arkgate 3.0.5 → 3.2.0

package/dist/eslint/index.js

@@ -1,931 +1,3 @@
-// src/eslint/index.ts
-import fs from "fs";
-import path from "path";
-
-// src/domain/layerMatch.ts
-var regexpCache = /* @__PURE__ */ new Map();
-function escapeLiteral(ch) {
-  return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
-}
-function normalizeGlobSeparators(pattern) {
-  let out = "";
-  for (let i = 0; i < pattern.length; i += 1) {
-    const c = pattern[i];
-    if (c === "\\" && i + 1 < pattern.length) {
-      const next = pattern[i + 1];
-      if ("*?{}[],".includes(next) || next === "\\") {
-        out += "\\" + next;
-        i += 1;
-        continue;
-      }
-      out += "/";
-      continue;
-    }
-    out += c;
-  }
-  return out;
-}
-function bracesBalanced(glob) {
-  let depth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\") {
-      i += 1;
-      continue;
-    }
-    if (c === "{") depth += 1;
-    else if (c === "}") {
-      depth -= 1;
-      if (depth < 0) return false;
-    }
-  }
-  return depth === 0;
-}
-function globToRegExp(pattern) {
-  const cached = regexpCache.get(pattern);
-  if (cached) return cached;
-  const glob = normalizeGlobSeparators(pattern);
-  const useBraces = bracesBalanced(glob);
-  let out = "";
-  let braceDepth = 0;
-  for (let i = 0; i < glob.length; i += 1) {
-    const c = glob[i];
-    if (c === "\\" && i + 1 < glob.length) {
-      out += escapeLiteral(glob[i + 1]);
-      i += 1;
-    } else if (c === "*") {
-      if (glob[i + 1] === "*") {
-        if (glob[i + 2] === "/") {
-          out += "(?:.*/)?";
-          i += 2;
-        } else {
-          out += ".*";
-          i += 1;
-        }
-      } else {
-        out += "[^/]*";
-      }
-    } else if (c === "?") {
-      out += "[^/]";
-    } else if (c === "{" && useBraces) {
-      out += "(?:";
-      braceDepth += 1;
-    } else if (c === "}" && useBraces && braceDepth > 0) {
-      out += ")";
-      braceDepth -= 1;
-    } else if (c === "," && useBraces && braceDepth > 0) {
-      out += "|";
-    } else {
-      out += escapeLiteral(c);
-    }
-  }
-  const re = new RegExp(`^${out}$`);
-  regexpCache.set(pattern, re);
-  return re;
-}
-function patternSpecificity(pattern) {
-  const glob = normalizeGlobSeparators(String(pattern));
-  const beforeWildcard = glob.split("*")[0];
-  const literalSegments = beforeWildcard.split("/").filter(Boolean).length;
-  const literalLength = glob.replace(/\*/g, "").length;
-  return literalSegments * 1e4 + literalLength;
-}
-function layerForRelativePath(relPath, layers) {
-  const rel = String(relPath).split(/[/\\]/).join("/");
-  let bestName;
-  let bestScore = -1;
-  for (const layer of layers ?? []) {
-    if ((layer.exclude ?? []).some((pattern) => globToRegExp(pattern).test(rel))) {
-      continue;
-    }
-    for (const pattern of layer.patterns ?? []) {
-      if (globToRegExp(pattern).test(rel)) {
-        const score = patternSpecificity(pattern);
-        if (score > bestScore) {
-          bestScore = score;
-          bestName = layer.name;
-        }
-      }
-    }
-  }
-  return bestName;
-}
-function sliceIdForPath(relPath, sliceFolders) {
-  if (!sliceFolders?.length) return void 0;
-  const parts = String(relPath).split(/[/\\]/).filter(Boolean);
-  const folders = new Set(sliceFolders.map((s) => String(s).toLowerCase()));
-  for (let i = 0; i < parts.length - 1; i += 1) {
-    if (folders.has(parts[i].toLowerCase())) {
-      return `${parts[i]}/${parts[i + 1]}`;
-    }
-  }
-  return void 0;
-}
-function inferSliceFoldersFromPatterns(patterns) {
-  const out = /* @__PURE__ */ new Set();
-  for (const pattern of patterns ?? []) {
-    const glob = normalizeGlobSeparators(String(pattern));
-    const parts = glob.split("/").filter(Boolean);
-    for (let i = 0; i < parts.length; i += 1) {
-      const part = parts[i];
-      if ((part === "**" || part === "*") && i > 0) {
-        const prev = parts[i - 1];
-        if (prev && !prev.includes("*") && !prev.includes("{") && !prev.includes("}")) {
-          out.add(prev);
-        }
-      }
-    }
-  }
-  return [...out];
-}
-function resolveSliceFolders(rule, layerName, layers) {
-  if (Array.isArray(rule.sliceFolders) && rule.sliceFolders.length > 0) {
-    return rule.sliceFolders.filter((s) => typeof s === "string" && s.length > 0);
-  }
-  const layer = (layers ?? []).find((l) => l.name === layerName);
-  return inferSliceFoldersFromPatterns(layer?.patterns);
-}
-function findDeniedEdgeRule(rules2, from, to, options) {
-  for (const rule of rules2 ?? []) {
-    if (rule.from !== from || rule.to !== to) continue;
-    if (rule.allowed !== false) continue;
-    if (rule.peerIsolation) {
-      const fromPath = options?.fromPath;
-      const toPath = options?.toPath;
-      if (!fromPath || !toPath) continue;
-      const folders = resolveSliceFolders(rule, from, options?.layers);
-      if (folders.length === 0) continue;
-      const fromSlice = sliceIdForPath(fromPath, folders);
-      const toSlice = sliceIdForPath(toPath, folders);
-      if (!fromSlice || !toSlice) continue;
-      if (fromSlice !== toSlice) return rule;
-      continue;
-    }
-    if (from === to) continue;
-    return rule;
-  }
-  return void 0;
-}
-function isEdgeDenied(rules2, from, to, options) {
-  return findDeniedEdgeRule(rules2, from, to, options) !== void 0;
-}
-
-// src/domain/configContract.ts
-var ARK_CONFIG_SCHEMA_VERSION = "1.0";
-var ARK_CONFIG_SCHEMA_URL = "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-var DEFAULT_LAYER_NAMES = [
-  "DomainModel",
-  "ApplicationOrchestration",
-  "PersistenceAdapters",
-  "IntegrationAdapters",
-  "WorkflowSagaEngine",
-  "BackgroundJobsScheduling",
