arkgate 4.8.9 → 4.8.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/CHANGELOG.md +80 -3
  2. package/README.md +4 -4
  3. package/bin/ark-check-runtime.mjs +2 -2
  4. package/bin/ark.mjs +18 -10
  5. package/bin/lib/analysis-engine.mjs +6 -6
  6. package/bin/lib/architecture-scan.mjs +91 -4
  7. package/bin/lib/ark-order-facts.mjs +11 -4
  8. package/bin/lib/arkrule-file-hints.mjs +255 -20
  9. package/bin/lib/arkrules-sensors.mjs +364 -68
  10. package/bin/lib/baseline-key.mjs +45 -1
  11. package/bin/lib/config-contract.mjs +9 -3
  12. package/bin/lib/diagnostic-catalog.mjs +1 -0
  13. package/bin/lib/doctor-human.mjs +3 -3
  14. package/bin/lib/doctor-next-actions.mjs +3 -1
  15. package/bin/lib/field-install.mjs +23 -2
  16. package/bin/lib/first-run-help.mjs +69 -5
  17. package/bin/lib/resolved-candidate-facts.mjs +82 -1
  18. package/bin/lib/rules-inventory.mjs +7 -3
  19. package/bin/lib/upstream-report.mjs +330 -0
  20. package/bin/lib/violations.mjs +51 -15
  21. package/dist/{diagnosticCatalog-BrkOiwCk.d.ts → diagnosticCatalog-biferT4R.d.ts} +9 -3
  22. package/dist/eslint/index.cjs +4 -7
  23. package/dist/eslint/index.js +4 -7
  24. package/dist/index.cjs +28 -31
  25. package/dist/index.d.ts +7 -4
  26. package/dist/index.js +28 -31
  27. package/dist/nestjs/index.cjs +1 -1
  28. package/dist/nestjs/index.js +1 -1
  29. package/dist/runtime/index.cjs +11 -11
  30. package/dist/runtime/index.d.ts +1 -1
  31. package/dist/runtime/index.js +11 -11
  32. package/docs/README.md +3 -3
  33. package/docs/agent-guide.md +25 -1
  34. package/docs/ai-gates.md +8 -0
  35. package/docs/brownfield-adoption.md +30 -0
  36. package/docs/configuration.md +14 -1
  37. package/docs/diagnostics.md +10 -0
  38. package/docs/package-surface.md +4 -3
  39. package/docs/use.md +11 -0
  40. package/package.json +1 -1
  41. package/schemas/ark.config.schema.json +3 -2
  42. package/server.json +2 -2
  43. package/templates/agent-skills/ark-explore/SKILL.md +22 -1
  44. package/templates/skills/ark-explore.md +22 -1
@@ -16,8 +16,12 @@ import { baselineKeysFromDocument, baselineRecordsDocument } from './team-parlia
16
16
  import { toAdapterDiagnostic } from './adapter-contract.mjs';
17
17
  export { baselineKey, baselineOccurrenceKeys };
18
18
 
19
- const BASELINE_NOTE =
20
- 'Frozen ark-check violations (one record per edge). Only NEW keys vs the merge-base fail --against / --baseline. Regenerate with: ark-check --update-baseline';
19
+ /** Real regenerate flags: freeze-refuse needs --force; law PR needs --contract-session; stewards[] needs --author. */
20
+ export const REGENERATE_BASELINE_COMMAND =
21
+ 'ark-check --update-baseline --force --contract-session --author <steward>';
22
+
23
+ export const BASELINE_NOTE =
24
+ `Frozen ark-check violations (one record per edge). Only NEW keys vs the merge-base fail --against / --baseline. Regenerate with: ${REGENERATE_BASELINE_COMMAND} (--author when stewards[] is set)`;
21
25
 
22
26
  export function readBaseline(root, baselinePath) {
23
27
  const fullPath = path.isAbsolute(baselinePath) ? baselinePath : path.join(root, baselinePath);
@@ -76,13 +80,34 @@ export function printViolation(violation) {
76
80
  export const CONCENTRATION_MIN_VIOLATIONS = 10;
77
81
  export const CONCENTRATION_SHARE = 0.9;
78
82
 
83
+ /** Sensor id for STRUCTURE findings. Orchestration-only is code debt, not a missing toLayer. */
84
+ export function violationSensorId(violation) {
85
+ if (typeof violation?.sensor === 'string' && violation.sensor.trim()) return violation.sensor.trim();
86
+ if (typeof violation?.arkruleId === 'string' && violation.arkruleId.trim()) return violation.arkruleId.trim();
87
+ return undefined;
88
+ }
89
+
79
90
  export function violationEdge(violation) {
80
91
  if (violation.ruleId === 'CIRCULAR_DEPENDENCY') return 'circular dependency';
81
92
  if (violation.ruleId === 'FORBIDDEN_GLOBAL') return `${violation.fromLayer ?? '?'} → ambient global`;
82
93
  if (violation.fromLayer && violation.toLayer) return `${violation.fromLayer} → ${violation.toLayer}`;
94
+ const sensor = violationSensorId(violation);
95
+ if (sensor) return sensor;
83
96
  return violation.ruleId;
84
97
  }
85
98
 
99
+ /** Layer-import arrows can mean a contract bug. Structural-sensor blobs are code debt. */
100
+ export function isContractConcentrationEdge(edge) {
101
+ return typeof edge === 'string' && edge.includes(' → ');
102
+ }
103
+
104
+ export function isContractStyleViolation(violation) {
105
+ if (violationSensorId(violation)) return false;
106
+ if (violation.ruleId === 'CIRCULAR_DEPENDENCY') return true;
107
+ if (violation.ruleId === 'FORBIDDEN_GLOBAL') return true;
108
+ return Boolean(violation.fromLayer && violation.toLayer);
109
+ }
110
+
86
111
  // The directory the offending import lands in — the signal for "where does this edge go?".
87
112
  // For a LAYER_IMPORT_VIOLATION the target is a resolved file path; cluster by its dir prefix
88
113
  // so `kernel/internal/x` and `kernel/internal/y` collapse to one "into kernel/internal/".
@@ -100,27 +125,35 @@ export function summarizeViolations(violations) {
100
125
  for (const violation of violations) {
101
126
  if (violation.typeOnly) typeOnly += 1;
102
127
  const key = violationEdge(violation);
103
- const entry = byEdge.get(key) ?? { edge: key, count: 0, typeOnly: 0, targets: new Map() };
128
+ const entry = byEdge.get(key) ?? {
129
+ edge: key,
130
+ count: 0,
131
+ typeOnly: 0,
132
+ targets: new Map(),
133
+ contractStyle: true,
134
+ };
104
135
  entry.count += 1;
105
136
  if (violation.typeOnly) entry.typeOnly += 1;
137
+ if (!isContractStyleViolation(violation)) entry.contractStyle = false;
106
138
  const subtree = violationTargetSubtree(violation);
107
139
  if (subtree) entry.targets.set(subtree, (entry.targets.get(subtree) ?? 0) + 1);
108
140
  byEdge.set(key, entry);
109
141
  }
110
- const edges = [...byEdge.values()]
111
- .map((entry) => ({
112
- edge: entry.edge,
113
- count: entry.count,
114
- typeOnly: entry.typeOnly,
115
- topTargets: [...entry.targets.entries()]
116
- .sort((a, b) => b[1] - a[1])
117
- .slice(0, 4)
118
- .map(([dir, count]) => ({ dir, count })),
119
- }))
120
- .sort((a, b) => b.count - a.count);
142
+ const ranked = [...byEdge.values()].sort((a, b) => b.count - a.count);
143
+ const edges = ranked.map((entry) => ({
144
+ edge: entry.edge,
145
+ count: entry.count,
146
+ typeOnly: entry.typeOnly,
147
+ topTargets: [...entry.targets.entries()]
148
+ .sort((a, b) => b[1] - a[1])
149
+ .slice(0, 4)
150
+ .map(([dir, count]) => ({ dir, count })),
151
+ }));
121
152
  const total = violations.length;
122
153
  const dominant = edges[0];
123
154
  const dominantShare = total > 0 && dominant ? dominant.count / total : 0;
155
+ const contractConcentration =
156
+ Boolean(ranked[0]?.contractStyle) && isContractConcentrationEdge(ranked[0]?.edge);
124
157
  return {
125
158
  total,
126
159
  // Value edges are real runtime coupling; type-only edges (erased at compile time) are
@@ -130,7 +163,10 @@ export function summarizeViolations(violations) {
130
163
  edges,
131
164
  dominant: dominant ? dominant.edge : undefined,
132
165
  dominantShare,
133
- concentrated: total >= CONCENTRATION_MIN_VIOLATIONS && dominantShare >= CONCENTRATION_SHARE,
166
+ concentrated:
167
+ total >= CONCENTRATION_MIN_VIOLATIONS &&
168
+ dominantShare >= CONCENTRATION_SHARE &&
169
+ contractConcentration,
134
170
  };
135
171
  }
136
172
 
@@ -409,7 +409,7 @@ declare const ARK_ANALYSIS_RESULT_SCHEMA: {
409
409
  };
410
410
 
411
411
  /** ArkGate library version — single source of truth. */
412
- declare const version = "4.8.9";
412
+ declare const version = "4.8.10";
413
413
 
414
414
  /**
415
415
  * AI Code Gate (basic).
@@ -1924,12 +1924,18 @@ declare function evaluateArkRuleSensors(input: EvaluateArkRuleSensorsInput): Ark
1924
1924
  * Rules without appliesTo (whole-layer) never emit this signal.
1925
1925
  */
1926
1926
  declare function collectEmptyAppliesToFindings(arkRules: EffectiveArkRules, files: readonly string[]): ArkRuleSensorViolation[];
1927
+ /** Optional resolved-import facts when the collector already classified the specifier. */
1928
+ type ResolvedPersistenceImportFact = {
1929
+ specifier?: string;
1930
+ resolvedFile?: string;
1931
+ layer?: string | null;
1932
+ };
1927
1933
  /**
1928
1934
  * Pure Tooling/Domain heuristic for orchestration-only / thin-adapter fileHints.
1929
1935
  * Prefers false negatives over false positives (ADR 0013 discipline).
1930
1936
  * Returns null when neither flag is set (callers may omit the path).
1931
1937
  */
1932
- declare function deriveArkRuleFileHints(_file: string, content: string): {
1938
+ declare function deriveArkRuleFileHints(_file: string, content: string, resolvedImports?: readonly ResolvedPersistenceImportFact[]): {
1933
1939
  orchestrationHeavy?: boolean;
1934
1940
  adapterThick?: boolean;
1935
1941
  persistenceWrite?: boolean;
@@ -1937,7 +1943,7 @@ declare function deriveArkRuleFileHints(_file: string, content: string): {
1937
1943
  /**
1938
1944
  * Build fileHints map from path→content. Omits paths with no flags (sparse map).
1939
1945
  */
1940
- declare function buildArkRuleFileHints(fileContents: Readonly<Record<string, string>>): Record<string, {
1946
+ declare function buildArkRuleFileHints(fileContents: Readonly<Record<string, string>>, resolvedImportsByFile?: Readonly<Record<string, readonly ResolvedPersistenceImportFact[]>>): Record<string, {
1941
1947
  orchestrationHeavy?: boolean;
1942
1948
  adapterThick?: boolean;
1943
1949
  persistenceWrite?: boolean;
@@ -1,8 +1,5 @@
1
- "use strict";var zt=Object.create;var V=Object.defineProperty;var qt=Object.getOwnPropertyDescriptor;var Zt=Object.getOwnPropertyNames;var Yt=Object.getPrototypeOf,Xt=Object.prototype.hasOwnProperty;var c=(e,t)=>V(e,"name",{value:t,configurable:!0});var Jt=(e,t)=>{for(var r in t)V(e,r,{get:t[r],enumerable:!0})},Ce=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Zt(t))!Xt.call(e,s)&&s!==r&&V(e,s,{get:()=>t[s],enumerable:!(n=qt(t,s))||n.enumerable});return e};var J=(e,t,r)=>(r=e!=null?zt(Yt(e)):{},Ce(t||!e||!e.__esModule?V(r,"default",{value:e,enumerable:!0}):r,e)),Qt=e=>Ce(V({},"__esModule",{value:!0}),e);var Cn={};Jt(Cn,{default:()=>On,findConfigPath:()=>$,globToRegExp:()=>x,isEdgeDenied:()=>Me,layerForRelativePath:()=>E,loadArkConfig:()=>U,noArkOrderGenericUpdate:()=>Bt,noArkOrderKernelInDomain:()=>Vt,noArkRunDirectNew:()=>Ht,noArkRunKernelInDomain:()=>Ut,noArkRunTransportBypass:()=>jt,noDeniedCapabilities:()=>$t,noDomainInfraImports:()=>Ft,noForbiddenGlobals:()=>Mt,noRawEventPublish:()=>Kt,patternSpecificity:()=>de,plugin:()=>ae,readTsconfigPathAliases:()=>Ct,requirePublishSource:()=>Pt,resolveImportSpecifier:()=>Ie,resolveRelativeImport:()=>wt});module.exports=Qt(Cn);var O=J(require("fs"),1),m=J(require("path"),1);var we=new Map;function ve(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(ve,"escapeLiteral");function Q(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}c(Q,"normalizeGlobSeparators");function er(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}c(er,"bracesBalanced");function x(e){let t=we.get(e);if(t)return t;let r=Q(e),n=er(r),s="",o=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=ve(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",o+=1):l==="}"&&n&&o>0?(s+=")",o-=1):l===","&&n&&o>0?s+="|":s+=ve(l)}let i=new RegExp(`^${s}$`);return we.set(e,i),i}c(x,"globToRegExp");function tr(e){return Q(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}c(tr,"concreteGlobSegments");function de(e,t){let r=Q(String(e)),n=tr(r),s=r.replace(/\*/g,"").length,o=n.length*1e4+s;if(t==null||t==="")return o;let i=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let a=0,l=-1;for(let u of n){let d=-1;for(let p=a;p<i.length;p+=1)if(i[p]===u){d=p;break}if(d<0)return o;l=d,a=d+1}return(l+1)*1e6+n.length*1e4+s}c(de,"patternSpecificity");function E(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(i=>x(i).test(r))){for(let i of o.patterns??[])if(x(i).test(r)){let a=de(i,r);a>s&&(s=a,n=o.name)}}return n}c(E,"layerForRelativePath");function Le(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}c(Le,"sliceIdForPath");function rr(e){let t=new Set;for(let r of e??[]){let s=Q(String(r)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let i=s[o];if((i==="**"||i==="*")&&o>0){let a=s[o-1];a&&!a.includes("*")&&!a.includes("{")&&!a.includes("}")&&t.add(a)}}}return[...t]}c(rr,"inferSliceFoldersFromPatterns");function nr(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return rr(n?.patterns)}c(nr,"resolveSliceFolders");function Te(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}c(Te,"normalizeSegments");function Ke(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}c(Ke,"trimTrailingSlashes");var sr=["src","app"];function or(e){let t=Ke(e.replace(/^[./]+/,""));return t==="*"||t==="**"}c(or,"isBlanketRoot");function De(e,t){if(!e||!t?.length)return!1;let r=String(e).split(/[/\\]/).join("/"),n=r.toLowerCase(),s=Te(r);for(let o of t){if(typeof o!="string"||o.length===0||or(o))continue;if(o.includes("*")){let l=Ke(o.toLowerCase());if(x(l).test(n)||x(`${l}/**`).test(n))return!0;continue}let i=Te(o);if(i.length===0)continue;let a=sr.includes(s[0])&&i[0]!==s[0]?[0,1]:[0];for(let l of a){if(l+i.length>s.length)continue;let u=!0;for(let d=0;d<i.length;d+=1)if(s[l+d]!==i[d]){u=!1;break}if(u)return!0}}return!1}c(De,"pathUnderSharedRoot");function Fe(e,t){let r=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!r)return!1;let n=t.toLowerCase();return r===n?!0:!r.includes("/")&&n.endsWith(`/${r}`)}c(Fe,"sliceMatchesDeclaration");function ir(e,t,r){return!e?.length||!t||!r?!1:e.some(n=>n&&typeof n.from=="string"&&typeof n.to=="string"&&Fe(n.from,t)&&Fe(n.to,r))}c(ir,"crossSliceEdgeAllowed");function ar(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let r=!!e.toSlice||e.toShared===!0;return!t||!r?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}c(ar,"peerIsolationDecision");function Pe(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let r=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${r.length>0?` (${r.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}c(Pe,"peerIsolationDenyExplanation");function lr(e,t,r,n){return ue(e,t,r,n)?.rule}c(lr,"findDeniedEdgeRule");function ue(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let o=n?.fromPath,i=n?.toPath,a=nr(s,t,n?.layers),l=o?Le(o,a):void 0,u=i?Le(i,a):void 0,d=ar({fromPath:o,toPath:i,folderCount:a.length,fromSlice:l,toSlice:u,fromShared:!l&&De(o,s.sharedRoots),toShared:!u&&De(i,s.sharedRoots),crossSliceAllowed:ir(s.allowedCrossSlice,l,u)});if(d.denied)return{rule:s,peerIsolationReason:d.reason,fromSlice:l,toSlice:u};continue}if(t!==r)return{rule:s}}}c(ue,"findDeniedEdgeDecision");function Me(e,t,r,n){return lr(e,t,r,n)!==void 0}c(Me,"isEdgeDenied");var cr=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function dr(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:cr,...t]}c(dr,"scanExcludePatterns");function $e(e,t){let r=String(e).split(/[/\\]/).join("/");return dr(t).some(n=>x(n).test(r))}c($e,"isScanExcludedRelative");var Ue=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),ur=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),Dn=Object.freeze(Object.keys(ur).sort()),pe=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),pr=Object.freeze({process:Object.freeze(["process","node:process"])});function He(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=pe[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=pe[n];if(s)return s;let o=e.indexOf("/",r+1);return o<0?null:pe[e.slice(0,o)]??null}c(He,"capabilityForModuleSpecifier");function fe(e,t){for(let r of t)if(pr[r]?.includes(e))return r;return null}c(fe,"forbiddenGlobalForModuleSpecifier");function je(e){if(e?.pure===!0)return[...Ue].sort();let r=(e?.capabilities?.deny??[]).filter(n=>Ue.includes(n));return[...new Set(r)].sort()}c(je,"effectiveCapabilityDeny");var T={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Ve={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...T,default:[]},kernelRoots:{...T},managedLayers:{...T,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},Be={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...T,default:[]},managedLayers:{...T,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...T,default:[]},appliesTo:{...T,default:[]}}};function B(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(B,"isObject");function Ge(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let r of e.layers)B(r)&&typeof r.name=="string"&&r.name.length>0&&t.add(r.name);return t}c(Ge,"declaredLayerNames");function We(e){if(!B(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}c(We,"defaultedArkRun");function ze(e){if(!B(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}c(ze,"defaultedArkOrder");function qe(e,t){let r=e.arkRun;if(r===void 0||!B(r))return;let n=Ge(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((o,i)=>{typeof o=="string"&&o.length>0&&!n.has(o)&&t.push({path:`$.arkRun.managedLayers[${i}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),r.mode==="enforced"){let o=r.kernelRoots??r.compositionRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:r.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(qe,"validateArkRunExtra");function Ze(e,t){let r=e.arkOrder;if(r===void 0||!B(r))return;let n=Ge(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((o,i)=>{typeof o=="string"&&o.length>0&&!n.has(o)&&t.push({path:`$.arkOrder.managedLayers[${i}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),r.mode==="enforced"){let o=r.planeRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(Ze,"validateArkOrderExtra");var I="1.3",ge="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",Ye=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],fr=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function gr(){let e=[];for(let t of Ye)for(let r of Ye)t===r||fr.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}c(gr,"createDefaultRules");var Je=gr(),me=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],S={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Xe={$schema:"https://json-schema.org/draft/2020-12/schema",$id:ge,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:ge,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:I,default:I},name:{type:"string",minLength:1},include:{...S,minItems:1,default:["src"]},exclude:{...S,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Je,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...S,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...S,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...S,minItems:1},exclude:S,intentPrefixes:S,description:{type:"string",minLength:1},forbiddenGlobals:S,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...S,minItems:1},sharedRoots:{...S,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget; coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant.",properties:{testGlobs:{...S,minItems:1},maxFiles:{type:"integer",minimum:1},coverageRoots:{...S,minItems:1}}},arkRun:Ve,arkOrder:Be}},N=class extends Error{static{c(this,"ArkConfigValidationError")}issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
