arkgate 4.8.15 → 4.8.16

package/CHANGELOG.md

@@ -96,6 +96,45 @@ in the immutable pre-2.0 archive linked below.
   Existing configs keep whatever URL they already have. Editor completion
   matches the 4.x line you just installed.
 
+## 4.8.16 — 2026-09-16
+
+**Patch** over **4.8.15**. Daily accumulate of the five ships that landed
+after 4.8.15 published: invariant tests path
+([#255](https://github.com/pedroknigge/arkgate/pull/255)), doctor green
+cites ([#256](https://github.com/pedroknigge/arkgate/pull/256)),
+coverageRoots when enforced
+([#257](https://github.com/pedroknigge/arkgate/pull/257)),
+`start --apply` install honesty
+([#259](https://github.com/pedroknigge/arkgate/pull/259)), and prototype
+shortcuts ([#260](https://github.com/pedroknigge/arkgate/pull/260)).
+**Write. Check. Ship.** **No required config migration.** No
+`schemaVersion` bump. Does not close `K01` / `Z09`. This mother
+`ark.config.json` still does **not** turn `arkOrder` on.
+
+**Status: prepared** (npm `latest` remains **4.8.15** until Actions `publish-npm`
+runs with `tag=v4.8.16` and `dry_run=false`).
+
+### Added
+- Adopted trees with domain invariants must name a real tests path, so
+  coverage cannot certify a test no runner runs
+  ([#255](https://github.com/pedroknigge/arkgate/pull/255)).
+- Doctor green / healthy lines now cite a file, config key, or test — an
+  uncited line cannot look healthy
+  ([#256](https://github.com/pedroknigge/arkgate/pull/256)).
+- When a domain invariant is enforced, `coverage.coverageRoots` is
+  required. Test globs alone are not enough
+  ([#257](https://github.com/pedroknigge/arkgate/pull/257)).
+- Soft residual when SQLite, a JSON-file store, or admin literals stand
+  in for Persistence or Domain
+  ([#260](https://github.com/pedroknigge/arkgate/pull/260)).
+
+### Changed
+- `start --apply` fails closed if the package install fails, and names
+  the exact command to recover
+  ([#259](https://github.com/pedroknigge/arkgate/pull/259)).
+- Pack ceilings remeasured on the IT01 CI pack (run 34848276803).
+  ≥10% headroom. No new product surface.
+
 ## 4.8.15 — 2026-09-13
 
