arkgate 4.7.5 → 4.8.0

package/dist/diagnosticCatalog-RiKPUFRG.d.ts

@@ -0,0 +1,2307 @@
+import { e as CreateArchitectureProfileOptions, b as ArchitectureProfile, d as ArkCheckConfig, C as CreateArchitectureProfileFromArkConfigOptions, f as CreateElevenLayerArkConfigOptions, i as Policy, j as IntentCreator, I as IntentName } from './types-DCSlrRnV.js';
+import { A as ArkConfig, c as ArkConfigLoadResult } from './configTypes-BdCe_gvv.js';
+
+/** Versioned public result contract shared by every ArkGate enforcement adapter. */
+/**
+ * 1.5 adds stable finding refs on every factory-emitted diagnostic (ACS06):
+ * `findingRef`, `targetKey` (baseline-compatible), `docsCodePath`.
+ * 1.4 added optional evidence.arkruleId + evidence.arkruleSource (ADR 0012 / AR03).
+ */
+declare const ARK_ANALYSIS_RESULT_SCHEMA_VERSION: "1.5";
+/** Repo-relative diagnostics docs path (parity with ACS02 diagnostic catalog). */
+declare const ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH: "docs/diagnostics.md";
+type AdapterSeverity = 'error' | 'warning';
+type AnalysisCompleteness = 'complete' | 'partial' | 'unavailable';
+type AnalysisMode = 'lexical-compatibility' | 'resolved-candidate-facts';
+type AdapterCompletenessReason = {
+    code: string;
+    message: string;
+    file?: string;
+};
+type AdapterViolationInput = {
+    ruleId?: unknown;
+    code?: unknown;
+    message?: unknown;
+    file?: unknown;
+    line?: unknown;
+    column?: unknown;
+    target?: unknown;
+    fromLayer?: unknown;
+    toLayer?: unknown;
+    typeOnly?: unknown;
+    targetTypeOnlyExports?: unknown;
+    sourcePureTypeModule?: unknown;
+    namedBindingsTypeOnly?: unknown;
+    portProofEligible?: unknown;
+    peerIsolation?: unknown;
+    edgeKind?: unknown;
+    severity?: unknown;
+    /** When false, finding is non-blocking (e.g. type-only placement debt). */
+    failsStrict?: unknown;
+    nextAction?: unknown;
+    /** U04: the denied capability id on CAPABILITY_VIOLATION. */
+    capability?: unknown;
+    /** AR03: ArkRule identity for structure/invariant diagnostics. */
+    arkruleId?: unknown;
+    /** AR03: project-relative ArkRules source file that declared the rule. */
+    arkruleSource?: unknown;
+};
+type AdapterDiagnostic = {
+    ruleId: string;
+    severity: AdapterSeverity;
+    message: string;
+    location: {
+        file: string;
+        line: number;
+        column: number;
+    };
+    evidence: {
+        target?: string;
+        fromLayer?: string;
+        toLayer?: string;
+        typeOnly?: boolean;
+        targetTypeOnlyExports?: boolean;
+        sourcePureTypeModule?: boolean;
+        namedBindingsTypeOnly?: boolean;
+        portProofEligible?: boolean;
+        peerIsolation?: boolean;
+        capability?: string;
+        edgeKind?: string;
+        /** AR03 — ArkRule id (structure or invariant). */
+        arkruleId?: string;
+        /** AR03 — ArkRules source file path. */
+        arkruleSource?: string;
+    };
+    /** Added in schema 1.1; optional in TypeScript so 1.0 consumer-owned values remain valid. */
+    nextAction?: string;
+    /**
+     * ACS06 / schema 1.5 — compact stable id for multi-turn re-address
+     * (`fnv1a-` + hex). Always derived from `targetKey`. Optional so 1.0–1.4
+     * consumer-owned diagnostics remain assignable.
+     */
+    findingRef?: string;
+    /**
+     * ACS06 / schema 1.5 — baseline-compatible freeze identity
+     * (`ruleId|file|fromLayer|toLayer|target`, with occurrence `#N` suffixes in lists).
+     * Must match `baselineKey` / `baselineOccurrenceKeys` so refs never orphan baselines.
+     */
+    targetKey?: string;
+    /**
+     * ACS06 / schema 1.5 — package-relative docs path with rule anchor
+     * (`docs/diagnostics.md#RULE_ID`). Optional for legacy consumer-owned values.
+     */
+    docsCodePath?: string;
+};
+type LegacyAdapterResult = {
+    schemaVersion: '1.0' | '1.1';
+    valid: boolean;
+    diagnostics: AdapterDiagnostic[];
+    completeness?: never;
+    mode?: never;
+};
+type Version12AdapterResultBase = {
+    schemaVersion: '1.2';
+    diagnostics: AdapterDiagnostic[];
+    mode?: never;
+};
+type Version12AdapterResult = (Version12AdapterResultBase & {
+    completeness: 'complete';
+    valid: boolean;
+}) | (Version12AdapterResultBase & {
+    completeness: 'partial' | 'unavailable';
+    valid: false;
+});
+type CurrentAdapterResultBase = {
+    schemaVersion: typeof ARK_ANALYSIS_RESULT_SCHEMA_VERSION;
+    completenessReasons: AdapterCompletenessReason[];
+    diagnostics: AdapterDiagnostic[];
+};
+type ResolvedAdapterEvidence = {
+    policyHash: string;
+    resolverIdentity: string;
+    factsHash: string;
+    candidateTreeHash: string;
+};
+type CurrentAdapterResult = (CurrentAdapterResultBase & Partial<ResolvedAdapterEvidence> & {
+    mode: 'lexical-compatibility';
+    valid: boolean;
+    completeness: 'complete';
+}) | (CurrentAdapterResultBase & Partial<ResolvedAdapterEvidence> & {
+    mode: 'lexical-compatibility';
+    valid: false;
+    completeness: 'partial' | 'unavailable';
+}) | (CurrentAdapterResultBase & ResolvedAdapterEvidence & {
+    mode: 'resolved-candidate-facts';
+    valid: boolean;
+    completeness: 'complete';
+}) | (CurrentAdapterResultBase & ResolvedAdapterEvidence & {
+    mode: 'resolved-candidate-facts';
+    valid: false;
+    completeness: 'partial';
+}) | (CurrentAdapterResultBase & Partial<ResolvedAdapterEvidence> & {
+    mode: 'resolved-candidate-facts';
+    valid: false;
+    completeness: 'unavailable';
+});
+type AdapterResult = LegacyAdapterResult | Version12AdapterResult | CurrentAdapterResult;
+/**
+ * Baseline-compatible target key for a violation input.
+ * Field order and empty-string fallbacks **must** match `baselineKey` in
+ * `baselineKey.ts` — parity tests guard this so finding refs never orphan freezes.
+ *
+ * Note: uses raw ruleId/file strings (including empty) the same way baseline does;
+ * display `ruleId` / `location.file` may still normalize to ARK_UNKNOWN / `<unknown>`.
+ */
+declare function adapterFindingTargetKey(violation: AdapterViolationInput): string;
+/**
+ * Occurrence-aware target keys for a violation list (parity with baselineOccurrenceKeys).
+ * First occurrence keeps the historical base key; duplicates get `#N`.
+ */
+declare function adapterFindingOccurrenceTargetKeys(violations: readonly AdapterViolationInput[]): string[];
+/** FNV-1a finding ref from a baseline-compatible targetKey (not a security hash). */
+declare function adapterFindingRefFromTargetKey(targetKey: string): string;
+/** Package-relative docs path with fragment for a public ruleId. */
+declare function adapterDocsCodePath(ruleId: string): string;
+declare function toAdapterDiagnostic(violation: AdapterViolationInput, fallbackSeverity?: AdapterSeverity, 
+/**
+ * Optional precomputed baseline-compatible targetKey (e.g. occurrence-aware from
+ * `adapterFindingOccurrenceTargetKeys`). When omitted, uses the first-occurrence key.
