arkgate 4.5.5 → 4.5.6

package/CHANGELOG.md

@@ -5,14 +5,57 @@ in the immutable pre-2.0 archive linked below.
 
 ## Unreleased
 
+## 4.5.6 — 2026-08-11
+
+**Patch** over **4.5.5**. Field upgrade & multi-project MCP truth (Phase FX): registry-aware
+package install, structured skip recovery, skill drift + opt-in refresh, post-upgrade checks,
+MCP process package honesty, host selection notes, early whatsNew, inventory UX-copy quieting.
+**No required config migration.** No new skill names, sensors, or scores. Freezes held.
+
+**Status: prepared** (not on npm `latest` until publish train completes; see
+`docs/releases/4.5.6.md`).
+
+### Added
+
+- **Registry-aware upgrade (FX01–FX02):** `ark upgrade --apply` no longer skips package install
+  solely because CLI version equals `node_modules/arkgate`. When the registry (injectable for
+  tests) is ahead, install runs. Skip paths emit structured JSON (`reasonCode`,
+  `installedVersion`, `cliVersion`, `registryLatest`, `suggestedInstallCmd`) plus human
+  recovery. Offline / registry-unknown stays honest (`REGISTRY_UNAVAILABLE`) without inventing
+  a bump.
+- **Skill content drift honesty (FX03):** upgrade preview/JSON `skillDrift` counts
+  current/stale/customized/missing skills with sample paths and preserve notes.
+- **Opt-in skill refresh (FX04):** `--refresh-skills` rewrites customized managed *skills* to
+  package templates with explicit consent. Conflicted assets still need `--accept-conflicts`.
+  Never silent overwrite of true user edits by default.
+- **Post-upgrade verification block (FX05):** after apply, advisory `postUpgradeChecks` (pin↔CLI,
+  architecture verification, dual-truth, doctor/status/MCP notes). Always `notAScore`.
+- **MCP multi-project process honesty (FX06):** every MCP tool context includes
+  `processPackage` (`processArkgateVersion`, `projectInstalledVersion`,
+  `processPackageMismatch` / `processStale`, `nextAction`). Prefer project-local CLI until
+  identity matched and versions align; multi-checkout recipe in agent-guide + `/ark-upgrade`.
+- **Host selection honesty (FX07):** upgrade notes when detected active host ∉ managed
+  `--tools`/manifest hosts and suggests `--tools` expansion.
+- **whatsNew early path (FX08):** suggested improvements on preview even when nothing to apply;
+  includes FX field-truth try/inspect items.
+- **Inventory UX message quieting (FX09):** rules inventory downranks pure UX/error-message
+  string constants so they do not crowd business-rule pilots (no new sensors).
+
+### Changed
+
+- `/ark-upgrade` skill + upgrade help document registry-aware install, `--refresh-skills`,
+  skill drift, post-upgrade checks, and multi-project MCP restart guidance.
+
+**Freezes held:** no principle scores/ranks; no new skill names; no silent customized overwrite;
+no silent multi-project MCP retarget; soft hosts stay advisory; no fake published claims.
+
 ## 4.5.5 — 2026-08-11
 
 **Patch** over **4.5.0**. Deep-module coach train plus upgrade **suggested improvements /
 what’s new** so consumers know what to try after install. **No required config migration.**
 No new skill names, sensors, or scores. Freezes held.
 
-**Status: prepared** (implementation only; not yet on npm `latest` — remains `4.5.0` until
-the publication checklist completes).
+**Status: published** (`arkgate@4.5.5` on npm `latest`; see `docs/releases/4.5.5.md`).
 
 ### Added
 

package/README.md

@@ -16,9 +16,8 @@ and makes sure a “green” check means something real.
 