-  "PresentationAdapters",
-  "ReportingReadModels",
-  "ExtensibilityMetadata",
-  "SecurityAuditObservability",
-  "Kernel"
-];
-var DEFAULT_ALLOWED_FLOWS = /* @__PURE__ */ new Set([
-  "PresentationAdapters->ApplicationOrchestration",
-  "ApplicationOrchestration->DomainModel",
-  "WorkflowSagaEngine->ApplicationOrchestration",
-  "WorkflowSagaEngine->DomainModel",
-  "BackgroundJobsScheduling->ApplicationOrchestration"
-]);
-function createDefaultRules() {
-  const rules2 = [];
-  for (const from of DEFAULT_LAYER_NAMES) {
-    for (const to of DEFAULT_LAYER_NAMES) {
-      if (from === to || DEFAULT_ALLOWED_FLOWS.has(`${from}->${to}`)) continue;
-      rules2.push({ from, to, allowed: false });
-    }
-  }
-  return rules2;
-}
-var DEFAULT_ARK_CONFIG_RULES = createDefaultRules();
-var stringArraySchema = {
-  type: "array",
-  items: { type: "string", minLength: 1 },
-  uniqueItems: true
-};
-var ARK_CONFIG_SCHEMA = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: ARK_CONFIG_SCHEMA_URL,
-  title: "ArkGate architecture contract",
-  description: "Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",
-  type: "object",
-  additionalProperties: false,
-  required: ["$schema", "schemaVersion", "include", "layers", "rules"],
-  properties: {
-    $schema: {
-      type: "string",
-      minLength: 1,
-      default: ARK_CONFIG_SCHEMA_URL,
-      description: "Editor-facing URL or local path for this JSON Schema."
-    },
-    schemaVersion: {
-      type: "string",
-      const: ARK_CONFIG_SCHEMA_VERSION,
-      default: ARK_CONFIG_SCHEMA_VERSION
-    },
-    name: { type: "string", minLength: 1 },
-    include: { ...stringArraySchema, minItems: 1, default: ["src"] },
-    exclude: { ...stringArraySchema, default: [] },
-    excludeGenerated: { type: "boolean", default: true },
-    frameworkOverlay: { type: "string", minLength: 1 },
-    layers: {
-      type: "array",
-      default: [],
-      items: { $ref: "#/$defs/layer" }
-    },
-    rules: {
-      type: "array",
-      default: DEFAULT_ARK_CONFIG_RULES,
-      items: { $ref: "#/$defs/rule" }
-    },
-    cyclePolicy: {
-      type: "string",
-      enum: ["strict", "soft", "framework-soft", "off"],
-      default: "strict"
-    },
-    dynamicImportAllowlist: { ...stringArraySchema, default: [] },
-    safety: {
-      $ref: "#/$defs/safety",
-      default: {
-        maxTsSuppressions: 0,
-        maxAnyCasts: 0,
-        allowInMemory: false,
-        allowDisabledPeerIsolation: false
-      }
-    }
-  },
-  $defs: {
-    layer: {
-      type: "object",
-      additionalProperties: false,
-      required: ["name", "patterns"],
-      properties: {
-        name: { type: "string", minLength: 1 },
-        patterns: { ...stringArraySchema, minItems: 1 },
-        exclude: stringArraySchema,
-        intentPrefixes: stringArraySchema,
-        description: { type: "string", minLength: 1 },
-        forbiddenGlobals: stringArraySchema,
-        mayImportInfrastructure: { type: "boolean" },
-        optional: { type: "boolean" }
-      }
-    },
-    rule: {
-      type: "object",
-      additionalProperties: false,
-      required: ["from", "to", "allowed"],
-      properties: {
-        from: { type: "string", minLength: 1 },
-        to: { type: "string", minLength: 1 },
-        allowed: { type: "boolean" },
-        message: { type: "string", minLength: 1 },
-        peerIsolation: { type: "boolean" },
-        sliceFolders: { ...stringArraySchema, minItems: 1 }
-      }
-    },
-    safety: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        maxTsSuppressions: { type: "integer", minimum: 0, default: 0 },
-        maxAnyCasts: { type: "integer", minimum: 0, default: 0 },
-        allowInMemory: { type: "boolean", default: false },
-        allowDisabledPeerIsolation: { type: "boolean", default: false }
-      }
-    }
-  }
-};
-var ArkConfigValidationError = class extends Error {
-  issues;
-  source;
-  constructor(source, issues) {
-    super(
-      `Invalid ArkGate config (${source}):
-${issues.map((issue) => `- ${issue.path}: ${issue.message}`).join("\n")}`
-    );
-    this.name = "ArkConfigValidationError";
-    this.source = source;
-    this.issues = issues;
-  }
-};
-function isObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function propertyPath(parent, key) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? `${parent}.${key}` : `${parent}[${JSON.stringify(key)}]`;
-}
-function valueType(value) {
-  if (value === null) return "null";
-  if (Array.isArray(value)) return "array";
-  return typeof value;
-}
-function resolveSchemaRef(ref, root) {
-  const prefix = "#/$defs/";
-  if (!ref.startsWith(prefix)) return void 0;
-  return root.$defs[ref.slice(prefix.length)];
-}
-function validateNode(value, schema, path2, root, issues) {
-  if (schema.$ref) {
-    const referenced = resolveSchemaRef(schema.$ref, root);
-    if (!referenced) {
-      issues.push({ path: path2, message: `schema reference ${schema.$ref} cannot be resolved` });
-      return;
-    }
-    validateNode(value, referenced, path2, root, issues);
-    return;
-  }
-  if (schema.const !== void 0 && !Object.is(value, schema.const)) {
-    issues.push({ path: path2, message: `must equal ${JSON.stringify(schema.const)}` });
-    return;
-  }
-  if (schema.enum && !schema.enum.some((candidate) => Object.is(candidate, value))) {
-    issues.push({ path: path2, message: `must be one of ${schema.enum.map(String).join(", ")}` });
-    return;
-  }
-  if (schema.type === "object") {
-    if (!isObject(value)) {
-      issues.push({ path: path2, message: `must be an object; received ${valueType(value)}` });
-      return;
-    }
