arkgate 4.8.7 → 4.8.9

package/bin/lib/analysis-engine.mjs

@@ -1,10 +1,10 @@
 // GENERATED from src/kernel/analysis.ts by scripts/generate-analysis-engine.mjs.
 // Do not edit this file directly.
-var Zr=Object.defineProperty;var l=(e,t)=>Zr(e,"name",{value:t,configurable:!0});function U(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}l(U,"deterministicHash");function N(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(N).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(r=>`${JSON.stringify(r)}:${N(t[r])}`).join(",")}}`}l(N,"stableSerialize");var he="1.2";var Lt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let r=N(e),n=N(t);return r<n?-1:r>n?1:0}l(K,"compareCanonical");function j(e){return[...new Set(e)].sort((t,r)=>t<r?-1:t>r?1:0)}l(j,"sortedUnique");function He(e){let t={schemaVersion:"1.2",include:j(e.include??[]),exclude:j(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:j(e.dynamicImportAllowlist??[]),layers:e.layers.map(r=>({name:r.name,patterns:j(r.patterns??[]),exclude:j(r.exclude??[]),forbiddenGlobals:j(r.forbiddenGlobals??[]),intentPrefixes:j(r.intentPrefixes??[]),capabilityDeny:j(r.capabilities?.deny??[]),pure:r.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:j(e.arkRun.compositionRoots),managedLayers:j(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return U(N(t))}l(He,"resolvedFactsEvidenceRequirementsHash");function Jr(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(K),r=e.files.map(k=>({...k,typeOnlyExportNames:j(k.typeOnlyExportNames)})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),n=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:j(k.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(k=>({...k})).sort(K),a=e.ambientUses.map(k=>({...k})).sort(K),i=e.publishCalls.map(k=>({...k})).sort(K),d=e.intentReferences.map(k=>({...k})).sort(K),c=e.safetyUses.map(k=>({...k})).sort(K),y=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map($=>({...$}))})).sort(K),h=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(K),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(K),p=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(K),f=(e.arkRunDeclarations??[]).map(k=>({...k,uses:j(k.uses),reactsTo:j(k.reactsTo),raises:j(k.raises),sends:j(k.sends)})).sort(K),u=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(K),m=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(K),A=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(K),E=(e.arkOrderXiFieldWrites??[]).map(k=>({...k})).sort(K),v=(e.arkOrderIngestWritesXi??[]).map(k=>({...k})).sort(K),w=(e.arkOrderReleaseKeyCounts??[]).map(k=>({...k})).sort(K),H=e.files.map(({path:k,contentHash:$})=>({path:k,contentHash:$})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),W=U(N(H));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:W,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:r,dependencies:n,capabilityUses:s,ambientUses:a,publishCalls:i,intentReferences:d,safetyUses:c,classShapes:y,arkRunKernelCalls:h,arkRunManagedNews:R,arkRunCompositionRootHits:p,arkRunDeclarations:f,arkOrderPlaneCalls:u,arkOrderGenericUpdates:m,arkOrderRootHits:A,arkOrderXiFieldWrites:E,arkOrderIngestWritesXi:v,arkOrderReleaseKeyCounts:w}}l(Jr,"canonicalResolvedFactsInput");function Pt(e){let t=Jr(e);return{...t,factsHash:U(N(t))}}l(Pt,"createCanonicalResolvedCandidateFacts");function Ke(e){return Pt(Mt(_(e,"$"),!1))}l(Ke,"createResolvedCandidateFacts");function _(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}l(_,"asRecord");function T(e,t,r){let n=new Set(t),s=Object.keys(e).find(a=>!n.has(a));if(s)throw new Error(`${r}.${s} is not part of schema ${"1.2"}.`)}l(T,"assertOnlyKeys");function x(e,t,r){let n=e[t];if(typeof n!="string"||n.length===0)throw new Error(`${r}.${t} must be a non-empty string.`);return n}l(x,"requiredText");function ne(e,t,r){if(e[t]!==void 0)return x(e,t,r)}l(ne,"optionalText");function L(e,t,r){let n=x(e,t,r),s=n.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${r}.${t} must be a canonical project-relative path.`);let a=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(a.length===0)throw new Error(`${r}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(d);let i=a.join("/");if(!i||i!==n)throw new Error(`${r}.${t} must be a canonical project-relative path.`);return i}l(L,"requiredProjectPath");function P(e,t,r){if(typeof e[t]!="boolean")throw new Error(`${r}.${t} must be a boolean.`);return e[t]}l(P,"requiredBoolean");function Dt(e,t,r){let n=e[t];if(!Number.isInteger(n)||Number(n)<0)throw new Error(`${r}.${t} must be a non-negative integer.`);return Number(n)}l(Dt,"requiredInteger");function G(e,t,r){let n=Dt(e,t,r);if(n===0)throw new Error(`${r}.${t} must be a positive integer.`);return n}l(G,"requiredPositiveInteger");function D(e,t,r){let n=e[t];if(!Array.isArray(n))throw new Error(`${r}.${t} must be an array.`);return n}l(D,"requiredArray");function se(e,t,r,n){let s=e[t];if(typeof s!="string"||!r.includes(s))throw new Error(`${n}.${t} must be one of ${r.join(", ")}.`);return s}l(se,"enumValue");function Re(e,t){if(!Array.isArray(e)||e.some(r=>typeof r!="string"||!r))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}l(Re,"parseStringArray");function Qr(e,t,r){let n=new Set;for(let s of e){let a=t(s);if(n.has(a))throw new Error(`${r} must not contain duplicate facts (${a}).`);n.add(a)}}l(Qr,"assertUnique");function Mt(e,t){T(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let r=se(e,"schemaVersion",["1.0","1.1","1.2"],"$"),n=se(e,"completeness",["complete","partial","unavailable"],"$"),s=D(e,"completenessReasons","$").map((b,I)=>{let g=`$.completenessReasons[${I}]`,o=_(b,g);T(o,["code","message","file"],g);let O=o.file===void 0?void 0:L(o,"file",g);return{code:x(o,"code",g),message:x(o,"message",g),...O?{file:O}:{}}});if(n==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(n!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=D(e,"files","$").map((b,I)=>{let g=`$.files[${I}]`,o=_(b,g);return T(o,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],g),{path:L(o,"path",g),contentHash:x(o,"contentHash",g),parseStatus:se(o,"parseStatus",["parsed","invalid"],g),parseDiagnosticCount:Dt(o,"parseDiagnosticCount",g),exportsOnlyTypes:P(o,"exportsOnlyTypes",g),typeOnlyExportNames:Re(o.typeOnlyExportNames,`${g}.typeOnlyExportNames`),hasTopLevelSideEffects:P(o,"hasTopLevelSideEffects",g)}}),i=D(e,"dependencies","$").map((b,I)=>{let g=`$.dependencies[${I}]`,o=_(b,g);T(o,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],g);let O=ne(o,"specifier",g),F=ne(o,"target",g),Y=se(o,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],g);if(Y==="resolved-project"&&!F)throw new Error(`${g}.target is required for resolved-project dependencies.`);if(Y!=="resolved-project"&&F)throw new Error(`${g}.target is only allowed for resolved-project dependencies.`);if(Y!=="dynamic"&&!O)throw new Error(`${g}.specifier is required unless resolution is dynamic.`);return{from:L(o,"from",g),...O?{specifier:O}:{},kind:se(o,"kind",["import","export","dynamic-import","require"],g),typeOnly:P(o,"typeOnly",g),line:G(o,"line",g),resolution:Y,...F?{target:L(o,"target",g)}:{},...o.namedBindings!==void 0?{namedBindings:Re(o.namedBindings,`${g}.namedBindings`)}:{},...o.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:P(o,"targetTypeOnlyExports",g)}:{},...o.sourcePureTypeModule!==void 0?{sourcePureTypeModule:P(o,"sourcePureTypeModule",g)}:{},...o.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:P(o,"namedBindingsTypeOnly",g)}:{},...o.portProofEligible!==void 0?{portProofEligible:P(o,"portProofEligible",g)}:{}}}),d=D(e,"capabilityUses","$").map((b,I)=>{let g=`$.capabilityUses[${I}]`,o=_(b,g);return T(o,["file","line","symbol","capability","source"],g),{file:L(o,"file",g),line:G(o,"line",g),symbol:x(o,"symbol",g),capability:se(o,"capability",Lt,g),source:se(o,"source",["ambient-global","import-based"],g)}}),c=D(e,"ambientUses","$").map((b,I)=>{let g=`$.ambientUses[${I}]`,o=_(b,g);return T(o,["file","line","symbol"],g),{file:L(o,"file",g),line:G(o,"line",g),symbol:x(o,"symbol",g)}}),y=D(e,"publishCalls","$").map((b,I)=>{let g=`$.publishCalls[${I}]`,o=_(b,g);T(o,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],g);let O=ne(o,"rawIntentName",g),F=ne(o,"sourceIntent",g);return{file:L(o,"file",g),line:G(o,"line",g),...O?{rawIntentName:O}:{},objectHasIntent:P(o,"objectHasIntent",g),arkPublishCandidate:P(o,"arkPublishCandidate",g),hasSource:P(o,"hasSource",g),...F?{sourceIntent:F}:{}}}),h=D(e,"intentReferences","$").map((b,I)=>{let g=`$.intentReferences[${I}]`,o=_(b,g);return T(o,["file","line","intent"],g),{file:L(o,"file",g),line:G(o,"line",g),intent:x(o,"intent",g)}}),R=D(e,"safetyUses","$").map((b,I)=>{let g=`$.safetyUses[${I}]`,o=_(b,g);T(o,["file","line","kind","symbol"],g);let O=ne(o,"symbol",g),F=se(o,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],g);if(F==="in-memory-store"&&!O)throw new Error(`${g}.symbol is required for in-memory-store facts.`);if(F!=="in-memory-store"&&O)throw new Error(`${g}.symbol is only allowed for in-memory-store facts.`);return{file:L(o,"file",g),line:G(o,"line",g),kind:F,...O?{symbol:O}:{}}});Qr(a,b=>b.path,"$.files");let p=new Set(a.map(b=>b.path));for(let b of a){if(b.parseStatus==="parsed"&&b.parseDiagnosticCount!==0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(b.parseStatus==="invalid"&&b.parseDiagnosticCount===0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(n==="complete"&&a.some(b=>b.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let b of i)if(!p.has(b.from))throw new Error(`$.dependencies references missing source file ${b.from}.`);let u=(e.arkRunKernelCalls===void 0?[]:D(e,"arkRunKernelCalls","$")).map((b,I)=>{let g=`$.arkRunKernelCalls[${I}]`,o=_(b,g);T(o,["file","line","kind","callee","viaImport","receiver","nameLiteral"],g);let O=ne(o,"receiver",g),F=ne(o,"nameLiteral",g);return{file:L(o,"file",g),line:G(o,"line",g),kind:se(o,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],g),callee:x(o,"callee",g),viaImport:P(o,"viaImport",g),...O?{receiver:O}:{},...F?{nameLiteral:F}:{}}}),A=(e.arkRunManagedNews===void 0?[]:D(e,"arkRunManagedNews","$")).map((b,I)=>{let g=`$.arkRunManagedNews[${I}]`,o=_(b,g);T(o,["file","line","typeName","importedFrom"],g);let O=ne(o,"importedFrom",g);return{file:L(o,"file",g),line:G(o,"line",g),typeName:x(o,"typeName",g),...O?{importedFrom:O}:{}}}),v=(e.arkRunCompositionRootHits===void 0?[]:D(e,"arkRunCompositionRootHits","$")).map((b,I)=>{let g=`$.arkRunCompositionRootHits[${I}]`,o=_(b,g);return T(o,["file","matchedRoot","hasKernelFactory"],g),{file:L(o,"file",g),matchedRoot:x(o,"matchedRoot",g),hasKernelFactory:P(o,"hasKernelFactory",g)}}),w=e.arkRunDeclarations===void 0?[]:D(e,"arkRunDeclarations","$"),W=(e.arkOrderPlaneCalls===void 0?[]:D(e,"arkOrderPlaneCalls","$")).map((b,I)=>{let g=`$.arkOrderPlaneCalls[${I}]`,o=_(b,g);return T(o,["file","line","callee"],g),{file:L(o,"file",g),line:G(o,"line",g),callee:x(o,"callee",g)}}),$=(e.arkOrderGenericUpdates===void 0?[]:D(e,"arkOrderGenericUpdates","$")).map((b,I)=>{let g=`$.arkOrderGenericUpdates[${I}]`,o=_(b,g);return T(o,["file","line","method"],g),{file:L(o,"file",g),line:G(o,"line",g),method:x(o,"method",g)}}),de=(e.arkOrderRootHits===void 0?[]:D(e,"arkOrderRootHits","$")).map((b,I)=>{let g=`$.arkOrderRootHits[${I}]`,o=_(b,g);return T(o,["file","matchedRoot","hasPlaneFactory"],g),{file:L(o,"file",g),matchedRoot:x(o,"matchedRoot",g),hasPlaneFactory:P(o,"hasPlaneFactory",g)}}),ye=(e.arkOrderXiFieldWrites===void 0?[]:D(e,"arkOrderXiFieldWrites","$")).map((b,I)=>{let g=`$.arkOrderXiFieldWrites[${I}]`,o=_(b,g);return T(o,["file","line","key"],g),{file:L(o,"file",g),line:G(o,"line",g),key:x(o,"key",g)}}),Pe=(e.arkOrderIngestWritesXi===void 0?[]:D(e,"arkOrderIngestWritesXi","$")).map((b,I)=>{let g=`$.arkOrderIngestWritesXi[${I}]`,o=_(b,g);return T(o,["file","line"],g),{file:L(o,"file",g),line:G(o,"line",g)}}),tt=(e.arkOrderReleaseKeyCounts===void 0?[]:D(e,"arkOrderReleaseKeyCounts","$")).map((b,I)=>{let g=`$.arkOrderReleaseKeyCounts[${I}]`,o=_(b,g);return T(o,["file","line","keyCount"],g),{file:L(o,"file",g),line:G(o,"line",g),keyCount:G(o,"keyCount",g)}}),Ie=w.map((b,I)=>{let g=`$.arkRunDeclarations[${I}]`,o=_(b,g);return T(o,["file","line","uses","reactsTo","raises","sends"],g),{file:L(o,"file",g),line:G(o,"line",g),uses:Re(o.uses,`${g}.uses`),reactsTo:Re(o.reactsTo,`${g}.reactsTo`),raises:Re(o.raises,`${g}.raises`),sends:Re(o.sends,`${g}.sends`)}});for(let[b,I]of[["$.capabilityUses",d],["$.ambientUses",c],["$.publishCalls",y],["$.intentReferences",h],["$.safetyUses",R],["$.arkRunKernelCalls",u],["$.arkRunManagedNews",A],["$.arkRunCompositionRootHits",v],["$.arkRunDeclarations",Ie],["$.arkOrderPlaneCalls",W],["$.arkOrderGenericUpdates",$],["$.arkOrderRootHits",de],["$.arkOrderXiFieldWrites",ye],["$.arkOrderIngestWritesXi",Pe],["$.arkOrderReleaseKeyCounts",tt]])for(let g of I)if(!p.has(g.file))throw new Error(`${b} references missing file ${g.file}.`);let ue=ne(e,"projectPackageName","$"),rt=(e.classShapes===void 0?[]:D(e,"classShapes","$")).map((b,I)=>{let g=`$.classShapes[${I}]`,o=_(b,g);T(o,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],g);let O=D(o,"mutatingMethods",g).map((F,Y)=>{let Me=`${g}.mutatingMethods[${Y}]`,nt=_(F,Me);return T(nt,["name","referencesGuardOrPublish"],Me),{name:x(nt,"name",Me),referencesGuardOrPublish:P(nt,"referencesGuardOrPublish",Me)}});return{file:L(o,"file",g),className:x(o,"className",g),exported:P(o,"exported",g),hasPublicMutableFields:P(o,"hasPublicMutableFields",g),hasPublicSetters:P(o,"hasPublicSetters",g),hasPublicConstructor:P(o,"hasPublicConstructor",g),hasStaticFactory:P(o,"hasStaticFactory",g),mutatingMethods:O,...o.dataOnly===void 0?{}:{dataOnly:P(o,"dataOnly",g)}}});return{schemaVersion:r,completeness:n,completenessReasons:s,resolverIdentity:x(e,"resolverIdentity","$"),compilerIdentity:x(e,"compilerIdentity","$"),compilerOptionsHash:x(e,"compilerOptionsHash","$"),tsconfigHash:x(e,"tsconfigHash","$"),evidenceRequirementsHash:x(e,"evidenceRequirementsHash","$"),...ue?{projectPackageName:ue}:{},files:a,dependencies:i,capabilityUses:d,ambientUses:c,publishCalls:y,intentReferences:h,safetyUses:R,classShapes:rt,arkRunKernelCalls:u,arkRunManagedNews:A,arkRunCompositionRootHits:v,arkRunDeclarations:Ie,arkOrderPlaneCalls:W,arkOrderGenericUpdates:$,arkOrderRootHits:de,arkOrderXiFieldWrites:ye,arkOrderIngestWritesXi:Pe,arkOrderReleaseKeyCounts:tt}}l(Mt,"parseResolvedFactsInput");function pe(e){let t=_(e,"$"),r=x(t,"factsHash","$"),n=x(t,"candidateTreeHash","$"),s=Pt(Mt(t,!0));if(s.factsHash!==r)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(n!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}l(pe,"loadResolvedCandidateFacts");var en=["network","filesystem","clock","randomness","environment","process","persistence"],S={type:"string",minLength:1},z={type:"integer",minimum:1},M={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Ht={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:S,message:S,file:M}}},resolverIdentity:S,compilerIdentity:S,compilerOptionsHash:S,tsconfigHash:S,candidateTreeHash:S,evidenceRequirementsHash:S,projectPackageName:S,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:M,contentHash:S,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:S},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:M,specifier:S,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:z,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:M,namedBindings:{type:"array",items:S},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:M,line:z,symbol:S,capability:{enum:en},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:M,line:z,symbol:S}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:M,line:z,rawIntentName:S,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:S}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:M,line:z,intent:S}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:M,line:z,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:S},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:M,className:S,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:S,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:M,line:z,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:S,viaImport:{type:"boolean"},receiver:S,nameLiteral:S}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:M,line:z,typeName:S,importedFrom:S}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:M,matchedRoot:S,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:M,line:z,uses:{type:"array",items:S},reactsTo:{type:"array",items:S},raises:{type:"array",items:S},sends:{type:"array",items:S}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:M,line:z,callee:S}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:M,line:z,method:S}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:M,matchedRoot:S,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:M,line:z,key:S}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:M,line:z}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:M,line:z,keyCount:{type:"integer",minimum:1}}}},factsHash:S},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Kt="1.0";var at=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),Ue=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),it=Object.freeze(Object.keys(Ue).sort()),st=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ot=Object.freeze({process:Object.freeze(["process","node:process"])});function Se(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=st[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=st[n];if(s)return s;let a=e.indexOf("/",r+1);return a<0?null:st[e.slice(0,a)]??null}l(Se,"capabilityForModuleSpecifier");function Ce(e,t){for(let r of t)if(ot[r]?.includes(e))return r;return null}l(Ce,"forbiddenGlobalForModuleSpecifier");function Oe(e){let t=e.split(".");for(let r=t.length;r>=1;r-=1){let n=t.slice(0,r).join("."),s=Ue[n];if(s)return s}return null}l(Oe,"capabilityForAmbientName");function Ae(e){if(e?.pure===!0)return[...at].sort();let r=(e?.capabilities?.deny??[]).filter(n=>at.includes(n));return[...new Set(r)].sort()}l(Ae,"effectiveCapabilityDeny");function lt(e,t){if(t.length===0)return!1;let r=new Set(t),n=e.split(".");for(let s=n.length;s>=1;s-=1)if(r.has(n.slice(0,s).join(".")))return!0;return!1}l(lt,"ambientCoveredByForbiddenGlobals");function je(e){let t=new Set,r=new Set,n=Object.keys(Ue);for(let s of e?.forbiddenGlobals??[]){let a=n.filter(i=>i===s||i.startsWith(`${s}.`));if(a.length===0)r.add(s);else for(let i of a)t.add(`ambient:${i}`);for(let i of ot[s]??[])t.add(`import-exact:${i}`)}for(let s of Ae(e)){if(t.add(`import:${s}`),s==="process")for(let a of ot.process)t.add(`import-exact:${a}`);for(let a of n)Oe(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...r].sort()}}l(je,"loweredLayerCoverage");function tn(e){let t=new Set,r=Oe(e);r&&t.add(r);for(let[n,s]of Object.entries(Ue))(n===e||n.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}l(tn,"lowerForbiddenGlobal");var Ut=new Map;function jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(jt,"escapeLiteral");function Ve(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}l(Ve,"normalizeGlobSeparators");function rn(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}l(rn,"bracesBalanced");function ae(e){let t=Ut.get(e);if(t)return t;let r=Ve(e),n=rn(r),s="",a=0;for(let d=0;d<r.length;d+=1){let c=r[d];c==="\\"&&d+1<r.length?(s+=jt(r[d+1]),d+=1):c==="*"?r[d+1]==="*"?r[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":c==="?"?s+="[^/]":c==="{"&&n?(s+="(?:",a+=1):c==="}"&&n&&a>0?(s+=")",a-=1):c===","&&n&&a>0?s+="|":s+=jt(c)}let i=new RegExp(`^${s}$`);return Ut.set(e,i),i}l(ae,"globToRegExp");function nn(e){return Ve(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}l(nn,"concreteGlobSegments");function ct(e,t){let r=Ve(String(e)),n=nn(r),s=r.replace(/\*/g,"").length,a=n.length*1e4+s;if(t==null||t==="")return a;let i=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let d=0,c=-1;for(let y of n){let h=-1;for(let R=d;R<i.length;R+=1)if(i[R]===y){h=R;break}if(h<0)return a;c=h,d=h+1}return(c+1)*1e6+n.length*1e4+s}l(ct,"patternSpecificity");function Z(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(i=>ae(i).test(r))){for(let i of a.patterns??[])if(ae(i).test(r)){let d=ct(i,r);d>s&&(s=d,n=a.name)}}return n}l(Z,"layerForRelativePath");function Vt(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}l(Vt,"sliceIdForPath");function sn(e){let t=new Set;for(let r of e??[]){let s=Ve(String(r)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let i=s[a];if((i==="**"||i==="*")&&a>0){let d=s[a-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}l(sn,"inferSliceFoldersFromPatterns");function an(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return sn(n?.patterns)}l(an,"resolveSliceFolders");function Gt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}l(Gt,"normalizeSegments");function Wt(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}l(Wt,"trimTrailingSlashes");var on=["src","app"];function ln(e){let t=Wt(e.replace(/^[./]+/,""));return t==="*"||t==="**"}l(ln,"isBlanketRoot");function zt(e,t){if(!e||!t?.length)return!1;let r=String(e).split(/[/\\]/).join("/"),n=r.toLowerCase(),s=Gt(r);for(let a of t){if(typeof a!="string"||a.length===0||ln(a))continue;if(a.includes("*")){let c=Wt(a.toLowerCase());if(ae(c).test(n)||ae(`${c}/**`).test(n))return!0;continue}let i=Gt(a);if(i.length===0)continue;let d=on.includes(s[0])&&i[0]!==s[0]?[0,1]:[0];for(let c of d){if(c+i.length>s.length)continue;let y=!0;for(let h=0;h<i.length;h+=1)if(s[c+h]!==i[h]){y=!1;break}if(y)return!0}}return!1}l(zt,"pathUnderSharedRoot");function qt(e,t){let r=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!r)return!1;let n=t.toLowerCase();return r===n?!0:!r.includes("/")&&n.endsWith(`/${r}`)}l(qt,"sliceMatchesDeclaration");function cn(e,t,r){return!e?.length||!t||!r?!1:e.some(n=>n&&typeof n.from=="string"&&typeof n.to=="string"&&qt(n.from,t)&&qt(n.to,r))}l(cn,"crossSliceEdgeAllowed");function dn(e){if(!e.fromPath||!e.toPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0,r=!!e.toSlice||e.toShared===!0;return!t||!r?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}l(dn,"peerIsolationDecision");function Bt(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let r=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${r.length>0?` (${r.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}l(Bt,"peerIsolationDenyExplanation");function Ge(e,t,r,n){return dt(e,t,r,n)?.rule}l(Ge,"findDeniedEdgeRule");function dt(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let a=n?.fromPath,i=n?.toPath,d=an(s,t,n?.layers),c=a&&i?Vt(a,d):void 0,y=a&&i?Vt(i,d):void 0,h=dn({fromPath:a,toPath:i,folderCount:d.length,fromSlice:c,toSlice:y,fromShared:!c&&zt(a,s.sharedRoots),toShared:!y&&zt(i,s.sharedRoots),crossSliceAllowed:cn(s.allowedCrossSlice,c,y)});if(h.denied)return{rule:s,peerIsolationReason:h.reason,fromSlice:c,toSlice:y};continue}if(t!==r)return{rule:s}}}l(dt,"findDeniedEdgeDecision");var ut={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},pt=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function ft(e,t){return t.flatMap((n,s)=>(n.prefixes??n.intentPrefixes??[]).map(a=>({layer:n.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:n})=>e.startsWith(n)).sort((n,s)=>s.prefix.length-n.prefix.length||n.layerIndex-s.layerIndex)[0]?.layer}l(ft,"resolveIntentLayer");function Xt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}l(Xt,"looksLikeArkIntent");function gt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Xt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ut.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ut.PUBLISH_MISSING_SOURCE}),t}l(gt,"classifyPublishFacts");var Yt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",un=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var Zt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},sa={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Yt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Yt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...un]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Zt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Zt}}}};function we(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}l(we,"emptyEffectiveArkRules");var pn=["no-anemic-model"];function Jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}l(Jt,"escapeGlobLiteral");function fn(e){let t="";for(let n=0;n<e.length;n+=1){let s=e[n];if(s==="\\"&&n+1<e.length){let a=e[n+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,n+=1;continue}t+="/";continue}t+=s}let r="";for(let n=0;n<t.length;n+=1){let s=t[n];s==="\\"&&n+1<t.length?(r+=Jt(t[n+1]),n+=1):s==="*"?t[n+1]==="*"?t[n+2]==="/"?(r+="(?:.*/)?",n+=2):(r+=".*",n+=1):r+="[^/]*":s==="?"?r+="[^/]":r+=Jt(s)}return new RegExp(`^${r}$`)}l(fn,"globToRegExp");function ke(e,t){return!t||t.length===0?!0:t.some(r=>fn(r).test(e))}l(ke,"matchesAppliesTo");function gn(e){return pn.includes(e)}l(gn,"isTier2");function Qt(e){return e.mode==="enforced"&&!gn(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}l(Qt,"severityFor");function fe(e,t,r,n=1){let{severity:s,failsStrict:a}=Qt(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:r,file:t,line:n,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}l(fe,"baseViolation");function ze(e,t,r){if(!r)return!0;let n=r(e);return n?n===t.provenance.layer:!1}l(ze,"isInRuleLayer");function qe(e,t,r){return t.filter(n=>!(!n.exported||!ke(n.file,e.appliesTo)||!ze(n.file,e,r)))}l(qe,"shapesForRule");function mn(e,t,r){let n=[];for(let s of qe(e,t,r))(s.hasPublicSetters||s.hasPublicMutableFields)&&n.push(fe(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return n}l(mn,"evaluateAggregatePrivateState");function yn(e,t,r){let n=[];for(let s of qe(e,t,r))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;n.push(fe(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return n}l(yn,"evaluateAlwaysValidFactory");function hn(e,t,r){let n=[];for(let s of qe(e,t,r))for(let a of s.mutatingMethods)a.referencesGuardOrPublish||n.push(fe(e,s.file,`Mutating method ${s.className}.${a.name} does not reference a guard or publish symbol (sensor domain-event-on-mutation).`));return n}l(hn,"evaluateDomainEventOnMutation");function Rn(e,t){let r=[];for(let n of t.files)ke(n,e.appliesTo)&&ze(n,e,t.layerForFile)&&t.fileHints?.[n]?.orchestrationHeavy&&r.push(fe(e,n,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return r}l(Rn,"evaluateOrchestrationOnly");function An(e,t){let r=[];for(let n of t.files)ke(n,e.appliesTo)&&ze(n,e,t.layerForFile)&&t.fileHints?.[n]?.adapterThick&&r.push(fe(e,n,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return r}l(An,"evaluateThinAdapter");function kn(e,t){let r=[];for(let n of t.files)ke(n,e.appliesTo)&&ze(n,e,t.layerForFile)&&t.fileHints?.[n]?.persistenceWrite&&r.push(fe(e,n,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return r}l(kn,"evaluateWritesViaAggregate");function bn(e,t,r){let n=[];for(let s of qe(e,t,r))if(s.dataOnly===!0){let a=fe(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);n.push({...a,severity:"warning",failsStrict:!1})}return n}l(bn,"evaluateNoAnemicModel");function er(e){if(!e.arkRules.structure.length)return[];let t=[];for(let r of e.arkRules.structure)switch(r.sensor){case"aggregate-private-state":t.push(...mn(r,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...yn(r,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...hn(r,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...Rn(r,e));break;case"thin-adapter":t.push(...An(r,e));break;case"writes-via-aggregate":t.push(...kn(r,e));break;case"no-anemic-model":t.push(...bn(r,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((r,n)=>r.file.localeCompare(n.file)||r.arkruleId.localeCompare(n.arkruleId)||r.message.localeCompare(n.message))}l(er,"evaluateArkRuleSensors");function tr(e,t){let r=[],n=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||n.some(c=>ke(c,s.appliesTo)))continue;let{severity:i,failsStrict:d}=Qt(s);r.