arkgate 3.0.5 → 3.2.0

package/dist/index.js

@@ -1,1908 +1,6 @@
-// src/version.ts
-var version = "3.0.5";
-
-// src/domain/adapterContract.ts
-var ARK_ANALYSIS_RESULT_SCHEMA_VERSION = "1.0";
-function text(value) {
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function positiveInteger(value, fallback) {
-  return Number.isInteger(value) && Number(value) > 0 ? Number(value) : fallback;
-}
-function toAdapterDiagnostic(violation2, fallbackSeverity = "error") {
-  const ruleId = text(violation2.ruleId) ?? text(violation2.code) ?? "ARK_UNKNOWN";
-  const severity = violation2.severity === "warning" ? "warning" : fallbackSeverity;
-  const evidence = {
-    ...text(violation2.target) ? { target: text(violation2.target) } : {},
-    ...text(violation2.fromLayer) ? { fromLayer: text(violation2.fromLayer) } : {},
-    ...text(violation2.toLayer) ? { toLayer: text(violation2.toLayer) } : {},
-    ...typeof violation2.typeOnly === "boolean" ? { typeOnly: violation2.typeOnly } : {}
-  };
-  return {
-    ruleId,
-    severity,
-    message: text(violation2.message) ?? ruleId,
-    location: {
-      file: text(violation2.file) ?? "<unknown>",
-      line: positiveInteger(violation2.line, 1),
-      column: positiveInteger(violation2.column, 1)
-    },
-    evidence
-  };
-}
-function createAdapterResult(input) {
-  return {
-    schemaVersion: ARK_ANALYSIS_RESULT_SCHEMA_VERSION,
-    valid: input.valid,
-    diagnostics: [
-      ...(input.violations ?? []).map((item) => toAdapterDiagnostic(item, "error")),
-      ...(input.warnings ?? []).map((item) => toAdapterDiagnostic(item, "warning"))
-    ]
-  };
-}
-var ARK_ANALYSIS_RESULT_SCHEMA = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://unpkg.com/arkgate@2/schemas/ark.analysis-result.schema.json",
-  title: "ArkGate analysis result",
-  type: "object",
-  additionalProperties: false,
-  required: ["schemaVersion", "valid", "diagnostics"],
-  properties: {
-    schemaVersion: { const: ARK_ANALYSIS_RESULT_SCHEMA_VERSION },
-    valid: { type: "boolean" },
-    diagnostics: {
-      type: "array",
-      items: {
-        type: "object",
-        additionalProperties: false,
-        required: ["ruleId", "severity", "message", "location", "evidence"],
-        properties: {
-          ruleId: { type: "string", minLength: 1 },
-          severity: { enum: ["error", "warning"] },
-          message: { type: "string", minLength: 1 },
-          location: {
-            type: "object",
-            additionalProperties: false,
-            required: ["file", "line", "column"],
-            properties: {
-              file: { type: "string", minLength: 1 },
-              line: { type: "integer", minimum: 1 },
-              column: { type: "integer", minimum: 1 }
-            }
-          },
-          evidence: {
-            type: "object",
-            additionalProperties: false,
-            properties: {
-              target: { type: "string" },
-              fromLayer: { type: "string" },
-              toLayer: { type: "string" },
-              typeOnly: { type: "boolean" }
-            }
-          }
-        }
-      }
-    }
-  }
-};
-
-// src/domain/layerMatch.ts
-var regexpCache = /* @__PURE__ */ new Map();
-function escapeLiteral(ch) {
-  return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
-}
-function normalizeGlobSeparators(pattern) {
-  let out = "";
-  for (let i = 0; i < pattern.length; i += 1) {
-    const c = pattern[i];
-    if (c === "\\" && i + 1 < pattern.length) {
-      const next = pattern[i + 1];
-      if ("*?{}[],".includes(next) || next === "\\") {
-        out += "\\" + next;
-        i += 1;
-        continue;
-      }
-      out += "/";
-      continue;
-    }
-    out += c;
-  }
-  return out;
-}
-function bracesBalanced(glob) {
-  let depth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\") {
-      i += 1;
-      continue;
-    }
-    if (c === "{") depth += 1;
-    else if (c === "}") {
-      depth -= 1;
-      if (depth < 0) return false;
-    }
-  }
-  return depth === 0;
-}
-function globToRegExp(pattern) {
-  const cached = regexpCache.get(pattern);
-  if (cached) return cached;
-  const glob = normalizeGlobSeparators(pattern);
-  const useBraces = bracesBalanced(glob);
-  let out = "";
-  let braceDepth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\" && i + 1 < glob.length) {
-      out += escapeLiteral(glob[i + 1]);
-      i += 1;
-    } else if (c === "*") {
-      if (glob[i + 1] === "*") {
-        if (glob[i + 2] === "/") {
-          out += "(?:.*/)?";
-          i += 2;
-        } else {
-          out += ".*";
-          i += 1;
-        }
-      } else {
-        out += "[^/]*";
-      }
-    } else if (c === "?") {
-      out += "[^/]";
-    } else if (c === "{" && useBraces) {
-      out += "(?:";
-      braceDepth += 1;
-    } else if (c === "}" && useBraces && braceDepth > 0) {
-      out += ")";
-      braceDepth -= 1;
-    } else if (c === "," && useBraces && braceDepth > 0) {
-      out += "|";
-    } else {
-      out += escapeLiteral(c);
-    }
-  }
-  const re = new RegExp(`^${out}$`);
-  regexpCache.set(pattern, re);
-  return re;
-}
-function patternSpecificity(pattern) {
-  const glob = normalizeGlobSeparators(String(pattern));
-  const beforeWildcard = glob.split("*")[0];
-  const literalSegments = beforeWildcard.split("/").filter(Boolean).length;
-  const literalLength = glob.replace(/\*/g, "").length;
-  return literalSegments * 1e4 + literalLength;
-}
-function layerForRelativePath(relPath, layers) {
-  const rel = String(relPath).split(/[/\\]/).join("/");
-  let bestName;
-  let bestScore = -1;
-  for (const layer of layers ?? []) {
-    if ((layer.exclude ?? []).some((pattern) => globToRegExp(pattern).test(rel))) {
-      continue;
-    }
-    for (const pattern of layer.patterns ?? []) {
-      if (globToRegExp(pattern).test(rel)) {
-        const score = patternSpecificity(pattern);
-        if (score > bestScore) {
-          bestScore = score;
-          bestName = layer.name;
-        }
-      }
-    }
-  }
-  return bestName;
-}
-function sliceIdForPath(relPath, sliceFolders) {
-  if (!sliceFolders?.length) return void 0;
-  const parts = String(relPath).split(/[/\\]/).filter(Boolean);
-  const folders = new Set(sliceFolders.map((s) => String(s).toLowerCase()));
-  for (let i = 0; i < parts.length - 1; i += 1) {
-    if (folders.has(parts[i].toLowerCase())) {
-      return `${parts[i]}/${parts[i + 1]}`;
-    }
-  }
-  return void 0;
-}
-function inferSliceFoldersFromPatterns(patterns) {
-  const out = /* @__PURE__ */ new Set();
-  for (const pattern of patterns ?? []) {
-    const glob = normalizeGlobSeparators(String(pattern));
-    const parts = glob.split("/").filter(Boolean);
-    for (let i = 0; i < parts.length; i += 1) {
-      const part = parts[i];
-      if ((part === "**" || part === "*") && i > 0) {
-        const prev = parts[i - 1];
-        if (prev && !prev.includes("*") && !prev.includes("{") && !prev.includes("}")) {
-          out.add(prev);
-        }
-      }
-    }
-  }
-  return [...out];
-}
-function resolveSliceFolders(rule, layerName, layers) {
-  if (Array.isArray(rule.sliceFolders) && rule.sliceFolders.length > 0) {
-    return rule.sliceFolders.filter((s) => typeof s === "string" && s.length > 0);
-  }
-  const layer = (layers ?? []).find((l) => l.name === layerName);
-  return inferSliceFoldersFromPatterns(layer?.patterns);
-}
-function findDeniedEdgeRule(rules, from, to, options) {
-  for (const rule of rules ?? []) {
-    if (rule.from !== from || rule.to !== to) continue;
-    if (rule.allowed !== false) continue;
-    if (rule.peerIsolation) {
-      const fromPath = options?.fromPath;
-      const toPath = options?.toPath;
-      if (!fromPath || !toPath) continue;
-      const folders = resolveSliceFolders(rule, from, options?.layers);
-      if (folders.length === 0) continue;
-      const fromSlice = sliceIdForPath(fromPath, folders);
-      const toSlice = sliceIdForPath(toPath, folders);
-      if (!fromSlice || !toSlice) continue;
-      if (fromSlice !== toSlice) return rule;
-      continue;
-    }
-    if (from === to) continue;
-    return rule;
-  }
-  return void 0;
-}
-
-// src/domain/sourcePolicy.ts
-var SOURCE_POLICY_MESSAGES = {
-  RAW_EVENT_PUBLISH: "Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",
-  PUBLISH_MISSING_SOURCE: "Strict Ark publish calls must include metadata.source."
-};
-function looksLikeArkIntent(value) {
-  return /^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(
-    value
-  );
-}
-function classifyPublishFacts(facts) {
-  if (!facts.publishCall) return [];
-  const findings = [];
-  if (facts.rawIntentName !== void 0 && looksLikeArkIntent(facts.rawIntentName) || facts.objectHasIntent) {
-    findings.push({
-      ruleId: "RAW_EVENT_PUBLISH",
-      message: SOURCE_POLICY_MESSAGES.RAW_EVENT_PUBLISH
-    });
-  }
-  if (facts.arkPublishCandidate && !facts.hasSource) {
-    findings.push({
-      ruleId: "PUBLISH_MISSING_SOURCE",
-      message: SOURCE_POLICY_MESSAGES.PUBLISH_MISSING_SOURCE
-    });
-  }
-  return findings;
-}
-
-// src/kernel/semanticAnalysis.ts
-function literalText(ts, node) {
-  return node && ts.isStringLiteralLike(node) ? node.text : void 0;
-}
-function lineOf(sourceFile, node) {
-  return sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
-}
-function isTypeOnlyReference(ts, node) {
-  if (ts.isImportDeclaration(node)) {
-    const clause = node.importClause;
-    if (!clause) return false;
-    if (clause.isTypeOnly) return true;
-    const named = clause.namedBindings;
-    return Boolean(
-      named && ts.isNamedImports(named) && named.elements.length > 0 && named.elements.every((element) => element.isTypeOnly)
-    );
-  }
-  if (ts.isExportDeclaration(node)) {
-    if (node.isTypeOnly) return true;
-    const clause = node.exportClause;
-    return Boolean(
-      clause && ts.isNamedExports(clause) && clause.elements.length > 0 && clause.elements.every((element) => element.isTypeOnly)
-    );
-  }
-  return false;
-}
-function singleFileChecker(ts, sourceFile) {
-  const options = { noLib: true, noResolve: true, target: ts.ScriptTarget.Latest };
-  const host = ts.createCompilerHost(options, true);
-  host.getSourceFile = (fileName) => fileName === sourceFile.fileName ? sourceFile : void 0;
-  host.fileExists = (fileName) => fileName === sourceFile.fileName;
-  host.readFile = (fileName) => fileName === sourceFile.fileName ? sourceFile.text : void 0;
-  return ts.createProgram([sourceFile.fileName], options, host).getTypeChecker();
-}
-function symbolAt(checker, node) {
-  try {
-    return checker.getSymbolAtLocation(node);
-  } catch {
-    return void 0;
-  }
-}
-function localDeclaration(ts, checker, sourceFile, node) {
-  const shorthand = node.parent && ts.isShorthandPropertyAssignment(node.parent) && node.parent.name === node;
-  let symbol;
-  try {
-    symbol = shorthand ? checker.getShorthandAssignmentValueSymbol(node.parent) : symbolAt(checker, node);
-  } catch {
-    symbol = void 0;
-  }
-  return Boolean(
-    symbol?.declarations?.some(
-      (declaration) => declaration.getSourceFile().fileName === sourceFile.fileName
-    )
-  );
-}
-function extractSemanticDependencies(ts, sourceFile) {
-  let checker;
-  const dependencies = [];
-  const add = (node, kind, specifier, typeOnly = false) => dependencies.push({
-    specifier,
-    kind,
-    line: lineOf(sourceFile, node),
-    typeOnly,
-    unresolved: specifier === void 0,
-    node
-  });
-  const visit = (node) => {
-    if (ts.isImportDeclaration(node)) {
-      add(node, "import", literalText(ts, node.moduleSpecifier), isTypeOnlyReference(ts, node));
-    } else if (ts.isExportDeclaration(node) && node.moduleSpecifier) {
-      add(node, "export", literalText(ts, node.moduleSpecifier), isTypeOnlyReference(ts, node));
-    } else if (ts.isImportEqualsDeclaration(node) && ts.isExternalModuleReference(node.moduleReference)) {
-      add(node, "require", literalText(ts, node.moduleReference.expression));
-    } else if (ts.isCallExpression(node)) {
-      const dynamicImport = node.expression.kind === ts.SyntaxKind.ImportKeyword;
-      const requireCall = ts.isIdentifier(node.expression) && node.expression.text === "require";
-      const directRequire = requireCall && !localDeclaration(
-        ts,
-        checker ?? (checker = singleFileChecker(ts, sourceFile)),
-        sourceFile,
-        node.expression
-      );
-      if (dynamicImport || directRequire) {
-        add(node, directRequire ? "require" : "dynamic-import", literalText(ts, node.arguments[0]));
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return dependencies;
-}
-function staticAccessPath(ts, node) {
-  const segments = [];
-  let current = node;
-  while (ts.isPropertyAccessExpression(current) || ts.isElementAccessExpression(current)) {
-    if (ts.isPropertyAccessExpression(current)) segments.unshift(current.name.text);
-    else {
-      const property = literalText(ts, current.argumentExpression);
-      if (property === void 0) return void 0;
-      segments.unshift(property);
-    }
-    current = current.expression;
-  }
-  if (!ts.isIdentifier(current)) return void 0;
-  segments.unshift(current.text);
-  return { root: current, segments };
-}
-function runtimeIdentifierReference(ts, node) {
-  const parent = node.parent;
-  if (ts.isPropertyAccessExpression(parent) || ts.isElementAccessExpression(parent)) return false;
-  return ts.isExpressionNode(node) && !ts.isInTypeQuery(node) || ts.isShorthandPropertyAssignment(parent) && parent.name === node;
-}
-function bestForbiddenMatch(entries, segments) {
-  const normalized = segments[0] === "globalThis" ? segments.slice(1) : segments;
-  for (let length = normalized.length; length >= 1; length -= 1) {
-    const candidate = normalized.slice(0, length).join(".");
-    if (entries.has(candidate)) return candidate;
-  }
-  return void 0;
-}
-function collectForbiddenCapabilityUses(ts, sourceFile, forbidden) {
-  if (forbidden.length === 0) return [];
-  const entries = new Set(forbidden);
-  const checker = singleFileChecker(ts, sourceFile);
-  const aliases = /* @__PURE__ */ new Map();