 </div>
 
-> **ArkGate 4.5.5** is **prepared** (deep-module coach + upgrade what’s new). npm `latest` remains
-> **4.5.0** until publish. [4.5.5 notes](docs/releases/4.5.5.md) · [4.5.0](docs/releases/4.5.0.md) ·
-> [4.4.0](docs/releases/4.4.0.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
+> **ArkGate 4.5.5** is on npm `latest` — deep-module coach, upgrade what’s new, session honesty.
+> [4.5.5 notes](docs/releases/4.5.5.md) · [4.5.0](docs/releases/4.5.0.md) · [4.4.0](docs/releases/4.4.0.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
 
 ---
 
@@ -209,8 +208,8 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Prepared (4.5.5) | [docs/releases/4.5.5.md](docs/releases/4.5.5.md) · [CHANGELOG](CHANGELOG.md) |
-| Current published (4.5.0 on npm `latest`) | [docs/releases/4.5.0.md](docs/releases/4.5.0.md) |
+| Current release (4.5.5 on npm `latest`) | [docs/releases/4.5.5.md](docs/releases/4.5.5.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior (4.5.0) | [docs/releases/4.5.0.md](docs/releases/4.5.0.md) |
 | Prior (4.4.0) | [docs/releases/4.4.0.md](docs/releases/4.4.0.md) |
 | Prior (4.3.0) | [docs/releases/4.3.0.md](docs/releases/4.3.0.md) |
 | Prior (4.2.1) | [docs/releases/4.2.1.md](docs/releases/4.2.1.md) |

package/bin/ark-mcp-runtime.mjs

@@ -5,6 +5,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { createHash, randomUUID } from 'node:crypto';
 import { spawnSync } from 'node:child_process';
+import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import {
   DEFAULT_INTENT_PREFIXES,
@@ -1847,11 +1848,59 @@ export async function runArkMcp({ hookInput } = {}) {
     return currentBinding;
   }
 
+  /**
+   * FX06 — process package vs project install honesty (multi-project field truth).
+   * Process arkgateVersion is startup-loaded; after consumer `npm i arkgate@newer`,
+   * long-lived MCP can report a stale process version until restart.
+   */
+  function readProjectInstalledArkgateVersion() {
+    try {
+      const shallow = path.join(resolvedRoot, 'node_modules', 'arkgate', 'package.json');
+      if (fs.existsSync(shallow)) {
+        const v = JSON.parse(fs.readFileSync(shallow, 'utf8')).version;
+        return typeof v === 'string' && v.trim() ? v.trim() : null;
+      }
+    } catch {
+      /* fall through */
+    }
+    try {
+      const requireFromProject = createRequire(path.join(resolvedRoot, 'package.json'));
+      const pkgJson = requireFromProject.resolve('arkgate/package.json');
+      const v = JSON.parse(fs.readFileSync(pkgJson, 'utf8')).version;
+      return typeof v === 'string' && v.trim() ? v.trim() : null;
+    } catch {
+      return null;
+    }
+  }
+
+  function processPackageHonesty() {
+    const processVersion = typeof ark.version === 'string' ? ark.version : null;
+    const projectInstalledVersion = readProjectInstalledArkgateVersion();
+    const mismatch =
+      processVersion != null &&
+      projectInstalledVersion != null &&
+      processVersion !== projectInstalledVersion;
+    return {
+      schemaVersion: '1.0',
+      notAScore: true,
+      processArkgateVersion: processVersion,
+      projectInstalledVersion,
+      processPackageMismatch: mismatch,
+      processStale: mismatch,
+      nextAction: mismatch
+        ? 'Restart or retarget the Ark MCP server so process arkgateVersion matches the project install. Prefer project-local CLI (`npx arkgate` / `npx arkgate-check`) until identity is matched and versions align. Multi-checkout users: one expectedRoot per project; never reuse another checkout’s projectId.'
+        : projectInstalledVersion == null
+          ? 'Project has no resolvable node_modules/arkgate; install the package or use CLI from a project that pins arkgate.'
+          : 'Process package version matches project install for this MCP root.',
+    };
+  }
+
   function contextFor(binding) {
     return {
       projectIdentity,
       binding,
       authoritative: binding.authoritative,
+      processPackage: processPackageHonesty(),
     };
   }
 

package/bin/ark-shared.mjs

@@ -722,35 +722,14 @@ export function packageInstallArgv(root, versionSpec = 'latest') {
   return ['npm', ['install', '-D', pkgSpec]];
 }
 
