arkgate 4.7.6 → 4.8.0

package/dist/eslint/index.js

@@ -1,7 +1,8 @@
-import x from"fs";import g from"path";var fe=new Map;function ge(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}function $(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}function tt(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}function _(e){let t=fe.get(e);if(t)return t;let r=$(e),n=tt(r),s="",i=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=ge(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",i+=1):l==="}"&&n&&i>0?(s+=")",i-=1):l===","&&n&&i>0?s+="|":s+=ge(l)}let o=new RegExp(`^${s}$`);return fe.set(e,o),o}function rt(e){return $(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}function ye(e,t){let r=$(String(e)),n=rt(r),s=r.replace(/\*/g,"").length,i=n.length*1e4+s;if(t==null||t==="")return i;let o=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let a=0,l=-1;for(let d of n){let u=-1;for(let c=a;c<o.length;c+=1)if(o[c]===d){u=c;break}if(u<0)return i;l=u,a=u+1}return(l+1)*1e6+n.length*1e4+s}function S(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let i of t??[])if(!(i.exclude??[]).some(o=>_(o).test(r))){for(let o of i.patterns??[])if(_(o).test(r)){let a=ye(o,r);a>s&&(s=a,n=i.name)}}return n}function me(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}function nt(e){let t=new Set;for(let r of e??[]){let s=$(String(r)).split("/").filter(Boolean);for(let i=0;i<s.length;i+=1){let o=s[i];if((o==="**"||o==="*")&&i>0){let a=s[i-1];a&&!a.includes("*")&&!a.includes("{")&&!a.includes("}")&&t.add(a)}}}return[...t]}function st(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return nt(n?.patterns)}function ot(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}function Y(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let i=n?.fromPath,o=n?.toPath,a=st(s,t,n?.layers),l=i&&o?me(i,a):void 0,d=i&&o?me(o,a):void 0;if(ot({fromPath:i,toPath:o,folderCount:a.length,fromSlice:l,toSlice:d}))return s;continue}if(t!==r)return s}}function he(e,t,r,n){return Y(e,t,r,n)!==void 0}var it=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function at(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:it,...t]}function Re(e,t){let r=String(e).split(/[/\\]/).join("/");return at(t).some(n=>_(n).test(r))}var Ae=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),lt=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),Cr=Object.freeze(Object.keys(lt).sort()),J=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ct=Object.freeze({process:Object.freeze(["process","node:process"])});function ke(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=J[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=J[n];if(s)return s;let i=e.indexOf("/",r+1);return i<0?null:J[e.slice(0,i)]??null}function X(e,t){for(let r of t)if(ct[r]?.includes(e))return r;return null}function be(e){if(e?.pure===!0)return[...Ae].sort();let r=(e?.capabilities?.deny??[]).filter(n=>Ae.includes(n));return[...new Set(r)].sort()}var Q="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Se=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],ut=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function dt(){let e=[];for(let t of Se)for(let r of Se)t===r||ut.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}var Ie=dt(),ee=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"}],b={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Ee={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Q,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Q,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:"1.2",default:"1.2"},name:{type:"string",minLength:1},include:{...b,minItems:1,default:["src"]},exclude:{...b,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Ie,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...b,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},stewards:{...b,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...b,minItems:1},exclude:b,intentPrefixes:b,description:{type:"string",minLength:1},forbiddenGlobals:b,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...b,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},arkRun:{type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...b,default:[]},managedLayers:{...b,default:[]},requireDeclarations:{type:"boolean",default:!0}}}}},E=class extends Error{issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
+var bt=Object.defineProperty;var l=(e,t)=>bt(e,"name",{value:t,configurable:!0});import _ from"fs";import m from"path";var Ae=new Map;function ke(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(ke,"escapeLiteral");function W(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let o=e[r+1];if("*?{}[],".includes(o)||o==="\\"){t+="\\"+o,r+=1;continue}t+="/";continue}t+=n}return t}l(W,"normalizeGlobSeparators");function Et(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}l(Et,"bracesBalanced");function L(e){let t=Ae.get(e);if(t)return t;let r=W(e),n=Et(r),o="",a=0;for(let i=0;i<r.length;i+=1){let c=r[i];c==="\\"&&i+1<r.length?(o+=ke(r[i+1]),i+=1):c==="*"?r[i+1]==="*"?r[i+2]==="/"?(o+="(?:.*/)?",i+=2):(o+=".*",i+=1):o+="[^/]*":c==="?"?o+="[^/]":c==="{"&&n?(o+="(?:",a+=1):c==="}"&&n&&a>0?(o+=")",a-=1):c===","&&n&&a>0?o+="|":o+=ke(c)}let s=new RegExp(`^${o}$`);return Ae.set(e,s),s}l(L,"globToRegExp");function St(e){return W(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}l(St,"concreteGlobSegments");function Ee(e,t){let r=W(String(e)),n=St(r),o=r.replace(/\*/g,"").length,a=n.length*1e4+o;if(t==null||t==="")return a;let s=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return o;let i=0,c=-1;for(let p of n){let d=-1;for(let u=i;u<s.length;u+=1)if(s[u]===p){d=u;break}if(d<0)return a;c=d,i=d+1}return(c+1)*1e6+n.length*1e4+o}l(Ee,"patternSpecificity");function E(e,t){let r=String(e).split(/[/\\]/).join("/"),n,o=-1;for(let a of t??[])if(!(a.exclude??[]).some(s=>L(s).test(r))){for(let s of a.patterns??[])if(L(s).test(r)){let i=Ee(s,r);i>o&&(o=i,n=a.name)}}return n}l(E,"layerForRelativePath");function be(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(o=>String(o).toLowerCase()));for(let o=0;o<r.length-1;o+=1)if(n.has(r[o].toLowerCase()))return`${r[o].toLowerCase()}/${r[o+1].toLowerCase()}`}l(be,"sliceIdForPath");function It(e){let t=new Set;for(let r of e??[]){let o=W(String(r)).split("/").filter(Boolean);for(let a=0;a<o.length;a+=1){let s=o[a];if((s==="**"||s==="*")&&a>0){let i=o[a-1];i&&!i.includes("*")&&!i.includes("{")&&!i.includes("}")&&t.add(i)}}}return[...t]}l(It,"inferSliceFoldersFromPatterns");function xt(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(o=>typeof o=="string"&&o.length>0);let n=(r??[]).find(o=>o.name===t);return It(n?.patterns)}l(xt,"resolveSliceFolders");function Nt(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}l(Nt,"peerIsolationMustDeny");function re(e,t,r,n){for(let o of e??[])if(!(o.from!==t||o.to!==r)&&o.allowed===!1){if(o.peerIsolation){let a=n?.fromPath,s=n?.toPath,i=xt(o,t,n?.layers),c=a&&s?be(a,i):void 0,p=a&&s?be(s,i):void 0;if(Nt({fromPath:a,toPath:s,folderCount:i.length,fromSlice:c,toSlice:p}))return o;continue}if(t!==r)return o}}l(re,"findDeniedEdgeRule");function Se(e,t,r,n){return re(e,t,r,n)!==void 0}l(Se,"isEdgeDenied");var _t=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function Ct(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:_t,...t]}l(Ct,"scanExcludePatterns");function Ie(e,t){let r=String(e).split(/[/\\]/).join("/");return Ct(t).some(n=>L(n).test(r))}l(Ie,"isScanExcludedRelative");var xe=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),vt=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),tn=Object.freeze(Object.keys(vt).sort()),ne=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),Ot=Object.freeze({process:Object.freeze(["process","node:process"])});function Ne(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=ne[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),o=ne[n];if(o)return o;let a=e.indexOf("/",r+1);return a<0?null:ne[e.slice(0,a)]??null}l(Ne,"capabilityForModuleSpecifier");function oe(e,t){for(let r of t)if(Ot[r]?.includes(e))return r;return null}l(oe,"forbiddenGlobalForModuleSpecifier");function _e(e){if(e?.pure===!0)return[...xe].sort();let r=(e?.capabilities?.deny??[]).filter(n=>xe.includes(n));return[...new Set(r)].sort()}l(_e,"effectiveCapabilityDeny");var K={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Ce={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...K,default:[]},kernelRoots:{...K},managedLayers:{...K,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},ve={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...K,default:[]},managedLayers:{...K,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7}}};function M(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(M,"isObject");function Oe(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let r of e.layers)M(r)&&typeof r.name=="string"&&r.name.length>0&&t.add(r.name);return t}l(Oe,"declaredLayerNames");function we(e){if(!M(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}l(we,"defaultedArkRun");function Le(e){if(!M(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t}}l(Le,"defaultedArkOrder");function Te(e,t){let r=e.arkRun;if(r===void 0||!M(r))return;let n=Oe(e),o=r.managedLayers;if(Array.isArray(o)&&o.forEach((a,s)=>{typeof a=="string"&&a.length>0&&!n.has(a)&&t.push({path:`$.arkRun.managedLayers[${s}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),r.mode==="enforced"){let a=r.kernelRoots??r.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:r.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(Te,"validateArkRunExtra");function De(e,t){let r=e.arkOrder;if(r===void 0||!M(r))return;let n=Oe(e),o=r.managedLayers;if(Array.isArray(o)&&o.forEach((a,s)=>{typeof a=="string"&&a.length>0&&!n.has(a)&&t.push({path:`$.arkOrder.managedLayers[${s}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),r.mode==="enforced"){let a=r.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(De,"validateArkOrderExtra");var S="1.3",se="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Fe=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],wt=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function Lt(){let e=[];for(let t of Fe)for(let r of Fe)t===r||wt.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}l(Lt,"createDefaultRules");var Ke=Lt(),ie=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],I={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Pe={$schema:"https://json-schema.org/draft/2020-12/schema",$id:se,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:se,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:S,default:S},name:{type:"string",minLength:1},include:{...I,minItems:1,default:["src"]},exclude:{...I,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Ke,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...I,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...I,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...I,minItems:1},exclude:I,intentPrefixes:I,description:{type:"string",minLength:1},forbiddenGlobals:I,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...I,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},arkRun:Ce,arkOrder:ve}},x=class extends Error{static{l(this,"ArkConfigValidationError")}issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
