arkgate 4.8.24 → 4.8.25

package/schemas/ark.invariant-probe.schema.json

@@ -0,0 +1,368 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://unpkg.com/arkgate@4/schemas/ark.invariant-probe.schema.json",
+  "title": "ArkGate invariant mutation probe",
+  "description": "Per-invariant evidence from arkgate-check --probe-invariants --write. Not a score. A fresh survived or not-reached row refuses promotion to enforced; every other state changes nothing.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "kind",
+    "notAScore",
+    "arkgateVersion",
+    "operatorSet",
+    "runner",
+    "probedOn",
+    "invariants",
+    "totals"
+  ],
+  "properties": {
+    "$schema": {
+      "type": "string"
+    },
+    "schemaVersion": {
+      "const": "1.0"
+    },
+    "kind": {
+      "const": "arkgate-invariant-probe"
+    },
+    "notAScore": {
+      "const": true
+    },
+    "arkgateVersion": {
+      "type": "string",
+      "minLength": 1
+    },
+    "operatorSet": {
+      "type": "string",
+      "minLength": 1
+    },
+    "runner": {
+      "oneOf": [
+        {
+          "type": "null"
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "id",
+            "version"
+          ],
+          "properties": {
+            "id": {
+              "enum": [
+                "vitest",
+                "jest",
+                "node"
+              ]
+            },
+            "version": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "minLength": 1
+            }
+          }
+        }
+      ]
+    },
+    "probedOn": {
+      "type": "string",
+      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
+    },
+    "invariants": {
+      "type": "array",
+      "maxItems": 500,
+      "items": {
+        "$ref": "#/$defs/row"
+      }
+    },
+    "totals": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "probed",
+        "killed",
+        "survived",
+        "notReached",
+        "inconclusive",
+        "unprobeable"
+      ],
+      "properties": {
+        "probed": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "killed": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "survived": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "notReached": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "inconclusive": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "unprobeable": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    }
+  },
+  "$defs": {
+    "row": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "invariantId",
+        "invariantHash",
+        "layer",
+        "sourceFile",
+        "mode",
+        "symbol",
+        "symbolFile",
+        "symbolFileHash",
+        "tests",
+        "baseline",
+        "wiring",
+        "mutants",
+        "verdict",
+        "reason"
+      ],
+      "properties": {
+        "invariantId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "invariantHash": {
+          "type": "string",
+          "minLength": 1
+        },
+        "layer": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "sourceFile": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "mode": {
+          "enum": [
+            "advisory",
+            "enforced"
+          ]
+        },
+        "symbol": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "symbolFile": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "symbolFileHash": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1
+        },
+        "tests": {
+          "type": "array",
+          "maxItems": 8,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "path",
+              "contentHash"
+            ],
+            "properties": {
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "contentHash": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "baseline": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "status",
+                "durationMs"
+              ],
+              "properties": {
+                "status": {
+                  "enum": [
+                    "green",
+                    "red",
+                    "timeout",
+                    "runtime-error"
+                  ]
+                },
+                "durationMs": {
+                  "type": "integer",
+                  "minimum": 0
+                }
+              }
+            }
+          ]
+        },
+        "wiring": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "load",
+                "reach"
+              ],
+              "properties": {
+                "load": {
+                  "enum": [
+                    "killed",
+                    "survived",
+                    "timeout",
+                    "runtime-error",
+                    "invalid",
+                    null
+                  ]
+                },
+                "reach": {
+                  "enum": [
+                    "killed",
+                    "survived",
+                    "timeout",
+                    "runtime-error",
+                    "invalid",
+                    null
+                  ]
+                }
+              }
+            }
+          ]
+        },
+        "mutants": {
+          "type": "array",
+          "maxItems": 3,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "id",
+              "operator",
+              "line",
+              "column",
+              "original",
+              "replacement",
+              "status",
+              "durationMs"
+            ],
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "operator": {
+                "enum": [
+                  "negate-guard",
+                  "drop-throw",
+                  "flip-comparison",
+                  "boundary-shift",
+                  "const-shift"
+                ]
+              },
+              "line": {
+                "type": "integer",
+                "minimum": 1
+              },
+              "column": {
+                "type": "integer",
+                "minimum": 1
+              },
+              "original": {
+                "type": "string"
+              },
+              "replacement": {
+                "type": "string"
+              },
+              "status": {
+                "enum": [
+                  "killed",
+                  "survived",
+                  "timeout",
+                  "runtime-error",
+                  "invalid"
+                ]
+              },
+              "durationMs": {
+                "type": "integer",
+                "minimum": 0
+              }
+            }
+          }
+        },
+        "verdict": {
+          "enum": [
+            "killed",
+            "survived",
+            "not-reached",
+            "inconclusive",
+            "unprobeable"
+          ]
+        },
+        "reason": {
+          "enum": [
+            "all-killed",
+            "mutant-survived",
+            "reach-canary-survived",
+            "baseline-red",
+            "baseline-timeout",
+            "runner-error",
+            "file-not-loaded",
+            "mutant-runtime-error",
+            "no-symbol",
+            "declaration-only",
+            "symbol-not-found",
+            "no-covering-test",
+            "no-site"
+          ]
+        }
+      }
+    }
+  }
+}

