arkgate 4.6.7 → 4.7.0

package/dist/eslint/index.js

@@ -1,3 +1,7 @@
-import R from"fs";import p from"path";var J=new Map;function X(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function N(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}function Ie(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}function w(e){let t=J.get(e);if(t)return t;let r=N(e),n=Ie(r),s="",o=0;for(let c=0;c<r.length;c+=1){let g=r[c];g==="\\"&&c+1<r.length?(s+=X(r[c+1]),c+=1):g==="*"?r[c+1]==="*"?r[c+2]==="/"?(s+="(?:.*/)?",c+=2):(s+=".*",c+=1):s+="[^/]*":g==="?"?s+="[^/]":g==="{"&&n?(s+="(?:",o+=1):g==="}"&&n&&o>0?(s+=")",o-=1):g===","&&n&&o>0?s+="|":s+=X(g)}let a=new RegExp(`^${s}$`);return J.set(e,a),a}function ke(e){return N(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}function Q(e,t){let r=N(String(e)),n=ke(r),s=r.replace(/\*/g,"").length,o=n.length*1e4+s;if(t==null||t==="")return o;let a=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let c=0,g=-1;for(let f of n){let d=-1;for(let i=c;i<a.length;i+=1)if(a[i]===f){d=i;break}if(d<0)return o;g=d,c=d+1}return(g+1)*1e6+n.length*1e4+s}function E(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(a=>w(a).test(r))){for(let a of o.patterns??[])if(w(a).test(r)){let c=Q(a,r);c>s&&(s=c,n=o.name)}}return n}function Z(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}function Re(e){let t=new Set;for(let r of e??[]){let s=N(String(r)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let a=s[o];if((a==="**"||a==="*")&&o>0){let c=s[o-1];c&&!c.includes("*")&&!c.includes("{")&&!c.includes("}")&&t.add(c)}}}return[...t]}function Se(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return Re(n?.patterns)}function xe(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}function $(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let o=n?.fromPath,a=n?.toPath,c=Se(s,t,n?.layers),g=o&&a?Z(o,c):void 0,f=o&&a?Z(a,c):void 0;if(xe({fromPath:o,toPath:a,folderCount:c.length,fromSlice:g,toSlice:f}))return s;continue}if(t!==r)return s}}function ee(e,t,r,n){return $(e,t,r,n)!==void 0}var Ee=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function Le(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:Ee,...t]}function te(e,t){let r=String(e).split(/[/\\]/).join("/");return Le(t).some(n=>w(n).test(r))}var re=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),Ce=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),at=Object.freeze(Object.keys(Ce).sort()),j=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),we=Object.freeze({process:Object.freeze(["process","node:process"])});function ne(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=j[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=j[n];if(s)return s;let o=e.indexOf("/",r+1);return o<0?null:j[e.slice(0,o)]??null}function D(e,t){for(let r of t)if(we[r]?.includes(e))return r;return null}function se(e){if(e?.pure===!0)return[...re].sort();let r=(e?.capabilities?.deny??[]).filter(n=>re.includes(n));return[...new Set(r)].sort()}var v="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",ie=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Ne=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function Oe(){let e=[];for(let t of ie)for(let r of ie)t===r||Ne.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}var ae=Oe(),V=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"}],I={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},oe={$schema:"https://json-schema.org/draft/2020-12/schema",$id:v,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:v,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.1",default:"1.1"},name:{type:"string",minLength:1},include:{...I,minItems:1,default:["src"]},exclude:{...I,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:ae,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...I,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},stewards:{...I,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...I,minItems:1},exclude:I,intentPrefixes:I,description:{type:"string",minLength:1},forbiddenGlobals:I,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...I,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}}}},k=class extends Error{issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
+import x from"fs";import g from"path";var fe=new Map;function ge(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function $(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}function tt(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}function _(e){let t=fe.get(e);if(t)return t;let r=$(e),n=tt(r),s="",i=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=ge(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",i+=1):l==="}"&&n&&i>0?(s+=")",i-=1):l===","&&n&&i>0?s+="|":s+=ge(l)}let o=new RegExp(`^${s}$`);return fe.set(e,o),o}function rt(e){return $(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}function ye(e,t){let r=$(String(e)),n=rt(r),s=r.replace(/\*/g,"").length,i=n.length*1e4+s;if(t==null||t==="")return i;let o=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let a=0,l=-1;for(let d of n){let u=-1;for(let c=a;c<o.length;c+=1)if(o[c]===d){u=c;break}if(u<0)return i;l=u,a=u+1}return(l+1)*1e6+n.length*1e4+s}function S(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let i of t??[])if(!(i.exclude??[]).some(o=>_(o).test(r))){for(let o of i.patterns??[])if(_(o).test(r)){let a=ye(o,r);a>s&&(s=a,n=i.name)}}return n}function me(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}function nt(e){let t=new Set;for(let r of e??[]){let s=$(String(r)).split("/").filter(Boolean);for(let i=0;i<s.length;i+=1){let o=s[i];if((o==="**"||o==="*")&&i>0){let a=s[i-1];a&&!a.includes("*")&&!a.includes("{")&&!a.includes("}")&&t.add(a)}}}return[...t]}function st(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return nt(n?.patterns)}function ot(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}function Y(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let i=n?.fromPath,o=n?.toPath,a=st(s,t,n?.layers),l=i&&o?me(i,a):void 0,d=i&&o?me(o,a):void 0;if(ot({fromPath:i,toPath:o,folderCount:a.length,fromSlice:l,toSlice:d}))return s;continue}if(t!==r)return s}}function he(e,t,r,n){return Y(e,t,r,n)!==void 0}var it=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function at(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:it,...t]}function Re(e,t){let r=String(e).split(/[/\\]/).join("/");return at(t).some(n=>_(n).test(r))}var Ae=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),lt=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),Cr=Object.freeze(Object.keys(lt).sort()),J=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ct=Object.freeze({process:Object.freeze(["process","node:process"])});function ke(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=J[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=J[n];if(s)return s;let i=e.indexOf("/",r+1);return i<0?null:J[e.slice(0,i)]??null}function X(e,t){for(let r of t)if(ct[r]?.includes(e))return r;return null}function be(e){if(e?.pure===!0)return[...Ae].sort();let r=(e?.capabilities?.deny??[]).filter(n=>Ae.includes(n));return[...new Set(r)].sort()}var Q="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Se=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],ut=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function dt(){let e=[];for(let t of Se)for(let r of Se)t===r||ut.