arkgate 4.8.0 → 4.8.2

package/bin/lib/analysis-engine.mjs

@@ -1,10 +1,10 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-var Un=Object.defineProperty;var l=(e,t)=>Un(e,"name",{value:t,configurable:!0});function L(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(L,"deterministicHash");function _(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(_).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${_(t[n])}`).join(",")}}`}l(_,"stableSerialize");var me="1.2";var _t=["network","filesystem","clock","randomness","environment","process","persistence"];function U(e,t){let n=_(e),r=_(t);return n<r?-1:n>r?1:0}l(U,"compareCanonical");function K(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}l(K,"sortedUnique");function Ue(e){let t={schemaVersion:"1.2",include:K(e.include??[]),exclude:K(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:K(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:K(n.patterns??[]),exclude:K(n.exclude??[]),forbiddenGlobals:K(n.forbiddenGlobals??[]),intentPrefixes:K(n.intentPrefixes??[]),capabilityDeny:K(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(U),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:K(e.arkRun.compositionRoots),managedLayers:K(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return L(_(t))}l(Ue,"resolvedFactsEvidenceRequirementsHash");function Kn(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(U),n=e.files.map(k=>({...k,typeOnlyExportNames:K(k.typeOnlyExportNames)})).sort((k,x)=>k.path<x.path?-1:k.path>x.path?1:0),r=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:K(k.namedBindings)}:{}})).sort(U),s=e.capabilityUses.map(k=>({...k})).sort(U),a=e.ambientUses.map(k=>({...k})).sort(U),o=e.publishCalls.map(k=>({...k})).sort(U),i=e.intentReferences.map(k=>({...k})).sort(U),c=e.safetyUses.map(k=>({...k})).sort(U),h=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map(x=>({...x}))})).sort(U),A=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(U),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(U),u=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(U),p=(e.arkRunDeclarations??[]).map(k=>({...k,uses:K(k.uses),reactsTo:K(k.reactsTo),raises:K(k.raises),sends:K(k.sends)})).sort(U),d=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(U),g=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(U),b=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(U),C=e.files.map(({path:k,contentHash:x})=>({path:k,contentHash:x})).sort((k,x)=>k.path<x.path?-1:k.path>x.path?1:0),E=L(_(C));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:E,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:o,intentReferences:i,safetyUses:c,classShapes:h,arkRunKernelCalls:A,arkRunManagedNews:R,arkRunCompositionRootHits:u,arkRunDeclarations:p,arkOrderPlaneCalls:d,arkOrderGenericUpdates:g,arkOrderRootHits:b}}l(Kn,"canonicalResolvedFactsInput");function Ft(e){let t=Kn(e);return{...t,factsHash:L(_(t))}}l(Ft,"createCanonicalResolvedCandidateFacts");function Ke(e){return Ft(Tt(N(e,"$"),!1))}l(Ke,"createResolvedCandidateFacts");function N(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}l(N,"asRecord");function T(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}l(T,"assertOnlyKeys");function $(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}l($,"requiredText");function Q(e,t,n){if(e[t]!==void 0)return $(e,t,n)}l(Q,"optionalText");function D(e,t,n){let r=$(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let i of s.split("/"))if(!(!i||i==="."))if(i===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(i);let o=a.join("/");if(!o||o!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return o}l(D,"requiredProjectPath");function F(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}l(F,"requiredBoolean");function Nt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}l(Nt,"requiredInteger");function W(e,t,n){let r=Nt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}l(W,"requiredPositiveInteger");function M(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}l(M,"requiredArray");function ee(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}l(ee,"enumValue");function ge(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}l(ge,"parseStringArray");function jn(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}l(jn,"assertUnique");function Tt(e,t){T(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ee(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ee(e,"completeness",["complete","partial","unavailable"],"$"),s=M(e,"completenessReasons","$").map((v,S)=>{let m=`$.completenessReasons[${S}]`,y=N(v,m);T(y,["code","message","file"],m);let O=y.file===void 0?void 0:D(y,"file",m);return{code:$(y,"code",m),message:$(y,"message",m),...O?{file:O}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=M(e,"files","$").map((v,S)=>{let m=`$.files[${S}]`,y=N(v,m);return T(y,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],m),{path:D(y,"path",m),contentHash:$(y,"contentHash",m),parseStatus:ee(y,"parseStatus",["parsed","invalid"],m),parseDiagnosticCount:Nt(y,"parseDiagnosticCount",m),exportsOnlyTypes:F(y,"exportsOnlyTypes",m),typeOnlyExportNames:ge(y.typeOnlyExportNames,`${m}.typeOnlyExportNames`),hasTopLevelSideEffects:F(y,"hasTopLevelSideEffects",m)}}),o=M(e,"dependencies","$").map((v,S)=>{let m=`$.dependencies[${S}]`,y=N(v,m);T(y,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],m);let O=Q(y,"specifier",m),P=Q(y,"target",m),ae=ee(y,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],m);if(ae==="resolved-project"&&!P)throw new Error(`${m}.target is required for resolved-project dependencies.`);if(ae!=="resolved-project"&&P)throw new Error(`${m}.target is only allowed for resolved-project dependencies.`);if(ae!=="dynamic"&&!O)throw new Error(`${m}.specifier is required unless resolution is dynamic.`);return{from:D(y,"from",m),...O?{specifier:O}:{},kind:ee(y,"kind",["import","export","dynamic-import","require"],m),typeOnly:F(y,"typeOnly",m),line:W(y,"line",m),resolution:ae,...P?{target:D(y,"target",m)}:{},...y.namedBindings!==void 0?{namedBindings:ge(y.namedBindings,`${m}.namedBindings`)}:{},...y.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:F(y,"targetTypeOnlyExports",m)}:{},...y.sourcePureTypeModule!==void 0?{sourcePureTypeModule:F(y,"sourcePureTypeModule",m)}:{},...y.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:F(y,"namedBindingsTypeOnly",m)}:{},...y.portProofEligible!==void 0?{portProofEligible:F(y,"portProofEligible",m)}:{}}}),i=M(e,"capabilityUses","$").map((v,S)=>{let m=`$.capabilityUses[${S}]`,y=N(v,m);return T(y,["file","line","symbol","capability","source"],m),{file:D(y,"file",m),line:W(y,"line",m),symbol:$(y,"symbol",m),capability:ee(y,"capability",_t,m),source:ee(y,"source",["ambient-global","import-based"],m)}}),c=M(e,"ambientUses","$").map((v,S)=>{let m=`$.ambientUses[${S}]`,y=N(v,m);return T(y,["file","line","symbol"],m),{file:D(y,"file",m),line:W(y,"line",m),symbol:$(y,"symbol",m)}}),h=M(e,"publishCalls","$").map((v,S)=>{let m=`$.publishCalls[${S}]`,y=N(v,m);T(y,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],m);let O=Q(y,"rawIntentName",m),P=Q(y,"sourceIntent",m);return{file:D(y,"file",m),line:W(y,"line",m),...O?{rawIntentName:O}:{},objectHasIntent:F(y,"objectHasIntent",m),arkPublishCandidate:F(y,"arkPublishCandidate",m),hasSource:F(y,"hasSource",m),...P?{sourceIntent:P}:{}}}),A=M(e,"intentReferences","$").map((v,S)=>{let m=`$.intentReferences[${S}]`,y=N(v,m);return T(y,["file","line","intent"],m),{file:D(y,"file",m),line:W(y,"line",m),intent:$(y,"intent",m)}}),R=M(e,"safetyUses","$").map((v,S)=>{let m=`$.safetyUses[${S}]`,y=N(v,m);T(y,["file","line","kind","symbol"],m);let O=Q(y,"symbol",m),P=ee(y,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],m);if(P==="in-memory-store"&&!O)throw new Error(`${m}.symbol is required for in-memory-store facts.`);if(P!=="in-memory-store"&&O)throw new Error(`${m}.symbol is only allowed for in-memory-store facts.`);return{file:D(y,"file",m),line:W(y,"line",m),kind:P,...O?{symbol:O}:{}}});jn(a,v=>v.path,"$.files");let u=new Set(a.map(v=>v.path));for(let v of a){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of o)if(!u.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let d=(e.arkRunKernelCalls===void 0?[]:M(e,"arkRunKernelCalls","$")).map((v,S)=>{let m=`$.arkRunKernelCalls[${S}]`,y=N(v,m);T(y,["file","line","kind","callee","viaImport","receiver","nameLiteral"],m);let O=Q(y,"receiver",m),P=Q(y,"nameLiteral",m);return{file:D(y,"file",m),line:W(y,"line",m),kind:ee(y,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],m),callee:$(y,"callee",m),viaImport:F(y,"viaImport",m),...O?{receiver:O}:{},...P?{nameLiteral:P}:{}}}),b=(e.arkRunManagedNews===void 0?[]:M(e,"arkRunManagedNews","$")).map((v,S)=>{let m=`$.arkRunManagedNews[${S}]`,y=N(v,m);T(y,["file","line","typeName","importedFrom"],m);let O=Q(y,"importedFrom",m);return{file:D(y,"file",m),line:W(y,"line",m),typeName:$(y,"typeName",m),...O?{importedFrom:O}:{}}}),E=(e.arkRunCompositionRootHits===void 0?[]:M(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let m=`$.arkRunCompositionRootHits[${S}]`,y=N(v,m);return T(y,["file","matchedRoot","hasKernelFactory"],m),{file:D(y,"file",m),matchedRoot:$(y,"matchedRoot",m),hasKernelFactory:F(y,"hasKernelFactory",m)}}),k=e.arkRunDeclarations===void 0?[]:M(e,"arkRunDeclarations","$"),se=(e.arkOrderPlaneCalls===void 0?[]:M(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let m=`$.arkOrderPlaneCalls[${S}]`,y=N(v,m);return T(y,["file","line","callee"],m),{file:D(y,"file",m),line:W(y,"line",m),callee:$(y,"callee",m)}}),pe=(e.arkOrderGenericUpdates===void 0?[]:M(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let m=`$.arkOrderGenericUpdates[${S}]`,y=N(v,m);return T(y,["file","line","method"],m),{file:D(y,"file",m),line:W(y,"line",m),method:$(y,"method",m)}}),Me=(e.arkOrderRootHits===void 0?[]:M(e,"arkOrderRootHits","$")).map((v,S)=>{let m=`$.arkOrderRootHits[${S}]`,y=N(v,m);return T(y,["file","matchedRoot","hasPlaneFactory"],m),{file:D(y,"file",m),matchedRoot:$(y,"matchedRoot",m),hasPlaneFactory:F(y,"hasPlaneFactory",m)}}),He=k.map((v,S)=>{let m=`$.arkRunDeclarations[${S}]`,y=N(v,m);return T(y,["file","line","uses","reactsTo","raises","sends"],m),{file:D(y,"file",m),line:W(y,"line",m),uses:ge(y.uses,`${m}.uses`),reactsTo:ge(y.reactsTo,`${m}.reactsTo`),raises:ge(y.raises,`${m}.raises`),sends:ge(y.sends,`${m}.sends`)}});for(let[v,S]of[["$.capabilityUses",i],["$.ambientUses",c],["$.publishCalls",h],["$.intentReferences",A],["$.safetyUses",R],["$.arkRunKernelCalls",d],["$.arkRunManagedNews",b],["$.arkRunCompositionRootHits",E],["$.arkRunDeclarations",He],["$.arkOrderPlaneCalls",se],["$.arkOrderGenericUpdates",pe],["$.arkOrderRootHits",Me]])for(let m of S)if(!u.has(m.file))throw new Error(`${v} references missing file ${m.file}.`);let fe=Q(e,"projectPackageName","$"),nt=(e.classShapes===void 0?[]:M(e,"classShapes","$")).map((v,S)=>{let m=`$.classShapes[${S}]`,y=N(v,m);T(y,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],m);let O=M(y,"mutatingMethods",m).map((P,ae)=>{let ie=`${m}.mutatingMethods[${ae}]`,be=N(P,ie);return T(be,["name","referencesGuardOrPublish"],ie),{name:$(be,"name",ie),referencesGuardOrPublish:F(be,"referencesGuardOrPublish",ie)}});return{file:D(y,"file",m),className:$(y,"className",m),exported:F(y,"exported",m),hasPublicMutableFields:F(y,"hasPublicMutableFields",m),hasPublicSetters:F(y,"hasPublicSetters",m),hasPublicConstructor:F(y,"hasPublicConstructor",m),hasStaticFactory:F(y,"hasStaticFactory",m),mutatingMethods:O,...y.dataOnly===void 0?{}:{dataOnly:F(y,"dataOnly",m)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:$(e,"resolverIdentity","$"),compilerIdentity:$(e,"compilerIdentity","$"),compilerOptionsHash:$(e,"compilerOptionsHash","$"),tsconfigHash:$(e,"tsconfigHash","$"),evidenceRequirementsHash:$(e,"evidenceRequirementsHash","$"),...fe?{projectPackageName:fe}:{},files:a,dependencies:o,capabilityUses:i,ambientUses:c,publishCalls:h,intentReferences:A,safetyUses:R,classShapes:nt,arkRunKernelCalls:d,arkRunManagedNews:b,arkRunCompositionRootHits:E,arkRunDeclarations:He,arkOrderPlaneCalls:se,arkOrderGenericUpdates:pe,arkOrderRootHits:Me}}l(Tt,"parseResolvedFactsInput");function le(e){let t=N(e,"$"),n=$(t,"factsHash","$"),r=$(t,"candidateTreeHash","$"),s=Ft(Tt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}l(le,"loadResolvedCandidateFacts");var Vn=["network","filesystem","clock","randomness","environment","process","persistence"],I={type:"string",minLength:1},Y={type:"integer",minimum:1},H={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Pt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:I,message:I,file:H}}},resolverIdentity:I,compilerIdentity:I,compilerOptionsHash:I,tsconfigHash:I,candidateTreeHash:I,evidenceRequirementsHash:I,projectPackageName:I,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:H,contentHash:I,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:I},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:H,specifier:I,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:Y,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:H,namedBindings:{type:"array",items:I},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:H,line:Y,symbol:I,capability:{enum:Vn},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:H,line:Y,symbol:I}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:H,line:Y,rawIntentName:I,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:I}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:H,line:Y,intent:I}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:H,line:Y,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:I},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:H,className:I,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:I,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:H,line:Y,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:I,viaImport:{type:"boolean"},receiver:I,nameLiteral:I}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:H,line:Y,typeName:I,importedFrom:I}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:H,matchedRoot:I,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:H,line:Y,uses:{type:"array",items:I},reactsTo:{type:"array",items:I},raises:{type:"array",items:I},sends:{type:"array",items:I}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:H,line:Y,callee:I}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:H,line:Y,method:I}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:H,matchedRoot:I,hasPlaneFactory:{type:"boolean"}}}},factsHash:I},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Lt="1.0";var st=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),je=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),ot=Object.freeze(Object.keys(je).sort()),rt=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),at=Object.freeze({process:Object.freeze(["process","node:process"])});function Ce(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=rt[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=rt[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:rt[e.slice(0,a)]??null}l(Ce,"capabilityForModuleSpecifier");function Ie(e,t){for(let n of t)if(at[n]?.includes(e))return n;return null}l(Ie,"forbiddenGlobalForModuleSpecifier");function Se(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=je[r];if(s)return s}return null}l(Se,"capabilityForAmbientName");function ye(e){if(e?.pure===!0)return[...st].sort();let n=(e?.capabilities?.deny??[]).filter(r=>st.includes(r));return[...new Set(n)].sort()}l(ye,"effectiveCapabilityDeny");function it(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}l(it,"ambientCoveredByForbiddenGlobals");function Ve(e){let t=new Set,n=new Set,r=Object.keys(je);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(o=>o===s||o.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let o of a)t.add(`ambient:${o}`);for(let o of at[s]??[])t.add(`import-exact:${o}`)}for(let s of ye(e)){if(t.add(`import:${s}`),s==="process")for(let a of at.process)t.add(`import-exact:${a}`);for(let a of r)Se(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}l(Ve,"loweredLayerCoverage");function Gn(e){let t=new Set,n=Se(e);n&&t.add(n);for(let[r,s]of Object.entries(je))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}l(Gn,"lowerForbiddenGlobal");var Dt=new Map;function Mt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Mt,"escapeLiteral");function Ge(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(Ge,"normalizeGlobSeparators");function zn(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(zn,"bracesBalanced");function ce(e){let t=Dt.get(e);if(t)return t;let n=Ge(e),r=zn(n),s="",a=0;for(let i=0;i<n.length;i+=1){let c=n[i];c==="\\"&&i+1<n.length?(s+=Mt(n[i+1]),i+=1):c==="*"?n[i+1]==="*"?n[i+2]==="/"?(s+="(?:.*/)?",i+=2):(s+=".*",i+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=Mt(c)}let o=new RegExp(`^${s}$`);return Dt.set(e,o),o}l(ce,"globToRegExp");function qn(e){return Ge(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}l(qn,"concreteGlobSegments");function lt(e,t){let n=Ge(String(e)),r=qn(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let o=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let i=0,c=-1;for(let h of r){let A=-1;for(let R=i;R<o.length;R+=1)if(o[R]===h){A=R;break}if(A<0)return a;c=A,i=A+1}return(c+1)*1e6+r.length*1e4+s}l(lt,"patternSpecificity");function z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>ce(o).test(n))){for(let o of a.patterns??[])if(ce(o).test(n)){let i=lt(o,n);i>s&&(s=i,r=a.name)}}return r}l(z,"layerForRelativePath");function Ht(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}l(Ht,"sliceIdForPath");function Bn(e){let t=new Set;for(let n of e??[]){let s=Ge(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let o=s[a];if((o==="**"||o==="*")&&a>0){let i=s[a-1];i&&!i.includes("*")&&!i.includes("{")&&!i.includes("}")&&t.add(i)}}}return[...t]}l(Bn,"inferSliceFoldersFromPatterns");function Wn(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return Bn(r?.patterns)}l(Wn,"resolveSliceFolders");function Yn(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}l(Yn,"peerIsolationMustDeny");function he(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,o=r?.toPath,i=Wn(s,t,r?.layers),c=a&&o?Ht(a,i):void 0,h=a&&o?Ht(o,i):void 0;if(Yn({fromPath:a,toPath:o,folderCount:i.length,fromSlice:c,toSlice:h}))return s;continue}if(t!==n)return s}}l(he,"findDeniedEdgeRule");var ct={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},dt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function ut(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}l(ut,"resolveIntentLayer");function Ut(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Ut,"looksLikeArkIntent");function pt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Ut(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ct.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ct.PUBLISH_MISSING_SOURCE}),t}l(pt,"classifyPublishFacts");var Kt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Zn=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","no-anemic-model","invariant-coverage"];var jt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Us={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Kt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Kt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Zn]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:jt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:jt}}}};function we(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}l(we,"emptyEffectiveArkRules");var Jn=["no-anemic-model"];function Vt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Vt,"escapeGlobLiteral");function Xn(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=Vt(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=Vt(s)}return new RegExp(`^${n}$`)}l(Xn,"globToRegExp");function xe(e,t){return!t||t.length===0?!0:t.some(n=>Xn(n).test(e))}l(xe,"matchesAppliesTo");function Qn(e){return Jn.includes(e)}l(Qn,"isTier2");function Gt(e){return e.mode==="enforced"&&!Qn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}l(Gt,"severityFor");function Re(e,t,n,r=1){let{severity:s,failsStrict:a}=Gt(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}l(Re,"baseViolation");function ft(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}l(ft,"isInRuleLayer");function ze(e,t,n){return t.filter(r=>!(!r.exported||!xe(r.file,e.appliesTo)||!ft(r.file,e,n)))}l(ze,"shapesForRule");function er(e,t,n){let r=[];for(let s of ze(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(Re(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}l(er,"evaluateAggregatePrivateState");function tr(e,t,n){let r=[];for(let s of ze(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(Re(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}l(tr,"evaluateAlwaysValidFactory");function nr(e,t,n){let r=[];for(let s of ze(e,t,n))for(let a of s.mutatingMethods)a.referencesGuardOrPublish||r.push(Re(e,s.file,`Mutating method ${s.className}.${a.name} does not reference a guard or publish symbol (sensor domain-event-on-mutation).