arkgate 4.8.18 → 4.8.20

package/bin/lib/analysis-engine.mjs

@@ -1,10 +1,10 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-var Ir=Object.defineProperty;var i=(e,t)=>Ir(e,"name",{value:t,configurable:!0});function j(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}i(j,"deterministicHash");function F(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(F).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${F(t[n])}`).join(",")}}`}i(F,"stableSerialize");var ke="1.2";var Vt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=F(e),r=F(t);return n<r?-1:n>r?1:0}i(K,"compareCanonical");function V(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}i(V,"sortedUnique");function Ve(e){let t={schemaVersion:"1.2",include:V(e.include??[]),exclude:V(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:V(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:V(n.patterns??[]),exclude:V(n.exclude??[]),forbiddenGlobals:V(n.forbiddenGlobals??[]),intentPrefixes:V(n.intentPrefixes??[]),capabilityDeny:V(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:V(e.arkRun.compositionRoots),managedLayers:V(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return j(F(t))}i(Ve,"resolvedFactsEvidenceRequirementsHash");function Sr(e){let t=e.completenessReasons.map(b=>({code:b.code,message:b.message,...b.file?{file:b.file}:{}})).sort(K),n=e.files.map(b=>({...b,typeOnlyExportNames:V(b.typeOnlyExportNames)})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),r=e.dependencies.map(b=>({...b,...b.namedBindings?{namedBindings:V(b.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(b=>({...b})).sort(K),a=e.ambientUses.map(b=>({...b})).sort(K),o=e.publishCalls.map(b=>({...b})).sort(K),d=e.intentReferences.map(b=>({...b})).sort(K),l=e.safetyUses.map(b=>({...b})).sort(K),g=(e.classShapes??[]).map(b=>({...b,mutatingMethods:[...b.mutatingMethods??[]].map(x=>({...x}))})).sort(K),R=(e.arkRunKernelCalls??[]).map(b=>({...b})).sort(K),A=(e.arkRunManagedNews??[]).map(b=>({...b})).sort(K),u=(e.arkRunCompositionRootHits??[]).map(b=>({...b})).sort(K),m=(e.arkRunDeclarations??[]).map(b=>({...b,uses:V(b.uses),reactsTo:V(b.reactsTo),raises:V(b.raises),sends:V(b.sends)})).sort(K),c=(e.arkOrderPlaneCalls??[]).map(b=>({...b})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(b=>({...b})).sort(K),k=(e.arkOrderRootHits??[]).map(b=>({...b})).sort(K),I=(e.arkOrderXiFieldWrites??[]).map(b=>({...b})).sort(K),E=(e.arkOrderIngestWritesXi??[]).map(b=>({...b})).sort(K),C=(e.arkOrderReleaseKeyCounts??[]).map(b=>({...b})).sort(K),H=e.files.map(({path:b,contentHash:x})=>({path:b,contentHash:x})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),Y=j(F(H));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:Y,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:o,intentReferences:d,safetyUses:l,classShapes:g,arkRunKernelCalls:R,arkRunManagedNews:A,arkRunCompositionRootHits:u,arkRunDeclarations:m,arkOrderPlaneCalls:c,arkOrderGenericUpdates:y,arkOrderRootHits:k,arkOrderXiFieldWrites:I,arkOrderIngestWritesXi:E,arkOrderReleaseKeyCounts:C}}i(Sr,"canonicalResolvedFactsInput");function Gt(e){let t=Sr(e);return{...t,factsHash:j(F(t))}}i(Gt,"createCanonicalResolvedCandidateFacts");function Ge(e){return Gt(zt($(e,"$"),!1))}i(Ge,"createResolvedCandidateFacts");function $(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}i($,"asRecord");function N(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}i(N,"assertOnlyKeys");function T(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}i(T,"requiredText");function se(e,t,n){if(e[t]!==void 0)return T(e,t,n)}i(se,"optionalText");function P(e,t,n){let r=T(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(d);let o=a.join("/");if(!o||o!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return o}i(P,"requiredProjectPath");function L(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}i(L,"requiredBoolean");function Bt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}i(Bt,"requiredInteger");function B(e,t,n){let r=Bt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}i(B,"requiredPositiveInteger");function D(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}i(D,"requiredArray");function ae(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}i(ae,"enumValue");function be(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}i(be,"parseStringArray");function Cr(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}i(Cr,"assertUnique");function zt(e,t){N(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ae(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ae(e,"completeness",["complete","partial","unavailable"],"$"),s=D(e,"completenessReasons","$").map((v,S)=>{let f=`$.completenessReasons[${S}]`,h=$(v,f);N(h,["code","message","file"],f);let _=h.file===void 0?void 0:P(h,"file",f);return{code:T(h,"code",f),message:T(h,"message",f),..._?{file:_}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=D(e,"files","$").map((v,S)=>{let f=`$.files[${S}]`,h=$(v,f);return N(h,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],f),{path:P(h,"path",f),contentHash:T(h,"contentHash",f),parseStatus:ae(h,"parseStatus",["parsed","invalid"],f),parseDiagnosticCount:Bt(h,"parseDiagnosticCount",f),exportsOnlyTypes:L(h,"exportsOnlyTypes",f),typeOnlyExportNames:be(h.typeOnlyExportNames,`${f}.typeOnlyExportNames`),hasTopLevelSideEffects:L(h,"hasTopLevelSideEffects",f)}}),o=D(e,"dependencies","$").map((v,S)=>{let f=`$.dependencies[${S}]`,h=$(v,f);N(h,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],f);let _=se(h,"specifier",f),U=se(h,"target",f),ce=ae(h,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],f);if(ce==="resolved-project"&&!U)throw new Error(`${f}.target is required for resolved-project dependencies.`);if(ce!=="resolved-project"&&U)throw new Error(`${f}.target is only allowed for resolved-project dependencies.`);if(ce!=="dynamic"&&!_)throw new Error(`${f}.specifier is required unless resolution is dynamic.`);return{from:P(h,"from",f),..._?{specifier:_}:{},kind:ae(h,"kind",["import","export","dynamic-import","require"],f),typeOnly:L(h,"typeOnly",f),line:B(h,"line",f),resolution:ce,...U?{target:P(h,"target",f)}:{},...h.namedBindings!==void 0?{namedBindings:be(h.namedBindings,`${f}.namedBindings`)}:{},...h.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:L(h,"targetTypeOnlyExports",f)}:{},...h.sourcePureTypeModule!==void 0?{sourcePureTypeModule:L(h,"sourcePureTypeModule",f)}:{},...h.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:L(h,"namedBindingsTypeOnly",f)}:{},...h.portProofEligible!==void 0?{portProofEligible:L(h,"portProofEligible",f)}:{}}}),d=D(e,"capabilityUses","$").map((v,S)=>{let f=`$.capabilityUses[${S}]`,h=$(v,f);return N(h,["file","line","symbol","capability","source"],f),{file:P(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f),capability:ae(h,"capability",Vt,f),source:ae(h,"source",["ambient-global","import-based"],f)}}),l=D(e,"ambientUses","$").map((v,S)=>{let f=`$.ambientUses[${S}]`,h=$(v,f);return N(h,["file","line","symbol"],f),{file:P(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f)}}),g=D(e,"publishCalls","$").map((v,S)=>{let f=`$.publishCalls[${S}]`,h=$(v,f);N(h,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],f);let _=se(h,"rawIntentName",f),U=se(h,"sourceIntent",f);return{file:P(h,"file",f),line:B(h,"line",f),..._?{rawIntentName:_}:{},objectHasIntent:L(h,"objectHasIntent",f),arkPublishCandidate:L(h,"arkPublishCandidate",f),hasSource:L(h,"hasSource",f),...U?{sourceIntent:U}:{}}}),R=D(e,"intentReferences","$").map((v,S)=>{let f=`$.intentReferences[${S}]`,h=$(v,f);return N(h,["file","line","intent"],f),{file:P(h,"file",f),line:B(h,"line",f),intent:T(h,"intent",f)}}),A=D(e,"safetyUses","$").map((v,S)=>{let f=`$.safetyUses[${S}]`,h=$(v,f);N(h,["file","line","kind","symbol"],f);let _=se(h,"symbol",f),U=ae(h,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],f);if(U==="in-memory-store"&&!_)throw new Error(`${f}.symbol is required for in-memory-store facts.`);if(U!=="in-memory-store"&&_)throw new Error(`${f}.symbol is only allowed for in-memory-store facts.`);return{file:P(h,"file",f),line:B(h,"line",f),kind:U,..._?{symbol:_}:{}}});Cr(a,v=>v.path,"$.files");let u=new Set(a.map(v=>v.path));for(let v of a){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of o)if(!u.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let c=(e.arkRunKernelCalls===void 0?[]:D(e,"arkRunKernelCalls","$")).map((v,S)=>{let f=`$.arkRunKernelCalls[${S}]`,h=$(v,f);N(h,["file","line","kind","callee","viaImport","receiver","nameLiteral"],f);let _=se(h,"receiver",f),U=se(h,"nameLiteral",f);return{file:P(h,"file",f),line:B(h,"line",f),kind:ae(h,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],f),callee:T(h,"callee",f),viaImport:L(h,"viaImport",f),..._?{receiver:_}:{},...U?{nameLiteral:U}:{}}}),k=(e.arkRunManagedNews===void 0?[]:D(e,"arkRunManagedNews","$")).map((v,S)=>{let f=`$.arkRunManagedNews[${S}]`,h=$(v,f);N(h,["file","line","typeName","importedFrom"],f);let _=se(h,"importedFrom",f);return{file:P(h,"file",f),line:B(h,"line",f),typeName:T(h,"typeName",f),..._?{importedFrom:_}:{}}}),E=(e.arkRunCompositionRootHits===void 0?[]:D(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let f=`$.arkRunCompositionRootHits[${S}]`,h=$(v,f);return N(h,["file","matchedRoot","hasKernelFactory"],f),{file:P(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasKernelFactory:L(h,"hasKernelFactory",f)}}),C=e.arkRunDeclarations===void 0?[]:D(e,"arkRunDeclarations","$"),Y=(e.arkOrderPlaneCalls===void 0?[]:D(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let f=`$.arkOrderPlaneCalls[${S}]`,h=$(v,f);return N(h,["file","line","callee"],f),{file:P(h,"file",f),line:B(h,"line",f),callee:T(h,"callee",f)}}),x=(e.arkOrderGenericUpdates===void 0?[]:D(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let f=`$.arkOrderGenericUpdates[${S}]`,h=$(v,f);return N(h,["file","line","method"],f),{file:P(h,"file",f),line:B(h,"line",f),method:T(h,"method",f)}}),pe=(e.arkOrderRootHits===void 0?[]:D(e,"arkOrderRootHits","$")).map((v,S)=>{let f=`$.arkOrderRootHits[${S}]`,h=$(v,f);return N(h,["file","matchedRoot","hasPlaneFactory"],f),{file:P(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasPlaneFactory:L(h,"hasPlaneFactory",f)}}),Re=(e.arkOrderXiFieldWrites===void 0?[]:D(e,"arkOrderXiFieldWrites","$")).map((v,S)=>{let f=`$.arkOrderXiFieldWrites[${S}]`,h=$(v,f);return N(h,["file","line","key"],f),{file:P(h,"file",f),line:B(h,"line",f),key:T(h,"key",f)}}),Ue=(e.arkOrderIngestWritesXi===void 0?[]:D(e,"arkOrderIngestWritesXi","$")).map((v,S)=>{let f=`$.arkOrderIngestWritesXi[${S}]`,h=$(v,f);return N(h,["file","line"],f),{file:P(h,"file",f),line:B(h,"line",f)}}),Ae=(e.arkOrderReleaseKeyCounts===void 0?[]:D(e,"arkOrderReleaseKeyCounts","$")).map((v,S)=>{let f=`$.arkOrderReleaseKeyCounts[${S}]`,h=$(v,f);return N(h,["file","line","keyCount"],f),{file:P(h,"file",f),line:B(h,"line",f),keyCount:B(h,"keyCount",f)}}),Ce=C.map((v,S)=>{let f=`$.arkRunDeclarations[${S}]`,h=$(v,f);return N(h,["file","line","uses","reactsTo","raises","sends"],f),{file:P(h,"file",f),line:B(h,"line",f),uses:be(h.uses,`${f}.uses`),reactsTo:be(h.reactsTo,`${f}.reactsTo`),raises:be(h.raises,`${f}.raises`),sends:be(h.sends,`${f}.sends`)}});for(let[v,S]of[["$.capabilityUses",d],["$.ambientUses",l],["$.publishCalls",g],["$.intentReferences",R],["$.safetyUses",A],["$.arkRunKernelCalls",c],["$.arkRunManagedNews",k],["$.arkRunCompositionRootHits",E],["$.arkRunDeclarations",Ce],["$.arkOrderPlaneCalls",Y],["$.arkOrderGenericUpdates",x],["$.arkOrderRootHits",pe],["$.arkOrderXiFieldWrites",Re],["$.arkOrderIngestWritesXi",Ue],["$.arkOrderReleaseKeyCounts",Ae]])for(let f of S)if(!u.has(f.file))throw new Error(`${v} references missing file ${f.file}.`);let je=se(e,"projectPackageName","$"),jt=(e.classShapes===void 0?[]:D(e,"classShapes","$")).map((v,S)=>{let f=`$.classShapes[${S}]`,h=$(v,f);N(h,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],f);let _=D(h,"mutatingMethods",f).map((U,ce)=>{let p=`${f}.mutatingMethods[${ce}]`,W=$(U,p);return N(W,["name","referencesGuardOrPublish"],p),{name:T(W,"name",p),referencesGuardOrPublish:L(W,"referencesGuardOrPublish",p)}});return{file:P(h,"file",f),className:T(h,"className",f),exported:L(h,"exported",f),hasPublicMutableFields:L(h,"hasPublicMutableFields",f),hasPublicSetters:L(h,"hasPublicSetters",f),hasPublicConstructor:L(h,"hasPublicConstructor",f),hasStaticFactory:L(h,"hasStaticFactory",f),mutatingMethods:_,...h.dataOnly===void 0?{}:{dataOnly:L(h,"dataOnly",f)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:T(e,"resolverIdentity","$"),compilerIdentity:T(e,"compilerIdentity","$"),compilerOptionsHash:T(e,"compilerOptionsHash","$"),tsconfigHash:T(e,"tsconfigHash","$"),evidenceRequirementsHash:T(e,"evidenceRequirementsHash","$"),...je?{projectPackageName:je}:{},files:a,dependencies:o,capabilityUses:d,ambientUses:l,publishCalls:g,intentReferences:R,safetyUses:A,classShapes:jt,arkRunKernelCalls:c,arkRunManagedNews:k,arkRunCompositionRootHits:E,arkRunDeclarations:Ce,arkOrderPlaneCalls:Y,arkOrderGenericUpdates:x,arkOrderRootHits:pe,arkOrderXiFieldWrites:Re,arkOrderIngestWritesXi:Ue,arkOrderReleaseKeyCounts:Ae}}i(zt,"parseResolvedFactsInput");function ge(e){let t=$(e,"$"),n=T(t,"factsHash","$"),r=T(t,"candidateTreeHash","$"),s=Gt(zt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}i(ge,"loadResolvedCandidateFacts");var wr=["network","filesystem","clock","randomness","environment","process","persistence"],w={type:"string",minLength:1},q={type:"integer",minimum:1},M={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Wt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:w,message:w,file:M}}},resolverIdentity:w,compilerIdentity:w,compilerOptionsHash:w,tsconfigHash:w,candidateTreeHash:w,evidenceRequirementsHash:w,projectPackageName:w,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:M,contentHash:w,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:w},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:M,specifier:w,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:q,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:M,namedBindings:{type:"array",items:w},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:M,line:q,symbol:w,capability:{enum:wr},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:M,line:q,symbol:w}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:M,line:q,rawIntentName:w,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:w}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:M,line:q,intent:w}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:M,line:q,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:w},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:M,className:w,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:w,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:M,line:q,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:w,viaImport:{type:"boolean"},receiver:w,nameLiteral:w}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:M,line:q,typeName:w,importedFrom:w}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:M,matchedRoot:w,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:M,line:q,uses:{type:"array",items:w},reactsTo:{type:"array",items:w},raises:{type:"array",items:w},sends:{type:"array",items:w}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:M,line:q,callee:w}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:M,line:q,method:w}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:M,matchedRoot:w,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:M,line:q,key:w}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:M,line:q}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:M,line:q,keyCount:{type:"integer",minimum:1}}}},factsHash:w},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var qt="1.0";var lt=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),Be=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),dt=Object.freeze(Object.keys(Be).sort()),it=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ct=Object.freeze({process:Object.freeze(["process","node:process"])});function xe(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=it[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=it[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:it[e.slice(0,a)]??null}i(xe,"capabilityForModuleSpecifier");function _e(e,t){for(let n of t)if(ct[n]?.includes(e))return n;return null}i(_e,"forbiddenGlobalForModuleSpecifier");function Te(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=Be[r];if(s)return s}return null}i(Te,"capabilityForAmbientName");function ve(e){if(e?.pure===!0)return[...lt].sort();let n=(e?.capabilities?.deny??[]).filter(r=>lt.includes(r));return[...new Set(n)].sort()}i(ve,"effectiveCapabilityDeny");function ut(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}i(ut,"ambientCoveredByForbiddenGlobals");function ze(e){let t=new Set,n=new Set,r=Object.keys(Be);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(o=>o===s||o.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let o of a)t.add(`ambient:${o}`);for(let o of ct[s]??[])t.add(`import-exact:${o}`)}for(let s of ve(e)){if(t.add(`import:${s}`),s==="process")for(let a of ct.process)t.add(`import-exact:${a}`);for(let a of r)Te(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}i(ze,"loweredLayerCoverage");function Or(e){let t=new Set,n=Te(e);n&&t.add(n);for(let[r,s]of Object.entries(Be))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}i(Or,"lowerForbiddenGlobal");var Yt=new Map;function Xt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Xt,"escapeLiteral");function We(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(We,"normalizeGlobSeparators");function xr(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(xr,"bracesBalanced");function oe(e){let t=Yt.get(e);if(t)return t;let n=We(e),r=xr(n),s="",a=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Xt(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",a+=1):l==="}"&&r&&a>0?(s+=")",a-=1):l===","&&r&&a>0?s+="|":s+=Xt(l)}let o=new RegExp(`^${s}$`);return Yt.set(e,o),o}i(oe,"globToRegExp");function _r(e){return We(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}i(_r,"concreteGlobSegments");function ft(e,t){let n=We(String(e)),r=_r(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let o=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,l=-1;for(let g of r){let R=-1;for(let A=d;A<o.length;A+=1)if(o[A]===g){R=A;break}if(R<0)return a;l=R,d=R+1}return(l+1)*1e6+r.length*1e4+s}i(ft,"patternSpecificity");function Q(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(o=>oe(o).test(n))){for(let o of a.patterns??[])if(oe(o).test(n)){let d=ft(o,n);d>s&&(s=d,r=a.name)}}return r}i(Q,"layerForRelativePath");function Zt(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}i(Zt,"sliceIdForPath");function Tr(e){let t=new Set;for(let n of e??[]){let s=We(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let o=s[a];if((o==="**"||o==="*")&&a>0){let d=s[a-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}i(Tr,"inferSliceFoldersFromPatterns");function $r(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return Tr(r?.patterns)}i($r,"resolveSliceFolders");function Jt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}i(Jt,"normalizeSegments");function tn(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}i(tn,"trimTrailingSlashes");var Fr=["src","app"];function Nr(e){let t=tn(e.replace(/^[./]+/,""));return t==="*"||t==="**"}i(Nr,"isBlanketRoot");function Qt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=Jt(n);for(let a of t){if(typeof a!="string"||a.length===0||Nr(a))continue;if(a.includes("*")){let l=tn(a.toLowerCase());if(oe(l).test(r)||oe(`${l}/**`).test(r))return!0;continue}let o=Jt(a);if(o.length===0)continue;let d=Fr.includes(s[0])&&o[0]!==s[0]?[0,1]:[0];for(let l of d){if(l+o.length>s.length)continue;let g=!0;for(let R=0;R<o.length;R+=1)if(s[l+R]!==o[R]){g=!1;break}if(g)return!0}}return!1}i(Qt,"pathUnderSharedRoot");function en(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}i(en,"sliceMatchesDeclaration");function Pr(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&en(r.from,t)&&en(r.to,n))}i(Pr,"crossSliceEdgeAllowed");function Lr(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}i(Lr,"peerIsolationDecision");function qe(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}i(qe,"peerIsolationDenyExplanation");function nn(e,t,n,r){return $e(e,t,n,r)?.rule}i(nn,"findDeniedEdgeRule");function $e(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,o=r?.toPath,d=$r(s,t,r?.layers),l=a?Zt(a,d):void 0,g=o?Zt(o,d):void 0,R=Lr({fromPath:a,toPath:o,folderCount:d.length,fromSlice:l,toSlice:g,fromShared:!l&&Qt(a,s.sharedRoots),toShared:!g&&Qt(o,s.sharedRoots),crossSliceAllowed:Pr(s.allowedCrossSlice,l,g)});if(R.denied)return{rule:s,peerIsolationReason:R.reason,fromSlice:l,toSlice:g};continue}if(t!==n)return{rule:s}}}i($e,"findDeniedEdgeDecision");var pt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},gt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function mt(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}i(mt,"resolveIntentLayer");function rn(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}i(rn,"looksLikeArkIntent");function yt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&rn(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:pt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:pt.PUBLISH_MISSING_SOURCE}),t}i(yt,"classifyPublishFacts");var sn="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Dr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var an={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ao={$schema:"https://json-schema.org/draft/2020-12/schema",$id:sn,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:sn},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Dr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:an,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:an}}}};function Fe(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}i(Fe,"emptyEffectiveArkRules");function on(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}i(on,"structureFreezeTarget");var Mr=["no-anemic-model"],fn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],uo=new RegExp(`\\b(${fn.join("|")})\\b`),pn="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",fo=new RegExp(`\\bthis\\.${pn}\\.push\\s*\\(`),po=new RegExp(`^this\\.${pn}\\s*=\\s*\\[\\s*\\]`);var Hr="truncatedUntil";function Kr(){return`${fn.join(", ")}, or events-array .push(`}i(Kr,"expectedDomainInvariantWordsPhrase");function ht(e){let t=Object.getOwnPropertyDescriptor(e,Hr)?.value;return typeof t=="number"?t:void 0}i(ht,"shapeTruncatedUntil");function Ur(e){let t=ht(e);return t==null?"":` shape analysed until character ${t}`}i(Ur,"shapeTruncationSuffix");function ln(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(ln,"escapeGlobLiteral");function jr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=ln(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=ln(s)}return new RegExp(`^${n}$`)}i(jr,"globToRegExp");function Ee(e,t){return!t||t.length===0?!0:t.some(n=>jr(n).test(e))}i(Ee,"matchesAppliesTo");function gn(e){return Mr.includes(e)}i(gn,"isTier2");function mn(e){return e.mode==="enforced"&&!gn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}i(mn,"severityFor");function de(e,t,n,r=1){let{severity:s,failsStrict:a}=mn(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}i(de,"baseViolation");function Ye(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}i(Ye,"isInRuleLayer");function Xe(e,t,n){return t.filter(r=>!(!r.exported||!Ee(r.file,e.appliesTo)||!Ye(r.file,e,n)))}i(Xe,"shapesForRule");function Vr(e,t,n){let r=[];for(let s of Xe(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(de(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}i(Vr,"evaluateAggregatePrivateState");function Gr(e,t,n){let r=[];for(let s of Xe(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(de(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}i(Gr,"evaluateAlwaysValidFactory");function Br(e,t,n){let r=[],s=Kr();for(let a of Xe(e,t,n)){let o=Ur(a);ht(a)!=null&&r.push(de(e,a.file,`Exported class ${a.className} shape analysed until character ${ht(a)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of a.mutatingMethods)d.referencesGuardOrPublish||r.push(de(e,a.file,`Mutating method ${a.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${o}`))}return r}i(Br,"evaluateDomainEventOnMutation");function zr(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Ye(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(de(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}i(zr,"evaluateOrchestrationOnly");function Wr(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Ye(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(de(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}i(Wr,"evaluateThinAdapter");function qr(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Ye(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(de(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}i(qr,"evaluateWritesViaAggregate");function Yr(e,t,n){let r=[];for(let s of Xe(e,t,n))if(s.dataOnly===!0){let a=de(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}i(Yr,"evaluateNoAnemicModel");function yn(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...Vr(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...Gr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...Br(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...zr(n,e));break;case"thin-adapter":t.push(...Wr(n,e));break;case"writes-via-aggregate":t.push(...qr(n,e));break;case"no-anemic-model":t.push(...Yr(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}i(yn,"evaluateArkRuleSensors");function hn(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(l=>Ee(l,s.appliesTo)))continue;let{severity:o,failsStrict:d}=mn(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>Ee(d,s.appliesTo)))continue;let o=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:o?"error":"warning",sensor:"invariant-coverage",failsStrict:o})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}i(hn,"collectEmptyAppliesToFindings");var cn=64;function Xr(e){let t=e.length;for(;t>0&&e.charCodeAt(t-1)===46;)t-=1;return t===e.length?e:e.slice(0,t)}i(Xr,"stripTrailingDots");function Zr(e){let t=e.trim(),n=t.length>cn?t.slice(0,cn):t;return Xr(n)}i(Zr,"normalizeIntentPrefix");function Jr(e){let t=e.toLowerCase();return t.includes("domain")||t.includes("entity")||t.includes("aggregate")||t.includes("model")}i(Jr,"layerNameLooksDomain");function Qr(e){return e.some(t=>{let n=Zr(t);return n==="Domain"||n.startsWith("Domain.")