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/pedroknigge/arkgate",
     "source": "github"
   },
-  "version": "4.8.24",
+  "version": "4.8.25",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "arkgate",
-      "version": "4.8.24",
+      "version": "4.8.25",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/templates/agent-skills/README.md

@@ -9,7 +9,7 @@ closed `/ark-*` catalog shipped as flat templates for Ark install.
 **Closed catalog** (`ARK_SKILL_NAMES`) — first-class doors plus one-release
 redirect stubs. Add a name only with a live ROADMAP item.
 
-Package version when last generated context: **arkgate@4.8.24**
+Package version when last generated context: **arkgate@4.8.25**
 Schema: agent-skills package contract `1.0`
 
 ## Skills (closed catalog)

package/templates/agent-skills/ark-adopt/SKILL.md

@@ -241,6 +241,7 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 
 
 ### Adopt + ArkRules
+- `arkRules[<Layer>]` may be one path or a list. On a child wall, `childSlices.arkRulesFile` (`arkrules.<Layer>.json`) is the slice's own file. Do not put feature rules only in the central file when that filename is set. `"pinned": true` on a slice alias keeps a framework path; `reason` does not pin.
 - After classify: emit or refresh `arkRules` for matched layers (exact names; generic mold for unknowns).
 - Mine rules → inventory + write advisory invariants/structure into `arkrules/<Layer>.json` **in this turn**.
 - Empty `invariants[]` on a populated Domain while `arkRules` is on is residual (`INVARIANT_CATALOG_EMPTY`), not done. Fill 1–2 short phrases. Advisory until a domain structure rule is `enforced`.

package/templates/agent-skills/ark-contract/SKILL.md

@@ -52,6 +52,23 @@ If the host supports **parallel subagents**, fan out read-only scouts; otherwise
 2. Path honest and tightening → execute **`/ark-autopilot`**.
 3. One kernel candidate → **`/ark-runtime`**. One order-plane candidate → **`/ark-order`**.
 
+## Promoting an invariant (advisory → enforced)
+
+Promotion goes through one judge. Run `arkgate-check --promote [<id>] --json` first and read
+each invariant row's `blocker`:
+
+- `no-coverage-evidence` — no test title or declared symbol, partial scan, outside
+  `coverage.coverageRoots`, or no roots declared. Write the evidence or the roots (`/ark-adopt`).
+- `probe-survived` — the committed `.ark/invariant-probe.json` shows, for files unchanged
+  since the run, that the covering tests still pass with the rule broken (`survived`) or never
+  call the symbol (`not-reached`). The fix is a **stronger test**, not more evidence text: add
+  the case the line names, then re-run `arkgate-check --probe-invariants=<id> --write` and
+  commit the file. Never delete or hand-edit the artifact to get past the refusal.
+
+The probe runs the project's own tests in a temporary copy; ask the owner before you run it.
+It is opt-in and not a score: a missing, stale, `killed` or `inconclusive` result changes
+nothing. Only then `--promote <id> --apply`.
+
 ## Completion contract (skill incomplete if missing)
 
 Skill incomplete if missing any field below.