 ${r.map(n=>`- ${n.path}: ${n.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function D(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function U(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}function w(e){return e===null?"null":Array.isArray(e)?"array":typeof e}function pt(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}function O(e,t,r,n,s){if(t.$ref){let i=pt(t.$ref,n);if(!i){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}O(e,i,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(i=>Object.is(i,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!D(e)){s.push({path:r,message:`must be an object; received ${w(e)}`});return}let i=t.properties??{};for(let o of t.required??[])e[o]===void 0&&s.push({path:U(r,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in i||s.push({path:U(r,o),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let o=t.additionalProperties;for(let a of Object.keys(e))a in i||O(e[a],o,U(r,a),n,s)}for(let[o,a]of Object.entries(i))e[o]!==void 0&&O(e[o],a,U(r,o),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${w(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let i=e.map(o=>JSON.stringify(o));new Set(i).size!==i.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((i,o)=>O(i,t.items,`${r}[${o}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${w(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${w(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${w(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}function ft(e){return D(e)?{...e,mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations}:e}function gt(e){let t={...e,$schema:e.$schema===void 0?Q:e.$schema,schemaVersion:e.schemaVersion===void 0?"1.2":e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Ie.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=ft(e.arkRun)),t}function mt(e,t){let r=e.arkRun;if(r===void 0||!D(r))return;let n=new Set;if(Array.isArray(e.layers))for(let i of e.layers)D(i)&&typeof i.name=="string"&&i.name.length>0&&n.add(i.name);let s=r.managedLayers;if(Array.isArray(s)&&s.forEach((i,o)=>{typeof i=="string"&&i.length>0&&!n.has(i)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(i)} is not declared in layers[]`})}),r.mode==="enforced"){let i=r.compositionRoots;(!Array.isArray(i)||i.length===0)&&t.push({path:"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one composition root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}function yt(e){return e==="1.2"?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"?e:null}function ht(){let e=new Set(["1.2"]);for(let t of ee)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}function Rt(e,t="ark.config.json"){if(!D(e))throw new E(t,[{path:"$",message:`must be an object; received ${w(e)}`}]);let r=ht(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected 1.2`}]);if(n!=="unversioned"&&!r.has(n))throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.2`}]);let s=n,i={...e},o=0;for(;s!=="1.2"&&o<ee.length+1;){o+=1;let a=ee.find(l=>l.from===s);if(!a)throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected 1.2`}]);s=a.to,i.schemaVersion=s}if(s!=="1.2")throw new E(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected 1.2`}]);return{candidate:gt(i),migratedFrom:yt(n)}}function At(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=Rt(e,t),s=[];if(O(r,Ee,"$",Ee,s),mt(r,s),s.length>0)throw new E(t,s);return{config:r,migratedFrom:n}}function xe(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new E(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return At(r,t)}var kt=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,bt=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,St=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Et(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return kt.test(r)?"pure-shared":n==="PersistenceAdapters"&&(bt.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":St.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}function It(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Et(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}function xt(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}function Nt(e){let t=xt(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from @arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from @arkgate/runtime (never a removed arkgate/runtime shim) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from @arkgate/runtime, never a removed arkgate/runtime shim, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from @arkgate/runtime, never a removed arkgate/runtime shim, then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}function H(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return It(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Nt(e);default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}var Ct="docs/diagnostics.md";function y(e){return typeof e=="string"&&e.length>0?e:void 0}function Ne(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}function vt(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,s=typeof e.toLayer=="string"?e.toLayer:void 0,i=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",s??"",i??""].join("|")}function _t(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}function wt(e){return`${Ct}#${e}`}function Lt(e,t,r){return H({ruleId:e,target:y(t.target)??y(r.target)??void 0,fromLayer:y(t.fromLayer)??void 0,toLayer:y(t.toLayer)??void 0,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:t.targetTypeOnlyExports===!0,namedBindingsTypeOnly:t.namedBindingsTypeOnly===!0,portProofEligible:t.portProofEligible===!0,peerIsolation:t.peerIsolation===!0,sourcePureTypeModule:t.sourcePureTypeModule===!0,edgeKind:y(t.edgeKind)??void 0,capability:y(t.capability)??y(r.capability)??void 0,arkruleId:y(t.arkruleId)??void 0,arkruleSource:y(t.arkruleSource)??void 0})}function Ce(e,t="error",r){let n=y(e.ruleId)??y(e.code)??"ARK_UNKNOWN",s=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,i={...y(e.target)?{target:y(e.target)}:{},...y(e.fromLayer)?{fromLayer:y(e.fromLayer)}:{},...y(e.toLayer)?{toLayer:y(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...y(e.capability)?{capability:y(e.capability)}:{},...y(e.edgeKind)?{edgeKind:y(e.edgeKind)}:{},...y(e.arkruleId)?{arkruleId:y(e.arkruleId)}:{},...y(e.arkruleSource)?{arkruleSource:y(e.arkruleSource)}:{}},o=r??vt(e),a=_t(o);return{ruleId:n,severity:s,message:y(e.message)??n,location:{file:y(e.file)??"<unknown>",line:Ne(e.line,1),column:Ne(e.column,1)},evidence:i,nextAction:y(e.nextAction)??Lt(n,i,e),findingRef:a,targetKey:o,docsCodePath:wt(n)}}var ve={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},Fr=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Tt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}function te(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Tt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ve.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ve.PUBLISH_MISSING_SOURCE}),t}import $e from"fs";import C from"path";var Ft=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Ot=new Set(Ft),Dt=new Set(["AggregateError","Array","ArrayBuffer","BigInt64Array","BigUint64Array","Boolean","DataView","Date","Error","EvalError","FinalizationRegistry","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Number","Object","Promise","Proxy","RangeError","ReferenceError","RegExp","Set","SharedArrayBuffer","String","Symbol","SyntaxError","TypeError","URIError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","WeakRef","WeakSet"]),Pt=new Set(["Array","Atomics","Buffer","JSON","Math","Number","Object","Promise","Reflect","String","console","fs","path","url","util"]);function L(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}var Kt=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],re=new Set(Kt);function Le(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(re.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(re.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:re.has(e.slice(0,n))}function _e(e){if(Ot.has(e))return"factory";switch(e){case"publisher":return"publisher";case"publish":return"publish";case"raise":case"raiseAsync":return"raise";case"send":case"sendTo":return"send";case"subscribe":return"subscribe";case"registerHandler":return"register-handler";case"resolve":return"resolve";case"resolveSingleton":return"resolve-singleton";default:return}}function Te(e,t){let r=1;for(let n=0;n<t;n+=1)e.charCodeAt(n)===10&&(r+=1);return r}function ne(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:\\])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}function Mt(e,t){let r=e.slice(t),n=/^\s*(['"])((?:\\.|[^\\])*?)\1/.exec(r);if(!n)return;let s=n[2]??"";return s.length>0?s:void 0}function we(e,t,r){let n=Math.max(0,t-r.length-8),s=e.slice(n,t);return new RegExp(`\\b${r}\\s+$`).test(s)}function j(e,t){let r=/\b(?:import|export)(\s+type)?\s+([\s\S]*?)\s+from\s*['"]([^'"]+)['"]/g,n;for(;(n=r.exec(e))!==null;)n[1]||t(n[2]??"",n[3]??"")}function Fe(e,t){j(ne(e),t)}function $t(e){let t=new Map,r=new Set;return j(e,(n,s)=>{if(!L(s))return;let i=/\*\s+as\s+([A-Za-z_][A-Za-z0-9_]*)/.exec(n);i?.[1]&&r.add(i[1]);let o=/^([A-Za-z_][A-Za-z0-9_]*)\s*(?:,|$)/.exec(n.trim());o?.[1]&&t.set(o[1],o[1]);let a=/\{([^}]*)\}/.exec(n);if(a?.[1])for(let l of a[1].split(",")){let d=l.trim();if(!d||d.startsWith("type "))continue;let u=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(d);if(u){t.set(u[2],u[1]);continue}let c=/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(d);c?.[1]&&t.set(c[1],c[1])}}),{named:t,namespaces:r}}function Ut(e,t){let r=new Set(t);return j(e,(n,s)=>{let i=/\{([^}]*)\}/.exec(n);if(i?.[1])for(let o of i[1].split(",")){let a=o.trim();if(!a||a.startsWith("type "))continue;let l=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(a),d=l?.[2]??/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(a)?.[1],u=l?.[1]??d;!d||!u||!/^[A-Z]/.test(u)||(L(s)||t.has(u)||t.has(d))&&(r.add(d),r.add(u))}}),r}function Ht(e,t){let r;return j(e,(n,s)=>{!r&&new RegExp(`\\b${t}\\b`).test(n)&&(r=s)}),r}function V(e,t){let r=ne(t),n=$t(r),s=[],i=/\b([A-Za-z_][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,o;for(;(o=i.exec(r))!==null;){let a=o[1],l=o.index;if(we(r,l,"function")||we(r,l,"class"))continue;let u=r.slice(0,l).match(/([A-Za-z_][A-Za-z0-9_]*)\s*\.\s*$/)?.[1],c=n.named.get(a)??a,p=_e(c)??_e(a);if(!p)continue;let f=n.named.has(a)||u!==void 0&&n.namespaces.has(u);if(p!=="factory"&&(!f&&u===void 0||u&&Pt.has(u)&&!f))continue;let m=Mt(r,l+o[0].length);s.push({file:e,line:Te(t,l),kind:p,callee:a,viaImport:f,...u?{receiver:u}:{},...m?{nameLiteral:m}:{}})}return s}function se(e,t,r){let n=ne(t),s=Ut(n,r),i=[],o=/\bnew\s+(?:[A-Za-z_][A-Za-z0-9_]*\s*\.\s*)*([A-Z][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,a;for(;(a=o.exec(n))!==null;){let l=a[1];if(Dt.has(l)||!s.has(l))continue;let d=Ht(n,l);i.push({file:e,line:Te(t,a.index),typeName:l,...d?{importedFrom:d}:{}})}return i}function oe(e,t){let r=[],n=/export\s+(?:abstract\s+)?class\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?:extends\s+[^{]+)?(?:implements\s+[^{]+)?\{/g,s;for(;(s=n.exec(t))!==null;){let i=s[1],o=s.index+s[0].length,a=1,l=o;for(;l<t.length&&a>0;){let k=t[l];k==="{"?a+=1:k==="}"&&(a-=1),l+=1}let d=t.slice(o,l-1),u=d.split(`
