arkgate 4.8.24 → 4.8.26

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { a as ArkConfigRule, b as ArkConfigSchemaVersion, c as ArkConfigLoadResult, d as ArkConfigLayer, A as ArkConfig, e as ArkConfigIssue, f as ArkConfigArkRun, g as ArkConfigArkOrder } from './configTypes-BJbaeoj4.cjs';
+import { a as ArkConfigRule, b as ArkConfigSchemaVersion, c as ArkConfigLoadResult, d as ArkConfigLayer, A as ArkConfig, e as ArkConfigIssue, f as ArkConfigArkRun, g as ArkConfigArkOrder } from './configTypes-GPvvdleM.cjs';
 
 /**
  * Canonical, pure contract for ark.config.json.
@@ -104,12 +104,23 @@ declare const ARK_CONFIG_SCHEMA: {
         readonly coverage: {
             readonly $ref: "#/$defs/coverage";
         };
-        /** ADR 0012 — layer name → relative path to arkrules/<Layer>.json */
+        /** ADR 0012 — layer name → one path, or a list of paths merged into that layer. */
         readonly arkRules: {
             readonly type: "object";
             readonly additionalProperties: {
-                readonly type: "string";
-                readonly minLength: 1;
+                readonly description: "A project-relative ArkRules path, or a list of paths merged into one catalog for this layer. A string keeps today's behaviour. An older build that types this value as a string rejects an array at config load.";
+                readonly oneOf: readonly [{
+                    readonly type: "string";
+                    readonly minLength: 1;
+                }, {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly uniqueItems: true;
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                }];
             };
             readonly default: {};
         };
@@ -385,10 +396,15 @@ declare const ARK_CONFIG_SCHEMA: {
                             readonly minLength: 1;
                             readonly description: "Text for inner-wall findings (CROSS_SIBLING_SLICE and universe common importing a child). The rule message stays the universe-wall text (CROSS_PARENT_SLICE and fail-closed denies). Absent: ArkGate default text, never the rule message. arkgate 4.8.23 and older reject this field (unknown field).";
                         };
+                        readonly arkRulesFile: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly description: "Filename read at each child slice root this wall already resolved. The only token is <Layer>, replaced with a declared layer name (arkrules.<Layer>.json). No slash and no wildcard. A discovered file that omits appliesTo is scoped to that slice directory. Explicit appliesTo outside the slice fails config load (ARKRULE_SCOPE_ESCAPES_SLICE). The effective id is <childId>#<localId>. A build that rejects unknown childSlices fields fails at config load (unknown field).";
+                        };
                         readonly sliceAliases: {
                             readonly type: "array";
                             readonly minItems: 1;
-                            readonly description: "Maps a source path glob onto a child slice id (universe id plus one child segment) so files outside the slice trees take that universe and child for both walls. A path without a wildcard also covers everything under it, as sharedRoots does. A bare name, a universe id alone, a target outside every universe shape, and a wildcard in to are rejected. Under stars identity a target written against the 4.8.23 stars id (star bindings before the last literal dropped, e.g. api/v1/x for modules/*/api/*) still loads when it maps to one universe shape, and ark-check warns CONFIG_SLICE_LEGACY_STARS_ID with the new id; it is rejected only when it maps to more than one shape. Config load checks only the shape; doctor reports a target universe no file belongs to. The glob may not overlap a slice folder, and two aliases may not match the same file. Doctor lists each alias as an owed move. A build that rejects unknown childSlices fields fails at config load (unknown field). arkgate 4.8.22 and older reject childSlices.";
+                            readonly description: "Maps a source path glob onto a child slice id (universe id plus one child segment) so files outside the slice trees take that universe and child for both walls. A path without a wildcard also covers everything under it, as sharedRoots does. A bare name, a universe id alone, a target outside every universe shape, and a wildcard in to are rejected. Under stars identity a target written against the 4.8.23 stars id (star bindings before the last literal dropped, e.g. api/v1/x for modules/*/api/*) still loads when it maps to one universe shape, and ark-check warns CONFIG_SLICE_LEGACY_STARS_ID with the new id; it is rejected only when it maps to more than one shape. Config load checks only the shape; doctor reports a target universe no file belongs to. The glob may not overlap a slice folder, and two aliases may not match the same file. Doctor lists each unpinned alias as an owed move. pinned true lists the alias separately and does not count it as debt. reason is a doctor label and does not pin by itself. A build that rejects unknown childSlices fields fails at config load (unknown field). arkgate 4.8.22 and older reject childSlices.";
                             readonly items: {
                                 readonly type: "object";
                                 readonly additionalProperties: false;
@@ -402,6 +418,15 @@ declare const ARK_CONFIG_SCHEMA: {
                                         readonly type: "string";
                                         readonly minLength: 1;
                                     };
+                                    readonly pinned: {
+                                        readonly type: "boolean";
+                                        readonly description: "True when a framework forces the path to stay. The alias is not an owed move and does not clear other honesty debt.";
+                                    };
+                                    readonly reason: {
+                                        readonly type: "string";
+                                        readonly minLength: 1;
+                                        readonly description: "Doctor label, such as framework-route. A label alone does not pin.";
+                                    };
                                 };
                             };
                         };
@@ -625,6 +650,8 @@ type ArkRuleProvenance = {
     sourceFile: string;
     ruleId: string;
     layer: string;
+    /** Set when the rule was read from a child-slice file. Absent on central files. */
+    childId?: string;
 };
 type EffectiveStructureRule = ArkRuleStructureEntry & {
     mode: ArkRuleMode;
@@ -638,6 +665,8 @@ type EffectiveArkRules = {
     schemaVersion: '1.0';
     byLayer: Record<string, {
         sourceFile: string;
+        /** Every file merged into this layer, central paths first. Absent on older catalogs. */
+        sourceFiles?: string[];
         structure: EffectiveStructureRule[];
         invariants: EffectiveInvariantRule[];
     }>;
@@ -789,15 +818,20 @@ declare function loadArkRulesContract(input: unknown, source?: string, expectedL
 declare function parseArkRulesJson(json: string, source?: string, expectedLayer?: string): {
     config: ArkRulesFile;
 };
-/**
- * Build the Effective Contract from already-validated ArkRules files.
- * Callers supply `{ layer → { sourceFile, file } }` after resolving references.
- */
-declare function buildEffectiveArkRules(parts: ReadonlyArray<{
+type ArkRulesBuildPart = {
     layer: string;
     sourceFile: string;
     file: ArkRulesFile;
-}>): EffectiveArkRules;
+    /** Child slice that owns this file. Central files omit it, and their ids stay bare. */
+    childId?: string;
+    /** Used when a discovered file omits appliesTo. The first entry's directory is the slice root. */
+    defaultAppliesTo?: readonly string[];
+};
+/**
+ * Build the Effective Contract from already-validated ArkRules files.
+ * Same-layer parts merge. A child id namespaces the effective id and does not rewrite the file.
+ */
+declare function buildEffectiveArkRules(parts: readonly ArkRulesBuildPart[]): EffectiveArkRules;
 /** Empty Effective Contract used when `arkRules` is absent (byte-for-byte verdict parity). */
 declare function emptyEffectiveArkRules(): EffectiveArkRules;
 
@@ -1234,181 +1268,64 @@ declare function createAdapterResult(input: {
 }): CurrentAdapterResult;
 
 /** ArkGate library version — single source of truth. */
-declare const version = "4.8.24";
+declare const version = "4.8.26";
 