package/templates/agent-skills/ark-coverage/SKILL.md

@@ -97,11 +97,13 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 4. Editing `arkrules/*` or promoting modes is **`/ark-adopt`**; fixing code under a structure sensor is **`/ark-autopilot`** (judgment, never invent mechanical-safe).
 5. CLI helpers: `ark-check --rules-inventory --json`, doctor JSON `rulesUnderContract`, sensors emit `ARKRULE_*` / `INVARIANT_UNCOVERED` / `INVARIANT_CATALOG_EMPTY` with `evidence.arkruleId`.
 5b. Invariant coverage is a **text match, never an execution**: a file walk plus the invariant id in a `describe`/`it` title. `coverage.symbol` means a declaration of that identifier in a non-test file (`symbolEvidenceFile`); imports and test calls do not count. Doctor and `--rules-inventory` print that witness path and the scan discard counts on a green run too. Never report `INVARIANT_UNCOVERED: 0`, a witness path, or a discard line as “the tests pass” or “the tests run” — ArkGate does not run tests and reads no runner config. Declaration text is not “the tests pass.” When the project declares `coverage.coverageRoots`, a covering test found outside them raises the advisory `INVARIANT_COVERAGE_OUTSIDE_ROOTS`; without that declaration ArkGate makes no claim about where tests run. Adopted + catalogued invariants without `coverage.testGlobs` or `coverage.coverageRoots` fails closed (`INVARIANT_TESTS_PATH_MISSING`) — write the path (`/ark-adopt`). When any invariant is enforced, missing `coverage.coverageRoots` fails closed (`INVARIANT_COVERAGE_ROOTS_MISSING`) — write the runner roots (`/ark-adopt`). `testGlobs` alone is not enough.
+5c. The one exception is owner-invoked: `arkgate-check --probe-invariants` breaks each `coverage.symbol` on purpose in a temporary copy and runs only its covering tests with the project's runner (ask first — it runs their tests). When `.ark/invariant-probe.json` exists, doctor `rulesUnderContract.probe` and `--rules-inventory` `coverageEvidence.probe` show per invariant `killed` / `survived` / `not-reached` / `stale` / `not run`; `INVARIANT_PROBE_SURVIVED` means a fresh row refuses promotion. Report it as **[ArkRules]** "the test names the rule but does not pin it", name the change that went unnoticed, never as a percentage. `killed` is evidence the covering tests catch those three changes — not "the domain is correct."
 6. Extras silent when off. Doctor `arkRun` / `arkOrder` is `notAScore`. Do not force extras. Wire one kernel candidate via `/ark-runtime`; one order-plane candidate via `/ark-order`. Do not invent `/ark-run`.
 
 
 ### Coverage + ArkRules
 - Fitness report: governed% / gates / baseline = **[Layer]**; `rulesUnderContract` inventoried/under-contract/frozen = **[ArkRules]** (counts, never a score).
+- Invariant probe (when the artifact exists): one row per `survived` / `not-reached` invariant with the line it names and the test to add; `stale` rows mean "re-run `--probe-invariants --write`", never "pinned".
 - Capability gap: “no arkRules map” is optional adoption opportunity, not a failed gate.
 
 ### Coverage + extras

package/templates/agent-skills/ark-explore/SKILL.md

@@ -58,6 +58,13 @@ one bounded decision needs 2–3 enforceable options.
   including when the run is green. A declaration in a non-test file is not
   “the tests pass” — ArkGate never runs tests. Depth and byte caps stay
   internal; the counts are what you read.
+- When doctor JSON has `orphanModules` with files listed, map them: nothing imports
+  each file and no entry point covers it. Read `certainty` — `maybe-dynamic` and
+  `maybe-unresolved` may still be loaded (open what the evidence names). A
+  `partial` section is never a complete list. `--doctor --all` adds exports
+  nothing imports by name. Map only; deleting is `/ark-fix`, one file at a time.
+  A framework or loader ArkGate does not know goes in `.ark/entry-points.json`
+  with a reason. Never say "dead code". No new skill.
 - A doctor green / Healthy line must name a file, config key, or test.
   Uncited green is a lie — treat it as unfinished. No `/ark-cite`.
 - Distinguish **missing** skills vs **stale** catalog. Installed ≠ stale.

package/templates/agent-skills/ark-fix/SKILL.md

@@ -25,6 +25,26 @@ Write an **extraction card** (`docs/brownfield-adoption.md` §6) — never mecha
 never silent B apply. **Kill-switch** required. `multiPilotBatchForbidden` — never
 multi-pilot batch. Execute that work on **`/ark-autopilot`**.
 