1
+ "use strict";var Gt=Object.create;var H=Object.defineProperty;var Wt=Object.getOwnPropertyDescriptor;var zt=Object.getOwnPropertyNames;var qt=Object.getPrototypeOf,Zt=Object.prototype.hasOwnProperty;var c=(e,t)=>H(e,"name",{value:t,configurable:!0});var Yt=(e,t)=>{for(var r in t)H(e,r,{get:t[r],enumerable:!0})},_e=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of zt(t))!Zt.call(e,s)&&s!==r&&H(e,s,{get:()=>t[s],enumerable:!(n=Wt(t,s))||n.enumerable});return e};var Y=(e,t,r)=>(r=e!=null?Gt(qt(e)):{},_e(t||!e||!e.__esModule?H(r,"default",{value:e,enumerable:!0}):r,e)),Xt=e=>_e(H({},"__esModule",{value:!0}),e);var Vn={};Yt(Vn,{default:()=>jn,findConfigPath:()=>$,globToRegExp:()=>x,isEdgeDenied:()=>Pe,layerForRelativePath:()=>E,loadArkConfig:()=>U,noArkOrderGenericUpdate:()=>Bt,noArkOrderKernelInDomain:()=>Vt,noArkRunDirectNew:()=>Ht,noArkRunKernelInDomain:()=>Ut,noArkRunTransportBypass:()=>jt,noDeniedCapabilities:()=>$t,noDomainInfraImports:()=>Ft,noForbiddenGlobals:()=>Mt,noRawEventPublish:()=>Pt,patternSpecificity:()=>ce,plugin:()=>ie,readTsconfigPathAliases:()=>wt,requirePublishSource:()=>Kt,resolveImportSpecifier:()=>Ie,resolveRelativeImport:()=>Ct});module.exports=Xt(Vn);var O=Y(require("fs"),1),m=Y(require("path"),1);var Oe=new Map;function we(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(we,"escapeLiteral");function X(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}c(X,"normalizeGlobSeparators");function Jt(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}c(Jt,"bracesBalanced");function x(e){let t=Oe.get(e);if(t)return t;let r=X(e),n=Jt(r),s="",o=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=we(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",o+=1):l==="}"&&n&&o>0?(s+=")",o-=1):l===","&&n&&o>0?s+="|":s+=we(l)}let i=new RegExp(`^${s}$`);return Oe.set(e,i),i}c(x,"globToRegExp");function Qt(e){return X(String(e)).split("/").filter(Boolean).filter(r=>r!=="**"&&r!=="*"&&!r.includes("*")&&!r.includes("?")&&!r.includes("{")&&!r.includes("["))}c(Qt,"concreteGlobSegments");function ce(e,t){let r=X(String(e)),n=Qt(r),s=r.replace(/\*/g,"").length,o=n.length*1e4+s;if(t==null||t==="")return o;let i=String(t).split(/[/\\]/).filter(Boolean);if(n.length===0)return s;let a=0,l=-1;for(let p of n){let u=-1;for(let d=a;d<i.length;d+=1)if(i[d]===p){u=d;break}if(u<0)return o;l=u,a=u+1}return(l+1)*1e6+n.length*1e4+s}c(ce,"patternSpecificity");function E(e,t){let r=String(e).split(/[/\\]/).join("/"),n,s=-1;for(let o of t??[])if(!(o.exclude??[]).some(i=>x(i).test(r))){for(let i of o.patterns??[])if(x(i).test(r)){let a=ce(i,r);a>s&&(s=a,n=o.name)}}return n}c(E,"layerForRelativePath");function Ce(e,t){if(!t?.length)return;let r=String(e).split(/[/\\]/).filter(Boolean),n=new Set(t.map(s=>String(s).toLowerCase()));for(let s=0;s<r.length-1;s+=1)if(n.has(r[s].toLowerCase()))return`${r[s].toLowerCase()}/${r[s+1].toLowerCase()}`}c(Ce,"sliceIdForPath");function er(e){let t=new Set;for(let r of e??[]){let s=X(String(r)).split("/").filter(Boolean);for(let o=0;o<s.length;o+=1){let i=s[o];if((i==="**"||i==="*")&&o>0){let a=s[o-1];a&&!a.includes("*")&&!a.includes("{")&&!a.includes("}")&&t.add(a)}}}return[...t]}c(er,"inferSliceFoldersFromPatterns");function tr(e,t,r){if(Array.isArray(e.sliceFolders)&&e.sliceFolders.length>0)return e.sliceFolders.filter(s=>typeof s=="string"&&s.length>0);let n=(r??[]).find(s=>s.name===t);return er(n?.patterns)}c(tr,"resolveSliceFolders");function ve(e){return String(e).split(/[/\\]/).filter(t=>!!t&&t!==".").map(t=>t.toLowerCase())}c(ve,"normalizeSegments");function De(e){let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)}c(De,"trimTrailingSlashes");var rr=["src","app"];function nr(e){let t=De(e.replace(/^[./]+/,""));return t==="*"||t==="**"}c(nr,"isBlanketRoot");function Te(e,t){if(!e||!t?.length)return!1;let r=String(e).split(/[/\\]/).join("/"),n=r.toLowerCase(),s=ve(r);for(let o of t){if(typeof o!="string"||o.length===0||nr(o))continue;if(o.includes("*")){let l=De(o.toLowerCase());if(x(l).test(n)||x(`${l}/**`).test(n))return!0;continue}let i=ve(o);if(i.length===0)continue;let a=rr.includes(s[0])&&i[0]!==s[0]?[0,1]:[0];for(let l of a){if(l+i.length>s.length)continue;let p=!0;for(let u=0;u<i.length;u+=1)if(s[l+u]!==i[u]){p=!1;break}if(p)return!0}}return!1}c(Te,"pathUnderSharedRoot");function Le(e,t){let r=String(e).split(/[/\\]/).filter(Boolean).join("/").toLowerCase();if(!r)return!1;let n=t.toLowerCase();return r===n?!0:!r.includes("/")&&n.endsWith(`/${r}`)}c(Le,"sliceMatchesDeclaration");function sr(e,t,r){return!e?.length||!t||!r?!1:e.some(n=>n&&typeof n.from=="string"&&typeof n.to=="string"&&Le(n.from,t)&&Le(n.to,r))}c(sr,"crossSliceEdgeAllowed");function or(e){if(!e.fromPath)return{denied:!0,reason:"missing-path"};if(e.folderCount<=0)return{denied:!0,reason:"no-slice-folders"};let t=!!e.fromSlice||e.fromShared===!0;if(!e.toPath)return t?e.fromSlice?{denied:!0,reason:"missing-path"}:{denied:!1}:{denied:!0,reason:"unclassifiable-path"};let r=!!e.toSlice||e.toShared===!0;return!t||!r?{denied:!0,reason:"unclassifiable-path"}:!e.fromSlice||!e.toSlice?{denied:!1}:e.fromSlice===e.toSlice?{denied:!1}:e.crossSliceAllowed?{denied:!1}:{denied:!0,reason:"cross-slice"}}c(or,"peerIsolationDecision");function Fe(e,t){switch(e){case"cross-slice":return`cross-slice edge ${t.fromSlice??"?"} \u2192 ${t.toSlice??"?"}. Extract the shared code, use events/ports across slices, or declare the edge in the rule's allowedCrossSlice.`;case"unclassifiable-path":{let r=[t.fromSlice?void 0:t.fromPath,t.toSlice?void 0:t.toPath].filter(s=>!!s);return`unclassifiable path${r.length>0?` (${r.join(", ")})`:""} \u2014 ArkGate cannot place it in a slice, so it cannot prove this is not a cross-slice edge. Move it into a slice, or declare its root in the rule's sharedRoots.`}case"no-slice-folders":return"no slice folders \u2014 peerIsolation is on but no slice folder resolves from the rule or the layer patterns. Set sliceFolders on the rule.";default:return"no path evidence for this edge \u2014 peerIsolation needs the importer and importee paths."}}c(Fe,"peerIsolationDenyExplanation");function ir(e,t,r,n){return ue(e,t,r,n)?.rule}c(ir,"findDeniedEdgeRule");function ue(e,t,r,n){for(let s of e??[])if(!(s.from!==t||s.to!==r)&&s.allowed===!1){if(s.peerIsolation){let o=n?.fromPath,i=n?.toPath,a=tr(s,t,n?.layers),l=o?Ce(o,a):void 0,p=i?Ce(i,a):void 0,u=or({fromPath:o,toPath:i,folderCount:a.length,fromSlice:l,toSlice:p,fromShared:!l&&Te(o,s.sharedRoots),toShared:!p&&Te(i,s.sharedRoots),crossSliceAllowed:sr(s.allowedCrossSlice,l,p)});if(u.denied)return{rule:s,peerIsolationReason:u.reason,fromSlice:l,toSlice:p};continue}if(t!==r)return{rule:s}}}c(ue,"findDeniedEdgeDecision");function Pe(e,t,r,n){return ir(e,t,r,n)!==void 0}c(Pe,"isEdgeDenied");var ar=["**/*.gen.ts","**/*.gen.tsx","**/*.generated.ts","**/*.generated.tsx"];function lr(e){let t=Array.isArray(e?.exclude)?e.exclude.filter(n=>typeof n=="string"):[];return[...e?.excludeGenerated===!1?[]:ar,...t]}c(lr,"scanExcludePatterns");function Ke(e,t){let r=String(e).split(/[/\\]/).join("/");return lr(t).some(n=>x(n).test(r))}c(Ke,"isScanExcludedRelative");var Me=Object.freeze(["network","filesystem","clock","randomness","environment","process","persistence"]),cr=Object.freeze({fetch:"network",XMLHttpRequest:"network",Date:"clock","Date.now":"clock","Math.random":"randomness","process.env":"environment",process:"process"}),zn=Object.freeze(Object.keys(cr).sort()),de=Object.freeze({fs:"filesystem","node:fs":"filesystem","fs/promises":"filesystem","node:fs/promises":"filesystem","fs-extra":"filesystem","graceful-fs":"filesystem",memfs:"filesystem",chokidar:"filesystem",http:"network",https:"network",http2:"network",net:"network",tls:"network",dgram:"network",dns:"network","node:http":"network","node:https":"network","node:http2":"network","node:net":"network","node:tls":"network","node:dgram":"network","node:dns":"network",axios:"network",undici:"network","node-fetch":"network",got:"network",ky:"network",superagent:"network",ws:"network",process:"process","node:process":"process",child_process:"process","node:child_process":"process","@prisma/client":"persistence",prisma:"persistence",pg:"persistence",mysql:"persistence",mysql2:"persistence",mongodb:"persistence",mongoose:"persistence",sqlite3:"persistence","better-sqlite3":"persistence",redis:"persistence",ioredis:"persistence",typeorm:"persistence",knex:"persistence","drizzle-orm":"persistence",sequelize:"persistence",kysely:"persistence","@supabase/supabase-js":"persistence"}),ur=Object.freeze({process:Object.freeze(["process","node:process"])});function $e(e){if(!e||e.startsWith(".")||e.startsWith("/"))return null;let t=de[e];if(t)return t;let r=e.indexOf("/");if(r<0)return null;let n=e.slice(0,r),s=de[n];if(s)return s;let o=e.indexOf("/",r+1);return o<0?null:de[e.slice(0,o)]??null}c($e,"capabilityForModuleSpecifier");function pe(e,t){for(let r of t)if(ur[r]?.includes(e))return r;return null}c(pe,"forbiddenGlobalForModuleSpecifier");function Ue(e){if(e?.pure===!0)return[...Me].sort();let r=(e?.capabilities?.deny??[]).filter(n=>Me.includes(n));return[...new Set(r)].sort()}c(Ue,"effectiveCapabilityDeny");var T={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},He={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},compositionRoots:{...T,default:[]},kernelRoots:{...T},managedLayers:{...T,default:[]},requireDeclarations:{type:"boolean",default:!0},ignoreDirectNewForErrors:{type:"boolean",default:!0}}},je={type:"object",additionalProperties:!1,properties:{mode:{type:"string",enum:["advisory","enforced"],default:"advisory"},planeRoots:{...T,default:[]},managedLayers:{...T,default:[]},maxXiKeys:{type:"integer",minimum:1,default:7},xiKeys:{...T,default:[]},appliesTo:{...T,default:[]}}};function j(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(j,"isObject");function Ve(e){let t=new Set;if(!Array.isArray(e.layers))return t;for(let r of e.layers)j(r)&&typeof r.name=="string"&&r.name.length>0&&t.add(r.name);return t}c(Ve,"declaredLayerNames");function Be(e){if(!j(e))return e;let t={mode:e.mode===void 0?"advisory":e.mode,compositionRoots:e.compositionRoots===void 0?[]:e.compositionRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,requireDeclarations:e.requireDeclarations===void 0?!0:e.requireDeclarations};return e.kernelRoots!==void 0&&(t.kernelRoots=e.kernelRoots),e.ignoreDirectNewForErrors!==void 0&&(t.ignoreDirectNewForErrors=e.ignoreDirectNewForErrors),{...e,...t}}c(Be,"defaultedArkRun");function Ge(e){if(!j(e))return e;let t=typeof e.maxXiKeys=="number"&&e.maxXiKeys>0?e.maxXiKeys:7;return{...e,mode:e.mode===void 0?"advisory":e.mode,planeRoots:e.planeRoots===void 0?[]:e.planeRoots,managedLayers:e.managedLayers===void 0?[]:e.managedLayers,maxXiKeys:t,xiKeys:e.xiKeys===void 0?[]:e.xiKeys}}c(Ge,"defaultedArkOrder");function We(e,t){let r=e.arkRun;if(r===void 0||!j(r))return;let n=Ve(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((o,i)=>{typeof o=="string"&&o.length>0&&!n.has(o)&&t.push({path:`$.arkRun.managedLayers[${i}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),r.mode==="enforced"){let o=r.kernelRoots??r.compositionRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:r.kernelRoots!==void 0?"$.arkRun.kernelRoots":"$.arkRun.compositionRoots",message:"ARKRUN_MISSING_ROOT: enforced mode requires at least one kernel root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkRun.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(We,"validateArkRunExtra");function ze(e,t){let r=e.arkOrder;if(r===void 0||!j(r))return;let n=Ve(e),s=r.managedLayers;if(Array.isArray(s)&&s.forEach((o,i)=>{typeof o=="string"&&o.length>0&&!n.has(o)&&t.push({path:`$.arkOrder.managedLayers[${i}]`,message:`layer ${JSON.stringify(o)} is not declared in layers[]`})}),r.mode==="enforced"){let o=r.planeRoots;(!Array.isArray(o)||o.length===0)&&t.push({path:"$.arkOrder.planeRoots",message:"ARKORDER_MISSING_PLANE: enforced mode requires at least one plane root"}),(!Array.isArray(s)||s.length===0)&&t.push({path:"$.arkOrder.managedLayers",message:"enforced mode requires at least one managed layer"})}}c(ze,"validateArkOrderExtra");var I="1.3",fe="https://unpkg.com/arkgate@2/schemas/ark.config.schema.json",qe=["DomainModel","ApplicationOrchestration","PersistenceAdapters","IntegrationAdapters","WorkflowSagaEngine","BackgroundJobsScheduling","PresentationAdapters","ReportingReadModels","ExtensibilityMetadata","SecurityAuditObservability","Kernel"],dr=new Set(["PresentationAdapters->ApplicationOrchestration","ApplicationOrchestration->DomainModel","WorkflowSagaEngine->ApplicationOrchestration","WorkflowSagaEngine->DomainModel","BackgroundJobsScheduling->ApplicationOrchestration"]);function pr(){let e=[];for(let t of qe)for(let r of qe)t===r||dr.has(`${t}->${r}`)||e.push({from:t,to:r,allowed:!1});return e}c(pr,"createDefaultRules");var Ye=pr(),ge=[{from:"unversioned",to:"1.0"},{from:"1.0",to:"1.1"},{from:"1.1",to:"1.2"},{from:"1.2",to:"1.3"}],S={type:"array",items:{type:"string",minLength:1},uniqueItems:!0},Ze={$schema:"https://json-schema.org/draft/2020-12/schema",$id:fe,title:"ArkGate architecture contract",description:"Versioned contract consumed identically by ArkGate CLI, MCP, and ESLint surfaces.",type:"object",additionalProperties:!1,required:["$schema","schemaVersion","include","layers","rules"],properties:{$schema:{type:"string",minLength:1,default:fe,description:"Editor-facing URL or local path for this JSON Schema."},schemaVersion:{type:"string",const:I,default:I},name:{type:"string",minLength:1},include:{...S,minItems:1,default:["src"]},exclude:{...S,default:[]},excludeGenerated:{type:"boolean",default:!0},frameworkOverlay:{type:"string",minLength:1},layers:{type:"array",default:[],items:{$ref:"#/$defs/layer"}},rules:{type:"array",default:Ye,items:{$ref:"#/$defs/rule"}},cyclePolicy:{type:"string",enum:["strict","soft","framework-soft","off"],default:"strict"},dynamicImportAllowlist:{...S,default:[]},safety:{$ref:"#/$defs/safety",default:{maxTsSuppressions:0,maxAnyCasts:0,allowInMemory:!1,allowDisabledPeerIsolation:!1}},coverage:{$ref:"#/$defs/coverage"},arkRules:{type:"object",additionalProperties:{type:"string",minLength:1},default:{}},arkRun:{$ref:"#/$defs/arkRun"},arkOrder:{$ref:"#/$defs/arkOrder"},stewards:{...S,default:[]}},$defs:{layer:{type:"object",additionalProperties:!1,required:["name","patterns"],properties:{name:{type:"string",minLength:1},patterns:{...S,minItems:1},exclude:S,intentPrefixes:S,description:{type:"string",minLength:1},forbiddenGlobals:S,capabilities:{type:"object",additionalProperties:!1,properties:{deny:{type:"array",uniqueItems:!0,items:{type:"string",enum:["network","filesystem","clock","randomness","environment","process","persistence"]}}}},pure:{type:"boolean"},mayImportInfrastructure:{type:"boolean"},optional:{type:"boolean"},reserved:{type:"boolean"},allowEmpty:{type:"boolean"}}},rule:{type:"object",additionalProperties:!1,required:["from","to","allowed"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1},allowed:{type:"boolean"},message:{type:"string",minLength:1},peerIsolation:{type:"boolean"},sliceFolders:{...S,minItems:1},sharedRoots:{...S,minItems:1},allowedCrossSlice:{type:"array",minItems:1,items:{type:"object",additionalProperties:!1,required:["from","to"],properties:{from:{type:"string",minLength:1},to:{type:"string",minLength:1}}}}}},safety:{type:"object",additionalProperties:!1,properties:{maxTsSuppressions:{type:"integer",minimum:0,default:0},maxAnyCasts:{type:"integer",minimum:0,default:0},allowInMemory:{type:"boolean",default:!1},allowDisabledPeerIsolation:{type:"boolean",default:!1}}},coverage:{type:"object",additionalProperties:!1,description:"Invariant coverage scan controls. testGlobs replaces the built-in test-name heuristic; maxFiles raises or lowers the evidence file budget and also bounds structural-hint preload for orchestration-only, thin-adapter, and writes-via-aggregate (default 400; there is no arkrules.hintBudget); coverageRoots declares where the project runs its tests, so a covering test found outside them is reported instead of silently certifying an invariant.",properties:{testGlobs:{...S,minItems:1},maxFiles:{type:"integer",minimum:1,description:"Evidence file budget (default 400) and structural-hint preload cap for orchestration-only, thin-adapter, and writes-via-aggregate. Raise this when hinted/governed counts show truncated sensors. There is no separate arkrules.hintBudget."},coverageRoots:{...S,minItems:1}}},arkRun:He,arkOrder:je}},N=class extends Error{static{c(this,"ArkConfigValidationError")}issues;source;constructor(t,r){super(`Invalid ArkGate config (${t}):