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:i,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||n.some(d=>ke(d,s.appliesTo)))continue;let i=s.mode==="enforced";r.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:i?"error":"warning",sensor:"invariant-coverage",failsStrict:i})}return r.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}l(tr,"collectEmptyAppliesToFindings");var vn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|knex|typeorm|mongoose)/,En=/\.(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i,In=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,Sn=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,Cn=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,On=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function wn(e,t){if(!t||t.length<40)return null;let r=t.match(new RegExp(Cn.source,"g"))??[],n=t.match(new RegExp(On.source,"g"))??[],s=(t.match(/\bif\s*\(/g)??[]).length,a=(t.match(/\bswitch\s*\(/g)??[]).length,i=r.length>=2||r.length>=1&&n.length>=2||n.length>=3&&s+a>=6,d=vn.test(t),c=In.test(t)||Sn.test(t),y=r.length>=1||n.length>=2,h=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),R=d&&y||c&&y||d&&h&&(s>=4||r.length>=1)||c&&d,p=d&&En.test(t);return!i&&!R&&!p?null:{...i?{orchestrationHeavy:!0}:{},...R?{adapterThick:!0}:{},...p?{persistenceWrite:!0}:{}}}l(wn,"deriveArkRuleFileHints");function rr(e){let t={};for(let[r,n]of Object.entries(e)){let s=wn(r,n);s&&(t[r.replace(/\\/g,"/")]=s)}return t}l(rr,"buildArkRuleFileHints");function nr(e,t=!1){if(!e)return"";let r=e.discarded,n=[];if(r.budget>0&&!t&&n.push(`${r.budget} past the ${e.maxFiles}-file budget`),r.noInvariantMention>0&&n.push(`${r.noInvariantMention} naming no catalogued invariant`),r.oversize>0&&n.push(`${r.oversize} over the per-file byte cap`),r.unreadable>0&&n.push(`${r.unreadable} unreadable (files or directories)`),r.depthLimited>0&&n.push(`${r.depthLimited} directories past the walk depth limit`),r.outOfRoot>0&&n.push(`${r.outOfRoot} symlinked outside the project root`),n.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${n.join(", ")}${s}.`}l(nr,"formatCoverageDiscards");function xn(e,t){let r=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(n=>{let s=n.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:r===s||r.startsWith(`${s}/`)})}l(xn,"isUnderCoverageRoot");function $n(e,t){let r=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${r}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}l($n,"titleMatchesInvariant");function _n(e,t){if(!t)return!1;let r=t.split("."),n=r[r.length-1],s=r.length>1?r[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}l(_n,"symbolPresent");function sr(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let r=e.testFiles??[],n=e.testGlobsMissing===!0||r.length===0,s=e.coverageBudgetExhausted===!0,a=e.coverageStats,i=nr(a),d=nr(a,!0),c=a?`coverage file budget exhausted: ${a.filesLoaded} files loaded at the ${a.maxFiles}-file cap, ${a.testFilesRetained} tests retained, ${a.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof a.filesRead=="number"?`; ${a.filesRead} were read`:""})`:"coverage file budget exhausted",y=(e.coverageRoots??[]).filter(u=>typeof u=="string"&&u.length>0),h=y.length>0,R=y.join(", "),p=[],f=[];for(let u of t){let m=[],A=u.coverage?.test!==!1,E=u.coverage?.symbol,v,w;if(!n&&A){let $;for(let ee of r){let de=e.fileContents[ee];if(!(!de||!$n(de,u.id))){if(!h||xn(ee,y)){v=ee,w=h?!1:void 0;break}$??=ee}}v===void 0&&$!==void 0&&(v=$,w=!0),v!==void 0&&m.push("test-title")}E&&_n(e.fileContents,E)&&m.push("symbol");let W=(u.coverage?.test===!0||!!E||u.coverage===void 0)&&m.length>0||u.coverage?.test===!1&&!E?!0:m.length>0,k=n&&A&&m.length===0;if(p.push({invariantId:u.id,layer:u.provenance.layer,sourceFile:u.provenance.sourceFile,mode:u.mode,covered:W&&!k,evidence:m,partial:k,description:u.description,...v!==void 0?{testEvidenceFile:v}:{},...w!==void 0?{outsideDeclaredRoots:w}:{}}),w===!0&&v!==void 0&&f.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${u.id} is covered only by ${v}, which is outside the declared coverage roots (${R}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:v,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:"warning",failsStrict:!1}),!W||k){let $=u.mode==="enforced"&&!k,ee=n||r.length===0?"never-had-tests":"tests-disappeared";f.push({ruleId:"INVARIANT_UNCOVERED",message:(k?s?`Invariant ${u.id} coverage cannot be proven (${c}); reporting partial, not covered.`:`Invariant ${u.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:ee==="tests-disappeared"?`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(k&&s?d:i),file:u.provenance.sourceFile,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:$?"error":"warning",failsStrict:$,kind:ee})}}return{coverage:p,violations:f,partial:p.some(u=>u.partial)}}l(sr,"evaluateInvariantCoverage");function ar(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}l(ar,"canPromoteInvariant");function Fn(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}l(Fn,"normalizeExtraMergeTeethClassification");function We(e){let t=Fn(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}l(We,"extraMergeTeethAllowed");function or(e){let t=e.length,r=0,n=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(r+=1,n.add(a))}return{governedPercent:t>0?Math.round(r/t*100):0,populatedLayerCount:n.size}}l(or,"classifyResolvedLayerCoverage");var Nn=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var fa=new Set(Nn);function ir(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}l(ir,"isArkRunKernelModuleSpecifier");var Tn=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],mt=new Set(Tn);function lr(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(mt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(mt.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:mt.has(e.slice(0,n))}l(lr,"isArkRunTransportBypassSpecifier");var Ln=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Pn=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Dn=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Mn(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Ln.test(r)?"pure-shared":n==="PersistenceAdapters"&&(Pn.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":Dn.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}l(Mn,"classifyLayerImportKind");function Hn(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Mn(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}l(Hn,"layerImportNextAction");function Kn(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}l(Kn,"arkRunCallSiteName");function Un(e){let t=Kn(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(Un,"arkRunNextAction");function ce(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Hn(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Un(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() for the first freeze of \u03BE. Later pattern change is proposeRelease then apply(ProposeResult). Never update/patch/set. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Do not persist slow key ${e.target} from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again.`:"Do not persist a declared slow key from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again. Never mechanical-safe.";case"ARKORDER_UNVALVED_RELEASE":return"Change \u03BE with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}l(ce,"deterministicNextAction");var jn=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Sa=new Set(jn);var cr={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},Vn="ARKRUN_INTERACTION_NAME_INCOMPLETE";function pr(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(pr,"isDomainRoleLayer");function Gn(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}l(Gn,"compareFindings");function oe(e,t,r,n,s,a,i){let d=e.mode==="enforced"&&i;return{ruleId:cr[t],sensor:t,message:s,file:r,line:n,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:cr[t],fromLayer:a?.fromLayer,target:a?.target})}}l(oe,"finding");function zn(e,t){let r=[],n=[],s=[],a=[];for(let i of e)i.file===t&&(r.push(...i.uses),n.push(...i.reactsTo),s.push(...i.raises),a.push(...i.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(s),sends:new Set(a)}}l(zn,"bagForFile");function dr(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}l(dr,"emitKinds");function ur(e){return e==="subscribe"||e==="register-handler"}l(ur,"handleKinds");function qn(e){return e==="resolve"||e==="resolve-singleton"}l(qn,"dependKinds");function Wn(e,t,r){let n=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return n.push(oe(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let a=new Map;for(let i of t){let d=a.get(i.matchedRoot)??[];d.push(i),a.set(i.matchedRoot,d)}for(let i of s){let d=[...a.get(i)??[]].sort((y,h)=>y.file.localeCompare(h.file));if(d.length===0){n.push(oe(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(i)} matched no governed files and has no createArkKernel factory.`,{target:i},r));continue}if(d.some(y=>y.hasKernelFactory))continue;let c=d[0];n.push(oe(e,"arkrun-missing-root",c.file,1,`ArkRun kernel root ${JSON.stringify(i)} has no createArkKernel / createStrictArkKernel factory.`,{target:i},r))}return n}l(Wn,"evaluateMissingRoot");function Bn(e,t,r,n,s){let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),i=[];for(let d of r){let c=d.specifier;if(!c||!ir(c))continue;let y=n(d.from);y&&pr(y,a.get(y)??[])&&i.push(oe(e,"arkrun-kernel-in-domain",d.from,d.line,`${y} must not import kernel module ${JSON.stringify(c)}.`,{fromLayer:y,target:c},s))}return i}l(Bn,"evaluateKernelInDomain");function Xn(e,t,r,n,s,a){let i=new Set(e.managedLayers);if(i.size===0)return[];let d=new Map(t.map(h=>[h.name,h.intentPrefixes??[]])),c=new Set(n.filter(h=>h.hasKernelFactory).map(h=>h.file)),y=[];for(let h of r){if(c.has(h.file))continue;let R=h.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let p=s(h.file);!p||!i.has(p)||pr(p,d.get(p)??[])||y.push(oe(e,"arkrun-direct-new",h.file,h.line,`${p} must not construct ${h.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:p,target:h.typeName},a))}return y}l(Xn,"evaluateDirectNew");function Yn(e,t,r,n,s){let a=[],i=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:i};let d=new Set(e.managedLayers);if(d.size===0)return{findings:a,completenessReasons:i};for(let c of t){if(!dr(c.kind)&&!ur(c.kind)&&!qn(c.kind))continue;let y=n(c.file);if(!y||!d.has(y))continue;if(!c.nameLiteral){e.mode==="enforced"&&i.push({code:Vn,file:c.file,message:`ArkRun ${c.kind} call in ${c.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let h=zn(r,c.file);if(dr(c.kind)){if(h.raises.has(c.nameLiteral)||h.sends.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-emit",c.file,c.line,`Emit ${JSON.stringify(c.nameLiteral)} is not declared in raises or sends.`,{fromLayer:y,target:c.nameLiteral},s));continue}if(ur(c.kind)){if(h.reactsTo.has(c.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-handle",c.file,c.line,`Handle ${JSON.stringify(c.nameLiteral)} is not declared in reactsTo.`,{fromLayer:y,target:c.nameLiteral},s));continue}h.uses.has(c.nameLiteral)||a.push(oe(e,"arkrun-undeclared-depend",c.file,c.line,`Depend ${JSON.stringify(c.nameLiteral)} is not declared in uses.`,{fromLayer:y,target:c.nameLiteral},s))}return{findings:a,completenessReasons:i}}l(Yn,"evaluateUndeclared");function Zn(e,t,r,n){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let i of t){if(i.typeOnly)continue;let d=i.specifier;if(!d||!lr(d))continue;let c=r(i.from);!c||!s.has(c)||a.push(oe(e,"arkrun-transport-bypass",i.from,i.line,`${c} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:c,target:d},n))}return a}l(Zn,"evaluateTransportBypass");function fr(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=We(e.classification),n=Yn(t,e.kernelCalls,e.declarations,e.layerForFile,r),s=[...Wn(t,e.compositionRootHits,r),...Bn(t,e.layers,e.dependencies,e.layerForFile,r),...Xn(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...Zn(t,e.dependencies,e.layerForFile,r)].sort(Gn),a=[...n.completenessReasons].sort((i,d)=>{let c=`${i.code}\0${i.file??""}\0${i.message}`,y=`${d.code}\0${d.file??""}\0${d.message}`;return c<y?-1:c>y?1:0});return{findings:s,completenessReasons:a}}l(fr,"evaluateArkRunSensors");function gr(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}l(gr,"isArkOrderModuleSpecifier");var mr={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function Jn(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}l(Jn,"isDomainRoleLayer");function ie(e,t,r,n,s,a,i){let d=e.mode==="enforced"&&i;return{ruleId:mr[t],sensor:t,message:s,file:r,line:n,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:ce({ruleId:mr[t],fromLayer:a?.fromLayer,target:a?.target})}}l(ie,"finding");function yr(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let r=We(e.classification),n=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)n.push(ie(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,r));else{let c=new Map;for(let y of e.planeRootHits){let h=c.get(y.matchedRoot)??[];h.push(y),c.set(y.matchedRoot,h)}for(let y of s){let h=c.get(y)??[];if(h.length===0){n.push(ie(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(y)} matched no governed files and has no createOrderPlane factory.`,{target:y},r));continue}h.some(R=>R.hasPlaneFactory)||n.push(ie(t,"arkorder-missing-plane",h[0].file,1,`ArkOrder plane root ${JSON.stringify(y)} has no createOrderPlane factory.`,{target:y},r))}}let a=new Map(e.layers.map(c=>[c.name,c.intentPrefixes??[]]));for(let c of e.dependencies){let y=c.specifier;if(!y||!gr(y))continue;let h=e.layerForFile(c.from);h&&Jn(h,a.get(h)??[])&&n.push(ie(t,"arkorder-kernel-in-domain",c.from,c.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:h,target:y},r))}for(let c of e.genericUpdates)n.push(ie(t,"arkorder-generic-update",c.file,c.line,`Generic ${c.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:c.method},r));let i=t.xiKeys??[];i.length>t.maxXiKeys&&n.push(ie(t,"arkorder-too-many-params","ark.config.json",1,`arkOrder.xiKeys has ${i.length} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(i.length)},r));for(let c of e.releaseKeyCounts??[])c.keyCount<=t.maxXiKeys||n.push(ie(t,"arkorder-too-many-params",c.file,c.line,`release() freezes ${c.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(c.keyCount)},r));for(let c of e.ingestWritesXi??[])n.push(ie(t,"arkorder-ingest-writes-xi",c.file,c.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,r));let d=new Set(t.managedLayers);for(let c of i.length===0?[]:e.xiFieldWrites??[]){let y=e.layerForFile(c.file);!y||!d.has(y)||n.push(ie(t,"arkorder-xi-field-write",c.file,c.line,`File writes slow key ${JSON.stringify(c.key)} through a persistence driver; route the field through ingest or a pattern change through proposeRelease.`,{fromLayer:y,target:c.key},r))}return n.sort((c,y)=>c.file.localeCompare(y.file)||c.ruleId.localeCompare(y.ruleId)||c.line-y.line),{findings:n,completenessReasons:[]}}l(yr,"evaluateArkOrderSensors");function q(e,t,r={}){return{ruleId:e,message:t,...r}}l(q,"configWarning");function yt(e){let{config:t,rules:r,files:n,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(f=>typeof f!="string"))&&a.push(q("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(q("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let f of["maxTsSuppressions","maxAnyCasts"]){let u=t.safety[f];u!==void 0&&(!Number.isInteger(u)||u<0)&&a.push(q("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${f} must be a non-negative integer.`))}let i=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],c=new Set([...i.map(f=>f.name).filter(Boolean),...d.map(f=>f.name).filter(f=>!!f)]);i.length===0&&a.push(q("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let y=new Set,h=new Set;for(let f of i){if(!f.name){a.push(q("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}y.has(f.name)&&h.add(f.name),y.add(f.name),f.forbiddenGlobals!==void 0&&(!Array.isArray(f.forbiddenGlobals)||f.forbiddenGlobals.some(m=>typeof m!="string"))&&a.push(q("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${f.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:f.name}));let u=Array.isArray(f.patterns)?f.patterns:[];if(u.length===0){a.push(q("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${f.name}" has no file patterns and will never classify files.`,{layer:f.name}));continue}for(let m of u){let A;try{A=ae(m)}catch(v){a.push(q("CONFIG_INVALID_LAYER_PATTERN",`Layer "${f.name}" has an invalid pattern "${m}": ${v instanceof Error?v.message:String(v)}`,{layer:f.name,pattern:m}));continue}let E=f.optional===!0||f.reserved===!0||f.allowEmpty===!0;!n.some(v=>A.test(v))&&!E&&a.push(q("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${f.name}" pattern "${m}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:f.name,pattern:m,failsStrict:!1,reserved:!1}))}}for(let f of h)a.push(q("CONFIG_DUPLICATE_LAYER",`Layer "${f}" is configured more than once.`,{layer:f}));if(c.size>0)for(let f of r??[])f.from&&!c.has(f.from)&&a.push(q("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${f.from}".`,{fromLayer:f.from,toLayer:f.to})),f.to&&!c.has(f.to)&&a.push(q("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${f.to}".`,{fromLayer:f.from,toLayer:f.to}));let R=new Set;if(i.length>1)for(let f of n){let u=-1,m=[];for(let A of i)for(let E of A.patterns??[]){if(!ae(E).test(f))continue;let v=ct(E,f);v>u?(u=v,m=[A.name]):v===u&&!m.includes(A.name)&&m.push(A.name)}m.length>1&&R.add([...m].sort().join(" + "))}R.size>0&&a.push(q("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let p=n.filter(f=>!Z(f,i));return p.length>0&&a.push(q("CONFIG_UNCLASSIFIED_FILES",`${p.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:p.length,samples:p.slice(0,5)})),a}l(yt,"collectAnalysisConfigWarnings");function hr(e){let t=0,r=new Map,n=new Map,s=new Set,a=[],i=[],d=l(c=>{r.set(c,t),n.set(c,t),t+=1,a.push(c),s.add(c);for(let R of[...e.get(c)??[]].sort())e.has(R)&&(r.has(R)?s.has(R)&&n.set(c,Math.min(n.get(c)??0,r.get(R)??0)):(d(R),n.set(c,Math.min(n.get(c)??0,n.get(R)??0))));if(n.get(c)!==r.get(c))return;let y=[],h;do{if(h=a.pop(),h===void 0)break;s.delete(h),y.push(h)}while(h!==c);y.length>1&&i.push(y.sort())},"connect");for(let c of[...e.keys()].sort())r.has(c)||d(c);return i.sort((c,y)=>c[0]<y[0]?-1:c[0]>y[0]?1:0).map(c=>({ruleId:"CIRCULAR_DEPENDENCY",file:c[0],line:1,target:c.join(" \u2192 "),message:`Circular dependency among ${c.length} files: ${c.join(" \u2192 ")} \u2192 ${c[0]}.`,cycleKind:"value"}))}l(hr,"detectArchitectureCycles");function xe(e){let t=e.contentViolations.map(a=>({...a})),r=(e.warnings??[]).map(a=>({...a})),n=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&n.has(a.from)&&n.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let i=dt(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!i)continue;let d=i.rule,c=!!d.peerIsolation,y=!c&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=c?Bt(i.peerIsolationReason??"cross-slice",{fromPath:a.from,toPath:a.to,fromSlice:i.fromSlice,toSlice:i.toSlice}):void 0,R=d.message?h?`${d.message} (${h})`:d.message:h?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}): ${h}`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!c&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...c?{peerIsolation:!0}:{},message:y?`${R} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:R,...y?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=hr(n);s==="soft"||s==="framework-soft"?r.push(...a.map(i=>({...i,message:`${i.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:r,safety:e.safety}}l(xe,"evaluateArchitectureGraph");function Qn(e,t){return t.some(r=>{try{return ae(r).test(e)}catch{return!1}})}l(Qn,"matchesAny");function es(e,t){let r=e.contract.config.safety??{},n=Number.isInteger(r.maxTsSuppressions)?Number(r.maxTsSuppressions):0,s=Number.isInteger(r.maxAnyCasts)?Number(r.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],i=t.safetyUses.filter(m=>m.kind==="ts-suppression").map(({file:m,line:A})=>({file:m,line:A})),d=t.safetyUses.filter(m=>m.kind==="any-cast").map(({file:m,line:A})=>({file:m,line:A})),c=t.safetyUses.filter(m=>(m.kind==="dynamic-import"||m.kind==="dynamic-require")&&!Qn(m.file,a)).map(m=>({file:m.file,line:m.line,kind:m.kind==="dynamic-require"?"require":"import"})),y=r.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(m=>m.kind==="in-memory-store").map(m=>({file:m.file,line:m.line,store:m.symbol??"in-memory store"})),h=r.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(m=>m.peerIsolation===!1||m.allowed===!1&&!!m.from&&m.from===m.to&&m.peerIsolation!==!0).map(m=>({from:m.from,to:m.to})),R={tsSuppressions:i,anyCasts:d,nonLiteralDynamicImports:c,inMemoryProductionStores:y,disabledPeerIsolationRules:h,thresholds:{maxTsSuppressions:n,maxAnyCasts:s}},p=[],f=c.filter(m=>m.kind==="import");if(f.length>0){let m=f[0];p.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:m.file,line:m.line,message:`${f.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let u=c.filter(m=>m.kind==="require");if(u.length>0){let m=u[0];p.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:m.file,line:m.line,message:`${u.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(i.length>n){let m=i[0];p.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:m.file,line:m.line,message:`${i.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${n}).`})}if(d.length>s){let m=d[0];p.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:m.file,line:m.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(y.length>0){let m=y[0];p.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:m.file,line:m.line,message:`${y.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return h.length>0&&p.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${h.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:p}}l(es,"evaluateSafety");function ts(e,t){return[...t].filter(r=>e===r||e.startsWith(`${r}.`)).sort((r,n)=>n.length-r.length)[0]}l(ts,"ambientForbiddenGlobal");function Rr(e,t){let r=t.config.layers.filter(n=>(n.intentPrefixes??[]).length>0);return ft(e,r.length>0?r:pt.map(n=>({name:n.layer,prefixes:n.prefixes})))}l(Rr,"intentLayer");function rs(e,t,r){let n=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let i=r.get(a.file);!i||!ts(a.symbol,s.get(i)?.forbiddenGlobals??[])||n.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:i,target:a.symbol,message:`${i} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let i=r.get(a.file);if(!i)continue;let d=s.get(i),c=d?.forbiddenGlobals??[],y=a.source==="import-based"?t.dependencies.find(h=>h.from===a.file&&h.line===a.line&&h.specifier===a.symbol&&!h.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&lt(a.symbol,c))){if(a.source==="import-based"){let h=Ce(a.symbol,c);if(h){n.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:i,target:a.symbol,...y?{edgeKind:y}:{},message:`${i} must not use module "${a.symbol}" because it is the import form of forbidden global "${h}".`});continue}}Ae(d).includes(a.capability)&&n.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:i,target:a.symbol,capability:a.capability,...y?{edgeKind:y}:{},message:a.source==="import-based"?`${i} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${i} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let i=r.get(a.file);if(!i)continue;for(let c of gt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))n.push({ruleId:c.ruleId,file:a.file,line:a.line,...c.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:i}:{},message:c.message});if(!a.sourceIntent)continue;let d=Rr(a.sourceIntent,e.contract);!d||d===i||n.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:i,toLayer:d,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${i}.`})}for(let a of t.intentReferences){let i=r.get(a.file);if(!i)continue;let d=Rr(a.intent,e.contract);if(!d)continue;let c=Ge(e.contract.config.rules,i,d);c&&n.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:i,toLayer:d,target:a.intent,message:c.message??`${i} must not reference ${d} intent ${a.intent}.`})}return n}l(rs,"contentViolations");function ht(e){let{facts:t}=e,r=He(e.contract.config),n=t.evidenceRequirementsHash===r,s=n?t.completeness:"unavailable",a=n?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((o,O)=>{let F=`${o.code}\0${o.file??""}\0${o.message}`,Y=`${O.code}\0${O.file??""}\0${O.message}`;return F<Y?-1:F>Y?1:0}),i=t.files.map(o=>({...o,layer:Z(o.path,e.contract.config.layers)??null})),d=new Map(i.map(o=>[o.path,o.layer])),c=t.dependencies.map(o=>{let O=o.target?d.get(o.target)??Z(o.target,e.contract.config.layers):void 0;return{from:o.from,fromLayer:d.get(o.from)??null,...o.resolution==="resolved-project"&&o.target?{to:o.target,...O?{toLayer:O}:{}}:{},line:o.line,kind:o.kind,typeOnly:o.typeOnly,...o.targetTypeOnlyExports?{targetTypeOnlyExports:o.targetTypeOnlyExports}:{},...o.sourcePureTypeModule?{sourcePureTypeModule:o.sourcePureTypeModule}:{},...o.namedBindingsTypeOnly?{namedBindingsTypeOnly:o.namedBindingsTypeOnly}:{},...o.portProofEligible?{portProofEligible:o.portProofEligible}:{}}}),y=yt({config:e.contract.config,rules:e.contract.config.rules,files:i.map(o=>o.path)}),h=es(e,t),R=e.contract.arkRules??we(),p=i.map(o=>o.path),u={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?rr(e.coverageInputs.fileContents):{},...e.fileHints??{}},m=[...er({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:p,layerForFile:l(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),fileHints:u}),...tr(R,p)],A=m.filter(o=>o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,nextAction:o.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${o.arkruleId} in ${o.arkruleSource} so they match governed files, or remove the rule.`:`Fix the structure or invariant for ${o.arkruleId} (declared in ${o.arkruleSource}), then preflight again.`})),E=m.filter(o=>!o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,failsStrict:!1,nextAction:o.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${o.arkruleId} in ${o.arkruleSource} (zero-match scope; advisory).`:`Review ArkRule ${o.arkruleId} in ${o.arkruleSource} (advisory).`})),w=(R.invariants?.length??0)>0?sr({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},H=w.violations.filter(o=>o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,nextAction:`Add a test title or declared symbol covering ${o.arkruleId} (declared in ${o.arkruleSource}), then preflight again.`})),W=w.violations.filter(o=>!o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,failsStrict:!1,nextAction:o.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${o.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${o.arkruleId} in ${o.arkruleSource} (advisory / partial).`})),k=or(i),$=fr({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:l(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),classification:k}),ee=e.contract.config.arkRun?.mode,de=$.findings.filter(()=>ee==="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:o.failsStrict,...o.severity?{severity:o.severity}:{}})),Nt=$.findings.filter(()=>ee!=="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:!1})),ye=yr({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:l(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),classification:k}),et=e.contract.config.arkOrder?.mode,Pe=ye.findings.filter(()=>et==="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:o.failsStrict,...o.severity?{severity:o.severity}:{}})),Tt=ye.findings.filter(()=>et!=="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:!1})),Ie=[...w.partial&&w.coverage.some(o=>o.mode==="enforced"&&o.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...$.completenessReasons,...ye.completenessReasons],ue=xe({config:e.contract.config,rules:e.contract.config.rules,files:i.filter(o=>o.layer).map(o=>o.path),contentViolations:[...rs(e,t,d),...A,...H,...de,...Pe],edges:c,warnings:[...y,...h.warnings,...E,...W,...Nt,...Tt],safety:h.report}),De=s==="complete"&&Ie.length>0?"partial":s,rt=De==="complete"?a:[...a,...Ie].sort((o,O)=>{let F=`${o.code}\0${o.file??""}\0${o.message}`,Y=`${O.code}\0${O.file??""}\0${O.message}`;return F<Y?-1:F>Y?1:0}),b=ue.violations.filter(o=>o.failsStrict!==!1),I=De==="complete"&&b.length===0,g=I&&ue.warnings.every(o=>o.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:De,completenessReasons:rt,valid:I,strictValid:g,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:h.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:i,layers:e.contract.config.layers.map(o=>o.name),edges:c,capabilityUses:t.capabilityUses,violations:ue.violations,warnings:ue.warnings}}}l(ht,"analyzeCanonicalResolvedProject");function Be(e){return ht({contract:e.contract,facts:pe(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}l(Be,"analyzeResolvedProject");var Rt="1.0";var Xe=class extends Error{static{l(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,r){super(`Invalid architecture change map (${t}):
