arkgate 4.8.20 → 4.8.21

package/bin/lib/analysis-engine.mjs

@@ -1,10 +1,17 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-var wr=Object.defineProperty;var i=(e,t)=>wr(e,"name",{value:t,configurable:!0});function j(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}i(j,"deterministicHash");function N(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(N).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${N(t[n])}`).join(",")}}`}i(N,"stableSerialize");var be="1.2";var Bt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=N(e),r=N(t);return n<r?-1:n>r?1:0}i(K,"compareCanonical");function V(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}i(V,"sortedUnique");function Ge(e){let t={schemaVersion:"1.2",include:V(e.include??[]),exclude:V(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:V(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:V(n.patterns??[]),exclude:V(n.exclude??[]),forbiddenGlobals:V(n.forbiddenGlobals??[]),intentPrefixes:V(n.intentPrefixes??[]),capabilityDeny:V(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:V(e.arkRun.compositionRoots),managedLayers:V(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return j(N(t))}i(Ge,"resolvedFactsEvidenceRequirementsHash");function Or(e){let t=e.completenessReasons.map(b=>({code:b.code,message:b.message,...b.file?{file:b.file}:{}})).sort(K),n=e.files.map(b=>({...b,typeOnlyExportNames:V(b.typeOnlyExportNames)})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),r=e.dependencies.map(b=>({...b,...b.namedBindings?{namedBindings:V(b.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(b=>({...b})).sort(K),o=e.ambientUses.map(b=>({...b})).sort(K),a=e.publishCalls.map(b=>({...b})).sort(K),d=e.intentReferences.map(b=>({...b})).sort(K),l=e.safetyUses.map(b=>({...b})).sort(K),g=(e.classShapes??[]).map(b=>({...b,mutatingMethods:[...b.mutatingMethods??[]].map(x=>({...x}))})).sort(K),R=(e.arkRunKernelCalls??[]).map(b=>({...b})).sort(K),A=(e.arkRunManagedNews??[]).map(b=>({...b})).sort(K),u=(e.arkRunCompositionRootHits??[]).map(b=>({...b})).sort(K),m=(e.arkRunDeclarations??[]).map(b=>({...b,uses:V(b.uses),reactsTo:V(b.reactsTo),raises:V(b.raises),sends:V(b.sends)})).sort(K),c=(e.arkOrderPlaneCalls??[]).map(b=>({...b})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(b=>({...b})).sort(K),k=(e.arkOrderRootHits??[]).map(b=>({...b})).sort(K),I=(e.arkOrderXiFieldWrites??[]).map(b=>({...b})).sort(K),E=(e.arkOrderIngestWritesXi??[]).map(b=>({...b})).sort(K),w=(e.arkOrderReleaseKeyCounts??[]).map(b=>({...b})).sort(K),$=e.files.map(({path:b,contentHash:x})=>({path:b,contentHash:x})).sort((b,x)=>b.path<x.path?-1:b.path>x.path?1:0),te=j(N($));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:te,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:o,publishCalls:a,intentReferences:d,safetyUses:l,classShapes:g,arkRunKernelCalls:R,arkRunManagedNews:A,arkRunCompositionRootHits:u,arkRunDeclarations:m,arkOrderPlaneCalls:c,arkOrderGenericUpdates:y,arkOrderRootHits:k,arkOrderXiFieldWrites:I,arkOrderIngestWritesXi:E,arkOrderReleaseKeyCounts:w}}i(Or,"canonicalResolvedFactsInput");function zt(e){let t=Or(e);return{...t,factsHash:j(N(t))}}i(zt,"createCanonicalResolvedCandidateFacts");function Be(e){return zt(qt(F(e,"$"),!1))}i(Be,"createResolvedCandidateFacts");function F(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}i(F,"asRecord");function P(e,t,n){let r=new Set(t),s=Object.keys(e).find(o=>!r.has(o));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}i(P,"assertOnlyKeys");function T(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}i(T,"requiredText");function oe(e,t,n){if(e[t]!==void 0)return T(e,t,n)}i(oe,"optionalText");function L(e,t,n){let r=T(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let o=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(o.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);o.pop()}else o.push(d);let a=o.join("/");if(!a||a!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return a}i(L,"requiredProjectPath");function D(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}i(D,"requiredBoolean");function Wt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}i(Wt,"requiredInteger");function B(e,t,n){let r=Wt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}i(B,"requiredPositiveInteger");function M(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}i(M,"requiredArray");function ae(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}i(ae,"enumValue");function ve(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}i(ve,"parseStringArray");function xr(e,t,n){let r=new Set;for(let s of e){let o=t(s);if(r.has(o))throw new Error(`${n} must not contain duplicate facts (${o}).`);r.add(o)}}i(xr,"assertUnique");function qt(e,t){P(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ae(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ae(e,"completeness",["complete","partial","unavailable"],"$"),s=M(e,"completenessReasons","$").map((v,S)=>{let f=`$.completenessReasons[${S}]`,h=F(v,f);P(h,["code","message","file"],f);let _=h.file===void 0?void 0:L(h,"file",f);return{code:T(h,"code",f),message:T(h,"message",f),..._?{file:_}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let o=M(e,"files","$").map((v,S)=>{let f=`$.files[${S}]`,h=F(v,f);return P(h,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],f),{path:L(h,"path",f),contentHash:T(h,"contentHash",f),parseStatus:ae(h,"parseStatus",["parsed","invalid"],f),parseDiagnosticCount:Wt(h,"parseDiagnosticCount",f),exportsOnlyTypes:D(h,"exportsOnlyTypes",f),typeOnlyExportNames:ve(h.typeOnlyExportNames,`${f}.typeOnlyExportNames`),hasTopLevelSideEffects:D(h,"hasTopLevelSideEffects",f)}}),a=M(e,"dependencies","$").map((v,S)=>{let f=`$.dependencies[${S}]`,h=F(v,f);P(h,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],f);let _=oe(h,"specifier",f),U=oe(h,"target",f),de=ae(h,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],f);if(de==="resolved-project"&&!U)throw new Error(`${f}.target is required for resolved-project dependencies.`);if(de!=="resolved-project"&&U)throw new Error(`${f}.target is only allowed for resolved-project dependencies.`);if(de!=="dynamic"&&!_)throw new Error(`${f}.specifier is required unless resolution is dynamic.`);return{from:L(h,"from",f),..._?{specifier:_}:{},kind:ae(h,"kind",["import","export","dynamic-import","require"],f),typeOnly:D(h,"typeOnly",f),line:B(h,"line",f),resolution:de,...U?{target:L(h,"target",f)}:{},...h.namedBindings!==void 0?{namedBindings:ve(h.namedBindings,`${f}.namedBindings`)}:{},...h.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:D(h,"targetTypeOnlyExports",f)}:{},...h.sourcePureTypeModule!==void 0?{sourcePureTypeModule:D(h,"sourcePureTypeModule",f)}:{},...h.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:D(h,"namedBindingsTypeOnly",f)}:{},...h.portProofEligible!==void 0?{portProofEligible:D(h,"portProofEligible",f)}:{}}}),d=M(e,"capabilityUses","$").map((v,S)=>{let f=`$.capabilityUses[${S}]`,h=F(v,f);return P(h,["file","line","symbol","capability","source"],f),{file:L(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f),capability:ae(h,"capability",Bt,f),source:ae(h,"source",["ambient-global","import-based"],f)}}),l=M(e,"ambientUses","$").map((v,S)=>{let f=`$.ambientUses[${S}]`,h=F(v,f);return P(h,["file","line","symbol"],f),{file:L(h,"file",f),line:B(h,"line",f),symbol:T(h,"symbol",f)}}),g=M(e,"publishCalls","$").map((v,S)=>{let f=`$.publishCalls[${S}]`,h=F(v,f);P(h,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],f);let _=oe(h,"rawIntentName",f),U=oe(h,"sourceIntent",f);return{file:L(h,"file",f),line:B(h,"line",f),..._?{rawIntentName:_}:{},objectHasIntent:D(h,"objectHasIntent",f),arkPublishCandidate:D(h,"arkPublishCandidate",f),hasSource:D(h,"hasSource",f),...U?{sourceIntent:U}:{}}}),R=M(e,"intentReferences","$").map((v,S)=>{let f=`$.intentReferences[${S}]`,h=F(v,f);return P(h,["file","line","intent"],f),{file:L(h,"file",f),line:B(h,"line",f),intent:T(h,"intent",f)}}),A=M(e,"safetyUses","$").map((v,S)=>{let f=`$.safetyUses[${S}]`,h=F(v,f);P(h,["file","line","kind","symbol"],f);let _=oe(h,"symbol",f),U=ae(h,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],f);if(U==="in-memory-store"&&!_)throw new Error(`${f}.symbol is required for in-memory-store facts.`);if(U!=="in-memory-store"&&_)throw new Error(`${f}.symbol is only allowed for in-memory-store facts.`);return{file:L(h,"file",f),line:B(h,"line",f),kind:U,..._?{symbol:_}:{}}});xr(o,v=>v.path,"$.files");let u=new Set(o.map(v=>v.path));for(let v of o){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&o.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of a)if(!u.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let c=(e.arkRunKernelCalls===void 0?[]:M(e,"arkRunKernelCalls","$")).map((v,S)=>{let f=`$.arkRunKernelCalls[${S}]`,h=F(v,f);P(h,["file","line","kind","callee","viaImport","receiver","nameLiteral"],f);let _=oe(h,"receiver",f),U=oe(h,"nameLiteral",f);return{file:L(h,"file",f),line:B(h,"line",f),kind:ae(h,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],f),callee:T(h,"callee",f),viaImport:D(h,"viaImport",f),..._?{receiver:_}:{},...U?{nameLiteral:U}:{}}}),k=(e.arkRunManagedNews===void 0?[]:M(e,"arkRunManagedNews","$")).map((v,S)=>{let f=`$.arkRunManagedNews[${S}]`,h=F(v,f);P(h,["file","line","typeName","importedFrom"],f);let _=oe(h,"importedFrom",f);return{file:L(h,"file",f),line:B(h,"line",f),typeName:T(h,"typeName",f),..._?{importedFrom:_}:{}}}),E=(e.arkRunCompositionRootHits===void 0?[]:M(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let f=`$.arkRunCompositionRootHits[${S}]`,h=F(v,f);return P(h,["file","matchedRoot","hasKernelFactory"],f),{file:L(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasKernelFactory:D(h,"hasKernelFactory",f)}}),w=e.arkRunDeclarations===void 0?[]:M(e,"arkRunDeclarations","$"),te=(e.arkOrderPlaneCalls===void 0?[]:M(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let f=`$.arkOrderPlaneCalls[${S}]`,h=F(v,f);return P(h,["file","line","callee"],f),{file:L(h,"file",f),line:B(h,"line",f),callee:T(h,"callee",f)}}),x=(e.arkOrderGenericUpdates===void 0?[]:M(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let f=`$.arkOrderGenericUpdates[${S}]`,h=F(v,f);return P(h,["file","line","method"],f),{file:L(h,"file",f),line:B(h,"line",f),method:T(h,"method",f)}}),J=(e.arkOrderRootHits===void 0?[]:M(e,"arkOrderRootHits","$")).map((v,S)=>{let f=`$.arkOrderRootHits[${S}]`,h=F(v,f);return P(h,["file","matchedRoot","hasPlaneFactory"],f),{file:L(h,"file",f),matchedRoot:T(h,"matchedRoot",f),hasPlaneFactory:D(h,"hasPlaneFactory",f)}}),Ae=(e.arkOrderXiFieldWrites===void 0?[]:M(e,"arkOrderXiFieldWrites","$")).map((v,S)=>{let f=`$.arkOrderXiFieldWrites[${S}]`,h=F(v,f);return P(h,["file","line","key"],f),{file:L(h,"file",f),line:B(h,"line",f),key:T(h,"key",f)}}),je=(e.arkOrderIngestWritesXi===void 0?[]:M(e,"arkOrderIngestWritesXi","$")).map((v,S)=>{let f=`$.arkOrderIngestWritesXi[${S}]`,h=F(v,f);return P(h,["file","line"],f),{file:L(h,"file",f),line:B(h,"line",f)}}),ke=(e.arkOrderReleaseKeyCounts===void 0?[]:M(e,"arkOrderReleaseKeyCounts","$")).map((v,S)=>{let f=`$.arkOrderReleaseKeyCounts[${S}]`,h=F(v,f);return P(h,["file","line","keyCount"],f),{file:L(h,"file",f),line:B(h,"line",f),keyCount:B(h,"keyCount",f)}}),we=w.map((v,S)=>{let f=`$.arkRunDeclarations[${S}]`,h=F(v,f);return P(h,["file","line","uses","reactsTo","raises","sends"],f),{file:L(h,"file",f),line:B(h,"line",f),uses:ve(h.uses,`${f}.uses`),reactsTo:ve(h.reactsTo,`${f}.reactsTo`),raises:ve(h.raises,`${f}.raises`),sends:ve(h.sends,`${f}.sends`)}});for(let[v,S]of[["$.capabilityUses",d],["$.ambientUses",l],["$.publishCalls",g],["$.intentReferences",R],["$.safetyUses",A],["$.arkRunKernelCalls",c],["$.arkRunManagedNews",k],["$.arkRunCompositionRootHits",E],["$.arkRunDeclarations",we],["$.arkOrderPlaneCalls",te],["$.arkOrderGenericUpdates",x],["$.arkOrderRootHits",J],["$.arkOrderXiFieldWrites",Ae],["$.arkOrderIngestWritesXi",je],["$.arkOrderReleaseKeyCounts",ke]])for(let f of S)if(!u.has(f.file))throw new Error(`${v} references missing file ${f.file}.`);let Ve=oe(e,"projectPackageName","$"),Gt=(e.classShapes===void 0?[]:M(e,"classShapes","$")).map((v,S)=>{let f=`$.classShapes[${S}]`,h=F(v,f);P(h,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],f);let _=M(h,"mutatingMethods",f).map((U,de)=>{let p=`${f}.mutatingMethods[${de}]`,W=F(U,p);return P(W,["name","referencesGuardOrPublish"],p),{name:T(W,"name",p),referencesGuardOrPublish:D(W,"referencesGuardOrPublish",p)}});return{file:L(h,"file",f),className:T(h,"className",f),exported:D(h,"exported",f),hasPublicMutableFields:D(h,"hasPublicMutableFields",f),hasPublicSetters:D(h,"hasPublicSetters",f),hasPublicConstructor:D(h,"hasPublicConstructor",f),hasStaticFactory:D(h,"hasStaticFactory",f),mutatingMethods:_,...h.dataOnly===void 0?{}:{dataOnly:D(h,"dataOnly",f)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:T(e,"resolverIdentity","$"),compilerIdentity:T(e,"compilerIdentity","$"),compilerOptionsHash:T(e,"compilerOptionsHash","$"),tsconfigHash:T(e,"tsconfigHash","$"),evidenceRequirementsHash:T(e,"evidenceRequirementsHash","$"),...Ve?{projectPackageName:Ve}:{},files:o,dependencies:a,capabilityUses:d,ambientUses:l,publishCalls:g,intentReferences:R,safetyUses:A,classShapes:Gt,arkRunKernelCalls:c,arkRunManagedNews:k,arkRunCompositionRootHits:E,arkRunDeclarations:we,arkOrderPlaneCalls:te,arkOrderGenericUpdates:x,arkOrderRootHits:J,arkOrderXiFieldWrites:Ae,arkOrderIngestWritesXi:je,arkOrderReleaseKeyCounts:ke}}i(qt,"parseResolvedFactsInput");function ge(e){let t=F(e,"$"),n=T(t,"factsHash","$"),r=T(t,"candidateTreeHash","$"),s=zt(qt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}i(ge,"loadResolvedCandidateFacts");var _r=["network","filesystem","clock","randomness","environment","process","persistence"],O={type:"string",minLength:1},q={type:"integer",minimum:1},H={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Yt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:O,message:O,file:H}}},resolverIdentity:O,compilerIdentity:O,compilerOptionsHash:O,tsconfigHash:O,candidateTreeHash:O,evidenceRequirementsHash:O,projectPackageName:O,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:H,contentHash:O,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:O},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:H,specifier:O,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:q,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:H,namedBindings:{type:"array",items:O},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:H,line:q,symbol:O,capability:{enum:_r},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:H,line:q,symbol:O}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:H,line:q,rawIntentName:O,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:O}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:H,line:q,intent:O}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:H,line:q,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:O},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:H,className:O,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:O,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:H,line:q,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:O,viaImport:{type:"boolean"},receiver:O,nameLiteral:O}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:H,line:q,typeName:O,importedFrom:O}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:H,matchedRoot:O,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:H,line:q,uses:{type:"array",items:O},reactsTo:{type:"array",items:O},raises:{type:"array",items:O},sends:{type:"array",items:O}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:H,line:q,callee:O}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:H,line:q,method:O}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:H,matchedRoot:O,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:H,line:q,key:O}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:H,line:q}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:H,line:q,keyCount:{type:"integer",minimum:1}}}},factsHash:O},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Xt="1.0";var ct=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),ze=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),ut=Object.freeze(Object.keys(ze).sort()),lt=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),dt=Object.freeze({process:Object.freeze(["process","node:process"])});function _e(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=lt[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=lt[r];if(s)return s;let o=e.indexOf("/",n+1);return o<0?null:lt[e.slice(0,o)]??null}i(_e,"capabilityForModuleSpecifier");function Te(e,t){for(let n of t)if(dt[n]?.includes(e))return n;return null}i(Te,"forbiddenGlobalForModuleSpecifier");function $e(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=ze[r];if(s)return s}return null}i($e,"capabilityForAmbientName");function Ee(e){if(e?.pure===!0)return[...ct].sort();let n=(e?.capabilities?.deny??[]).filter(r=>ct.includes(r));return[...new Set(n)].sort()}i(Ee,"effectiveCapabilityDeny");function ft(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}i(ft,"ambientCoveredByForbiddenGlobals");function We(e){let t=new Set,n=new Set,r=Object.keys(ze);for(let s of e?.forbiddenGlobals??[]){let o=r.filter(a=>a===s||a.startsWith(`${s}.`));if(o.length===0)n.add(s);else for(let a of o)t.add(`ambient:${a}`);for(let a of dt[s]??[])t.add(`import-exact:${a}`)}for(let s of Ee(e)){if(t.add(`import:${s}`),s==="process")for(let o of dt.process)t.add(`import-exact:${o}`);for(let o of r)$e(o)===s&&t.add(`ambient:${o}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}i(We,"loweredLayerCoverage");function Tr(e){let t=new Set,n=$e(e);n&&t.add(n);for(let[r,s]of Object.entries(ze))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}i(Tr,"lowerForbiddenGlobal");var Zt=new Map;function Jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Jt,"escapeLiteral");function Ye(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(Ye,"normalizeGlobSeparators");function $r(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i($r,"bracesBalanced");function ie(e){let t=Zt.get(e);if(t)return t;let n=Ye(e),r=$r(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Jt(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Jt(l)}let a=new RegExp(`^${s}$`);return Zt.set(e,a),a}i(ie,"globToRegExp");function Fr(e){return Ye(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}i(Fr,"concreteGlobSegments");function gt(e,t){let n=Ye(String(e)),r=Fr(n),s=n.replace(/\*/g,"").length,o=r.length*1e4+s;if(t==null||t==="")return o;let a=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,l=-1;for(let g of r){let R=-1;for(let A=d;A<a.length;A+=1)if(a[A]===g){R=A;break}if(R<0)return o;l=R,d=R+1}return(l+1)*1e6+r.length*1e4+s}i(gt,"patternSpecificity");function Q(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(a=>ie(a).test(n))){for(let a of o.patterns??[])if(ie(a).test(n)){let d=gt(a,n);d>s&&(s=d,r=o.name)}}return r}i(Q,"layerForRelativePath");function qe(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean);if(n.length===0)return;let r=new Set;for(let s of t)if(!(typeof s!="string"||s.length===0)){if(Nr(s)){let o=Pr(n,s);if(o)return o;continue}!s.includes("/")&&!s.includes("\\")&&!s.includes("*")&&r.add(s.toLowerCase())}return Dr(n,r)}i(qe,"sliceIdForPath");function Nr(e){let t=e.split(/[/\\]/).filter(n=>n.length>0);return t.length<2||t[0]==="*"||t[0]==="**"?!1:t.some(n=>n==="*")}i(Nr,"isAnchoredSliceEntry");function Pr(e,t){let n=t.split(/[/\\]/).filter(s=>s.length>0).map(s=>s.toLowerCase()),r=rn(e,n[0]??"");for(let s of r){let o=Lr(e,n,s);if(o)return o}}i(Pr,"anchoredSliceId");function Lr(e,t,n){let r=[],s=n;for(let o=0;o<t.length;o+=1){let a=t[o];if(a==="*"){if(s>=e.length-1){for(let d=o;d<t.length;d+=1)if(t[d]!=="*")return;break}r.push(e[s].toLowerCase()),s+=1;continue}if(a==="**"||s>=e.length||e[s].toLowerCase()!==a)return;r.push(e[s].toLowerCase()),s+=1}return r.length>0?r.join("/"):void 0}i(Lr,"bindAnchoredSlice");function Dr(e,t){if(t.size!==0){for(let n=0;n<e.length-1;n+=1)if(t.has(e[n].toLowerCase())&&!(n+1>=e.length-1))return`${e[n].toLowerCase()}/${e[n+1].toLowerCase()}`}}i(Dr,"bareSliceId");function Mr(e){let t=new Set;for(let n of e??[]){let s=Ye(String(n)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let a=s[o];if((a==="**"||a==="*")&&o>0){let d=s[o-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}i(Mr,"inferSliceFoldersFromPatterns");function tn(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return Mr(r?.patterns)}i(tn,"resolveSliceFolders");function Qt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}i(Qt,"normalizeSegments");function nn(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}i(nn,"trimTrailingSlashes");var Hr=["src","app"];function rn(e,t){let n=(e[0]??"").toLowerCase(),r=t.toLowerCase();return Hr.includes(n)&&r!==n?[0,1]:[0]}i(rn,"anchorOffsets");function Kr(e){let t=nn(e.replace(/^[./]+/,""));return t==="*"||t==="**"}i(Kr,"isBlanketRoot");function pt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=Qt(n);for(let o of t){if(typeof o!="string"||o.length===0||Kr(o))continue;if(o.includes("*")){let l=nn(o.toLowerCase());if(ie(l).test(r)||ie(`${l}/**`).test(r))return!0;continue}let a=Qt(o);if(a.length===0)continue;let d=rn(s,a[0]??"");for(let l of d){if(l+a.length>s.length)continue;let g=!0;for(let R=0;R<a.length;R+=1)if(s[l+R]!==a[R]){g=!1;break}if(g)return!0}}return!1}i(pt,"pathUnderSharedRoot");function en(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}i(en,"sliceMatchesDeclaration");function Ur(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&en(r.from,t)&&en(r.to,n))}i(Ur,"crossSliceEdgeAllowed");function jr(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:e.sharedImportsSlice==="deny"&&e.fromShared===!0&&e.toSlice&&!e.fromSlice?{denied:!0,reason:"shared-imports-slice"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}i(jr,"peerIsolationDecision");function Xe(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"shared-imports-slice":return`shared root imports slice ${t.toSlice??"?"} (${t.fromPath??"?"} \u2192 ${t.toPath??"?"}). The wall is direct-only.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}i(Xe,"peerIsolationDenyExplanation");function sn(e,t,n,r){return Fe(e,t,n,r)?.rule}i(sn,"findDeniedEdgeRule");function Fe(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let o=r?.fromPath,a=r?.toPath,d=tn(s,t,r?.layers),l=o?qe(o,d):void 0,g=a?qe(a,d):void 0,R=jr({fromPath:o,toPath:a,folderCount:d.length,fromSlice:l,toSlice:g,fromShared:!l&&pt(o,s.sharedRoots),toShared:!g&&pt(a,s.sharedRoots),crossSliceAllowed:Ur(s.allowedCrossSlice,l,g),sharedImportsSlice:s.sharedImportsSlice});if(R.denied)return{rule:s,peerIsolationReason:R.reason,fromSlice:l,toSlice:g};continue}if(t!==n)return{rule:s}}}i(Fe,"findDeniedEdgeDecision");function on(e,t,n,r){let s=r?.fromPath,o=r?.toPath;if(!(!s||!o))for(let a of e??[]){if(a.from!==t||a.to!==n||a.allowed!==!1||!a.peerIsolation||a.sharedImportsSlice==="deny")continue;let d=tn(a,t,r?.layers),l=qe(s,d),g=qe(o,d);if(!(l||!g)&&pt(s,a.sharedRoots))return{fromPath:s,toPath:o,toSlice:g}}}i(on,"findSharedImportsSliceBridge");var mt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},yt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function ht(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(o=>({layer:r.name,layerIndex:s,prefix:o.endsWith(".")?o:`${o}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}i(ht,"resolveIntentLayer");function an(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}i(an,"looksLikeArkIntent");function Rt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&an(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:mt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:mt.PUBLISH_MISSING_SOURCE}),t}i(Rt,"classifyPublishFacts");var ln="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Vr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var cn={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ga={$schema:"https://json-schema.org/draft/2020-12/schema",$id:ln,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:ln},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Vr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:cn,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:cn}}}};function Ne(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}i(Ne,"emptyEffectiveArkRules");function dn(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}i(dn,"structureFreezeTarget");var Gr=["no-anemic-model"],mn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],Aa=new RegExp(`\\b(${mn.join("|")})\\b`),yn="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",ka=new RegExp(`\\bthis\\.${yn}\\.push\\s*\\(`),ba=new RegExp(`^this\\.${yn}\\s*=\\s*\\[\\s*\\]`);var Br="truncatedUntil";function zr(){return`${mn.join(", ")}, or events-array .push(`}i(zr,"expectedDomainInvariantWordsPhrase");function At(e){let t=Object.getOwnPropertyDescriptor(e,Br)?.value;return typeof t=="number"?t:void 0}i(At,"shapeTruncatedUntil");function Wr(e){let t=At(e);return t==null?"":` shape analysed until character ${t}`}i(Wr,"shapeTruncationSuffix");function un(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(un,"escapeGlobLiteral");function qr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let o=e[r+1];if("*?{}[],".includes(o)||o==="\\"){t+="\\"+o,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=un(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=un(s)}return new RegExp(`^${n}$`)}i(qr,"globToRegExp");function Ie(e,t){return!t||t.length===0?!0:t.some(n=>qr(n).test(e))}i(Ie,"matchesAppliesTo");function hn(e){return Gr.includes(e)}i(hn,"isTier2");function Rn(e){return e.mode==="enforced"&&!hn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}i(Rn,"severityFor");function ue(e,t,n,r=1){let{severity:s,failsStrict:o}=Rn(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:o}}i(ue,"baseViolation");function Ze(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}i(Ze,"isInRuleLayer");function Je(e,t,n){return t.filter(r=>!(!r.exported||!Ie(r.file,e.appliesTo)||!Ze(r.file,e,n)))}i(Je,"shapesForRule");function Yr(e,t,n){let r=[];for(let s of Je(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(ue(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}i(Yr,"evaluateAggregatePrivateState");function Xr(e,t,n){let r=[];for(let s of Je(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(ue(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}i(Xr,"evaluateAlwaysValidFactory");function Zr(e,t,n){let r=[],s=zr();for(let o of Je(e,t,n)){let a=Wr(o);At(o)!=null&&r.push(ue(e,o.file,`Exported class ${o.className} shape analysed until character ${At(o)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of o.mutatingMethods)d.referencesGuardOrPublish||r.push(ue(e,o.file,`Mutating method ${o.