arkgate 4.8.13 → 4.8.14

package/bin/lib/analysis-engine.mjs

@@ -1,6 +1,6 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-var ir=Object.defineProperty;var l=(e,t)=>ir(e,"name",{value:t,configurable:!0});function U(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(U,"deterministicHash");function T(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(T).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${T(t[n])}`).join(",")}}`}l(T,"stableSerialize");var Re="1.2";var Pt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=T(e),r=T(t);return n<r?-1:n>r?1:0}l(K,"compareCanonical");function j(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}l(j,"sortedUnique");function Ke(e){let t={schemaVersion:"1.2",include:j(e.include??[]),exclude:j(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:j(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:j(n.patterns??[]),exclude:j(n.exclude??[]),forbiddenGlobals:j(n.forbiddenGlobals??[]),intentPrefixes:j(n.intentPrefixes??[]),capabilityDeny:j(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:j(e.arkRun.compositionRoots),managedLayers:j(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return U(T(t))}l(Ke,"resolvedFactsEvidenceRequirementsHash");function lr(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(K),n=e.files.map(k=>({...k,typeOnlyExportNames:j(k.typeOnlyExportNames)})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),r=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:j(k.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(k=>({...k})).sort(K),a=e.ambientUses.map(k=>({...k})).sort(K),o=e.publishCalls.map(k=>({...k})).sort(K),d=e.intentReferences.map(k=>({...k})).sort(K),c=e.safetyUses.map(k=>({...k})).sort(K),m=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map($=>({...$}))})).sort(K),h=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(K),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(K),p=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(K),f=(e.arkRunDeclarations??[]).map(k=>({...k,uses:j(k.uses),reactsTo:j(k.reactsTo),raises:j(k.raises),sends:j(k.sends)})).sort(K),u=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(K),A=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(K),E=(e.arkOrderXiFieldWrites??[]).map(k=>({...k})).sort(K),v=(e.arkOrderIngestWritesXi??[]).map(k=>({...k})).sort(K),x=(e.arkOrderReleaseKeyCounts??[]).map(k=>({...k})).sort(K),H=e.files.map(({path:k,contentHash:$})=>({path:k,contentHash:$})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),q=U(T(H));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:q,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:o,intentReferences:d,safetyUses:c,classShapes:m,arkRunKernelCalls:h,arkRunManagedNews:R,arkRunCompositionRootHits:p,arkRunDeclarations:f,arkOrderPlaneCalls:u,arkOrderGenericUpdates:y,arkOrderRootHits:A,arkOrderXiFieldWrites:E,arkOrderIngestWritesXi:v,arkOrderReleaseKeyCounts:x}}l(lr,"canonicalResolvedFactsInput");function Dt(e){let t=lr(e);return{...t,factsHash:U(T(t))}}l(Dt,"createCanonicalResolvedCandidateFacts");function Ue(e){return Dt(Ht(_(e,"$"),!1))}l(Ue,"createResolvedCandidateFacts");function _(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}l(_,"asRecord");function N(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}l(N,"assertOnlyKeys");function w(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}l(w,"requiredText");function re(e,t,n){if(e[t]!==void 0)return w(e,t,n)}l(re,"optionalText");function L(e,t,n){let r=w(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(d);let o=a.join("/");if(!o||o!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return o}l(L,"requiredProjectPath");function P(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}l(P,"requiredBoolean");function Mt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}l(Mt,"requiredInteger");function G(e,t,n){let r=Mt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}l(G,"requiredPositiveInteger");function D(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}l(D,"requiredArray");function se(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}l(se,"enumValue");function Ae(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}l(Ae,"parseStringArray");function cr(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}l(cr,"assertUnique");function Ht(e,t){N(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=se(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=se(e,"completeness",["complete","partial","unavailable"],"$"),s=D(e,"completenessReasons","$").map((b,I)=>{let g=`$.completenessReasons[${I}]`,i=_(b,g);N(i,["code","message","file"],g);let O=i.file===void 0?void 0:L(i,"file",g);return{code:w(i,"code",g),message:w(i,"message",g),...O?{file:O}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=D(e,"files","$").map((b,I)=>{let g=`$.files[${I}]`,i=_(b,g);return N(i,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],g),{path:L(i,"path",g),contentHash:w(i,"contentHash",g),parseStatus:se(i,"parseStatus",["parsed","invalid"],g),parseDiagnosticCount:Mt(i,"parseDiagnosticCount",g),exportsOnlyTypes:P(i,"exportsOnlyTypes",g),typeOnlyExportNames:Ae(i.typeOnlyExportNames,`${g}.typeOnlyExportNames`),hasTopLevelSideEffects:P(i,"hasTopLevelSideEffects",g)}}),o=D(e,"dependencies","$").map((b,I)=>{let g=`$.dependencies[${I}]`,i=_(b,g);N(i,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],g);let O=re(i,"specifier",g),F=re(i,"target",g),X=se(i,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],g);if(X==="resolved-project"&&!F)throw new Error(`${g}.target is required for resolved-project dependencies.`);if(X!=="resolved-project"&&F)throw new Error(`${g}.target is only allowed for resolved-project dependencies.`);if(X!=="dynamic"&&!O)throw new Error(`${g}.specifier is required unless resolution is dynamic.`);return{from:L(i,"from",g),...O?{specifier:O}:{},kind:se(i,"kind",["import","export","dynamic-import","require"],g),typeOnly:P(i,"typeOnly",g),line:G(i,"line",g),resolution:X,...F?{target:L(i,"target",g)}:{},...i.namedBindings!==void 0?{namedBindings:Ae(i.namedBindings,`${g}.namedBindings`)}:{},...i.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:P(i,"targetTypeOnlyExports",g)}:{},...i.sourcePureTypeModule!==void 0?{sourcePureTypeModule:P(i,"sourcePureTypeModule",g)}:{},...i.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:P(i,"namedBindingsTypeOnly",g)}:{},...i.portProofEligible!==void 0?{portProofEligible:P(i,"portProofEligible",g)}:{}}}),d=D(e,"capabilityUses","$").map((b,I)=>{let g=`$.capabilityUses[${I}]`,i=_(b,g);return N(i,["file","line","symbol","capability","source"],g),{file:L(i,"file",g),line:G(i,"line",g),symbol:w(i,"symbol",g),capability:se(i,"capability",Pt,g),source:se(i,"source",["ambient-global","import-based"],g)}}),c=D(e,"ambientUses","$").map((b,I)=>{let g=`$.ambientUses[${I}]`,i=_(b,g);return N(i,["file","line","symbol"],g),{file:L(i,"file",g),line:G(i,"line",g),symbol:w(i,"symbol",g)}}),m=D(e,"publishCalls","$").map((b,I)=>{let g=`$.publishCalls[${I}]`,i=_(b,g);N(i,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],g);let O=re(i,"rawIntentName",g),F=re(i,"sourceIntent",g);return{file:L(i,"file",g),line:G(i,"line",g),...O?{rawIntentName:O}:{},objectHasIntent:P(i,"objectHasIntent",g),arkPublishCandidate:P(i,"arkPublishCandidate",g),hasSource:P(i,"hasSource",g),...F?{sourceIntent:F}:{}}}),h=D(e,"intentReferences","$").map((b,I)=>{let g=`$.intentReferences[${I}]`,i=_(b,g);return N(i,["file","line","intent"],g),{file:L(i,"file",g),line:G(i,"line",g),intent:w(i,"intent",g)}}),R=D(e,"safetyUses","$").map((b,I)=>{let g=`$.safetyUses[${I}]`,i=_(b,g);N(i,["file","line","kind","symbol"],g);let O=re(i,"symbol",g),F=se(i,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],g);if(F==="in-memory-store"&&!O)throw new Error(`${g}.symbol is required for in-memory-store facts.`);if(F!=="in-memory-store"&&O)throw new Error(`${g}.symbol is only allowed for in-memory-store facts.`);return{file:L(i,"file",g),line:G(i,"line",g),kind:F,...O?{symbol:O}:{}}});cr(a,b=>b.path,"$.files");let p=new Set(a.map(b=>b.path));for(let b of a){if(b.parseStatus==="parsed"&&b.parseDiagnosticCount!==0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(b.parseStatus==="invalid"&&b.parseDiagnosticCount===0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(b=>b.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let b of o)if(!p.has(b.from))throw new Error(`$.dependencies references missing source file ${b.from}.`);let u=(e.arkRunKernelCalls===void 0?[]:D(e,"arkRunKernelCalls","$")).map((b,I)=>{let g=`$.arkRunKernelCalls[${I}]`,i=_(b,g);N(i,["file","line","kind","callee","viaImport","receiver","nameLiteral"],g);let O=re(i,"receiver",g),F=re(i,"nameLiteral",g);return{file:L(i,"file",g),line:G(i,"line",g),kind:se(i,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],g),callee:w(i,"callee",g),viaImport:P(i,"viaImport",g),...O?{receiver:O}:{},...F?{nameLiteral:F}:{}}}),A=(e.arkRunManagedNews===void 0?[]:D(e,"arkRunManagedNews","$")).map((b,I)=>{let g=`$.arkRunManagedNews[${I}]`,i=_(b,g);N(i,["file","line","typeName","importedFrom"],g);let O=re(i,"importedFrom",g);return{file:L(i,"file",g),line:G(i,"line",g),typeName:w(i,"typeName",g),...O?{importedFrom:O}:{}}}),v=(e.arkRunCompositionRootHits===void 0?[]:D(e,"arkRunCompositionRootHits","$")).map((b,I)=>{let g=`$.arkRunCompositionRootHits[${I}]`,i=_(b,g);return N(i,["file","matchedRoot","hasKernelFactory"],g),{file:L(i,"file",g),matchedRoot:w(i,"matchedRoot",g),hasKernelFactory:P(i,"hasKernelFactory",g)}}),x=e.arkRunDeclarations===void 0?[]:D(e,"arkRunDeclarations","$"),q=(e.arkOrderPlaneCalls===void 0?[]:D(e,"arkOrderPlaneCalls","$")).map((b,I)=>{let g=`$.arkOrderPlaneCalls[${I}]`,i=_(b,g);return N(i,["file","line","callee"],g),{file:L(i,"file",g),line:G(i,"line",g),callee:w(i,"callee",g)}}),$=(e.arkOrderGenericUpdates===void 0?[]:D(e,"arkOrderGenericUpdates","$")).map((b,I)=>{let g=`$.arkOrderGenericUpdates[${I}]`,i=_(b,g);return N(i,["file","line","method"],g),{file:L(i,"file",g),line:G(i,"line",g),method:w(i,"method",g)}}),ue=(e.arkOrderRootHits===void 0?[]:D(e,"arkOrderRootHits","$")).map((b,I)=>{let g=`$.arkOrderRootHits[${I}]`,i=_(b,g);return N(i,["file","matchedRoot","hasPlaneFactory"],g),{file:L(i,"file",g),matchedRoot:w(i,"matchedRoot",g),hasPlaneFactory:P(i,"hasPlaneFactory",g)}}),he=(e.arkOrderXiFieldWrites===void 0?[]:D(e,"arkOrderXiFieldWrites","$")).map((b,I)=>{let g=`$.arkOrderXiFieldWrites[${I}]`,i=_(b,g);return N(i,["file","line","key"],g),{file:L(i,"file",g),line:G(i,"line",g),key:w(i,"key",g)}}),De=(e.arkOrderIngestWritesXi===void 0?[]:D(e,"arkOrderIngestWritesXi","$")).map((b,I)=>{let g=`$.arkOrderIngestWritesXi[${I}]`,i=_(b,g);return N(i,["file","line"],g),{file:L(i,"file",g),line:G(i,"line",g)}}),nt=(e.arkOrderReleaseKeyCounts===void 0?[]:D(e,"arkOrderReleaseKeyCounts","$")).map((b,I)=>{let g=`$.arkOrderReleaseKeyCounts[${I}]`,i=_(b,g);return N(i,["file","line","keyCount"],g),{file:L(i,"file",g),line:G(i,"line",g),keyCount:G(i,"keyCount",g)}}),Ie=x.map((b,I)=>{let g=`$.arkRunDeclarations[${I}]`,i=_(b,g);return N(i,["file","line","uses","reactsTo","raises","sends"],g),{file:L(i,"file",g),line:G(i,"line",g),uses:Ae(i.uses,`${g}.uses`),reactsTo:Ae(i.reactsTo,`${g}.reactsTo`),raises:Ae(i.raises,`${g}.raises`),sends:Ae(i.sends,`${g}.sends`)}});for(let[b,I]of[["$.capabilityUses",d],["$.ambientUses",c],["$.publishCalls",m],["$.intentReferences",h],["$.safetyUses",R],["$.arkRunKernelCalls",u],["$.arkRunManagedNews",A],["$.arkRunCompositionRootHits",v],["$.arkRunDeclarations",Ie],["$.arkOrderPlaneCalls",q],["$.arkOrderGenericUpdates",$],["$.arkOrderRootHits",ue],["$.arkOrderXiFieldWrites",he],["$.arkOrderIngestWritesXi",De],["$.arkOrderReleaseKeyCounts",nt]])for(let g of I)if(!p.has(g.file))throw new Error(`${b} references missing file ${g.file}.`);let fe=re(e,"projectPackageName","$"),rt=(e.classShapes===void 0?[]:D(e,"classShapes","$")).map((b,I)=>{let g=`$.classShapes[${I}]`,i=_(b,g);N(i,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],g);let O=D(i,"mutatingMethods",g).map((F,X)=>{let He=`${g}.mutatingMethods[${X}]`,st=_(F,He);return N(st,["name","referencesGuardOrPublish"],He),{name:w(st,"name",He),referencesGuardOrPublish:P(st,"referencesGuardOrPublish",He)}});return{file:L(i,"file",g),className:w(i,"className",g),exported:P(i,"exported",g),hasPublicMutableFields:P(i,"hasPublicMutableFields",g),hasPublicSetters:P(i,"hasPublicSetters",g),hasPublicConstructor:P(i,"hasPublicConstructor",g),hasStaticFactory:P(i,"hasStaticFactory",g),mutatingMethods:O,...i.dataOnly===void 0?{}:{dataOnly:P(i,"dataOnly",g)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:w(e,"resolverIdentity","$"),compilerIdentity:w(e,"compilerIdentity","$"),compilerOptionsHash:w(e,"compilerOptionsHash","$"),tsconfigHash:w(e,"tsconfigHash","$"),evidenceRequirementsHash:w(e,"evidenceRequirementsHash","$"),...fe?{projectPackageName:fe}:{},files:a,dependencies:o,capabilityUses:d,ambientUses:c,publishCalls:m,intentReferences:h,safetyUses:R,classShapes:rt,arkRunKernelCalls:u,arkRunManagedNews:A,arkRunCompositionRootHits:v,arkRunDeclarations:Ie,arkOrderPlaneCalls:q,arkOrderGenericUpdates:$,arkOrderRootHits:ue,arkOrderXiFieldWrites:he,arkOrderIngestWritesXi:De,arkOrderReleaseKeyCounts:nt}}l(Ht,"parseResolvedFactsInput");function pe(e){let t=_(e,"$"),n=w(t,"factsHash","$"),r=w(t,"candidateTreeHash","$"),s=Dt(Ht(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}l(pe,"loadResolvedCandidateFacts");var dr=["network","filesystem","clock","randomness","environment","process","persistence"],S={type:"string",minLength:1},z={type:"integer",minimum:1},M={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Kt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:S,message:S,file:M}}},resolverIdentity:S,compilerIdentity:S,compilerOptionsHash:S,tsconfigHash:S,candidateTreeHash:S,evidenceRequirementsHash:S,projectPackageName:S,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:M,contentHash:S,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:S},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:M,specifier:S,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:z,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:M,namedBindings:{type:"array",items:S},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:M,line:z,symbol:S,capability:{enum:dr},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:M,line:z,symbol:S}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:M,line:z,rawIntentName:S,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:S}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:M,line:z,intent:S}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:M,line:z,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:S},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:M,className:S,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:S,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:M,line:z,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:S,viaImport:{type:"boolean"},receiver:S,nameLiteral:S}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:M,line:z,typeName:S,importedFrom:S}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:M,matchedRoot:S,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:M,line:z,uses:{type:"array",items:S},reactsTo:{type:"array",items:S},raises:{type:"array",items:S},sends:{type:"array",items:S}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:M,line:z,callee:S}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:M,line:z,method:S}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:M,matchedRoot:S,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:M,line:z,key:S}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:M,line:z}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:M,line:z,keyCount:{type:"integer",minimum:1}}}},factsHash:S},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Ut="1.0";var ot=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),je=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),lt=Object.freeze(Object.keys(je).sort()),at=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),it=Object.freeze({process:Object.freeze(["process","node:process"])});function Se(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=at[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=at[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:at[e.slice(0,a)]??null}l(Se,"capabilityForModuleSpecifier");function Ce(e,t){for(let n of t)if(it[n]?.includes(e))return n;return null}l(Ce,"forbiddenGlobalForModuleSpecifier");function Oe(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=je[r];if(s)return s}return null}l(Oe,"capabilityForAmbientName");function ke(e){if(e?.pure===!0)return[...ot].sort();let n=(e?.capabilities?.deny??