arkgate 3.8.0 → 3.8.2

package/dist/index.d.ts

@@ -234,7 +234,7 @@ declare function loadArkConfigContract(input: unknown, source?: string): ArkConf
 declare function parseArkConfigJson(json: string, source?: string): ArkConfigLoadResult;
 
 /** ArkGate library version — single source of truth. */
-declare const version = "3.8.0";
+declare const version = "3.8.2";
 
 /** Versioned public result contract shared by every ArkGate enforcement adapter. */
 declare const ARK_ANALYSIS_RESULT_SCHEMA_VERSION: "1.3";
@@ -864,13 +864,21 @@ interface AICodeGateOptions<Context = AICodeGateContext> {
 declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
 
 /**
- * Stable, pure vocabulary for ArkGate's importable analysis engine.
+ * Portable identity/fingerprint primitives for pure Domain contracts.
  *
- * Parsing and filesystem discovery belong to adapters. This module intentionally
- * contains only the versioned data contract and deterministic hash primitives.
+ * FNV-1a is intentional: no Node crypto dependency for CLI/MCP/browserless consumers.
  */
+/** Stable FNV-1a hash. Identity/fingerprint only — not a security primitive. */
+declare function deterministicHash(value: string): string;
+/** Serialize JSON-like values with sorted object keys for reproducible hashes. */
+declare function stableSerialize(value: unknown): string;
 
-declare const ANALYSIS_IR_SCHEMA_VERSION: "1.0";
+/**
+ * Versioned type vocabulary for resolved candidate facts (schema 1.0).
+ *
+ * Pure declarations + schema version identity. Create/load live in
+ * resolvedCandidateFacts.ts; JSON Schema lives in resolvedCandidateFactsSchema.ts.
+ */
 declare const RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION: "1.0";
 type ResolvedFactsCompleteness = 'complete' | 'partial' | 'unavailable';
 type ResolvedDependencyKind = 'import' | 'export' | 'dynamic-import' | 'require';
@@ -968,76 +976,19 @@ type ResolvedCandidateFacts = Omit<ResolvedCandidateFactsInput, 'candidateTreeHa
     safetyUses: ResolvedSafetyFact[];
     factsHash: string;
 };
-type AnalysisFileInput = {
-    path: string;
-    content: string;
-};
-type AnalysisFileChange = {
-    path: string;
-    content: string;
-} | {
-    path: string;
-    delete: true;
-};
-type AnalysisCompilerOptions = Readonly<Record<string, unknown>>;
-type AnalysisFile = AnalysisFileInput & {
-    contentHash: string;
-    layer: string | null;
-};
-type AnalysisImportEdge = {
-    from: string;
-    specifier: string;
-    to: string | null;
-    resolution: 'resolved' | 'unresolved';
-    fromLayer: string | null;
-    toLayer: string | null;
-    evidence: AnalysisEvidence;
-};
-/** A capability use is reserved for C04's symbol-aware implementation. */
-type AnalysisCapabilityUse = {
-    file: string;
-    symbol: string;
-    capability: string;
-    evidence: AnalysisEvidence;
-};
-type AnalysisEvidence = {
-    kind: 'import' | 'policy';
-    file: string;
-    line: number;
-    excerpt: string;
-};
-type AnalysisViolation = {
-    ruleId: string;
-    message: string;
-    edge?: AnalysisImportEdge;
-    /** U04 (additive): present on CAPABILITY_VIOLATION — the denied capability id. */
-    capability?: string;
-    /** U04 (additive): the matched module specifier or ambient path. */
-    symbol?: string;
-    evidence: AnalysisEvidence;
-};
-type AnalysisIr = {
-    schemaVersion: typeof ANALYSIS_IR_SCHEMA_VERSION;
-    policyHash: string;
-    compilerOptionsHash: string;
-    files: AnalysisFile[];
-    layers: string[];
-    edges: AnalysisImportEdge[];
-    capabilityUses: AnalysisCapabilityUse[];
-    violations: AnalysisViolation[];
-};
+
 /**
- * Stable FNV-1a hash. It is an identity/fingerprint, not a security primitive.
- * The output is deliberately portable across the CLI, MCP, hooks, and browserless
- * consumers without Node's crypto runtime.
+ * Canonical create/load for versioned resolved candidate facts.
+ *
+ * Types: resolvedCandidateFactsTypes.ts · Schema: resolvedCandidateFactsSchema.ts ·
+ * Hash: stableHash.ts. Plan-B god-module pilot cluster (pattern-b:god-module).
  */
-declare function deterministicHash(value: string): string;
-/** Serialize JSON-like values with sorted object keys for reproducible hashes. */
-declare function stableSerialize(value: unknown): string;
+
 /** Identity of the policy-controlled evidence a resolver must attempt to collect. */
 declare function resolvedFactsEvidenceRequirementsHash(config: ArkConfig): string;
 declare function createResolvedCandidateFacts(input: ResolvedCandidateFactsInput): ResolvedCandidateFacts;
 declare function loadResolvedCandidateFacts(input: unknown): ResolvedCandidateFacts;
+
 declare const RESOLVED_CANDIDATE_FACTS_SCHEMA: {
     readonly $schema: "https://json-schema.org/draft/2020-12/schema";
     readonly $id: "https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json";
@@ -1459,6 +1410,83 @@ declare const RESOLVED_CANDIDATE_FACTS_SCHEMA: {
     }];
 };
 