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}var Ie=dt(),ee=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"}],b={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Ee={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Q,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Q,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.2",default:"1.2"},name:{type:"string",minLength:1},include:{...b,minItems:1,default:["src"]},exclude:{...b,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Ie,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...b,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},stewards:{...b,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...b,minItems:1},exclude:b,intentPrefixes:b,description:{type:"string",minLength:1},forbiddenGlobals:b,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...b,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},arkRun:{type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...b,default:[]},managedLayers:{...b,default:[]},requireDeclarations:{type:"boolean",default:!0}}}}},E=class extends Error{issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
 ${r.map(n=>`- ${n.path}: ${n.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function le(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function O(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}function S(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function _e(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}function L(e,t,r,n,s){if(t.$ref){let o=_e(t.$ref,n);if(!o){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}L(e,o,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!le(e)){s.push({path:r,message:`must be an object; received ${S(e)}`});return}let o=t.properties??{};for(let a of t.required??[])e[a]===void 0&&s.push({path:O(r,a),message:"is required"});if(t.additionalProperties===!1)for(let a of Object.keys(e))a in o||s.push({path:O(r,a),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let a=t.additionalProperties;for(let c of Object.keys(e))c in o||L(e[c],a,O(r,c),n,s)}for(let[a,c]of Object.entries(o))e[a]!==void 0&&L(e[a],c,O(r,a),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${S(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(a=>JSON.stringify(a));new Set(o).size!==o.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((o,a)=>L(o,t.items,`${r}[${a}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${S(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${S(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${S(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}function Te(e){return{...e,$schema:e.$schema===void 0?v:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.1":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?ae.map(t=>({...t})):e.rules}}function Pe(){let e=new Set(["1.1"]);for(let t of V)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}function $e(e,t="ark.config.json"){if(!le(e))throw new k(t,[{path:"$",message:`must be an object; received ${S(e)}`}]);let r=Pe(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new k(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.1`}]);if(n!=="unversioned"&&!r.has(n))throw new k(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.1`}]);let s=n,o={...e},a=0;for(;s!=="1.1"&&a<V.length+1;){a+=1;let g=V.find(f=>f.from===s);if(!g)throw new k(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected 1.1`}]);s=g.to,o.schemaVersion=s}if(s!=="1.1")throw new k(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.1`}]);let c=n==="unversioned"?"unversioned":n==="1.0"?"1.0":null;return{candidate:Te(o),migratedFrom:c}}function je(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=$e(e,t),s=[];if(L(r,oe,"$",oe,s),s.length>0)throw new k(t,s);return{config:r,migratedFrom:n}}function ce(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new k(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return je(r,t)}var De=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,ve=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ve=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Ke(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return De.test(r)?"pure-shared":n==="PersistenceAdapters"&&(ve.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":Ve.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}function de(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Ke(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}var Me="docs/diagnostics.md";function y(e){return typeof e=="string"&&e.length>0?e:void 0}function pe(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}function He(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,s=typeof e.toLayer=="string"?e.toLayer:void 0,o=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",s??"",o??""].join("|")}function Fe(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}function Ue(e){return`${Me}#${e}`}function Be(e,t,r){if(e==="LAYER_IMPORT_VIOLATION")return de({ruleId:e,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:r.targetTypeOnlyExports===!0,namedBindingsTypeOnly:r.namedBindingsTypeOnly===!0,peerIsolation:r.peerIsolation===!0,portProofEligible:r.portProofEligible===!0,fromLayer:y(t.fromLayer)??void 0,toLayer:y(t.toLayer)??void 0,target:y(t.target)??y(r.target)??void 0});if(e==="FORBIDDEN_GLOBAL")return`Inject ${t.target??"the capability"} through a port, test at the public interface, then preflight again.`;if(e==="CAPABILITY_VIOLATION")return`Define a ${y(r.capability)??"capability"} port in ${t.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;if(e==="CIRCULAR_DEPENDENCY")return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";if(e==="RAW_EVENT_PUBLISH")return"Publish through a registered intent creator, then run Ark again.";if(e==="PUBLISH_MISSING_SOURCE")return"Add metadata.source to the publish call, then run Ark again.";if(e==="ARKRULE_STRUCTURE"||e==="ARKRULE_INVARIANT"||e==="INVARIANT_UNCOVERED"||e.startsWith("ARKRULE_")){let n=t.arkruleSource??"arkrules/<Layer>.json";return`Fix the structure or invariant for ${t.arkruleId??"the ArkRule"} (declared in ${n}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`}return`Resolve ${e} without weakening ark.config.json, then run Ark again.`}function ue(e,t="error",r){let n=y(e.ruleId)??y(e.code)??"ARK_UNKNOWN",s=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,o={...y(e.target)?{target:y(e.target)}:{},...y(e.fromLayer)?{fromLayer:y(e.fromLayer)}:{},...y(e.toLayer)?{toLayer:y(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...y(e.capability)?{capability:y(e.capability)}:{},...y(e.edgeKind)?{edgeKind:y(e.edgeKind)}:{},...y(e.arkruleId)?{arkruleId:y(e.arkruleId)}:{},...y(e.arkruleSource)?{arkruleSource:y(e.arkruleSource)}:{}},a=r??He(e),c=Fe(a);return{ruleId:n,severity:s,message:y(e.message)??n,location:{file:y(e.file)??"<unknown>",line:pe(e.line,1),column:pe(e.column,1)},evidence:o,nextAction:y(e.nextAction)??Be(n,o,e),findingRef:c,targetKey:a,docsCodePath:Ue(n)}}var fe={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},ft=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Ge(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function K(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Ge(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:fe.