arkgate 4.8.9 → 4.8.11

package/CHANGELOG.md

@@ -3,6 +3,115 @@
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here or
 in the immutable pre-2.0 archive linked below.
 
+## 4.8.11 — 2026-09-02
+
+**Patch** over **4.8.10**. Nested `--config` with `--root` stays inside that
+tree. Library Shape splits `adapterContract` and `agentProjection` so the AI
+edits one concern at a time. **Write. Check. Ship.** **No required config migration.**
+No `schemaVersion` bump. Does not close `K01` / `Z09`. No new skill names.
+
+**Status: prepared** (tree candidate; npm `latest` remains **4.8.10** until the
+signed-tag provenance workflow succeeds).
+
+### Fixed
+- Nested `--config` is a file path: `ark-check --root examples/app --config
+  examples/app/ark.config.json` no longer treats the nested config as a
+  walk-up filename and no longer scans the invoker `cwd` (`include` is relative
+  to `--root`). Basename walk-up still applies when `--config` is
+  `ark.config.json`.
+- `doctorResidentWarm` CI budget ceiling is 680ms (~12% headroom after the
+  adapterContract split). Still far below one-shot doctor.
+
+### Changed
+- Domain Shape: `adapterContract` types/schema and finding-ref helpers are
+  their own modules; the public facade stays under the god-module floors.
+  Callers still import `src/domain/adapterContract.ts`. CLI pure helpers follow
+  the DF03 split.
+- Domain Shape: `agentProjection` types/markers, body/meta formatters, and
+  merge/stamp are their own modules; the public facade re-exports. Callers still
+  import `src/domain/agentProjection.ts`. Generated CLI children stay in
+  DomainModel so the facade does not import Tooling.
+- Dev-tree pins: `browserslist` 4.28.8 (GHSA-73wf-gq98-2v4g) and `fast-uri`
+  3.1.7 (GHSA-5jgf-p345-68v8 and siblings). These are lock/override pins, not a
+  consumer API change.
+
+## 4.8.10 — 2026-09-02
+
+**Patch** over **4.8.9**. Amarilla first-aggregate sensors. Incomplete analysis
+never looks green: an enforced sensor that cannot see its scope is not a pass.
+**Write. Check. Ship.** **No required config migration.** No `schemaVersion` bump.
+Does not close `K01` / `Z09`. No new skill names.
+
+**Status: published** (on npm `latest`; see `docs/releases/4.8.10.md`).
+
+### Added
+- `arkgate report` / `ark report` on the existing dual bins: draft an upstream GitHub issue for
+  `pedroknigge/arkgate` (`package.json` `bugs.url`), never the consumer repo. Default prints the
+  draft (arkgate version + last-check snippet). Create only with `--submit` and
+  `--i-confirm-submit` (or TTY `Type submit to send`). `--yes` does not submit. Missing or
+  unauthenticated `gh` prints the draft and the exact `gh issue create` command, then exits 2.
+  Not `ark-check --report` (HTML). Does not close `K01` / `Z09`. No new skill names.
+
+### Fixed
+- Structural-hint budget: when eligible governed files exceed `coverage.maxFiles`
+  (default `400`), emit `ARKRULE_HINT_BUDGET_EXHAUSTED` with exact hinted/governed
+  counts and per-sensor reviewed N/M of scope. `--strict-config` fails if an
+  enforced hint sensor is truncated. No `arkrules.hintBudget` key.
+- `--update-baseline` GitHub rewrite touches only `ark-check` / `arkgate-check`
+  invocation lines (`run:` / package scripts). It does not append `--baseline` to
+  `concurrency.group` or job-id lines that merely name the check. Writes outside