-/**
- * Whether an install of arkgate@latest can be skipped because node_modules already
- * resolves the same version as this CLI package.
- *
- * @param {string} root
- * @param {string} [cliVersion]  this binary's package version
- * @returns {{ skip: boolean, installedVersion: string|null, reason: string }}
- */
-export function shouldSkipArkgateInstall(root, cliVersion) {
-  const pkgPath = path.join(root, 'node_modules', 'arkgate', 'package.json');
-  if (!fs.existsSync(pkgPath)) {
-    return { skip: false, installedVersion: null, reason: 'not-installed' };
-  }
-  let installedVersion = null;
-  try {
-    installedVersion = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version ?? null;
-  } catch {
-    return { skip: false, installedVersion: null, reason: 'unreadable' };
-  }
-  if (
-    typeof cliVersion === 'string' &&
-    cliVersion &&
-    installedVersion &&
-    installedVersion === cliVersion
-  ) {
-    return { skip: true, installedVersion, reason: 'already-current' };
-  }
-  return { skip: false, installedVersion, reason: 'version-differs' };
-}
+// FX01–FX02: registry-aware skip lives in upgrade-package-decision (injectable probe).
+export {
+  shouldSkipArkgateInstall,
+  buildPackageInstallSkipPayload,
+  formatPackageInstallDecisionHuman,
+  compareSemverCore,
+  probeRegistryArkgateLatest,
+} from './lib/upgrade-package-decision.mjs';
 
 /** Package-manager aware "install a dev dependency" hint (e.g. for a missing typescript). */
 export function installDevHint(root, pkg) {

package/bin/ark.mjs

@@ -77,6 +77,7 @@ function parseArgs(argv) {
     installExplicit: false,
     apply: false,
     acceptConflicts: false,
+    refreshSkills: false,
     planDigest: undefined,
     json: false,
     internalApply: false,
@@ -118,6 +119,7 @@ function parseArgs(argv) {
     }
     else if (arg === '--apply') args.apply = true;
     else if (arg === '--accept-conflicts') args.acceptConflicts = true;
+    else if (arg === '--refresh-skills') args.refreshSkills = true;
     else if (arg === '--plan-digest') args.planDigest = requireValue(arg, i++);
     else if (arg === '--json') args.json = true;
     else if (arg === '--internal-apply') args.internalApply = true;
@@ -153,7 +155,7 @@ function usage() {
   ark start   [--root <project>] [--tools <host>] [--require-write-hook <host>] [--install] [--apply] [--json]
   ark init    [--root <project>] [--preset hexagonal|layered|feature-sliced|monorepo|ui-surface|vertical-slice|ddd-bounded-contexts|clean-architecture|onion-architecture]
               [--archetype <playbook-id>] [--tools <list>] [--require-write-hook <host>] [--yes] [--force] [--no-strict]
-  ark upgrade [--root <project>] [--tools <list>] [--apply] [--plan-digest <sha256>] [--accept-conflicts] [--json] [--no-install] [--no-strict]
+  ark upgrade [--root <project>] [--tools <list>] [--apply] [--plan-digest <sha256>] [--accept-conflicts] [--refresh-skills] [--json] [--no-install] [--no-strict]
   ark preflight --changes <change-set.json> [--change-map <map.json>] [--root <project>] [--config ark.config.json] [--manifest <manifest.json>] [--tsconfig <tsconfig.json>] [--json]
   ark status  [--root <project>] [--config ark.config.json] [--json]
               [--expected-root <abs>] [--expected-project-id sha256:…] [--tools <host>]
@@ -164,8 +166,10 @@ Commands:
   start     New here? Analyze and preview the complete setup. Read-only unless --apply.
   init      Configure Ark project enforcement with explicit prompts.
   upgrade   Preview identity-proven Ark-managed asset updates. With package install,
-            --apply bumps to @latest and recomputes the preview; a second explicit
-            --apply --no-install applies those exact bytes and verifies them.
+            --apply bumps toward registry latest when behind (not only when CLI ≠ pin)
+            and recomputes the preview; a second explicit --apply --no-install applies
+            those exact bytes and verifies them. --refresh-skills opts in to rewrite
+            customized managed skills to package templates (never silent default).
             (alias: ark update)
   preflight Validate one atomic create/update/delete set without writing project files.
   status    Unified session/project manifest (identity, activation, last check, rules).