})}i(Qr,"ownsDomainIntent");function es(e,t=[]){return Jr(e)||Qr(t)}i(es,"isDomainRoleLayerName");function Rn(e){if(e.arkRulesActive!==!0)return[];let t=(e.layers??[]).filter(l=>es(l.name,l.intentPrefixes??[])).map(l=>l.name);if(t.length===0)return[];let n=new Set(t);if(!(e.files??[]).some(l=>{let g=typeof l.layer=="string"?l.layer:"";return g.length>0&&n.has(g)}))return[];if((e.arkRules.invariants??[]).filter(l=>n.has(l.provenance.layer)).length>0)return[];let a=t.find(l=>e.arkRules.byLayer?.[l])??t[0],o=e.arkRules.byLayer?.[a]?.sourceFile??`arkrules/${a}.json`,d=(e.arkRules.structure??[]).some(l=>l.mode==="enforced"&&n.has(l.provenance.layer)&&!gn(l.sensor));return[{ruleId:"INVARIANT_CATALOG_EMPTY",code:"invariant-catalog-empty",message:`ArkRules is on and ${a} has code, but invariants[] is empty \u2014 there are no phrases the code must preserve. Add 1\u20132 short phrases in ${o}.`,file:o,line:1,fromLayer:a,arkruleId:"invariant-catalog",arkruleSource:o,severity:d?"error":"warning",sensor:"invariant-coverage",failsStrict:d}]}i(Rn,"collectEmptyInvariantCatalogFindings");var dn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,un=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,ts=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function ns(e){return e==="PersistenceAdapters"}i(ns,"isPersistenceDriverLayer");function rs(e,t){if(dn.test(e)||un.test(e))return!0;if(!t)return!1;for(let n of t){if(ns(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(dn.test(s)||un.test(s))return!0}return!1}i(rs,"sourceImportsPersistenceDriver");var ss=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,as=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,os=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,is=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function ls(e,t,n){if(!t)return null;let r=rs(t,n),s=r&&ts.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let a=t.match(new RegExp(os.source,"g"))??[],o=t.match(new RegExp(is.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,l=(t.match(/\bswitch\s*\(/g)??[]).length,g=a.length>=2||a.length>=1&&o.length>=2||o.length>=3&&d+l>=6,R=ss.test(t)||as.test(t),A=a.length>=1||o.length>=2,u=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),m=r&&A||R&&A||r&&u&&(d>=4||a.length>=1)||R&&r;return!g&&!m&&!s?null:{...g?{orchestrationHeavy:!0}:{},...m?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}i(ls,"deriveArkRuleFileHints");function An(e,t){let n={};for(let[r,s]of Object.entries(e)){let a=r.replace(/\\/g,"/"),o=ls(r,s,t?.[a]);o&&(n[a]=o)}return n}i(An,"buildArkRuleFileHints");var cs="INVARIANT_TESTS_PATH_MISSING",ds="This project is adopted and has domain invariants, but ark.config.json does not name a real tests path. Add coverage.testGlobs or coverage.coverageRoots pointing at the folder where those tests live, then re-run. Without that path, coverage is an empty checkbox.",us="INVARIANT_COVERAGE_ROOTS_MISSING",fs="A domain invariant is enforced, but ark.config.json does not name coverage.coverageRoots \u2014 the folders where this project's test runner actually goes. Add coverage.coverageRoots pointing at that folder, then re-run. Without it, coverage can certify a test no runner runs.";function kn(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}i(kn,"formatCoverageDiscards");function ps(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}i(ps,"isUnderCoverageRoot");function gs(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}i(gs,"titleMatchesInvariant");function ms(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}i(ms,"symbolPresent");function bn(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,a=e.coverageStats,o=kn(a),d=kn(a,!0),l=a?`coverage file budget exhausted: ${a.filesLoaded} files loaded at the ${a.maxFiles}-file cap, ${a.testFilesRetained} tests retained, ${a.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof a.filesRead=="number"?`; ${a.filesRead} were read`:""})`:"coverage file budget exhausted",g=(e.coverageRoots??[]).filter(c=>typeof c=="string"&&c.length>0),R=g.length>0,A=g.join(", "),u=[],m=[];for(let c of t){let y=[],k=c.coverage?.test!==!1,I=c.coverage?.symbol,E,C;if(!r&&k){let x;for(let re of n){let pe=e.fileContents[re];if(!(!pe||!gs(pe,c.id))){if(!R||ps(re,g)){E=re,C=R?!1:void 0;break}x??=re}}E===void 0&&x!==void 0&&(E=x,C=!0),E!==void 0&&y.push("test-title")}I&&ms(e.fileContents,I)&&y.push("symbol");let Y=(c.coverage?.test===!0||!!I||c.coverage===void 0)&&y.length>0||c.coverage?.test===!1&&!I?!0:y.length>0,b=r&&k&&y.length===0;if(u.push({invariantId:c.id,layer:c.provenance.layer,sourceFile:c.provenance.sourceFile,mode:c.mode,covered:Y&&!b,evidence:y,partial:b,description:c.description,...E!==void 0?{testEvidenceFile:E}:{},...C!==void 0?{outsideDeclaredRoots:C}:{},coverageRootsDeclared:R}),C===!0&&E!==void 0&&m.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${c.id} is covered only by ${E}, which is outside the declared coverage roots (${A}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:E,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:"warning",failsStrict:!1}),!Y||b){let x=c.mode==="enforced"&&!b,re=r||n.length===0?"never-had-tests":"tests-disappeared";m.push({ruleId:"INVARIANT_UNCOVERED",message:(b?s?`Invariant ${c.id} coverage cannot be proven (${l}); reporting partial, not covered.`:`Invariant ${c.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:re==="tests-disappeared"?`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(b&&s?d:o),file:c.provenance.sourceFile,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:x?"error":"warning",failsStrict:x,kind:re})}}return{coverage:u,violations:m,partial:u.some(c=>c.partial)}}i(bn,"evaluateInvariantCoverage");function vn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:e.coverageRootsDeclared===!1?{ok:!1,reason:`Declare coverage.coverageRoots in ark.config.json before promoting ${e.invariantId} to enforced. Without that, ArkGate cannot tell whether a covering test is one the runner executes.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}i(vn,"canPromoteInvariant");function Rt(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){if(typeof n!="string")continue;let r=n.trim();r.length>0&&t.push(r)}return t}i(Rt,"nonEmptyPathStrings");function ys(e){return!e||typeof e!="object"?[]:[...Rt(e.testGlobs),...Rt(e.coverageRoots)]}i(ys,"configuredInvariantTestsPaths");function hs(e){return ys(e).length>0}i(hs,"hasConfiguredInvariantTestsPath");function At(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.coverage?.test!==!1)}i(At,"catalogDemandsInvariantTestsPath");function En(e){let t=e.hasDomainInvariants===!0||e.hasDomainInvariants!==!1&&At(e.invariants);return e.adopted!==!0||!t?[]:hs(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:cs,message:ds,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]}i(En,"collectMissingInvariantTestsPathFindings");function Rs(e){return!e||typeof e!="object"?[]:Rt(e.coverageRoots)}i(Rs,"configuredCoverageRoots");function As(e){return Rs(e).length>0}i(As,"hasConfiguredCoverageRoots");function kt(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.mode==="enforced")}i(kt,"catalogHasEnforcedInvariant");function In(e){return e.hasEnforcedInvariant===!0||e.hasEnforcedInvariant!==!1&&kt(e.invariants)?As(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:us,message:fs,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]:[]}i(In,"collectMissingCoverageRootsFindings");function ks(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}i(ks,"normalizeExtraMergeTeethClassification");function Ze(e){let t=ks(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}i(Ze,"extraMergeTeethAllowed");function Sn(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}i(Sn,"classifyResolvedLayerCoverage");var bs=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var ko=new Set(bs);function Cn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}i(Cn,"isArkRunKernelModuleSpecifier");var vs=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],bt=new Set(vs);function wn(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(bt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(bt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:bt.has(e.slice(0,r))}i(wn,"isArkRunTransportBypassSpecifier");var Es=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Is=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ss=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Cs(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Es.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Is.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Ss.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}i(Cs,"classifyLayerImportKind");function ws(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Cs(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}i(ws,"layerImportNextAction");function Os(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}i(Os,"arkRunCallSiteName");function xs(e){let t=Os(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(xs,"arkRunNextAction");function ue(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return ws(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"INVARIANT_CATALOG_EMPTY":return typeof e.file=="string"&&e.file.length>0?`Add 1\u20132 short phrases to invariants[] in ${e.file}, then run ark-check --doctor. Starters show the shape.`:"Add 1\u20132 short phrases to invariants[] in arkrules/<Domain>.json, then run ark-check --doctor. Starters show the shape.";case"INVARIANT_TESTS_PATH_MISSING":return"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.";case"INVARIANT_COVERAGE_ROOTS_MISSING":return"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return xs(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change the choice with proposeRelease then apply. release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(ue,"deterministicNextAction");var _s=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],$o=new Set(_s);var On={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Ts="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Tn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Tn,"isDomainRoleLayer");function $s(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}i($s,"compareFindings");function ie(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:On[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ue({ruleId:On[t],fromLayer:a?.fromLayer,target:a?.target})}}i(ie,"finding");function Fs(e,t){let n=[],r=[],s=[],a=[];for(let o of e)o.file===t&&(n.push(...o.uses),r.push(...o.reactsTo),s.push(...o.raises),a.push(...o.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}i(Fs,"bagForFile");function xn(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}i(xn,"emitKinds");function _n(e){return e==="subscribe"||e==="register-handler"}i(_n,"handleKinds");function Ns(e){return e==="resolve"||e==="resolve-singleton"}i(Ns,"dependKinds");function Ps(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(ie(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let o of t){let d=a.get(o.matchedRoot)??[];d.push(o),a.set(o.matchedRoot,d)}for(let o of s){let d=[...a.get(o)??[]].sort((g,R)=>g.file.localeCompare(R.file));if(d.length===0){r.push(ie(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(o)} matched no governed files and has no createArkKernel factory.`,{target:o},n));continue}if(d.some(g=>g.hasKernelFactory))continue;let l=d[0];r.push(ie(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(o)} has no createArkKernel / createStrictArkKernel factory.`,{target:o},n))}return r}i(Ps,"evaluateMissingRoot");function Ls(e,t,n,r,s){let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),o=[];for(let d of n){let l=d.specifier;if(!l||!Cn(l))continue;let g=r(d.from);g&&Tn(g,a.get(g)??[])&&o.push(ie(e,"arkrun-kernel-in-domain",d.from,d.line,`${g} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:g,target:l},s))}return o}i(Ls,"evaluateKernelInDomain");function Ds(e,t,n,r,s,a){let o=new Set(e.managedLayers);if(o.size===0)return[];let d=new Map(t.map(R=>[R.name,R.intentPrefixes??[]])),l=new Set(r.filter(R=>R.hasKernelFactory).map(R=>R.file)),g=[];for(let R of n){if(l.has(R.file))continue;let A=R.typeName;if(e.ignoreDirectNewForErrors!==!1&&(A.endsWith("Error")||A==="Error")||A.endsWith("DTO")||A.endsWith("VO"))continue;let u=s(R.file);!u||!o.has(u)||Tn(u,d.get(u)??[])||g.push(ie(e,"arkrun-direct-new",R.file,R.line,`${u} must not construct ${R.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:u,target:R.typeName},a))}return g}i(Ds,"evaluateDirectNew");function Ms(e,t,n,r,s){let a=[],o=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:o};let d=new Set(e.managedLayers);if(d.size===0)return{findings:a,completenessReasons:o};for(let l of t){if(!xn(l.kind)&&!_n(l.kind)&&!Ns(l.kind))continue;let g=r(l.file);if(!g||!d.has(g))continue;if(!l.nameLiteral){e.mode==="enforced"&&o.push({code:Ts,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let R=Fs(n,l.file);if(xn(l.kind)){if(R.raises.has(l.nameLiteral)||R.sends.has(l.nameLiteral))continue;a.push(ie(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:g,target:l.nameLiteral},s));continue}if(_n(l.kind)){if(R.reactsTo.has(l.nameLiteral))continue;a.push(ie(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:g,target:l.nameLiteral},s));continue}R.uses.has(l.nameLiteral)||a.push(ie(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:g,target:l.nameLiteral},s))}return{findings:a,completenessReasons:o}}i(Ms,"evaluateUndeclared");function Hs(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let o of t){if(o.typeOnly)continue;let d=o.specifier;if(!d||!wn(d))continue;let l=n(o.from);!l||!s.has(l)||a.push(ie(e,"arkrun-transport-bypass",o.from,o.line,`${l} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:l,target:d},r))}return a}i(Hs,"evaluateTransportBypass");function $n(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=Ze(e.classification),r=Ms(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Ps(t,e.compositionRootHits,n),...Ls(t,e.layers,e.dependencies,e.layerForFile,n),...Ds(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Hs(t,e.dependencies,e.layerForFile,n)].sort($s),a=[...r.completenessReasons].sort((o,d)=>{let l=`${o.code}\0${o.file??""}\0${o.message}`,g=`${d.code}\0${d.file??""}\0${d.message}`;return l<g?-1:l>g?1:0});return{findings:s,completenessReasons:a}}i($n,"evaluateArkRunSensors");function Fn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}i(Fn,"isArkOrderModuleSpecifier");var Nn=new Map;function Pn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Pn,"escapeAppliesToLiteral");function Ks(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(Ks,"normalizeAppliesToGlob");function Us(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(Us,"appliesToBracesBalanced");function js(e){let t=Nn.get(e);if(t)return t;let n=Ks(e),r=Us(n),s="",a=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Pn(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",a+=1):l==="}"&&r&&a>0?(s+=")",a-=1):l===","&&r&&a>0?s+="|":s+=Pn(l)}let o=new RegExp(`^${s}$`);return Nn.set(e,o),o}i(js,"globToRegExp");var Ln={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function Vs(e,t){return!t||t.length===0?!0:t.some(n=>js(n).test(e))}i(Vs,"matchesArkOrderAppliesTo");function Gs(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Gs,"isDomainRoleLayer");function fe(e,t,n,r,s,a,o){let d=e.mode==="enforced"&&o;return{ruleId:Ln[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ue({ruleId:Ln[t],fromLayer:a?.fromLayer,target:a?.target})}}i(fe,"finding");function Dn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=Ze(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(fe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let l=new Map;for(let g of e.planeRootHits){let R=l.get(g.matchedRoot)??[];R.push(g),l.set(g.matchedRoot,R)}for(let g of s){let R=l.get(g)??[];if(R.length===0){r.push(fe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(g)} matched no governed files and has no createOrderPlane factory.`,{target:g},n));continue}R.some(A=>A.hasPlaneFactory)||r.push(fe(t,"arkorder-missing-plane",R[0].file,1,`ArkOrder plane root ${JSON.stringify(g)} has no createOrderPlane factory.`,{target:g},n))}}let a=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let g=l.specifier;if(!g||!Fn(g))continue;let R=e.layerForFile(l.from);R&&Gs(R,a.get(R)??[])&&r.push(fe(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:R,target:g},n))}for(let l of e.genericUpdates)r.push(fe(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},n));let o=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||r.push(fe(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},n));for(let l of e.ingestWritesXi??[])r.push(fe(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let l of o.length===0?[]:e.xiFieldWrites??[]){let g=e.layerForFile(l.file);!g||!d.has(g)||Vs(l.file,t.appliesTo)&&r.push(fe(t,"arkorder-xi-field-write",l.file,l.line,`This file writes ${JSON.stringify(l.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:g,target:l.key},n))}return r.sort((l,g)=>l.file.localeCompare(g.file)||l.ruleId.localeCompare(g.ruleId)||l.line-g.line),{findings:r,completenessReasons:[]}}i(Dn,"evaluateArkOrderSensors");var me={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Mn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...me,default:[]},kernelRoots:{...me},managedLayers:{...me,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},Hn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...me,default:[]},managedLayers:{...me,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...me,default:[]},appliesTo:{...me,default:[]}}};function Ne(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Ne,"isObject");function Kn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Ne(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}i(Kn,"declaredLayerNames");function Un(e){if(!Ne(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}i(Un,"defaultedArkRun");function jn(e){if(!Ne(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}i(jn,"defaultedArkOrder");function Vn(e,t){let n=e.arkRun;if(n===void 0||!Ne(n))return;let r=Kn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkRun.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.kernelRoots??n.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(Vn,"validateArkRunExtra");function Gn(e,t){let n=e.arkOrder;if(n===void 0||!Ne(n))return;let r=Kn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,o)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkOrder.managedLayers[${o}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(Gn,"validateArkOrderExtra");function Je(e){if(typeof e!="string")return null;let t=e.trim().replace(/^@/,"").toLowerCase();return t.length>0?t:null}i(Je,"normalizeStewardId");function Bn(e){let t=Je(e);return!t||vt(t)||t.includes(" ")||t.includes("@")?!1:/^(?!-)[a-z0-9-]{1,39}(?<!-)$/.test(t)}i(Bn,"isGitHubHandle");function Bs(e){if(typeof e!="string")return!1;let t=e.trim().toLowerCase();return!t.includes("@")||t.includes(" ")||vt(t)?!1:/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)}i(Bs,"isGitHubEmail");function zs(e){if(typeof e!="string")return null;let t=e.trim().match(/^(?:\d+\+)?([^@]+)@users\.noreply\.github\.com$/i);return t&&Bn(t[1])?Je(t[1]):null}i(zs,"githubHandleFromEmail");function zn(e){let t=zs(e);if(t)return t;let n=Je(e);return!n||vt(n)?null:Bn(n)||Bs(n)?n:null}i(zn,"canonicalStewardId");var Ws=/bot\b|\[bot\]|dependabot|renovate|github-actions|imgbot|codecov/i;function vt(e){let t=Je(e);return!t||Ws.test(t)}i(vt,"isAutomationAuthor");var te="1.3",qs=["public","auth","admin","internal"];function Ys(e){return e?.optional===!0||e?.reserved===!0||e?.allowEmpty===!0}i(Ys,"isFutureHouseLayer");function Xs(e){let t=e&&typeof e=="object"?e.owners:void 0;if(!Array.isArray(t)||t.length===0)return;let n=t.filter(r=>typeof r=="string"&&r.length>0);return n.length>0?n:void 0}i(Xs,"layerOwnersList");function Yn(e){return e?.requireLayerOwners!==!0||!Array.isArray(e.layers)?[]:e.layers.filter(t=>!Ys(t)&&!Xs(t)).map(t=>t.name)}i(Yn,"layersMissingRequiredOwners");function Xn(e){return`Add a GitHub handle or email to ${e}'s owners in ark.config.json (/ark-adopt).`}i(Xn,"missingLayerOwnersNextAction");var Et="https://unpkg.com/arkgate@4/schemas/ark.config.schema.json",Wn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],Zs=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function Js(){let e=[];for(let t of Wn)for(let n of Wn)t===n||Zs.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}i(Js,"createDefaultRules");var Zn=Js(),It=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],X={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},qn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Et,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:Et,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:te,default:te},name:{type:"string",minLength:1},include:{...X,minItems:1,default:["src"]},exclude:{...X,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Zn,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...X,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...X,default:[]},requireLayerOwners:{type:"boolean"}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...X,minItems:1},exclude:X,intentPrefixes:X,description:{type:"string",minLength:1},trustBoundary:{type:"string",enum:[...qs]},owners:{...X,minItems:1},forbiddenGlobals:X,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...X,minItems:1},sharedRoots:{...X,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant. When any invariant is enforced, missing coverageRoots fails closed.",properties:{testGlobs:{...X,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...X,minItems:1}}},arkRun:Mn,arkOrder:Hn}},le=class extends Error{static{i(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+var wr=Object.defineProperty;var i=(e,t)=>wr(e,"name",{value:t,configurable:!0});function j(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}i(j,"deterministicHash");function N(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(N).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${N(t[n])}`).join(",")}}`}i(N,"stableSerialize");var be="1.2";var Bt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=N(e),r=N(t);return n<r?-1:n>r?1:0}i(K,"compareCanonical");function V(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}i(V,"sortedUnique");function Ge(e){let t={schemaVersion:"1.2",include:V(e.include??[]),exclude:V(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:V(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:V(n.patterns??[]),exclude:V(n.exclude??[]),forbiddenGlobals:V(n.forbiddenGlobals??[]),intentPrefixes:V(n.intentPrefixes??[]),capabilityDeny:V(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:V(e.arkRun.compositionRoots),managedLayers:V(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return j(N(t))}i(Ge,"resolvedFactsEvidenceRequirementsHash");function Or(e){let t=e.completenessReasons.map(b=>({code:b.code,message:b.message,...b.file?{file:b.file}:{}})).sort(K),n=e.files.map(b=>({...b,typeOnlyExportNames:V(b.typeOnlyExportNames)})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),r=e.dependencies.map(b=>({...b,...b.namedBindings?{namedBindings:V(b.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(b=>({...b})).sort(K),o=e.ambientUses.map(b=>({...b})).sort(K),a=e.publishCalls.map(b=>({...b})).sort(K),d=e.intentReferences.map(b=>({...b})).sort(K),l=e.safetyUses.map(b=>({...b})).sort(K),g=(e.classShapes??[]).map(b=>({...b,mutatingMethods:[...b.mutatingMethods??[]].map(x=>({...x}))})).sort(K),R=(e.arkRunKernelCalls??[]).map(b=>({...b})).sort(K),A=(e.arkRunManagedNews??[]).map(b=>({...b})).sort(K),u=(e.arkRunCompositionRootHits??[]).map(b=>({...b})).sort(K),m=(e.arkRunDeclarations??[]).map(b=>({...b,uses:V(b.uses),reactsTo:V(b.reactsTo),raises:V(b.raises),sends:V(b.sends)})).sort(K),c=(e.arkOrderPlaneCalls??[]).map(b=>({...b})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(b=>({...b})).sort(K),k=(e.arkOrderRootHits??[]).map(b=>({...b})).sort(K),I=(e.arkOrderXiFieldWrites??[]).map(b=>({...b})).sort(K),E=(e.arkOrderIngestWritesXi??[]).map(b=>({...b})).sort(K),w=(e.arkOrderReleaseKeyCounts??[]).map(b=>({...b})).sort(K),$=e.files.map(({path:b,contentHash:x})=>({path:b,contentHash:x})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),te=j(N($));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:te,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:o,publishCalls:a,intentReferences:d,safetyUses:l,classShapes:g,arkRunKernelCalls:R,arkRunManagedNews:A,arkRunCompositionRootHits:u,arkRunDeclarations:m,arkOrderPlaneCalls:c,arkOrderGenericUpdates:y,arkOrderRootHits:k,arkOrderXiFieldWrites:I,arkOrderIngestWritesXi:E,arkOrderReleaseKeyCounts:w}}i(Or,"canonicalResolvedFactsInput");function zt(e){let t=Or(e);return{...t,factsHash:j(N(t))}}i(zt,"createCanonicalResolvedCandidateFacts");function Be(e){return zt(qt(F(e,"$"),!1))}i(Be,"createResolvedCandidateFacts");function F(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}i(F,"asRecord");function P(e,t,n){let r=new Set(t),s=Object.keys(e).find(o=>!r.has(o));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}i(P,"assertOnlyKeys");function T(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}i(T,"requiredText");function oe(e,t,n){if(e[t]!