[]).filter(r=>ot.includes(r));return[...new Set(n)].sort()}l(ke,"effectiveCapabilityDeny");function ct(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}l(ct,"ambientCoveredByForbiddenGlobals");function Ve(e){let t=new Set,n=new Set,r=Object.keys(je);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(o=>o===s||o.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let o of a)t.add(`ambient:${o}`);for(let o of it[s]??[])t.add(`import-exact:${o}`)}for(let s of ke(e)){if(t.add(`import:${s}`),s==="process")for(let a of it.process)t.add(`import-exact:${a}`);for(let a of r)Oe(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}l(Ve,"loweredLayerCoverage");function ur(e){let t=new Set,n=Oe(e);n&&t.add(n);for(let[r,s]of Object.entries(je))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}l(ur,"lowerForbiddenGlobal");var jt=new Map;function Vt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Vt,"escapeLiteral");function Ge(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(Ge,"normalizeGlobSeparators");function fr(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(fr,"bracesBalanced");function ae(e){let t=jt.get(e);if(t)return t;let n=Ge(e),r=fr(n),s="",a=0;for(let d=0;d<n.length;d+=1){let c=n[d];c==="\\"&&d+1<n.length?(s+=Vt(n[d+1]),d+=1):c==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=Vt(c)}let o=new RegExp(`^${s}$`);return jt.set(e,o),o}l(ae,"globToRegExp");function pr(e){return Ge(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}l(pr,"concreteGlobSegments");function dt(e,t){let n=Ge(String(e)),r=pr(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let o=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,c=-1;for(let m of r){let h=-1;for(let R=d;R<o.length;R+=1)if(o[R]===m){h=R;break}if(h<0)return a;c=h,d=h+1}return(c+1)*1e6+r.length*1e4+s}l(dt,"patternSpecificity");function Z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>ae(o).test(n))){for(let o of a.patterns??[])if(ae(o).test(n)){let d=dt(o,n);d>s&&(s=d,r=a.name)}}return r}l(Z,"layerForRelativePath");function Gt(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}l(Gt,"sliceIdForPath");function gr(e){let t=new Set;for(let n of e??[]){let s=Ge(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let o=s[a];if((o==="**"||o==="*")&&a>0){let d=s[a-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}l(gr,"inferSliceFoldersFromPatterns");function mr(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return gr(r?.patterns)}l(mr,"resolveSliceFolders");function zt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}l(zt,"normalizeSegments");function Wt(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}l(Wt,"trimTrailingSlashes");var yr=["src","app"];function hr(e){let t=Wt(e.replace(/^[./]+/,""));return t==="*"||t==="**"}l(hr,"isBlanketRoot");function Bt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=zt(n);for(let a of t){if(typeof a!="string"||a.length===0||hr(a))continue;if(a.includes("*")){let c=Wt(a.toLowerCase());if(ae(c).test(r)||ae(`${c}/**`).test(r))return!0;continue}let o=zt(a);if(o.length===0)continue;let d=yr.includes(s[0])&&o[0]!==s[0]?[0,1]:[0];for(let c of d){if(c+o.length>s.length)continue;let m=!0;for(let h=0;h<o.length;h+=1)if(s[c+h]!==o[h]){m=!1;break}if(m)return!0}}return!1}l(Bt,"pathUnderSharedRoot");function qt(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}l(qt,"sliceMatchesDeclaration");function Rr(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&qt(r.from,t)&&qt(r.to,n))}l(Rr,"crossSliceEdgeAllowed");function Ar(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}l(Ar,"peerIsolationDecision");function ze(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}l(ze,"peerIsolationDenyExplanation");function Yt(e,t,n,r){return xe(e,t,n,r)?.rule}l(Yt,"findDeniedEdgeRule");function xe(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,o=r?.toPath,d=mr(s,t,r?.layers),c=a?Gt(a,d):void 0,m=o?Gt(o,d):void 0,h=Ar({fromPath:a,toPath:o,folderCount:d.length,fromSlice:c,toSlice:m,fromShared:!c&&Bt(a,s.sharedRoots),toShared:!m&&Bt(o,s.sharedRoots),crossSliceAllowed:Rr(s.allowedCrossSlice,c,m)});if(h.denied)return{rule:s,peerIsolationReason:h.reason,fromSlice:c,toSlice:m};continue}if(t!==n)return{rule:s}}}l(xe,"findDeniedEdgeDecision");var ut={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},ft=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function pt(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}l(pt,"resolveIntentLayer");function Xt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Xt,"looksLikeArkIntent");function gt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Xt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ut.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ut.PUBLISH_MISSING_SOURCE}),t}l(gt,"classifyPublishFacts");var Zt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",kr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var Jt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ba={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Zt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Zt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...kr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Jt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Jt}}}};function we(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}l(we,"emptyEffectiveArkRules");function Qt(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}l(Qt,"structureFreezeTarget");var br=["no-anemic-model"],rn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],Ca=new RegExp(`\\b(${rn.join("|")})\\b`),sn="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",Oa=new RegExp(`\\bthis\\.${sn}\\.push\\s*\\(`),xa=new RegExp(`^this\\.${sn}\\s*=\\s*\\[\\s*\\]`);var vr="truncatedUntil";function Er(){return`${rn.join(", ")}, or events-array .push(`}l(Er,"expectedDomainInvariantWordsPhrase");function mt(e){let t=Object.getOwnPropertyDescriptor(e,vr)?.value;return typeof t=="number"?t:void 0}l(mt,"shapeTruncatedUntil");function Ir(e){let t=mt(e);return t==null?"":` shape analysed until character ${t}`}l(Ir,"shapeTruncationSuffix");function en(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(en,"escapeGlobLiteral");function Sr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=en(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=en(s)}return new RegExp(`^${n}$`)}l(Sr,"globToRegExp");function be(e,t){return!t||t.length===0?!0:t.some(n=>Sr(n).test(e))}l(be,"matchesAppliesTo");function Cr(e){return br.includes(e)}l(Cr,"isTier2");function an(e){return e.mode==="enforced"&&!Cr(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}l(an,"severityFor");function le(e,t,n,r=1){let{severity:s,failsStrict:a}=an(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}l(le,"baseViolation");function Be(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}l(Be,"isInRuleLayer");function qe(e,t,n){return t.filter(r=>!(!r.exported||!be(r.file,e.appliesTo)||!Be(r.file,e,n)))}l(qe,"shapesForRule");function Or(e,t,n){let r=[];for(let s of qe(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(le(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}l(Or,"evaluateAggregatePrivateState");function xr(e,t,n){let r=[];for(let s of qe(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(le(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}l(xr,"evaluateAlwaysValidFactory");function wr(e,t,n){let r=[],s=Er();for(let a of qe(e,t,n)){let o=Ir(a);mt(a)!=null&&r.push(le(e,a.file,`Exported class ${a.className} shape analysed until character ${mt(a)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of a.mutatingMethods)d.referencesGuardOrPublish||r.push(le(e,a.file,`Mutating method ${a.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${o}`))}return r}l(wr,"evaluateDomainEventOnMutation");function $r(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(le(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}l($r,"evaluateOrchestrationOnly");function _r(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(le(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}l(_r,"evaluateThinAdapter");function Fr(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(le(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}l(Fr,"evaluateWritesViaAggregate");function Tr(e,t,n){let r=[];for(let s of qe(e,t,n))if(s.dataOnly===!0){let a=le(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}l(Tr,"evaluateNoAnemicModel");function on(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...Or(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...xr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...wr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...$r(n,e));break;case"thin-adapter":t.push(..._r(n,e));break;case"writes-via-aggregate":t.push(...Fr(n,e));break;case"no-anemic-model":t.push(...Tr(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}l(on,"evaluateArkRuleSensors");function ln(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(c=>be(c,s.appliesTo)))continue;let{severity:o,failsStrict:d}=an(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>be(d,s.appliesTo)))continue;let o=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o?"error":"warning",sensor:"invariant-coverage",failsStrict:o})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}l(ln,"collectEmptyAppliesToFindings");var tn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,nn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,Nr=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function Lr(e){return e==="PersistenceAdapters"}l(Lr,"isPersistenceDriverLayer");function Pr(e,t){if(tn.test(e)||nn.test(e))return!0;if(!t)return!1;for(let n of t){if(Lr(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(tn.test(s)||nn.test(s))return!0}return!1}l(Pr,"sourceImportsPersistenceDriver");var Dr=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,Mr=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,Hr=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,Kr=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function Ur(e,t,n){if(!t)return null;let r=Pr(t,n),s=r&&Nr.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let a=t.match(new RegExp(Hr.source,"g"))??[],o=t.match(new RegExp(Kr.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,c=(t.match(/\bswitch\s*\(/g)??[]).length,m=a.length>=2||a.length>=1&&o.length>=2||o.length>=3&&d+c>=6,h=Dr.test(t)||Mr.test(t),R=a.length>=1||o.length>=2,p=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),f=r&&R||h&&R||r&&p&&(d>=4||a.length>=1)||h&&r;return!m&&!f&&!s?null:{...m?{orchestrationHeavy:!0}:{},...f?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}l(Ur,"deriveArkRuleFileHints");function cn(e,t){let n={};for(let[r,s]of Object.entries(e)){let a=r.replace(/\\/g,"/"),o=Ur(r,s,t?.[a]);o&&(n[a]=o)}return n}l(cn,"buildArkRuleFileHints");function dn(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}l(dn,"formatCoverageDiscards");function jr(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}l(jr,"isUnderCoverageRoot");function Vr(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}l(Vr,"titleMatchesInvariant");function Gr(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}l(Gr,"symbolPresent");function un(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,a=e.coverageStats,o=dn(a),d=dn(a,!0),c=a?`coverage file budget exhausted: ${a.filesLoaded} files loaded at the ${a.maxFiles}-file cap, ${a.testFilesRetained} tests retained, ${a.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof a.filesRead=="number"?`; ${a.filesRead} were read`:""})`:"coverage file budget exhausted",m=(e.coverageRoots??[]).filter(u=>typeof u=="string"&&u.length>0),h=m.length>0,R=m.join(", "),p=[],f=[];for(let u of t){let y=[],A=u.coverage?.test!==!1,E=u.coverage?.symbol,v,x;if(!r&&A){let $;for(let ee of n){let ue=e.fileContents[ee];if(!(!ue||!Vr(ue,u.id))){if(!h||jr(ee,m)){v=ee,x=h?!1:void 0;break}$??=ee}}v===void 0&&$!==void 0&&(v=$,x=!0),v!==void 0&&y.push("test-title")}E&&Gr(e.fileContents,E)&&y.push("symbol");let q=(u.coverage?.test===!0||!!E||u.coverage===void 0)&&y.length>0||u.coverage?.test===!1&&!E?!0:y.length>0,k=r&&A&&y.length===0;if(p.push({invariantId:u.id,layer:u.provenance.layer,sourceFile:u.provenance.sourceFile,mode:u.mode,covered:q&&!k,evidence:y,partial:k,description:u.description,...v!==void 0?{testEvidenceFile:v}:{},...x!==void 0?{outsideDeclaredRoots:x}:{}}),x===!0&&v!==void 0&&f.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${u.id} is covered only by ${v}, which is outside the declared coverage roots (${R}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:v,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:"warning",failsStrict:!1}),!q||k){let $=u.mode==="enforced"&&!k,ee=r||n.length===0?"never-had-tests":"tests-disappeared";f.push({ruleId:"INVARIANT_UNCOVERED",message:(k?s?`Invariant ${u.id} coverage cannot be proven (${c}); reporting partial, not covered.`:`Invariant ${u.