-  const topLevelNames = /* @__PURE__ */ new Set();
-  for (const statement of sourceFile.statements) {
-    if (ts.isVariableStatement(statement)) {
-      for (const declaration of statement.declarationList.declarations) {
-        if (ts.isIdentifier(declaration.name)) topLevelNames.add(declaration.name.text);
-      }
-    }
-  }
-  const resolvePath = (node) => {
-    const path = staticAccessPath(ts, node);
-    if (!path) return void 0;
-    const symbol = symbolAt(checker, path.root);
-    const alias = symbol ? aliases.get(symbol) : void 0;
-    if (alias) return [...alias, ...path.segments.slice(1)];
-    return localDeclaration(ts, checker, sourceFile, path.root) || topLevelNames.has(path.root.text) ? void 0 : path.segments;
-  };
-  for (const statement of sourceFile.statements) {
-    if (!ts.isVariableStatement(statement)) continue;
-    for (const declaration of statement.declarationList.declarations) {
-      if (!declaration.initializer || !ts.isIdentifier(declaration.name)) continue;
-      const path = resolvePath(declaration.initializer);
-      const symbol = symbolAt(checker, declaration.name);
-      if (!path || !symbol) continue;
-      aliases.set(symbol, path);
-    }
-  }
-  const uses = [];
-  const seen = /* @__PURE__ */ new Set();
-  const flag = (name, node) => {
-    const line = lineOf(sourceFile, node);
-    const key = `${name}:${node.getStart(sourceFile)}`;
-    if (seen.has(key)) return;
-    seen.add(key);
-    uses.push({ name, line, node });
-  };
-  const visit = (node) => {
-    const parentContinuesPath = node.parent && (ts.isPropertyAccessExpression(node.parent) || ts.isElementAccessExpression(node.parent)) && node.parent.expression === node;
-    if ((ts.isPropertyAccessExpression(node) || ts.isElementAccessExpression(node)) && !parentContinuesPath) {
-      const path = resolvePath(node);
-      const match = path ? bestForbiddenMatch(entries, path) : void 0;
-      if (match) flag(match, node);
-    } else if (ts.isIdentifier(node) && entries.has(node.text) && runtimeIdentifierReference(ts, node) && !localDeclaration(ts, checker, sourceFile, node)) {
-      flag(node.text, node);
-    }
-    if (ts.isVariableDeclaration(node) && ts.isObjectBindingPattern(node.name) && node.initializer) {
-      const base = resolvePath(node.initializer);
-      if (base) {
-        for (const element of node.name.elements) {
-          if (!ts.isIdentifier(element.name)) continue;
-          const property = element.propertyName ? literalText(ts, element.propertyName) ?? element.propertyName.text : element.name.text;
-          const match = bestForbiddenMatch(entries, [...base, property]);
-          if (match) flag(match, node.initializer);
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return uses;
-}
-
-// src/kernel/ai-gate/AICodeGate.ts
-function violation(ruleId, message, extra) {
-  return { ruleId, code: ruleId, message, ...extra };
-}
-function lineOf2(source, index) {
-  return source.slice(0, index).split("\n").length;
-}
-function extractQuotedStrings(source) {
-  const matches = [];
-  const re = /['"`]([A-Za-z][A-Za-z0-9_.]*)['"`]/g;
-  let m;
-  while ((m = re.exec(source)) !== null) {
-    matches.push({ value: m[1], index: m.index });
-  }
-  return matches;
-}
-function extractModuleSpecifiers(source) {
-  const matches = [];
-  const patterns = [
-    {
-      kind: "import",
-      re: /\bimport\s+(?:type\s+)?(?:[^'"]*?\s+from\s*)?['"]([^'"]+)['"]/g
-    },
-    {
-      kind: "export",
-      re: /\bexport\s+(?:type\s+)?[^'"]*?\s+from\s*['"]([^'"]+)['"]/g
-    },
-    {
-      kind: "dynamic-import",
-      re: /\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g
-    },
-    {
-      kind: "require",
-      re: /\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g
-    }
-  ];
-  for (const pattern of patterns) {
-    let match;
-    while ((match = pattern.re.exec(source)) !== null) {
-      const index = match.index + match[0].indexOf(match[1]);
-      const raw = match[0];
-      const typeOnly = pattern.kind === "import" && /\bimport\s+type\b/.test(raw) || pattern.kind === "export" && /\bexport\s+type\b/.test(raw);
-      matches.push({ value: match[1], index, kind: pattern.kind, typeOnly });
-    }
-  }
-  return matches.sort((a, b) => a.index - b.index);
-}
-function extractQuotedStringsAst(ts, source) {
-  const sourceFile = ts.createSourceFile("generated.ts", source, ts.ScriptTarget.Latest, true);
-  const matches = [];
-  const visit = (node) => {
-    if (ts.isStringLiteralLike(node)) {
-      matches.push({ value: node.text, index: node.getStart(sourceFile) });
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return matches;
-}
-function hasInfrastructureToken(specifier) {
-  const tokens = specifier.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean);
-  return [
-    "adapter",
-    "adapters",
-    "infra",
-    "infrastructure",
-    "persistence",
-    "repository",
-    "repositories",
-    "integration",
-    "database",
-    "db"
-  ].some((token) => tokens.includes(token));
-}
-function isKnownInfrastructurePackage(specifier) {
-  const normalized = specifier.toLowerCase();
-  return ["sequelize", "prisma", "typeorm", "mongoose", "knex"].some(
-    (name) => normalized === name || normalized.startsWith(`${name}/`)
-  );
-}
-function layerHasInfrastructureRole(layerName) {
-  const normalized = layerName.toLowerCase();
-  return [
-    "adapter",
-    "infra",
-    "persistence",
-    "repository",
-    "repositories",
-    "integration",
-    "database"
-  ].some((token) => normalized.includes(token));
-}
-function tsStringLiteralText(ts, node) {
-  return node && ts.isStringLiteralLike(node) ? node.text : void 0;
-}
-function tsPropertyName(ts, node) {
-  if (!node) return void 0;
-  if (ts.isIdentifier(node) || ts.isStringLiteralLike(node)) return node.text;
-  return void 0;
-}
-function tsObjectProperty(ts, node, name) {
-  if (!node || !ts.isObjectLiteralExpression(node)) return void 0;
-  return node.properties.find((property) => {
-    if (!ts.isPropertyAssignment(property) && !ts.isShorthandPropertyAssignment(property)) {
-      return false;
-    }
-    return tsPropertyName(ts, property.name) === name;
-  });
-}
-function tsObjectHasProperty(ts, node, name) {
-  return tsObjectProperty(ts, node, name) !== void 0;
-}
-function tsObjectPropertyValue(ts, node, name) {
-  const property = tsObjectProperty(ts, node, name);
-  return property && ts.isPropertyAssignment(property) ? property.initializer : void 0;
-}
-function tsObjectHasMetadataSource(ts, node) {
-  const metadata = tsObjectPropertyValue(ts, node, "metadata");
-  return tsObjectHasProperty(ts, metadata, "source");
-}
-function tsLooksLikeIntentCreatorExpression(ts, node) {
-  if (!node) return false;
-  if (ts.isIdentifier(node)) return /^[A-Z]/.test(node.text);
-  if (ts.isPropertyAccessExpression(node)) {
-    return tsLooksLikeIntentCreatorExpression(ts, node.name);
-  }
-  return false;
-}
-function tsIsPublishCall(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const expression = node.expression;
-  if (ts.isPropertyAccessExpression(expression)) {
-    return expression.name.text === "publish";
-  }
-  return ts.isIdentifier(expression) && expression.text === "publish";
-}
-function tsIsArkPublishCandidate(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const firstArg = node.arguments[0];
-  const rawIntent = tsStringLiteralText(ts, firstArg);
-  return rawIntent !== void 0 && looksLikeArkIntent(rawIntent) || tsObjectHasProperty(ts, firstArg, "intent") || tsLooksLikeIntentCreatorExpression(ts, firstArg);
-}
-function tsPublishHasSource(ts, node) {
-  if (!ts.isCallExpression(node)) return false;
-  const [firstArg, secondArg, thirdArg] = node.arguments;
-  return tsObjectHasMetadataSource(ts, firstArg) || tsObjectHasProperty(ts, secondArg, "source") || tsObjectHasProperty(ts, thirdArg, "source");
-}
-function tsPublishSourceLiteral(ts, node) {
-  if (!ts.isCallExpression(node)) return void 0;
-  const [firstArg, secondArg, thirdArg] = node.arguments;
-  const rawMetadata = tsObjectPropertyValue(ts, firstArg, "metadata");
-  return tsStringLiteralText(ts, tsObjectPropertyValue(ts, rawMetadata, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, secondArg, "source")) ?? tsStringLiteralText(ts, tsObjectPropertyValue(ts, thirdArg, "source"));
-}
-function analyzePublishAst(ts, source, context, profile) {
-  const sourceFile = ts.createSourceFile(
-    "generated.ts",
-    source,
-    ts.ScriptTarget.Latest,
-    true
-  );
-  const gateContext = context;
-  const filePath = gateContext?.filePath;
-  const contextLayer = gateContext?.layer;
-  const violations = [];
-  const lineForNode = (node) => sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1;
-  const visit = (node) => {
-    if (tsIsPublishCall(ts, node)) {
-      const firstArg = node.arguments[0];
-      const rawIntent = tsStringLiteralText(ts, firstArg);
-      for (const finding of classifyPublishFacts({
-        publishCall: true,
-        rawIntentName: rawIntent,
-        objectHasIntent: tsObjectHasProperty(ts, firstArg, "intent"),
-        arkPublishCandidate: tsIsArkPublishCandidate(ts, node),
-        hasSource: tsPublishHasSource(ts, node)
-      })) {
-        violations.push(
-          violation(finding.ruleId, finding.message, { line: lineForNode(node), filePath })
-        );
-      }
-      const sourceIntent = tsPublishSourceLiteral(ts, node);
-      if (profile && contextLayer && sourceIntent && looksLikeArkIntent(sourceIntent)) {
-        const sourceLayer = profile.resolveLayer(sourceIntent);
-        if (sourceLayer && sourceLayer !== contextLayer) {
-          violations.push(
-            violation(
-              "PUBLISH_SOURCE_LAYER_MISMATCH",
-              `Publish source "${sourceIntent}" resolves to ${sourceLayer}, but the target file is classified as ${contextLayer}.`,
-              {
-                line: lineForNode(node),
-                filePath,
-                target: sourceIntent,
-                fromLayer: contextLayer,
-                toLayer: sourceLayer
-              }
-            )
-          );
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sourceFile);
-  return violations;
-}
-function createAICodeGate(options = {}) {
-  const intentNames = new Set(
-    (options.intents || []).map((i) => typeof i === "string" ? i : i.name)
-  );
-  const userForbidden = options.forbiddenPatterns || [];
-  const explicitInfraLayers = new Set(options.infrastructureLayers ?? []);
-  const enforceAllowlist = options.enforceIntentAllowlist ?? intentNames.size > 0;
-  return {
-    validate(source, context) {
-      const violations = [];
-      const gateContext = context;
-      const filePath = gateContext?.filePath;
-      const contextLayer = gateContext?.layer;
-      const semanticTypescript = options.typescript;
-      const semanticSourceFile = semanticTypescript ? semanticTypescript.createSourceFile(
-        filePath ?? "generated.ts",
-        source,
-        semanticTypescript.ScriptTarget.Latest,
-        true
-      ) : void 0;
-      const semanticDependencies = semanticSourceFile ? extractSemanticDependencies(options.typescript, semanticSourceFile) : void 0;
-      const moduleSpecifiers2 = semanticDependencies ? semanticDependencies.filter((dependency) => dependency.specifier !== void 0).map((dependency) => ({
-        value: dependency.specifier,
-        index: dependency.node.getStart(semanticSourceFile),
-        kind: dependency.kind,
-        typeOnly: dependency.typeOnly
-      })) : extractModuleSpecifiers(source);
-      const quotedStrings = options.typescript ? extractQuotedStringsAst(options.typescript, source) : extractQuotedStrings(source);
-      if (options.typescript && !options.allowNonLiteralDynamicImport?.(filePath)) {
-        for (const dependency of semanticDependencies?.filter(({ unresolved }) => unresolved) ?? []) {
-          const isRequire = dependency.kind === "require";
-          violations.push(
-            violation(
-              isRequire ? "DYNAMIC_REQUIRE_NOT_ALLOWLISTED" : "DYNAMIC_IMPORT_NOT_ALLOWLISTED",
-              `Non-literal ${isRequire ? "require call" : "dynamic import"} cannot be resolved statically; add the reviewed file to dynamicImportAllowlist.`,
-              { line: dependency.line, filePath }
-            )
-          );
-        }
-      }
-      const exemptFromInfraHeuristics = contextLayer !== void 0 && (explicitInfraLayers.has(contextLayer) || layerHasInfrastructureRole(contextLayer));
-      const infraLayerEscapeHatch = contextLayer !== void 0 ? ` If "${contextLayer}" is an infrastructure layer, mark it in ark.config.json with "mayImportInfrastructure": true (or name it with an infra token like Adapters/Persistence/Repository).` : "";
-      for (const pat of userForbidden) {
-        if (pat instanceof RegExp) {
-          pat.lastIndex = 0;
-          const match = pat.exec(source);
-          pat.lastIndex = 0;
-          if (match) {
-            violations.push(
-              violation("FORBIDDEN_PATTERN", `Forbidden pattern matched: ${pat}`, {
-                line: match.index === void 0 ? void 0 : lineOf2(source, match.index),
-                filePath,
-                suggestion: "Remove infrastructure imports from domain/application layers." + infraLayerEscapeHatch
-              })
-            );
-          }
-        } else if (source.includes(pat)) {
-          violations.push(
-            violation("FORBIDDEN_SUBSTRING", `Forbidden substring: ${pat}`, {
-              line: lineOf2(source, source.indexOf(pat)),
-              filePath
-            })
-          );
-        }
-      }
-      for (const specifier of moduleSpecifiers2) {
-        const targetHit = options.resolveImportTarget?.(specifier.value, filePath) ?? (options.resolveImportLayer ? { layer: options.resolveImportLayer(specifier.value, filePath) } : void 0);
-        const sourceHit = typeof filePath === "string" ? options.resolveImportTarget?.(filePath) ?? (options.resolveImportLayer ? { layer: contextLayer, relPath: void 0 } : void 0) : void 0;
-        const targetLayer = targetHit?.layer;
-        if (targetLayer && contextLayer) {