`));return r}l(nr,"evaluateDomainEventOnMutation");function rr(e,t){let n=[];for(let r of t.files)xe(r,e.appliesTo)&&ft(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(Re(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}l(rr,"evaluateOrchestrationOnly");function sr(e,t){let n=[];for(let r of t.files)xe(r,e.appliesTo)&&ft(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(Re(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}l(sr,"evaluateThinAdapter");function ar(e,t,n){let r=[];for(let s of ze(e,t,n))if(s.dataOnly===!0){let a=Re(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}l(ar,"evaluateNoAnemicModel");function zt(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...er(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...tr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...nr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...rr(n,e));break;case"thin-adapter":t.push(...sr(n,e));break;case"no-anemic-model":t.push(...ar(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}l(zt,"evaluateArkRuleSensors");function qt(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(c=>xe(c,s.appliesTo)))continue;let{severity:o,failsStrict:i}=Gt(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o,sensor:s.sensor,failsStrict:i})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(i=>xe(i,s.appliesTo)))continue;let o=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o?"error":"warning",sensor:"invariant-coverage",failsStrict:o})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}l(qt,"collectEmptyAppliesToFindings");var or=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm|typeorm|knex|mongodb|pg|mysql2|better-sqlite3|ioredis|redis)['"]|require\(\s*['"](?:@?prisma\/client|pg|knex|typeorm)/,ir=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,lr=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,cr=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,dr=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function ur(e,t){if(!t||t.length<40)return null;let n=t.match(new RegExp(cr.source,"g"))??[],r=t.match(new RegExp(dr.source,"g"))??[],s=(t.match(/\bif\s*\(/g)??[]).length,a=(t.match(/\bswitch\s*\(/g)??[]).length,o=n.length>=2||n.length>=1&&r.length>=2||r.length>=3&&s+a>=6,i=or.test(t),c=ir.test(t)||lr.test(t),h=n.length>=1||r.length>=2,A=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),R=i&&h||c&&h||i&&A&&(s>=4||n.length>=1)||c&&i;return!o&&!R?null:{...o?{orchestrationHeavy:!0}:{},...R?{adapterThick:!0}:{}}}l(ur,"deriveArkRuleFileHints");function Bt(e){let t={};for(let[n,r]of Object.entries(e)){let s=ur(n,r);s&&(t[n.replace(/\\/g,"/")]=s)}return t}l(Bt,"buildArkRuleFileHints");function pr(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}l(pr,"titleMatchesInvariant");function fr(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}l(fr,"symbolPresent");function Wt(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=[],a=[];for(let o of t){let i=[],c=o.coverage?.test!==!1,h=o.coverage?.symbol;if(!r&&c)for(let p of n){let d=e.fileContents[p];if(d&&pr(d,o.id)){i.push("test-title");break}}h&&fr(e.fileContents,h)&&i.push("symbol");let R=(o.coverage?.test===!0||!!h||o.coverage===void 0)&&i.length>0||o.coverage?.test===!1&&!h?!0:i.length>0,u=r&&c&&i.length===0;if(s.push({invariantId:o.id,layer:o.provenance.layer,sourceFile:o.provenance.sourceFile,mode:o.mode,covered:R&&!u,evidence:i,partial:u,description:o.description}),!R||u){let p=o.mode==="enforced"&&!u,d=r||n.length===0?"never-had-tests":"tests-disappeared";a.push({ruleId:"INVARIANT_UNCOVERED",message:u?`Invariant ${o.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:d==="tests-disappeared"?`Invariant ${o.id} is not covered by a test title or declared symbol (tests-disappeared \u2014 suite exists).`:`Invariant ${o.id} is not covered by a test title or declared symbol (never-had-tests).`,file:o.provenance.sourceFile,line:1,arkruleId:o.id,arkruleSource:o.provenance.sourceFile,fromLayer:o.provenance.layer,severity:p?"error":"warning",failsStrict:p,kind:d})}}return{coverage:s,violations:a,partial:s.some(o=>o.partial)}}l(Wt,"evaluateInvariantCoverage");function Yt(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}l(Yt,"canPromoteInvariant");function mr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}l(mr,"normalizeExtraMergeTeethClassification");function qe(e){let t=mr(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}l(qe,"extraMergeTeethAllowed");function Zt(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}l(Zt,"classifyResolvedLayerCoverage");var gr=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Ys=new Set(gr);function Jt(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(Jt,"isArkRunKernelModuleSpecifier");var yr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],mt=new Set(yr);function Xt(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(mt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(mt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:mt.has(e.slice(0,r))}l(Xt,"isArkRunTransportBypassSpecifier");var hr=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Rr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ar=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function kr(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return hr.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Rr.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Ar.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}l(kr,"classifyLayerImportKind");function br(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=kr(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(br,"layerImportNextAction");function vr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(vr,"arkRunCallSiteName");function Er(e){let t=vr(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(Er,"arkRunNextAction");function oe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return br(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Er(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() to freeze \u03BE or proposeRelease() for a pattern change with blast radius, then preflight again. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate only. Change \u03BE with proposeRelease + release. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(oe,"deterministicNextAction");var Cr=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],ia=new Set(Cr);var Qt={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Ir="ARKRUN_INTERACTION_NAME_INCOMPLETE";function nn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(nn,"isDomainRoleLayer");function Sr(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(Sr,"compareFindings");function te(e,t,n,r,s,a,o){let i=e.mode==="enforced"&&o;return{ruleId:Qt[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:oe({ruleId:Qt[t],fromLayer:a?.fromLayer,target:a?.target})}}l(te,"finding");function wr(e,t){let n=[],r=[],s=[],a=[];for(let o of e)o.file===t&&(n.push(...o.uses),r.push(...o.reactsTo),s.push(...o.raises),a.push(...o.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}l(wr,"bagForFile");function en(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(en,"emitKinds");function tn(e){return e==="subscribe"||e==="register-handler"}l(tn,"handleKinds");function xr(e){return e==="resolve"||e==="resolve-singleton"}l(xr,"dependKinds");function Or(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(te(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let o of t){let i=a.get(o.matchedRoot)??[];i.push(o),a.set(o.matchedRoot,i)}for(let o of s){let i=[...a.get(o)??[]].sort((h,A)=>h.file.localeCompare(A.file));if(i.length===0){r.push(te(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},n));continue}if(i.some(h=>h.hasKernelFactory))continue;let c=i[0];r.push(te(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},n))}return r}l(Or,"evaluateMissingRoot");function $r(e,t,n,r,s){let a=new Map(t.map(i=>[i.name,i.intentPrefixes??[]])),o=[];for(let i of n){let c=i.specifier;if(!c||!Jt(c))continue;let h=r(i.from);h&&nn(h,a.get(h)??[])&&o.push(te(e,"arkrun-kernel-in-domain",i.from,i.line,`${h} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:h,target:c},s))}return o}l($r,"evaluateKernelInDomain");function _r(e,t,n,r,s,a){let o=new Set(e.managedLayers);if(o.size===0)return[];let i=new Map(t.map(A=>[A.name,A.intentPrefixes??[]])),c=new Set(r.filter(A=>A.hasKernelFactory).map(A=>A.file)),h=[];for(let A of n){if(c.has(A.file))continue;let R=A.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let u=s(A.file);!u||!o.has(u)||nn(u,i.get(u)??[])||h.push(te(e,"arkrun-direct-new",A.file,A.line,`${u} must not construct ${A.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:u,target:A.typeName},a))}return h}l(_r,"evaluateDirectNew");function Fr(e,t,n,r,s){let a=[],o=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:o};let i=new Set(e.managedLayers);if(i.size===0)return{findings:a,completenessReasons:o};for(let c of t){if(!en(c.kind)&&!tn(c.kind)&&!xr(c.kind))continue;let h=r(c.file);if(!h||!i.has(h))continue;if(!c.nameLiteral){e.mode==="enforced"&&o.push({code:Ir,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let A=wr(n,c.file);if(en(c.kind)){if(A.raises.has(c.nameLiteral)||A.sends.has(c.nameLiteral))continue;a.push(te(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:h,target:c.nameLiteral},s));continue}if(tn(c.kind)){if(A.reactsTo.has(c.nameLiteral))continue;a.push(te(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:h,target:c.nameLiteral},s));continue}A.uses.has(c.nameLiteral)||a.push(te(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:h,target:c.nameLiteral},s))}return{findings:a,completenessReasons:o}}l(Fr,"evaluateUndeclared");function Nr(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let o of t){if(o.typeOnly)continue;let i=o.specifier;if(!i||!Xt(i))continue;let c=n(o.from);!c||!s.has(c)||a.push(te(e,"arkrun-transport-bypass",o.from,o.line,`${c} must not import broker/queue/emitter ${JSON.stringify(i)}; use the ArkRun kernel transport.`,{fromLayer:c,target:i},r))}return a}l(Nr,"evaluateTransportBypass");function rn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=qe(e.classification),r=Fr(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Or(t,e.compositionRootHits,n),...$r(t,e.layers,e.dependencies,e.layerForFile,n),..._r(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Nr(t,e.dependencies,e.layerForFile,n)].sort(Sr),a=[...r.completenessReasons].sort((o,i)=>{let c=`${o.code}\0${o.file??""}\0${o.message}`,h=`${i.code}\0${i.file??""}\0${i.message}`;return c<h?-1:c>h?1:0});return{findings:s,completenessReasons:a}}l(rn,"evaluateArkRunSensors");function sn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(sn,"isArkOrderModuleSpecifier");var an={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI"};function Tr(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(Tr,"isDomainRoleLayer");function Oe(e,t,n,r,s,a,o){let i=e.mode==="enforced"&&o;return{ruleId:an[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:oe({ruleId:an[t],fromLayer:a?.fromLayer,target:a?.target})}}l(Oe,"finding");function on(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=qe(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(Oe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let o=new Map;for(let i of e.planeRootHits){let c=o.get(i.matchedRoot)??[];c.push(i),o.set(i.matchedRoot,c)}for(let i of s){let c=o.get(i)??[];if(c.length===0){r.push(Oe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(i)} matched no governed files and has no createOrderPlane factory.`,{target:i},n));continue}c.some(h=>h.hasPlaneFactory)||r.push(Oe(t,"arkorder-missing-plane",c[0].file,1,`ArkOrder plane root ${JSON.stringify(i)} has no createOrderPlane factory.`,{target:i},n))}}let a=new Map(e.layers.map(o=>[o.name,o.intentPrefixes??[]]));for(let o of e.dependencies){let i=o.specifier;if(!i||!sn(i))continue;let c=e.layerForFile(o.from);c&&Tr(c,a.get(c)??[])&&r.push(Oe(t,"arkorder-kernel-in-domain",o.from,o.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:c,target:i},n))}for(let o of e.genericUpdates)r.push(Oe(t,"arkorder-generic-update",o.file,o.line,`Generic ${o.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:o.method},n));return r.sort((o,i)=>o.file.localeCompare(i.file)||o.ruleId.localeCompare(i.ruleId)||o.line-i.line),{findings:r,completenessReasons:[]}}l(on,"evaluateArkOrderSensors");function j(e,t,n={}){return{ruleId:e,message:t,...n}}l(j,"configWarning");function gt(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(p=>typeof p!="string"))&&a.push(j("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(j("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let p of["maxTsSuppressions","maxAnyCasts"]){let d=t.safety[p];d!==void 0&&(!Number.isInteger(d)||d<0)&&a.push(j("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${p} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],i=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],c=new Set([...o.map(p=>p.name).filter(Boolean),...i.map(p=>p.name).filter(p=>!!p)]);o.length===0&&a.push(j("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let h=new Set,A=new Set;for(let p of o){if(!p.name){a.push(j("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}h.has(p.name)&&A.add(p.name),h.add(p.name),p.forbiddenGlobals!==void 0&&(!Array.isArray(p.forbiddenGlobals)||p.forbiddenGlobals.some(g=>typeof g!="string"))&&a.push(j("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${p.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:p.name}));let d=Array.isArray(p.patterns)?p.patterns:[];if(d.length===0){a.push(j("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${p.name}" has no file patterns and will never classify files.`,{layer:p.name}));continue}for(let g of d){let b;try{b=ce(g)}catch(E){a.push(j("CONFIG_INVALID_LAYER_PATTERN",`Layer "${p.name}" has an invalid pattern "${g}": ${E instanceof Error?E.message:String(E)}`,{layer:p.name,pattern:g}));continue}let C=p.optional===!0||p.reserved===!0||p.allowEmpty===!0;!r.some(E=>b.test(E))&&!C&&a.push(j("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${p.name}" pattern "${g}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:p.name,pattern:g,failsStrict:!1,reserved:!1}))}}for(let p of A)a.push(j("CONFIG_DUPLICATE_LAYER",`Layer "${p}" is configured more than once.`,{layer:p}));if(c.size>0)for(let p of n??[])p.from&&!c.has(p.from)&&a.push(j("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${p.from}".`,{fromLayer:p.from,toLayer:p.to})),p.to&&!c.has(p.to)&&a.push(j("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${p.to}".`,{fromLayer:p.from,toLayer:p.to}));let R=new Set;if(o.length>1)for(let p of r){let d=-1,g=[];for(let b of o)for(let C of b.patterns??[]){if(!ce(C).test(p))continue;let E=lt(C,p);E>d?(d=E,g=[b.name]):E===d&&!g.includes(b.name)&&g.push(b.name)}g.length>1&&R.add([...g].sort().join(" + "))}R.size>0&&a.push(j("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let u=r.filter(p=>!z(p,o));return u.length>0&&a.push(j("CONFIG_UNCLASSIFIED_FILES",`${u.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:u.length,samples:u.slice(0,5)})),a}l(gt,"collectAnalysisConfigWarnings");function ln(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],o=[],i=l(c=>{n.set(c,t),r.set(c,t),t+=1,a.push(c),s.add(c);for(let R of[...e.get(c)??[]].sort())e.has(R)&&(n.has(R)?s.has(R)&&r.set(c,Math.min(r.get(c)??0,n.get(R)??0)):(i(R),r.set(c,Math.min(r.get(c)??0,r.get(R)??0))));if(r.get(c)!==n.get(c))return;let h=[],A;do{if(A=a.pop(),A===void 0)break;s.delete(A),h.push(A)}while(A!==c);h.length>1&&o.push(h.sort())},"connect");for(let c of[...e.keys()].sort())n.has(c)||i(c);return o.sort((c,h)=>c[0]<h[0]?-1:c[0]>h[0]?1:0).map(c=>({ruleId:"CIRCULAR_DEPENDENCY",file:c[0],line:1,target:c.join(" \u2192 "),message:`Circular dependency among ${c.length} files: ${c.join(" \u2192 ")} \u2192 ${c[0]}.`,cycleKind:"value"}))}l(ln,"detectArchitectureCycles");function $e(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let o=he(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let i=!!o.peerIsolation,c=!i&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=o.message??(i?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}). Extract shared code or use events/ports across slices.`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`);t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!i&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...i?{peerIsolation:!0}:{},message:c?`${h} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:h,...c?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=ln(r);s==="soft"||s==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}l($e,"evaluateArchitectureGraph");function Pr(e,t){return t.some(n=>{try{return ce(n).test(e)}catch{return!1}})}l(Pr,"matchesAny");function Lr(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],o=t.safetyUses.filter(g=>g.kind==="ts-suppression").map(({file:g,line:b})=>({file:g,line:b})),i=t.safetyUses.filter(g=>g.kind==="any-cast").map(({file:g,line:b})=>({file:g,line:b})),c=t.safetyUses.filter(g=>(g.kind==="dynamic-import"||g.kind==="dynamic-require")&&!Pr(g.file,a)).map(g=>({file:g.file,line:g.line,kind:g.kind==="dynamic-require"?"require":"import"})),h=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(g=>g.kind==="in-memory-store").map(g=>({file:g.file,line:g.line,store:g.symbol??"in-memory store"})),A=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(g=>g.peerIsolation===!1||g.allowed===!1&&!!g.from&&g.from===g.to&&g.peerIsolation!==!0).map(g=>({from:g.from,to:g.to})),R={tsSuppressions:o,anyCasts:i,nonLiteralDynamicImports:c,inMemoryProductionStores:h,disabledPeerIsolationRules:A,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},u=[],p=c.filter(g=>g.kind==="import");if(p.length>0){let g=p[0];u.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:g.file,line:g.line,message:`${p.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let d=c.filter(g=>g.kind==="require");if(d.length>0){let g=d[0];u.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:g.file,line:g.line,message:`${d.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(o.length>r){let g=o[0];u.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:g.file,line:g.line,message:`${o.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(i.length>s){let g=i[0];u.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:g.file,line:g.line,message:`${i.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(h.length>0){let g=h[0];u.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:g.file,line:g.line,message:`${h.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return A.length>0&&u.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${A.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:u}}l(Lr,"evaluateSafety");function Dr(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}l(Dr,"ambientForbiddenGlobal");function cn(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return ut(e,n.length>0?n:dt.map(r=>({name:r.layer,prefixes:r.prefixes})))}l(cn,"intentLayer");function Mr(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let o=n.get(a.file);!o||!Dr(a.symbol,s.get(o)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,message:`${o} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let o=n.get(a.file);if(!o)continue;let i=s.get(o),c=i?.forbiddenGlobals??[],h=a.source==="import-based"?t.dependencies.find(A=>A.from===a.file&&A.line===a.line&&A.specifier===a.symbol&&!A.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&it(a.symbol,c))){if(a.source==="import-based"){let A=Ie(a.symbol,c);if(A){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,...h?{edgeKind:h}:{},message:`${o} must not use module "${a.symbol}" because it is the import form of forbidden global "${A}".`});continue}}ye(i).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:o,target:a.symbol,capability:a.capability,...h?{edgeKind:h}:{},message:a.source==="import-based"?`${o} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${o} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let o=n.get(a.file);if(!o)continue;for(let c of pt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:c.ruleId,file:a.file,line:a.line,...c.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:o}:{},message:c.message});if(!a.sourceIntent)continue;let i=cn(a.sourceIntent,e.contract);!i||i===o||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:o,toLayer:i,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${i}, but the publishing file is classified as ${o}.`})}for(let a of t.intentReferences){let o=n.get(a.file);if(!o)continue;let i=cn(a.intent,e.contract);if(!i)continue;let c=he(e.contract.config.rules,o,i);c&&r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:o,toLayer:i,target:a.intent,message:c.message??`${o} must not reference ${i} intent ${a.intent}.`})}return r}l(Mr,"contentViolations");function yt(e){let{facts:t}=e,n=Ue(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((f,X)=>{let ve=`${f.code}\0${f.file??""}\0${f.message}`,Ee=`${X.code}\0${X.file??""}\0${X.message}`;return ve<Ee?-1:ve>Ee?1:0}),o=t.files.map(f=>({...f,layer:z(f.path,e.contract.config.layers)??null})),i=new Map(o.map(f=>[f.path,f.layer])),c=t.dependencies.map(f=>{let X=f.target?i.get(f.target)??z(f.target,e.contract.config.layers):void 0;return{from:f.from,fromLayer:i.get(f.from)??null,...f.resolution==="resolved-project"&&f.target?