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${a}`))}return r}i(Zr,"evaluateDomainEventOnMutation");function Jr(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(ue(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}i(Jr,"evaluateOrchestrationOnly");function Qr(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(ue(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}i(Qr,"evaluateThinAdapter");function es(e,t){let n=[];for(let r of t.files)Ie(r,e.appliesTo)&&Ze(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(ue(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}i(es,"evaluateWritesViaAggregate");function ts(e,t,n){let r=[];for(let s of Je(e,t,n))if(s.dataOnly===!0){let o=ue(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...o,severity:"warning",failsStrict:!1})}return r}i(ts,"evaluateNoAnemicModel");function An(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...Yr(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...Xr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...Zr(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...Jr(n,e));break;case"thin-adapter":t.push(...Qr(n,e));break;case"writes-via-aggregate":t.push(...es(n,e));break;case"no-anemic-model":t.push(...ts(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}i(An,"evaluateArkRuleSensors");function kn(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(l=>Ie(l,s.appliesTo)))continue;let{severity:a,failsStrict:d}=Rn(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>Ie(d,s.appliesTo)))continue;let a=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a?"error":"warning",sensor:"invariant-coverage",failsStrict:a})}return n.sort((s,o)=>s.file.localeCompare(o.file)||s.arkruleId.localeCompare(o.arkruleId)||s.message.localeCompare(o.message))}i(kn,"collectEmptyAppliesToFindings");var fn=64;function ns(e){let t=e.length;for(;t>0&&e.charCodeAt(t-1)===46;)t-=1;return t===e.length?e:e.slice(0,t)}i(ns,"stripTrailingDots");function rs(e){let t=e.trim(),n=t.length>fn?t.slice(0,fn):t;return ns(n)}i(rs,"normalizeIntentPrefix");function ss(e){let t=e.toLowerCase();return t.includes("domain")||t.includes("entity")||t.includes("aggregate")||t.includes("model")}i(ss,"layerNameLooksDomain");function os(e){return e.some(t=>{let n=rs(t);return n==="Domain"||n.startsWith("Domain.")})}i(os,"ownsDomainIntent");function as(e,t=[]){return ss(e)||os(t)}i(as,"isDomainRoleLayerName");function bn(e){if(e.arkRulesActive!==!0)return[];let t=(e.layers??[]).filter(l=>as(l.name,l.intentPrefixes??[])).map(l=>l.name);if(t.length===0)return[];let n=new Set(t);if(!(e.files??[]).some(l=>{let g=typeof l.layer=="string"?l.layer:"";return g.length>0&&n.has(g)}))return[];if((e.arkRules.invariants??[]).filter(l=>n.has(l.provenance.layer)).length>0)return[];let o=t.find(l=>e.arkRules.byLayer?.[l])??t[0],a=e.arkRules.byLayer?.[o]?.sourceFile??`arkrules/${o}.json`,d=(e.arkRules.structure??[]).some(l=>l.mode==="enforced"&&n.has(l.provenance.layer)&&!hn(l.sensor));return[{ruleId:"INVARIANT_CATALOG_EMPTY",code:"invariant-catalog-empty",message:`ArkRules is on and ${o} has code, but invariants[] is empty \u2014 there are no phrases the code must preserve. Add 1\u20132 short phrases in ${a}.`,file:a,line:1,fromLayer:o,arkruleId:"invariant-catalog",arkruleSource:a,severity:d?"error":"warning",sensor:"invariant-coverage",failsStrict:d}]}i(bn,"collectEmptyInvariantCatalogFindings");var pn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,gn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,is=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function ls(e){return e==="PersistenceAdapters"}i(ls,"isPersistenceDriverLayer");function cs(e,t){if(pn.test(e)||gn.test(e))return!0;if(!t)return!1;for(let n of t){if(ls(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(pn.test(s)||gn.test(s))return!0}return!1}i(cs,"sourceImportsPersistenceDriver");var ds=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,us=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,fs=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,ps=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function gs(e,t,n){if(!t)return null;let r=cs(t,n),s=r&&is.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let o=t.match(new RegExp(fs.source,"g"))??[],a=t.match(new RegExp(ps.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,l=(t.match(/\bswitch\s*\(/g)??[]).length,g=o.length>=2||o.length>=1&&a.length>=2||a.length>=3&&d+l>=6,R=ds.test(t)||us.test(t),A=o.length>=1||a.length>=2,u=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),m=r&&A||R&&A||r&&u&&(d>=4||o.length>=1)||R&&r;return!g&&!m&&!s?null:{...g?{orchestrationHeavy:!0}:{},...m?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}i(gs,"deriveArkRuleFileHints");function vn(e,t){let n={};for(let[r,s]of Object.entries(e)){let o=r.replace(/\\/g,"/"),a=gs(r,s,t?.[o]);a&&(n[o]=a)}return n}i(vn,"buildArkRuleFileHints");var ms="INVARIANT_TESTS_PATH_MISSING",ys="This project is adopted and has domain invariants, but ark.config.json does not name a real tests path. Add coverage.testGlobs or coverage.coverageRoots pointing at the folder where those tests live, then re-run. Without that path, coverage is an empty checkbox.",hs="INVARIANT_COVERAGE_ROOTS_MISSING",Rs="A domain invariant is enforced, but ark.config.json does not name coverage.coverageRoots \u2014 the folders where this project's test runner actually goes. Add coverage.coverageRoots pointing at that folder, then re-run. Without it, coverage can certify a test no runner runs.";function En(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}i(En,"formatCoverageDiscards");function As(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}i(As,"isUnderCoverageRoot");function ks(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}i(ks,"titleMatchesInvariant");function bs(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}i(bs,"escapeRegExp");function vs(e,t){let n=bs(t),r=new RegExp(`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:declare\\s+)?(?:async\\s+)?function\\s*\\*?\\s*${n}\\s*[(<]`),s=new RegExp(`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:abstract\\s+)?class\\s+${n}\\b`),o=new RegExp(`(?:^|[\\s;{}])export\\s+(?:const|let|var)\\s+${n}\\s*=`),a=new RegExp(`(?:^|[\\n;{}])\\s*(?:(?:public|private|protected|static|async|readonly|override|abstract|get|set|declare)\\s+)*${n}\\s*(?:<[^>\\n]*>)?\\s*\\([^;{}]*\\)\\s*(?::\\s*[^;{]+)?\\s*\\{`);return r.test(e)||s.test(e)||o.test(e)||a.test(e)}i(vs,"declaresIdentifier");function Es(e,t,n){if(!n)return;let r=n.split("."),s=r[r.length-1]??"";if(!s)return;let o=r.length>1?r[0]:null,a=new Set(t.map(l=>l.replace(/\\/g,"/").replace(/^\.\//,""))),d=Object.keys(e).sort((l,g)=>l<g?-1:l>g?1:0);for(let l of d){let g=l.replace(/\\/g,"/").replace(/^\.\//,"");if(a.has(g))continue;let R=e[l];if(R&&!(o&&!R.includes(o))&&vs(R,s))return l}}i(Es,"symbolPresent");function In(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,o=e.coverageStats,a=En(o),d=En(o,!0),l=o?`coverage file budget exhausted: ${o.filesLoaded} files loaded at the ${o.maxFiles}-file cap, ${o.testFilesRetained} tests retained, ${o.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof o.filesRead=="number"?`; ${o.filesRead} were read`:""})`:"coverage file budget exhausted",g=(e.coverageRoots??[]).filter(c=>typeof c=="string"&&c.length>0),R=g.length>0,A=g.join(", "),u=[],m=[];for(let c of t){let y=[],k=c.coverage?.test!==!1,I=c.coverage?.symbol,E,w;if(!r&&k){let se;for(let J of n){let Re=e.fileContents[J];if(!(!Re||!ks(Re,c.id))){if(!R||As(J,g)){E=J,w=R?!1:void 0;break}se??=J}}E===void 0&&se!==void 0&&(E=se,w=!0),E!==void 0&&y.push("test-title")}let $=I?Es(e.fileContents,n,I):void 0;$&&y.push("symbol");let b=(c.coverage?.test===!0||!!I||c.coverage===void 0)&&y.length>0||c.coverage?.test===!1&&!I?!0:y.length>0,x=r&&k&&y.length===0;if(u.push({invariantId:c.id,layer:c.provenance.layer,sourceFile:c.provenance.sourceFile,mode:c.mode,covered:b&&!x,evidence:y,partial:x,description:c.description,...E!==void 0?{testEvidenceFile:E}:{},...$!==void 0?{symbolEvidenceFile:$}:{},...w!==void 0?{outsideDeclaredRoots:w}:{},coverageRootsDeclared:R}),w===!0&&E!==void 0&&m.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${c.id} is covered only by ${E}, which is outside the declared coverage roots (${A}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:E,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:"warning",failsStrict:!1}),!b||x){let se=c.mode==="enforced"&&!x,J=r||n.length===0?"never-had-tests":"tests-disappeared";m.push({ruleId:"INVARIANT_UNCOVERED",message:(x?s?`Invariant ${c.id} coverage cannot be proven (${l}); reporting partial, not covered.`:`Invariant ${c.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:J==="tests-disappeared"?`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${c.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(x&&s?d:a),file:c.provenance.sourceFile,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:se?"error":"warning",failsStrict:se,kind:J})}}return{coverage:u,violations:m,partial:u.some(c=>c.partial)}}i(In,"evaluateInvariantCoverage");function Sn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:e.coverageRootsDeclared===!1?{ok:!1,reason:`Declare coverage.coverageRoots in ark.config.json before promoting ${e.invariantId} to enforced. Without that, ArkGate cannot tell whether a covering test is one the runner executes.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}i(Sn,"canPromoteInvariant");function kt(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){if(typeof n!="string")continue;let r=n.trim();r.length>0&&t.push(r)}return t}i(kt,"nonEmptyPathStrings");function Is(e){return!e||typeof e!="object"?[]:[...kt(e.testGlobs),...kt(e.coverageRoots)]}i(Is,"configuredInvariantTestsPaths");function Ss(e){return Is(e).length>0}i(Ss,"hasConfiguredInvariantTestsPath");function bt(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.coverage?.test!==!1)}i(bt,"catalogDemandsInvariantTestsPath");function Cn(e){let t=e.hasDomainInvariants===!0||e.hasDomainInvariants!==!1&&bt(e.invariants);return e.adopted!==!0||!t?[]:Ss(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:ms,message:ys,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]}i(Cn,"collectMissingInvariantTestsPathFindings");function Cs(e){return!e||typeof e!="object"?[]:kt(e.coverageRoots)}i(Cs,"configuredCoverageRoots");function ws(e){return Cs(e).length>0}i(ws,"hasConfiguredCoverageRoots");function vt(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.mode==="enforced")}i(vt,"catalogHasEnforcedInvariant");function wn(e){return e.hasEnforcedInvariant===!0||e.hasEnforcedInvariant!==!1&&vt(e.invariants)?ws(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:hs,message:Rs,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]:[]}i(wn,"collectMissingCoverageRootsFindings");function Os(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}i(Os,"normalizeExtraMergeTeethClassification");function Qe(e){let t=Os(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}i(Qe,"extraMergeTeethAllowed");function On(e){let t=e.length,n=0,r=new Set;for(let s of e){let o=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;o&&(n+=1,r.add(o))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}i(On,"classifyResolvedLayerCoverage");var xs=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Oa=new Set(xs);function xn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}i(xn,"isArkRunKernelModuleSpecifier");var _s=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],Et=new Set(_s);function _n(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(Et.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(Et.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:Et.has(e.slice(0,r))}i(_n,"isArkRunTransportBypassSpecifier");var Ts=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,$s=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Fs=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Ns(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Ts.test(n)?"pure-shared":r==="PersistenceAdapters"&&($s.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Fs.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}i(Ns,"classifyLayerImportKind");function Ps(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Ns(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}i(Ps,"layerImportNextAction");function Ls(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}i(Ls,"arkRunCallSiteName");function Ds(e){let t=Ls(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(Ds,"arkRunNextAction");function fe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Ps(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"INVARIANT_CATALOG_EMPTY":return typeof e.file=="string"&&e.file.length>0?`Add 1\u20132 short phrases to invariants[] in ${e.file}, then run ark-check --doctor. Starters show the shape.`:"Add 1\u20132 short phrases to invariants[] in arkrules/<Domain>.json, then run ark-check --doctor. Starters show the shape.";case"INVARIANT_TESTS_PATH_MISSING":return"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.";case"INVARIANT_COVERAGE_ROOTS_MISSING":return"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Ds(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change the choice with proposeRelease then apply. release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(fe,"deterministicNextAction");var Ms=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Ka=new Set(Ms);var Tn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Hs="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Nn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Nn,"isDomainRoleLayer");function Ks(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}i(Ks,"compareFindings");function le(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:Tn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:Tn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(le,"finding");function Us(e,t){let n=[],r=[],s=[],o=[];for(let a of e)a.file===t&&(n.push(...a.uses),r.push(...a.reactsTo),s.push(...a.raises),o.push(...a.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(o)}}i(Us,"bagForFile");function $n(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}i($n,"emitKinds");function Fn(e){return e==="subscribe"||e==="register-handler"}i(Fn,"handleKinds");function js(e){return e==="resolve"||e==="resolve-singleton"}i(js,"dependKinds");function Vs(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(le(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let o=new Map;for(let a of t){let d=o.get(a.matchedRoot)??[];d.push(a),o.set(a.matchedRoot,d)}for(let a of s){let d=[...o.get(a)??[]].sort((g,R)=>g.file.localeCompare(R.file));if(d.length===0){r.push(le(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(a)} matched no governed files and has no createArkKernel factory.`,{target:a},n));continue}if(d.some(g=>g.hasKernelFactory))continue;let l=d[0];r.push(le(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(a)} has no createArkKernel / createStrictArkKernel factory.`,{target:a},n))}return r}i(Vs,"evaluateMissingRoot");function Gs(e,t,n,r,s){let o=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),a=[];for(let d of n){let l=d.specifier;if(!l||!xn(l))continue;let g=r(d.from);g&&Nn(g,o.get(g)??[])&&a.push(le(e,"arkrun-kernel-in-domain",d.from,d.line,`${g} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:g,target:l},s))}return a}i(Gs,"evaluateKernelInDomain");function Bs(e,t,n,r,s,o){let a=new Set(e.managedLayers);if(a.size===0)return[];let d=new Map(t.map(R=>[R.name,R.intentPrefixes??[]])),l=new Set(r.filter(R=>R.hasKernelFactory).map(R=>R.file)),g=[];for(let R of n){if(l.has(R.file))continue;let A=R.typeName;if(e.ignoreDirectNewForErrors!==!1&&(A.endsWith("Error")||A==="Error")||A.endsWith("DTO")||A.endsWith("VO"))continue;let u=s(R.file);!u||!a.has(u)||Nn(u,d.get(u)??[])||g.push(le(e,"arkrun-direct-new",R.file,R.line,`${u} must not construct ${R.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:u,target:R.typeName},o))}return g}i(Bs,"evaluateDirectNew");function zs(e,t,n,r,s){let o=[],a=[];if(e.requireDeclarations!==!0)return{findings:o,completenessReasons:a};let d=new Set(e.managedLayers);if(d.size===0)return{findings:o,completenessReasons:a};for(let l of t){if(!$n(l.kind)&&!Fn(l.kind)&&!js(l.kind))continue;let g=r(l.file);if(!g||!d.has(g))continue;if(!l.nameLiteral){e.mode==="enforced"&&a.push({code:Hs,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let R=Us(n,l.file);if($n(l.kind)){if(R.raises.has(l.nameLiteral)||R.sends.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:g,target:l.nameLiteral},s));continue}if(Fn(l.kind)){if(R.reactsTo.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:g,target:l.nameLiteral},s));continue}R.uses.has(l.nameLiteral)||o.push(le(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:g,target:l.nameLiteral},s))}return{findings:o,completenessReasons:a}}i(zs,"evaluateUndeclared");function Ws(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let o=[];for(let a of t){if(a.typeOnly)continue;let d=a.specifier;if(!d||!_n(d))continue;let l=n(a.from);!l||!s.has(l)||o.push(le(e,"arkrun-transport-bypass",a.from,a.line,`${l} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:l,target:d},r))}return o}i(Ws,"evaluateTransportBypass");function Pn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=Qe(e.classification),r=zs(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Vs(t,e.compositionRootHits,n),...Gs(t,e.layers,e.dependencies,e.layerForFile,n),...Bs(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Ws(t,e.dependencies,e.layerForFile,n)].sort(Ks),o=[...r.completenessReasons].sort((a,d)=>{let l=`${a.code}\0${a.file??""}\0${a.message}`,g=`${d.code}\0${d.file??""}\0${d.message}`;return l<g?-1:l>g?1:0});return{findings:s,completenessReasons:o}}i(Pn,"evaluateArkRunSensors");function Ln(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}i(Ln,"isArkOrderModuleSpecifier");var Dn=new Map;function Mn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Mn,"escapeAppliesToLiteral");function qs(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(qs,"normalizeAppliesToGlob");function Ys(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(Ys,"appliesToBracesBalanced");function Xs(e){let t=Dn.get(e);if(t)return t;let n=qs(e),r=Ys(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Mn(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Mn(l)}let a=new RegExp(`^${s}$`);return Dn.set(e,a),a}i(Xs,"globToRegExp");var Hn={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function Zs(e,t){return!t||t.length===0?!0:t.some(n=>Xs(n).test(e))}i(Zs,"matchesArkOrderAppliesTo");function Js(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Js,"isDomainRoleLayer");function pe(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:Hn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:Hn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(pe,"finding");function Kn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=Qe(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let l=new Map;for(let g of e.planeRootHits){let R=l.get(g.matchedRoot)??[];R.push(g),l.set(g.matchedRoot,R)}for(let g of s){let R=l.get(g)??[];if(R.length===0){r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(g)} matched no governed files and has no createOrderPlane factory.`,{target:g},n));continue}R.some(A=>A.hasPlaneFactory)||r.push(pe(t,"arkorder-missing-plane",R[0].file,1,`ArkOrder plane root ${JSON.stringify(g)} has no createOrderPlane factory.`,{target:g},n))}}let o=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let g=l.specifier;if(!g||!Ln(g))continue;let R=e.layerForFile(l.from);R&&Js(R,o.get(R)??[])&&r.push(pe(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:R,target:g},n))}for(let l of e.genericUpdates)r.push(pe(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},n));let a=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||r.push(pe(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},n));for(let l of e.ingestWritesXi??[])r.push(pe(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let l of a.length===0?[]:e.xiFieldWrites??[]){let g=e.layerForFile(l.file);!g||!d.has(g)||Zs(l.file,t.appliesTo)&&r.push(pe(t,"arkorder-xi-field-write",l.file,l.line,`This file writes ${JSON.stringify(l.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:g,target:l.key},n))}return r.sort((l,g)=>l.file.localeCompare(g.file)||l.ruleId.localeCompare(g.ruleId)||l.line-g.line),{findings:r,completenessReasons:[]}}i(Kn,"evaluateArkOrderSensors");var me={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Un={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...me,default:[]},kernelRoots:{...me},managedLayers:{...me,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},jn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...me,default:[]},managedLayers:{...me,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...me,default:[]},appliesTo:{...me,default:[]}}};function Pe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Pe,"isObject");function Vn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Pe(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}i(Vn,"declaredLayerNames");function Gn(e){if(!Pe(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}i(Gn,"defaultedArkRun");function Bn(e){if(!Pe(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}i(Bn,"defaultedArkOrder");function zn(e,t){let n=e.arkRun;if(n===void 0||!Pe(n))return;let r=Vn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkRun.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.kernelRoots??n.compositionRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(zn,"validateArkRunExtra");function Wn(e,t){let n=e.arkOrder;if(n===void 0||!Pe(n))return;let r=Vn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkOrder.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.planeRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(Wn,"validateArkOrderExtra");function et(e){if(typeof e!="string")return null;let t=e.trim().replace(/^@/,"").toLowerCase();return t.length>0?t:null}i(et,"normalizeStewardId");function qn(e){let t=et(e);return!t||It(t)||t.includes(" ")||t.includes("@")?!1:/^(?!-)[a-z0-9-]{1,39}(?<!-)$/.test(t)}i(qn,"isGitHubHandle");function Qs(e){if(typeof e!="string")return!1;let t=e.trim().toLowerCase();return!t.includes("@")||t.includes(" ")||It(t)?!1:/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)}i(Qs,"isGitHubEmail");function eo(e){if(typeof e!="string")return null;let t=e.trim().match(/^(?:\d+\+)?([^@]+)@users\.noreply\.github\.com$/i);return t&&qn(t[1])?et(t[1]):null}i(eo,"githubHandleFromEmail");function Yn(e){let t=eo(e);if(t)return t;let n=et(e);return!n||It(n)?null:qn(n)||Qs(n)?n:null}i(Yn,"canonicalStewardId");var to=/bot\b|\[bot\]|dependabot|renovate|github-actions|imgbot|codecov/i;function It(e){let t=et(e);return!t||to.test(t)}i(It,"isAutomationAuthor");var ne="1.3",no=["public","auth","admin","internal"];function ro(e){return e?.optional===!0||e?.reserved===!0||e?.allowEmpty===!0}i(ro,"isFutureHouseLayer");function so(e){let t=e&&typeof e=="object"?e.owners:void 0;if(!Array.isArray(t)||t.length===0)return;let n=t.filter(r=>typeof r=="string"&&r.length>0);return n.length>0?n:void 0}i(so,"layerOwnersList");function Jn(e){return e?.requireLayerOwners!==!0||!Array.isArray(e.layers)?[]:e.layers.filter(t=>!ro(t)&&!so(t)).map(t=>t.name)}i(Jn,"layersMissingRequiredOwners");function Qn(e){return`Add a GitHub handle or email to ${e}'s owners in ark.config.json (/ark-adopt).`}i(Qn,"missingLayerOwnersNextAction");var St="https://unpkg.com/arkgate@4/schemas/ark.config.schema.json",Xn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],oo=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function ao(){let e=[];for(let t of Xn)for(let n of Xn)t===n||oo.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}i(ao,"createDefaultRules");var er=ao(),Ct=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],Y={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Zn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:St,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:St,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:ne,default:ne},name:{type:"string",minLength:1},include:{...Y,minItems:1,default:["src"]},exclude:{...Y,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:er,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...Y,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...Y,default:[]},requireLayerOwners:{type:"boolean"}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...Y,minItems:1},exclude:Y,intentPrefixes:Y,description:{type:"string",minLength:1},trustBoundary:{type:"string",enum:[...no]},owners:{...Y,minItems:1},forbiddenGlobals:Y,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...Y,minItems:1},sharedRoots:{...Y,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}},sharedImportsSlice:{type:"string",enum:["deny"]}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant. When any invariant is enforced, missing coverageRoots fails closed.",properties:{testGlobs:{...Y,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...Y,minItems:1}}},arkRun:Un,arkOrder:jn}},ce=class extends Error{static{i(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+var Lr=Object.defineProperty;var i=(e,t)=>Lr(e,"name",{value:t,configurable:!0});function j(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}i(j,"deterministicHash");function N(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(N).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${N(t[n])}`).join(",")}}`}i(N,"stableSerialize");var be="1.2";var zt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=N(e),r=N(t);return n<r?-1:n>r?1:0}i(K,"compareCanonical");function V(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}i(V,"sortedUnique");function ze(e){let t={schemaVersion:"1.2",include:V(e.include??[]),exclude:V(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:V(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:V(n.patterns??[]),exclude:V(n.exclude??[]),forbiddenGlobals:V(n.forbiddenGlobals??[]),intentPrefixes:V(n.intentPrefixes??[]),capabilityDeny:V(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:V(e.arkRun.compositionRoots),managedLayers:V(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return j(N(t))}i(ze,"resolvedFactsEvidenceRequirementsHash");function Dr(e){let t=e.completenessReasons.map(b=>({code:b.code,message:b.message,...b.file?{file:b.file}:{}})).sort(K),n=e.files.map(b=>({...b,typeOnlyExportNames:V(b.typeOnlyExportNames)})).sort((b,T)=>b.path<T.path?-1:b.path>T.path?1:0),r=e.dependencies.map(b=>({...b,...b.namedBindings?{namedBindings:V(b.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(b=>({...b})).sort(K),o=e.ambientUses.map(b=>({...b})).sort(K),a=e.publishCalls.map(b=>({...b})).sort(K),d=e.intentReferences.map(b=>({...b})).sort(K),l=e.safetyUses.map(b=>({...b})).sort(K),p=(e.classShapes??[]).map(b=>({...b,mutatingMethods:[...b.mutatingMethods??[]].map(T=>({...T}))})).sort(K),h=(e.arkRunKernelCalls??[]).map(b=>({...b})).sort(K),A=(e.arkRunManagedNews??[]).map(b=>({...b})).sort(K),u=(e.arkRunCompositionRootHits??[]).map(b=>({...b})).sort(K),f=(e.arkRunDeclarations??[]).map(b=>({...b,uses:V(b.uses),reactsTo:V(b.reactsTo),raises:V(b.raises),sends:V(b.sends)})).sort(K),c=(e.arkOrderPlaneCalls??[]).map(b=>({...b})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(b=>({...b})).sort(K),k=(e.arkOrderRootHits??[]).map(b=>({...b})).sort(K),E=(e.arkOrderXiFieldWrites??[]).map(b=>({...b})).sort(K),I=(e.arkOrderIngestWritesXi??[]).map(b=>({...b})).sort(K),O=(e.arkOrderReleaseKeyCounts??[]).map(b=>({...b})).sort(K),$=e.files.map(({path:b,contentHash:T})=>({path:b,contentHash:T})).sort((b,T)=>b.path<T.path?-1:b.path>T.path?1:0),W=j(N($));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:W,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:o,publishCalls:a,intentReferences:d,safetyUses:l,classShapes:p,arkRunKernelCalls:h,arkRunManagedNews:A,arkRunCompositionRootHits:u,arkRunDeclarations:f,arkOrderPlaneCalls:c,arkOrderGenericUpdates:y,arkOrderRootHits:k,arkOrderXiFieldWrites:E,arkOrderIngestWritesXi:I,arkOrderReleaseKeyCounts:O}}i(Dr,"canonicalResolvedFactsInput");function Wt(e){let t=Dr(e);return{...t,factsHash:j(N(t))}}i(Wt,"createCanonicalResolvedCandidateFacts");function We(e){return Wt(Yt(F(e,"$"),!1))}i(We,"createResolvedCandidateFacts");function F(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}i(F,"asRecord");function P(e,t,n){let r=new Set(t),s=Object.keys(e).find(o=>!r.has(o));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}i(P,"assertOnlyKeys");function _(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}i(_,"requiredText");function oe(e,t,n){if(e[t]!