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:ee==="tests-disappeared"?`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(k&&s?d:o),file:u.provenance.sourceFile,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:$?"error":"warning",failsStrict:$,kind:ee})}}return{coverage:p,violations:f,partial:p.some(u=>u.partial)}}l(un,"evaluateInvariantCoverage");function fn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}l(fn,"canPromoteInvariant");function zr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}l(zr,"normalizeExtraMergeTeethClassification");function We(e){let t=zr(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}l(We,"extraMergeTeethAllowed");function pn(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}l(pn,"classifyResolvedLayerCoverage");var Br=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var La=new Set(Br);function gn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(gn,"isArkRunKernelModuleSpecifier");var qr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],yt=new Set(qr);function mn(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(yt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(yt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:yt.has(e.slice(0,r))}l(mn,"isArkRunTransportBypassSpecifier");var Wr=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Yr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Xr=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Zr(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Wr.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Yr.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Xr.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}l(Zr,"classifyLayerImportKind");function Jr(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Zr(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(Jr,"layerImportNextAction");function Qr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(Qr,"arkRunCallSiteName");function es(e){let t=Qr(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(es,"arkRunNextAction");function ce(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Jr(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return es(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change \u03BE with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(ce,"deterministicNextAction");var ts=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],qa=new Set(ts);var yn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},ns="ARKRUN_INTERACTION_NAME_INCOMPLETE";function An(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(An,"isDomainRoleLayer");function rs(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(rs,"compareFindings");function oe(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:yn[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:yn[t],fromLayer:a?.fromLayer,target:a?.target})}}l(oe,"finding");function ss(e,t){let n=[],r=[],s=[],a=[];for(let o of e)o.file===t&&(n.push(...o.uses),r.push(...o.reactsTo),s.push(...o.raises),a.push(...o.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}l(ss,"bagForFile");function hn(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(hn,"emitKinds");function Rn(e){return e==="subscribe"||e==="register-handler"}l(Rn,"handleKinds");function as(e){return e==="resolve"||e==="resolve-singleton"}l(as,"dependKinds");function os(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(oe(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let o of t){let d=a.get(o.matchedRoot)??[];d.push(o),a.set(o.matchedRoot,d)}for(let o of s){let d=[...a.get(o)??[]].sort((m,h)=>m.file.localeCompare(h.file));if(d.length===0){r.push(oe(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},n));continue}if(d.some(m=>m.hasKernelFactory))continue;let c=d[0];r.push(oe(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},n))}return r}l(os,"evaluateMissingRoot");function is(e,t,n,r,s){let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),o=[];for(let d of n){let c=d.specifier;if(!c||!gn(c))continue;let m=r(d.from);m&&An(m,a.get(m)??[])&&o.push(oe(e,"arkrun-kernel-in-domain",d.from,d.line,`${m} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:m,target:c},s))}return o}l(is,"evaluateKernelInDomain");function ls(e,t,n,r,s,a){let o=new Set(e.managedLayers);if(o.size===0)return[];let d=new Map(t.map(h=>[h.name,h.intentPrefixes??[]])),c=new Set(r.filter(h=>h.hasKernelFactory).map(h=>h.file)),m=[];for(let h of n){if(c.has(h.file))continue;let R=h.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let p=s(h.file);!p||!o.has(p)||An(p,d.get(p)??[])||m.push(oe(e,"arkrun-direct-new",h.file,h.line,`${p} must not construct ${h.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:p,target:h.typeName},a))}return m}l(ls,"evaluateDirectNew");function cs(e,t,n,r,s){let a=[],o=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:o};let d=new Set(e.managedLayers);if(d.size===0)return{findings:a,completenessReasons:o};for(let c of t){if(!hn(c.kind)&&!Rn(c.kind)&&!as(c.kind))continue;let m=r(c.file);if(!m||!d.has(m))continue;if(!c.nameLiteral){e.mode==="enforced"&&o.push({code:ns,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let h=ss(n,c.file);if(hn(c.kind)){if(h.raises.has(c.nameLiteral)||h.sends.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:m,target:c.nameLiteral},s));continue}if(Rn(c.kind)){if(h.reactsTo.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:m,target:c.nameLiteral},s));continue}h.uses.has(c.nameLiteral)||a.push(oe(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:m,target:c.nameLiteral},s))}return{findings:a,completenessReasons:o}}l(cs,"evaluateUndeclared");function ds(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let o of t){if(o.typeOnly)continue;let d=o.specifier;if(!d||!mn(d))continue;let c=n(o.from);!c||!s.has(c)||a.push(oe(e,"arkrun-transport-bypass",o.from,o.line,`${c} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:c,target:d},r))}return a}l(ds,"evaluateTransportBypass");function kn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=We(e.classification),r=cs(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...os(t,e.compositionRootHits,n),...is(t,e.layers,e.dependencies,e.layerForFile,n),...ls(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...ds(t,e.dependencies,e.layerForFile,n)].sort(rs),a=[...r.completenessReasons].sort((o,d)=>{let c=`${o.code}\0${o.file??""}\0${o.message}`,m=`${d.code}\0${d.file??""}\0${d.message}`;return c<m?-1:c>m?1:0});return{findings:s,completenessReasons:a}}l(kn,"evaluateArkRunSensors");function bn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(bn,"isArkOrderModuleSpecifier");var vn=new Map;function En(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(En,"escapeAppliesToLiteral");function us(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(us,"normalizeAppliesToGlob");function fs(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(fs,"appliesToBracesBalanced");function ps(e){let t=vn.get(e);if(t)return t;let n=us(e),r=fs(n),s="",a=0;for(let d=0;d<n.length;d+=1){let c=n[d];c==="\\"&&d+1<n.length?(s+=En(n[d+1]),d+=1):c==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=En(c)}let o=new RegExp(`^${s}$`);return vn.set(e,o),o}l(ps,"globToRegExp");var In={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function gs(e,t){return!t||t.length===0?!0:t.some(n=>ps(n).test(e))}l(gs,"matchesArkOrderAppliesTo");function ms(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(ms,"isDomainRoleLayer");function de(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:In[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:In[t],fromLayer:a?.fromLayer,target:a?.target})}}l(de,"finding");function Sn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=We(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(de(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let c=new Map;for(let m of e.planeRootHits){let h=c.get(m.matchedRoot)??[];h.push(m),c.set(m.matchedRoot,h)}for(let m of s){let h=c.get(m)??[];if(h.length===0){r.push(de(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(m)} matched no governed files and has no createOrderPlane factory.`,{target:m},n));continue}h.some(R=>R.hasPlaneFactory)||r.push(de(t,"arkorder-missing-plane",h[0].file,1,`ArkOrder plane root ${JSON.stringify(m)} has no createOrderPlane factory.`,{target:m},n))}}let a=new Map(e.layers.map(c=>[c.name,c.intentPrefixes??[]]));for(let c of e.dependencies){let m=c.specifier;if(!m||!bn(m))continue;let h=e.layerForFile(c.from);h&&ms(h,a.get(h)??[])&&r.push(de(t,"arkorder-kernel-in-domain",c.from,c.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:h,target:m},n))}for(let c of e.genericUpdates)r.push(de(t,"arkorder-generic-update",c.file,c.line,`Generic ${c.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:c.method},n));let o=t.xiKeys??[];for(let c of e.releaseKeyCounts??[])c.keyCount<=t.maxXiKeys||r.push(de(t,"arkorder-too-many-params",c.file,c.line,`release() freezes ${c.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(c.keyCount)},n));for(let c of e.ingestWritesXi??[])r.push(de(t,"arkorder-ingest-writes-xi",c.file,c.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let c of o.length===0?[]:e.xiFieldWrites??[]){let m=e.layerForFile(c.file);!m||!d.has(m)||gs(c.file,t.appliesTo)&&r.push(de(t,"arkorder-xi-field-write",c.file,c.line,`This file writes ${JSON.stringify(c.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:m,target:c.key},n))}return r.sort((c,m)=>c.file.localeCompare(m.file)||c.ruleId.localeCompare(m.ruleId)||c.line-m.line),{findings:r,completenessReasons:[]}}l(Sn,"evaluateArkOrderSensors");function B(e,t,n={}){return{ruleId:e,message:t,...n}}l(B,"configWarning");function ht(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(f=>typeof f!="string"))&&a.push(B("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(B("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let f of["maxTsSuppressions","maxAnyCasts"]){let u=t.safety[f];u!==void 0&&(!Number.isInteger(u)||u<0)&&a.push(B("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${f} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],c=new Set([...o.map(f=>f.name).filter(Boolean),...d.map(f=>f.name).filter(f=>!!f)]);o.length===0&&a.push(B("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let m=new Set,h=new Set;for(let f of o){if(!f.name){a.push(B("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}m.has(f.name)&&h.add(f.name),m.add(f.name),f.forbiddenGlobals!==void 0&&(!Array.isArray(f.forbiddenGlobals)||f.forbiddenGlobals.some(y=>typeof y!="string"))&&a.push(B("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${f.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:f.name}));let u=Array.isArray(f.patterns)?f.patterns:[];if(u.length===0){a.push(B("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${f.name}" has no file patterns and will never classify files.`,{layer:f.name}));continue}for(let y of u){let A;try{A=ae(y)}catch(v){a.push(B("CONFIG_INVALID_LAYER_PATTERN",`Layer "${f.name}" has an invalid pattern "${y}": ${v instanceof Error?v.message:String(v)}`,{layer:f.name,pattern:y}));continue}let E=f.optional===!0||f.reserved===!0||f.allowEmpty===!0;!r.some(v=>A.test(v))&&!E&&a.push(B("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${f.name}" pattern "${y}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:f.name,pattern:y,failsStrict:!1,reserved:!1}))}}for(let f of h)a.push(B("CONFIG_DUPLICATE_LAYER",`Layer "${f}" is configured more than once.`,{layer:f}));if(c.size>0)for(let f of n??[])f.from&&!c.has(f.from)&&a.push(B("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${f.from}".`,{fromLayer:f.from,toLayer:f.to})),f.to&&!c.has(f.to)&&a.push(B("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${f.to}".`,{fromLayer:f.from,toLayer:f.to}));let R=new Set;if(o.length>1)for(let f of r){let u=-1,y=[];for(let A of o)for(let E of A.patterns??[]){if(!ae(E).test(f))continue;let v=dt(E,f);v>u?(u=v,y=[A.name]):v===u&&!y.includes(A.name)&&y.push(A.name)}y.length>1&&R.add([...y].sort().join(" + "))}R.size>0&&a.push(B("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let p=r.filter(f=>!Z(f,o));return p.length>0&&a.push(B("CONFIG_UNCLASSIFIED_FILES",`${p.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:p.length,samples:p.slice(0,5)})),a}l(ht,"collectAnalysisConfigWarnings");function Cn(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],o=[],d=l(c=>{n.set(c,t),r.set(c,t),t+=1,a.push(c),s.add(c);for(let R of[...e.get(c)??[]].sort())e.has(R)&&(n.has(R)?s.has(R)&&r.set(c,Math.min(r.get(c)??0,n.get(R)??0)):(d(R),r.set(c,Math.min(r.get(c)??0,r.get(R)??0))));if(r.get(c)!==n.get(c))return;let m=[],h;do{if(h=a.pop(),h===void 0)break;s.delete(h),m.push(h)}while(h!==c);m.length>1&&o.push(m.sort())},"connect");for(let c of[...e.keys()].sort())n.has(c)||d(c);return o.sort((c,m)=>c[0]<m[0]?-1:c[0]>m[0]?1:0).map(c=>({ruleId:"CIRCULAR_DEPENDENCY",file:c[0],line:1,target:c.join(" \u2192 "),message:`Circular dependency among ${c.length} files: ${c.join(" \u2192 ")} \u2192 ${c[0]}.`,cycleKind:"value"}))}l(Cn,"detectArchitectureCycles");function $e(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let o=xe(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let d=o.rule,c=!!d.peerIsolation,m=!c&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=c?ze(o.peerIsolationReason??"cross-slice",{fromPath:a.from,toPath:a.to,fromSlice:o.fromSlice,toSlice:o.toSlice}):void 0,R=d.message?h?`${d.message} (${h})`:d.message:h?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}): ${h}`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!c&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...c?{peerIsolation:!0}:{},message:m?`${R} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:R,...m?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=Cn(r);s==="soft"||s==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}l($e,"evaluateArchitectureGraph");function On(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:Qt({sensor:e.sensor,code:e.code})}:{},...r?{freezable:!1}:{},nextAction:t}}l(On,"toArkRuleEngineViolation");function ys(e,t){return t.some(n=>{try{return ae(n).test(e)}catch{return!1}})}l(ys,"matchesAny");function hs(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],o=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:A})=>({file:y,line:A})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:A})=>({file:y,line:A})),c=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!ys(y.file,a)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),m=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),h=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),R={tsSuppressions:o,anyCasts:d,nonLiteralDynamicImports:c,inMemoryProductionStores:m,disabledPeerIsolationRules:h,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},p=[],f=c.filter(y=>y.kind==="import");if(f.length>0){let y=f[0];p.