{to:f.target,...X?{toLayer:X}:{}}:{},line:f.line,kind:f.kind,typeOnly:f.typeOnly,...f.targetTypeOnlyExports?{targetTypeOnlyExports:f.targetTypeOnlyExports}:{},...f.sourcePureTypeModule?{sourcePureTypeModule:f.sourcePureTypeModule}:{},...f.namedBindingsTypeOnly?{namedBindingsTypeOnly:f.namedBindingsTypeOnly}:{},...f.portProofEligible?{portProofEligible:f.portProofEligible}:{}}}),h=gt({config:e.contract.config,rules:e.contract.config.rules,files:o.map(f=>f.path)}),A=Lr(e,t),R=e.contract.arkRules??we(),u=o.map(f=>f.path),d={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?Bt(e.coverageInputs.fileContents):{},...e.fileHints??{}},g=[...zt({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:u,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),fileHints:d}),...qt(R,u)],b=g.filter(f=>f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,nextAction:f.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${f.arkruleId} in ${f.arkruleSource} so they match governed files, or remove the rule.`:`Fix the structure or invariant for ${f.arkruleId} (declared in ${f.arkruleSource}), then preflight again.`})),C=g.filter(f=>!f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,failsStrict:!1,nextAction:f.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${f.arkruleId} in ${f.arkruleSource} (zero-match scope; advisory).`:`Review ArkRule ${f.arkruleId} in ${f.arkruleSource} (advisory).`})),k=(R.invariants?.length??0)>0?Wt({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0}):{coverage:[],violations:[],partial:!1},x=k.violations.filter(f=>f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,nextAction:`Add a test title or declared symbol covering ${f.arkruleId} (declared in ${f.arkruleSource}), then preflight again.`})),se=k.violations.filter(f=>!f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,failsStrict:!1,nextAction:`Cover invariant ${f.arkruleId} in ${f.arkruleSource} (advisory / partial).`})),Qe=Zt(o),pe=rn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),classification:Qe}),et=e.contract.config.arkRun?.mode,Me=pe.findings.filter(()=>et==="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:f.failsStrict,...f.severity?{severity:f.severity}:{}})),He=pe.findings.filter(()=>et!=="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:!1})),fe=on({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,dependencies:t.dependencies,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),classification:Qe}),tt=e.contract.config.arkOrder?.mode,nt=fe.findings.filter(()=>tt==="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:f.failsStrict,...f.severity?{severity:f.severity}:{}})),v=fe.findings.filter(()=>tt!=="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:!1})),m=[...k.partial&&k.coverage.some(f=>f.mode==="enforced"&&f.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...pe.completenessReasons,...fe.completenessReasons],y=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.filter(f=>f.layer).map(f=>f.path),contentViolations:[...Mr(e,t,i),...b,...x,...Me,...nt],edges:c,warnings:[...h,...A.warnings,...C,...se,...He,...v],safety:A.report}),O=s==="complete"&&m.length>0?"partial":s,P=O==="complete"?a:[...a,...m].sort((f,X)=>{let ve=`${f.code}\0${f.file??""}\0${f.message}`,Ee=`${X.code}\0${X.file??""}\0${X.message}`;return ve<Ee?-1:ve>Ee?1:0}),ae=y.violations.filter(f=>f.failsStrict!==!1),ie=O==="complete"&&ae.length===0,be=ie&&y.warnings.every(f=>f.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:O,completenessReasons:P,valid:ie,strictValid:be,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:A.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:o,layers:e.contract.config.layers.map(f=>f.name),edges:c,capabilityUses:t.capabilityUses,violations:y.violations,warnings:y.warnings}}}l(yt,"analyzeCanonicalResolvedProject");function Be(e){return yt({contract:e.contract,facts:le(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}l(Be,"analyzeResolvedProject");var ht="1.0";var We=class extends Error{static{l(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+var Un=Object.defineProperty;var l=(e,t)=>Un(e,"name",{value:t,configurable:!0});function L(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(L,"deterministicHash");function _(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(_).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${_(t[n])}`).join(",")}}`}l(_,"stableSerialize");var me="1.2";var _t=["network","filesystem","clock","randomness","environment","process","persistence"];function U(e,t){let n=_(e),r=_(t);return n<r?-1:n>r?1:0}l(U,"compareCanonical");function K(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}l(K,"sortedUnique");function Ue(e){let t={schemaVersion:"1.2",include:K(e.include??[]),exclude:K(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:K(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:K(n.patterns??[]),exclude:K(n.exclude??[]),forbiddenGlobals:K(n.forbiddenGlobals??[]),intentPrefixes:K(n.intentPrefixes??[]),capabilityDeny:K(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(U),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:K(e.arkRun.compositionRoots),managedLayers:K(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return L(_(t))}l(Ue,"resolvedFactsEvidenceRequirementsHash");function Kn(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(U),n=e.files.map(k=>({...k,typeOnlyExportNames:K(k.typeOnlyExportNames)})).sort((k,w)=>k.path<w.path?-1:k.path>w.path?1:0),r=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:K(k.namedBindings)}:{}})).sort(U),s=e.capabilityUses.map(k=>({...k})).sort(U),a=e.ambientUses.map(k=>({...k})).sort(U),o=e.publishCalls.map(k=>({...k})).sort(U),i=e.intentReferences.map(k=>({...k})).sort(U),c=e.safetyUses.map(k=>({...k})).sort(U),h=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map(w=>({...w}))})).sort(U),A=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(U),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(U),p=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(U),u=(e.arkRunDeclarations??[]).map(k=>({...k,uses:K(k.uses),reactsTo:K(k.reactsTo),raises:K(k.raises),sends:K(k.sends)})).sort(U),d=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(U),g=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(U),b=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(U),C=e.files.map(({path:k,contentHash:w})=>({path:k,contentHash:w})).sort((k,w)=>k.path<w.path?-1:k.path>w.path?1:0),E=L(_(C));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:E,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:o,intentReferences:i,safetyUses:c,classShapes:h,arkRunKernelCalls:A,arkRunManagedNews:R,arkRunCompositionRootHits:p,arkRunDeclarations:u,arkOrderPlaneCalls:d,arkOrderGenericUpdates:g,arkOrderRootHits:b}}l(Kn,"canonicalResolvedFactsInput");function Ft(e){let t=Kn(e);return{...t,factsHash:L(_(t))}}l(Ft,"createCanonicalResolvedCandidateFacts");function Ke(e){return Ft(Tt(N(e,"$"),!1))}l(Ke,"createResolvedCandidateFacts");function N(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}l(N,"asRecord");function T(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}l(T,"assertOnlyKeys");function $(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}l($,"requiredText");function Q(e,t,n){if(e[t]!==void 0)return $(e,t,n)}l(Q,"optionalText");function D(e,t,n){let r=$(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let i of s.split("/"))if(!(!i||i==="."))if(i===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(i);let o=a.join("/");if(!o||o!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return o}l(D,"requiredProjectPath");function F(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}l(F,"requiredBoolean");function Nt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}l(Nt,"requiredInteger");function W(e,t,n){let r=Nt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}l(W,"requiredPositiveInteger");function M(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}l(M,"requiredArray");function ee(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}l(ee,"enumValue");function ge(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}l(ge,"parseStringArray");function jn(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}l(jn,"assertUnique");function Tt(e,t){T(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ee(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ee(e,"completeness",["complete","partial","unavailable"],"$"),s=M(e,"completenessReasons","$").map((v,S)=>{let m=`$.completenessReasons[${S}]`,y=N(v,m);T(y,["code","message","file"],m);let O=y.file===void 0?void 0:D(y,"file",m);return{code:$(y,"code",m),message:$(y,"message",m),...O?{file:O}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=M(e,"files","$").map((v,S)=>{let m=`$.files[${S}]`,y=N(v,m);return T(y,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],m),{path:D(y,"path",m),contentHash:$(y,"contentHash",m),parseStatus:ee(y,"parseStatus",["parsed","invalid"],m),parseDiagnosticCount:Nt(y,"parseDiagnosticCount",m),exportsOnlyTypes:F(y,"exportsOnlyTypes",m),typeOnlyExportNames:ge(y.typeOnlyExportNames,`${m}.typeOnlyExportNames`),hasTopLevelSideEffects:F(y,"hasTopLevelSideEffects",m)}}),o=M(e,"dependencies","$").map((v,S)=>{let m=`$.dependencies[${S}]`,y=N(v,m);T(y,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],m);let O=Q(y,"specifier",m),P=Q(y,"target",m),ae=ee(y,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],m);if(ae==="resolved-project"&&!P)throw new Error(`${m}.target is required for resolved-project dependencies.`);if(ae!=="resolved-project"&&P)throw new Error(`${m}.target is only allowed for resolved-project dependencies.`);if(ae!=="dynamic"&&!O)throw new Error(`${m}.specifier is required unless resolution is dynamic.`);return{from:D(y,"from",m),...O?{specifier:O}:{},kind:ee(y,"kind",["import","export","dynamic-import","require"],m),typeOnly:F(y,"typeOnly",m),line:W(y,"line",m),resolution:ae,...P?{target:D(y,"target",m)}:{},...y.namedBindings!==void 0?{namedBindings:ge(y.namedBindings,`${m}.namedBindings`)}:{},...y.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:F(y,"targetTypeOnlyExports",m)}:{},...y.sourcePureTypeModule!==void 0?{sourcePureTypeModule:F(y,"sourcePureTypeModule",m)}:{},...y.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:F(y,"namedBindingsTypeOnly",m)}:{},...y.portProofEligible!==void 0?{portProofEligible:F(y,"portProofEligible",m)}:{}}}),i=M(e,"capabilityUses","$").map((v,S)=>{let m=`$.capabilityUses[${S}]`,y=N(v,m);return T(y,["file","line","symbol","capability","source"],m),{file:D(y,"file",m),line:W(y,"line",m),symbol:$(y,"symbol",m),capability:ee(y,"capability",_t,m),source:ee(y,"source",["ambient-global","import-based"],m)}}),c=M(e,"ambientUses","$").map((v,S)=>{let m=`$.ambientUses[${S}]`,y=N(v,m);return T(y,["file","line","symbol"],m),{file:D(y,"file",m),line:W(y,"line",m),symbol:$(y,"symbol",m)}}),h=M(e,"publishCalls","$").map((v,S)=>{let m=`$.publishCalls[${S}]`,y=N(v,m);T(y,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],m);let O=Q(y,"rawIntentName",m),P=Q(y,"sourceIntent",m);return{file:D(y,"file",m),line:W(y,"line",m),...O?{rawIntentName:O}:{},objectHasIntent:F(y,"objectHasIntent",m),arkPublishCandidate:F(y,"arkPublishCandidate",m),hasSource:F(y,"hasSource",m),...P?{sourceIntent:P}:{}}}),A=M(e,"intentReferences","$").map((v,S)=>{let m=`$.intentReferences[${S}]`,y=N(v,m);return T(y,["file","line","intent"],m),{file:D(y,"file",m),line:W(y,"line",m),intent:$(y,"intent",m)}}),R=M(e,"safetyUses","$").map((v,S)=>{let m=`$.safetyUses[${S}]`,y=N(v,m);T(y,["file","line","kind","symbol"],m);let O=Q(y,"symbol",m),P=ee(y,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],m);if(P==="in-memory-store"&&!O)throw new Error(`${m}.symbol is required for in-memory-store facts.`);if(P!=="in-memory-store"&&O)throw new Error(`${m}.symbol is only allowed for in-memory-store facts.`);return{file:D(y,"file",m),line:W(y,"line",m),kind:P,...O?{symbol:O}:{}}});jn(a,v=>v.path,"$.files");let p=new Set(a.map(v=>v.path));for(let v of a){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of o)if(!p.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let d=(e.arkRunKernelCalls===void 0?[]:M(e,"arkRunKernelCalls","$")).map((v,S)=>{let m=`$.arkRunKernelCalls[${S}]`,y=N(v,m);T(y,["file","line","kind","callee","viaImport","receiver","nameLiteral"],m);let O=Q(y,"receiver",m),P=Q(y,"nameLiteral",m);return{file:D(y,"file",m),line:W(y,"line",m),kind:ee(y,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],m),callee:$(y,"callee",m),viaImport:F(y,"viaImport",m),...O?{receiver:O}:{},...P?{nameLiteral:P}:{}}}),b=(e.arkRunManagedNews===void 0?[]:M(e,"arkRunManagedNews","$")).map((v,S)=>{let m=`$.arkRunManagedNews[${S}]`,y=N(v,m);T(y,["file","line","typeName","importedFrom"],m);let O=Q(y,"importedFrom",m);return{file:D(y,"file",m),line:W(y,"line",m),typeName:$(y,"typeName",m),...O?{importedFrom:O}:{}}}),E=(e.arkRunCompositionRootHits===void 0?[]:M(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let m=`$.arkRunCompositionRootHits[${S}]`,y=N(v,m);return T(y,["file","matchedRoot","hasKernelFactory"],m),{file:D(y,"file",m),matchedRoot:$(y,"matchedRoot",m),hasKernelFactory:F(y,"hasKernelFactory",m)}}),k=e.arkRunDeclarations===void 0?[]:M(e,"arkRunDeclarations","$"),se=(e.arkOrderPlaneCalls===void 0?[]:M(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let m=`$.arkOrderPlaneCalls[${S}]`,y=N(v,m);return T(y,["file","line","callee"],m),{file:D(y,"file",m),line:W(y,"line",m),callee:$(y,"callee",m)}}),pe=(e.arkOrderGenericUpdates===void 0?[]:M(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let m=`$.arkOrderGenericUpdates[${S}]`,y=N(v,m);return T(y,["file","line","method"],m),{file:D(y,"file",m),line:W(y,"line",m),method:$(y,"method",m)}}),Me=(e.arkOrderRootHits===void 0?[]:M(e,"arkOrderRootHits","$")).map((v,S)=>{let m=`$.arkOrderRootHits[${S}]`,y=N(v,m);return T(y,["file","matchedRoot","hasPlaneFactory"],m),{file:D(y,"file",m),matchedRoot:$(y,"matchedRoot",m),hasPlaneFactory:F(y,"hasPlaneFactory",m)}}),He=k.map((v,S)=>{let m=`$.arkRunDeclarations[${S}]`,y=N(v,m);return T(y,["file","line","uses","reactsTo","raises","sends"],m),{file:D(y,"file",m),line:W(y,"line",m),uses:ge(y.uses,`${m}.uses`),reactsTo:ge(y.reactsTo,`${m}.reactsTo`),raises:ge(y.raises,`${m}.raises`),sends:ge(y.sends,`${m}.sends`)}});for(let[v,S]of[["$.capabilityUses",i],["$.ambientUses",c],["$.publishCalls",h],["$.intentReferences",A],["$.safetyUses",R],["$.arkRunKernelCalls",d],["$.arkRunManagedNews",b],["$.arkRunCompositionRootHits",E],["$.arkRunDeclarations",He],["$.arkOrderPlaneCalls",se],["$.arkOrderGenericUpdates",pe],["$.arkOrderRootHits",Me]])for(let m of S)if(!p.has(m.file))throw new Error(`${v} references missing file ${m.file}.`);let fe=Q(e,"projectPackageName","$"),nt=(e.classShapes===void 0?[]:M(e,"classShapes","$")).map((v,S)=>{let m=`$.classShapes[${S}]`,y=N(v,m);T(y,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],m);let O=M(y,"mutatingMethods",m).map((P,ae)=>{let ie=`${m}.mutatingMethods[${ae}]`,be=N(P,ie);return T(be,["name","referencesGuardOrPublish"],ie),{name:$(be,"name",ie),referencesGuardOrPublish:F(be,"referencesGuardOrPublish",ie)}});return{file:D(y,"file",m),className:$(y,"className",m),exported:F(y,"exported",m),hasPublicMutableFields:F(y,"hasPublicMutableFields",m),hasPublicSetters:F(y,"hasPublicSetters",m),hasPublicConstructor:F(y,"hasPublicConstructor",m),hasStaticFactory:F(y,"hasStaticFactory",m),mutatingMethods:O,...y.dataOnly===void 0?{}:{dataOnly:F(y,"dataOnly",m)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:$(e,"resolverIdentity","$"),compilerIdentity:$(e,"compilerIdentity","$"),compilerOptionsHash:$(e,"compilerOptionsHash","$"),tsconfigHash:$(e,"tsconfigHash","$"),evidenceRequirementsHash:$(e,"evidenceRequirementsHash","$"),...fe?{projectPackageName:fe}:{},files:a,dependencies:o,capabilityUses:i,ambientUses:c,publishCalls:h,intentReferences:A,safetyUses:R,classShapes:nt,arkRunKernelCalls:d,arkRunManagedNews:b,arkRunCompositionRootHits:E,arkRunDeclarations:He,arkOrderPlaneCalls:se,arkOrderGenericUpdates:pe,arkOrderRootHits:Me}}l(Tt,"parseResolvedFactsInput");function le(e){let t=N(e,"$"),n=$(t,"factsHash","$"),r=$(t,"candidateTreeHash","$"),s=Ft(Tt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}l(le,"loadResolvedCandidateFacts");var Vn=["network","filesystem","clock","randomness","environment","process","persistence"],I={type:"string",minLength:1},Y={type:"integer",minimum:1},H={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Pt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:I,message:I,file:H}}},resolverIdentity:I,compilerIdentity:I,compilerOptionsHash:I,tsconfigHash:I,candidateTreeHash:I,evidenceRequirementsHash:I,projectPackageName:I,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:H,contentHash:I,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:I},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:H,specifier:I,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:Y,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:H,namedBindings:{type:"array",items:I},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:H,line:Y,symbol:I,capability:{enum:Vn},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:H,line:Y,symbol:I}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:H,line:Y,rawIntentName:I,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:I}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:H,line:Y,intent:I}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:H,line:Y,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:I},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:H,className:I,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:I,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:H,line:Y,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:I,viaImport:{type:"boolean"},receiver:I,nameLiteral:I}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:H,line:Y,typeName:I,importedFrom:I}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:H,matchedRoot:I,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:H,line:Y,uses:{type:"array",items:I},reactsTo:{type:"array",items:I},raises:{type:"array",items:I},sends:{type:"array",items:I}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:H,line:Y,callee:I}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:H,line:Y,method:I}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:H,matchedRoot:I,hasPlaneFactory:{type:"boolean"}}}},factsHash:I},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Lt="1.0";var st=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),je=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),ot=Object.freeze(Object.keys(je).sort()),rt=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),at=Object.freeze({process:Object.freeze(["process","node:process"])});function Ce(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=rt[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=rt[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:rt[e.slice(0,a)]??null}l(Ce,"capabilityForModuleSpecifier");function Ie(e,t){for(let n of t)if(at[n]?.includes(e))return n;return null}l(Ie,"forbiddenGlobalForModuleSpecifier");function Se(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=je[r];if(s)return s}return null}l(Se,"capabilityForAmbientName");function ye(e){if(e?.pure===!0)return[...st].sort();let n=(e?.capabilities?.deny??[]).filter(r=>st.includes(r));return[...new Set(n)].sort()}l(ye,"effectiveCapabilityDeny");function it(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}l(it,"ambientCoveredByForbiddenGlobals");function Ve(e){let t=new Set,n=new Set,r=Object.keys(je);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(o=>o===s||o.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let o of a)t.add(`ambient:${o}`);for(let o of at[s]??[])t.add(`import-exact:${o}`)}for(let s of ye(e)){if(t.add(`import:${s}`),s==="process")for(let a of at.process)t.add(`import-exact:${a}`);for(let a of r)Se(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}l(Ve,"loweredLayerCoverage");function Gn(e){let t=new Set,n=Se(e);n&&t.add(n);for(let[r,s]of Object.entries(je))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}l(Gn,"lowerForbiddenGlobal");var Dt=new Map;function Mt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Mt,"escapeLiteral");function Ge(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(Ge,"normalizeGlobSeparators");function zn(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(zn,"bracesBalanced");function ce(e){let t=Dt.get(e);if(t)return t;let n=Ge(e),r=zn(n),s="",a=0;for(let i=0;i<n.length;i+=1){let c=n[i];c==="\\"&&i+1<n.length?(s+=Mt(n[i+1]),i+=1):c==="*"?n[i+1]==="*"?n[i+2]==="/"?(s+="(?:.*/)?",i+=2):(s+=".*",i+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=Mt(c)}let o=new RegExp(`^${s}$`);return Dt.set(e,o),o}l(ce,"globToRegExp");function qn(e){return Ge(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}l(qn,"concreteGlobSegments");function lt(e,t){let n=Ge(String(e)),r=qn(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let o=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let i=0,c=-1;for(let h of r){let A=-1;for(let R=i;R<o.length;R+=1)if(o[R]===h){A=R;break}if(A<0)return a;c=A,i=A+1}return(c+1)*1e6+r.length*1e4+s}l(lt,"patternSpecificity");function z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>ce(o).test(n))){for(let o of a.patterns??