arkgate 4.1.0 → 4.2.0

package/dist/index.d.ts

@@ -244,7 +244,7 @@ declare function loadArkConfigContract(input: unknown, source?: string): ArkConf
 declare function parseArkConfigJson(json: string, source?: string): ArkConfigLoadResult;
 
 /** ArkGate library version — single source of truth. */
-declare const version = "4.1.0";
+declare const version = "4.2.0";
 
 /** Versioned public result contract shared by every ArkGate enforcement adapter. */
 /** 1.4 adds optional evidence.arkruleId + evidence.arkruleSource (ADR 0012 / AR03). */
@@ -588,6 +588,180 @@ declare const ARK_ANALYSIS_RESULT_SCHEMA: {
     };
 };
 
+/**
+ * Canonical, pure contract for ArkGate MCP project identity.
+ *
+ * Filesystem canonicalization, hashing, clocks, and runtime ids belong to the
+ * Tooling adapter. This module owns the stable payload and published schemas so
+ * every MCP surface speaks the same identity/binding language.
+ */
+declare const ARK_PROJECT_IDENTITY_SCHEMA_VERSION: "1.0";
+declare const ARK_PROJECT_IDENTITY_SCHEMA_URL = "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
+type ProjectIdentity = {
+    schemaVersion: typeof ARK_PROJECT_IDENTITY_SCHEMA_VERSION;
+    projectId: string;
+    resolvedRoot: string;
+    resolvedConfigPath: string;
+    arkgateVersion: string;
+    contractHash: string;
+    contractSource: 'project' | 'default-profile' | 'manifest';
+    runtimeId: string;
+    processStartedAt: string;
+};
+type ProjectExpectation = {
+    expectedRoot?: string;
+    expectedProjectId?: string;
+};
+type ProjectBinding = {
+    status: 'matched' | 'unverified' | 'mismatch';
+    authoritative: boolean;
+    expectedRoot?: string;
+    expectedProjectId?: string;
+    code?: 'PROJECT_ROOT_MISMATCH' | 'PROJECT_ID_MISMATCH' | 'INVALID_PROJECT_EXPECTATION';
+    message?: string;
+};
+declare const PROJECT_EXPECTATION_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly expectedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: string;
+        };
+        readonly expectedProjectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+            readonly description: "Project id previously returned by ark_identity or ark_manifest.";
+        };
+    };
+};
+declare const PROJECT_BINDING_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["status", "authoritative"];
+    readonly properties: {
+        readonly status: {
+            readonly enum: readonly ["matched", "unverified", "mismatch"];
+        };
+        readonly authoritative: {
+            readonly type: "boolean";
+        };
+        readonly expectedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly expectedProjectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly code: {
+            readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
+        };
+        readonly message: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+    };
+};
+declare const ARK_PROJECT_IDENTITY_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
+    readonly title: "ArkGate MCP project identity";
+    readonly description: "Stable project binding plus separate runtime and architecture-contract evidence.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "projectId", "resolvedRoot", "resolvedConfigPath", "arkgateVersion", "contractHash", "contractSource", "runtimeId", "processStartedAt"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "1.0";
+        };
+        readonly projectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly resolvedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly resolvedConfigPath: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly arkgateVersion: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly contractHash: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly contractSource: {
+            readonly enum: readonly ["project", "default-profile", "manifest"];
+        };
+        readonly runtimeId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly processStartedAt: {
+            readonly type: "string";
+            readonly format: "date-time";
+        };
+    };
+    readonly $defs: {
+        readonly expectation: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly properties: {
+                readonly expectedRoot: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: string;
+                };
+                readonly expectedProjectId: {
+                    readonly type: "string";
+                    readonly pattern: "^sha256:[a-f0-9]{64}$";
+                    readonly description: "Project id previously returned by ark_identity or ark_manifest.";
+                };
+            };
+        };
+        readonly binding: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["status", "authoritative"];
+            readonly properties: {
+                readonly status: {
+                    readonly enum: readonly ["matched", "unverified", "mismatch"];
+                };
+                readonly authoritative: {
+                    readonly type: "boolean";
+                };
+                readonly expectedRoot: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly expectedProjectId: {
+                    readonly type: "string";
+                    readonly pattern: "^sha256:[a-f0-9]{64}$";
+                };
+                readonly code: {
+                    readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
+                };
+                readonly message: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+            };
+        };
+    };
+};
+/**
+ * Stable identity: contract edits and MCP restarts must not change which project
+ * this is. Callers must pass canonical real paths and a SHA-256 hex function.