-    const properties = schema.properties ?? {};
-    for (const key of schema.required ?? []) {
-      if (value[key] === void 0) {
-        issues.push({ path: propertyPath(path2, key), message: "is required" });
-      }
-    }
-    if (schema.additionalProperties === false) {
-      for (const key of Object.keys(value)) {
-        if (!(key in properties)) {
-          issues.push({ path: propertyPath(path2, key), message: "unknown field" });
-        }
-      }
-    }
-    for (const [key, childSchema] of Object.entries(properties)) {
-      if (value[key] !== void 0) {
-        validateNode(value[key], childSchema, propertyPath(path2, key), root, issues);
-      }
-    }
-    return;
-  }
-  if (schema.type === "array") {
-    if (!Array.isArray(value)) {
-      issues.push({ path: path2, message: `must be an array; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minItems !== void 0 && value.length < schema.minItems) {
-      issues.push({ path: path2, message: `must contain at least ${schema.minItems} item(s)` });
-    }
-    if (schema.uniqueItems) {
-      const serialized = value.map((entry) => JSON.stringify(entry));
-      if (new Set(serialized).size !== serialized.length) {
-        issues.push({ path: path2, message: "must not contain duplicate items" });
-      }
-    }
-    if (schema.items) {
-      value.forEach(
-        (entry, index) => validateNode(entry, schema.items, `${path2}[${index}]`, root, issues)
-      );
-    }
-    return;
-  }
-  if (schema.type === "string") {
-    if (typeof value !== "string") {
-      issues.push({ path: path2, message: `must be a string; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minLength !== void 0 && value.length < schema.minLength) {
-      issues.push({ path: path2, message: `must contain at least ${schema.minLength} character(s)` });
-    }
-    return;
-  }
-  if (schema.type === "boolean") {
-    if (typeof value !== "boolean") {
-      issues.push({ path: path2, message: `must be a boolean; received ${valueType(value)}` });
-    }
-    return;
-  }
-  if (schema.type === "integer") {
-    if (!Number.isInteger(value)) {
-      issues.push({ path: path2, message: `must be an integer; received ${valueType(value)}` });
-      return;
-    }
-    if (schema.minimum !== void 0 && value < schema.minimum) {
-      issues.push({ path: path2, message: `must be at least ${schema.minimum}` });
-    }
-  }
-}
-function defaultedConfig(input) {
-  return {
-    ...input,
-    $schema: input.$schema === void 0 ? ARK_CONFIG_SCHEMA_URL : input.$schema,
-    schemaVersion: input.schemaVersion === void 0 ? ARK_CONFIG_SCHEMA_VERSION : input.schemaVersion,
-    include: input.include === void 0 ? ["src"] : input.include,
-    layers: input.layers === void 0 ? [] : input.layers,
-    rules: input.rules === void 0 ? DEFAULT_ARK_CONFIG_RULES.map((rule) => ({ ...rule })) : input.rules
-  };
-}
-function migrateArkConfig(input, source = "ark.config.json") {
-  if (!isObject(input)) {
-    throw new ArkConfigValidationError(source, [
-      { path: "$", message: `must be an object; received ${valueType(input)}` }
-    ]);
-  }
-  const migratedFrom = input.schemaVersion === void 0 ? "unversioned" : null;
-  if (input.schemaVersion !== void 0 && input.schemaVersion !== ARK_CONFIG_SCHEMA_VERSION) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$.schemaVersion",
-        message: `unsupported version ${JSON.stringify(input.schemaVersion)}; expected ${ARK_CONFIG_SCHEMA_VERSION}`
-      }
-    ]);
-  }
-  return { candidate: defaultedConfig(input), migratedFrom };
-}
-function loadArkConfigContract(input, source = "ark.config.json") {
-  const { candidate, migratedFrom } = migrateArkConfig(input, source);
-  const issues = [];
-  validateNode(
-    candidate,
-    ARK_CONFIG_SCHEMA,
-    "$",
-    ARK_CONFIG_SCHEMA,
-    issues
-  );
-  if (issues.length > 0) throw new ArkConfigValidationError(source, issues);
-  return { config: candidate, migratedFrom };
-}
-function parseArkConfigJson(json, source = "ark.config.json") {
-  let input;
-  try {
-    input = JSON.parse(json);
-  } catch (error) {
-    throw new ArkConfigValidationError(source, [
-      {
-        path: "$",
-        message: `invalid JSON: ${error instanceof Error ? error.message : String(error)}`
-      }
-    ]);
-  }
-  return loadArkConfigContract(input, source);
-}
-
-// src/domain/adapterContract.ts
-function text(value) {
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function positiveInteger(value, fallback) {
-  return Number.isInteger(value) && Number(value) > 0 ? Number(value) : fallback;
-}
-function toAdapterDiagnostic(violation, fallbackSeverity = "error") {
-  const ruleId = text(violation.ruleId) ?? text(violation.code) ?? "ARK_UNKNOWN";
-  const severity = violation.severity === "warning" ? "warning" : fallbackSeverity;
-  const evidence = {
-    ...text(violation.target) ? { target: text(violation.target) } : {},
-    ...text(violation.fromLayer) ? { fromLayer: text(violation.fromLayer) } : {},
-    ...text(violation.toLayer) ? { toLayer: text(violation.toLayer) } : {},
-    ...typeof violation.typeOnly === "boolean" ? { typeOnly: violation.typeOnly } : {}
-  };
-  return {
-    ruleId,
-    severity,
-    message: text(violation.message) ?? ruleId,
-    location: {
-      file: text(violation.file) ?? "<unknown>",
-      line: positiveInteger(violation.line, 1),
-      column: positiveInteger(violation.column, 1)
-    },
-    evidence
-  };
-}
-
-// src/domain/sourcePolicy.ts
-var SOURCE_POLICY_MESSAGES = {
-  RAW_EVENT_PUBLISH: "Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",
-  PUBLISH_MISSING_SOURCE: "Strict Ark publish calls must include metadata.source."