-`).map(k=>/^\s*\/\//.test(k)||/^\s*\/\*|\*\//.test(k)?k:k.replace(/(?:public\s+|protected\s+)?readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g,"").replace(/(?:^|[\s;{])readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g," ")).join(`
-`),c=/(?:^|\n)\s*(?:public\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(u.replace(/(?:public\s+|private\s+|protected\s+|static\s+|async\s+|get\s+|set\s+)/g,""))&&/(?:^|\n)\s*(public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(u),p=/(?:^|\n)\s*public\s+(?!static|async|get|set|constructor|readonly)[a-zA-Z_]/.test(u)||/(?:^|[\n;])\s*[a-zA-Z_][a-zA-Z0-9_]*\s*:\s*[^=;\n]+[;=]/m.test(u.split(`
-`).filter(k=>!/^\s*(private|protected|static|constructor|get |set |async |\/)/.test(k)).join(`
-`)),f=/(?:^|[\n;{])\s*(?:public\s+)?set\s+[a-zA-Z_]/.test(d),m=/(?:^|[\n;{])\s*private\s+constructor\s*\(/.test(d),h=/(?:^|[\n;{])\s*(?:public\s+)?constructor\s*\(/.test(d)&&!m,R=/(?:^|[\n;{])\s*static\s+(?:async\s+)?(?:create|of|from|parse|build|make|new)\s*[<(]/.test(d)||/(?:^|[\n;{])\s*static\s+(?:async\s+)?[A-Za-z_][A-Za-z0-9_]*\s*\([^)]*\)\s*:\s*[A-Za-z_]/.test(d),A=[],K=new Set(["if","match","when"]),M=/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+|async\s+)*(?!constructor|get|set|static)([a-zA-Z_][a-zA-Z0-9_]*)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{/g,N;for(;(N=M.exec(d))!==null;){let k=N[1];if(K.has(k))continue;let de=N.index+N[0].length,Z=1,F=de;for(;F<d.length&&Z>0;)d[F]==="{"?Z+=1:d[F]==="}"&&(Z-=1),F+=1;let pe=d.slice(de,F-1);if(!/this\.\w+\s*=/.test(pe))continue;let et=/\b(ensureInvariants|assertInvariants|validate|publish|emit|raise|record)\b/.test(pe);A.push({name:k,referencesGuardOrPublish:et})}let Je=(d.match(/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+)?(?:async\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*\(/g)??[]).length,Xe=(u.match(/(?:^|[\n;])\s*(?:public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/g)??[]).length,Qe=Je<=1&&Xe>=2&&(p||c);r.push({file:e,className:i,exported:!0,hasPublicMutableFields:p||c,hasPublicSetters:f,hasPublicConstructor:h,hasStaticFactory:R,mutatingMethods:[...A],dataOnly:Qe})}return r}function jt(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}function Oe(e){let t=jt(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}var Vt=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Bt=new Set(Vt);function Gt(e){return Bt.has(e)}var De={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},zt="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Me(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}function qt(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}function I(e,t,r,n,s,i,o){let a=e.mode==="enforced"&&o;return{ruleId:De[t],sensor:t,message:s,file:r,line:n,...i?.fromLayer?{fromLayer:i.fromLayer}:{},...i?.target?{target:i.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:H({ruleId:De[t],fromLayer:i?.fromLayer,target:i?.target})}}function Wt(e,t){let r=[],n=[],s=[],i=[];for(let o of e)o.file===t&&(r.push(...o.uses),n.push(...o.reactsTo),s.push(...o.raises),i.push(...o.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(s),sends:new Set(i)}}function Pe(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}function Ke(e){return e==="subscribe"||e==="register-handler"}function Zt(e){return e==="resolve"||e==="resolve-singleton"}function Yt(e,t,r){let n=[],s=e.compositionRoots;if(s.length===0)return n.push(I(e,"arkrun-missing-root","ark.config.json",1,"ArkRun compositionRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let i=new Map;for(let o of t){let a=i.get(o.matchedRoot)??[];a.push(o),i.set(o.matchedRoot,a)}for(let o of s){let a=[...i.get(o)??[]].sort((d,u)=>d.file.localeCompare(u.file));if(a.length===0){n.push(I(e,"arkrun-missing-root","ark.config.json",1,`ArkRun composition root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},r));continue}if(a.some(d=>d.hasKernelFactory))continue;let l=a[0];n.push(I(e,"arkrun-missing-root",l.file,1,`ArkRun composition root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},r))}return n}function Jt(e,t,r,n,s){let i=new Map(t.map(a=>[a.name,a.intentPrefixes??[]])),o=[];for(let a of r){let l=a.specifier;if(!l||!L(l))continue;let d=n(a.from);d&&Me(d,i.get(d)??[])&&o.push(I(e,"arkrun-kernel-in-domain",a.from,a.line,`${d} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:d,target:l},s))}return o}function Xt(e,t,r,n,s,i){let o=new Set(e.managedLayers);if(o.size===0)return[];let a=new Map(t.map(u=>[u.name,u.intentPrefixes??[]])),l=new Set(n.filter(u=>u.hasKernelFactory).map(u=>u.file)),d=[];for(let u of r){if(l.has(u.file))continue;let c=s(u.file);!c||!o.has(c)||Me(c,a.get(c)??[])||d.push(I(e,"arkrun-direct-new",u.file,u.line,`${c} must not construct ${u.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:c,target:u.typeName},i))}return d}function Qt(e,t,r,n,s){let i=[],o=[];if(e.requireDeclarations!==!0)return{findings:i,completenessReasons:o};let a=new Set(e.managedLayers);if(a.size===0)return{findings:i,completenessReasons:o};for(let l of t){if(!Pe(l.kind)&&!Ke(l.kind)&&!Zt(l.kind))continue;let d=n(l.file);if(!d||!a.has(d))continue;if(!l.nameLiteral){e.mode==="enforced"&&o.push({code:zt,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let u=Wt(r,l.file);if(Pe(l.kind)){if(u.raises.has(l.nameLiteral)||u.sends.has(l.nameLiteral))continue;i.push(I(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:d,target:l.nameLiteral},s));continue}if(Ke(l.kind)){if(u.reactsTo.has(l.nameLiteral))continue;i.push(I(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:d,target:l.nameLiteral},s));continue}u.uses.has(l.nameLiteral)||i.push(I(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:d,target:l.nameLiteral},s))}return{findings:i,completenessReasons:o}}function er(e,t,r,n){let s=new Set(e.managedLayers);if(s.size===0)return[];let i=[];for(let o of t){if(o.typeOnly)continue;let a=o.specifier;if(!a||!Le(a))continue;let l=r(o.from);!l||!s.has(l)||i.push(I(e,"arkrun-transport-bypass",o.from,o.line,`${l} must not import broker/queue/emitter ${JSON.stringify(a)}; use the ArkRun kernel transport.`,{fromLayer:l,target:a},n))}return i}function tr(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=Oe(e.classification),n=Qt(t,e.kernelCalls,e.declarations,e.layerForFile,r),s=[...Yt(t,e.compositionRootHits,r),...Jt(t,e.layers,e.dependencies,e.layerForFile,r),...Xt(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...er(t,e.dependencies,e.layerForFile,r)].sort(qt),i=[...n.completenessReasons].sort((o,a)=>{let l=`${o.code}\0${o.file??""}\0${o.message}`,d=`${a.code}\0${a.file??""}\0${a.message}`;return l<d?-1:l>d?1:0});return{findings:s,completenessReasons:i}}function ie(e){return{findings:tr(e).findings.filter(r=>Gt(r.sensor)),completenessReasons:[]}}function rr(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}function He(e){try{return $e.existsSync(e)?$e.readFileSync(e,"utf8"):null}catch{return null}}function Ue(e,t){let r=e.lintedFilename(t),n=e.findConfigPath(r),s=n?e.loadArkConfig(n):null;if(!s?.arkRun||!n||!r)return null;let i=C.dirname(n),o=C.isAbsolute(r)?r:C.resolve(r),a=C.relative(i,o).split(C.sep).join("/");if(!e.sourceIsInAnalysisScope(s,a))return null;let l=S(a,s.layers);return l?{extra:s.arkRun,config:s,root:i,absFile:o,relFile:a,fromLayer:l}:null}function nr(e,t,r){let n=V(t,r).some(i=>i.kind==="factory"),s=[];for(let i of e.compositionRoots){try{if(!_(i).test(t))continue}catch{continue}s.push({file:t,matchedRoot:i,hasKernelFactory:n})}return s}function sr(e,t,r){let n=new Set(oe(t.relFile,r).map(s=>s.className));return Fe(r,(s,i)=>{if(L(i))return;let o=e.resolveImportSpecifier(t.absFile,i,t.root);if(!o)return;let a=C.relative(t.root,o).split(C.sep).join("/");if(a.startsWith(".."))return;let l=He(o);if(l!==null)for(let d of oe(a,l))n.add(d.className)}),n}function je(e,t,r,n,s,i){e.reportAdapterDiagnostic(t,r,n,{ruleId:s.ruleId,file:s.file,fromLayer:s.fromLayer,target:s.target,message:s.message,line:s.line,severity:s.severity,failsStrict:s.failsStrict,nextAction:s.nextAction},i)}function or(e){let t=e.callee;if(t?.type==="Identifier"&&t.name&&/^[A-Z]/.test(t.name))return t.name;let r=t?.property?.name;if(r&&/^[A-Z]/.test(r)&&t?.computed!==!0)return r}function ir(e,t){return e.type?.startsWith("Export")?"export":t}function ar(e,t,r,n,s){let i=(o,a,l,d)=>{if(typeof a!="string"||a.length===0)return;let u=o.loc?.start?.line??1,c={from:r.relFile,specifier:a,kind:d,typeOnly:l,line:u,resolution:"resolved-external"},{findings:p}=ie({arkRun:r.extra,layers:r.config.layers,kernelCalls:[],managedNews:[],compositionRootHits:[],declarations:[],dependencies:[c],layerForFile:f=>f===r.relFile?r.fromLayer:S(f,r.config.layers)});for(let f of p)f.sensor===n&&je(e,t,o,s,f,{fromLayer:f.fromLayer??r.fromLayer,specifier:a,target:f.target??a})};return{ImportDeclaration(o){let a=o,l=(a.specifiers??[]).filter(u=>u.type==="ImportSpecifier"),d=l.length>0&&l.length===(a.specifiers??[]).length&&l.every(u=>u.importKind==="type");i(o,a.source?.value,a.importKind==="type"||d||rr(o),"import")},ImportExpression(o){let a=o;a.source?.type==="Literal"&&i(o,a.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(o){let a=o;i(o,a.moduleReference?.expression?.value,a.importKind==="type"||a.isTypeOnly===!0,"require")},ExportNamedDeclaration(o){let a=o;if(!a.source)return;let l=a.specifiers??