2
2
  ${r.map(n=>`- ${n.path}: ${n.message}`).join(`
3
- `)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function Qe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(Qe,"isObject");function ee(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}c(ee,"propertyPath");function K(e){return e===null?"null":Array.isArray(e)?"array":typeof e}c(K,"valueType");function mr(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}c(mr,"resolveSchemaRef");function G(e,t,r,n,s){if(t.$ref){let o=mr(t.$ref,n);if(!o){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}G(e,o,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Qe(e)){s.push({path:r,message:`must be an object; received ${K(e)}`});return}let o=t.properties??{};for(let i of t.required??[])e[i]===void 0&&s.push({path:ee(r,i),message:"is required"});if(t.additionalProperties===!1)for(let i of Object.keys(e))i in o||s.push({path:ee(r,i),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let i=t.additionalProperties;for(let a of Object.keys(e))a in o||G(e[a],i,ee(r,a),n,s)}for(let[i,a]of Object.entries(o))e[i]!==void 0&&G(e[i],a,ee(r,i),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${K(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(i=>JSON.stringify(i));new Set(o).size!==o.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((o,i)=>G(o,t.items,`${r}[${i}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${K(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${K(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${K(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}c(G,"validateNode");function yr(e){let t={...e,$schema:e.$schema===void 0?ge:e.$schema,schemaVersion:e.schemaVersion===void 0?I:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Je.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=We(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=ze(e.arkOrder)),t}c(yr,"defaultedConfig");function Rr(e){return e===I?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}c(Rr,"migratedFromOf");function hr(){let e=new Set([I]);for(let t of me)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}c(hr,"knownInputVersions");function Ar(e,t="ark.config.json"){if(!Qe(e))throw new N(t,[{path:"$",message:`must be an object; received ${K(e)}`}]);let r=hr(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${I}`}]);if(n!=="unversioned"&&!r.has(n))throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${I}`}]);let s=n,o={...e},i=0;for(;s!==I&&i<me.length+1;){i+=1;let a=me.find(l=>l.from===s);if(!a)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${I}`}]);s=a.to,o.schemaVersion=s}if(s!==I)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${I}`}]);return{candidate:yr(o),migratedFrom:Rr(n)}}c(Ar,"migrateArkConfig");function kr(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=Ar(e,t),s=[];if(G(r,Xe,"$",Xe,s),qe(r,s),Ze(r,s),s.length>0)throw new N(t,s);return{config:r,migratedFrom:n}}c(kr,"loadArkConfigContract");function et(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new N(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return kr(r,t)}c(et,"parseArkConfigJson");var br=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,Er=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,Sr=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Ir(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return br.test(r)?"pure-shared":n==="PersistenceAdapters"&&(Er.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":Sr.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}c(Ir,"classifyLayerImportKind");function xr(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Ir(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}c(xr,"layerImportNextAction");function Nr(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}c(Nr,"arkRunCallSiteName");function _r(e){let t=Nr(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(_r,"arkRunNextAction");function P(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return xr(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return _r(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() for the first freeze of \u03BE. Later pattern change is proposeRelease then apply(ProposeResult). Never update/patch/set. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Do not persist slow key ${e.target} from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again.`:"Do not persist a declared slow key from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again. Never mechanical-safe.";case"ARKORDER_UNVALVED_RELEASE":return"Change \u03BE with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(P,"deterministicNextAction");var Or="docs/diagnostics.md";function R(e){return typeof e=="string"&&e.length>0?e:void 0}c(R,"text");function tt(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}c(tt,"positiveInteger");function Cr(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,s=typeof e.toLayer=="string"?e.toLayer:void 0,o=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",s??"",o??""].join("|")}c(Cr,"adapterFindingTargetKey");function wr(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}c(wr,"adapterFindingRefFromTargetKey");function vr(e){return`${Or}#${e}`}c(vr,"adapterDocsCodePath");function Lr(e,t,r){return P({ruleId:e,target:R(t.target)??R(r.target)??void 0,fromLayer:R(t.fromLayer)??void 0,toLayer:R(t.toLayer)??void 0,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:t.targetTypeOnlyExports===!0,namedBindingsTypeOnly:t.namedBindingsTypeOnly===!0,portProofEligible:t.portProofEligible===!0,peerIsolation:t.peerIsolation===!0,sourcePureTypeModule:t.sourcePureTypeModule===!0,edgeKind:R(t.edgeKind)??void 0,capability:R(t.capability)??R(r.capability)??void 0,arkruleId:R(t.arkruleId)??void 0,arkruleSource:R(t.arkruleSource)??void 0})}c(Lr,"nextActionForDiagnostic");function rt(e,t="error",r){let n=R(e.ruleId)??R(e.code)??"ARK_UNKNOWN",s=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,o={...R(e.target)?{target:R(e.target)}:{},...R(e.fromLayer)?{fromLayer:R(e.fromLayer)}:{},...R(e.toLayer)?{toLayer:R(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...R(e.capability)?{capability:R(e.capability)}:{},...R(e.edgeKind)?{edgeKind:R(e.edgeKind)}:{},...R(e.arkruleId)?{arkruleId:R(e.arkruleId)}:{},...R(e.arkruleSource)?{arkruleSource:R(e.arkruleSource)}:{}},i=r??Cr(e),a=wr(i);return{ruleId:n,severity:s,message:R(e.message)??n,location:{file:R(e.file)??"<unknown>",line:tt(e.line,1),column:tt(e.column,1)},evidence:o,nextAction:R(e.nextAction)??Lr(n,o,e),findingRef:a,targetKey:i,docsCodePath:vr(n)}}c(rt,"toAdapterDiagnostic");var nt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},zn=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function Tr(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}c(Tr,"looksLikeArkIntent");function ye(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&Tr(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:nt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:nt.PUBLISH_MISSING_SOURCE}),t}c(ye,"classifyPublishFacts");var Ee=J(require("fs"),1),C=J(require("path"),1);var Dr=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Fr=new Set(Dr),Kr=new Set(["AggregateError","Array","ArrayBuffer","BigInt64Array","BigUint64Array","Boolean","DataView","Date","Error","EvalError","FinalizationRegistry","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Number","Object","Promise","Proxy","RangeError","ReferenceError","RegExp","Set","SharedArrayBuffer","String","Symbol","SyntaxError","TypeError","URIError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","WeakRef","WeakSet"]),Pr=new Set(["Array","Atomics","Buffer","JSON","Math","Number","Object","Promise","Reflect","String","console","fs","path","url","util"]);function M(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}c(M,"isArkRunKernelModuleSpecifier");var Mr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],Re=new Set(Mr);function it(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(Re.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(Re.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:Re.has(e.slice(0,n))}c(it,"isArkRunTransportBypassSpecifier");function st(e){if(Fr.has(e))return"factory";switch(e){case"publisher":return"publisher";case"publish":return"publish";case"raise":case"raiseAsync":return"raise";case"send":case"sendTo":return"send";case"subscribe":return"subscribe";case"registerHandler":return"register-handler";case"resolve":return"resolve";case"resolveSingleton":return"resolve-singleton";default:return}}c(st,"arkRunKernelCallKind");function at(e,t){let r=1;for(let n=0;n<t;n+=1)e.charCodeAt(n)===10&&(r+=1);return r}c(at,"lineAt");function he(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:\\])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}c(he,"stripCommentsPreservingLines");function $r(e,t){let r=e.slice(t),n=/^\s*(['"])((?:\\.|[^\\])*?)\1/.exec(r);if(!n)return;let s=n[2]??"";return s.length>0?s:void 0}c($r,"firstStringLiteralArg");function ot(e,t,r){let n=Math.max(0,t-r.length-8),s=e.slice(n,t);return new RegExp(`\\b${r}\\s+$`).test(s)}c(ot,"keywordBefore");function te(e,t){let r=/\b(?:import|export)(\s+type)?\s+([\s\S]*?)\s+from\s*['"]([^'"]+)['"]/g,n;for(;(n=r.exec(e))!==null;)n[1]||t(n[2]??"",n[3]??"")}c(te,"parseValueImportClause");function lt(e,t){te(he(e),t)}c(lt,"forEachArkRunValueImportClause");function Ur(e){let t=new Map,r=new Set;return te(e,(n,s)=>{if(!M(s))return;let o=/\*\s+as\s+([A-Za-z_][A-Za-z0-9_]*)/.exec(n);o?.[1]&&r.add(o[1]);let i=/^([A-Za-z_][A-Za-z0-9_]*)\s*(?:,|$)/.exec(n.trim());i?.[1]&&t.set(i[1],i[1]);let a=/\{([^}]*)\}/.exec(n);if(a?.[1])for(let l of a[1].split(",")){let u=l.trim();if(!u||u.startsWith("type "))continue;let d=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(u);if(d){t.set(d[2],d[1]);continue}let p=/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(u);p?.[1]&&t.set(p[1],p[1])}}),{named:t,namespaces:r}}c(Ur,"collectKernelImportBindings");function Hr(e,t){let r=new Set(t);return te(e,(n,s)=>{let o=/\{([^}]*)\}/.exec(n);if(o?.[1])for(let i of o[1].split(",")){let a=i.trim();if(!a||a.startsWith("type "))continue;let l=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(a),u=l?.[2]??/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(a)?.[1],d=l?.[1]??u;!u||!d||!/^[A-Z]/.test(d)||(M(s)||t.has(d)||t.has(u))&&(r.add(u),r.add(d))}}),r}c(Hr,"collectImportedConstructors");function jr(e,t){let r;return te(e,(n,s)=>{!r&&new RegExp(`\\b${t}\\b`).test(n)&&(r=s)}),r}c(jr,"importedFromForName");function re(e,t){let r=he(t),n=Ur(r),s=[],o=/\b([A-Za-z_][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,i;for(;(i=o.exec(r))!==null;){let a=i[1],l=i.index;if(ot(r,l,"function")||ot(r,l,"class"))continue;let d=r.slice(0,l).match(/([A-Za-z_][A-Za-z0-9_]*)\s*\.\s*$/)?.[1],p=n.named.get(a)??a,f=st(p)??st(a);if(!f)continue;let g=n.named.has(a)||d!==void 0&&n.namespaces.has(d);if(f!=="factory"&&(!g&&d===void 0||d&&Pr.has(d)&&!g))continue;let y=$r(r,l+i[0].length);s.push({file:e,line:at(t,l),kind:f,callee:a,viaImport:g,...d?{receiver:d}:{},...y?{nameLiteral:y}:{}})}return s}c(re,"extractArkRunKernelCallsFromSource");function Ae(e,t,r){let n=he(t),s=Hr(n,r),o=[],i=/\bnew\s+(?:[A-Za-z_][A-Za-z0-9_]*\s*\.\s*)*([A-Z][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,a;for(;(a=i.exec(n))!==null;){let l=a[1];if(Kr.has(l)||!s.has(l))continue;let u=jr(n,l);o.push({file:e,line:at(t,a.index),typeName:l,...u?{importedFrom:u}:{}})}return o}c(Ae,"extractArkRunManagedNewsFromSource");function ke(e,t){let r=[],n=/export\s+(?:abstract\s+)?class\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?:extends\s+[^{]+)?(?:implements\s+[^{]+)?\{/g,s;for(;(s=n.exec(t))!==null;){let o=s[1],i=s.index+s[0].length,a=1,l=i;for(;l<t.length&&a>0;){let b=t[l];b==="{"?a+=1:b==="}"&&(a-=1),l+=1}let u=t.slice(i,l-1),d=u.split(`
4
- `).map(b=>/^\s*\/\//.test(b)||/^\s*\/\*|\*\//.test(b)?b:b.replace(/(?:public\s+|protected\s+)?readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g,"").replace(/(?:^|[\s;{])readonly\s+[a-zA-Z_][a-zA-Z0-9_]*\s*(?::[^=;]+)?(?:=\s*[^;]+)?[;,]?/g," ")).join(`
5
- `),p=/(?:^|\n)\s*(?:public\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(d.replace(/(?:public\s+|private\s+|protected\s+|static\s+|async\s+|get\s+|set\s+)/g,""))&&/(?:^|\n)\s*(public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/m.test(d),f=/(?:^|\n)\s*public\s+(?!static|async|get|set|constructor|readonly)[a-zA-Z_]/.test(d)||/(?:^|[\n;])\s*[a-zA-Z_][a-zA-Z0-9_]*\s*:\s*[^=;\n]+[;=]/m.test(d.split(`
6
- `).filter(b=>!/^\s*(private|protected|static|constructor|get |set |async |\/)/.test(b)).join(`
7
- `)),g=/(?:^|[\n;{])\s*(?:public\s+)?set\s+[a-zA-Z_]/.test(u),y=/(?:^|[\n;{])\s*private\s+constructor\s*\(/.test(u),h=/(?:^|[\n;{])\s*(?:public\s+)?constructor\s*\(/.test(u)&&!y,A=/(?:^|[\n;{])\s*static\s+(?:async\s+)?(?:create|of|from|parse|build|make|new)\s*[<(]/.test(u)||/(?:^|[\n;{])\s*static\s+(?:async\s+)?[A-Za-z_][A-Za-z0-9_]*\s*\([^)]*\)\s*:\s*[A-Za-z_]/.test(u),k=[],Y=new Set(["if","match","when"]),H=/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+|async\s+)*(?!constructor|get|set|static)([a-zA-Z_][a-zA-Z0-9_]*)\s*\([^)]*\)\s*(?::\s*[^{]+)?\{/g,L;for(;(L=H.exec(u))!==null;){let b=L[1];if(Y.has(b))continue;let _e=L.index+L[0].length,ce=1,j=_e;for(;j<u.length&&ce>0;)u[j]==="{"?ce+=1:u[j]==="}"&&(ce-=1),j+=1;let Oe=u.slice(_e,j-1);if(!/this\.\w+\s*=/.test(Oe))continue;let Wt=/\b(ensureInvariants|assertInvariants|validate|publish|emit|raise|record)\b/.test(Oe);k.push({name:b,referencesGuardOrPublish:Wt})}let F=(u.match(/(?:^|\n)\s*(?:public\s+|private\s+|protected\s+)?(?:async\s+)?[a-zA-Z_][a-zA-Z0-9_]*\s*\(/g)??[]).length,X=(d.match(/(?:^|[\n;])\s*(?:public\s+)?(?!constructor|static|get|set|private|protected|readonly)[a-zA-Z_][a-zA-Z0-9_]*\s*[:=]/g)??[]).length,Gt=F<=1&&X>=2&&(f||p);r.push({file:e,className:o,exported:!0,hasPublicMutableFields:f||p,hasPublicSetters:g,hasPublicConstructor:h,hasStaticFactory:A,mutatingMethods:[...k],dataOnly:Gt})}return r}c(ke,"extractClassShapesFromSource");function Vr(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}c(Vr,"normalizeExtraMergeTeethClassification");function ne(e){let t=Vr(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}c(ne,"extraMergeTeethAllowed");var Br=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],Gr=new Set(Br);function Wr(e){return Gr.has(e)}c(Wr,"isArkRunEditorSensor");var ct={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},zr="ARKRUN_INTERACTION_NAME_INCOMPLETE";function pt(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(pt,"isDomainRoleLayer");function qr(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}c(qr,"compareFindings");function _(e,t,r,n,s,o,i){let a=e.mode==="enforced"&&i;return{ruleId:ct[t],sensor:t,message:s,file:r,line:n,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:P({ruleId:ct[t],fromLayer:o?.fromLayer,target:o?.target})}}c(_,"finding");function Zr(e,t){let r=[],n=[],s=[],o=[];for(let i of e)i.file===t&&(r.push(...i.uses),n.push(...i.reactsTo),s.push(...i.raises),o.push(...i.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(s),sends:new Set(o)}}c(Zr,"bagForFile");function dt(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}c(dt,"emitKinds");function ut(e){return e==="subscribe"||e==="register-handler"}c(ut,"handleKinds");function Yr(e){return e==="resolve"||e==="resolve-singleton"}c(Yr,"dependKinds");function Xr(e,t,r){let n=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return n.push(_(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let o=new Map;for(let i of t){let a=o.get(i.matchedRoot)??[];a.push(i),o.set(i.matchedRoot,a)}for(let i of s){let a=[...o.get(i)??[]].sort((u,d)=>u.file.localeCompare(d.file));if(a.length===0){n.push(_(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(i)} matched no governed files and has no createArkKernel factory.`,{target:i},r));continue}if(a.some(u=>u.hasKernelFactory))continue;let l=a[0];n.push(_(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(i)} has no createArkKernel / createStrictArkKernel factory.`,{target:i},r))}return n}c(Xr,"evaluateMissingRoot");function Jr(e,t,r,n,s){let o=new Map(t.map(a=>[a.name,a.intentPrefixes??[]])),i=[];for(let a of r){let l=a.specifier;if(!l||!M(l))continue;let u=n(a.from);u&&pt(u,o.get(u)??[])&&i.push(_(e,"arkrun-kernel-in-domain",a.from,a.line,`${u} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:u,target:l},s))}return i}c(Jr,"evaluateKernelInDomain");function Qr(e,t,r,n,s,o){let i=new Set(e.managedLayers);if(i.size===0)return[];let a=new Map(t.map(d=>[d.name,d.intentPrefixes??[]])),l=new Set(n.filter(d=>d.hasKernelFactory).map(d=>d.file)),u=[];for(let d of r){if(l.has(d.file))continue;let p=d.typeName;if(e.ignoreDirectNewForErrors!==!1&&(p.endsWith("Error")||p==="Error")||p.endsWith("DTO")||p.endsWith("VO"))continue;let f=s(d.file);!f||!i.has(f)||pt(f,a.get(f)??[])||u.push(_(e,"arkrun-direct-new",d.file,d.line,`${f} must not construct ${d.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:f,target:d.typeName},o))}return u}c(Qr,"evaluateDirectNew");function en(e,t,r,n,s){let o=[],i=[];if(e.requireDeclarations!