 /**
- * Canonical, pure contract for ArkGate MCP project identity.
+ * Architecture layer profiles.
  *
- * Filesystem canonicalization, hashing, clocks, and runtime ids belong to the
- * Tooling adapter. This module owns the stable payload and published schemas so
- * every MCP surface speaks the same identity/binding language.
+ * A profile turns semantic names such as `Domain.Order.Placed` into governed
+ * layer names and dependency rules.
  */
-declare const ARK_PROJECT_IDENTITY_SCHEMA_VERSION: "1.0";
-declare const ARK_PROJECT_IDENTITY_SCHEMA_URL = "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
-type ProjectIdentity = {
-    schemaVersion: typeof ARK_PROJECT_IDENTITY_SCHEMA_VERSION;
-    projectId: string;
-    resolvedRoot: string;
-    resolvedConfigPath: string;
-    arkgateVersion: string;
-    contractHash: string;
-    contractSource: 'project' | 'default-profile' | 'manifest';
-    runtimeId: string;
-    processStartedAt: string;
-};
-type ProjectExpectation = {
-    expectedRoot?: string;
-    expectedProjectId?: string;
-};
-type ProjectBinding = {
-    status: 'matched' | 'unverified' | 'mismatch';
-    authoritative: boolean;
-    expectedRoot?: string;
-    expectedProjectId?: string;
-    code?: 'PROJECT_ROOT_MISMATCH' | 'PROJECT_ID_MISMATCH' | 'INVALID_PROJECT_EXPECTATION';
-    message?: string;
-};
-declare const PROJECT_EXPECTATION_SCHEMA: {
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly properties: {
-        readonly expectedRoot: {
-            readonly type: "string";
-            readonly minLength: 1;
-            readonly description: string;
-        };
-        readonly expectedProjectId: {
-            readonly type: "string";
-            readonly pattern: "^sha256:[a-f0-9]{64}$";
-            readonly description: "Project id previously returned by ark_identity or ark_manifest.";
-        };
-    };
-};
-declare const PROJECT_BINDING_SCHEMA: {
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly required: readonly ["status", "authoritative"];
-    readonly properties: {
-        readonly status: {
-            readonly enum: readonly ["matched", "unverified", "mismatch"];
-        };
-        readonly authoritative: {
-            readonly type: "boolean";
-        };
-        readonly expectedRoot: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly expectedProjectId: {
-            readonly type: "string";
-            readonly pattern: "^sha256:[a-f0-9]{64}$";
-        };
-        readonly code: {
-            readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
-        };
-        readonly message: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-    };
-};
-declare const ARK_PROJECT_IDENTITY_SCHEMA: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly $id: "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
-    readonly title: "ArkGate MCP project identity";
-    readonly description: "Stable project binding plus separate runtime and architecture-contract evidence.";
-    readonly type: "object";
-    readonly additionalProperties: false;
-    readonly required: readonly ["schemaVersion", "projectId", "resolvedRoot", "resolvedConfigPath", "arkgateVersion", "contractHash", "contractSource", "runtimeId", "processStartedAt"];
-    readonly properties: {
-        readonly schemaVersion: {
-            readonly const: "1.0";
-        };
-        readonly projectId: {
-            readonly type: "string";
-            readonly pattern: "^sha256:[a-f0-9]{64}$";
-        };
-        readonly resolvedRoot: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly resolvedConfigPath: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly arkgateVersion: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly contractHash: {
-            readonly type: "string";
-            readonly pattern: "^sha256:[a-f0-9]{64}$";
-        };
-        readonly contractSource: {
-            readonly enum: readonly ["project", "default-profile", "manifest"];
-        };
-        readonly runtimeId: {
-            readonly type: "string";
-            readonly minLength: 1;
-        };
-        readonly processStartedAt: {
-            readonly type: "string";
-            readonly format: "date-time";
-        };
-    };
-    readonly $defs: {
-        readonly expectation: {
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly properties: {
-                readonly expectedRoot: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                    readonly description: string;
-                };
-                readonly expectedProjectId: {
-                    readonly type: "string";
-                    readonly pattern: "^sha256:[a-f0-9]{64}$";
-                    readonly description: "Project id previously returned by ark_identity or ark_manifest.";
-                };
-            };
-        };
-        readonly binding: {
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["status", "authoritative"];
-            readonly properties: {
-                readonly status: {
-                    readonly enum: readonly ["matched", "unverified", "mismatch"];
-                };
-                readonly authoritative: {
-                    readonly type: "boolean";
-                };
-                readonly expectedRoot: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-                readonly expectedProjectId: {
-                    readonly type: "string";
-                    readonly pattern: "^sha256:[a-f0-9]{64}$";
-                };
-                readonly code: {
-                    readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
-                };
-                readonly message: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
-            };
-        };
-    };
+
+interface ArchitectureLayer {
+    name: string;
+    prefixes: string[];
+    /**
+     * Custom matcher for teams whose intent names don't follow prefix conventions.
+     * Checked before any prefix matching, in layer declaration order. A layer may
+     * use `match` alone (with `prefixes: []`), prefixes alone, or both.
+     */
+    match?: (name: string) => boolean;
+    description?: string;
+    trustBoundary?: 'public' | 'auth' | 'admin' | 'internal';
+    owners?: string[];
+    order?: number;
+}
+type ArchitectureRule = ArkConfigRule;
+interface ArchitectureProfile {
+    name: string;
+    layers: ArchitectureLayer[];
+    rules: ArchitectureRule[];
+    resolveLayer(name: string): string | undefined;
+}
+interface CreateArchitectureProfileOptions {
+    name: string;
+    layers: ArchitectureLayer[];
+    rules?: ArchitectureRule[];
+}
+interface CreateArchitectureProfileFromArkConfigOptions {
+    /** Runtime profile name. Default: config.name or "ark.config.json". */
+    name?: string;
+}
+type ArchitectureLayerConfig = ArkConfigLayer;
+type ArkCheckConfig = Omit<ArkConfig, '$schema' | 'schemaVersion' | 'rules'> & {
+    $schema?: string;
+    schemaVersion?: ArkConfig['schemaVersion'];
+    rules?: ArchitectureRule[];
 };
-/**
- * Stable identity: contract edits and MCP restarts must not change which project
- * this is. Callers must pass canonical real paths and a SHA-256 hex function.
- */
-declare function createProjectId(resolvedRoot: string, resolvedConfigPath: string, sha256Hex: (value: string) => string): string;
-declare function createProjectIdentity(input: Omit<ProjectIdentity, 'schemaVersion'>): ProjectIdentity;
+interface CreateElevenLayerArkConfigOptions {
+    /** Source root used in generated file patterns. Default: "src". */
+    rootDir?: string;
+    /** Include entries for ark-check. Default: [rootDir]. */
+    include?: string[];
+    /** Mark generated layers optional. Default: true. */
+    optionalLayers?: boolean;
+}
+
+declare function createArchitectureProfile(options: CreateArchitectureProfileOptions): ArchitectureProfile;
+declare function createArchitectureProfileFromArkConfig(config: ArkCheckConfig, options?: CreateArchitectureProfileFromArkConfigOptions): ArchitectureProfile;
+declare const elevenLayerProfile: ArchitectureProfile;
+declare function createElevenLayerArkConfig(options?: CreateElevenLayerArkConfigOptions): ArkCheckConfig;
 
 /**
  * AI Code Gate (basic).
@@ -1585,68 +1502,11 @@ interface IntentCreator<Name extends IntentName, Payload = unknown> {
 }
 
 /**
- * Architecture layer profiles.
+ * Basic AI Code Gate implementation.
  *
- * A profile turns semantic names such as `Domain.Order.Placed` into governed
- * layer names and dependency rules.
- */
-
-interface ArchitectureLayer {
-    name: string;
-    prefixes: string[];
-    /**
-     * Custom matcher for teams whose intent names don't follow prefix conventions.
-     * Checked before any prefix matching, in layer declaration order. A layer may
-     * use `match` alone (with `prefixes: []`), prefixes alone, or both.
-     */
-    match?: (name: string) => boolean;
-    description?: string;
-    trustBoundary?: 'public' | 'auth' | 'admin' | 'internal';
-    owners?: string[];
-    order?: number;
-}
-type ArchitectureRule = ArkConfigRule;
-interface ArchitectureProfile {
-    name: string;
-    layers: ArchitectureLayer[];
-    rules: ArchitectureRule[];
-    resolveLayer(name: string): string | undefined;
-}
-interface CreateArchitectureProfileOptions {
-    name: string;
-    layers: ArchitectureLayer[];
-    rules?: ArchitectureRule[];
-}
-interface CreateArchitectureProfileFromArkConfigOptions {
-    /** Runtime profile name. Default: config.name or "ark.config.json". */
-    name?: string;
-}
-type ArchitectureLayerConfig = ArkConfigLayer;
-type ArkCheckConfig = Omit<ArkConfig, '$schema' | 'schemaVersion' | 'rules'> & {
-    $schema?: string;
-    schemaVersion?: ArkConfig['schemaVersion'];
-    rules?: ArchitectureRule[];
-};
-interface CreateElevenLayerArkConfigOptions {
-    /** Source root used in generated file patterns. Default: "src". */
-    rootDir?: string;
-    /** Include entries for ark-check. Default: [rootDir]. */
-    include?: string[];
-    /** Mark generated layers optional. Default: true. */
-    optionalLayers?: boolean;
-}
-
-declare function createArchitectureProfile(options: CreateArchitectureProfileOptions): ArchitectureProfile;
-declare function createArchitectureProfileFromArkConfig(config: ArkCheckConfig, options?: CreateArchitectureProfileFromArkConfigOptions): ArchitectureProfile;
-declare const elevenLayerProfile: ArchitectureProfile;
-declare function createElevenLayerArkConfig(options?: CreateElevenLayerArkConfigOptions): ArkCheckConfig;
-
-/**
- * Basic AI Code Gate implementation.
- *
- * Uses simple string heuristics + registered intent names to detect obvious
- * architectural violations in generated code (e.g. direct infra imports from domain).
- * Not a full static analyzer — documented limitation.
+ * Uses simple string heuristics + registered intent names to detect obvious
+ * architectural violations in generated code (e.g. direct infra imports from domain).
+ * Not a full static analyzer — documented limitation.
  */
 
 interface AICodeGatePolicyContext<Context = AICodeGateContext> {
@@ -2939,6 +2799,30 @@ type LayerFlowConfigShape = {
     }[];
 };
 
+/** Priority order: guard-family operators first, constants last. */
+declare const INVARIANT_PROBE_OPERATORS: readonly ["negate-guard", "drop-throw", "flip-comparison", "boundary-shift", "const-shift"];
+type ProbeOperator = (typeof INVARIANT_PROBE_OPERATORS)[number];
+declare const INVARIANT_PROBE_VERDICTS: readonly ["killed", "survived", "not-reached", "inconclusive", "unprobeable"];
+type ProbeVerdict = (typeof INVARIANT_PROBE_VERDICTS)[number];
+declare const INVARIANT_PROBE_REASONS: readonly ["all-killed", "mutant-survived", "reach-canary-survived", "baseline-red", "baseline-timeout", "runner-error", "file-not-loaded", "mutant-runtime-error", "no-symbol", "declaration-only", "symbol-not-found", "no-covering-test", "no-site"];
+type ProbeReason = (typeof INVARIANT_PROBE_REASONS)[number];
+/** What promotion and status read from one row. */
+type InvariantProbeSummary = {
+    verdict: ProbeVerdict;
+    reason: ProbeReason;
+    /** False when a hashed input changed since the run; a stale row changes nothing. */
+    fresh: boolean;
+    survivors: Array<{
+        operator: ProbeOperator;
+        line: number;
+        original: string;
+        replacement: string;
+    }>;
+    staleBecause?: string[];
+    symbolFile?: string;
+    probedOn?: string;
+};
+
 /**
  * Pure invariant coverage evidence (ADR 0014 / AR09–AR10).
  *
@@ -3038,6 +2922,13 @@ type InvariantCoverageEvidence = {
      * so existing promote fixtures stay valid; the evaluator always sets it.
      */
     coverageRootsDeclared?: boolean;
+    /**
+     * Committed mutation-probe evidence for this invariant (ADR 0039), attached
+     * by Tooling when `.ark/invariant-probe.json` has a row. Additive: absent on
+     * every evaluation that has no artifact. Only a fresh `survived` /
+     * `not-reached` changes promotion; every other state changes nothing.
+     */
+    probe?: InvariantProbeSummary;
 };
 type InvariantUncoveredKind = 'never-had-tests' | 'tests-disappeared';
 type InvariantCoverageRuleId = 'INVARIANT_UNCOVERED' | 'INVARIANT_COVERAGE_OUTSIDE_ROOTS';
@@ -3145,6 +3036,7 @@ declare function evaluateInvariantCoverage(input: EvaluateInvariantCoverageInput
 declare function canPromoteInvariant(coverage: InvariantCoverageEvidence | undefined): {
     ok: boolean;
     reason: string;
+    blocker?: 'probe-survived';
 };
 
 /**
@@ -3674,120 +3566,472 @@ declare function preflightResolvedChange(input: PreflightResolvedChangeInput): R
 declare function collectAnalysisConfigWarnings(input: CollectAnalysisConfigWarningsInput): ArchitectureEngineViolation[];
 