+ */
+targetKeyOverride?: string): AdapterDiagnostic;
+declare function createAdapterResult(input: {
+    valid: boolean;
+    completeness?: AnalysisCompleteness;
+    mode?: AnalysisMode;
+    policyHash?: unknown;
+    resolverIdentity?: unknown;
+    factsHash?: unknown;
+    candidateTreeHash?: unknown;
+    completenessReasons?: readonly AdapterCompletenessReason[];
+    violations?: readonly AdapterViolationInput[];
+    warnings?: readonly AdapterViolationInput[];
+}): CurrentAdapterResult;
+declare const ARK_ANALYSIS_RESULT_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://unpkg.com/arkgate@3/schemas/ark.analysis-result.schema.json";
+    readonly title: "ArkGate analysis result";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "mode", "valid", "completeness", "completenessReasons", "diagnostics"];
+    readonly allOf: readonly [{
+        readonly if: {
+            readonly properties: {
+                readonly completeness: {
+                    readonly enum: readonly ["partial", "unavailable"];
+                };
+            };
+            readonly required: readonly ["completeness"];
+        };
+        readonly then: {
+            readonly properties: {
+                readonly valid: {
+                    readonly const: false;
+                };
+            };
+        };
+    }, {
+        readonly if: {
+            readonly properties: {
+                readonly mode: {
+                    readonly const: "resolved-candidate-facts";
+                };
+                readonly completeness: {
+                    readonly enum: readonly ["complete", "partial"];
+                };
+            };
+            readonly required: readonly ["mode", "completeness"];
+        };
+        readonly then: {
+            readonly required: readonly ["policyHash", "resolverIdentity", "factsHash", "candidateTreeHash"];
+        };
+    }, {
+        readonly if: {
+            readonly properties: {
+                readonly completeness: {
+                    readonly const: "complete";
+                };
+            };
+            readonly required: readonly ["completeness"];
+        };
+        readonly then: {
+            readonly properties: {
+                readonly completenessReasons: {
+                    readonly maxItems: 0;
+                };
+            };
+        };
+        readonly else: {
+            readonly properties: {
+                readonly completenessReasons: {
+                    readonly minItems: 1;
+                };
+            };
+        };
+    }];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "1.5";
+        };
+        readonly mode: {
+            readonly enum: readonly ["lexical-compatibility", "resolved-candidate-facts"];
+        };
+        readonly valid: {
+            readonly type: "boolean";
+        };
+        readonly completeness: {
+            readonly enum: readonly ["complete", "partial", "unavailable"];
+        };
+        readonly completenessReasons: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["code", "message"];
+                readonly properties: {
+                    readonly code: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly message: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly policyHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly resolverIdentity: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly factsHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly candidateTreeHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly diagnostics: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ruleId", "severity", "message", "location", "evidence"];
+                readonly properties: {
+                    readonly ruleId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly severity: {
+                        readonly enum: readonly ["error", "warning"];
+                    };
+                    readonly message: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly location: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["file", "line", "column"];
+                        readonly properties: {
+                            readonly file: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                            readonly line: {
+                                readonly type: "integer";
+                                readonly minimum: 1;
+                            };
+                            readonly column: {
+                                readonly type: "integer";
+                                readonly minimum: 1;
+                            };
+                        };
+                    };
+                    readonly evidence: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly properties: {
+                            readonly target: {
+                                readonly type: "string";
+                            };
+                            readonly fromLayer: {
+                                readonly type: "string";
+                            };
+                            readonly toLayer: {
+                                readonly type: "string";
+                            };
+                            readonly typeOnly: {
+                                readonly type: "boolean";
+                            };
+                            readonly targetTypeOnlyExports: {
+                                readonly type: "boolean";
+                            };
+                            readonly sourcePureTypeModule: {
+                                readonly type: "boolean";
+                            };
+                            readonly namedBindingsTypeOnly: {
+                                readonly type: "boolean";
+                            };
+                            readonly portProofEligible: {
+                                readonly type: "boolean";
+                            };
+                            readonly peerIsolation: {
+                                readonly type: "boolean";
+                            };
+                            readonly capability: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                            readonly edgeKind: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                            readonly arkruleId: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                            readonly arkruleSource: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                        };
+                    };
+                    readonly nextAction: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    /** ACS06 — compact multi-turn id; always derived from targetKey when emitted. */
+                    readonly findingRef: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^fnv1a-[0-9a-f]{8}$";
+                    };
+                    /**
+                     * ACS06 — baseline-compatible freeze identity
+                     * (`ruleId|file|from|to|target` with optional `#N` occurrence suffix).
+                     */
+                    readonly targetKey: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    /** ACS06 — package-relative diagnostics anchor path. */
+                    readonly docsCodePath: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+    };
+};
+
+/** ArkGate library version — single source of truth. */
+declare const version = "4.8.0";
+
+/**
+ * AI Code Gate (basic).
+ *
+ * Allows validation of generated source code against the defined architecture.
+ */
+interface AICodeGateViolation {
+    /** Stable rule identifier for agents and CI pipelines. */
+    ruleId: string;
+    /** @deprecated Use ruleId — kept for backward compatibility. */
+    code: string;
+    message: string;
+    line?: number;
+    suggestion?: string;
+    source?: string;
+    filePath?: string;
+    target?: string;
+    fromLayer?: string;
+    toLayer?: string;
+    details?: unknown;
+}
+/** Extension point for external analyzers (AST, semantic, etc.). */
+interface AIGateExtension<Context = unknown> {
+    readonly name: string;
+    analyze(source: string, context?: Context): AICodeGateViolation[];
+}
+interface AICodeGateContext {
+    filePath?: string;
+    agentId?: string;
+    layer?: string;
+    [key: string]: unknown;
+}
+interface AICodeGateResult {
+    /** Single-source snippets do not carry project-wide resolver evidence. */
+    mode: 'lexical-compatibility';
+    /** A snippet result is intentionally never an authoritative complete verdict. */
+    completeness: 'partial';
+    completenessReasons: string[];
+    /** Authoritative verdict. Always false until the complete candidate is resolved. */
+    valid: boolean;
+    /** Compatibility signal for the bounded lexical checks performed here. */
+    lexicalValid: boolean;
+    violations: AICodeGateViolation[];
+}
+interface AICodeGate<Context = AICodeGateContext> {
+    validate(source: string, context?: Context): AICodeGateResult;
+}
+
+declare function createArchitectureProfile(options: CreateArchitectureProfileOptions): ArchitectureProfile;
+declare function createArchitectureProfileFromArkConfig(config: ArkCheckConfig, options?: CreateArchitectureProfileFromArkConfigOptions): ArchitectureProfile;
+declare const elevenLayerProfile: ArchitectureProfile;
+declare function createElevenLayerArkConfig(options?: CreateElevenLayerArkConfigOptions): ArkCheckConfig;
+
+/**
+ * Basic AI Code Gate implementation.
+ *
+ * Uses simple string heuristics + registered intent names to detect obvious
+ * architectural violations in generated code (e.g. direct infra imports from domain).
+ * Not a full static analyzer — documented limitation.
+ */
+
+interface AICodeGatePolicyContext<Context = AICodeGateContext> {
+    source: string;
+    context?: Context;
+}
+interface AICodeGateOptions<Context = AICodeGateContext> {
+    policies?: Policy<AICodeGatePolicyContext<Context>>[];
+    intents?: Array<string | Pick<IntentCreator<IntentName, unknown>, 'name'>>;
+    /**
+     * Additional forbidden patterns (regex or strings).
+     */
+    forbiddenPatterns?: Array<string | RegExp>;
+    /**
+     * External analyzer extensions (type-only contract; plug in AST tools later).
+     */
+    extensions?: AIGateExtension<Context>[];
+    /**
+     * Optional architecture profile for layer-aware generated-code checks.
+     * When context.layer is provided, intent references are checked against it.
+     */
+    architectureProfile?: ArchitectureProfile;
+    /**
+     * When true, flag string literals that look like intent names but are not registered.
+     */
+    enforceIntentAllowlist?: boolean;
+    /**
+     * Optional TypeScript module object. When provided, AICodeGate adds AST-backed checks
+     * for publish misuse without taking a runtime dependency on TypeScript.
+     */
+    typescript?: unknown;
+    /**
+     * Ambient globals forbidden per layer (layer name → entries such as "fetch" or
+     * "Date.now"). Checked only when `typescript` is provided and context.layer resolves
+     * to a listed layer — mirrors ark-check's FORBIDDEN_GLOBAL rule.
+     */
+    forbiddenGlobals?: Record<string, string[]>;
+    /**
+     * Layer → effective capability deny set (U04 walls; ADR 0009). Enforced like
+     * forbiddenGlobals when the target file's layer is known. An ambient use
+     * already covered by the layer's forbiddenGlobals reports only
+     * FORBIDDEN_GLOBAL (D7 — one violation, one voice).
+     */
+    capabilityWalls?: Record<string, string[]>;
+    /**
+     * Layer names whose role is infrastructure and may therefore import infrastructure
+     * (a persistence adapter importing the DB is correct, not a violation). The built-in
+     * infra-import heuristics are suppressed for these layers and for any layer whose
+     * name matches the conventional infra tokens. Populate from ark.config.json layers
+     * flagged `mayImportInfrastructure: true`, so unconventionally-named infra layers
+     * opt in explicitly. User-supplied `forbiddenPatterns` still apply everywhere.
+     */
+    infrastructureLayers?: string[];
+    /**
+     * Preferred single resolve step: import specifier or absolute source file →
+     * `{ layer, relPath }` for contract + peerIsolation. Prefer this over the
+     * legacy layer-only callback.
+     */
+    resolveImportTarget?: (specifierOrFilePath: string, fromFilePath?: string) => {
+        layer?: string;
+        relPath?: string;
+    } | undefined;
+    /**
+     * @deprecated Prefer resolveImportTarget. Layer-only resolve for governed imports.
+     */
+    resolveImportLayer?: (specifier: string, fromFilePath?: string) => string | undefined;
+    /**
+     * Layer configs (patterns) used to infer sliceFolders when a peerIsolation rule
+     * omits an explicit list.
+     */
+    architectureLayers?: Array<{
+        name: string;
+        patterns?: string[];
+    }>;
+    /** Explicit file-level escape hatch for reviewed non-literal import()/require() calls. */
+    allowNonLiteralDynamicImport?: (filePath?: string) => boolean;
+}
+declare function createAICodeGate<Context = AICodeGateContext>(options?: AICodeGateOptions<Context>): AICodeGate<Context>;
+
+/**
+ * Portable identity/fingerprint primitives for pure Domain contracts.
+ *
+ * FNV-1a is intentional: no Node crypto dependency for CLI/MCP/browserless consumers.
+ */
+/** Stable FNV-1a hash. Identity/fingerprint only — not a security primitive. */
+declare function deterministicHash(value: string): string;
+/** Serialize JSON-like values with sorted object keys for reproducible hashes. */
+declare function stableSerialize(value: unknown): string;
+
+type ResolvedArkOrderPlaneCallFact = {
+    file: string;
+    line: number;
+    callee: string;
+};
+type ResolvedArkOrderGenericUpdateFact = {
+    file: string;
+    line: number;
+    method: string;
+};
+type ResolvedArkOrderRootHitFact = {
+    file: string;
+    matchedRoot: string;
+    hasPlaneFactory: boolean;
+};
+
+/**
+ * Versioned type vocabulary for resolved candidate facts (schema 1.0).
+ *
+ * Pure declarations + schema version identity. Create/load live in
+ * resolvedCandidateFacts.ts; JSON Schema lives in resolvedCandidateFactsSchema.ts.