-          const blocked = findDeniedEdgeRule(
-            options.architectureProfile?.rules,
-            contextLayer,
-            targetLayer,
-            {
-              fromPath: sourceHit?.relPath,
-              toPath: targetHit?.relPath,
-              layers: options.architectureLayers
-            }
-          );
-          if (blocked) {
-            if (specifier.typeOnly && !blocked.peerIsolation) {
-              continue;
-            }
-            const peer = Boolean(blocked.peerIsolation);
-            violations.push(
-              violation(
-                "LAYER_IMPORT_VIOLATION",
-                blocked.message ?? (peer ? `Layer "${contextLayer}" must not import across slices into "${targetLayer}".` : `Layer "${contextLayer}" must not import "${targetLayer}".`),
-                {
-                  line: lineOf2(source, specifier.index),
-                  source: specifier.value,
-                  target: specifier.value,
-                  filePath,
-                  fromLayer: contextLayer,
-                  toLayer: targetLayer,
-                  suggestion: peer ? "Extract shared code to a shared layer, or coordinate slices via events/ports \u2014 do not import across feature/context slices." : "Depend on a port/interface owned by an inner layer instead, or move this code to a layer allowed to make this import.",
-                  details: {
-                    importKind: specifier.kind,
-                    peerIsolation: peer,
-                    ...specifier.typeOnly ? { typeOnly: true } : {}
-                  }
-                }
-              )
-            );
-            continue;
-          }
-          if (targetLayer !== contextLayer) {
-            continue;
-          }
-        }
-        if (exemptFromInfraHeuristics || specifier.typeOnly) continue;
-        if (!hasInfrastructureToken(specifier.value) && !isKnownInfrastructurePackage(specifier.value)) {
-          continue;
-        }
-        violations.push(
-          violation(
-            "FORBIDDEN_IMPORT",
-            `Forbidden ${specifier.kind} target: "${specifier.value}".`,
-            {
-              line: lineOf2(source, specifier.index),
-              source: specifier.value,
-              target: specifier.value,
-              filePath,
-              suggestion: "Route infrastructure access through an allowed adapter or port boundary." + infraLayerEscapeHatch,
-              details: { importKind: specifier.kind }
-            }
-          )
-        );
-      }
-      if (options.policies) {
-        for (const policy of options.policies) {
-          const res = policy.check({ source, context });
-          if (res !== true) {
-            if (Array.isArray(res)) {
-              for (const v of res) {
-                violations.push(
-                  violation("POLICY_VIOLATION", v.message, {
-                    filePath,
-                    suggestion: `Fix violation of policy "${policy.name}".`
-                  })
-                );
-              }
-            } else if (res === false) {
-              violations.push(
-                violation("POLICY_VIOLATION", `Policy ${policy.name} failed on generated code`)
-              );
-            } else {
-              violations.push(
-                violation("POLICY_VIOLATION", res.message)
-              );
-            }
-          }
-        }
-      }
-      if (enforceAllowlist && intentNames.size > 0) {
-        for (const literal of quotedStrings) {
-          if (looksLikeArkIntent(literal.value) && !intentNames.has(literal.value)) {
-            violations.push(
-              violation(
-                "UNKNOWN_INTENT",
-                `Unknown intent reference: "${literal.value}"`,
-                {
-                  line: lineOf2(source, literal.index),
-                  filePath,
-                  target: literal.value,
-                  suggestion: `Register intent "${literal.value}" via defineIntent() or remove the reference.`
-                }
-              )
-            );
-          }
-        }
-      }
-      if (options.architectureProfile && contextLayer) {
-        for (const literal of quotedStrings) {
-          if (!looksLikeArkIntent(literal.value)) continue;
-          const targetLayer = options.architectureProfile.resolveLayer(literal.value);
-          if (!targetLayer) continue;
-          const blocked = findDeniedEdgeRule(
-            options.architectureProfile.rules,
-            contextLayer,
-            targetLayer
-          );
-          if (blocked) {
-            violations.push(
-              violation(
-                "LAYER_REFERENCE_VIOLATION",
-                blocked.message ?? `Layer "${contextLayer}" must not reference "${targetLayer}" through "${literal.value}".`,
-                {
-                  line: lineOf2(source, literal.index),
-                  filePath,
-                  target: literal.value,
-                  fromLayer: contextLayer,
-                  toLayer: targetLayer,
-                  suggestion: "Route the dependency through an allowed intent, port, or event.",
-                  details: { rule: blocked }
-                }
-              )
-            );
-          }
-        }
-      }
-      if (options.extensions) {
-        for (const ext of options.extensions) {
-          try {
-            const extViolations = ext.analyze(source, context);
-            violations.push(...extViolations);
-          } catch (err) {
-            violations.push(
-              violation(
-                "EXTENSION_ERROR",
-                `Extension "${ext.name}" failed: ${err instanceof Error ? err.message : String(err)}`
-              )
-            );
-          }
-        }
-      }
-      if (options.typescript && semanticSourceFile && contextLayer && options.forbiddenGlobals?.[contextLayer]?.length) {
-        try {
-          violations.push(
-            ...collectForbiddenCapabilityUses(
-              options.typescript,
-              semanticSourceFile,
-              options.forbiddenGlobals[contextLayer]
-            ).map(
-              (use) => violation(
-                "FORBIDDEN_GLOBAL",
-                `${contextLayer} must not use the ambient global "${use.name}".`,
-                {
-                  line: use.line,
-                  filePath,
-                  target: use.name,
-                  fromLayer: contextLayer,
-                  suggestion: "Inject the capability through a port (e.g. a Clock, IdGenerator, or HttpPort) instead of reaching for the ambient global."
-                }
-              )
-            )
-          );
-        } catch (err) {
-          violations.push(
-            violation(
-              "AST_ANALYZER_ERROR",
-              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
-            )
-          );
-        }
-      }
-      if (options.typescript) {
-        try {
-          violations.push(
-            ...analyzePublishAst(
-              options.typescript,
-              source,
-              context,
-              options.architectureProfile
-            )
-          );
-        } catch (err) {
-          violations.push(
-            violation(
-              "AST_ANALYZER_ERROR",
-              `TypeScript AST analyzer failed: ${err instanceof Error ? err.message : String(err)}`
-            )
-          );
-        }
-      }
-      return {
-        valid: violations.length === 0,
-        violations
-      };
-    }
-  };
-}
-
-// src/domain/configContract.ts
-var ARK_CONFIG_SCHEMA_VERSION = "1.0";
-var ARK_CONFIG_SCHEMA_URL = "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-var DEFAULT_LAYER_NAMES = [
-  "DomainModel",
-  "ApplicationOrchestration",
-  "PersistenceAdapters",
-  "IntegrationAdapters",
-  "WorkflowSagaEngine",
-  "BackgroundJobsScheduling",
-  "PresentationAdapters",
-  "ReportingReadModels",
-  "ExtensibilityMetadata",
-  "SecurityAuditObservability",
-  "Kernel"
-];
-var DEFAULT_ALLOWED_FLOWS = /* @__PURE__ */ new Set([
-  "PresentationAdapters->ApplicationOrchestration",
-  "ApplicationOrchestration->DomainModel",
-  "WorkflowSagaEngine->ApplicationOrchestration",
-  "WorkflowSagaEngine->DomainModel",
-  "BackgroundJobsScheduling->ApplicationOrchestration"
-]);
-function createDefaultRules() {
-  const rules = [];
-  for (const from of DEFAULT_LAYER_NAMES) {
-    for (const to of DEFAULT_LAYER_NAMES) {
-      if (from === to || DEFAULT_ALLOWED_FLOWS.has(`${from}->${to}`)) continue;
-      rules.push({ from, to, allowed: false });
-    }
-  }
-  return rules;
-}
-var DEFAULT_ARK_CONFIG_RULES = createDefaultRules();
-var stringArraySchema = {
-  type: "array",
-  items: { type: "string", minLength: 1 },
-  uniqueItems: true
-};
-var ARK_CONFIG_SCHEMA = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: ARK_CONFIG_SCHEMA_URL,
-  title: "ArkGate architecture contract",
-  description: "Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",
-  type: "object",
-  additionalProperties: false,
-  required: ["$schema", "schemaVersion", "include", "layers", "rules"],
-  properties: {
-    $schema: {
-      type: "string",
-      minLength: 1,
-      default: ARK_CONFIG_SCHEMA_URL,
-      description: "Editor-facing URL or local path for this JSON Schema."
-    },
-    schemaVersion: {
-      type: "string",
-      const: ARK_CONFIG_SCHEMA_VERSION,
-      default: ARK_CONFIG_SCHEMA_VERSION
-    },
-    name: { type: "string", minLength: 1 },
-    include: { ...stringArraySchema, minItems: 1, default: ["src"] },
-    exclude: { ...stringArraySchema, default: [] },
-    excludeGenerated: { type: "boolean", default: true },
-    frameworkOverlay: { type: "string", minLength: 1 },
-    layers: {
-      type: "array",
-      default: [],
-      items: { $ref: "#/$defs/layer" }
-    },
-    rules: {
-      type: "array",
-      default: DEFAULT_ARK_CONFIG_RULES,
-      items: { $ref: "#/$defs/rule" }
-    },
-    cyclePolicy: {
-      type: "string",
-      enum: ["strict", "soft", "framework-soft", "off"],
-      default: "strict"
-    },
-    dynamicImportAllowlist: { ...stringArraySchema, default: [] },
-    safety: {
-      $ref: "#/$defs/safety",
-      default: {
-        maxTsSuppressions: 0,
-        maxAnyCasts: 0,
-        allowInMemory: false,
-        allowDisabledPeerIsolation: false
-      }
-    }
-  },
-  $defs: {
-    layer: {
-      type: "object",
-      additionalProperties: false,
-      required: ["name", "patterns"],
-      properties: {
-        name: { type: "string", minLength: 1 },
-        patterns: { ...stringArraySchema, minItems: 1 },
-        exclude: stringArraySchema,
-        intentPrefixes: stringArraySchema,
-        description: { type: "string", minLength: 1 },
-        forbiddenGlobals: stringArraySchema,
-        mayImportInfrastructure: { type: "boolean" },
-        optional: { type: "boolean" }
-      }
-    },
-    rule: {
-      type: "object",
-      additionalProperties: false,
-      required: ["from", "to", "allowed"],
-      properties: {
-        from: { type: "string", minLength: 1 },
-        to: { type: "string", minLength: 1 },
-        allowed: { type: "boolean" },
-        message: { type: "string", minLength: 1 },
-        peerIsolation: { type: "boolean" },
-        sliceFolders: { ...stringArraySchema, minItems: 1 }
-      }
-    },
-    safety: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        maxTsSuppressions: { type: "integer", minimum: 0, default: 0 },
-        maxAnyCasts: { type: "integer", minimum: 0, default: 0 },
-        allowInMemory: { type: "boolean", default: false },
-        allowDisabledPeerIsolation: { type: "boolean", default: false }
-      }
-    }
-  }
-};
-var ArkConfigValidationError = class extends Error {
-  issues;
-  source;
-  constructor(source, issues) {
-    super(
-      `Invalid ArkGate config (${source}):
-${issues.map((issue) => `- ${issue.path}: ${issue.message}`).join("\n")}`
-    );
-    this.name = "ArkConfigValidationError";
-    this.source = source;
-    this.issues = issues;
-  }
-};
-function isObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function propertyPath(parent, key) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`;
-}
-function valueType(value) {
-  if (value === null) return "null";
-  if (Array.isArray(value)) return "array";
-  return typeof value;
-}
-function resolveSchemaRef(ref, root) {
-  const prefix = "#/$defs/";
-  if (!ref.startsWith(prefix)) return void 0;
-  return root.$defs[ref.slice(prefix.length)];
-}
-function validateNode(value, schema, path, root, issues) {
-  if (schema.$ref) {
-    const referenced = resolveSchemaRef(schema.$ref, root);
-    if (!referenced) {
-      issues.push({ path, message: `schema reference ${schema.$ref} cannot be resolved` });
-      return;
-    }
-    validateNode(value, referenced, path, root, issues);
-    return;
-  }
-  if (schema.const !== void 0 && !Object.is(value, schema.const)) {
-    issues.push({ path, message: `must equal ${JSON.stringify(schema.const)}` });
-    return;
-  }
-  if (schema.enum && !schema.enum.some((candidate) => Object.is(candidate, value))) {
-    issues.push({ path, message: `must be one of ${schema.enum.map(String).join(", ")}` });
-    return;
-  }
-  if (schema.type === "object") {
-    if (!isObject(value)) {
-      issues.push({ path, message: `must be an object; received ${valueType(value)}` });
-      return;
-    }
-    const properties = schema.properties ?? {};
-    for (const key of schema.required ?? []) {
-      if (value[key] === void 0) {
-        issues.push({ path: propertyPath(path, key), message: "is required" });
-      }
-    }
-    if (schema.additionalProperties === false) {
-      for (const key of Object.keys(value)) {
-        if (!(key in properties)) {
-          issues.push({ path: propertyPath(path, key), message: "unknown field" });
-        }
-      }
-    }
-    for (const [key, childSchema] of Object.entries(properties)) {
-      if (value[key] !== void 0) {
-        validateNode(value[key], childSchema, propertyPath(path, key), root, issues);
-      }
-    }
-    return;
-  }
-  if (schema.type === "array") {
