arkgate 3.7.0 → 3.8.0

package/dist/index.d.cts

@@ -1,986 +0,0 @@
-import { a as ArkConfigRule, b as ArkConfigSchemaVersion, c as ArkConfigLoadResult, d as ArkConfigLayer, A as ArkConfig } from './configTypes-DAPvBqK6.cjs';
-
-/**
- * Canonical, pure contract for ark.config.json.
- *
- * Tooling adapters own filesystem I/O; this module owns JSON parsing, deterministic
- * migration, defaults, validation, diagnostics, and the published JSON Schema.
- * The standalone CLI artifact is generated into bin/lib/config-contract.mjs.
- */
-
-declare const ARK_CONFIG_SCHEMA_VERSION: ArkConfigSchemaVersion;
-declare const ARK_CONFIG_SCHEMA: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly $id: "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-    readonly title: "ArkGate architecture contract";
-    readonly description: "Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly required: readonly ["$schema", "schemaVersion", "include", "layers", "rules"];
-    readonly properties: {
-        readonly $schema: {
-            readonly type: "string";
-            readonly minLength: 1;
-            readonly default: "https://unpkg.com/arkgate@2/schemas/ark.config.schema.json";
-            readonly description: "Editor-facing URL or local path for this JSON Schema.";
-        };
-        readonly schemaVersion: {
-            readonly type: "string";
-            readonly const: "1.0";
-            readonly default: "1.0";
-        };
-        readonly name: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly include: {
-            readonly minItems: 1;
-            readonly default: readonly ["src"];
-            readonly type: "array";
-            readonly items: {
-                readonly type: "string";
-                readonly minLength: 1;
-            };
-            readonly uniqueItems: true;
-        };
-        readonly exclude: {
-            readonly default: readonly [];
-            readonly type: "array";
-            readonly items: {
-                readonly type: "string";
-                readonly minLength: 1;
-            };
-            readonly uniqueItems: true;
-        };
-        readonly excludeGenerated: {
-            readonly type: "boolean";
-            readonly default: true;
-        };
-        readonly frameworkOverlay: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly layers: {
-            readonly type: "array";
-            readonly default: readonly [];
-            readonly items: {
-                readonly $ref: "#/$defs/layer";
-            };
-        };
-        readonly rules: {
-            readonly type: "array";
-            readonly default: ArkConfigRule[];
-            readonly items: {
-                readonly $ref: "#/$defs/rule";
-            };
-        };
-        readonly cyclePolicy: {
-            readonly type: "string";
-            readonly enum: readonly ["strict", "soft", "framework-soft", "off"];
-            readonly default: "strict";
-        };
-        readonly dynamicImportAllowlist: {
-            readonly default: readonly [];
-            readonly type: "array";
-            readonly items: {
-                readonly type: "string";
-                readonly minLength: 1;
-            };
-            readonly uniqueItems: true;
-        };
-        readonly safety: {
-            readonly $ref: "#/$defs/safety";
-            readonly default: {
-                readonly maxTsSuppressions: 0;
-                readonly maxAnyCasts: 0;
-                readonly allowInMemory: false;
-                readonly allowDisabledPeerIsolation: false;
-            };
-        };
-    };
-    readonly $defs: {
-        readonly layer: {
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["name", "patterns"];
-            readonly properties: {
-                readonly name: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly patterns: {
-                    readonly minItems: 1;
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly uniqueItems: true;
-                };
-                readonly exclude: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly uniqueItems: true;
-                };
-                readonly intentPrefixes: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly uniqueItems: true;
-                };
-                readonly description: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly forbiddenGlobals: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly uniqueItems: true;
-                };
-                readonly capabilities: {
-                    readonly type: "object";
-                    readonly additionalProperties: false;
-                    readonly properties: {
-                        readonly deny: {
-                            readonly type: "array";
-                            readonly uniqueItems: true;
-                            readonly items: {
-                                readonly type: "string";
-                                readonly enum: readonly ["network", "filesystem", "clock", "randomness", "environment", "process", "persistence"];
-                            };
-                        };
-                    };
-                };
-                readonly pure: {
-                    readonly type: "boolean";
-                };
-                readonly mayImportInfrastructure: {
-                    readonly type: "boolean";
-                };
-                readonly optional: {
-                    readonly type: "boolean";
-                };
-            };
-        };
-        readonly rule: {
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["from", "to", "allowed"];
-            readonly properties: {
-                readonly from: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly to: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly allowed: {
-                    readonly type: "boolean";
-                };
-                readonly message: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly peerIsolation: {