-${r.map(n=>`- ${n.path}: ${n.message}`).join(`
-`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=r}};function At(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(At,"isObject");function kt(e,t,r,n){for(let s of Object.keys(e))t.includes(s)||n.push({path:`${r}.${s}`,message:"unknown field"})}l(kt,"unknownFields");function ge(e,t,r,n){let s=e[t];if(typeof s=="string"&&s.length>0)return s;n.push({path:`${r}.${t}`,message:"must be a non-empty string"})}l(ge,"requiredString");function ns(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let r=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(r.length===0)return;r.pop()}else r.push(s);let n=r.join("/");return n&&n===t?n:void 0}l(ns,"canonicalProjectPath");function ss(e,t,r="architecture change map"){let n=[];if(!At(e))throw new Xe(r,[{path:"$",message:"must be an object"}]);kt(e,["$schema","schemaVersion","files","dependencies"],"$",n);let s=ge(e,"$schema","$",n),a=ge(e,"schemaVersion","$",n);a&&a!==Rt&&n.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${Rt}`});let i=new Set(t.layers.map(u=>u.name)),d=[],c=new Set;!Array.isArray(e.files)||e.files.length===0?n.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((u,m)=>{let A=`$.files[${m}]`;if(!At(u)){n.push({path:A,message:"must be an object"});return}kt(u,["path","operation","layer"],A,n);let E=ge(u,"path",A,n),v=ge(u,"operation",A,n),w=ge(u,"layer",A,n),H=E?ns(E):void 0;E&&!H&&n.push({path:`${A}.path`,message:"must be a canonical project-relative path"}),v&&!["create","update","delete"].includes(v)&&n.push({path:`${A}.operation`,message:"must be create, update, or delete"}),w&&!i.has(w)&&n.push({path:`${A}.layer`,message:`references unknown layer ${JSON.stringify(w)}`}),H&&c.has(H)&&n.push({path:`${A}.path`,message:`duplicates planned path ${H}`}),H&&c.add(H);let W=H?Z(H,t.layers):void 0;H&&w&&i.has(w)&&W!==w&&n.push({path:`${A}.layer`,message:W?`${H} resolves to ${W}, not ${w}`:`${H} is not assigned to an architecture layer`}),H&&v&&["create","update","delete"].includes(v)&&w&&d.push({path:H,operation:v,layer:w})});let y=[],h=new Map(d.map(u=>[u.path,u.operation])),R=new Set,p=e.dependencies??[];if(Array.isArray(p)?p.forEach((u,m)=>{let A=`$.dependencies[${m}]`;if(!At(u)){n.push({path:A,message:"must be an object"});return}kt(u,["from","to"],A,n);let E=ge(u,"from",A,n),v=ge(u,"to",A,n);E&&!c.has(E)&&n.push({path:`${A}.from`,message:`must reference a planned file path: ${E}`}),v&&!c.has(v)&&n.push({path:`${A}.to`,message:`must reference a planned file path: ${v}`}),E&&h.get(E)==="delete"&&n.push({path:`${A}.from`,message:`cannot depend from deleted file ${E}`}),v&&h.get(v)==="delete"&&n.push({path:`${A}.to`,message:`cannot depend on deleted file ${v}`}),E&&v&&E===v&&n.push({path:A,message:"must not declare a self dependency"});let w=E&&v?`${E}\0${v}`:void 0;w&&R.has(w)&&n.push({path:A,message:`duplicates dependency ${E} -> ${v}`}),w&&R.add(w),E&&v&&y.push({from:E,to:v})}):n.push({path:"$.dependencies",message:"must be an array"}),n.length>0)throw new Xe(r,n);let f={$schema:s,schemaVersion:Rt,files:d.sort((u,m)=>u.path.localeCompare(m.path)),dependencies:y.sort((u,m)=>u.from.localeCompare(m.from)||u.to.localeCompare(m.to))};return{map:f,hash:U(N(f))}}l(ss,"loadArchitectureChangeMap");function B(e){return`${e.from}->${e.to}`}l(B,"dependencyKey");function $e(e,t,r,n="dependency"){return{id:`${e}:${n}:${B(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:r,...e==="missing"?{nextAction:`Add the planned dependency ${B(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${B(t)}, then preflight again.`}:e==="unplanned"?{nextAction:n==="dependency-removed"?`Restore the removed dependency ${B(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${B(t)} from the candidate, then preflight again.`}:{}}}l($e,"dependencyFinding");function _e(e){let t=[],r=new Map(e.changeMap.map.files.map(p=>[p.path,p])),n=new Map(e.changes.map(p=>[p.path,p])),s=new Map(e.changeMap.map.dependencies.map(p=>[B(p),p])),a=new Map(e.baseDependencies.map(p=>[B(p),p])),i=new Map(e.candidateDependencies.map(p=>[B(p),p]));for(let p of[...r.values()].sort((f,u)=>f.path.localeCompare(u.path))){let f=n.get(p.path);f?f.operation!==p.operation?t.push({id:`contradictory:file:${p.path}`,classification:"contradictory",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:f.operation,message:`${p.path} was planned as ${p.operation} but the actual operation is ${f.operation}.`,nextAction:`Change ${p.path} to the planned ${p.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${p.path}`,classification:"satisfied",subject:"file",path:p.path,expectedOperation:p.operation,actualOperation:f.operation,message:`${p.path} matches the planned ${p.operation} operation.`}):t.push({id:`missing:file:${p.path}`,classification:"missing",subject:"file",path:p.path,expectedOperation:p.operation,message:`${p.path} was planned as ${p.operation} but is absent from the actual change.`,nextAction:`${p.operation[0].toUpperCase()}${p.operation.slice(1)} ${p.path} in the complete change set, then preflight again.`})}for(let p of[...n.values()].sort((f,u)=>f.path.localeCompare(u.path)))r.has(p.path)||t.push({id:`unplanned:file:${p.path}`,classification:"unplanned",subject:"file",path:p.path,actualOperation:p.operation,message:`${p.path} has an unplanned ${p.operation} operation.`,nextAction:`Remove ${p.path} from the change set, then preflight again.`});let d=new Set;for(let p of[...s.values()].sort((f,u)=>B(f).localeCompare(B(u)))){if(i.has(B(p))){t.push($e("satisfied",p,`${p.from} -> ${p.to} exists in the candidate architecture.`));continue}let f={from:p.to,to:p.from};i.has(B(f))?(d.add(B(f)),t.push($e("contradictory",p,`${p.from} -> ${p.to} was planned, but the candidate contains the reverse edge.`))):t.push($e("missing",p,`${p.from} -> ${p.to} is absent from the candidate architecture.`))}let c=new Set([...r.keys(),...n.keys()]);for(let[p,f]of[...i].sort(([u],[m])=>u.localeCompare(m)))a.has(p)||s.has(p)||d.has(p)||!c.has(f.from)&&!c.has(f.to)||t.push({...$e("unplanned",f,`${f.from} -> ${f.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let y=new Set(e.changeMap.map.files.filter(p=>p.operation==="delete").map(p=>p.path));for(let[p,f]of[...a].sort(([u],[m])=>u.localeCompare(m)))i.has(p)||y.has(f.from)||y.has(f.to)||!c.has(f.from)&&!c.has(f.to)||t.push({...$e("unplanned",f,`${f.from} -> ${f.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let h={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((p,f)=>h[p.classification]-h[f.classification]||(p.subject===f.subject?0:p.subject==="file"?-1:1)||p.id.localeCompare(f.id));let R={satisfied:t.filter(p=>p.classification==="satisfied").length,missing:t.filter(p=>p.classification==="missing").length,contradictory:t.filter(p=>p.classification==="contradictory").length,unplanned:t.filter(p=>p.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:R.missing===0&&R.contradictory===0&&R.unplanned===0,behavioralCompletion:"not-evaluated",summary:R,findings:t}}l(_e,"analyzeArchitectureConvergence");function be(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}l(be,"literalText");function br(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}l(br,"lineOf");function Ar(e,t){if(e.isImportDeclaration(t)){let n=t.importClause;if(!n)return!1;if(n.isTypeOnly)return!0;let s=n.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let r=t.exportClause;return!!(r&&e.isNamedExports(r)&&r.elements.length>0&&r.elements.every(n=>n.isTypeOnly))}l(Ar,"isTypeOnlyReference");function vr(e,t){let r={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},n=e.createCompilerHost(r,!0);return n.getSourceFile=s=>s===t.fileName?t:void 0,n.fileExists=s=>s===t.fileName,n.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],r,n).getTypeChecker()}l(vr,"singleFileChecker");function bt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}l(bt,"symbolAt");function vt(e,t,r,n){let s=n.parent&&e.isShorthandPropertyAssignment(n.parent)&&n.parent.name===n,a;try{a=s?t.getShorthandAssignmentValueSymbol(n.parent):bt(t,n)}catch{a=void 0}return!!a?.declarations?.some(i=>i.getSourceFile().fileName===r.fileName)}l(vt,"localDeclaration");function Et(e,t){let r,n=[],s=l((i,d,c,y=!1)=>n.push({specifier:c,kind:d,line:br(t,i),typeOnly:y,unresolved:c===void 0,node:i}),"add"),a=l(i=>{if(e.isImportDeclaration(i))s(i,"import",be(e,i.moduleSpecifier),Ar(e,i));else if(e.isExportDeclaration(i)&&i.moduleSpecifier)s(i,"export",be(e,i.moduleSpecifier),Ar(e,i));else if(e.isImportEqualsDeclaration(i)&&e.isExternalModuleReference(i.moduleReference))s(i,"require",be(e,i.moduleReference.expression),i.isTypeOnly===!0);else if(e.isCallExpression(i)){let d=i.expression.kind===e.SyntaxKind.ImportKeyword,y=e.isIdentifier(i.expression)&&i.expression.text==="require"&&!vt(e,r??(r=vr(e,t)),t,i.expression);(d||y)&&s(i,y?"require":"dynamic-import",be(e,i.arguments[0]))}e.forEachChild(i,a)},"visit");return a(t),n}l(Et,"extractSemanticDependencies");function as(e,t){let r=[],n=t;for(;e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n);){if(e.isPropertyAccessExpression(n))r.unshift(n.name.text);else{let s=be(e,n.argumentExpression);if(s===void 0)return;r.unshift(s)}n=n.expression}if(e.isIdentifier(n))return r.unshift(n.text),{root:n,segments:r}}l(as,"staticAccessPath");function os(e,t){let r=t.parent;return e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(r)&&r.name===t}l(os,"runtimeIdentifierReference");function kr(e,t){let r=t[0]==="globalThis"?t.slice(1):t;for(let n=r.length;n>=1;n-=1){let s=r.slice(0,n).join(".");if(e.has(s))return s}}l(kr,"bestForbiddenMatch");function It(e,t,r){if(r.length===0)return[];let n=new Set(r),s=vr(e,t),a=new Map,i=new Set;for(let p of t.statements)if(e.isVariableStatement(p))for(let f of p.declarationList.declarations)e.isIdentifier(f.name)&&i.add(f.name.text);let d=l(p=>{let f=as(e,p);if(!f)return;let u=bt(s,f.root),m=u?a.get(u):void 0;return m?[...m,...f.segments.slice(1)]:vt(e,s,t,f.root)||i.has(f.root.text)?void 0:f.segments},"resolvePath");for(let p of t.statements)if(e.isVariableStatement(p))for(let f of p.declarationList.declarations){if(!f.initializer||!e.isIdentifier(f.name))continue;let u=d(f.initializer),m=bt(s,f.name);!u||!m||a.set(m,u)}let c=[],y=new Set,h=l((p,f)=>{let u=br(t,f),m=`${p}:${f.getStart(t)}`;y.has(m)||(y.add(m),c.push({name:p,line:u,node:f}))},"flag"),R=l(p=>{let f=p.parent&&(e.isPropertyAccessExpression(p.parent)||e.isElementAccessExpression(p.parent))&&p.parent.expression===p;if((e.isPropertyAccessExpression(p)||e.isElementAccessExpression(p))&&!f){let u=d(p),m=u?kr(n,u):void 0;m&&h(m,p)}else e.isIdentifier(p)&&n.has(p.text)&&os(e,p)&&!vt(e,s,t,p)&&h(p.text,p);if(e.isVariableDeclaration(p)&&e.isObjectBindingPattern(p.name)&&p.initializer){let u=d(p.initializer);if(u)for(let m of p.name.elements){if(!e.isIdentifier(m.name))continue;let A=m.propertyName?be(e,m.propertyName)??m.propertyName.text:m.name.text,E=kr(n,[...u,A]);E&&h(E,p.initializer)}}e.forEachChild(p,R)},"visit");return R(t),c}l(It,"collectForbiddenCapabilityUses");function is(e,t,r){let n=[];for(let s of r?.dependencies??Et(e,t)){if(s.typeOnly||!s.specifier)continue;let a=Se(s.specifier);a&&n.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of r?.ambientUses??It(e,t,it)){let a=Oe(s.name);a&&n.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return n.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}l(is,"collectCapabilityUses");var ve={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Er={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...ve,default:[]},kernelRoots:{...ve},managedLayers:{...ve,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},Ir={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...ve,default:[]},managedLayers:{...ve,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...ve,default:[]}}};function Fe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Fe,"isObject");function Sr(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let r of e.layers)Fe(r)&&typeof r.name=="string"&&r.name.length>0&&t.add(r.name);return t}l(Sr,"declaredLayerNames");function Cr(e){if(!Fe(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}l(Cr,"defaultedArkRun");function Or(e){if(!Fe(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}l(Or,"defaultedArkOrder");function wr(e,t){let r=e.arkRun;if(r===void 0||!Fe(r))return;let n=Sr(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((a,i)=>{typeof a=="string"&&a.length>0&&!n.has(a)&&t.push({path:`$.arkRun.managedLayers[${i}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),r.mode==="enforced"){let a=r.kernelRoots??r.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:r.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(wr,"validateArkRunExtra");function xr(e,t){let r=e.arkOrder;if(r===void 0||!Fe(r))return;let n=Sr(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((a,i)=>{typeof a=="string"&&a.length>0&&!n.has(a)&&t.push({path:`$.arkOrder.managedLayers[${i}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),r.mode==="enforced"){let a=r.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}l(xr,"validateArkOrderExtra");var te="1.3",St="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",$r=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],ls=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function cs(){let e=[];for(let t of $r)for(let r of $r)t===r||ls.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}l(cs,"createDefaultRules");var Fr=cs(),Ct=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],J={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},_r={$schema:"https://json-schema.org/draft/2020-12/schema",$id:St,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:St,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:te,default:te},name:{type:"string",minLength:1},include:{...J,minItems:1,default:["src"]},exclude:{...J,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Fr,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...J,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...J,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...J,minItems:1},exclude:J,intentPrefixes:J,description:{type:"string",minLength:1},forbiddenGlobals:J,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...J,minItems:1},sharedRoots:{...J,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget; coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant.",properties:{testGlobs:{...J,minItems:1},maxFiles:{type:"integer",minimum:1},coverageRoots:{...J,minItems:1}}},arkRun:Er,arkOrder:Ir}},le=class extends Error{static{l(this,"ArkConfigValidationError")}issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
-${r.map(n=>`- ${n.path}: ${n.message}`).join(`
-`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function Nr(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(Nr,"isObject");function Ye(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}l(Ye,"propertyPath");function Ee(e){return e===null?"null":Array.isArray(e)?"array":typeof e}l(Ee,"valueType");function ds(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}l(ds,"resolveSchemaRef");function Ne(e,t,r,n,s){if(t.$ref){let a=ds(t.$ref,n);if(!a){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}Ne(e,a,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Nr(e)){s.push({path:r,message:`must be an object; received ${Ee(e)}`});return}let a=t.properties??{};for(let i of t.required??[])e[i]===void 0&&s.push({path:Ye(r,i),message:"is required"});if(t.additionalProperties===!1)for(let i of Object.keys(e))i in a||s.push({path:Ye(r,i),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let i=t.additionalProperties;for(let d of Object.keys(e))d in a||Ne(e[d],i,Ye(r,d),n,s)}for(let[i,d]of Object.entries(a))e[i]!==void 0&&Ne(e[i],d,Ye(r,i),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${Ee(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(i=>JSON.stringify(i));new Set(a).size!==a.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((a,i)=>Ne(a,t.items,`${r}[${i}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${Ee(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${Ee(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${Ee(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}l(Ne,"validateNode");function us(e){let t={...e,$schema:e.$schema===void 0?St:e.$schema,schemaVersion:e.schemaVersion===void 0?te:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Fr.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Cr(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Or(e.arkOrder)),t}l(us,"defaultedConfig");function ps(e){return e===te?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}l(ps,"migratedFromOf");function fs(){let e=new Set([te]);for(let t of Ct)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}l(fs,"knownInputVersions");function gs(e,t="ark.config.json"){if(!Nr(e))throw new le(t,[{path:"$",message:`must be an object; received ${Ee(e)}`}]);let r=fs(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${te}`}]);if(n!=="unversioned"&&!r.has(n))throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${te}`}]);let s=n,a={...e},i=0;for(;s!==te&&i<Ct.length+1;){i+=1;let d=Ct.find(c=>c.from===s);if(!d)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${te}`}]);s=d.to,a.schemaVersion=s}if(s!==te)throw new le(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${te}`}]);return{candidate:us(a),migratedFrom:ps(n)}}l(gs,"migrateArkConfig");function Ot(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=gs(e,t),s=[];if(Ne(r,_r,"$",_r,s),wr(r,s),xr(r,s),s.length>0)throw new le(t,s);return{config:r,migratedFrom:n}}l(Ot,"loadArkConfigContract");function Tr(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new le(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return Ot(r,t)}l(Tr,"parseArkConfigJson");function wt(e){return{...e,layers:e.layers.map(t=>{let{description:r,...n}=t;return n})}}l(wt,"omitLayerDescriptions");function Lr(e){let{stewards:t,...r}=wt(e.config);return{config:r,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(n=>({id:n.id,sensor:n.sensor,mode:n.mode,appliesTo:n.appliesTo??null,description:n.description??null,provenance:n.provenance})),invariants:e.arkRules.invariants.map(n=>({id:n.id,description:n.description,aggregate:n.aggregate??null,coverage:n.coverage??null,mode:n.mode,appliesTo:n.appliesTo??null,provenance:n.provenance}))}}}l(Lr,"effectiveContractPolicyPayload");var Kr="1.0";function C(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}l(C,"addFinding");function V(e){return[...new Set(e??[])].sort()}l(V,"sortedUnique");function re(e,t,r,n,s){let a=V(r),i=V(n),d=new Set(a),c=new Set(i),y=i.filter(R=>!d.has(R)),h=a.filter(R=>!c.has(R));y.length===0&&h.length===0||(y.length>0&&C(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:a,after:i}),h.length>0&&C(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:a,after:i}))}l(re,"compareStringSets");function Te(e,t,r,n,s,a,i){if(r===n)return;C(e,{kind:n?"enabled":"disabled",path:t,classification:n?s:s==="strengthening"?"weakening":"strengthening",message:n?a:i,before:r,after:n})}l(Te,"compareBoolean");function Ze(e,t){let r=new Map,n=new Set;for(let s of e){let a=t(s);r.has(a)?n.add(a):r.set(a,s)}return{values:r,duplicates:[...n].sort()}}l(Ze,"keyed");function ms(e,t,r){let n=Ze(t,a=>a.name),s=Ze(r,a=>a.name);(n.duplicates.length>0||s.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:n.duplicates,after:s.duplicates});for(let a of[...new Set([...n.values.keys(),...s.values.keys()])].sort()){let i=n.values.get(a),d=s.values.get(a),c=`$.layers[${a}]`;if(!i&&d){C(e,{kind:"layer-added",path:c,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:d});continue}if(i&&!d){C(e,{kind:"layer-removed",path:c,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:i});continue}if(!i||!d)continue;re(e,`${c}.patterns`,i.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),re(e,`${c}.exclude`,i.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let y=je(i),h=je(d);re(e,`${c}.forbiddenGlobals`,y.rawGlobals,h.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),re(e,`${c}.capabilities`,y.atoms,h.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),V(i.intentPrefixes).join("\0")!==V(d.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${c}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:V(i.intentPrefixes),after:V(d.intentPrefixes)}),Te(e,`${c}.mayImportInfrastructure`,i.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Te(e,`${c}.optional`,i.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}l(ms,"compareLayers");function ys(e,t,r){let n=l(i=>`${i.from}->${i.to}`,"keyOf"),s=Ze(t,n),a=Ze(r,n);(s.duplicates.length>0||a.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:a.duplicates});for(let i of[...new Set([...s.values.keys(),...a.values.keys()])].sort()){let d=s.values.get(i),c=a.values.get(i),y=`$.rules[${i}]`;if(!d&&c){c.allowed===!1&&C(e,{kind:"deny-added",path:y,classification:"strengthening",message:"A denied dependency edge was added.",after:c});continue}if(d&&!c){d.allowed===!1&&C(e,{kind:"deny-removed",path:y,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!c)continue;d.allowed!==c.allowed&&C(e,{kind:c.allowed?"deny-disabled":"deny-enabled",path:`${y}.allowed`,classification:c.allowed?"weakening":"strengthening",message:c.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:c.allowed});let h=d.peerIsolation===!0,R=c.peerIsolation===!0;if(h!==R){let p=d.from===d.to&&c.from===c.to;C(e,{kind:R?"peer-isolation-enabled":"peer-isolation-disabled",path:`${y}.peerIsolation`,classification:p?R?"strengthening":"weakening":"judgment-required",message:p?R?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:h,after:R})}V(d.sliceFolders).join("\0")!==V(c.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${y}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:V(d.sliceFolders),after:V(c.sliceFolders)}),!(!h&&!R)&&(Dr(e,`${y}.sharedRoots`,"shared-roots",V(d.sharedRoots),V(c.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),Dr(e,`${y}.allowedCrossSlice`,"cross-slice-allowance",V((d.allowedCrossSlice??[]).map(Pr)),V((c.allowedCrossSlice??[]).map(Pr)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."))}}l(ys,"compareRules");function Pr(e){return JSON.stringify([e.from,e.to])}l(Pr,"crossSliceKey");function Dr(e,t,r,n,s,a,i){if(JSON.stringify(n)===JSON.stringify(s))return;let d=s.filter(h=>!n.includes(h)),c=n.filter(h=>!s.includes(h)),y=d.length>0&&c.length>0;C(e,{kind:y?`${r}-changed`:d.length>0?`${r}-added`:`${r}-removed`,path:t,classification:y?"judgment-required":d.length>0?"weakening":"strengthening",message:y?`${a} Entries were added and removed in the same change.`:d.length>0?a:i,before:n,after:s})}l(Dr,"compareDeclaredExceptions");function hs(e,t,r){let n=t.safety??{},s=r.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let i=n[a]??0,d=s[a]??0;i!==d&&C(e,{kind:d>i?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:d>i?"weakening":"strengthening",message:d>i?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:i,after:d})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])Te(e,`$.safety.${a}`,n[a]===!0,s[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}l(hs,"compareSafety");function xt(e){return e.mode==="enforced"?"enforced":"advisory"}l(xt,"arkRunMode");function $t(e){return e.mode==="enforced"?"enforced":"advisory"}l($t,"arkOrderMode");function Rs(e,t,r){let n=t.arkOrder,s=r.arkOrder,a="$.arkOrder";if(!n&&!s)return;if(!n&&s){C(e,{kind:"arkorder-added",path:a,classification:"strengthening",message:`ArkOrder extra was added (${$t(s)}).`,after:s});return}if(n&&!s){C(e,{kind:"arkorder-removed",path:a,classification:"weakening",message:"ArkOrder extra was removed.",before:n});return}if(!n||!s)return;let i=$t(n),d=$t(s);if(i!==d){let c=i==="advisory"&&d==="enforced";C(e,{kind:c?"arkorder-promoted":"arkorder-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:i,after:d})}re(e,`${a}.planeRoots`,n.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),re(e,`${a}.managedLayers`,n.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}l(Rs,"compareArkOrder");function As(e,t,r){let n=t.arkRun,s=r.arkRun,a="$.arkRun";if(!n&&!s)return;if(!n&&s){C(e,{kind:"arkrun-added",path:a,classification:"strengthening",message:`ArkRun extra was added (${xt(s)}).`,after:s});return}if(n&&!s){C(e,{kind:"arkrun-removed",path:a,classification:"weakening",message:"ArkRun extra was removed.",before:n});return}if(!n||!s)return;let i=xt(n),d=xt(s);if(i!==d){let c=i==="advisory"&&d==="enforced";C(e,{kind:c?"arkrun-promoted":"arkrun-demoted",path:`${a}.mode`,classification:c?"strengthening":"weakening",message:c?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:i,after:d})}re(e,`${a}.compositionRoots`,n.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),re(e,`${a}.managedLayers`,n.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Te(e,`${a}.requireDeclarations`,n.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}l(As,"compareArkRun");function ks(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}l(ks,"overallClassification");function Mr(e,t){return`${e}::${t}`}l(Mr,"ruleKey");function Hr(e){let t=new Map,r=new Map;if(!e)return{structure:t,invariants:r};for(let n of e.structure)t.set(Mr(n.provenance.layer,n.id),n);for(let n of e.invariants)r.set(Mr(n.provenance.layer,n.id),n);return{structure:t,invariants:r}}l(Hr,"indexEffectiveRules");function bs(e,t,r,n,s,a){let i=new Map((a??[]).map(p=>[p.invariantId,p])),d=t.arkRules??{},c=r.arkRules??{},y=[...new Set([...Object.keys(d),...Object.keys(c)])].sort();for(let p of y){let f=d[p],u=c[p],m=`$.arkRules[${p}]`;if(f===void 0&&u!==void 0){C(e,{kind:"arkrules-ref-added",path:m,classification:"strengthening",message:`ArkRules reference for layer ${p} was added.`,after:u});continue}if(f!==void 0&&u===void 0){C(e,{kind:"arkrules-ref-removed",path:m,classification:"weakening",message:`ArkRules reference for layer ${p} was removed.`,before:f});continue}f!==u&&C(e,{kind:"arkrules-ref-path-changed",path:m,classification:"judgment-required",message:`ArkRules file path for layer ${p} changed; verify the effective rules still match intent.`,before:f,after:u})}let h=Hr(n),R=Hr(s);for(let p of[...new Set([...h.structure.keys(),...R.structure.keys()])].sort()){let f=h.structure.get(p),u=R.structure.get(p),m=`$.arkRules.structure[${p}]`;if(!f&&u){C(e,{kind:"arkrule-structure-added",path:m,classification:"strengthening",message:`Structure ArkRule ${u.id} was added (${u.mode}).`,after:u});continue}if(f&&!u){C(e,{kind:"arkrule-structure-removed",path:m,classification:"weakening",message:`Structure ArkRule ${f.id} was removed.`,before:f});continue}if(!(!f||!u)){if(f.mode!==u.mode){let A=f.mode==="advisory"&&u.mode==="enforced";C(e,{kind:A?"arkrule-promoted":"arkrule-demoted",path:`${m}.mode`,classification:A?"strengthening":"weakening",message:A?`Structure ArkRule ${u.id} was promoted to enforced.`:`Structure ArkRule ${u.id} was demoted to advisory.`,before:f.mode,after:u.mode})}f.sensor!==u.sensor&&C(e,{kind:"arkrule-sensor-changed",path:`${m}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${u.id} changed sensor identity.`,before:f.sensor,after:u.sensor})}}for(let p of[...new Set([...h.invariants.keys(),...R.invariants.keys()])].sort()){let f=h.invariants.get(p),u=R.invariants.get(p),m=`$.arkRules.invariants[${p}]`;if(!f&&u){C(e,{kind:"arkrule-invariant-added",path:m,classification:"strengthening",message:`Invariant ${u.id} was added (${u.mode}).