+ */
+declare function createProjectId(resolvedRoot: string, resolvedConfigPath: string, sha256Hex: (value: string) => string): string;
+declare function createProjectIdentity(input: Omit<ProjectIdentity, 'schemaVersion'>): ProjectIdentity;
+
 /**
  * AI Code Gate (basic).
  *
@@ -2416,6 +2590,8 @@ type RulesInventoryCandidate = {
     line: number;
     message: string;
     confidence: RulesInventoryConfidence;
+    /** Governed layer supplied by the caller, when available. */
+    governedLayer?: string;
     suggestedArkRule?: {
         layer: string;
         structureId?: string;
@@ -2431,8 +2607,24 @@ type RulesInventoryResult = {
     frozen: number;
     notAScore: true;
 };
+type RulesInventoryLayerContext = {
+    name: string;
+    intentPrefixes?: readonly string[];
+};
 type BuildRulesInventoryInput = {
     fileContents: Readonly<Record<string, string>>;
+    /**
+     * Actual governed layer by repository-relative file path.
+     *
+     * When a file has layer evidence, it replaces filename heuristics for deciding
+     * whether the file is a Domain module or a controller-like boundary.
+     */
+    fileLayers?: Readonly<Record<string, string>>;
+    /**
+     * Configured layer intent ownership. This keeps custom names such as `core`
+     * semantically Domain when they own `Domain.` without changing fileLayers.
+     */
+    layerContexts?: readonly RulesInventoryLayerContext[];
     /** Invariant / structure ids already under contract (to compute underContract count). */
     contractedRuleIds?: readonly string[];
     /** Baseline keys currently frozen for arkrule residual. */
@@ -2540,4 +2732,4 @@ type ArkDesignDeltaResult = {
     error?: string;
 };
 
-export { type AICodeGate, type AICodeGateContext, type AICodeGateOptions, type AICodeGateResult, type AICodeGateViolation, type AIGateExtension, ANALYSIS_IR_SCHEMA_VERSION, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, ARK_CONFIG_SCHEMA, ARK_CONFIG_SCHEMA_VERSION, ARK_DESIGN_DELTA_SCHEMA_VERSION, ARK_ENFORCEMENT_STATE_SCHEMA_VERSION, ARK_RULES_SCHEMA, ARK_RULES_SCHEMA_VERSION, ARK_RULE_SENSORS, type AdapterCompletenessReason, type AdapterDiagnostic, type AdapterResult, type AdapterSeverity, type AdapterViolationInput, type AnalysisCapabilityUse, type AnalysisCompilerOptions, type AnalysisCompleteness, type AnalysisContract, type AnalysisEvidence, type AnalysisFile, type AnalysisFileChange, type AnalysisFileInput, type AnalysisImportEdge, type AnalysisIr, type AnalysisMode, type AnalysisResult, type AnalysisViolation, type AnalyzeArchitectureConvergenceInput, type AnalyzeChangeInput, type AnalyzePolicyDeltaInput, type AnalyzeProjectInput, type AnalyzeResolvedProjectInput, type ArchitectureActualChange, type ArchitectureChangeMap, type ArchitectureChangeMapContract, type ArchitectureChangeMapDependency, type ArchitectureChangeMapFile, type ArchitectureChangeOperation, type ArchitectureConvergenceClassification, type ArchitectureConvergenceFinding, type ArchitectureConvergenceResult, type ArchitectureDependency, type ArchitectureEngineEdge, type ArchitectureEngineResult, type ArchitectureEngineViolation, type ArchitectureLayer, type ArchitectureLayerConfig, type ArchitectureProfile, type ArchitectureRule, type ArkCheckConfig, ArkConfig, ArkConfigLoadResult, type ArkDesignDeltaResult, type ArkEnforcementHost, type ArkEnforcementState, type ArkRuleSensorViolation, type ArkRulesFile, type ChangePreflightResult, type ClassShapeFact, type CollectAnalysisConfigWarningsInput, type CreateArchitectureProfileFromArkConfigOptions, type CreateArchitectureProfileOptions, type CreateElevenLayerArkConfigOptions, type