-                    readonly type: "boolean";
-                };
-                readonly sliceFolders: {
-                    readonly minItems: 1;
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly uniqueItems: true;
-                };
-            };
-        };
-        readonly safety: {
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly properties: {
-                readonly maxTsSuppressions: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
-                    readonly default: 0;
-                };
-                readonly maxAnyCasts: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
-                    readonly default: 0;
-                };
-                readonly allowInMemory: {
-                    readonly type: "boolean";
-                    readonly default: false;
-                };
-                readonly allowDisabledPeerIsolation: {
-                    readonly type: "boolean";
-                    readonly default: false;
-                };
-            };
-        };
-    };
-};
-declare function loadArkConfigContract(input: unknown, source?: string): ArkConfigLoadResult;
-declare function parseArkConfigJson(json: string, source?: string): ArkConfigLoadResult;
-
-/** ArkGate library version — single source of truth. */
-declare const version = "3.7.0";
-
-/** Versioned public result contract shared by every ArkGate enforcement adapter. */
-declare const ARK_ANALYSIS_RESULT_SCHEMA_VERSION: "1.1";
-type AdapterSeverity = 'error' | 'warning';
-type AdapterViolationInput = {
-    ruleId?: unknown;
-    code?: unknown;
-    message?: unknown;
-    file?: unknown;
-    line?: unknown;
-    column?: unknown;
-    target?: unknown;
-    fromLayer?: unknown;
-    toLayer?: unknown;
-    typeOnly?: unknown;
-    targetTypeOnlyExports?: unknown;
-    namedBindingsTypeOnly?: unknown;
-    peerIsolation?: unknown;
-    severity?: unknown;
-    nextAction?: unknown;
-    /** U04: the denied capability id on CAPABILITY_VIOLATION. */
-    capability?: unknown;
-};
-type AdapterDiagnostic = {
-    ruleId: string;
-    severity: AdapterSeverity;
-    message: string;
-    location: {
-        file: string;
-        line: number;
-        column: number;
-    };
-    evidence: {
-        target?: string;
-        fromLayer?: string;
-        toLayer?: string;
-        typeOnly?: boolean;
-    };
-    /** Added in schema 1.1; optional in TypeScript so 1.0 consumer-owned values remain valid. */
-    nextAction?: string;
-};
-type AdapterResult = {
-    schemaVersion: '1.0' | typeof ARK_ANALYSIS_RESULT_SCHEMA_VERSION;
-    valid: boolean;
-    diagnostics: AdapterDiagnostic[];
-};
-declare function toAdapterDiagnostic(violation: AdapterViolationInput, fallbackSeverity?: AdapterSeverity): AdapterDiagnostic;
-declare function createAdapterResult(input: {
-    valid: boolean;
-    violations?: readonly AdapterViolationInput[];
-    warnings?: readonly AdapterViolationInput[];
-}): AdapterResult;
-declare const ARK_ANALYSIS_RESULT_SCHEMA: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly $id: "https://unpkg.com/arkgate@2/schemas/ark.analysis-result.schema.json";
-    readonly title: "ArkGate analysis result";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly required: readonly ["schemaVersion", "valid", "diagnostics"];
-    readonly properties: {
-        readonly schemaVersion: {
-            readonly const: "1.1";
-        };
-        readonly valid: {
-            readonly type: "boolean";
-        };
-        readonly diagnostics: {
-            readonly type: "array";
-            readonly items: {
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["ruleId", "severity", "message", "location", "evidence"];
-                readonly properties: {
-                    readonly ruleId: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly severity: {
-                        readonly enum: readonly ["error", "warning"];
-                    };
-                    readonly message: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly location: {
-                        readonly type: "object";
-                        readonly additionalProperties: false;
-                        readonly required: readonly ["file", "line", "column"];
-                        readonly properties: {
-                            readonly file: {
-                                readonly type: "string";
-                                readonly minLength: 1;
-                            };
-                            readonly line: {
-                                readonly type: "integer";
-                                readonly minimum: 1;
-                            };
-                            readonly column: {
-                                readonly type: "integer";
-                                readonly minimum: 1;
-                            };
-                        };
-                    };
-                    readonly evidence: {
-                        readonly type: "object";
-                        readonly additionalProperties: false;
-                        readonly properties: {
-                            readonly target: {
-                                readonly type: "string";
-                            };
-                            readonly fromLayer: {
-                                readonly type: "string";
-                            };
-                            readonly toLayer: {
-                                readonly type: "string";
-                            };
-                            readonly typeOnly: {
-                                readonly type: "boolean";
-                            };
-                        };
-                    };
-                    readonly nextAction: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                };
-            };
-        };
-    };
-};
-
-/**
- * AI Code Gate (basic).