==void 0)return _(e,t,n)}i(oe,"optionalText");function L(e,t,n){let r=_(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let o=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(o.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);o.pop()}else o.push(d);let a=o.join("/");if(!a||a!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return a}i(L,"requiredProjectPath");function D(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}i(D,"requiredBoolean");function qt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}i(qt,"requiredInteger");function z(e,t,n){let r=qt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}i(z,"requiredPositiveInteger");function M(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}i(M,"requiredArray");function ae(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}i(ae,"enumValue");function ve(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}i(ve,"parseStringArray");function Mr(e,t,n){let r=new Set;for(let s of e){let o=t(s);if(r.has(o))throw new Error(`${n} must not contain duplicate facts (${o}).`);r.add(o)}}i(Mr,"assertUnique");function Yt(e,t){P(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=ae(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=ae(e,"completeness",["complete","partial","unavailable"],"$"),s=M(e,"completenessReasons","$").map((v,S)=>{let g=`$.completenessReasons[${S}]`,R=F(v,g);P(R,["code","message","file"],g);let x=R.file===void 0?void 0:L(R,"file",g);return{code:_(R,"code",g),message:_(R,"message",g),...x?{file:x}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let o=M(e,"files","$").map((v,S)=>{let g=`$.files[${S}]`,R=F(v,g);return P(R,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],g),{path:L(R,"path",g),contentHash:_(R,"contentHash",g),parseStatus:ae(R,"parseStatus",["parsed","invalid"],g),parseDiagnosticCount:qt(R,"parseDiagnosticCount",g),exportsOnlyTypes:D(R,"exportsOnlyTypes",g),typeOnlyExportNames:ve(R.typeOnlyExportNames,`${g}.typeOnlyExportNames`),hasTopLevelSideEffects:D(R,"hasTopLevelSideEffects",g)}}),a=M(e,"dependencies","$").map((v,S)=>{let g=`$.dependencies[${S}]`,R=F(v,g);P(R,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],g);let x=oe(R,"specifier",g),U=oe(R,"target",g),de=ae(R,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],g);if(de==="resolved-project"&&!U)throw new Error(`${g}.target is required for resolved-project dependencies.`);if(de!=="resolved-project"&&U)throw new Error(`${g}.target is only allowed for resolved-project dependencies.`);if(de!=="dynamic"&&!x)throw new Error(`${g}.specifier is required unless resolution is dynamic.`);return{from:L(R,"from",g),...x?{specifier:x}:{},kind:ae(R,"kind",["import","export","dynamic-import","require"],g),typeOnly:D(R,"typeOnly",g),line:z(R,"line",g),resolution:de,...U?{target:L(R,"target",g)}:{},...R.namedBindings!==void 0?{namedBindings:ve(R.namedBindings,`${g}.namedBindings`)}:{},...R.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:D(R,"targetTypeOnlyExports",g)}:{},...R.sourcePureTypeModule!==void 0?{sourcePureTypeModule:D(R,"sourcePureTypeModule",g)}:{},...R.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:D(R,"namedBindingsTypeOnly",g)}:{},...R.portProofEligible!==void 0?{portProofEligible:D(R,"portProofEligible",g)}:{}}}),d=M(e,"capabilityUses","$").map((v,S)=>{let g=`$.capabilityUses[${S}]`,R=F(v,g);return P(R,["file","line","symbol","capability","source"],g),{file:L(R,"file",g),line:z(R,"line",g),symbol:_(R,"symbol",g),capability:ae(R,"capability",zt,g),source:ae(R,"source",["ambient-global","import-based"],g)}}),l=M(e,"ambientUses","$").map((v,S)=>{let g=`$.ambientUses[${S}]`,R=F(v,g);return P(R,["file","line","symbol"],g),{file:L(R,"file",g),line:z(R,"line",g),symbol:_(R,"symbol",g)}}),p=M(e,"publishCalls","$").map((v,S)=>{let g=`$.publishCalls[${S}]`,R=F(v,g);P(R,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],g);let x=oe(R,"rawIntentName",g),U=oe(R,"sourceIntent",g);return{file:L(R,"file",g),line:z(R,"line",g),...x?{rawIntentName:x}:{},objectHasIntent:D(R,"objectHasIntent",g),arkPublishCandidate:D(R,"arkPublishCandidate",g),hasSource:D(R,"hasSource",g),...U?{sourceIntent:U}:{}}}),h=M(e,"intentReferences","$").map((v,S)=>{let g=`$.intentReferences[${S}]`,R=F(v,g);return P(R,["file","line","intent"],g),{file:L(R,"file",g),line:z(R,"line",g),intent:_(R,"intent",g)}}),A=M(e,"safetyUses","$").map((v,S)=>{let g=`$.safetyUses[${S}]`,R=F(v,g);P(R,["file","line","kind","symbol"],g);let x=oe(R,"symbol",g),U=ae(R,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],g);if(U==="in-memory-store"&&!x)throw new Error(`${g}.symbol is required for in-memory-store facts.`);if(U!=="in-memory-store"&&x)throw new Error(`${g}.symbol is only allowed for in-memory-store facts.`);return{file:L(R,"file",g),line:z(R,"line",g),kind:U,...x?{symbol:x}:{}}});Mr(o,v=>v.path,"$.files");let u=new Set(o.map(v=>v.path));for(let v of o){if(v.parseStatus==="parsed"&&v.parseDiagnosticCount!==0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(v.parseStatus==="invalid"&&v.parseDiagnosticCount===0)throw new Error(`$.files[${v.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&o.some(v=>v.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let v of a)if(!u.has(v.from))throw new Error(`$.dependencies references missing source file ${v.from}.`);let c=(e.arkRunKernelCalls===void 0?[]:M(e,"arkRunKernelCalls","$")).map((v,S)=>{let g=`$.arkRunKernelCalls[${S}]`,R=F(v,g);P(R,["file","line","kind","callee","viaImport","receiver","nameLiteral"],g);let x=oe(R,"receiver",g),U=oe(R,"nameLiteral",g);return{file:L(R,"file",g),line:z(R,"line",g),kind:ae(R,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],g),callee:_(R,"callee",g),viaImport:D(R,"viaImport",g),...x?{receiver:x}:{},...U?{nameLiteral:U}:{}}}),k=(e.arkRunManagedNews===void 0?[]:M(e,"arkRunManagedNews","$")).map((v,S)=>{let g=`$.arkRunManagedNews[${S}]`,R=F(v,g);P(R,["file","line","typeName","importedFrom"],g);let x=oe(R,"importedFrom",g);return{file:L(R,"file",g),line:z(R,"line",g),typeName:_(R,"typeName",g),...x?{importedFrom:x}:{}}}),I=(e.arkRunCompositionRootHits===void 0?[]:M(e,"arkRunCompositionRootHits","$")).map((v,S)=>{let g=`$.arkRunCompositionRootHits[${S}]`,R=F(v,g);return P(R,["file","matchedRoot","hasKernelFactory"],g),{file:L(R,"file",g),matchedRoot:_(R,"matchedRoot",g),hasKernelFactory:D(R,"hasKernelFactory",g)}}),O=e.arkRunDeclarations===void 0?[]:M(e,"arkRunDeclarations","$"),W=(e.arkOrderPlaneCalls===void 0?[]:M(e,"arkOrderPlaneCalls","$")).map((v,S)=>{let g=`$.arkOrderPlaneCalls[${S}]`,R=F(v,g);return P(R,["file","line","callee"],g),{file:L(R,"file",g),line:z(R,"line",g),callee:_(R,"callee",g)}}),T=(e.arkOrderGenericUpdates===void 0?[]:M(e,"arkOrderGenericUpdates","$")).map((v,S)=>{let g=`$.arkOrderGenericUpdates[${S}]`,R=F(v,g);return P(R,["file","line","method"],g),{file:L(R,"file",g),line:z(R,"line",g),method:_(R,"method",g)}}),ge=(e.arkOrderRootHits===void 0?[]:M(e,"arkOrderRootHits","$")).map((v,S)=>{let g=`$.arkOrderRootHits[${S}]`,R=F(v,g);return P(R,["file","matchedRoot","hasPlaneFactory"],g),{file:L(R,"file",g),matchedRoot:_(R,"matchedRoot",g),hasPlaneFactory:D(R,"hasPlaneFactory",g)}}),se=(e.arkOrderXiFieldWrites===void 0?[]:M(e,"arkOrderXiFieldWrites","$")).map((v,S)=>{let g=`$.arkOrderXiFieldWrites[${S}]`,R=F(v,g);return P(R,["file","line","key"],g),{file:L(R,"file",g),line:z(R,"line",g),key:_(R,"key",g)}}),me=(e.arkOrderIngestWritesXi===void 0?[]:M(e,"arkOrderIngestWritesXi","$")).map((v,S)=>{let g=`$.arkOrderIngestWritesXi[${S}]`,R=F(v,g);return P(R,["file","line"],g),{file:L(R,"file",g),line:z(R,"line",g)}}),ke=(e.arkOrderReleaseKeyCounts===void 0?[]:M(e,"arkOrderReleaseKeyCounts","$")).map((v,S)=>{let g=`$.arkOrderReleaseKeyCounts[${S}]`,R=F(v,g);return P(R,["file","line","keyCount"],g),{file:L(R,"file",g),line:z(R,"line",g),keyCount:z(R,"keyCount",g)}}),xe=O.map((v,S)=>{let g=`$.arkRunDeclarations[${S}]`,R=F(v,g);return P(R,["file","line","uses","reactsTo","raises","sends"],g),{file:L(R,"file",g),line:z(R,"line",g),uses:ve(R.uses,`${g}.uses`),reactsTo:ve(R.reactsTo,`${g}.reactsTo`),raises:ve(R.raises,`${g}.raises`),sends:ve(R.sends,`${g}.sends`)}});for(let[v,S]of[["$.capabilityUses",d],["$.ambientUses",l],["$.publishCalls",p],["$.intentReferences",h],["$.safetyUses",A],["$.arkRunKernelCalls",c],["$.arkRunManagedNews",k],["$.arkRunCompositionRootHits",I],["$.arkRunDeclarations",xe],["$.arkOrderPlaneCalls",W],["$.arkOrderGenericUpdates",T],["$.arkOrderRootHits",ge],["$.arkOrderXiFieldWrites",se],["$.arkOrderIngestWritesXi",me],["$.arkOrderReleaseKeyCounts",ke]])for(let g of S)if(!u.has(g.file))throw new Error(`${v} references missing file ${g.file}.`);let Be=oe(e,"projectPackageName","$"),Bt=(e.classShapes===void 0?[]:M(e,"classShapes","$")).map((v,S)=>{let g=`$.classShapes[${S}]`,R=F(v,g);P(R,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],g);let x=M(R,"mutatingMethods",g).map((U,de)=>{let m=`${g}.mutatingMethods[${de}]`,q=F(U,m);return P(q,["name","referencesGuardOrPublish"],m),{name:_(q,"name",m),referencesGuardOrPublish:D(q,"referencesGuardOrPublish",m)}});return{file:L(R,"file",g),className:_(R,"className",g),exported:D(R,"exported",g),hasPublicMutableFields:D(R,"hasPublicMutableFields",g),hasPublicSetters:D(R,"hasPublicSetters",g),hasPublicConstructor:D(R,"hasPublicConstructor",g),hasStaticFactory:D(R,"hasStaticFactory",g),mutatingMethods:x,...R.dataOnly===void 0?{}:{dataOnly:D(R,"dataOnly",g)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:_(e,"resolverIdentity","$"),compilerIdentity:_(e,"compilerIdentity","$"),compilerOptionsHash:_(e,"compilerOptionsHash","$"),tsconfigHash:_(e,"tsconfigHash","$"),evidenceRequirementsHash:_(e,"evidenceRequirementsHash","$"),...Be?{projectPackageName:Be}:{},files:o,dependencies:a,capabilityUses:d,ambientUses:l,publishCalls:p,intentReferences:h,safetyUses:A,classShapes:Bt,arkRunKernelCalls:c,arkRunManagedNews:k,arkRunCompositionRootHits:I,arkRunDeclarations:xe,arkOrderPlaneCalls:W,arkOrderGenericUpdates:T,arkOrderRootHits:ge,arkOrderXiFieldWrites:se,arkOrderIngestWritesXi:me,arkOrderReleaseKeyCounts:ke}}i(Yt,"parseResolvedFactsInput");function ye(e){let t=F(e,"$"),n=_(t,"factsHash","$"),r=_(t,"candidateTreeHash","$"),s=Wt(Yt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}i(ye,"loadResolvedCandidateFacts");var Hr=["network","filesystem","clock","randomness","environment","process","persistence"],w={type:"string",minLength:1},Y={type:"integer",minimum:1},H={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Xt={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:w,message:w,file:H}}},resolverIdentity:w,compilerIdentity:w,compilerOptionsHash:w,tsconfigHash:w,candidateTreeHash:w,evidenceRequirementsHash:w,projectPackageName:w,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:H,contentHash:w,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:w},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:H,specifier:w,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:Y,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:H,namedBindings:{type:"array",items:w},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:H,line:Y,symbol:w,capability:{enum:Hr},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:H,line:Y,symbol:w}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:H,line:Y,rawIntentName:w,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:w}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:H,line:Y,intent:w}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:H,line:Y,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:w},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:H,className:w,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:w,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:H,line:Y,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:w,viaImport:{type:"boolean"},receiver:w,nameLiteral:w}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:H,line:Y,typeName:w,importedFrom:w}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:H,matchedRoot:w,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:H,line:Y,uses:{type:"array",items:w},reactsTo:{type:"array",items:w},raises:{type:"array",items:w},sends:{type:"array",items:w}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:H,line:Y,callee:w}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:H,line:Y,method:w}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:H,matchedRoot:w,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:H,line:Y,key:w}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:H,line:Y}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:H,line:Y,keyCount:{type:"integer",minimum:1}}}},factsHash:w},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Zt="1.0";var dt=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),qe=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),ft=Object.freeze(Object.keys(qe).sort()),ct=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ut=Object.freeze({process:Object.freeze(["process","node:process"])});function Te(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=ct[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=ct[r];if(s)return s;let o=e.indexOf("/",n+1);return o<0?null:ct[e.slice(0,o)]??null}i(Te,"capabilityForModuleSpecifier");function Fe(e,t){for(let n of t)if(ut[n]?.includes(e))return n;return null}i(Fe,"forbiddenGlobalForModuleSpecifier");function Ne(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=qe[r];if(s)return s}return null}i(Ne,"capabilityForAmbientName");function Ie(e){if(e?.pure===!0)return[...dt].sort();let n=(e?.capabilities?.deny??[]).filter(r=>dt.includes(r));return[...new Set(n)].sort()}i(Ie,"effectiveCapabilityDeny");function pt(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}i(pt,"ambientCoveredByForbiddenGlobals");function Ye(e){let t=new Set,n=new Set,r=Object.keys(qe);for(let s of e?.forbiddenGlobals??[]){let o=r.filter(a=>a===s||a.startsWith(`${s}.`));if(o.length===0)n.add(s);else for(let a of o)t.add(`ambient:${a}`);for(let a of ut[s]??[])t.add(`import-exact:${a}`)}for(let s of Ie(e)){if(t.add(`import:${s}`),s==="process")for(let o of ut.process)t.add(`import-exact:${o}`);for(let o of r)Ne(o)===s&&t.add(`ambient:${o}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}i(Ye,"loweredLayerCoverage");function Kr(e){let t=new Set,n=Ne(e);n&&t.add(n);for(let[r,s]of Object.entries(qe))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}i(Kr,"lowerForbiddenGlobal");var Jt=new Map;function Qt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Qt,"escapeLiteral");function Ze(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(Ze,"normalizeGlobSeparators");function Ur(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(Ur,"bracesBalanced");function ie(e){let t=Jt.get(e);if(t)return t;let n=Ze(e),r=Ur(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Qt(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Qt(l)}let a=new RegExp(`^${s}$`);return Jt.set(e,a),a}i(ie,"globToRegExp");function jr(e){return Ze(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}i(jr,"concreteGlobSegments");function mt(e,t){let n=Ze(String(e)),r=jr(n),s=n.replace(/\*/g,"").length,o=r.length*1e4+s;if(t==null||t==="")return o;let a=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,l=-1;for(let p of r){let h=-1;for(let A=d;A<a.length;A+=1)if(a[A]===p){h=A;break}if(h<0)return o;l=h,d=h+1}return(l+1)*1e6+r.length*1e4+s}i(mt,"patternSpecificity");function Q(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(a=>ie(a).test(n))){for(let a of o.patterns??[])if(ie(a).test(n)){let d=mt(a,n);d>s&&(s=d,r=o.name)}}return r}i(Q,"layerForRelativePath");function Xe(e,t,n){if(!t?.length)return;let r=n==="stars"?"stars":"path",s=String(e).split(/[/\\]/).filter(Boolean);if(s.length===0)return;let o=new Set;for(let a of t)if(!(typeof a!="string"||a.length===0)){if(nn(a)){let d=Vr(s,a,r);if(d)return d;continue}!a.includes("/")&&!a.includes("\\")&&!a.includes("*")&&o.add(a.toLowerCase())}return Wr(s,o)}i(Xe,"sliceIdForPath");function nn(e){let t=e.split(/[/\\]/).filter(n=>n.length>0);return t.length<2||t[0]==="*"||t[0]==="**"?!1:t.some(n=>n==="*")}i(nn,"isAnchoredSliceEntry");function Vr(e,t,n){let r=t.split(/[/\\]/).filter(o=>o.length>0).map(o=>o.toLowerCase()),s=an(e,r[0]??"");for(let o of s){let a=Gr(e,r,o,n);if(a)return a}}i(Vr,"anchoredSliceId");function Gr(e,t,n,r="path"){let s=[],o=-1,a=n;for(let d=0;d<t.length;d+=1){let l=t[d];if(l==="*"){if(a>=e.length-1){for(let p=d;p<t.length;p+=1)if(t[p]!=="*")return;break}s.push(e[a].toLowerCase()),a+=1;continue}if(l==="**"||a>=e.length||e[a].toLowerCase()!==l)return;s.push(e[a].toLowerCase()),o=s.length-1,a+=1}if(s.length!==0)return r==="stars"?o<0?void 0:s.slice(o).join("/"):s.join("/")}i(Gr,"bindAnchoredSlice");function rn(e){let t=[];for(let n of e??[]){if(!n||n.sliceIdentity!=="stars")continue;let r=new Map,s=new Map;for(let o of n.sliceFolders??[]){if(typeof o!="string"||o.length===0)continue;let a=Br(o);if(!a)continue;let d=o.split(/[/\\]/).filter(h=>h.length>0).join("/").toLowerCase(),l=s.get(a)??new Set;if(l.has(d))continue;l.add(d),s.set(a,l);let p=r.get(a)??[];p.push(o),r.set(a,p)}for(let[o,a]of r)a.length<2||t.push({from:n.from,to:n.to,stem:o,paths:a,message:zr(n.from,n.to,a,o)})}return t}i(rn,"sliceIdentityCollisions");function Br(e){if(!nn(e))return;let t=e.split(/[/\\]/).filter(s=>s.length>0).map(s=>s.toLowerCase()),n=-1;for(let s=0;s<t.length;s+=1){let o=t[s]??"";if(o==="**")return;o!=="*"&&(n=s)}if(n<0)return;let r=t.slice(n);if(!r.some((s,o)=>o>0&&s!=="*"))return r.join("/")}i(Br,"starsIdentityStem");function zr(e,t,n,r){let s=n.length===2?`${n[0]} and ${n[1]}`:`${n.slice(0,-1).join(", ")}, and ${n[n.length-1]}`;return`${e} \u2192 ${t}: sliceIdentity "stars" gives one slice id to ${s}. They bind as ${r}.`}i(zr,"formatSliceIdentityCollision");function Wr(e,t){if(t.size!==0){for(let n=0;n<e.length-1;n+=1)if(t.has(e[n].toLowerCase())&&!(n+1>=e.length-1))return`${e[n].toLowerCase()}/${e[n+1].toLowerCase()}`}}i(Wr,"bareSliceId");function qr(e){let t=new Set;for(let n of e??[]){let s=Ze(String(n)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let a=s[o];if((a==="**"||a==="*")&&o>0){let d=s[o-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}i(qr,"inferSliceFoldersFromPatterns");function sn(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return qr(r?.patterns)}i(sn,"resolveSliceFolders");function en(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}i(en,"normalizeSegments");function on(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}i(on,"trimTrailingSlashes");var Yr=["src","app"];function an(e,t){let n=(e[0]??"").toLowerCase(),r=t.toLowerCase();return Yr.includes(n)&&r!==n?[0,1]:[0]}i(an,"anchorOffsets");function Xr(e){let t=on(e.replace(/^[./]+/,""));return t==="*"||t==="**"}i(Xr,"isBlanketRoot");function gt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=en(n);for(let o of t){if(typeof o!="string"||o.length===0||Xr(o))continue;if(o.includes("*")){let l=on(o.toLowerCase());if(ie(l).test(r)||ie(`${l}/**`).test(r))return!0;continue}let a=en(o);if(a.length===0)continue;let d=an(s,a[0]??"");for(let l of d){if(l+a.length>s.length)continue;let p=!0;for(let h=0;h<a.length;h+=1)if(s[l+h]!==a[h]){p=!1;break}if(p)return!0}}return!1}i(gt,"pathUnderSharedRoot");function tn(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}i(tn,"sliceMatchesDeclaration");function Zr(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&tn(r.from,t)&&tn(r.to,n))}i(Zr,"crossSliceEdgeAllowed");function Jr(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:e.sharedImportsSlice==="deny"&&e.fromShared===!0&&e.toSlice&&!e.fromSlice?{denied:!0,reason:"shared-imports-slice"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}i(Jr,"peerIsolationDecision");function Je(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"shared-imports-slice":return`shared root imports slice ${t.toSlice??"?"} (${t.fromPath??"?"} \u2192 ${t.toPath??"?"}). The wall is direct-only.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}i(Je,"peerIsolationDenyExplanation");function ln(e,t,n,r){return Pe(e,t,n,r)?.rule}i(ln,"findDeniedEdgeRule");function Pe(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let o=r?.fromPath,a=r?.toPath,d=sn(s,t,r?.layers),l=o?Xe(o,d,s.sliceIdentity):void 0,p=a?Xe(a,d,s.sliceIdentity):void 0,h=Jr({fromPath:o,toPath:a,folderCount:d.length,fromSlice:l,toSlice:p,fromShared:!l&&gt(o,s.sharedRoots),toShared:!p&&gt(a,s.sharedRoots),crossSliceAllowed:Zr(s.allowedCrossSlice,l,p),sharedImportsSlice:s.sharedImportsSlice});if(h.denied)return{rule:s,peerIsolationReason:h.reason,fromSlice:l,toSlice:p};continue}if(t!==n)return{rule:s}}}i(Pe,"findDeniedEdgeDecision");function cn(e,t,n,r){let s=r?.fromPath,o=r?.toPath;if(!(!s||!o))for(let a of e??[]){if(a.from!==t||a.to!==n||a.allowed!==!1||!a.peerIsolation||a.sharedImportsSlice==="deny")continue;let d=sn(a,t,r?.layers),l=Xe(s,d,a.sliceIdentity),p=Xe(o,d,a.sliceIdentity);if(!(l||!p)&&gt(s,a.sharedRoots))return{fromPath:s,toPath:o,toSlice:p}}}i(cn,"findSharedImportsSliceBridge");var yt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},ht=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Rt(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(o=>({layer:r.name,layerIndex:s,prefix:o.endsWith(".")?o:`${o}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}i(Rt,"resolveIntentLayer");function dn(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}i(dn,"looksLikeArkIntent");function At(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&dn(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:yt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:yt.PUBLISH_MISSING_SOURCE}),t}i(At,"classifyPublishFacts");var un="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",Qr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var fn={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Oa={$schema:"https://json-schema.org/draft/2020-12/schema",$id:un,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:un},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...Qr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:fn,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:fn}}}};function Le(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}i(Le,"emptyEffectiveArkRules");function pn(e){if(typeof e.target=="string"&&e.target.length>0)return e.target;let t=String(e.sensor||e.code||"").trim();if(!t&&typeof e.message=="string"){let r=e.message.match(/\(sensor ([a-z0-9-]+)\)/i);r?.[1]&&(t=r[1])}let n=String(e.symbol||"").trim();return t?n?`${t}:${n}`:t:n}i(pn,"structureFreezeTarget");var es=["no-anemic-model"],Rn=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],Fa=new RegExp(`\\b(${Rn.join("|")})\\b`),An="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",Na=new RegExp(`\\bthis\\.${An}\\.push\\s*\\(`),Pa=new RegExp(`^this\\.${An}\\s*=\\s*\\[\\s*\\]`);var ts="truncatedUntil";function ns(){return`${Rn.join(", ")}, or events-array .push(`}i(ns,"expectedDomainInvariantWordsPhrase");function kt(e){let t=Object.getOwnPropertyDescriptor(e,ts)?.value;return typeof t=="number"?t:void 0}i(kt,"shapeTruncatedUntil");function rs(e){let t=kt(e);return t==null?"":` shape analysed until character ${t}`}i(rs,"shapeTruncationSuffix");function gn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(gn,"escapeGlobLiteral");function ss(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let o=e[r+1];if("*?{}[],".includes(o)||o==="\\"){t+="\\"+o,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=gn(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=gn(s)}return new RegExp(`^${n}$`)}i(ss,"globToRegExp");function Ee(e,t){return!t||t.length===0?!0:t.some(n=>ss(n).test(e))}i(Ee,"matchesAppliesTo");function kn(e){return es.includes(e)}i(kn,"isTier2");function bn(e){return e.mode==="enforced"&&!kn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}i(bn,"severityFor");function ue(e,t,n,r=1){let{severity:s,failsStrict:o}=bn(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:o}}i(ue,"baseViolation");function Qe(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}i(Qe,"isInRuleLayer");function et(e,t,n){return t.filter(r=>!(!r.exported||!Ee(r.file,e.appliesTo)||!Qe(r.file,e,n)))}i(et,"shapesForRule");function os(e,t,n){let r=[];for(let s of et(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(ue(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}i(os,"evaluateAggregatePrivateState");function as(e,t,n){let r=[];for(let s of et(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(ue(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}i(as,"evaluateAlwaysValidFactory");function is(e,t,n){let r=[],s=ns();for(let o of et(e,t,n)){let a=rs(o);kt(o)!=null&&r.push(ue(e,o.file,`Exported class ${o.className} shape analysed until character ${kt(o)}; later methods may be invisible (sensor domain-event-on-mutation).`));for(let d of o.mutatingMethods)d.referencesGuardOrPublish||r.push(ue(e,o.file,`Mutating method ${o.className}.${d.name} does not reference ${s} (sensor domain-event-on-mutation).${a}`))}return r}i(is,"evaluateDomainEventOnMutation");function ls(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(ue(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}i(ls,"evaluateOrchestrationOnly");function cs(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(ue(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}i(cs,"evaluateThinAdapter");function ds(e,t){let n=[];for(let r of t.files)Ee(r,e.appliesTo)&&Qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(ue(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}i(ds,"evaluateWritesViaAggregate");function us(e,t,n){let r=[];for(let s of et(e,t,n))if(s.dataOnly===!0){let o=ue(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...o,severity:"warning",failsStrict:!1})}return r}i(us,"evaluateNoAnemicModel");function vn(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...os(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...as(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...is(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...ls(n,e));break;case"thin-adapter":t.push(...cs(n,e));break;case"writes-via-aggregate":t.push(...ds(n,e));break;case"no-anemic-model":t.push(...us(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}i(vn,"evaluateArkRuleSensors");function In(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(l=>Ee(l,s.appliesTo)))continue;let{severity:a,failsStrict:d}=bn(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>Ee(d,s.appliesTo)))continue;let a=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:a?"error":"warning",sensor:"invariant-coverage",failsStrict:a})}return n.sort((s,o)=>s.file.localeCompare(o.file)||s.arkruleId.localeCompare(o.arkruleId)||s.message.localeCompare(o.message))}i(In,"collectEmptyAppliesToFindings");var mn=64;function fs(e){let t=e.length;for(;t>0&&e.charCodeAt(t-1)===46;)t-=1;return t===e.length?e:e.slice(0,t)}i(fs,"stripTrailingDots");function ps(e){let t=e.trim(),n=t.length>mn?t.slice(0,mn):t;return fs(n)}i(ps,"normalizeIntentPrefix");function gs(e){let t=e.toLowerCase();return t.includes("domain")||t.includes("entity")||t.includes("aggregate")||t.includes("model")}i(gs,"layerNameLooksDomain");function ms(e){return e.some(t=>{let n=ps(t);return n==="Domain"||n.startsWith("Domain.")})}i(ms,"ownsDomainIntent");function ys(e,t=[]){return gs(e)||ms(t)}i(ys,"isDomainRoleLayerName");function En(e){if(e.arkRulesActive!==!0)return[];let t=(e.layers??[]).filter(l=>ys(l.name,l.intentPrefixes??[])).map(l=>l.name);if(t.length===0)return[];let n=new Set(t);if(!(e.files??[]).some(l=>{let p=typeof l.layer=="string"?l.layer:"";return p.length>0&&n.has(p)}))return[];if((e.arkRules.invariants??[]).filter(l=>n.has(l.provenance.layer)).length>0)return[];let o=t.find(l=>e.arkRules.byLayer?.[l])??t[0],a=e.arkRules.byLayer?.[o]?.sourceFile??`arkrules/${o}.json`,d=(e.arkRules.structure??[]).some(l=>l.mode==="enforced"&&n.has(l.provenance.layer)&&!kn(l.sensor));return[{ruleId:"INVARIANT_CATALOG_EMPTY",code:"invariant-catalog-empty",message:`ArkRules is on and ${o} has code, but invariants[] is empty \u2014 there are no phrases the code must preserve. Add 1\u20132 short phrases in ${a}.`,file:a,line:1,fromLayer:o,arkruleId:"invariant-catalog",arkruleSource:a,severity:d?"error":"warning",sensor:"invariant-coverage",failsStrict:d}]}i(En,"collectEmptyInvariantCatalogFindings");var yn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,hn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,hs=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function Rs(e){return e==="PersistenceAdapters"}i(Rs,"isPersistenceDriverLayer");function As(e,t){if(yn.test(e)||hn.test(e))return!0;if(!t)return!1;for(let n of t){if(Rs(n.layer))return!0;let r=n.specifier;if(!r)continue;let s=`from '${r}'`;if(yn.test(s)||hn.test(s))return!0}return!1}i(As,"sourceImportsPersistenceDriver");var ks=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,bs=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,vs=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,Is=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function Es(e,t,n){if(!t)return null;let r=As(t,n),s=r&&hs.test(t);if(t.length<40)return s?{persistenceWrite:!0}:null;let o=t.match(new RegExp(vs.source,"g"))??[],a=t.match(new RegExp(Is.source,"g"))??[],d=(t.match(/\bif\s*\(/g)??[]).length,l=(t.match(/\bswitch\s*\(/g)??[]).length,p=o.length>=2||o.length>=1&&a.length>=2||a.length>=3&&d+l>=6,h=ks.test(t)||bs.test(t),A=o.length>=1||a.length>=2,u=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),f=r&&A||h&&A||r&&u&&(d>=4||o.length>=1)||h&&r;return!p&&!f&&!s?null:{...p?{orchestrationHeavy:!0}:{},...f?{adapterThick:!0}:{},...s?{persistenceWrite:!0}:{}}}i(Es,"deriveArkRuleFileHints");function Sn(e,t){let n={};for(let[r,s]of Object.entries(e)){let o=r.replace(/\\/g,"/"),a=Es(r,s,t?.[o]);a&&(n[o]=a)}return n}i(Sn,"buildArkRuleFileHints");var Ss="INVARIANT_TESTS_PATH_MISSING",Cs="This project is adopted and has domain invariants, but ark.config.json does not name a real tests path. Add coverage.testGlobs or coverage.coverageRoots pointing at the folder where those tests live, then re-run. Without that path, coverage is an empty checkbox.",ws="INVARIANT_COVERAGE_ROOTS_MISSING",Os="A domain invariant is enforced, but ark.config.json does not name coverage.coverageRoots \u2014 the folders where this project's test runner actually goes. Add coverage.coverageRoots pointing at that folder, then re-run. Without it, coverage can certify a test no runner runs.";function Cn(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}i(Cn,"formatCoverageDiscards");function xn(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}i(xn,"isUnderCoverageRoot");function _n(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}i(_n,"escapeRegExp");function bt(e){return e.replace(/\\/g,"/").replace(/^\.\//,"")}i(bt,"normalizePath");function $n(e,t){let n=[],r=0,s=e.length;for(;r<s;){let o=e[r],a=e[r+1];if(o==="/"&&a==="/"){for(;r<s&&e[r]!==`
