}function Xe(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.toLayer)continue;let o=W(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let l=!!o.peerIsolation;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...l?{peerIsolation:!0}:{},message:o.message??(l?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}). Extract shared code or use events/ports across slices.`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`)})}let i=String(e.config.cyclePolicy??"strict").toLowerCase();if(i!=="off"){let a=Qe(r);i==="soft"||i==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}function xe(e){return $(E(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}function Ct(e){let t=ke(e),n=new Map(t.ir.files.map(s=>[s.path,s])),r=[],i=new Set,a=[];for(let s of e.changes){let c=s.path.replace(/\\/g,"/"),p=T(s.path);if(!p||p===".."||p.startsWith("../")||c.startsWith("/")||/^[A-Za-z]:\//.test(c)||c.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(i.has(p)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:p,line:1,message:`The atomic change set contains more than one operation for ${p}.`});continue}i.add(p),"delete"in s&&s.delete&&!n.has(p)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:p,line:1,message:`Cannot delete ${p} because it is not present in the supplied base tree.`}),r.push("delete"in s&&s.delete?{path:p,delete:!0}:{path:p,content:"content"in s?s.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let o=Ze({...e,changes:r}),l=new Map(o.ir.files.map(s=>[s.path,s])),d=Xe({config:e.contract.config,rules:e.contract.config.rules,files:o.ir.files.map(s=>s.path),contentViolations:[],edges:o.ir.edges.filter(s=>!!s.fromLayer).map(s=>({from:s.from,fromLayer:s.fromLayer,...s.to?{to:s.to}:{},...s.toLayer?{toLayer:s.toLayer}:{},line:s.evidence.line,kind:"import"}))}),u=r.map(s=>{let c=T(s.path),p=n.get(c),f=l.get(c);return{path:c,operation:"delete"in s&&s.delete?"delete":p?"update":"create",...p?{beforeContentHash:p.contentHash}:{},...f?{candidateContentHash:f.contentHash}:{}}}).sort((s,c)=>s.path.localeCompare(c.path)),m=[...a,...d.violations].map(s=>({...s,nextAction:ge(s)})),g=e.changeMap?J({changeMap:e.changeMap,changes:u,baseDependencies:t.ir.edges.flatMap(s=>s.to?[{from:s.from,to:s.to}]:[]),candidateDependencies:o.ir.edges.flatMap(s=>s.to?[{from:s.from,to:s.to}]:[])}):void 0;return{schemaVersion:"1.0",valid:m.length===0&&(g?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:o.ir.compilerOptionsHash,baseTreeHash:xe(t.ir.files),candidateTreeHash:xe(o.ir.files),...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...g?{convergence:g}:{},changes:u,violations:m,warnings:d.warnings}}function I(e,t,n={}){return{ruleId:e,message:t,...n}}function bt(e){let{config:t,rules:n,files:r,manifest:i}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(c=>typeof c!="string"))&&a.push(I("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(I("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let c of["maxTsSuppressions","maxAnyCasts"]){let p=t.safety[c];p!==void 0&&(!Number.isInteger(p)||p<0)&&a.push(I("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${c} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],l=Array.isArray(i?.architecture?.layers)?i.architecture.layers:[],d=new Set([...o.map(c=>c.name).filter(Boolean),...l.map(c=>c.name).filter(c=>!!c)]);o.length===0&&a.push(I("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let u=new Set,m=new Set;for(let c of o){if(!c.name){a.push(I("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}u.has(c.name)&&m.add(c.name),u.add(c.name),c.forbiddenGlobals!==void 0&&(!Array.isArray(c.forbiddenGlobals)||c.forbiddenGlobals.some(f=>typeof f!="string"))&&a.push(I("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${c.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:c.name}));let p=Array.isArray(c.patterns)?c.patterns:[];if(p.length===0){a.push(I("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${c.name}" has no file patterns and will never classify files.`,{layer:c.name}));continue}for(let f of p){let h;try{h=_(f)}catch(y){a.push(I("CONFIG_INVALID_LAYER_PATTERN",`Layer "${c.name}" has an invalid pattern "${f}": ${y instanceof Error?y.message:String(y)}`,{layer:c.name,pattern:f}));continue}!r.some(y=>h.test(y))&&!c.optional&&a.push(I("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${c.name}" pattern "${f}" matched no included files.`,{layer:c.name,pattern:f,failsStrict:!1}))}}for(let c of m)a.push(I("CONFIG_DUPLICATE_LAYER",`Layer "${c}" is configured more than once.`,{layer:c}));if(d.size>0)for(let c of n??[])c.from&&!d.has(c.from)&&a.push(I("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${c.from}".`,{fromLayer:c.from,toLayer:c.to})),c.to&&!d.has(c.to)&&a.push(I("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${c.to}".`,{fromLayer:c.from,toLayer:c.to}));let g=new Set;if(o.length>1)for(let c of r){let p=-1,f=[];for(let h of o)for(let y of h.patterns??[]){if(!_(y).test(c))continue;let A=Y(y);A>p?(p=A,f=[h.name]):A===p&&!f.includes(h.name)&&f.push(h.name)}f.length>1&&g.add([...f].sort().join(" + "))}g.size>0&&a.push(I("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...g].join(", ")}.`,{pairs:[...g]}));let s=r.filter(c=>!M(c,o));return s.length>0&&a.push(I("CONFIG_UNCLASSIFIED_FILES",`${s.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:s.length,samples:s.slice(0,5)})),a}export{ne as SOURCE_POLICY_MESSAGES,J as analyzeArchitectureConvergence,Ze as analyzeChange,mt as analyzePolicyDelta,ke as analyzeProject,Ue as classifyPublishFacts,bt as collectAnalysisConfigWarnings,Ge as collectForbiddenCapabilityUses,Qe as detectArchitectureCycles,Xe as evaluateArchitectureGraph,At as explainViolation,je as extractSemanticDependencies,Fe as loadArchitectureChangeMap,be as loadContract,Ce as looksLikeArkIntent,Ct as preflightChange};