[])if(ce(o).test(n)){let i=lt(o,n);i>s&&(s=i,r=a.name)}}return r}l(z,"layerForRelativePath");function Ht(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}l(Ht,"sliceIdForPath");function Bn(e){let t=new Set;for(let n of e??[]){let s=Ge(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let o=s[a];if((o==="**"||o==="*")&&a>0){let i=s[a-1];i&&!i.includes("*")&&!i.includes("{")&&!i.includes("}")&&t.add(i)}}}return[...t]}l(Bn,"inferSliceFoldersFromPatterns");function Wn(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return Bn(r?.patterns)}l(Wn,"resolveSliceFolders");function Yn(e){return!e.fromPath||!e.toPath||e.folderCount<=0||!e.fromSlice||!e.toSlice?!0:e.fromSlice!==e.toSlice}l(Yn,"peerIsolationMustDeny");function he(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,o=r?.toPath,i=Wn(s,t,r?.layers),c=a&&o?Ht(a,i):void 0,h=a&&o?Ht(o,i):void 0;if(Yn({fromPath:a,toPath:o,folderCount:i.length,fromSlice:c,toSlice:h}))return s;continue}if(t!==n)return s}}l(he,"findDeniedEdgeRule");var ct={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},dt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function ut(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}l(ut,"resolveIntentLayer");function Ut(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Ut,"looksLikeArkIntent");function pt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Ut(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ct.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ct.PUBLISH_MISSING_SOURCE}),t}l(pt,"classifyPublishFacts");var Kt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Zn=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","no-anemic-model","invariant-coverage"];var jt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Us={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Kt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Kt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Zn]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:jt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:jt}}}};function xe(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}l(xe,"emptyEffectiveArkRules");var Jn=["no-anemic-model"];function Vt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Vt,"escapeGlobLiteral");function Xn(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=Vt(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=Vt(s)}return new RegExp(`^${n}$`)}l(Xn,"globToRegExp");function we(e,t){return!t||t.length===0?!0:t.some(n=>Xn(n).test(e))}l(we,"matchesAppliesTo");function Qn(e){return Jn.includes(e)}l(Qn,"isTier2");function Gt(e){return e.mode==="enforced"&&!Qn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}l(Gt,"severityFor");function Re(e,t,n,r=1){let{severity:s,failsStrict:a}=Gt(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}l(Re,"baseViolation");function ft(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}l(ft,"isInRuleLayer");function ze(e,t,n){return t.filter(r=>!(!r.exported||!we(r.file,e.appliesTo)||!ft(r.file,e,n)))}l(ze,"shapesForRule");function er(e,t,n){let r=[];for(let s of ze(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(Re(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}l(er,"evaluateAggregatePrivateState");function tr(e,t,n){let r=[];for(let s of ze(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(Re(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}l(tr,"evaluateAlwaysValidFactory");function nr(e,t,n){let r=[];for(let s of ze(e,t,n))for(let a of s.mutatingMethods)a.referencesGuardOrPublish||r.push(Re(e,s.file,`Mutating method ${s.className}.${a.name} does not reference a guard or publish symbol (sensor domain-event-on-mutation).`));return r}l(nr,"evaluateDomainEventOnMutation");function rr(e,t){let n=[];for(let r of t.files)we(r,e.appliesTo)&&ft(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(Re(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}l(rr,"evaluateOrchestrationOnly");function sr(e,t){let n=[];for(let r of t.files)we(r,e.appliesTo)&&ft(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(Re(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}l(sr,"evaluateThinAdapter");function ar(e,t,n){let r=[];for(let s of ze(e,t,n))if(s.dataOnly===!0){let a=Re(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}l(ar,"evaluateNoAnemicModel");function zt(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...er(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...tr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...nr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...rr(n,e));break;case"thin-adapter":t.push(...sr(n,e));break;case"no-anemic-model":t.push(...ar(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}l(zt,"evaluateArkRuleSensors");function qt(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(c=>we(c,s.appliesTo)))continue;let{severity:o,failsStrict:i}=Gt(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o,sensor:s.sensor,failsStrict:i})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(i=>we(i,s.appliesTo)))continue;let o=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o?"error":"warning",sensor:"invariant-coverage",failsStrict:o})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}l(qt,"collectEmptyAppliesToFindings");var or=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm|typeorm|knex|mongodb|pg|mysql2|better-sqlite3|ioredis|redis)['"]|require\(\s*['"](?:@?prisma\/client|pg|knex|typeorm)/,ir=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,lr=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,cr=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,dr=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function ur(e,t){if(!t||t.length<40)return null;let n=t.match(new RegExp(cr.source,"g"))??[],r=t.match(new RegExp(dr.source,"g"))??[],s=(t.match(/\bif\s*\(/g)??[]).length,a=(t.match(/\bswitch\s*\(/g)??[]).length,o=n.length>=2||n.length>=1&&r.length>=2||r.length>=3&&s+a>=6,i=or.test(t),c=ir.test(t)||lr.test(t),h=n.length>=1||r.length>=2,A=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),R=i&&h||c&&h||i&&A&&(s>=4||n.length>=1)||c&&i;return!o&&!R?null:{...o?{orchestrationHeavy:!0}:{},...R?{adapterThick:!0}:{}}}l(ur,"deriveArkRuleFileHints");function Bt(e){let t={};for(let[n,r]of Object.entries(e)){let s=ur(n,r);s&&(t[n.replace(/\\/g,"/")]=s)}return t}l(Bt,"buildArkRuleFileHints");function pr(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}l(pr,"titleMatchesInvariant");function fr(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}l(fr,"symbolPresent");function Wt(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,a=[],o=[];for(let i of t){let c=[],h=i.coverage?.test!==!1,A=i.coverage?.symbol;if(!r&&h)for(let d of n){let g=e.fileContents[d];if(g&&pr(g,i.id)){c.push("test-title");break}}A&&fr(e.fileContents,A)&&c.push("symbol");let p=(i.coverage?.test===!0||!!A||i.coverage===void 0)&&c.length>0||i.coverage?.test===!1&&!A?!0:c.length>0,u=r&&h&&c.length===0;if(a.push({invariantId:i.id,layer:i.provenance.layer,sourceFile:i.provenance.sourceFile,mode:i.mode,covered:p&&!u,evidence:c,partial:u,description:i.description}),!p||u){let d=i.mode==="enforced"&&!u,g=r||n.length===0?"never-had-tests":"tests-disappeared";o.push({ruleId:"INVARIANT_UNCOVERED",message:u?s?`Invariant ${i.id} coverage cannot be proven (coverage file budget exhausted); reporting partial, not covered.`:`Invariant ${i.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:g==="tests-disappeared"?`Invariant ${i.id} is not covered by a test title or declared symbol (tests-disappeared \u2014 suite exists).`:`Invariant ${i.id} is not covered by a test title or declared symbol (never-had-tests).`,file:i.provenance.sourceFile,line:1,arkruleId:i.id,arkruleSource:i.provenance.sourceFile,fromLayer:i.provenance.layer,severity:d?"error":"warning",failsStrict:d,kind:g})}}return{coverage:a,violations:o,partial:a.some(i=>i.partial)}}l(Wt,"evaluateInvariantCoverage");function Yt(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}l(Yt,"canPromoteInvariant");function mr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}l(mr,"normalizeExtraMergeTeethClassification");function qe(e){let t=mr(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}l(qe,"extraMergeTeethAllowed");function Zt(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}l(Zt,"classifyResolvedLayerCoverage");var gr=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Ys=new Set(gr);function Jt(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(Jt,"isArkRunKernelModuleSpecifier");var yr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],mt=new Set(yr);function Xt(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(mt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(mt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:mt.has(e.slice(0,r))}l(Xt,"isArkRunTransportBypassSpecifier");var hr=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Rr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ar=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function kr(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return hr.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Rr.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Ar.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}l(kr,"classifyLayerImportKind");function br(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=kr(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(br,"layerImportNextAction");function vr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(vr,"arkRunCallSiteName");function Er(e){let t=vr(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(Er,"arkRunNextAction");function oe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return br(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Er(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() to freeze \u03BE or proposeRelease() for a pattern change with blast radius, then preflight again. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate only. Change \u03BE with proposeRelease + release. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(oe,"deterministicNextAction");var Cr=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],ia=new Set(Cr);var Qt={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Ir="ARKRUN_INTERACTION_NAME_INCOMPLETE";function nn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(nn,"isDomainRoleLayer");function Sr(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(Sr,"compareFindings");function te(e,t,n,r,s,a,o){let i=e.mode==="enforced"&&o;return{ruleId:Qt[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:oe({ruleId:Qt[t],fromLayer:a?.fromLayer,target:a?.target})}}l(te,"finding");function xr(e,t){let n=[],r=[],s=[],a=[];for(let o of e)o.file===t&&(n.push(...o.uses),r.push(...o.reactsTo),s.push(...o.raises),a.push(...o.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}l(xr,"bagForFile");function en(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(en,"emitKinds");function tn(e){return e==="subscribe"||e==="register-handler"}l(tn,"handleKinds");function wr(e){return e==="resolve"||e==="resolve-singleton"}l(wr,"dependKinds");function Or(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(te(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let o of t){let i=a.get(o.matchedRoot)??[];i.push(o),a.set(o.matchedRoot,i)}for(let o of s){let i=[...a.get(o)??[]].sort((h,A)=>h.file.localeCompare(A.file));if(i.length===0){r.push(te(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},n));continue}if(i.some(h=>h.hasKernelFactory))continue;let c=i[0];r.push(te(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},n))}return r}l(Or,"evaluateMissingRoot");function $r(e,t,n,r,s){let a=new Map(t.map(i=>[i.name,i.intentPrefixes??[]])),o=[];for(let i of n){let c=i.specifier;if(!c||!Jt(c))continue;let h=r(i.from);h&&nn(h,a.get(h)??[])&&o.push(te(e,"arkrun-kernel-in-domain",i.from,i.line,`${h} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:h,target:c},s))}return o}l($r,"evaluateKernelInDomain");function _r(e,t,n,r,s,a){let o=new Set(e.managedLayers);if(o.size===0)return[];let i=new Map(t.map(A=>[A.name,A.intentPrefixes??[]])),c=new Set(r.filter(A=>A.hasKernelFactory).map(A=>A.file)),h=[];for(let A of n){if(c.has(A.file))continue;let R=A.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let p=s(A.file);!p||!o.has(p)||nn(p,i.get(p)??[])||h.push(te(e,"arkrun-direct-new",A.file,A.line,`${p} must not construct ${A.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:p,target:A.typeName},a))}return h}l(_r,"evaluateDirectNew");function Fr(e,t,n,r,s){let a=[],o=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:o};let i=new Set(e.managedLayers);if(i.size===0)return{findings:a,completenessReasons:o};for(let c of t){if(!en(c.kind)&&!tn(c.kind)&&!wr(c.kind))continue;let h=r(c.file);if(!h||!i.has(h))continue;if(!c.nameLiteral){e.mode==="enforced"&&o.push({code:Ir,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let A=xr(n,c.file);if(en(c.kind)){if(A.raises.has(c.nameLiteral)||A.sends.has(c.nameLiteral))continue;a.push(te(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:h,target:c.nameLiteral},s));continue}if(tn(c.kind)){if(A.reactsTo.has(c.nameLiteral))continue;a.push(te(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:h,target:c.nameLiteral},s));continue}A.uses.has(c.nameLiteral)||a.push(te(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:h,target:c.nameLiteral},s))}return{findings:a,completenessReasons:o}}l(Fr,"evaluateUndeclared");function Nr(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let o of t){if(o.typeOnly)continue;let i=o.specifier;if(!i||!Xt(i))continue;let c=n(o.from);!c||!s.has(c)||a.push(te(e,"arkrun-transport-bypass",o.from,o.line,`${c} must not import broker/queue/emitter ${JSON.stringify(i)}; use the ArkRun kernel transport.`,{fromLayer:c,target:i},r))}return a}l(Nr,"evaluateTransportBypass");function rn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=qe(e.classification),r=Fr(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Or(t,e.compositionRootHits,n),...$r(t,e.layers,e.dependencies,e.layerForFile,n),..._r(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Nr(t,e.dependencies,e.layerForFile,n)].sort(Sr),a=[...r.completenessReasons].sort((o,i)=>{let c=`${o.code}\0${o.file??""}\0${o.message}`,h=`${i.code}\0${i.file??""}\0${i.message}`;return c<h?-1:c>h?1:0});return{findings:s,completenessReasons:a}}l(rn,"evaluateArkRunSensors");function sn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(sn,"isArkOrderModuleSpecifier");var an={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI"};function Tr(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(Tr,"isDomainRoleLayer");function Oe(e,t,n,r,s,a,o){let i=e.mode==="enforced"&&o;return{ruleId:an[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:i?"error":"warning",failsStrict:i,nextAction:oe({ruleId:an[t],fromLayer:a?.fromLayer,target:a?.target})}}l(Oe,"finding");function on(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=qe(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(Oe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let o=new Map;for(let i of e.planeRootHits){let c=o.get(i.matchedRoot)??[];c.push(i),o.set(i.matchedRoot,c)}for(let i of s){let c=o.get(i)??[];if(c.length===0){r.push(Oe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(i)} matched no governed files and has no createOrderPlane factory.`,{target:i},n));continue}c.some(h=>h.hasPlaneFactory)||r.push(Oe(t,"arkorder-missing-plane",c[0].file,1,`ArkOrder plane root ${JSON.stringify(i)} has no createOrderPlane factory.`,{target:i},n))}}let a=new Map(e.layers.map(o=>[o.name,o.intentPrefixes??[]]));for(let o of e.dependencies){let i=o.specifier;if(!i||!sn(i))continue;let c=e.layerForFile(o.from);c&&Tr(c,a.get(c)??[])&&r.push(Oe(t,"arkorder-kernel-in-domain",o.from,o.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:c,target:i},n))}for(let o of e.genericUpdates)r.push(Oe(t,"arkorder-generic-update",o.file,o.line,`Generic ${o.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:o.method},n));return r.sort((o,i)=>o.file.localeCompare(i.file)||o.ruleId.localeCompare(i.ruleId)||o.line-i.line),{findings:r,completenessReasons:[]}}l(on,"evaluateArkOrderSensors");function j(e,t,n={}){return{ruleId:e,message:t,...n}}l(j,"configWarning");function gt(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(u=>typeof u!="string"))&&a.push(j("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(j("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let u of["maxTsSuppressions","maxAnyCasts"]){let d=t.safety[u];d!==void 0&&(!Number.isInteger(d)||d<0)&&a.push(j("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${u} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],i=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],c=new Set([...o.map(u=>u.name).filter(Boolean),...i.map(u=>u.name).filter(u=>!!u)]);o.length===0&&a.push(j("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let h=new Set,A=new Set;for(let u of o){if(!u.name){a.push(j("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}h.has(u.name)&&A.add(u.name),h.add(u.name),u.forbiddenGlobals!==void 0&&(!Array.isArray(u.forbiddenGlobals)||u.forbiddenGlobals.some(g=>typeof g!="string"))&&a.push(j("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${u.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:u.name}));let d=Array.isArray(u.patterns)?u.patterns:[];if(d.length===0){a.push(j("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${u.name}" has no file patterns and will never classify files.`,{layer:u.name}));continue}for(let g of d){let b;try{b=ce(g)}catch(E){a.push(j("CONFIG_INVALID_LAYER_PATTERN",`Layer "${u.name}" has an invalid pattern "${g}": ${E instanceof Error?E.message:String(E)}`,{layer:u.name,pattern:g}));continue}let C=u.optional===!0||u.reserved===!0||u.allowEmpty===!0;!r.some(E=>b.test(E))&&!C&&a.push(j("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${u.name}" pattern "${g}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:u.name,pattern:g,failsStrict:!1,reserved:!1}))}}for(let u of A)a.push(j("CONFIG_DUPLICATE_LAYER",`Layer "${u}" is configured more than once.`,{layer:u}));if(c.size>0)for(let u of n??[])u.from&&!c.has(u.from)&&a.push(j("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${u.from}".`,{fromLayer:u.from,toLayer:u.to})),u.to&&!c.has(u.to)&&a.push(j("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${u.to}".`,{fromLayer:u.from,toLayer:u.to}));let R=new Set;if(o.length>1)for(let u of r){let d=-1,g=[];for(let b of o)for(let C of b.patterns??[]){if(!ce(C).test(u))continue;let E=lt(C,u);E>d?(d=E,g=[b.name]):E===d&&!g.includes(b.name)&&g.push(b.name)}g.length>1&&R.add([...g].sort().join(" + "))}R.size>0&&a.push(j("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let p=r.filter(u=>!z(u,o));return p.length>0&&a.push(j("CONFIG_UNCLASSIFIED_FILES",`${p.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:p.length,samples:p.slice(0,5)})),a}l(gt,"collectAnalysisConfigWarnings");function ln(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],o=[],i=l(c=>{n.set(c,t),r.set(c,t),t+=1,a.push(c),s.add(c);for(let R of[...e.get(c)??[]].sort())e.has(R)&&(n.has(R)?s.has(R)&&r.set(c,Math.min(r.get(c)??0,n.get(R)??0)):(i(R),r.set(c,Math.min(r.get(c)??0,r.get(R)??0))));if(r.get(c)!==n.get(c))return;let h=[],A;do{if(A=a.pop(),A===void 0)break;s.delete(A),h.push(A)}while(A!==c);h.length>1&&o.push(h.sort())},"connect");for(let c of[...e.keys()].sort())n.has(c)||i(c);return o.sort((c,h)=>c[0]<h[0]?-1:c[0]>h[0]?1:0).map(c=>({ruleId:"CIRCULAR_DEPENDENCY",file:c[0],line:1,target:c.join(" \u2192 "),message:`Circular dependency among ${c.length} files: ${c.join(" \u2192 ")} \u2192 ${c[0]}.`,cycleKind:"value"}))}l(ln,"detectArchitectureCycles");function $e(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let o=he(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let i=!!o.peerIsolation,c=!i&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=o.message??(i?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}). Extract shared code or use events/ports across slices.`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`);t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!i&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...i?{peerIsolation:!0}:{},message:c?`${h} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:h,...c?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=ln(r);s==="soft"||s==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}l($e,"evaluateArchitectureGraph");function Pr(e,t){return t.some(n=>{try{return ce(n).test(e)}catch{return!1}})}l(Pr,"matchesAny");function Lr(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],o=t.safetyUses.filter(g=>g.kind==="ts-suppression").map(({file:g,line:b})=>({file:g,line:b})),i=t.safetyUses.filter(g=>g.kind==="any-cast").map(({file:g,line:b})=>({file:g,line:b})),c=t.safetyUses.filter(g=>(g.kind==="dynamic-import"||g.kind==="dynamic-require")&&!Pr(g.file,a)).map(g=>({file:g.file,line:g.line,kind:g.kind==="dynamic-require"?"require":"import"})),h=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(g=>g.kind==="in-memory-store").map(g=>({file:g.file,line:g.line,store:g.symbol??"in-memory store"})),A=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(g=>g.peerIsolation===!1||g.allowed===!1&&!!g.from&&g.from===g.to&&g.peerIsolation!