 /**
- * Pure Effective Contract composition (ADR 0012).
+ * Public diagnostic code catalog (ACS02).
  *
- * Resolves `arkRules` references against a supplied file-content map (Tooling owns I/O),
- * validates each part, and returns one in-memory contract with per-rule provenance.
- * The serialized effective rules feed policyHash via the analysis contract loader.
+ * Closed vocabulary of stable `ruleId` values emitted by ArkGate adapters with
+ * human/agent `why` / `fix` anchors and docs fragment ids. Cataloguing only —
+ * no new rule semantics, no LLM verdict, no enforcement from prose.
+ *
+ * **Canonical** for docs, agent projection (ACS04), and finding refs (ACS06).
+ * Runtime remediation remains in `remediation.ts`; parity tests bind the two.
+ *
+ * Zero Node I/O. Optional CLI surface: generated `bin/lib/diagnostic-catalog.mjs`.
+ *
+ * @see docs/diagnostics.md
+ * @see docs/plans/agent-contract-surface-4.3/README.md
  */
-
-type EffectiveContractWarning = {
-    path: string;
-    message: string;
-    /** advisory | error — errors fail closed; warnings surface drift (unreferenced files). */
-    severity: 'advisory' | 'error';
-};
-type EffectiveContract = {
-    config: ArkConfig;
-    arkRules: EffectiveArkRules;
-    warnings: EffectiveContractWarning[];
-};
-type ResolveEffectiveContractInput = {
-    config: ArkConfig;
+/** Product-relative docs path (shipped in the npm tarball when listed in package files). */
+declare const DIAGNOSTIC_DOCS_RELATIVE_PATH: "docs/diagnostics.md";
+/** Schema id for serializing the catalog snapshot (agents / install projection). */
+declare const DIAGNOSTIC_CATALOG_SCHEMA_VERSION: "1.0";
+type DiagnosticCategory = 'layer' | 'capability' | 'publish' | 'safety' | 'arkrules' | 'arkrun' | 'arkorder' | 'preflight' | 'analysis' | 'drift' | 'snippet-policy' | 'config' | 'adapter' | 'meta';
+type DiagnosticCatalogEntry = {
+    /** Stable public violation / diagnostic id. */
+    ruleId: string;
+    /** Short title for indexes and agent projection. */
+    title: string;
+    /** Why this finding exists (contract intent). */
+    why: string;
     /**
-     * Project-relative path → file contents. Missing keys mean the file is absent.
-     * Paths must use forward slashes and match the arkRules map values exactly.
+     * Canonical fix guidance (agent + human). Contextual nextAction on live
+     * findings may specialize this (e.g. type-only vs value layer import).
      */
-    fileContents: Readonly<Record<string, string>>;
+    fix: string;
+    /** Markdown fragment id for docs/diagnostics.md (without leading #). */
+    docsAnchor: string;
+    category: DiagnosticCategory;
     /**
-     * Optional inventory of files under arkrules/ (or other dirs) used only to
-     * detect unreferenced ArkRules files (advisory drift).
+     * When true, finding is commonly advisory / non-blocking in default profiles
+     * (doctor/config warnings, type-only placement debt, empty ArkRule scope).
+     * Not a severity bit for the engine — documentation only.
      */
-    discoveredArkRulesFiles?: readonly string[];
+    oftenAdvisory?: boolean;
 };
-declare class EffectiveContractError extends Error {
-    readonly issues: ArkConfigIssue[];
-    readonly source: string;
-    constructor(source: string, issues: ArkConfigIssue[]);
-}
 /**
- * Resolve arkRules references into a single Effective Contract.
- * Fail-closed for missing, unparsable, or schema-invalid referenced files.
+ * Closed public catalog. Order is stable (category groups, then ruleId) for
+ * deterministic serialization and docs generation.
+ *
+ * Every production-emitted `ruleId` must appear here. Remediation switch cases
+ * and adapter nextAction branches are parity-tested against this list.
  */
-declare function resolveEffectiveContract(input: ResolveEffectiveContractInput, source?: string): EffectiveContract;
+declare const DIAGNOSTIC_CATALOG: readonly DiagnosticCatalogEntry[];
+/** All public ruleIds in catalog order. */
+declare const DIAGNOSTIC_RULE_IDS: readonly string[];
+declare function isKnownDiagnosticCode(ruleId: string | null | undefined): boolean;
 /**
- * Canonical payload for policyHash: root config + sorted effective ArkRules.
- * Absence of arkRules yields the same payload shape with empty structure/invariants.
- * `stewards`, `layers[].description`, `layers[].trustBoundary`, and
- * `layers[].owners` are metadata — not import-rule teeth.
- * `requireLayerOwners` stays in the hash (it is the require switch).
+ * True when the code is catalogued or is an ArkRule-family id handled by the
+ * ARKRULE_* prefix fallback in remediation (structure sensors may add members later
+ * only via catalog + ROADMAP — prefix alone is not a license for free-form ids).
  */
-declare function effectiveContractPolicyPayload(contract: EffectiveContract): unknown;
-
+declare function isCataloguedOrArkRuleFamily(ruleId: string | null | undefined): boolean;
+declare function getDiagnosticCatalogEntry(ruleId: string | null | undefined): DiagnosticCatalogEntry | undefined;
+/** Fragment for docs links, e.g. `#LAYER_IMPORT_VIOLATION`. */
+declare function diagnosticDocsFragment(ruleId: string): string;
 /**
- * ArkRun resolver-fact extraction (ADR 0022 / RN03).
- *
- * Syntax evidence only — no verdicts, scores, or sensors. Tooling may replace
- * this lexical pass with TypeScript-API facts of the same shape.
+ * Repo-relative docs path with fragment (for agents and JSON).
+ * Package consumers resolve against the installed package root or GitHub tree.
  */
-
-/** Closed factory names from ADR 0022 `arkrun-missing-root`. */
-declare const ARKRUN_KERNEL_FACTORY_CALLEES: readonly ["createArkKernel", "createStrictArkKernel", "createLenientArkKernel", "createArkKernelFromConfig", "createStrictArkKernelFromConfig", "createLenientArkKernelFromConfig"];
-/** Closed interaction callees from ADR 0022 undeclared-emit/handle/depend. */
-declare const ARKRUN_KERNEL_INTERACTION_CALLEES: readonly ["publisher", "publish", "raise", "raiseAsync", "send", "sendTo", "subscribe", "registerHandler", "resolve", "resolveSingleton"];
-declare function isArkRunKernelModuleSpecifier(specifier: string): boolean;
+declare function diagnosticDocsPath(ruleId: string): string;
+/** Catalog snapshot for JSON export / agent projection (stable field order). */
+declare function serializeDiagnosticCatalog(): {
+    schemaVersion: typeof DIAGNOSTIC_CATALOG_SCHEMA_VERSION;
+    docsPath: typeof DIAGNOSTIC_DOCS_RELATIVE_PATH;
+    codes: readonly DiagnosticCatalogEntry[];
+};
 /**
- * Closed broker / queue / emitter specifiers for `arkrun-transport-bypass`
- * (ADR 0022 D4). Exact entry or package-root subpath only — never substring.
+ * Static catalog fix for a ruleId when no live violation context is available.
+ * Live adapters should still use deterministicNextAction for specialized edges.
  */
-declare const ARKRUN_TRANSPORT_BYPASS_SPECIFIERS: readonly ["events", "node:events", "eventemitter2", "eventemitter3", "emittery", "kafkajs", "kafka-node", "amqplib", "amqp", "bull", "bullmq", "mqtt", "nats", "@aws-sdk/client-sqs", "@aws-sdk/client-sns", "@aws-sdk/client-eventbridge", "@google-cloud/pubsub", "@azure/service-bus"];
-declare function isArkRunTransportBypassSpecifier(specifier: string): boolean;
-declare function arkRunKernelCallKind(callee: string): ResolvedArkRunKernelCallKind | undefined;
+declare function catalogFixForRuleId(ruleId: string | null | undefined): string | undefined;
 /**
- * Lexical import/export-from and require/import() specifier edges for the
- * editor / snippet envelope. Resolution stays unresolved-external — sensors
- * only need the specifier and from-file.
+ * Static catalog why for a ruleId (agent “why” surface).
  */
-declare function extractArkRunValueImportDependenciesFromSource(file: string, content: string): ResolvedDependencyFact[];
-/** PascalCase named bindings from value import clauses (snippet admitted constructors). */
-declare function extractArkRunImportedConstructorNamesFromSource(content: string): string[];
-type ExtractArkRunKernelCallsOptions = {
-    /**
-     * Relative specifiers that resolve to a kernel/composition root module
-     * (see {@link createArkRunKernelRootSpecifierMatcher}); identifiers imported
-     * from them are traced as kernel receivers.
-     */
-    isKernelRootSpecifier?: (specifier: string) => boolean;
-    /**
-     * The project's effective intent prefixes (configured `layers[].intentPrefixes`
-     * plus the canonical defaults — {@link arkRunEffectiveIntentPrefixes}). An
-     * untraced receiver counts as a kernel call when its name literal carries one.
-     * Omitted: only the canonical prefixes count.
-     */
-    intentPrefixes?: readonly string[];
-};
-declare function extractArkRunKernelCallsFromSource(file: string, content: string, options?: ExtractArkRunKernelCallsOptions): ResolvedArkRunKernelCallFact[];
-declare function extractArkRunManagedNewsFromSource(file: string, content: string, admittedTypeNames: ReadonlySet<string>): ResolvedArkRunManagedNewFact[];
-/** File-scoped `uses` / `reactsTo` / `raises` / `sends` string-literal lists (ADR 0023). */
-declare function extractArkRunDeclarationsFromSource(file: string, content: string): ResolvedArkRunDeclarationFact[];
+declare function catalogWhyForRuleId(ruleId: string | null | undefined): string | undefined;
 