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${f.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let u=c.filter(y=>y.kind==="require");if(u.length>0){let y=u[0];p.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${u.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(o.length>r){let y=o[0];p.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${o.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];p.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(m.length>0){let y=m[0];p.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${m.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return h.length>0&&p.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${h.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:p}}l(hs,"evaluateSafety");function Rs(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}l(Rs,"ambientForbiddenGlobal");function xn(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return pt(e,n.length>0?n:ft.map(r=>({name:r.layer,prefixes:r.prefixes})))}l(xn,"intentLayer");function As(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let o=n.get(a.file);!o||!Rs(a.symbol,s.get(o)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,message:`${o} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let o=n.get(a.file);if(!o)continue;let d=s.get(o),c=d?.forbiddenGlobals??[],m=a.source==="import-based"?t.dependencies.find(h=>h.from===a.file&&h.line===a.line&&h.specifier===a.symbol&&!h.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&ct(a.symbol,c))){if(a.source==="import-based"){let h=Ce(a.symbol,c);if(h){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,...m?{edgeKind:m}:{},message:`${o} must not use module "${a.symbol}" because it is the import form of forbidden global "${h}".`});continue}}ke(d).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:o,target:a.symbol,capability:a.capability,...m?{edgeKind:m}:{},message:a.source==="import-based"?`${o} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${o} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let o=n.get(a.file);if(!o)continue;for(let c of gt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:c.ruleId,file:a.file,line:a.line,...c.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:o}:{},message:c.message});if(!a.sourceIntent)continue;let d=xn(a.sourceIntent,e.contract);!d||d===o||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${o}.`})}for(let a of t.intentReferences){let o=n.get(a.file);if(!o)continue;let d=xn(a.intent,e.contract);if(!d)continue;let c=xe(e.contract.config.rules,o,d,{fromPath:a.file,layers:e.contract.config.layers});if(!c)continue;let m=c.rule.peerIsolation?ze(c.peerIsolationReason??"cross-slice",{fromPath:a.file,fromSlice:c.fromSlice,toSlice:c.toSlice}):void 0,h=`${o} must not reference ${d} intent ${a.intent}.`,R=m&&c.peerIsolationReason!=="cross-slice"?`${h} ${m}`:c.rule.message?m?`${c.rule.message} (${m})`:c.rule.message:h;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.intent,...c.rule.peerIsolation?{peerIsolation:!0}:{},message:R})}return r}l(As,"contentViolations");function Rt(e){let{facts:t}=e,n=Ke(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((i,O)=>{let F=`${i.code}\0${i.file??""}\0${i.message}`,X=`${O.code}\0${O.file??""}\0${O.message}`;return F<X?-1:F>X?1:0}),o=t.files.map(i=>({...i,layer:Z(i.path,e.contract.config.layers)??null})),d=new Map(o.map(i=>[i.path,i.layer])),c=t.dependencies.map(i=>{let O=i.target?d.get(i.target)??Z(i.target,e.contract.config.layers):void 0;return{from:i.from,fromLayer:d.get(i.from)??null,...i.resolution==="resolved-project"&&i.target?{to:i.target,...O?{toLayer:O}:{}}:{},line:i.line,kind:i.kind,typeOnly:i.typeOnly,...i.targetTypeOnlyExports?{targetTypeOnlyExports:i.targetTypeOnlyExports}:{},...i.sourcePureTypeModule?{sourcePureTypeModule:i.sourcePureTypeModule}:{},...i.namedBindingsTypeOnly?{namedBindingsTypeOnly:i.namedBindingsTypeOnly}:{},...i.portProofEligible?{portProofEligible:i.portProofEligible}:{}}}),m=ht({config:e.contract.config,rules:e.contract.config.rules,files:o.map(i=>i.path)}),h=hs(e,t),R=e.contract.arkRules??we(),p=o.map(i=>i.path),u={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?cn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=[...on({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:p,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),fileHints:u}),...ln(R,p)],A=y.filter(i=>i.failsStrict).map(i=>On(i,i.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${i.arkruleId} in ${i.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:`Fix the structure or invariant for ${i.arkruleId} (declared in ${i.arkruleSource}), then preflight again.`)),E=y.filter(i=>!i.failsStrict).map(i=>({...On(i,i.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${i.arkruleId} in ${i.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Review ArkRule ${i.arkruleId} in ${i.arkruleSource} (advisory).`),failsStrict:!1})),x=(R.invariants?.length??0)>0?un({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},H=x.violations.filter(i=>i.failsStrict).map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,arkruleId:i.arkruleId,arkruleSource:i.arkruleSource,nextAction:`Add a test title or declared symbol covering ${i.arkruleId} (declared in ${i.arkruleSource}), then preflight again.`})),q=x.violations.filter(i=>!i.failsStrict).map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,arkruleId:i.arkruleId,arkruleSource:i.arkruleSource,failsStrict:!1,nextAction:i.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${i.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${i.arkruleId} in ${i.arkruleSource} (advisory / partial).`})),k=pn(o),$=kn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),classification:k}),ee=e.contract.config.arkRun?.mode,ue=$.findings.filter(()=>ee==="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:i.failsStrict,...i.severity?{severity:i.severity}:{}})),Nt=$.findings.filter(()=>ee!=="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:!1})),he=Sn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),classification:k}),tt=e.contract.config.arkOrder?.mode,De=he.findings.filter(()=>tt==="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:i.failsStrict,...i.severity?{severity:i.severity}:{}})),Lt=he.findings.filter(()=>tt!=="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:!1})),Ie=[...x.partial&&x.coverage.some(i=>i.mode==="enforced"&&i.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...$.completenessReasons,...he.completenessReasons],fe=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.filter(i=>i.layer).map(i=>i.path),contentViolations:[...As(e,t,d),...A,...H,...ue,...De],edges:c,warnings:[...m,...h.warnings,...E,...q,...Nt,...Lt],safety:h.report}),Me=s==="complete"&&Ie.length>0?"partial":s,rt=Me==="complete"?a:[...a,...Ie].sort((i,O)=>{let F=`${i.code}\0${i.file??""}\0${i.message}`,X=`${O.code}\0${O.file??""}\0${O.message}`;return F<X?-1:F>X?1:0}),b=fe.violations.filter(i=>i.failsStrict!==!1),I=Me==="complete"&&b.length===0,g=I&&fe.warnings.every(i=>i.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:Me,completenessReasons:rt,valid:I,strictValid:g,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:h.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:o,layers:e.contract.config.layers.map(i=>i.name),edges:c,capabilityUses:t.capabilityUses,violations:fe.violations,warnings:fe.warnings}}}l(Rt,"analyzeCanonicalResolvedProject");function Ye(e){return Rt({contract:e.contract,facts:pe(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}l(Ye,"analyzeResolvedProject");var At="1.0";var Xe=class extends Error{static{l(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+var ir=Object.defineProperty;var l=(e,t)=>ir(e,"name",{value:t,configurable:!0});function U(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(U,"deterministicHash");function T(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(T).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${T(t[n])}`).join(",")}}`}l(T,"stableSerialize");var Re="1.2";var Pt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=T(e),r=T(t);return n<r?-1:n>r?1:0}l(K,"compareCanonical");function j(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}l(j,"sortedUnique");function Ke(e){let t={schemaVersion:"1.2",include:j(e.include??[]),exclude:j(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:j(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:j(n.patterns??[]),exclude:j(n.exclude??[]),forbiddenGlobals:j(n.forbiddenGlobals??[]),intentPrefixes:j(n.intentPrefixes??[]),capabilityDeny:j(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:j(e.arkRun.compositionRoots),managedLayers:j(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return U(T(t))}l(Ke,"resolvedFactsEvidenceRequirementsHash");function lr(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(K),n=e.files.map(k=>({...k,typeOnlyExportNames:j(k.typeOnlyExportNames)})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),r=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:j(k.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(k=>({...k})).sort(K),a=e.ambientUses.map(k=>({...k})).sort(K),o=e.publishCalls.map(k=>({...k})).sort(K),d=e.intentReferences.map(k=>({...k})).sort(K),c=e.safetyUses.map(k=>({...k})).sort(K),m=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map($=>({...$}))})).sort(K),h=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(K),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(K),p=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(K),f=(e.arkRunDeclarations??[]).map(k=>({...k,uses:j(k.uses),reactsTo:j(k.reactsTo),raises:j(k.raises),sends:j(k.sends)})).sort(K),u=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(K),A=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(K),E=(e.arkOrderXiFieldWrites??[]).map(k=>({...k})).sort(K),v=(e.arkOrderIngestWritesXi??[]).map(k=>({...k})).sort(K),x=(e.arkOrderReleaseKeyCounts??[]).map(k=>({...k})).sort(K),H=e.files.map(({path:k,contentHash:$})=>({path:k,contentHash:$})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),q=U(T(H));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:q,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:o,intentReferences:d,safetyUses:c,classShapes:m,arkRunKernelCalls:h,arkRunManagedNews:R,arkRunCompositionRootHits:p,arkRunDeclarations:f,arkOrderPlaneCalls:u,arkOrderGenericUpdates:y,arkOrderRootHits:A,arkOrderXiFieldWrites:E,arkOrderIngestWritesXi:v,arkOrderReleaseKeyCounts:x}}l(lr,"canonicalResolvedFactsInput");function Dt(e){let t=lr(e);return{...t,factsHash:U(T(t))}}l(Dt,"createCanonicalResolvedCandidateFacts");function Ue(e){return Dt(Ht(_(e,"$"),!1))}l(Ue,"createResolvedCandidateFacts");function _(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}l(_,"asRecord");function N(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}l(N,"assertOnlyKeys");function w(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}l(w,"requiredText");function re(e,t,n){if(e[t]!==void 0)return w(e,t,n)}l(re,"optionalText");function L(e,t,n){let r=w(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(d);let o=a.join("/");if(!o||o!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return o}l(L,"requiredProjectPath");function P(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}l(P,"requiredBoolean");function Mt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}l(Mt,"requiredInteger");function G(e,t,n){let r=Mt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}l(G,"requiredPositiveInteger");function D(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}l(D,"requiredArray");function se(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}l(se,"enumValue");function Ae(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}l(Ae,"parseStringArray");function cr(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}l(cr,"assertUnique");function Ht(e,t){N(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=se(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=se(e,"completeness",["complete","partial","unavailable"],"$"),s=D(e,"completenessReasons","$").map((b,I)=>{let g=`$.completenessReasons[${I}]`,i=_(b,g);N(i,["code","message","file"],g);let O=i.file===void 0?void 0:L(i,"file",g);return{code:w(i,"code",g),message:w(i,"message",g),...O?{file:O}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=D(e,"files","$").map((b,I)=>{let g=`$.files[${I}]`,i=_(b,g);return N(i,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],g),{path:L(i,"path",g),contentHash:w(i,"contentHash",g),parseStatus:se(i,"parseStatus",["parsed","invalid"],g),parseDiagnosticCount:Mt(i,"parseDiagnosticCount",g),exportsOnlyTypes:P(i,"exportsOnlyTypes",g),typeOnlyExportNames:Ae(i.typeOnlyExportNames,`${g}.typeOnlyExportNames`),hasTopLevelSideEffects:P(i,"hasTopLevelSideEffects",g)}}),o=D(e,"dependencies","$").map((b,I)=>{let g=`$.dependencies[${I}]`,i=_(b,g);N(i,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],g);let O=re(i,"specifier",g),F=re(i,"target",g),X=se(i,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],g);if(X==="resolved-project"&&!F)throw new Error(`${g}.target is required for resolved-project dependencies.`);if(X!=="resolved-project"&&F)throw new Error(`${g}.target is only allowed for resolved-project dependencies.`);if(X!=="dynamic"&&!O)throw new Error(`${g}.specifier is required unless resolution is dynamic.`);return{from:L(i,"from",g),...O?{specifier:O}:{},kind:se(i,"kind",["import","export","dynamic-import","require"],g),typeOnly:P(i,"typeOnly",g),line:G(i,"line",g),resolution:X,...F?{target:L(i,"target",g)}:{},...i.namedBindings!==void 0?{namedBindings:Ae(i.namedBindings,`${g}.namedBindings`)}:{},...i.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:P(i,"targetTypeOnlyExports",g)}:{},...i.sourcePureTypeModule!==void 0?{sourcePureTypeModule:P(i,"sourcePureTypeModule",g)}:{},...i.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:P(i,"namedBindingsTypeOnly",g)}:{},...i.portProofEligible!==void 0?{portProofEligible:P(i,"portProofEligible",g)}:{}}}),d=D(e,"capabilityUses","$").map((b,I)=>{let g=`$.capabilityUses[${I}]`,i=_(b,g);return N(i,["file","line","symbol","capability","source"],g),{file:L(i,"file",g),line:G(i,"line",g),symbol:w(i,"symbol",g),capability:se(i,"capability",Pt,g),source:se(i,"source",["ambient-global","import-based"],g)}}),c=D(e,"ambientUses","$").map((b,I)=>{let g=`$.ambientUses[${I}]`,i=_(b,g);return N(i,["file","line","symbol"],g),{file:L(i,"file",g),line:G(i,"line",g),symbol:w(i,"symbol",g)}}),m=D(e,"publishCalls","$").map((b,I)=>{let g=`$.publishCalls[${I}]`,i=_(b,g);N(i,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],g);let O=re(i,"rawIntentName",g),F=re(i,"sourceIntent",g);return{file:L(i,"file",g),line:G(i,"line",g),...O?{rawIntentName:O}:{},objectHasIntent:P(i,"objectHasIntent",g),arkPublishCandidate:P(i,"arkPublishCandidate",g),hasSource:P(i,"hasSource",g),...F?