package/bin/lib/managed-upgrade.mjs

@@ -465,11 +465,19 @@ export function planManagedUpgrade(root, options = {}) {
           kind: catalogAsset.kind,
         });
     const accepted = options.acceptConflicts === true;
+    // FX04: --refresh-skills opt-in rewrites customized *skill* assets to package
+    // templates. Conflicted still needs --accept-conflicts. Never silent default.
+    const refreshSkills = options.refreshSkills === true;
+    const skillRefresh =
+      refreshSkills &&
+      catalogAsset.kind === 'skill' &&
+      classified.state === 'customized';
     const canApply =
       classified.state === 'stale' ||
+      skillRefresh ||
       (classified.state === 'missing' && (!recorded || accepted)) ||
       (classified.state === 'conflicted' && accepted);
-    const blocked = classified.requiresConsent && !accepted;
+    const blocked = classified.requiresConsent && !accepted && !skillRefresh;
     const desiredFile = afterFileContent(catalogAsset, currentFile, desiredScoped);
     const asset = {
       path: catalogAsset.relativePath,
@@ -542,6 +550,7 @@ export function planManagedUpgrade(root, options = {}) {
     profile: selection.profile,
     hosts: selection.hosts,
     acceptConflicts: options.acceptConflicts === true,
+    refreshSkills: options.refreshSkills === true,
     assets,
     summary,
     nextManifest,
@@ -552,6 +561,183 @@ export function planManagedUpgrade(root, options = {}) {
   return plan;
 }
 