==!0)return{findings:o,completenessReasons:i};let a=new Set(e.managedLayers);if(a.size===0)return{findings:o,completenessReasons:i};for(let l of t){if(!dt(l.kind)&&!ut(l.kind)&&!Yr(l.kind))continue;let u=n(l.file);if(!u||!a.has(u))continue;if(!l.nameLiteral){e.mode==="enforced"&&i.push({code:zr,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let d=Zr(r,l.file);if(dt(l.kind)){if(d.raises.has(l.nameLiteral)||d.sends.has(l.nameLiteral))continue;o.push(_(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:u,target:l.nameLiteral},s));continue}if(ut(l.kind)){if(d.reactsTo.has(l.nameLiteral))continue;o.push(_(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:u,target:l.nameLiteral},s));continue}d.uses.has(l.nameLiteral)||o.push(_(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:u,target:l.nameLiteral},s))}return{findings:o,completenessReasons:i}}c(en,"evaluateUndeclared");function tn(e,t,r,n){let s=new Set(e.managedLayers);if(s.size===0)return[];let o=[];for(let i of t){if(i.typeOnly)continue;let a=i.specifier;if(!a||!it(a))continue;let l=r(i.from);!l||!s.has(l)||o.push(_(e,"arkrun-transport-bypass",i.from,i.line,`${l} must not import broker/queue/emitter ${JSON.stringify(a)}; use the ArkRun kernel transport.`,{fromLayer:l,target:a},n))}return o}c(tn,"evaluateTransportBypass");function rn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=ne(e.classification),n=en(t,e.kernelCalls,e.declarations,e.layerForFile,r),s=[...Xr(t,e.compositionRootHits,r),...Jr(t,e.layers,e.dependencies,e.layerForFile,r),...Qr(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...tn(t,e.dependencies,e.layerForFile,r)].sort(qr),o=[...n.completenessReasons].sort((i,a)=>{let l=`${i.code}\0${i.file??""}\0${i.message}`,u=`${a.code}\0${a.file??""}\0${a.message}`;return l<u?-1:l>u?1:0});return{findings:s,completenessReasons:o}}c(rn,"evaluateArkRunSensors");function be(e){return{findings:rn(e).findings.filter(r=>Wr(r.sensor)),completenessReasons:[]}}c(be,"evaluateArkRunEditorSensors");function nn(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}c(nn,"declarationIsTypeOnly");function gt(e){try{return Ee.default.existsSync(e)?Ee.default.readFileSync(e,"utf8"):null}catch{return null}}c(gt,"readUtf8");function ft(e,t){let r=e.lintedFilename(t),n=e.findConfigPath(r),s=n?e.loadArkConfig(n):null;if(!s?.arkRun||!n||!r)return null;let o=C.default.dirname(n),i=C.default.isAbsolute(r)?r:C.default.resolve(r),a=C.default.relative(o,i).split(C.default.sep).join("/");if(!e.sourceIsInAnalysisScope(s,a))return null;let l=E(a,s.layers);return l?{extra:s.arkRun,config:s,root:o,absFile:i,relFile:a,fromLayer:l}:null}c(ft,"loadEditorFile");function sn(e,t,r){let n=re(t,r).some(o=>o.kind==="factory"),s=[];for(let o of e.compositionRoots){try{if(!x(o).test(t))continue}catch{continue}s.push({file:t,matchedRoot:o,hasKernelFactory:n})}return s}c(sn,"compositionRootHitsForFile");function on(e,t,r){let n=new Set(ke(t.relFile,r).map(s=>s.className));return lt(r,(s,o)=>{if(M(o))return;let i=e.resolveImportSpecifier(t.absFile,o,t.root);if(!i)return;let a=C.default.relative(t.root,i).split(C.default.sep).join("/");if(a.startsWith(".."))return;let l=gt(i);if(l!==null)for(let u of ke(a,l))n.add(u.className)}),n}c(on,"admittedTypeNamesForEditor");function mt(e,t,r,n,s,o){e.reportAdapterDiagnostic(t,r,n,{ruleId:s.ruleId,file:s.file,fromLayer:s.fromLayer,target:s.target,message:s.message,line:s.line,severity:s.severity,failsStrict:s.failsStrict,nextAction:s.nextAction},o)}c(mt,"reportFinding");function an(e){let t=e.callee;if(t?.type==="Identifier"&&t.name&&/^[A-Z]/.test(t.name))return t.name;let r=t?.property?.name;if(r&&/^[A-Z]/.test(r)&&t?.computed!==!0)return r}c(an,"constructedTypeName");function ln(e,t){return e.type?.startsWith("Export")?"export":t}c(ln,"specifierEdgeKind");function cn(e,t,r,n,s){let o=c((i,a,l,u)=>{if(typeof a!="string"||a.length===0)return;let d=i.loc?.start?.line??1,p={from:r.relFile,specifier:a,kind:u,typeOnly:l,line:d,resolution:"resolved-external"},{findings:f}=be({arkRun:r.extra,layers:r.config.layers,kernelCalls:[],managedNews:[],compositionRootHits:[],declarations:[],dependencies:[p],layerForFile:c(g=>g===r.relFile?r.fromLayer:E(g,r.config.layers),"layerForFile")});for(let g of f)g.sensor===n&&mt(e,t,i,s,g,{fromLayer:g.fromLayer??r.fromLayer,specifier:a,target:g.target??a})},"check");return{ImportDeclaration(i){let a=i,l=(a.specifiers??[]).filter(d=>d.type==="ImportSpecifier"),u=l.length>0&&l.length===(a.specifiers??[]).length&&l.every(d=>d.importKind==="type");o(i,a.source?.value,a.importKind==="type"||u||nn(i),"import")},ImportExpression(i){let a=i;a.source?.type==="Literal"&&o(i,a.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(i){let a=i;o(i,a.moduleReference?.expression?.value,a.importKind==="type"||a.isTypeOnly===!0,"require")},ExportNamedDeclaration(i){let a=i;if(!a.source)return;let l=a.specifiers??[],u=l.length>0&&l.every(d=>d.exportKind==="type");o(i,a.source.value,a.exportKind==="type"||u,ln(i,"export"))},ExportAllDeclaration(i){let a=i;o(i,a.source?.value,a.exportKind==="type","export")},CallExpression(i){let a=i;a.callee?.type==="Identifier"&&a.callee.name==="require"&&a.arguments?.[0]?.type==="Literal"&&!e.isLocallyBound(t,i,"require")&&o(i,a.arguments[0].value,!1,"require")}}}c(cn,"importListeners");function dn(e,t,r){let n=gt(r.absFile)??"",s=on(e,r,n),o=Ae(r.relFile,n,s),{findings:i}=be({arkRun:r.extra,layers:r.config.layers,kernelCalls:re(r.relFile,n),managedNews:o,compositionRootHits:sn(r.extra,r.relFile,n),declarations:[],dependencies:[],layerForFile:c(l=>l===r.relFile?r.fromLayer:E(l,r.config.layers),"layerForFile")}),a=i.filter(l=>l.sensor==="arkrun-direct-new");return{NewExpression(l){let u=an(l);if(!u)return;let d=l.loc?.start?.line,p=a.find(f=>f.target===u&&(d===void 0||f.line===d))??a.find(f=>f.target===u);p&&mt(e,t,l,"directNew",p,{fromLayer:p.fromLayer??r.fromLayer,typeName:u,target:p.target??u})}}}c(dn,"directNewListener");function yt(e){let t=c((r,n,s,o)=>({meta:{type:"problem",docs:{description:n},messages:{[s]:o},schema:[]},create(i){let a=ft(e,i);return a?cn(e,i,a,r,s):{}}}),"createImportRule");return{noArkRunKernelInDomain:t("arkrun-kernel-in-domain","Disallow Domain-role imports of arkgate/runtime when arkRun is on (same sensor as ark-check).","kernelInDomain",'{{fromLayer}} must not import kernel module "{{specifier}}".'),noArkRunTransportBypass:t("arkrun-transport-bypass","Disallow homemade broker/queue/emitter imports in arkRun managed layers (same sensor as ark-check).","transportBypass",'{{fromLayer}} must not import broker/queue/emitter "{{specifier}}"; use the ArkRun kernel transport.'),noArkRunDirectNew:{meta:{type:"problem",docs:{description:"Disallow `new` of ArkRun-admitted types outside a composition-root factory (on-disk import/`new` envelope)."},messages:{directNew:"{{fromLayer}} must not construct {{typeName}} with new outside an ArkRun composition-root factory."},schema:[]},create(r){let n=ft(e,r);return n?dn(e,r,n):{}}}}}c(yt,"createArkRunEslintRules");var un="createOrderPlane";var pn=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|knex|typeorm|mongoose)/,fn=/\.(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function se(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}c(se,"escapeRegExp");function oe(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}c(oe,"isArkOrderModuleSpecifier");function W(e,t){let r=1;for(let n=0;n<t&&n<e.length;n+=1)e[n]===`
8
- `&&(r+=1);return r}c(W,"lineAt");function z(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}c(z,"stripCommentsPreservingLines");function Rt(e,t){let r=z(t),n=[],s=/\bcreateOrderPlane\s*(?:<[^>]*>)?\s*\(/g,o;for(;(o=s.exec(r))!==null;)n.push({file:e,line:W(t,o.index),callee:un});return n}c(Rt,"extractArkOrderPlaneCallsFromSource");function ht(e,t){let r=z(t),n=[],s=/\.((?:update|patch|set|mutate))\s*\(/g,o;for(;(o=s.exec(r))!==null;){let i=o[1],a=r.slice(Math.max(0,o.index-80),o.index);!/\b(?:plane|orderPlane|order)\s*$/.test(a)&&!/\bcreateOrderPlane\b/.test(r)||n.push({file:e,line:W(t,o.index),method:i})}return n}c(ht,"extractArkOrderGenericUpdatesFromSource");function At(e,t,r){if(r.length===0)return[];let n=z(t);if(!pn.test(n)||!fn.test(n))return[];let s=[],o=new Set;for(let i of r){if(!i)continue;let a=new RegExp(`(?:\\b${se(i)}\\s*:\\s*(?!string\\b|number\\b|boolean\\b|null\\b|[A-Z])|['"]${se(i)}['"]\\s*:|[{\\,]\\s*${se(i)}\\s*[\\,}]|\\.${se(i)}\\s*=)`,"g"),l;for(;(l=a.exec(n))!==null;){let u=`${i}:${l.index}`;if(!o.has(u)){o.add(u),s.push({file:e,line:W(t,l.index),key:i});break}}}return s}c(At,"extractArkOrderXiFieldWritesFromSource");function kt(e,t){let r=z(t),n=[],s=/(?:\b(?:xi|release|current|pattern|house)\w*|\.xi)\s*=\s*[^\n;]{0,160}?\bingest\s*\(/gi,o;for(;(o=s.exec(r))!==null;)n.push({file:e,line:W(t,o.index)});return n}c(kt,"extractArkOrderIngestWritesXiFromSource");function bt(e,t){let r=z(t),n=[],s=/\.release\s*\(\s*\{([^}]*)\}/g,o;for(;(o=s.exec(r))!==null;){let a=(o[1]??"").match(/\b[A-Za-z_][\w]*\s*:/g)??[];a.length!==0&&n.push({file:e,line:W(t,o.index),keyCount:a.length})}return n}c(bt,"extractArkOrderReleaseKeyCountsFromSource");var Et=new Map;function St(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(St,"escapeAppliesToLiteral");function gn(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}c(gn,"normalizeAppliesToGlob");function mn(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}c(mn,"appliesToBracesBalanced");function yn(e){let t=Et.get(e);if(t)return t;let r=gn(e),n=mn(r),s="",o=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=St(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",o+=1):l==="}"&&n&&o>0?(s+=")",o-=1):l===","&&n&&o>0?s+="|":s+=St(l)}let i=new RegExp(`^${s}$`);return Et.set(e,i),i}c(yn,"globToRegExp");var It={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function Rn(e,t){return!t||t.length===0?!0:t.some(r=>yn(r).test(e))}c(Rn,"matchesArkOrderAppliesTo");function hn(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(hn,"isDomainRoleLayer");function w(e,t,r,n,s,o,i){let a=e.mode==="enforced"&&i;return{ruleId:It[t],sensor:t,message:s,file:r,line:n,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:P({ruleId:It[t],fromLayer:o?.fromLayer,target:o?.target})}}c(w,"finding");function An(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let r=ne(e.classification),n=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)n.push(w(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,r));else{let l=new Map;for(let u of e.planeRootHits){let d=l.get(u.matchedRoot)??[];d.push(u),l.set(u.matchedRoot,d)}for(let u of s){let d=l.get(u)??[];if(d.length===0){n.push(w(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(u)} matched no governed files and has no createOrderPlane factory.`,{target:u},r));continue}d.some(p=>p.hasPlaneFactory)||n.push(w(t,"arkorder-missing-plane",d[0].file,1,`ArkOrder plane root ${JSON.stringify(u)} has no createOrderPlane factory.`,{target:u},r))}}let o=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let u=l.specifier;if(!u||!oe(u))continue;let d=e.layerForFile(l.from);d&&hn(d,o.get(d)??[])&&n.push(w(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:d,target:u},r))}for(let l of e.genericUpdates)n.push(w(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},r));let i=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||n.push(w(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},r));for(let l of e.ingestWritesXi??[])n.push(w(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,r));let a=new Set(t.managedLayers);for(let l of i.length===0?[]:e.xiFieldWrites??[]){let u=e.layerForFile(l.file);!u||!a.has(u)||Rn(l.file,t.appliesTo)&&n.push(w(t,"arkorder-xi-field-write",l.file,l.line,`File writes slow key ${JSON.stringify(l.key)} through a persistence driver; route the field through ingest or a pattern change through proposeRelease.`,{fromLayer:u,target:l.key},r))}return n.sort((l,u)=>l.file.localeCompare(u.file)||l.ruleId.localeCompare(u.ruleId)||l.line-u.line),{findings:n,completenessReasons:[]}}c(An,"evaluateArkOrderSensors");function xt(e){if(!e.arkOrder)return[];let t=Rt(e.file,e.source),r=ht(e.file,e.source),n=e.arkOrder.xiKeys??[];return An({arkOrder:e.arkOrder,layers:[],planeCalls:t,genericUpdates:r,planeRootHits:[],xiFieldWrites:At(e.file,e.source,n),ingestWritesXi:kt(e.file,e.source),releaseKeyCounts:bt(e.file,e.source),dependencies:[],layerForFile:c(()=>e.fromLayer,"layerForFile")}).findings.filter(s=>s.sensor==="arkorder-generic-update"||s.sensor==="arkorder-kernel-in-domain"||s.sensor==="arkorder-xi-field-write"||s.sensor==="arkorder-ingest-writes-xi"||s.sensor==="arkorder-too-many-params")}c(xt,"evaluateArkOrderEditorSensors");function kn(e){let t=e;return t.sourceCode?.getText?.()??t.getSourceCode?.()?.getText?.()??""}c(kn,"eslintSourceText");function Nt(e){function t(r){return{meta:{type:"problem",docs:{description:r},messages:{denied:"{{message}}"},schema:[]},create(n){let s=e.lintedFilename(n),o=e.findConfigPath(s),i=o?e.loadArkConfig(o):null;if(!i?.arkOrder)return{};let a=e.toProjectRelative(o,s);if(!e.sourceIsInAnalysisScope(i,a))return{};let l=E(a,i.layers);return{ImportDeclaration(u){let d=typeof u.source?.value=="string"?u.source.value:"";if(r==="ARKORDER_KERNEL_IN_DOMAIN"){if(!oe(d)||l!=="DomainModel"&&!/^domain/i.test(l??""))return;e.reportAdapterDiagnostic(n,u,"denied",{ruleId:r,file:a,line:u.loc?.start?.line??1,message:"Domain-role layer imports arkgate/order; Domain stays plane-free."})}},Program(){if(r!=="ARKORDER_GENERIC_UPDATE")return;let u=kn(n),d=xt({arkOrder:i.arkOrder,file:a,source:u,fromLayer:l}).filter(p=>p.ruleId!=="ARKORDER_KERNEL_IN_DOMAIN");for(let p of d)e.reportAdapterDiagnostic(n,{loc:{start:{line:p.line}}},"denied",{ruleId:p.ruleId,file:p.file,line:p.line,message:p.message})}}}}}return c(t,"createImportRule"),{noArkOrderKernelInDomain:t("ARKORDER_KERNEL_IN_DOMAIN"),noArkOrderGenericUpdate:t("ARKORDER_GENERIC_UPDATE")}}c(Nt,"createArkOrderEslintRules");function D(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}c(D,"lintedFilename");function v(e,t,r,n,s){let o=rt({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...s?{data:s}:{},diagnostic:o}),o}c(v,"reportAdapterDiagnostic");function $(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=m.default.dirname(m.default.resolve(e));for(;;){let r=m.default.join(t,"ark.config.json");if(O.default.existsSync(r))return r;let n=m.default.dirname(t);if(n===t)return null;t=n}}c($,"findConfigPath");var _t=new Map;function U(e){if(!O.default.existsSync(e))return null;let t=O.default.readFileSync(e,"utf8"),r=_t.get(e);if(r?.source===t)return r.config;let n=et(t,e).config;return _t.set(e,{source:t,config:n}),n}c(U,"loadArkConfig");function Z(e,t){return(e.include??[]).some(n=>{let s=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return s==="."||t===s||t.startsWith(`${s}/`)})&&!$e(t,e)}c(Z,"sourceIsInAnalysisScope");function Ot(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,m.default.join(e,"index.ts"),m.default.join(e,"index.tsx"),m.default.join(e,"index.js")];for(let r of t)try{if(O.default.existsSync(r)&&O.default.statSync(r).isFile())return r}catch{}return null}c(Ot,"existingSourceFile");function Ct(e){let t=m.default.resolve(e),r=null;for(;;){let u=m.default.join(t,"tsconfig.json");if(O.default.existsSync(u)){r=u;break}let d=m.default.dirname(t);if(d===t)break;t=d}if(!r)return{baseUrl:e,aliases:[]};let n=c(u=>{try{let d=O.default.readFileSync(u,"utf8");return d=d.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(d)}catch{return null}},"loadJsonc"),s=c((u,d)=>{if(d>4)return{};let p=n(u);if(!p)return{};let f=p.compilerOptions??{},g=f.baseUrl,y=f.paths,h=p.extends;if(typeof h=="string"&&!h.startsWith("@")){let A=m.default.resolve(m.default.dirname(u),h.endsWith(".json")?h:`${h}.json`);if(O.default.existsSync(A)){let k=s(A,d+1);g=g??k.baseUrl,y={...k.paths??{},...y??{}}}}return{baseUrl:g,paths:y}},"mergePaths"),o=s(r,0),i=m.default.dirname(r),a=m.default.resolve(i,o.baseUrl||"."),l=[];for(let[u,d]of Object.entries(o.paths||{})){if(!Array.isArray(d)||d.length===0)continue;let p=u.replace(/\*$/,"");p&&l.push({from:p,to:String(d[0]).replace(/\*$/,"")})}return l.sort((u,d)=>d.from.length-u.from.length),{baseUrl:a,aliases:l}}c(Ct,"readTsconfigPathAliases");function wt(e,t){if(!t.startsWith("."))return null;let r=m.default.resolve(m.default.dirname(e),t);return Ot(r)}c(wt,"resolveRelativeImport");function Ie(e,t,r){if(!t)return null;if(t.startsWith("."))return wt(e,t);let n=r||m.default.dirname(e),{baseUrl:s,aliases:o}=Ct(n),i=o.find(l=>t.startsWith(l.from));if(!i)return null;let a=m.default.resolve(s,`${i.to}${t.slice(i.from.length)}`);return Ot(a)}c(Ie,"resolveImportSpecifier");function le(e){return typeof e?.value=="string"?e.value:void 0}c(le,"stringValue");function xe(e){return e?.name??le(e)}c(xe,"propertyName");function Ne(e){return e.sourceCode??e.getSourceCode?.()}c(Ne,"sourceCodeFor");function vt(e,t){let r=Ne(e)?.getScope?.(t);for(;r;){let n=r.references?.find(s=>s.identifier===t);if(n)return n;r=r.upper??void 0}}c(vt,"referenceFor");function q(e,t,r){let n=vt(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let s=Ne(e)?.getScope?.(t);for(;s;){let o=s.set?.get(r);if(o)return(o.defs?.length??0)>0;s=s.upper??void 0}return!1}c(q,"isLocallyBound");function bn(e,t){let r=vt(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}c(bn,"isValueIdentifierReference");function Lt(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=Lt(e.object),n=xe(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}c(Lt,"memberExpressionPath");function En(e){return xe(e.callee?.property)}c(En,"calleePropertyName");function Tt(e,t){return e?.properties?.find(r=>xe(r.key)===t)}c(Tt,"objectProperty");function ie(e,t){return Tt(e,t)!