+  the three law files are announced (`Synced --baseline into: …`).
+- DomainModel class sensors: method finder is paren-balanced, so a later broken
+  method is visible. Remaining truncation is reported (`shape analysed until
+  character N`), not silent green.
+- One shared invariant-word list (`ensureInvariants` / `raise` / `record` / `.push(`).
+  Assignment `=` is distinct from `===` / `!==` / `<=` / `>=`. `pendingEvents = []`
+  is idiomatic; events-array `.push(` counts as publish. Object literals and
+  multiline params are not public fields.
+- `ARKRULE_SCOPE_EMPTY` is not freezable, even with `--force`. It is a config
+  diagnostic, not code debt. No `allowEmptyScope` key.
+- `ARKRULE_STRUCTURE` freeze keys include the sensor id (and symbol when present).
+  A freeze for `orchestration-only` does not silence `thin-adapter` or
+  `writes-via-aggregate` on the same file. v1 empty-target keys remain exact-match
+  only.
+- Intent-prefix checks apply only at declared intent-reference sites (`publish` /
+  `subscribe` / `defineIntent` / `registerHandler`, `intent` / `onEvent` /
+  `reactsTo`, publish `metadata.source`). Not every string literal. No
+  `kernel.dtypePrefixes`. A kernel DType such as `Management.EvmInspection.Data`
+  does not trip `LAYER_INTENT_REFERENCE_VIOLATION`.
+- A5: `writes-via-aggregate` treats `@/lib/db` (and local `…/db`) as an IO import
+  without opening tsconfig. Write tokens require callee `db` / `tx` / `client` /
+  `prisma` / `drizzle`; `repo.update(` is not a write. Optional resolved-import
+  facts: PersistenceAdapters layer is a driver.
+- IO import hints match `postgres` and `drizzle-orm/postgres-js` (package
+  subpaths), in lockstep for ArkRules and ArkOrder. `require()` matches the same
+  packages.
+- React/UI `.set()` is not `ARKORDER_GENERIC_UPDATE`. Only `plane` /
+  `orderPlane` callees (or a file that constructs `createOrderPlane`) count as ξ
+  mutation. `Map` / `URLSearchParams` / `useState` setters stay silent.
+- `--sensors` success is not a validity verdict. Stdout names the contract-only
+  skip (`Contract + coverage-evidence only: no TypeScript, no analysis. Not a
+  validity verdict.`); `--json` stamps `notAVerdict` / `didNotRun` /
+  `partialMode=contract-only`. It does not print `Ark check passed`.
+
+### Changed
+- `coverage.maxFiles` schema description, configuration docs, and diagnostics name
+  that the same budget also bounds structural-hint preload for `orchestration-only`,
+  `thin-adapter`, and `writes-via-aggregate`.
+- Brownfield: law-then-product PR sequence when a rule’s folder does not exist yet
+  (advisory or placeholder path, then product, then promote). STRUCTURE key compat
+  for v1 empty-target rows is documented.
+- A10: baseline regenerate note lists
+  `ark-check --update-baseline --force --contract-session --author <steward>`.
+  Doctor concentration looks at `sensor` / `arkruleId`; orchestration-only
+  majority is code debt, not “Fixing the contract”. Short `--help`: `--sensors`
+  does not run analysis; `--help --all` lists `--update-baseline` / `--author`.
+  AO11 9-vs-7 is not a bug.
+- A11: `--changed` bounds file-local structural sensors and hint load to the
+  touched files. Import-edge, layer, and cycle sensors still see the full
+  governed graph. Optional process-local hint cache by content hash. Does not
+  claim 170s becomes seconds. No second analysis engine.
+
 ## 4.8.9 — 2026-09-01
 