DesignDeltaChange, type DesignDeltaIdentity, type DesignSmellEvidence, type DesignSmellFinding, type DesignSmellId, type EffectiveArkRules, type EffectiveContract, EffectiveContractError, type EffectiveContractWarning, type EnforcementBoundaryState, type EnforcementEvidence, type EnforcementEvidenceField, type EnforcementVerification, type EvaluateArchitectureGraphInput, type ForbiddenCapabilityUse, type InvariantCoverageEvidence, POLICY_DELTA_SCHEMA_VERSION, type PolicyDelta, type PolicyDeltaAcknowledgement, type PolicyDeltaAnalysis, type PolicyDeltaClassification, type PolicyDeltaFinding, type PreflightResolvedChangeInput, type PreparedChangeFile, RESOLVED_CANDIDATE_FACTS_SCHEMA, RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION, type ResolvedAmbientFact, type ResolvedAnalysisFile, type ResolvedAnalysisIr, type ResolvedAnalysisResult, type ResolvedCandidateFacts, type ResolvedCandidateFactsInput, type ResolvedCapability, type ResolvedCapabilityFact, type ResolvedChangePreflightResult, type ResolvedDependencyFact, type ResolvedDependencyKind, type ResolvedDependencyState, type ResolvedFactsCompleteness, type ResolvedFactsReason, type ResolvedFileFact, type ResolvedIntentReferenceFact, type ResolvedPublishFact, type ResolvedSafetyFact, type ResolvedSafetyKind, type ResolvedSafetyReport, type RulesInventoryCandidate, type RulesInventoryResult, type SemanticDependency, type SemanticDependencyKind, analyzeArchitectureConvergence, analyzeChange, analyzePolicyDelta, analyzeProject, analyzeResolvedProject, buildArkRuleFileHints, buildEffectiveArkRules, buildRulesInventory, canPromoteInvariant, classifyArkPolicyDelta, collectAnalysisConfigWarnings, collectEmptyAppliesToFindings, collectForbiddenCapabilityUses, createAICodeGate, createAdapterResult, createArchitectureProfile, createArchitectureProfileFromArkConfig, createElevenLayerArkConfig, createResolvedCandidateFacts, deriveArkRuleFileHints, detectArchitectureCycles, deterministicHash, effectiveContractPolicyPayload, elevenLayerProfile, emptyEffectiveArkRules, evaluateArchitectureGraph, evaluateArkRuleSensors, evaluateInvariantCoverage, explainViolation, extractClassShapesFromSource, extractSemanticDependencies, inventoryToExtractionCard, loadArkConfigContract, loadArkRulesContract, loadContract, loadResolvedCandidateFacts, parseArkConfigJson, parseArkRulesJson, policyDeltaAcknowledgementMatches, preflightChange, preflightResolvedChange, resolveEffectiveContract, resolvedFactsEvidenceRequirementsHash, stableSerialize, toAdapterDiagnostic, version };
+export { type AICodeGate, type AICodeGateContext, type AICodeGateOptions, type AICodeGateResult, type AICodeGateViolation, type AIGateExtension, ANALYSIS_IR_SCHEMA_VERSION, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, ARK_CONFIG_SCHEMA, ARK_CONFIG_SCHEMA_VERSION, ARK_DESIGN_DELTA_SCHEMA_VERSION, ARK_ENFORCEMENT_STATE_SCHEMA_VERSION, ARK_PROJECT_IDENTITY_SCHEMA, ARK_PROJECT_IDENTITY_SCHEMA_URL, ARK_PROJECT_IDENTITY_SCHEMA_VERSION, ARK_RULES_SCHEMA, ARK_RULES_SCHEMA_VERSION, ARK_RULE_SENSORS, type AdapterCompletenessReason, type AdapterDiagnostic, type AdapterResult, type AdapterSeverity, type AdapterViolationInput, type AnalysisCapabilityUse, type AnalysisCompilerOptions, type AnalysisCompleteness, type AnalysisContract, type AnalysisEvidence, type AnalysisFile, type AnalysisFileChange, type AnalysisFileInput, type AnalysisImportEdge, type AnalysisIr, type AnalysisMode, type AnalysisResult, type AnalysisViolation, type AnalyzeArchitectureConvergenceInput, type AnalyzeChangeInput, type AnalyzePolicyDeltaInput, type AnalyzeProjectInput, type AnalyzeResolvedProjectInput, type