- *
- * Allows validation of generated source code against the defined architecture.
- */
-interface AICodeGateViolation {
-    /** Stable rule identifier for agents and CI pipelines. */
-    ruleId: string;
-    /** @deprecated Use ruleId — kept for backward compatibility. */
-    code: string;
-    message: string;
-    line?: number;
-    suggestion?: string;
-    source?: string;
-    filePath?: string;
-    target?: string;
-    fromLayer?: string;
-    toLayer?: string;
-    details?: unknown;
-}
-/** Extension point for external analyzers (AST, semantic, etc.). */
-interface AIGateExtension<Context = unknown> {
-    readonly name: string;
-    analyze(source: string, context?: Context): AICodeGateViolation[];
-}
-interface AICodeGateContext {
-    filePath?: string;
-    agentId?: string;
-    layer?: string;
-    [key: string]: unknown;
-}
-interface AICodeGateResult {
-    valid: boolean;
-    violations: AICodeGateViolation[];
-}
-interface AICodeGate<Context = AICodeGateContext> {
-    validate(source: string, context?: Context): AICodeGateResult;
-}
-
-/**
- * Policy types for the Ark kernel.
- *
- * Policies allow declaring architectural rules that can be checked at runtime.
- * Supports both hard policies (must never be violated) and soft policies (warnings).
- */
-type PolicySeverity = 'hard' | 'soft';
-type PolicyEnforcementMode = 'runtime' | 'static' | 'runtime-and-static' | 'advisory';
-/**
- * Represents a single violation of a policy.
- */
-interface PolicyViolation {
-    /** Name of the policy that was violated */
-    policyName: string;
-    /** Severity level of the policy */
-    severity: PolicySeverity;
-    /** Human-readable explanation of the violation */
-    message: string;
-    /** Optional additional structured details */
-    details?: unknown;
-}
-/**
- * A Policy defines a rule that can be evaluated against a context.
- *
- * @template Context - The shape of data the policy evaluates (e.g. { registry, events })
- */
-interface Policy<Context = unknown> {
-    /** Unique name of the policy (used in violations and reporting) */
-    readonly name: string;
-    /** Whether this is a hard rule (enforced strictly) or soft (advisory) */
-    readonly severity: PolicySeverity;
-    /** Optional tags for policy classification (e.g. 'layer', 'naming') */
-    readonly tags?: readonly string[];
-    readonly owner?: string;
-    readonly version?: string;
-    readonly rationale?: string;
-    readonly enforcementMode?: PolicyEnforcementMode;
-    readonly deprecated?: boolean | string;
-    readonly replacedBy?: string;
-    /**
-     * Evaluates the policy against the given context.
-     * Return true / [] for pass, false / single violation / array for failure.
-     */
-    check(context: Context): boolean | PolicyViolation | PolicyViolation[];
-}
-
-/**
- * Core domain primitives for Ark.
- * These types are the foundation for all governance concepts.
- */
-/**
- * Semantic intent names follow a convention:
- * - Domain.* for domain events and entities
- * - Application.* for use-cases / orchestration
- * - Adapter.* for integration points
- * - Workflow.* for sagas and processes
- * - Job.* for background jobs and scheduling
- * - Presentation.* for UI/API adapters
- * - Reporting.* for read models and projections
- * - Metadata.* for extensibility contracts
- * - Security.* / Audit.* / Observability.* for cross-cutting kernel concerns
- * - Kernel.* for Ark-owned governance signals
- */
-type IntentName = `Domain.${string}` | `Application.${string}` | `Adapter.${string}` | `Workflow.${string}` | `Job.${string}` | `Presentation.${string}` | `Reporting.${string}` | `Metadata.${string}` | `Security.${string}` | `Audit.${string}` | `Observability.${string}` | `Kernel.${string}`;
-type CorrelationId = string;
-interface EventMetadata {
-    occurredAt: string;
-    source: string;
-    kernelInstanceId?: string;
-    eventVersion?: string;
-    schemaVersion?: string;
-    allowInterception?: boolean;
-    interceptions?: Array<{
-        interceptorId: string;
-        timestamp: string;
-    }>;
-    correlationId?: CorrelationId;
-    causationId?: string;
-    traceId?: string;
-    spanId?: string;
-    parentSpanId?: string;
-    [key: string]: unknown;
-}
-interface DomainEvent<Name extends IntentName = IntentName, Payload = unknown> {
-    intent: Name;
-    payload: Payload;
-    metadata: EventMetadata;
-}
-
-/**
- * Intent-specific types for the Ark kernel.