==void 0)return T(e,t,n)}i(oe,"optionalText");function L(e,t,n){let r=T(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let o=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(o.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);o.pop()}else o.push(d);let a=o.join("/");if(!a||a!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return a}i(L,"requiredProjectPath");function D(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}i(D,"requiredBoolean");function Wt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}i(Wt,"requiredInteger");function B(e,t,n){let r=Wt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}i(B,"requiredPositiveInteger");function M(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}i(M,"requiredArray");function ae(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}i(ae,"enumValue");function ve(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}i(ve,"parseStringArray");function xr(e,t,n){let r=new Set;for(let s of e){let o=t(s);if(r.has(o))throw new Error(`${n} must not contain duplicate facts (${o}).`);r.add(o)}}i(xr,"assertUnique");function qt(e,t){P(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ae(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ae(e,"completeness",["complete","partial","unavailable"],"$"),s=M(e,"completenessReasons","$").map((v,S)=>{let f=`$.completenessReasons[${S}]`,h=F(v,f);P(h,["code","message","file"],f);let _=h.file===void 0?void 0:L(h,"file",f);return{code:T(h,"code",f),message:T(h,"message",f),..._?{file:_}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let o=M(e,"files","$").map((v,S)=>{let f=`$.files[${S}]`,h=F(v,f);return P(h,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],f),{path:L(h,"path",f),contentHash:T(h,"contentHash",f),parseStatus:ae(h,"parseStatus",["parsed","invalid"],f),parseDiagnosticCount:Wt(h,"parseDiagnosticCount",f),exportsOnlyTypes:D(h,"exportsOnlyTypes",f),typeOnlyExportNames:ve(h.typeOnlyExportNames,`${f}.typeOnlyExportNames`),hasTopLevelSideEffects:D(h,"hasTopLevelSideEffects",f)}}),a=M(e,"dependencies","$").map((v,S)=>{let f=`$.dependencies[${S}]`,h=F(v,f);P(h,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],f);let _=oe(h,"specifier",f),U=oe(h,"target",f),de=ae(h,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],f);if(de==="resolved-project"&&!U)throw new Error(`${f}.target is required for resolved-project dependencies.`);if(de!=="resolved-project"&&U)throw new Error(`${f}.target is only allowed for resolved-project dependencies.`);if(de!=="dynamic"&&!_)throw new Error(`${f}.specifier is required unless resolution is dynamic.`);return{from:L(h,"from",f),..._?{specifier:_}:{},kind:ae(h,"kind",["import","export","dynamic-import","require"],f),typeOnly:D(h,"typeOnly",f),line:B(h,"line",f),resolution:de,...U?{target:L(h,"target",f)}:{},...h.namedBindings!==void 0?{namedBindings:ve(h.namedBindings,`${f}.namedBindings`)}:{},...h.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:D(h,"targetTypeOnlyExports",f)}:{},...h.sourcePureTypeModule!==void 0?{sourcePureTypeModule:D(h,"sourcePureTypeModule",f)}:{},...h.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:D(h,"namedBindingsTypeOnly",f)}:{},...h.portProofEligible!==void 0?{portProofEligible:D(h,"portProofEligible",f)}:{}}}),d=M(e,"capabilityUses","$").map((v,S)=>{let f=`$.capabilityUses[${S}]`,h=F(v,f);return P(h,["file","line","symbol","capability","source"],f),{file:L(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f),capability:ae(h,"capability",Bt,f),source:ae(h,"source",["ambient-global","import-based"],f)}}),l=M(e,"ambientUses","$").map((v,S)=>{let f=`$.ambientUses[${S}]`,h=F(v,f);return P(h,["file","line","symbol"],f),{file:L(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f)}}),g=M(e,"publishCalls","$").map((v,S)=>{let f=`$.publishCalls[${S}]`,h=F(v,f);P(h,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],f);let _=oe(h,"rawIntentName",f),U=oe(h,"sourceIntent",f);return{file:L(h,"file",f),line:B(h,"line",f),..._?{rawIntentName:_}:{},objectHasIntent:D(h,"objectHasIntent",f),arkPublishCandidate:D(h,"arkPublishCandidate",f),hasSource:D(h,"hasSource",f),...U?{sourceIntent:U}:{}}}),R=M(e,"intentReferences","$").map((v,S)=>{let f=`$.intentReferences[${S}]`,h=F(v,f);return P(h,["file","line","intent"],f),{file:L(h,"file",f),line:B(h,"line",f),intent:T(h,"intent",f)}}),A=M(e,"safetyUses","$").map((v,S)=>{let f=`$.safetyUses[${S}]`,h=F(v,f);P(h,["file","line","kind","symbol"],f);let _=oe(h,"symbol",f),U=ae(h,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],f);if(U==="in-memory-store"&&!_)throw new Error(`${f}.symbol is required for in-memory-store facts.`);if(U!=="in-memory-store"&&_)throw new Error(`${f}.symbol is only allowed for in-memory-store facts.`);return{file:L(h,"file",f),line:B(h,"line",f),kind:U,..._?{symbol:_}:{}}});xr(o,v=>v.path,"$.files");let u=new Set(o.map(v=>v.path));for(let v of o){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&o.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of a)if(!u.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let c=(e.arkRunKernelCalls===void 0?[]:M(e,"arkRunKernelCalls","$")).map((v,S)=>{let f=`$.arkRunKernelCalls[${S}]`,h=F(v,f);P(h,["file","line","kind","callee","viaImport","receiver","nameLiteral"],f);let _=oe(h,"receiver",f),U=oe(h,"nameLiteral",f);return{file:L(h,"file",f),line:B(h,"line",f),kind:ae(h,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],f),callee:T(h,"callee",f),viaImport:D(h,"viaImport",f),..._?{receiver:_}:{},...U?{nameLiteral:U}:{}}}),k=(e.arkRunManagedNews===void 0?[]:M(e,"arkRunManagedNews","$")).map((v,S)=>{let f=`$.arkRunManagedNews[${S}]`,h=F(v,f);P(h,["file","line","typeName","importedFrom"],f);let _=oe(h,"importedFrom",f);return{file:L(h,"file",f),line:B(h,"line",f),typeName:T(h,"typeName",f),..._?{importedFrom:_}:{}}}),E=(e.arkRunCompositionRootHits===void 0?[]:M(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let f=`$.arkRunCompositionRootHits[${S}]`,h=F(v,f);return P(h,["file","matchedRoot","hasKernelFactory"],f),{file:L(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasKernelFactory:D(h,"hasKernelFactory",f)}}),w=e.arkRunDeclarations===void 0?[]:M(e,"arkRunDeclarations","$"),te=(e.arkOrderPlaneCalls===void 0?[]:M(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let f=`$.arkOrderPlaneCalls[${S}]`,h=F(v,f);return P(h,["file","line","callee"],f),{file:L(h,"file",f),line:B(h,"line",f),callee:T(h,"callee",f)}}),x=(e.arkOrderGenericUpdates===void 0?[]:M(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let f=`$.arkOrderGenericUpdates[${S}]`,h=F(v,f);return P(h,["file","line","method"],f),{file:L(h,"file",f),line:B(h,"line",f),method:T(h,"method",f)}}),J=(e.arkOrderRootHits===void 0?[]:M(e,"arkOrderRootHits","$")).map((v,S)=>{let f=`$.arkOrderRootHits[${S}]`,h=F(v,f);return P(h,["file","matchedRoot","hasPlaneFactory"],f),{file:L(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasPlaneFactory:D(h,"hasPlaneFactory",f)}}),Ae=(e.arkOrderXiFieldWrites===void 0?[]:M(e,"arkOrderXiFieldWrites","$")).map((v,S)=>{let f=`$.arkOrderXiFieldWrites[${S}]`,h=F(v,f);return P(h,["file","line","key"],f),{file:L(h,"file",f),line:B(h,"line",f),key:T(h,"key",f)}}),je=(e.arkOrderIngestWritesXi===void 0?[]:M(e,"arkOrderIngestWritesXi","$")).map((v,S)=>{let f=`$.arkOrderIngestWritesXi[${S}]`,h=F(v,f);return P(h,["file","line"],f),{file:L(h,"file",f),line:B(h,"line",f)}}),ke=(e.arkOrderReleaseKeyCounts===void 0?[]:M(e,"arkOrderReleaseKeyCounts","$")).map((v,S)=>{let f=`$.arkOrderReleaseKeyCounts[${S}]`,h=F(v,f);return P(h,["file","line","keyCount"],f),{file:L(h,"file",f),line:B(h,"line",f),keyCount:B(h,"keyCount",f)}}),we=w.map((v,S)=>{let f=`$.arkRunDeclarations[${S}]`,h=F(v,f);return P(h,["file","line","uses","reactsTo","raises","sends"],f),{file:L(h,"file",f),line:B(h,"line",f),uses:ve(h.uses,`${f}.uses`),reactsTo:ve(h.reactsTo,`${f}.reactsTo`),raises:ve(h.raises,`${f}.raises`),sends:ve(h.sends,`${f}.sends`)}});for(let[v,S]of[["$.capabilityUses",d],["$.ambientUses",l],["$.publishCalls",g],["$.intentReferences",R],["$.safetyUses",A],["$.arkRunKernelCalls",c],["$.arkRunManagedNews",k],["$.arkRunCompositionRootHits",E],["$.arkRunDeclarations",we],["$.arkOrderPlaneCalls",te],["$.arkOrderGenericUpdates",x],["$.arkOrderRootHits",J],["$.arkOrderXiFieldWrites",Ae],["$.arkOrderIngestWritesXi",je],["$.arkOrderReleaseKeyCounts",ke]])for(let f of S)if(!u.has(f.file))throw new Error(`${v} references missing file ${f.file}.`);let Ve=oe(e,"projectPackageName","$"),Gt=(e.classShapes===void 0?[]:M(e,"classShapes","$")).map((v,S)=>{let f=`$.classShapes[${S}]`,h=F(v,f);P(h,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],f);let _=M(h,"mutatingMethods",f).map((U,de)=>{let p=`${f}.mutatingMethods[${de}]`,W=F(U,p);return P(W,["name","referencesGuardOrPublish"],p),{name:T(W,"name",p),referencesGuardOrPublish:D(W,"referencesGuardOrPublish",p)}});return{file:L(h,"file",f),className:T(h,"className",f),exported:D(h,"exported",f),hasPublicMutableFields:D(h,"hasPublicMutableFields",f),hasPublicSetters:D(h,"hasPublicSetters",f),hasPublicConstructor:D(h,"hasPublicConstructor",f),hasStaticFactory:D(h,"hasStaticFactory",f),mutatingMethods:_,...h.dataOnly===void 0?{}:{dataOnly:D(h,"dataOnly",f)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:T(e,"resolverIdentity","$"),compilerIdentity:T(e,"compilerIdentity","$"),compilerOptionsHash:T(e,"compilerOptionsHash","$"),tsconfigHash:T(e,"tsconfigHash","$"),evidenceRequirementsHash:T(e,"evidenceRequirementsHash","$"),...Ve?{projectPackageName:Ve}:{},files:o,dependencies:a,capabilityUses:d,ambientUses:l,publishCalls:g,intentReferences:R,safetyUses:A,classShapes:Gt,arkRunKernelCalls:c,arkRunManagedNews:k,arkRunCompositionRootHits:E,arkRunDeclarations:we,arkOrderPlaneCalls:te,arkOrderGenericUpdates:x,arkOrderRootHits:J,arkOrderXiFieldWrites:Ae,arkOrderIngestWritesXi:je,arkOrderReleaseKeyCounts:ke}}i(qt,"parseResolvedFactsInput");function ge(e){let t=F(e,"$"),n=T(t,"factsHash","$"),r=T(t,"candidateTreeHash","$"),s=zt(qt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}i(ge,"loadResolvedCandidateFacts");var _r=["network","filesystem","clock","randomness","environment","process","persistence"],O={type:"string",minLength:1},q={type:"integer",minimum:1},H={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Yt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:O,message:O,file:H}}},resolverIdentity:O,compilerIdentity:O,compilerOptionsHash:O,tsconfigHash:O,candidateTreeHash:O,evidenceRequirementsHash:O,projectPackageName:O,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:H,contentHash:O,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:O},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:H,specifier:O,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:q,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:H,namedBindings:{type:"array",items:O},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:H,line:q,symbol:O,capability:{enum:_r},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:H,line:q,symbol:O}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:H,line:q,rawIntentName:O,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:O}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:H,line:q,intent:O}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:H,line:q,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:O},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:H,className:O,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:O,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:H,line:q,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:O,viaImport:{type:"boolean"},receiver:O,nameLiteral:O}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:H,line:q,typeName:O,importedFrom:O}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:H,matchedRoot:O,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:H,line:q,uses:{type:"array",items:O},reactsTo:{type:"array",items:O},raises:{type:"array",items:O},sends:{type:"array",items:O}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:H,line:q,callee:O}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:H,line:q,method:O}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:H,matchedRoot:O,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:H,line:q,key:O}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:H,line:q}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:H,line:q,keyCount:{type:"integer",minimum:1}}}},factsHash:O},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Xt="1.0";var ct=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),ze=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),ut=Object.freeze(Object.keys(ze).sort()),lt=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),dt=Object.freeze({process:Object.freeze(["process","node:process"])});function _e(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=lt[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=lt[r];if(s)return s;let o=e.indexOf("/",n+1);return o<0?null:lt[e.slice(0,o)]??null}i(_e,"capabilityForModuleSpecifier");function Te(e,t){for(let n of t)if(dt[n]?.includes(e))return n;return null}i(Te,"forbiddenGlobalForModuleSpecifier");function $e(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=ze[r];if(s)return s}return null}i($e,"capabilityForAmbientName");function Ee(e){if(e?.pure===!0)return[...ct].sort();let n=(e?.capabilities?.deny??[]).filter(r=>ct.includes(r));return[...new Set(n)].sort()}i(Ee,"effectiveCapabilityDeny");function ft(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}i(ft,"ambientCoveredByForbiddenGlobals");function We(e){let t=new Set,n=new Set,r=Object.keys(ze);for(let s of e?.forbiddenGlobals??[]){let o=r.filter(a=>a===s||a.startsWith(`${s}.`));if(o.length===0)n.add(s);else for(let a of o)t.add(`ambient:${a}`);for(let a of dt[s]??[])t.add(`import-exact:${a}`)}for(let s of Ee(e)){if(t.add(`import:${s}`),s==="process")for(let o of dt.process)t.add(`import-exact:${o}`);for(let o of r)$e(o)===s&&t.add(`ambient:${o}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}i(We,"loweredLayerCoverage");function Tr(e){let t=new Set,n=$e(e);n&&t.add(n);for(let[r,s]of Object.entries(ze))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}i(Tr,"lowerForbiddenGlobal");var Zt=new Map;function Jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Jt,"escapeLiteral");function Ye(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(Ye,"normalizeGlobSeparators");function $r(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i($r,"bracesBalanced");function ie(e){let t=Zt.get(e);if(t)return t;let n=Ye(e),r=$r(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Jt(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Jt(l)}let a=new RegExp(`^${s}$`);return Zt.set(e,a),a}i(ie,"globToRegExp");function Fr(e){return Ye(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}i(Fr,"concreteGlobSegments");function gt(e,t){let n=Ye(String(e)),r=Fr(n),s=n.replace(/\*/g,"").length,o=r.length*1e4+s;if(t==null||t==="")return o;let a=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,l=-1;for(let g of r){let R=-1;for(let A=d;A<a.length;A+=1)if(a[A]===g){R=A;break}if(R<0)return o;l=R,d=R+1}return(l+1)*1e6+r.length*1e4+s}i(gt,"patternSpecificity");function Q(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(a=>ie(a).test(n))){for(let a of o.patterns??[])if(ie(a).test(n)){let d=gt(a,n);d>s&&(s=d,r=o.name)}}return r}i(Q,"layerForRelativePath");function qe(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean);if(n.length===0)return;let r=new Set;for(let s of t)if(!(typeof s!="string"||s.length===0)){if(Nr(s)){let o=Pr(n,s);if(o)return o;continue}!s.includes("/")&&!s.includes("\\")&&!s.includes("*")&&r.add(s.toLowerCase())}return Dr(n,r)}i(qe,"sliceIdForPath");function Nr(e){let t=e.split(/[/\\]/).filter(n=>n.length>0);return t.length<2||t[0]==="*"||t[0]==="**"?!1:t.some(n=>n==="*")}i(Nr,"isAnchoredSliceEntry");function Pr(e,t){let n=t.split(/[/\\]/).filter(s=>s.length>0).map(s=>s.toLowerCase()),r=rn(e,n[0]??"");for(let s of r){let o=Lr(e,n,s);if(o)return o}}i(Pr,"anchoredSliceId");function Lr(e,t,n){let r=[],s=n;for(let o=0;o<t.length;o+=1){let a=t[o];if(a==="*"){if(s>=e.length-1){for(let d=o;d<t.length;d+=1)if(t[d]!=="*")return;break}r.push(e[s].toLowerCase()),s+=1;continue}if(a==="**"||s>=e.length||e[s].toLowerCase()!==a)return;r.push(e[s].toLowerCase()),s+=1}return r.length>0?r.join("/"):void 0}i(Lr,"bindAnchoredSlice");function Dr(e,t){if(t.size!==0){for(let n=0;n<e.length-1;n+=1)if(t.has(e[n].toLowerCase())&&!(n+1>=e.length-1))return`${e[n].toLowerCase()}/${e[n+1].toLowerCase()}`}}i(Dr,"bareSliceId");function Mr(e){let t=new Set;for(let n of e??[]){let s=Ye(String(n)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let a=s[o];if((a==="**"||a==="*")&&o>0){let d=s[o-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}i(Mr,"inferSliceFoldersFromPatterns");function tn(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return Mr(r?.patterns)}i(tn,"resolveSliceFolders");function Qt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}i(Qt,"normalizeSegments");function nn(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}i(nn,"trimTrailingSlashes");var Hr=["src","app"];function rn(e,t){let n=(e[0]??"").toLowerCase(),r=t.toLowerCase();return Hr.includes(n)&&r!==n?[0,1]:[0]}i(rn,"anchorOffsets");function Kr(e){let t=nn(e.replace(/^[./]+/,""));return t==="*"||t==="**"}i(Kr,"isBlanketRoot");function pt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=Qt(n);for(let o of t){if(typeof o!="string"||o.length===0||Kr(o))continue;if(o.includes("*")){let l=nn(o.toLowerCase());if(ie(l).test(r)||ie(`${l}/**`).test(r))return!0;continue}let a=Qt(o);if(a.length===0)continue;let d=rn(s,a[0]??"");for(let l of d){if(l+a.length>s.length)continue;let g=!0;for(let R=0;R<a.length;R+=1)if(s[l+R]!==a[R]){g=!1;break}if(g)return!0}}return!1}i(pt,"pathUnderSharedRoot");function en(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}i(en,"sliceMatchesDeclaration");function Ur(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&en(r.from,t)&&en(r.to,n))}i(Ur,"crossSliceEdgeAllowed");function jr(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:e.sharedImportsSlice==="deny"&&e.fromShared===!0&&e.toSlice&&!e.fromSlice?{denied:!0,reason:"shared-imports-slice"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}i(jr,"peerIsolationDecision");function Xe(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"shared-imports-slice":return`shared root imports slice ${t.toSlice??"?"} (${t.fromPath??"?"} \u2192 ${t.toPath??"?"}). The wall is direct-only.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}i(Xe,"peerIsolationDenyExplanation");function sn(e,t,n,r){return Fe(e,t,n,r)?.rule}i(sn,"findDeniedEdgeRule");function Fe(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let o=r?.fromPath,a=r?.toPath,d=tn(s,t,r?.layers),l=o?qe(o,d):void 0,g=a?qe(a,d):void 0,R=jr({fromPath:o,toPath:a,folderCount:d.length,fromSlice:l,toSlice:g,fromShared:!l&&pt(o,s.sharedRoots),toShared:!g&&pt(a,s.sharedRoots),crossSliceAllowed:Ur(s.allowedCrossSlice,l,g),sharedImportsSlice:s.sharedImportsSlice});if(R.denied)return{rule:s,peerIsolationReason:R.reason,fromSlice:l,toSlice:g};continue}if(t!==n)return{rule:s}}}i(Fe,"findDeniedEdgeDecision");function on(e,t,n,r){let s=r?.fromPath,o=r?.toPath;if(!(!s||!o))for(let a of e??[]){if(a.from!==t||a.to!==n||a.allowed!==!1||!a.peerIsolation||a.sharedImportsSlice==="deny")continue;let d=tn(a,t,r?.layers),l=qe(s,d),g=qe(o,d);if(!(l||!g)&&pt(s,a.sharedRoots))return{fromPath:s,toPath:o,toSlice:g}}}i(on,"findSharedImportsSliceBridge");var mt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},yt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function ht(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(o=>({layer:r.name,layerIndex:s,prefix:o.endsWith(".")?o:`${o}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}i(ht,"resolveIntentLayer");function an(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}i(an,"looksLikeArkIntent");function Rt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&an(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:mt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:mt.PUBLISH_MISSING_SOURCE}),t}i(Rt,"classifyPublishFacts");var ln="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Vr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var cn={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ga={$schema:"https://json-schema.org/draft/2020-12/schema",$id:ln,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:ln},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Vr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:cn,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:cn}}}};function Ne(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}i(Ne,"emptyEffectiveArkRules");function dn(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}i(dn,"structureFreezeTarget");var Gr=["no-anemic-model"],mn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],Aa=new RegExp(`\\b(${mn.join("|")})\\b`),yn="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",ka=new RegExp(`\\bthis\\.${yn}\\.push\\s*\\(`),ba=new RegExp(`^this\\.${yn}\\s*=\\s*\\[\\s*\\]`);var Br="truncatedUntil";function zr(){return`${mn.join(", ")}, or events-array .push(`}i(zr,"expectedDomainInvariantWordsPhrase");function At(e){let t=Object.getOwnPropertyDescriptor(e,Br)?.value;return typeof t=="number"?t:void 0}i(At,"shapeTruncatedUntil");function Wr(e){let t=At(e);return t==null?"":` shape analysed until character ${t}`}i(Wr,"shapeTruncationSuffix");function un(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(un,"escapeGlobLiteral");function qr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let o=e[r+1];if("*?{}[],".includes(o)||o==="\\"){t+="\\"+o,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=un(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=un(s)}return new RegExp(`^${n}$`)}i(qr,"globToRegExp");function Ie(e,t){return!t||t.length===0?!0:t.some(n=>qr(n).test(e))}i(Ie,"matchesAppliesTo");function hn(e){return Gr.includes(e)}i(hn,"isTier2");function Rn(e){return e.mode==="enforced"&&!hn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}i(Rn,"severityFor");function ue(e,t,n,r=1){let{severity:s,failsStrict:o}=Rn(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:o}}i(ue,"baseViolation");function Ze(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}i(Ze,"isInRuleLayer");function Je(e,t,n){return t.filter(r=>!(!r.exported||!Ie(r.file,e.appliesTo)||!Ze(r.file,e,n)))}i(Je,"shapesForRule");function Yr(e,t,n){let r=[];for(let s of Je(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(ue(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}i(Yr,"evaluateAggregatePrivateState");function Xr(e,t,n){let r=[];for(let s of Je(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(ue(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}i(Xr,"evaluateAlwaysValidFactory");function Zr(e,t,n){let r=[],s=zr();for(let o of Je(e,t,n)){let a=Wr(o);At(o)!=null&&r.push(ue(e,o.file,`Exported class ${o.className} shape analysed until character ${At(o)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of o.mutatingMethods)d.referencesGuardOrPublish||r.push(ue(e,o.file,`Mutating method ${o.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${a}`))}return r}i(Zr,"evaluateDomainEventOnMutation");function Jr(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(ue(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}i(Jr,"evaluateOrchestrationOnly");function Qr(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(ue(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}i(Qr,"evaluateThinAdapter");function es(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(ue(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}i(es,"evaluateWritesViaAggregate");function ts(e,t,n){let r=[];for(let s of Je(e,t,n))if(s.dataOnly===!0){let o=ue(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...o,severity:"warning",failsStrict:!1})}return r}i(ts,"evaluateNoAnemicModel");function An(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...Yr(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...Xr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...Zr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...Jr(n,e));break;case"thin-adapter":t.push(...Qr(n,e));break;case"writes-via-aggregate":t.push(...es(n,e));break;case"no-anemic-model":t.push(...ts(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}i(An,"evaluateArkRuleSensors");function kn(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(l=>Ie(l,s.appliesTo)))continue;let{severity:a,failsStrict:d}=Rn(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>Ie(d,s.appliesTo)))continue;let a=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a?"error":"warning",sensor:"invariant-coverage",failsStrict:a})}return n.sort((s,o)=>s.file.localeCompare(o.file)||s.arkruleId.localeCompare(o.arkruleId)||s.message.localeCompare(o.message))}i(kn,"collectEmptyAppliesToFindings");var fn=64;function ns(e){let t=e.length;for(;t>0&&e.charCodeAt(t-1)===46;)t-=1;return t===e.length?e:e.slice(0,t)}i(ns,"stripTrailingDots");function rs(e){let t=e.trim(),n=t.length>fn?t.slice(0,fn):t;return ns(n)}i(rs,"normalizeIntentPrefix");function ss(e){let t=e.toLowerCase();return t.includes("domain")||t.includes("entity")||t.includes("aggregate")||t.includes("model")}i(ss,"layerNameLooksDomain");function os(e){return e.some(t=>{let n=rs(t);return n==="Domain"||n.startsWith("Domain.")