+`;)n.push(" "),r+=1;continue}if(o==="/"&&a==="*"){for(n.push(" "," "),r+=2;r<s&&!(e[r]==="*"&&e[r+1]==="/");)n.push(e[r]===`
+`?`
+`:" "),r+=1;r<s&&(n.push(" "," "),r+=2);continue}if(o==='"'||o==="'"||o==="`"){let d=o;for(n.push(t?" ":o),r+=1;r<s;){let l=e[r];if(l==="\\"){let p=e[r+1];t?n.push(" ",p===void 0?"":" "):(n.push("\\"),p!==void 0&&n.push(p)),r+=p===void 0?1:2;continue}if(l===d){n.push(t?" ":l),r+=1;break}n.push(t&&l!==`
+`?" ":l),r+=1}continue}n.push(o),r+=1}return n.join("")}i($n,"maskNonCode");function xs(e,t){if(!t)return;let n=_n(t),o=new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*(['"\`])([^'"\`]*${n}[^'"\`]*)\\1`,"i").exec($n(e,!1))?.[2];return o===void 0?void 0:o}i(xs,"matchTestTitle");function _s(e,t){if(!t)return;let n=_n(t),r=$n(e,!0),s=[{shape:"function",source:`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:declare\\s+)?(?:async\\s+)?function\\s*\\*?\\s*${n}\\s*[(<]`},{shape:"class",source:`(?:^|[\\s;{}])(?:export\\s+(?:default\\s+)?)?(?:abstract\\s+)?class\\s+${n}\\b`},{shape:"const",source:`(?:^|[\\s;{}])export\\s+(?:const|let|var)\\s+${n}\\s*=`},{shape:"type",source:`(?:^|[\\s;{}])(?:export\\s+)?(?:declare\\s+)?type\\s+${n}\\b`},{shape:"interface",source:`(?:^|[\\s;{}])(?:export\\s+)?(?:declare\\s+)?interface\\s+${n}\\b`},{shape:"enum",source:`(?:^|[\\s;{}])(?:export\\s+)?(?:declare\\s+)?(?:const\\s+)?enum\\s+${n}\\b`},{shape:"method",source:`(?:^|[\\n;{}])\\s*(?:(?:public|private|protected|static|async|readonly|override|abstract|get|set|declare)\\s+)*${n}\\s*(?:<[^>\\n]*>)?\\s*\\([^;{}]*\\)\\s*(?::\\s*[^;{]+)?\\s*\\{`}];for(let o of s)if(new RegExp(o.source).test(r))return o.shape}i(_s,"declarationShape");function $s(e,t){let n=e.lastIndexOf(`
+`,t-1)+1,r=e.indexOf(`
+`,t);return e.slice(n,r===-1?e.length:r)}i($s,"lineAt");function Ts(e){let t=e.trim();return/^import\b/.test(t)||/^export\s+/.test(t)&&/\bfrom\b/.test(t)?!0:/\brequire\s*\(/.test(t)}i(Ts,"isImportLine");function wn(e,t,n){if(!t||!e.includes(t))return;let r=new Set,s=0,o=e.length,a=i((d,l)=>{if(e.startsWith(t,d)){if(l==="comment"){r.add("comment");return}if(l==="string"){r.add("string");return}if(Ts($s(e,d))){r.add("import");return}n&&r.add("test-body")}},"note");for(;s<o;){let d=e[s],l=e[s+1];if(d==="/"&&l==="/"){for(;s<o&&e[s]!==`
+`;)a(s,"comment"),s+=1;continue}if(d==="/"&&l==="*"){for(a(s,"comment"),a(s+1,"comment"),s+=2;s<o&&!(e[s]==="*"&&e[s+1]==="/");)a(s,"comment"),s+=1;s<o&&(a(s,"comment"),a(s+1,"comment"),s+=2);continue}if(d==='"'||d==="'"||d==="`"){let p=d;for(a(s,"string"),s+=1;s<o;){let h=e[s];if(h==="\\"){a(s,"string"),e[s+1]!==void 0&&a(s+1,"string"),s+=e[s+1]===void 0?1:2;continue}if(h===p){a(s,"string"),s+=1;break}a(s,"string"),s+=1}continue}a(s,"code"),s+=1}if(r.has("comment"))return"comment";if(r.has("string"))return"string";if(r.has("test-body"))return"test-body";if(r.has("import"))return"import"}i(wn,"mentionContext");function Tn(e){if(!e)return;let t=e.split("."),n=t[t.length-1]??"";return n?{className:t.length>1?t[0]??null:null,name:n}:void 0}i(Tn,"symbolNeedle");function Fs(e){return Tn(e.coverage?.symbol)?.name??e.id}i(Fs,"declaredLabel");function On(e){return Object.keys(e).sort((t,n)=>t<n?-1:t>n?1:0)}i(On,"sortedContentFiles");function Ns(e,t,n=!0){let r=t.testFiles??[],s=new Set(r.map(f=>bt(f))),o=(t.coverageRoots??[]).filter(f=>typeof f=="string"&&f.length>0),a=e.coverage?.test!==!1&&n,d=Tn(e.coverage?.symbol??void 0),l,p;if(a){for(let f of r){let c=t.fileContents[f];if(!c)continue;let y=xs(c,e.id);if(y!==void 0){if(o.length===0||xn(f,o)){l={file:f,title:y};break}p??={file:f,title:y}}}l??=p}let h;if(d)for(let f of On(t.fileContents)){if(s.has(bt(f)))continue;let c=t.fileContents[f];if(!c||d.className&&!c.includes(d.className))continue;let y=_s(c,d.name);if(y){h={file:f,shape:y};break}}let A;if(!l&&!h){if(a)for(let f of r){let c=t.fileContents[f];if(!c)continue;let y=wn(c,e.id,!0);if(y){A={file:f,context:y};break}}if(!A&&d)for(let f of On(t.fileContents)){if(s.has(bt(f)))continue;let c=t.fileContents[f];if(!c)continue;let y=wn(c,d.name,!1);if(y){A={file:f,context:y};break}}}return{best:l?{kind:"test-title",file:l.file,title:l.title}:h?{kind:"declaration",file:h.file,shape:h.shape}:A?{kind:"mention-only",file:A.file,context:A.context}:{kind:"none"},...l?{testTitle:l}:{},...h?{declaration:h}:{}}}i(Ns,"rankCoverage");function Ps(e){switch(e.kind){case"test-title":case"declaration":return!0;case"mention-only":case"none":return!1}}i(Ps,"countsAsCoverage");function Ls(e){switch(e){case"test-body":return"a test body";case"comment":return"a comment";case"string":return"a string";case"import":return"an import"}}i(Ls,"mentionWhere");function Ds(e,t){switch(t.kind){case"test-title":return`found \`${t.title}\` in a describe/it title in ${t.file}`;case"declaration":return`found \`${t.shape} ${Fs(e)}\` in ${t.file}`;case"mention-only":return`${e.id} appears only in ${Ls(t.context)} in ${t.file}; put it in a describe/it title`;case"none":return"no scanned test names it in a describe/it title and no declared symbol was found"}}i(Ds,"describeCoverage");function Fn(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,o=e.coverageStats,a=Cn(o),d=Cn(o,!0),l=o?`coverage file budget exhausted: ${o.filesLoaded} files loaded at the ${o.maxFiles}-file cap, ${o.testFilesRetained} tests retained, ${o.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof o.filesRead=="number"?`; ${o.filesRead} were read`:""})`:"coverage file budget exhausted",p=(e.coverageRoots??[]).filter(c=>typeof c=="string"&&c.length>0),h=p.length>0,A=p.join(", "),u=[],f=[];for(let c of t){let y=c.coverage?.test!==!1,k=c.coverage?.symbol,E=!r&&y,I=Ns(c,{fileContents:e.fileContents,testFiles:n,coverageRoots:p},E),O=I.best,$=[];E&&I.testTitle&&$.push("test-title"),I.declaration&&$.push("symbol");let W=Ps(O),b,T;E&&I.testTitle&&(b=I.testTitle.file,h&&(T=!xn(b,p)));let we=I.declaration?.file,ge=I.declaration?.shape,se=(c.coverage?.test===!0||!!k||c.coverage===void 0)&&W||c.coverage?.test===!1&&!k?!0:W,re=r&&y&&!W;if(u.push({invariantId:c.id,layer:c.provenance.layer,sourceFile:c.provenance.sourceFile,mode:c.mode,covered:se&&!re,evidence:$,partial:re,description:c.description,...b!==void 0?{testEvidenceFile:b}:{},...we!==void 0?{symbolEvidenceFile:we}:{},...ge!==void 0?{shape:ge}:{},...T!==void 0?{outsideDeclaredRoots:T}:{},coverageRootsDeclared:h}),T===!0&&b!==void 0&&f.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${c.id} is covered only by ${b}, which is outside the declared coverage roots (${A}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:b,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:"warning",failsStrict:!1}),!se||re){let me=c.mode==="enforced"&&!re,Oe=r||n.length===0?"never-had-tests":"tests-disappeared";f.push({ruleId:"INVARIANT_UNCOVERED",message:(re?s?`Invariant ${c.id} coverage cannot be proven (${l}); reporting partial, not covered.`:`Invariant ${c.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:`Invariant ${c.id}: ${Ds(c,O)} (${Oe==="tests-disappeared"?"tests-disappeared \u2014 a suite exists":"never-had-tests \u2014 the scan found no tests at all"}). ArkGate matches declared text; it never executes tests.`)+(re&&s?d:a),file:c.provenance.sourceFile,line:1,arkruleId:c.id,arkruleSource:c.provenance.sourceFile,fromLayer:c.provenance.layer,severity:me?"error":"warning",failsStrict:me,kind:Oe})}}return{coverage:u,violations:f,partial:u.some(c=>c.partial)}}i(Fn,"evaluateInvariantCoverage");function Nn(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:e.coverageRootsDeclared===!1?{ok:!1,reason:`Declare coverage.coverageRoots in ark.config.json before promoting ${e.invariantId} to enforced. Without that, ArkGate cannot tell whether a covering test is one the runner executes.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}i(Nn,"canPromoteInvariant");function vt(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){if(typeof n!="string")continue;let r=n.trim();r.length>0&&t.push(r)}return t}i(vt,"nonEmptyPathStrings");function Ms(e){return!e||typeof e!="object"?[]:[...vt(e.testGlobs),...vt(e.coverageRoots)]}i(Ms,"configuredInvariantTestsPaths");function Hs(e){return Ms(e).length>0}i(Hs,"hasConfiguredInvariantTestsPath");function It(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.coverage?.test!==!1)}i(It,"catalogDemandsInvariantTestsPath");function Pn(e){let t=e.hasDomainInvariants===!0||e.hasDomainInvariants!==!1&&It(e.invariants);return e.adopted!==!0||!t?[]:Hs(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:Ss,message:Cs,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]}i(Pn,"collectMissingInvariantTestsPathFindings");function Ks(e){return!e||typeof e!="object"?[]:vt(e.coverageRoots)}i(Ks,"configuredCoverageRoots");function Us(e){return Ks(e).length>0}i(Us,"hasConfiguredCoverageRoots");function Et(e){return!Array.isArray(e)||e.length===0?!1:e.some(t=>t!=null&&t.mode==="enforced")}i(Et,"catalogHasEnforcedInvariant");function Ln(e){return e.hasEnforcedInvariant===!0||e.hasEnforcedInvariant!==!1&&Et(e.invariants)?Us(e.coverage)&&e.declaredPathPresent!==!1?[]:[{ruleId:ws,message:Os,file:"ark.config.json",line:1,severity:"error",failsStrict:!0,freezable:!1}]:[]}i(Ln,"collectMissingCoverageRootsFindings");function js(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}i(js,"normalizeExtraMergeTeethClassification");function tt(e){let t=js(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}i(tt,"extraMergeTeethAllowed");function Dn(e){let t=e.length,n=0,r=new Set;for(let s of e){let o=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;o&&(n+=1,r.add(o))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}i(Dn,"classifyResolvedLayerCoverage");var Vs=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var ja=new Set(Vs);function Mn(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}i(Mn,"isArkRunKernelModuleSpecifier");var Gs=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],St=new Set(Gs);function Hn(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(St.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(St.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:St.has(e.slice(0,r))}i(Hn,"isArkRunTransportBypassSpecifier");var Bs=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,zs=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Ws=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function qs(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Bs.test(n)?"pure-shared":r==="PersistenceAdapters"&&(zs.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Ws.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}i(qs,"classifyLayerImportKind");function Ys(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=qs(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}i(Ys,"layerImportNextAction");function Xs(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}i(Xs,"arkRunCallSiteName");function Zs(e){let t=Xs(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(Zs,"arkRunNextAction");function fe(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Ys(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"INVARIANT_CATALOG_EMPTY":return typeof e.file=="string"&&e.file.length>0?`Add 1\u20132 short phrases to invariants[] in ${e.file}, then run ark-check --doctor. Starters show the shape.`:"Add 1\u20132 short phrases to invariants[] in arkrules/<Domain>.json, then run ark-check --doctor. Starters show the shape.";case"INVARIANT_TESTS_PATH_MISSING":return"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.";case"INVARIANT_COVERAGE_ROOTS_MISSING":return"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Zs(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Don't use a generic update. First freeze with release(). Later, propose the change, then apply it.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Don't write ${e.target} from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.`:"Don't write a named product choice from a use-case. Take the event in, or change that choice through the valve (proposeRelease then apply), not a generic update.";case"ARKORDER_UNVALVED_RELEASE":return"Change the choice with proposeRelease then apply. release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}i(fe,"deterministicNextAction");var Js=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],ei=new Set(Js);var Kn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Qs="ARKRUN_INTERACTION_NAME_INCOMPLETE";function Vn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(Vn,"isDomainRoleLayer");function eo(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}i(eo,"compareFindings");function le(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:Kn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:Kn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(le,"finding");function to(e,t){let n=[],r=[],s=[],o=[];for(let a of e)a.file===t&&(n.push(...a.uses),r.push(...a.reactsTo),s.push(...a.raises),o.push(...a.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(o)}}i(to,"bagForFile");function Un(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}i(Un,"emitKinds");function jn(e){return e==="subscribe"||e==="register-handler"}i(jn,"handleKinds");function no(e){return e==="resolve"||e==="resolve-singleton"}i(no,"dependKinds");function ro(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(le(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let o=new Map;for(let a of t){let d=o.get(a.matchedRoot)??[];d.push(a),o.set(a.matchedRoot,d)}for(let a of s){let d=[...o.get(a)??[]].sort((p,h)=>p.file.localeCompare(h.file));if(d.length===0){r.push(le(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(a)} matched no governed files and has no createArkKernel factory.`,{target:a},n));continue}if(d.some(p=>p.hasKernelFactory))continue;let l=d[0];r.push(le(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(a)} has no createArkKernel / createStrictArkKernel factory.`,{target:a},n))}return r}i(ro,"evaluateMissingRoot");function so(e,t,n,r,s){let o=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),a=[];for(let d of n){let l=d.specifier;if(!l||!Mn(l))continue;let p=r(d.from);p&&Vn(p,o.get(p)??[])&&a.push(le(e,"arkrun-kernel-in-domain",d.from,d.line,`${p} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:p,target:l},s))}return a}i(so,"evaluateKernelInDomain");function oo(e,t,n,r,s,o){let a=new Set(e.managedLayers);if(a.size===0)return[];let d=new Map(t.map(h=>[h.name,h.intentPrefixes??[]])),l=new Set(r.filter(h=>h.hasKernelFactory).map(h=>h.file)),p=[];for(let h of n){if(l.has(h.file))continue;let A=h.typeName;if(e.ignoreDirectNewForErrors!==!1&&(A.endsWith("Error")||A==="Error")||A.endsWith("DTO")||A.endsWith("VO"))continue;let u=s(h.file);!u||!a.has(u)||Vn(u,d.get(u)??[])||p.push(le(e,"arkrun-direct-new",h.file,h.line,`${u} must not construct ${h.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:u,target:h.typeName},o))}return p}i(oo,"evaluateDirectNew");function ao(e,t,n,r,s){let o=[],a=[];if(e.requireDeclarations!==!0)return{findings:o,completenessReasons:a};let d=new Set(e.managedLayers);if(d.size===0)return{findings:o,completenessReasons:a};for(let l of t){if(!Un(l.kind)&&!jn(l.kind)&&!no(l.kind))continue;let p=r(l.file);if(!p||!d.has(p))continue;if(!l.nameLiteral){e.mode==="enforced"&&a.push({code:Qs,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let h=to(n,l.file);if(Un(l.kind)){if(h.raises.has(l.nameLiteral)||h.sends.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:p,target:l.nameLiteral},s));continue}if(jn(l.kind)){if(h.reactsTo.has(l.nameLiteral))continue;o.push(le(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:p,target:l.nameLiteral},s));continue}h.uses.has(l.nameLiteral)||o.push(le(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:p,target:l.nameLiteral},s))}return{findings:o,completenessReasons:a}}i(ao,"evaluateUndeclared");function io(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let o=[];for(let a of t){if(a.typeOnly)continue;let d=a.specifier;if(!d||!Hn(d))continue;let l=n(a.from);!l||!s.has(l)||o.push(le(e,"arkrun-transport-bypass",a.from,a.line,`${l} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:l,target:d},r))}return o}i(io,"evaluateTransportBypass");function Gn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=tt(e.classification),r=ao(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...ro(t,e.compositionRootHits,n),...so(t,e.layers,e.dependencies,e.layerForFile,n),...oo(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...io(t,e.dependencies,e.layerForFile,n)].sort(eo),o=[...r.completenessReasons].sort((a,d)=>{let l=`${a.code}\0${a.file??""}\0${a.message}`,p=`${d.code}\0${d.file??""}\0${d.message}`;return l<p?-1:l>p?1:0});return{findings:s,completenessReasons:o}}i(Gn,"evaluateArkRunSensors");function Bn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}i(Bn,"isArkOrderModuleSpecifier");var zn=new Map;function Wn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}i(Wn,"escapeAppliesToLiteral");function lo(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}i(lo,"normalizeAppliesToGlob");function co(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}i(co,"appliesToBracesBalanced");function uo(e){let t=zn.get(e);if(t)return t;let n=lo(e),r=co(n),s="",o=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=Wn(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",o+=1):l==="}"&&r&&o>0?(s+=")",o-=1):l===","&&r&&o>0?s+="|":s+=Wn(l)}let a=new RegExp(`^${s}$`);return zn.set(e,a),a}i(uo,"globToRegExp");var qn={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function fo(e,t){return!t||t.length===0?!0:t.some(n=>uo(n).test(e))}i(fo,"matchesArkOrderAppliesTo");function po(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}i(po,"isDomainRoleLayer");function pe(e,t,n,r,s,o,a){let d=e.mode==="enforced"&&a;return{ruleId:qn[t],sensor:t,message:s,file:n,line:r,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:fe({ruleId:qn[t],fromLayer:o?.fromLayer,target:o?.target})}}i(pe,"finding");function Yn(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=tt(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let l=new Map;for(let p of e.planeRootHits){let h=l.get(p.matchedRoot)??[];h.push(p),l.set(p.matchedRoot,h)}for(let p of s){let h=l.get(p)??[];if(h.length===0){r.push(pe(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(p)} matched no governed files and has no createOrderPlane factory.`,{target:p},n));continue}h.some(A=>A.hasPlaneFactory)||r.push(pe(t,"arkorder-missing-plane",h[0].file,1,`ArkOrder plane root ${JSON.stringify(p)} has no createOrderPlane factory.`,{target:p},n))}}let o=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let p=l.specifier;if(!p||!Bn(p))continue;let h=e.layerForFile(l.from);h&&po(h,o.get(h)??[])&&r.push(pe(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:h,target:p},n))}for(let l of e.genericUpdates)r.push(pe(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},n));let a=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||r.push(pe(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},n));for(let l of e.ingestWritesXi??[])r.push(pe(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let l of a.length===0?[]:e.xiFieldWrites??[]){let p=e.layerForFile(l.file);!p||!d.has(p)||fo(l.file,t.appliesTo)&&r.push(pe(t,"arkorder-xi-field-write",l.file,l.line,`This file writes ${JSON.stringify(l.key)} the same way it would write a seat count. Take the event in, or change that choice through the valve (propose, then apply).`,{fromLayer:p,target:l.key},n))}return r.sort((l,p)=>l.file.localeCompare(p.file)||l.ruleId.localeCompare(p.ruleId)||l.line-p.line),{findings:r,completenessReasons:[]}}i(Yn,"evaluateArkOrderSensors");var he={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Xn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...he,default:[]},kernelRoots:{...he},managedLayers:{...he,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},Zn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...he,default:[]},managedLayers:{...he,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...he,default:[]},appliesTo:{...he,default:[]}}};function De(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(De,"isObject");function Jn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)De(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}i(Jn,"declaredLayerNames");function Qn(e){if(!De(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}i(Qn,"defaultedArkRun");function er(e){if(!De(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}i(er,"defaultedArkOrder");function tr(e,t){let n=e.arkRun;if(n===void 0||!De(n))return;let r=Jn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkRun.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.kernelRoots??n.compositionRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(tr,"validateArkRunExtra");function nr(e,t){let n=e.arkOrder;if(n===void 0||!De(n))return;let r=Jn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((o,a)=>{typeof o=="string"&&o.length>0&&!r.has(o)&&t.push({path:`$.arkOrder.managedLayers[${a}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),n.mode==="enforced"){let o=n.planeRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}i(nr,"validateArkOrderExtra");function nt(e){if(typeof e!="string")return null;let t=e.trim().replace(/^@/,"").toLowerCase();return t.length>0?t:null}i(nt,"normalizeStewardId");function rr(e){let t=nt(e);return!t||Ct(t)||t.includes(" ")||t.includes("@")?!1:/^(?!-)[a-z0-9-]{1,39}(?<!-)$/.test(t)}i(rr,"isGitHubHandle");function go(e){if(typeof e!="string")return!1;let t=e.trim().toLowerCase();return!t.includes("@")||t.includes(" ")||Ct(t)?!1:/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)}i(go,"isGitHubEmail");function mo(e){if(typeof e!="string")return null;let t=e.trim().match(/^(?:\d+\+)?([^@]+)@users\.noreply\.github\.com$/i);return t&&rr(t[1])?nt(t[1]):null}i(mo,"githubHandleFromEmail");function sr(e){let t=mo(e);if(t)return t;let n=nt(e);return!n||Ct(n)?null:rr(n)||go(n)?n:null}i(sr,"canonicalStewardId");var yo=/bot\b|\[bot\]|dependabot|renovate|github-actions|imgbot|codecov/i;function Ct(e){let t=nt(e);return!t||yo.test(t)}i(Ct,"isAutomationAuthor");var te="1.3",ho=["public","auth","admin","internal"];function Ro(e){return e?.optional===!0||e?.reserved===!0||e?.allowEmpty===!0}i(Ro,"isFutureHouseLayer");function Ao(e){let t=e&&typeof e=="object"?e.owners:void 0;if(!Array.isArray(t)||t.length===0)return;let n=t.filter(r=>typeof r=="string"&&r.length>0);return n.length>0?n:void 0}i(Ao,"layerOwnersList");function ir(e){return e?.requireLayerOwners!==!0||!Array.isArray(e.layers)?[]:e.layers.filter(t=>!Ro(t)&&!Ao(t)).map(t=>t.name)}i(ir,"layersMissingRequiredOwners");function lr(e){return`Add a GitHub handle or email to ${e}'s owners in ark.config.json (/ark-adopt).`}i(lr,"missingLayerOwnersNextAction");var wt="https://unpkg.com/arkgate@4/schemas/ark.config.schema.json",or=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],ko=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function bo(){let e=[];for(let t of or)for(let n of or)t===n||ko.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}i(bo,"createDefaultRules");var cr=bo(),Ot=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],X={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},ar={$schema:"https://json-schema.org/draft/2020-12/schema",$id:wt,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:wt,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:te,default:te},name:{type:"string",minLength:1},include:{...X,minItems:1,default:["src"]},exclude:{...X,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:cr,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...X,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...X,default:[]},requireLayerOwners:{type:"boolean"}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...X,minItems:1},exclude:X,intentPrefixes:X,description:{type:"string",minLength:1},trustBoundary:{type:"string",enum:[...ho]},owners:{...X,minItems:1},forbiddenGlobals:X,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...X,minItems:1},sliceIdentity:{type:"string",enum:["path","stars"],description:"How a starred sliceFolders prefix is named. Absent and path keep today's ids (every literal and star binding). stars keeps the last literal plus the star bindings, so parallel trees share one feature id. Bare names are unchanged."