- *
- * Intents provide semantic naming for every important concept in the system
- * (domain events, application operations, adapters, workflows).
- */
-
-/**
- * An IntentCreator is a callable that creates a strongly-typed DomainEvent
- * when invoked with a payload.
- *
- * It also carries the semantic `name`.
- *
- * @example
- * const OrderPlaced = defineIntent<'Domain.Order.OrderPlaced', { orderId: string }>('Domain.Order.OrderPlaced');
- * const event = OrderPlaced({ orderId: 'o-1' });
- */
-interface IntentCreator<Name extends IntentName, Payload = unknown> {
-    /**
-     * Creates a DomainEvent for this intent.
-     */
-    (payload: Payload): DomainEvent<Name, Payload>;
-    /**
-     * The fully-qualified semantic name of the intent (e.g. "Domain.Order.OrderPlaced").
-     */
-    readonly name: Name;
-}
-
-/**
- * Architecture layer profiles.
- *
- * A profile turns semantic names such as `Domain.Order.Placed` into governed
- * layer names and dependency rules.
- */
-
-interface ArchitectureLayer {
-    name: string;
-    prefixes: string[];
-    /**
-     * Custom matcher for teams whose intent names don't follow prefix conventions.
-     * Checked before any prefix matching, in layer declaration order. A layer may
-     * use `match` alone (with `prefixes: []`), prefixes alone, or both.
-     */
-    match?: (name: string) => boolean;
-    description?: string;
-    order?: number;
-}
-type ArchitectureRule = ArkConfigRule;
-interface ArchitectureProfile {
-    name: string;
-    layers: ArchitectureLayer[];
-    rules: ArchitectureRule[];
-    resolveLayer(name: string): string | undefined;
-}
-interface CreateArchitectureProfileOptions {
-    name: string;
-    layers: ArchitectureLayer[];
-    rules?: ArchitectureRule[];
-}
-interface CreateArchitectureProfileFromArkConfigOptions {
-    /** Runtime profile name. Default: config.name or "ark.config.json". */
-    name?: string;
-}
-type ArchitectureLayerConfig = ArkConfigLayer;
-type ArkCheckConfig = Omit<ArkConfig, '$schema' | 'schemaVersion' | 'rules'> & {
-    $schema?: string;
-    schemaVersion?: ArkConfig['schemaVersion'];
-    rules?: ArchitectureRule[];
-};
-interface CreateElevenLayerArkConfigOptions {
-    /** Source root used in generated file patterns. Default: "src". */
-    rootDir?: string;
-    /** Include entries for ark-check. Default: [rootDir]. */
-    include?: string[];
-    /** Mark generated layers optional. Default: true. */
-    optionalLayers?: boolean;
-}
-
-declare function createArchitectureProfile(options: CreateArchitectureProfileOptions): ArchitectureProfile;
-declare function createArchitectureProfileFromArkConfig(config: ArkCheckConfig, options?: CreateArchitectureProfileFromArkConfigOptions): ArchitectureProfile;
-declare const elevenLayerProfile: ArchitectureProfile;
-declare function createElevenLayerArkConfig(options?: CreateElevenLayerArkConfigOptions): ArkCheckConfig;
-
-/**
- * Basic AI Code Gate implementation.
- *
- * Uses simple string heuristics + registered intent names to detect obvious
- * architectural violations in generated code (e.g. direct infra imports from domain).
- * Not a full static analyzer — documented limitation.
- */
-
-interface AICodeGatePolicyContext<Context = AICodeGateContext> {
-    source: string;
-    context?: Context;
-}
-interface AICodeGateOptions<Context = AICodeGateContext> {
-    policies?: Policy<AICodeGatePolicyContext<Context>>[];
-    intents?: Array<string | Pick<IntentCreator<IntentName, unknown>, 'name'>>;
-    /**
-     * Additional forbidden patterns (regex or strings).
-     */
-    forbiddenPatterns?: Array<string | RegExp>;
-    /**
-     * External analyzer extensions (type-only contract; plug in AST tools later).