+/**
+ * Stable, pure vocabulary for ArkGate's importable analysis engine.
+ *
+ * This module owns the Analysis IR types and re-exports the resolved-candidate-facts
+ * pilot cluster (plan-B / pattern-b:god-module). Parsing and filesystem discovery
+ * belong to adapters.
+ *
+ * Cluster:
+ * - `stableHash` — identity/fingerprint primitives
+ * - `resolvedCandidateFactsTypes` — versioned fact types
+ * - `resolvedCandidateFacts` — create/load/canonicalize
+ * - `resolvedCandidateFactsSchema` — published JSON Schema
+ *
+ * Consumer import paths through this facade remain stable (same pattern as Kernel
+ * `analysis.ts` after U02).
+ */
+
+declare const ANALYSIS_IR_SCHEMA_VERSION: "1.0";
+type AnalysisFileInput = {
+    path: string;
+    content: string;
+};
+type AnalysisFileChange = {
+    path: string;
+    content: string;
+} | {
+    path: string;
+    delete: true;
+};
+type AnalysisCompilerOptions = Readonly<Record<string, unknown>>;
+type AnalysisFile = AnalysisFileInput & {
+    contentHash: string;
+    layer: string | null;
+};
+type AnalysisImportEdge = {
+    from: string;
+    specifier: string;
+    to: string | null;
+    resolution: 'resolved' | 'unresolved';
+    fromLayer: string | null;
+    toLayer: string | null;
+    evidence: AnalysisEvidence;
+};
+/** A capability use is reserved for C04's symbol-aware implementation. */
+type AnalysisCapabilityUse = {
+    file: string;
+    symbol: string;
+    capability: string;
+    evidence: AnalysisEvidence;
+};
+type AnalysisEvidence = {
+    kind: 'import' | 'policy';
+    file: string;
+    line: number;
+    excerpt: string;
+};
+type AnalysisViolation = {
+    ruleId: string;
+    message: string;
+    edge?: AnalysisImportEdge;
+    /** U04 (additive): present on CAPABILITY_VIOLATION — the denied capability id. */
+    capability?: string;
+    /** U04 (additive): the matched module specifier or ambient path. */
+    symbol?: string;
+    evidence: AnalysisEvidence;
+};
+type AnalysisIr = {
+    schemaVersion: typeof ANALYSIS_IR_SCHEMA_VERSION;
+    policyHash: string;
+    compilerOptionsHash: string;
+    files: AnalysisFile[];
+    layers: string[];
+    edges: AnalysisImportEdge[];
+    capabilityUses: AnalysisCapabilityUse[];
+    violations: AnalysisViolation[];
+};
+
 declare const ARK_CHANGE_MAP_SCHEMA_VERSION: "1.0";
 type ArchitectureChangeOperation = 'create' | 'update' | 'delete';
 type ArchitectureChangeMapFile = {