 **Patch** over **4.8.8**. Field diagnostic honesty: doctor default homedir, live
@@ -15,8 +124,7 @@ intent-reference checks share the import classifier. Amarilla ArkOrder:
 **No required config migration.** No `ark.config.json` schema bump. Does not close `K01` / `Z09`.
 No new skill names.
 
-**Status: prepared** (tree candidate; npm `latest` remains **4.8.8** until the
-signed-tag provenance workflow succeeds).
+**Status: published** (on npm `latest`; see `docs/releases/4.8.9.md`).
 
 ### Added
 - Optional `arkOrder.appliesTo` globs (same engine as layers). `managedLayers`
@@ -72,7 +180,7 @@ payload-free inspector monitors. ArkOrder and first-contact docs gain honesty co
 **No required config migration.** No `ark.config.json` schema bump. Does not close
 `K01` / `Z09`.
 
-**Status: published** (on npm `latest`; see `docs/releases/4.8.8.md`).
+**Status: published** (see `docs/releases/4.8.8.md`).
 
 ### Added
 - Dual **`ark-dashboard` / `arkgate-dashboard`** bins render the loopback ArkRun

package/README.md

@@ -37,7 +37,7 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.8.9** is prepared on this tree; npm `latest` remains **4.8.8**.
+> **ArkGate 4.8.11** is prepared on this tree; npm `latest` remains **4.8.10**.
 > Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
@@ -45,7 +45,7 @@ Works with Cursor, Claude, Codex, and Grok.
 > (`arkgate/order`) stops the agent rewriting the few slow product decisions as CRUD;
 > later pattern change is `proposeRelease` then `apply`.
 > `@arkgate/runtime` is deprecated.
-> [4.8.9 prepared](docs/releases/4.8.9.md) · [4.8.8 published](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> [4.8.11 prepared](docs/releases/4.8.11.md) · [4.8.10 published](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -342,8 +342,9 @@ Rename the three keys. Compact starters leave it off. Details:
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Prepared (4.8.9; not published) | [docs/releases/4.8.9.md](docs/releases/4.8.9.md) · [CHANGELOG](CHANGELOG.md) |
-| Current published (4.8.8 on npm `latest`) | [docs/releases/4.8.8.md](docs/releases/4.8.8.md) · [CHANGELOG](CHANGELOG.md) |
+| Prepared (4.8.11; not published) | [docs/releases/4.8.11.md](docs/releases/4.8.11.md) · [CHANGELOG](CHANGELOG.md) |
+| Current published (4.8.10 on npm `latest`) | [docs/releases/4.8.10.md](docs/releases/4.8.10.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior published (4.8.9) | [docs/releases/4.8.9.md](docs/releases/4.8.9.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.7) | [docs/releases/4.8.7.md](docs/releases/4.8.7.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.6) | [docs/releases/4.8.6.md](docs/releases/4.8.6.md) |
 | Prior published (4.8.5) | [docs/releases/4.8.5.md](docs/releases/4.8.5.md) |

package/bin/ark-check-runtime.mjs

@@ -96,7 +96,7 @@ import {
   writeArkRulesTemplates,
 } from './lib/presets.mjs';
 import { loadArkConfigContract, parseArkConfigJson } from './lib/config-contract.mjs';
-import { checkUsage, checkUsageAll } from './lib/first-run-help.mjs';
+import { checkUsage, checkUsageAll, withSensorsPartialModeHonesty } from './lib/first-run-help.mjs';
 import { createAdapterResult } from './lib/adapter-contract.mjs';
 import {
   UNGOVERNED_PROBE_CAP,
@@ -1066,6 +1066,12 @@ function applyConfigRootWalkUp(args) {
   args.configRoot = effective.configRoot;
   args.configFound = effective.configFound;
   args.writeRoot = effective.writeRoot;
+  // Nested relative --config (`examples/app/ark.config.json`) must stay a resolved
+  // file path under --root. Leaving the relative string makes readConfig join it
+  // again and miss; walk-up used to latch the parent instead.
+  if (effective.configFound && typeof effective.configPath === 'string') {
+    args.config = effective.configPath;
+  }
   if (effective.walkedUp && effective.root !== path.resolve(args.root)) {
     // Read paths (or write + --follow-config-root): adopt discovered config root.
     args.root = effective.root;
@@ -1140,7 +1146,7 @@ async function main() {
 
   if (args.sensors) {
     const { runSensors } = await import('./lib/sensor-promote-cli.mjs');
-    await runSensors(args, readConfig);
+    await withSensorsPartialModeHonesty(args, () => runSensors(args, readConfig));
     return;
   }
 

package/bin/ark-check.mjs

@@ -41,6 +41,9 @@ function residentArgs(argv) {
   // Same monorepo walk-up as full runtime (NEW-MONOREPO-CWD-WALKUP).
   const effective = resolveEffectiveProjectRoot(args.root, { configName: args.config });
   args.configRoot = effective.configRoot;
+  if (effective.configFound && typeof effective.configPath === 'string') {
+    args.config = effective.configPath;
+  }
   if (effective.walkedUp) {
     args.root = effective.root;
     args.configWalkedUp = true;