+## Files nothing imports (one delete at a time)
+
+When `doctor.orphanModules` lists a file with `certainty: no-importer`, nothing
+imports it and no entry point covers it. Delete **one** file through the write
+gate, run `arkgate-check` and status again, then the next. A `maybe-dynamic` or
+`maybe-unresolved` item may still be loaded: open what its evidence names
+first. If a framework or loader uses the file, add a glob with a reason to
+`.ark/entry-points.json` instead — never edit `ark.config.json` for it. No batch
+delete, no codemod.
+
+## Copies across a wall (one move at a time)
+
+When `doctor.crossWallDuplication` (status details, `--doctor --all`) lists a
+family, the wall stopped the import and the code was copied. Move **one** copy to
+the family's `destination` through the write gate (`/ark-place` names it), point
+both sides at it, delete the other copy, run `arkgate-check` and status again,
+then the next family. Never open the wall (`allowedCrossSlice`, a weaker rule) to
+make the copy importable. Copies inside one slice are not listed on purpose. No
+batch, no codemod.
+
 ## Dual engine (mandatory)
 
 | Engine | Role |

package/templates/agent-skills/ark-place/SKILL.md

@@ -35,6 +35,12 @@ right house. Skills never enforce — CLI / hooks / CI do.
   adapter or a Domain / auth-tag policy — not another SQLite / JSON-file store
   or admin literal in the page. Soft. Silent when those houses are absent or
   the shortcut is already in the right house. No `/ark-prototype`.
+- When doctor JSON `crossWallDuplication` (status details, `--doctor --all`) lists a
+  family, its `destination` is where the one shared copy goes: the declared shared
+  root, the universe common folder, or the lower layer both sides may import. Write
+  it there and import it from both sides — never a third copy, never a new
+  `allowedCrossSlice` to reach across the wall. `ask-place` means pick a home both
+  sides may import. Advisory. No `/ark-dedupe`.
 - When the matched layer has `layers[].description`, print that caption next to the
   layer name and globs. Omit when absent — do not invent a caption or `/ark-describe`.
 - When the matched layer has `layers[].trustBoundary`, print `trust: <tag>` next
@@ -175,6 +181,8 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 
 
 ### Place + ArkRules
+- `arkRules[<Layer>]` may be one path or a list of paths. A child wall may set `childSlices.arkRulesFile` to `arkrules.<Layer>.json`. That file lives at the slice root. Its id in findings is `<childId>#<localId>`. Doctor lists it on `rulesUnderContract.bySlice`. When `ark_place` returns `sliceRules`, those are the ids for this file's slice.
+- A `sliceAliases` entry with `"pinned": true` stays put (a framework route). `reason` is a label only. Do not treat a pinned route as finished while another alias is still an owed move.
 - Choose layer from contract **and** check structure sensors for that layer (private state, factory, thin adapter, writes-via-aggregate).
 - Scaffold to satisfy **[ArkRules]** when present; state which sensors apply.
 - Persistence **writes** (insert/update/delete against a driver) go through a Domain aggregate + persistence adapter. Application/Feature files that import Prisma/pg/Supabase and call `.insert` / `.create` are **[ArkRules]** `writes-via-aggregate`. Do not invent `Externals/` or `admission.ts`.

package/templates/skills/ark-adopt.md

@@ -241,6 +241,7 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 
 
 ### Adopt + ArkRules
+- `arkRules[<Layer>]` may be one path or a list. On a child wall, `childSlices.arkRulesFile` (`arkrules.<Layer>.json`) is the slice's own file. Do not put feature rules only in the central file when that filename is set. `"pinned": true` on a slice alias keeps a framework path; `reason` does not pin.
 - After classify: emit or refresh `arkRules` for matched layers (exact names; generic mold for unknowns).
 - Mine rules → inventory + write advisory invariants/structure into `arkrules/<Layer>.json` **in this turn**.
 - Empty `invariants[]` on a populated Domain while `arkRules` is on is residual (`INVARIANT_CATALOG_EMPTY`), not done. Fill 1–2 short phrases. Advisory until a domain structure rule is `enforced`.

package/templates/skills/ark-contract.md

@@ -52,6 +52,23 @@ If the host supports **parallel subagents**, fan out read-only scouts; otherwise
 2. Path honest and tightening → execute **`/ark-autopilot`**.
 3. One kernel candidate → **`/ark-runtime`**. One order-plane candidate → **`/ark-order`**.
 