-    if (!Array.isArray(value)) {
-      issues.push({ path, message: `must be an array; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minItems !== void 0 && value.length < schema.minItems) {
-      issues.push({ path, message: `must contain at least ${schema.minItems} item(s)` });
-    }
-    if (schema.uniqueItems) {
-      const serialized = value.map((entry) => JSON.stringify(entry));
-      if (new Set(serialized).size !== serialized.length) {
-        issues.push({ path, message: "must not contain duplicate items" });
-      }
-    }
-    if (schema.items) {
-      value.forEach(
-        (entry, index) => validateNode(entry, schema.items, `${path}[${index}]`, root, issues)
-      );
-    }
-    return;
-  }
-  if (schema.type === "string") {
-    if (typeof value !== "string") {
-      issues.push({ path, message: `must be a string; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minLength !== void 0 && value.length < schema.minLength) {
-      issues.push({ path, message: `must contain at least ${schema.minLength} character(s)` });
-    }
-    return;
-  }
-  if (schema.type === "boolean") {
-    if (typeof value !== "boolean") {
-      issues.push({ path, message: `must be a boolean; received ${valueType(value)}` });
-    }
-    return;
-  }
-  if (schema.type === "integer") {
-    if (!Number.isInteger(value)) {
-      issues.push({ path, message: `must be an integer; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minimum !== void 0 && value < schema.minimum) {
-      issues.push({ path, message: `must be at least ${schema.minimum}` });
-    }
-  }
-}
-function defaultedConfig(input) {
-  return {
-    ...input,
-    $schema: input.$schema === void 0 ? ARK_CONFIG_SCHEMA_URL : input.$schema,
-    schemaVersion: input.schemaVersion === void 0 ? ARK_CONFIG_SCHEMA_VERSION : input.schemaVersion,
-    include: input.include === void 0 ? ["src"] : input.include,
-    layers: input.layers === void 0 ? [] : input.layers,
-    rules: input.rules === void 0 ? DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule })) : input.rules
-  };
-}
-function migrateArkConfig(input, source = "ark.config.json") {
-  if (!isObject(input)) {
-    throw new ArkConfigValidationError(source, [
-      { path: "$", message: `must be an object; received ${valueType(input)}` }
-    ]);
-  }
-  const migratedFrom = input.schemaVersion === void 0 ? "unversioned" : null;
-  if (input.schemaVersion !== void 0 && input.schemaVersion !== ARK_CONFIG_SCHEMA_VERSION) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$.schemaVersion",
-        message: `unsupported version ${JSON.stringify(input.schemaVersion)}; expected ${ARK_CONFIG_SCHEMA_VERSION}`
-      }
-    ]);
-  }
-  return { candidate: defaultedConfig(input), migratedFrom };
-}
-function loadArkConfigContract(input, source = "ark.config.json") {
-  const { candidate, migratedFrom } = migrateArkConfig(input, source);
-  const issues = [];
-  validateNode(
-    candidate,
-    ARK_CONFIG_SCHEMA,
-    "$",
-    ARK_CONFIG_SCHEMA,
-    issues
-  );
-  if (issues.length > 0) throw new ArkConfigValidationError(source, issues);
-  return { config: candidate, migratedFrom };
-}
-function parseArkConfigJson(json, source = "ark.config.json") {
-  let input;
-  try {
-    input = JSON.parse(json);
-  } catch (error) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$",
-        message: `invalid JSON: ${error instanceof Error ? error.message : String(error)}`
-      }
-    ]);
-  }
-  return loadArkConfigContract(input, source);
-}
-function withArkConfigMetadata(config) {
-  const result = {
-    $schema: typeof config.$schema === "string" && config.$schema.length > 0 ? config.$schema : ARK_CONFIG_SCHEMA_URL,
-    schemaVersion: ARK_CONFIG_SCHEMA_VERSION
-  };
-  for (const [key, value] of Object.entries(config)) {
-    if (key !== "$schema" && key !== "schemaVersion") result[key] = value;
-  }
-  return result;
-}
-
-// src/kernel/layers/ArchitectureProfile.ts
-function normalizePrefix(prefix) {
-  return prefix.endsWith(".") ? prefix : `${prefix}.`;
-}
-function byLongestPrefix(a, b) {
-  const maxA = a.prefixes.length ? Math.max(...a.prefixes.map((p) => p.length)) : 0;
-  const maxB = b.prefixes.length ? Math.max(...b.prefixes.map((p) => p.length)) : 0;
-  return maxB - maxA;
-}
-function createArchitectureProfile(options) {
-  const layers = options.layers.map((layer) => ({
-    ...layer,
-    prefixes: layer.prefixes.map(normalizePrefix)
-  }));
-  const sortedLayers = [...layers].sort(byLongestPrefix);
-  const rules = [...options.rules ?? []];
-  return {
-    name: options.name,
-    layers,
-    rules,
-    resolveLayer(name) {
-      return layers.find((layer) => layer.match?.(name))?.name ?? sortedLayers.find(
-        (layer) => layer.prefixes.some((prefix) => name.startsWith(prefix))
-      )?.name;
-    }
-  };
-}
-function createArchitectureProfileFromArkConfig(config, options = {}) {
-  return createArchitectureProfile({
-    name: options.name ?? config.name ?? "ark.config.json",
-    layers: config.layers.map((layer, index) => ({
-      name: layer.name,
-      prefixes: layer.intentPrefixes ?? [],
-      description: layer.description,
-      order: index + 1
-    })),
-    rules: config.rules ?? []
-  });
-}
-var elevenLayerProfileLayers = [
-  {
-    name: "DomainModel",
-    prefixes: ["Domain"],
-    description: "Rich domain model, business rules, and domain events.",
-    order: 1
-  },
-  {
-    name: "ApplicationOrchestration",
-    prefixes: ["Application"],
-    description: "Use cases and command orchestration.",
-    order: 2
-  },
-  {
-    name: "PersistenceAdapters",
-    prefixes: ["Adapter.Persistence", "Adapter.Repository"],
-    description: "Database, repository, and storage adapters.",
-    order: 3
-  },
-  {
-    name: "IntegrationAdapters",
-    prefixes: ["Adapter.Integration", "Adapter.External"],
-    description: "External systems, APIs, and integration adapters.",
-    order: 4
-  },
-  {
-    name: "WorkflowSagaEngine",
-    prefixes: ["Workflow"],
-    description: "Sagas, workflows, and long-running processes.",
-    order: 5
-  },
-  {
-    name: "BackgroundJobsScheduling",
-    prefixes: ["Job"],
-    description: "Background jobs, scheduled work, and async processors.",
-    order: 6
-  },
-  {
-    name: "PresentationAdapters",
-    prefixes: ["Presentation", "Adapter.Presentation", "Adapter.Api"],
-    description: "API, UI, controller, and presentation adapters.",
-    order: 7
-  },
-  {
-    name: "ReportingReadModels",
-    prefixes: ["Reporting"],
-    description: "Read models, projections, and reporting surfaces.",
-    order: 8
-  },
-  {
-    name: "ExtensibilityMetadata",
-    prefixes: ["Metadata"],
-    description: "Metadata, extensions, and schema contracts.",
-    order: 9
-  },
-  {
-    name: "SecurityAuditObservability",
-    prefixes: ["Security", "Audit", "Observability"],
-    description: "Security, audit, and observability concerns.",
-    order: 10
-  },
-  {
-    name: "Kernel",
-    prefixes: ["Kernel"],
-    description: "Ark-owned governance and kernel signals.",
-    order: 11
-  }
-];
-var elevenLayerProfile = createArchitectureProfile({
-  name: "Ark 11-layer Hexagonal Event-Driven Profile",
-  layers: elevenLayerProfileLayers,
-  rules: DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule }))
-});
-var defaultElevenLayerDirectories = {
-  DomainModel: ["domain"],
-  ApplicationOrchestration: ["application", "app"],
-  PersistenceAdapters: [
-    "adapters/persistence",
-    "adapters/repository",
-    "repositories",
-    "infra/persistence"
-  ],
-  IntegrationAdapters: ["adapters/integration", "adapters/external", "integrations"],
-  WorkflowSagaEngine: ["workflows", "sagas"],
-  BackgroundJobsScheduling: ["jobs", "schedules"],
-  PresentationAdapters: ["presentation", "adapters/presentation", "adapters/api"],
-  ReportingReadModels: ["reporting", "read-models", "projections"],
-  ExtensibilityMetadata: ["metadata", "extensions"],
-  SecurityAuditObservability: ["security", "audit", "observability"],
-  Kernel: ["kernel"]
-};
-function createElevenLayerArkConfig(options = {}) {
-  const rootDir = options.rootDir ?? "src";
-  const optional = options.optionalLayers ?? true;
-  const prefix = rootDir === "." ? "" : `${rootDir}/`;
-  return withArkConfigMetadata({
-    include: options.include ?? [rootDir],
-    layers: elevenLayerProfile.layers.map((layer) => ({
-      name: layer.name,
-      patterns: (defaultElevenLayerDirectories[layer.name] ?? [layer.name]).map(
-        (directory) => `${prefix}${directory}/**`
-      ),
-      intentPrefixes: layer.prefixes,
-      optional
-    })),
-    rules: [...elevenLayerProfile.rules]
-  });
-}
-
-// src/domain/analysis.ts
-var ANALYSIS_IR_SCHEMA_VERSION = "1.0";
-function deterministicHash(value) {
-  let hash = 2166136261;
-  for (let index = 0; index < value.length; index += 1) {
-    hash ^= value.charCodeAt(index);
-    hash = Math.imul(hash, 16777619);
-  }
-  return `fnv1a-${(hash >>> 0).toString(16).padStart(8, "0")}`;
-}
-function stableSerialize(value) {
-  if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return `[${value.map(stableSerialize).join(",")}]`;
-  const object = value;
-  return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableSerialize(object[key])}`).join(",")}}`;
-}
-
-// src/kernel/analysis.ts
-function loadContract(input, source) {
-  const loaded = typeof input === "string" ? parseArkConfigJson(input, source) : loadArkConfigContract(input, source);
-  return { ...loaded, policyHash: deterministicHash(stableSerialize(loaded.config)) };
-}
-function normalizePath(value) {
-  return value.replace(/\\/g, "/").replace(/^\.\//, "");
-}
-function isIdentifierCharacter(value) {
-  return value !== void 0 && /[A-Za-z0-9_$]/.test(value);
-}
-function skipWhitespace(source, index) {
-  while (index < source.length && /\s/.test(source[index])) index += 1;
-  return index;
-}
-function readString(source, index) {
-  const quote = source[index];
-  if (quote !== "'" && quote !== '"') return void 0;
-  const start = index;
-  let value = "";
-  for (index += 1; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === quote) {
-      return { value, offset: start, excerpt: source.slice(start, index + 1) };
-    }
-    if (current === "\\" && index + 1 < source.length) {
-      value += source[index + 1];
-      index += 1;
-    } else {
-      value += current;
-    }
-  }
-  return void 0;
-}
-function isWordAt(source, word, index) {
-  return source.startsWith(word, index) && !isIdentifierCharacter(source[index - 1]) && !isIdentifierCharacter(source[index + word.length]);
-}
-function specifierAfterImport(source, index) {
-  index = skipWhitespace(source, index + "import".length);
-  if (source[index] === "(") return readString(source, skipWhitespace(source, index + 1));
-  return specifierInStaticStatement(source, index, true);
-}
-function specifierAfterExport(source, index) {
-  return specifierInStaticStatement(source, index + "export".length, false);
-}
-function specifierInStaticStatement(source, index, allowDirectSpecifier) {
-  for (; index < source.length; index += 1) {
-    if (source[index] === ";") return void 0;
-    if (isWordAt(source, "from", index)) {
-      return readString(source, skipWhitespace(source, index + "from".length));
-    }
-    if (allowDirectSpecifier && (source[index] === "'" || source[index] === '"')) {
-      return readString(source, index);
-    }
-    if (index > 0 && (isWordAt(source, "import", index) || isWordAt(source, "export", index))) {
-      return void 0;
-    }
-  }
-  return void 0;
-}
-function moduleSpecifiers(source) {
-  const result = [];
-  for (let index = 0; index < source.length; index += 1) {
-    const current = source[index];
-    if (current === "/" && source[index + 1] === "/") {
-      index = source.indexOf("\n", index + 2);
-      if (index < 0) break;
-      continue;
-    }
-    if (current === "/" && source[index + 1] === "*") {
-      const end = source.indexOf("*/", index + 2);
-      if (end < 0) break;
-      index = end + 1;
-      continue;
-    }
-    if (current === "'" || current === '"' || current === "`") {
-      const string = readString(source, index);
-      if (string) index = string.offset + string.excerpt.length - 1;
-      continue;
-    }
-    const specifier = isWordAt(source, "import", index) ? specifierAfterImport(source, index) : isWordAt(source, "export", index) ? specifierAfterExport(source, index) : void 0;
-    if (specifier) result.push(specifier);
-  }
-  return result;
-}
-function importEdges(file, files) {
-  const edges = [];
-  for (const moduleSpecifier of moduleSpecifiers(file.content)) {
-    const specifier = moduleSpecifier.value;
-    if (!specifier.startsWith(".")) continue;
-    const line = file.content.slice(0, moduleSpecifier.offset).split("\n").length;
-    const evidence = {
-      kind: "import",
-      file: file.path,
-      line,
-      excerpt: moduleSpecifier.excerpt
-    };
-    const target = resolveSpecifier(file.path, specifier, files);
-    edges.push({
-      from: file.path,
-      specifier,
-      to: target?.path ?? null,
-      resolution: target ? "resolved" : "unresolved",
-      fromLayer: file.layer,
-      toLayer: target?.layer ?? null,
-      evidence
-    });
-  }
-  return edges;
-}
-function resolveSpecifier(from, specifier, files) {
-  const segments = from.split("/");
-  segments.pop();
-  for (const segment of specifier.split("/")) {
-    if (segment === "." || segment === "") continue;
-    if (segment === "..") segments.pop();
-    else segments.push(segment);
-  }
-  const base = segments.join("/");
-  for (const candidate of [base, `${base}.ts`, `${base}.tsx`, `${base}.mts`, `${base}.cts`, `${base}/index.ts`, `${base}/index.tsx`]) {
-    const found = files.get(candidate);
-    if (found) return found;
-  }
-  return void 0;
-}
-function violationsFor(edges, config) {
-  const violations = [];
-  for (const edge of edges) {
-    if (!edge.to || !edge.fromLayer || !edge.toLayer) continue;
-    const rule = findDeniedEdgeRule(config.rules, edge.fromLayer, edge.toLayer, {
-      fromPath: edge.from,
-      toPath: edge.to,