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:fe.PUBLISH_MISSING_SOURCE}),t}function C(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}function x(e,t,r,n,s){let o=ue({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...s?{data:s}:{},diagnostic:o}),o}function F(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=p.dirname(p.resolve(e));for(;;){let r=p.join(t,"ark.config.json");if(R.existsSync(r))return r;let n=p.dirname(t);if(n===t)return null;t=n}}var ge=new Map;function U(e){if(!R.existsSync(e))return null;let t=R.readFileSync(e,"utf8"),r=ge.get(e);if(r?.source===t)return r.config;let n=ce(t,e).config;return ge.set(e,{source:t,config:n}),n}function B(e,t){return(e.include??[]).some(n=>{let s=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return s==="."||t===s||t.startsWith(`${s}/`)})&&!te(t,e)}function me(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,p.join(e,"index.ts"),p.join(e,"index.tsx"),p.join(e,"index.js")];for(let r of t)try{if(R.existsSync(r)&&R.statSync(r).isFile())return r}catch{}return null}function qe(e){let t=p.resolve(e),r=null;for(;;){let f=p.join(t,"tsconfig.json");if(R.existsSync(f)){r=f;break}let d=p.dirname(t);if(d===t)break;t=d}if(!r)return{baseUrl:e,aliases:[]};let n=f=>{try{let d=R.readFileSync(f,"utf8");return d=d.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(d)}catch{return null}},s=(f,d)=>{if(d>4)return{};let i=n(f);if(!i)return{};let l=i.compilerOptions??{},u=l.baseUrl,m=l.paths,h=i.extends;if(typeof h=="string"&&!h.startsWith("@")){let b=p.resolve(p.dirname(f),h.endsWith(".json")?h:`${h}.json`);if(R.existsSync(b)){let A=s(b,d+1);u=u??A.baseUrl,m={...A.paths??{},...m??{}}}}return{baseUrl:u,paths:m}},o=s(r,0),a=p.dirname(r),c=p.resolve(a,o.baseUrl||"."),g=[];for(let[f,d]of Object.entries(o.paths||{})){if(!Array.isArray(d)||d.length===0)continue;let i=f.replace(/\*$/,"");i&&g.push({from:i,to:String(d[0]).replace(/\*$/,"")})}return g.sort((f,d)=>d.from.length-f.from.length),{baseUrl:c,aliases:g}}function We(e,t){if(!t.startsWith("."))return null;let r=p.resolve(p.dirname(e),t);return me(r)}function Ye(e,t,r){if(!t)return null;if(t.startsWith("."))return We(e,t);let n=r||p.dirname(e),{baseUrl:s,aliases:o}=qe(n),a=o.find(g=>t.startsWith(g.from));if(!a)return null;let c=p.resolve(s,`${a.to}${t.slice(a.from.length)}`);return me(c)}function P(e){return typeof e?.value=="string"?e.value:void 0}function G(e){return e?.name??P(e)}function q(e){return e.sourceCode??e.getSourceCode?.()}function ye(e,t){let r=q(e)?.getScope?.(t);for(;r;){let n=r.references?.find(s=>s.identifier===t);if(n)return n;r=r.upper??void 0}}function _(e,t,r){let n=ye(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let s=q(e)?.getScope?.(t);for(;s;){let o=s.set?.get(r);if(o)return(o.defs?.length??0)>0;s=s.upper??void 0}return!1}function ze(e,t){let r=ye(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}function he(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=he(e.object),n=G(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}function Je(e){return G(e.callee?.property)}function be(e,t){return e?.properties?.find(r=>G(r.key)===t)}function T(e,t){return be(e,t)!==void 0}function Xe(e){let t=be(e,"metadata")?.value;return T(t,"source")}function Ae(e){return Je(e)==="publish"}function M(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}function Ze(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}function Qe(e){let t=Ze(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!M(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!M(n))return!1;r=!0;continue}return!1}}return r}var et={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=C(e),r=F(t),n=r?U(r):null,s=r?p.dirname(r):null,o=a=>{let c=P(a.source);if(c&&n&&s&&t){let g=p.isAbsolute(t)?t:p.resolve(t),f=p.relative(s,g).split(p.sep).join("/");if(!B(n,f))return;let d=E(f,n.layers);if(!d)return;let i=Ye(g,c,s);if(!i)return;let l=p.relative(s,i).split(p.sep).join("/");if(l.startsWith(".."))return;let u=E(l,n.layers);if(!u)return;let m={fromPath:f,toPath:l,layers:n.layers},h=$(n.rules,d,u,m);if(h||ee(n.rules,d,u,m)){let b=a.type?.startsWith("Export")?"export":"import",A=M(a),W=!!h?.peerIsolation,Y=A&&!W,z=h?.message??`${d} must not ${b} ${u}.`;x(e,a,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:f,fromLayer:d,toLayer:u,target:l,edgeKind:b,...W?{peerIsolation:!0}:{},...A?{typeOnly:!0}:{},...Y?{severity:"warning"}:{},...Qe(a)?{sourcePureTypeModule:!0}:{},message:Y?`${z} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:z},{fromLayer:d,toLayer:u,specifier:c})}return}};return{ImportDeclaration:o,ExportNamedDeclaration:o,ExportAllDeclaration:o}}},tt={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=P(r),s=K({publishCall:Ae(t),rawIntentName:n,objectHasIntent:T(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(s.some(o=>o.ruleId==="RAW_EVENT_PUBLISH")){let o=s.find(a=>a.ruleId==="RAW_EVENT_PUBLISH");x(e,t,"rawPublish",{...o,file:C(e)})}}}}},rt={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],o=K({publishCall:Ae(t),rawIntentName:P(r),objectHasIntent:T(r,"intent"),arkPublishCandidate:!0,hasSource:Xe(r)||T(n,"source")}).find(a=>a.ruleId==="PUBLISH_MISSING_SOURCE");o&&x(e,t,"missingSource",{...o,file:C(e)})}}}},nt={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=C(e),r=e.options?.[0],n=F(t),s=n?U(n):null,o=n?p.dirname(n):null,a=null,c="this layer";if(s&&o&&t){let i=p.isAbsolute(t)?t:p.resolve(t),l=p.relative(o,i).split(p.sep).join("/");if(!B(s,l))return{};let u=s.layers?.find(m=>m.name===E(l,s.layers));u?.forbiddenGlobals?.length?(a=new Set(u.forbiddenGlobals),c=u.name):a=null}else r?.globals&&(a=new Set(r.globals));if(!a)return{};let g=typeof q(e)?.getScope=="function",f=(i,l)=>{let u=p.isAbsolute(t)?t:p.resolve(t),m=o?p.relative(o,u).split(p.sep).join("/"):t;x(e,i,s?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:m,fromLayer:c,target:l,message:`${c} must not use the ambient global "${l}".`},{name:l,layer:c})},d=(i,l,u,m)=>{if(u||typeof l!="string")return;let h=D(l,a);if(!h)return;let b=p.isAbsolute(t)?t:p.resolve(t),A=o?p.relative(o,b).split(p.sep).join("/"):t;x(e,i,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:A,fromLayer:c,target:l,edgeKind:m,message:`${c} must not use module "${l}" because it is the import form of forbidden global "${h}".`},{layer:c,name:h,specifier:l,importKind:m})};return{MemberExpression(i){if(i.parent?.type==="MemberExpression"&&i.parent.object===i)return;let l=he(i);if(!l||_(e,l.root,l.segments[0]))return;let u=l.segments[0]==="globalThis",m=u?l.segments.slice(1):l.segments,h;for(let b=m.length;b>=(u?1:2);b-=1){let A=m.slice(0,b).join(".");if(a.has(A)){h=A;break}}h?f(i,h):!g&&a.has(l.segments[0])&&f(i,l.segments[0])},CallExpression(i){let l=i;if(l.callee?.type==="Identifier"&&l.callee.name==="require"&&l.arguments?.[0]?.type==="Literal"&&!_(e,i,"require")&&d(i,l.arguments[0].value,!1,"require"),g)return;let u=l.callee?.type==="Identifier"?l.callee.name:void 0;u&&a.has(u)&&f(i,u)},ImportDeclaration(i){let l=i,u=(l.specifiers??