`,after:u});continue}if(f&&!u){C(e,{kind:"arkrule-invariant-removed",path:m,classification:"weakening",message:`Invariant ${f.id} was removed.`,before:f});continue}if(!(!f||!u)&&f.mode!==u.mode)if(f.mode==="advisory"&&u.mode==="enforced"){let E=i?.get(u.id),v=ar(E);v.ok?C(e,{kind:"arkrule-invariant-promoted",path:`${m}.mode`,classification:"strengthening",message:`Invariant ${u.id} was promoted to enforced (coverage evidence present).`,before:f.mode,after:u.mode}):C(e,{kind:"arkrule-invariant-promote-refused",path:`${m}.mode`,classification:"judgment-required",message:`Invariant ${u.id} cannot be promoted to enforced: ${v.reason}`,before:f.mode,after:u.mode})}else C(e,{kind:"arkrule-invariant-demoted",path:`${m}.mode`,classification:"weakening",message:`Invariant ${u.id} was demoted to advisory.`,before:f.mode,after:u.mode})}}l(bs,"compareArkRules");function Ur(e,t,r){let n=[];re(n,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),re(n,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),re(n,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Te(n,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",i=t.cyclePolicy??"strict";if(a!==i){let d=s[i]===s[a]?"judgment-required":s[i]>s[a]?"strengthening":"weakening";C(n,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:a,after:i})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(n,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),ms(n,e.layers,t.layers),ys(n,e.rules,t.rules),hs(n,e,t),bs(n,e,t,r?.baseArkRules,r?.candidateArkRules,r?.candidateInvariantCoverage),As(n,e,t),Rs(n,e,t),n.sort((d,c)=>d.path.localeCompare(c.path)||d.id.localeCompare(c.id)),{schemaVersion:Kr,classification:ks(n),findings:n}}l(Ur,"classifyArkPolicyDelta");function jr(e,t){if(!e||e.schemaVersion!==Kr||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let r=V(e.findingIds),n=V(t.findingIds);return r.length===n.length&&r.every((s,a)=>s===n[a])}l(jr,"policyDeltaAcknowledgementMatches");function me(e){let t=[];for(let r of e.replace(/\\/g,"/").split("/"))!r||r==="."||(r===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(r));return t.join("/")}l(me,"normalizePath");function Vr(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}l(Vr,"isIdentifierStart");function Je(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}l(Je,"isIdentifierCharacter");function X(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}l(X,"skipWhitespace");function Le(e,t){let r=e[t];if(r!=="'"&&r!=='"')return;let n=t,s="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===r)return{value:s,offset:n,excerpt:e.slice(n,t+1)};a==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=a}}l(Le,"readString");function Q(e,t,r){return e.startsWith(t,r)&&!Je(e[r-1])&&!Je(e[r+t.length])}l(Q,"isWordAt");function Gr(e,t){let r=X(e,t);if(e[r]!=="{")return!1;r+=1;let n=!1;for(;r<e.length;){if(r=X(e,r),e[r]==="}")return n;if(e[r]===","){r+=1;continue}if(!Q(e,"type",r))return!1;let s=X(e,r+4);if(s>=e.length||e[s]===","||e[s]==="}"||Q(e,"as",s)||!Vr(e[s]))return!1;for(r=s;r<e.length&&Je(e[r]);)r+=1;if(r=X(e,r),Q(e,"as",r)){if(r=X(e,r+2),!Vr(e[r]))return!1;for(;r<e.length&&Je(e[r]);)r+=1}n=!0}return!1}l(Gr,"bracedNamedBindingsAreTypeOnly");function vs(e,t){if(t=X(e,t+6),e[t]==="(")return Le(e,X(e,t+1));let r=!1;if(Q(e,"type",t)){let s=X(e,t+4);e[s]!==","&&!Q(e,"from",s)&&(r=!0)}else Gr(e,t)&&(r=!0);let n=zr(e,t,!0);return n&&r?{...n,typeOnly:!0}:n}l(vs,"specifierAfterImport");function Es(e,t){t=t+6;let r=X(e,t),n=!1;if(Q(e,"type",r)){let a=X(e,r+4);(e[a]==="{"||e[a]==="*")&&(n=!0)}else Gr(e,r)&&(n=!0);let s=zr(e,t,!1);return s&&n?{...s,typeOnly:!0}:s}l(Es,"specifierAfterExport");function zr(e,t,r){for(;t<e.length;t+=1){if(e[t]===";")return;if(Q(e,"from",t))return Le(e,X(e,t+4));if(r&&(e[t]==="'"||e[t]==='"'))return Le(e,t);if(t>0&&(Q(e,"import",t)||Q(e,"export",t)))return}}l(zr,"specifierInStaticStatement");function Is(e,t){for(t+=1;t<e.length;t+=1){let r=e[t];if(r==="\\")t+=1;else if(r==="`")return t}return e.length}l(Is,"skipTemplateLiteral");function Ss(e,t){let r=t-1;for(;r>=0&&/\s/.test(e[r]);)r-=1;if(e[r]===".")return;let n=X(e,t+7);if(e[n]!=="(")return;n=X(e,n+1);let s=Le(e,n);return s?{...s,requireCall:!0}:void 0}l(Ss,"specifierAfterRequire");function Cs(e){let t=[];for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="/"&&e[r+1]==="/"){if(r=e.indexOf(`
-`,r+2),r<0)break;continue}if(n==="/"&&e[r+1]==="*"){let a=e.indexOf("*/",r+2);if(a<0)break;r=a+1;continue}if(n==="`"){r=Is(e,r);continue}if(n==="'"||n==='"'){let a=Le(e,r);a&&(r=a.offset+a.excerpt.length-1);continue}let s=n==="i"&&Q(e,"import",r)?vs(e,r):n==="e"&&Q(e,"export",r)?Es(e,r):n==="r"&&Q(e,"require",r)?Ss(e,r):void 0;s&&(t.push(s),r=s.offset+s.excerpt.length-1)}return t}l(Cs,"moduleSpecifiers");function qr(e,t){let r=[],n=[];for(let s of Cs(e.content)){let a=s.value;if(!a.startsWith(".")){if(s.typeOnly)continue;let y=Se(a);if(!y)continue;let h=e.content.slice(0,s.offset).split(`
-`).length;n.push({file:e.path,symbol:a,capability:y,evidence:{kind:"import",file:e.path,line:h,excerpt:s.excerpt}});continue}let i=e.content.slice(0,s.offset).split(`
-`).length,d={kind:"import",file:e.path,line:i,excerpt:s.excerpt},c=Os(e.path,a,t);r.push({from:e.path,specifier:a,to:c?.path??null,resolution:c?"resolved":"unresolved",fromLayer:e.layer,toLayer:c?.layer??null,evidence:d})}return{edges:r,capabilityUses:n}}l(qr,"moduleFactsFor");function Os(e,t,r){let n=e.split("/");n.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?n.pop():n.push(a));let s=n.join("/");for(let a of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let i=r.get(a);if(i)return i}}l(Os,"resolveSpecifier");function Wr(e,t){let r=[];for(let n of e){if(!n.to||!n.fromLayer||!n.toLayer)continue;let s=Ge(t.rules,n.fromLayer,n.toLayer,{fromPath:n.from,toPath:n.to,layers:t.layers});s&&r.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:n,evidence:n.evidence})}return r}l(Wr,"violationsFor");var ws={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function xs(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}l(xs,"hasActiveArkRules");function $s(e,t){return xs(e,t)?U(N(Lr({config:e,arkRules:t,warnings:[]}))):U(N(wt(e)))}l($s,"policyHashFor");function _t(e,t,r){let n=typeof e=="string"?Tr(e,t):Ot(e,t),s=r?.arkRules??we();return{...n,arkRules:s,policyHash:$s(n.config,s)}}l(_t,"loadContract");function _s(e){let t=_t(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),r=_t(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),n=Ur(t.config,r.config,{baseArkRules:t.arkRules,candidateArkRules:r.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=n.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),a=s.length>0,i=a&&jr(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:r.policyHash,findingIds:s});return{schemaVersion:n.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:r.policyHash,classification:n.classification,findings:n.findings,blockingFindingIds:s,requiresAcknowledgement:a,acknowledged:i,valid:!a||i}}l(_s,"analyzePolicyDelta");function Qe(e){let t=e.files.map(R=>{let p=me(R.path);return{path:p,content:R.content,contentHash:U(R.content),layer:Z(p,e.contract.config.layers)??null}}).sort((R,p)=>R.path.localeCompare(p.path)),r=new Map(t.map(R=>[R.path,R])),n=[],s=[];for(let R of t){let p=qr(R,r);n.push(...p.edges),s.push(...p.capabilityUses)}let a=Wr(n,e.contract.config),i=new Map(e.contract.config.layers.map(R=>[R.name,R])),d=new Map(e.contract.config.layers.map(R=>[R.name,new Set(Ae(R))]));for(let R of s){let p=r.get(R.file)?.layer;if(!p)continue;let f=i.get(p),u=Ce(R.symbol,f?.forbiddenGlobals??[]);if(u){a.push({ruleId:"FORBIDDEN_GLOBAL",message:`${p} must not use module "${R.symbol}" because it is the import form of forbidden global "${u}".`,symbol:R.symbol,evidence:R.evidence});continue}d.get(p)?.has(R.capability)&&a.push({ruleId:"CAPABILITY_VIOLATION",message:`${p} denies the ${R.capability} capability; found import of "${R.symbol}".`,capability:R.capability,symbol:R.symbol,evidence:R.evidence})}let c=t.length===0?"complete":"partial",y=c==="complete"?[]:[{...ws}],h={schemaVersion:Kt,policyHash:e.contract.policyHash,compilerOptionsHash:U(N(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(R=>R.name),edges:n,capabilityUses:s,violations:a};return{mode:"lexical-compatibility",completeness:c,completenessReasons:y,valid:c==="complete"&&a.length===0,ir:h}}l(Qe,"analyzeProject");function Ft(e){let t=new Map(e.files.map(r=>[me(r.path),r]));for(let r of e.changes){let n=me(r.path);"delete"in r&&r.delete?t.delete(n):"content"in r&&t.set(n,{path:n,content:r.content})}return Qe({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}l(Ft,"analyzeChange");function Fs(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let r=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${r}. ${e.message}`}l(Fs,"explainViolation");function Br(e){return U(N(e.map(({path:t,contentHash:r})=>({path:t,contentHash:r}))))}l(Br,"analysisTreeHash");function Ns(e){let t=Qe(e),r=new Map(t.ir.files.map(u=>[u.path,u])),n=[],s=new Set,a=[];for(let u of e.changes){let m=u.path.replace(/\\/g,"/"),A=me(u.path);if(!A||A===".."||A.startsWith("../")||m.startsWith("/")||/^[A-Za-z]:\//.test(m)||m.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(A)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:A,line:1,message:`The atomic change set contains more than one operation for ${A}.`});continue}s.add(A),"delete"in u&&u.delete&&!r.has(A)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:A,line:1,message:`Cannot delete ${A} because it is not present in the supplied base tree.`}),n.push("delete"in u&&u.delete?{path:A,delete:!0}:{path:A,content:"content"in u?u.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let i=Ft({...e,changes:n}),d=new Map(i.ir.files.map(u=>[u.path,u])),c=i.ir.violations.filter(u=>u.ruleId==="CAPABILITY_VIOLATION"||u.ruleId==="FORBIDDEN_GLOBAL").map(u=>{let m=d.get(u.evidence.file)?.layer;return{ruleId:u.ruleId,file:u.evidence.file,line:u.evidence.line,target:u.symbol,...u.capability?{capability:u.capability}:{},...m?{fromLayer:m}:{},edgeKind:"import",message:u.message}}),y=xe({config:e.contract.config,rules:e.contract.config.rules,files:i.ir.files.map(u=>u.path),contentViolations:c,edges:i.ir.edges.filter(u=>!!u.fromLayer).map(u=>({from:u.from,fromLayer:u.fromLayer,...u.to?{to:u.to}:{},...u.toLayer?{toLayer:u.toLayer}:{},line:u.evidence.line,kind:"import",...u.typeOnly?{typeOnly:!0}:{},...u.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),h=n.map(u=>{let m=me(u.path),A=r.get(m),E=d.get(m);return{path:m,operation:"delete"in u&&u.delete?"delete":A?"update":"create",...A?{beforeContentHash:A.contentHash}:{},...E?{candidateContentHash:E.contentHash}:{}}}).sort((u,m)=>u.path.localeCompare(m.path)),R=[...a,...y.violations].map(u=>({...u,nextAction:ce(u)})),p=R.filter(u=>u.failsStrict!==!1),f=e.changeMap?_e({changeMap:e.changeMap,changes:h,baseDependencies:t.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[]),candidateDependencies:i.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&i.valid&&p.length===0&&(f?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:i.ir.compilerOptionsHash,baseTreeHash:Br(t.ir.files),candidateTreeHash:Br(i.ir.files),baseCompleteness:t.completeness,candidateCompleteness:i.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:i.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...f?{convergence:f}:{},changes:h,violations:R,warnings:y.warnings}}l(Ns,"preflightChange");function Ts(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let r=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(r.length===0)return;r.pop()}else r.push(s);let n=r.join("/");return n&&n===t?n:void 0}l(Ts,"canonicalChangePath");function Ls(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,n,s])=>n!==s).map(([n,s,a])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:n,before:s,candidate:a,message:`Base and candidate facts must use the same ${n}.`}))}l(Ls,"identityViolations");function Ps(e,t,r,n){let s=r.get(t),a=n.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...a?{candidateContentHash:a.contentHash}:{}}}l(Ps,"preparedChange");function Ds(e){let t=pe(e.baseFacts),r=pe(e.candidateFacts),n=Be({contract:e.contract,facts:t}),s=Be({contract:e.contract,facts:r}),a=new Map(t.files.map(f=>[f.path,f])),i=new Map(r.files.map(f=>[f.path,f])),d=Ls(t,r),c=new Map,y=[];for(let f of e.changes){let u=Ts(f.path);if(!u){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(c.has(u)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:u,line:1,message:`The atomic change set contains more than one operation for ${u}.`});continue}c.set(u,f);let m=a.get(u),A=i.get(u);if("delete"in f&&f.delete)m||d.push({ruleId:"DELETE_TARGET_MISSING",file:u,line:1,message:`Cannot delete ${u} because it is not present in the supplied base facts.`}),A&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:u,line:1,message:`Candidate facts still contain deleted file ${u}.`});else{let E="content"in f?f.content:"",v=U(E);A?A.contentHash!==v&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:u,line:1,expectedContentHash:v,candidateContentHash:A.contentHash,message:`Candidate facts for ${u} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:u,line:1,message:`Candidate facts do not contain changed file ${u}.`})}y.push(Ps(f,u,a,i))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let f of new Set([...a.keys(),...i.keys()])){if(c.has(f))continue;let u=a.get(f),m=i.get(f);u&&m&&N(u)===N(m)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:f,line:1,message:`Candidate facts change ${f}, but the atomic change set does not declare it.`})}let h=e.changeMap?_e({changeMap:e.changeMap,changes:y,baseDependencies:n.ir.edges.flatMap(f=>f.to?[{from:f.from,to:f.to}]:[]),candidateDependencies:s.ir.edges.flatMap(f=>f.to?[{from:f.from,to:f.to}]:[])}):void 0,R=[...d,...s.ir.violations].map(f=>({...f,nextAction:ce(f)})),p=R.filter(f=>f.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:n.completeness==="complete"&&s.strictValid&&p.length===0&&(h?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:r.resolverIdentity,compilerIdentity:r.compilerIdentity,compilerOptionsHash:r.compilerOptionsHash,tsconfigHash:r.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:r.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:r.tsconfigHash,evidenceRequirementsHash:r.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:r.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:r.candidateTreeHash,baseCompleteness:n.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:n.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...h?{convergence:h}:{},changes:y.sort((f,u)=>f.path<u.path?-1:f.path>u.path?1:0),violations:R,warnings:s.ir.warnings}}l(Ds,"preflightResolvedChange");var Xr=new WeakSet;function Yr(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Yr(t);return Object.freeze(e)}l(Yr,"deepFreeze");function Ii(e){let t=Yr(Ke(e));return Xr.add(t),t}l(Ii,"createTrustedResolvedCandidateFacts");function Si(e){if(!Xr.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return ht(e)}l(Si,"analyzeTrustedResolvedProject");export{it as AMBIENT_CAPABILITY_ENTRIES,at as CAPABILITY_IDS,pt as DEFAULT_INTENT_PREFIXES,Ht as RESOLVED_CANDIDATE_FACTS_SCHEMA,he as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,ut as SOURCE_POLICY_MESSAGES,lt as ambientCoveredByForbiddenGlobals,_e as analyzeArchitectureConvergence,Ft as analyzeChange,_s as analyzePolicyDelta,Qe as analyzeProject,Be as analyzeResolvedProject,Si as analyzeTrustedResolvedProject,Oe as capabilityForAmbientName,Se as capabilityForModuleSpecifier,gt as classifyPublishFacts,yt as collectAnalysisConfigWarnings,is as collectCapabilityUses,It as collectForbiddenCapabilityUses,Ke as createResolvedCandidateFacts,Ii as createTrustedResolvedCandidateFacts,hr as detectArchitectureCycles,U as deterministicHash,Ae as effectiveCapabilityDeny,xe as evaluateArchitectureGraph,Fs as explainViolation,Et as extractSemanticDependencies,Ce as forbiddenGlobalForModuleSpecifier,ss as loadArchitectureChangeMap,_t as loadContract,pe as loadResolvedCandidateFacts,Xt as looksLikeArkIntent,tn as lowerForbiddenGlobal,je as loweredLayerCoverage,Ns as preflightChange,Ds as preflightResolvedChange,ft as resolveIntentLayer,He as resolvedFactsEvidenceRequirementsHash,N as stableSerialize};
+var er=Object.defineProperty;var c=(e,t)=>er(e,"name",{value:t,configurable:!0});function U(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}c(U,"deterministicHash");function T(e){if(e===null||typeof e!="object")return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(T).join(",")}]`;let t=e;return`{${Object.keys(t).sort().map(n=>`${JSON.stringify(n)}:${T(t[n])}`).join(",")}}`}c(T,"stableSerialize");var Re="1.2";var Lt=["network","filesystem","clock","randomness","environment","process","persistence"];function K(e,t){let n=T(e),r=T(t);return n<r?-1:n>r?1:0}c(K,"compareCanonical");function j(e){return[...new Set(e)].sort((t,n)=>t<n?-1:t>n?1:0)}c(j,"sortedUnique");function Ke(e){let t={schemaVersion:"1.2",include:j(e.include??[]),exclude:j(e.exclude??[]),excludeGenerated:e.excludeGenerated!==!1,dynamicImportAllowlist:j(e.dynamicImportAllowlist??[]),layers:e.layers.map(n=>({name:n.name,patterns:j(n.patterns??[]),exclude:j(n.exclude??[]),forbiddenGlobals:j(n.forbiddenGlobals??[]),intentPrefixes:j(n.intentPrefixes??[]),capabilityDeny:j(n.capabilities?.deny??[]),pure:n.pure===!0})).sort(K),safety:{maxTsSuppressions:e.safety?.maxTsSuppressions??0,maxAnyCasts:e.safety?.maxAnyCasts??0,allowInMemory:e.safety?.allowInMemory===!0,allowDisabledPeerIsolation:e.safety?.allowDisabledPeerIsolation===!0},...e.arkRun?{arkRun:{mode:e.arkRun.mode,compositionRoots:j(e.arkRun.compositionRoots),managedLayers:j(e.arkRun.managedLayers),requireDeclarations:e.arkRun.requireDeclarations===!0}}:{}};return U(T(t))}c(Ke,"resolvedFactsEvidenceRequirementsHash");function tr(e){let t=e.completenessReasons.map(k=>({code:k.code,message:k.message,...k.file?{file:k.file}:{}})).sort(K),n=e.files.map(k=>({...k,typeOnlyExportNames:j(k.typeOnlyExportNames)})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),r=e.dependencies.map(k=>({...k,...k.namedBindings?{namedBindings:j(k.namedBindings)}:{}})).sort(K),s=e.capabilityUses.map(k=>({...k})).sort(K),a=e.ambientUses.map(k=>({...k})).sort(K),i=e.publishCalls.map(k=>({...k})).sort(K),d=e.intentReferences.map(k=>({...k})).sort(K),l=e.safetyUses.map(k=>({...k})).sort(K),m=(e.classShapes??[]).map(k=>({...k,mutatingMethods:[...k.mutatingMethods??[]].map($=>({...$}))})).sort(K),h=(e.arkRunKernelCalls??[]).map(k=>({...k})).sort(K),R=(e.arkRunManagedNews??[]).map(k=>({...k})).sort(K),f=(e.arkRunCompositionRootHits??[]).map(k=>({...k})).sort(K),p=(e.arkRunDeclarations??[]).map(k=>({...k,uses:j(k.uses),reactsTo:j(k.reactsTo),raises:j(k.raises),sends:j(k.sends)})).sort(K),u=(e.arkOrderPlaneCalls??[]).map(k=>({...k})).sort(K),y=(e.arkOrderGenericUpdates??[]).map(k=>({...k})).sort(K),A=(e.arkOrderRootHits??[]).map(k=>({...k})).sort(K),E=(e.arkOrderXiFieldWrites??[]).map(k=>({...k})).sort(K),v=(e.arkOrderIngestWritesXi??[]).map(k=>({...k})).sort(K),w=(e.arkOrderReleaseKeyCounts??[]).map(k=>({...k})).sort(K),H=e.files.map(({path:k,contentHash:$})=>({path:k,contentHash:$})).sort((k,$)=>k.path<$.path?-1:k.path>$.path?1:0),W=U(T(H));return{schemaVersion:"1.2",completeness:e.completeness,completenessReasons:t,resolverIdentity:e.resolverIdentity,compilerIdentity:e.compilerIdentity,compilerOptionsHash:e.compilerOptionsHash,tsconfigHash:e.tsconfigHash,candidateTreeHash:W,evidenceRequirementsHash:e.evidenceRequirementsHash,...e.projectPackageName?{projectPackageName:e.projectPackageName}:{},files:n,dependencies:r,capabilityUses:s,ambientUses:a,publishCalls:i,intentReferences:d,safetyUses:l,classShapes:m,arkRunKernelCalls:h,arkRunManagedNews:R,arkRunCompositionRootHits:f,arkRunDeclarations:p,arkOrderPlaneCalls:u,arkOrderGenericUpdates:y,arkOrderRootHits:A,arkOrderXiFieldWrites:E,arkOrderIngestWritesXi:v,arkOrderReleaseKeyCounts:w}}c(tr,"canonicalResolvedFactsInput");function Pt(e){let t=tr(e);return{...t,factsHash:U(T(t))}}c(Pt,"createCanonicalResolvedCandidateFacts");function Ue(e){return Pt(Mt(_(e,"$"),!1))}c(Ue,"createResolvedCandidateFacts");function _(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`${t} must be an object.`);return e}c(_,"asRecord");function N(e,t,n){let r=new Set(t),s=Object.keys(e).find(a=>!r.has(a));if(s)throw new Error(`${n}.${s} is not part of schema ${"1.2"}.`)}c(N,"assertOnlyKeys");function x(e,t,n){let r=e[t];if(typeof r!="string"||r.length===0)throw new Error(`${n}.${t} must be a non-empty string.`);return r}c(x,"requiredText");function re(e,t,n){if(e[t]!==void 0)return x(e,t,n)}c(re,"optionalText");function L(e,t,n){let r=x(e,t,n),s=r.replace(/\\/g,"/");if(!s||s.startsWith("/")||/^[A-Za-z]:\//.test(s)||/[\u0000-\u001f\u007f]/.test(s))throw new Error(`${n}.${t} must be a canonical project-relative path.`);let a=[];for(let d of s.split("/"))if(!(!d||d==="."))if(d===".."){if(a.length===0)throw new Error(`${n}.${t} must be a canonical project-relative path.`);a.pop()}else a.push(d);let i=a.join("/");if(!i||i!==r)throw new Error(`${n}.${t} must be a canonical project-relative path.`);return i}c(L,"requiredProjectPath");function P(e,t,n){if(typeof e[t]!="boolean")throw new Error(`${n}.${t} must be a boolean.`);return e[t]}c(P,"requiredBoolean");function Dt(e,t,n){let r=e[t];if(!Number.isInteger(r)||Number(r)<0)throw new Error(`${n}.${t} must be a non-negative integer.`);return Number(r)}c(Dt,"requiredInteger");function G(e,t,n){let r=Dt(e,t,n);if(r===0)throw new Error(`${n}.${t} must be a positive integer.`);return r}c(G,"requiredPositiveInteger");function D(e,t,n){let r=e[t];if(!Array.isArray(r))throw new Error(`${n}.${t} must be an array.`);return r}c(D,"requiredArray");function se(e,t,n,r){let s=e[t];if(typeof s!="string"||!n.includes(s))throw new Error(`${r}.${t} must be one of ${n.join(", ")}.`);return s}c(se,"enumValue");function Ae(e,t){if(!Array.isArray(e)||e.some(n=>typeof n!="string"||!n))throw new Error(`${t} must be an array of non-empty strings.`);return[...e]}c(Ae,"parseStringArray");function nr(e,t,n){let r=new Set;for(let s of e){let a=t(s);if(r.has(a))throw new Error(`${n} must not contain duplicate facts (${a}).`);r.add(a)}}c(nr,"assertUnique");function Mt(e,t){N(e,["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","evidenceRequirementsHash","projectPackageName","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","classShapes","arkRunKernelCalls","arkRunManagedNews","arkRunCompositionRootHits","arkRunDeclarations","arkOrderPlaneCalls","arkOrderGenericUpdates","arkOrderRootHits","arkOrderXiFieldWrites","arkOrderIngestWritesXi","arkOrderReleaseKeyCounts",...t?["candidateTreeHash","factsHash"]:[]],"$");let n=se(e,"schemaVersion",["1.0","1.1","1.2"],"$"),r=se(e,"completeness",["complete","partial","unavailable"],"$"),s=D(e,"completenessReasons","$").map((b,I)=>{let g=`$.completenessReasons[${I}]`,o=_(b,g);N(o,["code","message","file"],g);let O=o.file===void 0?void 0:L(o,"file",g);return{code:x(o,"code",g),message:x(o,"message",g),...O?{file:O}:{}}});if(r==="complete"&&s.length>0)throw new Error("$.completenessReasons must be empty when completeness is complete.");if(r!=="complete"&&s.length===0)throw new Error("$.completenessReasons must explain partial or unavailable facts.");let a=D(e,"files","$").map((b,I)=>{let g=`$.files[${I}]`,o=_(b,g);return N(o,["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],g),{path:L(o,"path",g),contentHash:x(o,"contentHash",g),parseStatus:se(o,"parseStatus",["parsed","invalid"],g),parseDiagnosticCount:Dt(o,"parseDiagnosticCount",g),exportsOnlyTypes:P(o,"exportsOnlyTypes",g),typeOnlyExportNames:Ae(o.typeOnlyExportNames,`${g}.typeOnlyExportNames`),hasTopLevelSideEffects:P(o,"hasTopLevelSideEffects",g)}}),i=D(e,"dependencies","$").map((b,I)=>{let g=`$.dependencies[${I}]`,o=_(b,g);N(o,["from","specifier","kind","typeOnly","line","resolution","target","namedBindings","targetTypeOnlyExports","sourcePureTypeModule","namedBindingsTypeOnly","portProofEligible"],g);let O=re(o,"specifier",g),F=re(o,"target",g),Y=se(o,"resolution",["resolved-project","resolved-external","unresolved","dynamic"],g);if(Y==="resolved-project"&&!F)throw new Error(`${g}.target is required for resolved-project dependencies.`);if(Y!=="resolved-project"&&F)throw new Error(`${g}.target is only allowed for resolved-project dependencies.`);if(Y!=="dynamic"&&!O)throw new Error(`${g}.specifier is required unless resolution is dynamic.`);return{from:L(o,"from",g),...O?{specifier:O}:{},kind:se(o,"kind",["import","export","dynamic-import","require"],g),typeOnly:P(o,"typeOnly",g),line:G(o,"line",g),resolution:Y,...F?{target:L(o,"target",g)}:{},...o.namedBindings!==void 0?{namedBindings:Ae(o.namedBindings,`${g}.namedBindings`)}:{},...o.targetTypeOnlyExports!==void 0?{targetTypeOnlyExports:P(o,"targetTypeOnlyExports",g)}:{},...o.sourcePureTypeModule!==void 0?{sourcePureTypeModule:P(o,"sourcePureTypeModule",g)}:{},...o.namedBindingsTypeOnly!==void 0?{namedBindingsTypeOnly:P(o,"namedBindingsTypeOnly",g)}:{},...o.portProofEligible!==void 0?{portProofEligible:P(o,"portProofEligible",g)}:{}}}),d=D(e,"capabilityUses","$").map((b,I)=>{let g=`$.capabilityUses[${I}]`,o=_(b,g);return N(o,["file","line","symbol","capability","source"],g),{file:L(o,"file",g),line:G(o,"line",g),symbol:x(o,"symbol",g),capability:se(o,"capability",Lt,g),source:se(o,"source",["ambient-global","import-based"],g)}}),l=D(e,"ambientUses","$").map((b,I)=>{let g=`$.ambientUses[${I}]`,o=_(b,g);return N(o,["file","line","symbol"],g),{file:L(o,"file",g),line:G(o,"line",g),symbol:x(o,"symbol",g)}}),m=D(e,"publishCalls","$").map((b,I)=>{let g=`$.publishCalls[${I}]`,o=_(b,g);N(o,["file","line","rawIntentName","objectHasIntent","arkPublishCandidate","hasSource","sourceIntent"],g);let O=re(o,"rawIntentName",g),F=re(o,"sourceIntent",g);return{file:L(o,"file",g),line:G(o,"line",g),...O?{rawIntentName:O}:{},objectHasIntent:P(o,"objectHasIntent",g),arkPublishCandidate:P(o,"arkPublishCandidate",g),hasSource:P(o,"hasSource",g),...F?{sourceIntent:F}:{}}}),h=D(e,"intentReferences","$").map((b,I)=>{let g=`$.intentReferences[${I}]`,o=_(b,g);return N(o,["file","line","intent"],g),{file:L(o,"file",g),line:G(o,"line",g),intent:x(o,"intent",g)}}),R=D(e,"safetyUses","$").map((b,I)=>{let g=`$.safetyUses[${I}]`,o=_(b,g);N(o,["file","line","kind","symbol"],g);let O=re(o,"symbol",g),F=se(o,"kind",["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"],g);if(F==="in-memory-store"&&!O)throw new Error(`${g}.symbol is required for in-memory-store facts.`);if(F!=="in-memory-store"&&O)throw new Error(`${g}.symbol is only allowed for in-memory-store facts.`);return{file:L(o,"file",g),line:G(o,"line",g),kind:F,...O?{symbol:O}:{}}});nr(a,b=>b.path,"$.files");let f=new Set(a.map(b=>b.path));for(let b of a){if(b.parseStatus==="parsed"&&b.parseDiagnosticCount!==0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be 0 when parseStatus is parsed.`);if(b.parseStatus==="invalid"&&b.parseDiagnosticCount===0)throw new Error(`$.files[${b.path}].parseDiagnosticCount must be positive when parseStatus is invalid.`)}if(r==="complete"&&a.some(b=>b.parseStatus==="invalid"))throw new Error("$.completeness cannot be complete when a candidate file failed to parse.");for(let b of i)if(!f.has(b.from))throw new Error(`$.dependencies references missing source file ${b.from}.`);let u=(e.arkRunKernelCalls===void 0?[]:D(e,"arkRunKernelCalls","$")).map((b,I)=>{let g=`$.arkRunKernelCalls[${I}]`,o=_(b,g);N(o,["file","line","kind","callee","viaImport","receiver","nameLiteral"],g);let O=re(o,"receiver",g),F=re(o,"nameLiteral",g);return{file:L(o,"file",g),line:G(o,"line",g),kind:se(o,"kind",["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"],g),callee:x(o,"callee",g),viaImport:P(o,"viaImport",g),...O?{receiver:O}:{},...F?{nameLiteral:F}:{}}}),A=(e.arkRunManagedNews===void 0?