-      layers: config.layers
-    });
-    if (!rule) continue;
-    violations.push({
-      ruleId: `layer-dependency:${rule.from}->${rule.to}`,
-      message: rule.message ?? `${rule.from} must not depend on ${rule.to}.`,
-      edge,
-      evidence: edge.evidence
-    });
-  }
-  return violations;
-}
-function analyzeProject(input) {
-  const files = input.files.map((inputFile) => {
-    const path = normalizePath(inputFile.path);
-    return {
-      path,
-      content: inputFile.content,
-      contentHash: deterministicHash(inputFile.content),
-      layer: layerForRelativePath(path, input.contract.config.layers) ?? null
-    };
-  }).sort((left, right) => left.path.localeCompare(right.path));
-  const fileByPath = new Map(files.map((file) => [file.path, file]));
-  const edges = files.flatMap((file) => importEdges(file, fileByPath));
-  const capabilityUses = [];
-  const violations = violationsFor(edges, input.contract.config);
-  return {
-    ir: {
-      schemaVersion: ANALYSIS_IR_SCHEMA_VERSION,
-      policyHash: input.contract.policyHash,
-      compilerOptionsHash: deterministicHash(stableSerialize(input.compilerOptions ?? {})),
-      files,
-      layers: input.contract.config.layers.map((layer) => layer.name),
-      edges,
-      capabilityUses,
-      violations
-    }
-  };
-}
-function analyzeChange(input) {
-  const files = new Map(input.files.map((file) => [normalizePath(file.path), file]));
-  for (const change of input.changes) {
-    const path = normalizePath(change.path);
-    if ("delete" in change && change.delete) files.delete(path);
-    else if ("content" in change) files.set(path, { path, content: change.content });
-  }
-  return analyzeProject({
-    contract: input.contract,
-    files: [...files.values()],
-    compilerOptions: input.compilerOptions
-  });
-}
-function explainViolation(violation2) {
-  const location = `${violation2.evidence.file}:${violation2.evidence.line}`;
-  if (!violation2.edge) return `${violation2.ruleId} at ${location}: ${violation2.message}`;
-  const target = violation2.edge.to ?? violation2.edge.specifier;
-  return `${violation2.ruleId} at ${location}: ${violation2.edge.from} imports ${target}. ${violation2.message}`;
-}
-function detectArchitectureCycles(graph) {
-  let index = 0;
-  const indices = /* @__PURE__ */ new Map();
-  const low = /* @__PURE__ */ new Map();
-  const onStack = /* @__PURE__ */ new Set();
-  const stack = [];
-  const components = [];
-  const connect = (file) => {
-    indices.set(file, index);
-    low.set(file, index);
-    index += 1;
-    stack.push(file);
-    onStack.add(file);
-    for (const target of [...graph.get(file) ?? []].sort()) {
-      if (!graph.has(target)) continue;
-      if (!indices.has(target)) {
-        connect(target);
-        low.set(file, Math.min(low.get(file) ?? 0, low.get(target) ?? 0));
-      } else if (onStack.has(target)) {
-        low.set(file, Math.min(low.get(file) ?? 0, indices.get(target) ?? 0));
-      }
-    }
-    if (low.get(file) !== indices.get(file)) return;
-    const component = [];
-    let member;
-    do {
-      member = stack.pop();
-      if (member === void 0) break;
-      onStack.delete(member);
-      component.push(member);
-    } while (member !== file);
-    if (component.length > 1) components.push(component.sort());
-  };
-  for (const file of [...graph.keys()].sort()) {
-    if (!indices.has(file)) connect(file);
-  }
-  return components.sort((left, right) => left[0].localeCompare(right[0])).map((members) => ({
-    ruleId: "CIRCULAR_DEPENDENCY",
-    file: members[0],
-    line: 1,
-    target: members.join(" \u2192 "),
-    message: `Circular dependency among ${members.length} files: ${members.join(" \u2192 ")} \u2192 ${members[0]}.`,
-    cycleKind: "value"
-  }));
-}
-function evaluateArchitectureGraph(input) {
-  const violations = input.contentViolations.map((violation2) => ({ ...violation2 }));
-  const warnings = (input.warnings ?? []).map((warning) => ({ ...warning }));
-  const graph = new Map(
-    input.files.map((file) => [file, /* @__PURE__ */ new Set()])
-  );
-  for (const edge of input.edges) {
-    if (edge.to && edge.to !== edge.from && !edge.typeOnly && graph.has(edge.from)) {
-      graph.get(edge.from)?.add(edge.to);
-    }
-    if (!edge.to || !edge.toLayer) continue;
-    const rule = findDeniedEdgeRule(input.rules, edge.fromLayer, edge.toLayer, {
-      fromPath: edge.from,
-      toPath: edge.to,
-      layers: input.config.layers
-    });
-    if (!rule) continue;
-    const peerIsolation = Boolean(rule.peerIsolation);
-    violations.push({
-      ruleId: "LAYER_IMPORT_VIOLATION",
-      file: edge.from,
-      line: edge.line,
-      fromLayer: edge.fromLayer,
-      toLayer: edge.toLayer,
-      target: edge.to,
-      ...edge.typeOnly ? { typeOnly: true } : {},
-      ...edge.targetTypeOnlyExports ? { targetTypeOnlyExports: true } : {},
-      ...edge.sourcePureTypeModule ? { sourcePureTypeModule: true } : {},
-      ...edge.namedBindingsTypeOnly ? { namedBindingsTypeOnly: true } : {},
-      ...!peerIsolation && edge.portProofEligible ? { portProofEligible: true } : {},
-      ...edge.kind ? { edgeKind: edge.kind } : {},
-      ...peerIsolation ? { peerIsolation: true } : {},
-      message: rule.message ?? (peerIsolation ? `${edge.fromLayer} must not ${edge.kind} another slice of ${edge.toLayer} (${edge.from} \u2192 ${edge.to}). Extract shared code or use events/ports across slices.` : `${edge.fromLayer} must not ${edge.kind} ${edge.toLayer}.`)
-    });
-  }
-  const cyclePolicy = String(input.config.cyclePolicy ?? "strict").toLowerCase();
-  if (cyclePolicy !== "off") {
-    const cycles = detectArchitectureCycles(graph);
-    if (cyclePolicy === "soft" || cyclePolicy === "framework-soft") {
-      warnings.push(
-        ...cycles.map((cycle) => ({
-          ...cycle,
-          message: `${cycle.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,
-          failsStrict: false
-        }))
-      );
-    } else {
-      violations.push(...cycles);
-    }
-  }
-  return { violations, warnings, safety: input.safety };
-}
-function configWarning(ruleId, message, extra = {}) {
-  return { ruleId, message, ...extra };
-}
-function collectAnalysisConfigWarnings(input) {
-  const { config, rules, files, manifest } = input;
-  const warnings = [];
-  if (config.dynamicImportAllowlist !== void 0 && (!Array.isArray(config.dynamicImportAllowlist) || config.dynamicImportAllowlist.some((entry) => typeof entry !== "string"))) {
-    warnings.push(
-      configWarning(
-        "CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST",
-        "dynamicImportAllowlist must be an array of file globs."
-      )
-    );
-  }
-  if (config.safety !== void 0 && (config.safety === null || typeof config.safety !== "object" || Array.isArray(config.safety))) {
-    warnings.push(configWarning("CONFIG_INVALID_SAFETY", "safety must be an object."));
-  } else if (config.safety) {
-    for (const key of ["maxTsSuppressions", "maxAnyCasts"]) {
-      const value = config.safety[key];
-      if (value !== void 0 && (!Number.isInteger(value) || value < 0)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_INVALID_SAFETY_THRESHOLD",
-            `safety.${key} must be a non-negative integer.`
-          )
-        );
-      }
-    }
-  }
-  const layers = Array.isArray(config.layers) ? config.layers : [];
-  const manifestLayers = Array.isArray(manifest?.architecture?.layers) ? manifest.architecture.layers : [];
-  const knownLayers = /* @__PURE__ */ new Set([
-    ...layers.map((layer) => layer.name).filter(Boolean),
-    ...manifestLayers.map((layer) => layer.name).filter((name) => Boolean(name))
-  ]);
-  if (layers.length === 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_NO_LAYERS",
-        "No file layers are configured; ark-check cannot classify files for import-boundary enforcement."
-      )
-    );
-  }
-  const seenLayers = /* @__PURE__ */ new Set();
-  const duplicateLayers = /* @__PURE__ */ new Set();
-  for (const layer of layers) {
-    if (!layer.name) {
-      warnings.push(configWarning("CONFIG_LAYER_WITHOUT_NAME", "A configured layer is missing a name."));
-      continue;
-    }
-    if (seenLayers.has(layer.name)) duplicateLayers.add(layer.name);
-    seenLayers.add(layer.name);
-    if (layer.forbiddenGlobals !== void 0 && (!Array.isArray(layer.forbiddenGlobals) || layer.forbiddenGlobals.some((entry) => typeof entry !== "string"))) {
-      warnings.push(
-        configWarning(
-          "CONFIG_INVALID_FORBIDDEN_GLOBALS",
-          `Layer "${layer.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,
-          { layer: layer.name }
-        )
-      );
-    }
-    const patterns = Array.isArray(layer.patterns) ? layer.patterns : [];
-    if (patterns.length === 0) {
-      warnings.push(
-        configWarning(
-          "CONFIG_LAYER_WITHOUT_PATTERNS",
-          `Layer "${layer.name}" has no file patterns and will never classify files.`,
-          { layer: layer.name }
-        )
-      );
-      continue;
-    }
-    for (const pattern of patterns) {
-      let expression;
-      try {
-        expression = globToRegExp(pattern);
-      } catch (error) {
-        warnings.push(
-          configWarning(
-            "CONFIG_INVALID_LAYER_PATTERN",
-            `Layer "${layer.name}" has an invalid pattern "${pattern}": ${error instanceof Error ? error.message : String(error)}`,
-            { layer: layer.name, pattern }
-          )
-        );
-        continue;
-      }
-      if (!files.some((file) => expression.test(file)) && !layer.optional) {
-        warnings.push(
-          configWarning(
-            "CONFIG_LAYER_PATTERN_NO_MATCHES",
-            `Layer "${layer.name}" pattern "${pattern}" matched no included files.`,
-            { layer: layer.name, pattern, failsStrict: false }
-          )
-        );
-      }
-    }
-  }
-  for (const name of duplicateLayers) {
-    warnings.push(
-      configWarning("CONFIG_DUPLICATE_LAYER", `Layer "${name}" is configured more than once.`, {
-        layer: name
-      })
-    );
-  }
-  if (knownLayers.size > 0) {
-    for (const rule of rules ?? []) {
-      if (rule.from && !knownLayers.has(rule.from)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_RULE_UNKNOWN_FROM_LAYER",
-            `Rule references unknown source layer "${rule.from}".`,
-            { fromLayer: rule.from, toLayer: rule.to }
-          )
-        );
-      }
-      if (rule.to && !knownLayers.has(rule.to)) {
-        warnings.push(
-          configWarning(
-            "CONFIG_RULE_UNKNOWN_TO_LAYER",
-            `Rule references unknown target layer "${rule.to}".`,
-            { fromLayer: rule.from, toLayer: rule.to }
-          )
-        );
-      }
-    }
-  }
-  const ambiguousPairs = /* @__PURE__ */ new Set();
-  if (layers.length > 1) {
-    for (const file of files) {
-      let topScore = -1;
-      let topLayers = [];
-      for (const layer of layers) {
-        for (const pattern of layer.patterns ?? []) {
-          if (!globToRegExp(pattern).test(file)) continue;
-          const score = patternSpecificity(pattern);
-          if (score > topScore) {
-            topScore = score;
-            topLayers = [layer.name];
-          } else if (score === topScore && !topLayers.includes(layer.name)) {
-            topLayers.push(layer.name);
-          }
-        }
-      }
-      if (topLayers.length > 1) ambiguousPairs.add([...topLayers].sort().join(" + "));
-    }
-  }
-  if (ambiguousPairs.size > 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_AMBIGUOUS_LAYERS",
-        `Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...ambiguousPairs].join(", ")}.`,
-        { pairs: [...ambiguousPairs] }
-      )
-    );
-  }
-  const unclassified = files.filter((file) => !layerForRelativePath(file, layers));
-  if (unclassified.length > 0) {
-    warnings.push(
-      configWarning(
-        "CONFIG_UNCLASSIFIED_FILES",
-        `${unclassified.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,
-        { count: unclassified.length, samples: unclassified.slice(0, 5) }
-      )
-    );
-  }
-  return warnings;
-}
-export {
-  ANALYSIS_IR_SCHEMA_VERSION,
-  ARK_ANALYSIS_RESULT_SCHEMA,
-  ARK_ANALYSIS_RESULT_SCHEMA_VERSION,
-  ARK_CONFIG_SCHEMA,
-  ARK_CONFIG_SCHEMA_VERSION,
-  analyzeChange,
-  analyzeProject,
-  collectAnalysisConfigWarnings,
-  collectForbiddenCapabilityUses,
-  createAICodeGate,
-  createAdapterResult,
-  createArchitectureProfile,
-  createArchitectureProfileFromArkConfig,
-  createElevenLayerArkConfig,
-  detectArchitectureCycles,
-  deterministicHash,
-  elevenLayerProfile,
-  evaluateArchitectureGraph,
-  explainViolation,
-  extractSemanticDependencies,
-  loadArkConfigContract,
-  loadContract,
-  parseArkConfigJson,
-  stableSerialize,
-  toAdapterDiagnostic,
-  version
-};