[],d=l.length>0&&l.every(u=>u.exportKind==="type");i(o,a.source.value,a.exportKind==="type"||d,ir(o,"export"))},ExportAllDeclaration(o){let a=o;i(o,a.source?.value,a.exportKind==="type","export")},CallExpression(o){let a=o;a.callee?.type==="Identifier"&&a.callee.name==="require"&&a.arguments?.[0]?.type==="Literal"&&!e.isLocallyBound(t,o,"require")&&i(o,a.arguments[0].value,!1,"require")}}}function lr(e,t,r){let n=He(r.absFile)??"",s=sr(e,r,n),i=se(r.relFile,n,s),{findings:o}=ie({arkRun:r.extra,layers:r.config.layers,kernelCalls:V(r.relFile,n),managedNews:i,compositionRootHits:nr(r.extra,r.relFile,n),declarations:[],dependencies:[],layerForFile:l=>l===r.relFile?r.fromLayer:S(l,r.config.layers)}),a=o.filter(l=>l.sensor==="arkrun-direct-new");return{NewExpression(l){let d=or(l);if(!d)return;let u=l.loc?.start?.line,c=a.find(p=>p.target===d&&(u===void 0||p.line===u))??a.find(p=>p.target===d);c&&je(e,t,l,"directNew",c,{fromLayer:c.fromLayer??r.fromLayer,typeName:d,target:c.target??d})}}}function Ve(e){let t=(r,n,s,i)=>({meta:{type:"problem",docs:{description:n},messages:{[s]:i},schema:[]},create(o){let a=Ue(e,o);return a?ar(e,o,a,r,s):{}}});return{noArkRunKernelInDomain:t("arkrun-kernel-in-domain","Disallow Domain-role imports of @arkgate/runtime when arkRun is on (same sensor as ark-check).","kernelInDomain",'{{fromLayer}} must not import kernel module "{{specifier}}".'),noArkRunTransportBypass:t("arkrun-transport-bypass","Disallow homemade broker/queue/emitter imports in arkRun managed layers (same sensor as ark-check).","transportBypass",'{{fromLayer}} must not import broker/queue/emitter "{{specifier}}"; use the ArkRun kernel transport.'),noArkRunDirectNew:{meta:{type:"problem",docs:{description:"Disallow `new` of ArkRun-admitted types outside a composition-root factory (on-disk import/`new` envelope)."},messages:{directNew:"{{fromLayer}} must not construct {{typeName}} with new outside an ArkRun composition-root factory."},schema:[]},create(r){let n=Ue(e,r);return n?lr(e,r,n):{}}}}}function T(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}function v(e,t,r,n,s){let i=Ce({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...s?{data:s}:{},diagnostic:i}),i}function G(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=g.dirname(g.resolve(e));for(;;){let r=g.join(t,"ark.config.json");if(x.existsSync(r))return r;let n=g.dirname(t);if(n===t)return null;t=n}}var Be=new Map;function z(e){if(!x.existsSync(e))return null;let t=x.readFileSync(e,"utf8"),r=Be.get(e);if(r?.source===t)return r.config;let n=xe(t,e).config;return Be.set(e,{source:t,config:n}),n}function q(e,t){return(e.include??[]).some(n=>{let s=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return s==="."||t===s||t.startsWith(`${s}/`)})&&!Re(t,e)}function Ge(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,g.join(e,"index.ts"),g.join(e,"index.tsx"),g.join(e,"index.js")];for(let r of t)try{if(x.existsSync(r)&&x.statSync(r).isFile())return r}catch{}return null}function cr(e){let t=g.resolve(e),r=null;for(;;){let d=g.join(t,"tsconfig.json");if(x.existsSync(d)){r=d;break}let u=g.dirname(t);if(u===t)break;t=u}if(!r)return{baseUrl:e,aliases:[]};let n=d=>{try{let u=x.readFileSync(d,"utf8");return u=u.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(u)}catch{return null}},s=(d,u)=>{if(u>4)return{};let c=n(d);if(!c)return{};let p=c.compilerOptions??{},f=p.baseUrl,m=p.paths,h=c.extends;if(typeof h=="string"&&!h.startsWith("@")){let R=g.resolve(g.dirname(d),h.endsWith(".json")?h:`${h}.json`);if(x.existsSync(R)){let A=s(R,u+1);f=f??A.baseUrl,m={...A.paths??{},...m??{}}}}return{baseUrl:f,paths:m}},i=s(r,0),o=g.dirname(r),a=g.resolve(o,i.baseUrl||"."),l=[];for(let[d,u]of Object.entries(i.paths||{})){if(!Array.isArray(u)||u.length===0)continue;let c=d.replace(/\*$/,"");c&&l.push({from:c,to:String(u[0]).replace(/\*$/,"")})}return l.sort((d,u)=>u.from.length-d.from.length),{baseUrl:a,aliases:l}}function ur(e,t){if(!t.startsWith("."))return null;let r=g.resolve(g.dirname(e),t);return Ge(r)}function ze(e,t,r){if(!t)return null;if(t.startsWith("."))return ur(e,t);let n=r||g.dirname(e),{baseUrl:s,aliases:i}=cr(n),o=i.find(l=>t.startsWith(l.from));if(!o)return null;let a=g.resolve(s,`${o.to}${t.slice(o.from.length)}`);return Ge(a)}function W(e){return typeof e?.value=="string"?e.value:void 0}function ce(e){return e?.name??W(e)}function ue(e){return e.sourceCode??e.getSourceCode?.()}function qe(e,t){let r=ue(e)?.getScope?.(t);for(;r;){let n=r.references?.find(s=>s.identifier===t);if(n)return n;r=r.upper??void 0}}function P(e,t,r){let n=qe(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let s=ue(e)?.getScope?.(t);for(;s;){let i=s.set?.get(r);if(i)return(i.defs?.length??0)>0;s=s.upper??void 0}return!1}function dr(e,t){let r=qe(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}function We(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=We(e.object),n=ce(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}function pr(e){return ce(e.callee?.property)}function Ze(e,t){return e?.properties?.find(r=>ce(r.key)===t)}function B(e,t){return Ze(e,t)!==void 0}function fr(e){let t=Ze(e,"metadata")?.value;return B(t,"source")}function Ye(e){return pr(e)==="publish"}function ae(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}function gr(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}function mr(e){let t=gr(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!ae(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!ae(n))return!1;r=!0;continue}return!1}}return r}var yr={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=T(e),r=G(t),n=r?z(r):null,s=r?g.dirname(r):null,i=o=>{let a=W(o.source);if(a&&n&&s&&t){let l=g.isAbsolute(t)?t:g.resolve(t),d=g.relative(s,l).split(g.sep).join("/");if(!q(n,d))return;let u=S(d,n.layers);if(!u)return;let c=ze(l,a,s);if(!c)return;let p=g.relative(s,c).split(g.sep).join("/");if(p.startsWith(".."))return;let f=S(p,n.layers);if(!f)return;let m={fromPath:d,toPath:p,layers:n.layers},h=Y(n.rules,u,f,m);if(h||he(n.rules,u,f,m)){let R=o.type?.startsWith("Export")?"export":"import",A=ae(o),K=!!h?.peerIsolation,M=A&&!K,N=h?.message??`${u} must not ${R} ${f}.`;v(e,o,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:d,fromLayer:u,toLayer:f,target:p,edgeKind:R,...K?{peerIsolation:!0}:{},...A?{typeOnly:!0}:{},...M?{severity:"warning"}:{},...mr(o)?{sourcePureTypeModule:!0}:{},message:M?`${N} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:N},{fromLayer:u,toLayer:f,specifier:a})}return}};return{ImportDeclaration:i,ExportNamedDeclaration:i,ExportAllDeclaration:i}}},hr={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=W(r),s=te({publishCall:Ye(t),rawIntentName:n,objectHasIntent:B(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(s.some(i=>i.ruleId==="RAW_EVENT_PUBLISH")){let i=s.find(o=>o.ruleId==="RAW_EVENT_PUBLISH");v(e,t,"rawPublish",{...i,file:T(e)})}}}}},Rr={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],i=te({publishCall:Ye(t),rawIntentName:W(r),objectHasIntent:B(r,"intent"),arkPublishCandidate:!0,hasSource:fr(r)||B(n,"source")}).find(o=>o.ruleId==="PUBLISH_MISSING_SOURCE");i&&v(e,t,"missingSource",{...i,file:T(e)})}}}},Ar={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=T(e),r=e.options?.[0],n=G(t),s=n?z(n):null,i=n?g.dirname(n):null,o=null,a="this layer";if(s&&i&&t){let c=g.isAbsolute(t)?t:g.resolve(t),p=g.relative(i,c).split(g.sep).join("/");if(!q(s,p))return{};let f=s.layers?.find(m=>m.name===S(p,s.layers));f?.forbiddenGlobals?.length?(o=new Set(f.forbiddenGlobals),a=f.name):o=null}else r?.globals&&(o=new Set(r.globals));if(!o)return{};let l=typeof ue(e)?.getScope=="function",d=(c,p)=>{let f=g.isAbsolute(t)?t:g.resolve(t),m=i?g.relative(i,f).split(g.sep).join("/"):t;v(e,c,s?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:m,fromLayer:a,target:p,message:`${a} must not use the ambient global "${p}".`},{name:p,layer:a})},u=(c,p,f,m)=>{if(f||typeof p!="string")return;let h=X(p,o);if(!h)return;let R=g.isAbsolute(t)?t:g.resolve(t),A=i?g.relative(i,R).split(g.sep).join("/"):t;v(e,c,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:A,fromLayer:a,target:p,edgeKind:m,message:`${a} must not use module "${p}" because it is the import form of forbidden global "${h}".`},{layer:a,name:h,specifier:p,importKind:m})};return{MemberExpression(c){if(c.parent?.type==="MemberExpression"&&c.parent.object===c)return;let p=We(c);if(!p||P(e,p.root,p.segments[0]))return;let f=p.segments[0]==="globalThis",m=f?p.segments.slice(1):p.segments,h;for(let R=m.length;R>=(f?1:2);R-=1){let A=m.slice(0,R).join(".");if(o.has(A)){h=A;break}}h?d(c,h):!l&&o.has(p.segments[0])&&d(c,p.segments[0])},CallExpression(c){let p=c;if(p.callee?.type==="Identifier"&&p.callee.name==="require"&&p.arguments?.[0]?.type==="Literal"&&!P(e,c,"require")&&u(c,p.arguments[0].value,!1,"require"),l)return;let f=p.callee?.type==="Identifier"?p.callee.name:void 0;f&&o.has(f)&&d(c,f)},ImportDeclaration(c){let p=c,f=(p.specifiers??[]).filter(h=>h.type==="ImportSpecifier"),m=f.length>0&&f.length===(p.specifiers??[]).length&&f.every(h=>h.importKind==="type");u(c,p.source?.value,p.importKind==="type"||m,"import")},ImportExpression(c){let p=c;p.source?.type==="Literal"&&u(c,p.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(c){let p=c;u(c,p.moduleReference?.expression?.value,p.importKind==="type"||p.isTypeOnly===!0,"require")},ExportNamedDeclaration(c){let p=c;if(!p.source)return;let f=p.specifiers??[],m=f.length>0&&f.every(h=>h.exportKind==="type");u(c,p.source.value,p.exportKind==="type"||m,"export")},ExportAllDeclaration(c){let p=c;u(c,p.source?.value,p.exportKind==="type","export")},NewExpression(c){if(l)return;let p=c.callee?.type==="Identifier"?c.callee.name:void 0;p&&o.has(p)&&d(c,p)},Identifier(c){!l||!c.name||!o.has(c.name)||!dr(e,c)||P(e,c,c.name)||d(c,c.name)}}}},kr={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=T(e),r=G(t),n=r?z(r):null,s=r?g.dirname(r):null;if(!n||!s||!t)return{};let i=g.isAbsolute(t)?t:g.resolve(t),o=g.relative(s,i).split(g.sep).join("/");if(!q(n,o))return{};let a=n.layers?.find(u=>u.name===S(o,n.layers));if(!a)return{};let l=new Set(be(a));if(l.size===0)return{};let d=(u,c,p,f)=>{if(p||typeof c!="string"||X(c,a.forbiddenGlobals??[]))return;let m=ke(c);!m||!l.has(m)||v(e,u,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:o,fromLayer:a.name,target:c,capability:m,edgeKind:f,message:`${a.name} denies the ${m} capability; found import of "${c}".`},{layer:a.name,capability:m,specifier:c})};return{ImportDeclaration(u){let c=u,p=(c.specifiers??[]).filter(m=>m.type==="ImportSpecifier"),f=p.length>0&&p.length===(c.specifiers??