[]).filter(h=>h.type==="ImportSpecifier"),m=u.length>0&&u.length===(l.specifiers??[]).length&&u.every(h=>h.importKind==="type");d(i,l.source?.value,l.importKind==="type"||m,"import")},ImportExpression(i){let l=i;l.source?.type==="Literal"&&d(i,l.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(i){let l=i;d(i,l.moduleReference?.expression?.value,l.importKind==="type"||l.isTypeOnly===!0,"require")},ExportNamedDeclaration(i){let l=i;if(!l.source)return;let u=l.specifiers??[],m=u.length>0&&u.every(h=>h.exportKind==="type");d(i,l.source.value,l.exportKind==="type"||m,"export")},ExportAllDeclaration(i){let l=i;d(i,l.source?.value,l.exportKind==="type","export")},NewExpression(i){if(g)return;let l=i.callee?.type==="Identifier"?i.callee.name:void 0;l&&a.has(l)&&f(i,l)},Identifier(i){!g||!i.name||!a.has(i.name)||!ze(e,i)||_(e,i,i.name)||f(i,i.name)}}}},st={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=C(e),r=F(t),n=r?U(r):null,s=r?p.dirname(r):null;if(!n||!s||!t)return{};let o=p.isAbsolute(t)?t:p.resolve(t),a=p.relative(s,o).split(p.sep).join("/");if(!B(n,a))return{};let c=n.layers?.find(d=>d.name===E(a,n.layers));if(!c)return{};let g=new Set(se(c));if(g.size===0)return{};let f=(d,i,l,u)=>{if(l||typeof i!="string"||D(i,c.forbiddenGlobals??[]))return;let m=ne(i);!m||!g.has(m)||x(e,d,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:a,fromLayer:c.name,target:i,capability:m,edgeKind:u,message:`${c.name} denies the ${m} capability; found import of "${i}".`},{layer:c.name,capability:m,specifier:i})};return{ImportDeclaration(d){let i=d,l=(i.specifiers??[]).filter(m=>m.type==="ImportSpecifier"),u=l.length>0&&l.length===(i.specifiers??[]).length&&l.every(m=>m.importKind==="type");f(d,i.source?.value,i.importKind==="type"||u,"import")},ImportExpression(d){let i=d;i.source?.type==="Literal"&&f(d,i.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(d){let i=d;f(d,i.moduleReference?.expression?.value,i.importKind==="type"||i.isTypeOnly===!0,"require")},ExportNamedDeclaration(d){let i=d;if(!i.source)return;let l=i.specifiers??[],u=l.length>0&&l.every(m=>m.exportKind==="type");f(d,i.source.value,i.exportKind==="type"||u,"export")},ExportAllDeclaration(d){let i=d;f(d,i.source?.value,i.exportKind==="type","export")},CallExpression(d){let i=d;i.callee?.type==="Identifier"&&i.callee.name==="require"&&i.arguments?.[0]?.type==="Literal"&&!_(e,d,"require")&&f(d,i.arguments[0].value,!1,"require")}}}},it={"no-domain-infra-imports":et,"no-raw-event-publish":tt,"require-publish-source":rt,"no-forbidden-globals":nt,"no-denied-capabilities":st},H={rules:it};H.configs={recommended:{plugins:{ark:H},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error"}}};var Rt=H;export{Rt as default,F as findConfigPath,w as globToRegExp,ee as isEdgeDenied,E as layerForRelativePath,U as loadArkConfig,st as noDeniedCapabilities,et as noDomainInfraImports,nt as noForbiddenGlobals,tt as noRawEventPublish,Q as patternSpecificity,H as plugin,qe as readTsconfigPathAliases,rt as requirePublishSource,Ye as resolveImportSpecifier,We as resolveRelativeImport};
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function D(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function U(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}function w(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function pt(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}function O(e,t,r,n,s){if(t.$ref){let i=pt(t.$ref,n);if(!i){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}O(e,i,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(i=>Object.is(i,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!D(e)){s.push({path:r,message:`must be an object; received ${w(e)}`});return}let i=t.properties??{};for(let o of t.required??[])e[o]===void 0&&s.push({path:U(r,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in i||s.push({path:U(r,o),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let o=t.additionalProperties;for(let a of Object.keys(e))a in i||O(e[a],o,U(r,a),n,s)}for(let[o,a]of Object.entries(i))e[o]!==void 0&&O(e[o],a,U(r,o),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${w(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let i=e.map(o=>JSON.stringify(o));new Set(i).size!==i.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((i,o)=>O(i,t.items,`${r}[${o}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${w(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${w(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${w(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}function ft(e){return D(e)?{...e,mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations}:e}function gt(e){let t={...e,$schema:e.$schema===void 0?Q:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.2":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Ie.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=ft(e.arkRun)),t}function mt(e,t){let r=e.arkRun;if(r===void 0||!D(r))return;let n=new Set;if(Array.isArray(e.layers))for(let i of e.layers)D(i)&&typeof i.name=="string"&&i.name.length>0&&n.add(i.name);let s=r.managedLayers;if(Array.isArray(s)&&s.forEach((i,o)=>{typeof i=="string"&&i.length>0&&!n.has(i)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(i)} is not declared in layers[]`})}),r.mode==="enforced"){let i=r.compositionRoots;(!Array.isArray(i)||i.length===0)&&t.push({path:"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one composition root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}function yt(e){return e==="1.2"?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"?e:null}function ht(){let e=new Set(["1.2"]);for(let t of ee)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}function Rt(e,t="ark.config.json"){if(!D(e))throw new E(t,[{path:"$",message:`must be an object; received ${w(e)}`}]);let r=ht(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.2`}]);if(n!=="unversioned"&&!r.has(n))throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.2`}]);let s=n,i={...e},o=0;for(;s!=="1.2"&&o<ee.length+1;){o+=1;let a=ee.find(l=>l.from===s);if(!a)throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected 1.2`}]);s=a.to,i.schemaVersion=s}if(s!=="1.2")throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.2`}]);return{candidate:gt(i),migratedFrom:yt(n)}}function At(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=Rt(e,t),s=[];if(O(r,Ee,"$",Ee,s),mt(r,s),s.length>0)throw new E(t,s);return{config:r,migratedFrom:n}}function xe(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new E(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return At(r,t)}var kt=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,bt=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,St=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Et(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return kt.test(r)?"pure-shared":n==="PersistenceAdapters"&&(bt.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":St.