+var Ke="3.2.0";var ze="1.1";function E(e){return typeof e=="string"&&e.length>0?e:void 0}function Ie(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}function qe(e,t,n){return e==="LAYER_IMPORT_VIOLATION"?t.typeOnly||n.targetTypeOnlyExports===!0||n.namedBindingsTypeOnly===!0?"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.":n.peerIsolation===!0?"Extract the shared dependency to a shared layer, then preflight again.":`Define a port in ${t.fromLayer??"the source layer"}, inject the ${t.toLayer??"outer-layer"} implementation, then preflight again.`:e==="FORBIDDEN_GLOBAL"?`Inject ${t.target??"the capability"} through a port, then preflight again.`:e==="CIRCULAR_DEPENDENCY"?"Extract the shared dependency into a third module, then preflight again.":e==="RAW_EVENT_PUBLISH"?"Publish through a registered intent creator, then run Ark again.":e==="PUBLISH_MISSING_SOURCE"?"Add metadata.source to the publish call, then run Ark again.":`Resolve ${e} without weakening ark.config.json, then run Ark again.`}function oe(e,t="error"){let n=E(e.ruleId)??E(e.code)??"ARK_UNKNOWN",r=e.severity==="warning"?"warning":t,a={...E(e.target)?{target:E(e.target)}:{},...E(e.fromLayer)?{fromLayer:E(e.fromLayer)}:{},...E(e.toLayer)?{toLayer:E(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{}};return{ruleId:n,severity:r,message:E(e.message)??n,location:{file:E(e.file)??"<unknown>",line:Ie(e.line,1),column:Ie(e.column,1)},evidence:a,nextAction:E(e.nextAction)??qe(n,a,e)}}function Ye(e){return{schemaVersion:"1.1",valid:e.valid,diagnostics:[...(e.violations??[]).map(t=>oe(t,"error")),...(e.warnings??[]).map(t=>oe(t,"warning"))]}}var We={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@2/schemas/ark.analysis-result.schema.json",title:"ArkGate analysis result",type:"object",additionalProperties:!1,required:["schemaVersion","valid","diagnostics"],properties:{schemaVersion:{const:"1.1"},valid:{type:"boolean"},diagnostics:{type:"array",items:{type:"object",additionalProperties:!1,required:["ruleId","severity","message","location","evidence"],properties:{ruleId:{type:"string",minLength:1},severity:{enum:["error","warning"]},message:{type:"string",minLength:1},location:{type:"object",additionalProperties:!1,required:["file","line","column"],properties:{file:{type:"string",minLength:1},line:{type:"integer",minimum:1},column:{type:"integer",minimum:1}}},evidence:{type:"object",additionalProperties:!1,properties:{target:{type:"string"},fromLayer:{type:"string"},toLayer:{type:"string"},typeOnly:{type:"boolean"}}},nextAction:{type:"string",minLength:1}}}}}};var Se=new Map;function ke(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function se(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let a=e[n+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,n+=1;continue}t+="/";continue}t+=r}return t}function Je(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}function F(e){let t=Se.get(e);if(t)return t;let n=se(e),r=Je(n),a="",i=0;for(let c=0;c<n.length;c+=1){let d=n[c];d==="\\"&&c+1<n.length?(a+=ke(n[c+1]),c+=1):d==="*"?n[c+1]==="*"?n[c+2]==="/"?(a+="(?:.*/)?",c+=2):(a+=".*",c+=1):a+="[^/]*":d==="?"?a+="[^/]":d==="{"&&r?(a+="(?:",i+=1):d==="}"&&r&&i>0?(a+=")",i-=1):d===","&&r&&i>0?a+="|":a+=ke(d)}let s=new RegExp(`^${a}$`);return Se.set(e,s),s}function ce(e){let t=se(String(e)),r=t.split("*")[0].split("/").filter(Boolean).length,a=t.replace(/\*/g,"").length;return r*1e4+a}function z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,a=-1;for(let i of t??[])if(!(i.exclude??[]).some(s=>F(s).test(n))){for(let s of i.patterns??[])if(F(s).test(n)){let c=ce(s);c>a&&(a=c,r=i.name)}}return r}function Ee(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(a=>String(a).toLowerCase()));for(let a=0;a<n.length-1;a+=1)if(r.has(n[a].toLowerCase()))return`${n[a]}/${n[a+1]}`}function Ze(e){let t=new Set;for(let n of e??[]){let a=se(String(n)).split("/").filter(Boolean);for(let i=0;i<a.length;i+=1){let s=a[i];if((s==="**"||s==="*")&&i>0){let c=a[i-1];c&&!c.includes("*")&&!c.includes("{")&&!c.includes("}")&&t.add(c)}}}return[...t]}function Qe(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(a=>typeof a=="string"&&a.length>0);let r=(n??[]).find(a=>a.name===t);return Ze(r?.patterns)}function v(e,t,n,r){for(let a of e??[])if(!(a.from!==t||a.to!==n)&&a.allowed===!1){if(a.peerIsolation){let i=r?.fromPath,s=r?.toPath;if(!i||!s)continue;let c=Qe(a,t,r?.layers);if(c.length===0)continue;let d=Ee(i,c),u=Ee(s,c);if(!d||!u)continue;if(d!==u)return a;continue}if(t!==n)return a}}var le={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."};function R(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function de(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&R(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:le.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:le.PUBLISH_MISSING_SOURCE}),t}function _(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}function Pe(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}function Le(e,t){if(e.isImportDeclaration(t)){let n=t.importClause;if(!n)return!1;if(n.isTypeOnly)return!0;let r=n.namedBindings;return!!(r&&e.isNamedImports(r)&&r.elements.length>0&&r.elements.every(a=>a.isTypeOnly))}if(e.isExportDeclaration(t)){if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}return!1}function Re(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=a=>a===t.fileName?t:void 0,r.fileExists=a=>a===t.fileName,r.readFile=a=>a===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}function pe(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}function fe(e,t,n,r){let a=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,i;try{i=a?t.getShorthandAssignmentValueSymbol(r.parent):pe(t,r)}catch{i=void 0}return!!i?.declarations?.some(s=>s.getSourceFile().fileName===n.fileName)}function q(e,t){let n,r=[],a=(s,c,d,u=!1)=>r.push({specifier:d,kind:c,line:Pe(t,s),typeOnly:u,unresolved:d===void 0,node:s}),i=s=>{if(e.isImportDeclaration(s))a(s,"import",_(e,s.moduleSpecifier),Le(e,s));else if(e.isExportDeclaration(s)&&s.moduleSpecifier)a(s,"export",_(e,s.moduleSpecifier),Le(e,s));else if(e.isImportEqualsDeclaration(s)&&e.isExternalModuleReference(s.moduleReference))a(s,"require",_(e,s.moduleReference.expression));else if(e.isCallExpression(s)){let c=s.expression.kind===e.SyntaxKind.ImportKeyword,u=e.isIdentifier(s.expression)&&s.expression.text==="require"&&!fe(e,n??(n=Re(e,t)),t,s.expression);(c||u)&&a(s,u?"require":"dynamic-import",_(e,s.arguments[0]))}e.forEachChild(s,i)};return i(t),r}function Xe(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let a=_(e,r.argumentExpression);if(a===void 0)return;n.unshift(a)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}function et(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}function we(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let a=n.slice(0,r).join(".");if(e.has(a))return a}}function Y(e,t,n){if(n.length===0)return[];let r=new Set(n),a=Re(e,t),i=new Map,s=new Set;for(let o of t.statements)if(e.isVariableStatement(o))for(let l of o.declarationList.declarations)e.isIdentifier(l.name)&&s.add(l.name.text);let c=o=>{let l=Xe(e,o);if(!l)return;let f=pe(a,l.root),y=f?i.get(f):void 0;return y?[...y,...l.segments.slice(1)]:fe(e,a,t,l.root)||s.has(l.root.text)?void 0:l.segments};for(let o of t.statements)if(e.isVariableStatement(o))for(let l of o.declarationList.declarations){if(!l.initializer||!e.isIdentifier(l.name))continue;let f=c(l.initializer),y=pe(a,l.name);!f||!y||i.set(y,f)}let d=[],u=new Set,g=(o,l)=>{let f=Pe(t,l),y=`${o}:${l.getStart(t)}`;u.has(y)||(u.add(y),d.push({name:o,line:f,node:l}))},h=o=>{let l=o.parent&&(e.isPropertyAccessExpression(o.parent)||e.isElementAccessExpression(o.parent))&&o.parent.expression===o;if((e.isPropertyAccessExpression(o)||e.isElementAccessExpression(o))&&!l){let f=c(o),y=f?we(r,f):void 0;y&&g(y,o)}else e.isIdentifier(o)&&r.has(o.text)&&et(e,o)&&!fe(e,a,t,o)&&g(o.text,o);if(e.isVariableDeclaration(o)&&e.isObjectBindingPattern(o.name)&&o.initializer){let f=c(o.initializer);if(f)for(let y of o.name.elements){if(!e.isIdentifier(y.name))continue;let k=y.propertyName?_(e,y.propertyName)??y.propertyName.text:y.name.text,b=we(r,[...f,k]);b&&g(b,o.initializer)}}e.forEachChild(o,h)};return h(t),d}function A(e,t,n){return{ruleId:e,code:e,message:t,...n}}function N(e,t){return e.slice(0,t).split(`
+`).length}function tt(e){let t=[],n=/['"`]([A-Za-z][A-Za-z0-9_.]*)['"`]/g,r;for(;(r=n.exec(e))!==null;)t.push({value:r[1],index:r.index});return t}function nt(e){let t=[],n=[{kind:"import",re:/\bimport\s+(?:type\s+)?(?:[^'"]*?\s+from\s*)?['"]([^'"]+)['"]/g},{kind:"export",re:/\bexport\s+(?:type\s+)?[^'"]*?\s+from\s*['"]([^'"]+)['"]/g},{kind:"dynamic-import",re:/\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g},{kind:"require",re:/\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g}];for(let r of n){let a;for(;(a=r.re.exec(e))!==null;){let i=a.index+a[0].indexOf(a[1]),s=a[0],c=r.kind==="import"&&/\bimport\s+type\b/.test(s)||r.kind==="export"&&/\bexport\s+type\b/.test(s);t.push({value:a[1],index:i,kind:r.kind,typeOnly:c})}}return t.sort((r,a)=>r.index-a.index)}function rt(e,t){let n=e.createSourceFile("generated.ts",t,e.ScriptTarget.Latest,!0),r=[],a=i=>{e.isStringLiteralLike(i)&&r.push({value:i.text,index:i.getStart(n)}),e.forEachChild(i,a)};return a(n),r}function it(e){let t=e.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean);return["adapter","adapters","infra","infrastructure","persistence","repository","repositories","integration","database","db"].some(n=>t.includes(n))}function at(e){let t=e.toLowerCase();return["sequelize","prisma","typeorm","mongoose","knex"].some(n=>t===n||t.startsWith(`${n}/`))}function ot(e){let t=e.toLowerCase();return["adapter","infra","persistence","repository","repositories","integration","database"].some(n=>t.includes(n))}function V(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}function st(e,t){if(t&&(e.isIdentifier(t)||e.isStringLiteralLike(t)))return t.text}function Oe(e,t,n){if(!(!t||!e.isObjectLiteralExpression(t)))return t.properties.find(r=>!e.isPropertyAssignment(r)&&!e.isShorthandPropertyAssignment(r)?!1:st(e,r.name)===n)}function j(e,t,n){return Oe(e,t,n)!==void 0}function H(e,t,n){let r=Oe(e,t,n);return r&&e.isPropertyAssignment(r)?r.initializer:void 0}function ct(e,t){let n=H(e,t,"metadata");return j(e,n,"source")}function $e(e,t){return t?e.isIdentifier(t)?/^[A-Z]/.test(t.text):e.isPropertyAccessExpression(t)?$e(e,t.name):!1:!1}function lt(e,t){if(!e.isCallExpression(t))return!1;let n=t.expression;return e.isPropertyAccessExpression(n)?n.name.text==="publish":e.isIdentifier(n)&&n.text==="publish"}function dt(e,t){if(!e.isCallExpression(t))return!1;let n=t.arguments[0],r=V(e,n);return r!==void 0&&R(r)||j(e,n,"intent")||$e(e,n)}function pt(e,t){if(!e.isCallExpression(t))return!1;let[n,r,a]=t.arguments;return ct(e,n)||j(e,r,"source")||j(e,a,"source")}function ft(e,t){if(!e.isCallExpression(t))return;let[n,r,a]=t.arguments,i=H(e,n,"metadata");return V(e,H(e,i,"source"))??V(e,H(e,r,"source"))??V(e,H(e,a,"source"))}function ut(e,t,n,r){let a=e.createSourceFile("generated.ts",t,e.ScriptTarget.Latest,!0),i=n,s=i?.filePath,c=i?.layer,d=[],u=h=>a.getLineAndCharacterOfPosition(h.getStart(a)).line+1,g=h=>{if(lt(e,h)){let o=h.arguments[0],l=V(e,o);for(let y of de({publishCall:!0,rawIntentName:l,objectHasIntent:j(e,o,"intent"),arkPublishCandidate:dt(e,h),hasSource:pt(e,h)}))d.push(A(y.ruleId,y.message,{line:u(h),filePath:s}));let f=ft(e,h);if(r&&c&&f&&R(f)){let y=r.resolveLayer(f);y&&y!==c&&d.push(A("PUBLISH_SOURCE_LAYER_MISMATCH",`Publish source "${f}" resolves to ${y}, but the target file is classified as ${c}.`,{line:u(h),filePath:s,target:f,fromLayer:c,toLayer:y}))}}e.forEachChild(h,g)};return g(a),d}function ve(e={}){let t=new Set((e.intents||[]).map(i=>typeof i=="string"?i:i.name)),n=e.forbiddenPatterns||[],r=new Set(e.infrastructureLayers??[]),a=e.enforceIntentAllowlist??t.size>0;return{validate(i,s){let c=[],d=s,u=d?.filePath,g=d?.layer,h=e.typescript,o=h?h.createSourceFile(u??"generated.ts",i,h.ScriptTarget.Latest,!0):void 0,l=o?q(e.typescript,o):void 0,f=l?l.filter(p=>p.specifier!==void 0).map(p=>({value:p.specifier,index:p.node.getStart(o),kind:p.kind,typeOnly:p.typeOnly})):nt(i),y=e.typescript?rt(e.typescript,i):tt(i);if(e.typescript&&!e.allowNonLiteralDynamicImport?.(u))for(let p of l?.filter(({unresolved:m})=>m)??[]){let m=p.kind==="require";c.push(A(m?"DYNAMIC_REQUIRE_NOT_ALLOWLISTED":"DYNAMIC_IMPORT_NOT_ALLOWLISTED",`Non-literal ${m?"require call":"dynamic import"} cannot be resolved statically; add the reviewed file to dynamicImportAllowlist.`,{line:p.line,filePath:u}))}let k=g!==void 0&&(r.has(g)||ot(g)),b=g!==void 0?` If "${g}" is an infrastructure layer, mark it in ark.config.json with "mayImportInfrastructure": true (or name it with an infra token like Adapters/Persistence/Repository).`:"";for(let p of n)if(p instanceof RegExp){p.lastIndex=0;let m=p.exec(i);p.lastIndex=0,m&&c.push(A("FORBIDDEN_PATTERN",`Forbidden pattern matched: ${p}`,{line:m.index===void 0?void 0:N(i,m.index),filePath:u,suggestion:"Remove infrastructure imports from domain/application layers."+b}))}else i.includes(p)&&c.push(A("FORBIDDEN_SUBSTRING",`Forbidden substring: ${p}`,{line:N(i,i.indexOf(p)),filePath:u}));for(let p of f){let m=e.resolveImportTarget?.(p.value,u)??(e.resolveImportLayer?{layer:e.resolveImportLayer(p.value,u)}:void 0),P=typeof u=="string"?e.resolveImportTarget?.(u)??(e.resolveImportLayer?{layer:g,relPath:void 0}:void 0):void 0,$=m?.layer;if($&&g){let K=v(e.architectureProfile?.rules,g,$,{fromPath:P?.relPath,toPath:m?.relPath,layers:e.architectureLayers});if(K){if(p.typeOnly&&!K.peerIsolation)continue;let ae=!!K.peerIsolation;c.push(A("LAYER_IMPORT_VIOLATION",K.message??(ae?`Layer "${g}" must not import across slices into "${$}".`:`Layer "${g}" must not import "${$}".`),{line:N(i,p.index),source:p.value,target:p.value,filePath:u,fromLayer:g,toLayer:$,suggestion:ae?"Extract shared code to a shared layer, or coordinate slices via events/ports \u2014 do not import across feature/context slices.":"Depend on a port/interface owned by an inner layer instead, or move this code to a layer allowed to make this import.",details:{importKind:p.kind,peerIsolation:ae,...p.typeOnly?{typeOnly:!0}:{}}}));continue}if($!==g)continue}k||p.typeOnly||!it(p.value)&&!at(p.value)||c.push(A("FORBIDDEN_IMPORT",`Forbidden ${p.kind} target: "${p.value}".`,{line:N(i,p.index),source:p.value,target:p.value,filePath:u,suggestion:"Route infrastructure access through an allowed adapter or port boundary."+b,details:{importKind:p.kind}}))}if(e.policies)for(let p of e.policies){let m=p.check({source:i,context:s});if(m!==!0)if(Array.isArray(m))for(let P of m)c.push(A("POLICY_VIOLATION",P.message,{filePath:u,suggestion:`Fix violation of policy "${p.name}".`}));else m===!1?c.push(A("POLICY_VIOLATION",`Policy ${p.name} failed on generated code`)):c.push(A("POLICY_VIOLATION",m.message))}if(a&&t.size>0)for(let p of y)R(p.value)&&!t.has(p.value)&&c.push(A("UNKNOWN_INTENT",`Unknown intent reference: "${p.value}"`,{line:N(i,p.index),filePath:u,target:p.value,suggestion:`Register intent "${p.value}" via defineIntent() or remove the reference.`}));if(e.architectureProfile&&g)for(let p of y){if(!R(p.value))continue;let m=e.architectureProfile.resolveLayer(p.value);if(!m)continue;let P=v(e.architectureProfile.rules,g,m);P&&c.push(A("LAYER_REFERENCE_VIOLATION",P.message??`Layer "${g}" must not reference "${m}" through "${p.value}".