[]).length&&p.every(m=>m.importKind==="type");d(u,c.source?.value,c.importKind==="type"||f,"import")},ImportExpression(u){let c=u;c.source?.type==="Literal"&&d(u,c.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(u){let c=u;d(u,c.moduleReference?.expression?.value,c.importKind==="type"||c.isTypeOnly===!0,"require")},ExportNamedDeclaration(u){let c=u;if(!c.source)return;let p=c.specifiers??[],f=p.length>0&&p.every(m=>m.exportKind==="type");d(u,c.source.value,c.exportKind==="type"||f,"export")},ExportAllDeclaration(u){let c=u;d(u,c.source?.value,c.exportKind==="type","export")},CallExpression(u){let c=u;c.callee?.type==="Identifier"&&c.callee.name==="require"&&c.arguments?.[0]?.type==="Literal"&&!P(e,u,"require")&&d(u,c.arguments[0].value,!1,"require")}}}},{noArkRunKernelInDomain:br,noArkRunDirectNew:Sr,noArkRunTransportBypass:Er}=Ve({findConfigPath:G,loadArkConfig:z,resolveImportSpecifier:ze,lintedFilename:T,sourceIsInAnalysisScope:q,isLocallyBound:P,reportAdapterDiagnostic:v});var Ir={"no-domain-infra-imports":yr,"no-raw-event-publish":hr,"require-publish-source":Rr,"no-forbidden-globals":Ar,"no-denied-capabilities":kr,"no-arkrun-kernel-in-domain":br,"no-arkrun-direct-new":Sr,"no-arkrun-transport-bypass":Er},le={rules:Ir};le.configs={recommended:{plugins:{ark:le},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error","ark/no-arkrun-kernel-in-domain":"error","ark/no-arkrun-direct-new":"error","ark/no-arkrun-transport-bypass":"error"}}};var an=le;export{an as default,G as findConfigPath,_ as globToRegExp,he as isEdgeDenied,S as layerForRelativePath,z as loadArkConfig,Sr as noArkRunDirectNew,br as noArkRunKernelInDomain,Er as noArkRunTransportBypass,kr as noDeniedCapabilities,yr as noDomainInfraImports,Ar as noForbiddenGlobals,hr as noRawEventPublish,ye as patternSpecificity,le as plugin,cr as readTsconfigPathAliases,Rr as requirePublishSource,ze as resolveImportSpecifier,ur as resolveRelativeImport};
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function Me(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Me,"isObject");function q(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}l(q,"propertyPath");function T(e){return e===null?"null":Array.isArray(e)?"array":typeof e}l(T,"valueType");function Tt(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}l(Tt,"resolveSchemaRef");function $(e,t,r,n,o){if(t.$ref){let a=Tt(t.$ref,n);if(!a){o.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}$(e,a,r,n,o);return}if(t.const!==void 0&&!Object.is(e,t.const)){o.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){o.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Me(e)){o.push({path:r,message:`must be an object; received ${T(e)}`});return}let a=t.properties??{};for(let s of t.required??[])e[s]===void 0&&o.push({path:q(r,s),message:"is required"});if(t.additionalProperties===!1)for(let s of Object.keys(e))s in a||o.push({path:q(r,s),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let s=t.additionalProperties;for(let i of Object.keys(e))i in a||$(e[i],s,q(r,i),n,o)}for(let[s,i]of Object.entries(a))e[s]!==void 0&&$(e[s],i,q(r,s),n,o);return}if(t.type==="array"){if(!Array.isArray(e)){o.push({path:r,message:`must be an array; received ${T(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&o.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(s=>JSON.stringify(s));new Set(a).size!==a.length&&o.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((a,s)=>$(a,t.items,`${r}[${s}]`,n,o));return}if(t.type==="string"){if(typeof e!="string"){o.push({path:r,message:`must be a string; received ${T(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&o.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&o.push({path:r,message:`must be a boolean; received ${T(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){o.push({path:r,message:`must be an integer; received ${T(e)}`});return}t.minimum!==void 0&&e<t.minimum&&o.push({path:r,message:`must be at least ${t.minimum}`})}}l($,"validateNode");function Dt(e){let t={...e,$schema:e.$schema===void 0?se:e.$schema,schemaVersion:e.schemaVersion===void 0?S:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Ke.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=we(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Le(e.arkOrder)),t}l(Dt,"defaultedConfig");function Ft(e){return e===S?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}l(Ft,"migratedFromOf");function Pt(){let e=new Set([S]);for(let t of ie)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}l(Pt,"knownInputVersions");function Kt(e,t="ark.config.json"){if(!Me(e))throw new x(t,[{path:"$",message:`must be an object; received ${T(e)}`}]);let r=Pt(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new x(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${S}`}]);if(n!=="unversioned"&&!r.has(n))throw new x(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${S}`}]);let o=n,a={...e},s=0;for(;o!==S&&s<ie.length+1;){s+=1;let i=ie.find(c=>c.from===o);if(!i)throw new x(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(o)}; expected ${S}`}]);o=i.to,a.schemaVersion=o}if(o!==S)throw new x(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${S}`}]);return{candidate:Dt(a),migratedFrom:Ft(n)}}l(Kt,"migrateArkConfig");function Mt(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=Kt(e,t),o=[];if($(r,Pe,"$",Pe,o),Te(r,o),De(r,o),o.length>0)throw new x(t,o);return{config:r,migratedFrom:n}}l(Mt,"loadArkConfigContract");function $e(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new x(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return Mt(r,t)}l($e,"parseArkConfigJson");var $t=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Ut=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ht=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function jt(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),o=String(t?.toLayer??"");return $t.test(r)?"pure-shared":n==="PersistenceAdapters"&&(Ut.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${o} ${r}`))?"kernel-emit":Ht.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&o==="PersistenceAdapters"?"use-case":"unknown"}l(jt,"classifyLayerImportKind");function Vt(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=jt(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(Vt,"layerImportNextAction");function Bt(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(Bt,"arkRunCallSiteName");function Gt(e){let t=Bt(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(Gt,"arkRunNextAction");function D(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Vt(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Gt(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() to freeze \u03BE or proposeRelease() for a pattern change with blast radius, then preflight again. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate only. Change \u03BE with proposeRelease + release. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(D,"deterministicNextAction");var zt="docs/diagnostics.md";function R(e){return typeof e=="string"&&e.length>0?e:void 0}l(R,"text");function Ue(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}l(Ue,"positiveInteger");function Wt(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,o=typeof e.toLayer=="string"?e.toLayer:void 0,a=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",o??"",a??""].join("|")}l(Wt,"adapterFindingTargetKey");function qt(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(qt,"adapterFindingRefFromTargetKey");function Zt(e){return`${zt}#${e}`}l(Zt,"adapterDocsCodePath");function Yt(e,t,r){return D({ruleId:e,target:R(t.target)??R(r.target)??void 0,fromLayer:R(t.fromLayer)??void 0,toLayer:R(t.toLayer)??void 0,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:t.targetTypeOnlyExports===!0,namedBindingsTypeOnly:t.namedBindingsTypeOnly===!0,portProofEligible:t.portProofEligible===!0,peerIsolation:t.peerIsolation===!0,sourcePureTypeModule:t.sourcePureTypeModule===!0,edgeKind:R(t.edgeKind)??void 0,capability:R(t.capability)??R(r.capability)??void 0,arkruleId:R(t.arkruleId)??void 0,arkruleSource:R(t.arkruleSource)??void 0})}l(Yt,"nextActionForDiagnostic");function He(e,t="error",r){let n=R(e.ruleId)??R(e.code)??"ARK_UNKNOWN",o=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,a={...R(e.target)?{target:R(e.target)}:{},...R(e.fromLayer)?{fromLayer:R(e.fromLayer)}:{},...R(e.toLayer)?{toLayer:R(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...R(e.capability)?{capability:R(e.capability)}:{},...R(e.edgeKind)?{edgeKind:R(e.edgeKind)}:{},...R(e.arkruleId)?{arkruleId:R(e.arkruleId)}:{},...R(e.arkruleSource)?{arkruleSource:R(e.arkruleSource)}:{}},s=r??Wt(e),i=qt(s);return{ruleId:n,severity:o,message:R(e.message)??n,location:{file:R(e.file)??"<unknown>",line:Ue(e.line,1),column:Ue(e.column,1)},evidence:a,nextAction:R(e.nextAction)??Yt(n,a,e),findingRef:i,targetKey:s,docsCodePath:Zt(n)}}l(He,"toAdapterDiagnostic");var je={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},mn=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Jt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Jt,"looksLikeArkIntent");function ae(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Jt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:je.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:je.PUBLISH_MISSING_SOURCE}),t}l(ae,"classifyPublishFacts");import Xe from"fs";import O from"path";var Xt=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Qt=new Set(Xt),er=new Set(["AggregateError","Array","ArrayBuffer","BigInt64Array","BigUint64Array","Boolean","DataView","Date","Error","EvalError","FinalizationRegistry","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Number","Object","Promise","Proxy","RangeError","ReferenceError","RegExp","Set","SharedArrayBuffer","String","Symbol","SyntaxError","TypeError","URIError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","WeakRef","WeakSet"]),tr=new Set(["Array","Atomics","Buffer","JSON","Math","Number","Object","Promise","Reflect","String","console","fs","path","url","util"]);function F(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(F,"isArkRunKernelModuleSpecifier");var rr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],le=new Set(rr);function Ge(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(le.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(le.