-     */
-    extensions?: AIGateExtension<Context>[];
-    /**
-     * Optional architecture profile for layer-aware generated-code checks.
-     * When context.layer is provided, intent references are checked against it.
-     */
-    architectureProfile?: ArchitectureProfile;
-    /**
-     * When true, flag string literals that look like intent names but are not registered.
-     */
-    enforceIntentAllowlist?: boolean;
-    /**
-     * Optional TypeScript module object. When provided, AICodeGate adds AST-backed checks
-     * for publish misuse without taking a runtime dependency on TypeScript.
-     */
-    typescript?: unknown;
-    /**
-     * Ambient globals forbidden per layer (layer name → entries such as "fetch" or
-     * "Date.now"). Checked only when `typescript` is provided and context.layer resolves
-     * to a listed layer — mirrors ark-check's FORBIDDEN_GLOBAL rule.
-     */
-    forbiddenGlobals?: Record<string, string[]>;
-    /**
-     * Layer → effective capability deny set (U04 walls; ADR 0009). Enforced like
-     * forbiddenGlobals when the target file's layer is known. An ambient use
-     * already covered by the layer's forbiddenGlobals reports only
-     * FORBIDDEN_GLOBAL (D7 — one violation, one voice).
-     */
-    capabilityWalls?: Record<string, string[]>;
-    /**
-     * Layer names whose role is infrastructure and may therefore import infrastructure
-     * (a persistence adapter importing the DB is correct, not a violation). The built-in
-     * infra-import heuristics are suppressed for these layers and for any layer whose
-     * name matches the conventional infra tokens. Populate from ark.config.json layers
-     * flagged `mayImportInfrastructure: true`, so unconventionally-named infra layers
-     * opt in explicitly. User-supplied `forbiddenPatterns` still apply everywhere.
-     */
-    infrastructureLayers?: string[];
-    /**
-     * Preferred single resolve step: import specifier or absolute source file →
-     * `{ layer, relPath }` for contract + peerIsolation. Prefer this over the
-     * legacy layer-only callback.
-     */
-    resolveImportTarget?: (specifierOrFilePath: string, fromFilePath?: string) => {
-        layer?: string;
-        relPath?: string;
-    } | undefined;
-    /**
-     * @deprecated Prefer resolveImportTarget. Layer-only resolve for governed imports.
-     */
-    resolveImportLayer?: (specifier: string, fromFilePath?: string) => string | undefined;
-    /**
-     * Layer configs (patterns) used to infer sliceFolders when a peerIsolation rule
-     * omits an explicit list.
-     */
-    architectureLayers?: Array<{
-        name: string;
-        patterns?: string[];
-    }>;
-    /** Explicit file-level escape hatch for reviewed non-literal import()/require() calls. */
-    allowNonLiteralDynamicImport?: (filePath?: string) => boolean;
-}
-declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
-
-declare const ARK_CHANGE_MAP_SCHEMA_VERSION: "1.0";
-type ArchitectureChangeOperation = 'create' | 'update' | 'delete';
-type ArchitectureChangeMapFile = {
-    path: string;
-    operation: ArchitectureChangeOperation;
-    layer: string;
-};
-type ArchitectureChangeMapDependency = {
-    from: string;
-    to: string;
-};
-type ArchitectureChangeMap = {
-    $schema: string;
-    schemaVersion: typeof ARK_CHANGE_MAP_SCHEMA_VERSION;
-    files: ArchitectureChangeMapFile[];
-    dependencies: ArchitectureChangeMapDependency[];
-};
-type ArchitectureChangeMapContract = {
-    map: ArchitectureChangeMap;
-    hash: string;
-};
-
-type ArchitectureDependency = {
-    from: string;
-    to: string;
-};
-type ArchitectureActualChange = {
-    path: string;
-    operation: ArchitectureChangeOperation;
-};
-type ArchitectureConvergenceClassification = 'satisfied' | 'missing' | 'contradictory' | 'unplanned';
-type ArchitectureConvergenceFinding = {
-    id: string;