+ */
+
+/** 1.1 adds optional classShapes[] (ADR 0013). 1.2 adds optional ArkRun facts (ADR 0022). 1.0/1.1 remain loadable. */
+declare const RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION: "1.2";
+type ResolvedFactsCompleteness = 'complete' | 'partial' | 'unavailable';
+type ResolvedDependencyKind = 'import' | 'export' | 'dynamic-import' | 'require';
+type ResolvedDependencyState = 'resolved-project' | 'resolved-external' | 'unresolved' | 'dynamic';
+type ResolvedCapability = 'network' | 'filesystem' | 'clock' | 'randomness' | 'environment' | 'process' | 'persistence';
+type ResolvedFactsReason = {
+    code: string;
+    message: string;
+    file?: string;
+};
+type ResolvedFileFact = {
+    path: string;
+    contentHash: string;
+    parseStatus: 'parsed' | 'invalid';
+    parseDiagnosticCount: number;
+    exportsOnlyTypes: boolean;
+    typeOnlyExportNames: string[];
+    hasTopLevelSideEffects: boolean;
+};
+/** ADR 0022 kernel API call-site evidence. Sensors consume this in RN04. */
+type ResolvedArkRunKernelCallKind = 'factory' | 'publisher' | 'publish' | 'raise' | 'send' | 'subscribe' | 'register-handler' | 'resolve' | 'resolve-singleton';
+type ResolvedArkRunKernelCallFact = {
+    file: string;
+    line: number;
+    kind: ResolvedArkRunKernelCallKind;
+    callee: string;
+    viaImport: boolean;
+    receiver?: string;
+    nameLiteral?: string;
+};
+/** `new` of a class admitted for kernel creation (classShapes name or kernel import). */
+type ResolvedArkRunManagedNewFact = {
+    file: string;
+    line: number;
+    typeName: string;
+    importedFrom?: string;
+};
+/** Governed file that matched an `arkRun.compositionRoots` glob. */
+type ResolvedArkRunCompositionRootHitFact = {
+    file: string;
+    matchedRoot: string;
+    hasKernelFactory: boolean;
+};
+/** File-scoped interaction declaration lists (ADR 0023). Sensors consume this in RN04. */
+type ResolvedArkRunDeclarationFact = {
+    file: string;
+    line: number;
+    uses: string[];
+    reactsTo: string[];
+    raises: string[];
+    sends: string[];
+};
+/** ADR 0013 class-shape evidence for ArkRules structure sensors. */
+type ResolvedClassShapeFact = {
+    file: string;
+    className: string;
+    exported: boolean;
+    hasPublicMutableFields: boolean;
+    hasPublicSetters: boolean;
+    hasPublicConstructor: boolean;
+    hasStaticFactory: boolean;
+    mutatingMethods: readonly {
+        name: string;
+        referencesGuardOrPublish: boolean;
+    }[];
+    dataOnly?: boolean;
+};
+type ResolvedDependencyFact = {
+    from: string;
+    specifier?: string;
+    kind: ResolvedDependencyKind;
+    typeOnly: boolean;
+    line: number;
+    resolution: ResolvedDependencyState;
+    target?: string;
+    namedBindings?: string[];
+    targetTypeOnlyExports?: boolean;
+    sourcePureTypeModule?: boolean;
+    namedBindingsTypeOnly?: boolean;
+    portProofEligible?: boolean;
+};
+type ResolvedCapabilityFact = {
+    file: string;
+    line: number;
+    symbol: string;
+    capability: ResolvedCapability;
+    source: 'ambient-global' | 'import-based';
+};
+type ResolvedAmbientFact = {
+    file: string;
+    line: number;
+    symbol: string;
+};
+type ResolvedPublishFact = {
+    file: string;
+    line: number;
+    rawIntentName?: string;
+    objectHasIntent: boolean;
+    arkPublishCandidate: boolean;
+    hasSource: boolean;
+    sourceIntent?: string;
+};
+type ResolvedIntentReferenceFact = {
+    file: string;
+    line: number;
+    intent: string;
+};
+type ResolvedSafetyKind = 'ts-suppression' | 'any-cast' | 'dynamic-import' | 'dynamic-require' | 'in-memory-store';
+/** Neutral syntax evidence for policy-controlled safety diagnostics. */
+type ResolvedSafetyFact = {
+    file: string;
+    line: number;
+    kind: ResolvedSafetyKind;
+    symbol?: string;
+};
+type ResolvedCandidateFactsInput = {
+    schemaVersion: '1.0' | '1.1' | typeof RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION;
+    completeness: ResolvedFactsCompleteness;
+    completenessReasons: readonly ResolvedFactsReason[];
+    resolverIdentity: string;
+    compilerIdentity: string;
+    compilerOptionsHash: string;
+    tsconfigHash: string;
+    evidenceRequirementsHash: string;
+    projectPackageName?: string;
+    files: readonly ResolvedFileFact[];
+    dependencies: readonly ResolvedDependencyFact[];
+    capabilityUses: readonly ResolvedCapabilityFact[];
+    ambientUses: readonly ResolvedAmbientFact[];
+    publishCalls: readonly ResolvedPublishFact[];
+    intentReferences: readonly ResolvedIntentReferenceFact[];
+    safetyUses: readonly ResolvedSafetyFact[];
+    /** ADR 0013 — optional on 1.0; default [] on load. */
+    classShapes?: readonly ResolvedClassShapeFact[];
+    /** ADR 0022 / RN03 — optional on 1.0/1.1; default [] on load. */
+    arkRunKernelCalls?: readonly ResolvedArkRunKernelCallFact[];
+    arkRunManagedNews?: readonly ResolvedArkRunManagedNewFact[];
+    arkRunCompositionRootHits?: readonly ResolvedArkRunCompositionRootHitFact[];
+    arkRunDeclarations?: readonly ResolvedArkRunDeclarationFact[];
+    arkOrderPlaneCalls?: readonly ResolvedArkOrderPlaneCallFact[];
+    arkOrderGenericUpdates?: readonly ResolvedArkOrderGenericUpdateFact[];
+    arkOrderRootHits?: readonly ResolvedArkOrderRootHitFact[];
+};
+type ResolvedCandidateFacts = Omit<ResolvedCandidateFactsInput, 'candidateTreeHash' | 'classShapes' | 'arkRunKernelCalls' | 'arkOrderPlaneCalls' | 'arkOrderGenericUpdates' | 'arkOrderRootHits' | 'arkRunManagedNews' | 'arkRunCompositionRootHits' | 'arkRunDeclarations'> & {
+    schemaVersion: typeof RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION;
+    completenessReasons: ResolvedFactsReason[];
+    candidateTreeHash: string;
+    files: ResolvedFileFact[];
+    dependencies: ResolvedDependencyFact[];
+    capabilityUses: ResolvedCapabilityFact[];
+    ambientUses: ResolvedAmbientFact[];
+    publishCalls: ResolvedPublishFact[];
+    intentReferences: ResolvedIntentReferenceFact[];
+    safetyUses: ResolvedSafetyFact[];
+    classShapes: ResolvedClassShapeFact[];
+    arkRunKernelCalls: ResolvedArkRunKernelCallFact[];
+    arkRunManagedNews: ResolvedArkRunManagedNewFact[];
+    arkRunCompositionRootHits: ResolvedArkRunCompositionRootHitFact[];
+    arkRunDeclarations: ResolvedArkRunDeclarationFact[];
+    arkOrderPlaneCalls: ResolvedArkOrderPlaneCallFact[];
+    arkOrderGenericUpdates: ResolvedArkOrderGenericUpdateFact[];
+    arkOrderRootHits: ResolvedArkOrderRootHitFact[];
+    factsHash: string;
+};
+
+/**
+ * Canonical create/load for versioned resolved candidate facts.
+ *
+ * Types: resolvedCandidateFactsTypes.ts · Schema: resolvedCandidateFactsSchema.ts ·
+ * Hash: stableHash.ts. Plan-B god-module pilot cluster (pattern-b:god-module).