-};
-function looksLikeArkIntent(value) {
-  return /^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(
-    value
-  );
-}
-function classifyPublishFacts(facts) {
-  if (!facts.publishCall) return [];
-  const findings = [];
-  if (facts.rawIntentName !== void 0 && looksLikeArkIntent(facts.rawIntentName) || facts.objectHasIntent) {
-    findings.push({
-      ruleId: "RAW_EVENT_PUBLISH",
-      message: SOURCE_POLICY_MESSAGES.RAW_EVENT_PUBLISH
-    });
-  }
-  if (facts.arkPublishCandidate && !facts.hasSource) {
-    findings.push({
-      ruleId: "PUBLISH_MISSING_SOURCE",
-      message: SOURCE_POLICY_MESSAGES.PUBLISH_MISSING_SOURCE
-    });
-  }
-  return findings;
-}
-
-// src/eslint/index.ts
-function lintedFilename(context) {
-  if (typeof context.physicalFilename === "string" && context.physicalFilename.length > 0) {
-    return context.physicalFilename;
-  }
-  if (typeof context.filename === "string" && context.filename.length > 0) {
-    return context.filename;
-  }
-  if (typeof context.getFilename === "function") {
-    try {
-      const name = context.getFilename();
-      if (typeof name === "string" && name.length > 0) return name;
-    } catch {
-    }
-  }
-  return "";
-}
-function reportAdapterDiagnostic(context, node, messageId, violation, data) {
-  const diagnostic = toAdapterDiagnostic({
-    ...violation,
-    line: violation.line ?? node.loc?.start?.line,
-    column: violation.column ?? (typeof node.loc?.start?.column === "number" ? node.loc.start.column + 1 : void 0)
-  });
-  context.report({ node, messageId, ...data ? { data } : {}, diagnostic });
-  return diagnostic;
-}
-function findConfigPath(startFile) {
-  if (!startFile || startFile === "<input>" || startFile.startsWith("stdin")) return null;
-  let dir = path.dirname(path.resolve(startFile));
-  for (; ; ) {
-    const candidate = path.join(dir, "ark.config.json");
-    if (fs.existsSync(candidate)) return candidate;
-    const parent = path.dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-var _configCache = /* @__PURE__ */ new Map();
-function loadArkConfig(configPath) {
-  if (_configCache.has(configPath)) return _configCache.get(configPath) ?? null;
-  if (!fs.existsSync(configPath)) return null;
-  const config = parseArkConfigJson(fs.readFileSync(configPath, "utf8"), configPath).config;
-  _configCache.set(configPath, config);
-  return config;
-}
-function resolveRelativeImport(fromFile, specifier) {
-  if (!specifier.startsWith(".")) return null;
-  const base = path.resolve(path.dirname(fromFile), specifier);
-  const candidates = [
-    base,
-    `${base}.ts`,
-    `${base}.tsx`,
-    `${base}.mts`,
-    `${base}.cts`,
-    `${base}.js`,
-    `${base}.jsx`,
-    path.join(base, "index.ts"),
-    path.join(base, "index.tsx"),
-    path.join(base, "index.js")
-  ];
-  for (const c of candidates) {
-    try {
-      if (fs.existsSync(c) && fs.statSync(c).isFile()) return c;
-    } catch {
-    }
-  }
-  return `${base}.ts`;
-}
-function stringValue(node) {
-  return typeof node?.value === "string" ? node.value : void 0;
-}
-function propertyName(node) {
-  return node?.name ?? stringValue(node);
-}
-function sourceCodeFor(context) {
-  return context.sourceCode ?? context.getSourceCode?.();
-}
-function referenceFor(context, node) {
-  let scope = sourceCodeFor(context)?.getScope?.(node);
-  while (scope) {
-    const reference = scope.references?.find((candidate) => candidate.identifier === node);
-    if (reference) return reference;
-    scope = scope.upper ?? void 0;
-  }
-  return void 0;
-}
-function isLocallyBound(context, node, name) {
-  const reference = referenceFor(context, node);
-  if (reference?.resolved) return (reference.resolved.defs?.length ?? 0) > 0;
-  let scope = sourceCodeFor(context)?.getScope?.(node);
-  while (scope) {
-    const variable = scope.set?.get(name);
-    if (variable) return (variable.defs?.length ?? 0) > 0;
-    scope = scope.upper ?? void 0;
-  }
-  return false;
-}
-function isValueIdentifierReference(context, node) {
-  const reference = referenceFor(context, node);
-  if (reference) return reference.isValueReference !== false;
-  return node.parent?.type === "VariableDeclarator" && node.parent.init === node;
-}
-function memberExpressionPath(node) {
-  if (node?.type === "Identifier" && node.name) {
-    return { root: node, segments: [node.name] };
-  }
-  if (!node) return void 0;
-  const memberLike = node.type === "MemberExpression" || Boolean(node.object && node.property);
-  if (!memberLike || node.computed === true) return void 0;
-  const base = memberExpressionPath(node.object);
-  const property = propertyName(node.property);
-  if (!base || !property) return void 0;
-  return { root: base.root, segments: [...base.segments, property] };
-}
-function calleePropertyName(node) {
-  return propertyName(node.callee?.property);
-}
-function objectProperty(node, name) {
-  return node?.properties?.find((property) => propertyName(property.key) === name);
-}
-function objectHasProperty(node, name) {
-  return objectProperty(node, name) !== void 0;
-}
-function objectHasMetadataSource(node) {
-  const metadata = objectProperty(node, "metadata")?.value;
-  return objectHasProperty(metadata, "source");
-}
-function isPublishCall(node) {
-  return calleePropertyName(node) === "publish";
-}
-var noDomainInfraImports = {
-  meta: {
-    type: "problem",
-    docs: {
-      description: "Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."
-    },
-    messages: {
-      forbiddenImport: "Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",
-      forbiddenImportHeuristic: "Domain code must not import infrastructure, adapters, repositories, or database modules."