`,{line:N(i,p.index),filePath:u,target:p.value,fromLayer:g,toLayer:m,suggestion:"Route the dependency through an allowed intent, port, or event.",details:{rule:P}}))}if(e.extensions)for(let p of e.extensions)try{let m=p.analyze(i,s);c.push(...m)}catch(m){c.push(A("EXTENSION_ERROR",`Extension "${p.name}" failed: ${m instanceof Error?m.message:String(m)}`))}if(e.typescript&&o&&g&&e.forbiddenGlobals?.[g]?.length)try{c.push(...Y(e.typescript,o,e.forbiddenGlobals[g]).map(p=>A("FORBIDDEN_GLOBAL",`${g} must not use the ambient global "${p.name}".`,{line:p.line,filePath:u,target:p.name,fromLayer:g,suggestion:"Inject the capability through a port (e.g. a Clock, IdGenerator, or HttpPort) instead of reaching for the ambient global."})))}catch(p){c.push(A("AST_ANALYZER_ERROR",`TypeScript AST analyzer failed: ${p instanceof Error?p.message:String(p)}`))}if(e.typescript)try{c.push(...ut(e.typescript,i,s,e.architectureProfile))}catch(p){c.push(A("AST_ANALYZER_ERROR",`TypeScript AST analyzer failed: ${p instanceof Error?p.message:String(p)}`))}return{valid:c.length===0,violations:c}}}}var gt="1.0",J="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",_e=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],yt=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function ht(){let e=[];for(let t of _e)for(let n of _e)t===n||yt.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}var Z=ht();var L={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ge={$schema:"https://json-schema.org/draft/2020-12/schema",$id:J,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:J,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.0",default:"1.0"},name:{type:"string",minLength:1},include:{...L,minItems:1,default:["src"]},exclude:{...L,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Z,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...L,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...L,minItems:1},exclude:L,intentPrefixes:L,description:{type:"string",minLength:1},forbiddenGlobals:L,mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...L,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}}}},D=class extends Error{issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+${n.map(r=>`- ${r.path}: ${r.message}`).join(`
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function Ne(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function ue(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}function M(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function mt(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}function W(e,t,n,r,a){if(t.$ref){let i=mt(t.$ref,r);if(!i){a.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}W(e,i,n,r,a);return}if(t.const!==void 0&&!Object.is(e,t.const)){a.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(i=>Object.is(i,e))){a.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Ne(e)){a.push({path:n,message:`must be an object; received ${M(e)}`});return}let i=t.properties??{};for(let s of t.required??[])e[s]===void 0&&a.push({path:ue(n,s),message:"is required"});if(t.additionalProperties===!1)for(let s of Object.keys(e))s in i||a.push({path:ue(n,s),message:"unknown field"});for(let[s,c]of Object.entries(i))e[s]!==void 0&&W(e[s],c,ue(n,s),r,a);return}if(t.type==="array"){if(!Array.isArray(e)){a.push({path:n,message:`must be an array; received ${M(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&a.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let i=e.map(s=>JSON.stringify(s));new Set(i).size!==i.length&&a.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((i,s)=>W(i,t.items,`${n}[${s}]`,r,a));return}if(t.type==="string"){if(typeof e!="string"){a.push({path:n,message:`must be a string; received ${M(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&a.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&a.push({path:n,message:`must be a boolean; received ${M(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){a.push({path:n,message:`must be an integer; received ${M(e)}`});return}t.minimum!==void 0&&e<t.minimum&&a.push({path:n,message:`must be at least ${t.minimum}`})}}function At(e){return{...e,$schema:e.$schema===void 0?J:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.0":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Z.map(t=>({...t})):e.rules}}function Ct(e,t="ark.config.json"){if(!Ne(e))throw new D(t,[{path:"$",message:`must be an object; received ${M(e)}`}]);let n=e.schemaVersion===void 0?"unversioned":null;if(e.schemaVersion!==void 0&&e.schemaVersion!=="1.0")throw new D(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.0`}]);return{candidate:At(e),migratedFrom:n}}function Q(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=Ct(e,t),a=[];if(W(n,ge,"$",ge,a),a.length>0)throw new D(t,a);return{config:n,migratedFrom:r}}function ye(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new D(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return Q(n,t)}function Me(e){let t={$schema:typeof e.$schema=="string"&&e.$schema.length>0?e.$schema:J,schemaVersion:"1.0"};for(let[n,r]of Object.entries(e))n!=="$schema"&&n!=="schemaVersion"&&(t[n]=r);return t}function bt(e){return e.endsWith(".")?e:`${e}.`}function xt(e,t){let n=e.prefixes.length?Math.max(...e.prefixes.map(a=>a.length)):0;return(t.prefixes.length?Math.max(...t.prefixes.map(a=>a.length)):0)-n}function ee(e){let t=e.layers.map(a=>({...a,prefixes:a.prefixes.map(bt)})),n=[...t].sort(xt),r=[...e.rules??[]];return{name:e.name,layers:t,rules:r,resolveLayer(a){return t.find(i=>i.match?.(a))?.name??n.find(i=>i.prefixes.some(s=>a.startsWith(s)))?.name}}}function De(e,t={}){return ee({name:t.name??e.name??"ark.config.json",layers:e.layers.map((n,r)=>({name:n.name,prefixes:n.intentPrefixes??[],description:n.description,order:r+1})),rules:e.rules??[]})}var It=[{name:"DomainModel",prefixes:["Domain"],description:"Rich domain model, business rules, and domain events.",order:1},{name:"ApplicationOrchestration",prefixes:["Application"],description:"Use cases and command orchestration.",order:2},{name:"PersistenceAdapters",prefixes:["Adapter.Persistence","Adapter.Repository"],description:"Database, repository, and storage adapters.",order:3},{name:"IntegrationAdapters",prefixes:["Adapter.Integration","Adapter.External"],description:"External systems, APIs, and integration adapters.",order:4},{name:"WorkflowSagaEngine",prefixes:["Workflow"],description:"Sagas, workflows, and long-running processes.",order:5},{name:"BackgroundJobsScheduling",prefixes:["Job"],description:"Background jobs, scheduled work, and async processors.",order:6},{name:"PresentationAdapters",prefixes:["Presentation","Adapter.Presentation","Adapter.Api"],description:"API, UI, controller, and presentation adapters.",order:7},{name:"ReportingReadModels",prefixes:["Reporting"],description:"Read models, projections, and reporting surfaces.",order:8},{name:"ExtensibilityMetadata",prefixes:["Metadata"],description:"Metadata, extensions, and schema contracts.",order:9},{name:"SecurityAuditObservability",prefixes:["Security","Audit","Observability"],description:"Security, audit, and observability concerns.",order:10},{name:"Kernel",prefixes:["Kernel"],description:"Ark-owned governance and kernel signals.",order:11}],X=ee({name:"Ark 11-layer Hexagonal Event-Driven Profile",layers:It,rules:Z.map(e=>({...e}))}),St={DomainModel:["domain"],ApplicationOrchestration:["application","app"],PersistenceAdapters:["adapters/persistence","adapters/repository","repositories","infra/persistence"],IntegrationAdapters:["adapters/integration","adapters/external","integrations"],WorkflowSagaEngine:["workflows","sagas"],BackgroundJobsScheduling:["jobs","schedules"],PresentationAdapters:["presentation","adapters/presentation","adapters/api"],ReportingReadModels:["reporting","read-models","projections"],ExtensibilityMetadata:["metadata","extensions"],SecurityAuditObservability:["security","audit","observability"],Kernel:["kernel"]};function Te(e={}){let t=e.rootDir??"src",n=e.optionalLayers??!0,r=t==="."?"":`${t}/`;return Me({include:e.include??[t],layers:X.layers.map(a=>({name:a.name,patterns:(St[a.name]??[a.name]).map(i=>`${r}${i}/**`),intentPrefixes:a.prefixes,optional:n})),rules:[...X.rules]})}var he="1.0";function O(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}function w(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(w).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${w(t[n])}`).join(",")}}`}var kt="1.0";function C(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}function I(e){return[...new Set(e??[])].sort()}function T(e,t,n,r,a){let i=I(n),s=I(r),c=new Set(i),d=new Set(s),u=s.filter(h=>!c.has(h)),g=i.filter(h=>!d.has(h));u.length===0&&g.length===0||(u.length>0&&C(e,{kind:"added",path:t,classification:a.added,message:a.addedMessage,before:i,after:s}),g.length>0&&C(e,{kind:"removed",path:t,classification:a.removed,message:a.removedMessage,before:i,after:s}))}function te(e,t,n,r,a,i,s){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?a:a==="strengthening"?"weakening":"strengthening",message:r?i:s,before:n,after:r})}function ne(e,t){let n=new Map,r=new Set;for(let a of e){let i=t(a);n.has(i)?r.add(i):n.set(i,a)}return{values:n,duplicates:[...r].sort()}}function Et(e,t,n){let r=ne(t,i=>i.name),a=ne(n,i=>i.name);(r.duplicates.length>0||a.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:a.duplicates});for(let i of[...new Set([...r.values.keys(),...a.values.keys()])].sort()){let s=r.values.get(i),c=a.values.get(i),d=`$.layers[${i}]`;if(!s&&c){C(e,{kind:"layer-added",path:d,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:c});continue}if(s&&!c){C(e,{kind:"layer-removed",path:d,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:s});continue}!s||!c||(T(e,`${d}.patterns`,s.patterns,c.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),T(e,`${d}.exclude`,s.exclude,c.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."}),T(e,`${d}.forbiddenGlobals`,s.forbiddenGlobals,c.forbiddenGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),I(s.intentPrefixes).join("\0")!==I(c.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${d}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:I(s.intentPrefixes),after:I(c.intentPrefixes)}),te(e,`${d}.mayImportInfrastructure`,s.mayImportInfrastructure===!0,c.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),te(e,`${d}.optional`,s.optional===!0,c.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active."))}}function Lt(e,t,n){let r=s=>`${s.from}->${s.to}`,a=ne(t,r),i=ne(n,r);(a.duplicates.length>0||i.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:a.duplicates,after:i.duplicates});for(let s of[...new Set([...a.values.keys(),...i.values.keys()])].sort()){let c=a.values.get(s),d=i.values.get(s),u=`$.rules[${s}]`;if(!c&&d){d.allowed===!1&&C(e,{kind:"deny-added",path:u,classification:"strengthening",message:"A denied dependency edge was added.",after:d});continue}if(c&&!d){c.allowed===!1&&C(e,{kind:"deny-removed",path:u,classification:"weakening",message:"A denied dependency edge was removed.",before:c});continue}if(!c||!d)continue;c.allowed!==d.allowed&&C(e,{kind:d.allowed?"deny-disabled":"deny-enabled",path:`${u}.allowed`,classification:d.allowed?"weakening":"strengthening",message:d.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:c.allowed,after:d.allowed});let g=c.peerIsolation===!0,h=d.peerIsolation===!0;if(g!==h){let o=c.from===c.to&&d.from===d.to;C(e,{kind:h?"peer-isolation-enabled":"peer-isolation-disabled",path:`${u}.peerIsolation`,classification:o?h?"strengthening":"weakening":"judgment-required",message:o?h?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:g,after:h})}I(c.sliceFolders).join("\0")!==I(d.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${u}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:I(c.sliceFolders),after:I(d.sliceFolders)})}}function wt(e,t,n){let r=t.safety??{},a=n.safety??{};for(let i of["maxTsSuppressions","maxAnyCasts"]){let s=r[i]??0,c=a[i]??0;s!==c&&C(e,{kind:c>s?"threshold-raised":"threshold-lowered",path:`$.safety.${i}`,classification:c>s?"weakening":"strengthening",message:c>s?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:s,after:c})}for(let i of["allowInMemory","allowDisabledPeerIsolation"])te(e,`$.safety.${i}`,r[i]===!0,a[i]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}function Pt(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}function me(e,t){let n=[];T(n,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),T(n,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),T(n,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),te(n,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let r={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",i=t.cyclePolicy??"strict";if(a!==i){let s=r[i]===r[a]?"judgment-required":r[i]>r[a]?"strengthening":"weakening";C(n,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:s,message:"The cycle enforcement level changed.",before:a,after:i})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(n,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),Et(n,e.layers,t.layers),Lt(n,e.rules,t.rules),wt(n,e,t),n.sort((s,c)=>s.path.localeCompare(c.path)||s.id.localeCompare(c.id)),{schemaVersion:"1.0",classification:Pt(n),findings:n}}function Ae(e,t){if(!e||e.schemaVersion!=="1.0"||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(a=>typeof a!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=I(e.findingIds),r=I(t.findingIds);return n.length===r.length&&n.every((a,i)=>a===r[i])}function S(e){return`${e.from}->${e.to}`}function G(e,t,n,r="dependency"){return{id:`${e}:${r}:${S(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${S(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${S(t)}, then preflight again.`}:e==="unplanned"?{nextAction:`Remove the unplanned dependency ${S(t)} from the candidate, then preflight again.`}:{}}}function re(e){let t=[],n=new Map(e.changeMap.map.files.map(o=>[o.path,o])),r=new Map(e.changes.map(o=>[o.path,o])),a=new Map(e.changeMap.map.dependencies.map(o=>[S(o),o])),i=new Map(e.baseDependencies.map(o=>[S(o),o])),s=new Map(e.candidateDependencies.map(o=>[S(o),o]));for(let o of[...n.values()].sort((l,f)=>l.path.localeCompare(f.path))){let l=r.get(o.path);l?l.operation!