},sharedRoots:{...X,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}},sharedImportsSlice:{type:"string",enum:["deny"]}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant. When any invariant is enforced, missing coverageRoots fails closed.",properties:{testGlobs:{...X,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...X,minItems:1}}},arkRun:Xn,arkOrder:Zn}},ce=class extends Error{static{i(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function tr(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(tr,"isObject");function tt(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}i(tt,"propertyPath");function Se(e){return e===null?"null":Array.isArray(e)?"array":typeof e}i(Se,"valueType");function io(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}i(io,"resolveSchemaRef");function Le(e,t,n,r,s){if(t.$ref){let o=io(t.$ref,r);if(!o){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Le(e,o,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!tr(e)){s.push({path:n,message:`must be an object; received ${Se(e)}`});return}let o=t.properties??{};for(let a of t.required??[])e[a]===void 0&&s.push({path:tt(n,a),message:"is required"});if(t.additionalProperties===!1)for(let a of Object.keys(e))a in o||s.push({path:tt(n,a),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let a=t.additionalProperties;for(let d of Object.keys(e))d in o||Le(e[d],a,tt(n,d),r,s)}for(let[a,d]of Object.entries(o))e[a]!==void 0&&Le(e[a],d,tt(n,a),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${Se(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(a=>JSON.stringify(a));new Set(o).size!==o.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((o,a)=>Le(o,t.items,`${n}[${a}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${Se(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${Se(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${Se(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}i(Le,"validateNode");function lo(e,t){let n=e.layers;Array.isArray(n)&&n.forEach((r,s)=>{if(!r||typeof r!="object"||Array.isArray(r)||!("owners"in r))return;let o=r.owners;Array.isArray(o)&&o.forEach((a,d)=>{typeof a=="string"&&(Yn(a)||t.push({path:`$.layers[${s}].owners[${d}]`,message:"must be a GitHub handle or email (not a display name)"}))})})}i(lo,"validateLayerOwners");function co(e){let t={...e,$schema:e.$schema===void 0?St:e.$schema,schemaVersion:e.schemaVersion===void 0?ne:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?er.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Gn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Bn(e.arkOrder)),t}i(co,"defaultedConfig");function uo(e){return e===ne?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}i(uo,"migratedFromOf");function fo(){let e=new Set([ne]);for(let t of Ct)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}i(fo,"knownInputVersions");function po(e,t="ark.config.json"){if(!tr(e))throw new ce(t,[{path:"$",message:`must be an object; received ${Se(e)}`}]);let n=fo(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${ne}`}]);if(r!=="unversioned"&&!n.has(r))throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${ne}`}]);let s=r,o={...e},a=0;for(;s!==ne&&a<Ct.length+1;){a+=1;let d=Ct.find(l=>l.from===s);if(!d)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${ne}`}]);s=d.to,o.schemaVersion=s}if(s!==ne)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${ne}`}]);return{candidate:co(o),migratedFrom:uo(r)}}i(po,"migrateArkConfig");function wt(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=po(e,t),s=[];if(Le(n,Zn,"$",Zn,s),zn(n,s),Wn(n,s),lo(n,s),s.length>0)throw new ce(t,s);return{config:n,migratedFrom:r}}i(wt,"loadArkConfigContract");function nr(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new ce(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return wt(n,t)}i(nr,"parseArkConfigJson");function z(e,t,n={}){return{ruleId:e,message:t,...n}}i(z,"configWarning");function Ot(e){let{config:t,rules:n,files:r,manifest:s}=e,o=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(c=>typeof c!="string"))&&o.push(z("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))o.push(z("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let c of["maxTsSuppressions","maxAnyCasts"]){let y=t.safety[c];y!==void 0&&(!Number.isInteger(y)||y<0)&&o.push(z("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${c} must be a non-negative integer.`))}let a=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],l=new Set([...a.map(c=>c.name).filter(Boolean),...d.map(c=>c.name).filter(c=>!!c)]);a.length===0&&o.push(z("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let g=new Set,R=new Set;for(let c of a){if(!c.name){o.push(z("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}g.has(c.name)&&R.add(c.name),g.add(c.name),c.forbiddenGlobals!==void 0&&(!Array.isArray(c.forbiddenGlobals)||c.forbiddenGlobals.some(k=>typeof k!="string"))&&o.push(z("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${c.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:c.name}));let y=Array.isArray(c.patterns)?c.patterns:[];if(y.length===0){o.push(z("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${c.name}" has no file patterns and will never classify files.`,{layer:c.name}));continue}for(let k of y){let I;try{I=ie(k)}catch(w){o.push(z("CONFIG_INVALID_LAYER_PATTERN",`Layer "${c.name}" has an invalid pattern "${k}": ${w instanceof Error?w.message:String(w)}`,{layer:c.name,pattern:k}));continue}let E=c.optional===!0||c.reserved===!0||c.allowEmpty===!0;!r.some(w=>I.test(w))&&!E&&o.push(z("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${c.name}" pattern "${k}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:c.name,pattern:k,failsStrict:!1,reserved:!1}))}}for(let c of R)o.push(z("CONFIG_DUPLICATE_LAYER",`Layer "${c}" is configured more than once.`,{layer:c}));if(l.size>0)for(let c of n??[])c.from&&!l.has(c.from)&&o.push(z("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${c.from}".`,{fromLayer:c.from,toLayer:c.to})),c.to&&!l.has(c.to)&&o.push(z("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${c.to}".`,{fromLayer:c.from,toLayer:c.to}));let A=new Set;if(a.length>1)for(let c of r){let y=-1,k=[];for(let I of a)for(let E of I.patterns??[]){if(!ie(E).test(c))continue;let w=gt(E,c);w>y?(y=w,k=[I.name]):w===y&&!k.includes(I.name)&&k.push(I.name)}k.length>1&&A.add([...k].sort().join(" + "))}A.size>0&&o.push(z("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...A].join(", ")}.`,{pairs:[...A]}));let u=r.filter(c=>!Q(c,a));u.length>0&&o.push(z("CONFIG_UNCLASSIFIED_FILES",`${u.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:u.length,samples:u.slice(0,5)}));let m=Jn(t);if(m.length>0){let c=m[0]??"this layer";o.push(z("CONFIG_LAYER_MISSING_OWNER",`${c} has no owner. Add a GitHub handle or email to layers[].owners so this house has a name on the door.`,{layers:m,nextAction:Qn(c)}))}return o}i(Ot,"collectAnalysisConfigWarnings");function rr(e){let t=0,n=new Map,r=new Map,s=new Set,o=[],a=[],d=i(l=>{n.set(l,t),r.set(l,t),t+=1,o.push(l),s.add(l);for(let A of[...e.get(l)??[]].sort())e.has(A)&&(n.has(A)?s.has(A)&&r.set(l,Math.min(r.get(l)??0,n.get(A)??0)):(d(A),r.set(l,Math.min(r.get(l)??0,r.get(A)??0))));if(r.get(l)!==n.get(l))return;let g=[],R;do{if(R=o.pop(),R===void 0)break;s.delete(R),g.push(R)}while(R!==l);g.length>1&&a.push(g.sort())},"connect");for(let l of[...e.keys()].sort())n.has(l)||d(l);return a.sort((l,g)=>l[0]<g[0]?-1:l[0]>g[0]?1:0).map(l=>({ruleId:"CIRCULAR_DEPENDENCY",file:l[0],line:1,target:l.join(" \u2192 "),message:`Circular dependency among ${l.length} files: ${l.join(" \u2192 ")} \u2192 ${l[0]}.`,cycleKind:"value"}))}i(rr,"detectArchitectureCycles");function De(e){let t=e.contentViolations.map(o=>({...o})),n=(e.warnings??[]).map(o=>({...o})),r=new Map(e.files.map(o=>[o,new Set]));for(let o of e.edges){if(o.to&&o.to!==o.from&&!o.typeOnly&&r.has(o.from)&&r.get(o.from)?.add(o.to),!o.to||!o.fromLayer||!o.toLayer)continue;let a=Fe(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});if(!a){let u=on(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});u&&n.push({ruleId:"SHARED_IMPORTS_SLICE",file:u.fromPath,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:u.toPath,toSlice:u.toSlice,failsStrict:!1,severity:"warning",message:`shared root ${u.fromPath} \u2192 slice ${u.toSlice} (${u.toPath}). The wall is direct-only.`});continue}let d=a.rule,l=!!d.peerIsolation,g=!l&&!!(o.typeOnly||o.namedBindingsTypeOnly),R=l?Xe(a.peerIsolationReason??"cross-slice",{fromPath:o.from,toPath:o.to,fromSlice:a.fromSlice,toSlice:a.toSlice}):void 0,A=d.message?R?`${d.message} (${R})`:d.message:R?`${o.fromLayer} must not ${o.kind} another slice of ${o.toLayer} (${o.from} \u2192 ${o.to}): ${R}`:`${o.fromLayer} must not ${o.kind} ${o.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:o.from,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:o.to,...o.typeOnly?{typeOnly:!0}:{},...o.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...o.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...o.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&o.portProofEligible?{portProofEligible:!0}:{},...o.kind?{edgeKind:o.kind}:{},...l?{peerIsolation:!0}:{},message:g?`${A} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:A,...g?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let o=rr(r);s==="soft"||s==="framework-soft"?n.push(...o.map(a=>({...a,message:`${a.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...o)}return{violations:t,warnings:n,safety:e.safety}}i(De,"evaluateArchitectureGraph");function sr(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY",s=e.ruleId==="INVARIANT_CATALOG_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:dn({sensor:e.sensor,code:e.code})}:{},...r||s?{freezable:!1}:{},nextAction:t}}i(sr,"toArkRuleEngineViolation");function go(e){let t=e.arkRules;return!!(t&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).length>0)}i(go,"arkRulesMapIsOn");function or(e,t){return e.ruleId==="INVARIANT_CATALOG_EMPTY"?t?`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve (advisory \u2014 does not fail the merge until a domain structure rule is enforced).`:`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve. Empty catalog fails --strict-merge because a domain structure rule is already enforced.`:e.ruleId==="ARKRULE_SCOPE_EMPTY"?t?`Review appliesTo for ${e.arkruleId} in ${e.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Fix appliesTo globs for ${e.arkruleId} in ${e.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:t?`Review ArkRule ${e.arkruleId} in ${e.arkruleSource} (advisory).`:`Fix the structure or invariant for ${e.arkruleId} (declared in ${e.arkruleSource}), then preflight again.`}i(or,"arkRuleFindingNextAction");function mo(e,t){return t.some(n=>{try{return ie(n).test(e)}catch{return!1}})}i(mo,"matchesAny");function yo(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,o=e.contract.config.dynamicImportAllowlist??[],a=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:k})=>({file:y,line:k})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:k})=>({file:y,line:k})),l=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!mo(y.file,o)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),g=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),R=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),A={tsSuppressions:a,anyCasts:d,nonLiteralDynamicImports:l,inMemoryProductionStores:g,disabledPeerIsolationRules:R,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},u=[],m=l.filter(y=>y.kind==="import");if(m.length>0){let y=m[0];u.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${m.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let c=l.filter(y=>y.kind==="require");if(c.length>0){let y=c[0];u.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${c.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(a.length>r){let y=a[0];u.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${a.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];u.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(g.length>0){let y=g[0];u.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${g.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return R.length>0&&u.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${R.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:A,warnings:u}}i(yo,"evaluateSafety");function ho(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}i(ho,"ambientForbiddenGlobal");function ar(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return ht(e,n.length>0?n:yt.map(r=>({name:r.layer,prefixes:r.prefixes})))}i(ar,"intentLayer");function Ro(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(o=>[o.name,o]));for(let o of t.ambientUses){let a=n.get(o.file);!a||!ho(o.symbol,s.get(a)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,message:`${a} must not use the ambient global "${o.symbol}".`})}for(let o of t.capabilityUses){let a=n.get(o.file);if(!a)continue;let d=s.get(a),l=d?.forbiddenGlobals??[],g=o.source==="import-based"?t.dependencies.find(R=>R.from===o.file&&R.line===o.line&&R.specifier===o.symbol&&!R.typeOnly)?.kind:void 0;if(!(o.source==="ambient-global"&&ft(o.symbol,l))){if(o.source==="import-based"){let R=Te(o.symbol,l);if(R){r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,...g?{edgeKind:g}:{},message:`${a} must not use module "${o.symbol}" because it is the import form of forbidden global "${R}".`});continue}}Ee(d).includes(o.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:o.file,line:o.line,fromLayer:a,target:o.symbol,capability:o.capability,...g?{edgeKind:g}:{},message:o.source==="import-based"?`${a} denies the ${o.capability} capability; found import of "${o.symbol}".`:`${a} denies the ${o.capability} capability; found ambient "${o.symbol}".`})}}for(let o of t.publishCalls){let a=n.get(o.file);if(!a)continue;for(let l of Rt({publishCall:!0,rawIntentName:o.rawIntentName,objectHasIntent:o.objectHasIntent,arkPublishCandidate:o.arkPublishCandidate,hasSource:o.hasSource}))r.push({ruleId:l.ruleId,file:o.file,line:o.line,...l.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:a}:{},message:l.message});if(!o.sourceIntent)continue;let d=ar(o.sourceIntent,e.contract);!d||d===a||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.sourceIntent,message:`Publish source "${o.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${a}.`})}for(let o of t.intentReferences){let a=n.get(o.file);if(!a)continue;let d=ar(o.intent,e.contract);if(!d)continue;let l=Fe(e.contract.config.rules,a,d,{fromPath:o.file,layers:e.contract.config.layers});if(!l)continue;let g=l.rule.peerIsolation?Xe(l.peerIsolationReason??"cross-slice",{fromPath:o.file,fromSlice:l.fromSlice,toSlice:l.toSlice}):void 0,R=`${a} must not reference ${d} intent ${o.intent}.`,A=g&&l.peerIsolationReason!=="cross-slice"?`${R} ${g}`:l.rule.message?g?`${l.rule.message} (${g})`:l.rule.message:R;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.intent,...l.rule.peerIsolation?{peerIsolation:!0}:{},message:A})}return r}i(Ro,"contentViolations");function xt(e){let{facts:t}=e,n=Ge(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",o=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((p,W)=>{let Oe=`${p.code}\0${p.file??""}\0${p.message}`,xe=`${W.code}\0${W.file??""}\0${W.message}`;return Oe<xe?-1:Oe>xe?1:0}),a=t.files.map(p=>({...p,layer:Q(p.path,e.contract.config.layers)??null})),d=new Map(a.map(p=>[p.path,p.layer])),l=t.dependencies.map(p=>{let W=p.target?d.get(p.target)??Q(p.target,e.contract.config.layers):void 0;return{from:p.from,fromLayer:d.get(p.from)??null,...p.resolution==="resolved-project"&&p.target?{to:p.target,...W?{toLayer:W}:{}}:{},line:p.line,kind:p.kind,typeOnly:p.typeOnly,...p.targetTypeOnlyExports?{targetTypeOnlyExports:p.targetTypeOnlyExports}:{},...p.sourcePureTypeModule?{sourcePureTypeModule:p.sourcePureTypeModule}:{},...p.namedBindingsTypeOnly?{namedBindingsTypeOnly:p.namedBindingsTypeOnly}:{},...p.portProofEligible?{portProofEligible:p.portProofEligible}:{}}}),g=Ot({config:e.contract.config,rules:e.contract.config.rules,files:a.map(p=>p.path)}),R=yo(e,t),A=e.contract.arkRules??Ne(),u=a.map(p=>p.path),c={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?vn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=i(p=>d.get(p)??Q(p,e.contract.config.layers),"resolveLayer"),k=[...An({arkRules:A,classShapes:e.contract.classShapes??t.classShapes??[],files:u,layerForFile:y,fileHints:c}),...kn(A,u),...bn({arkRulesActive:go(e.contract.config),arkRules:A,layers:e.contract.config.layers??[],files:u.map(p=>({path:p,layer:y(p)}))})],I=(A.invariants?.length??0)>0,E=wn({hasEnforcedInvariant:vt(A.invariants),coverage:e.contract.config.coverage,...e.coverageRootsPresent===!1?{declaredPathPresent:!1}:{}}),w=E.length>0?[]:Cn({adopted:e.adopted===!0,hasDomainInvariants:bt(A.invariants),coverage:e.contract.config.coverage,...e.invariantTestsPathPresent===!1?{declaredPathPresent:!1}:{}}),$=[...E.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.",failsStrict:!0,freezable:!1})),...w.map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,nextAction:"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.",failsStrict:!0,freezable:!1}))],te=k.filter(p=>p.failsStrict).map(p=>sr(p,or(p,!1))),b=k.filter(p=>!p.failsStrict).map(p=>({...sr(p,or(p,!0)),failsStrict:!1})),x=I?In({arkRules:A,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},se=x.violations.filter(p=>p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,nextAction:`Add a test title or declared symbol covering ${p.arkruleId} (declared in ${p.arkruleSource}), then preflight again.`})),J=x.violations.filter(p=>!p.failsStrict).map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,arkruleId:p.arkruleId,arkruleSource:p.arkruleSource,failsStrict:!1,nextAction:p.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${p.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${p.arkruleId} in ${p.arkruleSource} (advisory / partial).`})),Re=On(a),Ae=Pn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:Re}),it=e.contract.config.arkRun?.mode,je=Ae.findings.filter(()=>it==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),jt=Ae.findings.filter(()=>it!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),ke=Kn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:i(p=>d.get(p)??Q(p,e.contract.config.layers),"layerForFile"),classification:Re}),we=e.contract.config.arkOrder?.mode,Ve=ke.findings.filter(()=>we==="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:p.failsStrict,...p.severity?{severity:p.severity}:{}})),Vt=ke.findings.filter(()=>we!=="enforced").map(p=>({ruleId:p.ruleId,file:p.file,line:p.line,message:p.message,fromLayer:p.fromLayer,target:p.target,nextAction:p.nextAction,sensor:p.sensor,failsStrict:!1})),v=[...x.partial&&x.coverage.some(p=>p.mode==="enforced"&&p.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...Ae.completenessReasons,...ke.completenessReasons],S=De({config:e.contract.config,rules:e.contract.config.rules,files:a.filter(p=>p.layer).map(p=>p.path),contentViolations:[...Ro(e,t,d),...te,...$,...se,...je,...Ve],edges:l,warnings:[...g,...R.warnings,...b,...J,...jt,...Vt],safety:R.report}),f=s==="complete"&&v.length>0?"partial":s,h=f==="complete"?o:[...o,...v].sort((p,W)=>{let Oe=`${p.code}\0${p.file??""}\0${p.message}`,xe=`${W.code}\0${W.file??""}\0${W.message}`;return Oe<xe?-1:Oe>xe?1:0}),_=S.violations.filter(p=>p.failsStrict!==!1),U=f==="complete"&&_.length===0,de=U&&S.warnings.every(p=>p.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:f,completenessReasons:h,valid:U,strictValid:de,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:R.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:a,layers:e.contract.config.layers.map(p=>p.name),edges:l,capabilityUses:t.capabilityUses,violations:S.violations,warnings:S.warnings}}}i(xt,"analyzeCanonicalResolvedProject");function nt(e){return xt({contract:e.contract,facts:ge(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints,adopted:e.adopted,invariantTestsPathPresent:e.invariantTestsPathPresent,coverageRootsPresent:e.coverageRootsPresent})}i(nt,"analyzeResolvedProject");var _t="1.0";var rt=class extends Error{static{i(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function dr(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(dr,"isObject");function rt(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}i(rt,"propertyPath");function Se(e){return e===null?"null":Array.isArray(e)?"array":typeof e}i(Se,"valueType");function vo(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}i(vo,"resolveSchemaRef");function Me(e,t,n,r,s){if(t.$ref){let o=vo(t.$ref,r);if(!o){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Me(e,o,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!dr(e)){s.push({path:n,message:`must be an object; received ${Se(e)}`});return}let o=t.properties??{};for(let a of t.required??[])e[a]===void 0&&s.push({path:rt(n,a),message:"is required"});if(t.additionalProperties===!1)for(let a of Object.keys(e))a in o||s.push({path:rt(n,a),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let a=t.additionalProperties;for(let d of Object.keys(e))d in o||Me(e[d],a,rt(n,d),r,s)}for(let[a,d]of Object.entries(o))e[a]!==void 0&&Me(e[a],d,rt(n,a),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${Se(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(a=>JSON.stringify(a));new Set(o).size!==o.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((o,a)=>Me(o,t.items,`${n}[${a}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${Se(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${Se(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${Se(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}i(Me,"validateNode");function Io(e,t){let n=e.layers;Array.isArray(n)&&n.forEach((r,s)=>{if(!r||typeof r!="object"||Array.isArray(r)||!("owners"in r))return;let o=r.owners;Array.isArray(o)&&o.forEach((a,d)=>{typeof a=="string"&&(sr(a)||t.push({path:`$.layers[${s}].owners[${d}]`,message:"must be a GitHub handle or email (not a display name)"}))})})}i(Io,"validateLayerOwners");function Eo(e){let t={...e,$schema:e.$schema===void 0?wt:e.$schema,schemaVersion:e.schemaVersion===void 0?te:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?cr.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Qn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=er(e.arkOrder)),t}i(Eo,"defaultedConfig");function So(e){return e===te?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}i(So,"migratedFromOf");function Co(){let e=new Set([te]);for(let t of Ot)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}i(Co,"knownInputVersions");function wo(e,t="ark.config.json"){if(!dr(e))throw new ce(t,[{path:"$",message:`must be an object; received ${Se(e)}`}]);let n=Co(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${te}`}]);if(r!=="unversioned"&&!n.has(r))throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);let s=r,o={...e},a=0;for(;s!==te&&a<Ot.length+1;){a+=1;let d=Ot.find(l=>l.from===s);if(!d)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${te}`}]);s=d.to,o.schemaVersion=s}if(s!==te)throw new ce(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);return{candidate:Eo(o),migratedFrom:So(r)}}i(wo,"migrateArkConfig");function xt(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=wo(e,t),s=[];if(Me(n,ar,"$",ar,s),tr(n,s),nr(n,s),Io(n,s),s.length>0)throw new ce(t,s);return{config:n,migratedFrom:r}}i(xt,"loadArkConfigContract");function ur(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new ce(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return xt(n,t)}i(ur,"parseArkConfigJson");function G(e,t,n={}){return{ruleId:e,message:t,...n}}i(G,"configWarning");function _t(e){let{config:t,rules:n,files:r,manifest:s}=e,o=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(c=>typeof c!="string"))&&o.push(G("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))o.push(G("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let c of["maxTsSuppressions","maxAnyCasts"]){let y=t.safety[c];y!==void 0&&(!Number.isInteger(y)||y<0)&&o.push(G("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${c} must be a non-negative integer.`))}let a=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],l=new Set([...a.map(c=>c.name).filter(Boolean),...d.map(c=>c.name).filter(c=>!!c)]);a.length===0&&o.push(G("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let p=new Set,h=new Set;for(let c of a){if(!c.name){o.push(G("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}p.has(c.name)&&h.add(c.name),p.add(c.name),c.forbiddenGlobals!==void 0&&(!Array.isArray(c.forbiddenGlobals)||c.forbiddenGlobals.some(k=>typeof k!="string"))&&o.push(G("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${c.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:c.name}));let y=Array.isArray(c.patterns)?c.patterns:[];if(y.length===0){o.push(G("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${c.name}" has no file patterns and will never classify files.`,{layer:c.name}));continue}for(let k of y){let E;try{E=ie(k)}catch(O){o.push(G("CONFIG_INVALID_LAYER_PATTERN",`Layer "${c.name}" has an invalid pattern "${k}": ${O instanceof Error?O.message:String(O)}`,{layer:c.name,pattern:k}));continue}let I=c.optional===!0||c.reserved===!0||c.allowEmpty===!0;!r.some(O=>E.test(O))&&!I&&o.push(G("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${c.name}" pattern "${k}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:c.name,pattern:k,failsStrict:!1,reserved:!1}))}}for(let c of h)o.push(G("CONFIG_DUPLICATE_LAYER",`Layer "${c}" is configured more than once.`,{layer:c}));if(l.size>0)for(let c of n??[])c.from&&!l.has(c.from)&&o.push(G("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${c.from}".`,{fromLayer:c.from,toLayer:c.to})),c.to&&!l.has(c.to)&&o.push(G("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${c.to}".`,{fromLayer:c.from,toLayer:c.to}));let A=new Set;if(a.length>1)for(let c of r){let y=-1,k=[];for(let E of a)for(let I of E.patterns??[]){if(!ie(I).test(c))continue;let O=mt(I,c);O>y?(y=O,k=[E.name]):O===y&&!k.includes(E.name)&&k.push(E.name)}k.length>1&&A.add([...k].sort().join(" + "))}A.size>0&&o.push(G("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...A].join(", ")}.`,{pairs:[...A]}));let u=r.filter(c=>!Q(c,a));u.length>0&&o.push(G("CONFIG_UNCLASSIFIED_FILES",`${u.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:u.length,samples:u.slice(0,5)}));for(let c of rn(n))o.push(G("CONFIG_SLICE_IDENTITY_COLLISION",c.message,{paths:[...c.paths],fromLayer:c.from,toLayer:c.to,failsStrict:!1}));let f=ir(t);if(f.length>0){let c=f[0]??"this layer";o.push(G("CONFIG_LAYER_MISSING_OWNER",`${c} has no owner. Add a GitHub handle or email to layers[].owners so this house has a name on the door.`,{layers:f,nextAction:lr(c)}))}return o}i(_t,"collectAnalysisConfigWarnings");function fr(e){let t=0,n=new Map,r=new Map,s=new Set,o=[],a=[],d=i(l=>{n.set(l,t),r.set(l,t),t+=1,o.push(l),s.add(l);for(let A of[...e.get(l)??[]].sort())e.has(A)&&(n.has(A)?s.has(A)&&r.set(l,Math.min(r.get(l)??0,n.get(A)??0)):(d(A),r.set(l,Math.min(r.get(l)??0,r.get(A)??0))));if(r.get(l)!==n.get(l))return;let p=[],h;do{if(h=o.pop(),h===void 0)break;s.delete(h),p.push(h)}while(h!==l);p.length>1&&a.push(p.sort())},"connect");for(let l of[...e.keys()].sort())n.has(l)||d(l);return a.sort((l,p)=>l[0]<p[0]?-1:l[0]>p[0]?1:0).map(l=>({ruleId:"CIRCULAR_DEPENDENCY",file:l[0],line:1,target:l.join(" \u2192 "),message:`Circular dependency among ${l.length} files: ${l.join(" \u2192 ")} \u2192 ${l[0]}.`,cycleKind:"value"}))}i(fr,"detectArchitectureCycles");function He(e){let t=e.contentViolations.map(o=>({...o})),n=(e.warnings??[]).map(o=>({...o})),r=new Map(e.files.map(o=>[o,new Set]));for(let o of e.edges){if(o.to&&o.to!==o.from&&!o.typeOnly&&r.has(o.from)&&r.get(o.from)?.add(o.to),!o.to||!o.fromLayer||!o.toLayer)continue;let a=Pe(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});if(!a){let u=cn(e.rules,o.fromLayer,o.toLayer,{fromPath:o.from,toPath:o.to,layers:e.config.layers});u&&n.push({ruleId:"SHARED_IMPORTS_SLICE",file:u.fromPath,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:u.toPath,toSlice:u.toSlice,failsStrict:!1,severity:"warning",message:`shared root ${u.fromPath} \u2192 slice ${u.toSlice} (${u.toPath}). The wall is direct-only.