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}function It(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Et(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}function xt(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}function Nt(e){let t=xt(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from @arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from @arkgate/runtime (never a removed arkgate/runtime shim) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from @arkgate/runtime, never a removed arkgate/runtime shim, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from @arkgate/runtime, never a removed arkgate/runtime shim, then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}function H(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return It(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Nt(e);default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}var Ct="docs/diagnostics.md";function y(e){return typeof e=="string"&&e.length>0?e:void 0}function Ne(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}function vt(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,s=typeof e.toLayer=="string"?e.toLayer:void 0,i=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",s??"",i??""].join("|")}function _t(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}function wt(e){return`${Ct}#${e}`}function Lt(e,t,r){return H({ruleId:e,target:y(t.target)??y(r.target)??void 0,fromLayer:y(t.fromLayer)??void 0,toLayer:y(t.toLayer)??void 0,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:t.targetTypeOnlyExports===!0,namedBindingsTypeOnly:t.namedBindingsTypeOnly===!0,portProofEligible:t.portProofEligible===!0,peerIsolation:t.peerIsolation===!0,sourcePureTypeModule:t.sourcePureTypeModule===!0,edgeKind:y(t.edgeKind)??void 0,capability:y(t.capability)??y(r.capability)??void 0,arkruleId:y(t.arkruleId)??void 0,arkruleSource:y(t.arkruleSource)??void 0})}function Ce(e,t="error",r){let n=y(e.ruleId)??y(e.code)??"ARK_UNKNOWN",s=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,i={...y(e.target)?{target:y(e.target)}:{},...y(e.fromLayer)?{fromLayer:y(e.fromLayer)}:{},...y(e.toLayer)?{toLayer:y(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...y(e.capability)?{capability:y(e.capability)}:{},...y(e.edgeKind)?{edgeKind:y(e.edgeKind)}:{},...y(e.arkruleId)?{arkruleId:y(e.arkruleId)}:{},...y(e.arkruleSource)?{arkruleSource:y(e.arkruleSource)}:{}},o=r??vt(e),a=_t(o);return{ruleId:n,severity:s,message:y(e.message)??n,location:{file:y(e.file)??"<unknown>",line:Ne(e.line,1),column:Ne(e.column,1)},evidence:i,nextAction:y(e.nextAction)??Lt(n,i,e),findingRef:a,targetKey:o,docsCodePath:wt(n)}}var ve={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},Fr=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Tt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function te(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Tt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ve.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ve.PUBLISH_MISSING_SOURCE}),t}import $e from"fs";import C from"path";var Ft=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Ot=new Set(Ft),Dt=new Set(["AggregateError","Array","ArrayBuffer","BigInt64Array","BigUint64Array","Boolean","DataView","Date","Error","EvalError","FinalizationRegistry","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Number","Object","Promise","Proxy","RangeError","ReferenceError","RegExp","Set","SharedArrayBuffer","String","Symbol","SyntaxError","TypeError","URIError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","WeakRef","WeakSet"]),Pt=new Set(["Array","Atomics","Buffer","JSON","Math","Number","Object","Promise","Reflect","String","console","fs","path","url","util"]);function L(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}var Kt=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],re=new Set(Kt);function Le(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(re.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(re.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:re.has(e.slice(0,n))}function _e(e){if(Ot.has(e))return"factory";switch(e){case"publisher":return"publisher";case"publish":return"publish";case"raise":case"raiseAsync":return"raise";case"send":case"sendTo":return"send";case"subscribe":return"subscribe";case"registerHandler":return"register-handler";case"resolve":return"resolve";case"resolveSingleton":return"resolve-singleton";default:return}}function Te(e,t){let r=1;for(let n=0;n<t;n+=1)e.charCodeAt(n)===10&&(r+=1);return r}function ne(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:\\])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}function Mt(e,t){let r=e.slice(t),n=/^\s*(['"])((?:\\.|[^\\])*?)\1/.exec(r);if(!n)return;let s=n[2]??"";return s.length>0?s:void 0}function we(e,t,r){let n=Math.max(0,t-r.length-8),s=e.slice(n,t);return new RegExp(`\\b${r}\\s+$`).test(s)}function j(e,t){let r=/\b(?:import|export)(\s+type)?\s+([\s\S]*?)\s+from\s*['"]([^'"]+)['"]/g,n;for(;(n=r.exec(e))!==null;)n[1]||t(n[2]??"",n[3]??"")}function Fe(e,t){j(ne(e),t)}function $t(e){let t=new Map,r=new Set;return j(e,(n,s)=>{if(!L(s))return;let i=/\*\s+as\s+([A-Za-z_][A-Za-z0-9_]*)/.exec(n);i?.[1]&&r.add(i[1]);let o=/^([A-Za-z_][A-Za-z0-9_]*)\s*(?:,|$)/.exec(n.trim());o?.[1]&&t.set(o[1],o[1]);let a=/\{([^}]*)\}/.exec(n);if(a?.[1])for(let l of a[1].split(",")){let d=l.trim();if(!d||d.startsWith("type "))continue;let u=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(d);if(u){t.set(u[2],u[1]);continue}let c=/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(d);c?.[1]&&t.set(c[1],c[1])}}),{named:t,namespaces:r}}function Ut(e,t){let r=new Set(t);return j(e,(n,s)=>{let i=/\{([^}]*)\}/.exec(n);if(i?.[1])for(let o of i[1].split(",")){let a=o.trim();if(!a||a.startsWith("type "))continue;let l=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(a),d=l?.[2]??/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(a)?.[1],u=l?.[1]??d;!d||!u||!/^[A-Z]/.test(u)||(L(s)||t.has(u)||t.has(d))&&(r.add(d),r.add(u))}}),r}function Ht(e,t){let r;return j(e,(n,s)=>{!r&&new RegExp(`\\b${t}\\b`).test(n)&&(r=s)}),r}function V(e,t){let r=ne(t),n=$t(r),s=[],i=/\b([A-Za-z_][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,o;for(;(o=i.exec(r))!==null;){let a=o[1],l=o.index;if(we(r,l,"function")||we(r,l,"class"))continue;let u=r.slice(0,l).match(/([A-Za-z_][A-Za-z0-9_]*)\s*\.\s*$/)?.[1],c=n.named.get(a)??a,p=_e(c)??_e(a);if(!p)continue;let f=n.named.has(a)||u!==void 0&&n.namespaces.has(u);if(p!=="factory"&&(!f&&u===void 0||u&&Pt.has(u)&&!f))continue;let m=Mt(r,l+o[0].length);s.push({file:e,line:Te(t,l),kind:p,callee:a,viaImport:f,...u?{receiver:u}:{},...m?{nameLiteral:m}:{}})}return s}function se(e,t,r){let n=ne(t),s=Ut(n,r),i=[],o=/\bnew\s+(?:[A-Za-z_][A-Za-z0-9_]*\s*\.\s*)*([A-Z][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,a;for(;(a=o.exec(n))!==null;){let l=a[1];if(Dt.has(l)||!s.has(l))continue;let d=Ht(n,l);i.push({file:e,line:Te(t,a.index),typeName:l,...d?{importedFrom:d}:{}})}return i}function oe(e,t){let r=[],n=/export\s+(?:abstract\s+)?class\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?:extends\s+[^{]+)?(?:implements\s+[^{]+)?\{/g,s;for(;(s=n.exec(t))!==null;){let i=s[1],o=s.index+s[0].length,a=1,l=o;for(;l<t.length&&a>0;){let k=t[l];k==="{"?a+=1:k==="}"&&(a-=1),l+=1}let d=t.slice(o,l-1),u=d.split(`
+`).map(k=>/^\s*\/\//.test(k)||/^\s*\/\*|\*\//.test(k)?k:k.replace(/(?:public\s+|protected\s+)?readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g,"").replace(/(?:^|[\s;{])readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g," ")).join(`