==void 0}c(ie,"objectHasProperty");function Sn(e){let t=Tt(e,"metadata")?.value;return ie(t,"source")}c(Sn,"objectHasMetadataSource");function Dt(e){return En(e)==="publish"}c(Dt,"isPublishCall");function Se(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}c(Se,"declarationIsTypeOnly");function In(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}c(In,"containingProgram");function xn(e){let t=In(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!Se(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!Se(n))return!1;r=!0;continue}return!1}}return r}c(xn,"sourceProgramExportsOnlyTypes");var Ft={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=D(e),r=$(t),n=r?U(r):null,s=r?m.default.dirname(r):null,o=c(i=>{let a=le(i.source);if(a&&n&&s&&t){let l=m.default.isAbsolute(t)?t:m.default.resolve(t),u=m.default.relative(s,l).split(m.default.sep).join("/");if(!Z(n,u))return;let d=E(u,n.layers);if(!d)return;let p=Ie(l,a,s);if(!p)return;let f=m.default.relative(s,p).split(m.default.sep).join("/");if(f.startsWith(".."))return;let g=E(f,n.layers);if(!g)return;let y={fromPath:u,toPath:f,layers:n.layers},h=ue(n.rules,d,g,y),A=h?.rule;if(A){let k=i.type?.startsWith("Export")?"export":"import",Y=Se(i),H=!!A?.peerIsolation,L=Y&&!H,F=H&&h?Pe(h.peerIsolationReason??"cross-slice",{fromPath:u,toPath:f,fromSlice:h.fromSlice,toSlice:h.toSlice}):void 0,X=A?.message?F?`${A.message} (${F})`:A.message:F?`${d} must not ${k} another slice of ${g} (${u} \u2192 ${f}): ${F}`:`${d} must not ${k} ${g}.`;v(e,i,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:u,fromLayer:d,toLayer:g,target:f,edgeKind:k,...H?{peerIsolation:!0}:{},...Y?{typeOnly:!0}:{},...L?{severity:"warning"}:{},...xn(i)?{sourcePureTypeModule:!0}:{},message:L?`${X} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:X},{fromLayer:d,toLayer:g,specifier:a})}return}},"check");return{ImportDeclaration:o,ExportNamedDeclaration:o,ExportAllDeclaration:o}}},Kt={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=le(r),s=ye({publishCall:Dt(t),rawIntentName:n,objectHasIntent:ie(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(s.some(o=>o.ruleId==="RAW_EVENT_PUBLISH")){let o=s.find(i=>i.ruleId==="RAW_EVENT_PUBLISH");v(e,t,"rawPublish",{...o,file:D(e)})}}}}},Pt={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],o=ye({publishCall:Dt(t),rawIntentName:le(r),objectHasIntent:ie(r,"intent"),arkPublishCandidate:!0,hasSource:Sn(r)||ie(n,"source")}).find(i=>i.ruleId==="PUBLISH_MISSING_SOURCE");o&&v(e,t,"missingSource",{...o,file:D(e)})}}}},Mt={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=D(e),r=e.options?.[0],n=$(t),s=n?U(n):null,o=n?m.default.dirname(n):null,i=null,a="this layer";if(s&&o&&t){let p=m.default.isAbsolute(t)?t:m.default.resolve(t),f=m.default.relative(o,p).split(m.default.sep).join("/");if(!Z(s,f))return{};let g=s.layers?.find(y=>y.name===E(f,s.layers));g?.forbiddenGlobals?.length?(i=new Set(g.forbiddenGlobals),a=g.name):i=null}else r?.globals&&(i=new Set(r.globals));if(!i)return{};let l=typeof Ne(e)?.getScope=="function",u=c((p,f)=>{let g=m.default.isAbsolute(t)?t:m.default.resolve(t),y=o?m.default.relative(o,g).split(m.default.sep).join("/"):t;v(e,p,s?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:y,fromLayer:a,target:f,message:`${a} must not use the ambient global "${f}".`},{name:f,layer:a})},"report"),d=c((p,f,g,y)=>{if(g||typeof f!="string")return;let h=fe(f,i);if(!h)return;let A=m.default.isAbsolute(t)?t:m.default.resolve(t),k=o?m.default.relative(o,A).split(m.default.sep).join("/"):t;v(e,p,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:k,fromLayer:a,target:f,edgeKind:y,message:`${a} must not use module "${f}" because it is the import form of forbidden global "${h}".`},{layer:a,name:h,specifier:f,importKind:y})},"reportModule");return{MemberExpression(p){if(p.parent?.type==="MemberExpression"&&p.parent.object===p)return;let f=Lt(p);if(!f||q(e,f.root,f.segments[0]))return;let g=f.segments[0]==="globalThis",y=g?f.segments.slice(1):f.segments,h;for(let A=y.length;A>=(g?1:2);A-=1){let k=y.slice(0,A).join(".");if(i.has(k)){h=k;break}}h?u(p,h):!l&&i.has(f.segments[0])&&u(p,f.segments[0])},CallExpression(p){let f=p;if(f.callee?.type==="Identifier"&&f.callee.name==="require"&&f.arguments?.[0]?.type==="Literal"&&!q(e,p,"require")&&d(p,f.arguments[0].value,!1,"require"),l)return;let g=f.callee?.type==="Identifier"?f.callee.name:void 0;g&&i.has(g)&&u(p,g)},ImportDeclaration(p){let f=p,g=(f.specifiers??[]).filter(h=>h.type==="ImportSpecifier"),y=g.length>0&&g.length===(f.specifiers??[]).length&&g.every(h=>h.importKind==="type");d(p,f.source?.value,f.importKind==="type"||y,"import")},ImportExpression(p){let f=p;f.source?.type==="Literal"&&d(p,f.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(p){let f=p;d(p,f.moduleReference?.expression?.value,f.importKind==="type"||f.isTypeOnly===!0,"require")},ExportNamedDeclaration(p){let f=p;if(!f.source)return;let g=f.specifiers??[],y=g.length>0&&g.every(h=>h.exportKind==="type");d(p,f.source.value,f.exportKind==="type"||y,"export")},ExportAllDeclaration(p){let f=p;d(p,f.source?.value,f.exportKind==="type","export")},NewExpression(p){if(l)return;let f=p.callee?.type==="Identifier"?p.callee.name:void 0;f&&i.has(f)&&u(p,f)},Identifier(p){!l||!p.name||!i.has(p.name)||!bn(e,p)||q(e,p,p.name)||u(p,p.name)}}}},$t={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=D(e),r=$(t),n=r?U(r):null,s=r?m.default.dirname(r):null;if(!n||!s||!t)return{};let o=m.default.isAbsolute(t)?t:m.default.resolve(t),i=m.default.relative(s,o).split(m.default.sep).join("/");if(!Z(n,i))return{};let a=n.layers?.find(d=>d.name===E(i,n.layers));if(!a)return{};let l=new Set(je(a));if(l.size===0)return{};let u=c((d,p,f,g)=>{if(f||typeof p!="string"||fe(p,a.forbiddenGlobals??[]))return;let y=He(p);!y||!l.has(y)||v(e,d,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:i,fromLayer:a.name,target:p,capability:y,edgeKind:g,message:`${a.name} denies the ${y} capability; found import of "${p}".`},{layer:a.name,capability:y,specifier:p})},"check");return{ImportDeclaration(d){let p=d,f=(p.specifiers??[]).filter(y=>y.type==="ImportSpecifier"),g=f.length>0&&f.length===(p.specifiers??[]).length&&f.every(y=>y.importKind==="type");u(d,p.source?.value,p.importKind==="type"||g,"import")},ImportExpression(d){let p=d;p.source?.type==="Literal"&&u(d,p.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(d){let p=d;u(d,p.moduleReference?.expression?.value,p.importKind==="type"||p.isTypeOnly===!0,"require")},ExportNamedDeclaration(d){let p=d;if(!p.source)return;let f=p.specifiers??[],g=f.length>0&&f.every(y=>y.exportKind==="type");u(d,p.source.value,p.exportKind==="type"||g,"export")},ExportAllDeclaration(d){let p=d;u(d,p.source?.value,p.exportKind==="type","export")},CallExpression(d){let p=d;p.callee?.type==="Identifier"&&p.callee.name==="require"&&p.arguments?.[0]?.type==="Literal"&&!q(e,d,"require")&&u(d,p.arguments[0].value,!1,"require")}}}},{noArkRunKernelInDomain:Ut,noArkRunDirectNew:Ht,noArkRunTransportBypass:jt}=yt({findConfigPath:$,loadArkConfig:U,resolveImportSpecifier:Ie,lintedFilename:D,sourceIsInAnalysisScope:Z,isLocallyBound:q,reportAdapterDiagnostic:v});function Nn(e,t){let r=m.default.dirname(m.default.resolve(e));return m.default.relative(r,m.default.resolve(t)).split(m.default.sep).join("/")}c(Nn,"toProjectRelative");var{noArkOrderKernelInDomain:Vt,noArkOrderGenericUpdate:Bt}=Nt({findConfigPath:$,loadArkConfig:U,lintedFilename:D,sourceIsInAnalysisScope:Z,reportAdapterDiagnostic:v,toProjectRelative:Nn});var _n={"no-domain-infra-imports":Ft,"no-raw-event-publish":Kt,"require-publish-source":Pt,"no-forbidden-globals":Mt,"no-denied-capabilities":$t,"no-arkrun-kernel-in-domain":Ut,"no-arkrun-direct-new":Ht,"no-arkrun-transport-bypass":jt,"no-arkorder-kernel-in-domain":Vt,"no-arkorder-generic-update":Bt},ae={rules:_n};ae.configs={recommended:{plugins:{ark:ae},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error","ark/no-arkrun-kernel-in-domain":"error","ark/no-arkrun-direct-new":"error","ark/no-arkrun-transport-bypass":"error","ark/no-arkorder-kernel-in-domain":"error","ark/no-arkorder-generic-update":"error"}}};var On=ae;0&&(module.exports={findConfigPath,globToRegExp,isEdgeDenied,layerForRelativePath,loadArkConfig,noArkOrderGenericUpdate,noArkOrderKernelInDomain,noArkRunDirectNew,noArkRunKernelInDomain,noArkRunTransportBypass,noDeniedCapabilities,noDomainInfraImports,noForbiddenGlobals,noRawEventPublish,patternSpecificity,plugin,readTsconfigPathAliases,requirePublishSource,resolveImportSpecifier,resolveRelativeImport});
3
+ `)}`),this.name="ArkConfigValidationError",this.source=t,this.issues=r}};function Xe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}c(Xe,"isObject");function J(e,t){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(t)?`${e}.${t}`:`${e}[${JSON.stringify(t)}]`}c(J,"propertyPath");function P(e){return e===null?"null":Array.isArray(e)?"array":typeof e}c(P,"valueType");function fr(e,t){let r="#/$defs/";if(e.startsWith(r))return t.$defs[e.slice(r.length)]}c(fr,"resolveSchemaRef");function V(e,t,r,n,s){if(t.$ref){let o=fr(t.$ref,n);if(!o){s.push({path:r,message:`schema reference ${t.$ref} cannot be resolved`});return}V(e,o,r,n,s);return}if(t.const!==void 0&&!Object.is(e,t.const)){s.push({path:r,message:`must equal ${JSON.stringify(t.const)}`});return}if(t.enum&&!t.enum.some(o=>Object.is(o,e))){s.push({path:r,message:`must be one of ${t.enum.map(String).join(", ")}`});return}if(t.type==="object"){if(!Xe(e)){s.push({path:r,message:`must be an object; received ${P(e)}`});return}let o=t.properties??{};for(let i of t.required??[])e[i]===void 0&&s.push({path:J(r,i),message:"is required"});if(t.additionalProperties===!1)for(let i of Object.keys(e))i in o||s.push({path:J(r,i),message:"unknown field"});else if(t.additionalProperties!==void 0&&t.additionalProperties!==!0&&typeof t.additionalProperties=="object"){let i=t.additionalProperties;for(let a of Object.keys(e))a in o||V(e[a],i,J(r,a),n,s)}for(let[i,a]of Object.entries(o))e[i]!==void 0&&V(e[i],a,J(r,i),n,s);return}if(t.type==="array"){if(!Array.isArray(e)){s.push({path:r,message:`must be an array; received ${P(e)}`});return}if(t.minItems!==void 0&&e.length<t.minItems&&s.push({path:r,message:`must contain at least ${t.minItems} item(s)`}),t.uniqueItems){let o=e.map(i=>JSON.stringify(i));new Set(o).size!==o.length&&s.push({path:r,message:"must not contain duplicate items"})}t.items&&e.forEach((o,i)=>V(o,t.items,`${r}[${i}]`,n,s));return}if(t.type==="string"){if(typeof e!="string"){s.push({path:r,message:`must be a string; received ${P(e)}`});return}t.minLength!==void 0&&e.length<t.minLength&&s.push({path:r,message:`must contain at least ${t.minLength} character(s)`});return}if(t.type==="boolean"){typeof e!="boolean"&&s.push({path:r,message:`must be a boolean; received ${P(e)}`});return}if(t.type==="integer"){if(!Number.isInteger(e)){s.push({path:r,message:`must be an integer; received ${P(e)}`});return}t.minimum!==void 0&&e<t.minimum&&s.push({path:r,message:`must be at least ${t.minimum}`})}}c(V,"validateNode");function gr(e){let t={...e,$schema:e.$schema===void 0?fe:e.$schema,schemaVersion:e.schemaVersion===void 0?I:e.schemaVersion,include:e.include===void 0?["src"]:e.include,layers:e.layers===void 0?[]:e.layers,rules:e.rules===void 0?Ye.map(r=>({...r})):e.rules};return e.arkRun!==void 0&&(t.arkRun=Be(e.arkRun)),e.arkOrder!==void 0&&(t.arkOrder=Ge(e.arkOrder)),t}c(gr,"defaultedConfig");function mr(e){return e===I?null:e==="unversioned"?"unversioned":e==="1.0"||e==="1.1"||e==="1.2"?e:null}c(mr,"migratedFromOf");function yr(){let e=new Set([I]);for(let t of ge)t.from!=="unversioned"&&e.add(t.from),e.add(t.to);return e}c(yr,"knownInputVersions");function hr(e,t="ark.config.json"){if(!Xe(e))throw new N(t,[{path:"$",message:`must be an object; received ${P(e)}`}]);let r=yr(),n=e.schemaVersion===void 0?"unversioned":typeof e.schemaVersion=="string"?e.schemaVersion:null;if(n===null)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(e.schemaVersion)}; expected ${I}`}]);if(n!=="unversioned"&&!r.has(n))throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${I}`}]);let s=n,o={...e},i=0;for(;s!==I&&i<ge.length+1;){i+=1;let a=ge.find(l=>l.from===s);if(!a)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(s)}; expected ${I}`}]);s=a.to,o.schemaVersion=s}if(s!==I)throw new N(t,[{path:"$.schemaVersion",message:`unsupported version ${JSON.stringify(n)}; expected ${I}`}]);return{candidate:gr(o),migratedFrom:mr(n)}}c(hr,"migrateArkConfig");function Rr(e,t="ark.config.json"){let{candidate:r,migratedFrom:n}=hr(e,t),s=[];if(V(r,Ze,"$",Ze,s),We(r,s),ze(r,s),s.length>0)throw new N(t,s);return{config:r,migratedFrom:n}}c(Rr,"loadArkConfigContract");function Je(e,t="ark.config.json"){let r;try{r=JSON.parse(e)}catch(n){throw new N(t,[{path:"$",message:`invalid JSON: ${n instanceof Error?n.message:String(n)}`}])}return Rr(r,t)}c(Je,"parseArkConfigJson");var Ar=/(^|\/)(constants|types|enums|shared-types|shared\/(?:types|constants)|test-projects)(\/|\.|$)|(?:^|\/)[^/]*(?:constants|types)(?:\.[cm]?[jt]sx?)?$/i,kr=/(^|\/)(?:kernel(?:\/|$)|events?(?:\/|\.|$)|bootstrap(?:\.[cm]?[jt]sx?)?$|emitter(?:\.[cm]?[jt]sx?)?$)|(?:^|\/)(?:intents?|publish)(?:\/|\.|$)/i,br=/(use-?cases?|usecases?|application|orchestrat|services?|handlers?)(\/|\.|$)/i;function Er(e,t){let r=String(e??"").replace(/\\/g,"/").trim(),n=String(t?.fromLayer??""),s=String(t?.toLayer??"");return Ar.test(r)?"pure-shared":n==="PersistenceAdapters"&&(kr.test(r)||/events?|intents?|kernel|bootstrap/i.test(`${s} ${r}`))?"kernel-emit":br.test(r)||(n==="DomainModel"||n==="ApplicationOrchestration")&&s==="PersistenceAdapters"?"use-case":"unknown"}c(Er,"classifyLayerImportKind");function Sr(e){if(e.typeOnly||e.targetTypeOnlyExports||e.namedBindingsTypeOnly)return"Move the referenced type to a mutually allowed layer, use `import type`, then preflight again.";if(e.peerIsolation)return"Extract the shared dependency to a shared layer, test at the public interface, then preflight again.";let t=Er(typeof e.target=="string"?e.target:"",{fromLayer:typeof e.fromLayer=="string"?e.fromLayer:void 0,toLayer:typeof e.toLayer=="string"?e.toLayer:void 0});return t==="pure-shared"?"Adopt the imported constants/types/pure module into DomainModel or SharedKernel (do not inject a port). Then preflight again.":t==="kernel-emit"?"Persistence must not emit. Inject a port or move the event map to SharedTypes; do not import kernel/events/bootstrap from a repository. Then preflight again.":t==="use-case"||e.portProofEligible?`Define a port in ${e.fromLayer??"the source layer"}, inject the ${e.toLayer??"outer-layer"} implementation, test at the public interface, then preflight again.`:"Classify the import: if it is constants/types/pure, adopt into DomainModel or SharedKernel; define a port only if the target is a real use-case. Then preflight again."}c(Sr,"layerImportNextAction");function Ir(e){return typeof e.target=="string"&&e.target.trim().length>0?e.target.trim():void 0}c(Ir,"arkRunCallSiteName");function xr(e){let t=Ir(e),r=typeof e.fromLayer=="string"&&e.fromLayer.length>0?e.fromLayer:void 0;switch(e.ruleId){case"ARKRUN_MISSING_ROOT":return t?`Import createStrictArkKernel from arkgate/runtime and call it in composition root ${t} listed in arkRun.compositionRoots, then preflight again.`:"Import createStrictArkKernel from arkgate/runtime (same npm package; @arkgate/runtime is deprecated) and call it in a composition root listed in arkRun.compositionRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKRUN_KERNEL_IN_DOMAIN":return t?`Move the kernel import of ${t} out of ${r??"the Domain-role layer"} into a composition root or adapter. Import from arkgate/runtime, then preflight again.`:"Move the kernel import out of the Domain-role layer into a composition root or adapter. Import from arkgate/runtime (same npm package; @arkgate/runtime is deprecated), then preflight again. Never mechanical-safe.";case"ARKRUN_DIRECT_NEW":return t?`Resolve ${t} from the kernel instead of constructing it with new, then preflight again.`:"Resolve the type from the kernel instead of constructing it with new, then preflight again. Never mechanical-safe \u2014 rewiring construction is a design decision.";case"ARKRUN_UNDECLARED_EMIT":return t?`Add ${t} to raises or sends on the managed component, then preflight again.`:"Add the existing call-site name to raises or sends on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new emit stays judgment.";case"ARKRUN_UNDECLARED_HANDLE":return t?`Add ${t} to reactsTo on the managed component, then preflight again.`:"Add the existing call-site name to reactsTo on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new handle stays judgment.";case"ARKRUN_UNDECLARED_DEPEND":return t?`Add ${t} to uses on the managed component, then preflight again.`:"Add the existing call-site name to uses on the managed component, then preflight again. Mechanical-safe only when that literal already exists and the edit is the declaration list; inventing a new depend stays judgment.";case"ARKRUN_TRANSPORT_BYPASS":return t?`Send through the ArkRun kernel transport instead of importing ${t}, then preflight again.`:"Send through the ArkRun kernel transport instead of importing that broker or emitter, then preflight again. Never mechanical-safe \u2014 homemade buses stay judgment.";default:return`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(xr,"arkRunNextAction");function K(e){switch(e.ruleId){case"LAYER_IMPORT_VIOLATION":return Sr(e);case"FORBIDDEN_GLOBAL":return`Inject ${e.target??"the capability"} through a port, test at the public interface, then preflight again.`;case"CAPABILITY_VIOLATION":return`Define a ${String(e.capability??"capability")} port in ${e.fromLayer??"the walled layer"}, bind the implementation outside it, test at the public interface, then preflight again.