==!0).map(g=>({from:g.from,to:g.to})),R={tsSuppressions:o,anyCasts:i,nonLiteralDynamicImports:c,inMemoryProductionStores:h,disabledPeerIsolationRules:A,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},p=[],u=c.filter(g=>g.kind==="import");if(u.length>0){let g=u[0];p.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:g.file,line:g.line,message:`${u.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let d=c.filter(g=>g.kind==="require");if(d.length>0){let g=d[0];p.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:g.file,line:g.line,message:`${d.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(o.length>r){let g=o[0];p.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:g.file,line:g.line,message:`${o.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(i.length>s){let g=i[0];p.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:g.file,line:g.line,message:`${i.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(h.length>0){let g=h[0];p.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:g.file,line:g.line,message:`${h.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return A.length>0&&p.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${A.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:p}}l(Lr,"evaluateSafety");function Dr(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}l(Dr,"ambientForbiddenGlobal");function cn(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return ut(e,n.length>0?n:dt.map(r=>({name:r.layer,prefixes:r.prefixes})))}l(cn,"intentLayer");function Mr(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let o=n.get(a.file);!o||!Dr(a.symbol,s.get(o)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,message:`${o} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let o=n.get(a.file);if(!o)continue;let i=s.get(o),c=i?.forbiddenGlobals??[],h=a.source==="import-based"?t.dependencies.find(A=>A.from===a.file&&A.line===a.line&&A.specifier===a.symbol&&!A.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&it(a.symbol,c))){if(a.source==="import-based"){let A=Ie(a.symbol,c);if(A){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,...h?{edgeKind:h}:{},message:`${o} must not use module "${a.symbol}" because it is the import form of forbidden global "${A}".`});continue}}ye(i).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:o,target:a.symbol,capability:a.capability,...h?{edgeKind:h}:{},message:a.source==="import-based"?`${o} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${o} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let o=n.get(a.file);if(!o)continue;for(let c of pt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:c.ruleId,file:a.file,line:a.line,...c.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:o}:{},message:c.message});if(!a.sourceIntent)continue;let i=cn(a.sourceIntent,e.contract);!i||i===o||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:o,toLayer:i,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${i}, but the publishing file is classified as ${o}.`})}for(let a of t.intentReferences){let o=n.get(a.file);if(!o)continue;let i=cn(a.intent,e.contract);if(!i)continue;let c=he(e.contract.config.rules,o,i);c&&r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:o,toLayer:i,target:a.intent,message:c.message??`${o} must not reference ${i} intent ${a.intent}.`})}return r}l(Mr,"contentViolations");function yt(e){let{facts:t}=e,n=Ue(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((f,X)=>{let ve=`${f.code}\0${f.file??""}\0${f.message}`,Ee=`${X.code}\0${X.file??""}\0${X.message}`;return ve<Ee?-1:ve>Ee?1:0}),o=t.files.map(f=>({...f,layer:z(f.path,e.contract.config.layers)??null})),i=new Map(o.map(f=>[f.path,f.layer])),c=t.dependencies.map(f=>{let X=f.target?i.get(f.target)??z(f.target,e.contract.config.layers):void 0;return{from:f.from,fromLayer:i.get(f.from)??null,...f.resolution==="resolved-project"&&f.target?{to:f.target,...X?{toLayer:X}:{}}:{},line:f.line,kind:f.kind,typeOnly:f.typeOnly,...f.targetTypeOnlyExports?{targetTypeOnlyExports:f.targetTypeOnlyExports}:{},...f.sourcePureTypeModule?{sourcePureTypeModule:f.sourcePureTypeModule}:{},...f.namedBindingsTypeOnly?{namedBindingsTypeOnly:f.namedBindingsTypeOnly}:{},...f.portProofEligible?{portProofEligible:f.portProofEligible}:{}}}),h=gt({config:e.contract.config,rules:e.contract.config.rules,files:o.map(f=>f.path)}),A=Lr(e,t),R=e.contract.arkRules??xe(),p=o.map(f=>f.path),d={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?Bt(e.coverageInputs.fileContents):{},...e.fileHints??{}},g=[...zt({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:p,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),fileHints:d}),...qt(R,p)],b=g.filter(f=>f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,nextAction:f.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${f.arkruleId} in ${f.arkruleSource} so they match governed files, or remove the rule.`:`Fix the structure or invariant for ${f.arkruleId} (declared in ${f.arkruleSource}), then preflight again.`})),C=g.filter(f=>!f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,failsStrict:!1,nextAction:f.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${f.arkruleId} in ${f.arkruleSource} (zero-match scope; advisory).`:`Review ArkRule ${f.arkruleId} in ${f.arkruleSource} (advisory).`})),k=(R.invariants?.length??0)>0?Wt({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0}):{coverage:[],violations:[],partial:!1},w=k.violations.filter(f=>f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,nextAction:`Add a test title or declared symbol covering ${f.arkruleId} (declared in ${f.arkruleSource}), then preflight again.`})),se=k.violations.filter(f=>!f.failsStrict).map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,arkruleId:f.arkruleId,arkruleSource:f.arkruleSource,failsStrict:!1,nextAction:`Cover invariant ${f.arkruleId} in ${f.arkruleSource} (advisory / partial).`})),Qe=Zt(o),pe=rn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),classification:Qe}),et=e.contract.config.arkRun?.mode,Me=pe.findings.filter(()=>et==="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:f.failsStrict,...f.severity?{severity:f.severity}:{}})),He=pe.findings.filter(()=>et!=="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:!1})),fe=on({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,dependencies:t.dependencies,layerForFile:l(f=>i.get(f)??z(f,e.contract.config.layers),"layerForFile"),classification:Qe}),tt=e.contract.config.arkOrder?.mode,nt=fe.findings.filter(()=>tt==="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:f.failsStrict,...f.severity?{severity:f.severity}:{}})),v=fe.findings.filter(()=>tt!=="enforced").map(f=>({ruleId:f.ruleId,file:f.file,line:f.line,message:f.message,fromLayer:f.fromLayer,target:f.target,nextAction:f.nextAction,sensor:f.sensor,failsStrict:!1})),m=[...k.partial&&k.coverage.some(f=>f.mode==="enforced"&&f.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...pe.completenessReasons,...fe.completenessReasons],y=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.filter(f=>f.layer).map(f=>f.path),contentViolations:[...Mr(e,t,i),...b,...w,...Me,...nt],edges:c,warnings:[...h,...A.warnings,...C,...se,...He,...v],safety:A.report}),O=s==="complete"&&m.length>0?"partial":s,P=O==="complete"?a:[...a,...m].sort((f,X)=>{let ve=`${f.code}\0${f.file??""}\0${f.message}`,Ee=`${X.code}\0${X.file??""}\0${X.message}`;return ve<Ee?-1:ve>Ee?1:0}),ae=y.violations.filter(f=>f.failsStrict!==!1),ie=O==="complete"&&ae.length===0,be=ie&&y.warnings.every(f=>f.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:O,completenessReasons:P,valid:ie,strictValid:be,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:A.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:o,layers:e.contract.config.layers.map(f=>f.name),edges:c,capabilityUses:t.capabilityUses,violations:y.violations,warnings:y.warnings}}}l(yt,"analyzeCanonicalResolvedProject");function Be(e){return yt({contract:e.contract,facts:le(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}l(Be,"analyzeResolvedProject");var ht="1.0";var We=class extends Error{static{l(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Rt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Rt,"isObject");function At(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}l(At,"unknownFields");function de(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}l(de,"requiredString");function Hr(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}l(Hr,"canonicalProjectPath");function Ur(e,t,n="architecture change map"){let r=[];if(!Rt(e))throw new We(n,[{path:"$",message:"must be an object"}]);At(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=de(e,"$schema","$",r),a=de(e,"schemaVersion","$",r);a&&a!==ht&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${ht}`});let o=new Set(t.layers.map(d=>d.name)),i=[],c=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((d,g)=>{let b=`$.files[${g}]`;if(!Rt(d)){r.push({path:b,message:"must be an object"});return}At(d,["path","operation","layer"],b,r);let C=de(d,"path",b,r),E=de(d,"operation",b,r),k=de(d,"layer",b,r),x=C?Hr(C):void 0;C&&!x&&r.push({path:`${b}.path`,message:"must be a canonical project-relative path"}),E&&!["create","update","delete"].includes(E)&&r.push({path:`${b}.operation`,message:"must be create, update, or delete"}),k&&!o.has(k)&&r.push({path:`${b}.layer`,message:`references unknown layer ${JSON.stringify(k)}`}),x&&c.has(x)&&r.push({path:`${b}.path`,message:`duplicates planned path ${x}`}),x&&c.add(x);let se=x?z(x,t.layers):void 0;x&&k&&o.has(k)&&se!==k&&r.push({path:`${b}.layer`,message:se?`${x} resolves to ${se}, not ${k}`:`${x} is not assigned to an architecture layer`}),x&&E&&["create","update","delete"].includes(E)&&k&&i.push({path:x,operation:E,layer:k})});let h=[],A=new Map(i.map(d=>[d.path,d.operation])),R=new Set,u=e.dependencies??[];if(Array.isArray(u)?u.forEach((d,g)=>{let b=`$.dependencies[${g}]`;if(!Rt(d)){r.push({path:b,message:"must be an object"});return}At(d,["from","to"],b,r);let C=de(d,"from",b,r),E=de(d,"to",b,r);C&&!c.has(C)&&r.push({path:`${b}.from`,message:`must reference a planned file path: ${C}`}),E&&!c.has(E)&&r.push({path:`${b}.to`,message:`must reference a planned file path: ${E}`}),C&&A.get(C)==="delete"&&r.push({path:`${b}.from`,message:`cannot depend from deleted file ${C}`}),E&&A.get(E)==="delete"&&r.push({path:`${b}.to`,message:`cannot depend on deleted file ${E}`}),C&&E&&C===E&&r.push({path:b,message:"must not declare a self dependency"});let k=C&&E?`${C}\0${E}`:void 0;k&&R.has(k)&&r.push({path:b,message:`duplicates dependency ${C} -> ${E}`}),k&&R.add(k),C&&E&&h.push({from:C,to:E})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new We(n,r);let p={$schema:s,schemaVersion:ht,files:i.sort((d,g)=>d.path.localeCompare(g.path)),dependencies:h.sort((d,g)=>d.from.localeCompare(g.from)||d.to.localeCompare(g.to))};return{map:p,hash:L(_(p))}}l(Ur,"loadArchitectureChangeMap");function V(e){return`${e.from}->${e.to}`}l(V,"dependencyKey");function _e(e,t,n,r="dependency"){return{id:`${e}:${r}:${V(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${V(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${V(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${V(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${V(t)} from the candidate, then preflight again.`}:{}}}l(_e,"dependencyFinding");function Fe(e){let t=[],n=new Map(e.changeMap.map.files.map(u=>[u.path,u])),r=new Map(e.changes.map(u=>[u.path,u])),s=new Map(e.changeMap.map.dependencies.map(u=>[V(u),u])),a=new Map(e.baseDependencies.map(u=>[V(u),u])),o=new Map(e.candidateDependencies.map(u=>[V(u),u]));for(let u of[...n.values()].sort((p,d)=>p.path.localeCompare(d.path))){let p=r.get(u.path);p?p.operation!==u.operation?t.push({id:`contradictory:file:${u.path}`,classification:"contradictory",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:p.operation,message:`${u.path} was planned as ${u.operation} but the actual operation is ${p.operation}.`,nextAction:`Change ${u.path} to the planned ${u.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${u.path}`,classification:"satisfied",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:p.operation,message:`${u.path} matches the planned ${u.operation} operation.`}):t.push({id:`missing:file:${u.path}`,classification:"missing",subject:"file",path:u.path,expectedOperation:u.operation,message:`${u.path} was planned as ${u.operation} but is absent from the actual change.`,nextAction:`${u.operation[0].toUpperCase()}${u.operation.slice(1)} ${u.path} in the complete change set, then preflight again.`})}for(let u of[...r.values()].sort((p,d)=>p.path.localeCompare(d.path)))n.has(u.path)||t.push({id:`unplanned:file:${u.path}`,classification:"unplanned",subject:"file",path:u.path,actualOperation:u.operation,message:`${u.path} has an unplanned ${u.operation} operation.`,nextAction:`Remove ${u.path} from the change set, then preflight again.`});let i=new Set;for(let u of[...s.values()].sort((p,d)=>V(p).localeCompare(V(d)))){if(o.has(V(u))){t.push(_e("satisfied",u,`${u.from} -> ${u.to} exists in the candidate architecture.`));continue}let p={from:u.to,to:u.from};o.has(V(p))?(i.add(V(p)),t.push(_e("contradictory",u,`${u.from} -> ${u.to} was planned, but the candidate contains the reverse edge.`))):t.push(_e("missing",u,`${u.from} -> ${u.to} is absent from the candidate architecture.`))}let c=new Set([...n.keys(),...r.keys()]);for(let[u,p]of[...o].sort(([d],[g])=>d.localeCompare(g)))a.has(u)||s.has(u)||i.has(u)||!c.has(p.from)&&!c.has(p.to)||t.push({..._e("unplanned",p,`${p.from} -> ${p.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let h=new Set(e.changeMap.map.files.filter(u=>u.operation==="delete").map(u=>u.path));for(let[u,p]of[...a].sort(([d],[g])=>d.localeCompare(g)))o.has(u)||h.has(p.from)||h.has(p.to)||!c.has(p.from)&&!c.has(p.to)||t.push({..._e("unplanned",p,`${p.from} -> ${p.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let A={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((u,p)=>A[u.classification]-A[p.classification]||(u.subject===p.subject?0:u.subject==="file"?-1:1)||u.id.localeCompare(p.id));let R={satisfied:t.filter(u=>u.classification==="satisfied").length,missing:t.filter(u=>u.classification==="missing").length,contradictory:t.filter(u=>u.classification==="contradictory").length,unplanned:t.filter(u=>u.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:R.missing===0&&R.contradictory===0&&R.unplanned===0,behavioralCompletion:"not-evaluated",summary:R,findings:t}}l(Fe,"analyzeArchitectureConvergence");function Ae(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}l(Ae,"literalText");function pn(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}l(pn,"lineOf");function dn(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}l(dn,"isTypeOnlyReference");function fn(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}l(fn,"singleFileChecker");function kt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}l(kt,"symbolAt");function bt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=s?t.getShorthandAssignmentValueSymbol(r.parent):kt(t,r)}catch{a=void 0}return!!a?.declarations?.some(o=>o.getSourceFile().fileName===n.fileName)}l(bt,"localDeclaration");function vt(e,t){let n,r=[],s=l((o,i,c,h=!1)=>r.push({specifier:c,kind:i,line:pn(t,o),typeOnly:h,unresolved:c===void 0,node:o}),"add"),a=l(o=>{if(e.isImportDeclaration(o))s(o,"import",Ae(e,o.moduleSpecifier),dn(e,o));else if(e.isExportDeclaration(o)&&o.moduleSpecifier)s(o,"export",Ae(e,o.moduleSpecifier),dn(e,o));else if(e.isImportEqualsDeclaration(o)&&e.isExternalModuleReference(o.moduleReference))s(o,"require",Ae(e,o.moduleReference.expression),o.isTypeOnly===!0);else if(e.isCallExpression(o)){let i=o.expression.kind===e.SyntaxKind.ImportKeyword,h=e.isIdentifier(o.expression)&&o.expression.text==="require"&&!bt(e,n??(n=fn(e,t)),t,o.expression);(i||h)&&s(o,h?"require":"dynamic-import",Ae(e,o.arguments[0]))}e.forEachChild(o,a)},"visit");return a(t),r}l(vt,"extractSemanticDependencies");function Kr(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Ae(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}l(Kr,"staticAccessPath");function jr(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}l(jr,"runtimeIdentifierReference");function un(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}l(un,"bestForbiddenMatch");function Et(e,t,n){if(n.length===0)return[];let r=new Set(n),s=fn(e,t),a=new Map,o=new Set;for(let u of t.statements)if(e.isVariableStatement(u))for(let p of u.declarationList.declarations)e.isIdentifier(p.name)&&o.add(p.name.text);let i=l(u=>{let p=Kr(e,u);if(!p)return;let d=kt(s,p.root),g=d?a.get(d):void 0;return g?[...g,...p.segments.slice(1)]:bt(e,s,t,p.root)||o.has(p.root.text)?void 0:p.segments},"resolvePath");for(let u of t.statements)if(e.isVariableStatement(u))for(let p of u.declarationList.declarations){if(!p.initializer||!e.isIdentifier(p.name))continue;let d=i(p.initializer),g=kt(s,p.name);!d||!g||a.set(g,d)}let c=[],h=new Set,A=l((u,p)=>{let d=pn(t,p),g=`${u}:${p.getStart(t)}`;h.has(g)||(h.add(g),c.push({name:u,line:d,node:p}))},"flag"),R=l(u=>{let p=u.parent&&(e.isPropertyAccessExpression(u.parent)||e.isElementAccessExpression(u.parent))&&u.parent.expression===u;if((e.isPropertyAccessExpression(u)||e.isElementAccessExpression(u))&&!p){let d=i(u),g=d?un(r,d):void 0;g&&A(g,u)}else e.isIdentifier(u)&&r.has(u.text)&&jr(e,u)&&!bt(e,s,t,u)&&A(u.text,u);if(e.isVariableDeclaration(u)&&e.isObjectBindingPattern(u.name)&&u.initializer){let d=i(u.initializer);if(d)for(let g of u.name.elements){if(!e.isIdentifier(g.name))continue;let b=g.propertyName?Ae(e,g.propertyName)??g.propertyName.text:g.name.text,C=un(r,[...d,b]);C&&A(C,u.initializer)}}e.forEachChild(u,R)},"visit");return R(t),c}l(Et,"collectForbiddenCapabilityUses");function Vr(e,t,n){let r=[];for(let s of n?.dependencies??vt(e,t)){if(s.typeOnly||!s.specifier)continue;let a=Ce(s.specifier);a&&r.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Et(e,t,ot)){let a=Se(s.name);a&&r.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}l(Vr,"collectCapabilityUses");var Ne={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},mn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...Ne,default:[]},kernelRoots:{...Ne},managedLayers:{...Ne,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},gn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...Ne,default:[]},managedLayers:{...Ne,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7}}};function Te(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Te,"isObject");function yn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Te(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}l(yn,"declaredLayerNames");function hn(e){if(!Te(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}l(hn,"defaultedArkRun");function Rn(e){if(!Te(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t}}l(Rn,"defaultedArkOrder");function An(e,t){let n=e.arkRun;if(n===void 0||!Te(n))return;let r=yn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.kernelRoots??n.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(An,"validateArkRunExtra");function kn(e,t){let n=e.arkOrder;if(n===void 0||!Te(n))return;let r=yn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkOrder.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(kn,"validateArkOrderExtra");var Z="1.3",Ct="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",bn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Gr=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function zr(){let e=[];for(let t of bn)for(let n of bn)t===n||Gr.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}l(zr,"createDefaultRules");var En=zr(),It=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],ne={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},vn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Ct,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Ct,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:Z,default:Z},name:{type:"string",minLength:1},include:{...ne,minItems:1,default:["src"]},exclude:{...ne,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:En,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...ne,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...ne,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...ne,minItems:1},exclude:ne,intentPrefixes:ne,description:{type:"string",minLength:1},forbiddenGlobals:ne,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...ne,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},arkRun:mn,arkOrder:gn}},re=class extends Error{static{l(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Rt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Rt,"isObject");function At(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}l(At,"unknownFields");function de(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}l(de,"requiredString");function Hr(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}l(Hr,"canonicalProjectPath");function Ur(e,t,n="architecture change map"){let r=[];if(!Rt(e))throw new We(n,[{path:"$",message:"must be an object"}]);At(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=de(e,"$schema","$",r),a=de(e,"schemaVersion","$",r);a&&a!