[]:D(e,"arkRunManagedNews","$")).map((b,I)=>{let g=`$.arkRunManagedNews[${I}]`,o=_(b,g);N(o,["file","line","typeName","importedFrom"],g);let O=re(o,"importedFrom",g);return{file:L(o,"file",g),line:G(o,"line",g),typeName:x(o,"typeName",g),...O?{importedFrom:O}:{}}}),v=(e.arkRunCompositionRootHits===void 0?[]:D(e,"arkRunCompositionRootHits","$")).map((b,I)=>{let g=`$.arkRunCompositionRootHits[${I}]`,o=_(b,g);return N(o,["file","matchedRoot","hasKernelFactory"],g),{file:L(o,"file",g),matchedRoot:x(o,"matchedRoot",g),hasKernelFactory:P(o,"hasKernelFactory",g)}}),w=e.arkRunDeclarations===void 0?[]:D(e,"arkRunDeclarations","$"),W=(e.arkOrderPlaneCalls===void 0?[]:D(e,"arkOrderPlaneCalls","$")).map((b,I)=>{let g=`$.arkOrderPlaneCalls[${I}]`,o=_(b,g);return N(o,["file","line","callee"],g),{file:L(o,"file",g),line:G(o,"line",g),callee:x(o,"callee",g)}}),$=(e.arkOrderGenericUpdates===void 0?[]:D(e,"arkOrderGenericUpdates","$")).map((b,I)=>{let g=`$.arkOrderGenericUpdates[${I}]`,o=_(b,g);return N(o,["file","line","method"],g),{file:L(o,"file",g),line:G(o,"line",g),method:x(o,"method",g)}}),de=(e.arkOrderRootHits===void 0?[]:D(e,"arkOrderRootHits","$")).map((b,I)=>{let g=`$.arkOrderRootHits[${I}]`,o=_(b,g);return N(o,["file","matchedRoot","hasPlaneFactory"],g),{file:L(o,"file",g),matchedRoot:x(o,"matchedRoot",g),hasPlaneFactory:P(o,"hasPlaneFactory",g)}}),he=(e.arkOrderXiFieldWrites===void 0?[]:D(e,"arkOrderXiFieldWrites","$")).map((b,I)=>{let g=`$.arkOrderXiFieldWrites[${I}]`,o=_(b,g);return N(o,["file","line","key"],g),{file:L(o,"file",g),line:G(o,"line",g),key:x(o,"key",g)}}),De=(e.arkOrderIngestWritesXi===void 0?[]:D(e,"arkOrderIngestWritesXi","$")).map((b,I)=>{let g=`$.arkOrderIngestWritesXi[${I}]`,o=_(b,g);return N(o,["file","line"],g),{file:L(o,"file",g),line:G(o,"line",g)}}),nt=(e.arkOrderReleaseKeyCounts===void 0?[]:D(e,"arkOrderReleaseKeyCounts","$")).map((b,I)=>{let g=`$.arkOrderReleaseKeyCounts[${I}]`,o=_(b,g);return N(o,["file","line","keyCount"],g),{file:L(o,"file",g),line:G(o,"line",g),keyCount:G(o,"keyCount",g)}}),Ie=w.map((b,I)=>{let g=`$.arkRunDeclarations[${I}]`,o=_(b,g);return N(o,["file","line","uses","reactsTo","raises","sends"],g),{file:L(o,"file",g),line:G(o,"line",g),uses:Ae(o.uses,`${g}.uses`),reactsTo:Ae(o.reactsTo,`${g}.reactsTo`),raises:Ae(o.raises,`${g}.raises`),sends:Ae(o.sends,`${g}.sends`)}});for(let[b,I]of[["$.capabilityUses",d],["$.ambientUses",l],["$.publishCalls",m],["$.intentReferences",h],["$.safetyUses",R],["$.arkRunKernelCalls",u],["$.arkRunManagedNews",A],["$.arkRunCompositionRootHits",v],["$.arkRunDeclarations",Ie],["$.arkOrderPlaneCalls",W],["$.arkOrderGenericUpdates",$],["$.arkOrderRootHits",de],["$.arkOrderXiFieldWrites",he],["$.arkOrderIngestWritesXi",De],["$.arkOrderReleaseKeyCounts",nt]])for(let g of I)if(!f.has(g.file))throw new Error(`${b} references missing file ${g.file}.`);let ue=re(e,"projectPackageName","$"),rt=(e.classShapes===void 0?[]:D(e,"classShapes","$")).map((b,I)=>{let g=`$.classShapes[${I}]`,o=_(b,g);N(o,["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods","dataOnly"],g);let O=D(o,"mutatingMethods",g).map((F,Y)=>{let He=`${g}.mutatingMethods[${Y}]`,st=_(F,He);return N(st,["name","referencesGuardOrPublish"],He),{name:x(st,"name",He),referencesGuardOrPublish:P(st,"referencesGuardOrPublish",He)}});return{file:L(o,"file",g),className:x(o,"className",g),exported:P(o,"exported",g),hasPublicMutableFields:P(o,"hasPublicMutableFields",g),hasPublicSetters:P(o,"hasPublicSetters",g),hasPublicConstructor:P(o,"hasPublicConstructor",g),hasStaticFactory:P(o,"hasStaticFactory",g),mutatingMethods:O,...o.dataOnly===void 0?{}:{dataOnly:P(o,"dataOnly",g)}}});return{schemaVersion:n,completeness:r,completenessReasons:s,resolverIdentity:x(e,"resolverIdentity","$"),compilerIdentity:x(e,"compilerIdentity","$"),compilerOptionsHash:x(e,"compilerOptionsHash","$"),tsconfigHash:x(e,"tsconfigHash","$"),evidenceRequirementsHash:x(e,"evidenceRequirementsHash","$"),...ue?{projectPackageName:ue}:{},files:a,dependencies:i,capabilityUses:d,ambientUses:l,publishCalls:m,intentReferences:h,safetyUses:R,classShapes:rt,arkRunKernelCalls:u,arkRunManagedNews:A,arkRunCompositionRootHits:v,arkRunDeclarations:Ie,arkOrderPlaneCalls:W,arkOrderGenericUpdates:$,arkOrderRootHits:de,arkOrderXiFieldWrites:he,arkOrderIngestWritesXi:De,arkOrderReleaseKeyCounts:nt}}c(Mt,"parseResolvedFactsInput");function fe(e){let t=_(e,"$"),n=x(t,"factsHash","$"),r=x(t,"candidateTreeHash","$"),s=Pt(Mt(t,!0));if(s.factsHash!==n)throw new Error(`$.factsHash does not match the canonical payload (${s.factsHash}).`);if(r!==s.candidateTreeHash)throw new Error(`$.candidateTreeHash does not match the canonical file tree (${s.candidateTreeHash}).`);return s}c(fe,"loadResolvedCandidateFacts");var rr=["network","filesystem","clock","randomness","environment","process","persistence"],S={type:"string",minLength:1},z={type:"integer",minimum:1},M={type:"string",minLength:1,pattern:"^(?!/)(?![A-Za-z]:/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$).+$"},Ht={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://unpkg.com/arkgate@3/schemas/ark.resolved-candidate-facts.schema.json",title:"ArkGate resolved candidate facts",type:"object",additionalProperties:!1,required:["schemaVersion","completeness","completenessReasons","resolverIdentity","compilerIdentity","compilerOptionsHash","tsconfigHash","candidateTreeHash","evidenceRequirementsHash","files","dependencies","capabilityUses","ambientUses","publishCalls","intentReferences","safetyUses","factsHash"],properties:{schemaVersion:{enum:["1.0","1.1","1.2"]},completeness:{enum:["complete","partial","unavailable"]},completenessReasons:{type:"array",items:{type:"object",additionalProperties:!1,required:["code","message"],properties:{code:S,message:S,file:M}}},resolverIdentity:S,compilerIdentity:S,compilerOptionsHash:S,tsconfigHash:S,candidateTreeHash:S,evidenceRequirementsHash:S,projectPackageName:S,files:{type:"array",uniqueItems:!0,items:{type:"object",additionalProperties:!1,required:["path","contentHash","parseStatus","parseDiagnosticCount","exportsOnlyTypes","typeOnlyExportNames","hasTopLevelSideEffects"],properties:{path:M,contentHash:S,parseStatus:{enum:["parsed","invalid"]},parseDiagnosticCount:{type:"integer",minimum:0},exportsOnlyTypes:{type:"boolean"},typeOnlyExportNames:{type:"array",items:S},hasTopLevelSideEffects:{type:"boolean"}},allOf:[{if:{properties:{parseStatus:{const:"parsed"}}},then:{properties:{parseDiagnosticCount:{const:0}}}},{if:{properties:{parseStatus:{const:"invalid"}}},then:{properties:{parseDiagnosticCount:{minimum:1}}}}]}},dependencies:{type:"array",items:{type:"object",additionalProperties:!1,required:["from","kind","typeOnly","line","resolution"],properties:{from:M,specifier:S,kind:{enum:["import","export","dynamic-import","require"]},typeOnly:{type:"boolean"},line:z,resolution:{enum:["resolved-project","resolved-external","unresolved","dynamic"]},target:M,namedBindings:{type:"array",items:S},targetTypeOnlyExports:{type:"boolean"},sourcePureTypeModule:{type:"boolean"},namedBindingsTypeOnly:{type:"boolean"},portProofEligible:{type:"boolean"}},allOf:[{if:{properties:{resolution:{const:"resolved-project"}}},then:{required:["target"]},else:{not:{required:["target"]}}},{if:{properties:{resolution:{const:"dynamic"}}},else:{required:["specifier"]}}]}},capabilityUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol","capability","source"],properties:{file:M,line:z,symbol:S,capability:{enum:rr},source:{enum:["ambient-global","import-based"]}}}},ambientUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","symbol"],properties:{file:M,line:z,symbol:S}}},publishCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","objectHasIntent","arkPublishCandidate","hasSource"],properties:{file:M,line:z,rawIntentName:S,objectHasIntent:{type:"boolean"},arkPublishCandidate:{type:"boolean"},hasSource:{type:"boolean"},sourceIntent:S}}},intentReferences:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","intent"],properties:{file:M,line:z,intent:S}}},safetyUses:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind"],properties:{file:M,line:z,kind:{enum:["ts-suppression","any-cast","dynamic-import","dynamic-require","in-memory-store"]},symbol:S},allOf:[{if:{properties:{kind:{const:"in-memory-store"}}},then:{required:["symbol"]},else:{not:{required:["symbol"]}}}]}},classShapes:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","className","exported","hasPublicMutableFields","hasPublicSetters","hasPublicConstructor","hasStaticFactory","mutatingMethods"],properties:{file:M,className:S,exported:{type:"boolean"},hasPublicMutableFields:{type:"boolean"},hasPublicSetters:{type:"boolean"},hasPublicConstructor:{type:"boolean"},hasStaticFactory:{type:"boolean"},dataOnly:{type:"boolean"},mutatingMethods:{type:"array",items:{type:"object",additionalProperties:!1,required:["name","referencesGuardOrPublish"],properties:{name:S,referencesGuardOrPublish:{type:"boolean"}}}}}}},arkRunKernelCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","kind","callee","viaImport"],properties:{file:M,line:z,kind:{enum:["factory","publisher","publish","raise","send","subscribe","register-handler","resolve","resolve-singleton"]},callee:S,viaImport:{type:"boolean"},receiver:S,nameLiteral:S}}},arkRunManagedNews:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","typeName"],properties:{file:M,line:z,typeName:S,importedFrom:S}}},arkRunCompositionRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasKernelFactory"],properties:{file:M,matchedRoot:S,hasKernelFactory:{type:"boolean"}}}},arkRunDeclarations:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","uses","reactsTo","raises","sends"],properties:{file:M,line:z,uses:{type:"array",items:S},reactsTo:{type:"array",items:S},raises:{type:"array",items:S},sends:{type:"array",items:S}}}},arkOrderPlaneCalls:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","callee"],properties:{file:M,line:z,callee:S}}},arkOrderGenericUpdates:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","method"],properties:{file:M,line:z,method:S}}},arkOrderRootHits:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","matchedRoot","hasPlaneFactory"],properties:{file:M,matchedRoot:S,hasPlaneFactory:{type:"boolean"}}}},arkOrderXiFieldWrites:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","key"],properties:{file:M,line:z,key:S}}},arkOrderIngestWritesXi:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line"],properties:{file:M,line:z}}},arkOrderReleaseKeyCounts:{type:"array",items:{type:"object",additionalProperties:!1,required:["file","line","keyCount"],properties:{file:M,line:z,keyCount:{type:"integer",minimum:1}}}},factsHash:S},allOf:[{if:{properties:{completeness:{const:"complete"}}},then:{properties:{completenessReasons:{maxItems:0},files:{items:{properties:{parseStatus:{const:"parsed"}}}}}}},{if:{properties:{completeness:{enum:["partial","unavailable"]}}},then:{properties:{completenessReasons:{minItems:1}}}}]};var Kt="1.0";var ot=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),je=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),lt=Object.freeze(Object.keys(je).sort()),at=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),it=Object.freeze({process:Object.freeze(["process","node:process"])});function Se(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=at[e];if(t)return t;let n=e.indexOf("/");if(n<0)return null;let r=e.slice(0,n),s=at[r];if(s)return s;let a=e.indexOf("/",n+1);return a<0?null:at[e.slice(0,a)]??null}c(Se,"capabilityForModuleSpecifier");function Ce(e,t){for(let n of t)if(it[n]?.includes(e))return n;return null}c(Ce,"forbiddenGlobalForModuleSpecifier");function Oe(e){let t=e.split(".");for(let n=t.length;n>=1;n-=1){let r=t.slice(0,n).join("."),s=je[r];if(s)return s}return null}c(Oe,"capabilityForAmbientName");function ke(e){if(e?.pure===!0)return[...ot].sort();let n=(e?.capabilities?.deny??[]).filter(r=>ot.includes(r));return[...new Set(n)].sort()}c(ke,"effectiveCapabilityDeny");function ct(e,t){if(t.length===0)return!1;let n=new Set(t),r=e.split(".");for(let s=r.length;s>=1;s-=1)if(n.has(r.slice(0,s).join(".")))return!0;return!1}c(ct,"ambientCoveredByForbiddenGlobals");function Ve(e){let t=new Set,n=new Set,r=Object.keys(je);for(let s of e?.forbiddenGlobals??[]){let a=r.filter(i=>i===s||i.startsWith(`${s}.`));if(a.length===0)n.add(s);else for(let i of a)t.add(`ambient:${i}`);for(let i of it[s]??[])t.add(`import-exact:${i}`)}for(let s of ke(e)){if(t.add(`import:${s}`),s==="process")for(let a of it.process)t.add(`import-exact:${a}`);for(let a of r)Oe(a)===s&&t.add(`ambient:${a}`)}return{atoms:[...t].sort(),rawGlobals:[...n].sort()}}c(Ve,"loweredLayerCoverage");function sr(e){let t=new Set,n=Oe(e);n&&t.add(n);for(let[r,s]of Object.entries(je))(r===e||r.startsWith(`${e}.`))&&t.add(s);return[...t].sort()}c(sr,"lowerForbiddenGlobal");var Ut=new Map;function jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(jt,"escapeLiteral");function Ge(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}c(Ge,"normalizeGlobSeparators");function ar(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}c(ar,"bracesBalanced");function ae(e){let t=Ut.get(e);if(t)return t;let n=Ge(e),r=ar(n),s="",a=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=jt(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",a+=1):l==="}"&&r&&a>0?(s+=")",a-=1):l===","&&r&&a>0?s+="|":s+=jt(l)}let i=new RegExp(`^${s}$`);return Ut.set(e,i),i}c(ae,"globToRegExp");function or(e){return Ge(String(e)).split("/").filter(Boolean).filter(n=>n!=="**"&&n!=="*"&&!n.includes("*")&&!n.includes("?")&&!n.includes("{")&&!n.includes("["))}c(or,"concreteGlobSegments");function dt(e,t){let n=Ge(String(e)),r=or(n),s=n.replace(/\*/g,"").length,a=r.length*1e4+s;if(t==null||t==="")return a;let i=String(t).split(/[/\\]/).filter(Boolean);if(r.length===0)return s;let d=0,l=-1;for(let m of r){let h=-1;for(let R=d;R<i.length;R+=1)if(i[R]===m){h=R;break}if(h<0)return a;l=h,d=h+1}return(l+1)*1e6+r.length*1e4+s}c(dt,"patternSpecificity");function Z(e,t){let n=String(e).split(/[/\\]/).join("/"),r,s=-1;for(let a of t??[])if(!(a.exclude??[]).some(i=>ae(i).test(n))){for(let i of a.patterns??[])if(ae(i).test(n)){let d=dt(i,n);d>s&&(s=d,r=a.name)}}return r}c(Z,"layerForRelativePath");function Vt(e,t){if(!t?.length)return;let n=String(e).split(/[/\\]/).filter(Boolean),r=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<n.length-1;s+=1)if(r.has(n[s].toLowerCase()))return`${n[s].toLowerCase()}/${n[s+1].toLowerCase()}`}c(Vt,"sliceIdForPath");function ir(e){let t=new Set;for(let n of e??[]){let s=Ge(String(n)).split("/").filter(Boolean);for(let a=0;a<s.length;a+=1){let i=s[a];if((i==="**"||i==="*")&&a>0){let d=s[a-1];d&&!d.includes("*")&&!d.includes("{")&&!d.includes("}")&&t.add(d)}}}return[...t]}c(ir,"inferSliceFoldersFromPatterns");function lr(e,t,n){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let r=(n??[]).find(s=>s.name===t);return ir(r?.patterns)}c(lr,"resolveSliceFolders");function Gt(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}c(Gt,"normalizeSegments");function Wt(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}c(Wt,"trimTrailingSlashes");var cr=["src","app"];function dr(e){let t=Wt(e.replace(/^[./]+/,""));return t==="*"||t==="**"}c(dr,"isBlanketRoot");function zt(e,t){if(!e||!t?.length)return!1;let n=String(e).split(/[/\\]/).join("/"),r=n.toLowerCase(),s=Gt(n);for(let a of t){if(typeof a!="string"||a.length===0||dr(a))continue;if(a.includes("*")){let l=Wt(a.toLowerCase());if(ae(l).test(r)||ae(`${l}/**`).test(r))return!0;continue}let i=Gt(a);if(i.length===0)continue;let d=cr.includes(s[0])&&i[0]!==s[0]?[0,1]:[0];for(let l of d){if(l+i.length>s.length)continue;let m=!0;for(let h=0;h<i.length;h+=1)if(s[l+h]!==i[h]){m=!1;break}if(m)return!0}}return!1}c(zt,"pathUnderSharedRoot");function qt(e,t){let n=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!n)return!1;let r=t.toLowerCase();return n===r?!0:!n.includes("/")&&r.endsWith(`/${n}`)}c(qt,"sliceMatchesDeclaration");function ur(e,t,n){return!e?.length||!t||!n?!1:e.some(r=>r&&typeof r.from=="string"&&typeof r.to=="string"&&qt(r.from,t)&&qt(r.to,n))}c(ur,"crossSliceEdgeAllowed");function fr(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let n=!!e.toSlice||e.toShared===!0;return!t||!n?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}c(fr,"peerIsolationDecision");function ze(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let n=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${n.length>0?` (${n.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}c(ze,"peerIsolationDenyExplanation");function Bt(e,t,n,r){return we(e,t,n,r)?.rule}c(Bt,"findDeniedEdgeRule");function we(e,t,n,r){for(let s of e??[])if(!(s.from!==t||s.to!==n)&&s.allowed===!1){if(s.peerIsolation){let a=r?.fromPath,i=r?.toPath,d=lr(s,t,r?.layers),l=a?Vt(a,d):void 0,m=i?Vt(i,d):void 0,h=fr({fromPath:a,toPath:i,folderCount:d.length,fromSlice:l,toSlice:m,fromShared:!l&&zt(a,s.sharedRoots),toShared:!m&&zt(i,s.sharedRoots),crossSliceAllowed:ur(s.allowedCrossSlice,l,m)});if(h.denied)return{rule:s,peerIsolationReason:h.reason,fromSlice:l,toSlice:m};continue}if(t!==n)return{rule:s}}}c(we,"findDeniedEdgeDecision");var ut={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},ft=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function pt(e,t){return t.flatMap((r,s)=>(r.prefixes??r.intentPrefixes??[]).map(a=>({layer:r.name,layerIndex:s,prefix:a.endsWith(".")?a:`${a}.`}))).filter(({prefix:r})=>e.startsWith(r)).sort((r,s)=>s.prefix.length-r.prefix.length||r.layerIndex-s.layerIndex)[0]?.layer}c(pt,"resolveIntentLayer");function Xt(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}c(Xt,"looksLikeArkIntent");function gt(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Xt(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:ut.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:ut.PUBLISH_MISSING_SOURCE}),t}c(gt,"classifyPublishFacts");var Yt="https://unpkg.com/arkgate/schemas/ark.arkrules.schema.json",pr=["aggregate-private-state","always-valid-factory","domain-event-on-mutation","orchestration-only","thin-adapter","writes-via-aggregate","no-anemic-model","invariant-coverage"];var Zt={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},da={$schema:"https://json-schema.org/draft/2020-12/schema",$id:Yt,title:"ArkGate ArkRules (intra-layer contract)",description:"Per-layer structure sensors and invariant catalog consumed by the ArkGate Effective Contract.",type:"object",additionalProperties:!1,required:["schemaVersion","layer"],properties:{$schema:{type:"string",minLength:1,default:Yt},schemaVersion:{type:"string",const:"1.0",default:"1.0"},layer:{type:"string",minLength:1},structure:{type:"array",default:[],items:{$ref:"#/$defs/structureEntry"}},invariants:{type:"array",default:[],items:{$ref:"#/$defs/invariantEntry"}}},$defs:{structureEntry:{type:"object",additionalProperties:!1,required:["id","sensor"],properties:{id:{type:"string",minLength:1},sensor:{type:"string",enum:[...pr]},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Zt,description:{type:"string",minLength:1}}},invariantEntry:{type:"object",additionalProperties:!1,required:["id","description"],properties:{id:{type:"string",minLength:1},description:{type:"string",minLength:1},aggregate:{type:"string",minLength:1},coverage:{type:"object",additionalProperties:!1,properties:{test:{type:"boolean"},symbol:{type:"string",minLength:1}}},mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},appliesTo:Zt}}}};function xe(){return{schemaVersion:"1.0",byLayer:{},structure:[],invariants:[]}}c(xe,"emptyEffectiveArkRules");var gr=["no-anemic-model"];function Jt(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(Jt,"escapeGlobLiteral");function mr(e){let t="";for(let r=0;r<e.length;r+=1){let s=e[r];if(s==="\\"&&r+1<e.length){let a=e[r+1];if("*?{}[],".includes(a)||a==="\\"){t+="\\"+a,r+=1;continue}t+="/";continue}t+=s}let n="";for(let r=0;r<t.length;r+=1){let s=t[r];s==="\\"&&r+1<t.length?(n+=Jt(t[r+1]),r+=1):s==="*"?t[r+1]==="*"?t[r+2]==="/"?(n+="(?:.*/)?",r+=2):(n+=".*",r+=1):n+="[^/]*":s==="?"?n+="[^/]":n+=Jt(s)}return new RegExp(`^${n}$`)}c(mr,"globToRegExp");function be(e,t){return!t||t.length===0?!0:t.some(n=>mr(n).test(e))}c(be,"matchesAppliesTo");function yr(e){return gr.includes(e)}c(yr,"isTier2");function Qt(e){return e.mode==="enforced"&&!yr(e.sensor)?{severity:"error",failsStrict:!0}:{severity:"warning",failsStrict:!1}}c(Qt,"severityFor");function pe(e,t,n,r=1){let{severity:s,failsStrict:a}=Qt(e);return{ruleId:"ARKRULE_STRUCTURE",code:e.sensor,message:n,file:t,line:r,fromLayer:e.provenance.layer,arkruleId:e.id,arkruleSource:e.provenance.sourceFile,severity:s,sensor:e.sensor,failsStrict:a}}c(pe,"baseViolation");function qe(e,t,n){if(!n)return!0;let r=n(e);return r?r===t.provenance.layer:!1}c(qe,"isInRuleLayer");function We(e,t,n){return t.filter(r=>!(!r.exported||!be(r.file,e.appliesTo)||!qe(r.file,e,n)))}c(We,"shapesForRule");function hr(e,t,n){let r=[];for(let s of We(e,t,n))(s.hasPublicSetters||s.hasPublicMutableFields)&&r.push(pe(e,s.file,`Exported class ${s.className} exposes public mutable state (sensor aggregate-private-state).`));return r}c(hr,"evaluateAggregatePrivateState");function Rr(e,t,n){let r=[];for(let s of We(e,t,n))if(s.hasPublicConstructor&&!s.hasStaticFactory){if(!(s.hasPublicMutableFields||s.hasPublicSetters||(s.mutatingMethods?.length??0)>0))continue;r.push(pe(e,s.file,`Exported class ${s.className} exposes a public constructor without a static factory (sensor always-valid-factory).`))}return r}c(Rr,"evaluateAlwaysValidFactory");function Ar(e,t,n){let r=[];for(let s of We(e,t,n))for(let a of s.mutatingMethods)a.referencesGuardOrPublish||r.push(pe(e,s.file,`Mutating method ${s.className}.${a.name} does not reference a guard or publish symbol (sensor domain-event-on-mutation).`));return r}c(Ar,"evaluateDomainEventOnMutation");function kr(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.orchestrationHeavy&&n.push(pe(e,r,"File appears to embed domain branching beyond guard-and-delegate orchestration (sensor orchestration-only)."));return n}c(kr,"evaluateOrchestrationOnly");function br(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.adapterThick&&n.push(pe(e,r,"Adapter module mixes domain branching, persistence, and mapping beyond a thin adapter (sensor thin-adapter)."));return n}c(br,"evaluateThinAdapter");function vr(e,t){let n=[];for(let r of t.files)be(r,e.appliesTo)&&qe(r,e,t.layerForFile)&&t.fileHints?.[r]?.persistenceWrite&&n.push(pe(e,r,"File imports a persistence driver and issues a write; route the write through a Domain aggregate and a persistence adapter (sensor writes-via-aggregate)."));return n}c(vr,"evaluateWritesViaAggregate");function Er(e,t,n){let r=[];for(let s of We(e,t,n))if(s.dataOnly===!0){let a=pe(e,s.file,`Exported type ${s.className} looks data-only / anemic (sensor no-anemic-model; advisory only).`);r.push({...a,severity:"warning",failsStrict:!1})}return r}c(Er,"evaluateNoAnemicModel");function en(e){if(!e.arkRules.structure.length)return[];let t=[];for(let n of e.arkRules.structure)switch(n.sensor){case"aggregate-private-state":t.push(...hr(n,e.classShapes,e.layerForFile));break;case"always-valid-factory":t.push(...Rr(n,e.classShapes,e.layerForFile));break;case"domain-event-on-mutation":t.push(...Ar(n,e.classShapes,e.layerForFile));break;case"orchestration-only":t.push(...kr(n,e));break;case"thin-adapter":t.push(...br(n,e));break;case"writes-via-aggregate":t.push(...vr(n,e));break;case"no-anemic-model":t.push(...Er(n,e.classShapes,e.layerForFile));break;case"invariant-coverage":break;default:break}return t.sort((n,r)=>n.file.localeCompare(r.file)||n.arkruleId.localeCompare(r.arkruleId)||n.message.localeCompare(r.message))}c(en,"evaluateArkRuleSensors");function tn(e,t){let n=[],r=t.map(s=>s.replace(/\\/g,"/"));for(let s of e.structure){if(!s.appliesTo||s.appliesTo.length===0||r.some(l=>be(l,s.appliesTo)))continue;let{severity:i,failsStrict:d}=Qt(s);n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule structure "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:i,sensor:s.sensor,failsStrict:d})}for(let s of e.invariants??[]){if(!s.appliesTo||s.appliesTo.length===0||r.some(d=>be(d,s.appliesTo)))continue;let i=s.mode==="enforced";n.push({ruleId:"ARKRULE_SCOPE_EMPTY",code:"appliesTo-zero-match",message:`ArkRule invariant "${s.id}" appliesTo matched zero governed files (patterns: ${s.appliesTo.join(", ")}). A zero-match scope is almost always misconfiguration.`,file:s.provenance.sourceFile,line:1,fromLayer:s.provenance.layer,arkruleId:s.id,arkruleSource:s.provenance.sourceFile,severity:i?"error":"warning",sensor:"invariant-coverage",failsStrict:i})}return n.sort((s,a)=>s.file.localeCompare(a.file)||s.arkruleId.localeCompare(a.arkruleId)||s.message.localeCompare(a.message))}c(tn,"collectEmptyAppliesToFindings");var Ir=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|knex|typeorm|mongoose)/,Sr=/\.(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i,Cr=/\b(?:@Controller|@Get|@Post|@Put|@Delete|Router\(\)|createRouter|express\.Router|fastify\.(?:get|post)|export\s+(?:async\s+)?function\s+(?:GET|POST|PUT|DELETE|PATCH)\b|export\s+const\s+(?:GET|POST|PUT|DELETE|PATCH)\s*=)/,Or=/(?:^|[;\n])\s*(?:import\s+(?:type\s+)?(?:[^;]{0,512}?\s+from\s+)?|export\s+(?:type\s+)?[^;]{0,512}?\s+from\s+)['"]next\/server(?:\.js)?['"]/,wr=/\b(?:export\s+)?(?:async\s+)?function\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*|\b(?:export\s+)?const\s+(?:can|calculate|compute|should|ensure|validate|is|has)[A-Z]\w*\s*=/,xr=/\bif\s*\(\s*(?:!)?(?:order|invoice|cart|user|account|policy|aggregate|entity|amount|total|balance|status|state)\b/i;function $r(e,t){if(!t||t.length<40)return null;let n=t.match(new RegExp(wr.source,"g"))??[],r=t.match(new RegExp(xr.source,"g"))??[],s=(t.match(/\bif\s*\(/g)??[]).length,a=(t.match(/\bswitch\s*\(/g)??[]).length,i=n.length>=2||n.length>=1&&r.length>=2||r.length>=3&&s+a>=6,d=Ir.test(t),l=Cr.test(t)||Or.test(t),m=n.length>=1||r.length>=2,h=/\b(?:mapTo|toDomain|toDto|fromRow|toEntity|fromPrisma|serialize|deserialize)\w*\s*[(=]/.test(t),R=d&&m||l&&m||d&&h&&(s>=4||n.length>=1)||l&&d,f=d&&Sr.test(t);return!i&&!R&&!f?null:{...i?{orchestrationHeavy:!0}:{},...R?{adapterThick:!0}:{},...f?{persistenceWrite:!0}:{}}}c($r,"deriveArkRuleFileHints");function nn(e){let t={};for(let[n,r]of Object.entries(e)){let s=$r(n,r);s&&(t[n.replace(/\\/g,"/")]=s)}return t}c(nn,"buildArkRuleFileHints");function rn(e,t=!1){if(!e)return"";let n=e.discarded,r=[];if(n.budget>0&&!t&&r.push(`${n.budget} past the ${e.maxFiles}-file budget`),n.noInvariantMention>0&&r.push(`${n.noInvariantMention} naming no catalogued invariant`),n.oversize>0&&r.push(`${n.oversize} over the per-file byte cap`),n.unreadable>0&&r.push(`${n.unreadable} unreadable (files or directories)`),n.depthLimited>0&&r.push(`${n.depthLimited} directories past the walk depth limit`),n.outOfRoot>0&&r.push(`${n.outOfRoot} symlinked outside the project root`),r.length===0)return"";let s=t?"":` (loaded ${e.filesLoaded} files, kept ${e.testFilesRetained} tests)`;return` Scan discarded ${r.join(", ")}${s}.`}c(rn,"formatCoverageDiscards");function _r(e,t){let n=e.replace(/\\/g,"/").replace(/^\.\//,"");return t.some(r=>{let s=r.replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/+$/,"");return s===""||s==="."?!0:n===s||n.startsWith(`${s}/`)})}c(_r,"isUnderCoverageRoot");function Fr(e,t){let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`(?:describe|it|test|context)\\s*\\(\\s*['"\`][^'"\`]*${n}[^'"\`]*['"\`]`,"i").test(e)||e.includes(t)}c(Fr,"titleMatchesInvariant");function Tr(e,t){if(!t)return!1;let n=t.split("."),r=n[n.length-1],s=n.length>1?n[0]:null;for(let a of Object.values(e))if(!(s&&!a.includes(s))&&(new RegExp(`(?:function\\s+|\\b)${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\s*[(<]`).test(a)||a.includes(t)))return!0;return!1}c(Tr,"symbolPresent");function sn(e){let t=e.arkRules.invariants??[];if(t.length===0)return{coverage:[],violations:[],partial:!1};let n=e.testFiles??