+`),c=/(?:^|\n)\s*(?:public\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(u.replace(/(?:public\s+|private\s+|protected\s+|static\s+|async\s+|get\s+|set\s+)/g,""))&&/(?:^|\n)\s*(public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(u),p=/(?:^|\n)\s*public\s+(?!static|async|get|set|constructor|readonly)[a-zA-Z_]/.test(u)||/(?:^|[\n;])\s*[a-zA-Z_][a-zA-Z0-9_]*\s*:\s*[^=;\n]+[;=]/m.test(u.split(`
+`).filter(k=>!/^\s*(private|protected|static|constructor|get |set |async |\/)/.test(k)).join(`
+`)),f=/(?:^|[\n;{])\s*(?:public\s+)?set\s+[a-zA-Z_]/.test(d),m=/(?:^|[\n;{])\s*private\s+constructor\s*\(/.test(d),h=/(?:^|[\n;{])\s*(?:public\s+)?constructor\s*\(/.test(d)&&!m,R=/(?:^|[\n;{])\s*static\s+(?:async\s+)?(?:create|of|from|parse|build|make|new)\s*[<(]/.test(d)||/(?:^|[\n;{])\s*static\s+(?:async\s+)?[A-Za-z_][A-Za-z0-9_]*\s*\([^)]*\)\s*:\s*[A-Za-z_]/.test(d),A=[],K=new Set(["if","match","when"]),M=/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+|async\s+)*(?!constructor|get|set|static)([a-zA-Z_][a-zA-Z0-9_]*)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{/g,N;for(;(N=M.exec(d))!==null;){let k=N[1];if(K.has(k))continue;let de=N.index+N[0].length,Z=1,F=de;for(;F<d.length&&Z>0;)d[F]==="{"?Z+=1:d[F]==="}"&&(Z-=1),F+=1;let pe=d.slice(de,F-1);if(!/this\.\w+\s*=/.test(pe))continue;let et=/\b(ensureInvariants|assertInvariants|validate|publish|emit|raise|record)\b/.test(pe);A.push({name:k,referencesGuardOrPublish:et})}let Je=(d.match(/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+)?(?:async\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*\(/g)??[]).length,Xe=(u.match(/(?:^|[\n;])\s*(?:public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/g)??[]).length,Qe=Je<=1&&Xe>=2&&(p||c);r.push({file:e,className:i,exported:!0,hasPublicMutableFields:p||c,hasPublicSetters:f,hasPublicConstructor:h,hasStaticFactory:R,mutatingMethods:[...A],dataOnly:Qe})}return r}function jt(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}function Oe(e){let t=jt(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}var Vt=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Bt=new Set(Vt);function Gt(e){return Bt.has(e)}var De={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},zt="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Me(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}function qt(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}function I(e,t,r,n,s,i,o){let a=e.mode==="enforced"&&o;return{ruleId:De[t],sensor:t,message:s,file:r,line:n,...i?.fromLayer?{fromLayer:i.fromLayer}:{},...i?.target?{target:i.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:H({ruleId:De[t],fromLayer:i?.fromLayer,target:i?.target})}}function Wt(e,t){let r=[],n=[],s=[],i=[];for(let o of e)o.file===t&&(r.push(...o.uses),n.push(...o.reactsTo),s.push(...o.raises),i.push(...o.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(s),sends:new Set(i)}}function Pe(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}function Ke(e){return e==="subscribe"||e==="register-handler"}function Zt(e){return e==="resolve"||e==="resolve-singleton"}function Yt(e,t,r){let n=[],s=e.compositionRoots;if(s.length===0)return n.push(I(e,"arkrun-missing-root","ark.config.json",1,"ArkRun compositionRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let i=new Map;for(let o of t){let a=i.get(o.matchedRoot)??[];a.push(o),i.set(o.matchedRoot,a)}for(let o of s){let a=[...i.get(o)??[]].sort((d,u)=>d.file.localeCompare(u.file));if(a.length===0){n.push(I(e,"arkrun-missing-root","ark.config.json",1,`ArkRun composition root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},r));continue}if(a.some(d=>d.hasKernelFactory))continue;let l=a[0];n.push(I(e,"arkrun-missing-root",l.file,1,`ArkRun composition root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},r))}return n}function Jt(e,t,r,n,s){let i=new Map(t.map(a=>[a.name,a.intentPrefixes??[]])),o=[];for(let a of r){let l=a.specifier;if(!l||!L(l))continue;let d=n(a.from);d&&Me(d,i.get(d)??[])&&o.push(I(e,"arkrun-kernel-in-domain",a.from,a.line,`${d} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:d,target:l},s))}return o}function Xt(e,t,r,n,s,i){let o=new Set(e.managedLayers);if(o.size===0)return[];let a=new Map(t.map(u=>[u.name,u.intentPrefixes??[]])),l=new Set(n.filter(u=>u.hasKernelFactory).map(u=>u.file)),d=[];for(let u of r){if(l.has(u.file))continue;let c=s(u.file);!c||!o.has(c)||Me(c,a.get(c)??[])||d.push(I(e,"arkrun-direct-new",u.file,u.line,`${c} must not construct ${u.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:c,target:u.typeName},i))}return d}function Qt(e,t,r,n,s){let i=[],o=[];if(e.requireDeclarations!==!0)return{findings:i,completenessReasons:o};let a=new Set(e.managedLayers);if(a.size===0)return{findings:i,completenessReasons:o};for(let l of t){if(!Pe(l.kind)&&!Ke(l.kind)&&!Zt(l.kind))continue;let d=n(l.file);if(!d||!a.has(d))continue;if(!l.nameLiteral){e.mode==="enforced"&&o.push({code:zt,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let u=Wt(r,l.file);if(Pe(l.kind)){if(u.raises.has(l.nameLiteral)||u.sends.has(l.nameLiteral))continue;i.push(I(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:d,target:l.nameLiteral},s));continue}if(Ke(l.kind)){if(u.reactsTo.has(l.nameLiteral))continue;i.push(I(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:d,target:l.nameLiteral},s));continue}u.uses.has(l.nameLiteral)||i.push(I(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:d,target:l.nameLiteral},s))}return{findings:i,completenessReasons:o}}function er(e,t,r,n){let s=new Set(e.managedLayers);if(s.size===0)return[];let i=[];for(let o of t){if(o.typeOnly)continue;let a=o.specifier;if(!a||!Le(a))continue;let l=r(o.from);!l||!s.has(l)||i.push(I(e,"arkrun-transport-bypass",o.from,o.line,`${l} must not import broker/queue/emitter ${JSON.stringify(a)}; use the ArkRun kernel transport.`,{fromLayer:l,target:a},n))}return i}function tr(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=Oe(e.classification),n=Qt(t,e.kernelCalls,e.declarations,e.layerForFile,r),s=[...Yt(t,e.compositionRootHits,r),...Jt(t,e.layers,e.dependencies,e.layerForFile,r),...Xt(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...er(t,e.dependencies,e.layerForFile,r)].sort(qt),i=[...n.completenessReasons].sort((o,a)=>{let l=`${o.code}\0${o.file??""}\0${o.message}`,d=`${a.code}\0${a.file??""}\0${a.message}`;return l<d?-1:l>d?1:0});return{findings:s,completenessReasons:i}}function ie(e){return{findings:tr(e).findings.filter(r=>Gt(r.sensor)),completenessReasons:[]}}function rr(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}function He(e){try{return $e.existsSync(e)?$e.readFileSync(e,"utf8"):null}catch{return null}}function Ue(e,t){let r=e.lintedFilename(t),n=e.findConfigPath(r),s=n?e.loadArkConfig(n):null;if(!s?.arkRun||!n||!r)return null;let i=C.dirname(n),o=C.isAbsolute(r)?r:C.resolve(r),a=C.relative(i,o).split(C.sep).join("/");if(!e.sourceIsInAnalysisScope(s,a))return null;let l=S(a,s.layers);return l?{extra:s.arkRun,config:s,root:i,absFile:o,relFile:a,fromLayer:l}:null}function nr(e,t,r){let n=V(t,r).some(i=>i.kind==="factory"),s=[];for(let i of e.compositionRoots){try{if(!