-    classification: ArchitectureConvergenceClassification;
-    subject: 'file' | 'dependency';
-    message: string;
-    nextAction?: string;
-    path?: string;
-    from?: string;
-    to?: string;
-    expectedOperation?: ArchitectureChangeOperation;
-    actualOperation?: ArchitectureChangeOperation | 'added' | 'removed';
-};
-type ArchitectureConvergenceResult = {
-    schemaVersion: '1.0';
-    readOnly: true;
-    changeMapHash: string;
-    structurallyConverged: boolean;
-    behavioralCompletion: 'not-evaluated';
-    summary: Record<ArchitectureConvergenceClassification, number>;
-    findings: ArchitectureConvergenceFinding[];
-};
-type AnalyzeArchitectureConvergenceInput = {
-    changeMap: ArchitectureChangeMapContract;
-    changes: readonly ArchitectureActualChange[];
-    baseDependencies: readonly ArchitectureDependency[];
-    candidateDependencies: readonly ArchitectureDependency[];
-};
-declare function analyzeArchitectureConvergence(input: AnalyzeArchitectureConvergenceInput): ArchitectureConvergenceResult;
-
-type SemanticDependencyKind = 'import' | 'export' | 'dynamic-import' | 'require';
-type SemanticDependency = {
-    specifier?: string;
-    kind: SemanticDependencyKind;
-    line: number;
-    typeOnly: boolean;
-    unresolved: boolean;
-    node: unknown;
-};
-type ForbiddenCapabilityUse = {
-    name: string;
-    line: number;
-    node: unknown;
-};
-/** Extract every dependency form whose specifier is statically knowable, plus unresolved calls. */
-declare function extractSemanticDependencies(ts: any, sourceFile: any): SemanticDependency[];
-/** Resolve forbidden ambient capabilities through symbols, aliases, globalThis, and static keys. */
-declare function collectForbiddenCapabilityUses(ts: any, sourceFile: any, forbidden: readonly string[]): ForbiddenCapabilityUse[];
-
-/**
- * Stable, pure vocabulary for ArkGate's importable analysis engine.
- *
- * Parsing and filesystem discovery belong to adapters. This module intentionally
- * contains only the versioned data contract and deterministic hash primitives.
- */
-declare const ANALYSIS_IR_SCHEMA_VERSION: "1.0";
-type AnalysisFileInput = {
-    path: string;
-    content: string;
-};
-type AnalysisFileChange = {
-    path: string;
-    content: string;
-} | {
-    path: string;
-    delete: true;
-};
-type AnalysisCompilerOptions = Readonly<Record<string, unknown>>;
-type AnalysisFile = AnalysisFileInput & {
-    contentHash: string;
-    layer: string | null;
-};
-type AnalysisImportEdge = {
-    from: string;
-    specifier: string;
-    to: string | null;
-    resolution: 'resolved' | 'unresolved';
-    fromLayer: string | null;
-    toLayer: string | null;
-    evidence: AnalysisEvidence;
-};
-/** A capability use is reserved for C04's symbol-aware implementation. */
-type AnalysisCapabilityUse = {
-    file: string;
-    symbol: string;
-    capability: string;
-    evidence: AnalysisEvidence;
-};
-type AnalysisEvidence = {
-    kind: 'import' | 'policy';
-    file: string;
-    line: number;
-    excerpt: string;
-};
-type AnalysisViolation = {
-    ruleId: string;
-    message: string;
-    edge?: AnalysisImportEdge;
-    /** U04 (additive): present on CAPABILITY_VIOLATION — the denied capability id. */
-    capability?: string;
-    /** U04 (additive): the matched module specifier or ambient path. */
-    symbol?: string;
-    evidence: AnalysisEvidence;
-};
-type AnalysisIr = {
-    schemaVersion: typeof ANALYSIS_IR_SCHEMA_VERSION;
-    policyHash: string;
-    compilerOptionsHash: string;
-    files: AnalysisFile[];
-    layers: string[];
-    edges: AnalysisImportEdge[];
-    capabilityUses: AnalysisCapabilityUse[];
-    violations: AnalysisViolation[];
-};
-/**
- * Stable FNV-1a hash. It is an identity/fingerprint, not a security primitive.
- * The output is deliberately portable across the CLI, MCP, hooks, and browserless
- * consumers without Node's crypto runtime.