[],r=e.testGlobsMissing===!0||n.length===0,s=e.coverageBudgetExhausted===!0,a=e.coverageStats,i=rn(a),d=rn(a,!0),l=a?`coverage file budget exhausted: ${a.filesLoaded} files loaded at the ${a.maxFiles}-file cap, ${a.testFilesRetained} tests retained, ${a.discarded.budget} files discarded at the cap; raise "coverage.maxFiles" in ark.config.json (the cap bounds files RETAINED as evidence${typeof a.filesRead=="number"?`; ${a.filesRead} were read`:""})`:"coverage file budget exhausted",m=(e.coverageRoots??[]).filter(u=>typeof u=="string"&&u.length>0),h=m.length>0,R=m.join(", "),f=[],p=[];for(let u of t){let y=[],A=u.coverage?.test!==!1,E=u.coverage?.symbol,v,w;if(!r&&A){let $;for(let ee of n){let de=e.fileContents[ee];if(!(!de||!Fr(de,u.id))){if(!h||_r(ee,m)){v=ee,w=h?!1:void 0;break}$??=ee}}v===void 0&&$!==void 0&&(v=$,w=!0),v!==void 0&&y.push("test-title")}E&&Tr(e.fileContents,E)&&y.push("symbol");let W=(u.coverage?.test===!0||!!E||u.coverage===void 0)&&y.length>0||u.coverage?.test===!1&&!E?!0:y.length>0,k=r&&A&&y.length===0;if(f.push({invariantId:u.id,layer:u.provenance.layer,sourceFile:u.provenance.sourceFile,mode:u.mode,covered:W&&!k,evidence:y,partial:k,description:u.description,...v!==void 0?{testEvidenceFile:v}:{},...w!==void 0?{outsideDeclaredRoots:w}:{}}),w===!0&&v!==void 0&&p.push({ruleId:"INVARIANT_COVERAGE_OUTSIDE_ROOTS",message:`Invariant ${u.id} is covered only by ${v}, which is outside the declared coverage roots (${R}). ArkGate matches declared text and never executes tests, so it cannot tell whether that file is run: move the test under a declared root, or add its root to "coverage.coverageRoots" in ark.config.json.`,file:v,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:"warning",failsStrict:!1}),!W||k){let $=u.mode==="enforced"&&!k,ee=r||n.length===0?"never-had-tests":"tests-disappeared";p.push({ruleId:"INVARIANT_UNCOVERED",message:(k?s?`Invariant ${u.id} coverage cannot be proven (${l}); reporting partial, not covered.`:`Invariant ${u.id} coverage cannot be proven (test globs missing or empty); reporting partial, not covered (never-had-tests).`:ee==="tests-disappeared"?`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (tests-disappeared \u2014 a suite exists). ArkGate matches declared text; it never executes tests.`:`Invariant ${u.id}: no scanned test names it in a describe/it title and no declared symbol was found (never-had-tests \u2014 the scan found no tests at all). ArkGate matches declared text; it never executes tests.`)+(k&&s?d:i),file:u.provenance.sourceFile,line:1,arkruleId:u.id,arkruleSource:u.provenance.sourceFile,fromLayer:u.provenance.layer,severity:$?"error":"warning",failsStrict:$,kind:ee})}}return{coverage:f,violations:p,partial:f.some(u=>u.partial)}}c(sn,"evaluateInvariantCoverage");function an(e){return e?e.partial?{ok:!1,reason:"Coverage is partial (missing test globs); cannot promote until evidence is complete."}:e.covered?e.outsideDeclaredRoots===!0?{ok:!1,reason:`Invariant ${e.invariantId} is covered only by ${e.testEvidenceFile??"a test"}, outside the declared coverage roots; ArkGate cannot tell whether that test runs, so it will not promote on it.`}:{ok:!0,reason:`Invariant ${e.invariantId} has coverage evidence.`}:{ok:!1,reason:`Invariant ${e.invariantId} is uncovered; add a test title or symbol before promoting to enforced.`}:{ok:!1,reason:"No coverage evidence supplied for this invariant; evaluate coverage before promoting to enforced."}}c(an,"canPromoteInvariant");function Nr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,n=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return n==null&&typeof e.classifiedFiles=="number"&&(n=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:n}}c(Nr,"normalizeExtraMergeTeethClassification");function Be(e){let t=Nr(e),n=typeof t.governedPercent=="number"?t.governedPercent:null,r=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return n==null&&r==null?!0:(n??0)>=50&&(r??0)>=1}c(Be,"extraMergeTeethAllowed");function on(e){let t=e.length,n=0,r=new Set;for(let s of e){let a=typeof s.layer=="string"&&s.layer.length>0?s.layer:null;a&&(n+=1,r.add(a))}return{governedPercent:t>0?Math.round(n/t*100):0,populatedLayerCount:r.size}}c(on,"classifyResolvedLayerCoverage");var Lr=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Aa=new Set(Lr);function ln(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}c(ln,"isArkRunKernelModuleSpecifier");var Pr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],mt=new Set(Pr);function cn(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(mt.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let n=e.slice(0,t);if(mt.has(n))return!0;let r=e.indexOf("/",t+1);return r<0?!1:mt.has(e.slice(0,r))}c(cn,"isArkRunTransportBypassSpecifier");var Dr=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Mr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Hr=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Kr(e,t){let n=String(e??"").replace(/\\/g,"/").trim(),r=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Dr.test(n)?"pure-shared":r==="PersistenceAdapters"&&(Mr.test(n)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${n}`))?"kernel-emit":Hr.test(n)||(r==="DomainModel"||r==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}c(Kr,"classifyLayerImportKind");function Ur(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Kr(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}c(Ur,"layerImportNextAction");function jr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}c(jr,"arkRunCallSiteName");function Vr(e){let t=jr(e),n=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${n??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(Vr,"arkRunNextAction");function le(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Ur(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return Vr(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() for the first freeze of \u03BE. Later pattern change is proposeRelease then apply(ProposeResult). Never update/patch/set. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Do not persist slow key ${e.target} from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again.`:"Do not persist a declared slow key from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again. Never mechanical-safe.";case"ARKORDER_UNVALVED_RELEASE":return"Change \u03BE with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(le,"deterministicNextAction");var Gr=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],_a=new Set(Gr);var dn={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},zr="ARKRUN_INTERACTION_NAME_INCOMPLETE";function pn(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(pn,"isDomainRoleLayer");function qr(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}c(qr,"compareFindings");function oe(e,t,n,r,s,a,i){let d=e.mode==="enforced"&&i;return{ruleId:dn[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:le({ruleId:dn[t],fromLayer:a?.fromLayer,target:a?.target})}}c(oe,"finding");function Wr(e,t){let n=[],r=[],s=[],a=[];for(let i of e)i.file===t&&(n.push(...i.uses),r.push(...i.reactsTo),s.push(...i.raises),a.push(...i.sends));return{uses:new Set(n),reactsTo:new Set(r),raises:new Set(s),sends:new Set(a)}}c(Wr,"bagForFile");function un(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}c(un,"emitKinds");function fn(e){return e==="subscribe"||e==="register-handler"}c(fn,"handleKinds");function Br(e){return e==="resolve"||e==="resolve-singleton"}c(Br,"dependKinds");function Xr(e,t,n){let r=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return r.push(oe(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,n)),r;let a=new Map;for(let i of t){let d=a.get(i.matchedRoot)??[];d.push(i),a.set(i.matchedRoot,d)}for(let i of s){let d=[...a.get(i)??[]].sort((m,h)=>m.file.localeCompare(h.file));if(d.length===0){r.push(oe(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(i)} matched no governed files and has no createArkKernel factory.`,{target:i},n));continue}if(d.some(m=>m.hasKernelFactory))continue;let l=d[0];r.push(oe(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(i)} has no createArkKernel / createStrictArkKernel factory.`,{target:i},n))}return r}c(Xr,"evaluateMissingRoot");function Yr(e,t,n,r,s){let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),i=[];for(let d of n){let l=d.specifier;if(!l||!ln(l))continue;let m=r(d.from);m&&pn(m,a.get(m)??[])&&i.push(oe(e,"arkrun-kernel-in-domain",d.from,d.line,`${m} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:m,target:l},s))}return i}c(Yr,"evaluateKernelInDomain");function Zr(e,t,n,r,s,a){let i=new Set(e.managedLayers);if(i.size===0)return[];let d=new Map(t.map(h=>[h.name,h.intentPrefixes??[]])),l=new Set(r.filter(h=>h.hasKernelFactory).map(h=>h.file)),m=[];for(let h of n){if(l.has(h.file))continue;let R=h.typeName;if(e.ignoreDirectNewForErrors!==!1&&(R.endsWith("Error")||R==="Error")||R.endsWith("DTO")||R.endsWith("VO"))continue;let f=s(h.file);!f||!i.has(f)||pn(f,d.get(f)??[])||m.push(oe(e,"arkrun-direct-new",h.file,h.line,`${f} must not construct ${h.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:f,target:h.typeName},a))}return m}c(Zr,"evaluateDirectNew");function Jr(e,t,n,r,s){let a=[],i=[];if(e.requireDeclarations!==!0)return{findings:a,completenessReasons:i};let d=new Set(e.managedLayers);if(d.size===0)return{findings:a,completenessReasons:i};for(let l of t){if(!un(l.kind)&&!fn(l.kind)&&!Br(l.kind))continue;let m=r(l.file);if(!m||!d.has(m))continue;if(!l.nameLiteral){e.mode==="enforced"&&i.push({code:zr,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let h=Wr(n,l.file);if(un(l.kind)){if(h.raises.has(l.nameLiteral)||h.sends.has(l.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:m,target:l.nameLiteral},s));continue}if(fn(l.kind)){if(h.reactsTo.has(l.nameLiteral))continue;a.push(oe(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:m,target:l.nameLiteral},s));continue}h.uses.has(l.nameLiteral)||a.push(oe(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:m,target:l.nameLiteral},s))}return{findings:a,completenessReasons:i}}c(Jr,"evaluateUndeclared");function Qr(e,t,n,r){let s=new Set(e.managedLayers);if(s.size===0)return[];let a=[];for(let i of t){if(i.typeOnly)continue;let d=i.specifier;if(!d||!cn(d))continue;let l=n(i.from);!l||!s.has(l)||a.push(oe(e,"arkrun-transport-bypass",i.from,i.line,`${l} must not import broker/queue/emitter ${JSON.stringify(d)}; use the ArkRun kernel transport.`,{fromLayer:l,target:d},r))}return a}c(Qr,"evaluateTransportBypass");function gn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let n=Be(e.classification),r=Jr(t,e.kernelCalls,e.declarations,e.layerForFile,n),s=[...Xr(t,e.compositionRootHits,n),...Yr(t,e.layers,e.dependencies,e.layerForFile,n),...Zr(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,n),...r.findings,...Qr(t,e.dependencies,e.layerForFile,n)].sort(qr),a=[...r.completenessReasons].sort((i,d)=>{let l=`${i.code}\0${i.file??""}\0${i.message}`,m=`${d.code}\0${d.file??""}\0${d.message}`;return l<m?-1:l>m?1:0});return{findings:s,completenessReasons:a}}c(gn,"evaluateArkRunSensors");function mn(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}c(mn,"isArkOrderModuleSpecifier");var yn=new Map;function hn(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(hn,"escapeAppliesToLiteral");function es(e){let t="";for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"&&n+1<e.length){let s=e[n+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,n+=1;continue}t+="/";continue}t+=r}return t}c(es,"normalizeAppliesToGlob");function ts(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="\\"){n+=1;continue}if(r==="{")t+=1;else if(r==="}"&&(t-=1,t<0))return!1}return t===0}c(ts,"appliesToBracesBalanced");function ns(e){let t=yn.get(e);if(t)return t;let n=es(e),r=ts(n),s="",a=0;for(let d=0;d<n.length;d+=1){let l=n[d];l==="\\"&&d+1<n.length?(s+=hn(n[d+1]),d+=1):l==="*"?n[d+1]==="*"?n[d+2]==="/"?(s+="(?:.*/)?",d+=2):(s+=".*",d+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&r?(s+="(?:",a+=1):l==="}"&&r&&a>0?(s+=")",a-=1):l===","&&r&&a>0?s+="|":s+=hn(l)}let i=new RegExp(`^${s}$`);return yn.set(e,i),i}c(ns,"globToRegExp");var Rn={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function rs(e,t){return!t||t.length===0?!0:t.some(n=>ns(n).test(e))}c(rs,"matchesArkOrderAppliesTo");function ss(e,t=[]){let n=e.trim();return/^domain(?:model)?$/i.test(n)||/^domain(?=[A-Z_\-\s])/i.test(n)?!0:t.some(r=>{let s=r.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(ss,"isDomainRoleLayer");function ce(e,t,n,r,s,a,i){let d=e.mode==="enforced"&&i;return{ruleId:Rn[t],sensor:t,message:s,file:n,line:r,...a?.fromLayer?{fromLayer:a.fromLayer}:{},...a?.target?{target:a.target}:{},severity:d?"error":"warning",failsStrict:d,nextAction:le({ruleId:Rn[t],fromLayer:a?.fromLayer,target:a?.target})}}c(ce,"finding");function An(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let n=Be(e.classification),r=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)r.push(ce(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,n));else{let l=new Map;for(let m of e.planeRootHits){let h=l.get(m.matchedRoot)??[];h.push(m),l.set(m.matchedRoot,h)}for(let m of s){let h=l.get(m)??[];if(h.length===0){r.push(ce(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(m)} matched no governed files and has no createOrderPlane factory.`,{target:m},n));continue}h.some(R=>R.hasPlaneFactory)||r.push(ce(t,"arkorder-missing-plane",h[0].file,1,`ArkOrder plane root ${JSON.stringify(m)} has no createOrderPlane factory.`,{target:m},n))}}let a=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let m=l.specifier;if(!m||!mn(m))continue;let h=e.layerForFile(l.from);h&&ss(h,a.get(h)??[])&&r.push(ce(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:h,target:m},n))}for(let l of e.genericUpdates)r.push(ce(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},n));let i=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||r.push(ce(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},n));for(let l of e.ingestWritesXi??[])r.push(ce(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,n));let d=new Set(t.managedLayers);for(let l of i.length===0?[]:e.xiFieldWrites??[]){let m=e.layerForFile(l.file);!m||!d.has(m)||rs(l.file,t.appliesTo)&&r.push(ce(t,"arkorder-xi-field-write",l.file,l.line,`File writes slow key ${JSON.stringify(l.key)} through a persistence driver; route the field through ingest or a pattern change through proposeRelease.`,{fromLayer:m,target:l.key},n))}return r.sort((l,m)=>l.file.localeCompare(m.file)||l.ruleId.localeCompare(m.ruleId)||l.line-m.line),{findings:r,completenessReasons:[]}}c(An,"evaluateArkOrderSensors");function q(e,t,n={}){return{ruleId:e,message:t,...n}}c(q,"configWarning");function yt(e){let{config:t,rules:n,files:r,manifest:s}=e,a=[];if(t.dynamicImportAllowlist!==void 0&&(!Array.isArray(t.dynamicImportAllowlist)||t.dynamicImportAllowlist.some(p=>typeof p!="string"))&&a.push(q("CONFIG_INVALID_DYNAMIC_IMPORT_ALLOWLIST","dynamicImportAllowlist must be an array of file globs.")),t.safety!==void 0&&(t.safety===null||typeof t.safety!="object"||Array.isArray(t.safety)))a.push(q("CONFIG_INVALID_SAFETY","safety must be an object."));else if(t.safety)for(let p of["maxTsSuppressions","maxAnyCasts"]){let u=t.safety[p];u!==void 0&&(!Number.isInteger(u)||u<0)&&a.push(q("CONFIG_INVALID_SAFETY_THRESHOLD",`safety.${p} must be a non-negative integer.`))}let i=Array.isArray(t.layers)?t.layers:[],d=Array.isArray(s?.architecture?.layers)?s.architecture.layers:[],l=new Set([...i.map(p=>p.name).filter(Boolean),...d.map(p=>p.name).filter(p=>!!p)]);i.length===0&&a.push(q("CONFIG_NO_LAYERS","No file layers are configured; ark-check cannot classify files for import-boundary enforcement."));let m=new Set,h=new Set;for(let p of i){if(!p.name){a.push(q("CONFIG_LAYER_WITHOUT_NAME","A configured layer is missing a name."));continue}m.has(p.name)&&h.add(p.name),m.add(p.name),p.forbiddenGlobals!==void 0&&(!Array.isArray(p.forbiddenGlobals)||p.forbiddenGlobals.some(y=>typeof y!="string"))&&a.push(q("CONFIG_INVALID_FORBIDDEN_GLOBALS",`Layer "${p.name}" has an invalid forbiddenGlobals value; expected an array of strings (e.g. ["fetch", "Date.now"]). The entry is ignored.`,{layer:p.name}));let u=Array.isArray(p.patterns)?p.patterns:[];if(u.length===0){a.push(q("CONFIG_LAYER_WITHOUT_PATTERNS",`Layer "${p.name}" has no file patterns and will never classify files.`,{layer:p.name}));continue}for(let y of u){let A;try{A=ae(y)}catch(v){a.push(q("CONFIG_INVALID_LAYER_PATTERN",`Layer "${p.name}" has an invalid pattern "${y}": ${v instanceof Error?v.message:String(v)}`,{layer:p.name,pattern:y}));continue}let E=p.optional===!0||p.reserved===!0||p.allowEmpty===!0;!r.some(v=>A.test(v))&&!E&&a.push(q("CONFIG_LAYER_PATTERN_NO_MATCHES",`Layer "${p.name}" pattern "${y}" matched no included files (possible typo). Mark the layer reserved/allowEmpty if this house is reserved for later.`,{layer:p.name,pattern:y,failsStrict:!1,reserved:!1}))}}for(let p of h)a.push(q("CONFIG_DUPLICATE_LAYER",`Layer "${p}" is configured more than once.`,{layer:p}));if(l.size>0)for(let p of n??[])p.from&&!l.has(p.from)&&a.push(q("CONFIG_RULE_UNKNOWN_FROM_LAYER",`Rule references unknown source layer "${p.from}".`,{fromLayer:p.from,toLayer:p.to})),p.to&&!l.has(p.to)&&a.push(q("CONFIG_RULE_UNKNOWN_TO_LAYER",`Rule references unknown target layer "${p.to}".`,{fromLayer:p.from,toLayer:p.to}));let R=new Set;if(i.length>1)for(let p of r){let u=-1,y=[];for(let A of i)for(let E of A.patterns??[]){if(!ae(E).test(p))continue;let v=dt(E,p);v>u?(u=v,y=[A.name]):v===u&&!y.includes(A.name)&&y.push(A.name)}y.length>1&&R.add([...y].sort().join(" + "))}R.size>0&&a.push(q("CONFIG_AMBIGUOUS_LAYERS",`Some files match multiple layers at equal specificity; classification falls back to declaration order. Disambiguate the overlapping patterns: ${[...R].join(", ")}.`,{pairs:[...R]}));let f=r.filter(p=>!Z(p,i));return f.length>0&&a.push(q("CONFIG_UNCLASSIFIED_FILES",`${f.length} included source file(s) are not matched by any configured layer; ark-check will not enforce import rules for those source files.`,{count:f.length,samples:f.slice(0,5)})),a}c(yt,"collectAnalysisConfigWarnings");function kn(e){let t=0,n=new Map,r=new Map,s=new Set,a=[],i=[],d=c(l=>{n.set(l,t),r.set(l,t),t+=1,a.push(l),s.add(l);for(let R of[...e.get(l)??[]].sort())e.has(R)&&(n.has(R)?s.has(R)&&r.set(l,Math.min(r.get(l)??0,n.get(R)??0)):(d(R),r.set(l,Math.min(r.get(l)??0,r.get(R)??0))));if(r.get(l)!==n.get(l))return;let m=[],h;do{if(h=a.pop(),h===void 0)break;s.delete(h),m.push(h)}while(h!==l);m.length>1&&i.push(m.sort())},"connect");for(let l of[...e.keys()].sort())n.has(l)||d(l);return i.sort((l,m)=>l[0]<m[0]?-1:l[0]>m[0]?1:0).map(l=>({ruleId:"CIRCULAR_DEPENDENCY",file:l[0],line:1,target:l.join(" \u2192 "),message:`Circular dependency among ${l.length} files: ${l.join(" \u2192 ")} \u2192 ${l[0]}.`,cycleKind:"value"}))}c(kn,"detectArchitectureCycles");function $e(e){let t=e.contentViolations.map(a=>({...a})),n=(e.warnings??[]).map(a=>({...a})),r=new Map(e.files.map(a=>[a,new Set]));for(let a of e.edges){if(a.to&&a.to!==a.from&&!a.typeOnly&&r.has(a.from)&&r.get(a.from)?.add(a.to),!a.to||!a.fromLayer||!a.toLayer)continue;let i=we(e.rules,a.fromLayer,a.toLayer,{fromPath:a.from,toPath:a.to,layers:e.config.layers});if(!i)continue;let d=i.rule,l=!!d.peerIsolation,m=!l&&!!(a.typeOnly||a.namedBindingsTypeOnly),h=l?ze(i.peerIsolationReason??"cross-slice",{fromPath:a.from,toPath:a.to,fromSlice:i.fromSlice,toSlice:i.toSlice}):void 0,R=d.message?h?`${d.message} (${h})`:d.message:h?`${a.fromLayer} must not ${a.kind} another slice of ${a.toLayer} (${a.from} \u2192 ${a.to}): ${h}`:`${a.fromLayer} must not ${a.kind} ${a.toLayer}.`;t.push({ruleId:"LAYER_IMPORT_VIOLATION",file:a.from,line:a.line,fromLayer:a.fromLayer,toLayer:a.toLayer,target:a.to,...a.typeOnly?{typeOnly:!0}:{},...a.targetTypeOnlyExports?{targetTypeOnlyExports:!0}:{},...a.sourcePureTypeModule?{sourcePureTypeModule:!0}:{},...a.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{},...!l&&a.portProofEligible?{portProofEligible:!0}:{},...a.kind?{edgeKind:a.kind}:{},...l?{peerIsolation:!0}:{},message:m?`${R} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:R,...m?{failsStrict:!1,severity:"warning"}:{}})}let s=String(e.config.cyclePolicy??"strict").toLowerCase();if(s!=="off"){let a=kn(r);s==="soft"||s==="framework-soft"?n.push(...a.map(i=>({...i,message:`${i.message} (soft cycle policy \u2014 advisory only; set cyclePolicy: "strict" to fail the check)`,failsStrict:!1}))):t.push(...a)}return{violations:t,warnings:n,safety:e.safety}}c($e,"evaluateArchitectureGraph");function as(e,t){return t.some(n=>{try{return ae(n).test(e)}catch{return!1}})}c(as,"matchesAny");function os(e,t){let n=e.contract.config.safety??{},r=Number.isInteger(n.maxTsSuppressions)?Number(n.maxTsSuppressions):0,s=Number.isInteger(n.maxAnyCasts)?Number(n.maxAnyCasts):0,a=e.contract.config.dynamicImportAllowlist??[],i=t.safetyUses.filter(y=>y.kind==="ts-suppression").map(({file:y,line:A})=>({file:y,line:A})),d=t.safetyUses.filter(y=>y.kind==="any-cast").map(({file:y,line:A})=>({file:y,line:A})),l=t.safetyUses.filter(y=>(y.kind==="dynamic-import"||y.kind==="dynamic-require")&&!as(y.file,a)).map(y=>({file:y.file,line:y.line,kind:y.kind==="dynamic-require"?"require":"import"})),m=n.allowInMemory===!0||t.projectPackageName==="arkgate"?[]:t.safetyUses.filter(y=>y.kind==="in-memory-store").map(y=>({file:y.file,line:y.line,store:y.symbol??"in-memory store"})),h=n.allowDisabledPeerIsolation===!0?[]:(e.contract.config.rules??[]).filter(y=>y.peerIsolation===!1||y.allowed===!1&&!!y.from&&y.from===y.to&&y.peerIsolation!==!0).map(y=>({from:y.from,to:y.to})),R={tsSuppressions:i,anyCasts:d,nonLiteralDynamicImports:l,inMemoryProductionStores:m,disabledPeerIsolationRules:h,thresholds:{maxTsSuppressions:r,maxAnyCasts:s}},f=[],p=l.filter(y=>y.kind==="import");if(p.length>0){let y=p[0];f.push({ruleId:"DYNAMIC_IMPORT_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${p.length} non-literal dynamic import(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}let u=l.filter(y=>y.kind==="require");if(u.length>0){let y=u[0];f.push({ruleId:"DYNAMIC_REQUIRE_NOT_ALLOWLISTED",file:y.file,line:y.line,message:`${u.length} non-literal require call(s) cannot be resolved statically. Add only reviewed files to dynamicImportAllowlist.`})}if(i.length>r){let y=i[0];f.push({ruleId:"TS_SUPPRESSION_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${i.length} @ts-ignore/@ts-nocheck directive(s) exceed safety.maxTsSuppressions (${r}).`})}if(d.length>s){let y=d[0];f.push({ruleId:"ANY_CAST_THRESHOLD_EXCEEDED",file:y.file,line:y.line,message:`${d.length} explicit any cast(s) exceed safety.maxAnyCasts (${s}).`})}if(m.length>0){let y=m[0];f.push({ruleId:"IN_MEMORY_STORE_IN_PRODUCTION_SOURCE",file:y.file,line:y.line,message:`${m.length} ArkGate InMemory store risk(s) appear in governed production source. Provide durable stores or set safety.allowInMemory only for an explicitly ephemeral service.`})}return h.length>0&&f.push({ruleId:"PEER_ISOLATION_DISABLED",message:`${h.length} rule(s) disable or omit required peerIsolation. Restore peerIsolation: true or set safety.allowDisabledPeerIsolation only with a documented production exception.`}),{report:R,warnings:f}}c(os,"evaluateSafety");function is(e,t){return[...t].filter(n=>e===n||e.startsWith(`${n}.`)).sort((n,r)=>r.length-n.length)[0]}c(is,"ambientForbiddenGlobal");function bn(e,t){let n=t.config.layers.filter(r=>(r.intentPrefixes??[]).length>0);return pt(e,n.length>0?n:ft.map(r=>({name:r.layer,prefixes:r.prefixes})))}c(bn,"intentLayer");function ls(e,t,n){let r=[],s=new Map(e.contract.config.layers.map(a=>[a.name,a]));for(let a of t.ambientUses){let i=n.get(a.file);!i||!is(a.symbol,s.get(i)?.forbiddenGlobals??[])||r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:i,target:a.symbol,message:`${i} must not use the ambient global "${a.symbol}".`})}for(let a of t.capabilityUses){let i=n.get(a.file);if(!i)continue;let d=s.get(i),l=d?.forbiddenGlobals??[],m=a.source==="import-based"?t.dependencies.find(h=>h.from===a.file&&h.line===a.line&&h.specifier===a.symbol&&!h.typeOnly)?.kind:void 0;if(!(a.source==="ambient-global"&&ct(a.symbol,l))){if(a.source==="import-based"){let h=Ce(a.symbol,l);if(h){r.push({ruleId:"FORBIDDEN_GLOBAL",file:a.file,line:a.line,fromLayer:i,target:a.symbol,...m?{edgeKind:m}:{},message:`${i} must not use module "${a.symbol}" because it is the import form of forbidden global "${h}".`});continue}}ke(d).includes(a.capability)&&r.push({ruleId:"CAPABILITY_VIOLATION",file:a.file,line:a.line,fromLayer:i,target:a.symbol,capability:a.capability,...m?{edgeKind:m}:{},message:a.source==="import-based"?`${i} denies the ${a.capability} capability; found import of "${a.symbol}".`:`${i} denies the ${a.capability} capability; found ambient "${a.symbol}".`})}}for(let a of t.publishCalls){let i=n.get(a.file);if(!i)continue;for(let l of gt({publishCall:!0,rawIntentName:a.rawIntentName,objectHasIntent:a.objectHasIntent,arkPublishCandidate:a.arkPublishCandidate,hasSource:a.hasSource}))r.push({ruleId:l.ruleId,file:a.file,line:a.line,...l.ruleId==="PUBLISH_MISSING_SOURCE"?{fromLayer:i}:{},message:l.message});if(!a.sourceIntent)continue;let d=bn(a.sourceIntent,e.contract);!d||d===i||r.push({ruleId:"PUBLISH_SOURCE_LAYER_MISMATCH",file:a.file,line:a.line,fromLayer:i,toLayer:d,target:a.sourceIntent,message:`Publish source "${a.sourceIntent}" resolves to ${d}, but the publishing file is classified as ${i}.`})}for(let a of t.intentReferences){let i=n.get(a.file);if(!i)continue;let d=bn(a.intent,e.contract);if(!d)continue;let l=we(e.contract.config.rules,i,d,{fromPath:a.file,layers:e.contract.config.layers});if(!l)continue;let m=l.rule.peerIsolation?ze(l.peerIsolationReason??"cross-slice",{fromPath:a.file,fromSlice:l.fromSlice,toSlice:l.toSlice}):void 0,h=`${i} must not reference ${d} intent ${a.intent}.`,R=m&&l.peerIsolationReason!=="cross-slice"?`${h} ${m}`:l.rule.message?m?`${l.rule.message} (${m})`:l.rule.message:h;r.push({ruleId:"LAYER_INTENT_REFERENCE_VIOLATION",file:a.file,line:a.line,fromLayer:i,toLayer:d,target:a.intent,...l.rule.peerIsolation?{peerIsolation:!0}:{},message:R})}return r}c(ls,"contentViolations");function ht(e){let{facts:t}=e,n=Ke(e.contract.config),r=t.evidenceRequirementsHash===n,s=r?t.completeness:"unavailable",a=r?t.completenessReasons:[...t.completenessReasons,{code:"EVIDENCE_REQUIREMENTS_MISMATCH",message:"Resolved facts were collected for different policy-controlled evidence requirements."}].sort((o,O)=>{let F=`${o.code}\0${o.file??""}\0${o.message}`,Y=`${O.code}\0${O.file??""}\0${O.message}`;return F<Y?-1:F>Y?1:0}),i=t.files.map(o=>({...o,layer:Z(o.path,e.contract.config.layers)??null})),d=new Map(i.map(o=>[o.path,o.layer])),l=t.dependencies.map(o=>{let O=o.target?d.get(o.target)??Z(o.target,e.contract.config.layers):void 0;return{from:o.from,fromLayer:d.get(o.from)??null,...o.resolution==="resolved-project"&&o.target?{to:o.target,...O?{toLayer:O}:{}}:{},line:o.line,kind:o.kind,typeOnly:o.typeOnly,...o.targetTypeOnlyExports?{targetTypeOnlyExports:o.targetTypeOnlyExports}:{},...o.sourcePureTypeModule?{sourcePureTypeModule:o.sourcePureTypeModule}:{},...o.namedBindingsTypeOnly?{namedBindingsTypeOnly:o.namedBindingsTypeOnly}:{},...o.portProofEligible?{portProofEligible:o.portProofEligible}:{}}}),m=yt({config:e.contract.config,rules:e.contract.config.rules,files:i.map(o=>o.path)}),h=os(e,t),R=e.contract.arkRules??xe(),f=i.map(o=>o.path),u={...e.coverageInputs?.fileContents&&Object.keys(e.coverageInputs.fileContents).length>0?nn(e.coverageInputs.fileContents):{},...e.fileHints??{}},y=[...en({arkRules:R,classShapes:e.contract.classShapes??t.classShapes??[],files:f,layerForFile:c(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),fileHints:u}),...tn(R,f)],A=y.filter(o=>o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,nextAction:o.ruleId==="ARKRULE_SCOPE_EMPTY"?