`});continue}let d=a.rule,l=!!d.peerIsolation,p=!l&&!!(o.typeOnly||o.namedBindingsTypeOnly),h=l?Je(a.peerIsolationReason??"cross-slice",{fromPath:o.from,toPath:o.to,fromSlice:a.fromSlice,toSlice:a.toSlice}):void 0,A=d.message?h?`${d.message} (${h})`:d.message:h?`${o.fromLayer} must not ${o.kind} another slice of ${o.toLayer} (${o.from} \u2192 ${o.to}): ${h}`:`${o.fromLayer} must not ${o.kind} ${o.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:o.from,line:o.line,fromLayer:o.fromLayer,toLayer:o.toLayer,target:o.to,...o.typeOnly?{typeOnly:!0}:{},...o.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...o.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...o.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&o.portProofEligible?{portProofEligible:!0}:{},...o.kind?{edgeKind:o.kind}:{},...l?{peerIsolation:!0}:{},message:p?`${A} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:A,...p?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let o=fr(r);s==="soft"||s==="framework-soft"?n.push(...o.map(a=>({...a,message:`${a.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...o)}return{violations:t,warnings:n,safety:e.safety}}i(He,"evaluateArchitectureGraph");function pr(e,t){let n=e.ruleId==="ARKRULE_STRUCTURE",r=e.ruleId==="ARKRULE_SCOPE_EMPTY",s=e.ruleId==="INVARIANT_CATALOG_EMPTY";return{ruleId:e.ruleId,file:e.file,line:e.line,message:e.message,fromLayer:e.fromLayer,arkruleId:e.arkruleId,arkruleSource:e.arkruleSource,...n?{sensor:e.sensor,code:e.code,target:pn({sensor:e.sensor,code:e.code})}:{},...r||s?{freezable:!1}:{},nextAction:t}}i(pr,"toArkRuleEngineViolation");function Oo(e){let t=e.arkRules;return!!(t&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).length>0)}i(Oo,"arkRulesMapIsOn");function gr(e,t){return e.ruleId==="INVARIANT_CATALOG_EMPTY"?t?`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve (advisory \u2014 does not fail the merge until a domain structure rule is enforced).`:`Add 1\u20132 short phrases to invariants[] in ${e.arkruleSource} so Domain has policies the code must preserve. Empty catalog fails --strict-merge because a domain structure rule is already enforced.`:e.ruleId==="ARKRULE_SCOPE_EMPTY"?t?`Review appliesTo for ${e.arkruleId} in ${e.arkruleSource} (zero-match scope; advisory). Empty scope is not freezable; promote only after the folder exists.`:`Fix appliesTo globs for ${e.arkruleId} in ${e.arkruleSource} so they match governed files, or remove the rule. ARKRULE_SCOPE_EMPTY is a config diagnostic and is not freezable (even with --force). Land the rule as advisory until the folder exists, then promote.`:t?`Review ArkRule ${e.arkruleId} in ${e.arkruleSource} (advisory).`:`Fix the structure or invariant for ${e.arkruleId} (declared in ${e.arkruleSource}), then preflight again.`}i(gr,"arkRuleFindingNextAction");function xo(e,t){return t.some(n=>{try{return ie(n).test(e)}catch{return!1}})}i(xo,"matchesAny");function _o(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,o=e.contract.config.dynamicImportAllowlist??[],a=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:k})=>({file:y,line:k})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:k})=>({file:y,line:k})),l=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!xo(y.file,o)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),p=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),h=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),A={tsSuppressions:a,anyCasts:d,nonLiteralDynamicImports:l,inMemoryProductionStores:p,disabledPeerIsolationRules:h,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},u=[],f=l.filter(y=>y.kind==="import");if(f.length>0){let y=f[0];u.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${f.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let c=l.filter(y=>y.kind==="require");if(c.length>0){let y=c[0];u.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${c.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(a.length>r){let y=a[0];u.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${a.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];u.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(p.length>0){let y=p[0];u.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${p.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return h.length>0&&u.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${h.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:A,warnings:u}}i(_o,"evaluateSafety");function $o(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}i($o,"ambientForbiddenGlobal");function mr(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return Rt(e,n.length>0?n:ht.map(r=>({name:r.layer,prefixes:r.prefixes})))}i(mr,"intentLayer");function To(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(o=>[o.name,o]));for(let o of t.ambientUses){let a=n.get(o.file);!a||!$o(o.symbol,s.get(a)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,message:`${a} must not use the ambient global "${o.symbol}".`})}for(let o of t.capabilityUses){let a=n.get(o.file);if(!a)continue;let d=s.get(a),l=d?.forbiddenGlobals??[],p=o.source==="import-based"?t.dependencies.find(h=>h.from===o.file&&h.line===o.line&&h.specifier===o.symbol&&!h.typeOnly)?.kind:void 0;if(!(o.source==="ambient-global"&&pt(o.symbol,l))){if(o.source==="import-based"){let h=Fe(o.symbol,l);if(h){r.push({ruleId:"FORBIDDEN_GLOBAL",file:o.file,line:o.line,fromLayer:a,target:o.symbol,...p?{edgeKind:p}:{},message:`${a} must not use module "${o.symbol}" because it is the import form of forbidden global "${h}".`});continue}}Ie(d).includes(o.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:o.file,line:o.line,fromLayer:a,target:o.symbol,capability:o.capability,...p?{edgeKind:p}:{},message:o.source==="import-based"?`${a} denies the ${o.capability} capability; found import of "${o.symbol}".`:`${a} denies the ${o.capability} capability; found ambient "${o.symbol}".`})}}for(let o of t.publishCalls){let a=n.get(o.file);if(!a)continue;for(let l of At({publishCall:!0,rawIntentName:o.rawIntentName,objectHasIntent:o.objectHasIntent,arkPublishCandidate:o.arkPublishCandidate,hasSource:o.hasSource}))r.push({ruleId:l.ruleId,file:o.file,line:o.line,...l.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:a}:{},message:l.message});if(!o.sourceIntent)continue;let d=mr(o.sourceIntent,e.contract);!d||d===a||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.sourceIntent,message:`Publish source "${o.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${a}.`})}for(let o of t.intentReferences){let a=n.get(o.file);if(!a)continue;let d=mr(o.intent,e.contract);if(!d)continue;let l=Pe(e.contract.config.rules,a,d,{fromPath:o.file,layers:e.contract.config.layers});if(!l)continue;let p=l.rule.peerIsolation?Je(l.peerIsolationReason??"cross-slice",{fromPath:o.file,fromSlice:l.fromSlice,toSlice:l.toSlice}):void 0,h=`${a} must not reference ${d} intent ${o.intent}.`,A=p&&l.peerIsolationReason!=="cross-slice"?`${h} ${p}`:l.rule.message?p?`${l.rule.message} (${p})`:l.rule.message:h;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:o.file,line:o.line,fromLayer:a,toLayer:d,target:o.intent,...l.rule.peerIsolation?{peerIsolation:!0}:{},message:A})}return r}i(To,"contentViolations");function $t(e){let{facts:t}=e,n=ze(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",o=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((m,q)=>{let _e=`${m.code}\0${m.file??""}\0${m.message}`,$e=`${q.code}\0${q.file??""}\0${q.message}`;return _e<$e?-1:_e>$e?1:0}),a=t.files.map(m=>({...m,layer:Q(m.path,e.contract.config.layers)??null})),d=new Map(a.map(m=>[m.path,m.layer])),l=t.dependencies.map(m=>{let q=m.target?d.get(m.target)??Q(m.target,e.contract.config.layers):void 0;return{from:m.from,fromLayer:d.get(m.from)??null,...m.resolution==="resolved-project"&&m.target?{to:m.target,...q?{toLayer:q}:{}}:{},line:m.line,kind:m.kind,typeOnly:m.typeOnly,...m.targetTypeOnlyExports?{targetTypeOnlyExports:m.targetTypeOnlyExports}:{},...m.sourcePureTypeModule?{sourcePureTypeModule:m.sourcePureTypeModule}:{},...m.namedBindingsTypeOnly?{namedBindingsTypeOnly:m.namedBindingsTypeOnly}:{},...m.portProofEligible?{portProofEligible:m.portProofEligible}:{}}}),p=_t({config:e.contract.config,rules:e.contract.config.rules,files:a.map(m=>m.path)}),h=_o(e,t),A=e.contract.arkRules??Le(),u=a.map(m=>m.path),c={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?Sn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=i(m=>d.get(m)??Q(m,e.contract.config.layers),"resolveLayer"),k=[...vn({arkRules:A,classShapes:e.contract.classShapes??t.classShapes??[],files:u,layerForFile:y,fileHints:c}),...In(A,u),...En({arkRulesActive:Oo(e.contract.config),arkRules:A,layers:e.contract.config.layers??[],files:u.map(m=>({path:m,layer:y(m)}))})],E=(A.invariants?.length??0)>0,I=Ln({hasEnforcedInvariant:Et(A.invariants),coverage:e.contract.config.coverage,...e.coverageRootsPresent===!1?{declaredPathPresent:!1}:{}}),O=I.length>0?[]:Pn({adopted:e.adopted===!0,hasDomainInvariants:It(A.invariants),coverage:e.contract.config.coverage,...e.invariantTestsPathPresent===!1?{declaredPathPresent:!1}:{}}),$=[...I.map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,nextAction:"Add coverage.coverageRoots in ark.config.json pointing at the folder the test runner uses, then re-run. An enforced invariant fails closed until that path is present.",failsStrict:!0,freezable:!1})),...O.map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,nextAction:"Add coverage.testGlobs or coverage.coverageRoots in ark.config.json pointing at a real tests folder, then re-run. Adopted mode fails closed until that path is present.",failsStrict:!0,freezable:!1}))],W=k.filter(m=>m.failsStrict).map(m=>pr(m,gr(m,!1))),b=k.filter(m=>!m.failsStrict).map(m=>({...pr(m,gr(m,!0)),failsStrict:!1})),T=E?Fn({arkRules:A,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},we=T.violations.filter(m=>m.failsStrict).map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,arkruleId:m.arkruleId,arkruleSource:m.arkruleSource,nextAction:`Add a test title or declared symbol covering ${m.arkruleId} (declared in ${m.arkruleSource}), then preflight again.`})),ge=T.violations.filter(m=>!m.failsStrict).map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,arkruleId:m.arkruleId,arkruleSource:m.arkruleSource,failsStrict:!1,nextAction:m.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${m.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${m.arkruleId} in ${m.arkruleSource} (advisory / partial).`})),Ge=Dn(a),se=Gn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:i(m=>d.get(m)??Q(m,e.contract.config.layers),"layerForFile"),classification:Ge}),re=e.contract.config.arkRun?.mode,me=se.findings.filter(()=>re==="enforced").map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,target:m.target,nextAction:m.nextAction,sensor:m.sensor,failsStrict:m.failsStrict,...m.severity?{severity:m.severity}:{}})),Oe=se.findings.filter(()=>re!=="enforced").map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,target:m.target,nextAction:m.nextAction,sensor:m.sensor,failsStrict:!1})),ke=Yn({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:i(m=>d.get(m)??Q(m,e.contract.config.layers),"layerForFile"),classification:Ge}),xe=e.contract.config.arkOrder?.mode,Be=ke.findings.filter(()=>xe==="enforced").map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,target:m.target,nextAction:m.nextAction,sensor:m.sensor,failsStrict:m.failsStrict,...m.severity?{severity:m.severity}:{}})),Gt=ke.findings.filter(()=>xe!=="enforced").map(m=>({ruleId:m.ruleId,file:m.file,line:m.line,message:m.message,fromLayer:m.fromLayer,target:m.target,nextAction:m.nextAction,sensor:m.sensor,failsStrict:!1})),v=[...T.partial&&T.coverage.some(m=>m.mode==="enforced"&&m.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...se.completenessReasons,...ke.completenessReasons],S=He({config:e.contract.config,rules:e.contract.config.rules,files:a.filter(m=>m.layer).map(m=>m.path),contentViolations:[...To(e,t,d),...W,...$,...we,...me,...Be],edges:l,warnings:[...p,...h.warnings,...b,...ge,...Oe,...Gt],safety:h.report}),g=s==="complete"&&v.length>0?"partial":s,R=g==="complete"?o:[...o,...v].sort((m,q)=>{let _e=`${m.code}\0${m.file??""}\0${m.message}`,$e=`${q.code}\0${q.file??""}\0${q.message}`;return _e<$e?-1:_e>$e?1:0}),x=S.violations.filter(m=>m.failsStrict!==!1),U=g==="complete"&&x.length===0,de=U&&S.warnings.every(m=>m.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:g,completenessReasons:R,valid:U,strictValid:de,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:h.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:a,layers:e.contract.config.layers.map(m=>m.name),edges:l,capabilityUses:t.capabilityUses,violations:S.violations,warnings:S.warnings}}}i($t,"analyzeCanonicalResolvedProject");function st(e){return $t({contract:e.contract,facts:ye(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints,adopted:e.adopted,invariantTestsPathPresent:e.invariantTestsPathPresent,coverageRootsPresent:e.coverageRootsPresent})}i(st,"analyzeResolvedProject");var Tt="1.0";var ot=class extends Error{static{i(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
 ${n.map(r=>`- ${r.path}: ${r.message}`).join(`
-`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Tt(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Tt,"isObject");function $t(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}i($t,"unknownFields");function ye(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}i(ye,"requiredString");function Ao(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Ao,"canonicalProjectPath");function ko(e,t,n="architecture change map"){let r=[];if(!Tt(e))throw new rt(n,[{path:"$",message:"must be an object"}]);$t(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=ye(e,"$schema","$",r),o=ye(e,"schemaVersion","$",r);o&&o!==_t&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(o)}; expected ${_t}`});let a=new Set(t.layers.map(c=>c.name)),d=[],l=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((c,y)=>{let k=`$.files[${y}]`;if(!Tt(c)){r.push({path:k,message:"must be an object"});return}$t(c,["path","operation","layer"],k,r);let I=ye(c,"path",k,r),E=ye(c,"operation",k,r),w=ye(c,"layer",k,r),$=I?Ao(I):void 0;I&&!$&&r.push({path:`${k}.path`,message:"must be a canonical project-relative path"}),E&&!["create","update","delete"].includes(E)&&r.push({path:`${k}.operation`,message:"must be create, update, or delete"}),w&&!a.has(w)&&r.push({path:`${k}.layer`,message:`references unknown layer ${JSON.stringify(w)}`}),$&&l.has($)&&r.push({path:`${k}.path`,message:`duplicates planned path ${$}`}),$&&l.add($);let te=$?Q($,t.layers):void 0;$&&w&&a.has(w)&&te!==w&&r.push({path:`${k}.layer`,message:te?`${$} resolves to ${te}, not ${w}`:`${$} is not assigned to an architecture layer`}),$&&E&&["create","update","delete"].includes(E)&&w&&d.push({path:$,operation:E,layer:w})});let g=[],R=new Map(d.map(c=>[c.path,c.operation])),A=new Set,u=e.dependencies??[];if(Array.isArray(u)?u.forEach((c,y)=>{let k=`$.dependencies[${y}]`;if(!Tt(c)){r.push({path:k,message:"must be an object"});return}$t(c,["from","to"],k,r);let I=ye(c,"from",k,r),E=ye(c,"to",k,r);I&&!l.has(I)&&r.push({path:`${k}.from`,message:`must reference a planned file path: ${I}`}),E&&!l.has(E)&&r.push({path:`${k}.to`,message:`must reference a planned file path: ${E}`}),I&&R.get(I)==="delete"&&r.push({path:`${k}.from`,message:`cannot depend from deleted file ${I}`}),E&&R.get(E)==="delete"&&r.push({path:`${k}.to`,message:`cannot depend on deleted file ${E}`}),I&&E&&I===E&&r.push({path:k,message:"must not declare a self dependency"});let w=I&&E?`${I}\0${E}`:void 0;w&&A.has(w)&&r.push({path:k,message:`duplicates dependency ${I} -> ${E}`}),w&&A.add(w),I&&E&&g.push({from:I,to:E})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new rt(n,r);let m={$schema:s,schemaVersion:_t,files:d.sort((c,y)=>c.path.localeCompare(y.path)),dependencies:g.sort((c,y)=>c.from.localeCompare(y.from)||c.to.localeCompare(y.to))};return{map:m,hash:j(N(m))}}i(ko,"loadArchitectureChangeMap");function X(e){return`${e.from}->${e.to}`}i(X,"dependencyKey");function Me(e,t,n,r="dependency"){return{id:`${e}:${r}:${X(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${X(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${X(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${X(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${X(t)} from the candidate, then preflight again.`}:{}}}i(Me,"dependencyFinding");function He(e){let t=[],n=new Map(e.changeMap.map.files.map(u=>[u.path,u])),r=new Map(e.changes.map(u=>[u.path,u])),s=new Map(e.changeMap.map.dependencies.map(u=>[X(u),u])),o=new Map(e.baseDependencies.map(u=>[X(u),u])),a=new Map(e.candidateDependencies.map(u=>[X(u),u]));for(let u of[...n.values()].sort((m,c)=>m.path.localeCompare(c.path))){let m=r.get(u.path);m?m.operation!==u.operation?t.push({id:`contradictory:file:${u.path}`,classification:"contradictory",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} was planned as ${u.operation} but the actual operation is ${m.operation}.`,nextAction:`Change ${u.path} to the planned ${u.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${u.path}`,classification:"satisfied",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:m.operation,message:`${u.path} matches the planned ${u.operation} operation.`}):t.push({id:`missing:file:${u.path}`,classification:"missing",subject:"file",path:u.path,expectedOperation:u.operation,message:`${u.path} was planned as ${u.operation} but is absent from the actual change.`,nextAction:`${u.operation[0].toUpperCase()}${u.operation.slice(1)} ${u.path} in the complete change set, then preflight again.`})}for(let u of[...r.values()].sort((m,c)=>m.path.localeCompare(c.path)))n.has(u.path)||t.push({id:`unplanned:file:${u.path}`,classification:"unplanned",subject:"file",path:u.path,actualOperation:u.operation,message:`${u.path} has an unplanned ${u.operation} operation.`,nextAction:`Remove ${u.path} from the change set, then preflight again.`});let d=new Set;for(let u of[...s.values()].sort((m,c)=>X(m).localeCompare(X(c)))){if(a.has(X(u))){t.push(Me("satisfied",u,`${u.from} -> ${u.to} exists in the candidate architecture.`));continue}let m={from:u.to,to:u.from};a.has(X(m))?(d.add(X(m)),t.push(Me("contradictory",u,`${u.from} -> ${u.to} was planned, but the candidate contains the reverse edge.`))):t.push(Me("missing",u,`${u.from} -> ${u.to} is absent from the candidate architecture.`))}let l=new Set([...n.keys(),...r.keys()]);for(let[u,m]of[...a].sort(([c],[y])=>c.localeCompare(y)))o.has(u)||s.has(u)||d.has(u)||!l.has(m.from)&&!l.has(m.to)||t.push({...Me("unplanned",m,`${m.from} -> ${m.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let g=new Set(e.changeMap.map.files.filter(u=>u.operation==="delete").map(u=>u.path));for(let[u,m]of[...o].sort(([c],[y])=>c.localeCompare(y)))a.has(u)||g.has(m.from)||g.has(m.to)||!l.has(m.from)&&!l.has(m.to)||t.push({...Me("unplanned",m,`${m.from} -> ${m.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let R={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((u,m)=>R[u.classification]-R[m.classification]||(u.subject===m.subject?0:u.subject==="file"?-1:1)||u.id.localeCompare(m.id));let A={satisfied:t.filter(u=>u.classification==="satisfied").length,missing:t.filter(u=>u.classification==="missing").length,contradictory:t.filter(u=>u.classification==="contradictory").length,unplanned:t.filter(u=>u.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:A.missing===0&&A.contradictory===0&&A.unplanned===0,behavioralCompletion:"not-evaluated",summary:A,findings:t}}i(He,"analyzeArchitectureConvergence");function Ce(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}i(Ce,"literalText");function cr(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}i(cr,"lineOf");function ir(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(o=>o.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}i(ir,"isTypeOnlyReference");function dr(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}i(dr,"singleFileChecker");function Ft(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}i(Ft,"symbolAt");function Nt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,o;try{o=s?t.getShorthandAssignmentValueSymbol(r.parent):Ft(t,r)}catch{o=void 0}return!!o?.declarations?.some(a=>a.getSourceFile().fileName===n.fileName)}i(Nt,"localDeclaration");function Pt(e,t){let n,r=[],s=i((a,d,l,g=!1)=>r.push({specifier:l,kind:d,line:cr(t,a),typeOnly:g,unresolved:l===void 0,node:a}),"add"),o=i(a=>{if(e.isImportDeclaration(a))s(a,"import",Ce(e,a.moduleSpecifier),ir(e,a));else if(e.isExportDeclaration(a)&&a.moduleSpecifier)s(a,"export",Ce(e,a.moduleSpecifier),ir(e,a));else if(e.isImportEqualsDeclaration(a)&&e.isExternalModuleReference(a.moduleReference))s(a,"require",Ce(e,a.moduleReference.expression),a.isTypeOnly===!0);else if(e.isCallExpression(a)){let d=a.expression.kind===e.SyntaxKind.ImportKeyword,g=e.isIdentifier(a.expression)&&a.expression.text==="require"&&!Nt(e,n??(n=dr(e,t)),t,a.expression);(d||g)&&s(a,g?"require":"dynamic-import",Ce(e,a.arguments[0]))}e.forEachChild(a,o)},"visit");return o(t),r}i(Pt,"extractSemanticDependencies");function bo(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Ce(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}i(bo,"staticAccessPath");function vo(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}i(vo,"runtimeIdentifierReference");function lr(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}i(lr,"bestForbiddenMatch");function Lt(e,t,n){if(n.length===0)return[];let r=new Set(n),s=dr(e,t),o=new Map,a=new Set;for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations)e.isIdentifier(m.name)&&a.add(m.name.text);let d=i(u=>{let m=bo(e,u);if(!m)return;let c=Ft(s,m.root),y=c?o.get(c):void 0;return y?[...y,...m.segments.slice(1)]:Nt(e,s,t,m.root)||a.has(m.root.text)?void 0:m.segments},"resolvePath");for(let u of t.statements)if(e.isVariableStatement(u))for(let m of u.declarationList.declarations){if(!m.initializer||!e.isIdentifier(m.name))continue;let c=d(m.initializer),y=Ft(s,m.name);!c||!y||o.set(y,c)}let l=[],g=new Set,R=i((u,m)=>{let c=cr(t,m),y=`${u}:${m.getStart(t)}`;g.has(y)||(g.add(y),l.push({name:u,line:c,node:m}))},"flag"),A=i(u=>{let m=u.parent&&(e.isPropertyAccessExpression(u.parent)||e.isElementAccessExpression(u.parent))&&u.parent.expression===u;if((e.isPropertyAccessExpression(u)||e.isElementAccessExpression(u))&&!m){let c=d(u),y=c?lr(r,c):void 0;y&&R(y,u)}else e.isIdentifier(u)&&r.has(u.text)&&vo(e,u)&&!Nt(e,s,t,u)&&R(u.text,u);if(e.isVariableDeclaration(u)&&e.isObjectBindingPattern(u.name)&&u.initializer){let c=d(u.initializer);if(c)for(let y of u.name.elements){if(!e.isIdentifier(y.name))continue;let k=y.propertyName?Ce(e,y.propertyName)??y.propertyName.text:y.name.text,I=lr(r,[...c,k]);I&&R(I,u.initializer)}}e.forEachChild(u,A)},"visit");return A(t),l}i(Lt,"collectForbiddenCapabilityUses");function Eo(e,t,n){let r=[];for(let s of n?.dependencies??Pt(e,t)){if(s.typeOnly||!s.specifier)continue;let o=_e(s.specifier);o&&r.push({capability:o,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Lt(e,t,ut)){let o=$e(s.name);o&&r.push({capability:o,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,o)=>s.line-o.line||s.capability.localeCompare(o.capability)||s.symbol.localeCompare(o.symbol))}i(Eo,"collectCapabilityUses");function Dt(e){return{...e,layers:e.layers.map(t=>{let{description:n,trustBoundary:r,owners:s,...o}=t;return o})}}i(Dt,"omitLayerDescriptions");function ur(e){let{stewards:t,...n}=Dt(e.config);return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}i(ur,"effectiveContractPolicyPayload");var yr="1.0",Io="add a short note under docs/adr/ (or docs/decisions/) and put that file path in --policy-ack as adrPath.";function C(e,t){let n=t.classification==="weakening"||t.classification==="judgment-required"?`Restore the previous protection at ${t.path}, or ${Io}`:void 0,r=t.nextAction??n;e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...r?{nextAction:r}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}i(C,"addFinding");function G(e){return[...new Set(e??[])].sort()}i(G,"sortedUnique");function re(e,t,n,r,s){let o=G(n),a=G(r),d=new Set(o),l=new Set(a),g=a.filter(A=>!d.has(A)),R=o.filter(A=>!l.has(A));g.length===0&&R.length===0||(g.length>0&&C(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:o,after:a}),R.length>0&&C(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:o,after:a}))}i(re,"compareStringSets");function Ke(e,t,n,r,s,o,a){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?o:a,before:n,after:r})}i(Ke,"compareBoolean");function st(e,t){let n=new Map,r=new Set;for(let s of e){let o=t(s);n.has(o)?r.add(o):n.set(o,s)}return{values:n,duplicates:[...r].sort()}}i(st,"keyed");function So(e,t,n){let r=st(t,o=>o.name),s=st(n,o=>o.name);(r.duplicates.length>0||s.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let o of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let a=r.values.get(o),d=s.values.get(o),l=`$.layers[${o}]`;if(!a&&d){C(e,{kind:"layer-added",path:l,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new layer and put that file path in --policy-ack as adrPath.",after:d});continue}if(a&&!d){C(e,{kind:"layer-removed",path:l,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:a});continue}if(!a||!d)continue;re(e,`${l}.patterns`,a.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),re(e,`${l}.exclude`,a.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let g=We(a),R=We(d);re(e,`${l}.forbiddenGlobals`,g.rawGlobals,R.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),re(e,`${l}.capabilities`,g.atoms,R.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),G(a.intentPrefixes).join("\0")!==G(d.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${l}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:G(a.intentPrefixes),after:G(d.intentPrefixes)}),Ke(e,`${l}.mayImportInfrastructure`,a.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Ke(e,`${l}.optional`,a.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}i(So,"compareLayers");function Co(e,t,n){let r=i(a=>`${a.from}->${a.to}`,"keyOf"),s=st(t,r),o=st(n,r);(s.duplicates.length>0||o.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:o.duplicates});for(let a of[...new Set([...s.values.keys(),...o.values.keys()])].sort()){let d=s.values.get(a),l=o.values.get(a),g=`$.rules[${a}]`;if(!d&&l){l.allowed===!1?C(e,{kind:"deny-added",path:g,classification:"strengthening",message:"A denied dependency edge was added.",after:l}):C(e,{kind:"allow-added",path:g,classification:"judgment-required",message:"A new import edge was added; confirm this house should import that one.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new import edge and put that file path in --policy-ack as adrPath.",after:l});continue}if(d&&!l){d.allowed===!1&&C(e,{kind:"deny-removed",path:g,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!l)continue;d.allowed!==l.allowed&&C(e,{kind:l.allowed?"deny-disabled":"deny-enabled",path:`${g}.allowed`,classification:l.allowed?"weakening":"strengthening",message:l.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:l.allowed});let R=d.peerIsolation===!0,A=l.peerIsolation===!0;if(R!==A){let u=d.from===d.to&&l.from===l.to;C(e,{kind:A?"peer-isolation-enabled":"peer-isolation-disabled",path:`${g}.peerIsolation`,classification:u?A?"strengthening":"weakening":"judgment-required",message:u?A?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:R,after:A})}if(G(d.sliceFolders).join("\0")!==G(l.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${g}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:G(d.sliceFolders),after:G(l.sliceFolders)}),!