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:le.has(e.slice(0,n))}l(Ge,"isArkRunTransportBypassSpecifier");function Ve(e){if(Qt.has(e))return"factory";switch(e){case"publisher":return"publisher";case"publish":return"publish";case"raise":case"raiseAsync":return"raise";case"send":case"sendTo":return"send";case"subscribe":return"subscribe";case"registerHandler":return"register-handler";case"resolve":return"resolve";case"resolveSingleton":return"resolve-singleton";default:return}}l(Ve,"arkRunKernelCallKind");function ze(e,t){let r=1;for(let n=0;n<t;n+=1)e.charCodeAt(n)===10&&(r+=1);return r}l(ze,"lineAt");function ce(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:\\])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}l(ce,"stripCommentsPreservingLines");function nr(e,t){let r=e.slice(t),n=/^\s*(['"])((?:\\.|[^\\])*?)\1/.exec(r);if(!n)return;let o=n[2]??"";return o.length>0?o:void 0}l(nr,"firstStringLiteralArg");function Be(e,t,r){let n=Math.max(0,t-r.length-8),o=e.slice(n,t);return new RegExp(`\\b${r}\\s+$`).test(o)}l(Be,"keywordBefore");function Z(e,t){let r=/\b(?:import|export)(\s+type)?\s+([\s\S]*?)\s+from\s*['"]([^'"]+)['"]/g,n;for(;(n=r.exec(e))!==null;)n[1]||t(n[2]??"",n[3]??"")}l(Z,"parseValueImportClause");function We(e,t){Z(ce(e),t)}l(We,"forEachArkRunValueImportClause");function or(e){let t=new Map,r=new Set;return Z(e,(n,o)=>{if(!F(o))return;let a=/\*\s+as\s+([A-Za-z_][A-Za-z0-9_]*)/.exec(n);a?.[1]&&r.add(a[1]);let s=/^([A-Za-z_][A-Za-z0-9_]*)\s*(?:,|$)/.exec(n.trim());s?.[1]&&t.set(s[1],s[1]);let i=/\{([^}]*)\}/.exec(n);if(i?.[1])for(let c of i[1].split(",")){let p=c.trim();if(!p||p.startsWith("type "))continue;let d=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(p);if(d){t.set(d[2],d[1]);continue}let u=/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(p);u?.[1]&&t.set(u[1],u[1])}}),{named:t,namespaces:r}}l(or,"collectKernelImportBindings");function sr(e,t){let r=new Set(t);return Z(e,(n,o)=>{let a=/\{([^}]*)\}/.exec(n);if(a?.[1])for(let s of a[1].split(",")){let i=s.trim();if(!i||i.startsWith("type "))continue;let c=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(i),p=c?.[2]??/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(i)?.[1],d=c?.[1]??p;!p||!d||!/^[A-Z]/.test(d)||(F(o)||t.has(d)||t.has(p))&&(r.add(p),r.add(d))}}),r}l(sr,"collectImportedConstructors");function ir(e,t){let r;return Z(e,(n,o)=>{!r&&new RegExp(`\\b${t}\\b`).test(n)&&(r=o)}),r}l(ir,"importedFromForName");function Y(e,t){let r=ce(t),n=or(r),o=[],a=/\b([A-Za-z_][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,s;for(;(s=a.exec(r))!==null;){let i=s[1],c=s.index;if(Be(r,c,"function")||Be(r,c,"class"))continue;let d=r.slice(0,c).match(/([A-Za-z_][A-Za-z0-9_]*)\s*\.\s*$/)?.[1],u=n.named.get(i)??i,f=Ve(u)??Ve(i);if(!f)continue;let g=n.named.has(i)||d!==void 0&&n.namespaces.has(d);if(f!=="factory"&&(!g&&d===void 0||d&&tr.has(d)&&!g))continue;let y=nr(r,c+s[0].length);o.push({file:e,line:ze(t,c),kind:f,callee:i,viaImport:g,...d?{receiver:d}:{},...y?{nameLiteral:y}:{}})}return o}l(Y,"extractArkRunKernelCallsFromSource");function ue(e,t,r){let n=ce(t),o=sr(n,r),a=[],s=/\bnew\s+(?:[A-Za-z_][A-Za-z0-9_]*\s*\.\s*)*([A-Z][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,i;for(;(i=s.exec(n))!==null;){let c=i[1];if(er.has(c)||!o.has(c))continue;let p=ir(n,c);a.push({file:e,line:ze(t,i.index),typeName:c,...p?{importedFrom:p}:{}})}return a}l(ue,"extractArkRunManagedNewsFromSource");function de(e,t){let r=[],n=/export\s+(?:abstract\s+)?class\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?:extends\s+[^{]+)?(?:implements\s+[^{]+)?\{/g,o;for(;(o=n.exec(t))!==null;){let a=o[1],s=o.index+o[0].length,i=1,c=s;for(;c<t.length&&i>0;){let b=t[c];b==="{"?i+=1:b==="}"&&(i-=1),c+=1}let p=t.slice(s,c-1),d=p.split(`
+`).map(b=>/^\s*\/\//.test(b)||/^\s*\/\*|\*\//.test(b)?b:b.replace(/(?:public\s+|protected\s+)?readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g,"").replace(/(?:^|[\s;{])readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g," ")).join(`
+`),u=/(?:^|\n)\s*(?:public\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(d.replace(/(?:public\s+|private\s+|protected\s+|static\s+|async\s+|get\s+|set\s+)/g,""))&&/(?:^|\n)\s*(public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(d),f=/(?:^|\n)\s*public\s+(?!static|async|get|set|constructor|readonly)[a-zA-Z_]/.test(d)||/(?:^|[\n;])\s*[a-zA-Z_][a-zA-Z0-9_]*\s*:\s*[^=;\n]+[;=]/m.test(d.split(`
+`).filter(b=>!/^\s*(private|protected|static|constructor|get |set |async |\/)/.test(b)).join(`
+`)),g=/(?:^|[\n;{])\s*(?:public\s+)?set\s+[a-zA-Z_]/.test(p),y=/(?:^|[\n;{])\s*private\s+constructor\s*\(/.test(p),h=/(?:^|[\n;{])\s*(?:public\s+)?constructor\s*\(/.test(p)&&!y,A=/(?:^|[\n;{])\s*static\s+(?:async\s+)?(?:create|of|from|parse|build|make|new)\s*[<(]/.test(p)||/(?:^|[\n;{])\s*static\s+(?:async\s+)?[A-Za-z_][A-Za-z0-9_]*\s*\([^)]*\)\s*:\s*[A-Za-z_]/.test(p),k=[],G=new Set(["if","match","when"]),z=/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+|async\s+)*(?!constructor|get|set|static)([a-zA-Z_][a-zA-Z0-9_]*)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{/g,v;for(;(v=z.exec(p))!==null;){let b=v[1];if(G.has(b))continue;let Re=v.index+v[0].length,te=1,P=Re;for(;P<p.length&&te>0;)p[P]==="{"?te+=1:p[P]==="}"&&(te-=1),P+=1;let he=p.slice(Re,P-1);if(!/this\.\w+\s*=/.test(he))continue;let kt=/\b(ensureInvariants|assertInvariants|validate|publish|emit|raise|record)\b/.test(he);k.push({name:b,referencesGuardOrPublish:kt})}let Rt=(p.match(/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+)?(?:async\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*\(/g)??[]).length,ht=(d.match(/(?:^|[\n;])\s*(?:public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/g)??[]).length,At=Rt<=1&&ht>=2&&(f||u);r.push({file:e,className:a,exported:!0,hasPublicMutableFields:f||u,hasPublicSetters:g,hasPublicConstructor:h,hasStaticFactory:A,mutatingMethods:[...k],dataOnly:At})}return r}l(de,"extractClassShapesFromSource");function ar(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}l(ar,"normalizeExtraMergeTeethClassification");function J(e){let t=ar(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}l(J,"extraMergeTeethAllowed");var lr=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],cr=new Set(lr);function ur(e){return cr.has(e)}l(ur,"isArkRunEditorSensor");var qe={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},dr="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Je(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let o=n.trim().replace(/\.+$/,"");return o==="Domain"||o.startsWith("Domain.")})}l(Je,"isDomainRoleLayer");function pr(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(pr,"compareFindings");function N(e,t,r,n,o,a,s){let i=e.mode==="enforced"&&s;return{ruleId:qe[t],sensor:t,message:o,file:r,line:n,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:D({ruleId:qe[t],fromLayer:a?.fromLayer,target:a?.target})}}l(N,"finding");function fr(e,t){let r=[],n=[],o=[],a=[];for(let s of e)s.file===t&&(r.push(...s.uses),n.push(...s.reactsTo),o.push(...s.raises),a.push(...s.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(o),sends:new Set(a)}}l(fr,"bagForFile");function Ze(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(Ze,"emitKinds");function Ye(e){return e==="subscribe"||e==="register-handler"}l(Ye,"handleKinds");function gr(e){return e==="resolve"||e==="resolve-singleton"}l(gr,"dependKinds");function mr(e,t,r){let n=[],o=e.kernelRoots??e.compositionRoots;if(o.length===0)return n.push(N(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let a=new Map;for(let s of t){let i=a.get(s.matchedRoot)??[];i.push(s),a.set(s.matchedRoot,i)}for(let s of o){let i=[...a.get(s)??[]].sort((p,d)=>p.file.localeCompare(d.file));if(i.length===0){n.push(N(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(s)} matched no governed files and has no createArkKernel factory.`,{target:s},r));continue}if(i.some(p=>p.hasKernelFactory))continue;let c=i[0];n.push(N(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(s)} has no createArkKernel / createStrictArkKernel factory.`,{target:s},r))}return n}l(mr,"evaluateMissingRoot");function yr(e,t,r,n,o){let a=new Map(t.map(i=>[i.name,i.intentPrefixes??[]])),s=[];for(let i of r){let c=i.specifier;if(!c||!F(c))continue;let p=n(i.from);p&&Je(p,a.get(p)??[])&&s.push(N(e,"arkrun-kernel-in-domain",i.from,i.line,`${p} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:p,target:c},o))}return s}l(yr,"evaluateKernelInDomain");function Rr(e,t,r,n,o,a){let s=new Set(e.managedLayers);if(s.size===0)return[];let i=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),c=new Set(n.filter(d=>d.hasKernelFactory).map(d=>d.file)),p=[];for(let d of r){if(c.has(d.file))continue;let u=d.typeName;if(e.ignoreDirectNewForErrors!==!1&&(u.endsWith("Error")||u==="Error")||u.endsWith("DTO")||u.endsWith("VO"))continue;let f=o(d.file);!f||!s.has(f)||Je(f,i.get(f)??[])||p.push(N(e,"arkrun-direct-new",d.file,d.line,`${f} must not construct ${d.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:f,target:d.typeName},a))}return p}l(Rr,"evaluateDirectNew");function hr(e,t,r,n,o){let a=[],s=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:s};let i=new Set(e.managedLayers);if(i.size===0)return{findings:a,completenessReasons:s};for(let c of t){if(!Ze(c.kind)&&!Ye(c.kind)&&!gr(c.kind))continue;let p=n(c.file);if(!p||!i.has(p))continue;if(!c.nameLiteral){e.mode==="enforced"&&s.push({code:dr,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let d=fr(r,c.file);if(Ze(c.kind)){if(d.raises.has(c.nameLiteral)||d.sends.has(c.nameLiteral))continue;a.push(N(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:p,target:c.nameLiteral},o));continue}if(Ye(c.kind)){if(d.reactsTo.has(c.nameLiteral))continue;a.push(N(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:p,target:c.nameLiteral},o));continue}d.uses.has(c.nameLiteral)||a.push(N(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:p,target:c.nameLiteral},o))}return{findings:a,completenessReasons:s}}l(hr,"evaluateUndeclared");function Ar(e,t,r,n){let o=new Set(e.managedLayers);if(o.size===0)return[];let a=[];for(let s of t){if(s.typeOnly)continue;let i=s.specifier;if(!i||!Ge(i))continue;let c=r(s.from);!c||!o.has(c)||a.push(N(e,"arkrun-transport-bypass",s.from,s.line,`${c} must not import broker/queue/emitter ${JSON.stringify(i)}; use the ArkRun kernel transport.`,{fromLayer:c,target:i},n))}return a}l(Ar,"evaluateTransportBypass");function kr(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=J(e.classification),n=hr(t,e.kernelCalls,e.declarations,e.layerForFile,r),o=[...mr(t,e.compositionRootHits,r),...yr(t,e.layers,e.dependencies,e.layerForFile,r),...Rr(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...Ar(t,e.dependencies,e.layerForFile,r)].sort(pr),a=[...n.completenessReasons].sort((s,i)=>{let c=`${s.code}\0${s.file??""}\0${s.message}`,p=`${i.code}\0${i.file??""}\0${i.message}`;return c<p?