==ht&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${ht}`});let o=new Set(t.layers.map(d=>d.name)),i=[],c=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((d,g)=>{let b=`$.files[${g}]`;if(!Rt(d)){r.push({path:b,message:"must be an object"});return}At(d,["path","operation","layer"],b,r);let C=de(d,"path",b,r),E=de(d,"operation",b,r),k=de(d,"layer",b,r),w=C?Hr(C):void 0;C&&!w&&r.push({path:`${b}.path`,message:"must be a canonical project-relative path"}),E&&!["create","update","delete"].includes(E)&&r.push({path:`${b}.operation`,message:"must be create, update, or delete"}),k&&!o.has(k)&&r.push({path:`${b}.layer`,message:`references unknown layer ${JSON.stringify(k)}`}),w&&c.has(w)&&r.push({path:`${b}.path`,message:`duplicates planned path ${w}`}),w&&c.add(w);let se=w?z(w,t.layers):void 0;w&&k&&o.has(k)&&se!==k&&r.push({path:`${b}.layer`,message:se?`${w} resolves to ${se}, not ${k}`:`${w} is not assigned to an architecture layer`}),w&&E&&["create","update","delete"].includes(E)&&k&&i.push({path:w,operation:E,layer:k})});let h=[],A=new Map(i.map(d=>[d.path,d.operation])),R=new Set,p=e.dependencies??[];if(Array.isArray(p)?p.forEach((d,g)=>{let b=`$.dependencies[${g}]`;if(!Rt(d)){r.push({path:b,message:"must be an object"});return}At(d,["from","to"],b,r);let C=de(d,"from",b,r),E=de(d,"to",b,r);C&&!c.has(C)&&r.push({path:`${b}.from`,message:`must reference a planned file path: ${C}`}),E&&!c.has(E)&&r.push({path:`${b}.to`,message:`must reference a planned file path: ${E}`}),C&&A.get(C)==="delete"&&r.push({path:`${b}.from`,message:`cannot depend from deleted file ${C}`}),E&&A.get(E)==="delete"&&r.push({path:`${b}.to`,message:`cannot depend on deleted file ${E}`}),C&&E&&C===E&&r.push({path:b,message:"must not declare a self dependency"});let k=C&&E?`${C}\0${E}`:void 0;k&&R.has(k)&&r.push({path:b,message:`duplicates dependency ${C} -> ${E}`}),k&&R.add(k),C&&E&&h.push({from:C,to:E})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new We(n,r);let u={$schema:s,schemaVersion:ht,files:i.sort((d,g)=>d.path.localeCompare(g.path)),dependencies:h.sort((d,g)=>d.from.localeCompare(g.from)||d.to.localeCompare(g.to))};return{map:u,hash:L(_(u))}}l(Ur,"loadArchitectureChangeMap");function V(e){return`${e.from}->${e.to}`}l(V,"dependencyKey");function _e(e,t,n,r="dependency"){return{id:`${e}:${r}:${V(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${V(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${V(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${V(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${V(t)} from the candidate, then preflight again.`}:{}}}l(_e,"dependencyFinding");function Fe(e){let t=[],n=new Map(e.changeMap.map.files.map(p=>[p.path,p])),r=new Map(e.changes.map(p=>[p.path,p])),s=new Map(e.changeMap.map.dependencies.map(p=>[V(p),p])),a=new Map(e.baseDependencies.map(p=>[V(p),p])),o=new Map(e.candidateDependencies.map(p=>[V(p),p]));for(let p of[...n.values()].sort((u,d)=>u.path.localeCompare(d.path))){let u=r.get(p.path);u?u.operation!==p.operation?t.push({id:`contradictory:file:${p.path}`,classification:"contradictory",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:u.operation,message:`${p.path} was planned as ${p.operation} but the actual operation is ${u.operation}.`,nextAction:`Change ${p.path} to the planned ${p.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${p.path}`,classification:"satisfied",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:u.operation,message:`${p.path} matches the planned ${p.operation} operation.`}):t.push({id:`missing:file:${p.path}`,classification:"missing",subject:"file",path:p.path,expectedOperation:p.operation,message:`${p.path} was planned as ${p.operation} but is absent from the actual change.`,nextAction:`${p.operation[0].toUpperCase()}${p.operation.slice(1)} ${p.path} in the complete change set, then preflight again.`})}for(let p of[...r.values()].sort((u,d)=>u.path.localeCompare(d.path)))n.has(p.path)||t.push({id:`unplanned:file:${p.path}`,classification:"unplanned",subject:"file",path:p.path,actualOperation:p.operation,message:`${p.path} has an unplanned ${p.operation} operation.`,nextAction:`Remove ${p.path} from the change set, then preflight again.`});let i=new Set;for(let p of[...s.values()].sort((u,d)=>V(u).localeCompare(V(d)))){if(o.has(V(p))){t.push(_e("satisfied",p,`${p.from} -> ${p.to} exists in the candidate architecture.`));continue}let u={from:p.to,to:p.from};o.has(V(u))?(i.add(V(u)),t.push(_e("contradictory",p,`${p.from} -> ${p.to} was planned, but the candidate contains the reverse edge.`))):t.push(_e("missing",p,`${p.from} -> ${p.to} is absent from the candidate architecture.`))}let c=new Set([...n.keys(),...r.keys()]);for(let[p,u]of[...o].sort(([d],[g])=>d.localeCompare(g)))a.has(p)||s.has(p)||i.has(p)||!c.has(u.from)&&!c.has(u.to)||t.push({..._e("unplanned",u,`${u.from} -> ${u.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let h=new Set(e.changeMap.map.files.filter(p=>p.operation==="delete").map(p=>p.path));for(let[p,u]of[...a].sort(([d],[g])=>d.localeCompare(g)))o.has(p)||h.has(u.from)||h.has(u.to)||!c.has(u.from)&&!c.has(u.to)||t.push({..._e("unplanned",u,`${u.from} -> ${u.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let A={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((p,u)=>A[p.classification]-A[u.classification]||(p.subject===u.subject?0:p.subject==="file"?-1:1)||p.id.localeCompare(u.id));let R={satisfied:t.filter(p=>p.classification==="satisfied").length,missing:t.filter(p=>p.classification==="missing").length,contradictory:t.filter(p=>p.classification==="contradictory").length,unplanned:t.filter(p=>p.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:R.missing===0&&R.contradictory===0&&R.unplanned===0,behavioralCompletion:"not-evaluated",summary:R,findings:t}}l(Fe,"analyzeArchitectureConvergence");function Ae(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}l(Ae,"literalText");function pn(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}l(pn,"lineOf");function dn(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}l(dn,"isTypeOnlyReference");function fn(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}l(fn,"singleFileChecker");function kt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}l(kt,"symbolAt");function bt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=s?t.getShorthandAssignmentValueSymbol(r.parent):kt(t,r)}catch{a=void 0}return!!a?.declarations?.some(o=>o.getSourceFile().fileName===n.fileName)}l(bt,"localDeclaration");function vt(e,t){let n,r=[],s=l((o,i,c,h=!1)=>r.push({specifier:c,kind:i,line:pn(t,o),typeOnly:h,unresolved:c===void 0,node:o}),"add"),a=l(o=>{if(e.isImportDeclaration(o))s(o,"import",Ae(e,o.moduleSpecifier),dn(e,o));else if(e.isExportDeclaration(o)&&o.moduleSpecifier)s(o,"export",Ae(e,o.moduleSpecifier),dn(e,o));else if(e.isImportEqualsDeclaration(o)&&e.isExternalModuleReference(o.moduleReference))s(o,"require",Ae(e,o.moduleReference.expression),o.isTypeOnly===!0);else if(e.isCallExpression(o)){let i=o.expression.kind===e.SyntaxKind.ImportKeyword,h=e.isIdentifier(o.expression)&&o.expression.text==="require"&&!bt(e,n??(n=fn(e,t)),t,o.expression);(i||h)&&s(o,h?"require":"dynamic-import",Ae(e,o.arguments[0]))}e.forEachChild(o,a)},"visit");return a(t),r}l(vt,"extractSemanticDependencies");function Kr(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Ae(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}l(Kr,"staticAccessPath");function jr(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}l(jr,"runtimeIdentifierReference");function un(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}l(un,"bestForbiddenMatch");function Et(e,t,n){if(n.length===0)return[];let r=new Set(n),s=fn(e,t),a=new Map,o=new Set;for(let p of t.statements)if(e.isVariableStatement(p))for(let u of p.declarationList.declarations)e.isIdentifier(u.name)&&o.add(u.name.text);let i=l(p=>{let u=Kr(e,p);if(!u)return;let d=kt(s,u.root),g=d?a.get(d):void 0;return g?[...g,...u.segments.slice(1)]:bt(e,s,t,u.root)||o.has(u.root.text)?void 0:u.segments},"resolvePath");for(let p of t.statements)if(e.isVariableStatement(p))for(let u of p.declarationList.declarations){if(!u.initializer||!e.isIdentifier(u.name))continue;let d=i(u.initializer),g=kt(s,u.name);!d||!g||a.set(g,d)}let c=[],h=new Set,A=l((p,u)=>{let d=pn(t,u),g=`${p}:${u.getStart(t)}`;h.has(g)||(h.add(g),c.push({name:p,line:d,node:u}))},"flag"),R=l(p=>{let u=p.parent&&(e.isPropertyAccessExpression(p.parent)||e.isElementAccessExpression(p.parent))&&p.parent.expression===p;if((e.isPropertyAccessExpression(p)||e.isElementAccessExpression(p))&&!u){let d=i(p),g=d?un(r,d):void 0;g&&A(g,p)}else e.isIdentifier(p)&&r.has(p.text)&&jr(e,p)&&!bt(e,s,t,p)&&A(p.text,p);if(e.isVariableDeclaration(p)&&e.isObjectBindingPattern(p.name)&&p.initializer){let d=i(p.initializer);if(d)for(let g of p.name.elements){if(!e.isIdentifier(g.name))continue;let b=g.propertyName?Ae(e,g.propertyName)??g.propertyName.text:g.name.text,C=un(r,[...d,b]);C&&A(C,p.initializer)}}e.forEachChild(p,R)},"visit");return R(t),c}l(Et,"collectForbiddenCapabilityUses");function Vr(e,t,n){let r=[];for(let s of n?.dependencies??vt(e,t)){if(s.typeOnly||!s.specifier)continue;let a=Ce(s.specifier);a&&r.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Et(e,t,ot)){let a=Se(s.name);a&&r.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}l(Vr,"collectCapabilityUses");var Ne={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},mn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...Ne,default:[]},kernelRoots:{...Ne},managedLayers:{...Ne,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},gn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...Ne,default:[]},managedLayers:{...Ne,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7}}};function Te(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Te,"isObject");function yn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Te(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}l(yn,"declaredLayerNames");function hn(e){if(!Te(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}l(hn,"defaultedArkRun");function Rn(e){if(!Te(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t}}l(Rn,"defaultedArkOrder");function An(e,t){let n=e.arkRun;if(n===void 0||!Te(n))return;let r=yn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.kernelRoots??n.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(An,"validateArkRunExtra");function kn(e,t){let n=e.arkOrder;if(n===void 0||!Te(n))return;let r=yn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkOrder.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(kn,"validateArkOrderExtra");var Z="1.3",Ct="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",bn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Gr=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function zr(){let e=[];for(let t of bn)for(let n of bn)t===n||Gr.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}l(zr,"createDefaultRules");var En=zr(),It=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],ne={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},vn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Ct,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Ct,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:Z,default:Z},name:{type:"string",minLength:1},include:{...ne,minItems:1,default:["src"]},exclude:{...ne,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:En,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...ne,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...ne,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...ne,minItems:1},exclude:ne,intentPrefixes:ne,description:{type:"string",minLength:1},forbiddenGlobals:ne,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...ne,minItems:1}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},arkRun:mn,arkOrder:gn}},re=class extends Error{static{l(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function Cn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Cn,"isObject");function Ye(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}l(Ye,"propertyPath");function ke(e){return e===null?"null":Array.isArray(e)?"array":typeof e}l(ke,"valueType");function qr(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}l(qr,"resolveSchemaRef");function Pe(e,t,n,r,s){if(t.$ref){let a=qr(t.$ref,r);if(!a){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Pe(e,a,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Cn(e)){s.push({path:n,message:`must be an object; received ${ke(e)}`});return}let a=t.properties??{};for(let o of t.required??[])e[o]===void 0&&s.push({path:Ye(n,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in a||s.push({path:Ye(n,o),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let o=t.additionalProperties;for(let i of Object.keys(e))i in a||Pe(e[i],o,Ye(n,i),r,s)}for(let[o,i]of Object.entries(a))e[o]!==void 0&&Pe(e[o],i,Ye(n,o),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${ke(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(o=>JSON.stringify(o));new Set(a).size!==a.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((a,o)=>Pe(a,t.items,`${n}[${o}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${ke(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${ke(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${ke(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}l(Pe,"validateNode");function Br(e){let t={...e,$schema:e.$schema===void 0?Ct:e.$schema,schemaVersion:e.schemaVersion===void 0?Z:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?En.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=hn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Rn(e.arkOrder)),t}l(Br,"defaultedConfig");function Wr(e){return e===Z?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}l(Wr,"migratedFromOf");function Yr(){let e=new Set([Z]);for(let t of It)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}l(Yr,"knownInputVersions");function Zr(e,t="ark.config.json"){if(!Cn(e))throw new re(t,[{path:"$",message:`must be an object; received ${ke(e)}`}]);let n=Yr(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${Z}`}]);if(r!=="unversioned"&&!n.has(r))throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${Z}`}]);let s=r,a={...e},o=0;for(;s!==Z&&o<It.length+1;){o+=1;let i=It.find(c=>c.from===s);if(!i)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${Z}`}]);s=i.to,a.schemaVersion=s}if(s!==Z)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${Z}`}]);return{candidate:Br(a),migratedFrom:Wr(r)}}l(Zr,"migrateArkConfig");function St(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=Zr(e,t),s=[];if(Pe(n,vn,"$",vn,s),An(n,s),kn(n,s),s.length>0)throw new re(t,s);return{config:n,migratedFrom:r}}l(St,"loadArkConfigContract");function In(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new re(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return St(n,t)}l(In,"parseArkConfigJson");function Sn(e){let{stewards:t,...n}=e.config;return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}l(Sn,"effectiveContractPolicyPayload");var On="1.0";function w(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}l(w,"addFinding");function q(e){return[...new Set(e??[])].sort()}l(q,"sortedUnique");function J(e,t,n,r,s){let a=q(n),o=q(r),i=new Set(a),c=new Set(o),h=o.filter(R=>!i.has(R)),A=a.filter(R=>!c.has(R));h.length===0&&A.length===0||(h.length>0&&w(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:a,after:o}),A.length>0&&w(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:a,after:o}))}l(J,"compareStringSets");function Le(e,t,n,r,s,a,o){if(n===r)return;w(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?a:o,before:n,after:r})}l(Le,"compareBoolean");function Ze(e,t){let n=new Map,r=new Set;for(let s of e){let a=t(s);n.has(a)?r.add(a):n.set(a,s)}return{values:n,duplicates:[...r].sort()}}l(Ze,"keyed");function Jr(e,t,n){let r=Ze(t,a=>a.name),s=Ze(n,a=>a.name);(r.duplicates.length>0||s.duplicates.length>0)&&w(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let a of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let o=r.values.get(a),i=s.values.get(a),c=`$.layers[${a}]`;if(!o&&i){w(e,{kind:"layer-added",path:c,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:i});continue}if(o&&!i){w(e,{kind:"layer-removed",path:c,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:o});continue}if(!o||!i)continue;J(e,`${c}.patterns`,o.patterns,i.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),J(e,`${c}.exclude`,o.exclude,i.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let h=Ve(o),A=Ve(i);J(e,`${c}.forbiddenGlobals`,h.rawGlobals,A.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),J(e,`${c}.capabilities`,h.atoms,A.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),q(o.intentPrefixes).join("\0")!==q(i.intentPrefixes).join("\0")&&w(e,{kind:"intent-prefixes-changed",path:`${c}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:q(o.intentPrefixes),after:q(i.intentPrefixes)}),Le(e,`${c}.mayImportInfrastructure`,o.mayImportInfrastructure===!0,i.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Le(e,`${c}.optional`,o.optional===!0,i.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}l(Jr,"compareLayers");function Xr(e,t,n){let r=l(o=>`${o.from}->${o.to}`,"keyOf"),s=Ze(t,r),a=Ze(n,r);(s.duplicates.length>0||a.duplicates.length>0)&&w(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:a.duplicates});for(let o of[...new Set([...s.values.keys(),...a.values.keys()])].sort()){let i=s.values.get(o),c=a.values.get(o),h=`$.rules[${o}]`;if(!i&&c){c.allowed===!1&&w(e,{kind:"deny-added",path:h,classification:"strengthening",message:"A denied dependency edge was added.",after:c});continue}if(i&&!c){i.allowed===!1&&w(e,{kind:"deny-removed",path:h,classification:"weakening",message:"A denied dependency edge was removed.",before:i});continue}if(!i||!c)continue;i.allowed!==c.allowed&&w(e,{kind:c.allowed?"deny-disabled":"deny-enabled",path:`${h}.allowed`,classification:c.allowed?"weakening":"strengthening",message:c.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:i.allowed,after:c.allowed});let A=i.peerIsolation===!0,R=c.peerIsolation===!0;if(A!==R){let u=i.from===i.to&&c.from===c.to;w(e,{kind:R?"peer-isolation-enabled":"peer-isolation-disabled",path:`${h}.peerIsolation`,classification:u?R?"strengthening":"weakening":"judgment-required",message:u?R?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:A,after:R})}q(i.sliceFolders).join("\0")!==q(c.sliceFolders).join("\0")&&w(e,{kind:"slice-folders-changed",path:`${h}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:q(i.sliceFolders),after:q(c.sliceFolders)})}}l(Xr,"compareRules");function Qr(e,t,n){let r=t.safety??{},s=n.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let o=r[a]??0,i=s[a]??0;o!==i&&w(e,{kind:i>o?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:i>o?"weakening":"strengthening",message:i>o?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:o,after:i})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])Le(e,`$.safety.${a}`,r[a]===!0,s[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}l(Qr,"compareSafety");function wt(e){return e.mode==="enforced"?"enforced":"advisory"}l(wt,"arkRunMode");function xt(e){return e.mode==="enforced"?"enforced":"advisory"}l(xt,"arkOrderMode");function es(e,t,n){let r=t.arkOrder,s=n.arkOrder,a="$.arkOrder";if(!r&&!s)return;if(!r&&s){w(e,{kind:"arkorder-added",path:a,classification:"strengthening",message:`ArkOrder extra was added (${xt(s)}).`,after:s});return}if(r&&!s){w(e,{kind:"arkorder-removed",path:a,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let o=xt(r),i=xt(s);if(o!==i){let c=o==="advisory"&&i==="enforced";w(e,{kind:c?"arkorder-promoted":"arkorder-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:o,after:i})}J(e,`${a}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),J(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}l(es,"compareArkOrder");function ts(e,t,n){let r=t.arkRun,s=n.arkRun,a="$.arkRun";if(!r&&!s)return;if(!r&&s){w(e,{kind:"arkrun-added",path:a,classification:"strengthening",message:`ArkRun extra was added (${wt(s)}).`,after:s});return}if(r&&!s){w(e,{kind:"arkrun-removed",path:a,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let o=wt(r),i=wt(s);if(o!==i){let c=o==="advisory"&&i==="enforced";w(e,{kind:c?"arkrun-promoted":"arkrun-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:o,after:i})}J(e,`${a}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),J(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Le(e,`${a}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}l(ts,"compareArkRun");function ns(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}l(ns,"overallClassification");function wn(e,t){return`${e}::${t}`}l(wn,"ruleKey");function xn(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(wn(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(wn(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}l(xn,"indexEffectiveRules");function rs(e,t,n,r,s,a){let o=new Map((a??