(!R&&!A)&&(pr(e,`${g}.sharedRoots`,"shared-roots",G(d.sharedRoots),G(l.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),pr(e,`${g}.allowedCrossSlice`,"cross-slice-allowance",G((d.allowedCrossSlice??[]).map(fr)),G((l.allowedCrossSlice??[]).map(fr)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."),(d.sharedImportsSlice??null)!==(l.sharedImportsSlice??null))){let u=l.sharedImportsSlice==="deny";C(e,{kind:"shared-imports-slice",path:`${g}.sharedImportsSlice`,classification:u?"strengthening":"weakening",message:u?"A shared root may no longer import a slice.":"A shared root may import a slice again.",before:d.sharedImportsSlice??null,after:l.sharedImportsSlice??null})}}}i(Co,"compareRules");function fr(e){return JSON.stringify([e.from,e.to])}i(fr,"crossSliceKey");function pr(e,t,n,r,s,o,a){if(JSON.stringify(r)===JSON.stringify(s))return;let d=s.filter(R=>!r.includes(R)),l=r.filter(R=>!s.includes(R)),g=d.length>0&&l.length>0;C(e,{kind:g?`${n}-changed`:d.length>0?`${n}-added`:`${n}-removed`,path:t,classification:g?"judgment-required":d.length>0?"weakening":"strengthening",message:g?`${o} Entries were added and removed in the same change.`:d.length>0?o:a,before:r,after:s})}i(pr,"compareDeclaredExceptions");function wo(e,t,n){let r=t.safety??{},s=n.safety??{};for(let o of["maxTsSuppressions","maxAnyCasts"]){let a=r[o]??0,d=s[o]??0;a!==d&&C(e,{kind:d>a?"threshold-raised":"threshold-lowered",path:`$.safety.${o}`,classification:d>a?"weakening":"strengthening",message:d>a?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:a,after:d})}for(let o of["allowInMemory","allowDisabledPeerIsolation"])Ke(e,`$.safety.${o}`,r[o]===!0,s[o]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}i(wo,"compareSafety");function Mt(e){return e.mode==="enforced"?"enforced":"advisory"}i(Mt,"arkRunMode");function Ht(e){return e.mode==="enforced"?"enforced":"advisory"}i(Ht,"arkOrderMode");function Oo(e,t,n){let r=t.arkOrder,s=n.arkOrder,o="$.arkOrder";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkorder-added",path:o,classification:"strengthening",message:`ArkOrder extra was added (${Ht(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkorder-removed",path:o,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let a=Ht(r),d=Ht(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkorder-promoted":"arkorder-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:a,after:d})}re(e,`${o}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),re(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}i(Oo,"compareArkOrder");function xo(e,t,n){let r=t.arkRun,s=n.arkRun,o="$.arkRun";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkrun-added",path:o,classification:"strengthening",message:`ArkRun extra was added (${Mt(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkrun-removed",path:o,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let a=Mt(r),d=Mt(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkrun-promoted":"arkrun-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:a,after:d})}re(e,`${o}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),re(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Ke(e,`${o}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}i(xo,"compareArkRun");function _o(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}i(_o,"overallClassification");function gr(e,t){return`${e}::${t}`}i(gr,"ruleKey");function mr(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(gr(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(gr(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}i(mr,"indexEffectiveRules");function To(e,t,n,r,s,o){let a=new Map((o??[]).map(u=>[u.invariantId,u])),d=t.arkRules??{},l=n.arkRules??{},g=[...new Set([...Object.keys(d),...Object.keys(l)])].sort();for(let u of g){let m=d[u],c=l[u],y=`$.arkRules[${u}]`;if(m===void 0&&c!==void 0){C(e,{kind:"arkrules-ref-added",path:y,classification:"strengthening",message:`ArkRules reference for layer ${u} was added.`,after:c});continue}if(m!==void 0&&c===void 0){C(e,{kind:"arkrules-ref-removed",path:y,classification:"weakening",message:`ArkRules reference for layer ${u} was removed.`,before:m});continue}m!==c&&C(e,{kind:"arkrules-ref-path-changed",path:y,classification:"judgment-required",message:`ArkRules file path for layer ${u} changed; verify the effective rules still match intent.`,before:m,after:c})}let R=mr(r),A=mr(s);for(let u of[...new Set([...R.structure.keys(),...A.structure.keys()])].sort()){let m=R.structure.get(u),c=A.structure.get(u),y=`$.arkRules.structure[${u}]`;if(!m&&c){C(e,{kind:"arkrule-structure-added",path:y,classification:"strengthening",message:`Structure ArkRule ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){C(e,{kind:"arkrule-structure-removed",path:y,classification:"weakening",message:`Structure ArkRule ${m.id} was removed.`,before:m});continue}if(!(!m||!c)){if(m.mode!==c.mode){let k=m.mode==="advisory"&&c.mode==="enforced";C(e,{kind:k?"arkrule-promoted":"arkrule-demoted",path:`${y}.mode`,classification:k?"strengthening":"weakening",message:k?`Structure ArkRule ${c.id} was promoted to enforced.`:`Structure ArkRule ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}m.sensor!==c.sensor&&C(e,{kind:"arkrule-sensor-changed",path:`${y}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${c.id} changed sensor identity.`,before:m.sensor,after:c.sensor})}}for(let u of[...new Set([...R.invariants.keys(),...A.invariants.keys()])].sort()){let m=R.invariants.get(u),c=A.invariants.get(u),y=`$.arkRules.invariants[${u}]`;if(!m&&c){C(e,{kind:"arkrule-invariant-added",path:y,classification:"strengthening",message:`Invariant ${c.id} was added (${c.mode}).`,after:c});continue}if(m&&!c){C(e,{kind:"arkrule-invariant-removed",path:y,classification:"weakening",message:`Invariant ${m.id} was removed.`,before:m});continue}if(!(!m||!c)&&m.mode!==c.mode)if(m.mode==="advisory"&&c.mode==="enforced"){let I=a?.get(c.id),E=Sn(I);E.ok?C(e,{kind:"arkrule-invariant-promoted",path:`${y}.mode`,classification:"strengthening",message:`Invariant ${c.id} was promoted to enforced (coverage evidence present).`,before:m.mode,after:c.mode}):C(e,{kind:"arkrule-invariant-promote-refused",path:`${y}.mode`,classification:"judgment-required",message:`Invariant ${c.id} cannot be promoted to enforced: ${E.reason}`,before:m.mode,after:c.mode})}else C(e,{kind:"arkrule-invariant-demoted",path:`${y}.mode`,classification:"weakening",message:`Invariant ${c.id} was demoted to advisory.`,before:m.mode,after:c.mode})}}i(To,"compareArkRules");function hr(e,t,n){let r=[];re(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),re(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),re(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Ke(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},o=e.cyclePolicy??"strict",a=t.cyclePolicy??"strict";if(o!==a){let d=s[a]===s[o]?"judgment-required":s[a]>s[o]?"strengthening":"weakening";C(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:o,after:a})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),So(r,e.layers,t.layers),Co(r,e.rules,t.rules),wo(r,e,t),To(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),xo(r,e,t),Oo(r,e,t),r.sort((d,l)=>d.path.localeCompare(l.path)||d.id.localeCompare(l.id)),{schemaVersion:yr,classification:_o(r),findings:r}}i(hr,"classifyArkPolicyDelta");function Rr(e,t){if(!e||e.schemaVersion!==yr||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=G(e.findingIds),r=G(t.findingIds);return n.length===r.length&&n.every((s,o)=>s===r[o])}i(Rr,"policyDeltaAcknowledgementMatches");function he(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}i(he,"normalizePath");function Ar(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}i(Ar,"isIdentifierStart");function ot(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}i(ot,"isIdentifierCharacter");function Z(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}i(Z,"skipWhitespace");function Ue(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let o=e[t];if(o===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};o==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=o}}i(Ue,"readString");function ee(e,t,n){return e.startsWith(t,n)&&!ot(e[n-1])&&!ot(e[n+t.length])}i(ee,"isWordAt");function kr(e,t){let n=Z(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=Z(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!ee(e,"type",n))return!1;let s=Z(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||ee(e,"as",s)||!Ar(e[s]))return!1;for(n=s;n<e.length&&ot(e[n]);)n+=1;if(n=Z(e,n),ee(e,"as",n)){if(n=Z(e,n+2),!Ar(e[n]))return!1;for(;n<e.length&&ot(e[n]);)n+=1}r=!0}return!1}i(kr,"bracedNamedBindingsAreTypeOnly");function $o(e,t){if(t=Z(e,t+6),e[t]==="(")return Ue(e,Z(e,t+1));let n=!1;if(ee(e,"type",t)){let s=Z(e,t+4);e[s]!==","&&!ee(e,"from",s)&&(n=!0)}else kr(e,t)&&(n=!0);let r=br(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}i($o,"specifierAfterImport");function Fo(e,t){t=t+6;let n=Z(e,t),r=!1;if(ee(e,"type",n)){let o=Z(e,n+4);(e[o]==="{"||e[o]==="*")&&(r=!0)}else kr(e,n)&&(r=!0);let s=br(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}i(Fo,"specifierAfterExport");function br(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(ee(e,"from",t))return Ue(e,Z(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return Ue(e,t);if(t>0&&(ee(e,"import",t)||ee(e,"export",t)))return}}i(br,"specifierInStaticStatement");function No(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}i(No,"skipTemplateLiteral");function Po(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=Z(e,t+7);if(e[r]!=="(")return;r=Z(e,r+1);let s=Ue(e,r);return s?{...s,requireCall:!0}:void 0}i(Po,"specifierAfterRequire");function Lo(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
-`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let o=e.indexOf("*/",n+2);if(o<0)break;n=o+1;continue}if(r==="`"){n=No(e,n);continue}if(r==="'"||r==='"'){let o=Ue(e,n);o&&(n=o.offset+o.excerpt.length-1);continue}let s=r==="i"&&ee(e,"import",n)?$o(e,n):r==="e"&&ee(e,"export",n)?Fo(e,n):r==="r"&&ee(e,"require",n)?Po(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}i(Lo,"moduleSpecifiers");function vr(e,t){let n=[],r=[];for(let s of Lo(e.content)){let o=s.value;if(!o.startsWith(".")){if(s.typeOnly)continue;let g=_e(o);if(!g)continue;let R=e.content.slice(0,s.offset).split(`
-`).length;r.push({file:e.path,symbol:o,capability:g,evidence:{kind:"import",file:e.path,line:R,excerpt:s.excerpt}});continue}let a=e.content.slice(0,s.offset).split(`
-`).length,d={kind:"import",file:e.path,line:a,excerpt:s.excerpt},l=Do(e.path,o,t);n.push({from:e.path,specifier:o,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:d})}return{edges:n,capabilityUses:r}}i(vr,"moduleFactsFor");function Do(e,t,n){let r=e.split("/");r.pop();for(let o of t.split("/"))o==="."||o===""||(o===".."?r.pop():r.push(o));let s=r.join("/");for(let o of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let a=n.get(o);if(a)return a}}i(Do,"resolveSpecifier");function Er(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=sn(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}i(Er,"violationsFor");var Mo={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function Ho(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}i(Ho,"hasActiveArkRules");function Ko(e,t){return Ho(e,t)?j(N(ur({config:e,arkRules:t,warnings:[]}))):j(N(Dt(e)))}i(Ko,"policyHashFor");function Kt(e,t,n){let r=typeof e=="string"?nr(e,t):wt(e,t),s=n?.arkRules??Ne();return{...r,arkRules:s,policyHash:Ko(r.config,s)}}i(Kt,"loadContract");function Uo(e){let t=Kt(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=Kt(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=hr(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),o=s.length>0,a=o&&Rr(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:o,acknowledged:a,valid:!o||a}}i(Uo,"analyzePolicyDelta");function at(e){let t=e.files.map(A=>{let u=he(A.path);return{path:u,content:A.content,contentHash:j(A.content),layer:Q(u,e.contract.config.layers)??null}}).sort((A,u)=>A.path.localeCompare(u.path)),n=new Map(t.map(A=>[A.path,A])),r=[],s=[];for(let A of t){let u=vr(A,n);r.push(...u.edges),s.push(...u.capabilityUses)}let o=Er(r,e.contract.config),a=new Map(e.contract.config.layers.map(A=>[A.name,A])),d=new Map(e.contract.config.layers.map(A=>[A.name,new Set(Ee(A))]));for(let A of s){let u=n.get(A.file)?.layer;if(!u)continue;let m=a.get(u),c=Te(A.symbol,m?.forbiddenGlobals??[]);if(c){o.push({ruleId:"FORBIDDEN_GLOBAL",message:`${u} must not use module "${A.symbol}" because it is the import form of forbidden global "${c}".`,symbol:A.symbol,evidence:A.evidence});continue}d.get(u)?.has(A.capability)&&o.push({ruleId:"CAPABILITY_VIOLATION",message:`${u} denies the ${A.capability} capability; found import of "${A.symbol}".`,capability:A.capability,symbol:A.symbol,evidence:A.evidence})}let l=t.length===0?"complete":"partial",g=l==="complete"?[]:[{...Mo}],R={schemaVersion:Xt,policyHash:e.contract.policyHash,compilerOptionsHash:j(N(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(A=>A.name),edges:r,capabilityUses:s,violations:o};return{mode:"lexical-compatibility",completeness:l,completenessReasons:g,valid:l==="complete"&&o.length===0,ir:R}}i(at,"analyzeProject");function Ut(e){let t=new Map(e.files.map(n=>[he(n.path),n]));for(let n of e.changes){let r=he(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return at({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}i(Ut,"analyzeChange");function jo(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}i(jo,"explainViolation");function Ir(e){return j(N(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}i(Ir,"analysisTreeHash");function Vo(e){let t=at(e),n=new Map(t.ir.files.map(c=>[c.path,c])),r=[],s=new Set,o=[];for(let c of e.changes){let y=c.path.replace(/\\/g,"/"),k=he(c.path);if(!k||k===".."||k.startsWith("../")||y.startsWith("/")||/^[A-Za-z]:\//.test(y)||y.includes("\0")){o.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(k)){o.push({ruleId:"DUPLICATE_CHANGE_PATH",file:k,line:1,message:`The atomic change set contains more than one operation for ${k}.`});continue}s.add(k),"delete"in c&&c.delete&&!n.has(k)&&o.push({ruleId:"DELETE_TARGET_MISSING",file:k,line:1,message:`Cannot delete ${k} because it is not present in the supplied base tree.`}),r.push("delete"in c&&c.delete?{path:k,delete:!0}:{path:k,content:"content"in c?c.content:""})}e.changes.length===0&&o.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let a=Ut({...e,changes:r}),d=new Map(a.ir.files.map(c=>[c.path,c])),l=a.ir.violations.filter(c=>c.ruleId==="CAPABILITY_VIOLATION"||c.ruleId==="FORBIDDEN_GLOBAL").map(c=>{let y=d.get(c.evidence.file)?.layer;return{ruleId:c.ruleId,file:c.evidence.file,line:c.evidence.line,target:c.symbol,...c.capability?{capability:c.capability}:{},...y?{fromLayer:y}:{},edgeKind:"import",message:c.message}}),g=De({config:e.contract.config,rules:e.contract.config.rules,files:a.ir.files.map(c=>c.path),contentViolations:l,edges:a.ir.edges.filter(c=>!!c.fromLayer).map(c=>({from:c.from,fromLayer:c.fromLayer,...c.to?{to:c.to}:{},...c.toLayer?{toLayer:c.toLayer}:{},line:c.evidence.line,kind:"import",...c.typeOnly?{typeOnly:!0}:{},...c.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),R=r.map(c=>{let y=he(c.path),k=n.get(y),I=d.get(y);return{path:y,operation:"delete"in c&&c.delete?"delete":k?"update":"create",...k?{beforeContentHash:k.contentHash}:{},...I?{candidateContentHash:I.contentHash}:{}}}).sort((c,y)=>c.path.localeCompare(y.path)),A=[...o,...g.violations].map(c=>({...c,nextAction:fe(c)})),u=A.filter(c=>c.failsStrict!==!1),m=e.changeMap?He({changeMap:e.changeMap,changes:R,baseDependencies:t.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[]),candidateDependencies:a.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&a.valid&&u.length===0&&(m?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:a.ir.compilerOptionsHash,baseTreeHash:Ir(t.ir.files),candidateTreeHash:Ir(a.ir.files),baseCompleteness:t.completeness,candidateCompleteness:a.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:a.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...m?{convergence:m}:{},changes:R,violations:A,warnings:g.warnings}}i(Vo,"preflightChange");function Go(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Go,"canonicalChangePath");function Bo(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,o])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:o,message:`Base and candidate facts must use the same ${r}.`}))}i(Bo,"identityViolations");function zo(e,t,n,r){let s=n.get(t),o=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...o?{candidateContentHash:o.contentHash}:{}}}i(zo,"preparedChange");function Wo(e){let t=ge(e.baseFacts),n=ge(e.candidateFacts),r=nt({contract:e.contract,facts:t}),s=nt({contract:e.contract,facts:n}),o=new Map(t.files.map(m=>[m.path,m])),a=new Map(n.files.map(m=>[m.path,m])),d=Bo(t,n),l=new Map,g=[];for(let m of e.changes){let c=Go(m.path);if(!c){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(l.has(c)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:c,line:1,message:`The atomic change set contains more than one operation for ${c}.`});continue}l.set(c,m);let y=o.get(c),k=a.get(c);if("delete"in m&&m.delete)y||d.push({ruleId:"DELETE_TARGET_MISSING",file:c,line:1,message:`Cannot delete ${c} because it is not present in the supplied base facts.`}),k&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:c,line:1,message:`Candidate facts still contain deleted file ${c}.`});else{let I="content"in m?m.content:"",E=j(I);k?k.contentHash!==E&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:c,line:1,expectedContentHash:E,candidateContentHash:k.contentHash,message:`Candidate facts for ${c} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:c,line:1,message:`Candidate facts do not contain changed file ${c}.`})}g.push(zo(m,c,o,a))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let m of new Set([...o.keys(),...a.keys()])){if(l.has(m))continue;let c=o.get(m),y=a.get(m);c&&y&&N(c)===N(y)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:m,line:1,message:`Candidate facts change ${m}, but the atomic change set does not declare it.`})}let R=e.changeMap?He({changeMap:e.changeMap,changes:g,baseDependencies:r.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[]),candidateDependencies:s.ir.edges.flatMap(m=>m.to?[{from:m.from,to:m.to}]:[])}):void 0,A=[...d,...s.ir.violations].map(m=>({...m,nextAction:fe(m)})),u=A.filter(m=>m.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&u.length===0&&(R?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...R?{convergence:R}:{},changes:g.sort((m,c)=>m.path<c.path?-1:m.path>c.path?1:0),violations:A,warnings:s.ir.warnings}}i(Wo,"preflightResolvedChange");var Sr=new WeakSet;function Cr(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Cr(t);return Object.freeze(e)}i(Cr,"deepFreeze");function Vl(e){let t=Cr(Be(e));return Sr.add(t),t}i(Vl,"createTrustedResolvedCandidateFacts");function Gl(e){if(!Sr.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return xt(e)}i(Gl,"analyzeTrustedResolvedProject");export{ut as AMBIENT_CAPABILITY_ENTRIES,ct as CAPABILITY_IDS,yt as DEFAULT_INTENT_PREFIXES,Yt as RESOLVED_CANDIDATE_FACTS_SCHEMA,be as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,mt as SOURCE_POLICY_MESSAGES,ft as ambientCoveredByForbiddenGlobals,He as analyzeArchitectureConvergence,Ut as analyzeChange,Uo as analyzePolicyDelta,at as analyzeProject,nt as analyzeResolvedProject,Gl as analyzeTrustedResolvedProject,$e as capabilityForAmbientName,_e as capabilityForModuleSpecifier,Rt as classifyPublishFacts,Ot as collectAnalysisConfigWarnings,Eo as collectCapabilityUses,Lt as collectForbiddenCapabilityUses,Be as createResolvedCandidateFacts,Vl as createTrustedResolvedCandidateFacts,rr as detectArchitectureCycles,j as deterministicHash,Ee as effectiveCapabilityDeny,De as evaluateArchitectureGraph,jo as explainViolation,Pt as extractSemanticDependencies,Te as forbiddenGlobalForModuleSpecifier,ko as loadArchitectureChangeMap,Kt as loadContract,ge as loadResolvedCandidateFacts,an as looksLikeArkIntent,Tr as lowerForbiddenGlobal,We as loweredLayerCoverage,Vo as preflightChange,Wo as preflightResolvedChange,ht as resolveIntentLayer,Ge as resolvedFactsEvidenceRequirementsHash,N as stableSerialize};
+`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function Ft(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}i(Ft,"isObject");function Nt(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}i(Nt,"unknownFields");function Re(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}i(Re,"requiredString");function Fo(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(Fo,"canonicalProjectPath");function No(e,t,n="architecture change map"){let r=[];if(!Ft(e))throw new ot(n,[{path:"$",message:"must be an object"}]);Nt(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=Re(e,"$schema","$",r),o=Re(e,"schemaVersion","$",r);o&&o!==Tt&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(o)}; expected ${Tt}`});let a=new Set(t.layers.map(c=>c.name)),d=[],l=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((c,y)=>{let k=`$.files[${y}]`;if(!Ft(c)){r.push({path:k,message:"must be an object"});return}Nt(c,["path","operation","layer"],k,r);let E=Re(c,"path",k,r),I=Re(c,"operation",k,r),O=Re(c,"layer",k,r),$=E?Fo(E):void 0;E&&!$&&r.push({path:`${k}.path`,message:"must be a canonical project-relative path"}),I&&!["create","update","delete"].includes(I)&&r.push({path:`${k}.operation`,message:"must be create, update, or delete"}),O&&!a.has(O)&&r.push({path:`${k}.layer`,message:`references unknown layer ${JSON.stringify(O)}`}),$&&l.has($)&&r.push({path:`${k}.path`,message:`duplicates planned path ${$}`}),$&&l.add($);let W=$?Q($,t.layers):void 0;$&&O&&a.has(O)&&W!==O&&r.push({path:`${k}.layer`,message:W?`${$} resolves to ${W}, not ${O}`:`${$} is not assigned to an architecture layer`}),$&&I&&["create","update","delete"].includes(I)&&O&&d.push({path:$,operation:I,layer:O})});let p=[],h=new Map(d.map(c=>[c.path,c.operation])),A=new Set,u=e.dependencies??[];if(Array.isArray(u)?u.forEach((c,y)=>{let k=`$.dependencies[${y}]`;if(!Ft(c)){r.push({path:k,message:"must be an object"});return}Nt(c,["from","to"],k,r);let E=Re(c,"from",k,r),I=Re(c,"to",k,r);E&&!l.has(E)&&r.push({path:`${k}.from`,message:`must reference a planned file path: ${E}`}),I&&!l.has(I)&&r.push({path:`${k}.to`,message:`must reference a planned file path: ${I}`}),E&&h.get(E)==="delete"&&r.push({path:`${k}.from`,message:`cannot depend from deleted file ${E}`}),I&&h.get(I)==="delete"&&r.push({path:`${k}.to`,message:`cannot depend on deleted file ${I}`}),E&&I&&E===I&&r.push({path:k,message:"must not declare a self dependency"});let O=E&&I?`${E}\0${I}`:void 0;O&&A.has(O)&&r.push({path:k,message:`duplicates dependency ${E} -> ${I}`}),O&&A.add(O),E&&I&&p.push({from:E,to:I})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new ot(n,r);let f={$schema:s,schemaVersion:Tt,files:d.sort((c,y)=>c.path.localeCompare(y.path)),dependencies:p.sort((c,y)=>c.from.localeCompare(y.from)||c.to.localeCompare(y.to))};return{map:f,hash:j(N(f))}}i(No,"loadArchitectureChangeMap");function Z(e){return`${e.from}->${e.to}`}i(Z,"dependencyKey");function Ke(e,t,n,r="dependency"){return{id:`${e}:${r}:${Z(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${Z(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${Z(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${Z(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${Z(t)} from the candidate, then preflight again.`}:{}}}i(Ke,"dependencyFinding");function Ue(e){let t=[],n=new Map(e.changeMap.map.files.map(u=>[u.path,u])),r=new Map(e.changes.map(u=>[u.path,u])),s=new Map(e.changeMap.map.dependencies.map(u=>[Z(u),u])),o=new Map(e.baseDependencies.map(u=>[Z(u),u])),a=new Map(e.candidateDependencies.map(u=>[Z(u),u]));for(let u of[...n.values()].sort((f,c)=>f.path.localeCompare(c.path))){let f=r.get(u.path);f?f.operation!==u.operation?t.push({id:`contradictory:file:${u.path}`,classification:"contradictory",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:f.operation,message:`${u.path} was planned as ${u.operation} but the actual operation is ${f.operation}.`,nextAction:`Change ${u.path} to the planned ${u.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${u.path}`,classification:"satisfied",subject:"file",path:u.path,expectedOperation:u.operation,actualOperation:f.operation,message:`${u.path} matches the planned ${u.operation} operation.`}):t.push({id:`missing:file:${u.path}`,classification:"missing",subject:"file",path:u.path,expectedOperation:u.operation,message:`${u.path} was planned as ${u.operation} but is absent from the actual change.`,nextAction:`${u.operation[0].toUpperCase()}${u.operation.slice(1)} ${u.path} in the complete change set, then preflight again.`})}for(let u of[...r.values()].sort((f,c)=>f.path.localeCompare(c.path)))n.has(u.path)||t.push({id:`unplanned:file:${u.path}`,classification:"unplanned",subject:"file",path:u.path,actualOperation:u.operation,message:`${u.path} has an unplanned ${u.operation} operation.`,nextAction:`Remove ${u.path} from the change set, then preflight again.`});let d=new Set;for(let u of[...s.values()].sort((f,c)=>Z(f).localeCompare(Z(c)))){if(a.has(Z(u))){t.push(Ke("satisfied",u,`${u.from} -> ${u.to} exists in the candidate architecture.`));continue}let f={from:u.to,to:u.from};a.has(Z(f))?(d.add(Z(f)),t.push(Ke("contradictory",u,`${u.from} -> ${u.to} was planned, but the candidate contains the reverse edge.`))):t.push(Ke("missing",u,`${u.from} -> ${u.to} is absent from the candidate architecture.`))}let l=new Set([...n.keys(),...r.keys()]);for(let[u,f]of[...a].sort(([c],[y])=>c.localeCompare(y)))o.has(u)||s.has(u)||d.has(u)||!l.has(f.from)&&!l.has(f.to)||t.push({...Ke("unplanned",f,`${f.from} -> ${f.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let p=new Set(e.changeMap.map.files.filter(u=>u.operation==="delete").map(u=>u.path));for(let[u,f]of[...o].sort(([c],[y])=>c.localeCompare(y)))a.has(u)||p.has(f.from)||p.has(f.to)||!l.has(f.from)&&!l.has(f.to)||t.push({...Ke("unplanned",f,`${f.from} -> ${f.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let h={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((u,f)=>h[u.classification]-h[f.classification]||(u.subject===f.subject?0:u.subject==="file"?-1:1)||u.id.localeCompare(f.id));let A={satisfied:t.filter(u=>u.classification==="satisfied").length,missing:t.filter(u=>u.classification==="missing").length,contradictory:t.filter(u=>u.classification==="contradictory").length,unplanned:t.filter(u=>u.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:A.missing===0&&A.contradictory===0&&A.unplanned===0,behavioralCompletion:"not-evaluated",summary:A,findings:t}}i(Ue,"analyzeArchitectureConvergence");function Ce(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}i(Ce,"literalText");function Rr(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}i(Rr,"lineOf");function yr(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(o=>o.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}i(yr,"isTypeOnlyReference");function Ar(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}i(Ar,"singleFileChecker");function Pt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}i(Pt,"symbolAt");function Lt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,o;try{o=s?t.getShorthandAssignmentValueSymbol(r.parent):Pt(t,r)}catch{o=void 0}return!!o?.declarations?.some(a=>a.getSourceFile().fileName===n.fileName)}i(Lt,"localDeclaration");function Dt(e,t){let n,r=[],s=i((a,d,l,p=!1)=>r.push({specifier:l,kind:d,line:Rr(t,a),typeOnly:p,unresolved:l===void 0,node:a}),"add"),o=i(a=>{if(e.isImportDeclaration(a))s(a,"import",Ce(e,a.moduleSpecifier),yr(e,a));else if(e.isExportDeclaration(a)&&a.moduleSpecifier)s(a,"export",Ce(e,a.moduleSpecifier),yr(e,a));else if(e.isImportEqualsDeclaration(a)&&e.isExternalModuleReference(a.moduleReference))s(a,"require",Ce(e,a.moduleReference.expression),a.isTypeOnly===!0);else if(e.isCallExpression(a)){let d=a.expression.kind===e.SyntaxKind.ImportKeyword,p=e.isIdentifier(a.expression)&&a.expression.text==="require"&&!Lt(e,n??