-    },
-    schema: []
-  },
-  create(context) {
-    const filename = lintedFilename(context);
-    const configPath = findConfigPath(filename);
-    const config = configPath ? loadArkConfig(configPath) : null;
-    const root = configPath ? path.dirname(configPath) : null;
-    const check = (node) => {
-      const source = stringValue(node.source);
-      if (!source) return;
-      if (config && root && filename) {
-        const absFile = path.isAbsolute(filename) ? filename : path.resolve(filename);
-        const relFile = path.relative(root, absFile).split(path.sep).join("/");
-        const fromLayer = layerForRelativePath(relFile, config.layers);
-        if (!fromLayer) return;
-        const targetAbs = resolveRelativeImport(absFile, source);
-        if (!targetAbs) return;
-        const relTarget = path.relative(root, targetAbs).split(path.sep).join("/");
-        if (relTarget.startsWith("..")) return;
-        const toLayer = layerForRelativePath(relTarget, config.layers);
-        if (!toLayer) return;
-        if (isEdgeDenied(config.rules, fromLayer, toLayer, {
-          fromPath: relFile,
-          toPath: relTarget,
-          layers: config.layers
-        })) {
-          reportAdapterDiagnostic(
-            context,
-            node,
-            "forbiddenImport",
-            {
-              ruleId: "LAYER_IMPORT_VIOLATION",
-              file: relFile,
-              fromLayer,
-              toLayer,
-              target: relTarget,
-              ...node.importKind === "type" ? { typeOnly: true } : {},
-              message: `${fromLayer} must not import ${toLayer}.`
-            },
-            { fromLayer, toLayer, specifier: source }
-          );
-        }
-        return;
-      }
-    };
-    return {
-      ImportDeclaration: check,
-      ExportNamedDeclaration: check,
-      ExportAllDeclaration: check
-    };
-  }
-};
-var noRawEventPublish = {
-  meta: {
-    type: "problem",
-    docs: {
-      description: "Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."
-    },
-    messages: {
-      rawPublish: "Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."
-    },
-    schema: []
-  },
-  create(context) {
-    return {
-      CallExpression(node) {
-        const firstArg = node.arguments?.[0];
-        const firstValue = stringValue(firstArg);
-        const findings = classifyPublishFacts({
-          publishCall: isPublishCall(node),
-          rawIntentName: firstValue,
-          objectHasIntent: objectHasProperty(firstArg, "intent"),
-          arkPublishCandidate: false,
-          hasSource: true
-        });
-        if (findings.some((finding) => finding.ruleId === "RAW_EVENT_PUBLISH")) {
-          const finding = findings.find((item) => item.ruleId === "RAW_EVENT_PUBLISH");
-          reportAdapterDiagnostic(context, node, "rawPublish", {
-            ...finding,
-            file: lintedFilename(context)
-          });
-        }
-      }
-    };
-  }
-};
-var requirePublishSource = {
-  meta: {
-    type: "problem",
-    docs: {
-      description: "Require event bus publish calls to include source metadata."
-    },
-    messages: {
-      missingSource: "Strict Ark publish calls must include metadata.source."
-    },
-    schema: []
-  },
-  create(context) {
-    return {
-      CallExpression(node) {
-        const firstArg = node.arguments?.[0];
-        const metadataArg = node.arguments?.[2];
-        const findings = classifyPublishFacts({
-          publishCall: isPublishCall(node),
-          rawIntentName: stringValue(firstArg),
-          objectHasIntent: objectHasProperty(firstArg, "intent"),
-          arkPublishCandidate: true,
-          hasSource: objectHasMetadataSource(firstArg) || objectHasProperty(metadataArg, "source")
-        });
-        const finding = findings.find((item) => item.ruleId === "PUBLISH_MISSING_SOURCE");
-        if (finding) {
-          reportAdapterDiagnostic(context, node, "missingSource", {
-            ...finding,
-            file: lintedFilename(context)
-          });
-        }
-      }
-    };
-  }
-};
-var noForbiddenGlobals = {
-  meta: {
-    type: "problem",
-    docs: {
-      description: "Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` explicitly overrides."
-    },
-    messages: {
-      forbiddenGlobal: 'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',
-      forbiddenGlobalDefault: 'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.'
-    },
-    schema: [
-      {
-        type: "object",
-        properties: {
-          globals: { type: "array", items: { type: "string" } }
-        },
-        additionalProperties: false
-      }
-    ]
-  },
-  create(context) {
-    const filename = lintedFilename(context);
-    const option = context.options?.[0];
-    const configPath = findConfigPath(filename);
-    const config = configPath ? loadArkConfig(configPath) : null;
-    const root = configPath ? path.dirname(configPath) : null;
-    let globals = null;
-    let layerName = "this layer";
-    if (option?.globals) {
-      globals = new Set(option.globals);
-    } else if (config && root && filename) {
-      const absFile = path.isAbsolute(filename) ? filename : path.resolve(filename);
-      const relFile = path.relative(root, absFile).split(path.sep).join("/");
-      const layer = config.layers?.find(
-        (l) => l.name === layerForRelativePath(relFile, config.layers)
-      );
-      if (layer?.forbiddenGlobals?.length) {
-        globals = new Set(layer.forbiddenGlobals);
-        layerName = layer.name;
-      } else {
-        globals = null;
-      }
-    }
-    if (!globals) {