_(i).test(t))continue}catch{continue}s.push({file:t,matchedRoot:i,hasKernelFactory:n})}return s}function sr(e,t,r){let n=new Set(oe(t.relFile,r).map(s=>s.className));return Fe(r,(s,i)=>{if(L(i))return;let o=e.resolveImportSpecifier(t.absFile,i,t.root);if(!o)return;let a=C.relative(t.root,o).split(C.sep).join("/");if(a.startsWith(".."))return;let l=He(o);if(l!==null)for(let d of oe(a,l))n.add(d.className)}),n}function je(e,t,r,n,s,i){e.reportAdapterDiagnostic(t,r,n,{ruleId:s.ruleId,file:s.file,fromLayer:s.fromLayer,target:s.target,message:s.message,line:s.line,severity:s.severity,failsStrict:s.failsStrict,nextAction:s.nextAction},i)}function or(e){let t=e.callee;if(t?.type==="Identifier"&&t.name&&/^[A-Z]/.test(t.name))return t.name;let r=t?.property?.name;if(r&&/^[A-Z]/.test(r)&&t?.computed!==!0)return r}function ir(e,t){return e.type?.startsWith("Export")?"export":t}function ar(e,t,r,n,s){let i=(o,a,l,d)=>{if(typeof a!="string"||a.length===0)return;let u=o.loc?.start?.line??1,c={from:r.relFile,specifier:a,kind:d,typeOnly:l,line:u,resolution:"resolved-external"},{findings:p}=ie({arkRun:r.extra,layers:r.config.layers,kernelCalls:[],managedNews:[],compositionRootHits:[],declarations:[],dependencies:[c],layerForFile:f=>f===r.relFile?r.fromLayer:S(f,r.config.layers)});for(let f of p)f.sensor===n&&je(e,t,o,s,f,{fromLayer:f.fromLayer??r.fromLayer,specifier:a,target:f.target??a})};return{ImportDeclaration(o){let a=o,l=(a.specifiers??[]).filter(u=>u.type==="ImportSpecifier"),d=l.length>0&&l.length===(a.specifiers??[]).length&&l.every(u=>u.importKind==="type");i(o,a.source?.value,a.importKind==="type"||d||rr(o),"import")},ImportExpression(o){let a=o;a.source?.type==="Literal"&&i(o,a.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(o){let a=o;i(o,a.moduleReference?.expression?.value,a.importKind==="type"||a.isTypeOnly===!0,"require")},ExportNamedDeclaration(o){let a=o;if(!a.source)return;let l=a.specifiers??[],d=l.length>0&&l.every(u=>u.exportKind==="type");i(o,a.source.value,a.exportKind==="type"||d,ir(o,"export"))},ExportAllDeclaration(o){let a=o;i(o,a.source?.value,a.exportKind==="type","export")},CallExpression(o){let a=o;a.callee?.type==="Identifier"&&a.callee.name==="require"&&a.arguments?.[0]?.type==="Literal"&&!e.isLocallyBound(t,o,"require")&&i(o,a.arguments[0].value,!1,"require")}}}function lr(e,t,r){let n=He(r.absFile)??"",s=sr(e,r,n),i=se(r.relFile,n,s),{findings:o}=ie({arkRun:r.extra,layers:r.config.layers,kernelCalls:V(r.relFile,n),managedNews:i,compositionRootHits:nr(r.extra,r.relFile,n),declarations:[],dependencies:[],layerForFile:l=>l===r.relFile?r.fromLayer:S(l,r.config.layers)}),a=o.filter(l=>l.sensor==="arkrun-direct-new");return{NewExpression(l){let d=or(l);if(!d)return;let u=l.loc?.start?.line,c=a.find(p=>p.target===d&&(u===void 0||p.line===u))??a.find(p=>p.target===d);c&&je(e,t,l,"directNew",c,{fromLayer:c.fromLayer??r.fromLayer,typeName:d,target:c.target??d})}}}function Ve(e){let t=(r,n,s,i)=>({meta:{type:"problem",docs:{description:n},messages:{[s]:i},schema:[]},create(o){let a=Ue(e,o);return a?ar(e,o,a,r,s):{}}});return{noArkRunKernelInDomain:t("arkrun-kernel-in-domain","Disallow Domain-role imports of @arkgate/runtime when arkRun is on (same sensor as ark-check).","kernelInDomain",'{{fromLayer}} must not import kernel module "{{specifier}}".'),noArkRunTransportBypass:t("arkrun-transport-bypass","Disallow homemade broker/queue/emitter imports in arkRun managed layers (same sensor as ark-check).","transportBypass",'{{fromLayer}} must not import broker/queue/emitter "{{specifier}}"; use the ArkRun kernel transport.'),noArkRunDirectNew:{meta:{type:"problem",docs:{description:"Disallow `new` of ArkRun-admitted types outside a composition-root factory (on-disk import/`new` envelope)."},messages:{directNew:"{{fromLayer}} must not construct {{typeName}} with new outside an ArkRun composition-root factory."},schema:[]},create(r){let n=Ue(e,r);return n?lr(e,r,n):{}}}}}function T(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}function v(e,t,r,n,s){let i=Ce({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...s?{data:s}:{},diagnostic:i}),i}function G(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=g.dirname(g.resolve(e));for(;;){let r=g.join(t,"ark.config.json");if(x.existsSync(r))return r;let n=g.dirname(t);if(n===t)return null;t=n}}var Be=new Map;function z(e){if(!x.existsSync(e))return null;let t=x.readFileSync(e,"utf8"),r=Be.get(e);if(r?.source===t)return r.config;let n=xe(t,e).config;return Be.set(e,{source:t,config:n}),n}function q(e,t){return(e.include??[]).some(n=>{let s=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return s==="."||t===s||t.startsWith(`${s}/`)})&&!Re(t,e)}function Ge(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,g.join(e,"index.ts"),g.join(e,"index.tsx"),g.join(e,"index.js")];for(let r of t)try{if(x.existsSync(r)&&x.statSync(r).isFile())return r}catch{}return null}function cr(e){let t=g.resolve(e),r=null;for(;;){let d=g.join(t,"tsconfig.json");if(x.existsSync(d)){r=d;break}let u=g.dirname(t);if(u===t)break;t=u}if(!r)return{baseUrl:e,aliases:[]};let n=d=>{try{let u=x.readFileSync(d,"utf8");return u=u.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(u)}catch{return null}},s=(d,u)=>{if(u>4)return{};let c=n(d);if(!c)return{};let p=c.compilerOptions??{},f=p.baseUrl,m=p.paths,h=c.extends;if(typeof h=="string"&&!h.startsWith("@")){let R=g.resolve(g.dirname(d),h.endsWith(".json")?h:`${h}.json`);if(x.existsSync(R)){let A=s(R,u+1);f=f??A.baseUrl,m={...A.paths??{},...m??{}}}}return{baseUrl:f,paths:m}},i=s(r,0),o=g.dirname(r),a=g.resolve(o,i.baseUrl||"."),l=[];for(let[d,u]of Object.entries(i.paths||{})){if(!Array.isArray(u)||u.length===0)continue;let c=d.replace(/\*$/,"");c&&l.push({from:c,to:String(u[0]).replace(/\*$/,"")})}return l.sort((d,u)=>u.from.length-d.from.length),{baseUrl:a,aliases:l}}function ur(e,t){if(!t.startsWith("."))return null;let r=g.resolve(g.dirname(e),t);return Ge(r)}function ze(e,t,r){if(!t)return null;if(t.startsWith("."))return ur(e,t);let n=r||g.dirname(e),{baseUrl:s,aliases:i}=cr(n),o=i.find(l=>t.startsWith(l.from));if(!o)return null;let a=g.resolve(s,`${o.to}${t.slice(o.from.length)}`);return Ge(a)}function W(e){return typeof e?.value=="string"?e.value:void 0}function ce(e){return e?.name??W(e)}function ue(e){return e.sourceCode??e.getSourceCode?.()}function qe(e,t){let r=ue(e)?.getScope?.(t);for(;r;){let n=r.references?.find(s=>s.identifier===t);if(n)return n;r=r.upper??void 0}}function P(e,t,r){let n=qe(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let s=ue(e)?.getScope?.(t);for(;s;){let i=s.set?.get(r);if(i)return(i.defs?.length??0)>0;s=s.upper??void 0}return!1}function dr(e,t){let r=qe(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}function We(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=We(e.object),n=ce(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}function pr(e){return ce(e.callee?.property)}function Ze(e,t){return e?.properties?.find(r=>ce(r.key)===t)}function B(e,t){return Ze(e,t)!