`;case"CIRCULAR_DEPENDENCY":return"Extract the shared dependency into a third module, test at the public interface, then preflight again.";case"RAW_EVENT_PUBLISH":return"Publish through a registered intent creator, then run Ark again.";case"LITERAL_PATH_DRIFT":return typeof e.target=="string"&&e.target.length>0?`Rewrite the literal to ${e.target}, or run \`arkgate-check --path-drift --base-ref <ref> --write\` to apply every anchored replacement.`:"Rewrite the literal to the rename destination, or run `arkgate-check --path-drift --base-ref <ref> --write` to apply every anchored replacement.";case"LITERAL_PATH_UNRESOLVED":return"Read the candidate and decide: fix the path, or leave it. Advisory \u2014 with no rename to anchor it there is no destination to propose, so --write never touches it.";case"PUBLISH_MISSING_SOURCE":return"Add metadata.source to the publish call, then run Ark again.";case"INVARIANT_COVERAGE_OUTSIDE_ROOTS":return"Move the covering test under a declared coverage root, or add its root to coverage.coverageRoots in ark.config.json, then run Ark again.";case"ARKRULE_STRUCTURE":case"ARKRULE_INVARIANT":case"INVARIANT_UNCOVERED":return`Fix the structure or invariant for ${typeof e.arkruleId=="string"&&e.arkruleId.length>0?e.arkruleId:"the ArkRule"} (declared in ${typeof e.arkruleSource=="string"&&e.arkruleSource.length>0?e.arkruleSource:"arkrules/<Layer>.json"}), then preflight again. Do not demote the rule without a hash-bound policy acknowledgement.`;case"ARKRUN_MISSING_ROOT":case"ARKRUN_KERNEL_IN_DOMAIN":case"ARKRUN_DIRECT_NEW":case"ARKRUN_UNDECLARED_EMIT":case"ARKRUN_UNDECLARED_HANDLE":case"ARKRUN_UNDECLARED_DEPEND":case"ARKRUN_TRANSPORT_BYPASS":return xr(e);case"ARKORDER_MISSING_PLANE":return typeof e.target=="string"&&e.target.length>0?`Import createOrderPlane from arkgate/order and call it in plane root ${e.target} listed in arkOrder.planeRoots, then preflight again.`:"Import createOrderPlane from arkgate/order and call it in a plane root listed in arkOrder.planeRoots, then preflight again. Never mechanical-safe \u2014 factory placement is a design decision.";case"ARKORDER_KERNEL_IN_DOMAIN":return"Move the arkgate/order import out of the Domain-role layer into a plane root or adapter, then preflight again. Never mechanical-safe.";case"ARKORDER_GENERIC_UPDATE":return"Use release() for the first freeze of \u03BE. Later pattern change is proposeRelease then apply(ProposeResult). Never update/patch/set. Never mechanical-safe.";case"ARKORDER_TOO_MANY_PARAMS":return"Cut \u03BE to the slow keys that actually slave the rest, then preflight again. Never mechanical-safe.";case"ARKORDER_INGEST_WRITES_XI":return"Keep ingest results as absorb/escalate_up/hold only. Change \u03BE with proposeRelease then apply(ProposeResult). Never mechanical-safe.";case"ARKORDER_XI_FIELD_WRITE":return typeof e.target=="string"&&e.target.length>0?`Do not persist slow key ${e.target} from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again.`:"Do not persist a declared slow key from a use-case. Absorb the field with ingest() or change the pattern with proposeRelease then apply, then preflight again. Never mechanical-safe.";case"ARKORDER_UNVALVED_RELEASE":return"Change \u03BE with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.";default:return typeof e.ruleId=="string"&&e.ruleId.startsWith("ARKRULE_")?`Fix the ArkRule ${typeof e.arkruleId=="string"?e.arkruleId:e.ruleId}, then preflight again.`:`Resolve ${typeof e.ruleId=="string"&&e.ruleId.length>0?e.ruleId:"ARK_UNKNOWN"} without weakening ark.config.json, then run Ark again.`}}c(K,"deterministicNextAction");var Nr="docs/diagnostics.md";function h(e){return typeof e=="string"&&e.length>0?e:void 0}c(h,"text");function Qe(e,t){return Number.isInteger(e)&&Number(e)>0?Number(e):t}c(Qe,"positiveInteger");function _r(e){let t=typeof e.ruleId=="string"?e.ruleId:typeof e.code=="string"?e.code:void 0,r=typeof e.file=="string"?e.file:void 0,n=typeof e.fromLayer=="string"?e.fromLayer:void 0,s=typeof e.toLayer=="string"?e.toLayer:void 0,o=typeof e.target=="string"?e.target:void 0;return[t,r,n??"",s??"",o??""].join("|")}c(_r,"adapterFindingTargetKey");function Or(e){let t=2166136261;for(let r=0;r<e.length;r+=1)t^=e.charCodeAt(r),t=Math.imul(t,16777619);return`fnv1a-${(t>>>0).toString(16).padStart(8,"0")}`}c(Or,"adapterFindingRefFromTargetKey");function wr(e){return`${Nr}#${e}`}c(wr,"adapterDocsCodePath");function Cr(e,t,r){return K({ruleId:e,target:h(t.target)??h(r.target)??void 0,fromLayer:h(t.fromLayer)??void 0,toLayer:h(t.toLayer)??void 0,typeOnly:t.typeOnly===!0,targetTypeOnlyExports:t.targetTypeOnlyExports===!0,namedBindingsTypeOnly:t.namedBindingsTypeOnly===!0,portProofEligible:t.portProofEligible===!0,peerIsolation:t.peerIsolation===!0,sourcePureTypeModule:t.sourcePureTypeModule===!0,edgeKind:h(t.edgeKind)??void 0,capability:h(t.capability)??h(r.capability)??void 0,arkruleId:h(t.arkruleId)??void 0,arkruleSource:h(t.arkruleSource)??void 0})}c(Cr,"nextActionForDiagnostic");function et(e,t="error",r){let n=h(e.ruleId)??h(e.code)??"ARK_UNKNOWN",s=e.severity==="warning"||e.failsStrict===!1||e.typeOnly===!0&&e.peerIsolation!==!0?"warning":t,o={...h(e.target)?{target:h(e.target)}:{},...h(e.fromLayer)?{fromLayer:h(e.fromLayer)}:{},...h(e.toLayer)?{toLayer:h(e.toLayer)}:{},...typeof e.typeOnly=="boolean"?{typeOnly:e.typeOnly}:{},...typeof e.targetTypeOnlyExports=="boolean"?{targetTypeOnlyExports:e.targetTypeOnlyExports}:{},...typeof e.sourcePureTypeModule=="boolean"?{sourcePureTypeModule:e.sourcePureTypeModule}:{},...typeof e.namedBindingsTypeOnly=="boolean"?{namedBindingsTypeOnly:e.namedBindingsTypeOnly}:{},...typeof e.portProofEligible=="boolean"?{portProofEligible:e.portProofEligible}:{},...typeof e.peerIsolation=="boolean"?{peerIsolation:e.peerIsolation}:{},...h(e.capability)?{capability:h(e.capability)}:{},...h(e.edgeKind)?{edgeKind:h(e.edgeKind)}:{},...h(e.arkruleId)?{arkruleId:h(e.arkruleId)}:{},...h(e.arkruleSource)?{arkruleSource:h(e.arkruleSource)}:{}},i=r??_r(e),a=Or(i);return{ruleId:n,severity:s,message:h(e.message)??n,location:{file:h(e.file)??"<unknown>",line:Qe(e.line,1),column:Qe(e.column,1)},evidence:o,nextAction:h(e.nextAction)??Cr(n,o,e),findingRef:a,targetKey:i,docsCodePath:wr(n)}}c(et,"toAdapterDiagnostic");var tt={RAW_EVENT_PUBLISH:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts and tooling.",PUBLISH_MISSING_SOURCE:"Strict Ark publish calls must include metadata.source."},is=Object.freeze([{layer:"DomainModel",prefixes:["Domain."]},{layer:"ApplicationOrchestration",prefixes:["Application."]},{layer:"PersistenceAdapters",prefixes:["Adapter.Persistence.","Adapter.Repository."]},{layer:"IntegrationAdapters",prefixes:["Adapter.Integration.","Adapter.External."]},{layer:"WorkflowSagaEngine",prefixes:["Workflow."]},{layer:"BackgroundJobsScheduling",prefixes:["Job."]},{layer:"PresentationAdapters",prefixes:["Presentation.","Adapter.Presentation.","Adapter.Api."]},{layer:"ReportingReadModels",prefixes:["Reporting."]},{layer:"ExtensibilityMetadata",prefixes:["Metadata."]},{layer:"SecurityAuditObservability",prefixes:["Security.","Audit.","Observability."]},{layer:"Kernel",prefixes:["Kernel."]}]);function vr(e){return/^(Domain|Application|Adapter|Workflow|Job|Presentation|Reporting|Metadata|Security|Audit|Observability|Kernel)\.[A-Za-z0-9_.]+$/.test(e)}c(vr,"looksLikeArkIntent");function me(e){if(!e.publishCall)return[];let t=[];return(e.rawIntentName!==void 0&&vr(e.rawIntentName)||e.objectHasIntent)&&t.push({ruleId:"RAW_EVENT_PUBLISH",message:tt.RAW_EVENT_PUBLISH}),e.arkPublishCandidate&&!e.hasSource&&t.push({ruleId:"PUBLISH_MISSING_SOURCE",message:tt.PUBLISH_MISSING_SOURCE}),t}c(me,"classifyPublishFacts");var Ee=Y(require("fs"),1),w=Y(require("path"),1);var Tr=["createArkKernel","createStrictArkKernel","createArkKernelFromConfig","createStrictArkKernelFromConfig"];var Lr=new Set(Tr),Dr=new Set(["AggregateError","Array","ArrayBuffer","BigInt64Array","BigUint64Array","Boolean","DataView","Date","Error","EvalError","FinalizationRegistry","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Number","Object","Promise","Proxy","RangeError","ReferenceError","RegExp","Set","SharedArrayBuffer","String","Symbol","SyntaxError","TypeError","URIError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","WeakRef","WeakSet"]),Fr=new Set(["Array","Atomics","Buffer","JSON","Math","Number","Object","Promise","Reflect","String","console","fs","path","url","util"]);function M(e){return e==="@arkgate/runtime"||e.startsWith("@arkgate/runtime/")||e==="arkgate/runtime"||e.startsWith("arkgate/runtime/")}c(M,"isArkRunKernelModuleSpecifier");var Pr=["events","node:events","eventemitter2","eventemitter3","emittery","kafkajs","kafka-node","amqplib","amqp","bull","bullmq","mqtt","nats","@aws-sdk/client-sqs","@aws-sdk/client-sns","@aws-sdk/client-eventbridge","@google-cloud/pubsub","@azure/service-bus"],ye=new Set(Pr);function st(e){if(!e||e.startsWith(".")||e.startsWith("/"))return!1;if(ye.has(e))return!0;let t=e.indexOf("/");if(t<0)return!1;let r=e.slice(0,t);if(ye.has(r))return!0;let n=e.indexOf("/",t+1);return n<0?!1:ye.has(e.slice(0,n))}c(st,"isArkRunTransportBypassSpecifier");function rt(e){if(Lr.has(e))return"factory";switch(e){case"publisher":return"publisher";case"publish":return"publish";case"raise":case"raiseAsync":return"raise";case"send":case"sendTo":return"send";case"subscribe":return"subscribe";case"registerHandler":return"register-handler";case"resolve":return"resolve";case"resolveSingleton":return"resolve-singleton";default:return}}c(rt,"arkRunKernelCallKind");function ot(e,t){let r=1;for(let n=0;n<t;n+=1)e.charCodeAt(n)===10&&(r+=1);return r}c(ot,"lineAt");function he(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:\\])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}c(he,"stripCommentsPreservingLines");function Kr(e,t){let r=e.slice(t),n=/^\s*(['"])((?:\\.|[^\\])*?)\1/.exec(r);if(!n)return;let s=n[2]??"";return s.length>0?s:void 0}c(Kr,"firstStringLiteralArg");function nt(e,t,r){let n=Math.max(0,t-r.length-8),s=e.slice(n,t);return new RegExp(`\\b${r}\\s+$`).test(s)}c(nt,"keywordBefore");function Q(e,t){let r=/\b(?:import|export)(\s+type)?\s+([\s\S]*?)\s+from\s*['"]([^'"]+)['"]/g,n;for(;(n=r.exec(e))!==null;)n[1]||t(n[2]??"",n[3]??"")}c(Q,"parseValueImportClause");function it(e,t){Q(he(e),t)}c(it,"forEachArkRunValueImportClause");function Mr(e){let t=new Map,r=new Set;return Q(e,(n,s)=>{if(!M(s))return;let o=/\*\s+as\s+([A-Za-z_][A-Za-z0-9_]*)/.exec(n);o?.[1]&&r.add(o[1]);let i=/^([A-Za-z_][A-Za-z0-9_]*)\s*(?:,|$)/.exec(n.trim());i?.[1]&&t.set(i[1],i[1]);let a=/\{([^}]*)\}/.exec(n);if(a?.[1])for(let l of a[1].split(",")){let p=l.trim();if(!p||p.startsWith("type "))continue;let u=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(p);if(u){t.set(u[2],u[1]);continue}let d=/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(p);d?.[1]&&t.set(d[1],d[1])}}),{named:t,namespaces:r}}c(Mr,"collectKernelImportBindings");function $r(e,t){let r=new Set(t);return Q(e,(n,s)=>{let o=/\{([^}]*)\}/.exec(n);if(o?.[1])for(let i of o[1].split(",")){let a=i.trim();if(!a||a.startsWith("type "))continue;let l=/^([A-Za-z_][A-Za-z0-9_]*)\s+as\s+([A-Za-z_][A-Za-z0-9_]*)$/.exec(a),p=l?.[2]??/^([A-Za-z_][A-Za-z0-9_]*)$/.exec(a)?.[1],u=l?.[1]??p;!p||!u||!/^[A-Z]/.test(u)||(M(s)||t.has(u)||t.has(p))&&(r.add(p),r.add(u))}}),r}c($r,"collectImportedConstructors");function Ur(e,t){let r;return Q(e,(n,s)=>{!r&&new RegExp(`\\b${t}\\b`).test(n)&&(r=s)}),r}c(Ur,"importedFromForName");function ee(e,t){let r=he(t),n=Mr(r),s=[],o=/\b([A-Za-z_][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,i;for(;(i=o.exec(r))!==null;){let a=i[1],l=i.index;if(nt(r,l,"function")||nt(r,l,"class"))continue;let u=r.slice(0,l).match(/([A-Za-z_][A-Za-z0-9_]*)\s*\.\s*$/)?.[1],d=n.named.get(a)??a,f=rt(d)??rt(a);if(!f)continue;let g=n.named.has(a)||u!==void 0&&n.namespaces.has(u);if(f!=="factory"&&(!g&&u===void 0||u&&Fr.has(u)&&!g))continue;let y=Kr(r,l+i[0].length);s.push({file:e,line:ot(t,l),kind:f,callee:a,viaImport:g,...u?{receiver:u}:{},...y?{nameLiteral:y}:{}})}return s}c(ee,"extractArkRunKernelCallsFromSource");function Re(e,t,r){let n=he(t),s=$r(n,r),o=[],i=/\bnew\s+(?:[A-Za-z_][A-Za-z0-9_]*\s*\.\s*)*([A-Z][A-Za-z0-9_]*)\s*(?:<[^>]*>)?\s*\(/g,a;for(;(a=i.exec(n))!==null;){let l=a[1];if(Dr.has(l)||!s.has(l))continue;let p=Ur(n,l);o.push({file:e,line:ot(t,a.index),typeName:l,...p?{importedFrom:p}:{}})}return o}c(Re,"extractArkRunManagedNewsFromSource");var Hr=["ensureInvariants","assertInvariants","validate","publish","emit","raise","record"],jr=new RegExp(`\\b(${Hr.join("|")})\\b`),lt="(?:_?pendingEvents|domainEvents|uncommittedEvents|recordedEvents)",Vr=new RegExp(`\\bthis\\.${lt}\\.push\\s*\\(`),Br=new RegExp(`^this\\.${lt}\\s*=\\s*\\[\\s*\\]`),Gr=/^this\.[A-Za-z_][A-Za-z0-9_]*\s*=\s*\[\s*\]/,Wr=/\bthis\.[A-Za-z_][A-Za-z0-9_]*\s*=(?!=)/g,zr="truncatedUntil";function qr(e){return jr.test(e)||Vr.test(e)}c(qr,"referencesGuardOrPublish");function Zr(e,t,r){let n=e.slice(t);if(Br.test(n))return!0;if(!Gr.test(n))return!1;if(r&&/^pullEvents$/i.test(r))return!0;let s=t>200?t-200:0;return/\bpullEvents\b/.test(e.slice(s,t+200))}c(Zr,"isIdiomaticEventsReset");function Yr(e,t){let r=new RegExp(Wr.source,"g"),n;for(;(n=r.exec(t))!==null;)if(!Zr(t,n.index,e))return!0;return!1}c(Yr,"methodAssignsThis");function Xr(e,t){return t==null||Object.defineProperty(e,zr,{value:t,enumerable:!1,configurable:!0}),e}c(Xr,"attachShapeTruncation");var Jr=new Set(["public","private","protected","static","async","readonly","abstract","override","declare","get","set"]),Qr=new Set(["if","match","when"]);function te(e,t){let r=e[t];if(r==="/"&&e[t+1]==="/"){let n=e.indexOf(`
4
+ `,t);return n===-1?e.length:n}if(r==="/"&&e[t+1]==="*"){let n=e.indexOf("*/",t+2);return n===-1?e.length:n+2}if(r==="'"||r==='"'||r==="`"){let n=t+1;for(;n<e.length;){if(e[n]==="\\"){n+=2;continue}if(e[n]===r)return n+1;n+=1}return e.length}return t}c(te,"skipStringOrComment");function B(e,t){let r=t;for(;r<e.length;){if(/\s/.test(e[r])){r+=1;continue}if(e[r]==="/"&&(e[r+1]==="/"||e[r+1]==="*")){r=te(e,r);continue}break}return r}c(B,"skipWsAndComments");function at(e,t){let r=e[t];if(!r||!/[A-Za-z_]/.test(r))return null;let n=t+1;for(;n<e.length&&/[A-Za-z0-9_]/.test(e[n]);)n+=1;return{ident:e.slice(t,n),end:n}}c(at,"readIdent");function Ae(e,t,r,n){if(e[t]!==r)return null;let s=1,o=t+1;for(;o<e.length&&s>0;){let i=te(e,o);if(i!==o){o=i;continue}let a=e[o];a===r?s+=1:a===n&&(s-=1),o+=1}return s===0?o:null}c(Ae,"skipBalanced");function en(e){let t=[],r=0,n;for(;r<e.length&&(r=B(e,r),!(r>=e.length));){if(e[r]===";"){r+=1;continue}let s=[],o=r;for(;;){let u=at(e,o);if(!u||!Jr.has(u.ident))break;s.push(u.ident),o=B(e,u.end)}let i=at(e,o);if(!i){r+=1;continue}if(o=B(e,i.end),e[o]==="<"){let u=Ae(e,o,"<",">");if(u==null){n=e.length;break}o=B(e,u)}if(e[o]==="("){let u=Ae(e,o,"(",")");if(u==null){n=e.length;break}if(o=B(e,u),e[o]===":")for(o+=1;o<e.length&&e[o]!=="{"&&e[o]!==";";){let d=te(e,o);if(d!==o){o=d;continue}o+=1}if(e[o]==="{"){let d=Ae(e,o,"{","}");if(d==null){n=e.length;break}t.push({name:i.ident,modifiers:s,kind:"method",body:e.slice(o+1,d-1)}),r=d;continue}if(e[o]===";"){r=o+1;continue}r=o+1;continue}let a=0,l=0,p=0;for(;o<e.length;){let u=te(e,o);if(u!==o){o=u;continue}let d=e[o];if(d==="{")a+=1;else if(d==="}"){if(a===0)break;a-=1}else if(d==="(")l+=1;else if(d===")")l-=1;else if(d==="[")p+=1;else if(d==="]")p-=1;else if(d===";"&&a===0&&l===0&&p===0){o+=1;break}o+=1}t.push({name:i.ident,modifiers:s,kind:"field",body:""}),r=o}return{members:t,truncatedAt:n}}c(en,"scanClassMembers");function ke(e,t){let r=[],n=/export\s+(?:abstract\s+)?class\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?:extends\s+[^{]+)?(?:implements\s+[^{]+)?\{/g,s;for(;(s=n.exec(t))!==null;){let o=s[1],i=s.index+s[0].length,a=1,l=i;for(;l<t.length&&a>0;){let A=t[l];A==="{"?a+=1:A==="}"&&(a-=1),l+=1}let p=t.slice(i,l-1),u=a>0,d=en(p),f=u?t.length:d.truncatedAt==null?void 0:i+d.truncatedAt,g=d.members.filter(A=>!(A.kind!=="field"||A.name==="constructor"||A.modifiers.includes("private")||A.modifiers.includes("protected")||A.modifiers.includes("readonly")||A.modifiers.includes("static")||A.modifiers.includes("get")||A.modifiers.includes("set"))),y=g.length>0,R=/(?:^|[\n;{])\s*(?:public\s+)?set\s+[a-zA-Z_]/.test(p),k=/(?:^|[\n;{])\s*private\s+constructor\s*\(/.test(p),b=/(?:^|[\n;{])\s*(?:public\s+)?constructor\s*\(/.test(p)&&!k,Z=/(?:^|[\n;{])\s*static\s+(?:async\s+)?(?:create|of|from|parse|build|make|new)\s*[<(]/.test(p)||/(?:^|[\n;{])\s*static\s+(?:async\s+)?[A-Za-z_][A-Za-z0-9_]*\s*\([^)]*\)\s*:\s*[A-Za-z_]/.test(p),D=[];for(let A of d.members)A.kind==="method"&&A.name!=="constructor"&&(A.modifiers.includes("static")||A.modifiers.includes("get")||A.modifiers.includes("set")||Qr.has(A.name)||Yr(A.name,A.body)&&D.push({name:A.name,referencesGuardOrPublish:qr(A.body)}));let F=d.members.filter(A=>A.kind==="method").length<=1&&g.length>=2&&y;r.push(Xr({file:e,className:o,exported:!0,hasPublicMutableFields:y,hasPublicSetters:R,hasPublicConstructor:b,hasStaticFactory:Z,mutatingMethods:[...D],dataOnly:F},f))}return r}c(ke,"extractClassShapesFromSource");function tn(e){if(!e)return{};let t=typeof e.governedPercent=="number"?e.governedPercent:null,r=typeof e.populatedLayerCount=="number"?e.populatedLayerCount:null;return r==null&&typeof e.classifiedFiles=="number"&&(r=e.classifiedFiles>0?1:0),{governedPercent:t,populatedLayerCount:r}}c(tn,"normalizeExtraMergeTeethClassification");function re(e){let t=tn(e),r=typeof t.governedPercent=="number"?t.governedPercent:null,n=typeof t.populatedLayerCount=="number"?t.populatedLayerCount:null;return r==null&&n==null?!0:(r??0)>=50&&(n??0)>=1}c(re,"extraMergeTeethAllowed");var rn=["arkrun-kernel-in-domain","arkrun-direct-new","arkrun-transport-bypass"],nn=new Set(rn);function sn(e){return nn.has(e)}c(sn,"isArkRunEditorSensor");var ct={"arkrun-missing-root":"ARKRUN_MISSING_ROOT","arkrun-kernel-in-domain":"ARKRUN_KERNEL_IN_DOMAIN","arkrun-direct-new":"ARKRUN_DIRECT_NEW","arkrun-undeclared-emit":"ARKRUN_UNDECLARED_EMIT","arkrun-undeclared-handle":"ARKRUN_UNDECLARED_HANDLE","arkrun-undeclared-depend":"ARKRUN_UNDECLARED_DEPEND","arkrun-transport-bypass":"ARKRUN_TRANSPORT_BYPASS"},on="ARKRUN_INTERACTION_NAME_INCOMPLETE";function pt(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)||/^(?:entit(?:y|ies)|aggregates?)