+/** Public, evidence-backed enforcement state shared by doctor adapters. */
+declare const ARK_ENFORCEMENT_STATE_SCHEMA_VERSION: "1.1";
+type EnforcementVerification = boolean | 'unverified';
+type EnforcementEvidenceField = 'configured' | 'installed' | 'active' | 'runtimeObserved' | 'operationCoverage' | 'bypassable' | 'required' | 'hard';
+type EnforcementEvidence = {
+    field: 'configured' | 'installed' | 'runtimeObserved' | 'hard';
+    source: string;
+    value: boolean;
+} | {
+    field: 'active' | 'operationCoverage' | 'bypassable' | 'required';
+    source: string;
+    value: EnforcementVerification;
+};
 /**
- * Extra-plane merge teeth (ArkRules + ArkRun + ArkOrder). Same classification floor.
+ * State for one enforcement boundary.
  *
- * Unknown classification (contract-only callers) allows teeth. Known empty or
- * under-floor trees demote extra-plane findings so they never merge-block.
+ * `configured` records valid wiring, while `installed` requires the referenced
+ * package or executable to resolve. Runtime/provider facts remain
+ * `unverified` until observed; local files never prove `required: true`.
  */
-declare const EXTRA_MERGE_TEETH_GOVERNED_FLOOR = 50;
-type ExtraMergeTeethClassification = {
-    governedPercent?: number | null;
-    populatedLayerCount?: number | null;
+type EnforcementBoundaryState = {
+    supported: boolean;
+    analyzed: boolean;
+    configured: boolean;
+    installed: boolean;
+    active: EnforcementVerification;
+    runtimeObserved: boolean;
+    operation: string | null;
+    operationCoverage: EnforcementVerification;
+    bypassable: EnforcementVerification;
+    required: EnforcementVerification;
+    hard: boolean;
+    evidence: readonly EnforcementEvidence[];
 };
-type ExtraMergeTeethClassificationInput = ExtraMergeTeethClassification & {
-    classifiedFiles?: number | null;
+type ArkEnforcementHost = 'claude' | 'grok' | 'cursor' | 'codex' | 'unknown';
+type ArkEnforcementState = {
+    schemaVersion: typeof ARK_ENFORCEMENT_STATE_SCHEMA_VERSION;
+    activeHost: ArkEnforcementHost;
+    localWrite: EnforcementBoundaryState;
+    advisoryMcp: EnforcementBoundaryState;
+    ciMerge: EnforcementBoundaryState;
 };
-declare function normalizeExtraMergeTeethClassification(classification?: ExtraMergeTeethClassificationInput | null): ExtraMergeTeethClassification;
-declare function extraMergeTeethAllowed(classification?: ExtraMergeTeethClassificationInput | null): boolean;
-declare function classifyResolvedLayerCoverage(files: readonly {
+
+/** Public neutral contract for the opt-in new-code design-fitness ratchet. */
+declare const ARK_DESIGN_DELTA_SCHEMA_VERSION: "1.0";
+type DesignSmellId = 'io-under-application' | 'handler-in-persistence' | 'god-module' | 'domain-logic-in-ui' | 'facade-sql-in-routes' | 'mixed-pattern-cluster' | 'soft-contract';
+type DesignDeltaIdentity = {
+    kind: 'git-tree' | 'candidate-tree';
+    value: string;
+    commit?: string;
+};
+type DesignSmellEvidence = {
+    kind: string;
+    path: string;
+    line?: number;
+    symbol?: string;
+    detail?: string;
+    magnitude: number;
+};
+type DesignSmellFinding = {
+    smellId: DesignSmellId;
+    fingerprint: string;
+    identity: string;
+    evidence: DesignSmellEvidence;
+    repairHint: string;
+};
+type DesignDeltaChange = DesignSmellFinding & {
+    classification: 'new' | 'worsened';
+    baseMagnitude: number;
+    candidateMagnitude: number;
+};
+/** Created-path merge vs full new+worsened ratchet (Z10). Omitted on older producers. */
+type DesignDeltaEnforcementScope = 'created-paths' | 'touched-new-or-worsened';
+type ArkDesignDeltaResult = {
+    schemaVersion: typeof ARK_DESIGN_DELTA_SCHEMA_VERSION;
+    mode: 'git-base' | 'write-candidate';
+    complete: boolean;
+    valid: boolean;
+    base: DesignDeltaIdentity;
+    candidate: DesignDeltaIdentity;
+    supportedSmellIds: readonly DesignSmellId[];
+    touchedPaths: readonly string[];
+    changes: readonly DesignDeltaChange[];
+    baseFindingCount: number;
+    candidateFindingCount: number;
+    historicalResidualCount: number;
+    enforcementScope?: DesignDeltaEnforcementScope;
+    error?: string;
+};
+
+/**
+ * Canonical, pure contract for ArkGate MCP project identity.
+ *
+ * Filesystem canonicalization, hashing, clocks, and runtime ids belong to the
+ * Tooling adapter. This module owns the stable payload and published schemas so
+ * every MCP surface speaks the same identity/binding language.
+ */
+declare const ARK_PROJECT_IDENTITY_SCHEMA_VERSION: "1.0";
+declare const ARK_PROJECT_IDENTITY_SCHEMA_URL = "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
+type ProjectIdentity = {
+    schemaVersion: typeof ARK_PROJECT_IDENTITY_SCHEMA_VERSION;
+    projectId: string;
+    resolvedRoot: string;
+    resolvedConfigPath: string;
+    arkgateVersion: string;
+    contractHash: string;
+    contractSource: 'project' | 'default-profile' | 'manifest';
+    runtimeId: string;
+    processStartedAt: string;
+};
+type ProjectExpectation = {
+    expectedRoot?: string;
+    expectedProjectId?: string;
+};
+type ProjectBinding = {
+    status: 'matched' | 'unverified' | 'mismatch';
+    authoritative: boolean;
+    expectedRoot?: string;
+    expectedProjectId?: string;
+    code?: 'PROJECT_ROOT_MISMATCH' | 'PROJECT_ID_MISMATCH' | 'INVALID_PROJECT_EXPECTATION';
+    message?: string;
+};
+declare const PROJECT_EXPECTATION_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly expectedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: string;
+        };
+        readonly expectedProjectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+            readonly description: "Project id previously returned by ark_identity or ark_manifest.";
+        };
+    };
+};
+declare const PROJECT_BINDING_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["status", "authoritative"];
+    readonly properties: {
+        readonly status: {
+            readonly enum: readonly ["matched", "unverified", "mismatch"];
+        };
+        readonly authoritative: {
+            readonly type: "boolean";
+        };
+        readonly expectedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly expectedProjectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly code: {
+            readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
+        };
+        readonly message: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+    };
+};
+declare const ARK_PROJECT_IDENTITY_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://unpkg.com/arkgate@4/schemas/ark.project-identity.schema.json";
+    readonly title: "ArkGate MCP project identity";
+    readonly description: "Stable project binding plus separate runtime and architecture-contract evidence.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "projectId", "resolvedRoot", "resolvedConfigPath", "arkgateVersion", "contractHash", "contractSource", "runtimeId", "processStartedAt"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "1.0";
+        };
+        readonly projectId: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly resolvedRoot: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly resolvedConfigPath: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly arkgateVersion: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly contractHash: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly contractSource: {
+            readonly enum: readonly ["project", "default-profile", "manifest"];
+        };
+        readonly runtimeId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly processStartedAt: {
+            readonly type: "string";
+            readonly format: "date-time";
+        };
+    };
+    readonly $defs: {
+        readonly expectation: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly properties: {
+                readonly expectedRoot: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: string;
+                };
+                readonly expectedProjectId: {
+                    readonly type: "string";
+                    readonly pattern: "^sha256:[a-f0-9]{64}$";
+                    readonly description: "Project id previously returned by ark_identity or ark_manifest.";
+                };
+            };
+        };
+        readonly binding: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["status", "authoritative"];
+            readonly properties: {
+                readonly status: {
+                    readonly enum: readonly ["matched", "unverified", "mismatch"];
+                };