+ */
+
+/** Identity of the policy-controlled evidence a resolver must attempt to collect. */
+declare function resolvedFactsEvidenceRequirementsHash(config: ArkConfig): string;
+declare function createResolvedCandidateFacts(input: ResolvedCandidateFactsInput): ResolvedCandidateFacts;
+declare function loadResolvedCandidateFacts(input: unknown): ResolvedCandidateFacts;
+
+declare const RESOLVED_CANDIDATE_FACTS_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json";
+    readonly title: "ArkGate resolved candidate facts";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "completeness", "completenessReasons", "resolverIdentity", "compilerIdentity", "compilerOptionsHash", "tsconfigHash", "candidateTreeHash", "evidenceRequirementsHash", "files", "dependencies", "capabilityUses", "ambientUses", "publishCalls", "intentReferences", "safetyUses", "factsHash"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly enum: readonly ["1.0", "1.1", "1.2"];
+        };
+        readonly completeness: {
+            readonly enum: readonly ["complete", "partial", "unavailable"];
+        };
+        readonly completenessReasons: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["code", "message"];
+                readonly properties: {
+                    readonly code: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly message: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                };
+            };
+        };
+        readonly resolverIdentity: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly compilerIdentity: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly compilerOptionsHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly tsconfigHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly candidateTreeHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly evidenceRequirementsHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly projectPackageName: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly files: {
+            readonly type: "array";
+            readonly uniqueItems: true;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["path", "contentHash", "parseStatus", "parseDiagnosticCount", "exportsOnlyTypes", "typeOnlyExportNames", "hasTopLevelSideEffects"];
+                readonly properties: {
+                    readonly path: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly contentHash: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly parseStatus: {
+                        readonly enum: readonly ["parsed", "invalid"];
+                    };
+                    readonly parseDiagnosticCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly exportsOnlyTypes: {
+                        readonly type: "boolean";
+                    };
+                    readonly typeOnlyExportNames: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly hasTopLevelSideEffects: {
+                        readonly type: "boolean";
+                    };
+                };
+                readonly allOf: readonly [{
+                    readonly if: {
+                        readonly properties: {
+                            readonly parseStatus: {
+                                readonly const: "parsed";
+                            };
+                        };
+                    };
+                    readonly then: {
+                        readonly properties: {
+                            readonly parseDiagnosticCount: {
+                                readonly const: 0;
+                            };
+                        };
+                    };
+                }, {
+                    readonly if: {
+                        readonly properties: {
+                            readonly parseStatus: {
+                                readonly const: "invalid";
+                            };
+                        };
+                    };
+                    readonly then: {
+                        readonly properties: {
+                            readonly parseDiagnosticCount: {
+                                readonly minimum: 1;
+                            };
+                        };
+                    };
+                }];
+            };
+        };
+        readonly dependencies: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["from", "kind", "typeOnly", "line", "resolution"];
+                readonly properties: {
+                    readonly from: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly specifier: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly kind: {
+                        readonly enum: readonly ["import", "export", "dynamic-import", "require"];
+                    };
+                    readonly typeOnly: {
+                        readonly type: "boolean";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly resolution: {
+                        readonly enum: readonly ["resolved-project", "resolved-external", "unresolved", "dynamic"];
+                    };
+                    readonly target: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly namedBindings: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly targetTypeOnlyExports: {
+                        readonly type: "boolean";
+                    };
+                    readonly sourcePureTypeModule: {
+                        readonly type: "boolean";
+                    };
+                    readonly namedBindingsTypeOnly: {
+                        readonly type: "boolean";
+                    };
+                    readonly portProofEligible: {
+                        readonly type: "boolean";
+                    };
+                };
+                readonly allOf: readonly [{
+                    readonly if: {
+                        readonly properties: {
+                            readonly resolution: {
+                                readonly const: "resolved-project";
+                            };
+                        };
+                    };
+                    readonly then: {
+                        readonly required: readonly ["target"];
+                    };
+                    readonly else: {
+                        readonly not: {
+                            readonly required: readonly ["target"];
+                        };
+                    };
+                }, {
+                    readonly if: {
+                        readonly properties: {
+                            readonly resolution: {
+                                readonly const: "dynamic";
+                            };
+                        };
+                    };
+                    readonly else: {
+                        readonly required: readonly ["specifier"];
+                    };
+                }];
+            };
+        };
+        readonly capabilityUses: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "symbol", "capability", "source"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly symbol: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly capability: {
+                        readonly enum: readonly ["network", "filesystem", "clock", "randomness", "environment", "process", "persistence"];
+                    };
+                    readonly source: {
+                        readonly enum: readonly ["ambient-global", "import-based"];
+                    };
+                };
+            };
+        };
+        readonly ambientUses: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "symbol"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly symbol: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly publishCalls: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "objectHasIntent", "arkPublishCandidate", "hasSource"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly rawIntentName: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly objectHasIntent: {
+                        readonly type: "boolean";
+                    };
+                    readonly arkPublishCandidate: {
+                        readonly type: "boolean";
+                    };
+                    readonly hasSource: {
+                        readonly type: "boolean";
+                    };
+                    readonly sourceIntent: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly intentReferences: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "intent"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly intent: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly safetyUses: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "kind"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly kind: {
+                        readonly enum: readonly ["ts-suppression", "any-cast", "dynamic-import", "dynamic-require", "in-memory-store"];
+                    };
+                    readonly symbol: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+                readonly allOf: readonly [{
+                    readonly if: {
+                        readonly properties: {
+                            readonly kind: {
+                                readonly const: "in-memory-store";
+                            };
+                        };
+                    };
+                    readonly then: {
+                        readonly required: readonly ["symbol"];
+                    };
+                    readonly else: {
+                        readonly not: {
+                            readonly required: readonly ["symbol"];
+                        };
+                    };
+                }];
+            };
+        };
+        readonly classShapes: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "className", "exported", "hasPublicMutableFields", "hasPublicSetters", "hasPublicConstructor", "hasStaticFactory", "mutatingMethods"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly className: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly exported: {
+                        readonly type: "boolean";
+                    };
+                    readonly hasPublicMutableFields: {
+                        readonly type: "boolean";
+                    };
+                    readonly hasPublicSetters: {
+                        readonly type: "boolean";
+                    };
+                    readonly hasPublicConstructor: {
+                        readonly type: "boolean";
+                    };
+                    readonly hasStaticFactory: {
+                        readonly type: "boolean";
+                    };
+                    readonly dataOnly: {
+                        readonly type: "boolean";
+                    };
+                    readonly mutatingMethods: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["name", "referencesGuardOrPublish"];
+                            readonly properties: {
+                                readonly name: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
+                                readonly referencesGuardOrPublish: {
+                                    readonly type: "boolean";
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        readonly arkRunKernelCalls: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "kind", "callee", "viaImport"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly kind: {
+                        readonly enum: readonly ["factory", "publisher", "publish", "raise", "send", "subscribe", "register-handler", "resolve", "resolve-singleton"];
+                    };
+                    readonly callee: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly viaImport: {
+                        readonly type: "boolean";
+                    };
+                    readonly receiver: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly nameLiteral: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly arkRunManagedNews: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "typeName"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly typeName: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly importedFrom: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly arkRunCompositionRootHits: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "matchedRoot", "hasKernelFactory"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly matchedRoot: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly hasKernelFactory: {
+                        readonly type: "boolean";
+                    };
+                };
+            };
+        };
+        readonly arkRunDeclarations: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "uses", "reactsTo", "raises", "sends"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly uses: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly reactsTo: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly raises: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly sends: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                };
+            };
+        };
+        readonly arkOrderPlaneCalls: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "callee"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly callee: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly arkOrderGenericUpdates: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "line", "method"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly method: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly arkOrderRootHits: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["file", "matchedRoot", "hasPlaneFactory"];
+                readonly properties: {
+                    readonly file: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly pattern: "^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$";
+                    };
+                    readonly matchedRoot: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly hasPlaneFactory: {
+                        readonly type: "boolean";
+                    };
+                };
+            };
+        };
+        readonly factsHash: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+    };
+    readonly allOf: readonly [{
+        readonly if: {
+            readonly properties: {
+                readonly completeness: {
+                    readonly const: "complete";
+                };
+            };
+        };
+        readonly then: {
+            readonly properties: {
+                readonly completenessReasons: {
+                    readonly maxItems: 0;
+                };
+                readonly files: {
+                    readonly items: {
+                        readonly properties: {
+                            readonly parseStatus: {
+                                readonly const: "parsed";
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    }, {
+        readonly if: {
+            readonly properties: {
+                readonly completeness: {
+                    readonly enum: readonly ["partial", "unavailable"];
+                };
+            };
+        };
+        readonly then: {
+            readonly properties: {
+                readonly completenessReasons: {
+                    readonly minItems: 1;
+                };
+            };
+        };
+    }];
+};
+
+/**
+ * Stable, pure vocabulary for ArkGate's importable analysis engine.
+ *
+ * This module owns the Analysis IR types and re-exports the resolved-candidate-facts
+ * pilot cluster (plan-B / pattern-b:god-module). Parsing and filesystem discovery
+ * belong to adapters.
+ *
+ * Cluster:
+ * - `stableHash` — identity/fingerprint primitives
+ * - `resolvedCandidateFactsTypes` — versioned fact types
+ * - `resolvedCandidateFacts` — create/load/canonicalize
+ * - `resolvedCandidateFactsSchema` — published JSON Schema
+ *
+ * Consumer import paths through this facade remain stable (same pattern as Kernel
+ * `analysis.ts` after U02).