-      return {};
-    }
-    const scopeAware = typeof sourceCodeFor(context)?.getScope === "function";
-    const report = (node, name) => {
-      const absFile = path.isAbsolute(filename) ? filename : path.resolve(filename);
-      const reportFile = root ? path.relative(root, absFile).split(path.sep).join("/") : filename;
-      reportAdapterDiagnostic(
-        context,
-        node,
-        config ? "forbiddenGlobal" : "forbiddenGlobalDefault",
-        {
-          ruleId: "FORBIDDEN_GLOBAL",
-          file: reportFile,
-          fromLayer: layerName,
-          target: name,
-          message: `${layerName} must not use the ambient global "${name}".`
-        },
-        { name, layer: layerName }
-      );
-    };
-    return {
-      MemberExpression(node) {
-        if (node.parent?.type === "MemberExpression" && node.parent.object === node) return;
-        const path2 = memberExpressionPath(node);
-        if (!path2 || isLocallyBound(context, path2.root, path2.segments[0])) return;
-        const explicitGlobalThis = path2.segments[0] === "globalThis";
-        const normalized = explicitGlobalThis ? path2.segments.slice(1) : path2.segments;
-        let match;
-        for (let length = normalized.length; length >= (explicitGlobalThis ? 1 : 2); length -= 1) {
-          const candidate = normalized.slice(0, length).join(".");
-          if (globals.has(candidate)) {
-            match = candidate;
-            break;
-          }
-        }
-        if (match) report(node, match);
-        else if (!scopeAware && globals.has(path2.segments[0])) {
-          report(node, path2.segments[0]);
-        }
-      },
-      CallExpression(node) {
-        if (scopeAware) return;
-        const callee = node.callee?.type === "Identifier" ? node.callee.name : void 0;
-        if (callee && globals.has(callee)) report(node, callee);
-      },
-      NewExpression(node) {
-        if (scopeAware) return;
-        const callee = node.callee?.type === "Identifier" ? node.callee.name : void 0;
-        if (callee && globals.has(callee)) report(node, callee);
-      },
-      Identifier(node) {
-        if (!scopeAware || !node.name || !globals.has(node.name) || !isValueIdentifierReference(context, node) || isLocallyBound(context, node, node.name)) {
-          return;
-        }
-        report(node, node.name);
-      }
-    };
-  }
-};
-var rules = {
-  "no-domain-infra-imports": noDomainInfraImports,
-  "no-raw-event-publish": noRawEventPublish,
-  "require-publish-source": requirePublishSource,
-  "no-forbidden-globals": noForbiddenGlobals
-};
-var plugin = { rules };
-plugin.configs = {
-  recommended: {
-    plugins: { ark: plugin },
-    rules: {
-      "ark/no-domain-infra-imports": "error",
-      "ark/no-raw-event-publish": "error",
-      "ark/require-publish-source": "error",
-      "ark/no-forbidden-globals": "error"
-    }
-  }
-};
-var eslint_default = plugin;
-export {
-  eslint_default as default,
-  findConfigPath,
-  globToRegExp,
-  isEdgeDenied,
-  layerForRelativePath,
-  loadArkConfig,
-  noDomainInfraImports,
-  noForbiddenGlobals,
-  noRawEventPublish,
-  patternSpecificity,
-  plugin,
-  requirePublishSource,
-  resolveRelativeImport
-};
+import A from"fs";import u from"path";var G=new Map;function D(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function L(e){let n="";for(let t=0;t<e.length;t+=1){let i=e[t];if(i==="\\"&&t+1<e.length){let r=e[t+1];if("*?{}[],".includes(r)||r==="\\"){n+="\\"+r,t+=1;continue}n+="/";continue}n+=i}return n}function ie(e){let n=0;for(let t=0;t<e.length;t+=1){let i=e[t];if(i==="\\"){t+=1;continue}if(i==="{")n+=1;else if(i==="}"&&(n-=1,n<0))return!1}return n===0}function w(e){let n=G.get(e);if(n)return n;let t=L(e),i=ie(t),r="",o=0;for(let a=0;a<t.length;a+=1){let d=t[a];d==="\\"&&a+1<t.length?(r+=D(t[a+1]),a+=1):d==="*"?t[a+1]==="*"?t[a+2]==="/"?(r+="(?:.*/)?",a+=2):(r+=".*",a+=1):r+="[^/]*":d==="?"?r+="[^/]":d==="{"&&i?(r+="(?:",o+=1):d==="}"&&i&&o>0?(r+=")",o-=1):d===","&&i&&o>0?r+="|":r+=D(d)}let s=new RegExp(`^${r}$`);return G.set(e,s),s}function H(e){let n=L(String(e)),i=n.split("*")[0].split("/").filter(Boolean).length,r=n.replace(/\*/g,"").length;return i*1e4+r}function S(e,n){let t=String(e).split(/[/\\]/).join("/"),i,r=-1;for(let o of n??[])if(!(o.exclude??[]).some(s=>w(s).test(t))){for(let s of o.patterns??[])if(w(s).test(t)){let a=H(s);a>r&&(r=a,i=o.name)}}return i}function T(e,n){if(!n?.length)return;let t=String(e).split(/[/\\]/).filter(Boolean),i=new Set(n.map(r=>String(r).toLowerCase()));for(let r=0;r<t.length-1;r+=1)if(i.has(t[r].toLowerCase()))return`${t[r]}/${t[r+1]}`}function oe(e){let n=new Set;for(let t of e??[]){let r=L(String(t)).split("/").filter(Boolean);for(let o=0;o<r.length;o+=1){let s=r[o];if((s==="**"||s==="*")&&o>0){let a=r[o-1];a&&!a.includes("*")&&!a.includes("{")&&!a.includes("}")&&n.add(a)}}}return[...n]}function se(e,n,t){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(r=>typeof r=="string"&&r.length>0);let i=(t??[]).find(r=>r.name===n);return oe(i?.patterns)}function ae(e,n,t,i){for(let r of e??[])if(!(r.from!==n||r.to!==t)&&r.allowed===!1){if(r.peerIsolation){let o=i?.fromPath,s=i?.toPath;if(!o||!s)continue;let a=se(r,n,i?.layers);if(a.length===0)continue;let d=T(o,a),p=T(s,a);if(!d||!p)continue;if(d!==p)return r;continue}if(n!==t)return r}}function v(e,n,t,i){return ae(e,n,t,i)!