+                readonly authoritative: {
+                    readonly type: "boolean";
+                };
+                readonly expectedRoot: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly expectedProjectId: {
+                    readonly type: "string";
+                    readonly pattern: "^sha256:[a-f0-9]{64}$";
+                };
+                readonly code: {
+                    readonly enum: readonly ["PROJECT_ROOT_MISMATCH", "PROJECT_ID_MISMATCH", "INVALID_PROJECT_EXPECTATION"];
+                };
+                readonly message: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+            };
+        };
+    };
+};
+/**
+ * Stable identity: contract edits and MCP restarts must not change which project
+ * this is. Callers must pass canonical real paths and a SHA-256 hex function.
+ */
+declare function createProjectId(resolvedRoot: string, resolvedConfigPath: string, sha256Hex: (value: string) => string): string;
+declare function createProjectIdentity(input: Omit<ProjectIdentity, 'schemaVersion'>): ProjectIdentity;
+
+/**
+ * Pure Effective Contract composition (ADR 0012).
+ *
+ * Resolves `arkRules` references against a supplied file-content map (Tooling owns I/O),
+ * validates each part, and returns one in-memory contract with per-rule provenance.
+ * The serialized effective rules feed policyHash via the analysis contract loader.
+ */
+
+type EffectiveContractWarning = {
+    path: string;
+    message: string;
+    /** advisory | error — errors fail closed; warnings surface drift (unreferenced files). */
+    severity: 'advisory' | 'error';
+};
+type EffectiveContract = {
+    config: ArkConfig;
+    arkRules: EffectiveArkRules;
+    warnings: EffectiveContractWarning[];
+};
+type ResolveEffectiveContractInput = {
+    config: ArkConfig;
+    /**
+     * Project-relative path → file contents. Missing keys mean the file is absent.
+     * Paths must use forward slashes and match the arkRules map values exactly.
+     */
+    fileContents: Readonly<Record<string, string>>;
+    /**
+     * Optional inventory of files under arkrules/ (or other dirs) used only to
+     * detect unreferenced ArkRules files (advisory drift).
+     */
+    discoveredArkRulesFiles?: readonly string[];
+    /**
+     * Governed project-relative paths. The child wall names slice rule files from
+     * this index. Absence keeps central `arkRules` only.
+     */
+    governedFiles?: readonly string[];
+};
+declare class EffectiveContractError extends Error {
+    readonly issues: ArkConfigIssue[];
+    readonly source: string;
+    constructor(source: string, issues: ArkConfigIssue[]);
+}
+/**
+ * Resolve arkRules references into a single Effective Contract.
+ * Fail-closed for missing, unparsable, or schema-invalid referenced files.
+ */
+declare function resolveEffectiveContract(input: ResolveEffectiveContractInput, source?: string): EffectiveContract;
+/**
+ * Canonical payload for policyHash: root config + sorted effective ArkRules.
+ * Absence of arkRules yields the same payload shape with empty structure/invariants.
+ * `stewards`, `layers[].description`, `layers[].trustBoundary`, and
+ * `layers[].owners` are metadata — not import-rule teeth.
+ * `requireLayerOwners` stays in the hash (it is the require switch).
+ */
+declare function effectiveContractPolicyPayload(contract: EffectiveContract): unknown;
+
+/**
+ * ArkRun resolver-fact extraction (ADR 0022 / RN03).
+ *
+ * Syntax evidence only — no verdicts, scores, or sensors. Tooling may replace
+ * this lexical pass with TypeScript-API facts of the same shape.
+ */
+
+/** Closed factory names from ADR 0022 `arkrun-missing-root`. */
+declare const ARKRUN_KERNEL_FACTORY_CALLEES: readonly ["createArkKernel", "createStrictArkKernel", "createLenientArkKernel", "createArkKernelFromConfig", "createStrictArkKernelFromConfig", "createLenientArkKernelFromConfig"];
+/** Closed interaction callees from ADR 0022 undeclared-emit/handle/depend. */
+declare const ARKRUN_KERNEL_INTERACTION_CALLEES: readonly ["publisher", "publish", "raise", "raiseAsync", "send", "sendTo", "subscribe", "registerHandler", "resolve", "resolveSingleton"];
+declare function isArkRunKernelModuleSpecifier(specifier: string): boolean;
+/**
+ * Closed broker / queue / emitter specifiers for `arkrun-transport-bypass`
+ * (ADR 0022 D4). Exact entry or package-root subpath only — never substring.
+ */
+declare const ARKRUN_TRANSPORT_BYPASS_SPECIFIERS: readonly ["events", "node:events", "eventemitter2", "eventemitter3", "emittery", "kafkajs", "kafka-node", "amqplib", "amqp", "bull", "bullmq", "mqtt", "nats", "@aws-sdk/client-sqs", "@aws-sdk/client-sns", "@aws-sdk/client-eventbridge", "@google-cloud/pubsub", "@azure/service-bus"];
+declare function isArkRunTransportBypassSpecifier(specifier: string): boolean;
+declare function arkRunKernelCallKind(callee: string): ResolvedArkRunKernelCallKind | undefined;
+/**
+ * Lexical import/export-from and require/import() specifier edges for the
+ * editor / snippet envelope. Resolution stays unresolved-external — sensors
+ * only need the specifier and from-file.
+ */
+declare function extractArkRunValueImportDependenciesFromSource(file: string, content: string): ResolvedDependencyFact[];
+/** PascalCase named bindings from value import clauses (snippet admitted constructors). */
+declare function extractArkRunImportedConstructorNamesFromSource(content: string): string[];
+type ExtractArkRunKernelCallsOptions = {
+    /**
+     * Relative specifiers that resolve to a kernel/composition root module
+     * (see {@link createArkRunKernelRootSpecifierMatcher}); identifiers imported
+     * from them are traced as kernel receivers.
+     */
+    isKernelRootSpecifier?: (specifier: string) => boolean;
+    /**
+     * The project's effective intent prefixes (configured `layers[].intentPrefixes`
+     * plus the canonical defaults — {@link arkRunEffectiveIntentPrefixes}). An
+     * untraced receiver counts as a kernel call when its name literal carries one.
+     * Omitted: only the canonical prefixes count.
+     */
+    intentPrefixes?: readonly string[];
+};
+declare function extractArkRunKernelCallsFromSource(file: string, content: string, options?: ExtractArkRunKernelCallsOptions): ResolvedArkRunKernelCallFact[];
+declare function extractArkRunManagedNewsFromSource(file: string, content: string, admittedTypeNames: ReadonlySet<string>): ResolvedArkRunManagedNewFact[];
+/** File-scoped `uses` / `reactsTo` / `raises` / `sends` string-literal lists (ADR 0023). */
+declare function extractArkRunDeclarationsFromSource(file: string, content: string): ResolvedArkRunDeclarationFact[];
+
+/**
+ * Extra-plane merge teeth (ArkRules + ArkRun + ArkOrder). Same classification floor.
+ *
+ * Unknown classification (contract-only callers) allows teeth. Known empty or
+ * under-floor trees demote extra-plane findings so they never merge-block.
+ */
+declare const EXTRA_MERGE_TEETH_GOVERNED_FLOOR = 50;
+type ExtraMergeTeethClassification = {
+    governedPercent?: number | null;
+    populatedLayerCount?: number | null;
+};
+type ExtraMergeTeethClassificationInput = ExtraMergeTeethClassification & {
+    classifiedFiles?: number | null;
+};
+declare function normalizeExtraMergeTeethClassification(classification?: ExtraMergeTeethClassificationInput | null): ExtraMergeTeethClassification;
+declare function extraMergeTeethAllowed(classification?: ExtraMergeTeethClassificationInput | null): boolean;
+declare function classifyResolvedLayerCoverage(files: readonly {
     layer?: string | null | undefined;
 }[]): ExtraMergeTeethClassification;
 declare function isArkRunRuleId(ruleId: unknown): boolean;
@@ -3877,6 +4121,12 @@ type MergePlanesHonesty = {
         allowsTeeth: boolean;
     };
 };
+type ExtraPlaneStatusInput = {
+    present?: boolean;
+    mode?: string | null;
+    extraMergeTeeth?: boolean;
+    residual?: number | null;
+};
 /**
  * Which extra planes can fail merge. Counts and stamps only — never a score.
  */
@@ -3954,12 +4204,7 @@ declare function summarizeArkRunSection(input?: {
     layerFlow?: LayerFlowConfigShape | null;
 }): ArkRunDoctorSection;
 /** Thin status slice — counts only; residual null means unknown, not green. */
-declare function projectStatusArkRun(input?: {
-    present?: boolean;
-    mode?: string | null;
-    extraMergeTeeth?: boolean;
-    residual?: number | null;
-}): ArkRunStatusSlice;
+declare function projectStatusArkRun(input?: ExtraPlaneStatusInput): ArkRunStatusSlice;
 declare function formatArkRunDoctorLines(section: ArkRunDoctorSection): string[];
 