[]).map(u=>[u.invariantId,u])),i=t.arkRules??{},c=n.arkRules??{},h=[...new Set([...Object.keys(i),...Object.keys(c)])].sort();for(let u of h){let p=i[u],d=c[u],g=`$.arkRules[${u}]`;if(p===void 0&&d!==void 0){w(e,{kind:"arkrules-ref-added",path:g,classification:"strengthening",message:`ArkRules reference for layer ${u} was added.`,after:d});continue}if(p!==void 0&&d===void 0){w(e,{kind:"arkrules-ref-removed",path:g,classification:"weakening",message:`ArkRules reference for layer ${u} was removed.`,before:p});continue}p!==d&&w(e,{kind:"arkrules-ref-path-changed",path:g,classification:"judgment-required",message:`ArkRules file path for layer ${u} changed; verify the effective rules still match intent.`,before:p,after:d})}let A=xn(r),R=xn(s);for(let u of[...new Set([...A.structure.keys(),...R.structure.keys()])].sort()){let p=A.structure.get(u),d=R.structure.get(u),g=`$.arkRules.structure[${u}]`;if(!p&&d){w(e,{kind:"arkrule-structure-added",path:g,classification:"strengthening",message:`Structure ArkRule ${d.id} was added (${d.mode}).`,after:d});continue}if(p&&!d){w(e,{kind:"arkrule-structure-removed",path:g,classification:"weakening",message:`Structure ArkRule ${p.id} was removed.`,before:p});continue}if(!(!p||!d)){if(p.mode!==d.mode){let b=p.mode==="advisory"&&d.mode==="enforced";w(e,{kind:b?"arkrule-promoted":"arkrule-demoted",path:`${g}.mode`,classification:b?"strengthening":"weakening",message:b?`Structure ArkRule ${d.id} was promoted to enforced.`:`Structure ArkRule ${d.id} was demoted to advisory.`,before:p.mode,after:d.mode})}p.sensor!==d.sensor&&w(e,{kind:"arkrule-sensor-changed",path:`${g}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${d.id} changed sensor identity.`,before:p.sensor,after:d.sensor})}}for(let u of[...new Set([...A.invariants.keys(),...R.invariants.keys()])].sort()){let p=A.invariants.get(u),d=R.invariants.get(u),g=`$.arkRules.invariants[${u}]`;if(!p&&d){w(e,{kind:"arkrule-invariant-added",path:g,classification:"strengthening",message:`Invariant ${d.id} was added (${d.mode}).`,after:d});continue}if(p&&!d){w(e,{kind:"arkrule-invariant-removed",path:g,classification:"weakening",message:`Invariant ${p.id} was removed.`,before:p});continue}if(!(!p||!d)&&p.mode!==d.mode)if(p.mode==="advisory"&&d.mode==="enforced"){let C=o?.get(d.id),E=Yt(C);E.ok?w(e,{kind:"arkrule-invariant-promoted",path:`${g}.mode`,classification:"strengthening",message:`Invariant ${d.id} was promoted to enforced (coverage evidence present).`,before:p.mode,after:d.mode}):w(e,{kind:"arkrule-invariant-promote-refused",path:`${g}.mode`,classification:"judgment-required",message:`Invariant ${d.id} cannot be promoted to enforced: ${E.reason}`,before:p.mode,after:d.mode})}else w(e,{kind:"arkrule-invariant-demoted",path:`${g}.mode`,classification:"weakening",message:`Invariant ${d.id} was demoted to advisory.`,before:p.mode,after:d.mode})}}l(rs,"compareArkRules");function $n(e,t,n){let r=[];J(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),J(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),J(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Le(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",o=t.cyclePolicy??"strict";if(a!==o){let i=s[o]===s[a]?"judgment-required":s[o]>s[a]?"strengthening":"weakening";w(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:i,message:"The cycle enforcement level changed.",before:a,after:o})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&w(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),Jr(r,e.layers,t.layers),Xr(r,e.rules,t.rules),Qr(r,e,t),rs(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),ts(r,e,t),es(r,e,t),r.sort((i,c)=>i.path.localeCompare(c.path)||i.id.localeCompare(c.id)),{schemaVersion:On,classification:ns(r),findings:r}}l($n,"classifyArkPolicyDelta");function _n(e,t){if(!e||e.schemaVersion!==On||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=q(e.findingIds),r=q(t.findingIds);return n.length===r.length&&n.every((s,a)=>s===r[a])}l(_n,"policyDeltaAcknowledgementMatches");function ue(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}l(ue,"normalizePath");function Fn(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}l(Fn,"isIdentifierStart");function Je(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}l(Je,"isIdentifierCharacter");function G(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}l(G,"skipWhitespace");function De(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};a==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=a}}l(De,"readString");function B(e,t,n){return e.startsWith(t,n)&&!Je(e[n-1])&&!Je(e[n+t.length])}l(B,"isWordAt");function Nn(e,t){let n=G(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=G(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!B(e,"type",n))return!1;let s=G(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||B(e,"as",s)||!Fn(e[s]))return!1;for(n=s;n<e.length&&Je(e[n]);)n+=1;if(n=G(e,n),B(e,"as",n)){if(n=G(e,n+2),!Fn(e[n]))return!1;for(;n<e.length&&Je(e[n]);)n+=1}r=!0}return!1}l(Nn,"bracedNamedBindingsAreTypeOnly");function ss(e,t){if(t=G(e,t+6),e[t]==="(")return De(e,G(e,t+1));let n=!1;if(B(e,"type",t)){let s=G(e,t+4);e[s]!==","&&!B(e,"from",s)&&(n=!0)}else Nn(e,t)&&(n=!0);let r=Tn(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}l(ss,"specifierAfterImport");function as(e,t){t=t+6;let n=G(e,t),r=!1;if(B(e,"type",n)){let a=G(e,n+4);(e[a]==="{"||e[a]==="*")&&(r=!0)}else Nn(e,n)&&(r=!0);let s=Tn(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}l(as,"specifierAfterExport");function Tn(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(B(e,"from",t))return De(e,G(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return De(e,t);if(t>0&&(B(e,"import",t)||B(e,"export",t)))return}}l(Tn,"specifierInStaticStatement");function os(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}l(os,"skipTemplateLiteral");function is(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=G(e,t+7);if(e[r]!=="(")return;r=G(e,r+1);let s=De(e,r);return s?{...s,requireCall:!0}:void 0}l(is,"specifierAfterRequire");function ls(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function Cn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Cn,"isObject");function Ye(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}l(Ye,"propertyPath");function ke(e){return e===null?"null":Array.isArray(e)?"array":typeof e}l(ke,"valueType");function qr(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}l(qr,"resolveSchemaRef");function Pe(e,t,n,r,s){if(t.$ref){let a=qr(t.$ref,r);if(!a){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Pe(e,a,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Cn(e)){s.push({path:n,message:`must be an object; received ${ke(e)}`});return}let a=t.properties??{};for(let o of t.required??[])e[o]===void 0&&s.push({path:Ye(n,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in a||s.push({path:Ye(n,o),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let o=t.additionalProperties;for(let i of Object.keys(e))i in a||Pe(e[i],o,Ye(n,i),r,s)}for(let[o,i]of Object.entries(a))e[o]!==void 0&&Pe(e[o],i,Ye(n,o),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${ke(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(o=>JSON.stringify(o));new Set(a).size!==a.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((a,o)=>Pe(a,t.items,`${n}[${o}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${ke(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${ke(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${ke(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}l(Pe,"validateNode");function Br(e){let t={...e,$schema:e.$schema===void 0?Ct:e.$schema,schemaVersion:e.schemaVersion===void 0?Z:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?En.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=hn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Rn(e.arkOrder)),t}l(Br,"defaultedConfig");function Wr(e){return e===Z?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}l(Wr,"migratedFromOf");function Yr(){let e=new Set([Z]);for(let t of It)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}l(Yr,"knownInputVersions");function Zr(e,t="ark.config.json"){if(!Cn(e))throw new re(t,[{path:"$",message:`must be an object; received ${ke(e)}`}]);let n=Yr(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${Z}`}]);if(r!=="unversioned"&&!n.has(r))throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${Z}`}]);let s=r,a={...e},o=0;for(;s!==Z&&o<It.length+1;){o+=1;let i=It.find(c=>c.from===s);if(!i)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${Z}`}]);s=i.to,a.schemaVersion=s}if(s!==Z)throw new re(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${Z}`}]);return{candidate:Br(a),migratedFrom:Wr(r)}}l(Zr,"migrateArkConfig");function St(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=Zr(e,t),s=[];if(Pe(n,vn,"$",vn,s),An(n,s),kn(n,s),s.length>0)throw new re(t,s);return{config:n,migratedFrom:r}}l(St,"loadArkConfigContract");function In(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new re(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return St(n,t)}l(In,"parseArkConfigJson");function Sn(e){let{stewards:t,...n}=e.config;return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}l(Sn,"effectiveContractPolicyPayload");var On="1.0";function x(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}l(x,"addFinding");function q(e){return[...new Set(e??[])].sort()}l(q,"sortedUnique");function J(e,t,n,r,s){let a=q(n),o=q(r),i=new Set(a),c=new Set(o),h=o.filter(R=>!i.has(R)),A=a.filter(R=>!c.has(R));h.length===0&&A.length===0||(h.length>0&&x(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:a,after:o}),A.length>0&&x(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:a,after:o}))}l(J,"compareStringSets");function Le(e,t,n,r,s,a,o){if(n===r)return;x(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?a:o,before:n,after:r})}l(Le,"compareBoolean");function Ze(e,t){let n=new Map,r=new Set;for(let s of e){let a=t(s);n.has(a)?r.add(a):n.set(a,s)}return{values:n,duplicates:[...r].sort()}}l(Ze,"keyed");function Jr(e,t,n){let r=Ze(t,a=>a.name),s=Ze(n,a=>a.name);(r.duplicates.length>0||s.duplicates.length>0)&&x(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let a of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let o=r.values.get(a),i=s.values.get(a),c=`$.layers[${a}]`;if(!o&&i){x(e,{kind:"layer-added",path:c,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:i});continue}if(o&&!i){x(e,{kind:"layer-removed",path:c,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:o});continue}if(!o||!i)continue;J(e,`${c}.patterns`,o.patterns,i.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),J(e,`${c}.exclude`,o.exclude,i.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let h=Ve(o),A=Ve(i);J(e,`${c}.forbiddenGlobals`,h.rawGlobals,A.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),J(e,`${c}.capabilities`,h.atoms,A.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),q(o.intentPrefixes).join("\0")!==q(i.intentPrefixes).join("\0")&&x(e,{kind:"intent-prefixes-changed",path:`${c}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:q(o.intentPrefixes),after:q(i.intentPrefixes)}),Le(e,`${c}.mayImportInfrastructure`,o.mayImportInfrastructure===!0,i.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Le(e,`${c}.optional`,o.optional===!0,i.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}l(Jr,"compareLayers");function Xr(e,t,n){let r=l(o=>`${o.from}->${o.to}`,"keyOf"),s=Ze(t,r),a=Ze(n,r);(s.duplicates.length>0||a.duplicates.length>0)&&x(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:a.duplicates});for(let o of[...new Set([...s.values.keys(),...a.values.keys()])].sort()){let i=s.values.get(o),c=a.values.get(o),h=`$.rules[${o}]`;if(!i&&c){c.allowed===!1&&x(e,{kind:"deny-added",path:h,classification:"strengthening",message:"A denied dependency edge was added.",after:c});continue}if(i&&!c){i.allowed===!1&&x(e,{kind:"deny-removed",path:h,classification:"weakening",message:"A denied dependency edge was removed.",before:i});continue}if(!i||!c)continue;i.allowed!==c.allowed&&x(e,{kind:c.allowed?"deny-disabled":"deny-enabled",path:`${h}.allowed`,classification:c.allowed?"weakening":"strengthening",message:c.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:i.allowed,after:c.allowed});let A=i.peerIsolation===!0,R=c.peerIsolation===!0;if(A!==R){let p=i.from===i.to&&c.from===c.to;x(e,{kind:R?"peer-isolation-enabled":"peer-isolation-disabled",path:`${h}.peerIsolation`,classification:p?R?"strengthening":"weakening":"judgment-required",message:p?R?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:A,after:R})}q(i.sliceFolders).join("\0")!==q(c.sliceFolders).join("\0")&&x(e,{kind:"slice-folders-changed",path:`${h}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:q(i.sliceFolders),after:q(c.sliceFolders)})}}l(Xr,"compareRules");function Qr(e,t,n){let r=t.safety??{},s=n.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let o=r[a]??0,i=s[a]??0;o!==i&&x(e,{kind:i>o?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:i>o?"weakening":"strengthening",message:i>o?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:o,after:i})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])Le(e,`$.safety.${a}`,r[a]===!0,s[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}l(Qr,"compareSafety");function xt(e){return e.mode==="enforced"?"enforced":"advisory"}l(xt,"arkRunMode");function wt(e){return e.mode==="enforced"?"enforced":"advisory"}l(wt,"arkOrderMode");function es(e,t,n){let r=t.arkOrder,s=n.arkOrder,a="$.arkOrder";if(!r&&!s)return;if(!r&&s){x(e,{kind:"arkorder-added",path:a,classification:"strengthening",message:`ArkOrder extra was added (${wt(s)}).`,after:s});return}if(r&&!s){x(e,{kind:"arkorder-removed",path:a,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let o=wt(r),i=wt(s);if(o!==i){let c=o==="advisory"&&i==="enforced";x(e,{kind:c?"arkorder-promoted":"arkorder-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:o,after:i})}J(e,`${a}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),J(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}l(es,"compareArkOrder");function ts(e,t,n){let r=t.arkRun,s=n.arkRun,a="$.arkRun";if(!r&&!s)return;if(!r&&s){x(e,{kind:"arkrun-added",path:a,classification:"strengthening",message:`ArkRun extra was added (${xt(s)}).`,after:s});return}if(r&&!s){x(e,{kind:"arkrun-removed",path:a,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let o=xt(r),i=xt(s);if(o!==i){let c=o==="advisory"&&i==="enforced";x(e,{kind:c?"arkrun-promoted":"arkrun-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:o,after:i})}J(e,`${a}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),J(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Le(e,`${a}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}l(ts,"compareArkRun");function ns(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}l(ns,"overallClassification");function xn(e,t){return`${e}::${t}`}l(xn,"ruleKey");function wn(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(xn(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(xn(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}l(wn,"indexEffectiveRules");function rs(e,t,n,r,s,a){let o=new Map((a??[]).map(p=>[p.invariantId,p])),i=t.arkRules??{},c=n.arkRules??{},h=[...new Set([...Object.keys(i),...Object.keys(c)])].sort();for(let p of h){let u=i[p],d=c[p],g=`$.arkRules[${p}]`;if(u===void 0&&d!==void 0){x(e,{kind:"arkrules-ref-added",path:g,classification:"strengthening",message:`ArkRules reference for layer ${p} was added.`,after:d});continue}if(u!==void 0&&d===void 0){x(e,{kind:"arkrules-ref-removed",path:g,classification:"weakening",message:`ArkRules reference for layer ${p} was removed.`,before:u});continue}u!==d&&x(e,{kind:"arkrules-ref-path-changed",path:g,classification:"judgment-required",message:`ArkRules file path for layer ${p} changed; verify the effective rules still match intent.`,before:u,after:d})}let A=wn(r),R=wn(s);for(let p of[...new Set([...A.structure.keys(),...R.structure.keys()])].sort()){let u=A.structure.get(p),d=R.structure.get(p),g=`$.arkRules.structure[${p}]`;if(!u&&d){x(e,{kind:"arkrule-structure-added",path:g,classification:"strengthening",message:`Structure ArkRule ${d.id} was added (${d.mode}).`,after:d});continue}if(u&&!d){x(e,{kind:"arkrule-structure-removed",path:g,classification:"weakening",message:`Structure ArkRule ${u.id} was removed.`,before:u});continue}if(!(!u||!d)){if(u.mode!==d.mode){let b=u.mode==="advisory"&&d.mode==="enforced";x(e,{kind:b?"arkrule-promoted":"arkrule-demoted",path:`${g}.mode`,classification:b?"strengthening":"weakening",message:b?`Structure ArkRule ${d.id} was promoted to enforced.`:`Structure ArkRule ${d.id} was demoted to advisory.`,before:u.mode,after:d.mode})}u.sensor!==d.sensor&&x(e,{kind:"arkrule-sensor-changed",path:`${g}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${d.id} changed sensor identity.`,before:u.sensor,after:d.sensor})}}for(let p of[...new Set([...A.invariants.keys(),...R.invariants.keys()])].sort()){let u=A.invariants.get(p),d=R.invariants.get(p),g=`$.arkRules.invariants[${p}]`;if(!u&&d){x(e,{kind:"arkrule-invariant-added",path:g,classification:"strengthening",message:`Invariant ${d.id} was added (${d.mode}).`,after:d});continue}if(u&&!d){x(e,{kind:"arkrule-invariant-removed",path:g,classification:"weakening",message:`Invariant ${u.id} was removed.`,before:u});continue}if(!(!u||!d)&&u.mode!==d.mode)if(u.mode==="advisory"&&d.mode==="enforced"){let C=o?.get(d.id),E=Yt(C);E.ok?x(e,{kind:"arkrule-invariant-promoted",path:`${g}.mode`,classification:"strengthening",message:`Invariant ${d.id} was promoted to enforced (coverage evidence present).`,before:u.mode,after:d.mode}):x(e,{kind:"arkrule-invariant-promote-refused",path:`${g}.mode`,classification:"judgment-required",message:`Invariant ${d.id} cannot be promoted to enforced: ${E.reason}`,before:u.mode,after:d.mode})}else x(e,{kind:"arkrule-invariant-demoted",path:`${g}.mode`,classification:"weakening",message:`Invariant ${d.id} was demoted to advisory.`,before:u.mode,after:d.mode})}}l(rs,"compareArkRules");function $n(e,t,n){let r=[];J(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),J(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),J(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Le(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",o=t.cyclePolicy??"strict";if(a!==o){let i=s[o]===s[a]?"judgment-required":s[o]>s[a]?"strengthening":"weakening";x(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:i,message:"The cycle enforcement level changed.",before:a,after:o})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&x(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),Jr(r,e.layers,t.layers),Xr(r,e.rules,t.rules),Qr(r,e,t),rs(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),ts(r,e,t),es(r,e,t),r.sort((i,c)=>i.path.localeCompare(c.path)||i.id.localeCompare(c.id)),{schemaVersion:On,classification:ns(r),findings:r}}l($n,"classifyArkPolicyDelta");function _n(e,t){if(!e||e.schemaVersion!==On||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=q(e.findingIds),r=q(t.findingIds);return n.length===r.length&&n.every((s,a)=>s===r[a])}l(_n,"policyDeltaAcknowledgementMatches");function ue(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}l(ue,"normalizePath");function Fn(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}l(Fn,"isIdentifierStart");function Je(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}l(Je,"isIdentifierCharacter");function G(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}l(G,"skipWhitespace");function De(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};a==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=a}}l(De,"readString");function B(e,t,n){return e.startsWith(t,n)&&!Je(e[n-1])&&!Je(e[n+t.length])}l(B,"isWordAt");function Nn(e,t){let n=G(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=G(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!B(e,"type",n))return!1;let s=G(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||B(e,"as",s)||!Fn(e[s]))return!1;for(n=s;n<e.length&&Je(e[n]);)n+=1;if(n=G(e,n),B(e,"as",n)){if(n=G(e,n+2),!Fn(e[n]))return!1;for(;n<e.length&&Je(e[n]);)n+=1}r=!0}return!1}l(Nn,"bracedNamedBindingsAreTypeOnly");function ss(e,t){if(t=G(e,t+6),e[t]==="(")return De(e,G(e,t+1));let n=!1;if(B(e,"type",t)){let s=G(e,t+4);e[s]!==","&&!B(e,"from",s)&&(n=!0)}else Nn(e,t)&&(n=!0);let r=Tn(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}l(ss,"specifierAfterImport");function as(e,t){t=t+6;let n=G(e,t),r=!1;if(B(e,"type",n)){let a=G(e,n+4);(e[a]==="{"||e[a]==="*")&&(r=!0)}else Nn(e,n)&&(r=!0);let s=Tn(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}l(as,"specifierAfterExport");function Tn(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(B(e,"from",t))return De(e,G(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return De(e,t);if(t>0&&(B(e,"import",t)||B(e,"export",t)))return}}l(Tn,"specifierInStaticStatement");function os(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}l(os,"skipTemplateLiteral");function is(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=G(e,t+7);if(e[r]!=="(")return;r=G(e,r+1);let s=De(e,r);return s?{...s,requireCall:!0}:void 0}l(is,"specifierAfterRequire");function ls(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