})}i(os,"ownsDomainIntent");function as(e,t=[]){return ss(e)||os(t)}i(as,"isDomainRoleLayerName");function bn(e){if(e.arkRulesActive!==!0)return[];let t=(e.layers??[]).filter(l=>as(l.name,l.intentPrefixes??[])).map(l=>l.name);if(t.length===0)return[];let n=new Set(t);if(!(e.files??[]).some(l=>{let g=typeof l.layer=="string"?l.layer:"";return g.length>0&&n.has(g)}))return[];if((e.arkRules.invariants??[]).filter(l=>n.has(l.provenance.layer)).length>0)return[];let o=t.find(l=>e.arkRules.byLayer?.[l])??t[0],a=e.arkRules.byLayer?.[o]?.sourceFile??`arkrules/${o}.json`,d=(e.arkRules.structure??[]).some(l=>l.mode==="enforced"&&n.has(l.provenance.layer)&&!hn(l.sensor));return[{ruleId:"INVARIANT_CATALOG_EMPTY",code:"invariant-catalog-empty",message:`ArkRules is on and ${o} has code, but invariants[] is empty \u2014 there are no phrases the code must preserve. Add 1\u20132 short phrases in ${a}.`,file:a,line:1,fromLayer:o,arkruleId:"invariant-catalog",arkruleSource:a,severity:d?"error":"warning",sensor:"invariant-coverage",failsStrict:d}]}i(bn,"collectEmptyInvariantCatalogFindings");var pn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,gn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,is=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function ls(e){return e==="PersistenceAdapters"}i(ls,"isPersistenceDriverLayer");function cs(e,t){if(pn.test(e)||gn.test(e))return!0;if(!t)return!1;for(let n of t){if(ls(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(pn.test(s)||gn.test(s))return!0}return!1}i(cs,"sourceImportsPersistenceDriver");var ds=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,us=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,fs=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,ps=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function gs(e,t,n){if(!t)return null;let r=cs(t,n),s=r&&is.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let o=t.match(new RegExp(fs.source,"g"))??[],a=t.match(new RegExp(ps.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,l=(t.match(/\bswitch\s*\(/g)??[]).length,g=o.length>=2||o.length>=1&&a.length>=2||a.length>=3&&d+l>=6,R=ds.test(t)||us.test(t),A=o.length>=1||a.length>=2,u=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),m=r&&A||R&&A||r&&u&&(d>=4||o.length>=1)||R&&r;return!g&&!m&&!s?null:{...g?{orchestrationHeavy:!0}:{},...m?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}i(gs,"deriveArkRuleFileHints");function vn(e,t){let n={};for(let[r,s]of Object.entries(e)){let o=r.replace(/\\/g,"/"),a=gs(r,s,t?.[o]);a&&(n[o]=a)}return n}i(vn,"buildArkRuleFileHints");var ms="INVARIANT_TESTS_PATH_MISSING",ys="This project is adopted and has domain invariants, but ark.config.json does not name a real tests path. Add coverage.testGlobs or coverage.coverageRoots pointing at the folder where those tests live, then re-run. Without that path, coverage is an empty checkbox.",hs="INVARIANT_COVERAGE_ROOTS_MISSING",Rs="A domain invariant is enforced, but ark.config.json does not name coverage.coverageRoots \u2014 the folders where this project's test runner actually goes. Add coverage.coverageRoots pointing at that folder, then re-run. Without it, coverage can certify a test no runner runs.";function En(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}i(En,"formatCoverageDiscards");function As(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}i(As,"isUnderCoverageRoot");function ks(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}i(ks,"titleMatchesInvariant");function bs(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}i(bs,"escapeRegExp");function vs(e,t){let n=bs(t),r=new RegExp(`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:declare\\s+)?(?:async\\s+)?function\\s*\\*?\\s*${n}\\s*[(<]`),s=new RegExp(`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:abstract\\s+)?class\\s+${n}\\b`),o=new RegExp(`(?:^|[\\s;{}])export\\s+(?:const|let|var)\\s+${n}\\s*=`),a=new RegExp(`(?:^|[\\n;{}])\\s*(?:(?:public|private|protected|static|async|readonly|override|abstract|get|set|declare)\\s+)*${n}\\s*(?:<[^>\\n]*>)?\\s*\\([^;{}]*\\)\\s*(?::\\s*[^;{]+)?\\s*\\{`);return r.test(e)||s.test(e)||o.test(e)||a.test(e)}i(vs,"declaresIdentifier");function Es(e,t,n){if(!n)return;let r=n.split("."),s=r[r.length-1]??"";if(!s)return;let o=r.length>1?r[0]:null,a=new Set(t.map(l=>l.replace(/\\/g,"/").replace(/^\.\//,""))),d=Object.keys(e).sort((l,g)=>l<g?-1:l>g?1:0);for(let l of d){let g=l.replace(/\\/g,"/").replace(/^\.\//,"");if(a.has(g))continue;let R=e[l];if(R&&!(o&&!R.includes(o))&&vs(R,s))return l}}i(Es,"symbolPresent");function In(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,o=e.coverageStats,a=En(o),d=En(o,!0),l=o?`coverage file budget exhausted: ${o.filesLoaded} files loaded at the ${o.maxFiles}-file cap, ${o.testFilesRetained} tests retained, ${o.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof o.filesRead=="number"?`; ${o.filesRead} were read`:""})`:"coverage file budget exhausted",g=(e.coverageRoots??[]).filter(c=>typeof c=="string"&&c.length>0),R=g.length>0,A=g.join(", "),u=[],m=[];for(let c of t){let y=[],k=c.coverage?.test!==!1,I=c.coverage?.symbol,E,w;if(!r&&k){let se;for(let J of n){let Re=e.fileContents[J];if(!(!Re||!ks(Re,c.id))){if(!R||As(J,g)){E=J,w=R?!1:void 0;break}se??=J}}E===void 0&&se!==void 0&&(E=se,w=!0),E!==void 0&&y.push("test-title")}let $=I?Es(e.fileContents,n,I):void 0;$&&y.push("symbol");let b=(c.coverage?.test===!0||!!I||c.coverage===void 0)&&y.length>0||c.coverage?.test===!1&&!I?!0:y.length>0,x=r&&k&&y.length===0;if(u.push({invariantId:c.id,layer:c.provenance.layer,sourceFile:c.provenance.sourceFile,mode:c.mode,covered:b&&!x,evidence:y,partial:x,description:c.description,...E!==void 0?{testEvidenceFile:E}:{},...$!==void 0?{symbolEvidenceFile:$}:{},...w!==void 0?{outsideDeclaredRoots:w}:{},coverageRootsDeclared:R}),w===!0&&E!==void 0&&m.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${c.id} is covered only by ${E}, which is outside the declared coverage roots (${A}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:E,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:"warning",failsStrict:!1}),!b||x){let se=c.mode==="enforced"&&!x,J=r||n.length===0?"never-had-tests":"tests-disappeared";m.push({ruleId:"INVARIANT_UNCOVERED",message:(x?s?`Invariant ${c.id} coverage cannot be proven (${l}); reporting partial, not covered.`:`Invariant ${c.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:J==="tests-disappeared"?`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(x&&s?d:a),file:c.provenance.sourceFile,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:se?"error":"warning",failsStrict:se,kind:J})}}return{coverage:u,violations:m,partial:u.some(c=>c.partial)}}i(In,"evaluateInvariantCoverage");function Sn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:e.coverageRootsDeclared===!1?{ok:!1,reason:`Declare coverage.coverageRoots in ark.config.json before promoting ${e.invariantId} to enforced. Without that, ArkGate cannot tell whether a covering test is one the runner executes.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}i(Sn,"canPromoteInvariant");function kt(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){if(typeof n!="string")continue;let r=n.trim();r.length>0&&t.push(r)}return t}i(kt,"nonEmptyPathStrings");function Is(e){return!e||typeof e!="object"?[]:[...kt(e.testGlobs),...kt(e.coverageRoots)]}i(Is,"configuredInvariantTestsPaths");function Ss(e){return Is(e).length>0}i(Ss,"hasConfiguredInvariantTestsPath");function bt(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.coverage?.test!==!1)}i(bt,"catalogDemandsInvariantTestsPath");function Cn(e){let t=e.hasDomainInvariants===!0||e.hasDomainInvariants!==!1&&bt(e.invariants);return e.adopted!==!0||!t?[]:Ss(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:ms,message:ys,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]}i(Cn,"collectMissingInvariantTestsPathFindings");function Cs(e){return!e||typeof e!="object"?[]:kt(e.coverageRoots)}i(Cs,"configuredCoverageRoots");function ws(e){return Cs(e).length>0}i(ws,"hasConfiguredCoverageRoots");function vt(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.mode==="enforced")}i(vt,"catalogHasEnforcedInvariant");function wn(e){return e.hasEnforcedInvariant===!0||e.hasEnforcedInvariant!==!1&&vt(e.invariants)?ws(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:hs,message:Rs,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]:[]}i(wn,"collectMissingCoverageRootsFindings");function Os(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}i(Os,"normalizeExtraMergeTeethClassification");function Qe(e){let t=Os(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}i(Qe,"extraMergeTeethAllowed");function On(e){let t=e.length,n=0,r=new Set;for(let s of e){let o=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;o&&(n+=1,r.add(o))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}i(On,"classifyResolvedLayerCoverage");var xs=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Oa=new Set(xs);function xn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}i(xn,"isArkRunKernelModuleSpecifier");var _s=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],Et=new Set(_s);function _n(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(Et.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(Et.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:Et.has(e.slice(0,r))}i(_n,"isArkRunTransportBypassSpecifier");var Ts=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,$s=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Fs=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Ns(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Ts.test(n)?"pure-shared":r==="PersistenceAdapters"&&($s.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Fs.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}i(Ns,"classifyLayerImportKind");function Ps(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Ns(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}i(Ps,"layerImportNextAction");function Ls(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}i(Ls,"arkRunCallSiteName");function Ds(e){let t=Ls(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(Ds,"arkRunNextAction");function fe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Ps(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"INVARIANT_CATALOG_EMPTY":return typeof e.file=="string"&&e.file.length>0?`Add 1\u20132 short phrases to invariants[] in ${e.file}, then run ark-check --doctor. Starters show the shape.`:"Add 1\u20132 short phrases to invariants[] in arkrules/<Domain>.json, then run ark-check --doctor. Starters show the shape.";case"INVARIANT_TESTS_PATH_MISSING":return"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.";case"INVARIANT_COVERAGE_ROOTS_MISSING":return"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Ds(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change the choice with proposeRelease then apply. release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(fe,"deterministicNextAction");var Ms=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Ka=new Set(Ms);var Tn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Hs="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Nn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Nn,"isDomainRoleLayer");function Ks(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}i(Ks,"compareFindings");function le(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:Tn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:Tn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(le,"finding");function Us(e,t){let n=[],r=[],s=[],o=[];for(let a of e)a.file===t&&(n.push(...a.uses),r.push(...a.reactsTo),s.push(...a.raises),o.push(...a.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(o)}}i(Us,"bagForFile");function $n(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}i($n,"emitKinds");function Fn(e){return e==="subscribe"||e==="register-handler"}i(Fn,"handleKinds");function js(e){return e==="resolve"||e==="resolve-singleton"}i(js,"dependKinds");function Vs(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(le(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let o=new Map;for(let a of t){let d=o.get(a.matchedRoot)??[];d.push(a),o.set(a.matchedRoot,d)}for(let a of s){let d=[...o.get(a)??[]].sort((g,R)=>g.file.localeCompare(R.file));if(d.length===0){r.push(le(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(a)} matched no governed files and has no createArkKernel factory.`,{target:a},n));continue}if(d.some(g=>g.hasKernelFactory))continue;let l=d[0];r.push(le(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(a)} has no createArkKernel / createStrictArkKernel factory.`,{target:a},n))}return r}i(Vs,"evaluateMissingRoot");function Gs(e,t,n,r,s){let o=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),a=[];for(let d of n){let l=d.specifier;if(!l||!xn(l))continue;let g=r(d.from);g&&Nn(g,o.get(g)??[])&&a.push(le(e,"arkrun-kernel-in-domain",d.from,d.line,`${g} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:g,target:l},s))}return a}i(Gs,"evaluateKernelInDomain");function Bs(e,t,n,r,s,o){let a=new Set(e.managedLayers);if(a.size===0)return[];let d=new Map(t.map(R=>[R.name,R.intentPrefixes??[]])),l=new Set(r.filter(R=>R.hasKernelFactory).map(R=>R.file)),g=[];for(let R of n){if(l.has(R.file))continue;let A=R.typeName;if(e.ignoreDirectNewForErrors!==!1&&(A.endsWith("Error")||A==="Error")||A.endsWith("DTO")||A.endsWith("VO"))continue;let u=s(R.file);!u||!a.has(u)||Nn(u,d.get(u)??[])||g.push(le(e,"arkrun-direct-new",R.file,R.line,`${u} must not construct ${R.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:u,target:R.typeName},o))}return g}i(Bs,"evaluateDirectNew");function zs(e,t,n,r,s){let o=[],a=[];if(e.requireDeclarations!==!0)return{findings:o,completenessReasons:a};let d=new Set(e.managedLayers);if(d.size===0)return{findings:o,completenessReasons:a};for(let l of t){if(!$n(l.kind)&&!Fn(l.kind)&&!js(l.kind))continue;let g=r(l.file);if(!g||!d.has(g))continue;if(!l.nameLiteral){e.mode==="enforced"&&a.push({code:Hs,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let R=Us(n,l.file);if($n(l.kind)){if(R.raises.has(l.nameLiteral)||R.sends.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:g,target:l.nameLiteral},s));continue}if(Fn(l.kind)){if(R.reactsTo.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:g,target:l.nameLiteral},s));continue}R.uses.has(l.nameLiteral)||o.push(le(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:g,target:l.nameLiteral},s))}return{findings:o,completenessReasons:a}}i(zs,"evaluateUndeclared");function Ws(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let o=[];for(let a of t){if(a.typeOnly)continue;let d=a.specifier;if(!d||!_n(d))continue;let l=n(a.from);!l||!s.has(l)||o.push(le(e,"arkrun-transport-bypass",a.from,a.line,`${l} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:l,target:d},r))}return o}i(Ws,"evaluateTransportBypass");function Pn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=Qe(e.classification),r=zs(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Vs(t,e.compositionRootHits,n),...Gs(t,e.layers,e.dependencies,e.layerForFile,n),...Bs(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Ws(t,e.dependencies,e.layerForFile,n)].sort(Ks),o=[...r.completenessReasons].sort((a,d)=>{let l=`${a.code}\0${a.file??""}\0${a.message}`,g=`${d.code}\0${d.file??""}\0${d.message}`;return l<g?-1:l>g?1:0});return{findings:s,completenessReasons:o}}i(Pn,"evaluateArkRunSensors");function Ln(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}i(Ln,"isArkOrderModuleSpecifier");var Dn=new Map;function Mn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Mn,"escapeAppliesToLiteral");function qs(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(qs,"normalizeAppliesToGlob");function Ys(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(Ys,"appliesToBracesBalanced");function Xs(e){let t=Dn.get(e);if(t)return t;let n=qs(e),r=Ys(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Mn(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Mn(l)}let a=new RegExp(`^${s}$`);return Dn.set(e,a),a}i(Xs,"globToRegExp");var Hn={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function Zs(e,t){return!t||t.length===0?!0:t.some(n=>Xs(n).test(e))}i(Zs,"matchesArkOrderAppliesTo");function Js(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Js,"isDomainRoleLayer");function pe(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:Hn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:Hn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(pe,"finding");function Kn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=Qe(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let l=new Map;for(let g of e.planeRootHits){let R=l.get(g.matchedRoot)??[];R.push(g),l.set(g.matchedRoot,R)}for(let g of s){let R=l.get(g)??[];if(R.length===0){r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(g)} matched no governed files and has no createOrderPlane factory.`,{target:g},n));continue}R.some(A=>A.hasPlaneFactory)||r.push(pe(t,"arkorder-missing-plane",R[0].file,1,`ArkOrder plane root ${JSON.stringify(g)} has no createOrderPlane factory.`,{target:g},n))}}let o=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let g=l.specifier;if(!g||!Ln(g))continue;let R=e.layerForFile(l.from);R&&Js(R,o.get(R)??[])&&r.push(pe(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:R,target:g},n))}for(let l of e.genericUpdates)r.push(pe(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},n));let a=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||r.push(pe(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},n));for(let l of e.ingestWritesXi??[])r.push(pe(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let l of a.length===0?[]:e.xiFieldWrites??[]){let g=e.layerForFile(l.file);!g||!d.has(g)||Zs(l.file,t.appliesTo)&&r.push(pe(t,"arkorder-xi-field-write",l.file,l.line,`This file writes ${JSON.stringify(l.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:g,target:l.key},n))}return r.sort((l,g)=>l.file.localeCompare(g.file)||l.ruleId.localeCompare(g.ruleId)||l.line-g.line),{findings:r,completenessReasons:[]}}i(Kn,"evaluateArkOrderSensors");var me={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Un={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...me,default:[]},kernelRoots:{...me},managedLayers:{...me,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},jn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...me,default:[]},managedLayers:{...me,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...me,default:[]},appliesTo:{...me,default:[]}}};function Pe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Pe,"isObject");function Vn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Pe(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}i(Vn,"declaredLayerNames");function Gn(e){if(!Pe(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}i(Gn,"defaultedArkRun");function Bn(e){if(!Pe(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}i(Bn,"defaultedArkOrder");function zn(e,t){let n=e.arkRun;if(n===void 0||!Pe(n))return;let r=Vn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkRun.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.kernelRoots??n.compositionRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(zn,"validateArkRunExtra");function Wn(e,t){let n=e.arkOrder;if(n===void 0||!Pe(n))return;let r=Vn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkOrder.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.planeRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(Wn,"validateArkOrderExtra");function et(e){if(typeof e!="string")return null;let t=e.trim().replace(/^@/,"").toLowerCase();return t.length>0?t:null}i(et,"normalizeStewardId");function qn(e){let t=et(e);return!t||It(t)||t.includes(" ")||t.includes("@")?!1:/^(?!-)[a-z0-9-]{1,39}(?<!-)$/.test(t)}i(qn,"isGitHubHandle");function Qs(e){if(typeof e!="string")return!1;let t=e.trim().toLowerCase();return!t.includes("@")||t.includes(" ")||It(t)?!1:/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)}i(Qs,"isGitHubEmail");function eo(e){if(typeof e!="string")return null;let t=e.trim().match(/^(?:\d+\+)?([^@]+)@users\.noreply\.github\.com$/i);return t&&qn(t[1])?et(t[1]):null}i(eo,"githubHandleFromEmail");function Yn(e){let t=eo(e);if(t)return t;let n=et(e);return!n||It(n)?null:qn(n)||Qs(n)?n:null}i(Yn,"canonicalStewardId");var to=/bot\b|\[bot\]|dependabot|renovate|github-actions|imgbot|codecov/i;function It(e){let t=et(e);return!t||to.test(t)}i(It,"isAutomationAuthor");var ne="1.3",no=["public","auth","admin","internal"];function ro(e){return e?.optional===!0||e?.reserved===!0||e?.allowEmpty===!0}i(ro,"isFutureHouseLayer");function so(e){let t=e&&typeof e=="object"?e.owners:void 0;if(!Array.isArray(t)||t.length===0)return;let n=t.filter(r=>typeof r=="string"&&r.length>0);return n.length>0?n:void 0}i(so,"layerOwnersList");function Jn(e){return e?.requireLayerOwners!==!0||!Array.isArray(e.layers)?[]:e.layers.filter(t=>!ro(t)&&!so(t)).map(t=>t.name)}i(Jn,"layersMissingRequiredOwners");function Qn(e){return`Add a GitHub handle or email to ${e}'s owners in ark.config.json (/ark-adopt).`}i(Qn,"missingLayerOwnersNextAction");var St="https://unpkg.com/arkgate@4/schemas/ark.config.schema.json",Xn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],oo=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function ao(){let e=[];for(let t of Xn)for(let n of Xn)t===n||oo.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}i(ao,"createDefaultRules");var er=ao(),Ct=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],Y={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Zn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:St,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:St,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:ne,default:ne},name:{type:"string",minLength:1},include:{...Y,minItems:1,default:["src"]},exclude:{...Y,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:er,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...Y,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...Y,default:[]},requireLayerOwners:{type:"boolean"}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...Y,minItems:1},exclude:Y,intentPrefixes:Y,description:{type:"string",minLength:1},trustBoundary:{type:"string",enum:[...no]},owners:{...Y,minItems:1},forbiddenGlobals:Y,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...Y,minItems:1},sharedRoots:{...Y,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}},sharedImportsSlice:{type:"string",enum:["deny"]}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant. When any invariant is enforced, missing coverageRoots fails closed.",properties:{testGlobs:{...Y,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...Y,minItems:1}}},arkRun:Un,arkOrder:jn}},ce=class extends Error{static{i(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function Jn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Jn,"isObject");function Qe(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}i(Qe,"propertyPath");function Ie(e){return e===null?"null":Array.isArray(e)?"array":typeof e}i(Ie,"valueType");function Qs(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}i(Qs,"resolveSchemaRef");function Pe(e,t,n,r,s){if(t.$ref){let a=Qs(t.$ref,r);if(!a){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Pe(e,a,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Jn(e)){s.push({path:n,message:`must be an object; received ${Ie(e)}`});return}let a=t.properties??{};for(let o of t.required??[])e[o]===void 0&&s.push({path:Qe(n,o),message:"is required"});if(t.additionalProperties===!1)for(let o of Object.keys(e))o in a||s.push({path:Qe(n,o),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let o=t.additionalProperties;for(let d of Object.keys(e))d in a||Pe(e[d],o,Qe(n,d),r,s)}for(let[o,d]of Object.entries(a))e[o]!==void 0&&Pe(e[o],d,Qe(n,o),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${Ie(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(o=>JSON.stringify(o));new Set(a).size!==a.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((a,o)=>Pe(a,t.items,`${n}[${o}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${Ie(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${Ie(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${Ie(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}i(Pe,"validateNode");function ea(e,t){let n=e.layers;Array.isArray(n)&&n.forEach((r,s)=>{if(!r||typeof r!="object"||Array.isArray(r)||!("owners"in r))return;let a=r.owners;Array.isArray(a)&&a.forEach((o,d)=>{typeof o=="string"&&(zn(o)||t.push({path:`$.layers[${s}].owners[${d}]`,message:"must be a GitHub handle or email (not a display name)"}))})})}i(ea,"validateLayerOwners");function ta(e){let t={...e,$schema:e.$schema===void 0?Et:e.$schema,schemaVersion:e.schemaVersion===void 0?te:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Zn.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Un(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=jn(e.arkOrder)),t}i(ta,"defaultedConfig");function na(e){return e===te?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}i(na,"migratedFromOf");function ra(){let e=new Set([te]);for(let t of It)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}i(ra,"knownInputVersions");function sa(e,t="ark.config.json"){if(!Jn(e))throw new le(t,[{path:"$",message:`must be an object; received ${Ie(e)}`}]);let n=ra(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${te}`}]);if(r!=="unversioned"&&!n.has(r))throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);let s=r,a={...e},o=0;for(;s!