+## Promoting an invariant (advisory → enforced)
+
+Promotion goes through one judge. Run `arkgate-check --promote [<id>] --json` first and read
+each invariant row's `blocker`:
+
+- `no-coverage-evidence` — no test title or declared symbol, partial scan, outside
+  `coverage.coverageRoots`, or no roots declared. Write the evidence or the roots (`/ark-adopt`).
+- `probe-survived` — the committed `.ark/invariant-probe.json` shows, for files unchanged
+  since the run, that the covering tests still pass with the rule broken (`survived`) or never
+  call the symbol (`not-reached`). The fix is a **stronger test**, not more evidence text: add
+  the case the line names, then re-run `arkgate-check --probe-invariants=<id> --write` and
+  commit the file. Never delete or hand-edit the artifact to get past the refusal.
+
+The probe runs the project's own tests in a temporary copy; ask the owner before you run it.
+It is opt-in and not a score: a missing, stale, `killed` or `inconclusive` result changes
+nothing. Only then `--promote <id> --apply`.
+
 ## Completion contract (skill incomplete if missing)
 
 Skill incomplete if missing any field below.

package/templates/skills/ark-coverage.md

@@ -97,11 +97,13 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 4. Editing `arkrules/*` or promoting modes is **`/ark-adopt`**; fixing code under a structure sensor is **`/ark-autopilot`** (judgment, never invent mechanical-safe).
 5. CLI helpers: `ark-check --rules-inventory --json`, doctor JSON `rulesUnderContract`, sensors emit `ARKRULE_*` / `INVARIANT_UNCOVERED` / `INVARIANT_CATALOG_EMPTY` with `evidence.arkruleId`.
 5b. Invariant coverage is a **text match, never an execution**: a file walk plus the invariant id in a `describe`/`it` title. `coverage.symbol` means a declaration of that identifier in a non-test file (`symbolEvidenceFile`); imports and test calls do not count. Doctor and `--rules-inventory` print that witness path and the scan discard counts on a green run too. Never report `INVARIANT_UNCOVERED: 0`, a witness path, or a discard line as “the tests pass” or “the tests run” — ArkGate does not run tests and reads no runner config. Declaration text is not “the tests pass.” When the project declares `coverage.coverageRoots`, a covering test found outside them raises the advisory `INVARIANT_COVERAGE_OUTSIDE_ROOTS`; without that declaration ArkGate makes no claim about where tests run. Adopted + catalogued invariants without `coverage.testGlobs` or `coverage.coverageRoots` fails closed (`INVARIANT_TESTS_PATH_MISSING`) — write the path (`/ark-adopt`). When any invariant is enforced, missing `coverage.coverageRoots` fails closed (`INVARIANT_COVERAGE_ROOTS_MISSING`) — write the runner roots (`/ark-adopt`). `testGlobs` alone is not enough.
+5c. The one exception is owner-invoked: `arkgate-check --probe-invariants` breaks each `coverage.symbol` on purpose in a temporary copy and runs only its covering tests with the project's runner (ask first — it runs their tests). When `.ark/invariant-probe.json` exists, doctor `rulesUnderContract.probe` and `--rules-inventory` `coverageEvidence.probe` show per invariant `killed` / `survived` / `not-reached` / `stale` / `not run`; `INVARIANT_PROBE_SURVIVED` means a fresh row refuses promotion. Report it as **[ArkRules]** "the test names the rule but does not pin it", name the change that went unnoticed, never as a percentage. `killed` is evidence the covering tests catch those three changes — not "the domain is correct."
 6. Extras silent when off. Doctor `arkRun` / `arkOrder` is `notAScore`. Do not force extras. Wire one kernel candidate via `/ark-runtime`; one order-plane candidate via `/ark-order`. Do not invent `/ark-run`.
 
 
 ### Coverage + ArkRules
 - Fitness report: governed% / gates / baseline = **[Layer]**; `rulesUnderContract` inventoried/under-contract/frozen = **[ArkRules]** (counts, never a score).
+- Invariant probe (when the artifact exists): one row per `survived` / `not-reached` invariant with the line it names and the test to add; `stale` rows mean "re-run `--probe-invariants --write`", never "pinned".
 - Capability gap: “no arkRules map” is optional adoption opportunity, not a failed gate.
 
 ### Coverage + extras

package/templates/skills/ark-explore.md

@@ -58,6 +58,13 @@ one bounded decision needs 2–3 enforceable options.
   including when the run is green. A declaration in a non-test file is not
   “the tests pass” — ArkGate never runs tests. Depth and byte caps stay
   internal; the counts are what you read.
+- When doctor JSON has `orphanModules` with files listed, map them: nothing imports
+  each file and no entry point covers it. Read `certainty` — `maybe-dynamic` and
+  `maybe-unresolved` may still be loaded (open what the evidence names). A
+  `partial` section is never a complete list. `--doctor --all` adds exports
+  nothing imports by name. Map only; deleting is `/ark-fix`, one file at a time.
+  A framework or loader ArkGate does not know goes in `.ark/entry-points.json`
+  with a reason. Never say "dead code". No new skill.
 - A doctor green / Healthy line must name a file, config key, or test.
   Uncited green is a lie — treat it as unfinished. No `/ark-cite`.
 - Distinguish **missing** skills vs **stale** catalog. Installed ≠ stale.

package/templates/skills/ark-fix.md

@@ -25,6 +25,26 @@ Write an **extraction card** (`docs/brownfield-adoption.md` §6) — never mecha
 never silent B apply. **Kill-switch** required. `multiPilotBatchForbidden` — never
 multi-pilot batch. Execute that work on **`/ark-autopilot`**.
 