 declare const ARKRUN_TIER1_SENSOR_IDS: readonly ["arkrun-missing-root", "arkrun-kernel-in-domain", "arkrun-direct-new", "arkrun-undeclared-emit", "arkrun-undeclared-handle", "arkrun-undeclared-depend", "arkrun-transport-bypass"];
@@ -4161,179 +4406,6 @@ declare function inventoryToExtractionCard(candidate: RulesInventoryCandidate):
     next: string;
 };
 
-/** Public, evidence-backed enforcement state shared by doctor adapters. */
-declare const ARK_ENFORCEMENT_STATE_SCHEMA_VERSION: "1.1";
-type EnforcementVerification = boolean | 'unverified';
-type EnforcementEvidenceField = 'configured' | 'installed' | 'active' | 'runtimeObserved' | 'operationCoverage' | 'bypassable' | 'required' | 'hard';
-type EnforcementEvidence = {
-    field: 'configured' | 'installed' | 'runtimeObserved' | 'hard';
-    source: string;
-    value: boolean;
-} | {
-    field: 'active' | 'operationCoverage' | 'bypassable' | 'required';
-    source: string;
-    value: EnforcementVerification;
-};
-/**
- * State for one enforcement boundary.
- *
- * `configured` records valid wiring, while `installed` requires the referenced
- * package or executable to resolve. Runtime/provider facts remain
- * `unverified` until observed; local files never prove `required: true`.
- */
-type EnforcementBoundaryState = {
-    supported: boolean;
-    analyzed: boolean;
-    configured: boolean;
-    installed: boolean;
-    active: EnforcementVerification;
-    runtimeObserved: boolean;
-    operation: string | null;
-    operationCoverage: EnforcementVerification;
-    bypassable: EnforcementVerification;
-    required: EnforcementVerification;
-    hard: boolean;
-    evidence: readonly EnforcementEvidence[];
-};
-type ArkEnforcementHost = 'claude' | 'grok' | 'cursor' | 'codex' | 'unknown';
-type ArkEnforcementState = {
-    schemaVersion: typeof ARK_ENFORCEMENT_STATE_SCHEMA_VERSION;
-    activeHost: ArkEnforcementHost;
-    localWrite: EnforcementBoundaryState;
-    advisoryMcp: EnforcementBoundaryState;
-    ciMerge: EnforcementBoundaryState;
-};
-
-/** Public neutral contract for the opt-in new-code design-fitness ratchet. */
-declare const ARK_DESIGN_DELTA_SCHEMA_VERSION: "1.0";
-type DesignSmellId = 'io-under-application' | 'handler-in-persistence' | 'god-module' | 'domain-logic-in-ui' | 'facade-sql-in-routes' | 'mixed-pattern-cluster' | 'soft-contract';
-type DesignDeltaIdentity = {
-    kind: 'git-tree' | 'candidate-tree';
-    value: string;
-    commit?: string;
-};
-type DesignSmellEvidence = {
-    kind: string;
-    path: string;
-    line?: number;
-    symbol?: string;
-    detail?: string;
-    magnitude: number;
-};
-type DesignSmellFinding = {
-    smellId: DesignSmellId;
-    fingerprint: string;
-    identity: string;
-    evidence: DesignSmellEvidence;
-    repairHint: string;
-};
-type DesignDeltaChange = DesignSmellFinding & {
-    classification: 'new' | 'worsened';
-    baseMagnitude: number;
-    candidateMagnitude: number;
-};
-/** Created-path merge vs full new+worsened ratchet (Z10). Omitted on older producers. */
-type DesignDeltaEnforcementScope = 'created-paths' | 'touched-new-or-worsened';
-type ArkDesignDeltaResult = {
-    schemaVersion: typeof ARK_DESIGN_DELTA_SCHEMA_VERSION;
-    mode: 'git-base' | 'write-candidate';
-    complete: boolean;
-    valid: boolean;
-    base: DesignDeltaIdentity;
-    candidate: DesignDeltaIdentity;
-    supportedSmellIds: readonly DesignSmellId[];
-    touchedPaths: readonly string[];
-    changes: readonly DesignDeltaChange[];
-    baseFindingCount: number;
-    candidateFindingCount: number;
-    historicalResidualCount: number;
-    enforcementScope?: DesignDeltaEnforcementScope;
-    error?: string;
-};
-
-/**
- * Public diagnostic code catalog (ACS02).
- *
- * Closed vocabulary of stable `ruleId` values emitted by ArkGate adapters with
- * human/agent `why` / `fix` anchors and docs fragment ids. Cataloguing only —
- * no new rule semantics, no LLM verdict, no enforcement from prose.
- *
- * **Canonical** for docs, agent projection (ACS04), and finding refs (ACS06).
- * Runtime remediation remains in `remediation.ts`; parity tests bind the two.
- *
- * Zero Node I/O. Optional CLI surface: generated `bin/lib/diagnostic-catalog.mjs`.
- *
- * @see docs/diagnostics.md
- * @see docs/plans/agent-contract-surface-4.3/README.md
- */
-/** Product-relative docs path (shipped in the npm tarball when listed in package files). */
-declare const DIAGNOSTIC_DOCS_RELATIVE_PATH: "docs/diagnostics.md";
-/** Schema id for serializing the catalog snapshot (agents / install projection). */
-declare const DIAGNOSTIC_CATALOG_SCHEMA_VERSION: "1.0";
-type DiagnosticCategory = 'layer' | 'capability' | 'publish' | 'safety' | 'arkrules' | 'arkrun' | 'arkorder' | 'preflight' | 'analysis' | 'drift' | 'snippet-policy' | 'config' | 'adapter' | 'meta';
-type DiagnosticCatalogEntry = {
-    /** Stable public violation / diagnostic id. */
-    ruleId: string;
-    /** Short title for indexes and agent projection. */
-    title: string;
-    /** Why this finding exists (contract intent). */
-    why: string;
-    /**
-     * Canonical fix guidance (agent + human). Contextual nextAction on live
-     * findings may specialize this (e.g. type-only vs value layer import).
-     */
-    fix: string;
-    /** Markdown fragment id for docs/diagnostics.md (without leading #). */
-    docsAnchor: string;
-    category: DiagnosticCategory;
-    /**
-     * When true, finding is commonly advisory / non-blocking in default profiles
-     * (doctor/config warnings, type-only placement debt, empty ArkRule scope).
-     * Not a severity bit for the engine — documentation only.
-     */
-    oftenAdvisory?: boolean;
-};
-/**
- * Closed public catalog. Order is stable (category groups, then ruleId) for
- * deterministic serialization and docs generation.
- *
- * Every production-emitted `ruleId` must appear here. Remediation switch cases
- * and adapter nextAction branches are parity-tested against this list.
- */
-declare const DIAGNOSTIC_CATALOG: readonly DiagnosticCatalogEntry[];
-/** All public ruleIds in catalog order. */
-declare const DIAGNOSTIC_RULE_IDS: readonly string[];
-declare function isKnownDiagnosticCode(ruleId: string | null | undefined): boolean;
-/**
- * True when the code is catalogued or is an ArkRule-family id handled by the
- * ARKRULE_* prefix fallback in remediation (structure sensors may add members later
- * only via catalog + ROADMAP — prefix alone is not a license for free-form ids).
- */
-declare function isCataloguedOrArkRuleFamily(ruleId: string | null | undefined): boolean;
-declare function getDiagnosticCatalogEntry(ruleId: string | null | undefined): DiagnosticCatalogEntry | undefined;
-/** Fragment for docs links, e.g. `#LAYER_IMPORT_VIOLATION`. */
-declare function diagnosticDocsFragment(ruleId: string): string;
-/**
- * Repo-relative docs path with fragment (for agents and JSON).
- * Package consumers resolve against the installed package root or GitHub tree.
- */
-declare function diagnosticDocsPath(ruleId: string): string;
-/** Catalog snapshot for JSON export / agent projection (stable field order). */
-declare function serializeDiagnosticCatalog(): {
-    schemaVersion: typeof DIAGNOSTIC_CATALOG_SCHEMA_VERSION;
-    docsPath: typeof DIAGNOSTIC_DOCS_RELATIVE_PATH;
-    codes: readonly DiagnosticCatalogEntry[];
-};
-/**
- * Static catalog fix for a ruleId when no live violation context is available.
- * Live adapters should still use deterministicNextAction for specialized edges.
- */
-declare function catalogFixForRuleId(ruleId: string | null | undefined): string | undefined;
-/**
- * Static catalog why for a ruleId (agent “why” surface).
- */
-declare function catalogWhyForRuleId(ruleId: string | null | undefined): string | undefined;
-
 /**
  * Doctor / status / report ArkOrder section. Always notAScore.
  * Residual is a unique ARKORDER finding-id count — never a score or LLM verdict.
@@ -4880,7 +4952,7 @@ declare const ARK_STATUS_MANIFEST_SCHEMA: {
         };
         readonly arkRun: {
             readonly type: "object";
-            readonly description: "ArkRun extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score.";
+            readonly description: "ArkRun extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score." | "ArkOrder extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score.";
             readonly additionalProperties: false;
             readonly required: readonly ["notAScore", "present", "mode", "extraMergeTeeth", "residual"];
             readonly properties: {
@@ -4912,7 +4984,7 @@ declare const ARK_STATUS_MANIFEST_SCHEMA: {
         };
         readonly arkOrder: {
             readonly type: "object";
-            readonly description: "ArkOrder extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score.";
+            readonly description: "ArkRun extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score." | "ArkOrder extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score.";
             readonly additionalProperties: false;
             readonly required: readonly ["notAScore", "present", "mode", "extraMergeTeeth", "residual"];
             readonly properties: {
@@ -5472,4 +5544,4 @@ declare function agentSkillPackageFileRelativePath(skillName: string): string;
  */
 declare function flatSkillTemplateFileRelativePath(skillName: string): string;
 