==te&&o<It.length+1;){o+=1;let d=It.find(l=>l.from===s);if(!d)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${te}`}]);s=d.to,a.schemaVersion=s}if(s!==te)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);return{candidate:ta(a),migratedFrom:na(r)}}i(sa,"migrateArkConfig");function St(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=sa(e,t),s=[];if(Pe(n,qn,"$",qn,s),Vn(n,s),Gn(n,s),ea(n,s),s.length>0)throw new le(t,s);return{config:n,migratedFrom:r}}i(St,"loadArkConfigContract");function Qn(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new le(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return St(n,t)}i(Qn,"parseArkConfigJson");function z(e,t,n={}){return{ruleId:e,message:t,...n}}i(z,"configWarning");function Ct(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(c=>typeof c!="string"))&&a.push(z("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(z("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let c of["maxTsSuppressions","maxAnyCasts"]){let y=t.safety[c];y!==void 0&&(!Number.isInteger(y)||y<0)&&a.push(z("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${c} must be a non-negative integer.`))}let o=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],l=new Set([...o.map(c=>c.name).filter(Boolean),...d.map(c=>c.name).filter(c=>!!c)]);o.length===0&&a.push(z("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let g=new Set,R=new Set;for(let c of o){if(!c.name){a.push(z("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}g.has(c.name)&&R.add(c.name),g.add(c.name),c.forbiddenGlobals!==void 0&&(!Array.isArray(c.forbiddenGlobals)||c.forbiddenGlobals.some(k=>typeof k!="string"))&&a.push(z("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${c.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:c.name}));let y=Array.isArray(c.patterns)?c.patterns:[];if(y.length===0){a.push(z("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${c.name}" has no file patterns and will never classify files.`,{layer:c.name}));continue}for(let k of y){let I;try{I=oe(k)}catch(C){a.push(z("CONFIG_INVALID_LAYER_PATTERN",`Layer "${c.name}" has an invalid pattern "${k}": ${C instanceof Error?C.message:String(C)}`,{layer:c.name,pattern:k}));continue}let E=c.optional===!0||c.reserved===!0||c.allowEmpty===!0;!r.some(C=>I.test(C))&&!E&&a.push(z("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${c.name}" pattern "${k}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:c.name,pattern:k,failsStrict:!1,reserved:!1}))}}for(let c of R)a.push(z("CONFIG_DUPLICATE_LAYER",`Layer "${c}" is configured more than once.`,{layer:c}));if(l.size>0)for(let c of n??[])c.from&&!l.has(c.from)&&a.push(z("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${c.from}".`,{fromLayer:c.from,toLayer:c.to})),c.to&&!l.has(c.to)&&a.push(z("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${c.to}".`,{fromLayer:c.from,toLayer:c.to}));let A=new Set;if(o.length>1)for(let c of r){let y=-1,k=[];for(let I of o)for(let E of I.patterns??[]){if(!oe(E).test(c))continue;let C=ft(E,c);C>y?(y=C,k=[I.name]):C===y&&!k.includes(I.name)&&k.push(I.name)}k.length>1&&A.add([...k].sort().join(" + "))}A.size>0&&a.push(z("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...A].join(", ")}.`,{pairs:[...A]}));let u=r.filter(c=>!Q(c,o));u.length>0&&a.push(z("CONFIG_UNCLASSIFIED_FILES",`${u.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:u.length,samples:u.slice(0,5)}));let m=Yn(t);if(m.length>0){let c=m[0]??"this layer";a.push(z("CONFIG_LAYER_MISSING_OWNER",`${c} has no owner. Add a GitHub handle or email to layers[].owners so this house has a name on the door.`,{layers:m,nextAction:Xn(c)}))}return a}i(Ct,"collectAnalysisConfigWarnings");function er(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],o=[],d=i(l=>{n.set(l,t),r.set(l,t),t+=1,a.push(l),s.add(l);for(let A of[...e.get(l)??[]].sort())e.has(A)&&(n.has(A)?s.has(A)&&r.set(l,Math.min(r.get(l)??0,n.get(A)??0)):(d(A),r.set(l,Math.min(r.get(l)??0,r.get(A)??0))));if(r.get(l)!==n.get(l))return;let g=[],R;do{if(R=a.pop(),R===void 0)break;s.delete(R),g.push(R)}while(R!==l);g.length>1&&o.push(g.sort())},"connect");for(let l of[...e.keys()].sort())n.has(l)||d(l);return o.sort((l,g)=>l[0]<g[0]?-1:l[0]>g[0]?1:0).map(l=>({ruleId:"CIRCULAR_DEPENDENCY",file:l[0],line:1,target:l.join(" \u2192 "),message:`Circular dependency among ${l.length} files: ${l.join(" \u2192 ")} \u2192 ${l[0]}.`,cycleKind:"value"}))}i(er,"detectArchitectureCycles");function Le(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let o=$e(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!o)continue;let d=o.rule,l=!!d.peerIsolation,g=!l&&!!(a.typeOnly||a.namedBindingsTypeOnly),R=l?qe(o.peerIsolationReason??"cross-slice",{fromPath:a.from,toPath:a.to,fromSlice:o.fromSlice,toSlice:o.toSlice}):void 0,A=d.message?R?`${d.message} (${R})`:d.message:R?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}): ${R}`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...l?{peerIsolation:!0}:{},message:g?`${A} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:A,...g?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=er(r);s==="soft"||s==="framework-soft"?n.push(...a.map(o=>({...o,message:`${o.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}i(Le,"evaluateArchitectureGraph");function tr(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY",s=e.ruleId==="INVARIANT_CATALOG_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:on({sensor:e.sensor,code:e.code})}:{},...r||s?{freezable:!1}:{},nextAction:t}}i(tr,"toArkRuleEngineViolation");function aa(e){let t=e.arkRules;return!!(t&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).length>0)}i(aa,"arkRulesMapIsOn");function nr(e,t){return e.ruleId==="INVARIANT_CATALOG_EMPTY"?t?`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve (advisory \u2014 does not fail the merge until a domain structure rule is enforced).`:`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve. Empty catalog fails --strict-merge because a domain structure rule is already enforced.`:e.ruleId==="ARKRULE_SCOPE_EMPTY"?t?`Review appliesTo for ${e.arkruleId} in ${e.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Fix appliesTo globs for ${e.arkruleId} in ${e.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:t?`Review ArkRule ${e.arkruleId} in ${e.arkruleSource} (advisory).`:`Fix the structure or invariant for ${e.arkruleId} (declared in ${e.arkruleSource}), then preflight again.`}i(nr,"arkRuleFindingNextAction");function oa(e,t){return t.some(n=>{try{return oe(n).test(e)}catch{return!1}})}i(oa,"matchesAny");function ia(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],o=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:k})=>({file:y,line:k})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:k})=>({file:y,line:k})),l=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!oa(y.file,a)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),g=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),R=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),A={tsSuppressions:o,anyCasts:d,nonLiteralDynamicImports:l,inMemoryProductionStores:g,disabledPeerIsolationRules:R,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},u=[],m=l.filter(y=>y.kind==="import");if(m.length>0){let y=m[0];u.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${m.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let c=l.filter(y=>y.kind==="require");if(c.length>0){let y=c[0];u.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${c.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(o.length>r){let y=o[0];u.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${o.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];u.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(g.length>0){let y=g[0];u.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${g.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return R.length>0&&u.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${R.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:A,warnings:u}}i(ia,"evaluateSafety");function la(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}i(la,"ambientForbiddenGlobal");function rr(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return mt(e,n.length>0?n:gt.map(r=>({name:r.layer,prefixes:r.prefixes})))}i(rr,"intentLayer");function ca(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let o=n.get(a.file);!o||!la(a.symbol,s.get(o)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,message:`${o} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let o=n.get(a.file);if(!o)continue;let d=s.get(o),l=d?.forbiddenGlobals??[],g=a.source==="import-based"?t.dependencies.find(R=>R.from===a.file&&R.line===a.line&&R.specifier===a.symbol&&!R.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&ut(a.symbol,l))){if(a.source==="import-based"){let R=_e(a.symbol,l);if(R){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:o,target:a.symbol,...g?{edgeKind:g}:{},message:`${o} must not use module "${a.symbol}" because it is the import form of forbidden global "${R}".`});continue}}ve(d).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:o,target:a.symbol,capability:a.capability,...g?{edgeKind:g}:{},message:a.source==="import-based"?`${o} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${o} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let o=n.get(a.file);if(!o)continue;for(let l of yt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:l.ruleId,file:a.file,line:a.line,...l.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:o}:{},message:l.message});if(!a.sourceIntent)continue;let d=rr(a.sourceIntent,e.contract);!d||d===o||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${o}.`})}for(let a of t.intentReferences){let o=n.get(a.file);if(!o)continue;let d=rr(a.intent,e.contract);if(!d)continue;let l=$e(e.contract.config.rules,o,d,{fromPath:a.file,layers:e.contract.config.layers});if(!l)continue;let g=l.rule.peerIsolation?qe(l.peerIsolationReason??"cross-slice",{fromPath:a.file,fromSlice:l.fromSlice,toSlice:l.toSlice}):void 0,R=`${o} must not reference ${d} intent ${a.intent}.`,A=g&&l.peerIsolationReason!=="cross-slice"?`${R} ${g}`:l.rule.message?g?`${l.rule.message} (${g})`:l.rule.message:R;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:o,toLayer:d,target:a.intent,...l.rule.peerIsolation?{peerIsolation:!0}:{},message:A})}return r}i(ca,"contentViolations");function wt(e){let{facts:t}=e,n=Ve(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((p,W)=>{let we=`${p.code}\0${p.file??""}\0${p.message}`,Oe=`${W.code}\0${W.file??""}\0${W.message}`;return we<Oe?-1:we>Oe?1:0}),o=t.files.map(p=>({...p,layer:Q(p.path,e.contract.config.layers)??null})),d=new Map(o.map(p=>[p.path,p.layer])),l=t.dependencies.map(p=>{let W=p.target?d.get(p.target)??Q(p.target,e.contract.config.layers):void 0;return{from:p.from,fromLayer:d.get(p.from)??null,...p.resolution==="resolved-project"&&p.target?{to:p.target,...W?{toLayer:W}:{}}:{},line:p.line,kind:p.kind,typeOnly:p.typeOnly,...p.targetTypeOnlyExports?{targetTypeOnlyExports:p.targetTypeOnlyExports}:{},...p.sourcePureTypeModule?{sourcePureTypeModule:p.sourcePureTypeModule}:{},...p.namedBindingsTypeOnly?{namedBindingsTypeOnly:p.namedBindingsTypeOnly}:{},...p.portProofEligible?{portProofEligible:p.portProofEligible}:{}}}),g=Ct({config:e.contract.config,rules:e.contract.config.rules,files:o.map(p=>p.path)}),R=ia(e,t),A=e.contract.arkRules??Fe(),u=o.map(p=>p.path),c={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?An(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=i(p=>d.get(p)??Q(p,e.contract.config.layers),"resolveLayer"),k=[...yn({arkRules:A,classShapes:e.contract.classShapes??t.classShapes??[],files:u,layerForFile:y,fileHints:c}),...hn(A,u),...Rn({arkRulesActive:aa(e.contract.config),arkRules:A,layers:e.contract.config.layers??[],files:u.map(p=>({path:p,layer:y(p)}))})],I=(A.invariants?.length??0)>0,E=In({hasEnforcedInvariant:kt(A.invariants),coverage:e.contract.config.coverage,...e.coverageRootsPresent===!1?{declaredPathPresent:!1}:{}}),C=E.length>0?[]:En({adopted:e.adopted===!0,hasDomainInvariants:At(A.invariants),coverage:e.contract.config.coverage,...e.invariantTestsPathPresent===!1?{declaredPathPresent:!1}:{}}),H=[...E.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.",failsStrict:!0,freezable:!1})),...C.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.",failsStrict:!0,freezable:!1}))],Y=k.filter(p=>p.failsStrict).map(p=>tr(p,nr(p,!1))),b=k.filter(p=>!p.failsStrict).map(p=>({...tr(p,nr(p,!0)),failsStrict:!1})),x=I?bn({arkRules:A,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},re=x.violations.filter(p=>p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,nextAction:`Add a test title or declared symbol covering ${p.arkruleId} (declared in ${p.arkruleSource}), then preflight again.`})),pe=x.violations.filter(p=>!p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,failsStrict:!1,nextAction:p.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${p.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${p.arkruleId} in ${p.arkruleSource} (advisory / partial).`})),at=Sn(o),Re=$n({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:at}),ot=e.contract.config.arkRun?.mode,Ue=Re.findings.filter(()=>ot==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),Kt=Re.findings.filter(()=>ot!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),Ae=Dn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:at}),Ce=e.contract.config.arkOrder?.mode,je=Ae.findings.filter(()=>Ce==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),Ut=Ae.findings.filter(()=>Ce!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),v=[...x.partial&&x.coverage.some(p=>p.mode==="enforced"&&p.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...Re.completenessReasons,...Ae.completenessReasons],S=Le({config:e.contract.config,rules:e.contract.config.rules,files:o.filter(p=>p.layer).map(p=>p.path),contentViolations:[...ca(e,t,d),...Y,...H,...re,...Ue,...je],edges:l,warnings:[...g,...R.warnings,...b,...pe,...Kt,...Ut],safety:R.report}),f=s==="complete"&&v.length>0?"partial":s,h=f==="complete"?a:[...a,...v].sort((p,W)=>{let we=`${p.code}\0${p.file??""}\0${p.message}`,Oe=`${W.code}\0${W.file??""}\0${W.message}`;return we<Oe?-1:we>Oe?1:0}),_=S.violations.filter(p=>p.failsStrict!==!1),U=f==="complete"&&_.length===0,ce=U&&S.warnings.every(p=>p.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:f,completenessReasons:h,valid:U,strictValid:ce,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:R.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:o,layers:e.contract.config.layers.map(p=>p.name),edges:l,capabilityUses:t.capabilityUses,violations:S.violations,warnings:S.warnings}}}i(wt,"analyzeCanonicalResolvedProject");function et(e){return wt({contract:e.contract,facts:ge(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints,adopted:e.adopted,invariantTestsPathPresent:e.invariantTestsPathPresent,coverageRootsPresent:e.coverageRootsPresent})}i(et,"analyzeResolvedProject");var Ot="1.0";var tt=class extends Error{static{i(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function tr(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(tr,"isObject");function tt(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}i(tt,"propertyPath");function Se(e){return e===null?"null":Array.isArray(e)?"array":typeof e}i(Se,"valueType");function io(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}i(io,"resolveSchemaRef");function Le(e,t,n,r,s){if(t.$ref){let o=io(t.$ref,r);if(!o){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Le(e,o,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!tr(e)){s.push({path:n,message:`must be an object; received ${Se(e)}`});return}let o=t.properties??{};for(let a of t.required??[])e[a]===void 0&&s.push({path:tt(n,a),message:"is required"});if(t.additionalProperties===!1)for(let a of Object.keys(e))a in o||s.push({path:tt(n,a),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let a=t.additionalProperties;for(let d of Object.keys(e))d in o||Le(e[d],a,tt(n,d),r,s)}for(let[a,d]of Object.entries(o))e[a]!==void 0&&Le(e[a],d,tt(n,a),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${Se(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(a=>JSON.stringify(a));new Set(o).size!==o.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((o,a)=>Le(o,t.items,`${n}[${a}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${Se(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${Se(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${Se(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}i(Le,"validateNode");function lo(e,t){let n=e.layers;Array.isArray(n)&&n.forEach((r,s)=>{if(!r||typeof r!="object"||Array.isArray(r)||!("owners"in r))return;let o=r.owners;Array.isArray(o)&&o.forEach((a,d)=>{typeof a=="string"&&(Yn(a)||t.push({path:`$.layers[${s}].owners[${d}]`,message:"must be a GitHub handle or email (not a display name)"}))})})}i(lo,"validateLayerOwners");function co(e){let t={...e,$schema:e.$schema===void 0?St:e.$schema,schemaVersion:e.schemaVersion===void 0?ne:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?er.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Gn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Bn(e.arkOrder)),t}i(co,"defaultedConfig");function uo(e){return e===ne?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}i(uo,"migratedFromOf");function fo(){let e=new Set([ne]);for(let t of Ct)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}i(fo,"knownInputVersions");function po(e,t="ark.config.json"){if(!tr(e))throw new ce(t,[{path:"$",message:`must be an object; received ${Se(e)}`}]);let n=fo(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${ne}`}]);if(r!=="unversioned"&&!n.has(r))throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${ne}`}]);let s=r,o={...e},a=0;for(;s!==ne&&a<Ct.length+1;){a+=1;let d=Ct.find(l=>l.from===s);if(!d)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${ne}`}]);s=d.to,o.schemaVersion=s}if(s!==ne)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${ne}`}]);return{candidate:co(o),migratedFrom:uo(r)}}i(po,"migrateArkConfig");function wt(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=po(e,t),s=[];if(Le(n,Zn,"$",Zn,s),zn(n,s),Wn(n,s),lo(n,s),s.length>0)throw new ce(t,s);return{config:n,migratedFrom:r}}i(wt,"loadArkConfigContract");function nr(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new ce(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return wt(n,t)}i(nr,"parseArkConfigJson");function z(e,t,n={}){return{ruleId:e,message:t,...n}}i(z,"configWarning");function Ot(e){let{config:t,rules:n,files:r,manifest:s}=e,o=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(c=>typeof c!="string"))&&o.push(z("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))o.push(z("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let c of["maxTsSuppressions","maxAnyCasts"]){let y=t.safety[c];y!==void 0&&(!Number.isInteger(y)||y<0)&&o.push(z("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${c} must be a non-negative integer.`))}let a=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],l=new Set([...a.map(c=>c.name).filter(Boolean),...d.map(c=>c.name).filter(c=>!!c)]);a.length===0&&o.push(z("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let g=new Set,R=new Set;for(let c of a){if(!c.name){o.push(z("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}g.has(c.name)&&R.add(c.name),g.add(c.name),c.forbiddenGlobals!==void 0&&(!Array.isArray(c.forbiddenGlobals)||c.forbiddenGlobals.some(k=>typeof k!="string"))&&o.push(z("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${c.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:c.name}));let y=Array.isArray(c.patterns)?c.patterns:[];if(y.length===0){o.push(z("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${c.name}" has no file patterns and will never classify files.`,{layer:c.name}));continue}for(let k of y){let I;try{I=ie(k)}catch(w){o.push(z("CONFIG_INVALID_LAYER_PATTERN",`Layer "${c.name}" has an invalid pattern "${k}": ${w instanceof Error?w.message:String(w)}`,{layer:c.name,pattern:k}));continue}let E=c.optional===!0||c.reserved===!0||c.allowEmpty===!0;!r.some(w=>I.test(w))&&!E&&o.push(z("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${c.name}" pattern "${k}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:c.name,pattern:k,failsStrict:!1,reserved:!1}))}}for(let c of R)o.push(z("CONFIG_DUPLICATE_LAYER",`Layer "${c}" is configured more than once.`,{layer:c}));if(l.size>0)for(let c of n??[])c.from&&!l.has(c.from)&&o.push(z("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${c.from}".`,{fromLayer:c.from,toLayer:c.to})),c.to&&!l.has(c.to)&&o.push(z("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${c.to}".`,{fromLayer:c.from,toLayer:c.to}));let A=new Set;if(a.length>1)for(let c of r){let y=-1,k=[];for(let I of a)for(let E of I.patterns??[]){if(!ie(E).test(c))continue;let w=gt(E,c);w>y?(y=w,k=[I.name]):w===y&&!k.includes(I.name)&&k.push(I.name)}k.length>1&&A.add([...k].sort().join(" + "))}A.size>0&&o.push(z("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...A].join(", ")}.`,{pairs:[...A]}));let u=r.filter(c=>!Q(c,a));u.length>0&&o.push(z("CONFIG_UNCLASSIFIED_FILES",`${u.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:u.length,samples:u.slice(0,5)}));let m=Jn(t);if(m.length>0){let c=m[0]??"this layer";o.push(z("CONFIG_LAYER_MISSING_OWNER",`${c} has no owner. Add a GitHub handle or email to layers[].owners so this house has a name on the door.`,{layers:m,nextAction:Qn(c)}))}return o}i(Ot,"collectAnalysisConfigWarnings");function rr(e){let t=0,n=new Map,r=new Map,s=new Set,o=[],a=[],d=i(l=>{n.set(l,t),r.set(l,t),t+=1,o.push(l),s.add(l);for(let A of[...e.get(l)??[]].sort())e.has(A)&&(n.has(A)?s.has(A)&&r.set(l,Math.min(r.get(l)??0,n.get(A)??0)):(d(A),r.set(l,Math.min(r.get(l)??0,r.get(A)??0))));if(r.get(l)!==n.get(l))return;let g=[],R;do{if(R=o.pop(),R===void 0)break;s.delete(R),g.push(R)}while(R!==l);g.length>1&&a.push(g.sort())},"connect");for(let l of[...e.keys()].sort())n.has(l)||d(l);return a.sort((l,g)=>l[0]<g[0]?-1:l[0]>g[0]?1:0).map(l=>({ruleId:"CIRCULAR_DEPENDENCY",file:l[0],line:1,target:l.join(" \u2192 "),message:`Circular dependency among ${l.length} files: ${l.join(" \u2192 ")} \u2192 ${l[0]}.`,cycleKind:"value"}))}i(rr,"detectArchitectureCycles");function De(e){let t=e.contentViolations.map(o=>({...o})),n=(e.warnings??[]).map(o=>({...o})),r=new Map(e.files.map(o=>[o,new Set]));for(let o of e.edges){if(o.to&&o.to!==o.from&&!o.typeOnly&&r.has(o.from)&&r.get(o.from)?.add(o.to),!o.to||!o.fromLayer||!o.toLayer)continue;let a=Fe(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});if(!a){let u=on(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});u&&n.push({ruleId:"SHARED_IMPORTS_SLICE",file:u.fromPath,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:u.toPath,toSlice:u.toSlice,failsStrict:!1,severity:"warning",message:`shared root ${u.fromPath} \u2192 slice ${u.toSlice} (${u.toPath}). The wall is direct-only.`});continue}let d=a.rule,l=!!d.peerIsolation,g=!l&&!!(o.typeOnly||o.namedBindingsTypeOnly),R=l?Xe(a.peerIsolationReason??"cross-slice",{fromPath:o.from,toPath:o.to,fromSlice:a.fromSlice,toSlice:a.toSlice}):void 0,A=d.message?R?`${d.message} (${R})`:d.message:R?`${o.fromLayer} must not ${o.kind} another slice of ${o.toLayer} (${o.from} \u2192 ${o.to}): ${R}`:`${o.fromLayer} must not ${o.kind} ${o.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:o.from,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:o.to,...o.typeOnly?{typeOnly:!0}:{},...o.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...o.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...o.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&o.portProofEligible?{portProofEligible:!0}:{},...o.kind?{edgeKind:o.kind}:{},...l?{peerIsolation:!0}:{},message:g?`${A} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:A,...g?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let o=rr(r);s==="soft"||s==="framework-soft"?n.push(...o.map(a=>({...a,message:`${a.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...o)}return{violations:t,warnings:n,safety:e.safety}}i(De,"evaluateArchitectureGraph");function sr(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY",s=e.ruleId==="INVARIANT_CATALOG_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:dn({sensor:e.sensor,code:e.code})}:{},...r||s?{freezable:!1}:{},nextAction:t}}i(sr,"toArkRuleEngineViolation");function go(e){let t=e.arkRules;return!!(t&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).length>0)}i(go,"arkRulesMapIsOn");function or(e,t){return e.ruleId==="INVARIANT_CATALOG_EMPTY"?t?`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve (advisory \u2014 does not fail the merge until a domain structure rule is enforced).`:`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve. Empty catalog fails --strict-merge because a domain structure rule is already enforced.`:e.ruleId==="ARKRULE_SCOPE_EMPTY"?t?`Review appliesTo for ${e.arkruleId} in ${e.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Fix appliesTo globs for ${e.arkruleId} in ${e.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:t?`Review ArkRule ${e.arkruleId} in ${e.arkruleSource} (advisory).`:`Fix the structure or invariant for ${e.arkruleId} (declared in ${e.arkruleSource}), then preflight again.`}i(or,"arkRuleFindingNextAction");function mo(e,t){return t.some(n=>{try{return ie(n).test(e)}catch{return!1}})}i(mo,"matchesAny");function yo(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,o=e.contract.config.dynamicImportAllowlist??