- */
-declare function deterministicHash(value: string): string;
-/** Serialize JSON-like values with sorted object keys for reproducible hashes. */
-declare function stableSerialize(value: unknown): string;
-
-declare const POLICY_DELTA_SCHEMA_VERSION: "1.0";
-type PolicyDeltaClassification = 'strengthening' | 'neutral' | 'judgment-required' | 'weakening';
-type PolicyDeltaFinding = {
-    id: string;
-    path: string;
-    classification: Exclude<PolicyDeltaClassification, 'neutral'>;
-    message: string;
-    nextAction?: string;
-    before?: unknown;
-    after?: unknown;
-};
-type PolicyDelta = {
-    schemaVersion: typeof POLICY_DELTA_SCHEMA_VERSION;
-    classification: PolicyDeltaClassification;
-    findings: PolicyDeltaFinding[];
-};
-type PolicyDeltaAcknowledgement = {
-    schemaVersion: typeof POLICY_DELTA_SCHEMA_VERSION;
-    basePolicyHash: string;
-    candidatePolicyHash: string;
-    findingIds: readonly string[];
-    reason: string;
-};
-declare function classifyArkPolicyDelta(base: ArkConfig, candidate: ArkConfig): PolicyDelta;
-declare function policyDeltaAcknowledgementMatches(acknowledgement: PolicyDeltaAcknowledgement | undefined, expected: {
-    basePolicyHash: string;
-    candidatePolicyHash: string;
-    findingIds: readonly string[];
-}): boolean;
-
-/**
- * Public type vocabulary of the canonical analysis API (U02 pilot 2).
- *
- * Declarations only — the C02 entry point src/kernel/analysis.ts re-exports
- * everything here, so consumer import paths never change.
- */
-
-type AnalysisContract = ArkConfigLoadResult & {
-    policyHash: string;
-};
-type AnalyzeProjectInput = {
-    contract: AnalysisContract;
-    files: readonly AnalysisFileInput[];
-    compilerOptions?: AnalysisCompilerOptions;
-};
-type AnalyzeChangeInput = AnalyzeProjectInput & {
-    changes: readonly AnalysisFileChange[];
-    changeMap?: ArchitectureChangeMapContract;
-};
-type AnalysisResult = {
-    ir: AnalysisIr;
-};
-type AnalyzePolicyDeltaInput = {
-    baseConfig: unknown;
-    candidateConfig: unknown;
-    acknowledgement?: PolicyDeltaAcknowledgement;
-    baseSource?: string;
-    candidateSource?: string;
-};
-type PolicyDeltaAnalysis = {
-    schemaVersion: '1.0';
-    basePolicyHash: string;
-    candidatePolicyHash: string;
-    classification: PolicyDeltaClassification;
-    findings: PolicyDeltaFinding[];
-    blockingFindingIds: string[];
-    requiresAcknowledgement: boolean;
-    acknowledged: boolean;
-    valid: boolean;
-};
-type ArchitectureEngineViolation = {
-    ruleId: string;
-    message: string;
-    file?: string;
-    line?: number;
-    target?: string;
-    fromLayer?: string;
-    toLayer?: string;
-    nextAction?: string;
-    [key: string]: unknown;
-};
-type ArchitectureEngineEdge = {
-    from: string;
-    fromLayer: string;
-    to?: string;
-    toLayer?: string;
-    line: number;
-    kind: string;
-    typeOnly?: boolean;
-    targetTypeOnlyExports?: boolean;
-    sourcePureTypeModule?: boolean;
-    namedBindingsTypeOnly?: boolean;
-    portProofEligible?: boolean;
-};
-type EvaluateArchitectureGraphInput = {
-    config: ArkConfig;
-    rules: ArkConfig['rules'];
-    files: readonly string[];
-    contentViolations: readonly ArchitectureEngineViolation[];
-    edges: readonly ArchitectureEngineEdge[];
-    warnings?: readonly ArchitectureEngineViolation[];
-    safety?: unknown;
-};
-type ArchitectureEngineResult = {
-    violations: ArchitectureEngineViolation[];
-    warnings: ArchitectureEngineViolation[];
-    safety?: unknown;
-};
-type PreparedChangeFile = {
-    path: string;
-    operation: 'create' | 'update' | 'delete';
-    beforeContentHash?: string;
-    candidateContentHash?: string;
-};
-type ChangePreflightResult = {
-    schemaVersion: '1.0';
-    valid: boolean;
-    readOnly: true;
-    policyHash: string;
-    compilerOptionsHash: string;
-    baseTreeHash: string;
-    candidateTreeHash: string;
-    changeMapHash?: string;
-    convergence?: ArchitectureConvergenceResult;
-    changes: PreparedChangeFile[];
-    violations: ArchitectureEngineViolation[];
-    warnings: ArchitectureEngineViolation[];
-};
-type CollectAnalysisConfigWarningsInput = {
-    config: ArkConfig;
-    rules: ArkConfig['rules'];
-    files: readonly string[];
-    manifest?: {
-        architecture?: {
-            layers?: readonly {
-                name?: string;
-                prefixes?: readonly string[];
-            }[];
-        };
-    };
-};
-
-/**
- * Contract loading, project/change analysis, and policy-delta analysis
- * (U02 pilot 2). Reached through the src/kernel/analysis.ts facade; consumer
- * import paths never change.