(n=Ar(e,t)),t,a.expression);(d||p)&&s(a,p?"require":"dynamic-import",Ce(e,a.arguments[0]))}e.forEachChild(a,o)},"visit");return o(t),r}i(Dt,"extractSemanticDependencies");function Po(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=Ce(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}i(Po,"staticAccessPath");function Lo(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}i(Lo,"runtimeIdentifierReference");function hr(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}i(hr,"bestForbiddenMatch");function Mt(e,t,n){if(n.length===0)return[];let r=new Set(n),s=Ar(e,t),o=new Map,a=new Set;for(let u of t.statements)if(e.isVariableStatement(u))for(let f of u.declarationList.declarations)e.isIdentifier(f.name)&&a.add(f.name.text);let d=i(u=>{let f=Po(e,u);if(!f)return;let c=Pt(s,f.root),y=c?o.get(c):void 0;return y?[...y,...f.segments.slice(1)]:Lt(e,s,t,f.root)||a.has(f.root.text)?void 0:f.segments},"resolvePath");for(let u of t.statements)if(e.isVariableStatement(u))for(let f of u.declarationList.declarations){if(!f.initializer||!e.isIdentifier(f.name))continue;let c=d(f.initializer),y=Pt(s,f.name);!c||!y||o.set(y,c)}let l=[],p=new Set,h=i((u,f)=>{let c=Rr(t,f),y=`${u}:${f.getStart(t)}`;p.has(y)||(p.add(y),l.push({name:u,line:c,node:f}))},"flag"),A=i(u=>{let f=u.parent&&(e.isPropertyAccessExpression(u.parent)||e.isElementAccessExpression(u.parent))&&u.parent.expression===u;if((e.isPropertyAccessExpression(u)||e.isElementAccessExpression(u))&&!f){let c=d(u),y=c?hr(r,c):void 0;y&&h(y,u)}else e.isIdentifier(u)&&r.has(u.text)&&Lo(e,u)&&!Lt(e,s,t,u)&&h(u.text,u);if(e.isVariableDeclaration(u)&&e.isObjectBindingPattern(u.name)&&u.initializer){let c=d(u.initializer);if(c)for(let y of u.name.elements){if(!e.isIdentifier(y.name))continue;let k=y.propertyName?Ce(e,y.propertyName)??y.propertyName.text:y.name.text,E=hr(r,[...c,k]);E&&h(E,u.initializer)}}e.forEachChild(u,A)},"visit");return A(t),l}i(Mt,"collectForbiddenCapabilityUses");function Do(e,t,n){let r=[];for(let s of n?.dependencies??Dt(e,t)){if(s.typeOnly||!s.specifier)continue;let o=Te(s.specifier);o&&r.push({capability:o,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??Mt(e,t,ft)){let o=Ne(s.name);o&&r.push({capability:o,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,o)=>s.line-o.line||s.capability.localeCompare(o.capability)||s.symbol.localeCompare(o.symbol))}i(Do,"collectCapabilityUses");function Ht(e){return{...e,layers:e.layers.map(t=>{let{description:n,trustBoundary:r,owners:s,...o}=t;return o})}}i(Ht,"omitLayerDescriptions");function kr(e){let{stewards:t,...n}=Ht(e.config);return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}i(kr,"effectiveContractPolicyPayload");var Sr="1.0",Mo="add a short note under docs/adr/ (or docs/decisions/) and put that file path in --policy-ack as adrPath.";function C(e,t){let n=t.classification==="weakening"||t.classification==="judgment-required"?`Restore the previous protection at ${t.path}, or ${Mo}`:void 0,r=t.nextAction??n;e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...r?{nextAction:r}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}i(C,"addFinding");function B(e){return[...new Set(e??[])].sort()}i(B,"sortedUnique");function ne(e,t,n,r,s){let o=B(n),a=B(r),d=new Set(o),l=new Set(a),p=a.filter(A=>!d.has(A)),h=o.filter(A=>!l.has(A));p.length===0&&h.length===0||(p.length>0&&C(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:o,after:a}),h.length>0&&C(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:o,after:a}))}i(ne,"compareStringSets");function je(e,t,n,r,s,o,a){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?o:a,before:n,after:r})}i(je,"compareBoolean");function at(e,t){let n=new Map,r=new Set;for(let s of e){let o=t(s);n.has(o)?r.add(o):n.set(o,s)}return{values:n,duplicates:[...r].sort()}}i(at,"keyed");function Ho(e,t,n){let r=at(t,o=>o.name),s=at(n,o=>o.name);(r.duplicates.length>0||s.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let o of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let a=r.values.get(o),d=s.values.get(o),l=`$.layers[${o}]`;if(!a&&d){C(e,{kind:"layer-added",path:l,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new layer and put that file path in --policy-ack as adrPath.",after:d});continue}if(a&&!d){C(e,{kind:"layer-removed",path:l,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:a});continue}if(!a||!d)continue;ne(e,`${l}.patterns`,a.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),ne(e,`${l}.exclude`,a.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let p=Ye(a),h=Ye(d);ne(e,`${l}.forbiddenGlobals`,p.rawGlobals,h.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),ne(e,`${l}.capabilities`,p.atoms,h.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),B(a.intentPrefixes).join("\0")!==B(d.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${l}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:B(a.intentPrefixes),after:B(d.intentPrefixes)}),je(e,`${l}.mayImportInfrastructure`,a.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),je(e,`${l}.optional`,a.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}i(Ho,"compareLayers");function Ko(e,t,n){let r=i(a=>`${a.from}->${a.to}`,"keyOf"),s=at(t,r),o=at(n,r);(s.duplicates.length>0||o.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:o.duplicates});for(let a of[...new Set([...s.values.keys(),...o.values.keys()])].sort()){let d=s.values.get(a),l=o.values.get(a),p=`$.rules[${a}]`;if(!d&&l){l.allowed===!1?C(e,{kind:"deny-added",path:p,classification:"strengthening",message:"A denied dependency edge was added.",after:l}):C(e,{kind:"allow-added",path:p,classification:"judgment-required",message:"A new import edge was added; confirm this house should import that one.",nextAction:"Write a short note under docs/adr/ (or docs/decisions/) for this new import edge and put that file path in --policy-ack as adrPath.",after:l});continue}if(d&&!l){d.allowed===!1&&C(e,{kind:"deny-removed",path:p,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!l)continue;d.allowed!==l.allowed&&C(e,{kind:l.allowed?"deny-disabled":"deny-enabled",path:`${p}.allowed`,classification:l.allowed?"weakening":"strengthening",message:l.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:l.allowed});let h=d.peerIsolation===!0,A=l.peerIsolation===!0;if(h!==A){let c=d.from===d.to&&l.from===l.to;C(e,{kind:A?"peer-isolation-enabled":"peer-isolation-disabled",path:`${p}.peerIsolation`,classification:c?A?"strengthening":"weakening":"judgment-required",message:c?A?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:h,after:A})}B(d.sliceFolders).join("\0")!==B(l.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${p}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:B(d.sliceFolders),after:B(l.sliceFolders)});let u=d.sliceIdentity??"path",f=l.sliceIdentity??"path";if(u!==f&&C(e,{kind:"slice-identity-changed",path:`${p}.sliceIdentity`,classification:"judgment-required",message:"Slice identity changed and can reclassify existing slice ids. Baselines and allowedCrossSlice use those ids.",before:u,after:f}),!(!h&&!A)&&(vr(e,`${p}.sharedRoots`,"shared-roots",B(d.sharedRoots),B(l.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),vr(e,`${p}.allowedCrossSlice`,"cross-slice-allowance",B((d.allowedCrossSlice??[]).map(br)),B((l.allowedCrossSlice??[]).map(br)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."),(d.sharedImportsSlice??null)!==(l.sharedImportsSlice??null))){let c=l.sharedImportsSlice==="deny";C(e,{kind:"shared-imports-slice",path:`${p}.sharedImportsSlice`,classification:c?"strengthening":"weakening",message:c?"A shared root may no longer import a slice.":"A shared root may import a slice again.",before:d.sharedImportsSlice??null,after:l.sharedImportsSlice??null})}}}i(Ko,"compareRules");function br(e){return JSON.stringify([e.from,e.to])}i(br,"crossSliceKey");function vr(e,t,n,r,s,o,a){if(JSON.stringify(r)===JSON.stringify(s))return;let d=s.filter(h=>!r.includes(h)),l=r.filter(h=>!s.includes(h)),p=d.length>0&&l.length>0;C(e,{kind:p?`${n}-changed`:d.length>0?`${n}-added`:`${n}-removed`,path:t,classification:p?"judgment-required":d.length>0?"weakening":"strengthening",message:p?`${o} Entries were added and removed in the same change.`:d.length>0?o:a,before:r,after:s})}i(vr,"compareDeclaredExceptions");function Uo(e,t,n){let r=t.safety??{},s=n.safety??{};for(let o of["maxTsSuppressions","maxAnyCasts"]){let a=r[o]??0,d=s[o]??0;a!==d&&C(e,{kind:d>a?"threshold-raised":"threshold-lowered",path:`$.safety.${o}`,classification:d>a?"weakening":"strengthening",message:d>a?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:a,after:d})}for(let o of["allowInMemory","allowDisabledPeerIsolation"])je(e,`$.safety.${o}`,r[o]===!0,s[o]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}i(Uo,"compareSafety");function Kt(e){return e.mode==="enforced"?"enforced":"advisory"}i(Kt,"arkRunMode");function Ut(e){return e.mode==="enforced"?"enforced":"advisory"}i(Ut,"arkOrderMode");function jo(e,t,n){let r=t.arkOrder,s=n.arkOrder,o="$.arkOrder";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkorder-added",path:o,classification:"strengthening",message:`ArkOrder extra was added (${Ut(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkorder-removed",path:o,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let a=Ut(r),d=Ut(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkorder-promoted":"arkorder-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:a,after:d})}ne(e,`${o}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),ne(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}i(jo,"compareArkOrder");function Vo(e,t,n){let r=t.arkRun,s=n.arkRun,o="$.arkRun";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkrun-added",path:o,classification:"strengthening",message:`ArkRun extra was added (${Kt(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkrun-removed",path:o,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let a=Kt(r),d=Kt(s);if(a!==d){let l=a==="advisory"&&d==="enforced";C(e,{kind:l?"arkrun-promoted":"arkrun-demoted",path:`${o}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:a,after:d})}ne(e,`${o}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),ne(e,`${o}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),je(e,`${o}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}i(Vo,"compareArkRun");function Go(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}i(Go,"overallClassification");function Ir(e,t){return`${e}::${t}`}i(Ir,"ruleKey");function Er(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(Ir(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(Ir(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}i(Er,"indexEffectiveRules");function Bo(e,t,n,r,s,o){let a=new Map((o??[]).map(u=>[u.invariantId,u])),d=t.arkRules??{},l=n.arkRules??{},p=[...new Set([...Object.keys(d),...Object.keys(l)])].sort();for(let u of p){let f=d[u],c=l[u],y=`$.arkRules[${u}]`;if(f===void 0&&c!==void 0){C(e,{kind:"arkrules-ref-added",path:y,classification:"strengthening",message:`ArkRules reference for layer ${u} was added.`,after:c});continue}if(f!==void 0&&c===void 0){C(e,{kind:"arkrules-ref-removed",path:y,classification:"weakening",message:`ArkRules reference for layer ${u} was removed.`,before:f});continue}f!==c&&C(e,{kind:"arkrules-ref-path-changed",path:y,classification:"judgment-required",message:`ArkRules file path for layer ${u} changed; verify the effective rules still match intent.`,before:f,after:c})}let h=Er(r),A=Er(s);for(let u of[...new Set([...h.structure.keys(),...A.structure.keys()])].sort()){let f=h.structure.get(u),c=A.structure.get(u),y=`$.arkRules.structure[${u}]`;if(!f&&c){C(e,{kind:"arkrule-structure-added",path:y,classification:"strengthening",message:`Structure ArkRule ${c.id} was added (${c.mode}).`,after:c});continue}if(f&&!c){C(e,{kind:"arkrule-structure-removed",path:y,classification:"weakening",message:`Structure ArkRule ${f.id} was removed.`,before:f});continue}if(!(!f||!c)){if(f.mode!==c.mode){let k=f.mode==="advisory"&&c.mode==="enforced";C(e,{kind:k?"arkrule-promoted":"arkrule-demoted",path:`${y}.mode`,classification:k?"strengthening":"weakening",message:k?`Structure ArkRule ${c.id} was promoted to enforced.`:`Structure ArkRule ${c.id} was demoted to advisory.`,before:f.mode,after:c.mode})}f.sensor!==c.sensor&&C(e,{kind:"arkrule-sensor-changed",path:`${y}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${c.id} changed sensor identity.`,before:f.sensor,after:c.sensor})}}for(let u of[...new Set([...h.invariants.keys(),...A.invariants.keys()])].sort()){let f=h.invariants.get(u),c=A.invariants.get(u),y=`$.arkRules.invariants[${u}]`;if(!f&&c){C(e,{kind:"arkrule-invariant-added",path:y,classification:"strengthening",message:`Invariant ${c.id} was added (${c.mode}).`,after:c});continue}if(f&&!c){C(e,{kind:"arkrule-invariant-removed",path:y,classification:"weakening",message:`Invariant ${f.id} was removed.`,before:f});continue}if(!(!f||!c)&&f.mode!==c.mode)if(f.mode==="advisory"&&c.mode==="enforced"){let E=a?.get(c.id),I=Nn(E);I.ok?C(e,{kind:"arkrule-invariant-promoted",path:`${y}.mode`,classification:"strengthening",message:`Invariant ${c.id} was promoted to enforced (coverage evidence present).`,before:f.mode,after:c.mode}):C(e,{kind:"arkrule-invariant-promote-refused",path:`${y}.mode`,classification:"judgment-required",message:`Invariant ${c.id} cannot be promoted to enforced: ${I.reason}`,before:f.mode,after:c.mode})}else C(e,{kind:"arkrule-invariant-demoted",path:`${y}.mode`,classification:"weakening",message:`Invariant ${c.id} was demoted to advisory.`,before:f.mode,after:c.mode})}}i(Bo,"compareArkRules");function Cr(e,t,n){let r=[];ne(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),ne(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),ne(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),je(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},o=e.cyclePolicy??"strict",a=t.cyclePolicy??"strict";if(o!==a){let d=s[a]===s[o]?"judgment-required":s[a]>s[o]?"strengthening":"weakening";C(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:o,after:a})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),Ho(r,e.layers,t.layers),Ko(r,e.rules,t.rules),Uo(r,e,t),Bo(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),Vo(r,e,t),jo(r,e,t),r.sort((d,l)=>d.path.localeCompare(l.path)||d.id.localeCompare(l.id)),{schemaVersion:Sr,classification:Go(r),findings:r}}i(Cr,"classifyArkPolicyDelta");function wr(e,t){if(!e||e.schemaVersion!==Sr||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=B(e.findingIds),r=B(t.findingIds);return n.length===r.length&&n.every((s,o)=>s===r[o])}i(wr,"policyDeltaAcknowledgementMatches");function Ae(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}i(Ae,"normalizePath");function Or(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}i(Or,"isIdentifierStart");function it(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}i(it,"isIdentifierCharacter");function J(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}i(J,"skipWhitespace");function Ve(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let o=e[t];if(o===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};o==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=o}}i(Ve,"readString");function ee(e,t,n){return e.startsWith(t,n)&&!it(e[n-1])&&!it(e[n+t.length])}i(ee,"isWordAt");function xr(e,t){let n=J(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=J(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!ee(e,"type",n))return!1;let s=J(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||ee(e,"as",s)||!Or(e[s]))return!1;for(n=s;n<e.length&&it(e[n]);)n+=1;if(n=J(e,n),ee(e,"as",n)){if(n=J(e,n+2),!Or(e[n]))return!1;for(;n<e.length&&it(e[n]);)n+=1}r=!0}return!1}i(xr,"bracedNamedBindingsAreTypeOnly");function zo(e,t){if(t=J(e,t+6),e[t]==="(")return Ve(e,J(e,t+1));let n=!1;if(ee(e,"type",t)){let s=J(e,t+4);e[s]!==","&&!ee(e,"from",s)&&(n=!0)}else xr(e,t)&&(n=!0);let r=_r(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}i(zo,"specifierAfterImport");function Wo(e,t){t=t+6;let n=J(e,t),r=!1;if(ee(e,"type",n)){let o=J(e,n+4);(e[o]==="{"||e[o]==="*")&&(r=!0)}else xr(e,n)&&(r=!0);let s=_r(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}i(Wo,"specifierAfterExport");function _r(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(ee(e,"from",t))return Ve(e,J(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return Ve(e,t);if(t>0&&(ee(e,"import",t)||ee(e,"export",t)))return}}i(_r,"specifierInStaticStatement");function qo(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}i(qo,"skipTemplateLiteral");function Yo(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=J(e,t+7);if(e[r]!=="(")return;r=J(e,r+1);let s=Ve(e,r);return s?{...s,requireCall:!0}:void 0}i(Yo,"specifierAfterRequire");function Xo(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let o=e.indexOf("*/",n+2);if(o<0)break;n=o+1;continue}if(r==="`"){n=qo(e,n);continue}if(r==="'"||r==='"'){let o=Ve(e,n);o&&(n=o.offset+o.excerpt.length-1);continue}let s=r==="i"&&ee(e,"import",n)?zo(e,n):r==="e"&&ee(e,"export",n)?Wo(e,n):r==="r"&&ee(e,"require",n)?Yo(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}i(Xo,"moduleSpecifiers");function $r(e,t){let n=[],r=[];for(let s of Xo(e.content)){let o=s.value;if(!o.startsWith(".")){if(s.typeOnly)continue;let p=Te(o);if(!p)continue;let h=e.content.slice(0,s.offset).split(`
+`).length;r.push({file:e.path,symbol:o,capability:p,evidence:{kind:"import",file:e.path,line:h,excerpt:s.excerpt}});continue}let a=e.content.slice(0,s.offset).split(`
+`).length,d={kind:"import",file:e.path,line:a,excerpt:s.excerpt},l=Zo(e.path,o,t);n.push({from:e.path,specifier:o,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:d})}return{edges:n,capabilityUses:r}}i($r,"moduleFactsFor");function Zo(e,t,n){let r=e.split("/");r.pop();for(let o of t.split("/"))o==="."||o===""||(o===".."?r.pop():r.push(o));let s=r.join("/");for(let o of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let a=n.get(o);if(a)return a}}i(Zo,"resolveSpecifier");function Tr(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=ln(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}i(Tr,"violationsFor");var Jo={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function Qo(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}i(Qo,"hasActiveArkRules");function ea(e,t){return Qo(e,t)?j(N(kr({config:e,arkRules:t,warnings:[]}))):j(N(Ht(e)))}i(ea,"policyHashFor");function jt(e,t,n){let r=typeof e=="string"?ur(e,t):xt(e,t),s=n?.arkRules??Le();return{...r,arkRules:s,policyHash:ea(r.config,s)}}i(jt,"loadContract");function ta(e){let t=jt(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=jt(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=Cr(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),o=s.length>0,a=o&&wr(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:o,acknowledged:a,valid:!o||a}}i(ta,"analyzePolicyDelta");function lt(e){let t=e.files.map(A=>{let u=Ae(A.path);return{path:u,content:A.content,contentHash:j(A.content),layer:Q(u,e.contract.config.layers)??null}}).sort((A,u)=>A.path.localeCompare(u.path)),n=new Map(t.map(A=>[A.path,A])),r=[],s=[];for(let A of t){let u=$r(A,n);r.push(...u.edges),s.push(...u.capabilityUses)}let o=Tr(r,e.contract.config),a=new Map(e.contract.config.layers.map(A=>[A.name,A])),d=new Map(e.contract.config.layers.map(A=>[A.name,new Set(Ie(A))]));for(let A of s){let u=n.get(A.file)?.layer;if(!u)continue;let f=a.get(u),c=Fe(A.symbol,f?.forbiddenGlobals??[]);if(c){o.push({ruleId:"FORBIDDEN_GLOBAL",message:`${u} must not use module "${A.symbol}" because it is the import form of forbidden global "${c}".`,symbol:A.symbol,evidence:A.evidence});continue}d.get(u)?.has(A.capability)&&o.push({ruleId:"CAPABILITY_VIOLATION",message:`${u} denies the ${A.capability} capability; found import of "${A.symbol}".`,capability:A.capability,symbol:A.symbol,evidence:A.evidence})}let l=t.length===0?"complete":"partial",p=l==="complete"?[]:[{...Jo}],h={schemaVersion:Zt,policyHash:e.contract.policyHash,compilerOptionsHash:j(N(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(A=>A.name),edges:r,capabilityUses:s,violations:o};return{mode:"lexical-compatibility",completeness:l,completenessReasons:p,valid:l==="complete"&&o.length===0,ir:h}}i(lt,"analyzeProject");function Vt(e){let t=new Map(e.files.map(n=>[Ae(n.path),n]));for(let n of e.changes){let r=Ae(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return lt({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}i(Vt,"analyzeChange");function na(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}i(na,"explainViolation");function Fr(e){return j(N(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}i(Fr,"analysisTreeHash");function ra(e){let t=lt(e),n=new Map(t.ir.files.map(c=>[c.path,c])),r=[],s=new Set,o=[];for(let c of e.changes){let y=c.path.replace(/\\/g,"/"),k=Ae(c.path);if(!k||k===".."||k.startsWith("../")||y.startsWith("/")||/^[A-Za-z]:\//.test(y)||y.includes("\0")){o.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(k)){o.push({ruleId:"DUPLICATE_CHANGE_PATH",file:k,line:1,message:`The atomic change set contains more than one operation for ${k}.`});continue}s.add(k),"delete"in c&&c.delete&&!n.has(k)&&o.push({ruleId:"DELETE_TARGET_MISSING",file:k,line:1,message:`Cannot delete ${k} because it is not present in the supplied base tree.`}),r.push("delete"in c&&c.delete?{path:k,delete:!0}:{path:k,content:"content"in c?c.content:""})}e.changes.length===0&&o.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let a=Vt({...e,changes:r}),d=new Map(a.ir.files.map(c=>[c.path,c])),l=a.ir.violations.filter(c=>c.ruleId==="CAPABILITY_VIOLATION"||c.ruleId==="FORBIDDEN_GLOBAL").map(c=>{let y=d.get(c.evidence.file)?.layer;return{ruleId:c.ruleId,file:c.evidence.file,line:c.evidence.line,target:c.symbol,...c.capability?{capability:c.capability}:{},...y?{fromLayer:y}:{},edgeKind:"import",message:c.message}}),p=He({config:e.contract.config,rules:e.contract.config.rules,files:a.ir.files.map(c=>c.path),contentViolations:l,edges:a.ir.edges.filter(c=>!!c.fromLayer).map(c=>({from:c.from,fromLayer:c.fromLayer,...c.to?{to:c.to}:{},...c.toLayer?{toLayer:c.toLayer}:{},line:c.evidence.line,kind:"import",...c.typeOnly?{typeOnly:!0}:{},...c.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),h=r.map(c=>{let y=Ae(c.path),k=n.get(y),E=d.get(y);return{path:y,operation:"delete"in c&&c.delete?"delete":k?"update":"create",...k?{beforeContentHash:k.contentHash}:{},...E?{candidateContentHash:E.contentHash}:{}}}).sort((c,y)=>c.path.localeCompare(y.path)),A=[...o,...p.violations].map(c=>({...c,nextAction:fe(c)})),u=A.filter(c=>c.failsStrict!==!1),f=e.changeMap?Ue({changeMap:e.changeMap,changes:h,baseDependencies:t.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[]),candidateDependencies:a.ir.edges.flatMap(c=>c.to?[{from:c.from,to:c.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&a.valid&&u.length===0&&(f?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:a.ir.compilerOptionsHash,baseTreeHash:Fr(t.ir.files),candidateTreeHash:Fr(a.ir.files),baseCompleteness:t.completeness,candidateCompleteness:a.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:a.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...f?{convergence:f}:{},changes:h,violations:A,warnings:p.warnings}}i(ra,"preflightChange");function sa(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}i(sa,"canonicalChangePath");function oa(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,o])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:o,message:`Base and candidate facts must use the same ${r}.`}))}i(oa,"identityViolations");function aa(e,t,n,r){let s=n.get(t),o=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...o?{candidateContentHash:o.contentHash}:{}}}i(aa,"preparedChange");function ia(e){let t=ye(e.baseFacts),n=ye(e.candidateFacts),r=st({contract:e.contract,facts:t}),s=st({contract:e.contract,facts:n}),o=new Map(t.files.map(f=>[f.path,f])),a=new Map(n.files.map(f=>[f.path,f])),d=oa(t,n),l=new Map,p=[];for(let f of e.changes){let c=sa(f.path);if(!c){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(l.has(c)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:c,line:1,message:`The atomic change set contains more than one operation for ${c}.`});continue}l.set(c,f);let y=o.get(c),k=a.get(c);if("delete"in f&&f.delete)y||d.push({ruleId:"DELETE_TARGET_MISSING",file:c,line:1,message:`Cannot delete ${c} because it is not present in the supplied base facts.`}),k&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:c,line:1,message:`Candidate facts still contain deleted file ${c}.`});else{let E="content"in f?f.content:"",I=j(E);k?k.contentHash!==I&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:c,line:1,expectedContentHash:I,candidateContentHash:k.contentHash,message:`Candidate facts for ${c} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:c,line:1,message:`Candidate facts do not contain changed file ${c}.`})}p.push(aa(f,c,o,a))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let f of new Set([...o.keys(),...a.keys()])){if(l.has(f))continue;let c=o.get(f),y=a.get(f);c&&y&&N(c)===N(y)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:f,line:1,message:`Candidate facts change ${f}, but the atomic change set does not declare it.`})}let h=e.changeMap?Ue({changeMap:e.changeMap,changes:p,baseDependencies:r.ir.edges.flatMap(f=>f.to?[{from:f.from,to:f.to}]:[]),candidateDependencies:s.ir.edges.flatMap(f=>f.to?[{from:f.from,to:f.to}]:[])}):void 0,A=[...d,...s.ir.violations].map(f=>({...f,nextAction:fe(f)})),u=A.filter(f=>f.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&u.length===0&&(h?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...h?{convergence:h}:{},changes:p.sort((f,c)=>f.path<c.path?-1:f.path>c.path?1:0),violations:A,warnings:s.ir.warnings}}i(ia,"preflightResolvedChange");var Nr=new WeakSet;function Pr(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Pr(t);return Object.freeze(e)}i(Pr,"deepFreeze");function rc(e){let t=Pr(We(e));return Nr.add(t),t}i(rc,"createTrustedResolvedCandidateFacts");function sc(e){if(!Nr.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return $t(e)}i(sc,"analyzeTrustedResolvedProject");export{ft as AMBIENT_CAPABILITY_ENTRIES,dt as CAPABILITY_IDS,ht as DEFAULT_INTENT_PREFIXES,Xt as RESOLVED_CANDIDATE_FACTS_SCHEMA,be as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,yt as SOURCE_POLICY_MESSAGES,pt as ambientCoveredByForbiddenGlobals,Ue as analyzeArchitectureConvergence,Vt as analyzeChange,ta as analyzePolicyDelta,lt as analyzeProject,st as analyzeResolvedProject,sc as analyzeTrustedResolvedProject,Ne as capabilityForAmbientName,Te as capabilityForModuleSpecifier,At as classifyPublishFacts,_t as collectAnalysisConfigWarnings,Do as collectCapabilityUses,Mt as collectForbiddenCapabilityUses,We as createResolvedCandidateFacts,rc as createTrustedResolvedCandidateFacts,fr as detectArchitectureCycles,j as deterministicHash,Ie as effectiveCapabilityDeny,He as evaluateArchitectureGraph,na as explainViolation,Dt as extractSemanticDependencies,Fe as forbiddenGlobalForModuleSpecifier,No as loadArchitectureChangeMap,jt as loadContract,ye as loadResolvedCandidateFacts,dn as looksLikeArkIntent,Kr as lowerForbiddenGlobal,Ye as loweredLayerCoverage,ra as preflightChange,ia as preflightResolvedChange,Rt as resolveIntentLayer,ze as resolvedFactsEvidenceRequirementsHash,N as stableSerialize};