 `,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let a=e.indexOf("*/",n+2);if(a<0)break;n=a+1;continue}if(r==="`"){n=os(e,n);continue}if(r==="'"||r==='"'){let a=De(e,n);a&&(n=a.offset+a.excerpt.length-1);continue}let s=r==="i"&&B(e,"import",n)?ss(e,n):r==="e"&&B(e,"export",n)?as(e,n):r==="r"&&B(e,"require",n)?is(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}l(ls,"moduleSpecifiers");function Pn(e,t){let n=[],r=[];for(let s of ls(e.content)){let a=s.value;if(!a.startsWith(".")){if(s.typeOnly)continue;let h=Ce(a);if(!h)continue;let A=e.content.slice(0,s.offset).split(`
 `).length;r.push({file:e.path,symbol:a,capability:h,evidence:{kind:"import",file:e.path,line:A,excerpt:s.excerpt}});continue}let o=e.content.slice(0,s.offset).split(`
-`).length,i={kind:"import",file:e.path,line:o,excerpt:s.excerpt},c=cs(e.path,a,t);n.push({from:e.path,specifier:a,to:c?.path??null,resolution:c?"resolved":"unresolved",fromLayer:e.layer,toLayer:c?.layer??null,evidence:i})}return{edges:n,capabilityUses:r}}l(Pn,"moduleFactsFor");function cs(e,t,n){let r=e.split("/");r.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?r.pop():r.push(a));let s=r.join("/");for(let a of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let o=n.get(a);if(o)return o}}l(cs,"resolveSpecifier");function Ln(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=he(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}l(Ln,"violationsFor");var ds={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function us(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}l(us,"hasActiveArkRules");function ps(e,t){return us(e,t)?L(_(Sn({config:e,arkRules:t,warnings:[]}))):L(_(e))}l(ps,"policyHashFor");function Ot(e,t,n){let r=typeof e=="string"?In(e,t):St(e,t),s=n?.arkRules??we();return{...r,arkRules:s,policyHash:ps(r.config,s)}}l(Ot,"loadContract");function fs(e){let t=Ot(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=Ot(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=$n(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(i=>i.classification==="weakening"||i.classification==="judgment-required").map(i=>i.id).sort(),a=s.length>0,o=a&&_n(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:a,acknowledged:o,valid:!a||o}}l(fs,"analyzePolicyDelta");function Xe(e){let t=e.files.map(R=>{let u=ue(R.path);return{path:u,content:R.content,contentHash:L(R.content),layer:z(u,e.contract.config.layers)??null}}).sort((R,u)=>R.path.localeCompare(u.path)),n=new Map(t.map(R=>[R.path,R])),r=[],s=[];for(let R of t){let u=Pn(R,n);r.push(...u.edges),s.push(...u.capabilityUses)}let a=Ln(r,e.contract.config),o=new Map(e.contract.config.layers.map(R=>[R.name,R])),i=new Map(e.contract.config.layers.map(R=>[R.name,new Set(ye(R))]));for(let R of s){let u=n.get(R.file)?.layer;if(!u)continue;let p=o.get(u),d=Ie(R.symbol,p?.forbiddenGlobals??[]);if(d){a.push({ruleId:"FORBIDDEN_GLOBAL",message:`${u} must not use module "${R.symbol}" because it is the import form of forbidden global "${d}".`,symbol:R.symbol,evidence:R.evidence});continue}i.get(u)?.has(R.capability)&&a.push({ruleId:"CAPABILITY_VIOLATION",message:`${u} denies the ${R.capability} capability; found import of "${R.symbol}".`,capability:R.capability,symbol:R.symbol,evidence:R.evidence})}let c=t.length===0?"complete":"partial",h=c==="complete"?[]:[{...ds}],A={schemaVersion:Lt,policyHash:e.contract.policyHash,compilerOptionsHash:L(_(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(R=>R.name),edges:r,capabilityUses:s,violations:a};return{mode:"lexical-compatibility",completeness:c,completenessReasons:h,valid:c==="complete"&&a.length===0,ir:A}}l(Xe,"analyzeProject");function $t(e){let t=new Map(e.files.map(n=>[ue(n.path),n]));for(let n of e.changes){let r=ue(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return Xe({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}l($t,"analyzeChange");function ms(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}l(ms,"explainViolation");function Dn(e){return L(_(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}l(Dn,"analysisTreeHash");function gs(e){let t=Xe(e),n=new Map(t.ir.files.map(d=>[d.path,d])),r=[],s=new Set,a=[];for(let d of e.changes){let g=d.path.replace(/\\/g,"/"),b=ue(d.path);if(!b||b===".."||b.startsWith("../")||g.startsWith("/")||/^[A-Za-z]:\//.test(g)||g.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(b)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:b,line:1,message:`The atomic change set contains more than one operation for ${b}.`});continue}s.add(b),"delete"in d&&d.delete&&!n.has(b)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:b,line:1,message:`Cannot delete ${b} because it is not present in the supplied base tree.`}),r.push("delete"in d&&d.delete?{path:b,delete:!0}:{path:b,content:"content"in d?d.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let o=$t({...e,changes:r}),i=new Map(o.ir.files.map(d=>[d.path,d])),c=o.ir.violations.filter(d=>d.ruleId==="CAPABILITY_VIOLATION"||d.ruleId==="FORBIDDEN_GLOBAL").map(d=>{let g=i.get(d.evidence.file)?.layer;return{ruleId:d.ruleId,file:d.evidence.file,line:d.evidence.line,target:d.symbol,...d.capability?{capability:d.capability}:{},...g?{fromLayer:g}:{},edgeKind:"import",message:d.message}}),h=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.ir.files.map(d=>d.path),contentViolations:c,edges:o.ir.edges.filter(d=>!!d.fromLayer).map(d=>({from:d.from,fromLayer:d.fromLayer,...d.to?{to:d.to}:{},...d.toLayer?{toLayer:d.toLayer}:{},line:d.evidence.line,kind:"import",...d.typeOnly?{typeOnly:!0}:{},...d.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),A=r.map(d=>{let g=ue(d.path),b=n.get(g),C=i.get(g);return{path:g,operation:"delete"in d&&d.delete?"delete":b?"update":"create",...b?{beforeContentHash:b.contentHash}:{},...C?{candidateContentHash:C.contentHash}:{}}}).sort((d,g)=>d.path.localeCompare(g.path)),R=[...a,...h.violations].map(d=>({...d,nextAction:oe(d)})),u=R.filter(d=>d.failsStrict!==!1),p=e.changeMap?Fe({changeMap:e.changeMap,changes:A,baseDependencies:t.ir.edges.flatMap(d=>d.to?[{from:d.from,to:d.to}]:[]),candidateDependencies:o.ir.edges.flatMap(d=>d.to?[{from:d.from,to:d.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&o.valid&&u.length===0&&(p?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:o.ir.compilerOptionsHash,baseTreeHash:Dn(t.ir.files),candidateTreeHash:Dn(o.ir.files),baseCompleteness:t.completeness,candidateCompleteness:o.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:o.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...p?{convergence:p}:{},changes:A,violations:R,warnings:h.warnings}}l(gs,"preflightChange");function ys(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}l(ys,"canonicalChangePath");function hs(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,a])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:a,message:`Base and candidate facts must use the same ${r}.`}))}l(hs,"identityViolations");function Rs(e,t,n,r){let s=n.get(t),a=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...a?{candidateContentHash:a.contentHash}:{}}}l(Rs,"preparedChange");function As(e){let t=le(e.baseFacts),n=le(e.candidateFacts),r=Be({contract:e.contract,facts:t}),s=Be({contract:e.contract,facts:n}),a=new Map(t.files.map(p=>[p.path,p])),o=new Map(n.files.map(p=>[p.path,p])),i=hs(t,n),c=new Map,h=[];for(let p of e.changes){let d=ys(p.path);if(!d){i.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(c.has(d)){i.push({ruleId:"DUPLICATE_CHANGE_PATH",file:d,line:1,message:`The atomic change set contains more than one operation for ${d}.`});continue}c.set(d,p);let g=a.get(d),b=o.get(d);if("delete"in p&&p.delete)g||i.push({ruleId:"DELETE_TARGET_MISSING",file:d,line:1,message:`Cannot delete ${d} because it is not present in the supplied base facts.`}),b&&i.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:d,line:1,message:`Candidate facts still contain deleted file ${d}.`});else{let C="content"in p?p.content:"",E=L(C);b?b.contentHash!==E&&i.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:d,line:1,expectedContentHash:E,candidateContentHash:b.contentHash,message:`Candidate facts for ${d} do not match the declared content.`}):i.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:d,line:1,message:`Candidate facts do not contain changed file ${d}.`})}h.push(Rs(p,d,a,o))}e.changes.length===0&&i.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let p of new Set([...a.keys(),...o.keys()])){if(c.has(p))continue;let d=a.get(p),g=o.get(p);d&&g&&_(d)===_(g)||i.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:p,line:1,message:`Candidate facts change ${p}, but the atomic change set does not declare it.`})}let A=e.changeMap?Fe({changeMap:e.changeMap,changes:h,baseDependencies:r.ir.edges.flatMap(p=>p.to?[{from:p.from,to:p.to}]:[]),candidateDependencies:s.ir.edges.flatMap(p=>p.to?[{from:p.from,to:p.to}]:[])}):void 0,R=[...i,...s.ir.violations].map(p=>({...p,nextAction:oe(p)})),u=R.filter(p=>p.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&u.length===0&&(A?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...A?{convergence:A}:{},changes:h.sort((p,d)=>p.path<d.path?-1:p.path>d.path?1:0),violations:R,warnings:s.ir.warnings}}l(As,"preflightResolvedChange");var Mn=new WeakSet;function Hn(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Hn(t);return Object.freeze(e)}l(Hn,"deepFreeze");function ri(e){let t=Hn(Ke(e));return Mn.add(t),t}l(ri,"createTrustedResolvedCandidateFacts");function si(e){if(!Mn.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return yt(e)}l(si,"analyzeTrustedResolvedProject");export{ot as AMBIENT_CAPABILITY_ENTRIES,st as CAPABILITY_IDS,dt as DEFAULT_INTENT_PREFIXES,Pt as RESOLVED_CANDIDATE_FACTS_SCHEMA,me as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,ct as SOURCE_POLICY_MESSAGES,it as ambientCoveredByForbiddenGlobals,Fe as analyzeArchitectureConvergence,$t as analyzeChange,fs as analyzePolicyDelta,Xe as analyzeProject,Be as analyzeResolvedProject,si as analyzeTrustedResolvedProject,Se as capabilityForAmbientName,Ce as capabilityForModuleSpecifier,pt as classifyPublishFacts,gt as collectAnalysisConfigWarnings,Vr as collectCapabilityUses,Et as collectForbiddenCapabilityUses,Ke as createResolvedCandidateFacts,ri as createTrustedResolvedCandidateFacts,ln as detectArchitectureCycles,L as deterministicHash,ye as effectiveCapabilityDeny,$e as evaluateArchitectureGraph,ms as explainViolation,vt as extractSemanticDependencies,Ie as forbiddenGlobalForModuleSpecifier,Ur as loadArchitectureChangeMap,Ot as loadContract,le as loadResolvedCandidateFacts,Ut as looksLikeArkIntent,Gn as lowerForbiddenGlobal,Ve as loweredLayerCoverage,gs as preflightChange,As as preflightResolvedChange,ut as resolveIntentLayer,Ue as resolvedFactsEvidenceRequirementsHash,_ as stableSerialize};
+`).length,i={kind:"import",file:e.path,line:o,excerpt:s.excerpt},c=cs(e.path,a,t);n.push({from:e.path,specifier:a,to:c?.path??null,resolution:c?"resolved":"unresolved",fromLayer:e.layer,toLayer:c?.layer??null,evidence:i})}return{edges:n,capabilityUses:r}}l(Pn,"moduleFactsFor");function cs(e,t,n){let r=e.split("/");r.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?r.pop():r.push(a));let s=r.join("/");for(let a of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let o=n.get(a);if(o)return o}}l(cs,"resolveSpecifier");function Ln(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=he(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}l(Ln,"violationsFor");var ds={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function us(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}l(us,"hasActiveArkRules");function ps(e,t){return us(e,t)?L(_(Sn({config:e,arkRules:t,warnings:[]}))):L(_(e))}l(ps,"policyHashFor");function Ot(e,t,n){let r=typeof e=="string"?In(e,t):St(e,t),s=n?.arkRules??xe();return{...r,arkRules:s,policyHash:ps(r.config,s)}}l(Ot,"loadContract");function fs(e){let t=Ot(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=Ot(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=$n(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(i=>i.classification==="weakening"||i.classification==="judgment-required").map(i=>i.id).sort(),a=s.length>0,o=a&&_n(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:a,acknowledged:o,valid:!a||o}}l(fs,"analyzePolicyDelta");function Xe(e){let t=e.files.map(R=>{let p=ue(R.path);return{path:p,content:R.content,contentHash:L(R.content),layer:z(p,e.contract.config.layers)??null}}).sort((R,p)=>R.path.localeCompare(p.path)),n=new Map(t.map(R=>[R.path,R])),r=[],s=[];for(let R of t){let p=Pn(R,n);r.push(...p.edges),s.push(...p.capabilityUses)}let a=Ln(r,e.contract.config),o=new Map(e.contract.config.layers.map(R=>[R.name,R])),i=new Map(e.contract.config.layers.map(R=>[R.name,new Set(ye(R))]));for(let R of s){let p=n.get(R.file)?.layer;if(!p)continue;let u=o.get(p),d=Ie(R.symbol,u?.forbiddenGlobals??[]);if(d){a.push({ruleId:"FORBIDDEN_GLOBAL",message:`${p} must not use module "${R.symbol}" because it is the import form of forbidden global "${d}".`,symbol:R.symbol,evidence:R.evidence});continue}i.get(p)?.has(R.capability)&&a.push({ruleId:"CAPABILITY_VIOLATION",message:`${p} denies the ${R.capability} capability; found import of "${R.symbol}".`,capability:R.capability,symbol:R.symbol,evidence:R.evidence})}let c=t.length===0?"complete":"partial",h=c==="complete"?[]:[{...ds}],A={schemaVersion:Lt,policyHash:e.contract.policyHash,compilerOptionsHash:L(_(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(R=>R.name),edges:r,capabilityUses:s,violations:a};return{mode:"lexical-compatibility",completeness:c,completenessReasons:h,valid:c==="complete"&&a.length===0,ir:A}}l(Xe,"analyzeProject");function $t(e){let t=new Map(e.files.map(n=>[ue(n.path),n]));for(let n of e.changes){let r=ue(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return Xe({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}l($t,"analyzeChange");function ms(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}l(ms,"explainViolation");function Dn(e){return L(_(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}l(Dn,"analysisTreeHash");function gs(e){let t=Xe(e),n=new Map(t.ir.files.map(d=>[d.path,d])),r=[],s=new Set,a=[];for(let d of e.changes){let g=d.path.replace(/\\/g,"/"),b=ue(d.path);if(!b||b===".."||b.startsWith("../")||g.startsWith("/")||/^[A-Za-z]:\//.test(g)||g.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(b)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:b,line:1,message:`The atomic change set contains more than one operation for ${b}.`});continue}s.add(b),"delete"in d&&d.delete&&!n.has(b)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:b,line:1,message:`Cannot delete ${b} because it is not present in the supplied base tree.`}),r.push("delete"in d&&d.delete?{path:b,delete:!0}:{path:b,content:"content"in d?d.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let o=$t({...e,changes:r}),i=new Map(o.ir.files.map(d=>[d.path,d])),c=o.ir.violations.filter(d=>d.ruleId==="CAPABILITY_VIOLATION"||d.ruleId==="FORBIDDEN_GLOBAL").map(d=>{let g=i.get(d.evidence.file)?.layer;return{ruleId:d.ruleId,file:d.evidence.file,line:d.evidence.line,target:d.symbol,...d.capability?{capability:d.capability}:{},...g?{fromLayer:g}:{},edgeKind:"import",message:d.message}}),h=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.ir.files.map(d=>d.path),contentViolations:c,edges:o.ir.edges.filter(d=>!!d.fromLayer).map(d=>({from:d.from,fromLayer:d.fromLayer,...d.to?{to:d.to}:{},...d.toLayer?{toLayer:d.toLayer}:{},line:d.evidence.line,kind:"import",...d.typeOnly?{typeOnly:!0}:{},...d.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),A=r.map(d=>{let g=ue(d.path),b=n.get(g),C=i.get(g);return{path:g,operation:"delete"in d&&d.delete?"delete":b?"update":"create",...b?{beforeContentHash:b.contentHash}:{},...C?{candidateContentHash:C.contentHash}:{}}}).sort((d,g)=>d.path.localeCompare(g.path)),R=[...a,...h.violations].map(d=>({...d,nextAction:oe(d)})),p=R.filter(d=>d.failsStrict!==!1),u=e.changeMap?Fe({changeMap:e.changeMap,changes:A,baseDependencies:t.ir.edges.flatMap(d=>d.to?[{from:d.from,to:d.to}]:[]),candidateDependencies:o.ir.edges.flatMap(d=>d.to?[{from:d.from,to:d.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&o.valid&&p.length===0&&(u?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:o.ir.compilerOptionsHash,baseTreeHash:Dn(t.ir.files),candidateTreeHash:Dn(o.ir.files),baseCompleteness:t.completeness,candidateCompleteness:o.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:o.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...u?{convergence:u}:{},changes:A,violations:R,warnings:h.warnings}}l(gs,"preflightChange");function ys(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}l(ys,"canonicalChangePath");function hs(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,a])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:a,message:`Base and candidate facts must use the same ${r}.`}))}l(hs,"identityViolations");function Rs(e,t,n,r){let s=n.get(t),a=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...a?{candidateContentHash:a.contentHash}:{}}}l(Rs,"preparedChange");function As(e){let t=le(e.baseFacts),n=le(e.candidateFacts),r=Be({contract:e.contract,facts:t}),s=Be({contract:e.contract,facts:n}),a=new Map(t.files.map(u=>[u.path,u])),o=new Map(n.files.map(u=>[u.path,u])),i=hs(t,n),c=new Map,h=[];for(let u of e.changes){let d=ys(u.path);if(!d){i.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(c.has(d)){i.push({ruleId:"DUPLICATE_CHANGE_PATH",file:d,line:1,message:`The atomic change set contains more than one operation for ${d}.`});continue}c.set(d,u);let g=a.get(d),b=o.get(d);if("delete"in u&&u.delete)g||i.push({ruleId:"DELETE_TARGET_MISSING",file:d,line:1,message:`Cannot delete ${d} because it is not present in the supplied base facts.`}),b&&i.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:d,line:1,message:`Candidate facts still contain deleted file ${d}.`});else{let C="content"in u?u.content:"",E=L(C);b?b.contentHash!==E&&i.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:d,line:1,expectedContentHash:E,candidateContentHash:b.contentHash,message:`Candidate facts for ${d} do not match the declared content.`}):i.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:d,line:1,message:`Candidate facts do not contain changed file ${d}.`})}h.push(Rs(u,d,a,o))}e.changes.length===0&&i.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let u of new Set([...a.keys(),...o.keys()])){if(c.has(u))continue;let d=a.get(u),g=o.get(u);d&&g&&_(d)===_(g)||i.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:u,line:1,message:`Candidate facts change ${u}, but the atomic change set does not declare it.`})}let A=e.changeMap?Fe({changeMap:e.changeMap,changes:h,baseDependencies:r.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[]),candidateDependencies:s.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[])}):void 0,R=[...i,...s.ir.violations].map(u=>({...u,nextAction:oe(u)})),p=R.filter(u=>u.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&p.length===0&&(A?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...A?{convergence:A}:{},changes:h.sort((u,d)=>u.path<d.path?-1:u.path>d.path?1:0),violations:R,warnings:s.ir.warnings}}l(As,"preflightResolvedChange");var Mn=new WeakSet;function Hn(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Hn(t);return Object.freeze(e)}l(Hn,"deepFreeze");function ri(e){let t=Hn(Ke(e));return Mn.add(t),t}l(ri,"createTrustedResolvedCandidateFacts");function si(e){if(!Mn.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return yt(e)}l(si,"analyzeTrustedResolvedProject");export{ot as AMBIENT_CAPABILITY_ENTRIES,st as CAPABILITY_IDS,dt as DEFAULT_INTENT_PREFIXES,Pt as RESOLVED_CANDIDATE_FACTS_SCHEMA,me as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,ct as SOURCE_POLICY_MESSAGES,it as ambientCoveredByForbiddenGlobals,Fe as analyzeArchitectureConvergence,$t as analyzeChange,fs as analyzePolicyDelta,Xe as analyzeProject,Be as analyzeResolvedProject,si as analyzeTrustedResolvedProject,Se as capabilityForAmbientName,Ce as capabilityForModuleSpecifier,pt as classifyPublishFacts,gt as collectAnalysisConfigWarnings,Vr as collectCapabilityUses,Et as collectForbiddenCapabilityUses,Ke as createResolvedCandidateFacts,ri as createTrustedResolvedCandidateFacts,ln as detectArchitectureCycles,L as deterministicHash,ye as effectiveCapabilityDeny,$e as evaluateArchitectureGraph,ms as explainViolation,vt as extractSemanticDependencies,Ie as forbiddenGlobalForModuleSpecifier,Ur as loadArchitectureChangeMap,Ot as loadContract,le as loadResolvedCandidateFacts,Ut as looksLikeArkIntent,Gn as lowerForbiddenGlobal,Ve as loweredLayerCoverage,gs as preflightChange,As as preflightResolvedChange,ut as resolveIntentLayer,Ue as resolvedFactsEvidenceRequirementsHash,_ as stableSerialize};