+## Files nothing imports (one delete at a time)
+
+When `doctor.orphanModules` lists a file with `certainty: no-importer`, nothing
+imports it and no entry point covers it. Delete **one** file through the write
+gate, run `arkgate-check` and status again, then the next. A `maybe-dynamic` or
+`maybe-unresolved` item may still be loaded: open what its evidence names
+first. If a framework or loader uses the file, add a glob with a reason to
+`.ark/entry-points.json` instead — never edit `ark.config.json` for it. No batch
+delete, no codemod.
+
+## Copies across a wall (one move at a time)
+
+When `doctor.crossWallDuplication` (status details, `--doctor --all`) lists a
+family, the wall stopped the import and the code was copied. Move **one** copy to
+the family's `destination` through the write gate (`/ark-place` names it), point
+both sides at it, delete the other copy, run `arkgate-check` and status again,
+then the next family. Never open the wall (`allowedCrossSlice`, a weaker rule) to
+make the copy importable. Copies inside one slice are not listed on purpose. No
+batch, no codemod.
+
 ## Dual engine (mandatory)
 
 | Engine | Role |

package/templates/skills/ark-place.md

@@ -35,6 +35,12 @@ right house. Skills never enforce — CLI / hooks / CI do.
   adapter or a Domain / auth-tag policy — not another SQLite / JSON-file store
   or admin literal in the page. Soft. Silent when those houses are absent or
   the shortcut is already in the right house. No `/ark-prototype`.
+- When doctor JSON `crossWallDuplication` (status details, `--doctor --all`) lists a
+  family, its `destination` is where the one shared copy goes: the declared shared
+  root, the universe common folder, or the lower layer both sides may import. Write
+  it there and import it from both sides — never a third copy, never a new
+  `allowedCrossSlice` to reach across the wall. `ask-place` means pick a home both
+  sides may import. Advisory. No `/ark-dedupe`.
 - When the matched layer has `layers[].description`, print that caption next to the
   layer name and globs. Omit when absent — do not invent a caption or `/ark-describe`.
 - When the matched layer has `layers[].trustBoundary`, print `trust: <tag>` next
@@ -175,6 +181,8 @@ ArkGate has **always-on Layers** plus opt-in extras. The user chooses extras; yo
 
 
 ### Place + ArkRules
+- `arkRules[<Layer>]` may be one path or a list of paths. A child wall may set `childSlices.arkRulesFile` to `arkrules.<Layer>.json`. That file lives at the slice root. Its id in findings is `<childId>#<localId>`. Doctor lists it on `rulesUnderContract.bySlice`. When `ark_place` returns `sliceRules`, those are the ids for this file's slice.
+- A `sliceAliases` entry with `"pinned": true` stays put (a framework route). `reason` is a label only. Do not treat a pinned route as finished while another alias is still an owed move.
 - Choose layer from contract **and** check structure sensors for that layer (private state, factory, thin adapter, writes-via-aggregate).
 - Scaffold to satisfy **[ArkRules]** when present; state which sensors apply.
 - Persistence **writes** (insert/update/delete against a driver) go through a Domain aggregate + persistence adapter. Application/Feature files that import Prisma/pg/Supabase and call `.insert` / `.create` are **[ArkRules]** `writes-via-aggregate`. Do not invent `Externals/` or `admission.ts`.

package/bin/lib/ark-order-error.mjs

@@ -1,18 +0,0 @@
-/**
- * GENERATED FILE — do not edit by hand.
- *
- * Canonical algorithm: src/domain/arkOrderError.ts
- * Regenerate: node scripts/generate-cli-pure.mjs
- * Drift check: node scripts/generate-cli-pure.mjs --check
- *
- * Pure CLI helper (bin/lib/ark-order-error.mjs). Zero Node I/O.
- */
-
-export class ArkOrderError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.name = 'ArkOrderError';
-        this.code = code;
-    }
-}