{sourceIntent:F}:{}}}),h=D(e,"intentReferences","$").map((b,I)=>{let g=`$.intentReferences[${I}]`,i=_(b,g);return N(i,["file","line","intent"],g),{file:L(i,"file",g),line:G(i,"line",g),intent:w(i,"intent",g)}}),R=D(e,"safetyUses","$").map((b,I)=>{let g=`$.safetyUses[${I}]`,i=_(b,g);N(i,["file","line","kind","symbol"],g);let O=re(i,"symbol",g),F=se(i,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],g);if(F==="in-memory-store"&&!O)throw new Error(`${g}.symbol is required for in-memory-store facts.`);if(F!=="in-memory-store"&&O)throw new Error(`${g}.symbol is only allowed for in-memory-store facts.`);return{file:L(i,"file",g),line:G(i,"line",g),kind:F,...O?{symbol:O}:{}}});cr(a,b=>b.path,"$.files");let p=new Set(a.map(b=>b.path));for(let b of a){if(b.parseStatus==="parsed"&&b.parseDiagnosticCount!==0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(b.parseStatus==="invalid"&&b.parseDiagnosticCount===0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(b=>b.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let b of o)if(!p.has(b.from))throw new Error(`$.dependencies references missing source file ${b.from}.`);let u=(e.arkRunKernelCalls===void 0?[]:D(e,"arkRunKernelCalls","$")).map((b,I)=>{let g=`$.arkRunKernelCalls[${I}]`,i=_(b,g);N(i,["file","line","kind","callee","viaImport","receiver","nameLiteral"],g);let O=re(i,"receiver",g),F=re(i,"nameLiteral",g);return{file:L(i,"file",g),line:G(i,"line",g),kind:se(i,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],g),callee:w(i,"callee",g),viaImport:P(i,"viaImport",g),...O?{receiver:O}:{},...F?{nameLiteral:F}:{}}}),A=(e.arkRunManagedNews===void 0?[]:D(e,"arkRunManagedNews","$")).map((b,I)=>{let g=`$.arkRunManagedNews[${I}]`,i=_(b,g);N(i,["file","line","typeName","importedFrom"],g);let O=re(i,"importedFrom",g);return{file:L(i,"file",g),line:G(i,"line",g),typeName:w(i,"typeName",g),...O?{importedFrom:O}:{}}}),v=(e.arkRunCompositionRootHits===void 0?[]:D(e,"arkRunCompositionRootHits","$")).map((b,I)=>{let g=`$.arkRunCompositionRootHits[${I}]`,i=_(b,g);return N(i,["file","matchedRoot","hasKernelFactory"],g),{file:L(i,"file",g),matchedRoot:w(i,"matchedRoot",g),hasKernelFactory:P(i,"hasKernelFactory",g)}}),x=e.arkRunDeclarations===void 0?[]:D(e,"arkRunDeclarations","$"),q=(e.arkOrderPlaneCalls===void 0?[]:D(e,"arkOrderPlaneCalls","$")).map((b,I)=>{let g=`$.arkOrderPlaneCalls[${I}]`,i=_(b,g);return N(i,["file","line","callee"],g),{file:L(i,"file",g),line:G(i,"line",g),callee:w(i,"callee",g)}}),$=(e.arkOrderGenericUpdates===void 0?[]:D(e,"arkOrderGenericUpdates","$")).map((b,I)=>{let g=`$.arkOrderGenericUpdates[${I}]`,i=_(b,g);return N(i,["file","line","method"],g),{file:L(i,"file",g),line:G(i,"line",g),method:w(i,"method",g)}}),ue=(e.arkOrderRootHits===void 0?[]:D(e,"arkOrderRootHits","$")).map((b,I)=>{let g=`$.arkOrderRootHits[${I}]`,i=_(b,g);return N(i,["file","matchedRoot","hasPlaneFactory"],g),{file:L(i,"file",g),matchedRoot:w(i,"matchedRoot",g),hasPlaneFactory:P(i,"hasPlaneFactory",g)}}),he=(e.arkOrderXiFieldWrites===void 0?[]:D(e,"arkOrderXiFieldWrites","$")).map((b,I)=>{let g=`$.arkOrderXiFieldWrites[${I}]`,i=_(b,g);return N(i,["file","line","key"],g),{file:L(i,"file",g),line:G(i,"line",g),key:w(i,"key",g)}}),De=(e.arkOrderIngestWritesXi===void 0?[]:D(e,"arkOrderIngestWritesXi","$")).map((b,I)=>{let g=`$.arkOrderIngestWritesXi[${I}]`,i=_(b,g);return N(i,["file","line"],g),{file:L(i,"file",g),line:G(i,"line",g)}}),nt=(e.arkOrderReleaseKeyCounts===void 0?[]:D(e,"arkOrderReleaseKeyCounts","$")).map((b,I)=>{let g=`$.arkOrderReleaseKeyCounts[${I}]`,i=_(b,g);return N(i,["file","line","keyCount"],g),{file:L(i,"file",g),line:G(i,"line",g),keyCount:G(i,"keyCount",g)}}),Ie=x.map((b,I)=>{let g=`$.arkRunDeclarations[${I}]`,i=_(b,g);return N(i,["file","line","uses","reactsTo","raises","sends"],g),{file:L(i,"file",g),line:G(i,"line",g),uses:Ae(i.uses,`${g}.uses`),reactsTo:Ae(i.reactsTo,`${g}.reactsTo`),raises:Ae(i.raises,`${g}.raises`),sends:Ae(i.sends,`${g}.sends`)}});for(let[b,I]of[["$.capabilityUses",d],["$.ambientUses",c],["$.publishCalls",m],["$.intentReferences",h],["$.safetyUses",R],["$.arkRunKernelCalls",u],["$.arkRunManagedNews",A],["$.arkRunCompositionRootHits",v],["$.arkRunDeclarations",Ie],["$.arkOrderPlaneCalls",q],["$.arkOrderGenericUpdates",$],["$.arkOrderRootHits",ue],["$.arkOrderXiFieldWrites",he],["$.arkOrderIngestWritesXi",De],["$.arkOrderReleaseKeyCounts",nt]])for(let g of I)if(!p.has(g.file))throw new Error(`${b} references missing file ${g.file}.`);let fe=re(e,"projectPackageName","$"),rt=(e.classShapes===void 0?[]:D(e,"classShapes","$")).map((b,I)=>{let g=`$.classShapes[${I}]`,i=_(b,g);N(i,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],g);let O=D(i,"mutatingMethods",g).map((F,X)=>{let He=`${g}.mutatingMethods[${X}]`,st=_(F,He);return N(st,["name","referencesGuardOrPublish"],He),{name:w(st,"name",He),referencesGuardOrPublish:P(st,"referencesGuardOrPublish",He)}});return{file:L(i,"file",g),className:w(i,"className",g),exported:P(i,"exported",g),hasPublicMutableFields:P(i,"hasPublicMutableFields",g),hasPublicSetters:P(i,"hasPublicSetters",g),hasPublicConstructor:P(i,"hasPublicConstructor",g),hasStaticFactory:P(i,"hasStaticFactory",g),mutatingMethods:O,...i.dataOnly===void 0?{}:{dataOnly:P(i,"dataOnly",g)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:w(e,"resolverIdentity","$"),compilerIdentity:w(e,"compilerIdentity","$"),compilerOptionsHash:w(e,"compilerOptionsHash","$"),tsconfigHash:w(e,"tsconfigHash","$"),evidenceRequirementsHash:w(e,"evidenceRequirementsHash","$"),...fe?{projectPackageName:fe}:{},files:a,dependencies:o,capabilityUses:d,ambientUses:c,publishCalls:m,intentReferences:h,safetyUses:R,classShapes:rt,arkRunKernelCalls:u,arkRunManagedNews:A,arkRunCompositionRootHits:v,arkRunDeclarations:Ie,arkOrderPlaneCalls:q,arkOrderGenericUpdates:$,arkOrderRootHits:ue,arkOrderXiFieldWrites:he,arkOrderIngestWritesXi:De,arkOrderReleaseKeyCounts:nt}}l(Ht,"parseResolvedFactsInput");function pe(e){let t=_(e,"$"),n=w(t,"factsHash","$"),r=w(t,"candidateTreeHash","$"),s=Dt(Ht(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}l(pe,"loadResolvedCandidateFacts");var dr=["network","filesystem","clock","randomness","environment","process","persistence"],S={type:"string",minLength:1},z={type:"integer",minimum:1},M={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Kt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:S,message:S,file:M}}},resolverIdentity:S,compilerIdentity:S,compilerOptionsHash:S,tsconfigHash:S,candidateTreeHash:S,evidenceRequirementsHash:S,projectPackageName:S,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:M,contentHash:S,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:S},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:M,specifier:S,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:z,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:M,namedBindings:{type:"array",items:S},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:M,line:z,symbol:S,capability:{enum:dr},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:M,line:z,symbol:S}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:M,line:z,rawIntentName:S,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:S}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:M,line:z,intent:S}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:M,line:z,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:S},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:M,className:S,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:S,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:M,line:z,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:S,viaImport:{type:"boolean"},receiver:S,nameLiteral:S}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:M,line:z,typeName:S,importedFrom:S}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:M,matchedRoot:S,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:M,line:z,uses:{type:"array",items:S},reactsTo:{type:"array",items:S},raises:{type:"array",items:S},sends:{type:"array",items:S}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:M,line:z,callee:S}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:M,line:z,method:S}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:M,matchedRoot:S,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:M,line:z,key:S}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:M,line:z}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:M,line:z,keyCount:{type:"integer",minimum:1}}}},factsHash:S},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Ut="1.0";var ot=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),je=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),lt=Object.freeze(Object.keys(je).sort()),at=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),it=Object.freeze({process:Object.freeze(["process","node:process"])});function Se(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=at[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=at[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:at[e.slice(0,a)]??null}l(Se,"capabilityForModuleSpecifier");function Ce(e,t){for(let n of t)if(it[n]?.includes(e))return n;return null}l(Ce,"forbiddenGlobalForModuleSpecifier");function Oe(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=je[r];if(s)return s}return null}l(Oe,"capabilityForAmbientName");function ke(e){if(e?.pure===!0)return[...ot].sort();let n=(e?.capabilities?.deny??[]).filter(r=>ot.includes(r));return[...new Set(n)].sort()}l(ke,"effectiveCapabilityDeny");function ct(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}l(ct,"ambientCoveredByForbiddenGlobals");function Ve(e){let t=new Set,n=new Set,r=Object.keys(je);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(o=>o===s||o.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let o of a)t.add(`ambient:${o}`);for(let o of it[s]??[])t.add(`import-exact:${o}`)}for(let s of ke(e)){if(t.add(`import:${s}`),s==="process")for(let a of it.process)t.add(`import-exact:${a}`);for(let a of r)Oe(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}l(Ve,"loweredLayerCoverage");function ur(e){let t=new Set,n=Oe(e);n&&t.add(n);for(let[r,s]of Object.entries(je))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}l(ur,"lowerForbiddenGlobal");var jt=new Map;function Vt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Vt,"escapeLiteral");function Ge(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(Ge,"normalizeGlobSeparators");function fr(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(fr,"bracesBalanced");function ae(e){let t=jt.get(e);if(t)return t;let n=Ge(e),r=fr(n),s="",a=0;for(let d=0;d<n.length;d+=1){let c=n[d];c==="\\"&&d+1<n.length?(s+=Vt(n[d+1]),d+=1):c==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=Vt(c)}let o=new RegExp(`^${s}$`);return jt.set(e,o),o}l(ae,"globToRegExp");function pr(e){return Ge(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}l(pr,"concreteGlobSegments");function dt(e,t){let n=Ge(String(e)),r=pr(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let o=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,c=-1;for(let m of r){let h=-1;for(let R=d;R<o.length;R+=1)if(o[R]===m){h=R;break}if(h<0)return a;c=h,d=h+1}return(c+1)*1e6+r.length*1e4+s}l(dt,"patternSpecificity");function Z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>ae(o).test(n))){for(let o of a.patterns??[])if(ae(o).test(n)){let d=dt(o,n);d>s&&(s=d,r=a.name)}}return r}l(Z,"layerForRelativePath");function Gt(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}l(Gt,"sliceIdForPath");function gr(e){let t=new Set;for(let n of e??[]){let s=Ge(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let o=s[a];if((o==="**"||o==="*")&&a>0){let d=s[a-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}l(gr,"inferSliceFoldersFromPatterns");function mr(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return gr(r?.patterns)}l(mr,"resolveSliceFolders");function zt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}l(zt,"normalizeSegments");function Wt(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}l(Wt,"trimTrailingSlashes");var yr=["src","app"];function hr(e){let t=Wt(e.replace(/^[./]+/,""));return t==="*"||t==="**"}l(hr,"isBlanketRoot");function Bt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=zt(n);for(let a of t){if(typeof a!="string"||a.length===0||hr(a))continue;if(a.includes("*")){let c=Wt(a.toLowerCase());if(ae(c).test(r)||ae(`${c}/**`).test(r))return!0;continue}let o=zt(a);if(o.length===0)continue;let d=yr.includes(s[0])&&o[0]!==s[0]?[0,1]:[0];for(let c of d){if(c+o.length>s.length)continue;let m=!0;for(let h=0;h<o.length;h+=1)if(s[c+h]!==o[h]){m=!1;break}if(m)return!0}}return!1}l(Bt,"pathUnderSharedRoot");function qt(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}l(qt,"sliceMatchesDeclaration");function Rr(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&qt(r.from,t)&&qt(r.to,n))}l(Rr,"crossSliceEdgeAllowed");function Ar(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}l(Ar,"peerIsolationDecision");function ze(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}l(ze,"peerIsolationDenyExplanation");function Yt(e,t,n,r){return xe(e,t,n,r)?.rule}l(Yt,"findDeniedEdgeRule");function xe(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,o=r?.toPath,d=mr(s,t,r?.layers),c=a?Gt(a,d):void 0,m=o?Gt(o,d):void 0,h=Ar({fromPath:a,toPath:o,folderCount:d.length,fromSlice:c,toSlice:m,fromShared:!c&&Bt(a,s.sharedRoots),toShared:!m&&Bt(o,s.sharedRoots),crossSliceAllowed:Rr(s.allowedCrossSlice,c,m)});if(h.denied)return{rule:s,peerIsolationReason:h.reason,fromSlice:c,toSlice:m};continue}if(t!==n)return{rule:s}}}l(xe,"findDeniedEdgeDecision");var ut={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},ft=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function pt(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}l(pt,"resolveIntentLayer");function Xt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Xt,"looksLikeArkIntent");function gt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Xt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ut.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ut.PUBLISH_MISSING_SOURCE}),t}l(gt,"classifyPublishFacts");var Zt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",kr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var Jt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ba={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Zt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Zt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...kr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Jt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Jt}}}};function we(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}l(we,"emptyEffectiveArkRules");function Qt(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}l(Qt,"structureFreezeTarget");var br=["no-anemic-model"],rn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],Ca=new RegExp(`\\b(${rn.join("|")})\\b`),sn="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",Oa=new RegExp(`\\bthis\\.