-export { ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH, AGENT_PROJECTION_BEGIN_MARKER, AGENT_PROJECTION_END_MARKER, AGENT_PROJECTION_ENFORCEMENT_SURFACES, AGENT_PROJECTION_NON_ENFORCEMENT_LABEL, AGENT_SKILLS_PACKAGE_RELATIVE_ROOT, AGENT_SKILL_ENTRY_FILENAME, type AICodeGate, type AICodeGateContext, type AICodeGateOptions, type AICodeGateResult, type AICodeGateViolation, type AIGateExtension, ANALYSIS_IR_SCHEMA_VERSION, ARKORDER_RULE_IDS, ARKORDER_TIER1_SENSOR_IDS, ARKRUN_INTERACTION_NAME_INCOMPLETE, ARKRUN_KERNEL_FACTORY_CALLEES, ARKRUN_KERNEL_INTERACTION_CALLEES, ARKRUN_RULE_IDS, ARKRUN_TIER1_SENSOR_IDS, ARKRUN_TRANSPORT_BYPASS_SPECIFIERS, ARK_AGENT_PROJECTION_SCHEMA_VERSION, ARK_AGENT_SKILLS_PACKAGE_SCHEMA_VERSION, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, ARK_CONFIG_SCHEMA, ARK_CONFIG_SCHEMA_VERSION, ARK_DESIGN_DELTA_SCHEMA_VERSION, ARK_ENFORCEMENT_STATE_SCHEMA_VERSION, ARK_FIRST_CLASS_SKILL_NAMES, ARK_IMPROVEMENT_COMPASS_SCHEMA_VERSION, ARK_PROJECT_IDENTITY_SCHEMA, ARK_PROJECT_IDENTITY_SCHEMA_URL, ARK_PROJECT_IDENTITY_SCHEMA_VERSION, ARK_RULES_SCHEMA, ARK_RULES_SCHEMA_VERSION, ARK_RULE_SENSORS, ARK_RUN_DOCTOR_SCHEMA_VERSION, ARK_SKILL_CAPACITY, ARK_SKILL_CAPACITY_DEDICATED_DOORS, ARK_SKILL_DESCRIPTION_VERSION_PATTERN, ARK_SKILL_NAMES, ARK_SKILL_NAME_COUNT, ARK_SKILL_NORTH_STAR, ARK_SKILL_REQUIRED_SURFACES, ARK_SKILL_STUB_REDIRECTS, ARK_STATUS_MANIFEST_SCHEMA, ARK_STATUS_MANIFEST_SCHEMA_URL, ARK_STATUS_MANIFEST_SCHEMA_VERSION, type AdapterCompletenessReason, type AdapterDiagnostic, type AdapterResult, type AdapterSeverity, type AdapterViolationInput, type AgentProjectionCatalogEntry, type AgentProjectionFacts, type AgentProjectionLayerSummary, type AgentProjectionMergeAction, type AgentProjectionMergeResult, type AgentProjectionMeta, type AgentProjectionProfile, type AgentSkillPackageEntry, type AgentSkillValidationIssue, type AnalysisCapabilityUse, type AnalysisCompilerOptions, type AnalysisCompleteness, type AnalysisContract, type AnalysisEvidence, type AnalysisFile, type AnalysisFileChange, type AnalysisFileInput, type AnalysisImportEdge, type AnalysisIr, type AnalysisMode, type AnalysisResult, type AnalysisViolation, type AnalyzeArchitectureConvergenceInput, type AnalyzeChangeInput, type AnalyzePolicyDeltaInput, type AnalyzeProjectInput, type AnalyzeResolvedProjectInput, type ArchitectureActualChange, type ArchitectureChangeMap, type ArchitectureChangeMapContract, type ArchitectureChangeMapDependency, type ArchitectureChangeMapFile, type ArchitectureChangeOperation, type ArchitectureConvergenceClassification, type ArchitectureConvergenceFinding, type ArchitectureConvergenceResult, type ArchitectureDependency, type ArchitectureEngineEdge, type ArchitectureEngineResult, type ArchitectureEngineViolation, type ArchitectureLayer, type ArchitectureLayerConfig, type ArchitectureProfile, type ArchitectureRule, type ArkCheckConfig, ArkConfig, ArkConfigLoadResult, type ArkDesignDeltaResult, type ArkEnforcementHost, type ArkEnforcementState, type ArkFirstClassSkillName, type ArkOrderRuleId, type ArkOrderSensorFinding, type ArkRuleSensorViolation, type ArkRulesFile, type ArkRulesIssue, ArkRulesValidationError, type ArkRunDoctorSection, type ArkRunRuleId, type ArkRunSensorFinding, type ArkRunStatusSlice, type ArkRunTier1SensorId, type ArkSkillCapacityDedicatedSurface, type ArkSkillCapacitySurface, type ArkSkillName, type ArkSkillNorthStar, type ArkSkillRequiredSurface, type ArkSkillStubName, type ChangePreflightResult, type ClassShapeFact, type CollectAnalysisConfigWarningsInput, type CoverageEvidence, type CoverageFiles, type CoverageInvariant, type CreateArchitectureProfileFromArkConfigOptions, type CreateArchitectureProfileOptions, type CreateElevenLayerArkConfigOptions, DEFAULT_AGENT_PROJECTION_RULE_IDS, DIAGNOSTIC_CATALOG, DIAGNOSTIC_CATALOG_SCHEMA_VERSION, DIAGNOSTIC_DOCS_RELATIVE_PATH, DIAGNOSTIC_RULE_IDS, type DeclarationShape, type DesignDeltaChange, type DesignDeltaEnforcementScope, type DesignDeltaIdentity, type DesignSmellEvidence, type DesignSmellFinding, type DesignSmellId, type DiagnosticCatalogEntry, type DiagnosticCategory, EXTRA_MERGE_TEETH_GOVERNED_FLOOR, type EffectiveArkRules, type EffectiveContract, EffectiveContractError, type EffectiveContractWarning, type EnforcementBoundaryState, type EnforcementEvidence, type EnforcementEvidenceField, type EnforcementVerification, type EvaluateArchitectureGraphInput, type EvaluateArkRunSensorsInput, type EvaluateArkRunSensorsResult, type ExtraMergeTeethClassification, FLAT_SKILL_TEMPLATES_RELATIVE_ROOT, type ForbiddenCapabilityUse, IMPROVEMENT_COMPASS_OUT_OF_SCOPE_LENSES, IMPROVEMENT_COMPASS_TOP_RESIDUAL_CAP, IMPROVEMENT_LENS_IDS, type ImprovementCompass, type ImprovementCompassEvidence, type ImprovementCompassFacts, type ImprovementCompassNextAction, type ImprovementCompassSmellFact, type ImprovementCompassViolationFact, type ImprovementLens, type ImprovementLensId, type ImprovementLensStatus, type InvariantCoverageEvidence, MERGE_PLANES_DUAL_STAMP, type MentionContext, type MergePlanesHonesty, POLICY_DELTA_SCHEMA_VERSION, PROJECT_BINDING_SCHEMA, PROJECT_EXPECTATION_SCHEMA, type ParseSkillDocumentResult, type ParsedSkillFrontmatter, type PolicyDelta, type PolicyDeltaAcknowledgement, type PolicyDeltaAnalysis, type PolicyDeltaClassification, type PolicyDeltaFinding, type PreflightResolvedChangeInput, type PreparedChangeFile, type ProjectBinding, type ProjectExpectation, type ProjectIdentity, RESOLVED_CANDIDATE_FACTS_SCHEMA, RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION, type ResolvedAmbientFact, type ResolvedAnalysisFile, type ResolvedAnalysisIr, type ResolvedAnalysisResult, type ResolvedArkRunCompositionRootHitFact, type ResolvedArkRunDeclarationFact, type ResolvedArkRunKernelCallFact, type ResolvedArkRunKernelCallKind, type ResolvedArkRunManagedNewFact, type ResolvedCandidateFacts, type ResolvedCandidateFactsInput, type ResolvedCapability, type ResolvedCapabilityFact, type ResolvedChangePreflightResult, type ResolvedDependencyFact, type ResolvedDependencyKind, type ResolvedDependencyState, type ResolvedFactsCompleteness, type ResolvedFactsReason, type ResolvedFileFact, type ResolvedIntentReferenceFact, type ResolvedPublishFact, type ResolvedSafetyFact, type ResolvedSafetyKind, type ResolvedSafetyReport, type RulesInventoryCandidate, type RulesInventoryResult, STATUS_COMPASS_FACTS_SOURCES, STATUS_COMPASS_MODES, STATUS_COMPASS_REASON_CODES, type SemanticDependency, type SemanticDependencyKind, type SkillProductCapacityIssue, type SkillProductCapacityIssueCode, type StatusActivationSlice, type StatusCheckVerdict, type StatusCompassFactsSource, type StatusCompassMode, type StatusCompassReasonCode, type StatusImprovementCompassSlice, type StatusLastCheckSlice, type StatusManifest, type StatusManifestFacts, type StatusNextAction, type StatusProjectIdentitySlice, type StatusRulesSlice, type StatusWritePathClass, type ValidateAgentSkillDocumentInput, type ValidateAgentSkillsPackageResult, type ValidateSkillProductCapacityInput, type ValidateSkillProductCapacityResult, adapterDocsCodePath, adapterFindingOccurrenceTargetKeys, adapterFindingRefFromTargetKey, adapterFindingTargetKey, agentProjectionContentIdentity, agentSkillEntryRelativePath, agentSkillPackageFileRelativePath, analyzeArchitectureConvergence, analyzeChange, analyzePolicyDelta, analyzeProject, analyzeResolvedProject, arkRunKernelCallKind, arkSkillStubRedirect, buildAgentProjectionBeginMarker, buildAgentProjectionBlock, buildAgentProjectionBody, buildAgentProjectionMeta, buildArkRuleFileHints, buildEffectiveArkRules, buildImprovementCompass, buildRulesInventory, buildStatusManifest, canPromoteInvariant, catalogFixForRuleId, catalogWhyForRuleId, classifyArkPolicyDelta, classifyCoverage, classifyResolvedLayerCoverage, classifyStatusWritePath, collectAnalysisConfigWarnings, collectEmptyAppliesToFindings, collectForbiddenCapabilityUses, composeMergePlanesHonesty, countsAsCoverage, createAICodeGate, createAdapterResult, createArchitectureProfile, createArchitectureProfileFromArkConfig, createElevenLayerArkConfig, createProjectId, createProjectIdentity, createResolvedCandidateFacts, defaultHonestLabel, demoteExtraPlaneTeethUnderClassificationFloor, deriveArkRuleFileHints, describeCoverage, detectArchitectureCycles, deterministicHash, diagnosticDocsFragment, diagnosticDocsPath, effectiveContractPolicyPayload, elevenLayerProfile, emptyEffectiveArkRules, evaluateArchitectureGraph, evaluateArkOrderSensors, evaluateArkRuleSensors, evaluateArkRunEditorSensors, evaluateArkRunEditorSensorsFromSource, evaluateArkRunSensors, evaluateInvariantCoverage, evaluateStatusBinding, explainViolation, extraMergeTeethAllowed, extractAgentProjectionBlock, extractArkRunDeclarationsFromSource, extractArkRunImportedConstructorNamesFromSource, extractArkRunKernelCallsFromSource, extractArkRunManagedNewsFromSource, extractArkRunValueImportDependenciesFromSource, extractClassShapesFromSource, extractSemanticDependencies, flatSkillTemplateFileRelativePath, formatAgentProjectionCatalogShortList, formatAgentProjectionLayers, formatArkRunDoctorLines, formatImprovementCompassDoctorLines, formatImprovementCompassResidualLabels, getDiagnosticCatalogEntry, inventoryToExtractionCard, isArkOrderRuleId, isArkRunKernelModuleSpecifier, isArkRunRuleId, isArkRunTransportBypassSpecifier, isArkSkillName, isCataloguedOrArkRuleFamily, isExtraPlaneFinding, isFirstClassArkSkillName, isKnownDiagnosticCode, isValidAgentSkillName, loadArkConfigContract, loadArkRulesContract, loadContract, loadResolvedCandidateFacts, mergeAgentProjectionDocument, normalizeExtraMergeTeethClassification, normalizeSkillContent, normalizeStatusImprovementCompass, parseAgentProjectionStamp, parseArkConfigJson, parseArkRulesJson, parseSkillDescriptionVersion, parseSkillDocument, policyDeltaAcknowledgementMatches, preflightChange, preflightResolvedChange, primaryImprovementCompassNextAction, projectStatusArkRun, projectStatusImprovementCompass, projectionHasNonEnforcementLabel, projectionMatchesPackageVersion, resolveEffectiveContract, resolveStatusNextAction, resolvedFactsEvidenceRequirementsHash, serializeDiagnosticCatalog, skillDescriptionVersionPrefix, stableSerialize, stampSkillDescription, statusCompassResidualIsSubsetOfDoctor, stripSkillDescriptionVersion, summarizeArkRunSection, toAdapterDiagnostic, unavailableStatusImprovementCompass, validateAgentSkillDocument, validateAgentSkillsPackage, validateSkillProductCapacity, version };