(?:$|(?=[A-Z_\-\s]))/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(pt,"isDomainRoleLayer");function an(e,t){return e.file.localeCompare(t.file)||e.ruleId.localeCompare(t.ruleId)||e.line-t.line||e.message.localeCompare(t.message)}c(an,"compareFindings");function _(e,t,r,n,s,o,i){let a=e.mode==="enforced"&&i;return{ruleId:ct[t],sensor:t,message:s,file:r,line:n,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:K({ruleId:ct[t],fromLayer:o?.fromLayer,target:o?.target})}}c(_,"finding");function ln(e,t){let r=[],n=[],s=[],o=[];for(let i of e)i.file===t&&(r.push(...i.uses),n.push(...i.reactsTo),s.push(...i.raises),o.push(...i.sends));return{uses:new Set(r),reactsTo:new Set(n),raises:new Set(s),sends:new Set(o)}}c(ln,"bagForFile");function ut(e){return e==="publisher"||e==="publish"||e==="raise"||e==="send"}c(ut,"emitKinds");function dt(e){return e==="subscribe"||e==="register-handler"}c(dt,"handleKinds");function cn(e){return e==="resolve"||e==="resolve-singleton"}c(cn,"dependKinds");function un(e,t,r){let n=[],s=e.kernelRoots??e.compositionRoots;if(s.length===0)return n.push(_(e,"arkrun-missing-root","ark.config.json",1,"ArkRun kernelRoots is empty; no createArkKernel factory site is declared.",void 0,r)),n;let o=new Map;for(let i of t){let a=o.get(i.matchedRoot)??[];a.push(i),o.set(i.matchedRoot,a)}for(let i of s){let a=[...o.get(i)??[]].sort((p,u)=>p.file.localeCompare(u.file));if(a.length===0){n.push(_(e,"arkrun-missing-root","ark.config.json",1,`ArkRun kernel root ${JSON.stringify(i)} matched no governed files and has no createArkKernel factory.`,{target:i},r));continue}if(a.some(p=>p.hasKernelFactory))continue;let l=a[0];n.push(_(e,"arkrun-missing-root",l.file,1,`ArkRun kernel root ${JSON.stringify(i)} has no createArkKernel / createStrictArkKernel factory.`,{target:i},r))}return n}c(un,"evaluateMissingRoot");function dn(e,t,r,n,s){let o=new Map(t.map(a=>[a.name,a.intentPrefixes??[]])),i=[];for(let a of r){let l=a.specifier;if(!l||!M(l))continue;let p=n(a.from);p&&pt(p,o.get(p)??[])&&i.push(_(e,"arkrun-kernel-in-domain",a.from,a.line,`${p} must not import kernel module ${JSON.stringify(l)}.`,{fromLayer:p,target:l},s))}return i}c(dn,"evaluateKernelInDomain");function pn(e,t,r,n,s,o){let i=new Set(e.managedLayers);if(i.size===0)return[];let a=new Map(t.map(u=>[u.name,u.intentPrefixes??[]])),l=new Set(n.filter(u=>u.hasKernelFactory).map(u=>u.file)),p=[];for(let u of r){if(l.has(u.file))continue;let d=u.typeName;if(e.ignoreDirectNewForErrors!==!1&&(d.endsWith("Error")||d==="Error")||d.endsWith("DTO")||d.endsWith("VO"))continue;let f=s(u.file);!f||!i.has(f)||pt(f,a.get(f)??[])||p.push(_(e,"arkrun-direct-new",u.file,u.line,`${f} must not construct ${u.typeName} with new outside an ArkRun composition-root factory.`,{fromLayer:f,target:u.typeName},o))}return p}c(pn,"evaluateDirectNew");function fn(e,t,r,n,s){let o=[],i=[];if(e.requireDeclarations!==!0)return{findings:o,completenessReasons:i};let a=new Set(e.managedLayers);if(a.size===0)return{findings:o,completenessReasons:i};for(let l of t){if(!ut(l.kind)&&!dt(l.kind)&&!cn(l.kind))continue;let p=n(l.file);if(!p||!a.has(p))continue;if(!l.nameLiteral){e.mode==="enforced"&&i.push({code:on,file:l.file,message:`ArkRun ${l.kind} call in ${l.file} has no string-literal name; enforced extra cannot prove the declaration.`});continue}let u=ln(r,l.file);if(ut(l.kind)){if(u.raises.has(l.nameLiteral)||u.sends.has(l.nameLiteral))continue;o.push(_(e,"arkrun-undeclared-emit",l.file,l.line,`Emit ${JSON.stringify(l.nameLiteral)} is not declared in raises or sends.`,{fromLayer:p,target:l.nameLiteral},s));continue}if(dt(l.kind)){if(u.reactsTo.has(l.nameLiteral))continue;o.push(_(e,"arkrun-undeclared-handle",l.file,l.line,`Handle ${JSON.stringify(l.nameLiteral)} is not declared in reactsTo.`,{fromLayer:p,target:l.nameLiteral},s));continue}u.uses.has(l.nameLiteral)||o.push(_(e,"arkrun-undeclared-depend",l.file,l.line,`Depend ${JSON.stringify(l.nameLiteral)} is not declared in uses.`,{fromLayer:p,target:l.nameLiteral},s))}return{findings:o,completenessReasons:i}}c(fn,"evaluateUndeclared");function gn(e,t,r,n){let s=new Set(e.managedLayers);if(s.size===0)return[];let o=[];for(let i of t){if(i.typeOnly)continue;let a=i.specifier;if(!a||!st(a))continue;let l=r(i.from);!l||!s.has(l)||o.push(_(e,"arkrun-transport-bypass",i.from,i.line,`${l} must not import broker/queue/emitter ${JSON.stringify(a)}; use the ArkRun kernel transport.`,{fromLayer:l,target:a},n))}return o}c(gn,"evaluateTransportBypass");function mn(e){let t=e.arkRun;if(!t)return{findings:[],completenessReasons:[]};let r=re(e.classification),n=fn(t,e.kernelCalls,e.declarations,e.layerForFile,r),s=[...un(t,e.compositionRootHits,r),...dn(t,e.layers,e.dependencies,e.layerForFile,r),...pn(t,e.layers,e.managedNews,e.compositionRootHits,e.layerForFile,r),...n.findings,...gn(t,e.dependencies,e.layerForFile,r)].sort(an),o=[...n.completenessReasons].sort((i,a)=>{let l=`${i.code}\0${i.file??""}\0${i.message}`,p=`${a.code}\0${a.file??""}\0${a.message}`;return l<p?-1:l>p?1:0});return{findings:s,completenessReasons:o}}c(mn,"evaluateArkRunSensors");function be(e){return{findings:mn(e).findings.filter(r=>sn(r.sensor)),completenessReasons:[]}}c(be,"evaluateArkRunEditorSensors");function yn(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}c(yn,"declarationIsTypeOnly");function gt(e){try{return Ee.default.existsSync(e)?Ee.default.readFileSync(e,"utf8"):null}catch{return null}}c(gt,"readUtf8");function ft(e,t){let r=e.lintedFilename(t),n=e.findConfigPath(r),s=n?e.loadArkConfig(n):null;if(!s?.arkRun||!n||!r)return null;let o=w.default.dirname(n),i=w.default.isAbsolute(r)?r:w.default.resolve(r),a=w.default.relative(o,i).split(w.default.sep).join("/");if(!e.sourceIsInAnalysisScope(s,a))return null;let l=E(a,s.layers);return l?{extra:s.arkRun,config:s,root:o,absFile:i,relFile:a,fromLayer:l}:null}c(ft,"loadEditorFile");function hn(e,t,r){let n=ee(t,r).some(o=>o.kind==="factory"),s=[];for(let o of e.compositionRoots){try{if(!x(o).test(t))continue}catch{continue}s.push({file:t,matchedRoot:o,hasKernelFactory:n})}return s}c(hn,"compositionRootHitsForFile");function Rn(e,t,r){let n=new Set(ke(t.relFile,r).map(s=>s.className));return it(r,(s,o)=>{if(M(o))return;let i=e.resolveImportSpecifier(t.absFile,o,t.root);if(!i)return;let a=w.default.relative(t.root,i).split(w.default.sep).join("/");if(a.startsWith(".."))return;let l=gt(i);if(l!==null)for(let p of ke(a,l))n.add(p.className)}),n}c(Rn,"admittedTypeNamesForEditor");function mt(e,t,r,n,s,o){e.reportAdapterDiagnostic(t,r,n,{ruleId:s.ruleId,file:s.file,fromLayer:s.fromLayer,target:s.target,message:s.message,line:s.line,severity:s.severity,failsStrict:s.failsStrict,nextAction:s.nextAction},o)}c(mt,"reportFinding");function An(e){let t=e.callee;if(t?.type==="Identifier"&&t.name&&/^[A-Z]/.test(t.name))return t.name;let r=t?.property?.name;if(r&&/^[A-Z]/.test(r)&&t?.computed!==!0)return r}c(An,"constructedTypeName");function kn(e,t){return e.type?.startsWith("Export")?"export":t}c(kn,"specifierEdgeKind");function bn(e,t,r,n,s){let o=c((i,a,l,p)=>{if(typeof a!="string"||a.length===0)return;let u=i.loc?.start?.line??1,d={from:r.relFile,specifier:a,kind:p,typeOnly:l,line:u,resolution:"resolved-external"},{findings:f}=be({arkRun:r.extra,layers:r.config.layers,kernelCalls:[],managedNews:[],compositionRootHits:[],declarations:[],dependencies:[d],layerForFile:c(g=>g===r.relFile?r.fromLayer:E(g,r.config.layers),"layerForFile")});for(let g of f)g.sensor===n&&mt(e,t,i,s,g,{fromLayer:g.fromLayer??r.fromLayer,specifier:a,target:g.target??a})},"check");return{ImportDeclaration(i){let a=i,l=(a.specifiers??[]).filter(u=>u.type==="ImportSpecifier"),p=l.length>0&&l.length===(a.specifiers??[]).length&&l.every(u=>u.importKind==="type");o(i,a.source?.value,a.importKind==="type"||p||yn(i),"import")},ImportExpression(i){let a=i;a.source?.type==="Literal"&&o(i,a.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(i){let a=i;o(i,a.moduleReference?.expression?.value,a.importKind==="type"||a.isTypeOnly===!0,"require")},ExportNamedDeclaration(i){let a=i;if(!a.source)return;let l=a.specifiers??[],p=l.length>0&&l.every(u=>u.exportKind==="type");o(i,a.source.value,a.exportKind==="type"||p,kn(i,"export"))},ExportAllDeclaration(i){let a=i;o(i,a.source?.value,a.exportKind==="type","export")},CallExpression(i){let a=i;a.callee?.type==="Identifier"&&a.callee.name==="require"&&a.arguments?.[0]?.type==="Literal"&&!e.isLocallyBound(t,i,"require")&&o(i,a.arguments[0].value,!1,"require")}}}c(bn,"importListeners");function En(e,t,r){let n=gt(r.absFile)??"",s=Rn(e,r,n),o=Re(r.relFile,n,s),{findings:i}=be({arkRun:r.extra,layers:r.config.layers,kernelCalls:ee(r.relFile,n),managedNews:o,compositionRootHits:hn(r.extra,r.relFile,n),declarations:[],dependencies:[],layerForFile:c(l=>l===r.relFile?r.fromLayer:E(l,r.config.layers),"layerForFile")}),a=i.filter(l=>l.sensor==="arkrun-direct-new");return{NewExpression(l){let p=An(l);if(!p)return;let u=l.loc?.start?.line,d=a.find(f=>f.target===p&&(u===void 0||f.line===u))??a.find(f=>f.target===p);d&&mt(e,t,l,"directNew",d,{fromLayer:d.fromLayer??r.fromLayer,typeName:p,target:d.target??p})}}}c(En,"directNewListener");function yt(e){let t=c((r,n,s,o)=>({meta:{type:"problem",docs:{description:n},messages:{[s]:o},schema:[]},create(i){let a=ft(e,i);return a?bn(e,i,a,r,s):{}}}),"createImportRule");return{noArkRunKernelInDomain:t("arkrun-kernel-in-domain","Disallow Domain-role imports of arkgate/runtime when arkRun is on (same sensor as ark-check).","kernelInDomain",'{{fromLayer}} must not import kernel module "{{specifier}}".'),noArkRunTransportBypass:t("arkrun-transport-bypass","Disallow homemade broker/queue/emitter imports in arkRun managed layers (same sensor as ark-check).","transportBypass",'{{fromLayer}} must not import broker/queue/emitter "{{specifier}}"; use the ArkRun kernel transport.'),noArkRunDirectNew:{meta:{type:"problem",docs:{description:"Disallow `new` of ArkRun-admitted types outside a composition-root factory (on-disk import/`new` envelope)."},messages:{directNew:"{{fromLayer}} must not construct {{typeName}} with new outside an ArkRun composition-root factory."},schema:[]},create(r){let n=ft(e,r);return n?En(e,r,n):{}}}}}c(yt,"createArkRunEslintRules");var Sn="createOrderPlane";var In=/\bfrom\s+['"](?:@?prisma\/client|@supabase\/|drizzle-orm(?:\/[^'"]+)?|postgres(?:\/[^'"]+)?|typeorm|knex|mongodb|pg|mysql2|mongoose|better-sqlite3|ioredis|redis|kysely|sequelize)['"]|require\(\s*['"](?:@?prisma\/client|pg|postgres(?:\/[^'"]+)?|drizzle-orm(?:\/[^'"]+)?|knex|typeorm|mongoose)/,xn=/\bfrom\s+['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)(?:\.[cm]?[jt]sx?)?['"]|require\(\s*['"](?:@\/|~\/)?(?:[\w.-]+\/)*(?:db|database|prisma|drizzle)/,Nn=/\b(?:db|tx|client|prisma(?:Client)?|drizzle)\b(?:\s*\.\s*[A-Za-z_]\w*)*\s*\.\s*(?:insert(?:One|Many)?|update(?:One|Many)?|upsert|delete(?:One|Many)?|createMany|create|replaceOne|findOneAnd(?:Update|Delete|Replace))\s*\(|\bINSERT\s+INTO\b|\bUPDATE\s+[A-Za-z_][\w.]*\s+SET\b|\bDELETE\s+FROM\b/i;function _n(e){return In.test(e)||xn.test(e)}c(_n,"sourceImportsPersistenceDriver");function ne(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}c(ne,"escapeRegExp");function se(e){return e==="arkgate/order"||e.startsWith("arkgate/order/")}c(se,"isArkOrderModuleSpecifier");function G(e,t){let r=1;for(let n=0;n<t&&n<e.length;n+=1)e[n]===`
5
+ `&&(r+=1);return r}c(G,"lineAt");function W(e){return e.replace(/\/\*[\s\S]*?\*\//g,t=>t.replace(/[^\n]/g," ")).replace(/(^|[^:])\/\/.*$/gm,t=>t.replace(/\/\/.*$/,r=>" ".repeat(r.length)))}c(W,"stripCommentsPreservingLines");function ht(e,t){let r=W(t),n=[],s=/\bcreateOrderPlane\s*(?:<[^>]*>)?\s*\(/g,o;for(;(o=s.exec(r))!==null;)n.push({file:e,line:G(t,o.index),callee:Sn});return n}c(ht,"extractArkOrderPlaneCallsFromSource");function Rt(e,t){let r=W(t),n=[],s=/\.((?:update|patch|set|mutate))\s*\(/g,o;for(;(o=s.exec(r))!==null;){let i=o[1],a=r.slice(Math.max(0,o.index-80),o.index);!/\b(?:plane|orderPlane)\s*(?:\?|!)?$/.test(a)&&!/\bcreateOrderPlane\b/.test(r)||n.push({file:e,line:G(t,o.index),method:i})}return n}c(Rt,"extractArkOrderGenericUpdatesFromSource");function At(e,t,r){if(r.length===0)return[];let n=W(t);if(!_n(n)||!Nn.test(n))return[];let s=[],o=new Set;for(let i of r){if(!i)continue;let a=new RegExp(`(?:\\b${ne(i)}\\s*:\\s*(?!string\\b|number\\b|boolean\\b|null\\b|[A-Z])|['"]${ne(i)}['"]\\s*:|[{\\,]\\s*${ne(i)}\\s*[\\,}]|\\.${ne(i)}\\s*=)`,"g"),l;for(;(l=a.exec(n))!==null;){let p=`${i}:${l.index}`;if(!o.has(p)){o.add(p),s.push({file:e,line:G(t,l.index),key:i});break}}}return s}c(At,"extractArkOrderXiFieldWritesFromSource");function kt(e,t){let r=W(t),n=[],s=/(?:\b(?:xi|release|current|pattern|house)\w*|\.xi)\s*=\s*[^\n;]{0,160}?\bingest\s*\(/gi,o;for(;(o=s.exec(r))!==null;)n.push({file:e,line:G(t,o.index)});return n}c(kt,"extractArkOrderIngestWritesXiFromSource");function bt(e,t){let r=W(t),n=[],s=/\.release\s*\(\s*\{([^}]*)\}/g,o;for(;(o=s.exec(r))!==null;){let a=(o[1]??"").match(/\b[A-Za-z_][\w]*\s*:/g)??[];a.length!==0&&n.push({file:e,line:G(t,o.index),keyCount:a.length})}return n}c(bt,"extractArkOrderReleaseKeyCountsFromSource");var Et=new Map;function St(e){return/[.*+?^${}()|[\]\\]/.test(e)?`\\${e}`:e}c(St,"escapeAppliesToLiteral");function On(e){let t="";for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"&&r+1<e.length){let s=e[r+1];if("*?{}[],".includes(s)||s==="\\"){t+="\\"+s,r+=1;continue}t+="/";continue}t+=n}return t}c(On,"normalizeAppliesToGlob");function wn(e){let t=0;for(let r=0;r<e.length;r+=1){let n=e[r];if(n==="\\"){r+=1;continue}if(n==="{")t+=1;else if(n==="}"&&(t-=1,t<0))return!1}return t===0}c(wn,"appliesToBracesBalanced");function Cn(e){let t=Et.get(e);if(t)return t;let r=On(e),n=wn(r),s="",o=0;for(let a=0;a<r.length;a+=1){let l=r[a];l==="\\"&&a+1<r.length?(s+=St(r[a+1]),a+=1):l==="*"?r[a+1]==="*"?r[a+2]==="/"?(s+="(?:.*/)?",a+=2):(s+=".*",a+=1):s+="[^/]*":l==="?"?s+="[^/]":l==="{"&&n?(s+="(?:",o+=1):l==="}"&&n&&o>0?(s+=")",o-=1):l===","&&n&&o>0?s+="|":s+=St(l)}let i=new RegExp(`^${s}$`);return Et.set(e,i),i}c(Cn,"globToRegExp");var It={"arkorder-missing-plane":"ARKORDER_MISSING_PLANE","arkorder-kernel-in-domain":"ARKORDER_KERNEL_IN_DOMAIN","arkorder-generic-update":"ARKORDER_GENERIC_UPDATE","arkorder-too-many-params":"ARKORDER_TOO_MANY_PARAMS","arkorder-ingest-writes-xi":"ARKORDER_INGEST_WRITES_XI","arkorder-xi-field-write":"ARKORDER_XI_FIELD_WRITE","arkorder-information-budget":"ARKORDER_INFORMATION_BUDGET","arkorder-xi-ttl":"ARKORDER_XI_TTL"};function vn(e,t){return!t||t.length===0?!0:t.some(r=>Cn(r).test(e))}c(vn,"matchesArkOrderAppliesTo");function Tn(e,t=[]){let r=e.trim();return/^domain(?:model)?$/i.test(r)||/^domain(?=[A-Z_\-\s])/i.test(r)?!0:t.some(n=>{let s=n.trim().replace(/\.+$/,"");return s==="Domain"||s.startsWith("Domain.")})}c(Tn,"isDomainRoleLayer");function C(e,t,r,n,s,o,i){let a=e.mode==="enforced"&&i;return{ruleId:It[t],sensor:t,message:s,file:r,line:n,...o?.fromLayer?{fromLayer:o.fromLayer}:{},...o?.target?{target:o.target}:{},severity:a?"error":"warning",failsStrict:a,nextAction:K({ruleId:It[t],fromLayer:o?.fromLayer,target:o?.target})}}c(C,"finding");function Ln(e){let t=e.arkOrder;if(!t)return{findings:[],completenessReasons:[]};let r=re(e.classification),n=[],s=t.planeRoots;if(t.mode==="enforced"&&s.length===0)n.push(C(t,"arkorder-missing-plane","ark.config.json",1,"ArkOrder planeRoots is empty; no createOrderPlane site is declared.",void 0,r));else{let l=new Map;for(let p of e.planeRootHits){let u=l.get(p.matchedRoot)??[];u.push(p),l.set(p.matchedRoot,u)}for(let p of s){let u=l.get(p)??[];if(u.length===0){n.push(C(t,"arkorder-missing-plane","ark.config.json",1,`ArkOrder plane root ${JSON.stringify(p)} matched no governed files and has no createOrderPlane factory.`,{target:p},r));continue}u.some(d=>d.hasPlaneFactory)||n.push(C(t,"arkorder-missing-plane",u[0].file,1,`ArkOrder plane root ${JSON.stringify(p)} has no createOrderPlane factory.`,{target:p},r))}}let o=new Map(e.layers.map(l=>[l.name,l.intentPrefixes??[]]));for(let l of e.dependencies){let p=l.specifier;if(!p||!se(p))continue;let u=e.layerForFile(l.from);u&&Tn(u,o.get(u)??[])&&n.push(C(t,"arkorder-kernel-in-domain",l.from,l.line,"Domain-role layer imports arkgate/order; Domain stays plane-free.",{fromLayer:u,target:p},r))}for(let l of e.genericUpdates)n.push(C(t,"arkorder-generic-update",l.file,l.line,`Generic ${l.method}() on the order plane rewrites \u03BE; Haken forbids it.`,{target:l.method},r));let i=t.xiKeys??[];for(let l of e.releaseKeyCounts??[])l.keyCount<=t.maxXiKeys||n.push(C(t,"arkorder-too-many-params",l.file,l.line,`release() freezes ${l.keyCount} keys; maxXiKeys is ${t.maxXiKeys} (few slow modes).`,{target:String(l.keyCount)},r));for(let l of e.ingestWritesXi??[])n.push(C(t,"arkorder-ingest-writes-xi",l.file,l.line,"ingest() result is assigned into a Release or \u03BE store; ingest may absorb or escalate, never mint a pattern.",void 0,r));let a=new Set(t.managedLayers);for(let l of i.length===0?[]:e.xiFieldWrites??[]){let p=e.layerForFile(l.file);!p||!a.has(p)||vn(l.file,t.appliesTo)&&n.push(C(t,"arkorder-xi-field-write",l.file,l.line,`File writes slow key ${JSON.stringify(l.key)} through a persistence driver; route the field through ingest or a pattern change through proposeRelease.