${sn}\\.push\\s*\\(`),xa=new RegExp(`^this\\.${sn}\\s*=\\s*\\[\\s*\\]`);var vr="truncatedUntil";function Er(){return`${rn.join(", ")}, or events-array .push(`}l(Er,"expectedDomainInvariantWordsPhrase");function mt(e){let t=Object.getOwnPropertyDescriptor(e,vr)?.value;return typeof t=="number"?t:void 0}l(mt,"shapeTruncatedUntil");function Ir(e){let t=mt(e);return t==null?"":` shape analysed until character ${t}`}l(Ir,"shapeTruncationSuffix");function en(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(en,"escapeGlobLiteral");function Sr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=en(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=en(s)}return new RegExp(`^${n}$`)}l(Sr,"globToRegExp");function be(e,t){return!t||t.length===0?!0:t.some(n=>Sr(n).test(e))}l(be,"matchesAppliesTo");function Cr(e){return br.includes(e)}l(Cr,"isTier2");function an(e){return e.mode==="enforced"&&!Cr(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}l(an,"severityFor");function le(e,t,n,r=1){let{severity:s,failsStrict:a}=an(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}l(le,"baseViolation");function Be(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}l(Be,"isInRuleLayer");function qe(e,t,n){return t.filter(r=>!(!r.exported||!be(r.file,e.appliesTo)||!Be(r.file,e,n)))}l(qe,"shapesForRule");function Or(e,t,n){let r=[];for(let s of qe(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(le(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}l(Or,"evaluateAggregatePrivateState");function xr(e,t,n){let r=[];for(let s of qe(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(le(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}l(xr,"evaluateAlwaysValidFactory");function wr(e,t,n){let r=[],s=Er();for(let a of qe(e,t,n)){let o=Ir(a);mt(a)!=null&&r.push(le(e,a.file,`Exported class ${a.className} shape analysed until character ${mt(a)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of a.mutatingMethods)d.referencesGuardOrPublish||r.push(le(e,a.file,`Mutating method ${a.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${o}`))}return r}l(wr,"evaluateDomainEventOnMutation");function $r(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(le(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}l($r,"evaluateOrchestrationOnly");function _r(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(le(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}l(_r,"evaluateThinAdapter");function Fr(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&Be(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(le(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}l(Fr,"evaluateWritesViaAggregate");function Tr(e,t,n){let r=[];for(let s of qe(e,t,n))if(s.dataOnly===!0){let a=le(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}l(Tr,"evaluateNoAnemicModel");function on(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...Or(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...xr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...wr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...$r(n,e));break;case"thin-adapter":t.push(..._r(n,e));break;case"writes-via-aggregate":t.push(...Fr(n,e));break;case"no-anemic-model":t.push(...Tr(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}l(on,"evaluateArkRuleSensors");function ln(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(c=>be(c,s.appliesTo)))continue;let{severity:o,failsStrict:d}=an(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>be(d,s.appliesTo)))continue;let o=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o?"error":"warning",sensor:"invariant-coverage",failsStrict:o})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}l(ln,"collectEmptyAppliesToFindings");var tn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,nn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,Nr=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function Lr(e){return e==="PersistenceAdapters"}l(Lr,"isPersistenceDriverLayer");function Pr(e,t){if(tn.test(e)||nn.test(e))return!0;if(!t)return!1;for(let n of t){if(Lr(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(tn.test(s)||nn.test(s))return!0}return!1}l(Pr,"sourceImportsPersistenceDriver");var Dr=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,Mr=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,Hr=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,Kr=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function Ur(e,t,n){if(!t)return null;let r=Pr(t,n),s=r&&Nr.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let a=t.match(new RegExp(Hr.source,"g"))??[],o=t.match(new RegExp(Kr.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,c=(t.match(/\bswitch\s*\(/g)??[]).length,m=a.length>=2||a.length>=1&&o.length>=2||o.length>=3&&d+c>=6,h=Dr.test(t)||Mr.test(t),R=a.length>=1||o.length>=2,p=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),f=r&&R||h&&R||r&&p&&(d>=4||a.length>=1)||h&&r;return!m&&!f&&!s?null:{...m?{orchestrationHeavy:!0}:{},...f?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}l(Ur,"deriveArkRuleFileHints");function cn(e,t){let n={};for(let[r,s]of Object.entries(e)){let a=r.replace(/\\/g,"/"),o=Ur(r,s,t?.[a]);o&&(n[a]=o)}return n}l(cn,"buildArkRuleFileHints");function dn(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}l(dn,"formatCoverageDiscards");function jr(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}l(jr,"isUnderCoverageRoot");function Vr(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}l(Vr,"titleMatchesInvariant");function Gr(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}l(Gr,"symbolPresent");function un(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,a=e.coverageStats,o=dn(a),d=dn(a,!0),c=a?`coverage file budget exhausted: ${a.filesLoaded} files loaded at the ${a.maxFiles}-file cap, ${a.testFilesRetained} tests retained, ${a.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof a.filesRead=="number"?`; ${a.filesRead} were read`:""})`:"coverage file budget exhausted",m=(e.coverageRoots??[]).filter(u=>typeof u=="string"&&u.length>0),h=m.length>0,R=m.join(", "),p=[],f=[];for(let u of t){let y=[],A=u.coverage?.test!==!1,E=u.coverage?.symbol,v,x;if(!r&&A){let $;for(let ee of n){let ue=e.fileContents[ee];if(!(!ue||!Vr(ue,u.id))){if(!h||jr(ee,m)){v=ee,x=h?!1:void 0;break}$??=ee}}v===void 0&&$!==void 0&&(v=$,x=!0),v!==void 0&&y.push("test-title")}E&&Gr(e.fileContents,E)&&y.push("symbol");let q=(u.coverage?.test===!0||!!E||u.coverage===void 0)&&y.length>0||u.coverage?.test===!1&&!E?!0:y.length>0,k=r&&A&&y.length===0;if(p.push({invariantId:u.id,layer:u.provenance.layer,sourceFile:u.provenance.sourceFile,mode:u.mode,covered:q&&!k,evidence:y,partial:k,description:u.description,...v!==void 0?{testEvidenceFile:v}:{},...x!==void 0?{outsideDeclaredRoots:x}:{}}),x===!0&&v!==void 0&&f.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${u.id} is covered only by ${v}, which is outside the declared coverage roots (${R}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:v,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:"warning",failsStrict:!1}),!q||k){let $=u.mode==="enforced"&&!k,ee=r||n.length===0?"never-had-tests":"tests-disappeared";f.push({ruleId:"INVARIANT_UNCOVERED",message:(k?s?`Invariant ${u.id} coverage cannot be proven (${c}); reporting partial, not covered.`:`Invariant ${u.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:ee==="tests-disappeared"?`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(k&&s?d:o),file:u.provenance.sourceFile,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:$?"error":"warning",failsStrict:$,kind:ee})}}return{coverage:p,violations:f,partial:p.some(u=>u.partial)}}l(un,"evaluateInvariantCoverage");function fn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}l(fn,"canPromoteInvariant");function zr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}l(zr,"normalizeExtraMergeTeethClassification");function We(e){let t=zr(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}l(We,"extraMergeTeethAllowed");function pn(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}l(pn,"classifyResolvedLayerCoverage");var Br=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var La=new Set(Br);function gn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(gn,"isArkRunKernelModuleSpecifier");var qr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],yt=new Set(qr);function mn(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(yt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(yt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:yt.has(e.slice(0,r))}l(mn,"isArkRunTransportBypassSpecifier");var Wr=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Yr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Xr=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Zr(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Wr.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Yr.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Xr.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}l(Zr,"classifyLayerImportKind");function Jr(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Zr(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(Jr,"layerImportNextAction");function Qr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(Qr,"arkRunCallSiteName");function es(e){let t=Qr(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(es,"arkRunNextAction");function ce(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Jr(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return es(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change the choice with proposeRelease then apply. release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(ce,"deterministicNextAction");var ts=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],qa=new Set(ts);var yn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},ns="ARKRUN_INTERACTION_NAME_INCOMPLETE";function An(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(An,"isDomainRoleLayer");function rs(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(rs,"compareFindings");function oe(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:yn[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:yn[t],fromLayer:a?.fromLayer,target:a?.target})}}l(oe,"finding");function ss(e,t){let n=[],r=[],s=[],a=[];for(let o of e)o.file===t&&(n.push(...o.uses),r.push(...o.reactsTo),s.push(...o.raises),a.push(...o.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}l(ss,"bagForFile");function hn(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(hn,"emitKinds");function Rn(e){return e==="subscribe"||e==="register-handler"}l(Rn,"handleKinds");function as(e){return e==="resolve"||e==="resolve-singleton"}l(as,"dependKinds");function os(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(oe(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let o of t){let d=a.get(o.matchedRoot)??[];d.push(o),a.set(o.matchedRoot,d)}for(let o of s){let d=[...a.get(o)??[]].sort((m,h)=>m.file.localeCompare(h.file));if(d.length===0){r.push(oe(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},n));continue}if(d.some(m=>m.hasKernelFactory))continue;let c=d[0];r.push(oe(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},n))}return r}l(os,"evaluateMissingRoot");function is(e,t,n,r,s){let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),o=[];for(let d of n){let c=d.specifier;if(!c||!gn(c))continue;let m=r(d.from);m&&An(m,a.get(m)??[])&&o.push(oe(e,"arkrun-kernel-in-domain",d.from,d.line,`${m} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:m,target:c},s))}return o}l(is,"evaluateKernelInDomain");function ls(e,t,n,r,s,a){let o=new Set(e.managedLayers);if(o.size===0)return[];let d=new Map(t.map(h=>[h.name,h.intentPrefixes??[]])),c=new Set(r.filter(h=>h.hasKernelFactory).map(h=>h.file)),m=[];for(let h of n){if(c.has(h.file))continue;let R=h.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let p=s(h.file);!p||!o.has(p)||An(p,d.get(p)??[])||m.push(oe(e,"arkrun-direct-new",h.file,h.line,`${p} must not construct ${h.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:p,target:h.typeName},a))}return m}l(ls,"evaluateDirectNew");function cs(e,t,n,r,s){let a=[],o=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:o};let d=new Set(e.managedLayers);if(d.size===0)return{findings:a,completenessReasons:o};for(let c of t){if(!hn(c.kind)&&!Rn(c.kind)&&!as(c.kind))continue;let m=r(c.file);if(!m||!d.has(m))continue;if(!c.nameLiteral){e.mode==="enforced"&&o.push({code:ns,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let h=ss(n,c.file);if(hn(c.kind)){if(h.raises.has(c.nameLiteral)||h.sends.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:m,target:c.nameLiteral},s));continue}if(Rn(c.kind)){if(h.reactsTo.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:m,target:c.nameLiteral},s));continue}h.uses.has(c.nameLiteral)||a.push(oe(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:m,target:c.nameLiteral},s))}return{findings:a,completenessReasons:o}}l(cs,"evaluateUndeclared");function ds(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let o of t){if(o.typeOnly)continue;let d=o.specifier;if(!d||!mn(d))continue;let c=n(o.from);!c||!s.has(c)||a.push(oe(e,"arkrun-transport-bypass",o.from,o.line,`${c} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:c,target:d},r))}return a}l(ds,"evaluateTransportBypass");function kn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=We(e.classification),r=cs(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...os(t,e.compositionRootHits,n),...is(t,e.layers,e.dependencies,e.layerForFile,n),...ls(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...ds(t,e.dependencies,e.layerForFile,n)].sort(rs),a=[...r.completenessReasons].sort((o,d)=>{let c=`${o.code}\0${o.file??""}\0${o.message}`,m=`${d.code}\0${d.file??""}\0${d.message}`;return c<m?-1:c>m?1:0});return{findings:s,completenessReasons:a}}l(kn,"evaluateArkRunSensors");function bn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(bn,"isArkOrderModuleSpecifier");var vn=new Map;function En(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(En,"escapeAppliesToLiteral");function us(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}l(us,"normalizeAppliesToGlob");function fs(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}l(fs,"appliesToBracesBalanced");function ps(e){let t=vn.get(e);if(t)return t;let n=us(e),r=fs(n),s="",a=0;for(let d=0;d<n.length;d+=1){let c=n[d];c==="\\"&&d+1<n.length?(s+=En(n[d+1]),d+=1):c==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&r?(s+="(?:",a+=1):c==="}"&&r&&a>0?