`Fix appliesTo globs for ${o.arkruleId} in ${o.arkruleSource} so they match governed files, or remove the rule.`:`Fix the structure or invariant for ${o.arkruleId} (declared in ${o.arkruleSource}), then preflight again.`})),E=y.filter(o=>!o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,failsStrict:!1,nextAction:o.ruleId==="ARKRULE_SCOPE_EMPTY"?`Review appliesTo for ${o.arkruleId} in ${o.arkruleSource} (zero-match scope; advisory).`:`Review ArkRule ${o.arkruleId} in ${o.arkruleSource} (advisory).`})),w=(R.invariants?.length??0)>0?sn({arkRules:R,fileContents:e.coverageInputs?.fileContents??{},testFiles:e.coverageInputs?.testFiles??[],testGlobsMissing:e.coverageInputs?.testGlobsMissing===!0||e.coverageInputs===void 0||(e.coverageInputs.testFiles?.length??0)===0,coverageBudgetExhausted:e.coverageInputs?.coverageBudgetExhausted===!0,...e.coverageInputs?.stats?{coverageStats:e.coverageInputs.stats}:{},...e.coverageInputs?.coverageRoots?{coverageRoots:e.coverageInputs.coverageRoots}:{}}):{coverage:[],violations:[],partial:!1},H=w.violations.filter(o=>o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,nextAction:`Add a test title or declared symbol covering ${o.arkruleId} (declared in ${o.arkruleSource}), then preflight again.`})),W=w.violations.filter(o=>!o.failsStrict).map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,arkruleId:o.arkruleId,arkruleSource:o.arkruleSource,failsStrict:!1,nextAction:o.ruleId==="INVARIANT_COVERAGE_OUTSIDE_ROOTS"?`Move ${o.file} under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json.`:`Cover invariant ${o.arkruleId} in ${o.arkruleSource} (advisory / partial).`})),k=on(i),$=gn({arkRun:e.contract.config.arkRun,layers:e.contract.config.layers,kernelCalls:t.arkRunKernelCalls,managedNews:t.arkRunManagedNews,compositionRootHits:t.arkRunCompositionRootHits,declarations:t.arkRunDeclarations,dependencies:t.dependencies,layerForFile:c(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),classification:k}),ee=e.contract.config.arkRun?.mode,de=$.findings.filter(()=>ee==="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:o.failsStrict,...o.severity?{severity:o.severity}:{}})),Tt=$.findings.filter(()=>ee!=="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:!1})),he=An({arkOrder:e.contract.config.arkOrder,layers:e.contract.config.layers,planeCalls:t.arkOrderPlaneCalls,genericUpdates:t.arkOrderGenericUpdates,planeRootHits:t.arkOrderRootHits,xiFieldWrites:t.arkOrderXiFieldWrites,ingestWritesXi:t.arkOrderIngestWritesXi,releaseKeyCounts:t.arkOrderReleaseKeyCounts,dependencies:t.dependencies,layerForFile:c(o=>d.get(o)??Z(o,e.contract.config.layers),"layerForFile"),classification:k}),tt=e.contract.config.arkOrder?.mode,De=he.findings.filter(()=>tt==="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:o.failsStrict,...o.severity?{severity:o.severity}:{}})),Nt=he.findings.filter(()=>tt!=="enforced").map(o=>({ruleId:o.ruleId,file:o.file,line:o.line,message:o.message,fromLayer:o.fromLayer,target:o.target,nextAction:o.nextAction,sensor:o.sensor,failsStrict:!1})),Ie=[...w.partial&&w.coverage.some(o=>o.mode==="enforced"&&o.partial)?[{code:"INVARIANT_COVERAGE_PARTIAL",message:"Enforced ArkRules invariant coverage cannot be fully proven (missing test globs or empty test set); reporting partial, never covered."}]:[],...$.completenessReasons,...he.completenessReasons],ue=$e({config:e.contract.config,rules:e.contract.config.rules,files:i.filter(o=>o.layer).map(o=>o.path),contentViolations:[...ls(e,t,d),...A,...H,...de,...De],edges:l,warnings:[...m,...h.warnings,...E,...W,...Tt,...Nt],safety:h.report}),Me=s==="complete"&&Ie.length>0?"partial":s,rt=Me==="complete"?a:[...a,...Ie].sort((o,O)=>{let F=`${o.code}\0${o.file??""}\0${o.message}`,Y=`${O.code}\0${O.file??""}\0${O.message}`;return F<Y?-1:F>Y?1:0}),b=ue.violations.filter(o=>o.failsStrict!==!1),I=Me==="complete"&&b.length===0,g=I&&ue.warnings.every(o=>o.failsStrict===!1);return{mode:"resolved-candidate-facts",completeness:Me,completenessReasons:rt,valid:I,strictValid:g,policyHash:e.contract.policyHash,factsHash:t.factsHash,resolverIdentity:t.resolverIdentity,candidateTreeHash:t.candidateTreeHash,safety:h.report,ir:{schemaVersion:"1.0",policyHash:e.contract.policyHash,compilerOptionsHash:t.compilerOptionsHash,files:i,layers:e.contract.config.layers.map(o=>o.name),edges:l,capabilityUses:t.capabilityUses,violations:ue.violations,warnings:ue.warnings}}}c(ht,"analyzeCanonicalResolvedProject");function Xe(e){return ht({contract:e.contract,facts:fe(e.facts),coverageInputs:e.coverageInputs,fileHints:e.fileHints})}c(Xe,"analyzeResolvedProject");var Rt="1.0";var Ye=class extends Error{static{c(this,"ArchitectureChangeMapValidationError")}issues;source;constructor(t,n){super(`Invalid architecture change map (${t}):
+${n.map(r=>`- ${r.path}: ${r.message}`).join(`
+`)}`),this.name="ArchitectureChangeMapValidationError",this.source=t,this.issues=n}};function At(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(At,"isObject");function kt(e,t,n,r){for(let s of Object.keys(e))t.includes(s)||r.push({path:`${n}.${s}`,message:"unknown field"})}c(kt,"unknownFields");function ge(e,t,n,r){let s=e[t];if(typeof s=="string"&&s.length>0)return s;r.push({path:`${n}.${t}`,message:"must be a non-empty string"})}c(ge,"requiredString");function cs(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}c(cs,"canonicalProjectPath");function ds(e,t,n="architecture change map"){let r=[];if(!At(e))throw new Ye(n,[{path:"$",message:"must be an object"}]);kt(e,["$schema","schemaVersion","files","dependencies"],"$",r);let s=ge(e,"$schema","$",r),a=ge(e,"schemaVersion","$",r);a&&a!==Rt&&r.push({path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(a)}; expected ${Rt}`});let i=new Set(t.layers.map(u=>u.name)),d=[],l=new Set;!Array.isArray(e.files)||e.files.length===0?r.push({path:"$.files",message:"must be a non-empty array"}):e.files.forEach((u,y)=>{let A=`$.files[${y}]`;if(!At(u)){r.push({path:A,message:"must be an object"});return}kt(u,["path","operation","layer"],A,r);let E=ge(u,"path",A,r),v=ge(u,"operation",A,r),w=ge(u,"layer",A,r),H=E?cs(E):void 0;E&&!H&&r.push({path:`${A}.path`,message:"must be a canonical project-relative path"}),v&&!["create","update","delete"].includes(v)&&r.push({path:`${A}.operation`,message:"must be create, update, or delete"}),w&&!i.has(w)&&r.push({path:`${A}.layer`,message:`references unknown layer ${JSON.stringify(w)}`}),H&&l.has(H)&&r.push({path:`${A}.path`,message:`duplicates planned path ${H}`}),H&&l.add(H);let W=H?Z(H,t.layers):void 0;H&&w&&i.has(w)&&W!==w&&r.push({path:`${A}.layer`,message:W?`${H} resolves to ${W}, not ${w}`:`${H} is not assigned to an architecture layer`}),H&&v&&["create","update","delete"].includes(v)&&w&&d.push({path:H,operation:v,layer:w})});let m=[],h=new Map(d.map(u=>[u.path,u.operation])),R=new Set,f=e.dependencies??[];if(Array.isArray(f)?f.forEach((u,y)=>{let A=`$.dependencies[${y}]`;if(!At(u)){r.push({path:A,message:"must be an object"});return}kt(u,["from","to"],A,r);let E=ge(u,"from",A,r),v=ge(u,"to",A,r);E&&!l.has(E)&&r.push({path:`${A}.from`,message:`must reference a planned file path: ${E}`}),v&&!l.has(v)&&r.push({path:`${A}.to`,message:`must reference a planned file path: ${v}`}),E&&h.get(E)==="delete"&&r.push({path:`${A}.from`,message:`cannot depend from deleted file ${E}`}),v&&h.get(v)==="delete"&&r.push({path:`${A}.to`,message:`cannot depend on deleted file ${v}`}),E&&v&&E===v&&r.push({path:A,message:"must not declare a self dependency"});let w=E&&v?`${E}\0${v}`:void 0;w&&R.has(w)&&r.push({path:A,message:`duplicates dependency ${E} -> ${v}`}),w&&R.add(w),E&&v&&m.push({from:E,to:v})}):r.push({path:"$.dependencies",message:"must be an array"}),r.length>0)throw new Ye(n,r);let p={$schema:s,schemaVersion:Rt,files:d.sort((u,y)=>u.path.localeCompare(y.path)),dependencies:m.sort((u,y)=>u.from.localeCompare(y.from)||u.to.localeCompare(y.to))};return{map:p,hash:U(T(p))}}c(ds,"loadArchitectureChangeMap");function B(e){return`${e.from}->${e.to}`}c(B,"dependencyKey");function _e(e,t,n,r="dependency"){return{id:`${e}:${r}:${B(t)}`,classification:e,subject:"dependency",from:t.from,to:t.to,message:n,...e==="missing"?{nextAction:`Add the planned dependency ${B(t)} to the candidate, then preflight again.`}:e==="contradictory"?{nextAction:`Replace the reverse dependency with ${B(t)}, then preflight again.`}:e==="unplanned"?{nextAction:r==="dependency-removed"?`Restore the removed dependency ${B(t)} in the candidate, then preflight again.`:`Remove the unplanned dependency ${B(t)} from the candidate, then preflight again.`}:{}}}c(_e,"dependencyFinding");function Fe(e){let t=[],n=new Map(e.changeMap.map.files.map(f=>[f.path,f])),r=new Map(e.changes.map(f=>[f.path,f])),s=new Map(e.changeMap.map.dependencies.map(f=>[B(f),f])),a=new Map(e.baseDependencies.map(f=>[B(f),f])),i=new Map(e.candidateDependencies.map(f=>[B(f),f]));for(let f of[...n.values()].sort((p,u)=>p.path.localeCompare(u.path))){let p=r.get(f.path);p?p.operation!==f.operation?t.push({id:`contradictory:file:${f.path}`,classification:"contradictory",subject:"file",path:f.path,expectedOperation:f.operation,actualOperation:p.operation,message:`${f.path} was planned as ${f.operation} but the actual operation is ${p.operation}.`,nextAction:`Change ${f.path} to the planned ${f.operation} operation, then preflight again.`}):t.push({id:`satisfied:file:${f.path}`,classification:"satisfied",subject:"file",path:f.path,expectedOperation:f.operation,actualOperation:p.operation,message:`${f.path} matches the planned ${f.operation} operation.`}):t.push({id:`missing:file:${f.path}`,classification:"missing",subject:"file",path:f.path,expectedOperation:f.operation,message:`${f.path} was planned as ${f.operation} but is absent from the actual change.`,nextAction:`${f.operation[0].toUpperCase()}${f.operation.slice(1)} ${f.path} in the complete change set, then preflight again.`})}for(let f of[...r.values()].sort((p,u)=>p.path.localeCompare(u.path)))n.has(f.path)||t.push({id:`unplanned:file:${f.path}`,classification:"unplanned",subject:"file",path:f.path,actualOperation:f.operation,message:`${f.path} has an unplanned ${f.operation} operation.`,nextAction:`Remove ${f.path} from the change set, then preflight again.`});let d=new Set;for(let f of[...s.values()].sort((p,u)=>B(p).localeCompare(B(u)))){if(i.has(B(f))){t.push(_e("satisfied",f,`${f.from} -> ${f.to} exists in the candidate architecture.`));continue}let p={from:f.to,to:f.from};i.has(B(p))?(d.add(B(p)),t.push(_e("contradictory",f,`${f.from} -> ${f.to} was planned, but the candidate contains the reverse edge.`))):t.push(_e("missing",f,`${f.from} -> ${f.to} is absent from the candidate architecture.`))}let l=new Set([...n.keys(),...r.keys()]);for(let[f,p]of[...i].sort(([u],[y])=>u.localeCompare(y)))a.has(f)||s.has(f)||d.has(f)||!l.has(p.from)&&!l.has(p.to)||t.push({..._e("unplanned",p,`${p.from} -> ${p.to} was added without a matching planned dependency.`,"dependency-added"),actualOperation:"added"});let m=new Set(e.changeMap.map.files.filter(f=>f.operation==="delete").map(f=>f.path));for(let[f,p]of[...a].sort(([u],[y])=>u.localeCompare(y)))i.has(f)||m.has(p.from)||m.has(p.to)||!l.has(p.from)&&!l.has(p.to)||t.push({..._e("unplanned",p,`${p.from} -> ${p.to} was removed without a planned file deletion.`,"dependency-removed"),actualOperation:"removed"});let h={satisfied:0,missing:1,contradictory:2,unplanned:3};t.sort((f,p)=>h[f.classification]-h[p.classification]||(f.subject===p.subject?0:f.subject==="file"?-1:1)||f.id.localeCompare(p.id));let R={satisfied:t.filter(f=>f.classification==="satisfied").length,missing:t.filter(f=>f.classification==="missing").length,contradictory:t.filter(f=>f.classification==="contradictory").length,unplanned:t.filter(f=>f.classification==="unplanned").length};return{schemaVersion:"1.0",readOnly:!0,changeMapHash:e.changeMap.hash,structurallyConverged:R.missing===0&&R.contradictory===0&&R.unplanned===0,behavioralCompletion:"not-evaluated",summary:R,findings:t}}c(Fe,"analyzeArchitectureConvergence");function ve(e,t){return t&&e.isStringLiteralLike(t)?t.text:void 0}c(ve,"literalText");function In(e,t){return e.getLineAndCharacterOfPosition(t.getStart(e)).line+1}c(In,"lineOf");function vn(e,t){if(e.isImportDeclaration(t)){let r=t.importClause;if(!r)return!1;if(r.isTypeOnly)return!0;let s=r.namedBindings;return!!(s&&e.isNamedImports(s)&&s.elements.length>0&&s.elements.every(a=>a.isTypeOnly))}if(t.isTypeOnly)return!0;let n=t.exportClause;return!!(n&&e.isNamedExports(n)&&n.elements.length>0&&n.elements.every(r=>r.isTypeOnly))}c(vn,"isTypeOnlyReference");function Sn(e,t){let n={noLib:!0,noResolve:!0,target:e.ScriptTarget.Latest},r=e.createCompilerHost(n,!0);return r.getSourceFile=s=>s===t.fileName?t:void 0,r.fileExists=s=>s===t.fileName,r.readFile=s=>s===t.fileName?t.text:void 0,e.createProgram([t.fileName],n,r).getTypeChecker()}c(Sn,"singleFileChecker");function bt(e,t){try{return e.getSymbolAtLocation(t)}catch{return}}c(bt,"symbolAt");function vt(e,t,n,r){let s=r.parent&&e.isShorthandPropertyAssignment(r.parent)&&r.parent.name===r,a;try{a=s?t.getShorthandAssignmentValueSymbol(r.parent):bt(t,r)}catch{a=void 0}return!!a?.declarations?.some(i=>i.getSourceFile().fileName===n.fileName)}c(vt,"localDeclaration");function Et(e,t){let n,r=[],s=c((i,d,l,m=!1)=>r.push({specifier:l,kind:d,line:In(t,i),typeOnly:m,unresolved:l===void 0,node:i}),"add"),a=c(i=>{if(e.isImportDeclaration(i))s(i,"import",ve(e,i.moduleSpecifier),vn(e,i));else if(e.isExportDeclaration(i)&&i.moduleSpecifier)s(i,"export",ve(e,i.moduleSpecifier),vn(e,i));else if(e.isImportEqualsDeclaration(i)&&e.isExternalModuleReference(i.moduleReference))s(i,"require",ve(e,i.moduleReference.expression),i.isTypeOnly===!0);else if(e.isCallExpression(i)){let d=i.expression.kind===e.SyntaxKind.ImportKeyword,m=e.isIdentifier(i.expression)&&i.expression.text==="require"&&!vt(e,n??(n=Sn(e,t)),t,i.expression);(d||m)&&s(i,m?"require":"dynamic-import",ve(e,i.arguments[0]))}e.forEachChild(i,a)},"visit");return a(t),r}c(Et,"extractSemanticDependencies");function us(e,t){let n=[],r=t;for(;e.isPropertyAccessExpression(r)||e.isElementAccessExpression(r);){if(e.isPropertyAccessExpression(r))n.unshift(r.name.text);else{let s=ve(e,r.argumentExpression);if(s===void 0)return;n.unshift(s)}r=r.expression}if(e.isIdentifier(r))return n.unshift(r.text),{root:r,segments:n}}c(us,"staticAccessPath");function fs(e,t){let n=t.parent;return e.isPropertyAccessExpression(n)||e.isElementAccessExpression(n)?!1:e.isExpressionNode(t)&&!e.isInTypeQuery(t)||e.isShorthandPropertyAssignment(n)&&n.name===t}c(fs,"runtimeIdentifierReference");function En(e,t){let n=t[0]==="globalThis"?t.slice(1):t;for(let r=n.length;r>=1;r-=1){let s=n.slice(0,r).join(".");if(e.has(s))return s}}c(En,"bestForbiddenMatch");function It(e,t,n){if(n.length===0)return[];let r=new Set(n),s=Sn(e,t),a=new Map,i=new Set;for(let f of t.statements)if(e.isVariableStatement(f))for(let p of f.declarationList.declarations)e.isIdentifier(p.name)&&i.add(p.name.text);let d=c(f=>{let p=us(e,f);if(!p)return;let u=bt(s,p.root),y=u?a.get(u):void 0;return y?[...y,...p.segments.slice(1)]:vt(e,s,t,p.root)||i.has(p.root.text)?void 0:p.segments},"resolvePath");for(let f of t.statements)if(e.isVariableStatement(f))for(let p of f.declarationList.declarations){if(!p.initializer||!e.isIdentifier(p.name))continue;let u=d(p.initializer),y=bt(s,p.name);!u||!y||a.set(y,u)}let l=[],m=new Set,h=c((f,p)=>{let u=In(t,p),y=`${f}:${p.getStart(t)}`;m.has(y)||(m.add(y),l.push({name:f,line:u,node:p}))},"flag"),R=c(f=>{let p=f.parent&&(e.isPropertyAccessExpression(f.parent)||e.isElementAccessExpression(f.parent))&&f.parent.expression===f;if((e.isPropertyAccessExpression(f)||e.isElementAccessExpression(f))&&!p){let u=d(f),y=u?En(r,u):void 0;y&&h(y,f)}else e.isIdentifier(f)&&r.has(f.text)&&fs(e,f)&&!vt(e,s,t,f)&&h(f.text,f);if(e.isVariableDeclaration(f)&&e.isObjectBindingPattern(f.name)&&f.initializer){let u=d(f.initializer);if(u)for(let y of f.name.elements){if(!e.isIdentifier(y.name))continue;let A=y.propertyName?ve(e,y.propertyName)??y.propertyName.text:y.name.text,E=En(r,[...u,A]);E&&h(E,f.initializer)}}e.forEachChild(f,R)},"visit");return R(t),l}c(It,"collectForbiddenCapabilityUses");function ps(e,t,n){let r=[];for(let s of n?.dependencies??Et(e,t)){if(s.typeOnly||!s.specifier)continue;let a=Se(s.specifier);a&&r.push({capability:a,symbol:s.specifier,line:s.line,source:"import-based"})}for(let s of n?.ambientUses??It(e,t,lt)){let a=Oe(s.name);a&&r.push({capability:a,symbol:s.name,line:s.line,source:"ambient-global"})}return r.sort((s,a)=>s.line-a.line||s.capability.localeCompare(a.capability)||s.symbol.localeCompare(a.symbol))}c(ps,"collectCapabilityUses");var me={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Cn={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...me,default:[]},kernelRoots:{...me},managedLayers:{...me,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},On={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...me,default:[]},managedLayers:{...me,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...me,default:[]},appliesTo:{...me,default:[]}}};function Te(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(Te,"isObject");function wn(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let n of e.layers)Te(n)&&typeof n.name=="string"&&n.name.length>0&&t.add(n.name);return t}c(wn,"declaredLayerNames");function xn(e){if(!Te(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}c(xn,"defaultedArkRun");function $n(e){if(!Te(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}c($n,"defaultedArkOrder");function _n(e,t){let n=e.arkRun;if(n===void 0||!Te(n))return;let r=wn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,i)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkRun.managedLayers[${i}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.kernelRoots??n.compositionRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:n.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(_n,"validateArkRunExtra");function Fn(e,t){let n=e.arkOrder;if(n===void 0||!Te(n))return;let r=wn(e),s=n.managedLayers;if(Array.isArray(s)&&s.forEach((a,i)=>{typeof a=="string"&&a.length>0&&!r.has(a)&&t.push({path:`$.arkOrder.managedLayers[${i}]`,message:`layer ${JSON.stringify(a)} is not declared in layers[]`})}),n.mode==="enforced"){let a=n.planeRoots;(!Array.isArray(a)||a.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(Fn,"validateArkOrderExtra");var te="1.3",St="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Tn=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],gs=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function ms(){let e=[];for(let t of Tn)for(let n of Tn)t===n||gs.has(`${t}->${n}`)||e.push({from:t,to:n,allowed:!1});return e}c(ms,"createDefaultRules");var Ln=ms(),Ct=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],J={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Nn={$schema:"https://json-schema.org/draft/2020-12/schema",$id:St,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:St,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:te,default:te},name:{type:"string",minLength:1},include:{...J,minItems:1,default:["src"]},exclude:{...J,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Ln,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...J,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...J,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...J,minItems:1},exclude:J,intentPrefixes:J,description:{type:"string",minLength:1},forbiddenGlobals:J,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...J,minItems:1},sharedRoots:{...J,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget; coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant.",properties:{testGlobs:{...J,minItems:1},maxFiles:{type:"integer",minimum:1},coverageRoots:{...J,minItems:1}}},arkRun:Cn,arkOrder:On}},ie=class extends Error{static{c(this,"ArkConfigValidationError")}issues;source;constructor(t,n){super(`Invalid ArkGate config (${t}):
+${n.map(r=>`- ${r.path}: ${r.message}`).join(`
+`)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=n}};function Pn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(Pn,"isObject");function Ze(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}c(Ze,"propertyPath");function Ee(e){return e===null?"null":Array.isArray(e)?"array":typeof e}c(Ee,"valueType");function ys(e,t){let n="#/$defs/";if(e.startsWith(n))return t.$defs[e.slice(n.length)]}c(ys,"resolveSchemaRef");function Ne(e,t,n,r,s){if(t.$ref){let a=ys(t.$ref,r);if(!a){s.push({path:n,message:`schema reference ${t.$ref} cannot be resolved`});return}Ne(e,a,n,r,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:n,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(a=>Object.is(a,e))){s.push({path:n,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Pn(e)){s.push({path:n,message:`must be an object; received ${Ee(e)}`});return}let a=t.properties??{};for(let i of t.required??[])e[i]===void 0&&s.push({path:Ze(n,i),message:"is required"});if(t.additionalProperties===!1)for(let i of Object.keys(e))i in a||s.push({path:Ze(n,i),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let i=t.additionalProperties;for(let d of Object.keys(e))d in a||Ne(e[d],i,Ze(n,d),r,s)}for(let[i,d]of Object.entries(a))e[i]!==void 0&&Ne(e[i],d,Ze(n,i),r,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:n,message:`must be an array; received ${Ee(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:n,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let a=e.map(i=>JSON.stringify(i));new Set(a).size!==a.length&&s.push({path:n,message:"must not contain duplicate items"})}t.items&&e.forEach((a,i)=>Ne(a,t.items,`${n}[${i}]`,r,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:n,message:`must be a string; received ${Ee(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:n,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:n,message:`must be a boolean; received ${Ee(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:n,message:`must be an integer; received ${Ee(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:n,message:`must be at least ${t.minimum}`})}}c(Ne,"validateNode");function hs(e){let t={...e,$schema:e.$schema===void 0?St:e.$schema,schemaVersion:e.schemaVersion===void 0?te:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Ln.map(n=>({...n})):e.rules};return e.arkRun!==void 0&&(t.arkRun=xn(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=$n(e.arkOrder)),t}c(hs,"defaultedConfig");function Rs(e){return e===te?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}c(Rs,"migratedFromOf");function As(){let e=new Set([te]);for(let t of Ct)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}c(As,"knownInputVersions");function ks(e,t="ark.config.json"){if(!Pn(e))throw new ie(t,[{path:"$",message:`must be an object; received ${Ee(e)}`}]);let n=As(),r=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(r===null)throw new ie(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${te}`}]);if(r!=="unversioned"&&!n.has(r))throw new ie(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);let s=r,a={...e},i=0;for(;s!==te&&i<Ct.length+1;){i+=1;let d=Ct.find(l=>l.from===s);if(!d)throw new ie(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${te}`}]);s=d.to,a.schemaVersion=s}if(s!==te)throw new ie(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(r)}; expected ${te}`}]);return{candidate:hs(a),migratedFrom:Rs(r)}}c(ks,"migrateArkConfig");function Ot(e,t="ark.config.json"){let{candidate:n,migratedFrom:r}=ks(e,t),s=[];if(Ne(n,Nn,"$",Nn,s),_n(n,s),Fn(n,s),s.length>0)throw new ie(t,s);return{config:n,migratedFrom:r}}c(Ot,"loadArkConfigContract");function Dn(e,t="ark.config.json"){let n;try{n=JSON.parse(e)}catch(r){throw new ie(t,[{path:"$",message:`invalid JSON: ${r instanceof Error?r.message:String(r)}`}])}return Ot(n,t)}c(Dn,"parseArkConfigJson");function wt(e){return{...e,layers:e.layers.map(t=>{let{description:n,...r}=t;return r})}}c(wt,"omitLayerDescriptions");function Mn(e){let{stewards:t,...n}=wt(e.config);return{config:n,arkRules:{schemaVersion:e.arkRules.schemaVersion,structure:e.arkRules.structure.map(r=>({id:r.id,sensor:r.sensor,mode:r.mode,appliesTo:r.appliesTo??null,description:r.description??null,provenance:r.provenance})),invariants:e.arkRules.invariants.map(r=>({id:r.id,description:r.description,aggregate:r.aggregate??null,coverage:r.coverage??null,mode:r.mode,appliesTo:r.appliesTo??null,provenance:r.provenance}))}}}c(Mn,"effectiveContractPolicyPayload");var Vn="1.0";function C(e,t){e.push({id:`${t.classification}:${t.path}:${t.kind}`,path:t.path,classification:t.classification,message:t.message,...t.classification==="weakening"||t.classification==="judgment-required"?{nextAction:`Restore the previous protection at ${t.path}, then run ArkGate again.`}:{},...t.before===void 0?{}:{before:t.before},...t.after===void 0?{}:{after:t.after}})}c(C,"addFinding");function V(e){return[...new Set(e??[])].sort()}c(V,"sortedUnique");function ne(e,t,n,r,s){let a=V(n),i=V(r),d=new Set(a),l=new Set(i),m=i.filter(R=>!d.has(R)),h=a.filter(R=>!l.has(R));m.length===0&&h.length===0||(m.length>0&&C(e,{kind:"added",path:t,classification:s.added,message:s.addedMessage,before:a,after:i}),h.length>0&&C(e,{kind:"removed",path:t,classification:s.removed,message:s.removedMessage,before:a,after:i}))}c(ne,"compareStringSets");function Le(e,t,n,r,s,a,i){if(n===r)return;C(e,{kind:r?"enabled":"disabled",path:t,classification:r?s:s==="strengthening"?"weakening":"strengthening",message:r?a:i,before:n,after:r})}c(Le,"compareBoolean");function Je(e,t){let n=new Map,r=new Set;for(let s of e){let a=t(s);n.has(a)?r.add(a):n.set(a,s)}return{values:n,duplicates:[...r].sort()}}c(Je,"keyed");function bs(e,t,n){let r=Je(t,a=>a.name),s=Je(n,a=>a.name);(r.duplicates.length>0||s.duplicates.length>0)&&C(e,{kind:"duplicate-layer",path:"$.layers",classification:"judgment-required",message:"Duplicate layer names make policy ownership ambiguous.",before:r.duplicates,after:s.duplicates});for(let a of[...new Set([...r.values.keys(),...s.values.keys()])].sort()){let i=r.values.get(a),d=s.values.get(a),l=`$.layers[${a}]`;if(!i&&d){C(e,{kind:"layer-added",path:l,classification:"judgment-required",message:"A layer was added; verify overlap, ownership, and rule coverage.",after:d});continue}if(i&&!d){C(e,{kind:"layer-removed",path:l,classification:"weakening",message:"Removing a layer can leave its source paths ungoverned.",before:i});continue}if(!i||!d)continue;ne(e,`${l}.patterns`,i.patterns,d.patterns,{added:"strengthening",removed:"weakening",addedMessage:"Additional paths are governed by this layer.",removedMessage:"Paths were removed from this layer and may become ungoverned."}),ne(e,`${l}.exclude`,i.exclude,d.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional paths are excluded from this layer.",removedMessage:"Fewer paths are excluded from this layer."});let m=Ve(i),h=Ve(d);ne(e,`${l}.forbiddenGlobals`,m.rawGlobals,h.rawGlobals,{added:"strengthening",removed:"weakening",addedMessage:"Additional forbidden globals are enforced in this layer.",removedMessage:"A forbidden-global protection was removed from this layer."}),ne(e,`${l}.capabilities`,m.atoms,h.atoms,{added:"strengthening",removed:"weakening",addedMessage:"Additional ambient/import protection is enforced in this layer (coverage atoms).",removedMessage:"An ambient/import protection was lost from this layer (coverage atoms)."}),V(i.intentPrefixes).join("\0")!==V(d.intentPrefixes).join("\0")&&C(e,{kind:"intent-prefixes-changed",path:`${l}.intentPrefixes`,classification:"judgment-required",message:"Intent ownership changed and must be reviewed against publishers and consumers.",before:V(i.intentPrefixes),after:V(d.intentPrefixes)}),Le(e,`${l}.mayImportInfrastructure`,i.mayImportInfrastructure===!0,d.mayImportInfrastructure===!0,"weakening","The layer may now import infrastructure directly.","Direct infrastructure imports are no longer allowed for this layer."),Le(e,`${l}.optional`,i.optional===!0,d.optional===!0,"weakening","The layer is now optional and can be absent without a strict warning.","The layer is now required when its contract is active.")