ArchitectureActualChange, type ArchitectureChangeMap, type ArchitectureChangeMapContract, type ArchitectureChangeMapDependency, type ArchitectureChangeMapFile, type ArchitectureChangeOperation, type ArchitectureConvergenceClassification, type ArchitectureConvergenceFinding, type ArchitectureConvergenceResult, type ArchitectureDependency, type ArchitectureEngineEdge, type ArchitectureEngineResult, type ArchitectureEngineViolation, type ArchitectureLayer, type ArchitectureLayerConfig, type ArchitectureProfile, type ArchitectureRule, type ArkCheckConfig, ArkConfig, ArkConfigLoadResult, type ArkDesignDeltaResult, type ArkEnforcementHost, type ArkEnforcementState, type ArkRuleSensorViolation, type ArkRulesFile, type ChangePreflightResult, type ClassShapeFact, type CollectAnalysisConfigWarningsInput, type CreateArchitectureProfileFromArkConfigOptions, type CreateArchitectureProfileOptions, type CreateElevenLayerArkConfigOptions, type DesignDeltaChange, type DesignDeltaIdentity, type DesignSmellEvidence, type DesignSmellFinding, type DesignSmellId, type EffectiveArkRules, type EffectiveContract, EffectiveContractError, type EffectiveContractWarning, type EnforcementBoundaryState, type EnforcementEvidence, type EnforcementEvidenceField, type EnforcementVerification, type EvaluateArchitectureGraphInput, type ForbiddenCapabilityUse, type InvariantCoverageEvidence, POLICY_DELTA_SCHEMA_VERSION, PROJECT_BINDING_SCHEMA, PROJECT_EXPECTATION_SCHEMA, type PolicyDelta, type PolicyDeltaAcknowledgement, type PolicyDeltaAnalysis, type PolicyDeltaClassification, type PolicyDeltaFinding, type PreflightResolvedChangeInput, type PreparedChangeFile, type ProjectBinding, type ProjectExpectation, type ProjectIdentity, RESOLVED_CANDIDATE_FACTS_SCHEMA, RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION, type ResolvedAmbientFact, type ResolvedAnalysisFile, type ResolvedAnalysisIr, type ResolvedAnalysisResult, type ResolvedCandidateFacts, type ResolvedCandidateFactsInput, type ResolvedCapability, type ResolvedCapabilityFact, type ResolvedChangePreflightResult, type ResolvedDependencyFact, type ResolvedDependencyKind, type ResolvedDependencyState, type ResolvedFactsCompleteness, type ResolvedFactsReason, type ResolvedFileFact, type ResolvedIntentReferenceFact, type ResolvedPublishFact, type ResolvedSafetyFact, type ResolvedSafetyKind, type ResolvedSafetyReport, type RulesInventoryCandidate, type RulesInventoryResult, type SemanticDependency, type SemanticDependencyKind, analyzeArchitectureConvergence, analyzeChange, analyzePolicyDelta, analyzeProject, analyzeResolvedProject, buildArkRuleFileHints, buildEffectiveArkRules, buildRulesInventory, canPromoteInvariant, classifyArkPolicyDelta, collectAnalysisConfigWarnings, collectEmptyAppliesToFindings, collectForbiddenCapabilityUses, createAICodeGate, createAdapterResult, createArchitectureProfile, createArchitectureProfileFromArkConfig, createElevenLayerArkConfig, createProjectId, createProjectIdentity, createResolvedCandidateFacts, deriveArkRuleFileHints, detectArchitectureCycles, deterministicHash, effectiveContractPolicyPayload, elevenLayerProfile, emptyEffectiveArkRules, evaluateArchitectureGraph, evaluateArkRuleSensors, evaluateInvariantCoverage, explainViolation, extractClassShapesFromSource, extractSemanticDependencies, inventoryToExtractionCard, loadArkConfigContract, loadArkRulesContract, loadContract, loadResolvedCandidateFacts, parseArkConfigJson, parseArkRulesJson, policyDeltaAcknowledgementMatches, preflightChange, preflightResolvedChange, resolveEffectiveContract, resolvedFactsEvidenceRequirementsHash, stableSerialize, toAdapterDiagnostic, version };