(s+=")",a-=1):c===","&&r&&a>0?s+="|":s+=En(c)}let o=new RegExp(`^${s}$`);return vn.set(e,o),o}l(ps,"globToRegExp");var In={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function gs(e,t){return!t||t.length===0?!0:t.some(n=>ps(n).test(e))}l(gs,"matchesArkOrderAppliesTo");function ms(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(ms,"isDomainRoleLayer");function de(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:In[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:In[t],fromLayer:a?.fromLayer,target:a?.target})}}l(de,"finding");function Sn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=We(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(de(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let c=new Map;for(let m of e.planeRootHits){let h=c.get(m.matchedRoot)??[];h.push(m),c.set(m.matchedRoot,h)}for(let m of s){let h=c.get(m)??[];if(h.length===0){r.push(de(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(m)} matched no governed files and has no createOrderPlane factory.`,{target:m},n));continue}h.some(R=>R.hasPlaneFactory)||r.push(de(t,"arkorder-missing-plane",h[0].file,1,`ArkOrder plane root ${JSON.stringify(m)} has no createOrderPlane factory.`,{target:m},n))}}let a=new Map(e.layers.map(c=>[c.name,c.intentPrefixes??[]]));for(let c of e.dependencies){let m=c.specifier;if(!m||!bn(m))continue;let h=e.layerForFile(c.from);h&&ms(h,a.get(h)??[])&&r.push(de(t,"arkorder-kernel-in-domain",c.from,c.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:h,target:m},n))}for(let c of e.genericUpdates)r.push(de(t,"arkorder-generic-update",c.file,c.line,`Generic ${c.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:c.method},n));let o=t.xiKeys??[];for(let c of e.releaseKeyCounts??[])c.keyCount<=t.maxXiKeys||r.push(de(t,"arkorder-too-many-params",c.file,c.line,`release() freezes ${c.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(c.keyCount)},n));for(let c of e.ingestWritesXi??[])r.push(de(t,"arkorder-ingest-writes-xi",c.file,c.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let c of o.length===0?[]:e.xiFieldWrites??[]){let m=e.layerForFile(c.file);!m||!d.has(m)||gs(c.file,t.appliesTo)&&r.push(de(t,"arkorder-xi-field-write",c.file,c.line,`This file writes ${JSON.stringify(c.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:m,target:c.key},n))}return r.sort((c,m)=>c.file.localeCompare(m.file)||c.ruleId.localeCompare(m.ruleId)||c.line-m.line),{findings:r,completenessReasons:[]}}l(Sn,"evaluateArkOrderSensors");function B(e,t,n={}){return{ruleId:e,message:t,...n}}l(B,"configWarning");function ht(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(f=>typeof f!="string"))&&a.push(B("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(B("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let f of["maxTsSuppressions","maxAnyCasts"]){let u=t.safety[f];u!==void 0&&(!Number.isInteger(u)||u<0)&&a.push(B("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${f} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],c=new Set([...o.map(f=>f.name).filter(Boolean),...d.map(f=>f.name).filter(f=>!!f)]);o.length===0&&a.push(B("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let m=new Set,h=new Set;for(let f of o){if(!f.name){a.push(B("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}m.has(f.name)&&h.add(f.name),m.add(f.name),f.forbiddenGlobals!==void 0&&(!Array.isArray(f.forbiddenGlobals)||f.forbiddenGlobals.some(y=>typeof y!="string"))&&a.push(B("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${f.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:f.name}));let u=Array.isArray(f.patterns)?f.patterns:[];if(u.length===0){a.push(B("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${f.name}" has no file patterns and will never classify files.`,{layer:f.name}));continue}for(let y of u){let A;try{A=ae(y)}catch(v){a.push(B("CONFIG_INVALID_LAYER_PATTERN",`Layer "${f.name}" has an invalid pattern "${y}": ${v instanceof Error?v.message:String(v)}`,{layer:f.name,pattern:y}));continue}let E=f.optional===!0||f.reserved===!0||f.allowEmpty===!0;!r.some(v=>A.test(v))&&!E&&a.push(B("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${f.name}" pattern "${y}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:f.name,pattern:y,failsStrict:!1,reserved:!1}))}}for(let f of h)a.push(B("CONFIG_DUPLICATE_LAYER",`Layer "${f}" is configured more than once.`,{layer:f}));if(c.size>0)for(let f of n??[])f.from&&!c.has(f.from)&&a.push(B("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${f.from}".`,{fromLayer:f.from,toLayer:f.to})),f.to&&!c.has(f.to)&&a.push(B("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${f.to}".`,{fromLayer:f.from,toLayer:f.to}));let R=new Set;if(o.length>1)for(let f of r){let u=-1,y=[];for(let A of o)for(let E of A.patterns??[]){if(!ae(E).test(f))continue;let v=dt(E,f);v>u?(u=v,y=[A.name]):v===u&&!y.includes(A.name)&&y.push(A.name)}y.length>1&&R.add([...y].sort().join(" + "))}R.size>0&&a.push(B("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let p=r.filter(f=>!Z(f,o));return p.length>0&&a.push(B("CONFIG_UNCLASSIFIED_FILES",`${p.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:p.length,samples:p.slice(0,5)})),a}l(ht,"collectAnalysisConfigWarnings");function Cn(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],o=[],d=l(c=>{n.set(c,t),r.set(c,t),t+=1,a.push(c),s.add(c);for(let R of[...e.get(c)??[]].sort())e.has(R)&&(n.has(R)?s.has(R)&&r.set(c,Math.min(r.get(c)??0,n.get(R)??0)):(d(R),r.set(c,Math.min(r.get(c)??0,r.get(R)??0))));if(r.get(c)!==n.get(c))return;let m=[],h;do{if(h=a.pop(),h===void 0)break;s.delete(h),m.push(h)}while(h!==c);m.length>1&&o.push(m.sort())},"connect");for(let c of[...e.keys()].sort())n.has(c)||d(c);return o.sort((c,m)=>c[0]<m[0]?-1:c[0]>m[0]?1:0).map(c=>({ruleId:"CIRCULAR_DEPENDENCY",file:c[0],line:1,target:c.join(" \u2192 "),message:`Circular dependency among ${c.length} files: ${c.join(" \u2192 ")} \u2192 ${c[0]}.`,cycleKind:"value"}))}l(Cn,"detectArchitectureCycles");function $e(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let o=xe(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let d=o.rule,c=!!d.peerIsolation,m=!c&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=c?ze(o.peerIsolationReason??"cross-slice",{fromPath:a.from,toPath:a.to,fromSlice:o.fromSlice,toSlice:o.toSlice}):void 0,R=d.message?h?`${d.message} (${h})`:d.message:h?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}): ${h}`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!c&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...c?{peerIsolation:!0}:{},message:m?`${R} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:R,...m?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=Cn(r);s==="soft"||s==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}l($e,"evaluateArchitectureGraph");function On(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:Qt({sensor:e.sensor,code:e.code})}:{},...r?{freezable:!1}:{},nextAction:t}}l(On,"toArkRuleEngineViolation");function ys(e,t){return t.some(n=>{try{return ae(n).test(e)}catch{return!1}})}l(ys,"matchesAny");function hs(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],o=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:A})=>({file:y,line:A})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:A})=>({file:y,line:A})),c=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!ys(y.file,a)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),m=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),h=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),R={tsSuppressions:o,anyCasts:d,nonLiteralDynamicImports:c,inMemoryProductionStores:m,disabledPeerIsolationRules:h,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},p=[],f=c.filter(y=>y.kind==="import");if(f.length>0){let y=f[0];p.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${f.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let u=c.filter(y=>y.kind==="require");if(u.length>0){let y=u[0];p.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${u.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(o.length>r){let y=o[0];p.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${o.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];p.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(m.length>0){let y=m[0];p.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${m.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return h.length>0&&p.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${h.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:p}}l(hs,"evaluateSafety");function Rs(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}l(Rs,"ambientForbiddenGlobal");function xn(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return pt(e,n.length>0?n:ft.map(r=>({name:r.layer,prefixes:r.prefixes})))}l(xn,"intentLayer");function As(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let o=n.get(a.file);!o||!Rs(a.symbol,s.get(o)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,message:`${o} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let o=n.get(a.file);if(!o)continue;let d=s.get(o),c=d?.forbiddenGlobals??[],m=a.source==="import-based"?t.dependencies.find(h=>h.from===a.file&&h.line===a.line&&h.specifier===a.symbol&&!h.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&ct(a.symbol,c))){if(a.source==="import-based"){let h=Ce(a.symbol,c);if(h){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,...m?{edgeKind:m}:{},message:`${o} must not use module "${a.symbol}" because it is the import form of forbidden global "${h}".`});continue}}ke(d).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:o,target:a.symbol,capability:a.capability,...m?{edgeKind:m}:{},message:a.source==="import-based"?`${o} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${o} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let o=n.get(a.file);if(!o)continue;for(let c of gt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:c.ruleId,file:a.file,line:a.line,...c.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:o}:{},message:c.message});if(!a.sourceIntent)continue;let d=xn(a.sourceIntent,e.contract);!d||d===o||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${o}.`})}for(let a of t.intentReferences){let o=n.get(a.file);if(!o)continue;let d=xn(a.intent,e.contract);if(!d)continue;let c=xe(e.contract.config.rules,o,d,{fromPath:a.file,layers:e.contract.config.layers});if(!c)continue;let m=c.rule.peerIsolation?ze(c.peerIsolationReason??"cross-slice",{fromPath:a.file,fromSlice:c.fromSlice,toSlice:c.toSlice}):void 0,h=`${o} must not reference ${d} intent ${a.intent}.`,R=m&&c.peerIsolationReason!=="cross-slice"?`${h} ${m}`:c.rule.message?m?`${c.rule.message} (${m})`:c.rule.message:h;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.intent,...c.rule.peerIsolation?{peerIsolation:!0}:{},message:R})}return r}l(As,"contentViolations");function Rt(e){let{facts:t}=e,n=Ke(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((i,O)=>{let F=`${i.code}\0${i.file??""}\0${i.message}`,X=`${O.code}\0${O.file??""}\0${O.message}`;return F<X?-1:F>X?1:0}),o=t.files.map(i=>({...i,layer:Z(i.path,e.contract.config.layers)??null})),d=new Map(o.map(i=>[i.path,i.layer])),c=t.dependencies.map(i=>{let O=i.target?d.get(i.target)??Z(i.target,e.contract.config.layers):void 0;return{from:i.from,fromLayer:d.get(i.from)??null,...i.resolution==="resolved-project"&&i.target?{to:i.target,...O?{toLayer:O}:{}}:{},line:i.line,kind:i.kind,typeOnly:i.typeOnly,...i.targetTypeOnlyExports?{targetTypeOnlyExports:i.targetTypeOnlyExports}:{},...i.sourcePureTypeModule?{sourcePureTypeModule:i.sourcePureTypeModule}:{},...i.namedBindingsTypeOnly?{namedBindingsTypeOnly:i.namedBindingsTypeOnly}:{},...i.portProofEligible?{portProofEligible:i.portProofEligible}:{}}}),m=ht({config:e.contract.config,rules:e.contract.config.rules,files:o.map(i=>i.path)}),h=hs(e,t),R=e.contract.arkRules??we(),p=o.map(i=>i.path),u={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?cn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=[...on({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:p,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),fileHints:u}),...ln(R,p)],A=y.filter(i=>i.failsStrict).map(i=>On(i,i.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${i.arkruleId} in ${i.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:`Fix the structure or invariant for ${i.arkruleId} (declared in ${i.arkruleSource}), then preflight again.`)),E=y.filter(i=>!i.failsStrict).map(i=>({...On(i,i.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${i.arkruleId} in ${i.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Review ArkRule ${i.arkruleId} in ${i.arkruleSource} (advisory).`),failsStrict:!1})),x=(R.invariants?.length??0)>0?un({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},H=x.violations.filter(i=>i.failsStrict).map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,arkruleId:i.arkruleId,arkruleSource:i.arkruleSource,nextAction:`Add a test title or declared symbol covering ${i.arkruleId} (declared in ${i.arkruleSource}), then preflight again.`})),q=x.violations.filter(i=>!i.failsStrict).map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,arkruleId:i.arkruleId,arkruleSource:i.arkruleSource,failsStrict:!1,nextAction:i.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${i.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${i.arkruleId} in ${i.arkruleSource} (advisory / partial).`})),k=pn(o),$=kn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),classification:k}),ee=e.contract.config.arkRun?.mode,ue=$.findings.filter(()=>ee==="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:i.failsStrict,...i.severity?{severity:i.severity}:{}})),Nt=$.findings.filter(()=>ee!=="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:!1})),he=Sn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:l(i=>d.get(i)??Z(i,e.contract.config.layers),"layerForFile"),classification:k}),tt=e.contract.config.arkOrder?.mode,De=he.findings.filter(()=>tt==="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:i.failsStrict,...i.severity?{severity:i.severity}:{}})),Lt=he.findings.filter(()=>tt!=="enforced").map(i=>({ruleId:i.ruleId,file:i.file,line:i.line,message:i.message,fromLayer:i.fromLayer,target:i.target,nextAction:i.nextAction,sensor:i.sensor,failsStrict:!1})),Ie=[...x.partial&&x.coverage.some(i=>i.mode==="enforced"&&i.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...$.completenessReasons,...he.completenessReasons],fe=$e({config:e.contract.config,rules:e.contract.config.rules,files:o.filter(i=>i.layer).map(i=>i.path),contentViolations:[...As(e,t,d),...A,...H,...ue,...De],edges:c,warnings:[...m,...h.warnings,...E,...q,...Nt,...Lt],safety:h.report}),Me=s==="complete"&&Ie.length>0?"partial":s,rt=Me==="complete"?a:[...a,...Ie].sort((i,O)=>{let F=`${i.code}\0${i.file??""}\0${i.message}`,X=`${O.code}\0${O.file??""}\0${O.message}`;return F<X?-1:F>X?1:0}),b=fe.violations.filter(i=>i.failsStrict!==!1),I=Me==="complete"&&b.length===0,g=I&&fe.warnings.every(i=>i.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:Me,completenessReasons:rt,valid:I,strictValid:g,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:h.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:o,layers:e.contract.config.layers.map(i=>i.name),edges:c,capabilityUses:t.capabilityUses,violations:fe.violations,warnings:fe.warnings}}}l(Rt,"analyzeCanonicalResolvedProject");function Ye(e){return Rt({contract:e.contract,facts:pe(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}l(Ye,"analyzeResolvedProject");var At="1.0";var Xe=class extends Error{static{l(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