==void 0}var O="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",U=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],le=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function ce(){let e=[];for(let n of U)for(let t of U)n===t||le.has(`${n}->${t}`)||e.push({from:n,to:t,allowed:!1});return e}var K=ce();var y={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},B={$schema:"https://json-schema.org/draft/2020-12/schema",$id:O,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:O,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.0",default:"1.0"},name:{type:"string",minLength:1},include:{...y,minItems:1,default:["src"]},exclude:{...y,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:K,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...y,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...y,minItems:1},exclude:y,intentPrefixes:y,description:{type:"string",minLength:1},forbiddenGlobals:y,mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...y,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}}}},h=class extends Error{issues;source;constructor(n,t){super(`Invalid ArkGate config (${n}):
+${t.map(i=>`- ${i.path}: ${i.message}`).join(`
+`)}`),this.name="ArkConfigValidationError",this.source=n,this.issues=t}};function W(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function _(e,n){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(n)?`${e}.${n}`:`${e}[${JSON.stringify(n)}]`}function b(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function ue(e,n){let t="#/$defs/";if(e.startsWith(t))return n.$defs[e.slice(t.length)]}function k(e,n,t,i,r){if(n.$ref){let o=ue(n.$ref,i);if(!o){r.push({path:t,message:`schema reference ${n.$ref} cannot be resolved`});return}k(e,o,t,i,r);return}if(n.const!==void 0&&!Object.is(e,n.const)){r.push({path:t,message:`must equal ${JSON.stringify(n.const)}`});return}if(n.enum&&!n.enum.some(o=>Object.is(o,e))){r.push({path:t,message:`must be one of ${n.enum.map(String).join(", ")}`});return}if(n.type==="object"){if(!W(e)){r.push({path:t,message:`must be an object; received ${b(e)}`});return}let o=n.properties??{};for(let s of n.required??[])e[s]===void 0&&r.push({path:_(t,s),message:"is required"});if(n.additionalProperties===!1)for(let s of Object.keys(e))s in o||r.push({path:_(t,s),message:"unknown field"});for(let[s,a]of Object.entries(o))e[s]!==void 0&&k(e[s],a,_(t,s),i,r);return}if(n.type==="array"){if(!Array.isArray(e)){r.push({path:t,message:`must be an array; received ${b(e)}`});return}if(n.minItems!==void 0&&e.length<n.minItems&&r.push({path:t,message:`must contain at least ${n.minItems} item(s)`}),n.uniqueItems){let o=e.map(s=>JSON.stringify(s));new Set(o).size!==o.length&&r.push({path:t,message:"must not contain duplicate items"})}n.items&&e.forEach((o,s)=>k(o,n.items,`${t}[${s}]`,i,r));return}if(n.type==="string"){if(typeof e!="string"){r.push({path:t,message:`must be a string; received ${b(e)}`});return}n.minLength!==void 0&&e.length<n.minLength&&r.push({path:t,message:`must contain at least ${n.minLength} character(s)`});return}if(n.type==="boolean"){typeof e!="boolean"&&r.push({path:t,message:`must be a boolean; received ${b(e)}`});return}if(n.type==="integer"){if(!Number.isInteger(e)){r.push({path:t,message:`must be an integer; received ${b(e)}`});return}n.minimum!==void 0&&e<n.minimum&&r.push({path:t,message:`must be at least ${n.minimum}`})}}function de(e){return{...e,$schema:e.$schema===void 0?O:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.0":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?K.map(n=>({...n})):e.rules}}function fe(e,n="ark.config.json"){if(!W(e))throw new h(n,[{path:"$",message:`must be an object; received ${b(e)}`}]);let t=e.schemaVersion===void 0?"unversioned":null;if(e.schemaVersion!==void 0&&e.schemaVersion!=="1.0")throw new h(n,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.0`}]);return{candidate:de(e),migratedFrom:t}}function pe(e,n="ark.config.json"){let{candidate:t,migratedFrom:i}=fe(e,n),r=[];if(k(t,B,"$",B,r),r.length>0)throw new h(n,r);return{config:t,migratedFrom:i}}function q(e,n="ark.config.json"){let t;try{t=JSON.parse(e)}catch(i){throw new h(n,[{path:"$",message:`invalid JSON: ${i instanceof Error?i.message:String(i)}`}])}return pe(t,n)}function m(e){return typeof e=="string"&&e.length>0?e:void 0}function J(e,n){return Number.isInteger(e)&&Number(e)>0?Number(e):n}function ge(e,n,t){return e==="LAYER_IMPORT_VIOLATION"?n.typeOnly||t.targetTypeOnlyExports===!0||t.namedBindingsTypeOnly===!0?"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.":t.peerIsolation===!0?"Extract the shared dependency to a shared layer, then preflight again.":`Define a port in ${n.fromLayer??"the source layer"}, inject the ${n.toLayer??"outer-layer"} implementation, then preflight again.`:e==="FORBIDDEN_GLOBAL"?`Inject ${n.target??"the capability"} through a port, then preflight again.`:e==="CIRCULAR_DEPENDENCY"?"Extract the shared dependency into a third module, then preflight again.":e==="RAW_EVENT_PUBLISH"?"Publish through a registered intent creator, then run Ark again.":e==="PUBLISH_MISSING_SOURCE"?"Add metadata.source to the publish call, then run Ark again.":`Resolve ${e} without weakening ark.config.json, then run Ark again.`}function Y(e,n="error"){let t=m(e.ruleId)??m(e.code)??"ARK_UNKNOWN",i=e.severity==="warning"?"warning":n,r={...m(e.target)?{target:m(e.target)}:{},...m(e.fromLayer)?{fromLayer:m(e.fromLayer)}:{},...m(e.toLayer)?{toLayer:m(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{}};return{ruleId:t,severity:i,message:m(e.message)??t,location:{file:m(e.file)??"<unknown>",line:J(e.line,1),column:J(e.column,1)},evidence:r,nextAction:m(e.nextAction)??ge(t,r,e)}}var z={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."};function me(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function $(e){if(!e.publishCall)return[];let n=[];return(e.rawIntentName!