==o.operation?t.push({id:`contradictory:file:${o.path}`,classification:"contradictory",subject:"file",path:o.path,expectedOperation:o.operation,actualOperation:l.operation,message:`${o.path} was planned as ${o.operation} but the actual operation is ${l.operation}.`,nextAction:`Change ${o.path} to the planned ${o.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${o.path}`,classification:"satisfied",subject:"file",path:o.path,expectedOperation:o.operation,actualOperation:l.operation,message:`${o.path} matches the planned ${o.operation} operation.`}):t.push({id:`missing:file:${o.path}`,classification:"missing",subject:"file",path:o.path,expectedOperation:o.operation,message:`${o.path} was planned as ${o.operation} but is absent from the actual change.`,nextAction:`${o.operation[0].toUpperCase()}${o.operation.slice(1)} ${o.path} in the complete change set, then preflight again.`})}for(let o of[...r.values()].sort((l,f)=>l.path.localeCompare(f.path)))n.has(o.path)||t.push({id:`unplanned:file:${o.path}`,classification:"unplanned",subject:"file",path:o.path,actualOperation:o.operation,message:`${o.path} has an unplanned ${o.operation} operation.`,nextAction:`Remove ${o.path} from the change set, then preflight again.`});let c=new Set;for(let o of[...a.values()].sort((l,f)=>S(l).localeCompare(S(f)))){if(s.has(S(o))){t.push(G("satisfied",o,`${o.from} -> ${o.to} exists in the candidate architecture.`));continue}let l={from:o.to,to:o.from};s.has(S(l))?(c.add(S(l)),t.push(G("contradictory",o,`${o.from} -> ${o.to} was planned, but the candidate contains the reverse edge.`))):t.push(G("missing",o,`${o.from} -> ${o.to} is absent from the candidate architecture.`))}let d=new Set([...n.keys(),...r.keys()]);for(let[o,l]of[...s].sort(([f],[y])=>f.localeCompare(y)))i.has(o)||a.has(o)||c.has(o)||!d.has(l.from)&&!d.has(l.to)||t.push({...G("unplanned",l,`${l.from} -> ${l.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let u=new Set(e.changeMap.map.files.filter(o=>o.operation==="delete").map(o=>o.path));for(let[o,l]of[...i].sort(([f],[y])=>f.localeCompare(y)))s.has(o)||u.has(l.from)||u.has(l.to)||!d.has(l.from)&&!d.has(l.to)||t.push({...G("unplanned",l,`${l.from} -> ${l.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let g={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((o,l)=>g[o.classification]-g[l.classification]||(o.subject===l.subject?0:o.subject==="file"?-1:1)||o.id.localeCompare(l.id));let h={satisfied:t.filter(o=>o.classification==="satisfied").length,missing:t.filter(o=>o.classification==="missing").length,contradictory:t.filter(o=>o.classification==="contradictory").length,unplanned:t.filter(o=>o.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:h.missing===0&&h.contradictory===0&&h.unplanned===0,behavioralCompletion:"not-evaluated",summary:h,findings:t}}function Fe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly?"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.":e.peerIsolation?"Extract the shared dependency to a shared layer, then preflight again.":`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, then preflight again.`;case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}function Ce(e,t){let n=typeof e=="string"?ye(e,t):Q(e,t);return{...n,policyHash:O(w(n.config))}}function Rt(e){let t=Ce(e.baseConfig,e.baseSource??"base ark.config.json"),n=Ce(e.candidateConfig,e.candidateSource??"candidate ark.config.json"),r=me(t.config,n.config),a=r.findings.filter(c=>c.classification==="weakening"||c.classification==="judgment-required").map(c=>c.id).sort(),i=a.length>0,s=i&&Ae(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:a});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:a,requiresAcknowledgement:i,acknowledged:s,valid:!i||s}}function B(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}function He(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}function be(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}function ie(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,a="";for(t+=1;t<e.length;t+=1){let i=e[t];if(i===n)return{value:a,offset:r,excerpt:e.slice(r,t+1)};i==="\\"&&t+1<e.length?(a+=e[t+1],t+=1):a+=i}}function U(e,t,n){return e.startsWith(t,n)&&!He(e[n-1])&&!He(e[n+t.length])}function Ot(e,t){return t=be(e,t+6),e[t]==="("?ie(e,be(e,t+1)):je(e,t,!0)}function $t(e,t){return je(e,t+6,!1)}function je(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(U(e,"from",t))return ie(e,be(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return ie(e,t);if(t>0&&(U(e,"import",t)||U(e,"export",t)))return}}function vt(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let i=e.indexOf("*/",n+2);if(i<0)break;n=i+1;continue}if(r==="'"||r==='"'||r==="`"){let i=ie(e,n);i&&(n=i.offset+i.excerpt.length-1);continue}let a=U(e,"import",n)?Ot(e,n):U(e,"export",n)?$t(e,n):void 0;a&&t.push(a)}return t}function _t(e,t){let n=[];for(let r of vt(e.content)){let a=r.value;if(!a.startsWith("."))continue;let i=e.content.slice(0,r.offset).split(`
+`).length,s={kind:"import",file:e.path,line:i,excerpt:r.excerpt},c=Nt(e.path,a,t);n.push({from:e.path,specifier:a,to:c?.path??null,resolution:c?"resolved":"unresolved",fromLayer:e.layer,toLayer:c?.layer??null,evidence:s})}return n}function Nt(e,t,n){let r=e.split("/");r.pop();for(let i of t.split("/"))i==="."||i===""||(i===".."?r.pop():r.push(i));let a=r.join("/");for(let i of[a,`${a}.ts`,`${a}.tsx`,`${a}.mts`,`${a}.cts`,`${a}/index.ts`,`${a}/index.tsx`]){let s=n.get(i);if(s)return s}}function Mt(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let a=v(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});a&&n.push({ruleId:`layer-dependency:${a.from}->${a.to}`,message:a.message??`${a.from} must not depend on ${a.to}.`,edge:r,evidence:r.evidence})}return n}function xe(e){let t=e.files.map(s=>{let c=B(s.path);return{path:c,content:s.content,contentHash:O(s.content),layer:z(c,e.contract.config.layers)??null}}).sort((s,c)=>s.path.localeCompare(c.path)),n=new Map(t.map(s=>[s.path,s])),r=t.flatMap(s=>_t(s,n)),a=[],i=Mt(r,e.contract.config);return{ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:O(w(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(s=>s.name),edges:r,capabilityUses:a,violations:i}}}function Ge(e){let t=new Map(e.files.map(n=>[B(n.path),n]));for(let n of e.changes){let r=B(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return xe({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}function Dt(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}function Ue(e){let t=0,n=new Map,r=new Map,a=new Set,i=[],s=[],c=d=>{n.set(d,t),r.set(d,t),t+=1,i.push(d),a.add(d);for(let h of[...e.get(d)??[]].sort())e.has(h)&&(n.has(h)?a.has(h)&&r.set(d,Math.min(r.get(d)??0,n.get(h)??0)):(c(h),r.set(d,Math.min(r.get(d)??0,r.get(h)??0))));if(r.get(d)!==n.get(d))return;let u=[],g;do{if(g=i.pop(),g===void 0)break;a.delete(g),u.push(g)}while(g!==d);u.length>1&&s.push(u.sort())};for(let d of[...e.keys()].sort())n.has(d)||c(d);return s.sort((d,u)=>d[0].localeCompare(u[0])).map(d=>({ruleId:"CIRCULAR_DEPENDENCY",file:d[0],line:1,target:d.join(" \u2192 "),message:`Circular dependency among ${d.length} files: ${d.join(" \u2192 ")} \u2192 ${d[0]}.`,cycleKind:"value"}))}function Be(e){let t=e.contentViolations.map(i=>({...i})),n=(e.warnings??[]).map(i=>({...i})),r=new Map(e.files.map(i=>[i,new Set]));for(let i of e.edges){if(i.to&&i.to!==i.from&&!i.typeOnly&&r.has(i.from)&&r.get(i.from)?.add(i.to),!i.to||!i.toLayer)continue;let s=v(e.rules,i.fromLayer,i.toLayer,{fromPath:i.from,toPath:i.to,layers:e.config.layers});if(!s)continue;let c=!!s.peerIsolation;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:i.from,line:i.line,fromLayer:i.fromLayer,toLayer:i.toLayer,target:i.to,...i.typeOnly?{typeOnly:!0}:{},...i.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...i.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...i.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!c&&i.portProofEligible?{portProofEligible:!0}:{},...i.kind?{edgeKind:i.kind}:{},...c?{peerIsolation:!0}:{},message:s.message??(c?`${i.fromLayer} must not ${i.kind} another slice of ${i.toLayer} (${i.from} \u2192 ${i.to}). Extract shared code or use events/ports across slices.`:`${i.fromLayer} must not ${i.kind} ${i.toLayer}.`)})}let a=String(e.config.cyclePolicy??"strict").toLowerCase();if(a!=="off"){let i=Ue(r);a==="soft"||a==="framework-soft"?n.push(...i.map(s=>({...s,message:`${s.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...i)}return{violations:t,warnings:n,safety:e.safety}}function Ve(e){return O(w(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}function Tt(e){let t=xe(e),n=new Map(t.ir.files.map(o=>[o.path,o])),r=[],a=new Set,i=[];for(let o of e.changes){let l=o.path.replace(/\\/g,"/"),f=B(o.path);if(!f||f===".."||f.startsWith("../")||l.startsWith("/")||/^[A-Za-z]:\//.test(l)||l.includes("\0")){i.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(a.has(f)){i.push({ruleId:"DUPLICATE_CHANGE_PATH",file:f,line:1,message:`The atomic change set contains more than one operation for ${f}.`});continue}a.add(f),"delete"in o&&o.delete&&!n.has(f)&&i.push({ruleId:"DELETE_TARGET_MISSING",file:f,line:1,message:`Cannot delete ${f} because it is not present in the supplied base tree.`}),r.push("delete"in o&&o.delete?{path:f,delete:!0}:{path:f,content:"content"in o?o.content:""})}e.changes.length===0&&i.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let s=Ge({...e,changes:r}),c=new Map(s.ir.files.map(o=>[o.path,o])),d=Be({config:e.contract.config,rules:e.contract.config.rules,files:s.ir.files.map(o=>o.path),contentViolations:[],edges:s.ir.edges.filter(o=>!!o.fromLayer).map(o=>({from:o.from,fromLayer:o.fromLayer,...o.to?{to:o.to}:{},...o.toLayer?{toLayer:o.toLayer}:{},line:o.evidence.line,kind:"import"}))}),u=r.map(o=>{let l=B(o.path),f=n.get(l),y=c.get(l);return{path:l,operation:"delete"in o&&o.delete?"delete":f?"update":"create",...f?{beforeContentHash:f.contentHash}:{},...y?{candidateContentHash:y.contentHash}:{}}}).sort((o,l)=>o.path.localeCompare(l.path)),g=[...i,...d.violations].map(o=>({...o,nextAction:Fe(o)})),h=e.changeMap?re({changeMap:e.changeMap,changes:u,baseDependencies:t.ir.edges.flatMap(o=>o.to?[{from:o.from,to:o.to}]:[]),candidateDependencies:s.ir.edges.flatMap(o=>o.to?[{from:o.from,to:o.to}]:[])}):void 0;return{schemaVersion:"1.0",valid:g.length===0&&(h?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:s.ir.compilerOptionsHash,baseTreeHash:Ve(t.ir.files),candidateTreeHash:Ve(s.ir.files),...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...h?{convergence:h}:{},changes:u,violations:g,warnings:d.warnings}}function x(e,t,n={}){return{ruleId:e,message:t,...n}}function Ft(e){let{config:t,rules:n,files:r,manifest:a}=e,i=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(l=>typeof l!="string"))&&i.push(x("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))i.push(x("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let l of["maxTsSuppressions","maxAnyCasts"]){let f=t.safety[l];f!==void 0&&(!Number.isInteger(f)||f<0)&&i.push(x("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${l} must be a non-negative integer.`))}let s=Array.isArray(t.layers)?t.layers:[],c=Array.isArray(a?.architecture?.layers)?a.architecture.layers:[],d=new Set([...s.map(l=>l.name).filter(Boolean),...c.map(l=>l.name).filter(l=>!!l)]);s.length===0&&i.push(x("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let u=new Set,g=new Set;for(let l of s){if(!l.name){i.push(x("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}u.has(l.name)&&g.add(l.name),u.add(l.name),l.forbiddenGlobals!==void 0&&(!Array.isArray(l.forbiddenGlobals)||l.forbiddenGlobals.some(y=>typeof y!="string"))&&i.push(x("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${l.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:l.name}));let f=Array.isArray(l.patterns)?l.patterns:[];if(f.length===0){i.push(x("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${l.name}" has no file patterns and will never classify files.`,{layer:l.name}));continue}for(let y of f){let k;try{k=F(y)}catch(b){i.push(x("CONFIG_INVALID_LAYER_PATTERN",`Layer "${l.name}" has an invalid pattern "${y}": ${b instanceof Error?b.message:String(b)}`,{layer:l.name,pattern:y}));continue}!r.some(b=>k.test(b))&&!l.optional&&i.push(x("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${l.name}" pattern "${y}" matched no included files.`,{layer:l.name,pattern:y,failsStrict:!1}))}}for(let l of g)i.push(x("CONFIG_DUPLICATE_LAYER",`Layer "${l}" is configured more than once.`,{layer:l}));if(d.size>0)for(let l of n??[])l.from&&!d.has(l.from)&&i.push(x("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${l.from}".`,{fromLayer:l.from,toLayer:l.to})),l.to&&!d.has(l.to)&&i.push(x("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${l.to}".`,{fromLayer:l.from,toLayer:l.to}));let h=new Set;if(s.length>1)for(let l of r){let f=-1,y=[];for(let k of s)for(let b of k.patterns??[]){if(!F(b).test(l))continue;let p=ce(b);p>f?(f=p,y=[k.name]):p===f&&!y.includes(k.name)&&y.push(k.name)}y.length>1&&h.add([...y].sort().join(" + "))}h.size>0&&i.push(x("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...h].join(", ")}.`,{pairs:[...h]}));let o=r.filter(l=>!z(l,s));return o.length>0&&i.push(x("CONFIG_UNCLASSIFIED_FILES",`${o.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:o.length,samples:o.slice(0,5)})),i}export{he as ANALYSIS_IR_SCHEMA_VERSION,We as ARK_ANALYSIS_RESULT_SCHEMA,ze as ARK_ANALYSIS_RESULT_SCHEMA_VERSION,ge as ARK_CONFIG_SCHEMA,gt as ARK_CONFIG_SCHEMA_VERSION,kt as POLICY_DELTA_SCHEMA_VERSION,re as analyzeArchitectureConvergence,Ge as analyzeChange,Rt as analyzePolicyDelta,xe as analyzeProject,me as classifyArkPolicyDelta,Ft as collectAnalysisConfigWarnings,Y as collectForbiddenCapabilityUses,ve as createAICodeGate,Ye as createAdapterResult,ee as createArchitectureProfile,De as createArchitectureProfileFromArkConfig,Te as createElevenLayerArkConfig,Ue as detectArchitectureCycles,O as deterministicHash,X as elevenLayerProfile,Be as evaluateArchitectureGraph,Dt as explainViolation,q as extractSemanticDependencies,Q as loadArkConfigContract,Ce as loadContract,ye as parseArkConfigJson,Ae as policyDeltaAcknowledgementMatches,Tt as preflightChange,w as stableSerialize,oe as toAdapterDiagnostic,Ke as version};