[],a=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:k})=>({file:y,line:k})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:k})=>({file:y,line:k})),l=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!mo(y.file,o)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),g=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),R=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),A={tsSuppressions:a,anyCasts:d,nonLiteralDynamicImports:l,inMemoryProductionStores:g,disabledPeerIsolationRules:R,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},u=[],m=l.filter(y=>y.kind==="import");if(m.length>0){let y=m[0];u.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${m.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let c=l.filter(y=>y.kind==="require");if(c.length>0){let y=c[0];u.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${c.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(a.length>r){let y=a[0];u.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${a.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];u.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(g.length>0){let y=g[0];u.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${g.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return R.length>0&&u.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${R.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:A,warnings:u}}i(yo,"evaluateSafety");function ho(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}i(ho,"ambientForbiddenGlobal");function ar(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return ht(e,n.length>0?n:yt.map(r=>({name:r.layer,prefixes:r.prefixes})))}i(ar,"intentLayer");function Ro(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(o=>[o.name,o]));for(let o of t.ambientUses){let a=n.get(o.file);!a||!ho(o.symbol,s.get(a)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,message:`${a} must not use the ambient global "${o.symbol}".`})}for(let o of t.capabilityUses){let a=n.get(o.file);if(!a)continue;let d=s.get(a),l=d?.forbiddenGlobals??[],g=o.source==="import-based"?t.dependencies.find(R=>R.from===o.file&&R.line===o.line&&R.specifier===o.symbol&&!R.typeOnly)?.kind:void 0;if(!(o.source==="ambient-global"&&ft(o.symbol,l))){if(o.source==="import-based"){let R=Te(o.symbol,l);if(R){r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,...g?{edgeKind:g}:{},message:`${a} must not use module "${o.symbol}" because it is the import form of forbidden global "${R}".`});continue}}Ee(d).includes(o.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:o.file,line:o.line,fromLayer:a,target:o.symbol,capability:o.capability,...g?{edgeKind:g}:{},message:o.source==="import-based"?`${a} denies the ${o.capability} capability; found import of "${o.symbol}".`:`${a} denies the ${o.capability} capability; found ambient "${o.symbol}".`})}}for(let o of t.publishCalls){let a=n.get(o.file);if(!a)continue;for(let l of Rt({publishCall:!0,rawIntentName:o.rawIntentName,objectHasIntent:o.objectHasIntent,arkPublishCandidate:o.arkPublishCandidate,hasSource:o.hasSource}))r.push({ruleId:l.ruleId,file:o.file,line:o.line,...l.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:a}:{},message:l.message});if(!o.sourceIntent)continue;let d=ar(o.sourceIntent,e.contract);!d||d===a||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.sourceIntent,message:`Publish source "${o.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${a}.`})}for(let o of t.intentReferences){let a=n.get(o.file);if(!a)continue;let d=ar(o.intent,e.contract);if(!d)continue;let l=Fe(e.contract.config.rules,a,d,{fromPath:o.file,layers:e.contract.config.layers});if(!l)continue;let g=l.rule.peerIsolation?Xe(l.peerIsolationReason??"cross-slice",{fromPath:o.file,fromSlice:l.fromSlice,toSlice:l.toSlice}):void 0,R=`${a} must not reference ${d} intent ${o.intent}.`,A=g&&l.peerIsolationReason!=="cross-slice"?`${R} ${g}`:l.rule.message?g?`${l.rule.message} (${g})`:l.rule.message:R;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.intent,...l.rule.peerIsolation?{peerIsolation:!0}:{},message:A})}return r}i(Ro,"contentViolations");function xt(e){let{facts:t}=e,n=Ge(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",o=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((p,W)=>{let Oe=`${p.code}\0${p.file??""}\0${p.message}`,xe=`${W.code}\0${W.file??""}\0${W.message}`;return Oe<xe?-1:Oe>xe?1:0}),a=t.files.map(p=>({...p,layer:Q(p.path,e.contract.config.layers)??null})),d=new Map(a.map(p=>[p.path,p.layer])),l=t.dependencies.map(p=>{let W=p.target?d.get(p.target)??Q(p.target,e.contract.config.layers):void 0;return{from:p.from,fromLayer:d.get(p.from)??null,...p.resolution==="resolved-project"&&p.target?{to:p.target,...W?{toLayer:W}:{}}:{},line:p.line,kind:p.kind,typeOnly:p.typeOnly,...p.targetTypeOnlyExports?{targetTypeOnlyExports:p.targetTypeOnlyExports}:{},...p.sourcePureTypeModule?{sourcePureTypeModule:p.sourcePureTypeModule}:{},...p.namedBindingsTypeOnly?{namedBindingsTypeOnly:p.namedBindingsTypeOnly}:{},...p.portProofEligible?{portProofEligible:p.portProofEligible}:{}}}),g=Ot({config:e.contract.config,rules:e.contract.config.rules,files:a.map(p=>p.path)}),R=yo(e,t),A=e.contract.arkRules??Ne(),u=a.map(p=>p.path),c={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?vn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=i(p=>d.get(p)??Q(p,e.contract.config.layers),"resolveLayer"),k=[...An({arkRules:A,classShapes:e.contract.classShapes??t.classShapes??[],files:u,layerForFile:y,fileHints:c}),...kn(A,u),...bn({arkRulesActive:go(e.contract.config),arkRules:A,layers:e.contract.config.layers??[],files:u.map(p=>({path:p,layer:y(p)}))})],I=(A.invariants?.length??0)>0,E=wn({hasEnforcedInvariant:vt(A.invariants),coverage:e.contract.config.coverage,...e.coverageRootsPresent===!1?{declaredPathPresent:!1}:{}}),w=E.length>0?[]:Cn({adopted:e.adopted===!0,hasDomainInvariants:bt(A.invariants),coverage:e.contract.config.coverage,...e.invariantTestsPathPresent===!1?{declaredPathPresent:!1}:{}}),$=[...E.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.",failsStrict:!0,freezable:!1})),...w.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.",failsStrict:!0,freezable:!1}))],te=k.filter(p=>p.failsStrict).map(p=>sr(p,or(p,!1))),b=k.filter(p=>!p.failsStrict).map(p=>({...sr(p,or(p,!0)),failsStrict:!1})),x=I?In({arkRules:A,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},se=x.violations.filter(p=>p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,nextAction:`Add a test title or declared symbol covering ${p.arkruleId} (declared in ${p.arkruleSource}), then preflight again.`})),J=x.violations.filter(p=>!p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,failsStrict:!1,nextAction:p.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${p.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${p.arkruleId} in ${p.arkruleSource} (advisory / partial).`})),Re=On(a),Ae=Pn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:Re}),it=e.contract.config.arkRun?.mode,je=Ae.findings.filter(()=>it==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),jt=Ae.findings.filter(()=>it!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),ke=Kn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:Re}),we=e.contract.config.arkOrder?.mode,Ve=ke.findings.filter(()=>we==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),Vt=ke.findings.filter(()=>we!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),v=[...x.partial&&x.coverage.some(p=>p.mode==="enforced"&&p.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...Ae.completenessReasons,...ke.completenessReasons],S=De({config:e.contract.config,rules:e.contract.config.rules,files:a.filter(p=>p.layer).map(p=>p.path),contentViolations:[...Ro(e,t,d),...te,...$,...se,...je,...Ve],edges:l,warnings:[...g,...R.warnings,...b,...J,...jt,...Vt],safety:R.report}),f=s==="complete"&&v.length>0?"partial":s,h=f==="complete"?o:[...o,...v].sort((p,W)=>{let Oe=`${p.code}\0${p.file??""}\0${p.message}`,xe=`${W.code}\0${W.file??""}\0${W.message}`;return Oe<xe?-1:Oe>xe?1:0}),_=S.violations.filter(p=>p.failsStrict!==!1),U=f==="complete"&&_.length===0,de=U&&S.warnings.every(p=>p.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:f,completenessReasons:h,valid:U,strictValid:de,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:R.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:a,layers:e.contract.config.layers.map(p=>p.name),edges:l,capabilityUses:t.capabilityUses,violations:S.violations,warnings:S.warnings}}}i(xt,"analyzeCanonicalResolvedProject");function nt(e){return xt({contract:e.contract,facts:ge(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints,adopted:e.adopted,invariantTestsPathPresent:e.invariantTestsPathPresent,coverageRootsPresent:e.coverageRootsPresent})}i(nt,"analyzeResolvedProject");var _t="1.0";var rt=class extends Error{static{i(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function xt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(xt,"isObject");function _t(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}i(_t,"unknownFields");function ye(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}i(ye,"requiredString");function da(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(da,"canonicalProjectPath");function ua(e,t,n="architecture change map"){let r=[];if(!xt(e))throw new tt(n,[{path:"$",message:"must be an object"}]);_t(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=ye(e,"$schema","$",r),a=ye(e,"schemaVersion","$",r);a&&a!==Ot&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${Ot}`});let o=new Set(t.layers.map(c=>c.name)),d=[],l=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((c,y)=>{let k=`$.files[${y}]`;if(!xt(c)){r.push({path:k,message:"must be an object"});return}_t(c,["path","operation","layer"],k,r);let I=ye(c,"path",k,r),E=ye(c,"operation",k,r),C=ye(c,"layer",k,r),H=I?da(I):void 0;I&&!H&&r.push({path:`${k}.path`,message:"must be a canonical project-relative path"}),E&&!["create","update","delete"].includes(E)&&r.push({path:`${k}.operation`,message:"must be create, update, or delete"}),C&&!o.has(C)&&r.push({path:`${k}.layer`,message:`references unknown layer ${JSON.stringify(C)}`}),H&&l.has(H)&&r.push({path:`${k}.path`,message:`duplicates planned path ${H}`}),H&&l.add(H);let Y=H?Q(H,t.layers):void 0;H&&C&&o.has(C)&&Y!==C&&r.push({path:`${k}.layer`,message:Y?`${H} resolves to ${Y}, not ${C}`:`${H} is not assigned to an architecture layer`}),H&&E&&["create","update","delete"].includes(E)&&C&&d.push({path:H,operation:E,layer:C})});let g=[],R=new Map(d.map(c=>[c.path,c.operation])),A=new Set,u=e.dependencies??[];if(Array.isArray(u)?u.forEach((c,y)=>{let k=`$.dependencies[${y}]`;if(!xt(c)){r.push({path:k,message:"must be an object"});return}_t(c,["from","to"],k,r);let I=ye(c,"from",k,r),E=ye(c,"to",k,r);I&&!l.has(I)&&r.push({path:`${k}.from`,message:`must reference a planned file path: ${I}`}),E&&!l.has(E)&&r.push({path:`${k}.to`,message:`must reference a planned file path: ${E}`}),I&&R.get(I)==="delete"&&r.push({path:`${k}.from`,message:`cannot depend from deleted file ${I}`}),E&&R.get(E)==="delete"&&r.push({path:`${k}.to`,message:`cannot depend on deleted file ${E}`}),I&&E&&I===E&&r.push({path:k,message:"must not declare a self dependency"});let C=I&&E?`${I}\0${E}`:void 0;C&&A.has(C)&&r.push({path:k,message:`duplicates dependency ${I} -> ${E}`}),C&&A.add(C),I&&E&&g.push({from:I,to:E})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new tt(n,r);let m={$schema:s,schemaVersion:Ot,files:d.sort((c,y)=>c.path.localeCompare(y.path)),dependencies:g.sort((c,y)=>c.from.localeCompare(y.from)||c.to.localeCompare(y.to))};return{map:m,hash:j(F(m))}}i(ua,"loadArchitectureChangeMap");function Z(e){return`${e.from}->${e.to}`}i(Z,"dependencyKey");function De(e,t,n,r="dependency"){return{id:`${e}:${r}:${Z(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${Z(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${Z(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${Z(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${Z(t)} from the candidate, then preflight again.`}:{}}}i(De,"dependencyFinding");function Me(e){let t=[],n=new Map(e.changeMap.map.files.map(u=>[u.path,u])),r=new Map(e.changes.map(u=>[u.path,u])),s=new Map(e.changeMap.map.dependencies.map(u=>[Z(u),u])),a=new Map(e.baseDependencies.map(u=>[Z(u),u])),o=new Map(e.candidateDependencies.map(u=>[Z(u),u]));for(let u of[...n.values()].sort((m,c)=>m.path.localeCompare(c.path))){let m=r.get(u.path);m?m.operation!==u.operation?t.push({id:`contradictory:file:${u.path}`,classification:"contradictory",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} was planned as ${u.operation} but the actual operation is ${m.operation}.`,nextAction:`Change ${u.path} to the planned ${u.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${u.path}`,classification:"satisfied",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} matches the planned ${u.operation} operation.`}):t.push({id:`missing:file:${u.path}`,classification:"missing",subject:"file",path:u.path,expectedOperation:u.operation,message:`${u.path} was planned as ${u.operation} but is absent from the actual change.`,nextAction:`${u.operation[0].toUpperCase()}${u.operation.slice(1)} ${u.path} in the complete change set, then preflight again.`})}for(let u of[...r.values()].sort((m,c)=>m.path.localeCompare(c.path)))n.has(u.path)||t.push({id:`unplanned:file:${u.path}`,classification:"unplanned",subject:"file",path:u.path,actualOperation:u.operation,message:`${u.path} has an unplanned ${u.operation} operation.`,nextAction:`Remove ${u.path} from the change set, then preflight again.`});let d=new Set;for(let u of[...s.values()].sort((m,c)=>Z(m).localeCompare(Z(c)))){if(o.has(Z(u))){t.push(De("satisfied",u,`${u.from} -> ${u.to} exists in the candidate architecture.`));continue}let m={from:u.to,to:u.from};o.has(Z(m))?(d.add(Z(m)),t.push(De("contradictory",u,`${u.from} -> ${u.to} was planned, but the candidate contains the reverse edge.`))):t.push(De("missing",u,`${u.from} -> ${u.to} is absent from the candidate architecture.`))}let l=new Set([...n.keys(),...r.keys()]);for(let[u,m]of[...o].sort(([c],[y])=>c.localeCompare(y)))a.has(u)||s.has(u)||d.has(u)||!l.has(m.from)&&!l.has(m.to)||t.push({...De("unplanned",m,`${m.from} -> ${m.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let g=new Set(e.changeMap.map.files.filter(u=>u.operation==="delete").map(u=>u.path));for(let[u,m]of[...a].sort(([c],[y])=>c.localeCompare(y)))o.has(u)||g.has(m.from)||g.has(m.to)||!l.has(m.from)&&!l.has(m.to)||t.push({...De("unplanned",m,`${m.from} -> ${m.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let R={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((u,m)=>R[u.classification]-R[m.classification]||(u.subject===m.subject?0:u.subject==="file"?-1:1)||u.id.localeCompare(m.id));let A={satisfied:t.filter(u=>u.classification==="satisfied").length,missing:t.filter(u=>u.classification==="missing").length,contradictory:t.filter(u=>u.classification==="contradictory").length,unplanned:t.filter(u=>u.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:A.missing===0&&A.contradictory===0&&A.unplanned===0,behavioralCompletion:"not-evaluated",summary:A,findings:t}}i(Me,"analyzeArchitectureConvergence");function Se(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}i(Se,"literalText");function or(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}i(or,"lineOf");function sr(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}i(sr,"isTypeOnlyReference");function ir(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}i(ir,"singleFileChecker");function Tt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}i(Tt,"symbolAt");function $t(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=s?t.getShorthandAssignmentValueSymbol(r.parent):Tt(t,r)}catch{a=void 0}return!!a?.declarations?.some(o=>o.getSourceFile().fileName===n.fileName)}i($t,"localDeclaration");function Ft(e,t){let n,r=[],s=i((o,d,l,g=!1)=>r.push({specifier:l,kind:d,line:or(t,o),typeOnly:g,unresolved:l===void 0,node:o}),"add"),a=i(o=>{if(e.isImportDeclaration(o))s(o,"import",Se(e,o.moduleSpecifier),sr(e,o));else if(e.isExportDeclaration(o)&&o.moduleSpecifier)s(o,"export",Se(e,o.moduleSpecifier),sr(e,o));else if(e.isImportEqualsDeclaration(o)&&e.isExternalModuleReference(o.moduleReference))s(o,"require",Se(e,o.moduleReference.expression),o.isTypeOnly===!0);else if(e.isCallExpression(o)){let d=o.expression.kind===e.SyntaxKind.ImportKeyword,g=e.isIdentifier(o.expression)&&o.expression.text==="require"&&!$t(e,n??(n=ir(e,t)),t,o.expression);(d||g)&&s(o,g?"require":"dynamic-import",Se(e,o.arguments[0]))}e.forEachChild(o,a)},"visit");return a(t),r}i(Ft,"extractSemanticDependencies");function fa(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Se(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}i(fa,"staticAccessPath");function pa(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}i(pa,"runtimeIdentifierReference");function ar(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}i(ar,"bestForbiddenMatch");function Nt(e,t,n){if(n.length===0)return[];let r=new Set(n),s=ir(e,t),a=new Map,o=new Set;for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations)e.isIdentifier(m.name)&&o.add(m.name.text);let d=i(u=>{let m=fa(e,u);if(!m)return;let c=Tt(s,m.root),y=c?a.get(c):void 0;return y?[...y,...m.segments.slice(1)]:$t(e,s,t,m.root)||o.has(m.root.text)?void 0:m.segments},"resolvePath");for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations){if(!m.initializer||!e.isIdentifier(m.name))continue;let c=d(m.initializer),y=Tt(s,m.name);!c||!y||a.set(y,c)}let l=[],g=new Set,R=i((u,m)=>{let c=or(t,m),y=`${u}:${m.getStart(t)}`;g.has(y)||(g.add(y),l.push({name:u,line:c,node:m}))},"flag"),A=i(u=>{let m=u.parent&&(e.isPropertyAccessExpression(u.parent)||e.isElementAccessExpression(u.parent))&&u.parent.expression===u;if((e.isPropertyAccessExpression(u)||e.isElementAccessExpression(u))&&!m){let c=d(u),y=c?ar(r,c):void 0;y&&R(y,u)}else e.isIdentifier(u)&&r.has(u.text)&&pa(e,u)&&!$t(e,s,t,u)&&R(u.text,u);if(e.isVariableDeclaration(u)&&e.isObjectBindingPattern(u.name)&&u.initializer){let c=d(u.initializer);if(c)for(let y of u.name.elements){if(!e.isIdentifier(y.name))continue;let k=y.propertyName?Se(e,y.propertyName)??y.propertyName.text:y.name.text,I=ar(r,[...c,k]);I&&R(I,u.initializer)}}e.forEachChild(u,A)},"visit");return A(t),l}i(Nt,"collectForbiddenCapabilityUses");function ga(e,t,n){let r=[];for(let s of n?.dependencies??Ft(e,t)){if(s.typeOnly||!s.specifier)continue;let a=xe(s.specifier);a&&r.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Nt(e,t,dt)){let a=Te(s.name);a&&r.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}i(ga,"collectCapabilityUses");function Pt(e){return{...e,layers:e.layers.map(t=>{let{description:n,trustBoundary:r,owners:s,...a}=t;return a})}}i(Pt,"omitLayerDescriptions");function lr(e){let{stewards:t,...n}=Pt(e.config);return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}i(lr,"effectiveContractPolicyPayload");var pr="1.0",ma="add a short note under docs/adr/ (or docs/decisions/) and put that file path in --policy-ack as adrPath.";function O(e,t){let n=t.classification==="weakening"||t.classification==="judgment-required"?`Restore the previous protection at ${t.path}, or ${ma}`:void 0,r=t.nextAction??n;e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...r?{nextAction:r}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}i(O,"addFinding");function G(e){return[...new Set(e??[])].sort()}i(G,"sortedUnique");function ne(e,t,n,r,s){let a=G(n),o=G(r),d=new Set(a),l=new Set(o),g=o.filter(A=>!d.has(A)),R=a.filter(A=>!l.has(A));g.length===0&&R.length===0||(g.length>0&&O(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:a,after:o}),R.length>0&&O(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:a,after:o}))}i(ne,"compareStringSets");function He(e,t,n,r,s,a,o){if(n===r)return;O(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?a:o,before:n,after:r})}i(He,"compareBoolean");function nt(e,t){let n=new Map,r=new Set;for(let s of e){let a=t(s);n.has(a)?r.add(a):n.set(a,s)}return{values:n,duplicates:[...r].sort()}}i(nt,"keyed");function ya(e,t,n){let r=nt(t,a=>a.name),s=nt(n,a=>a.name);(r.duplicates.length>0||s.duplicates.length>0)&&O(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let a of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let o=r.values.get(a),d=s.values.get(a),l=`$.layers[${a}]`;if(!o&&d){O(e,{kind:"layer-added",path:l,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new layer and put that file path in --policy-ack as adrPath.",after:d});continue}if(o&&!d){O(e,{kind:"layer-removed",path:l,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:o});continue}if(!o||!d)continue;ne(e,`${l}.patterns`,o.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),ne(e,`${l}.exclude`,o.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let g=ze(o),R=ze(d);ne(e,`${l}.forbiddenGlobals`,g.rawGlobals,R.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),ne(e,`${l}.capabilities`,g.atoms,R.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),G(o.intentPrefixes).join("\0")!==G(d.intentPrefixes).join("\0")&&O(e,{kind:"intent-prefixes-changed",path:`${l}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:G(o.intentPrefixes),after:G(d.intentPrefixes)}),He(e,`${l}.mayImportInfrastructure`,o.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),He(e,`${l}.optional`,o.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}i(ya,"compareLayers");function ha(e,t,n){let r=i(o=>`${o.from}->${o.to}`,"keyOf"),s=nt(t,r),a=nt(n,r);(s.duplicates.length>0||a.duplicates.length>0)&&O(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:a.duplicates});for(let o of[...new Set([...s.values.keys(),...a.values.keys()])].sort()){let d=s.values.get(o),l=a.values.get(o),g=`$.rules[${o}]`;if(!d&&l){l.allowed===!1?O(e,{kind:"deny-added",path:g,classification:"strengthening",message:"A denied dependency edge was added.",after:l}):O(e,{kind:"allow-added",path:g,classification:"judgment-required",message:"A new import edge was added; confirm this house should import that one.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new import edge and put that file path in --policy-ack as adrPath.",after:l});continue}if(d&&!l){d.allowed===!1&&O(e,{kind:"deny-removed",path:g,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!l)continue;d.allowed!==l.allowed&&O(e,{kind:l.allowed?"deny-disabled":"deny-enabled",path:`${g}.allowed`,classification:l.allowed?"weakening":"strengthening",message:l.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:l.allowed});let R=d.peerIsolation===!0,A=l.peerIsolation===!0;if(R!==A){let u=d.from===d.to&&l.from===l.to;O(e,{kind:A?"peer-isolation-enabled":"peer-isolation-disabled",path:`${g}.peerIsolation`,classification:u?A?"strengthening":"weakening":"judgment-required",message:u?A?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:R,after:A})}G(d.sliceFolders).join("\0")!==G(l.sliceFolders).join("\0")&&O(e,{kind:"slice-folders-changed",path:`${g}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:G(d.sliceFolders),after:G(l.sliceFolders)}),!(!R&&!A)&&(dr(e,`${g}.sharedRoots`,"shared-roots",G(d.sharedRoots),G(l.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),dr(e,`${g}.allowedCrossSlice`,"cross-slice-allowance",G((d.allowedCrossSlice??[]).map(cr)),G((l.allowedCrossSlice??[]).map(cr)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."))}}i(ha,"compareRules");function cr(e){return JSON.stringify([e.from,e.to])}i(cr,"crossSliceKey");function dr(e,t,n,r,s,a,o){if(JSON.stringify(r)===JSON.stringify(s))return;let d=s.filter(R=>!r.includes(R)),l=r.filter(R=>!s.includes(R)),g=d.length>0&&l.length>0;O(e,{kind:g?`${n}-changed`:d.length>0?`${n}-added`:`${n}-removed`,path:t,classification:g?"judgment-required":d.length>0?"weakening":"strengthening",message:g?`${a} Entries were added and removed in the same change.`:d.length>0?a:o,before:r,after:s})}i(dr,"compareDeclaredExceptions");function Ra(e,t,n){let r=t.safety??{},s=n.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let o=r[a]??0,d=s[a]??0;o!==d&&O(e,{kind:d>o?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:d>o?"weakening":"strengthening",message:d>o?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:o,after:d})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])He(e,`$.safety.${a}`,r[a]===!0,s[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}i(Ra,"compareSafety");function Lt(e){return e.mode==="enforced"?"enforced":"advisory"}i(Lt,"arkRunMode");function Dt(e){return e.mode==="enforced"?"enforced":"advisory"}i(Dt,"arkOrderMode");function Aa(e,t,n){let r=t.arkOrder,s=n.arkOrder,a="$.arkOrder";if(!r&&!s)return;if(!r&&s){O(e,{kind:"arkorder-added",path:a,classification:"strengthening",message:`ArkOrder extra was added (${Dt(s)}).`,after:s});return}if(r&&!s){O(e,{kind:"arkorder-removed",path:a,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let o=Dt(r),d=Dt(s);if(o!==d){let l=o==="advisory"&&d==="enforced";O(e,{kind:l?"arkorder-promoted":"arkorder-demoted",path:`${a}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:o,after:d})}ne(e,`${a}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),ne(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}i(Aa,"compareArkOrder");function ka(e,t,n){let r=t.arkRun,s=n.arkRun,a="$.arkRun";if(!r&&!s)return;if(!r&&s){O(e,{kind:"arkrun-added",path:a,classification:"strengthening",message:`ArkRun extra was added (${Lt(s)}).`,after:s});return}if(r&&!s){O(e,{kind:"arkrun-removed",path:a,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let o=Lt(r),d=Lt(s);if(o!==d){let l=o==="advisory"&&d==="enforced";O(e,{kind:l?"arkrun-promoted":"arkrun-demoted",path:`${a}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:o,after:d})}ne(e,`${a}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),ne(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),He(e,`${a}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}i(ka,"compareArkRun");function ba(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}i(ba,"overallClassification");function ur(e,t){return`${e}::${t}`}i(ur,"ruleKey");function fr(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(ur(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(ur(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}i(fr,"indexEffectiveRules");function va(e,t,n,r,s,a){let o=new Map((a??