 `)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function kt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(kt,"isObject");function bt(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}l(bt,"unknownFields");function ge(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}l(ge,"requiredString");function ks(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}l(ks,"canonicalProjectPath");function bs(e,t,n="architecture change map"){let r=[];if(!kt(e))throw new Xe(n,[{path:"$",message:"must be an object"}]);bt(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=ge(e,"$schema","$",r),a=ge(e,"schemaVersion","$",r);a&&a!==At&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${At}`});let o=new Set(t.layers.map(u=>u.name)),d=[],c=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((u,y)=>{let A=`$.files[${y}]`;if(!kt(u)){r.push({path:A,message:"must be an object"});return}bt(u,["path","operation","layer"],A,r);let E=ge(u,"path",A,r),v=ge(u,"operation",A,r),x=ge(u,"layer",A,r),H=E?ks(E):void 0;E&&!H&&r.push({path:`${A}.path`,message:"must be a canonical project-relative path"}),v&&!["create","update","delete"].includes(v)&&r.push({path:`${A}.operation`,message:"must be create, update, or delete"}),x&&!o.has(x)&&r.push({path:`${A}.layer`,message:`references unknown layer ${JSON.stringify(x)}`}),H&&c.has(H)&&r.push({path:`${A}.path`,message:`duplicates planned path ${H}`}),H&&c.add(H);let q=H?Z(H,t.layers):void 0;H&&x&&o.has(x)&&q!==x&&r.push({path:`${A}.layer`,message:q?`${H} resolves to ${q}, not ${x}`:`${H} is not assigned to an architecture layer`}),H&&v&&["create","update","delete"].includes(v)&&x&&d.push({path:H,operation:v,layer:x})});let m=[],h=new Map(d.map(u=>[u.path,u.operation])),R=new Set,p=e.dependencies??[];if(Array.isArray(p)?p.forEach((u,y)=>{let A=`$.dependencies[${y}]`;if(!kt(u)){r.push({path:A,message:"must be an object"});return}bt(u,["from","to"],A,r);let E=ge(u,"from",A,r),v=ge(u,"to",A,r);E&&!c.has(E)&&r.push({path:`${A}.from`,message:`must reference a planned file path: ${E}`}),v&&!c.has(v)&&r.push({path:`${A}.to`,message:`must reference a planned file path: ${v}`}),E&&h.get(E)==="delete"&&r.push({path:`${A}.from`,message:`cannot depend from deleted file ${E}`}),v&&h.get(v)==="delete"&&r.push({path:`${A}.to`,message:`cannot depend on deleted file ${v}`}),E&&v&&E===v&&r.push({path:A,message:"must not declare a self dependency"});let x=E&&v?`${E}\0${v}`:void 0;x&&R.has(x)&&r.push({path:A,message:`duplicates dependency ${E} -> ${v}`}),x&&R.add(x),E&&v&&m.push({from:E,to:v})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new Xe(n,r);let f={$schema:s,schemaVersion:At,files:d.sort((u,y)=>u.path.localeCompare(y.path)),dependencies:m.sort((u,y)=>u.from.localeCompare(y.from)||u.to.localeCompare(y.to))};return{map:f,hash:U(T(f))}}l(bs,"loadArchitectureChangeMap");function W(e){return`${e.from}->${e.to}`}l(W,"dependencyKey");function _e(e,t,n,r="dependency"){return{id:`${e}:${r}:${W(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${W(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${W(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${W(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${W(t)} from the candidate, then preflight again.`}:{}}}l(_e,"dependencyFinding");function Fe(e){let t=[],n=new Map(e.changeMap.map.files.map(p=>[p.path,p])),r=new Map(e.changes.map(p=>[p.path,p])),s=new Map(e.changeMap.map.dependencies.map(p=>[W(p),p])),a=new Map(e.baseDependencies.map(p=>[W(p),p])),o=new Map(e.candidateDependencies.map(p=>[W(p),p]));for(let p of[...n.values()].sort((f,u)=>f.path.localeCompare(u.path))){let f=r.get(p.path);f?f.operation!==p.operation?t.push({id:`contradictory:file:${p.path}`,classification:"contradictory",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:f.operation,message:`${p.path} was planned as ${p.operation} but the actual operation is ${f.operation}.`,nextAction:`Change ${p.path} to the planned ${p.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${p.path}`,classification:"satisfied",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:f.operation,message:`${p.path} matches the planned ${p.operation} operation.`}):t.push({id:`missing:file:${p.path}`,classification:"missing",subject:"file",path:p.path,expectedOperation:p.operation,message:`${p.path} was planned as ${p.operation} but is absent from the actual change.`,nextAction:`${p.operation[0].toUpperCase()}${p.operation.slice(1)} ${p.path} in the complete change set, then preflight again.`})}for(let p of[...r.values()].sort((f,u)=>f.path.localeCompare(u.path)))n.has(p.path)||t.push({id:`unplanned:file:${p.path}`,classification:"unplanned",subject:"file",path:p.path,actualOperation:p.operation,message:`${p.path} has an unplanned ${p.operation} operation.`,nextAction:`Remove ${p.path} from the change set, then preflight again.`});let d=new Set;for(let p of[...s.values()].sort((f,u)=>W(f).localeCompare(W(u)))){if(o.has(W(p))){t.push(_e("satisfied",p,`${p.from} -> ${p.to} exists in the candidate architecture.`));continue}let f={from:p.to,to:p.from};o.has(W(f))?(d.add(W(f)),t.push(_e("contradictory",p,`${p.from} -> ${p.to} was planned, but the candidate contains the reverse edge.`))):t.push(_e("missing",p,`${p.from} -> ${p.to} is absent from the candidate architecture.`))}let c=new Set([...n.keys(),...r.keys()]);for(let[p,f]of[...o].sort(([u],[y])=>u.localeCompare(y)))a.has(p)||s.has(p)||d.has(p)||!c.has(f.from)&&!c.has(f.to)||t.push({..._e("unplanned",f,`${f.from} -> ${f.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let m=new Set(e.changeMap.map.files.filter(p=>p.operation==="delete").map(p=>p.path));for(let[p,f]of[...a].sort(([u],[y])=>u.localeCompare(y)))o.has(p)||m.has(f.from)||m.has(f.to)||!c.has(f.from)&&!c.has(f.to)||t.push({..._e("unplanned",f,`${f.from} -> ${f.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let h={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((p,f)=>h[p.classification]-h[f.classification]||(p.subject===f.subject?0:p.subject==="file"?-1:1)||p.id.localeCompare(f.id));let R={satisfied:t.filter(p=>p.classification==="satisfied").length,missing:t.filter(p=>p.classification==="missing").length,contradictory:t.filter(p=>p.classification==="contradictory").length,unplanned:t.filter(p=>p.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:R.missing===0&&R.contradictory===0&&R.unplanned===0,behavioralCompletion:"not-evaluated",summary:R,findings:t}}l(Fe,"analyzeArchitectureConvergence");function ve(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}l(ve,"literalText");function _n(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}l(_n,"lineOf");function wn(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}l(wn,"isTypeOnlyReference");function Fn(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}l(Fn,"singleFileChecker");function vt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}l(vt,"symbolAt");function Et(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=s?t.getShorthandAssignmentValueSymbol(r.parent):vt(t,r)}catch{a=void 0}return!!a?.declarations?.some(o=>o.getSourceFile().fileName===n.fileName)}l(Et,"localDeclaration");function It(e,t){let n,r=[],s=l((o,d,c,m=!1)=>r.push({specifier:c,kind:d,line:_n(t,o),typeOnly:m,unresolved:c===void 0,node:o}),"add"),a=l(o=>{if(e.isImportDeclaration(o))s(o,"import",ve(e,o.moduleSpecifier),wn(e,o));else if(e.isExportDeclaration(o)&&o.moduleSpecifier)s(o,"export",ve(e,o.moduleSpecifier),wn(e,o));else if(e.isImportEqualsDeclaration(o)&&e.isExternalModuleReference(o.moduleReference))s(o,"require",ve(e,o.moduleReference.expression),o.isTypeOnly===!0);else if(e.isCallExpression(o)){let d=o.expression.kind===e.SyntaxKind.ImportKeyword,m=e.isIdentifier(o.expression)&&o.expression.text==="require"&&!Et(e,n??(n=Fn(e,t)),t,o.expression);(d||m)&&s(o,m?"require":"dynamic-import",ve(e,o.arguments[0]))}e.forEachChild(o,a)},"visit");return a(t),r}l(It,"extractSemanticDependencies");function vs(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=ve(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}l(vs,"staticAccessPath");function Es(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}l(Es,"runtimeIdentifierReference");function $n(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}l($n,"bestForbiddenMatch");function St(e,t,n){if(n.length===0)return[];let r=new Set(n),s=Fn(e,t),a=new Map,o=new Set;for(let p of t.statements)if(e.isVariableStatement(p))for(let f of p.declarationList.declarations)e.isIdentifier(f.name)&&o.add(f.name.text);let d=l(p=>{let f=vs(e,p);if(!f)return;let u=vt(s,f.root),y=u?a.get(u):void 0;return y?[...y,...f.segments.slice(1)]:Et(e,s,t,f.root)||o.has(f.root.text)?void 0:f.segments},"resolvePath");for(let p of t.statements)if(e.isVariableStatement(p))for(let f of p.declarationList.declarations){if(!f.initializer||!e.isIdentifier(f.name))continue;let u=d(f.initializer),y=vt(s,f.name);!u||!y||a.set(y,u)}let c=[],m=new Set,h=l((p,f)=>{let u=_n(t,f),y=`${p}:${f.getStart(t)}`;m.has(y)||(m.add(y),c.push({name:p,line:u,node:f}))},"flag"),R=l(p=>{let f=p.parent&&(e.isPropertyAccessExpression(p.parent)||e.isElementAccessExpression(p.parent))&&p.parent.expression===p;if((e.isPropertyAccessExpression(p)||e.isElementAccessExpression(p))&&!f){let u=d(p),y=u?$n(r,u):void 0;y&&h(y,p)}else e.isIdentifier(p)&&r.has(p.text)&&Es(e,p)&&!Et(e,s,t,p)&&h(p.text,p);if(e.isVariableDeclaration(p)&&e.isObjectBindingPattern(p.name)&&p.initializer){let u=d(p.initializer);if(u)for(let y of p.name.elements){if(!e.isIdentifier(y.name))continue;let A=y.propertyName?ve(e,y.propertyName)??y.propertyName.text:y.name.text,E=$n(r,[...u,A]);E&&h(E,p.initializer)}}e.forEachChild(p,R)},"visit");return R(t),c}l(St,"collectForbiddenCapabilityUses");function Is(e,t,n){let r=[];for(let s of n?.dependencies??It(e,t)){if(s.typeOnly||!s.specifier)continue;let a=Se(s.specifier);a&&r.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??St(e,t,lt)){let a=Oe(s.name);a&&r.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}l(Is,"collectCapabilityUses");var me={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Tn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...me,default:[]},kernelRoots:{...me},managedLayers:{...me,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},Nn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...me,default:[]},managedLayers:{...me,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...me,default:[]},appliesTo:{...me,default:[]}}};function Te(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Te,"isObject");function Ln(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Te(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}l(Ln,"declaredLayerNames");function Pn(e){if(!Te(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}l(Pn,"defaultedArkRun");function Dn(e){if(!Te(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}l(Dn,"defaultedArkOrder");function Mn(e,t){let n=e.arkRun;if(n===void 0||!Te(n))return;let r=Ln(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.kernelRoots??n.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(Mn,"validateArkRunExtra");function Hn(e,t){let n=e.arkOrder;if(n===void 0||!Te(n))return;let r=Ln(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkOrder.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(Hn,"validateArkOrderExtra");var te="1.3",Ct="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Kn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Ss=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function Cs(){let e=[];for(let t of Kn)for(let n of Kn)t===n||Ss.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}l(Cs,"createDefaultRules");var jn=Cs(),Ot=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],J={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Un={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Ct,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Ct,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:te,default:te},name:{type:"string",minLength:1},include:{...J,minItems:1,default:["src"]},exclude:{...J,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:jn,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...J,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...J,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...J,minItems:1},exclude:J,intentPrefixes:J,description:{type:"string",minLength:1},forbiddenGlobals:J,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...J,minItems:1},sharedRoots:{...J,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant.",properties:{testGlobs:{...J,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...J,minItems:1}}},arkRun:Tn,arkOrder:Nn}},ie=class extends Error{static{l(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`

package/bin/lib/architecture-scan.mjs

@@ -126,12 +126,18 @@ export function resolveArchitectureSnapshot({
     { ...config, rules: rules ?? config.rules },
     manifest
   );
+  const scoped = fileLocalScope(root, files);
   const facts = resolveCandidateFacts({
     root,
     config: effectiveConfig,
     ts,
     ...(args?.tsconfig ? { tsconfig: args.tsconfig } : {}),
     observeInput,
+    ...(scoped
+      ? { scopeFiles: [...scoped] }
+      : args?.changed
+        ? { scopeFiles: [] }
+        : {}),
   });
   const arkRulesLoad = loadEffectiveArkRulesFromDisk(root, effectiveConfig, {
     observeInput,
@@ -145,7 +151,6 @@ export function resolveArchitectureSnapshot({
     err.issues = arkRulesLoad.errors;
     throw err;
   }
-  const scoped = fileLocalScope(root, files);
   const loadedContract = loadContract(effectiveConfig, configPath, {
     arkRules: arkRulesLoad.arkRules,
   });
@@ -162,7 +167,8 @@ export function resolveArchitectureSnapshot({
         ...coverageOptionsFromConfig(effectiveConfig),
       })
     : undefined;
-  // File-local structure sensors + hint load honor `files`; graph still uses full facts.
+  // File-local sensors honor the touched set. Facts (and graph) use that set plus
+  // its import closure — not the whole include tree. Unbounded `files` stays full-tree.
   const fileHints = loadHintsForScope(
     root,
     facts,