-1:c>p?1:0});return{findings:o,completenessReasons:a}}l(kr,"evaluateArkRunSensors");function pe(e){return{findings:kr(e).findings.filter(r=>ur(r.sensor)),completenessReasons:[]}}l(pe,"evaluateArkRunEditorSensors");function br(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}l(br,"declarationIsTypeOnly");function et(e){try{return Xe.existsSync(e)?Xe.readFileSync(e,"utf8"):null}catch{return null}}l(et,"readUtf8");function Qe(e,t){let r=e.lintedFilename(t),n=e.findConfigPath(r),o=n?e.loadArkConfig(n):null;if(!o?.arkRun||!n||!r)return null;let a=O.dirname(n),s=O.isAbsolute(r)?r:O.resolve(r),i=O.relative(a,s).split(O.sep).join("/");if(!e.sourceIsInAnalysisScope(o,i))return null;let c=E(i,o.layers);return c?{extra:o.arkRun,config:o,root:a,absFile:s,relFile:i,fromLayer:c}:null}l(Qe,"loadEditorFile");function Er(e,t,r){let n=Y(t,r).some(a=>a.kind==="factory"),o=[];for(let a of e.compositionRoots){try{if(!L(a).test(t))continue}catch{continue}o.push({file:t,matchedRoot:a,hasKernelFactory:n})}return o}l(Er,"compositionRootHitsForFile");function Sr(e,t,r){let n=new Set(de(t.relFile,r).map(o=>o.className));return We(r,(o,a)=>{if(F(a))return;let s=e.resolveImportSpecifier(t.absFile,a,t.root);if(!s)return;let i=O.relative(t.root,s).split(O.sep).join("/");if(i.startsWith(".."))return;let c=et(s);if(c!==null)for(let p of de(i,c))n.add(p.className)}),n}l(Sr,"admittedTypeNamesForEditor");function tt(e,t,r,n,o,a){e.reportAdapterDiagnostic(t,r,n,{ruleId:o.ruleId,file:o.file,fromLayer:o.fromLayer,target:o.target,message:o.message,line:o.line,severity:o.severity,failsStrict:o.failsStrict,nextAction:o.nextAction},a)}l(tt,"reportFinding");function Ir(e){let t=e.callee;if(t?.type==="Identifier"&&t.name&&/^[A-Z]/.test(t.name))return t.name;let r=t?.property?.name;if(r&&/^[A-Z]/.test(r)&&t?.computed!==!0)return r}l(Ir,"constructedTypeName");function xr(e,t){return e.type?.startsWith("Export")?"export":t}l(xr,"specifierEdgeKind");function Nr(e,t,r,n,o){let a=l((s,i,c,p)=>{if(typeof i!="string"||i.length===0)return;let d=s.loc?.start?.line??1,u={from:r.relFile,specifier:i,kind:p,typeOnly:c,line:d,resolution:"resolved-external"},{findings:f}=pe({arkRun:r.extra,layers:r.config.layers,kernelCalls:[],managedNews:[],compositionRootHits:[],declarations:[],dependencies:[u],layerForFile:l(g=>g===r.relFile?r.fromLayer:E(g,r.config.layers),"layerForFile")});for(let g of f)g.sensor===n&&tt(e,t,s,o,g,{fromLayer:g.fromLayer??r.fromLayer,specifier:i,target:g.target??i})},"check");return{ImportDeclaration(s){let i=s,c=(i.specifiers??[]).filter(d=>d.type==="ImportSpecifier"),p=c.length>0&&c.length===(i.specifiers??[]).length&&c.every(d=>d.importKind==="type");a(s,i.source?.value,i.importKind==="type"||p||br(s),"import")},ImportExpression(s){let i=s;i.source?.type==="Literal"&&a(s,i.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(s){let i=s;a(s,i.moduleReference?.expression?.value,i.importKind==="type"||i.isTypeOnly===!0,"require")},ExportNamedDeclaration(s){let i=s;if(!i.source)return;let c=i.specifiers??[],p=c.length>0&&c.every(d=>d.exportKind==="type");a(s,i.source.value,i.exportKind==="type"||p,xr(s,"export"))},ExportAllDeclaration(s){let i=s;a(s,i.source?.value,i.exportKind==="type","export")},CallExpression(s){let i=s;i.callee?.type==="Identifier"&&i.callee.name==="require"&&i.arguments?.[0]?.type==="Literal"&&!e.isLocallyBound(t,s,"require")&&a(s,i.arguments[0].value,!1,"require")}}}l(Nr,"importListeners");function _r(e,t,r){let n=et(r.absFile)??"",o=Sr(e,r,n),a=ue(r.relFile,n,o),{findings:s}=pe({arkRun:r.extra,layers:r.config.layers,kernelCalls:Y(r.relFile,n),managedNews:a,compositionRootHits:Er(r.extra,r.relFile,n),declarations:[],dependencies:[],layerForFile:l(c=>c===r.relFile?r.fromLayer:E(c,r.config.layers),"layerForFile")}),i=s.filter(c=>c.sensor==="arkrun-direct-new");return{NewExpression(c){let p=Ir(c);if(!p)return;let d=c.loc?.start?.line,u=i.find(f=>f.target===p&&(d===void 0||f.line===d))??i.find(f=>f.target===p);u&&tt(e,t,c,"directNew",u,{fromLayer:u.fromLayer??r.fromLayer,typeName:p,target:u.target??p})}}}l(_r,"directNewListener");function rt(e){let t=l((r,n,o,a)=>({meta:{type:"problem",docs:{description:n},messages:{[o]:a},schema:[]},create(s){let i=Qe(e,s);return i?Nr(e,s,i,r,o):{}}}),"createImportRule");return{noArkRunKernelInDomain:t("arkrun-kernel-in-domain","Disallow Domain-role imports of arkgate/runtime when arkRun is on (same sensor as ark-check).","kernelInDomain",'{{fromLayer}} must not import kernel module "{{specifier}}".'),noArkRunTransportBypass:t("arkrun-transport-bypass","Disallow homemade broker/queue/emitter imports in arkRun managed layers (same sensor as ark-check).","transportBypass",'{{fromLayer}} must not import broker/queue/emitter "{{specifier}}"; use the ArkRun kernel transport.'),noArkRunDirectNew:{meta:{type:"problem",docs:{description:"Disallow `new` of ArkRun-admitted types outside a composition-root factory (on-disk import/`new` envelope)."},messages:{directNew:"{{fromLayer}} must not construct {{typeName}} with new outside an ArkRun composition-root factory."},schema:[]},create(r){let n=Qe(e,r);return n?_r(e,r,n):{}}}}}l(rt,"createArkRunEslintRules");var Cr="createOrderPlane";function X(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(X,"isArkOrderModuleSpecifier");function nt(e,t){let r=1;for(let n=0;n<t&&n<e.length;n+=1)e[n]===`
+`&&(r+=1);return r}l(nt,"lineAt");function ot(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}l(ot,"stripCommentsPreservingLines");function st(e,t){let r=ot(t),n=[],o=/\bcreateOrderPlane\s*(?:<[^>]*>)?\s*\(/g,a;for(;(a=o.exec(r))!==null;)n.push({file:e,line:nt(t,a.index),callee:Cr});return n}l(st,"extractArkOrderPlaneCallsFromSource");function it(e,t){let r=ot(t),n=[],o=/\.((?:update|patch|set|mutate))\s*\(/g,a;for(;(a=o.exec(r))!==null;){let s=a[1],i=r.slice(Math.max(0,a.index-80),a.index);!/\b(?:plane|orderPlane|order)\s*$/.test(i)&&!/\bcreateOrderPlane\b/.test(r)||n.push({file:e,line:nt(t,a.index),method:s})}return n}l(it,"extractArkOrderGenericUpdatesFromSource");var at={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI"};function vr(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)?!0:t.some(n=>{let o=n.trim().replace(/\.+$/,"");return o==="Domain"||o.startsWith("Domain.")})}l(vr,"isDomainRoleLayer");function U(e,t,r,n,o,a,s){let i=e.mode==="enforced"&&s;return{ruleId:at[t],sensor:t,message:o,file:r,line:n,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:D({ruleId:at[t],fromLayer:a?.fromLayer,target:a?.target})}}l(U,"finding");function Or(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let r=J(e.classification),n=[],o=t.planeRoots;if(t.mode==="enforced"&&o.length===0)n.push(U(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,r));else{let s=new Map;for(let i of e.planeRootHits){let c=s.get(i.matchedRoot)??[];c.push(i),s.set(i.matchedRoot,c)}for(let i of o){let c=s.get(i)??[];if(c.length===0){n.push(U(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(i)} matched no governed files and has no createOrderPlane factory.`,{target:i},r));continue}c.some(p=>p.hasPlaneFactory)||n.push(U(t,"arkorder-missing-plane",c[0].file,1,`ArkOrder plane root ${JSON.stringify(i)} has no createOrderPlane factory.`,{target:i},r))}}let a=new Map(e.layers.map(s=>[s.name,s.intentPrefixes??[]]));for(let s of e.dependencies){let i=s.specifier;if(!i||!X(i))continue;let c=e.layerForFile(s.from);c&&vr(c,a.get(c)??[])&&n.push(U(t,"arkorder-kernel-in-domain",s.from,s.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:c,target:i},r))}for(let s of e.genericUpdates)n.push(U(t,"arkorder-generic-update",s.file,s.line,`Generic ${s.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:s.method},r));return n.sort((s,i)=>s.file.localeCompare(i.file)||s.ruleId.localeCompare(i.ruleId)||s.line-i.line),{findings:n,completenessReasons:[]}}l(Or,"evaluateArkOrderSensors");function lt(e){if(!e.arkOrder)return[];let t=st(e.file,e.source),r=it(e.file,e.source);return Or({arkOrder:e.arkOrder,layers:[],planeCalls:t,genericUpdates:r,planeRootHits:[],dependencies:[],layerForFile:l(()=>e.fromLayer,"layerForFile")}).findings.filter(n=>n.sensor==="arkorder-generic-update"||n.sensor==="arkorder-kernel-in-domain")}l(lt,"evaluateArkOrderEditorSensors");function wr(e){let t=e;return t.sourceCode?.getText?.()??t.getSourceCode?.()?.getText?.()??""}l(wr,"eslintSourceText");function ct(e){function t(r){return{meta:{type:"problem",docs:{description:r},messages:{denied:"{{message}}"},schema:[]},create(n){let o=e.lintedFilename(n),a=e.findConfigPath(o),s=a?e.loadArkConfig(a):null;if(!s?.arkOrder)return{};let i=e.toProjectRelative(a,o);if(!e.sourceIsInAnalysisScope(s,i))return{};let c=E(i,s.layers);return{ImportDeclaration(p){let d=typeof p.source?.value=="string"?p.source.value:"";if(r==="ARKORDER_KERNEL_IN_DOMAIN"){if(!X(d)||c!=="DomainModel"&&!/^domain/i.test(c??""))return;e.reportAdapterDiagnostic(n,p,"denied",{ruleId:r,file:i,line:p.loc?.start?.line??1,message:"Domain-role layer imports arkgate/order; Domain stays plane-free."})}},Program(){if(r!=="ARKORDER_GENERIC_UPDATE")return;let p=wr(n),d=lt({arkOrder:s.arkOrder,file:i,source:p,fromLayer:c}).filter(u=>u.ruleId==="ARKORDER_GENERIC_UPDATE");for(let u of d)e.reportAdapterDiagnostic(n,{loc:{start:{line:u.line}}},"denied",{ruleId:u.ruleId,file:u.file,line:u.line,message:u.message})}}}}}return l(t,"createImportRule"),{noArkOrderKernelInDomain:t("ARKORDER_KERNEL_IN_DOMAIN"),noArkOrderGenericUpdate:t("ARKORDER_GENERIC_UPDATE")}}l(ct,"createArkOrderEslintRules");function w(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}l(w,"lintedFilename");function C(e,t,r,n,o){let a=He({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...o?{data:o}:{},diagnostic:a}),a}l(C,"reportAdapterDiagnostic");function j(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=m.dirname(m.resolve(e));for(;;){let r=m.join(t,"ark.config.json");if(_.existsSync(r))return r;let n=m.dirname(t);if(n===t)return null;t=n}}l(j,"findConfigPath");var ut=new Map;function V(e){if(!_.existsSync(e))return null;let t=_.readFileSync(e,"utf8"),r=ut.get(e);if(r?.source===t)return r.config;let n=$e(t,e).config;return ut.set(e,{source:t,config:n}),n}l(V,"loadArkConfig");function B(e,t){return(e.include??[]).some(n=>{let o=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return o==="."||t===o||t.startsWith(`${o}/`)})&&!Ie(t,e)}l(B,"sourceIsInAnalysisScope");function dt(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,m.join(e,"index.ts"),m.join(e,"index.tsx"),m.join(e,"index.js")];for(let r of t)try{if(_.existsSync(r)&&_.statSync(r).isFile())return r}catch{}return null}l(dt,"existingSourceFile");function Lr(e){let t=m.resolve(e),r=null;for(;;){let p=m.join(t,"tsconfig.json");if(_.existsSync(p)){r=p;break}let d=m.dirname(t);if(d===t)break;t=d}if(!r)return{baseUrl:e,aliases:[]};let n=l(p=>{try{let d=_.readFileSync(p,"utf8");return d=d.