+ */
+
+declare const ANALYSIS_IR_SCHEMA_VERSION: "1.0";
+type AnalysisFileInput = {
+    path: string;
+    content: string;
+};
+type AnalysisFileChange = {
+    path: string;
+    content: string;
+} | {
+    path: string;
+    delete: true;
+};
+type AnalysisCompilerOptions = Readonly<Record<string, unknown>>;
+type AnalysisFile = AnalysisFileInput & {
+    contentHash: string;
+    layer: string | null;
+};
+type AnalysisImportEdge = {
+    from: string;
+    specifier: string;
+    to: string | null;
+    resolution: 'resolved' | 'unresolved';
+    fromLayer: string | null;
+    toLayer: string | null;
+    evidence: AnalysisEvidence;
+};
+/** A capability use is reserved for C04's symbol-aware implementation. */
+type AnalysisCapabilityUse = {
+    file: string;
+    symbol: string;
+    capability: string;
+    evidence: AnalysisEvidence;
+};
+type AnalysisEvidence = {
+    kind: 'import' | 'policy';
+    file: string;
+    line: number;
+    excerpt: string;
+};
+type AnalysisViolation = {
+    ruleId: string;
+    message: string;
+    edge?: AnalysisImportEdge;
+    /** U04 (additive): present on CAPABILITY_VIOLATION — the denied capability id. */
+    capability?: string;
+    /** U04 (additive): the matched module specifier or ambient path. */
+    symbol?: string;
+    evidence: AnalysisEvidence;
+};
+type AnalysisIr = {
+    schemaVersion: typeof ANALYSIS_IR_SCHEMA_VERSION;
+    policyHash: string;
+    compilerOptionsHash: string;
+    files: AnalysisFile[];
+    layers: string[];
+    edges: AnalysisImportEdge[];
+    capabilityUses: AnalysisCapabilityUse[];
+    violations: AnalysisViolation[];
+};
+
+declare const ARK_CHANGE_MAP_SCHEMA_VERSION: "1.0";
+type ArchitectureChangeOperation = 'create' | 'update' | 'delete';
+type ArchitectureChangeMapFile = {
+    path: string;
+    operation: ArchitectureChangeOperation;
+    layer: string;
+};
+type ArchitectureChangeMapDependency = {
+    from: string;
+    to: string;
+};
+type ArchitectureChangeMap = {
+    $schema: string;
+    schemaVersion: typeof ARK_CHANGE_MAP_SCHEMA_VERSION;
+    files: ArchitectureChangeMapFile[];
+    dependencies: ArchitectureChangeMapDependency[];
+};
+type ArchitectureChangeMapContract = {
+    map: ArchitectureChangeMap;
+    hash: string;
+};
+
+type ArchitectureDependency = {
+    from: string;
+    to: string;
+};
+type ArchitectureActualChange = {
+    path: string;
+    operation: ArchitectureChangeOperation;
+};
+type ArchitectureConvergenceClassification = 'satisfied' | 'missing' | 'contradictory' | 'unplanned';
+type ArchitectureConvergenceFinding = {
+    id: string;
+    classification: ArchitectureConvergenceClassification;
+    subject: 'file' | 'dependency';
+    message: string;
+    nextAction?: string;
+    path?: string;
+    from?: string;
+    to?: string;
+    expectedOperation?: ArchitectureChangeOperation;
+    actualOperation?: ArchitectureChangeOperation | 'added' | 'removed';
+};
+type ArchitectureConvergenceResult = {
+    schemaVersion: '1.0';
+    readOnly: true;
+    changeMapHash: string;
+    structurallyConverged: boolean;
+    behavioralCompletion: 'not-evaluated';
+    summary: Record<ArchitectureConvergenceClassification, number>;
+    findings: ArchitectureConvergenceFinding[];
+};
+type AnalyzeArchitectureConvergenceInput = {
+    changeMap: ArchitectureChangeMapContract;
+    changes: readonly ArchitectureActualChange[];
+    baseDependencies: readonly ArchitectureDependency[];
+    candidateDependencies: readonly ArchitectureDependency[];
+};
+declare function analyzeArchitectureConvergence(input: AnalyzeArchitectureConvergenceInput): ArchitectureConvergenceResult;
+
+type SemanticDependencyKind = 'import' | 'export' | 'dynamic-import' | 'require';
+type SemanticDependency = {
+    specifier?: string;
+    kind: SemanticDependencyKind;
+    line: number;
+    typeOnly: boolean;
+    unresolved: boolean;
+    node: unknown;
+};
+type ForbiddenCapabilityUse = {
+    name: string;
+    line: number;
+    node: unknown;
+};
+/** Extract every dependency form whose specifier is statically knowable, plus unresolved calls. */
+declare function extractSemanticDependencies(ts: any, sourceFile: any): SemanticDependency[];
+/** Resolve forbidden ambient capabilities through symbols, aliases, globalThis, and static keys. */
+declare function collectForbiddenCapabilityUses(ts: any, sourceFile: any, forbidden: readonly string[]): ForbiddenCapabilityUse[];
+
+/**
+ * Type vocabulary for ArkRules files (ADR 0012).
+ *
+ * Pure declarations only — runtime validation and the published JSON Schema live in
+ * ./arkRulesContract.ts so generate:cli-pure can emit a self-contained artifact.
+ */
+/** Closed sensor vocabulary (ADR 0013). Unknown sensors fail closed at load time. */
+declare const ARK_RULE_SENSOR_IDS: readonly ["aggregate-private-state", "always-valid-factory", "domain-event-on-mutation", "orchestration-only", "thin-adapter", "no-anemic-model", "invariant-coverage"];
+type ArkRuleSensorId = (typeof ARK_RULE_SENSOR_IDS)[number];
+type ArkRuleMode = 'advisory' | 'enforced';
+type ArkRuleStructureEntry = {
+    id: string;
+    sensor: ArkRuleSensorId;
+    mode?: ArkRuleMode;
+    appliesTo?: string[];
+    description?: string;
+};
+type ArkRuleInvariantCoverage = {
+    test?: boolean;
+    symbol?: string;
+};
+type ArkRuleInvariantEntry = {
+    id: string;
+    description: string;
+    aggregate?: string;
+    coverage?: ArkRuleInvariantCoverage;
+    mode?: ArkRuleMode;
+    appliesTo?: string[];
+};
+type ArkRulesFile = {
+    $schema?: string;
+    schemaVersion: '1.0';
+    layer: string;
+    structure?: ArkRuleStructureEntry[];
+    invariants?: ArkRuleInvariantEntry[];
+};
+type ArkRuleProvenance = {
+    sourceFile: string;
+    ruleId: string;
+    layer: string;
+};
+type EffectiveStructureRule = ArkRuleStructureEntry & {
+    mode: ArkRuleMode;
+    provenance: ArkRuleProvenance;
+};
+type EffectiveInvariantRule = ArkRuleInvariantEntry & {
+    mode: ArkRuleMode;
+    provenance: ArkRuleProvenance;
+};
+type EffectiveArkRules = {
+    schemaVersion: '1.0';
+    byLayer: Record<string, {
+        sourceFile: string;
+        structure: EffectiveStructureRule[];
+        invariants: EffectiveInvariantRule[];
+    }>;
+    structure: EffectiveStructureRule[];
+    invariants: EffectiveInvariantRule[];
+};
+
+/**
+ * Pure invariant coverage evidence (ADR 0014 / AR09–AR10).
+ *
+ * Mines test titles and symbol presence against the Effective ArkRules catalog.
+ * No filesystem — Tooling supplies file contents and test globs.
+ */
+
+type InvariantCoverageEvidence = {
+    invariantId: string;
+    layer: string;
+    sourceFile: string;
+    mode: 'advisory' | 'enforced';
+    covered: boolean;
+    evidence: Array<'test-title' | 'symbol'>;
+    /** When no test globs were supplied, coverage cannot be proven. */
+    partial: boolean;
+    description: string;
+};
+type InvariantUncoveredKind = 'never-had-tests' | 'tests-disappeared';
+type InvariantCoverageViolation = {
+    ruleId: 'INVARIANT_UNCOVERED';
+    message: string;
+    file: string;
+    line: number;
+    arkruleId: string;
+    arkruleSource: string;
+    fromLayer: string;
+    severity: 'error' | 'warning';
+    failsStrict: boolean;
+    /** Adopt residual (no test suite) vs regression (suite exists, coverage gone). */
+    kind: InvariantUncoveredKind;
+};
+type EvaluateInvariantCoverageInput = {
+    arkRules: EffectiveArkRules;
+    /** Project-relative path → file contents (tests + domain sources). */
+    fileContents: Readonly<Record<string, string>>;
+    /** Paths considered tests (already filtered by Tooling via globs). */
+    testFiles?: readonly string[];
+    /** When true, missing test files make coverage partial (never green covered). */
+    testGlobsMissing?: boolean;
+};
+declare function evaluateInvariantCoverage(input: EvaluateInvariantCoverageInput): {
+    coverage: InvariantCoverageEvidence[];
+    violations: InvariantCoverageViolation[];
+    partial: boolean;
+};
+/**
+ * Deterministic promotion gate: refuse advisory→enforced when invariant is uncovered.
+ */
+declare function canPromoteInvariant(coverage: InvariantCoverageEvidence | undefined): {
+    ok: boolean;
+    reason: string;
+};
+
+/**
+ * Pure ArkRules structure sensor evaluation (ADR 0013).
+ *
+ * Consumes closed class-shape / file facts + Effective ArkRules. Emits violations with
+ * arkrule provenance. No filesystem, no TypeScript compiler.
+ */
+
+type ClassShapeFact = {
+    file: string;
+    className: string;
+    exported: boolean;
+    hasPublicMutableFields: boolean;
+    hasPublicSetters: boolean;
+    hasPublicConstructor: boolean;
+    hasStaticFactory: boolean;
+    mutatingMethods: readonly {
+        name: string;
+        referencesGuardOrPublish: boolean;
+    }[];
+    /** Heuristic: data-only class (fields, no methods beyond accessors). */
+    dataOnly?: boolean;
+};
+type ArkRuleSensorViolation = {
+    ruleId: string;
+    code: string;
+    message: string;
+    file: string;
+    line: number;
+    fromLayer?: string;
+    arkruleId: string;
+    arkruleSource: string;
+    severity: 'error' | 'warning';
+    sensor: ArkRuleSensorId;
+    /** When true, advisory surfaces only (does not fail strict). */
+    failsStrict: boolean;
+};
+type EvaluateArkRuleSensorsInput = {
+    arkRules: EffectiveArkRules;
+    classShapes: readonly ClassShapeFact[];
+    /** Project-relative paths in scope for the analysis. */
+    files: readonly string[];
+    /**
+     * Optional layer membership: path → layer name. When omitted, structure rules
+     * apply by appliesTo globs only (or all files when appliesTo is absent).
+     */
+    layerForFile?: (path: string) => string | null | undefined;
+    /**
+     * Optional thin/orchestration heuristic flags per file (Tooling-supplied).
+     */
+    fileHints?: Readonly<Record<string, {
+        orchestrationHeavy?: boolean;
+        adapterThick?: boolean;
+    }>>;
+};
+/**
+ * Evaluate all structure sensors. Empty Effective Contract → no findings (byte-for-byte parity).
+ */
+declare function evaluateArkRuleSensors(input: EvaluateArkRuleSensorsInput): ArkRuleSensorViolation[];
+/**
+ * ADR 0012 D3 — a structure rule whose appliesTo matches zero governed files is
+ * never silent green. Advisory → warning; enforced → failsStrict.
+ * Rules without appliesTo (whole-layer) never emit this signal.