==void 0}function fr(e){let t=Ze(e,"metadata")?.value;return B(t,"source")}function Ye(e){return pr(e)==="publish"}function ae(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}function gr(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}function mr(e){let t=gr(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!ae(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!ae(n))return!1;r=!0;continue}return!1}}return r}var yr={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=T(e),r=G(t),n=r?z(r):null,s=r?g.dirname(r):null,i=o=>{let a=W(o.source);if(a&&n&&s&&t){let l=g.isAbsolute(t)?t:g.resolve(t),d=g.relative(s,l).split(g.sep).join("/");if(!q(n,d))return;let u=S(d,n.layers);if(!u)return;let c=ze(l,a,s);if(!c)return;let p=g.relative(s,c).split(g.sep).join("/");if(p.startsWith(".."))return;let f=S(p,n.layers);if(!f)return;let m={fromPath:d,toPath:p,layers:n.layers},h=Y(n.rules,u,f,m);if(h||he(n.rules,u,f,m)){let R=o.type?.startsWith("Export")?"export":"import",A=ae(o),K=!!h?.peerIsolation,M=A&&!K,N=h?.message??`${u} must not ${R} ${f}.`;v(e,o,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:d,fromLayer:u,toLayer:f,target:p,edgeKind:R,...K?{peerIsolation:!0}:{},...A?{typeOnly:!0}:{},...M?{severity:"warning"}:{},...mr(o)?{sourcePureTypeModule:!0}:{},message:M?`${N} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:N},{fromLayer:u,toLayer:f,specifier:a})}return}};return{ImportDeclaration:i,ExportNamedDeclaration:i,ExportAllDeclaration:i}}},hr={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=W(r),s=te({publishCall:Ye(t),rawIntentName:n,objectHasIntent:B(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(s.some(i=>i.ruleId==="RAW_EVENT_PUBLISH")){let i=s.find(o=>o.ruleId==="RAW_EVENT_PUBLISH");v(e,t,"rawPublish",{...i,file:T(e)})}}}}},Rr={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],i=te({publishCall:Ye(t),rawIntentName:W(r),objectHasIntent:B(r,"intent"),arkPublishCandidate:!0,hasSource:fr(r)||B(n,"source")}).find(o=>o.ruleId==="PUBLISH_MISSING_SOURCE");i&&v(e,t,"missingSource",{...i,file:T(e)})}}}},Ar={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=T(e),r=e.options?.[0],n=G(t),s=n?z(n):null,i=n?g.dirname(n):null,o=null,a="this layer";if(s&&i&&t){let c=g.isAbsolute(t)?t:g.resolve(t),p=g.relative(i,c).split(g.sep).join("/");if(!q(s,p))return{};let f=s.layers?.find(m=>m.name===S(p,s.layers));f?.forbiddenGlobals?.length?(o=new Set(f.forbiddenGlobals),a=f.name):o=null}else r?.globals&&(o=new Set(r.globals));if(!o)return{};let l=typeof ue(e)?.getScope=="function",d=(c,p)=>{let f=g.isAbsolute(t)?t:g.resolve(t),m=i?g.relative(i,f).split(g.sep).join("/"):t;v(e,c,s?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:m,fromLayer:a,target:p,message:`${a} must not use the ambient global "${p}".`},{name:p,layer:a})},u=(c,p,f,m)=>{if(f||typeof p!="string")return;let h=X(p,o);if(!h)return;let R=g.isAbsolute(t)?t:g.resolve(t),A=i?g.relative(i,R).split(g.sep).join("/"):t;v(e,c,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:A,fromLayer:a,target:p,edgeKind:m,message:`${a} must not use module "${p}" because it is the import form of forbidden global "${h}".`},{layer:a,name:h,specifier:p,importKind:m})};return{MemberExpression(c){if(c.parent?.type==="MemberExpression"&&c.parent.object===c)return;let p=We(c);if(!p||P(e,p.root,p.segments[0]))return;let f=p.segments[0]==="globalThis",m=f?p.segments.slice(1):p.segments,h;for(let R=m.length;R>=(f?1:2);R-=1){let A=m.slice(0,R).join(".");if(o.has(A)){h=A;break}}h?d(c,h):!l&&o.has(p.segments[0])&&d(c,p.segments[0])},CallExpression(c){let p=c;if(p.callee?.type==="Identifier"&&p.callee.name==="require"&&p.arguments?.[0]?.type==="Literal"&&!P(e,c,"require")&&u(c,p.arguments[0].value,!1,"require"),l)return;let f=p.callee?.type==="Identifier"?p.callee.name:void 0;f&&o.has(f)&&d(c,f)},ImportDeclaration(c){let p=c,f=(p.specifiers??[]).filter(h=>h.type==="ImportSpecifier"),m=f.length>0&&f.length===(p.specifiers??[]).length&&f.every(h=>h.importKind==="type");u(c,p.source?.value,p.importKind==="type"||m,"import")},ImportExpression(c){let p=c;p.source?.type==="Literal"&&u(c,p.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(c){let p=c;u(c,p.moduleReference?.expression?.value,p.importKind==="type"||p.isTypeOnly===!0,"require")},ExportNamedDeclaration(c){let p=c;if(!p.source)return;let f=p.specifiers??[],m=f.length>0&&f.every(h=>h.exportKind==="type");u(c,p.source.value,p.exportKind==="type"||m,"export")},ExportAllDeclaration(c){let p=c;u(c,p.source?.value,p.exportKind==="type","export")},NewExpression(c){if(l)return;let p=c.callee?.type==="Identifier"?c.callee.name:void 0;p&&o.has(p)&&d(c,p)},Identifier(c){!l||!c.name||!o.has(c.name)||!dr(e,c)||P(e,c,c.name)||d(c,c.name)}}}},kr={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=T(e),r=G(t),n=r?z(r):null,s=r?g.dirname(r):null;if(!n||!s||!t)return{};let i=g.isAbsolute(t)?t:g.resolve(t),o=g.relative(s,i).split(g.sep).join("/");if(!q(n,o))return{};let a=n.layers?.find(u=>u.name===S(o,n.layers));if(!a)return{};let l=new Set(be(a));if(l.size===0)return{};let d=(u,c,p,f)=>{if(p||typeof c!="string"||X(c,a.forbiddenGlobals??[]))return;let m=ke(c);!m||!l.has(m)||v(e,u,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:o,fromLayer:a.name,target:c,capability:m,edgeKind:f,message:`${a.name} denies the ${m} capability; found import of "${c}".`},{layer:a.name,capability:m,specifier:c})};return{ImportDeclaration(u){let c=u,p=(c.specifiers??[]).filter(m=>m.type==="ImportSpecifier"),f=p.length>0&&p.length===(c.specifiers??[]).length&&p.every(m=>m.importKind==="type");d(u,c.source?.value,c.importKind==="type"||f,"import")},ImportExpression(u){let c=u;c.source?.type==="Literal"&&d(u,c.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(u){let c=u;d(u,c.moduleReference?.expression?.value,c.importKind==="type"||c.isTypeOnly===!0,"require")},ExportNamedDeclaration(u){let c=u;if(!c.source)return;let p=c.specifiers??[],f=p.length>0&&p.every(m=>m.exportKind==="type");d(u,c.source.value,c.exportKind==="type"||f,"export")},ExportAllDeclaration(u){let c=u;d(u,c.source?.value,c.exportKind==="type","export")},CallExpression(u){let c=u;c.callee?.type==="Identifier"&&c.callee.name==="require"&&c.arguments?.[0]?.type==="Literal"&&!P(e,u,"require")&&d(u,c.arguments[0].value,!1,"require")}}}},{noArkRunKernelInDomain:br,noArkRunDirectNew:Sr,noArkRunTransportBypass:Er}=Ve({findConfigPath:G,loadArkConfig:z,resolveImportSpecifier:ze,lintedFilename:T,sourceIsInAnalysisScope:q,isLocallyBound:P,reportAdapterDiagnostic:v});var Ir={"no-domain-infra-imports":yr,"no-raw-event-publish":hr,"require-publish-source":Rr,"no-forbidden-globals":Ar,"no-denied-capabilities":kr,"no-arkrun-kernel-in-domain":br,"no-arkrun-direct-new":Sr,"no-arkrun-transport-bypass":Er},le={rules:Ir};le.configs={recommended:{plugins:{ark:le},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error","ark/no-arkrun-kernel-in-domain":"error","ark/no-arkrun-direct-new":"error","ark/no-arkrun-transport-bypass":"error"}}};var an=le;export{an as default,G as findConfigPath,_ as globToRegExp,he as isEdgeDenied,S as layerForRelativePath,z as loadArkConfig,Sr as noArkRunDirectNew,br as noArkRunKernelInDomain,Er as noArkRunTransportBypass,kr as noDeniedCapabilities,yr as noDomainInfraImports,Ar as noForbiddenGlobals,hr as noRawEventPublish,ye as patternSpecificity,le as plugin,cr as readTsconfigPathAliases,Rr as requirePublishSource,ze as resolveImportSpecifier,ur as resolveRelativeImport};