- */
-
-declare function loadContract(input: unknown, source?: string): AnalysisContract;
-declare function analyzePolicyDelta(input: AnalyzePolicyDeltaInput): PolicyDeltaAnalysis;
-declare function analyzeProject(input: AnalyzeProjectInput): AnalysisResult;
-declare function analyzeChange(input: AnalyzeChangeInput): AnalysisResult;
-declare function explainViolation(violation: AnalysisViolation): string;
-
-declare function detectArchitectureCycles(graph: ReadonlyMap<string, ReadonlySet<string>>): ArchitectureEngineViolation[];
-/** Canonical graph and layer-policy evaluator shared by library, CLI, and MCP adapters. */
-declare function evaluateArchitectureGraph(input: EvaluateArchitectureGraphInput): ArchitectureEngineResult;
-
-/**
- * Evaluate one create/update/delete set as a single in-memory candidate.
- * The function never writes and returns hashes that bind a later host commit to
- * the exact base, policy, compiler options, and candidate contents it checked.
- */
-declare function preflightChange(input: AnalyzeChangeInput): ChangePreflightResult;
-
-/** Canonical config diagnostics over repo-relative file paths. */
-declare function collectAnalysisConfigWarnings(input: CollectAnalysisConfigWarningsInput): ArchitectureEngineViolation[];
-
-export { type AICodeGate, type AICodeGateContext, type AICodeGateOptions, type AICodeGateResult, type AICodeGateViolation, type AIGateExtension, ANALYSIS_IR_SCHEMA_VERSION, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, ARK_CONFIG_SCHEMA, ARK_CONFIG_SCHEMA_VERSION, type AdapterDiagnostic, type AdapterResult, type AdapterSeverity, type AdapterViolationInput, type AnalysisCapabilityUse, type AnalysisCompilerOptions, type AnalysisContract, type AnalysisEvidence, type AnalysisFile, type AnalysisFileChange, type AnalysisFileInput, type AnalysisImportEdge, type AnalysisIr, type AnalysisResult, type AnalysisViolation, type AnalyzeArchitectureConvergenceInput, type AnalyzeChangeInput, type AnalyzePolicyDeltaInput, type AnalyzeProjectInput, type ArchitectureActualChange, type ArchitectureChangeMap, type ArchitectureChangeMapContract, type ArchitectureChangeMapDependency, type ArchitectureChangeMapFile, type ArchitectureChangeOperation, type ArchitectureConvergenceClassification, type ArchitectureConvergenceFinding, type ArchitectureConvergenceResult, type ArchitectureDependency, type ArchitectureEngineEdge, type ArchitectureEngineResult, type ArchitectureEngineViolation, type ArchitectureLayer, type ArchitectureLayerConfig, type ArchitectureProfile, type ArchitectureRule, type ArkCheckConfig, ArkConfig, ArkConfigLoadResult, type ChangePreflightResult, type CollectAnalysisConfigWarningsInput, type CreateArchitectureProfileFromArkConfigOptions, type CreateArchitectureProfileOptions, type CreateElevenLayerArkConfigOptions, type EvaluateArchitectureGraphInput, type ForbiddenCapabilityUse, POLICY_DELTA_SCHEMA_VERSION, type PolicyDelta, type PolicyDeltaAcknowledgement, type PolicyDeltaAnalysis, type PolicyDeltaClassification, type PolicyDeltaFinding, type PreparedChangeFile, type SemanticDependency, type SemanticDependencyKind, analyzeArchitectureConvergence, analyzeChange, analyzePolicyDelta, analyzeProject, classifyArkPolicyDelta, collectAnalysisConfigWarnings, collectForbiddenCapabilityUses, createAICodeGate, createAdapterResult, createArchitectureProfile, createArchitectureProfileFromArkConfig, createElevenLayerArkConfig, detectArchitectureCycles, deterministicHash, elevenLayerProfile, evaluateArchitectureGraph, explainViolation, extractSemanticDependencies, loadArkConfigContract, loadContract, parseArkConfigJson, policyDeltaAcknowledgementMatches, preflightChange, stableSerialize, toAdapterDiagnostic, version };