arkgate 4.7.5 → 4.8.0

package/CHANGELOG.md

@@ -3,7 +3,43 @@
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here or
 in the immutable pre-2.0 archive linked below.
 
-## Unreleased
+## 4.8.0 — 2026-08-29
+
+**Minor** over **4.7.6**. One npm package **`arkgate`**: extras opt-in by config + subpath.
+**ArkOrder** (`arkgate/order`) on schema `1.3`. **ArkRun** kernel is `arkgate/runtime` in
+the same tarball. `@arkgate/runtime` is **deprecated**. Does not close `K01` / `Z09`.
+ArkRules unchanged.
+
+**Status: published** (on npm `latest`; see `docs/releases/4.8.0.md`).
+
+### Added
+- **ArkOrder extra (`arkOrder`):** optional, silent when absent. Enforced skip: missing plane, Domain import of `arkgate/order`, generic `update` of ξ.
+- **`arkgate/order`:** `createOrderPlane` with `release` / `project` / `ingest` / `proposeRelease`. Root `arkgate` export stays the gate.
+- **Billing gallery:** `examples/arkorder-billing/` consumer projector (`plan` / `cycle` / `tenancy`).
+- **`arkgate/runtime` and `arkgate/nestjs`:** real subpaths of package `arkgate` (ADR 0031). Root export stays the gate.
+
+### Changed
+- **`@arkgate/runtime` deprecated.** Prefer `import { createStrictArkKernel } from 'arkgate/runtime'`. Companion remains a leftover 0.x `experimental` pin.
+- **Gate waist (WH01 / ADR 0026):** the parity-capable check is config + resolved-candidate-facts → one analysis-result. New doctor advisory surfaces must project existing facts and must not become a second verdict. Does not move shipped compass/coach. Does not close `K01` / `Z09`.
+- **Config schema `1.3`:** additive `arkOrder`. `1.2` configs migrate. Absence is silent.
+
+### Fixed
+- **`K01` honesty:** 4.7.6 shipped workflow OCC / lease / `tx` / `resume` primitives. It does not close in-process bus commit gaps or durable outbox. `K01` stays parked.
+- **Release-surface pin:** ROADMAP / CONTRIBUTING / `q06ReleaseSurfaces` name npm `latest` as **4.7.6** (the #173 merge left the 4.7.5 pin).
+- **CodeQL alert 16:** `scripts/release-npm.mjs` invokes npm with `execFileSync` and an argv array (no shell). Closes `js/shell-command-injection-from-environment`.
+- **Antigravity MCP path:** `--install-agent-gates --tools antigravity` (and compact start) writes official workspace `.agents/mcp_config.json`. Doctor evidence for host `antigravity` no longer treats shared `.mcp.json` as loaded by the host.
+
+## 4.7.6 — 2026-08-26
+
+**Patch** over **4.7.5**. Production durability *primitives* for ArkRun (`tx`, OCC, leases, `resume`). Adds those hooks to the workflow engine. **No required config migration.** Companion `@arkgate/runtime` is republished as `0.1.0-experimental.1`.
+Does **not** close `K01` (in-process bus commit gaps and durable outbox remain).
+
+**Status: published** (on npm `latest`; see `docs/releases/4.7.6.md`).
+
+### Changed
+- **ArkRun (Workflow Engine):** added `tx` argument to `EventBus` and Sagas for database transactions.
+- **ArkRun (Workflow Engine):** added optimistic concurrency control (`version` increments) and worker lease (`claim()`, `ownerId`, `expiresAt`) primitives.
+- **ArkRun (Workflow Engine):** added `engine.resume()` to rehydrate interrupted sagas without repeating completed steps.
 
 ## 4.7.5 — 2026-08-26
 
@@ -12,7 +48,7 @@ pipeline, product-voice lock, and npm/MCP description use the deny: when the age
 writes a bad import, the write doesn’t land. **No required config migration.** Does
 not close Z09 / K01. Companion `@arkgate/runtime` is not republished.
 
-**Status: prepared** (not on npm `latest` until publish; see `docs/releases/4.7.5.md`).
+**Status: published** (on npm `latest`; see `docs/releases/4.7.5.md`).
 
 ### Changed
 
@@ -31,7 +67,7 @@ not close Z09 / K01. Companion `@arkgate/runtime` is not republished.
 install the companion from the registry. **No required config migration.** Does not
 close Z09 / K01.
 
-**Status: published** (on npm `latest`; see `docs/releases/4.7.4.md`). Companion:
+**Status: published** (see `docs/releases/4.7.4.md`). Companion:
 `npm view @arkgate/runtime dist-tags --json`.
 