package/bin/ark.mjs

@@ -36,6 +36,7 @@ import {
 import { runStatusCommand } from './lib/status-command.mjs';
 import { runAgentProjectionCommand } from './lib/agent-projection-command.mjs';
 import { setupUsage, setupUsageAll, upgradeUsage } from './lib/first-run-help.mjs';
+import { runUpstreamReportCommand } from './lib/upstream-report.mjs';
 
 const here = path.dirname(fileURLToPath(import.meta.url));
 const arkCheck = path.join(here, 'ark-check.mjs');
@@ -45,20 +46,20 @@ Usage: arkgate dashboard [--url <snapshot-url>] [--interval <ms>]
 Polls an ArkRun inspector; it does not start the kernel.`;
 
 function withDashboardHelp(text, detailed) {
+  const extra = detailed
+    ? '  arkgate dashboard [--url <snapshot-url>] [--interval <ms>]\n  arkgate report  [--root <project>] [--json] [--title <text>] [--finding <ref>] [--submit] [--i-confirm-submit]\n'
+    : '';
+  const extraDesc = detailed
+    ? '  dashboard  ANSI observability TUI (spawns ark-dashboard).\n  report     Draft an upstream GitHub issue for pedroknigge/arkgate. Create needs --submit plus confirm. --yes does not submit.\n'
+    : '';
   if (detailed) {
     return text
-      .replace(
-        '  arkgate agents-md [--root',
-        '  arkgate dashboard [--url <snapshot-url>] [--interval <ms>]\n  arkgate agents-md [--root'
-      )
-      .replace(
-        '  agents-md Version-matched',
-        '  dashboard  ANSI observability TUI against a running ArkRun inspector (spawns ark-dashboard).\n  agents-md Version-matched'
-      );
+      .replace('  arkgate agents-md [--root', `${extra}  arkgate agents-md [--root`)
+      .replace('  agents-md Version-matched', `${extraDesc}  agents-md Version-matched`);
   }
   return text.replace(
     '  arkgate-check --doctor     status — one next step\n',
-    '  arkgate-check --doctor     status — one next step\n  arkgate dashboard         observability TUI (inspector)\n'
+    '  arkgate-check --doctor     status — one next step\n  arkgate dashboard         observability TUI (inspector)\n  arkgate report            draft an upstream GitHub issue\n'
   );
 }
 
@@ -181,7 +182,7 @@ function parseArgs(argv) {
     else if (!arg.startsWith('-') && args.command === undefined) {
       args.command = arg;
       // Dashboard owns its flags (--url/--interval); pass the rest through untouched.
-      if (arg === 'dashboard') {
+      if (arg === 'dashboard' || arg === 'report') {
         args.passthrough = argv.slice(i + 1);
         break;
       }
@@ -946,6 +947,13 @@ async function main() {
     });
   }
 
+  if (args.command === 'report') {
+    return runUpstreamReportCommand({
+      root: args.root, json: args.json, yes: args.yes,
+      arkgateVersion: cliVersion(), argv: args.passthrough,
+    });
+  }
+
   if (args.command === 'agents-md' || args.command === 'agent-projection') {
     return runAgentProjectionCommand({
       root: args.root,