 **Patch** over **4.8.14**. Pre-adoption ship bar: opt-in `--local` /

package/README.md

@@ -39,7 +39,7 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.8.15** is prepared on this tree; npm `latest` remains **4.8.14** until `publish-npm` for `v4.8.15`.
+> **ArkGate 4.8.16** is prepared on this tree; npm `latest` remains **4.8.15** until `publish-npm` for `v4.8.16`.
 > Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
@@ -47,7 +47,7 @@ Works with Cursor, Claude, Codex, and Grok.
 > (`arkgate/order`) stops rewriting a big product choice — like the billing plan —
 > as if it were a seat count. Change those choices through a valve, not a generic update.
 > `@arkgate/runtime` is deprecated.
-> [4.8.15 prepared](CHANGELOG.md) · [4.8.11 published](docs/releases/4.8.11.md) · [4.8.10](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> [4.8.16 prepared](CHANGELOG.md) · [4.8.11 published](docs/releases/4.8.11.md) · [4.8.10](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -69,10 +69,12 @@ Full map: **[docs/README.md](docs/README.md)**
 npm install -D arkgate typescript
 npx arkgate start                 # preview files + commands
 npx arkgate start --apply         # compact config + host router + CI plan
-npx arkgate-check --doctor        # status — one next step
-npx arkgate-check --doctor --all  # full details
+npx --package=arkgate arkgate-check --doctor        # status — one next step
+npx --package=arkgate arkgate-check --doctor --all  # full details
 ```
 
+`arkgate-check` is a command in the `arkgate` package, not its own npm package. After a local install, `npx arkgate-check --doctor` also works.
+
 `start --apply` refuses when projected governed coverage is below 50% or
 shape confidence is weak (below 0.6 with coverage under 80%). That lock is
 deliberate. Lock the shape with `--archetype <id>`, `--preset <name>`, or
@@ -342,7 +344,7 @@ Compact starters leave the extra off. Details: [ArkOrder](docs/arkorder.md).
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Prepared (4.8.15; not published) | [CHANGELOG](CHANGELOG.md) |
+| Prepared (4.8.16; not published) | [CHANGELOG](CHANGELOG.md) |
 | Current published (4.8.11 on npm `latest`) | [docs/releases/4.8.11.md](docs/releases/4.8.11.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.10) | [docs/releases/4.8.10.md](docs/releases/4.8.10.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.9) | [docs/releases/4.8.9.md](docs/releases/4.8.9.md) · [CHANGELOG](CHANGELOG.md) |

package/bin/ark-shared.mjs

@@ -22,6 +22,7 @@ import {
   normalizeArkgateInstallSpec,
   packageInstallArgv,
   installDevHint,
+  arkPackageRecoveryCommand,
 } from './lib/package-manager.mjs';
 
 /**
@@ -674,6 +675,7 @@ export {
   normalizeArkgateInstallSpec,
   packageInstallArgv,
   installDevHint,
+  arkPackageRecoveryCommand,
 };
 
 // FX01–FX02: registry-aware skip lives in upgrade-package-decision (injectable probe).

package/bin/ark.mjs

@@ -22,7 +22,12 @@ import {
 } from './ark-shared.mjs';
 import { pinArkgateDevDependency, FALSE_GREEN_GAP_ID } from './lib/field-install.mjs';
 import { validateHardWriteRequest } from './lib/enforcement-profiles.mjs';
-import { applyStartPreview, planStart, renderStartPreview } from './lib/start-preview.mjs';
+import {
+  applyStartPreview,
+  formatStartPackageInstallFailure,
+  planStart,
+  renderStartPreview,
+} from './lib/start-preview.mjs';
 import { runUpgradeCommand } from './lib/upgrade-command.mjs';
 import { detectActiveAgentHost } from './lib/skill-install.mjs';
 import { loadArkConfigContract } from './lib/config-contract.mjs';
@@ -489,7 +494,8 @@ async function start(args) {
       const skip = shouldSkipArkgateInstall(args.root, cliVersion());
       if (!skip.skip) {
         const [command, commandArgs] = packageInstallArgv(args.root, `^${cliVersion()}`);
-        if (!args.json) console.log(`Installing package: ${command} ${commandArgs.join(' ')}`);
+        const installCommand = `${command} ${commandArgs.join(' ')}`;
+        if (!args.json) console.log(`Installing package: ${installCommand}`);
         // Keep stdout clean for --json consumers (package managers are chatty on stdout).
         const status = args.json
           ? (spawnSync(command, commandArgs, {
@@ -498,10 +504,9 @@ async function start(args) {
               encoding: 'utf8',
             }).status ?? 1)
           : runCommand(command, commandArgs, args.root);
-        if (status !== 0 && !args.json) {
-          console.log(
-            `Package manager exited ${status}. package.json is pinned; run the install command when online.`
-          );
+        if (status !== 0) {
+          console.error(formatStartPackageInstallFailure({ exitStatus: status, installCommand }));
+          return status;
         }
       }
     }
@@ -568,8 +573,12 @@ async function start(args) {
       if (pinned.changed) {
         console.log(`  Pinned arkgate@${pinned.version} in package.json devDependencies.`);
         if (installStatus !== null && installStatus !== 0) {
-          console.log(
-            `  Package manager install exited ${installStatus} — package.json is still pinned; run install when online.`
+          const [command, commandArgs] = packageInstallArgv(root, pinned.version);
+          console.error(
+            formatStartPackageInstallFailure({
+              exitStatus: installStatus,
+              installCommand: `${command} ${commandArgs.join(' ')}`,
+            })
           );
         }
       } else if (pinned.reason === 'already-present') {