+ */
+declare function collectEmptyAppliesToFindings(arkRules: EffectiveArkRules, files: readonly string[]): ArkRuleSensorViolation[];
+/**
+ * Pure Tooling/Domain heuristic for orchestration-only / thin-adapter fileHints.
+ * Prefers false negatives over false positives (ADR 0013 discipline).
+ * Returns null when neither flag is set (callers may omit the path).
+ */
+declare function deriveArkRuleFileHints(_file: string, content: string): {
+    orchestrationHeavy?: boolean;
+    adapterThick?: boolean;
+} | null;
+/**
+ * Build fileHints map from path→content. Omits paths with no flags (sparse map).
+ */
+declare function buildArkRuleFileHints(fileContents: Readonly<Record<string, string>>): Record<string, {
+    orchestrationHeavy?: boolean;
+    adapterThick?: boolean;
+}>;
+/**
+ * Lightweight class-shape extraction from TypeScript source text (no compiler).
+ * Conservative: prefers false negatives over false positives for mutability.
+ * Tooling may replace with TypeScript-API facts; sensors consume the same shape.
+ *
+ * Limitation (AR05/AR06): only `export class` / `export abstract class` forms.
+ * `export default class`, re-exported classes, and non-exported aggregates are
+ * invisible — enforced structure sensors stay silent (false negative). Silence
+ * is never proof of compliance.
+ */
+declare function extractClassShapesFromSource(file: string, content: string): ClassShapeFact[];
+
+declare const POLICY_DELTA_SCHEMA_VERSION: "1.0";
+type PolicyDeltaClassification = 'strengthening' | 'neutral' | 'judgment-required' | 'weakening';
+type PolicyDeltaFinding = {
+    id: string;
+    path: string;
+    classification: Exclude<PolicyDeltaClassification, 'neutral'>;
+    message: string;
+    nextAction?: string;
+    before?: unknown;
+    after?: unknown;
+};
+type PolicyDelta = {
+    schemaVersion: typeof POLICY_DELTA_SCHEMA_VERSION;
+    classification: PolicyDeltaClassification;
+    findings: PolicyDeltaFinding[];
+};
+type PolicyDeltaAcknowledgement = {
+    schemaVersion: typeof POLICY_DELTA_SCHEMA_VERSION;
+    basePolicyHash: string;
+    candidatePolicyHash: string;
+    findingIds: readonly string[];
+    reason: string;
+};
+type ClassifyArkPolicyDeltaOptions = {
+    baseArkRules?: EffectiveArkRules;
+    candidateArkRules?: EffectiveArkRules;
+    /**
+     * AR11 — coverage evidence for candidate invariants. Required to auto-allow
+     * advisory→enforced promotion; without it (or when uncovered), promotion is
+     * judgment-required / refused.
+     */
+    candidateInvariantCoverage?: readonly InvariantCoverageEvidence[];
+};
+declare function classifyArkPolicyDelta(base: ArkConfig, candidate: ArkConfig, options?: ClassifyArkPolicyDeltaOptions): PolicyDelta;
+declare function policyDeltaAcknowledgementMatches(acknowledgement: PolicyDeltaAcknowledgement | undefined, expected: {
+    basePolicyHash: string;
+    candidatePolicyHash: string;
+    findingIds: readonly string[];
+}): boolean;
+
+type AnalysisContract = ArkConfigLoadResult & {
+    policyHash: string;
+    /**
+     * ADR 0012 Effective ArkRules (empty when arkRules is absent).
+     * Included in policyHash when non-empty so arkrules edits invalidate identity.
+     */
+    arkRules?: EffectiveArkRules;
+    /**
+     * ADR 0013 class-shape facts for ArkRules sensors (Tooling-supplied).
+     * Empty / absent when ArkRules are not active.
+     */
+    classShapes?: ClassShapeFact[];
+};
+type AnalyzeProjectInput = {
+    contract: AnalysisContract;
+    files: readonly AnalysisFileInput[];
+    compilerOptions?: AnalysisCompilerOptions;
+};
+type AnalyzeChangeInput = AnalyzeProjectInput & {
+    changes: readonly AnalysisFileChange[];
+    changeMap?: ArchitectureChangeMapContract;
+};
+type AnalysisResult = {
+    mode: 'lexical-compatibility';
+    completeness: ResolvedFactsCompleteness;
+    completenessReasons: ResolvedFactsReason[];
+    valid: boolean;
+    ir: AnalysisIr;
+};
+type AnalyzeResolvedProjectInput = {
+    contract: AnalysisContract;
+    facts: unknown;
+    /**
+     * AR10 — Tooling-supplied contents for invariant coverage evidence.
+     * When omitted and the Effective Contract has invariants, coverage is partial
+     * (never false green covered).
+     */
+    coverageInputs?: {
+        fileContents: Readonly<Record<string, string>>;
+        testFiles?: readonly string[];
+        testGlobsMissing?: boolean;
+    };
+    /**
+     * AR07 — Tooling-supplied orchestration/thin-adapter heuristics per file.
+     * Prefer deriveArkRuleFileHints / buildArkRuleFileHints (Domain pure).
+     * When omitted, orchestration-only and thin-adapter sensors stay silent.
+     */
+    fileHints?: Readonly<Record<string, {
+        orchestrationHeavy?: boolean;
+        adapterThick?: boolean;
+    }>>;
+};
+type PreflightResolvedChangeInput = {
+    contract: AnalysisContract;
+    baseFacts: unknown;
+    candidateFacts: unknown;
+    changes: readonly AnalysisFileChange[];
+    changeMap?: ArchitectureChangeMapContract;
+};
+type ResolvedAnalysisFile = ResolvedFileFact & {
+    layer: string | null;
+};
+type ResolvedAnalysisIr = {
+    schemaVersion: '1.0';
+    policyHash: string;
+    compilerOptionsHash: string;
+    files: ResolvedAnalysisFile[];
+    layers: string[];
+    edges: ArchitectureEngineEdge[];
+    capabilityUses: ResolvedCapabilityFact[];
+    violations: ArchitectureEngineViolation[];
+    warnings: ArchitectureEngineViolation[];
+};
+type ResolvedSafetyReport = {
+    tsSuppressions: {
+        file: string;
+        line: number;
+    }[];
+    anyCasts: {
+        file: string;
+        line: number;
+    }[];
+    nonLiteralDynamicImports: {
+        file: string;
+        line: number;
+        kind: 'import' | 'require';
+    }[];
+    inMemoryProductionStores: {
+        file: string;
+        line: number;
+        store: string;
+    }[];
+    disabledPeerIsolationRules: {
+        from: string;
+        to: string;
+    }[];
+    thresholds: {
+        maxTsSuppressions: number;
+        maxAnyCasts: number;
+    };
+};
+type ResolvedAnalysisResult = {
+    mode: 'resolved-candidate-facts';
+    completeness: ResolvedFactsCompleteness;
+    completenessReasons: ResolvedFactsReason[];
+    valid: boolean;
+    strictValid: boolean;
+    policyHash: string;
+    factsHash: ResolvedCandidateFacts['factsHash'];
+    resolverIdentity: ResolvedCandidateFacts['resolverIdentity'];
+    candidateTreeHash: ResolvedCandidateFacts['candidateTreeHash'];
+    safety: ResolvedSafetyReport;
+    ir: ResolvedAnalysisIr;
+};
+type ResolvedChangePreflightResult = {
+    schemaVersion: '1.0';
+    mode: 'resolved-candidate-facts';
+    valid: boolean;
+    readOnly: true;
+    policyHash: string;
+    resolverIdentity: string;
+    compilerIdentity: string;
+    compilerOptionsHash: string;
+    tsconfigHash: string;
+    baseCompilerOptionsHash: string;
+    candidateCompilerOptionsHash: string;
+    baseTsconfigHash: string;
+    candidateTsconfigHash: string;
+    evidenceRequirementsHash: string;
+    baseFactsHash: string;
+    candidateFactsHash: string;
+    baseTreeHash: string;
+    candidateTreeHash: string;
+    baseCompleteness: ResolvedFactsCompleteness;
+    candidateCompleteness: ResolvedFactsCompleteness;
+    baseCompletenessReasons: ResolvedFactsReason[];
+    candidateCompletenessReasons: ResolvedFactsReason[];
+    changeMapHash?: string;
+    convergence?: ArchitectureConvergenceResult;
+    changes: PreparedChangeFile[];
+    violations: ArchitectureEngineViolation[];
+    warnings: ArchitectureEngineViolation[];
+};
+type AnalyzePolicyDeltaInput = {
+    baseConfig: unknown;
+    candidateConfig: unknown;
+    acknowledgement?: PolicyDeltaAcknowledgement;
+    baseSource?: string;
+    candidateSource?: string;
+    /** Optional pre-resolved Effective ArkRules for each side (ADR 0012 / AR02). */
+    baseArkRules?: EffectiveArkRules;
+    candidateArkRules?: EffectiveArkRules;
+    /**
+     * AR11 — optional coverage evidence for candidate invariants.
+     * When omitted, advisory→enforced promotion is judgment-required (refuse auto-allow).