 ### Added

package/README.md

@@ -29,12 +29,11 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.7.5** (tree). npm `latest` remains **4.7.4** until this patch publishes.
-> Write. Check. Ship. Adopted = required GitHub status running
-> `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
+> **ArkGate 4.8.0** is on npm `latest`. Write. Check. Ship. Adopted = required GitHub
+> status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
-> (`@arkgate/runtime`, `experimental`) is an in-memory runtime — not Postgres.
-> [4.7.5](docs/releases/4.7.5.md) · [4.7.4](docs/releases/4.7.4.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> (`arkgate/runtime`) is an in-memory runtime — not Postgres. `@arkgate/runtime` is deprecated.
+> [4.8.0](docs/releases/4.8.0.md) · [4.7.6](docs/releases/4.7.6.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -98,7 +97,7 @@ once you adopt. The other two are optional.
 | **While the agent writes** | The write doesn’t land on supported hosts; warning only elsewhere | Always (ArkGate) |
 | **Before merge** | `arkgate-check` as a **required** CI status | Always (ArkGate) |
 | **ArkRules** | Optional policies *inside* a layer | When you ask |
-| **ArkRun** | Optional experimental runtime (`@arkgate/runtime`) | Off unless you turn it on |
+| **ArkRun** | Optional experimental runtime (`arkgate/runtime`) | Off unless you turn it on |
 
 Layers (who may import whom) always run. ArkRules and ArkRun change no inter-layer
 verdict when absent. Label leftovers **`[Layer]`** vs **`[ArkRules]`**.
@@ -121,6 +120,20 @@ check: [4.3.0 — What ArkGate is / isn't](docs/releases/4.3.0.md#what-arkgate-i
 
 ---
 
+## Why it exists
+
+AI coding agents generate code at unprecedented speeds. However, they tend to take the shortest path to solve a problem. If an agent needs data in a Domain layer, it might directly import a database adapter. Left unchecked, this creates spaghetti code and technical debt at light speed.
+
+Traditional linters catch these architectural violations in CI *after* the agent has finished its work, breaking the flow.
+
+ArkGate solves this by shifting the check to the exact moment of writing:
+
+1. **Fail fast at the write boundary.** Through IDE hooks and MCP, ArkGate intercepts the file write. If the agent writes a bad import, the write doesn't land. The agent gets immediate feedback and can self-correct before saving to disk.
+2. **The check is the single source of truth.** A simple `ark.config.json` defines your layers and allowed edges.
+3. **Honest reporting.** Green imports do not equal elegant design. ArkGate separates structural correctness from design smells, providing an improvement compass to guide leftover design work without blocking the PR.
+
+---
+
 ## Status lights (not settings)
 
 ```text
@@ -227,12 +240,10 @@ More: [docs/develop.md](docs/develop.md) · skills install: [docs/agent-guide.md
 Gates need **no** app runtime. Skip this unless you want an optional runtime
 for decoupling.
 
-**ArkRun** (`@arkgate/runtime`, npm tag `experimental`) is that runtime. Each
+**ArkRun** (`arkgate/runtime`, same npm package) is that runtime. Each
 `createStrictArkKernel()` call is a new instance — no process singleton. Data
 lives in memory and **dies on restart**. Fine for local. Not Postgres, not an
-outbox, not Temporal.
-
-The `arkgate` tarball does not bundle it.
+outbox, not Temporal. `@arkgate/runtime` is deprecated.
 
 ### Durability stance
 
@@ -255,8 +266,9 @@ interfaces for production. Details: [docs/production-hardening.md](docs/producti
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Current tree (4.7.5) | [docs/releases/4.7.5.md](docs/releases/4.7.5.md) · [CHANGELOG](CHANGELOG.md) |
-| Current published (4.7.4 on npm `latest`) | [docs/releases/4.7.4.md](docs/releases/4.7.4.md) |
+| Current published (4.8.0 on npm `latest`) | [docs/releases/4.8.0.md](docs/releases/4.8.0.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior published (4.7.6) | [docs/releases/4.7.6.md](docs/releases/4.7.6.md) |
+| Prior published (4.7.5) | [docs/releases/4.7.5.md](docs/releases/4.7.5.md) |
 | Prior published (4.7.3) | [docs/releases/4.7.3.md](docs/releases/4.7.3.md) |
 | Prior published (4.7.2) | [docs/releases/4.7.2.md](docs/releases/4.7.2.md) |
 | Prior published (4.7.1) | [docs/releases/4.7.1.md](docs/releases/4.7.1.md) |