[]).map(u=>[u.invariantId,u])),d=t.arkRules??{},l=n.arkRules??{},g=[...new Set([...Object.keys(d),...Object.keys(l)])].sort();for(let u of g){let m=d[u],c=l[u],y=`$.arkRules[${u}]`;if(m===void 0&&c!==void 0){O(e,{kind:"arkrules-ref-added",path:y,classification:"strengthening",message:`ArkRules reference for layer ${u} was added.`,after:c});continue}if(m!==void 0&&c===void 0){O(e,{kind:"arkrules-ref-removed",path:y,classification:"weakening",message:`ArkRules reference for layer ${u} was removed.`,before:m});continue}m!==c&&O(e,{kind:"arkrules-ref-path-changed",path:y,classification:"judgment-required",message:`ArkRules file path for layer ${u} changed; verify the effective rules still match intent.`,before:m,after:c})}let R=fr(r),A=fr(s);for(let u of[...new Set([...R.structure.keys(),...A.structure.keys()])].sort()){let m=R.structure.get(u),c=A.structure.get(u),y=`$.arkRules.structure[${u}]`;if(!m&&c){O(e,{kind:"arkrule-structure-added",path:y,classification:"strengthening",message:`Structure ArkRule ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){O(e,{kind:"arkrule-structure-removed",path:y,classification:"weakening",message:`Structure ArkRule ${m.id} was removed.`,before:m});continue}if(!(!m||!c)){if(m.mode!==c.mode){let k=m.mode==="advisory"&&c.mode==="enforced";O(e,{kind:k?"arkrule-promoted":"arkrule-demoted",path:`${y}.mode`,classification:k?"strengthening":"weakening",message:k?`Structure ArkRule ${c.id} was promoted to enforced.`:`Structure ArkRule ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}m.sensor!==c.sensor&&O(e,{kind:"arkrule-sensor-changed",path:`${y}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${c.id} changed sensor identity.`,before:m.sensor,after:c.sensor})}}for(let u of[...new Set([...R.invariants.keys(),...A.invariants.keys()])].sort()){let m=R.invariants.get(u),c=A.invariants.get(u),y=`$.arkRules.invariants[${u}]`;if(!m&&c){O(e,{kind:"arkrule-invariant-added",path:y,classification:"strengthening",message:`Invariant ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){O(e,{kind:"arkrule-invariant-removed",path:y,classification:"weakening",message:`Invariant ${m.id} was removed.`,before:m});continue}if(!(!m||!c)&&m.mode!==c.mode)if(m.mode==="advisory"&&c.mode==="enforced"){let I=o?.get(c.id),E=vn(I);E.ok?O(e,{kind:"arkrule-invariant-promoted",path:`${y}.mode`,classification:"strengthening",message:`Invariant ${c.id} was promoted to enforced (coverage evidence present).`,before:m.mode,after:c.mode}):O(e,{kind:"arkrule-invariant-promote-refused",path:`${y}.mode`,classification:"judgment-required",message:`Invariant ${c.id} cannot be promoted to enforced: ${E.reason}`,before:m.mode,after:c.mode})}else O(e,{kind:"arkrule-invariant-demoted",path:`${y}.mode`,classification:"weakening",message:`Invariant ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}}i(va,"compareArkRules");function gr(e,t,n){let r=[];ne(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),ne(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),ne(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),He(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",o=t.cyclePolicy??"strict";if(a!==o){let d=s[o]===s[a]?"judgment-required":s[o]>s[a]?"strengthening":"weakening";O(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:a,after:o})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&O(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),ya(r,e.layers,t.layers),ha(r,e.rules,t.rules),Ra(r,e,t),va(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),ka(r,e,t),Aa(r,e,t),r.sort((d,l)=>d.path.localeCompare(l.path)||d.id.localeCompare(l.id)),{schemaVersion:pr,classification:ba(r),findings:r}}i(gr,"classifyArkPolicyDelta");function mr(e,t){if(!e||e.schemaVersion!==pr||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=G(e.findingIds),r=G(t.findingIds);return n.length===r.length&&n.every((s,a)=>s===r[a])}i(mr,"policyDeltaAcknowledgementMatches");function he(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}i(he,"normalizePath");function yr(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}i(yr,"isIdentifierStart");function rt(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}i(rt,"isIdentifierCharacter");function J(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}i(J,"skipWhitespace");function Ke(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};a==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=a}}i(Ke,"readString");function ee(e,t,n){return e.startsWith(t,n)&&!rt(e[n-1])&&!rt(e[n+t.length])}i(ee,"isWordAt");function hr(e,t){let n=J(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=J(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!ee(e,"type",n))return!1;let s=J(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||ee(e,"as",s)||!yr(e[s]))return!1;for(n=s;n<e.length&&rt(e[n]);)n+=1;if(n=J(e,n),ee(e,"as",n)){if(n=J(e,n+2),!yr(e[n]))return!1;for(;n<e.length&&rt(e[n]);)n+=1}r=!0}return!1}i(hr,"bracedNamedBindingsAreTypeOnly");function Ea(e,t){if(t=J(e,t+6),e[t]==="(")return Ke(e,J(e,t+1));let n=!1;if(ee(e,"type",t)){let s=J(e,t+4);e[s]!==","&&!ee(e,"from",s)&&(n=!0)}else hr(e,t)&&(n=!0);let r=Rr(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}i(Ea,"specifierAfterImport");function Ia(e,t){t=t+6;let n=J(e,t),r=!1;if(ee(e,"type",n)){let a=J(e,n+4);(e[a]==="{"||e[a]==="*")&&(r=!0)}else hr(e,n)&&(r=!0);let s=Rr(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}i(Ia,"specifierAfterExport");function Rr(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(ee(e,"from",t))return Ke(e,J(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return Ke(e,t);if(t>0&&(ee(e,"import",t)||ee(e,"export",t)))return}}i(Rr,"specifierInStaticStatement");function Sa(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}i(Sa,"skipTemplateLiteral");function Ca(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=J(e,t+7);if(e[r]!=="(")return;r=J(e,r+1);let s=Ke(e,r);return s?{...s,requireCall:!0}:void 0}i(Ca,"specifierAfterRequire");function wa(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
-`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let a=e.indexOf("*/",n+2);if(a<0)break;n=a+1;continue}if(r==="`"){n=Sa(e,n);continue}if(r==="'"||r==='"'){let a=Ke(e,n);a&&(n=a.offset+a.excerpt.length-1);continue}let s=r==="i"&&ee(e,"import",n)?Ea(e,n):r==="e"&&ee(e,"export",n)?Ia(e,n):r==="r"&&ee(e,"require",n)?Ca(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}i(wa,"moduleSpecifiers");function Ar(e,t){let n=[],r=[];for(let s of wa(e.content)){let a=s.value;if(!a.startsWith(".")){if(s.typeOnly)continue;let g=xe(a);if(!g)continue;let R=e.content.slice(0,s.offset).split(`
-`).length;r.push({file:e.path,symbol:a,capability:g,evidence:{kind:"import",file:e.path,line:R,excerpt:s.excerpt}});continue}let o=e.content.slice(0,s.offset).split(`
-`).length,d={kind:"import",file:e.path,line:o,excerpt:s.excerpt},l=Oa(e.path,a,t);n.push({from:e.path,specifier:a,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:d})}return{edges:n,capabilityUses:r}}i(Ar,"moduleFactsFor");function Oa(e,t,n){let r=e.split("/");r.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?r.pop():r.push(a));let s=r.join("/");for(let a of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let o=n.get(a);if(o)return o}}i(Oa,"resolveSpecifier");function kr(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=nn(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}i(kr,"violationsFor");var xa={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function _a(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}i(_a,"hasActiveArkRules");function Ta(e,t){return _a(e,t)?j(F(lr({config:e,arkRules:t,warnings:[]}))):j(F(Pt(e)))}i(Ta,"policyHashFor");function Mt(e,t,n){let r=typeof e=="string"?Qn(e,t):St(e,t),s=n?.arkRules??Fe();return{...r,arkRules:s,policyHash:Ta(r.config,s)}}i(Mt,"loadContract");function $a(e){let t=Mt(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=Mt(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=gr(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),a=s.length>0,o=a&&mr(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:a,acknowledged:o,valid:!a||o}}i($a,"analyzePolicyDelta");function st(e){let t=e.files.map(A=>{let u=he(A.path);return{path:u,content:A.content,contentHash:j(A.content),layer:Q(u,e.contract.config.layers)??null}}).sort((A,u)=>A.path.localeCompare(u.path)),n=new Map(t.map(A=>[A.path,A])),r=[],s=[];for(let A of t){let u=Ar(A,n);r.push(...u.edges),s.push(...u.capabilityUses)}let a=kr(r,e.contract.config),o=new Map(e.contract.config.layers.map(A=>[A.name,A])),d=new Map(e.contract.config.layers.map(A=>[A.name,new Set(ve(A))]));for(let A of s){let u=n.get(A.file)?.layer;if(!u)continue;let m=o.get(u),c=_e(A.symbol,m?.forbiddenGlobals??[]);if(c){a.push({ruleId:"FORBIDDEN_GLOBAL",message:`${u} must not use module "${A.symbol}" because it is the import form of forbidden global "${c}".`,symbol:A.symbol,evidence:A.evidence});continue}d.get(u)?.has(A.capability)&&a.push({ruleId:"CAPABILITY_VIOLATION",message:`${u} denies the ${A.capability} capability; found import of "${A.symbol}".`,capability:A.capability,symbol:A.symbol,evidence:A.evidence})}let l=t.length===0?"complete":"partial",g=l==="complete"?[]:[{...xa}],R={schemaVersion:qt,policyHash:e.contract.policyHash,compilerOptionsHash:j(F(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(A=>A.name),edges:r,capabilityUses:s,violations:a};return{mode:"lexical-compatibility",completeness:l,completenessReasons:g,valid:l==="complete"&&a.length===0,ir:R}}i(st,"analyzeProject");function Ht(e){let t=new Map(e.files.map(n=>[he(n.path),n]));for(let n of e.changes){let r=he(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return st({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}i(Ht,"analyzeChange");function Fa(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}i(Fa,"explainViolation");function br(e){return j(F(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}i(br,"analysisTreeHash");function Na(e){let t=st(e),n=new Map(t.ir.files.map(c=>[c.path,c])),r=[],s=new Set,a=[];for(let c of e.changes){let y=c.path.replace(/\\/g,"/"),k=he(c.path);if(!k||k===".."||k.startsWith("../")||y.startsWith("/")||/^[A-Za-z]:\//.test(y)||y.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(k)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:k,line:1,message:`The atomic change set contains more than one operation for ${k}.`});continue}s.add(k),"delete"in c&&c.delete&&!n.has(k)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:k,line:1,message:`Cannot delete ${k} because it is not present in the supplied base tree.`}),r.push("delete"in c&&c.delete?{path:k,delete:!0}:{path:k,content:"content"in c?c.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let o=Ht({...e,changes:r}),d=new Map(o.ir.files.map(c=>[c.path,c])),l=o.ir.violations.filter(c=>c.ruleId==="CAPABILITY_VIOLATION"||c.ruleId==="FORBIDDEN_GLOBAL").map(c=>{let y=d.get(c.evidence.file)?.layer;return{ruleId:c.ruleId,file:c.evidence.file,line:c.evidence.line,target:c.symbol,...c.capability?{capability:c.capability}:{},...y?{fromLayer:y}:{},edgeKind:"import",message:c.message}}),g=Le({config:e.contract.config,rules:e.contract.config.rules,files:o.ir.files.map(c=>c.path),contentViolations:l,edges:o.ir.edges.filter(c=>!!c.fromLayer).map(c=>({from:c.from,fromLayer:c.fromLayer,...c.to?{to:c.to}:{},...c.toLayer?{toLayer:c.toLayer}:{},line:c.evidence.line,kind:"import",...c.typeOnly?{typeOnly:!0}:{},...c.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),R=r.map(c=>{let y=he(c.path),k=n.get(y),I=d.get(y);return{path:y,operation:"delete"in c&&c.delete?"delete":k?"update":"create",...k?{beforeContentHash:k.contentHash}:{},...I?{candidateContentHash:I.contentHash}:{}}}).sort((c,y)=>c.path.localeCompare(y.path)),A=[...a,...g.violations].map(c=>({...c,nextAction:ue(c)})),u=A.filter(c=>c.failsStrict!==!1),m=e.changeMap?Me({changeMap:e.changeMap,changes:R,baseDependencies:t.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[]),candidateDependencies:o.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&o.valid&&u.length===0&&(m?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:o.ir.compilerOptionsHash,baseTreeHash:br(t.ir.files),candidateTreeHash:br(o.ir.files),baseCompleteness:t.completeness,candidateCompleteness:o.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:o.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...m?{convergence:m}:{},changes:R,violations:A,warnings:g.warnings}}i(Na,"preflightChange");function Pa(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Pa,"canonicalChangePath");function La(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,a])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:a,message:`Base and candidate facts must use the same ${r}.`}))}i(La,"identityViolations");function Da(e,t,n,r){let s=n.get(t),a=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...a?{candidateContentHash:a.contentHash}:{}}}i(Da,"preparedChange");function Ma(e){let t=ge(e.baseFacts),n=ge(e.candidateFacts),r=et({contract:e.contract,facts:t}),s=et({contract:e.contract,facts:n}),a=new Map(t.files.map(m=>[m.path,m])),o=new Map(n.files.map(m=>[m.path,m])),d=La(t,n),l=new Map,g=[];for(let m of e.changes){let c=Pa(m.path);if(!c){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(l.has(c)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:c,line:1,message:`The atomic change set contains more than one operation for ${c}.`});continue}l.set(c,m);let y=a.get(c),k=o.get(c);if("delete"in m&&m.delete)y||d.push({ruleId:"DELETE_TARGET_MISSING",file:c,line:1,message:`Cannot delete ${c} because it is not present in the supplied base facts.`}),k&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:c,line:1,message:`Candidate facts still contain deleted file ${c}.`});else{let I="content"in m?m.content:"",E=j(I);k?k.contentHash!==E&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:c,line:1,expectedContentHash:E,candidateContentHash:k.contentHash,message:`Candidate facts for ${c} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:c,line:1,message:`Candidate facts do not contain changed file ${c}.`})}g.push(Da(m,c,a,o))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let m of new Set([...a.keys(),...o.keys()])){if(l.has(m))continue;let c=a.get(m),y=o.get(m);c&&y&&F(c)===F(y)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:m,line:1,message:`Candidate facts change ${m}, but the atomic change set does not declare it.`})}let R=e.changeMap?Me({changeMap:e.changeMap,changes:g,baseDependencies:r.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[]),candidateDependencies:s.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[])}):void 0,A=[...d,...s.ir.violations].map(m=>({...m,nextAction:ue(m)})),u=A.filter(m=>m.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&u.length===0&&(R?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...R?{convergence:R}:{},changes:g.sort((m,c)=>m.path<c.path?-1:m.path>c.path?1:0),violations:A,warnings:s.ir.warnings}}i(Ma,"preflightResolvedChange");var vr=new WeakSet;function Er(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Er(t);return Object.freeze(e)}i(Er,"deepFreeze");function Pl(e){let t=Er(Ge(e));return vr.add(t),t}i(Pl,"createTrustedResolvedCandidateFacts");function Ll(e){if(!vr.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return wt(e)}i(Ll,"analyzeTrustedResolvedProject");export{dt as AMBIENT_CAPABILITY_ENTRIES,lt as CAPABILITY_IDS,gt as DEFAULT_INTENT_PREFIXES,Wt as RESOLVED_CANDIDATE_FACTS_SCHEMA,ke as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,pt as SOURCE_POLICY_MESSAGES,ut as ambientCoveredByForbiddenGlobals,Me as analyzeArchitectureConvergence,Ht as analyzeChange,$a as analyzePolicyDelta,st as analyzeProject,et as analyzeResolvedProject,Ll as analyzeTrustedResolvedProject,Te as capabilityForAmbientName,xe as capabilityForModuleSpecifier,yt as classifyPublishFacts,Ct as collectAnalysisConfigWarnings,ga as collectCapabilityUses,Nt as collectForbiddenCapabilityUses,Ge as createResolvedCandidateFacts,Pl as createTrustedResolvedCandidateFacts,er as detectArchitectureCycles,j as deterministicHash,ve as effectiveCapabilityDeny,Le as evaluateArchitectureGraph,Fa as explainViolation,Ft as extractSemanticDependencies,_e as forbiddenGlobalForModuleSpecifier,ua as loadArchitectureChangeMap,Mt as loadContract,ge as loadResolvedCandidateFacts,rn as looksLikeArkIntent,Or as lowerForbiddenGlobal,ze as loweredLayerCoverage,Na as preflightChange,Ma as preflightResolvedChange,mt as resolveIntentLayer,Ve as resolvedFactsEvidenceRequirementsHash,F as stableSerialize};
+`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Tt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Tt,"isObject");function $t(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}i($t,"unknownFields");function ye(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}i(ye,"requiredString");function Ao(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Ao,"canonicalProjectPath");function ko(e,t,n="architecture change map"){let r=[];if(!Tt(e))throw new rt(n,[{path:"$",message:"must be an object"}]);$t(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=ye(e,"$schema","$",r),o=ye(e,"schemaVersion","$",r);o&&o!==_t&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(o)}; expected ${_t}`});let a=new Set(t.layers.map(c=>c.name)),d=[],l=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((c,y)=>{let k=`$.files[${y}]`;if(!Tt(c)){r.push({path:k,message:"must be an object"});return}$t(c,["path","operation","layer"],k,r);let I=ye(c,"path",k,r),E=ye(c,"operation",k,r),w=ye(c,"layer",k,r),$=I?Ao(I):void 0;I&&!$&&r.push({path:`${k}.path`,message:"must be a canonical project-relative path"}),E&&!["create","update","delete"].includes(E)&&r.push({path:`${k}.operation`,message:"must be create, update, or delete"}),w&&!a.has(w)&&r.push({path:`${k}.layer`,message:`references unknown layer ${JSON.stringify(w)}`}),$&&l.has($)&&r.push({path:`${k}.path`,message:`duplicates planned path ${$}`}),$&&l.add($);let te=$?Q($,t.layers):void 0;$&&w&&a.has(w)&&te!==w&&r.push({path:`${k}.layer`,message:te?`${$} resolves to ${te}, not ${w}`:`${$} is not assigned to an architecture layer`}),$&&E&&["create","update","delete"].includes(E)&&w&&d.push({path:$,operation:E,layer:w})});let g=[],R=new Map(d.map(c=>[c.path,c.operation])),A=new Set,u=e.dependencies??[];if(Array.isArray(u)?u.forEach((c,y)=>{let k=`$.dependencies[${y}]`;if(!Tt(c)){r.push({path:k,message:"must be an object"});return}$t(c,["from","to"],k,r);let I=ye(c,"from",k,r),E=ye(c,"to",k,r);I&&!l.has(I)&&r.push({path:`${k}.from`,message:`must reference a planned file path: ${I}`}),E&&!l.has(E)&&r.push({path:`${k}.to`,message:`must reference a planned file path: ${E}`}),I&&R.get(I)==="delete"&&r.push({path:`${k}.from`,message:`cannot depend from deleted file ${I}`}),E&&R.get(E)==="delete"&&r.push({path:`${k}.to`,message:`cannot depend on deleted file ${E}`}),I&&E&&I===E&&r.push({path:k,message:"must not declare a self dependency"});let w=I&&E?`${I}\0${E}`:void 0;w&&A.has(w)&&r.push({path:k,message:`duplicates dependency ${I} -> ${E}`}),w&&A.add(w),I&&E&&g.push({from:I,to:E})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new rt(n,r);let m={$schema:s,schemaVersion:_t,files:d.sort((c,y)=>c.path.localeCompare(y.path)),dependencies:g.sort((c,y)=>c.from.localeCompare(y.from)||c.to.localeCompare(y.to))};return{map:m,hash:j(N(m))}}i(ko,"loadArchitectureChangeMap");function X(e){return`${e.from}->${e.to}`}i(X,"dependencyKey");function Me(e,t,n,r="dependency"){return{id:`${e}:${r}:${X(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${X(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${X(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${X(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${X(t)} from the candidate, then preflight again.`}:{}}}i(Me,"dependencyFinding");function He(e){let t=[],n=new Map(e.changeMap.map.files.map(u=>[u.path,u])),r=new Map(e.changes.map(u=>[u.path,u])),s=new Map(e.changeMap.map.dependencies.map(u=>[X(u),u])),o=new Map(e.baseDependencies.map(u=>[X(u),u])),a=new Map(e.candidateDependencies.map(u=>[X(u),u]));for(let u of[...n.values()].sort((m,c)=>m.path.localeCompare(c.path))){let m=r.get(u.path);m?m.operation!==u.operation?t.push({id:`contradictory:file:${u.path}`,classification:"contradictory",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} was planned as ${u.operation} but the actual operation is ${m.operation}.`,nextAction:`Change ${u.path} to the planned ${u.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${u.path}`,classification:"satisfied",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} matches the planned ${u.operation} operation.`}):t.push({id:`missing:file:${u.path}`,classification:"missing",subject:"file",path:u.path,expectedOperation:u.operation,message:`${u.path} was planned as ${u.operation} but is absent from the actual change.`,nextAction:`${u.operation[0].toUpperCase()}${u.operation.slice(1)} ${u.path} in the complete change set, then preflight again.`})}for(let u of[...r.values()].sort((m,c)=>m.path.localeCompare(c.path)))n.has(u.path)||t.push({id:`unplanned:file:${u.path}`,classification:"unplanned",subject:"file",path:u.path,actualOperation:u.operation,message:`${u.path} has an unplanned ${u.operation} operation.`,nextAction:`Remove ${u.path} from the change set, then preflight again.`});let d=new Set;for(let u of[...s.values()].sort((m,c)=>X(m).localeCompare(X(c)))){if(a.has(X(u))){t.push(Me("satisfied",u,`${u.from} -> ${u.to} exists in the candidate architecture.`));continue}let m={from:u.to,to:u.from};a.has(X(m))?(d.add(X(m)),t.push(Me("contradictory",u,`${u.from} -> ${u.to} was planned, but the candidate contains the reverse edge.`))):t.push(Me("missing",u,`${u.from} -> ${u.to} is absent from the candidate architecture.`))}let l=new Set([...n.keys(),...r.keys()]);for(let[u,m]of[...a].sort(([c],[y])=>c.localeCompare(y)))o.has(u)||s.has(u)||d.has(u)||!l.has(m.from)&&!l.has(m.to)||t.push({...Me("unplanned",m,`${m.from} -> ${m.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let g=new Set(e.changeMap.map.files.filter(u=>u.operation==="delete").map(u=>u.path));for(let[u,m]of[...o].sort(([c],[y])=>c.localeCompare(y)))a.has(u)||g.has(m.from)||g.has(m.to)||!l.has(m.from)&&!l.has(m.to)||t.push({...Me("unplanned",m,`${m.from} -> ${m.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let R={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((u,m)=>R[u.classification]-R[m.classification]||(u.subject===m.subject?0:u.subject==="file"?-1:1)||u.id.localeCompare(m.id));let A={satisfied:t.filter(u=>u.classification==="satisfied").length,missing:t.filter(u=>u.classification==="missing").length,contradictory:t.filter(u=>u.classification==="contradictory").length,unplanned:t.filter(u=>u.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:A.missing===0&&A.contradictory===0&&A.unplanned===0,behavioralCompletion:"not-evaluated",summary:A,findings:t}}i(He,"analyzeArchitectureConvergence");function Ce(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}i(Ce,"literalText");function cr(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}i(cr,"lineOf");function ir(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(o=>o.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}i(ir,"isTypeOnlyReference");function dr(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}i(dr,"singleFileChecker");function Ft(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}i(Ft,"symbolAt");function Nt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,o;try{o=s?t.getShorthandAssignmentValueSymbol(r.parent):Ft(t,r)}catch{o=void 0}return!!o?.declarations?.some(a=>a.getSourceFile().fileName===n.fileName)}i(Nt,"localDeclaration");function Pt(e,t){let n,r=[],s=i((a,d,l,g=!1)=>r.push({specifier:l,kind:d,line:cr(t,a),typeOnly:g,unresolved:l===void 0,node:a}),"add"),o=i(a=>{if(e.isImportDeclaration(a))s(a,"import",Ce(e,a.moduleSpecifier),ir(e,a));else if(e.isExportDeclaration(a)&&a.moduleSpecifier)s(a,"export",Ce(e,a.moduleSpecifier),ir(e,a));else if(e.isImportEqualsDeclaration(a)&&e.isExternalModuleReference(a.moduleReference))s(a,"require",Ce(e,a.moduleReference.expression),a.isTypeOnly===!0);else if(e.isCallExpression(a)){let d=a.expression.kind===e.SyntaxKind.ImportKeyword,g=e.isIdentifier(a.expression)&&a.expression.text==="require"&&!Nt(e,n??(n=dr(e,t)),t,a.expression);(d||g)&&s(a,g?"require":"dynamic-import",Ce(e,a.arguments[0]))}e.forEachChild(a,o)},"visit");return o(t),r}i(Pt,"extractSemanticDependencies");function bo(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Ce(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}i(bo,"staticAccessPath");function vo(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}i(vo,"runtimeIdentifierReference");function lr(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}i(lr,"bestForbiddenMatch");function Lt(e,t,n){if(n.length===0)return[];let r=new Set(n),s=dr(e,t),o=new Map,a=new Set;for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations)e.isIdentifier(m.name)&&a.add(m.name.text);let d=i(u=>{let m=bo(e,u);if(!m)return;let c=Ft(s,m.root),y=c?o.get(c):void 0;return y?