+     */
+    candidateInvariantCoverage?: readonly InvariantCoverageEvidence[];
+};
+type PolicyDeltaAnalysis = {
+    schemaVersion: '1.0';
+    basePolicyHash: string;
+    candidatePolicyHash: string;
+    classification: PolicyDeltaClassification;
+    findings: PolicyDeltaFinding[];
+    blockingFindingIds: string[];
+    requiresAcknowledgement: boolean;
+    acknowledged: boolean;
+    valid: boolean;
+};
+type ArchitectureEngineViolation = {
+    ruleId: string;
+    message: string;
+    file?: string;
+    line?: number;
+    target?: string;
+    fromLayer?: string;
+    toLayer?: string;
+    nextAction?: string;
+    [key: string]: unknown;
+};
+type ArchitectureEngineEdge = {
+    from: string;
+    fromLayer: string | null;
+    to?: string;
+    toLayer?: string;
+    line: number;
+    kind: string;
+    typeOnly?: boolean;
+    targetTypeOnlyExports?: boolean;
+    sourcePureTypeModule?: boolean;
+    namedBindingsTypeOnly?: boolean;
+    portProofEligible?: boolean;
+};
+type EvaluateArchitectureGraphInput = {
+    config: ArkConfig;
+    rules: ArkConfig['rules'];
+    files: readonly string[];
+    contentViolations: readonly ArchitectureEngineViolation[];
+    edges: readonly ArchitectureEngineEdge[];
+    warnings?: readonly ArchitectureEngineViolation[];
+    safety?: unknown;
+};
+type ArchitectureEngineResult = {
+    violations: ArchitectureEngineViolation[];
+    warnings: ArchitectureEngineViolation[];
+    safety?: unknown;
+};
+type PreparedChangeFile = {
+    path: string;
+    operation: 'create' | 'update' | 'delete';
+    beforeContentHash?: string;
+    candidateContentHash?: string;
+};
+type ChangePreflightResult = {
+    schemaVersion: '1.0';
+    mode: 'lexical-compatibility';
+    valid: boolean;
+    readOnly: true;
+    policyHash: string;
+    compilerOptionsHash: string;
+    baseTreeHash: string;
+    candidateTreeHash: string;
+    baseCompleteness: ResolvedFactsCompleteness;
+    candidateCompleteness: ResolvedFactsCompleteness;
+    baseCompletenessReasons: ResolvedFactsReason[];
+    candidateCompletenessReasons: ResolvedFactsReason[];
+    changeMapHash?: string;
+    convergence?: ArchitectureConvergenceResult;
+    changes: PreparedChangeFile[];
+    violations: ArchitectureEngineViolation[];
+    warnings: ArchitectureEngineViolation[];
+};
+type CollectAnalysisConfigWarningsInput = {
+    config: ArkConfig;
+    rules: ArkConfig['rules'];
+    files: readonly string[];
+    manifest?: {
+        architecture?: {
+            layers?: readonly {
+                name?: string;
+                prefixes?: readonly string[];
+            }[];
+        };
+    };
+};
+
+/**
+ * Contract loading, project/change analysis, and policy-delta analysis
+ * (U02 pilot 2). Reached through the src/kernel/analysis.ts facade; consumer
+ * import paths never change.
+ */
+
+type LoadContractOptions = {
+    /** Pre-resolved Effective ArkRules (from resolveEffectiveContract). */
+    arkRules?: EffectiveArkRules;
+};
+declare function loadContract(input: unknown, source?: string, options?: LoadContractOptions): AnalysisContract;
+declare function analyzePolicyDelta(input: AnalyzePolicyDeltaInput): PolicyDeltaAnalysis;
+declare function analyzeProject(input: AnalyzeProjectInput): AnalysisResult;
+declare function analyzeChange(input: AnalyzeChangeInput): AnalysisResult;
+declare function explainViolation(violation: AnalysisViolation): string;
+
+declare function detectArchitectureCycles(graph: ReadonlyMap<string, ReadonlySet<string>>): ArchitectureEngineViolation[];
+/** Canonical graph and layer-policy evaluator shared by library, CLI, and MCP adapters. */
+declare function evaluateArchitectureGraph(input: EvaluateArchitectureGraphInput): ArchitectureEngineResult;
+
+/**
+ * Pure evaluation of validated, resolver-supplied candidate facts (ADR 0011).
+ *
+ * Filesystem discovery and TypeScript resolution remain Tooling concerns. This
+ * module only classifies canonical paths against the supplied contract and
+ * produces the one architecture verdict consumed by every resolved adapter.
+ */
+
+/** Validate supplied facts and evaluate their graph without host effects. */
+declare function analyzeResolvedProject(input: AnalyzeResolvedProjectInput): ResolvedAnalysisResult;
+
+/**
+ * Evaluate one create/update/delete set as a single in-memory candidate.
+ * The function never writes and returns hashes that bind a later host commit to
+ * the exact base, policy, compiler options, and candidate contents it checked.
+ */
+declare function preflightChange(input: AnalyzeChangeInput): ChangePreflightResult;
+
+/**
+ * Validate that the supplied candidate is exactly the declared in-memory
+ * overlay, then return its canonical resolved verdict. No project file is read
+ * or written here.
+ */
+declare function preflightResolvedChange(input: PreflightResolvedChangeInput): ResolvedChangePreflightResult;
+
+/** Canonical config diagnostics over repo-relative file paths. */
+declare function collectAnalysisConfigWarnings(input: CollectAnalysisConfigWarningsInput): ArchitectureEngineViolation[];
+
+/** Public, evidence-backed enforcement state shared by doctor adapters. */
+declare const ARK_ENFORCEMENT_STATE_SCHEMA_VERSION: "1.1";
+type EnforcementVerification = boolean | 'unverified';
+type EnforcementEvidenceField = 'configured' | 'installed' | 'active' | 'runtimeObserved' | 'operationCoverage' | 'bypassable' | 'required' | 'hard';
+type EnforcementEvidence = {
+    field: 'configured' | 'installed' | 'runtimeObserved' | 'hard';
+    source: string;
+    value: boolean;
+} | {
+    field: 'active' | 'operationCoverage' | 'bypassable' | 'required';
+    source: string;
+    value: EnforcementVerification;
+};
+/**
+ * State for one enforcement boundary.
+ *
+ * `configured` records valid wiring, while `installed` requires the referenced
+ * package or executable to resolve. Runtime/provider facts remain
+ * `unverified` until observed; local files never prove `required: true`.
+ */
+type EnforcementBoundaryState = {
+    supported: boolean;
+    analyzed: boolean;
+    configured: boolean;
+    installed: boolean;
+    active: EnforcementVerification;
+    runtimeObserved: boolean;
+    operation: string | null;
+    operationCoverage: EnforcementVerification;
+    bypassable: EnforcementVerification;
+    required: EnforcementVerification;
+    hard: boolean;
+    evidence: readonly EnforcementEvidence[];
+};
+type ArkEnforcementHost = 'claude' | 'grok' | 'cursor' | 'codex' | 'unknown';
+type ArkEnforcementState = {
+    schemaVersion: typeof ARK_ENFORCEMENT_STATE_SCHEMA_VERSION;
+    activeHost: ArkEnforcementHost;
+    localWrite: EnforcementBoundaryState;
+    advisoryMcp: EnforcementBoundaryState;
+    ciMerge: EnforcementBoundaryState;
+};
+
+/** Public neutral contract for the opt-in new-code design-fitness ratchet. */
+declare const ARK_DESIGN_DELTA_SCHEMA_VERSION: "1.0";
+type DesignSmellId = 'io-under-application' | 'handler-in-persistence' | 'god-module' | 'domain-logic-in-ui' | 'facade-sql-in-routes' | 'mixed-pattern-cluster' | 'soft-contract';
+type DesignDeltaIdentity = {
+    kind: 'git-tree' | 'candidate-tree';
+    value: string;
+    commit?: string;
+};
+type DesignSmellEvidence = {
+    kind: string;
+    path: string;
+    line?: number;
+    symbol?: string;
+    detail?: string;
+    magnitude: number;
+};
+type DesignSmellFinding = {
+    smellId: DesignSmellId;
+    fingerprint: string;
+    identity: string;
+    evidence: DesignSmellEvidence;
+    repairHint: string;
+};
+type DesignDeltaChange = DesignSmellFinding & {
+    classification: 'new' | 'worsened';
+    baseMagnitude: number;
+    candidateMagnitude: number;
+};
+/** Created-path merge vs full new+worsened ratchet (Z10). Omitted on older producers. */
+type DesignDeltaEnforcementScope = 'created-paths' | 'touched-new-or-worsened';
+type ArkDesignDeltaResult = {
+    schemaVersion: typeof ARK_DESIGN_DELTA_SCHEMA_VERSION;
+    mode: 'git-base' | 'write-candidate';
+    complete: boolean;
+    valid: boolean;
+    base: DesignDeltaIdentity;
+    candidate: DesignDeltaIdentity;
+    supportedSmellIds: readonly DesignSmellId[];
+    touchedPaths: readonly string[];
+    changes: readonly DesignDeltaChange[];
+    baseFindingCount: number;
+    candidateFindingCount: number;
+    historicalResidualCount: number;
+    enforcementScope?: DesignDeltaEnforcementScope;
+    error?: string;
+};
+
+/**
+ * Public diagnostic code catalog (ACS02).
+ *
+ * Closed vocabulary of stable `ruleId` values emitted by ArkGate adapters with
+ * human/agent `why` / `fix` anchors and docs fragment ids. Cataloguing only —
+ * no new rule semantics, no LLM verdict, no enforcement from prose.
+ *
+ * **Canonical** for docs, agent projection (ACS04), and finding refs (ACS06).
+ * Runtime remediation remains in `remediation.ts`; parity tests bind the two.
+ *
+ * Zero Node I/O. Optional CLI surface: generated `bin/lib/diagnostic-catalog.mjs`.