package/bin/lib/adapter-contract-types.mjs

@@ -0,0 +1,137 @@
+/**
+ * GENERATED FILE — do not edit by hand.
+ *
+ * Canonical algorithm: src/domain/adapterContractTypes.ts
+ * Regenerate: node scripts/generate-cli-pure.mjs
+ * Drift check: node scripts/generate-cli-pure.mjs --check
+ *
+ * Pure CLI helper (bin/lib/adapter-contract-types.mjs). Zero Node I/O.
+ */
+
+/**
+ * 1.5 adds stable finding refs on every factory-emitted diagnostic (ACS06):
+ * `findingRef`, `targetKey` (baseline-compatible), `docsCodePath`.
+ * 1.4 added optional evidence.arkruleId + evidence.arkruleSource (ADR 0012 / AR03).
+ */
+export const ARK_ANALYSIS_RESULT_SCHEMA_VERSION = '1.5';
+/** Repo-relative diagnostics docs path (parity with ACS02 diagnostic catalog). */
+export const ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH = 'docs/diagnostics.md';
+export const ARK_ANALYSIS_RESULT_SCHEMA = {
+    $schema: 'https://json-schema.org/draft/2020-12/schema',
+    $id: 'https://unpkg.com/arkgate@3/schemas/ark.analysis-result.schema.json',
+    title: 'ArkGate analysis result',
+    type: 'object',
+    additionalProperties: false,
+    required: [
+        'schemaVersion',
+        'mode',
+        'valid',
+        'completeness',
+        'completenessReasons',
+        'diagnostics',
+    ],
+    allOf: [
+        {
+            if: {
+                properties: { completeness: { enum: ['partial', 'unavailable'] } },
+                required: ['completeness'],
+            },
+            then: { properties: { valid: { const: false } } },
+        },
+        {
+            if: {
+                properties: {
+                    mode: { const: 'resolved-candidate-facts' },
+                    completeness: { enum: ['complete', 'partial'] },
+                },
+                required: ['mode', 'completeness'],
+            },
+            then: {
+                required: ['policyHash', 'resolverIdentity', 'factsHash', 'candidateTreeHash'],
+            },
+        },
+        {
+            if: {
+                properties: { completeness: { const: 'complete' } },
+                required: ['completeness'],
+            },
+            then: { properties: { completenessReasons: { maxItems: 0 } } },
+            else: { properties: { completenessReasons: { minItems: 1 } } },
+        },
+    ],
+    properties: {
+        schemaVersion: { const: ARK_ANALYSIS_RESULT_SCHEMA_VERSION },
+        mode: { enum: ['lexical-compatibility', 'resolved-candidate-facts'] },
+        valid: { type: 'boolean' },
+        completeness: { enum: ['complete', 'partial', 'unavailable'] },
+        completenessReasons: {
+            type: 'array',
+            items: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['code', 'message'],
+                properties: {
+                    code: { type: 'string', minLength: 1 },
+                    message: { type: 'string', minLength: 1 },
+                    file: { type: 'string', minLength: 1 },
+                },
+            },
+        },
+        policyHash: { type: 'string', minLength: 1 },
+        resolverIdentity: { type: 'string', minLength: 1 },
+        factsHash: { type: 'string', minLength: 1 },
+        candidateTreeHash: { type: 'string', minLength: 1 },
+        diagnostics: {
+            type: 'array',
+            items: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['ruleId', 'severity', 'message', 'location', 'evidence'],
+                properties: {
+                    ruleId: { type: 'string', minLength: 1 },
+                    severity: { enum: ['error', 'warning'] },
+                    message: { type: 'string', minLength: 1 },
+                    location: {
+                        type: 'object',
+                        additionalProperties: false,
+                        required: ['file', 'line', 'column'],
+                        properties: {
+                            file: { type: 'string', minLength: 1 },
+                            line: { type: 'integer', minimum: 1 },
+                            column: { type: 'integer', minimum: 1 },
+                        },
+                    },
+                    evidence: {
+                        type: 'object',
+                        additionalProperties: false,
+                        properties: {
+                            target: { type: 'string' },
+                            fromLayer: { type: 'string' },
+                            toLayer: { type: 'string' },
+                            typeOnly: { type: 'boolean' },
+                            targetTypeOnlyExports: { type: 'boolean' },
+                            sourcePureTypeModule: { type: 'boolean' },
+                            namedBindingsTypeOnly: { type: 'boolean' },
+                            portProofEligible: { type: 'boolean' },
+                            peerIsolation: { type: 'boolean' },
+                            capability: { type: 'string', minLength: 1 },
+                            edgeKind: { type: 'string', minLength: 1 },
+                            arkruleId: { type: 'string', minLength: 1 },
+                            arkruleSource: { type: 'string', minLength: 1 },
+                        },
+                    },
+                    nextAction: { type: 'string', minLength: 1 },
+                    /** ACS06 — compact multi-turn id; always derived from targetKey when emitted. */
+                    findingRef: { type: 'string', minLength: 1, pattern: '^fnv1a-[0-9a-f]{8}$' },
+                    /**
+                     * ACS06 — baseline-compatible freeze identity
+                     * (`ruleId|file|from|to|target` with optional `#N` occurrence suffix).
+                     */
+                    targetKey: { type: 'string', minLength: 1 },
+                    /** ACS06 — package-relative diagnostics anchor path. */
+                    docsCodePath: { type: 'string', minLength: 1 },
+                },
+            },
+        },
+    },
+};