+export { ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH, AGENT_PROJECTION_BEGIN_MARKER, AGENT_PROJECTION_END_MARKER, AGENT_PROJECTION_ENFORCEMENT_SURFACES, AGENT_PROJECTION_NON_ENFORCEMENT_LABEL, AGENT_SKILLS_PACKAGE_RELATIVE_ROOT, AGENT_SKILL_ENTRY_FILENAME, type AICodeGate, type AICodeGateContext, type AICodeGateOptions, type AICodeGateResult, type AICodeGateViolation, type AIGateExtension, ANALYSIS_IR_SCHEMA_VERSION, ARKORDER_RULE_IDS, ARKORDER_TIER1_SENSOR_IDS, ARKRUN_INTERACTION_NAME_INCOMPLETE, ARKRUN_KERNEL_FACTORY_CALLEES, ARKRUN_KERNEL_INTERACTION_CALLEES, ARKRUN_RULE_IDS, ARKRUN_TIER1_SENSOR_IDS, ARKRUN_TRANSPORT_BYPASS_SPECIFIERS, ARK_AGENT_PROJECTION_SCHEMA_VERSION, ARK_AGENT_SKILLS_PACKAGE_SCHEMA_VERSION, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, ARK_CONFIG_SCHEMA, ARK_CONFIG_SCHEMA_VERSION, ARK_DESIGN_DELTA_SCHEMA_VERSION, ARK_ENFORCEMENT_STATE_SCHEMA_VERSION, ARK_FIRST_CLASS_SKILL_NAMES, ARK_IMPROVEMENT_COMPASS_SCHEMA_VERSION, ARK_PROJECT_IDENTITY_SCHEMA, ARK_PROJECT_IDENTITY_SCHEMA_URL, ARK_PROJECT_IDENTITY_SCHEMA_VERSION, ARK_RULES_SCHEMA, ARK_RULES_SCHEMA_VERSION, ARK_RULE_SENSORS, ARK_RUN_DOCTOR_SCHEMA_VERSION, ARK_SKILL_CAPACITY, ARK_SKILL_CAPACITY_DEDICATED_DOORS, ARK_SKILL_DESCRIPTION_VERSION_PATTERN, ARK_SKILL_NAMES, ARK_SKILL_NAME_COUNT, ARK_SKILL_NORTH_STAR, ARK_SKILL_REQUIRED_SURFACES, ARK_SKILL_STUB_REDIRECTS, ARK_STATUS_MANIFEST_SCHEMA, ARK_STATUS_MANIFEST_SCHEMA_URL, ARK_STATUS_MANIFEST_SCHEMA_VERSION, type AdapterCompletenessReason, type AdapterDiagnostic, type AdapterResult, type AdapterSeverity, type AdapterViolationInput, type AgentProjectionCatalogEntry, type AgentProjectionFacts, type AgentProjectionLayerSummary, type AgentProjectionMergeAction, type AgentProjectionMergeResult, type AgentProjectionMeta, type AgentProjectionProfile, type AgentSkillPackageEntry, type AgentSkillValidationIssue, type AnalysisCapabilityUse, type AnalysisCompilerOptions, type AnalysisCompleteness, type AnalysisContract, type AnalysisEvidence, type AnalysisFile, type AnalysisFileChange, type AnalysisFileInput, type AnalysisImportEdge, type AnalysisIr, type AnalysisMode, type AnalysisResult, type AnalysisViolation, type AnalyzeArchitectureConvergenceInput, type AnalyzeChangeInput, type AnalyzePolicyDeltaInput, type AnalyzeProjectInput, type AnalyzeResolvedProjectInput, type ArchitectureActualChange, type ArchitectureChangeMap, type ArchitectureChangeMapContract, type ArchitectureChangeMapDependency, type ArchitectureChangeMapFile, type ArchitectureChangeOperation, type ArchitectureConvergenceClassification, type ArchitectureConvergenceFinding, type ArchitectureConvergenceResult, type ArchitectureDependency, type ArchitectureEngineEdge, type ArchitectureEngineResult, type ArchitectureEngineViolation, type ArchitectureLayer, type ArchitectureLayerConfig, type ArchitectureProfile, type ArchitectureRule, type ArkCheckConfig, ArkConfig, ArkConfigLoadResult, type ArkDesignDeltaResult, type ArkEnforcementHost, type ArkEnforcementState, type ArkFirstClassSkillName, type ArkOrderRuleId, type ArkOrderSensorFinding, type ArkRuleSensorViolation, type ArkRulesFile, type ArkRulesIssue, ArkRulesValidationError, type ArkRunDoctorSection, type ArkRunRuleId, type ArkRunSensorFinding, type ArkRunStatusSlice, type ArkRunTier1SensorId, type ArkSkillCapacityDedicatedSurface, type ArkSkillCapacitySurface, type ArkSkillName, type ArkSkillNorthStar, type ArkSkillRequiredSurface, type ArkSkillStubName, type ChangePreflightResult, type ClassShapeFact, type CollectAnalysisConfigWarningsInput, type CoverageEvidence, type CoverageFiles, type CoverageInvariant, type CreateArchitectureProfileFromArkConfigOptions, type CreateArchitectureProfileOptions, type CreateElevenLayerArkConfigOptions, DEFAULT_AGENT_PROJECTION_RULE_IDS, DIAGNOSTIC_CATALOG, DIAGNOSTIC_CATALOG_SCHEMA_VERSION, DIAGNOSTIC_DOCS_RELATIVE_PATH, DIAGNOSTIC_RULE_IDS, type DeclarationShape, type DesignDeltaChange, type DesignDeltaEnforcementScope, type DesignDeltaIdentity, type DesignSmellEvidence, type DesignSmellFinding, type DesignSmellId, type DiagnosticCatalogEntry, type DiagnosticCategory, EXTRA_MERGE_TEETH_GOVERNED_FLOOR, type EffectiveArkRules, type EffectiveContract, EffectiveContractError, type EffectiveContractWarning, type EnforcementBoundaryState, type EnforcementEvidence, type EnforcementEvidenceField, type EnforcementVerification, type EvaluateArchitectureGraphInput, type EvaluateArkRunSensorsInput, type EvaluateArkRunSensorsResult, type ExtraMergeTeethClassification, FLAT_SKILL_TEMPLATES_RELATIVE_ROOT, type ForbiddenCapabilityUse, IMPROVEMENT_COMPASS_OUT_OF_SCOPE_LENSES, IMPROVEMENT_COMPASS_TOP_RESIDUAL_CAP, IMPROVEMENT_LENS_IDS, type ImprovementCompass, type ImprovementCompassEvidence, type ImprovementCompassFacts, type ImprovementCompassNextAction, type ImprovementCompassSmellFact, type ImprovementCompassViolationFact, type ImprovementLens, type ImprovementLensId, type ImprovementLensStatus, type InvariantCoverageEvidence, type InvariantProbeSummary, MERGE_PLANES_DUAL_STAMP, type MentionContext, type MergePlanesHonesty, POLICY_DELTA_SCHEMA_VERSION, PROJECT_BINDING_SCHEMA, PROJECT_EXPECTATION_SCHEMA, type ParseSkillDocumentResult, type ParsedSkillFrontmatter, type PolicyDelta, type PolicyDeltaAcknowledgement, type PolicyDeltaAnalysis, type PolicyDeltaClassification, type PolicyDeltaFinding, type PreflightResolvedChangeInput, type PreparedChangeFile, type ProjectBinding, type ProjectExpectation, type ProjectIdentity, RESOLVED_CANDIDATE_FACTS_SCHEMA, RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION, type ResolvedAmbientFact, type ResolvedAnalysisFile, type ResolvedAnalysisIr, type ResolvedAnalysisResult, type ResolvedArkRunCompositionRootHitFact, type ResolvedArkRunDeclarationFact, type ResolvedArkRunKernelCallFact, type ResolvedArkRunKernelCallKind, type ResolvedArkRunManagedNewFact, type ResolvedCandidateFacts, type ResolvedCandidateFactsInput, type ResolvedCapability, type ResolvedCapabilityFact, type ResolvedChangePreflightResult, type ResolvedDependencyFact, type ResolvedDependencyKind, type ResolvedDependencyState, type ResolvedFactsCompleteness, type ResolvedFactsReason, type ResolvedFileFact, type ResolvedIntentReferenceFact, type ResolvedPublishFact, type ResolvedSafetyFact, type ResolvedSafetyKind, type ResolvedSafetyReport, type RulesInventoryCandidate, type RulesInventoryResult, STATUS_COMPASS_FACTS_SOURCES, STATUS_COMPASS_MODES, STATUS_COMPASS_REASON_CODES, type SemanticDependency, type SemanticDependencyKind, type SkillProductCapacityIssue, type SkillProductCapacityIssueCode, type StatusActivationSlice, type StatusCheckVerdict, type StatusCompassFactsSource, type StatusCompassMode, type StatusCompassReasonCode, type StatusImprovementCompassSlice, type StatusLastCheckSlice, type StatusManifest, type StatusManifestFacts, type StatusNextAction, type StatusProjectIdentitySlice, type StatusRulesSlice, type StatusWritePathClass, type ValidateAgentSkillDocumentInput, type ValidateAgentSkillsPackageResult, type ValidateSkillProductCapacityInput, type ValidateSkillProductCapacityResult, adapterDocsCodePath, adapterFindingOccurrenceTargetKeys, adapterFindingRefFromTargetKey, adapterFindingTargetKey, agentProjectionContentIdentity, agentSkillEntryRelativePath, agentSkillPackageFileRelativePath, analyzeArchitectureConvergence, analyzeChange, analyzePolicyDelta, analyzeProject, analyzeResolvedProject, arkRunKernelCallKind, arkSkillStubRedirect, buildAgentProjectionBeginMarker, buildAgentProjectionBlock, buildAgentProjectionBody, buildAgentProjectionMeta, buildArkRuleFileHints, buildEffectiveArkRules, buildImprovementCompass, buildRulesInventory, buildStatusManifest, canPromoteInvariant, catalogFixForRuleId, catalogWhyForRuleId, classifyArkPolicyDelta, classifyCoverage, classifyResolvedLayerCoverage, classifyStatusWritePath, collectAnalysisConfigWarnings, collectEmptyAppliesToFindings, collectForbiddenCapabilityUses, composeMergePlanesHonesty, countsAsCoverage, createAICodeGate, createAdapterResult, createArchitectureProfile, createArchitectureProfileFromArkConfig, createElevenLayerArkConfig, createProjectId, createProjectIdentity, createResolvedCandidateFacts, defaultHonestLabel, demoteExtraPlaneTeethUnderClassificationFloor, deriveArkRuleFileHints, describeCoverage, detectArchitectureCycles, deterministicHash, diagnosticDocsFragment, diagnosticDocsPath, effectiveContractPolicyPayload, elevenLayerProfile, emptyEffectiveArkRules, evaluateArchitectureGraph, evaluateArkOrderSensors, evaluateArkRuleSensors, evaluateArkRunEditorSensors, evaluateArkRunEditorSensorsFromSource, evaluateArkRunSensors, evaluateInvariantCoverage, evaluateStatusBinding, explainViolation, extraMergeTeethAllowed, extractAgentProjectionBlock, extractArkRunDeclarationsFromSource, extractArkRunImportedConstructorNamesFromSource, extractArkRunKernelCallsFromSource, extractArkRunManagedNewsFromSource, extractArkRunValueImportDependenciesFromSource, extractClassShapesFromSource, extractSemanticDependencies, flatSkillTemplateFileRelativePath, formatAgentProjectionCatalogShortList, formatAgentProjectionLayers, formatArkRunDoctorLines, formatImprovementCompassDoctorLines, formatImprovementCompassResidualLabels, getDiagnosticCatalogEntry, inventoryToExtractionCard, isArkOrderRuleId, isArkRunKernelModuleSpecifier, isArkRunRuleId, isArkRunTransportBypassSpecifier, isArkSkillName, isCataloguedOrArkRuleFamily, isExtraPlaneFinding, isFirstClassArkSkillName, isKnownDiagnosticCode, isValidAgentSkillName, loadArkConfigContract, loadArkRulesContract, loadContract, loadResolvedCandidateFacts, mergeAgentProjectionDocument, normalizeExtraMergeTeethClassification, normalizeSkillContent, normalizeStatusImprovementCompass, parseAgentProjectionStamp, parseArkConfigJson, parseArkRulesJson, parseSkillDescriptionVersion, parseSkillDocument, policyDeltaAcknowledgementMatches, preflightChange, preflightResolvedChange, primaryImprovementCompassNextAction, projectStatusArkRun, projectStatusImprovementCompass, projectionHasNonEnforcementLabel, projectionMatchesPackageVersion, resolveEffectiveContract, resolveStatusNextAction, resolvedFactsEvidenceRequirementsHash, serializeDiagnosticCatalog, skillDescriptionVersionPrefix, stableSerialize, stampSkillDescription, statusCompassResidualIsSubsetOfDoctor, stripSkillDescriptionVersion, summarizeArkRunSection, toAdapterDiagnostic, unavailableStatusImprovementCompass, validateAgentSkillDocument, validateAgentSkillsPackage, validateSkillProductCapacity, version };