+ *
+ * @see docs/diagnostics.md
+ * @see docs/plans/agent-contract-surface-4.3/README.md
+ */
+/** Product-relative docs path (shipped in the npm tarball when listed in package files). */
+declare const DIAGNOSTIC_DOCS_RELATIVE_PATH: "docs/diagnostics.md";
+/** Schema id for serializing the catalog snapshot (agents / install projection). */
+declare const DIAGNOSTIC_CATALOG_SCHEMA_VERSION: "1.0";
+type DiagnosticCategory = 'layer' | 'capability' | 'publish' | 'safety' | 'arkrules' | 'arkrun' | 'arkorder' | 'preflight' | 'analysis' | 'snippet-policy' | 'config' | 'adapter' | 'meta';
+type DiagnosticCatalogEntry = {
+    /** Stable public violation / diagnostic id. */
+    ruleId: string;
+    /** Short title for indexes and agent projection. */
+    title: string;
+    /** Why this finding exists (contract intent). */
+    why: string;
+    /**
+     * Canonical fix guidance (agent + human). Contextual nextAction on live
+     * findings may specialize this (e.g. type-only vs value layer import).
+     */
+    fix: string;
+    /** Markdown fragment id for docs/diagnostics.md (without leading #). */
+    docsAnchor: string;
+    category: DiagnosticCategory;
+    /**
+     * When true, finding is commonly advisory / non-blocking in default profiles
+     * (doctor/config warnings, type-only placement debt, empty ArkRule scope).
+     * Not a severity bit for the engine — documentation only.
+     */
+    oftenAdvisory?: boolean;
+};
+/**
+ * Closed public catalog. Order is stable (category groups, then ruleId) for
+ * deterministic serialization and docs generation.
+ *
+ * Every production-emitted `ruleId` must appear here. Remediation switch cases
+ * and adapter nextAction branches are parity-tested against this list.
+ */
+declare const DIAGNOSTIC_CATALOG: readonly DiagnosticCatalogEntry[];
+/** All public ruleIds in catalog order. */
+declare const DIAGNOSTIC_RULE_IDS: readonly string[];
+declare function isKnownDiagnosticCode(ruleId: string | null | undefined): boolean;
+/**
+ * True when the code is catalogued or is an ArkRule-family id handled by the
+ * ARKRULE_* prefix fallback in remediation (structure sensors may add members later
+ * only via catalog + ROADMAP — prefix alone is not a license for free-form ids).
+ */
+declare function isCataloguedOrArkRuleFamily(ruleId: string | null | undefined): boolean;
+declare function getDiagnosticCatalogEntry(ruleId: string | null | undefined): DiagnosticCatalogEntry | undefined;
+/** Fragment for docs links, e.g. `#LAYER_IMPORT_VIOLATION`. */
+declare function diagnosticDocsFragment(ruleId: string): string;
+/**
+ * Repo-relative docs path with fragment (for agents and JSON).
+ * Package consumers resolve against the installed package root or GitHub tree.
+ */
+declare function diagnosticDocsPath(ruleId: string): string;
+/** Catalog snapshot for JSON export / agent projection (stable field order). */
+declare function serializeDiagnosticCatalog(): {
+    schemaVersion: typeof DIAGNOSTIC_CATALOG_SCHEMA_VERSION;
+    docsPath: typeof DIAGNOSTIC_DOCS_RELATIVE_PATH;
+    codes: readonly DiagnosticCatalogEntry[];
+};
+/**
+ * Static catalog fix for a ruleId when no live violation context is available.
+ * Live adapters should still use deterministicNextAction for specialized edges.
+ */
+declare function catalogFixForRuleId(ruleId: string | null | undefined): string | undefined;
+/**
+ * Static catalog why for a ruleId (agent “why” surface).
+ */
+declare function catalogWhyForRuleId(ruleId: string | null | undefined): string | undefined;
+
+export { type ArchitectureConvergenceClassification as $, type ArkRulesFile as A, type AnalysisCapabilityUse as B, type AnalysisCompilerOptions as C, type AnalysisCompleteness as D, type EffectiveArkRules as E, type AnalysisContract as F, type AnalysisEvidence as G, type AnalysisFile as H, type AnalysisFileChange as I, type AnalysisFileInput as J, type AnalysisImportEdge as K, type AnalysisIr as L, type AnalysisMode as M, type AnalysisResult as N, type AnalysisViolation as O, type AnalyzeArchitectureConvergenceInput as P, type AnalyzeChangeInput as Q, type ResolvedArkRunKernelCallKind as R, type AnalyzePolicyDeltaInput as S, type AnalyzeProjectInput as T, type AnalyzeResolvedProjectInput as U, type ArchitectureActualChange as V, type ArchitectureChangeMap as W, type ArchitectureChangeMapContract as X, type ArchitectureChangeMapDependency as Y, type ArchitectureChangeMapFile as Z, type ArchitectureChangeOperation as _, type ResolvedArkRunDeclarationFact as a, adapterFindingOccurrenceTargetKeys as a$, type ArchitectureConvergenceFinding as a0, type ArchitectureConvergenceResult as a1, type ArchitectureDependency as a2, type ArchitectureEngineEdge as a3, type ArchitectureEngineResult as a4, type ArchitectureEngineViolation as a5, type ArkDesignDeltaResult as a6, type ArkEnforcementHost as a7, type ArkEnforcementState as a8, type ArkRuleSensorViolation as a9, type PolicyDeltaClassification as aA, type PolicyDeltaFinding as aB, type PreflightResolvedChangeInput as aC, type PreparedChangeFile as aD, RESOLVED_CANDIDATE_FACTS_SCHEMA as aE, RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION as aF, type ResolvedAmbientFact as aG, type ResolvedAnalysisFile as aH, type ResolvedAnalysisIr as aI, type ResolvedAnalysisResult as aJ, type ResolvedCandidateFacts as aK, type ResolvedCandidateFactsInput as aL, type ResolvedCapability as aM, type ResolvedCapabilityFact as aN, type ResolvedChangePreflightResult as aO, type ResolvedDependencyKind as aP, type ResolvedDependencyState as aQ, type ResolvedFactsCompleteness as aR, type ResolvedFileFact as aS, type ResolvedIntentReferenceFact as aT, type ResolvedPublishFact as aU, type ResolvedSafetyFact as aV, type ResolvedSafetyKind as aW, type ResolvedSafetyReport as aX, type SemanticDependency as aY, type SemanticDependencyKind as aZ, adapterDocsCodePath as a_, type ChangePreflightResult as aa, type ClassShapeFact as ab, type CollectAnalysisConfigWarningsInput as ac, DIAGNOSTIC_CATALOG as ad, DIAGNOSTIC_CATALOG_SCHEMA_VERSION as ae, DIAGNOSTIC_DOCS_RELATIVE_PATH as af, DIAGNOSTIC_RULE_IDS as ag, type DesignDeltaChange as ah, type DesignDeltaEnforcementScope as ai, type DesignDeltaIdentity as aj, type DesignSmellEvidence as ak, type DesignSmellFinding as al, type DesignSmellId as am, type DiagnosticCatalogEntry as an, type DiagnosticCategory as ao, type EnforcementBoundaryState as ap, type EnforcementEvidence as aq, type EnforcementEvidenceField as ar, type EnforcementVerification as as, type EvaluateArchitectureGraphInput as at, type ForbiddenCapabilityUse as au, type InvariantCoverageEvidence as av, POLICY_DELTA_SCHEMA_VERSION as aw, type PolicyDelta as ax, type PolicyDeltaAcknowledgement as ay, type PolicyDeltaAnalysis as az, type ResolvedArkRunKernelCallFact as b, adapterFindingRefFromTargetKey as b0, adapterFindingTargetKey as b1, analyzeArchitectureConvergence as b2, analyzeChange as b3, analyzePolicyDelta as b4, analyzeProject as b5, analyzeResolvedProject as b6, buildArkRuleFileHints as b7, canPromoteInvariant as b8, catalogFixForRuleId as b9, loadContract as bA, loadResolvedCandidateFacts as bB, policyDeltaAcknowledgementMatches as bC, preflightChange as bD, preflightResolvedChange as bE, resolvedFactsEvidenceRequirementsHash as bF, serializeDiagnosticCatalog as bG, stableSerialize as bH, toAdapterDiagnostic as bI, version as bJ, catalogWhyForRuleId as ba, classifyArkPolicyDelta as bb, collectAnalysisConfigWarnings as bc, collectEmptyAppliesToFindings as bd, collectForbiddenCapabilityUses as be, createAICodeGate as bf, createAdapterResult as bg, createArchitectureProfile as bh, createArchitectureProfileFromArkConfig as bi, createElevenLayerArkConfig as bj, createResolvedCandidateFacts as bk, deriveArkRuleFileHints as bl, detectArchitectureCycles as bm, deterministicHash as bn, diagnosticDocsFragment as bo, diagnosticDocsPath as bp, elevenLayerProfile as bq, evaluateArchitectureGraph as br, evaluateArkRuleSensors as bs, evaluateInvariantCoverage as bt, explainViolation as bu, extractClassShapesFromSource as bv, extractSemanticDependencies as bw, getDiagnosticCatalogEntry as bx, isCataloguedOrArkRuleFamily as by, isKnownDiagnosticCode as bz, type ResolvedArkRunManagedNewFact as c, type ResolvedDependencyFact as d, type ResolvedArkRunCompositionRootHitFact as e, type ResolvedFactsReason as f, type ResolvedArkOrderPlaneCallFact as g, type ResolvedArkOrderGenericUpdateFact as h, type ResolvedArkOrderRootHitFact as i, ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH as j, type AICodeGate as k, type AICodeGateContext as l, type AICodeGateOptions as m, type AICodeGateResult as n, type AICodeGateViolation as o, type AIGateExtension as p, ANALYSIS_IR_SCHEMA_VERSION as q, ARK_ANALYSIS_RESULT_SCHEMA as r, ARK_ANALYSIS_RESULT_SCHEMA_VERSION as s, ARK_DESIGN_DELTA_SCHEMA_VERSION as t, ARK_ENFORCEMENT_STATE_SCHEMA_VERSION as u, type AdapterCompletenessReason as v, type AdapterDiagnostic as w, type AdapterResult as x, type AdapterSeverity as y, type AdapterViolationInput as z };