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(d)}catch{return null}},"loadJsonc"),o=l((p,d)=>{if(d>4)return{};let u=n(p);if(!u)return{};let f=u.compilerOptions??{},g=f.baseUrl,y=f.paths,h=u.extends;if(typeof h=="string"&&!h.startsWith("@")){let A=m.resolve(m.dirname(p),h.endsWith(".json")?h:`${h}.json`);if(_.existsSync(A)){let k=o(A,d+1);g=g??k.baseUrl,y={...k.paths??{},...y??{}}}}return{baseUrl:g,paths:y}},"mergePaths"),a=o(r,0),s=m.dirname(r),i=m.resolve(s,a.baseUrl||"."),c=[];for(let[p,d]of Object.entries(a.paths||{})){if(!Array.isArray(d)||d.length===0)continue;let u=p.replace(/\*$/,"");u&&c.push({from:u,to:String(d[0]).replace(/\*$/,"")})}return c.sort((p,d)=>d.from.length-p.from.length),{baseUrl:i,aliases:c}}l(Lr,"readTsconfigPathAliases");function Tr(e,t){if(!t.startsWith("."))return null;let r=m.resolve(m.dirname(e),t);return dt(r)}l(Tr,"resolveRelativeImport");function pt(e,t,r){if(!t)return null;if(t.startsWith("."))return Tr(e,t);let n=r||m.dirname(e),{baseUrl:o,aliases:a}=Lr(n),s=a.find(c=>t.startsWith(c.from));if(!s)return null;let i=m.resolve(o,`${s.to}${t.slice(s.from.length)}`);return dt(i)}l(pt,"resolveImportSpecifier");function ee(e){return typeof e?.value=="string"?e.value:void 0}l(ee,"stringValue");function me(e){return e?.name??ee(e)}l(me,"propertyName");function ye(e){return e.sourceCode??e.getSourceCode?.()}l(ye,"sourceCodeFor");function ft(e,t){let r=ye(e)?.getScope?.(t);for(;r;){let n=r.references?.find(o=>o.identifier===t);if(n)return n;r=r.upper??void 0}}l(ft,"referenceFor");function H(e,t,r){let n=ft(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let o=ye(e)?.getScope?.(t);for(;o;){let a=o.set?.get(r);if(a)return(a.defs?.length??0)>0;o=o.upper??void 0}return!1}l(H,"isLocallyBound");function Dr(e,t){let r=ft(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}l(Dr,"isValueIdentifierReference");function gt(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=gt(e.object),n=me(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}l(gt,"memberExpressionPath");function Fr(e){return me(e.callee?.property)}l(Fr,"calleePropertyName");function mt(e,t){return e?.properties?.find(r=>me(r.key)===t)}l(mt,"objectProperty");function Q(e,t){return mt(e,t)!==void 0}l(Q,"objectHasProperty");function Pr(e){let t=mt(e,"metadata")?.value;return Q(t,"source")}l(Pr,"objectHasMetadataSource");function yt(e){return Fr(e)==="publish"}l(yt,"isPublishCall");function fe(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}l(fe,"declarationIsTypeOnly");function Kr(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}l(Kr,"containingProgram");function Mr(e){let t=Kr(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!fe(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!fe(n))return!1;r=!0;continue}return!1}}return r}l(Mr,"sourceProgramExportsOnlyTypes");var $r={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=w(e),r=j(t),n=r?V(r):null,o=r?m.dirname(r):null,a=l(s=>{let i=ee(s.source);if(i&&n&&o&&t){let c=m.isAbsolute(t)?t:m.resolve(t),p=m.relative(o,c).split(m.sep).join("/");if(!B(n,p))return;let d=E(p,n.layers);if(!d)return;let u=pt(c,i,o);if(!u)return;let f=m.relative(o,u).split(m.sep).join("/");if(f.startsWith(".."))return;let g=E(f,n.layers);if(!g)return;let y={fromPath:p,toPath:f,layers:n.layers},h=re(n.rules,d,g,y);if(h||Se(n.rules,d,g,y)){let A=s.type?.startsWith("Export")?"export":"import",k=fe(s),G=!!h?.peerIsolation,z=k&&!G,v=h?.message??`${d} must not ${A} ${g}.`;C(e,s,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:p,fromLayer:d,toLayer:g,target:f,edgeKind:A,...G?{peerIsolation:!0}:{},...k?{typeOnly:!0}:{},...z?{severity:"warning"}:{},...Mr(s)?{sourcePureTypeModule:!0}:{},message:z?`${v} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:v},{fromLayer:d,toLayer:g,specifier:i})}return}},"check");return{ImportDeclaration:a,ExportNamedDeclaration:a,ExportAllDeclaration:a}}},Ur={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=ee(r),o=ae({publishCall:yt(t),rawIntentName:n,objectHasIntent:Q(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(o.some(a=>a.ruleId==="RAW_EVENT_PUBLISH")){let a=o.find(s=>s.ruleId==="RAW_EVENT_PUBLISH");C(e,t,"rawPublish",{...a,file:w(e)})}}}}},Hr={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],a=ae({publishCall:yt(t),rawIntentName:ee(r),objectHasIntent:Q(r,"intent"),arkPublishCandidate:!0,hasSource:Pr(r)||Q(n,"source")}).find(s=>s.ruleId==="PUBLISH_MISSING_SOURCE");a&&C(e,t,"missingSource",{...a,file:w(e)})}}}},jr={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=w(e),r=e.options?.[0],n=j(t),o=n?V(n):null,a=n?m.dirname(n):null,s=null,i="this layer";if(o&&a&&t){let u=m.isAbsolute(t)?t:m.resolve(t),f=m.relative(a,u).split(m.sep).join("/");if(!B(o,f))return{};let g=o.layers?.find(y=>y.name===E(f,o.layers));g?.forbiddenGlobals?.length?(s=new Set(g.forbiddenGlobals),i=g.name):s=null}else r?.globals&&(s=new Set(r.globals));if(!s)return{};let c=typeof ye(e)?.getScope=="function",p=l((u,f)=>{let g=m.isAbsolute(t)?t:m.resolve(t),y=a?m.relative(a,g).split(m.sep).join("/"):t;C(e,u,o?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:y,fromLayer:i,target:f,message:`${i} must not use the ambient global "${f}".`},{name:f,layer:i})},"report"),d=l((u,f,g,y)=>{if(g||typeof f!="string")return;let h=oe(f,s);if(!h)return;let A=m.isAbsolute(t)?t:m.resolve(t),k=a?m.relative(a,A).split(m.sep).join("/"):t;C(e,u,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:k,fromLayer:i,target:f,edgeKind:y,message:`${i} must not use module "${f}" because it is the import form of forbidden global "${h}".`},{layer:i,name:h,specifier:f,importKind:y})},"reportModule");return{MemberExpression(u){if(u.parent?.type==="MemberExpression"&&u.parent.object===u)return;let f=gt(u);if(!f||H(e,f.root,f.segments[0]))return;let g=f.segments[0]==="globalThis",y=g?f.segments.slice(1):f.segments,h;for(let A=y.length;A>=(g?1:2);A-=1){let k=y.slice(0,A).join(".");if(s.has(k)){h=k;break}}h?p(u,h):!c&&s.has(f.segments[0])&&p(u,f.segments[0])},CallExpression(u){let f=u;if(f.callee?.type==="Identifier"&&f.callee.name==="require"&&f.arguments?.[0]?.type==="Literal"&&!H(e,u,"require")&&d(u,f.arguments[0].value,!1,"require"),c)return;let g=f.callee?.type==="Identifier"?f.callee.name:void 0;g&&s.has(g)&&p(u,g)},ImportDeclaration(u){let f=u,g=(f.specifiers??[]).filter(h=>h.type==="ImportSpecifier"),y=g.length>0&&g.length===(f.specifiers??[]).length&&g.every(h=>h.importKind==="type");d(u,f.source?.value,f.importKind==="type"||y,"import")},ImportExpression(u){let f=u;f.source?.type==="Literal"&&d(u,f.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(u){let f=u;d(u,f.moduleReference?.expression?.value,f.importKind==="type"||f.isTypeOnly===!0,"require")},ExportNamedDeclaration(u){let f=u;if(!f.source)return;let g=f.specifiers??[],y=g.length>0&&g.every(h=>h.exportKind==="type");d(u,f.source.value,f.exportKind==="type"||y,"export")},ExportAllDeclaration(u){let f=u;d(u,f.source?.value,f.exportKind==="type","export")},NewExpression(u){if(c)return;let f=u.callee?.type==="Identifier"?u.callee.name:void 0;f&&s.has(f)&&p(u,f)},Identifier(u){!c||!u.name||!s.has(u.name)||!Dr(e,u)||H(e,u,u.name)||p(u,u.name)}}}},Vr={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=w(e),r=j(t),n=r?V(r):null,o=r?m.dirname(r):null;if(!n||!o||!t)return{};let a=m.isAbsolute(t)?t:m.resolve(t),s=m.relative(o,a).split(m.sep).join("/");if(!B(n,s))return{};let i=n.layers?.find(d=>d.name===E(s,n.layers));if(!i)return{};let c=new Set(_e(i));if(c.size===0)return{};let p=l((d,u,f,g)=>{if(f||typeof u!="string"||oe(u,i.forbiddenGlobals??[]))return;let y=Ne(u);!y||!c.has(y)||C(e,d,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:s,fromLayer:i.name,target:u,capability:y,edgeKind:g,message:`${i.name} denies the ${y} capability; found import of "${u}".`},{layer:i.name,capability:y,specifier:u})},"check");return{ImportDeclaration(d){let u=d,f=(u.specifiers??[]).filter(y=>y.type==="ImportSpecifier"),g=f.length>0&&f.length===(u.specifiers??[]).length&&f.every(y=>y.importKind==="type");p(d,u.source?.value,u.importKind==="type"||g,"import")},ImportExpression(d){let u=d;u.source?.type==="Literal"&&p(d,u.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(d){let u=d;p(d,u.moduleReference?.expression?.value,u.importKind==="type"||u.isTypeOnly===!0,"require")},ExportNamedDeclaration(d){let u=d;if(!u.source)return;let f=u.specifiers??[],g=f.length>0&&f.every(y=>y.exportKind==="type");p(d,u.source.value,u.exportKind==="type"||g,"export")},ExportAllDeclaration(d){let u=d;p(d,u.source?.value,u.exportKind==="type","export")},CallExpression(d){let u=d;u.callee?.type==="Identifier"&&u.callee.name==="require"&&u.arguments?.[0]?.type==="Literal"&&!H(e,d,"require")&&p(d,u.arguments[0].value,!1,"require")}}}},{noArkRunKernelInDomain:Br,noArkRunDirectNew:Gr,noArkRunTransportBypass:zr}=rt({findConfigPath:j,loadArkConfig:V,resolveImportSpecifier:pt,lintedFilename:w,sourceIsInAnalysisScope:B,isLocallyBound:H,reportAdapterDiagnostic:C});function Wr(e,t){let r=m.dirname(m.resolve(e));return m.relative(r,m.resolve(t)).split(m.sep).join("/")}l(Wr,"toProjectRelative");var{noArkOrderKernelInDomain:qr,noArkOrderGenericUpdate:Zr}=ct({findConfigPath:j,loadArkConfig:V,lintedFilename:w,sourceIsInAnalysisScope:B,reportAdapterDiagnostic:C,toProjectRelative:Wr});var Yr={"no-domain-infra-imports":$r,"no-raw-event-publish":Ur,"require-publish-source":Hr,"no-forbidden-globals":jr,"no-denied-capabilities":Vr,"no-arkrun-kernel-in-domain":Br,"no-arkrun-direct-new":Gr,"no-arkrun-transport-bypass":zr,"no-arkorder-kernel-in-domain":qr,"no-arkorder-generic-update":Zr},ge={rules:Yr};ge.configs={recommended:{plugins:{ark:ge},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error","ark/no-arkrun-kernel-in-domain":"error","ark/no-arkrun-direct-new":"error","ark/no-arkrun-transport-bypass":"error","ark/no-arkorder-kernel-in-domain":"error","ark/no-arkorder-generic-update":"error"}}};var ao=ge;export{ao as default,j as findConfigPath,L as globToRegExp,Se as isEdgeDenied,E as layerForRelativePath,V as loadArkConfig,Zr as noArkOrderGenericUpdate,qr as noArkOrderKernelInDomain,Gr as noArkRunDirectNew,Br as noArkRunKernelInDomain,zr as noArkRunTransportBypass,Vr as noDeniedCapabilities,$r as noDomainInfraImports,jr as noForbiddenGlobals,Ur as noRawEventPublish,Ee as patternSpecificity,ge as plugin,Lr as readTsconfigPathAliases,Hr as requirePublishSource,pt as resolveImportSpecifier,Tr as resolveRelativeImport};