+/**
+ * FX03 — skill content drift honesty (counts by state + sample paths).
+ * Skills only; never claims "skills upgraded" when only package pin moved.
+ */
+export function buildSkillDriftSummary(plan) {
+  const assets = Array.isArray(plan?.assets) ? plan.assets : [];
+  const skills = assets.filter((a) => a?.kind === 'skill');
+  const byState = {};
+  for (const skill of skills) {
+    const state = typeof skill.state === 'string' ? skill.state : 'unknown';
+    byState[state] = (byState[state] ?? 0) + 1;
+  }
+  const sample = (state, limit = 5) =>
+    skills
+      .filter((s) => s.state === state)
+      .map((s) => s.path)
+      .sort()
+      .slice(0, limit);
+  const customized = byState.customized ?? 0;
+  const stale = byState.stale ?? 0;
+  const missing = byState.missing ?? 0;
+  const current = byState.current ?? 0;
+  const wouldRefresh = skills.filter((s) => s.willApply === true).length;
+  return {
+    schemaVersion: '1.0',
+    notAScore: true,
+    skillCount: skills.length,
+    byState,
+    stale,
+    customized,
+    missing,
+    current,
+    wouldRefresh,
+    samplePaths: {
+      stale: sample('stale'),
+      customized: sample('customized'),
+      missing: sample('missing'),
+    },
+    note:
+      customized > 0 && wouldRefresh === 0
+        ? 'Skills on disk differ from package templates (customized preserved). Use --refresh-skills to opt in to rewrite customized skills; never silent overwrite.'
+        : stale > 0
+          ? 'Some skills are stale vs package templates and will refresh on apply.'
+          : skills.length === 0
+            ? 'No managed skill assets in this upgrade selection.'
+            : 'Skill content matches package templates or is scheduled for write.',
+  };
+}
+
+/**
+ * FX07 — active host vs managed --tools / manifest hosts.
+ */
+export function buildHostSelectionHonesty(plan) {
+  const hosts = Array.isArray(plan?.hosts) ? plan.hosts.map((h) => String(h).toLowerCase()) : [];
+  let active = null;
+  try {
+    active = detectActiveAgentHost();
+  } catch {
+    active = null;
+  }
+  const activeNorm =
+    typeof active === 'string' && active.trim() ? active.trim().toLowerCase() : null;
+  const known = activeNorm && KNOWN_TOOLS.includes(activeNorm);
+  const inSelection = Boolean(activeNorm && hosts.includes(activeNorm));
+  const note =
+    known && !inSelection
+      ? `Detected host "${activeNorm}" is not in managed tools [${hosts.join(', ') || 'none'}]. Re-run with --tools ${[...new Set([...hosts, activeNorm])].sort().join(',')} so that host's skills/hooks are in the plan.`
+      : known && inSelection
+        ? `Detected host "${activeNorm}" is in the managed selection.`
+        : activeNorm
+          ? `Detected host "${activeNorm}" is outside the known managed tool set.`
+          : 'No active agent host detected for this process.';
+  return {
+    schemaVersion: '1.0',
+    notAScore: true,
+    activeHost: activeNorm,
+    managedHosts: hosts,
+    activeInSelection: inSelection,
+    suggestTools:
+      known && !inSelection
+        ? [...new Set([...hosts, activeNorm])].sort().join(',')
+        : null,
+    note,
+  };
+}
+
+/**
+ * FX05 — post-upgrade verification block (advisory sensors only).
+ */
+export function buildPostUpgradeChecks(root, options = {}) {
+  const resolvedRoot = path.resolve(root);
+  const checks = [];
+  let projectVersion = null;
+  try {
+    const pkgPath = path.join(resolvedRoot, 'node_modules', 'arkgate', 'package.json');
+    if (fs.existsSync(pkgPath)) {
+      projectVersion = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version ?? null;
+    }
+  } catch {
+    projectVersion = null;
+  }
+  const cli = typeof options.cliVersion === 'string' ? options.cliVersion : arkPackageVersion();
+  const pinOk =
+    projectVersion != null && cli != null ? projectVersion === cli : null;
+  checks.push({
+    id: 'package-pin-cli',
+    ok: pinOk,
+    detail:
+      pinOk === true
+        ? `Installed arkgate@${projectVersion} matches CLI ${cli}.`
+        : pinOk === false
+          ? `Installed arkgate@${projectVersion} ≠ CLI ${cli}; re-run install or restart using project-local CLI.`
+          : `Could not compare pin (installed=${projectVersion ?? 'missing'}, cli=${cli ?? 'unknown'}).`,
+  });
+  checks.push({
+    id: 'architecture-verification',
+    ok:
+      options.verification?.mode === 'skipped'
+        ? null
+        : options.verification?.exitCode === 0,
+    detail:
+      options.verification?.mode === 'skipped'
+        ? 'Strict architecture verification was skipped (--no-strict).'
+        : options.verification?.exitCode === 0
+          ? 'Strict-merge architecture verification passed.'
+          : `Architecture verification exit ${options.verification?.exitCode ?? 'unknown'}.`,
+  });
+  checks.push({
+    id: 'package-version-truth',
+    ok: options.dualTruth?.dualTruth === true ? false : options.dualTruth ? true : null,
+    detail:
+      options.dualTruth?.dualTruth === true
+        ? options.dualTruth.note || 'Package pin dual-truth detected.'
+        : options.dualTruth
+          ? 'Package pin truth is consistent for this apply.'
+          : 'Package version truth not evaluated.',
+  });
+  checks.push({
+    id: 'doctor-compass-coach',
+    ok: null,
+    detail:
+      'Run `npx arkgate-check --doctor --json` and confirm doctor.improvementCompass + doctor.deepModuleCoach (notAScore).',
+  });
+  checks.push({
+    id: 'agents-md-projection',
+    ok: null,
+    detail: 'Run `npx arkgate agents-md --check` (or --write) so AGENTS.md matches the package projection.',
+  });
+  checks.push({
+    id: 'status-mode',
+    ok: null,
+    detail: 'Run `npx arkgate status --json` and read honesty mode; incomplete facts never invent green residual.',
+  });
+  return {
+    schemaVersion: '1.0',
+    notAScore: true,
+    neverGateInput: true,
+    checks,
+    mcpNote:
+      'If you used Ark MCP this session: restart/retarget MCP after package bump so process arkgateVersion matches project install; always pass project.expectedRoot + expectedProjectId (WI01). Prefer project-local CLI until identity matched and versions align.',
+  };
+}
+
+export function formatSkillDriftHuman(skillDrift) {
+  if (!skillDrift) return [];
+  const lines = [
+    `Skill drift: ${skillDrift.skillCount} skill(s) — current ${skillDrift.current}, stale ${skillDrift.stale}, customized ${skillDrift.customized}, missing ${skillDrift.missing}, would refresh ${skillDrift.wouldRefresh}.`,
+  ];
+  if (skillDrift.note) lines.push(`  ${skillDrift.note}`);
+  return lines;
+}
+
+export function formatHostSelectionHuman(hostSelection) {
+  if (!hostSelection?.note) return [];
+  return [`Host selection: ${hostSelection.note}`];
+}
+
 function publicPlan(plan, overrides = {}) {
   const assets = plan.assets.map(
     ({ containerBeforeHash: _container, [AFTER_CONTENT]: _content, ...asset }) => asset
@@ -784,6 +970,17 @@ export function renderManagedUpgrade(plan, options = {}) {
   for (const line of formatManagedUpgradeSelfServiceHonesty(honesty)) {
     console.log(line);
   }
+  const skillDrift =
+    options.skillDrift ?? plan.skillDrift ?? buildSkillDriftSummary(plan);
+  for (const line of formatSkillDriftHuman(skillDrift)) {
+    console.log(line);
+  }
+  const hostSelection =
+    options.hostSelection ?? plan.hostSelection ?? buildHostSelectionHonesty(plan);
+  for (const line of formatHostSelectionHuman(hostSelection)) {
+    console.log(line);
+  }
+  // FX08: whatsNew always on preview/apply human path (including nothing-to-apply).
   const whatsNew = plan.whatsNew ?? buildUpgradeWhatsNewSuggestions();
   for (const line of formatUpgradeWhatsNewSuggestions(whatsNew)) {
     console.log(line);