}}c(bs,"compareLayers");function vs(e,t,n){let r=c(i=>`${i.from}->${i.to}`,"keyOf"),s=Je(t,r),a=Je(n,r);(s.duplicates.length>0||a.duplicates.length>0)&&C(e,{kind:"duplicate-rule",path:"$.rules",classification:"judgment-required",message:"Duplicate rule edges make the effective verdict order-dependent.",before:s.duplicates,after:a.duplicates});for(let i of[...new Set([...s.values.keys(),...a.values.keys()])].sort()){let d=s.values.get(i),l=a.values.get(i),m=`$.rules[${i}]`;if(!d&&l){l.allowed===!1&&C(e,{kind:"deny-added",path:m,classification:"strengthening",message:"A denied dependency edge was added.",after:l});continue}if(d&&!l){d.allowed===!1&&C(e,{kind:"deny-removed",path:m,classification:"weakening",message:"A denied dependency edge was removed.",before:d});continue}if(!d||!l)continue;d.allowed!==l.allowed&&C(e,{kind:l.allowed?"deny-disabled":"deny-enabled",path:`${m}.allowed`,classification:l.allowed?"weakening":"strengthening",message:l.allowed?"A previously denied dependency edge is now allowed.":"A dependency edge is now denied.",before:d.allowed,after:l.allowed});let h=d.peerIsolation===!0,R=l.peerIsolation===!0;if(h!==R){let f=d.from===d.to&&l.from===l.to;C(e,{kind:R?"peer-isolation-enabled":"peer-isolation-disabled",path:`${m}.peerIsolation`,classification:f?R?"strengthening":"weakening":"judgment-required",message:f?R?"Cross-slice dependencies inside this layer are now denied.":"Cross-slice dependencies inside this layer are no longer denied.":"Changing peer isolation on a cross-layer edge changes the denial scope.",before:h,after:R})}V(d.sliceFolders).join("\0")!==V(l.sliceFolders).join("\0")&&C(e,{kind:"slice-folders-changed",path:`${m}.sliceFolders`,classification:"judgment-required",message:"Slice ownership folders changed and can reclassify existing dependencies.",before:V(d.sliceFolders),after:V(l.sliceFolders)}),!(!h&&!R)&&(Kn(e,`${m}.sharedRoots`,"shared-roots",V(d.sharedRoots),V(l.sharedRoots),"Roots declared shared are exempt from the peerIsolation unclassifiable denial.","Roots are no longer declared shared and fall back to the peerIsolation denial."),Kn(e,`${m}.allowedCrossSlice`,"cross-slice-allowance",V((d.allowedCrossSlice??[]).map(Hn)),V((l.allowedCrossSlice??[]).map(Hn)),"Directed cross-slice edges are now allowed by declaration.","Directed cross-slice edges are no longer declared and deny again."))}}c(vs,"compareRules");function Hn(e){return JSON.stringify([e.from,e.to])}c(Hn,"crossSliceKey");function Kn(e,t,n,r,s,a,i){if(JSON.stringify(r)===JSON.stringify(s))return;let d=s.filter(h=>!r.includes(h)),l=r.filter(h=>!s.includes(h)),m=d.length>0&&l.length>0;C(e,{kind:m?`${n}-changed`:d.length>0?`${n}-added`:`${n}-removed`,path:t,classification:m?"judgment-required":d.length>0?"weakening":"strengthening",message:m?`${a} Entries were added and removed in the same change.`:d.length>0?a:i,before:r,after:s})}c(Kn,"compareDeclaredExceptions");function Es(e,t,n){let r=t.safety??{},s=n.safety??{};for(let a of["maxTsSuppressions","maxAnyCasts"]){let i=r[a]??0,d=s[a]??0;i!==d&&C(e,{kind:d>i?"threshold-raised":"threshold-lowered",path:`$.safety.${a}`,classification:d>i?"weakening":"strengthening",message:d>i?"The safety threshold allows more violations.":"The safety threshold allows fewer violations.",before:i,after:d})}for(let a of["allowInMemory","allowDisabledPeerIsolation"])Le(e,`$.safety.${a}`,r[a]===!0,s[a]===!0,"weakening","A safety exception was enabled.","A safety exception was disabled.")}c(Es,"compareSafety");function xt(e){return e.mode==="enforced"?"enforced":"advisory"}c(xt,"arkRunMode");function $t(e){return e.mode==="enforced"?"enforced":"advisory"}c($t,"arkOrderMode");function Is(e,t,n){let r=t.arkOrder,s=n.arkOrder,a="$.arkOrder";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkorder-added",path:a,classification:"strengthening",message:`ArkOrder extra was added (${$t(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkorder-removed",path:a,classification:"weakening",message:"ArkOrder extra was removed.",before:r});return}if(!r||!s)return;let i=$t(r),d=$t(s);if(i!==d){let l=i==="advisory"&&d==="enforced";C(e,{kind:l?"arkorder-promoted":"arkorder-demoted",path:`${a}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkOrder extra was promoted to enforced.":"ArkOrder extra was demoted to advisory.",before:i,after:d})}ne(e,`${a}.planeRoots`,r.planeRoots,s.planeRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkOrder plane roots are governed.",removedMessage:"ArkOrder plane roots were removed and may skip the plane."}),ne(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkOrder.",removedMessage:"Layers were removed from ArkOrder management."})}c(Is,"compareArkOrder");function Ss(e,t,n){let r=t.arkRun,s=n.arkRun,a="$.arkRun";if(!r&&!s)return;if(!r&&s){C(e,{kind:"arkrun-added",path:a,classification:"strengthening",message:`ArkRun extra was added (${xt(s)}).`,after:s});return}if(r&&!s){C(e,{kind:"arkrun-removed",path:a,classification:"weakening",message:"ArkRun extra was removed.",before:r});return}if(!r||!s)return;let i=xt(r),d=xt(s);if(i!==d){let l=i==="advisory"&&d==="enforced";C(e,{kind:l?"arkrun-promoted":"arkrun-demoted",path:`${a}.mode`,classification:l?"strengthening":"weakening",message:l?"ArkRun extra was promoted to enforced.":"ArkRun extra was demoted to advisory.",before:i,after:d})}ne(e,`${a}.compositionRoots`,r.compositionRoots,s.compositionRoots,{added:"strengthening",removed:"weakening",addedMessage:"Additional ArkRun composition roots are governed.",removedMessage:"ArkRun composition roots were removed and may skip the kernel."}),ne(e,`${a}.managedLayers`,r.managedLayers,s.managedLayers,{added:"strengthening",removed:"weakening",addedMessage:"Additional layers are managed by ArkRun.",removedMessage:"Layers were removed from ArkRun management."}),Le(e,`${a}.requireDeclarations`,r.requireDeclarations!==!1,s.requireDeclarations!==!1,"strengthening","ArkRun now requires interaction declarations.","ArkRun no longer requires interaction declarations.")}c(Ss,"compareArkRun");function Cs(e){return e.some(t=>t.classification==="weakening")?"weakening":e.some(t=>t.classification==="judgment-required")?"judgment-required":e.some(t=>t.classification==="strengthening")?"strengthening":"neutral"}c(Cs,"overallClassification");function Un(e,t){return`${e}::${t}`}c(Un,"ruleKey");function jn(e){let t=new Map,n=new Map;if(!e)return{structure:t,invariants:n};for(let r of e.structure)t.set(Un(r.provenance.layer,r.id),r);for(let r of e.invariants)n.set(Un(r.provenance.layer,r.id),r);return{structure:t,invariants:n}}c(jn,"indexEffectiveRules");function Os(e,t,n,r,s,a){let i=new Map((a??[]).map(f=>[f.invariantId,f])),d=t.arkRules??{},l=n.arkRules??{},m=[...new Set([...Object.keys(d),...Object.keys(l)])].sort();for(let f of m){let p=d[f],u=l[f],y=`$.arkRules[${f}]`;if(p===void 0&&u!==void 0){C(e,{kind:"arkrules-ref-added",path:y,classification:"strengthening",message:`ArkRules reference for layer ${f} was added.`,after:u});continue}if(p!==void 0&&u===void 0){C(e,{kind:"arkrules-ref-removed",path:y,classification:"weakening",message:`ArkRules reference for layer ${f} was removed.`,before:p});continue}p!==u&&C(e,{kind:"arkrules-ref-path-changed",path:y,classification:"judgment-required",message:`ArkRules file path for layer ${f} changed; verify the effective rules still match intent.`,before:p,after:u})}let h=jn(r),R=jn(s);for(let f of[...new Set([...h.structure.keys(),...R.structure.keys()])].sort()){let p=h.structure.get(f),u=R.structure.get(f),y=`$.arkRules.structure[${f}]`;if(!p&&u){C(e,{kind:"arkrule-structure-added",path:y,classification:"strengthening",message:`Structure ArkRule ${u.id} was added (${u.mode}).`,after:u});continue}if(p&&!u){C(e,{kind:"arkrule-structure-removed",path:y,classification:"weakening",message:`Structure ArkRule ${p.id} was removed.`,before:p});continue}if(!(!p||!u)){if(p.mode!==u.mode){let A=p.mode==="advisory"&&u.mode==="enforced";C(e,{kind:A?"arkrule-promoted":"arkrule-demoted",path:`${y}.mode`,classification:A?"strengthening":"weakening",message:A?`Structure ArkRule ${u.id} was promoted to enforced.`:`Structure ArkRule ${u.id} was demoted to advisory.`,before:p.mode,after:u.mode})}p.sensor!==u.sensor&&C(e,{kind:"arkrule-sensor-changed",path:`${y}.sensor`,classification:"judgment-required",message:`Structure ArkRule ${u.id} changed sensor identity.`,before:p.sensor,after:u.sensor})}}for(let f of[...new Set([...h.invariants.keys(),...R.invariants.keys()])].sort()){let p=h.invariants.get(f),u=R.invariants.get(f),y=`$.arkRules.invariants[${f}]`;if(!p&&u){C(e,{kind:"arkrule-invariant-added",path:y,classification:"strengthening",message:`Invariant ${u.id} was added (${u.mode}).`,after:u});continue}if(p&&!u){C(e,{kind:"arkrule-invariant-removed",path:y,classification:"weakening",message:`Invariant ${p.id} was removed.`,before:p});continue}if(!(!p||!u)&&p.mode!==u.mode)if(p.mode==="advisory"&&u.mode==="enforced"){let E=i?.get(u.id),v=an(E);v.ok?C(e,{kind:"arkrule-invariant-promoted",path:`${y}.mode`,classification:"strengthening",message:`Invariant ${u.id} was promoted to enforced (coverage evidence present).`,before:p.mode,after:u.mode}):C(e,{kind:"arkrule-invariant-promote-refused",path:`${y}.mode`,classification:"judgment-required",message:`Invariant ${u.id} cannot be promoted to enforced: ${v.reason}`,before:p.mode,after:u.mode})}else C(e,{kind:"arkrule-invariant-demoted",path:`${y}.mode`,classification:"weakening",message:`Invariant ${u.id} was demoted to advisory.`,before:p.mode,after:u.mode})}}c(Os,"compareArkRules");function Gn(e,t,n){let r=[];ne(r,"$.include",e.include,t.include,{added:"strengthening",removed:"weakening",addedMessage:"Additional project roots are governed.",removedMessage:"Project roots were removed from governance."}),ne(r,"$.exclude",e.exclude,t.exclude,{added:"weakening",removed:"strengthening",addedMessage:"Additional project paths are excluded from governance.",removedMessage:"Fewer project paths are excluded from governance."}),ne(r,"$.dynamicImportAllowlist",e.dynamicImportAllowlist,t.dynamicImportAllowlist,{added:"weakening",removed:"strengthening",addedMessage:"Additional files may use non-literal dynamic imports.",removedMessage:"Fewer files may use non-literal dynamic imports."}),Le(r,"$.excludeGenerated",e.excludeGenerated!==!1,t.excludeGenerated!==!1,"weakening","Generated source is now excluded from governance.","Generated source is now governed.");let s={off:0,soft:1,"framework-soft":1,strict:2},a=e.cyclePolicy??"strict",i=t.cyclePolicy??"strict";if(a!==i){let d=s[i]===s[a]?"judgment-required":s[i]>s[a]?"strengthening":"weakening";C(r,{kind:"cycle-policy-changed",path:"$.cyclePolicy",classification:d,message:"The cycle enforcement level changed.",before:a,after:i})}return(e.frameworkOverlay??null)!==(t.frameworkOverlay??null)&&C(r,{kind:"framework-overlay-changed",path:"$.frameworkOverlay",classification:"judgment-required",message:"The framework overlay changed and may alter effective layer matching.",before:e.frameworkOverlay??null,after:t.frameworkOverlay??null}),bs(r,e.layers,t.layers),vs(r,e.rules,t.rules),Es(r,e,t),Os(r,e,t,n?.baseArkRules,n?.candidateArkRules,n?.candidateInvariantCoverage),Ss(r,e,t),Is(r,e,t),r.sort((d,l)=>d.path.localeCompare(l.path)||d.id.localeCompare(l.id)),{schemaVersion:Vn,classification:Cs(r),findings:r}}c(Gn,"classifyArkPolicyDelta");function zn(e,t){if(!e||e.schemaVersion!==Vn||typeof e.basePolicyHash!="string"||typeof e.candidatePolicyHash!="string"||typeof e.reason!="string"||!Array.isArray(e.findingIds)||e.findingIds.some(s=>typeof s!="string")||e.reason.trim().length===0||e.basePolicyHash!==t.basePolicyHash||e.candidatePolicyHash!==t.candidatePolicyHash)return!1;let n=V(e.findingIds),r=V(t.findingIds);return n.length===r.length&&n.every((s,a)=>s===r[a])}c(zn,"policyDeltaAcknowledgementMatches");function ye(e){let t=[];for(let n of e.replace(/\\/g,"/").split("/"))!n||n==="."||(n===".."&&t.length>0&&t.at(-1)!==".."?t.pop():t.push(n));return t.join("/")}c(ye,"normalizePath");function qn(e){return e!==void 0&&/[A-Za-z_$]/.test(e)}c(qn,"isIdentifierStart");function Qe(e){return e!==void 0&&/[A-Za-z0-9_$]/.test(e)}c(Qe,"isIdentifierCharacter");function X(e,t){for(;t<e.length&&/\s/.test(e[t]);)t+=1;return t}c(X,"skipWhitespace");function Pe(e,t){let n=e[t];if(n!=="'"&&n!=='"')return;let r=t,s="";for(t+=1;t<e.length;t+=1){let a=e[t];if(a===n)return{value:s,offset:r,excerpt:e.slice(r,t+1)};a==="\\"&&t+1<e.length?(s+=e[t+1],t+=1):s+=a}}c(Pe,"readString");function Q(e,t,n){return e.startsWith(t,n)&&!Qe(e[n-1])&&!Qe(e[n+t.length])}c(Q,"isWordAt");function Wn(e,t){let n=X(e,t);if(e[n]!=="{")return!1;n+=1;let r=!1;for(;n<e.length;){if(n=X(e,n),e[n]==="}")return r;if(e[n]===","){n+=1;continue}if(!Q(e,"type",n))return!1;let s=X(e,n+4);if(s>=e.length||e[s]===","||e[s]==="}"||Q(e,"as",s)||!qn(e[s]))return!1;for(n=s;n<e.length&&Qe(e[n]);)n+=1;if(n=X(e,n),Q(e,"as",n)){if(n=X(e,n+2),!qn(e[n]))return!1;for(;n<e.length&&Qe(e[n]);)n+=1}r=!0}return!1}c(Wn,"bracedNamedBindingsAreTypeOnly");function ws(e,t){if(t=X(e,t+6),e[t]==="(")return Pe(e,X(e,t+1));let n=!1;if(Q(e,"type",t)){let s=X(e,t+4);e[s]!==","&&!Q(e,"from",s)&&(n=!0)}else Wn(e,t)&&(n=!0);let r=Bn(e,t,!0);return r&&n?{...r,typeOnly:!0}:r}c(ws,"specifierAfterImport");function xs(e,t){t=t+6;let n=X(e,t),r=!1;if(Q(e,"type",n)){let a=X(e,n+4);(e[a]==="{"||e[a]==="*")&&(r=!0)}else Wn(e,n)&&(r=!0);let s=Bn(e,t,!1);return s&&r?{...s,typeOnly:!0}:s}c(xs,"specifierAfterExport");function Bn(e,t,n){for(;t<e.length;t+=1){if(e[t]===";")return;if(Q(e,"from",t))return Pe(e,X(e,t+4));if(n&&(e[t]==="'"||e[t]==='"'))return Pe(e,t);if(t>0&&(Q(e,"import",t)||Q(e,"export",t)))return}}c(Bn,"specifierInStaticStatement");function $s(e,t){for(t+=1;t<e.length;t+=1){let n=e[t];if(n==="\\")t+=1;else if(n==="`")return t}return e.length}c($s,"skipTemplateLiteral");function _s(e,t){let n=t-1;for(;n>=0&&/\s/.test(e[n]);)n-=1;if(e[n]===".")return;let r=X(e,t+7);if(e[r]!=="(")return;r=X(e,r+1);let s=Pe(e,r);return s?{...s,requireCall:!0}:void 0}c(_s,"specifierAfterRequire");function Fs(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r==="/"&&e[n+1]==="/"){if(n=e.indexOf(`
+`,n+2),n<0)break;continue}if(r==="/"&&e[n+1]==="*"){let a=e.indexOf("*/",n+2);if(a<0)break;n=a+1;continue}if(r==="`"){n=$s(e,n);continue}if(r==="'"||r==='"'){let a=Pe(e,n);a&&(n=a.offset+a.excerpt.length-1);continue}let s=r==="i"&&Q(e,"import",n)?ws(e,n):r==="e"&&Q(e,"export",n)?xs(e,n):r==="r"&&Q(e,"require",n)?_s(e,n):void 0;s&&(t.push(s),n=s.offset+s.excerpt.length-1)}return t}c(Fs,"moduleSpecifiers");function Xn(e,t){let n=[],r=[];for(let s of Fs(e.content)){let a=s.value;if(!a.startsWith(".")){if(s.typeOnly)continue;let m=Se(a);if(!m)continue;let h=e.content.slice(0,s.offset).split(`
+`).length;r.push({file:e.path,symbol:a,capability:m,evidence:{kind:"import",file:e.path,line:h,excerpt:s.excerpt}});continue}let i=e.content.slice(0,s.offset).split(`
+`).length,d={kind:"import",file:e.path,line:i,excerpt:s.excerpt},l=Ts(e.path,a,t);n.push({from:e.path,specifier:a,to:l?.path??null,resolution:l?"resolved":"unresolved",fromLayer:e.layer,toLayer:l?.layer??null,evidence:d})}return{edges:n,capabilityUses:r}}c(Xn,"moduleFactsFor");function Ts(e,t,n){let r=e.split("/");r.pop();for(let a of t.split("/"))a==="."||a===""||(a===".."?r.pop():r.push(a));let s=r.join("/");for(let a of[s,`${s}.ts`,`${s}.tsx`,`${s}.mts`,`${s}.cts`,`${s}/index.ts`,`${s}/index.tsx`]){let i=n.get(a);if(i)return i}}c(Ts,"resolveSpecifier");function Yn(e,t){let n=[];for(let r of e){if(!r.to||!r.fromLayer||!r.toLayer)continue;let s=Bt(t.rules,r.fromLayer,r.toLayer,{fromPath:r.from,toPath:r.to,layers:t.layers});s&&n.push({ruleId:`layer-dependency:${s.from}->${s.to}`,message:s.message??`${s.from} must not depend on ${s.to}.`,edge:r,evidence:r.evidence})}return n}c(Yn,"violationsFor");var Ns={code:"LEXICAL_EVIDENCE_INCOMPLETE",message:"Lexical compatibility mode cannot prove parse status, TypeScript/package/symlink resolution, or symbol-aware source-policy and safety evidence. Use the resolved candidate facts APIs for an authoritative verdict."};function Ls(e,t){return e.arkRules!==void 0&&Object.keys(e.arkRules).length>0||t.structure.length>0||t.invariants.length>0}c(Ls,"hasActiveArkRules");function Ps(e,t){return Ls(e,t)?U(T(Mn({config:e,arkRules:t,warnings:[]}))):U(T(wt(e)))}c(Ps,"policyHashFor");function _t(e,t,n){let r=typeof e=="string"?Dn(e,t):Ot(e,t),s=n?.arkRules??xe();return{...r,arkRules:s,policyHash:Ps(r.config,s)}}c(_t,"loadContract");function Ds(e){let t=_t(e.baseConfig,e.baseSource??"base ark.config.json",{arkRules:e.baseArkRules}),n=_t(e.candidateConfig,e.candidateSource??"candidate ark.config.json",{arkRules:e.candidateArkRules}),r=Gn(t.config,n.config,{baseArkRules:t.arkRules,candidateArkRules:n.arkRules,candidateInvariantCoverage:e.candidateInvariantCoverage}),s=r.findings.filter(d=>d.classification==="weakening"||d.classification==="judgment-required").map(d=>d.id).sort(),a=s.length>0,i=a&&zn(e.acknowledgement,{basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,findingIds:s});return{schemaVersion:r.schemaVersion,basePolicyHash:t.policyHash,candidatePolicyHash:n.policyHash,classification:r.classification,findings:r.findings,blockingFindingIds:s,requiresAcknowledgement:a,acknowledged:i,valid:!a||i}}c(Ds,"analyzePolicyDelta");function et(e){let t=e.files.map(R=>{let f=ye(R.path);return{path:f,content:R.content,contentHash:U(R.content),layer:Z(f,e.contract.config.layers)??null}}).sort((R,f)=>R.path.localeCompare(f.path)),n=new Map(t.map(R=>[R.path,R])),r=[],s=[];for(let R of t){let f=Xn(R,n);r.push(...f.edges),s.push(...f.capabilityUses)}let a=Yn(r,e.contract.config),i=new Map(e.contract.config.layers.map(R=>[R.name,R])),d=new Map(e.contract.config.layers.map(R=>[R.name,new Set(ke(R))]));for(let R of s){let f=n.get(R.file)?.layer;if(!f)continue;let p=i.get(f),u=Ce(R.symbol,p?.forbiddenGlobals??[]);if(u){a.push({ruleId:"FORBIDDEN_GLOBAL",message:`${f} must not use module "${R.symbol}" because it is the import form of forbidden global "${u}".`,symbol:R.symbol,evidence:R.evidence});continue}d.get(f)?.has(R.capability)&&a.push({ruleId:"CAPABILITY_VIOLATION",message:`${f} denies the ${R.capability} capability; found import of "${R.symbol}".`,capability:R.capability,symbol:R.symbol,evidence:R.evidence})}let l=t.length===0?"complete":"partial",m=l==="complete"?[]:[{...Ns}],h={schemaVersion:Kt,policyHash:e.contract.policyHash,compilerOptionsHash:U(T(e.compilerOptions??{})),files:t,layers:e.contract.config.layers.map(R=>R.name),edges:r,capabilityUses:s,violations:a};return{mode:"lexical-compatibility",completeness:l,completenessReasons:m,valid:l==="complete"&&a.length===0,ir:h}}c(et,"analyzeProject");function Ft(e){let t=new Map(e.files.map(n=>[ye(n.path),n]));for(let n of e.changes){let r=ye(n.path);"delete"in n&&n.delete?t.delete(r):"content"in n&&t.set(r,{path:r,content:n.content})}return et({contract:e.contract,files:[...t.values()],compilerOptions:e.compilerOptions})}c(Ft,"analyzeChange");function Ms(e){let t=`${e.evidence.file}:${e.evidence.line}`;if(!e.edge)return`${e.ruleId} at ${t}: ${e.message}`;let n=e.edge.to??e.edge.specifier;return`${e.ruleId} at ${t}: ${e.edge.from} imports ${n}. ${e.message}`}c(Ms,"explainViolation");function Zn(e){return U(T(e.map(({path:t,contentHash:n})=>({path:t,contentHash:n}))))}c(Zn,"analysisTreeHash");function Hs(e){let t=et(e),n=new Map(t.ir.files.map(u=>[u.path,u])),r=[],s=new Set,a=[];for(let u of e.changes){let y=u.path.replace(/\\/g,"/"),A=ye(u.path);if(!A||A===".."||A.startsWith("../")||y.startsWith("/")||/^[A-Za-z]:\//.test(y)||y.includes("\0")){a.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a safe, non-empty project-relative path."});continue}if(s.has(A)){a.push({ruleId:"DUPLICATE_CHANGE_PATH",file:A,line:1,message:`The atomic change set contains more than one operation for ${A}.`});continue}s.add(A),"delete"in u&&u.delete&&!n.has(A)&&a.push({ruleId:"DELETE_TARGET_MISSING",file:A,line:1,message:`Cannot delete ${A} because it is not present in the supplied base tree.`}),r.push("delete"in u&&u.delete?{path:A,delete:!0}:{path:A,content:"content"in u?u.content:""})}e.changes.length===0&&a.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});let i=Ft({...e,changes:r}),d=new Map(i.ir.files.map(u=>[u.path,u])),l=i.ir.violations.filter(u=>u.ruleId==="CAPABILITY_VIOLATION"||u.ruleId==="FORBIDDEN_GLOBAL").map(u=>{let y=d.get(u.evidence.file)?.layer;return{ruleId:u.ruleId,file:u.evidence.file,line:u.evidence.line,target:u.symbol,...u.capability?{capability:u.capability}:{},...y?{fromLayer:y}:{},edgeKind:"import",message:u.message}}),m=$e({config:e.contract.config,rules:e.contract.config.rules,files:i.ir.files.map(u=>u.path),contentViolations:l,edges:i.ir.edges.filter(u=>!!u.fromLayer).map(u=>({from:u.from,fromLayer:u.fromLayer,...u.to?{to:u.to}:{},...u.toLayer?{toLayer:u.toLayer}:{},line:u.evidence.line,kind:"import",...u.typeOnly?{typeOnly:!0}:{},...u.namedBindingsTypeOnly?{namedBindingsTypeOnly:!0}:{}}))}),h=r.map(u=>{let y=ye(u.path),A=n.get(y),E=d.get(y);return{path:y,operation:"delete"in u&&u.delete?"delete":A?"update":"create",...A?{beforeContentHash:A.contentHash}:{},...E?{candidateContentHash:E.contentHash}:{}}}).sort((u,y)=>u.path.localeCompare(y.path)),R=[...a,...m.violations].map(u=>({...u,nextAction:le(u)})),f=R.filter(u=>u.failsStrict!==!1),p=e.changeMap?Fe({changeMap:e.changeMap,changes:h,baseDependencies:t.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[]),candidateDependencies:i.ir.edges.flatMap(u=>u.to?[{from:u.from,to:u.to}]:[])}):void 0;return{schemaVersion:"1.0",mode:"lexical-compatibility",valid:t.completeness==="complete"&&i.valid&&f.length===0&&(p?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,compilerOptionsHash:i.ir.compilerOptionsHash,baseTreeHash:Zn(t.ir.files),candidateTreeHash:Zn(i.ir.files),baseCompleteness:t.completeness,candidateCompleteness:i.completeness,baseCompletenessReasons:t.completenessReasons,candidateCompletenessReasons:i.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...p?{convergence:p}:{},changes:h,violations:R,warnings:m.warnings}}c(Hs,"preflightChange");function Ks(e){let t=e.replace(/\\/g,"/");if(!t||t.startsWith("/")||/^[A-Za-z]:\//.test(t)||t.includes("\0"))return;let n=[];for(let s of t.split("/"))if(!(!s||s==="."))if(s===".."){if(n.length===0)return;n.pop()}else n.push(s);let r=n.join("/");return r&&r===t?r:void 0}c(Ks,"canonicalChangePath");function Us(e,t){return[["resolverIdentity",e.resolverIdentity,t.resolverIdentity],["compilerIdentity",e.compilerIdentity,t.compilerIdentity],["evidenceRequirementsHash",e.evidenceRequirementsHash,t.evidenceRequirementsHash],["projectPackageName",e.projectPackageName??"",t.projectPackageName??""]].filter(([,r,s])=>r!==s).map(([r,s,a])=>({ruleId:"FACTS_IDENTITY_MISMATCH",file:"<change-set>",line:1,field:r,before:s,candidate:a,message:`Base and candidate facts must use the same ${r}.`}))}c(Us,"identityViolations");function js(e,t,n,r){let s=n.get(t),a=r.get(t);return{path:t,operation:"delete"in e&&e.delete?"delete":s?"update":"create",...s?{beforeContentHash:s.contentHash}:{},...a?{candidateContentHash:a.contentHash}:{}}}c(js,"preparedChange");function Vs(e){let t=fe(e.baseFacts),n=fe(e.candidateFacts),r=Xe({contract:e.contract,facts:t}),s=Xe({contract:e.contract,facts:n}),a=new Map(t.files.map(p=>[p.path,p])),i=new Map(n.files.map(p=>[p.path,p])),d=Us(t,n),l=new Map,m=[];for(let p of e.changes){let u=Ks(p.path);if(!u){d.push({ruleId:"INVALID_CHANGE_PATH",file:"<change-set>",line:1,message:"Every change requires a canonical project-relative path."});continue}if(l.has(u)){d.push({ruleId:"DUPLICATE_CHANGE_PATH",file:u,line:1,message:`The atomic change set contains more than one operation for ${u}.`});continue}l.set(u,p);let y=a.get(u),A=i.get(u);if("delete"in p&&p.delete)y||d.push({ruleId:"DELETE_TARGET_MISSING",file:u,line:1,message:`Cannot delete ${u} because it is not present in the supplied base facts.`}),A&&d.push({ruleId:"CANDIDATE_DELETE_NOT_APPLIED",file:u,line:1,message:`Candidate facts still contain deleted file ${u}.`});else{let E="content"in p?p.content:"",v=U(E);A?A.contentHash!==v&&d.push({ruleId:"CANDIDATE_CONTENT_HASH_MISMATCH",file:u,line:1,expectedContentHash:v,candidateContentHash:A.contentHash,message:`Candidate facts for ${u} do not match the declared content.`}):d.push({ruleId:"CANDIDATE_CHANGE_MISSING",file:u,line:1,message:`Candidate facts do not contain changed file ${u}.`})}m.push(js(p,u,a,i))}e.changes.length===0&&d.push({ruleId:"CHANGE_SET_EMPTY",file:"<change-set>",line:1,message:"Atomic preflight requires at least one create, update, or delete."});for(let p of new Set([...a.keys(),...i.keys()])){if(l.has(p))continue;let u=a.get(p),y=i.get(p);u&&y&&T(u)===T(y)||d.push({ruleId:"UNDECLARED_CANDIDATE_CHANGE",file:p,line:1,message:`Candidate facts change ${p}, but the atomic change set does not declare it.`})}let h=e.changeMap?Fe({changeMap:e.changeMap,changes:m,baseDependencies:r.ir.edges.flatMap(p=>p.to?[{from:p.from,to:p.to}]:[]),candidateDependencies:s.ir.edges.flatMap(p=>p.to?[{from:p.from,to:p.to}]:[])}):void 0,R=[...d,...s.ir.violations].map(p=>({...p,nextAction:le(p)})),f=R.filter(p=>p.failsStrict!==!1);return{schemaVersion:"1.0",mode:"resolved-candidate-facts",valid:r.completeness==="complete"&&s.strictValid&&f.length===0&&(h?.structurallyConverged??!0),readOnly:!0,policyHash:e.contract.policyHash,resolverIdentity:n.resolverIdentity,compilerIdentity:n.compilerIdentity,compilerOptionsHash:n.compilerOptionsHash,tsconfigHash:n.tsconfigHash,baseCompilerOptionsHash:t.compilerOptionsHash,candidateCompilerOptionsHash:n.compilerOptionsHash,baseTsconfigHash:t.tsconfigHash,candidateTsconfigHash:n.tsconfigHash,evidenceRequirementsHash:n.evidenceRequirementsHash,baseFactsHash:t.factsHash,candidateFactsHash:n.factsHash,baseTreeHash:t.candidateTreeHash,candidateTreeHash:n.candidateTreeHash,baseCompleteness:r.completeness,candidateCompleteness:s.completeness,baseCompletenessReasons:r.completenessReasons,candidateCompletenessReasons:s.completenessReasons,...e.changeMap?{changeMapHash:e.changeMap.hash}:{},...h?{convergence:h}:{},changes:m.sort((p,u)=>p.path<u.path?-1:p.path>u.path?1:0),violations:R,warnings:s.ir.warnings}}c(Vs,"preflightResolvedChange");var Jn=new WeakSet;function Qn(e){if(!e||typeof e!="object"||Object.isFrozen(e))return e;for(let t of Object.values(e))Qn(t);return Object.freeze(e)}c(Qn,"deepFreeze");function $i(e){let t=Qn(Ue(e));return Jn.add(t),t}c($i,"createTrustedResolvedCandidateFacts");function _i(e){if(!Jn.has(e.facts))throw new Error("Trusted resolved analysis requires immutable in-process canonical facts.");return ht(e)}c(_i,"analyzeTrustedResolvedProject");export{lt as AMBIENT_CAPABILITY_ENTRIES,ot as CAPABILITY_IDS,ft as DEFAULT_INTENT_PREFIXES,Ht as RESOLVED_CANDIDATE_FACTS_SCHEMA,Re as RESOLVED_CANDIDATE_FACTS_SCHEMA_VERSION,ut as SOURCE_POLICY_MESSAGES,ct as ambientCoveredByForbiddenGlobals,Fe as analyzeArchitectureConvergence,Ft as analyzeChange,Ds as analyzePolicyDelta,et as analyzeProject,Xe as analyzeResolvedProject,_i as analyzeTrustedResolvedProject,Oe as capabilityForAmbientName,Se as capabilityForModuleSpecifier,gt as classifyPublishFacts,yt as collectAnalysisConfigWarnings,ps as collectCapabilityUses,It as collectForbiddenCapabilityUses,Ue as createResolvedCandidateFacts,$i as createTrustedResolvedCandidateFacts,kn as detectArchitectureCycles,U as deterministicHash,ke as effectiveCapabilityDeny,$e as evaluateArchitectureGraph,Ms as explainViolation,Et as extractSemanticDependencies,Ce as forbiddenGlobalForModuleSpecifier,ds as loadArchitectureChangeMap,_t as loadContract,fe as loadResolvedCandidateFacts,Xt as looksLikeArkIntent,sr as lowerForbiddenGlobal,Ve as loweredLayerCoverage,Hs as preflightChange,Vs as preflightResolvedChange,pt as resolveIntentLayer,Ke as resolvedFactsEvidenceRequirementsHash,T as stableSerialize};