==void 0&&me(e.rawIntentName)||e.objectHasIntent)&&n.push({ruleId:"RAW_EVENT_PUBLISH",message:z.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&n.push({ruleId:"PUBLISH_MISSING_SOURCE",message:z.PUBLISH_MISSING_SOURCE}),n}function R(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let n=e.getFilename();if(typeof n=="string"&&n.length>0)return n}catch{}return""}function C(e,n,t,i,r){let o=Y({...i,line:i.line??n.loc?.start?.line,column:i.column??(typeof n.loc?.start?.column=="number"?n.loc.start.column+1:void 0)});return e.report({node:n,messageId:t,...r?{data:r}:{},diagnostic:o}),o}function Q(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let n=u.dirname(u.resolve(e));for(;;){let t=u.join(n,"ark.config.json");if(A.existsSync(t))return t;let i=u.dirname(n);if(i===n)return null;n=i}}var P=new Map;function X(e){if(P.has(e))return P.get(e)??null;if(!A.existsSync(e))return null;let n=q(A.readFileSync(e,"utf8"),e).config;return P.set(e,n),n}function ye(e,n){if(!n.startsWith("."))return null;let t=u.resolve(u.dirname(e),n),i=[t,`${t}.ts`,`${t}.tsx`,`${t}.mts`,`${t}.cts`,`${t}.js`,`${t}.jsx`,u.join(t,"index.ts"),u.join(t,"index.tsx"),u.join(t,"index.js")];for(let r of i)try{if(A.existsSync(r)&&A.statSync(r).isFile())return r}catch{}return`${t}.ts`}function E(e){return typeof e?.value=="string"?e.value:void 0}function F(e){return e?.name??E(e)}function V(e){return e.sourceCode??e.getSourceCode?.()}function ee(e,n){let t=V(e)?.getScope?.(n);for(;t;){let i=t.references?.find(r=>r.identifier===n);if(i)return i;t=t.upper??void 0}}function Z(e,n,t){let i=ee(e,n);if(i?.resolved)return(i.resolved.defs?.length??0)>0;let r=V(e)?.getScope?.(n);for(;r;){let o=r.set?.get(t);if(o)return(o.defs?.length??0)>0;r=r.upper??void 0}return!1}function be(e,n){let t=ee(e,n);return t?t.isValueReference!==!1:n.parent?.type==="VariableDeclarator"&&n.parent.init===n}function ne(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let t=ne(e.object),i=F(e.property);if(!(!t||!i))return{root:t.root,segments:[...t.segments,i]}}function he(e){return F(e.callee?.property)}function te(e,n){return e?.properties?.find(t=>F(t.key)===n)}function I(e,n){return te(e,n)!==void 0}function Ae(e){let n=te(e,"metadata")?.value;return I(n,"source")}function re(e){return he(e)==="publish"}var Se={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let n=R(e),t=Q(n),i=t?X(t):null,r=t?u.dirname(t):null,o=s=>{let a=E(s.source);if(a&&i&&r&&n){let d=u.isAbsolute(n)?n:u.resolve(n),p=u.relative(r,d).split(u.sep).join("/"),l=S(p,i.layers);if(!l)return;let c=ye(d,a);if(!c)return;let f=u.relative(r,c).split(u.sep).join("/");if(f.startsWith(".."))return;let g=S(f,i.layers);if(!g)return;v(i.rules,l,g,{fromPath:p,toPath:f,layers:i.layers})&&C(e,s,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:p,fromLayer:l,toLayer:g,target:f,...s.importKind==="type"?{typeOnly:!0}:{},message:`${l} must not import ${g}.`},{fromLayer:l,toLayer:g,specifier:a});return}};return{ImportDeclaration:o,ExportNamedDeclaration:o,ExportAllDeclaration:o}}},ke={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(n){let t=n.arguments?.[0],i=E(t),r=$({publishCall:re(n),rawIntentName:i,objectHasIntent:I(t,"intent"),arkPublishCandidate:!1,hasSource:!0});if(r.some(o=>o.ruleId==="RAW_EVENT_PUBLISH")){let o=r.find(s=>s.ruleId==="RAW_EVENT_PUBLISH");C(e,n,"rawPublish",{...o,file:R(e)})}}}}},Ie={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(n){let t=n.arguments?.[0],i=n.arguments?.[2],o=$({publishCall:re(n),rawIntentName:E(t),objectHasIntent:I(t,"intent"),arkPublishCandidate:!0,hasSource:Ae(t)||I(i,"source")}).find(s=>s.ruleId==="PUBLISH_MISSING_SOURCE");o&&C(e,n,"missingSource",{...o,file:R(e)})}}}},Re={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` explicitly overrides."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let n=R(e),t=e.options?.[0],i=Q(n),r=i?X(i):null,o=i?u.dirname(i):null,s=null,a="this layer";if(t?.globals)s=new Set(t.globals);else if(r&&o&&n){let l=u.isAbsolute(n)?n:u.resolve(n),c=u.relative(o,l).split(u.sep).join("/"),f=r.layers?.find(g=>g.name===S(c,r.layers));f?.forbiddenGlobals?.length?(s=new Set(f.forbiddenGlobals),a=f.name):s=null}if(!s)return{};let d=typeof V(e)?.getScope=="function",p=(l,c)=>{let f=u.isAbsolute(n)?n:u.resolve(n),g=o?u.relative(o,f).split(u.sep).join("/"):n;C(e,l,r?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:g,fromLayer:a,target:c,message:`${a} must not use the ambient global "${c}".`},{name:c,layer:a})};return{MemberExpression(l){if(l.parent?.type==="MemberExpression"&&l.parent.object===l)return;let c=ne(l);if(!c||Z(e,c.root,c.segments[0]))return;let f=c.segments[0]==="globalThis",g=f?c.segments.slice(1):c.segments,x;for(let N=g.length;N>=(f?1:2);N-=1){let M=g.slice(0,N).join(".");if(s.has(M)){x=M;break}}x?p(l,x):!d&&s.has(c.segments[0])&&p(l,c.segments[0])},CallExpression(l){if(d)return;let c=l.callee?.type==="Identifier"?l.callee.name:void 0;c&&s.has(c)&&p(l,c)},NewExpression(l){if(d)return;let c=l.callee?.type==="Identifier"?l.callee.name:void 0;c&&s.has(c)&&p(l,c)},Identifier(l){!d||!l.name||!s.has(l.name)||!be(e,l)||Z(e,l,l.name)||p(l,l.name)}}}},Ce={"no-domain-infra-imports":Se,"no-raw-event-publish":ke,"require-publish-source":Ie,"no-forbidden-globals":Re},j={rules:Ce};j.configs={recommended:{plugins:{ark:j},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error"}}};var Fe=j;export{Fe as default,Q as findConfigPath,w as globToRegExp,v as isEdgeDenied,S as layerForRelativePath,X as loadArkConfig,Se as noDomainInfraImports,Re as noForbiddenGlobals,ke as noRawEventPublish,H as patternSpecificity,j as plugin,Ie as requirePublishSource,ye as resolveRelativeImport};