`,{fromLayer:p,target:l.key},r))}return n.sort((l,p)=>l.file.localeCompare(p.file)||l.ruleId.localeCompare(p.ruleId)||l.line-p.line),{findings:n,completenessReasons:[]}}c(Ln,"evaluateArkOrderSensors");function xt(e){if(!e.arkOrder)return[];let t=ht(e.file,e.source),r=Rt(e.file,e.source),n=e.arkOrder.xiKeys??[];return Ln({arkOrder:e.arkOrder,layers:[],planeCalls:t,genericUpdates:r,planeRootHits:[],xiFieldWrites:At(e.file,e.source,n),ingestWritesXi:kt(e.file,e.source),releaseKeyCounts:bt(e.file,e.source),dependencies:[],layerForFile:c(()=>e.fromLayer,"layerForFile")}).findings.filter(s=>s.sensor==="arkorder-generic-update"||s.sensor==="arkorder-kernel-in-domain"||s.sensor==="arkorder-xi-field-write"||s.sensor==="arkorder-ingest-writes-xi"||s.sensor==="arkorder-too-many-params")}c(xt,"evaluateArkOrderEditorSensors");function Dn(e){let t=e;return t.sourceCode?.getText?.()??t.getSourceCode?.()?.getText?.()??""}c(Dn,"eslintSourceText");function Nt(e){function t(r){return{meta:{type:"problem",docs:{description:r},messages:{denied:"{{message}}"},schema:[]},create(n){let s=e.lintedFilename(n),o=e.findConfigPath(s),i=o?e.loadArkConfig(o):null;if(!i?.arkOrder)return{};let a=e.toProjectRelative(o,s);if(!e.sourceIsInAnalysisScope(i,a))return{};let l=E(a,i.layers);return{ImportDeclaration(p){let u=typeof p.source?.value=="string"?p.source.value:"";if(r==="ARKORDER_KERNEL_IN_DOMAIN"){if(!se(u)||l!=="DomainModel"&&!/^domain/i.test(l??""))return;e.reportAdapterDiagnostic(n,p,"denied",{ruleId:r,file:a,line:p.loc?.start?.line??1,message:"Domain-role layer imports arkgate/order; Domain stays plane-free."})}},Program(){if(r!=="ARKORDER_GENERIC_UPDATE")return;let p=Dn(n),u=xt({arkOrder:i.arkOrder,file:a,source:p,fromLayer:l}).filter(d=>d.ruleId!=="ARKORDER_KERNEL_IN_DOMAIN");for(let d of u)e.reportAdapterDiagnostic(n,{loc:{start:{line:d.line}}},"denied",{ruleId:d.ruleId,file:d.file,line:d.line,message:d.message})}}}}}return c(t,"createImportRule"),{noArkOrderKernelInDomain:t("ARKORDER_KERNEL_IN_DOMAIN"),noArkOrderGenericUpdate:t("ARKORDER_GENERIC_UPDATE")}}c(Nt,"createArkOrderEslintRules");function L(e){if(typeof e.physicalFilename=="string"&&e.physicalFilename.length>0)return e.physicalFilename;if(typeof e.filename=="string"&&e.filename.length>0)return e.filename;if(typeof e.getFilename=="function")try{let t=e.getFilename();if(typeof t=="string"&&t.length>0)return t}catch{}return""}c(L,"lintedFilename");function v(e,t,r,n,s){let o=et({...n,line:n.line??t.loc?.start?.line,column:n.column??(typeof t.loc?.start?.column=="number"?t.loc.start.column+1:void 0)});return e.report({node:t,messageId:r,...s?{data:s}:{},diagnostic:o}),o}c(v,"reportAdapterDiagnostic");function $(e){if(!e||e==="<input>"||e.startsWith("stdin"))return null;let t=m.default.dirname(m.default.resolve(e));for(;;){let r=m.default.join(t,"ark.config.json");if(O.default.existsSync(r))return r;let n=m.default.dirname(t);if(n===t)return null;t=n}}c($,"findConfigPath");var _t=new Map;function U(e){if(!O.default.existsSync(e))return null;let t=O.default.readFileSync(e,"utf8"),r=_t.get(e);if(r?.source===t)return r.config;let n=Je(t,e).config;return _t.set(e,{source:t,config:n}),n}c(U,"loadArkConfig");function q(e,t){return(e.include??[]).some(n=>{let s=String(n).replace(/\\/g,"/").replace(/^\.\//,"").replace(/\/$/,"");return s==="."||t===s||t.startsWith(`${s}/`)})&&!Ke(t,e)}c(q,"sourceIsInAnalysisScope");function Ot(e){let t=[e,`${e}.ts`,`${e}.tsx`,`${e}.mts`,`${e}.cts`,`${e}.js`,`${e}.jsx`,m.default.join(e,"index.ts"),m.default.join(e,"index.tsx"),m.default.join(e,"index.js")];for(let r of t)try{if(O.default.existsSync(r)&&O.default.statSync(r).isFile())return r}catch{}return null}c(Ot,"existingSourceFile");function wt(e){let t=m.default.resolve(e),r=null;for(;;){let p=m.default.join(t,"tsconfig.json");if(O.default.existsSync(p)){r=p;break}let u=m.default.dirname(t);if(u===t)break;t=u}if(!r)return{baseUrl:e,aliases:[]};let n=c(p=>{try{let u=O.default.readFileSync(p,"utf8");return u=u.replace(/\/\*[\s\S]*?\*\//g,"").replace(/(^|[^:])\/\/.*$/gm,"$1"),JSON.parse(u)}catch{return null}},"loadJsonc"),s=c((p,u)=>{if(u>4)return{};let d=n(p);if(!d)return{};let f=d.compilerOptions??{},g=f.baseUrl,y=f.paths,R=d.extends;if(typeof R=="string"&&!R.startsWith("@")){let k=m.default.resolve(m.default.dirname(p),R.endsWith(".json")?R:`${R}.json`);if(O.default.existsSync(k)){let b=s(k,u+1);g=g??b.baseUrl,y={...b.paths??{},...y??{}}}}return{baseUrl:g,paths:y}},"mergePaths"),o=s(r,0),i=m.default.dirname(r),a=m.default.resolve(i,o.baseUrl||"."),l=[];for(let[p,u]of Object.entries(o.paths||{})){if(!Array.isArray(u)||u.length===0)continue;let d=p.replace(/\*$/,"");d&&l.push({from:d,to:String(u[0]).replace(/\*$/,"")})}return l.sort((p,u)=>u.from.length-p.from.length),{baseUrl:a,aliases:l}}c(wt,"readTsconfigPathAliases");function Ct(e,t){if(!t.startsWith("."))return null;let r=m.default.resolve(m.default.dirname(e),t);return Ot(r)}c(Ct,"resolveRelativeImport");function Ie(e,t,r){if(!t)return null;if(t.startsWith("."))return Ct(e,t);let n=r||m.default.dirname(e),{baseUrl:s,aliases:o}=wt(n),i=o.find(l=>t.startsWith(l.from));if(!i)return null;let a=m.default.resolve(s,`${i.to}${t.slice(i.from.length)}`);return Ot(a)}c(Ie,"resolveImportSpecifier");function ae(e){return typeof e?.value=="string"?e.value:void 0}c(ae,"stringValue");function xe(e){return e?.name??ae(e)}c(xe,"propertyName");function Ne(e){return e.sourceCode??e.getSourceCode?.()}c(Ne,"sourceCodeFor");function vt(e,t){let r=Ne(e)?.getScope?.(t);for(;r;){let n=r.references?.find(s=>s.identifier===t);if(n)return n;r=r.upper??void 0}}c(vt,"referenceFor");function z(e,t,r){let n=vt(e,t);if(n?.resolved)return(n.resolved.defs?.length??0)>0;let s=Ne(e)?.getScope?.(t);for(;s;){let o=s.set?.get(r);if(o)return(o.defs?.length??0)>0;s=s.upper??void 0}return!1}c(z,"isLocallyBound");function Fn(e,t){let r=vt(e,t);return r?r.isValueReference!==!1:t.parent?.type==="VariableDeclarator"&&t.parent.init===t}c(Fn,"isValueIdentifierReference");function Tt(e){if(e?.type==="Identifier"&&e.name)return{root:e,segments:[e.name]};if(!e||!(e.type==="MemberExpression"||!!(e.object&&e.property))||e.computed===!0)return;let r=Tt(e.object),n=xe(e.property);if(!(!r||!n))return{root:r.root,segments:[...r.segments,n]}}c(Tt,"memberExpressionPath");function Pn(e){return xe(e.callee?.property)}c(Pn,"calleePropertyName");function Lt(e,t){return e?.properties?.find(r=>xe(r.key)===t)}c(Lt,"objectProperty");function oe(e,t){return Lt(e,t)!==void 0}c(oe,"objectHasProperty");function Kn(e){let t=Lt(e,"metadata")?.value;return oe(t,"source")}c(Kn,"objectHasMetadataSource");function Dt(e){return Pn(e)==="publish"}c(Dt,"isPublishCall");function Se(e){if(e.importKind==="type"||e.exportKind==="type")return!0;let t=e.specifiers??[];return t.length===0?!1:t.every(r=>r.type==="ImportSpecifier")?t.every(r=>r.importKind==="type"):t.every(r=>r.exportKind==="type")}c(Se,"declarationIsTypeOnly");function Mn(e){let t=e;for(;t?.parent;)t=t.parent;return t?.type==="Program"?t:void 0}c(Mn,"containingProgram");function $n(e){let t=Mn(e)?.body;if(!t)return!1;let r=!1;for(let n of t){if(n.type==="ImportDeclaration"){if(!Se(n))return!1;continue}if(!(n.type==="TSInterfaceDeclaration"||n.type==="TSTypeAliasDeclaration")){if(n.type==="ExportNamedDeclaration"){if(n.declaration){if(n.declaration.type!=="TSInterfaceDeclaration"&&n.declaration.type!=="TSTypeAliasDeclaration")return!1}else if(!Se(n))return!1;r=!0;continue}return!1}}return r}c($n,"sourceProgramExportsOnlyTypes");var Ft={meta:{type:"problem",docs:{description:"Disallow imports that violate ark.config.json layer rules (same contract as arkgate-check)."},messages:{forbiddenImport:"Architecture: {{fromLayer}} must not import {{toLayer}} (ark.config.json). Specifier: {{specifier}}",forbiddenImportHeuristic:"Domain code must not import infrastructure, adapters, repositories, or database modules."},schema:[]},create(e){let t=L(e),r=$(t),n=r?U(r):null,s=r?m.default.dirname(r):null,o=c(i=>{let a=ae(i.source);if(a&&n&&s&&t){let l=m.default.isAbsolute(t)?t:m.default.resolve(t),p=m.default.relative(s,l).split(m.default.sep).join("/");if(!q(n,p))return;let u=E(p,n.layers);if(!u)return;let d=Ie(l,a,s);if(!d)return;let f=m.default.relative(s,d).split(m.default.sep).join("/");if(f.startsWith(".."))return;let g=E(f,n.layers);if(!g)return;let y={fromPath:p,toPath:f,layers:n.layers},R=ue(n.rules,u,g,y),k=R?.rule;if(k){let b=i.type?.startsWith("Export")?"export":"import",Z=Se(i),D=!!k?.peerIsolation,le=Z&&!D,F=D&&R?Fe(R.peerIsolationReason??"cross-slice",{fromPath:p,toPath:f,fromSlice:R.fromSlice,toSlice:R.toSlice}):void 0,A=k?.message?F?`${k.message} (${F})`:k.message:F?`${u} must not ${b} another slice of ${g} (${p} \u2192 ${f}): ${F}`:`${u} must not ${b} ${g}.`;v(e,i,"forbiddenImport",{ruleId:"LAYER_IMPORT_VIOLATION",file:p,fromLayer:u,toLayer:g,target:f,edgeKind:b,...D?{peerIsolation:!0}:{},...Z?{typeOnly:!0}:{},...le?{severity:"warning"}:{},...$n(i)?{sourcePureTypeModule:!0}:{},message:le?`${A} (type-only \u2014 type placement debt; prefer SharedTypes / owning layer; not runtime coupling)`:A},{fromLayer:u,toLayer:g,specifier:a})}return}},"check");return{ImportDeclaration:o,ExportNamedDeclaration:o,ExportAllDeclaration:o}}},Pt={meta:{type:"problem",docs:{description:"Require event bus publish calls to use registered intent creators instead of raw event objects or intent strings."},messages:{rawPublish:"Publish through a registered intent creator; raw event objects or intent strings bypass Ark contracts."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=ae(r),s=me({publishCall:Dt(t),rawIntentName:n,objectHasIntent:oe(r,"intent"),arkPublishCandidate:!1,hasSource:!0});if(s.some(o=>o.ruleId==="RAW_EVENT_PUBLISH")){let o=s.find(i=>i.ruleId==="RAW_EVENT_PUBLISH");v(e,t,"rawPublish",{...o,file:L(e)})}}}}},Kt={meta:{type:"problem",docs:{description:"Require event bus publish calls to include source metadata."},messages:{missingSource:"Strict Ark publish calls must include metadata.source."},schema:[]},create(e){return{CallExpression(t){let r=t.arguments?.[0],n=t.arguments?.[2],o=me({publishCall:Dt(t),rawIntentName:ae(r),objectHasIntent:oe(r,"intent"),arkPublishCandidate:!0,hasSource:Kn(r)||oe(n,"source")}).find(i=>i.ruleId==="PUBLISH_MISSING_SOURCE");o&&v(e,t,"missingSource",{...o,file:L(e)})}}}},Mt={meta:{type:"problem",docs:{description:"Disallow ambient globals from the layer\u2019s forbiddenGlobals in ark.config.json (same purity surface as ark-check). Option `globals` is a standalone fallback when no project config applies."},messages:{forbiddenGlobal:'Ambient global "{{name}}" is forbidden in {{layer}} (ark.config.json); inject the capability through a port instead.',forbiddenGlobalDefault:'Ambient global "{{name}}" is forbidden here; inject the capability through a port instead.',forbiddenModule:'{{layer}} must not use module "{{specifier}}" because it is the import form of forbidden global "{{name}}".'},schema:[{type:"object",properties:{globals:{type:"array",items:{type:"string"}}},additionalProperties:!1}]},create(e){let t=L(e),r=e.options?.[0],n=$(t),s=n?U(n):null,o=n?m.default.dirname(n):null,i=null,a="this layer";if(s&&o&&t){let d=m.default.isAbsolute(t)?t:m.default.resolve(t),f=m.default.relative(o,d).split(m.default.sep).join("/");if(!q(s,f))return{};let g=s.layers?.find(y=>y.name===E(f,s.layers));g?.forbiddenGlobals?.length?(i=new Set(g.forbiddenGlobals),a=g.name):i=null}else r?.globals&&(i=new Set(r.globals));if(!i)return{};let l=typeof Ne(e)?.getScope=="function",p=c((d,f)=>{let g=m.default.isAbsolute(t)?t:m.default.resolve(t),y=o?m.default.relative(o,g).split(m.default.sep).join("/"):t;v(e,d,s?"forbiddenGlobal":"forbiddenGlobalDefault",{ruleId:"FORBIDDEN_GLOBAL",file:y,fromLayer:a,target:f,message:`${a} must not use the ambient global "${f}".`},{name:f,layer:a})},"report"),u=c((d,f,g,y)=>{if(g||typeof f!="string")return;let R=pe(f,i);if(!R)return;let k=m.default.isAbsolute(t)?t:m.default.resolve(t),b=o?m.default.relative(o,k).split(m.default.sep).join("/"):t;v(e,d,"forbiddenModule",{ruleId:"FORBIDDEN_GLOBAL",file:b,fromLayer:a,target:f,edgeKind:y,message:`${a} must not use module "${f}" because it is the import form of forbidden global "${R}".`},{layer:a,name:R,specifier:f,importKind:y})},"reportModule");return{MemberExpression(d){if(d.parent?.type==="MemberExpression"&&d.parent.object===d)return;let f=Tt(d);if(!f||z(e,f.root,f.segments[0]))return;let g=f.segments[0]==="globalThis",y=g?f.segments.slice(1):f.segments,R;for(let k=y.length;k>=(g?1:2);k-=1){let b=y.slice(0,k).join(".");if(i.has(b)){R=b;break}}R?p(d,R):!l&&i.has(f.segments[0])&&p(d,f.segments[0])},CallExpression(d){let f=d;if(f.callee?.type==="Identifier"&&f.callee.name==="require"&&f.arguments?.[0]?.type==="Literal"&&!z(e,d,"require")&&u(d,f.arguments[0].value,!1,"require"),l)return;let g=f.callee?.type==="Identifier"?f.callee.name:void 0;g&&i.has(g)&&p(d,g)},ImportDeclaration(d){let f=d,g=(f.specifiers??[]).filter(R=>R.type==="ImportSpecifier"),y=g.length>0&&g.length===(f.specifiers??[]).length&&g.every(R=>R.importKind==="type");u(d,f.source?.value,f.importKind==="type"||y,"import")},ImportExpression(d){let f=d;f.source?.type==="Literal"&&u(d,f.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(d){let f=d;u(d,f.moduleReference?.expression?.value,f.importKind==="type"||f.isTypeOnly===!0,"require")},ExportNamedDeclaration(d){let f=d;if(!f.source)return;let g=f.specifiers??[],y=g.length>0&&g.every(R=>R.exportKind==="type");u(d,f.source.value,f.exportKind==="type"||y,"export")},ExportAllDeclaration(d){let f=d;u(d,f.source?.value,f.exportKind==="type","export")},NewExpression(d){if(l)return;let f=d.callee?.type==="Identifier"?d.callee.name:void 0;f&&i.has(f)&&p(d,f)},Identifier(d){!l||!d.name||!i.has(d.name)||!Fn(e,d)||z(e,d,d.name)||p(d,d.name)}}}},$t={meta:{type:"problem",docs:{description:"Disallow importing modules whose effect capability the layer denies (ark.config.json capabilities.deny / pure \u2014 same wall surface as ark-check). Import dimension only: ambient globals stay with no-forbidden-globals and the CLI/hook symbol path."},messages:{deniedCapability:'{{layer}} denies the {{capability}} capability (ark.config.json); "{{specifier}}" imports it. Define a port and bind the implementation in an adapter layer.'},schema:[]},create(e){let t=L(e),r=$(t),n=r?U(r):null,s=r?m.default.dirname(r):null;if(!n||!s||!t)return{};let o=m.default.isAbsolute(t)?t:m.default.resolve(t),i=m.default.relative(s,o).split(m.default.sep).join("/");if(!q(n,i))return{};let a=n.layers?.find(u=>u.name===E(i,n.layers));if(!a)return{};let l=new Set(Ue(a));if(l.size===0)return{};let p=c((u,d,f,g)=>{if(f||typeof d!="string"||pe(d,a.forbiddenGlobals??[]))return;let y=$e(d);!y||!l.has(y)||v(e,u,"deniedCapability",{ruleId:"CAPABILITY_VIOLATION",file:i,fromLayer:a.name,target:d,capability:y,edgeKind:g,message:`${a.name} denies the ${y} capability; found import of "${d}".`},{layer:a.name,capability:y,specifier:d})},"check");return{ImportDeclaration(u){let d=u,f=(d.specifiers??[]).filter(y=>y.type==="ImportSpecifier"),g=f.length>0&&f.length===(d.specifiers??[]).length&&f.every(y=>y.importKind==="type");p(u,d.source?.value,d.importKind==="type"||g,"import")},ImportExpression(u){let d=u;d.source?.type==="Literal"&&p(u,d.source.value,!1,"dynamic-import")},TSImportEqualsDeclaration(u){let d=u;p(u,d.moduleReference?.expression?.value,d.importKind==="type"||d.isTypeOnly===!0,"require")},ExportNamedDeclaration(u){let d=u;if(!d.source)return;let f=d.specifiers??[],g=f.length>0&&f.every(y=>y.exportKind==="type");p(u,d.source.value,d.exportKind==="type"||g,"export")},ExportAllDeclaration(u){let d=u;p(u,d.source?.value,d.exportKind==="type","export")},CallExpression(u){let d=u;d.callee?.type==="Identifier"&&d.callee.name==="require"&&d.arguments?.[0]?.type==="Literal"&&!z(e,u,"require")&&p(u,d.arguments[0].value,!1,"require")}}}},{noArkRunKernelInDomain:Ut,noArkRunDirectNew:Ht,noArkRunTransportBypass:jt}=yt({findConfigPath:$,loadArkConfig:U,resolveImportSpecifier:Ie,lintedFilename:L,sourceIsInAnalysisScope:q,isLocallyBound:z,reportAdapterDiagnostic:v});function Un(e,t){let r=m.default.dirname(m.default.resolve(e));return m.default.relative(r,m.default.resolve(t)).split(m.default.sep).join("/")}c(Un,"toProjectRelative");var{noArkOrderKernelInDomain:Vt,noArkOrderGenericUpdate:Bt}=Nt({findConfigPath:$,loadArkConfig:U,lintedFilename:L,sourceIsInAnalysisScope:q,reportAdapterDiagnostic:v,toProjectRelative:Un});var Hn={"no-domain-infra-imports":Ft,"no-raw-event-publish":Pt,"require-publish-source":Kt,"no-forbidden-globals":Mt,"no-denied-capabilities":$t,"no-arkrun-kernel-in-domain":Ut,"no-arkrun-direct-new":Ht,"no-arkrun-transport-bypass":jt,"no-arkorder-kernel-in-domain":Vt,"no-arkorder-generic-update":Bt},ie={rules:Hn};ie.configs={recommended:{plugins:{ark:ie},rules:{"ark/no-domain-infra-imports":"error","ark/no-raw-event-publish":"error","ark/require-publish-source":"error","ark/no-forbidden-globals":"error","ark/no-denied-capabilities":"error","ark/no-arkrun-kernel-in-domain":"error","ark/no-arkrun-direct-new":"error","ark/no-arkrun-transport-bypass":"error","ark/no-arkorder-kernel-in-domain":"error","ark/no-arkorder-generic-update":"error"}}};var jn=ie;0&&(module.exports={findConfigPath,globToRegExp,isEdgeDenied,layerForRelativePath,loadArkConfig,noArkOrderGenericUpdate,noArkOrderKernelInDomain,noArkRunDirectNew,noArkRunKernelInDomain,noArkRunTransportBypass,noDeniedCapabilities,noDomainInfraImports,noForbiddenGlobals,noRawEventPublish,patternSpecificity,plugin,readTsconfigPathAliases,requirePublishSource,resolveImportSpecifier,resolveRelativeImport});