arkgate 4.7.6 → 4.8.1

package/CHANGELOG.md

@@ -3,13 +3,47 @@
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here or
 in the immutable pre-2.0 archive linked below.
 
-## Unreleased
+## 4.8.1 — 2026-08-30
+
+**Patch** over **4.8.0**. ArkRules invariant coverage reads tests first and retains only files that mention a declared invariant id, so large repos no longer report `INVARIANT_UNCOVERED` / `never-had-tests` while covering tests sit on disk. Does not close `K01` / `Z09`. **No required config migration.**
+
+**Status: published** (on npm `latest`; see `docs/releases/4.8.1.md`).
+
+### Fixed
+- **INVARIANT_UNCOVERED on large trees:** `loadInvariantCoverageInputs` spent `MAX_COVERAGE_FILES` (400) on production facts before walking tests. Any repo with more than 400 governed files got `testGlobsMissing: true` and a false *never-had-tests* claim. Tests walk first; with `invariantIds`, a test is retained only if it mentions a catalog id. Doctor and policy-delta use the same ids. When the file budget is exhausted, the diagnostic says so instead of claiming the suite never existed.
+
+## 4.8.0 — 2026-08-29
+
+**Minor** over **4.7.6**. One npm package **`arkgate`**: extras opt-in by config + subpath.
+**ArkOrder** (`arkgate/order`) on schema `1.3`. **ArkRun** kernel is `arkgate/runtime` in
+the same tarball. `@arkgate/runtime` is **deprecated**. Does not close `K01` / `Z09`.
+ArkRules unchanged.
+
+**Status: published** (on npm `latest`; see `docs/releases/4.8.0.md`).
+
+### Added
+- **ArkOrder extra (`arkOrder`):** optional, silent when absent. Enforced skip: missing plane, Domain import of `arkgate/order`, generic `update` of ξ.
+- **`arkgate/order`:** `createOrderPlane` with `release` / `project` / `ingest` / `proposeRelease`. Root `arkgate` export stays the gate.
+- **Billing gallery:** `examples/arkorder-billing/` consumer projector (`plan` / `cycle` / `tenancy`).
+- **`arkgate/runtime` and `arkgate/nestjs`:** real subpaths of package `arkgate` (ADR 0031). Root export stays the gate.
+
+### Changed
+- **`@arkgate/runtime` deprecated.** Prefer `import { createStrictArkKernel } from 'arkgate/runtime'`. Companion remains a leftover 0.x `experimental` pin.
+- **Gate waist (WH01 / ADR 0026):** the parity-capable check is config + resolved-candidate-facts → one analysis-result. New doctor advisory surfaces must project existing facts and must not become a second verdict. Does not move shipped compass/coach. Does not close `K01` / `Z09`.
+- **Config schema `1.3`:** additive `arkOrder`. `1.2` configs migrate. Absence is silent.
+
+### Fixed
+- **`K01` honesty:** 4.7.6 shipped workflow OCC / lease / `tx` / `resume` primitives. It does not close in-process bus commit gaps or durable outbox. `K01` stays parked.
+- **Release-surface pin:** ROADMAP / CONTRIBUTING / `q06ReleaseSurfaces` name npm `latest` as **4.7.6** (the #173 merge left the 4.7.5 pin).
+- **CodeQL alert 16:** `scripts/release-npm.mjs` invokes npm with `execFileSync` and an argv array (no shell). Closes `js/shell-command-injection-from-environment`.
+- **Antigravity MCP path:** `--install-agent-gates --tools antigravity` (and compact start) writes official workspace `.agents/mcp_config.json`. Doctor evidence for host `antigravity` no longer treats shared `.mcp.json` as loaded by the host.
 
 ## 4.7.6 — 2026-08-26
 
-**Patch** over **4.7.5**. Production durability primitives for ArkRun (K01). Adds OCC, leases, DB tx handoff, and resume capabilities to the workflow engine. **No required config migration.** Companion `@arkgate/runtime` is republished as `0.1.0-experimental.1`.
+**Patch** over **4.7.5**. Production durability *primitives* for ArkRun (`tx`, OCC, leases, `resume`). Adds those hooks to the workflow engine. **No required config migration.** Companion `@arkgate/runtime` is republished as `0.1.0-experimental.1`.
+Does **not** close `K01` (in-process bus commit gaps and durable outbox remain).
 
-**Status: prepared** (see `docs/releases/4.7.6.md`).
+**Status: published** (on npm `latest`; see `docs/releases/4.7.6.md`).
 
 ### Changed
 - **ArkRun (Workflow Engine):** added `tx` argument to `EventBus` and Sagas for database transactions.

package/README.md

@@ -29,11 +29,11 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.7.6** is on npm `latest`. Write. Check. Ship. Adopted = required GitHub
+> **ArkGate 4.8.1** is on npm `latest`. Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
-> (`@arkgate/runtime`, `experimental`) is an in-memory runtime — not Postgres.
-> [4.7.6](docs/releases/4.7.6.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> (`arkgate/runtime`) is an in-memory runtime — not Postgres. `@arkgate/runtime` is deprecated.
+> [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [4.7.6](docs/releases/4.7.6.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -97,7 +97,7 @@ once you adopt. The other two are optional.
 | **While the agent writes** | The write doesn’t land on supported hosts; warning only elsewhere | Always (ArkGate) |
 | **Before merge** | `arkgate-check` as a **required** CI status | Always (ArkGate) |
 | **ArkRules** | Optional policies *inside* a layer | When you ask |
-| **ArkRun** | Optional experimental runtime (`@arkgate/runtime`) | Off unless you turn it on |
+| **ArkRun** | Optional experimental runtime (`arkgate/runtime`) | Off unless you turn it on |
 
 Layers (who may import whom) always run. ArkRules and ArkRun change no inter-layer
 verdict when absent. Label leftovers **`[Layer]`** vs **`[ArkRules]`**.
@@ -240,12 +240,10 @@ More: [docs/develop.md](docs/develop.md) · skills install: [docs/agent-guide.md
 Gates need **no** app runtime. Skip this unless you want an optional runtime
 for decoupling.
 
-**ArkRun** (`@arkgate/runtime`, npm tag `experimental`) is that runtime. Each
+**ArkRun** (`arkgate/runtime`, same npm package) is that runtime. Each
 `createStrictArkKernel()` call is a new instance — no process singleton. Data
 lives in memory and **dies on restart**. Fine for local. Not Postgres, not an
-outbox, not Temporal.
-
-The `arkgate` tarball does not bundle it.
+outbox, not Temporal. `@arkgate/runtime` is deprecated.
 
 ### Durability stance
 
@@ -268,7 +266,8 @@ interfaces for production. Details: [docs/production-hardening.md](docs/producti
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Current published (4.7.6 on npm `latest`) | [docs/releases/4.7.6.md](docs/releases/4.7.6.md) · [CHANGELOG](CHANGELOG.md) |
+| Current published (4.8.1 on npm `latest`) | [docs/releases/4.8.1.md](docs/releases/4.8.1.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior published (4.7.6) | [docs/releases/4.7.6.md](docs/releases/4.7.6.md) |
 | Prior published (4.7.5) | [docs/releases/4.7.5.md](docs/releases/4.7.5.md) |
 | Prior published (4.7.3) | [docs/releases/4.7.3.md](docs/releases/4.7.3.md) |
 | Prior published (4.7.2) | [docs/releases/4.7.2.md](docs/releases/4.7.2.md) |