package/bin/lib/rules-inventory.mjs

@@ -136,8 +136,29 @@ export function buildRulesInventory(input) {
             /_(?:OID|OIDS)$/i.test(name) ||
             /^(?:INT2|INT4|INT8|FLOAT4|FLOAT8|NUMERIC|DATE|TIME|TIMESTAMP|TIMESTAMPTZ|JSON|JSONB|UUID)OID$/i.test(name) ||
             /(?:^|_)(?:SCHEMA|PROTOCOL|RESOLVER|FORMAT)_(?:URL|URI|VERSION|ID|IDENTITY)$/i.test(name);
+        /**
+         * FX09 — pure UX copy / error-message string constants crowd inventory pilots.
+         * Downrank (skip) sentence-like strings and message-named identifiers; keep
+         * numeric thresholds and domain status tokens for adopt/contract pilots.
+         */
+        const isUxMessageConstant = (name, rawValue) => {
+            if (/^(?:ERROR|SUCCESS|WARNING|INFO|HINT|HELP|EMPTY|TOAST|SNACK|ALERT|BANNER|DIALOG|MODAL|TOOLTIP|CAPTION|SUBTITLE|HEADLINE|USER|UI|DISPLAY|FEEDBACK)_(?:MSG|MESSAGE|TEXT|COPY|LABEL|TITLE|BODY|DESC|DESCRIPTION|HINT|HELP)?/i.test(name) ||
+                /_(?:MSG|MESSAGE|TEXT|COPY|TOAST|SNACK|ALERT|BANNER|CAPTION|HINT|HELP_TEXT|ERROR_TEXT|EMPTY_TEXT|PLACEHOLDER_TEXT|USER_MESSAGE|FEEDBACK)$/i.test(name)) {
+                return true;
+            }
+            const unquoted = rawValue.replace(/^['"]|['"]$/g, '');
+            // Sentence-like string values (spaces or terminal punctuation) are UX copy,
+            // not behavioral business limits — unless the name is a clear domain status seed.
+            if (/^['"]/.test(rawValue) &&
+                (/\s/.test(unquoted) || /[.!?…]$/.test(unquoted)) &&
+                !/^(?:STATUS|STATE|PHASE|ROLE|TYPE|KIND|ORDER|PAYMENT|CART|INVOICE|POLICY)_[A-Z0-9_]+$/i.test(name)) {
+                return true;
+            }
+            return false;
+        };
         while ((magic = magicRe.exec(content)) !== null) {
             const name = magic[2];
+            const rawValue = magic[3] ?? '';
             // With governed layer evidence, generic Tooling/Kernel constants are not
             // business-rule candidates. Controller-shaped boundaries stay eligible
             // because business policy can leak into them.
@@ -145,6 +166,8 @@ export function buildRulesInventory(input) {
                 continue;
             if (isInfraMagicName(name))
                 continue;
+            if (isUxMessageConstant(name, rawValue))
+                continue;
             // P2-N: skip remaining ALL_CAPS noise only on clear UI chrome (not all of app/).
             if (isUiChrome && !isDomain)
                 continue;