[...y,...m.segments.slice(1)]:Nt(e,s,t,m.root)||a.has(m.root.text)?void 0:m.segments},"resolvePath");for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations){if(!m.initializer||!e.isIdentifier(m.name))continue;let c=d(m.initializer),y=Ft(s,m.name);!c||!y||o.set(y,c)}let l=[],g=new Set,R=i((u,m)=>{let c=cr(t,m),y=`${u}:${m.getStart(t)}`;g.has(y)||(g.add(y),l.push({name:u,line:c,node:m}))},"flag"),A=i(u=>{let m=u.parent&&(e.isPropertyAccessExpression(u.parent)||e.isElementAccessExpression(u.parent))&&u.parent.expression===u;if((e.isPropertyAccessExpression(u)||e.isElementAccessExpression(u))&&!m){let c=d(u),y=c?lr(r,c):void 0;y&&R(y,u)}else e.isIdentifier(u)&&r.has(u.text)&&vo(e,u)&&!Nt(e,s,t,u)&&R(u.text,u);if(e.isVariableDeclaration(u)&&e.isObjectBindingPattern(u.name)&&u.initializer){let c=d(u.initializer);if(c)for(let y of u.name.elements){if(!e.isIdentifier(y.name))continue;let k=y.propertyName?Ce(e,y.propertyName)??y.propertyName.text:y.name.text,I=lr(r,[...c,k]);I&&R(I,u.initializer)}}e.forEachChild(u,A)},"visit");return A(t),l}i(Lt,"collectForbiddenCapabilityUses");function Eo(e,t,n){let r=[];for(let s of n?.dependencies??Pt(e,t)){if(s.typeOnly||!s.specifier)continue;let o=_e(s.specifier);o&&r.push({capability:o,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Lt(e,t,ut)){let o=$e(s.name);o&&r.push({capability:o,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,o)=>s.line-o.line||s.capability.localeCompare(o.capability)||s.symbol.localeCompare(o.symbol))}i(Eo,"collectCapabilityUses");function Dt(e){return{...e,layers:e.layers.map(t=>{let{description:n,trustBoundary:r,owners:s,...o}=t;return o})}}i(Dt,"omitLayerDescriptions");function ur(e){let{stewards:t,...n}=Dt(e.config);return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}i(ur,"effectiveContractPolicyPayload");var yr="1.0",Io="add a short note under docs/adr/ (or docs/decisions/) and put that file path in --policy-ack as adrPath.";function C(e,t){let n=t.classification==="weakening"||t.classification==="judgment-required"?`Restore the previous protection at ${t.path}, or ${Io}`:void 0,r=t.nextAction??n;e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...r?{nextAction:r}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}i(C,"addFinding");function G(e){return[...new Set(e??[])].sort()}i(G,"sortedUnique");function re(e,t,n,r,s){let o=G(n),a=G(r),d=new Set(o),l=new Set(a),g=a.filter(A=>!d.has(A)),R=o.filter(A=>!l.has(A));g.length===0&&R.length===0||(g.length>0&&C(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:o,after:a}),R.length>0&&C(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:o,after:a}))}i(re,"compareStringSets");function Ke(e,t,n,r,s,o,a){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?o:a,before:n,after:r})}i(Ke,"compareBoolean");function st(e,t){let n=new Map,r=new Set;for(let s of e){let o=t(s);n.has(o)?r.add(o):n.set(o,s)}return{values:n,duplicates:[...r].sort()}}i(st,"keyed");function So(e,t,n){let r=st(t,o=>o.name),s=st(n,o=>o.name);(r.duplicates.length>0||s.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let o of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let a=r.values.get(o),d=s.values.get(o),l=`$.layers[${o}]`;if(!a&&d){C(e,{kind:"layer-added",path:l,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new layer and put that file path in --policy-ack as adrPath.",after:d});continue}if(a&&!d){C(e,{kind:"layer-removed",path:l,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:a});continue}if(!a||!d)continue;re(e,`${l}.patterns`,a.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),re(e,`${l}.exclude`,a.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let g=We(a),R=We(d);re(e,`${l}.forbiddenGlobals`,g.rawGlobals,R.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),re(e,`${l}.capabilities`,g.atoms,R.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),G(a.intentPrefixes).join("\0")!==G(d.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${l}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:G(a.intentPrefixes),after:G(d.intentPrefixes)}),Ke(e,`${l}.mayImportInfrastructure`,a.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Ke(e,`${l}.optional`,a.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}i(So,"compareLayers");function Co(e,t,n){let r=i(a=>`${a.from}->${a.to}`,"keyOf"),s=st(t,r),o=st(n,r);(s.duplicates.length>0||o.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:o.duplicates});for(let a of[...new Set([...s.values.keys(),...o.values.keys()])].sort()){let d=s.values.get(a),l=o.values.get(a),g=`$.rules[${a}]`;if(!d&&l){l.allowed===!1?C(e,{kind:"deny-added",path:g,classification:"strengthening",message:"A denied dependency edge was added.",after:l}):C(e,{kind:"allow-added",path:g,classification:"judgment-required",message:"A new import edge was added; confirm this house should import that one.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new import edge and put that file path in --policy-ack as adrPath.",after:l});continue}if(d&&!l){d.allowed===!1&&C(e,{kind:"deny-removed",path:g,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!l)continue;d.allowed!==l.allowed&&C(e,{kind:l.allowed?"deny-disabled":"deny-enabled",path:`${g}.allowed`,classification:l.allowed?"weakening":"strengthening",message:l.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:l.allowed});let R=d.peerIsolation===!0,A=l.peerIsolation===!0;if(R!==A){let u=d.from===d.to&&l.from===l.to;C(e,{kind:A?"peer-isolation-enabled":"peer-isolation-disabled",path:`${g}.peerIsolation`,classification:u?A?"strengthening":"weakening":"judgment-required",message:u?A?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:R,after:A})}if(G(d.sliceFolders).join("\0")!==G(l.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${g}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:G(d.sliceFolders),after:G(l.sliceFolders)}),!(!R&&!A)&&(pr(e,`${g}.sharedRoots`,"shared-roots",G(d.sharedRoots),G(l.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),pr(e,`${g}.allowedCrossSlice`,"cross-slice-allowance",G((d.allowedCrossSlice??[]).map(fr)),G((l.allowedCrossSlice??[]).map(fr)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."),(d.sharedImportsSlice??null)!==(l.sharedImportsSlice??null))){let u=l.sharedImportsSlice==="deny";C(e,{kind:"shared-imports-slice",path:`${g}.sharedImportsSlice`,classification:u?"strengthening":"weakening",message:u?"A shared root may no longer import a slice.":"A shared root may import a slice again.",before:d.sharedImportsSlice??null,after:l.sharedImportsSlice??null})}}}i(Co,"compareRules");function fr(e){return JSON.stringify([e.from,e.to])}i(fr,"crossSliceKey");function pr(e,t,n,r,s,o,a){if(JSON.stringify(r)===JSON.stringify(s))return;let d=s.filter(R=>!r.includes(R)),l=r.filter(R=>!s.includes(R)),g=d.length>0&&l.length>0;C(e,{kind:g?`${n}-changed`:d.length>0?`${n}-added`:`${n}-removed`,path:t,classification:g?"judgment-required":d.length>0?"weakening":"strengthening",message:g?`${o} Entries were added and removed in the same change.`:d.length>0?o:a,before:r,after:s})}i(pr,"compareDeclaredExceptions");function wo(e,t,n){let r=t.safety??{},s=n.safety??{};for(let o of["maxTsSuppressions","maxAnyCasts"]){let a=r[o]??0,d=s[o]??0;a!==d&&C(e,{kind:d>a?"threshold-raised":"threshold-lowered",path:`$.safety.${o}`,classification:d>a?"weakening":"strengthening",message:d>a?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:a,after:d})}for(let o of["allowInMemory","allowDisabledPeerIsolation"])Ke(e,`$.safety.${o}`,r[o]===!0,s[o]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}i(wo,"compareSafety");function Mt(e){return e.mode==="enforced"?"enforced":"advisory"}i(Mt,"arkRunMode");function Ht(e){return e.mode==="enforced"?"enforced":"advisory"}i(Ht,"arkOrderMode");function Oo(e,t,n){let r=t.arkOrder,s=n.arkOrder,o="$.arkOrder";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkorder-added",path:o,classification:"strengthening",message:`ArkOrder extra was added (${Ht(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkorder-removed",path:o,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let a=Ht(r),d=Ht(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkorder-promoted":"arkorder-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:a,after:d})}re(e,`${o}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),re(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}i(Oo,"compareArkOrder");function xo(e,t,n){let r=t.arkRun,s=n.arkRun,o="$.arkRun";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkrun-added",path:o,classification:"strengthening",message:`ArkRun extra was added (${Mt(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkrun-removed",path:o,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let a=Mt(r),d=Mt(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkrun-promoted":"arkrun-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:a,after:d})}re(e,`${o}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),re(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Ke(e,`${o}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}i(xo,"compareArkRun");function _o(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}i(_o,"overallClassification");function gr(e,t){return`${e}::${t}`}i(gr,"ruleKey");function mr(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(gr(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(gr(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}i(mr,"indexEffectiveRules");function To(e,t,n,r,s,o){let a=new Map((o??[]).map(u=>[u.invariantId,u])),d=t.arkRules??{},l=n.arkRules??{},g=[...new Set([...Object.keys(d),...Object.keys(l)])].sort();for(let u of g){let m=d[u],c=l[u],y=`$.arkRules[${u}]`;if(m===void 0&&c!==void 0){C(e,{kind:"arkrules-ref-added",path:y,classification:"strengthening",message:`ArkRules reference for layer ${u} was added.`,after:c});continue}if(m!==void 0&&c===void 0){C(e,{kind:"arkrules-ref-removed",path:y,classification:"weakening",message:`ArkRules reference for layer ${u} was removed.`,before:m});continue}m!==c&&C(e,{kind:"arkrules-ref-path-changed",path:y,classification:"judgment-required",message:`ArkRules file path for layer ${u} changed; verify the effective rules still match intent.`,before:m,after:c})}let R=mr(r),A=mr(s);for(let u of[...new Set([...R.structure.keys(),...A.structure.keys()])].sort()){let m=R.structure.get(u),c=A.structure.get(u),y=`$.arkRules.structure[${u}]`;if(!m&&c){C(e,{kind:"arkrule-structure-added",path:y,classification:"strengthening",message:`Structure ArkRule ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){C(e,{kind:"arkrule-structure-removed",path:y,classification:"weakening",message:`Structure ArkRule ${m.id} was removed.`,before:m});continue}if(!(!m||!c)){if(m.mode!==c.mode){let k=m.mode==="advisory"&&c.mode==="enforced";C(e,{kind:k?"arkrule-promoted":"arkrule-demoted",path:`${y}.mode`,classification:k?"strengthening":"weakening",message:k?`Structure ArkRule ${c.id} was promoted to enforced.`:`Structure ArkRule ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}m.sensor!==c.sensor&&C(e,{kind:"arkrule-sensor-changed",path:`${y}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${c.id} changed sensor identity.`,before:m.sensor,after:c.sensor})}}for(let u of[...new Set([...R.invariants.keys(),...A.invariants.keys()])].sort()){let m=R.invariants.get(u),c=A.invariants.get(u),y=`$.arkRules.invariants[${u}]`;if(!m&&c){C(e,{kind:"arkrule-invariant-added",path:y,classification:"strengthening",message:`Invariant ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){C(e,{kind:"arkrule-invariant-removed",path:y,classification:"weakening",message:`Invariant ${m.id} was removed.`,before:m});continue}if(!(!m||!c)&&m.mode!==c.mode)if(m.mode==="advisory"&&c.mode==="enforced"){let I=a?.get(c.id),E=Sn(I);E.ok?C(e,{kind:"arkrule-invariant-promoted",path:`${y}.mode`,classification:"strengthening",message:`Invariant ${c.id} was promoted to enforced (coverage evidence present).`,before:m.mode,after:c.mode}):C(e,{kind:"arkrule-invariant-promote-refused",path:`${y}.mode`,classification:"judgment-required",message:`Invariant ${c.id} cannot be promoted to enforced: ${E.reason}`,before:m.mode,after:c.mode})}else C(e,{kind:"arkrule-invariant-demoted",path:`${y}.mode`,classification:"weakening",message:`Invariant ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}}i(To,"compareArkRules");function hr(e,t,n){let r=[];re(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),re(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),re(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Ke(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},o=e.cyclePolicy??"strict",a=t.cyclePolicy??"strict";if(o!==a){let d=s[a]===s[o]?"judgment-required":s[a]>s[o]?"strengthening":"weakening";C(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:o,after:a})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),So(r,e.layers,t.layers),Co(r,e.rules,t.rules),wo(r,e,t),To(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),xo(r,e,t),Oo(r,e,t),r.sort((d,l)=>d.path.localeCompare(l.path)||d.id.localeCompare(l.id)),{schemaVersion:yr,classification:_o(r),findings:r}}i(hr,"classifyArkPolicyDelta");function Rr(e,t){if(!e||e.schemaVersion!==yr||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=G(e.findingIds),r=G(t.findingIds);return n.length===r.length&&n.every((s,o)=>s===r[o])}i(Rr,"policyDeltaAcknowledgementMatches");function he(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}i(he,"normalizePath");function Ar(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}i(Ar,"isIdentifierStart");function ot(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}i(ot,"isIdentifierCharacter");function Z(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}i(Z,"skipWhitespace");function Ue(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let o=e[t];if(o===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};o==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=o}}i(Ue,"readString");function ee(e,t,n){return e.startsWith(t,n)&&!ot(e[n-1])&&!ot(e[n+t.length])}i(ee,"isWordAt");function kr(e,t){let n=Z(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=Z(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!ee(e,"type",n))return!1;let s=Z(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||ee(e,"as",s)||!Ar(e[s]))return!1;for(n=s;n<e.length&&ot(e[n]);)n+=1;if(n=Z(e,n),ee(e,"as",n)){if(n=Z(e,n+2),!Ar(e[n]))return!1;for(;n<e.length&&ot(e[n]);)n+=1}r=!0}return!1}i(kr,"bracedNamedBindingsAreTypeOnly");function $o(e,t){if(t=Z(e,t+6),e[t]==="(")return Ue(e,Z(e,t+1));let n=!1;if(ee(e,"type",t)){let s=Z(e,t+4);e[s]!==","&&!ee(e,"from",s)&&(n=!0)}else kr(e,t)&&(n=!0);let r=br(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}i($o,"specifierAfterImport");function Fo(e,t){t=t+6;let n=Z(e,t),r=!1;if(ee(e,"type",n)){let o=Z(e,n+4);(e[o]==="{"||e[o]==="*")&&(r=!0)}else kr(e,n)&&(r=!0);let s=br(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}i(Fo,"specifierAfterExport");function br(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(ee(e,"from",t))return Ue(e,Z(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return Ue(e,t);if(t>0&&(ee(e,"import",t)||ee(e,"export",t)))return}}i(br,"specifierInStaticStatement");function No(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}i(No,"skipTemplateLiteral");function Po(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=Z(e,t+7);if(e[r]!=="(")return;r=Z(e,r+1);let s=Ue(e,r);return s?{...s,requireCall:!0}:void 0}i(Po,"specifierAfterRequire");function Lo(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let o=e.indexOf("*/",n+2);if(o<0)break;n=o+1;continue}if(r==="`"){n=No(e,n);continue}if(r==="'"||r==='"'){let o=Ue(e,n);o&&(n=o.offset+o.excerpt.length-1);continue}let s=r==="i"&&ee(e,"import",n)?$o(e,n):r==="e"&&ee(e,"export",n)?Fo(e,n):r==="r"&&ee(e,"require",n)?Po(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}i(Lo,"moduleSpecifiers");function vr(e,t){let n=[],r=[];for(let s of Lo(e.content)){let o=s.value;if(!o.startsWith(".")){if(s.typeOnly)continue;let g=_e(o);if(!g)continue;let R=e.content.slice(0,s.offset).split(`
+`).length;r.push({file:e.path,symbol:o,capability:g,evidence:{kind:"import",file:e.path,line:R,excerpt:s.excerpt}});continue}let a=e.content.slice(0,s.offset).split(`
+`).length,d={kind:"import",file:e.path,line:a,excerpt:s.excerpt},l=Do(e.path,o,t);n.push({from:e.path,specifier:o,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:d})}return{edges:n,capabilityUses:r}}i(vr,"moduleFactsFor");function Do(e,t,n){let r=e.split("/");r.pop();for(let o of t.split("/"))o==="."||o===""||(o===".."?r.pop():r.push(o));let s=r.join("/");for(let o of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let a=n.get(o);if(a)return a}}i(Do,"resolveSpecifier");function Er(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=sn(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}i(Er,"violationsFor");var Mo={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function Ho(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}i(Ho,"hasActiveArkRules");function Ko(e,t){return Ho(e,t)?j(N(ur({config:e,arkRules:t,warnings:[]}))):j(N(Dt(e)))}i(Ko,"policyHashFor");function Kt(e,t,n){let r=typeof e=="string"?nr(e,t):wt(e,t),s=n?.arkRules??Ne();return{...r,arkRules:s,policyHash:Ko(r.config,s)}}i(Kt,"loadContract");function Uo(e){let t=Kt(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=Kt(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=hr(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),o=s.length>0,a=o&&Rr(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:o,acknowledged:a,valid:!o||a}}i(Uo,"analyzePolicyDelta");function at(e){let t=e.files.map(A=>{let u=he(A.path);return{path:u,content:A.content,contentHash:j(A.content),layer:Q(u,e.contract.config.layers)??null}}).sort((A,u)=>A.path.localeCompare(u.path)),n=new Map(t.map(A=>[A.path,A])),r=[],s=[];for(let A of t){let u=vr(A,n);r.push(...u.edges),s.push(...u.capabilityUses)}let o=Er(r,e.contract.config),a=new Map(e.contract.config.layers.map(A=>[A.name,A])),d=new Map(e.contract.config.layers.map(A=>[A.name,new Set(Ee(A))]));for(let A of s){let u=n.get(A.file)?.layer;if(!u)continue;let m=a.get(u),c=Te(A.symbol,m?.forbiddenGlobals??[]);if(c){o.push({ruleId:"FORBIDDEN_GLOBAL",message:`${u} must not use module "${A.symbol}" because it is the import form of forbidden global "${c}".`,symbol:A.symbol,evidence:A.evidence});continue}d.get(u)?.has(A.capability)&&o.push({ruleId:"CAPABILITY_VIOLATION",message:`${u} denies the ${A.capability} capability; found import of "${A.symbol}".`,capability:A.capability,symbol:A.symbol,evidence:A.evidence})}let l=t.length===0?"complete":"partial",g=l==="complete"?[]:[{...Mo}],R={schemaVersion:Xt,policyHash:e.contract.policyHash,compilerOptionsHash:j(N(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(A=>A.name),edges:r,capabilityUses:s,violations:o};return{mode:"lexical-compatibility",completeness:l,completenessReasons:g,valid:l==="complete"&&o.length===0,ir:R}}i(at,"analyzeProject");function Ut(e){let t=new Map(e.files.map(n=>[he(n.path),n]));for(let n of e.changes){let r=he(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return at({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}i(Ut,"analyzeChange");function jo(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}i(jo,"explainViolation");function Ir(e){return j(N(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}i(Ir,"analysisTreeHash");function Vo(e){let t=at(e),n=new Map(t.ir.files.map(c=>[c.path,c])),r=[],s=new Set,o=[];for(let c of e.changes){let y=c.path.replace(/\\/g,"/"),k=he(c.path);if(!k||k===".."||k.startsWith("../")||y.startsWith("/")||/^[A-Za-z]:\//.test(y)||y.includes("\0")){o.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(k)){o.push({ruleId:"DUPLICATE_CHANGE_PATH",file:k,line:1,message:`The atomic change set contains more than one operation for ${k}.`});continue}s.add(k),"delete"in c&&c.delete&&!n.has(k)&&o.push({ruleId:"DELETE_TARGET_MISSING",file:k,line:1,message:`Cannot delete ${k} because it is not present in the supplied base tree.`}),r.push("delete"in c&&c.delete?{path:k,delete:!0}:{path:k,content:"content"in c?c.content:""})}e.changes.length===0&&o.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let a=Ut({...e,changes:r}),d=new Map(a.ir.files.map(c=>[c.path,c])),l=a.ir.violations.filter(c=>c.ruleId==="CAPABILITY_VIOLATION"||c.ruleId==="FORBIDDEN_GLOBAL").map(c=>{let y=d.get(c.evidence.file)?.layer;return{ruleId:c.ruleId,file:c.evidence.file,line:c.evidence.line,target:c.symbol,...c.capability?{capability:c.capability}:{},...y?{fromLayer:y}:{},edgeKind:"import",message:c.message}}),g=De({config:e.contract.config,rules:e.contract.config.rules,files:a.ir.files.map(c=>c.path),contentViolations:l,edges:a.ir.edges.filter(c=>!!c.fromLayer).map(c=>({from:c.from,fromLayer:c.fromLayer,...c.to?{to:c.to}:{},...c.toLayer?{toLayer:c.toLayer}:{},line:c.evidence.line,kind:"import",...c.typeOnly?{typeOnly:!0}:{},...c.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),R=r.map(c=>{let y=he(c.path),k=n.get(y),I=d.get(y);return{path:y,operation:"delete"in c&&c.delete?"delete":k?"update":"create",...k?{beforeContentHash:k.contentHash}:{},...I?{candidateContentHash:I.contentHash}:{}}}).sort((c,y)=>c.path.localeCompare(y.path)),A=[...o,...g.violations].map(c=>({...c,nextAction:fe(c)})),u=A.filter(c=>c.failsStrict!==!1),m=e.changeMap?He({changeMap:e.changeMap,changes:R,baseDependencies:t.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[]),candidateDependencies:a.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&a.valid&&u.length===0&&(m?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:a.ir.compilerOptionsHash,baseTreeHash:Ir(t.ir.files),candidateTreeHash:Ir(a.ir.files),baseCompleteness:t.completeness,candidateCompleteness:a.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:a.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...m?{convergence:m}:{},changes:R,violations:A,warnings:g.warnings}}i(Vo,"preflightChange");function Go(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Go,"canonicalChangePath");function Bo(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,o])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:o,message:`Base and candidate facts must use the same ${r}.`}))}i(Bo,"identityViolations");function zo(e,t,n,r){let s=n.get(t),o=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...o?{candidateContentHash:o.contentHash}:{}}}i(zo,"preparedChange");function Wo(e){let t=ge(e.baseFacts),n=ge(e.candidateFacts),r=nt({contract:e.contract,facts:t}),s=nt({contract:e.contract,facts:n}),o=new Map(t.files.map(m=>[m.path,m])),a=new Map(n.files.map(m=>[m.path,m])),d=Bo(t,n),l=new Map,g=[];for(let m of e.changes){let c=Go(m.path);if(!c){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(l.has(c)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:c,line:1,message:`The atomic change set contains more than one operation for ${c}.`});continue}l.set(c,m);let y=o.get(c),k=a.get(c);if("delete"in m&&m.delete)y||d.push({ruleId:"DELETE_TARGET_MISSING",file:c,line:1,message:`Cannot delete ${c} because it is not present in the supplied base facts.`}),k&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:c,line:1,message:`Candidate facts still contain deleted file ${c}.`});else{let I="content"in m?m.content:"",E=j(I);k?k.contentHash!==E&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:c,line:1,expectedContentHash:E,candidateContentHash:k.contentHash,message:`Candidate facts for ${c} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:c,line:1,message:`Candidate facts do not contain changed file ${c}.`})}g.push(zo(m,c,o,a))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let m of new Set([...o.keys(),...a.keys()])){if(l.has(m))continue;let c=o.get(m),y=a.get(m);c&&y&&N(c)===N(y)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:m,line:1,message:`Candidate facts change ${m}, but the atomic change set does not declare it.`})}let R=e.changeMap?He({changeMap:e.changeMap,changes:g,baseDependencies:r.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[]),candidateDependencies:s.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[])}):void 0,A=[...d,...s.ir.violations].map(m=>({...m,nextAction:fe(m)})),u=A.filter(m=>m.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&u.length===0&&(R?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...R?{convergence:R}:{},changes:g.sort((m,c)=>m.path<c.path?-1:m.path>c.path?1:0),violations:A,warnings:s.ir.warnings}}i(Wo,"preflightResolvedChange");var Sr=new WeakSet;function Cr(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Cr(t);return Object.freeze(e)}i(Cr,"deepFreeze");function Vl(e){let t=Cr(Be(e));return Sr.add(t),t}i(Vl,"createTrustedResolvedCandidateFacts");function Gl(e){if(!Sr.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return xt(e)}i(Gl,"analyzeTrustedResolvedProject");export{ut as AMBIENT_CAPABILITY_ENTRIES,ct as CAPABILITY_IDS,yt as DEFAULT_INTENT_PREFIXES,Yt as RESOLVED_CANDIDATE_FACTS_SCHEMA,be as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,mt as SOURCE_POLICY_MESSAGES,ft as ambientCoveredByForbiddenGlobals,He as analyzeArchitectureConvergence,Ut as analyzeChange,Uo as analyzePolicyDelta,at as analyzeProject,nt as analyzeResolvedProject,Gl as analyzeTrustedResolvedProject,$e as capabilityForAmbientName,_e as capabilityForModuleSpecifier,Rt as classifyPublishFacts,Ot as collectAnalysisConfigWarnings,Eo as collectCapabilityUses,Lt as collectForbiddenCapabilityUses,Be as createResolvedCandidateFacts,Vl as createTrustedResolvedCandidateFacts,rr as detectArchitectureCycles,j as deterministicHash,Ee as effectiveCapabilityDeny,De as evaluateArchitectureGraph,jo as explainViolation,Pt as extractSemanticDependencies,Te as forbiddenGlobalForModuleSpecifier,ko as loadArchitectureChangeMap,Kt as loadContract,ge as loadResolvedCandidateFacts,an as looksLikeArkIntent,Tr as lowerForbiddenGlobal,We as loweredLayerCoverage,Vo as preflightChange,Wo as preflightResolvedChange,ht as resolveIntentLayer,Ge as resolvedFactsEvidenceRequirementsHash,N as stableSerialize};