package/bin/lib/adapter-contract.mjs

@@ -9,73 +9,16 @@
  */
 
 import { deterministicNextAction } from './remediation.mjs';
-/** Versioned public result contract shared by every ArkGate enforcement adapter. */
-/**
- * 1.5 adds stable finding refs on every factory-emitted diagnostic (ACS06):
- * `findingRef`, `targetKey` (baseline-compatible), `docsCodePath`.
- * 1.4 added optional evidence.arkruleId + evidence.arkruleSource (ADR 0012 / AR03).
- */
-export const ARK_ANALYSIS_RESULT_SCHEMA_VERSION = '1.5';
-/** Repo-relative diagnostics docs path (parity with ACS02 diagnostic catalog). */
-export const ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH = 'docs/diagnostics.md';
+import { ARK_ANALYSIS_RESULT_SCHEMA_VERSION, } from './adapter-contract-types.mjs';
+import { adapterDocsCodePath, adapterFindingOccurrenceTargetKeys, adapterFindingRefFromTargetKey, adapterFindingTargetKey, } from './adapter-finding-refs.mjs';
+export { ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH, ARK_ANALYSIS_RESULT_SCHEMA, ARK_ANALYSIS_RESULT_SCHEMA_VERSION, } from './adapter-contract-types.mjs';
+export { adapterDocsCodePath, adapterFindingOccurrenceTargetKeys, adapterFindingRefFromTargetKey, adapterFindingTargetKey, } from './adapter-finding-refs.mjs';
 function text(value) {
     return typeof value === 'string' && value.length > 0 ? value : undefined;
 }
 function positiveInteger(value, fallback) {
     return Number.isInteger(value) && Number(value) > 0 ? Number(value) : fallback;
 }
-/**
- * Baseline-compatible target key for a violation input.
- * Field order and empty-string fallbacks **must** match `baselineKey` in
- * `baselineKey.ts` — parity tests guard this so finding refs never orphan freezes.
- *
- * Note: uses raw ruleId/file strings (including empty) the same way baseline does;
- * display `ruleId` / `location.file` may still normalize to ARK_UNKNOWN / `<unknown>`.
- */
-export function adapterFindingTargetKey(violation) {
-    const ruleId = typeof violation.ruleId === 'string'
-        ? violation.ruleId
-        : typeof violation.code === 'string'
-            ? violation.code
-            : undefined;
-    const file = typeof violation.file === 'string' ? violation.file : undefined;
-    const fromLayer = typeof violation.fromLayer === 'string' ? violation.fromLayer : undefined;
-    const toLayer = typeof violation.toLayer === 'string' ? violation.toLayer : undefined;
-    const target = typeof violation.target === 'string' ? violation.target : undefined;
-    return [
-        ruleId,
-        file,
-        fromLayer ?? '',
-        toLayer ?? '',
-        target ?? '',
-    ].join('|');
-}
-/**
- * Occurrence-aware target keys for a violation list (parity with baselineOccurrenceKeys).
- * First occurrence keeps the historical base key; duplicates get `#N`.
- */
-export function adapterFindingOccurrenceTargetKeys(violations) {
-    const counts = new Map();
-    return violations.map((violation) => {
-        const base = adapterFindingTargetKey(violation);
-        const occurrence = (counts.get(base) ?? 0) + 1;
-        counts.set(base, occurrence);
-        return occurrence === 1 ? base : `${base}#${occurrence}`;
-    });
-}
-/** FNV-1a finding ref from a baseline-compatible targetKey (not a security hash). */
-export function adapterFindingRefFromTargetKey(targetKey) {
-    let hash = 0x811c9dc5;
-    for (let index = 0; index < targetKey.length; index += 1) {
-        hash ^= targetKey.charCodeAt(index);
-        hash = Math.imul(hash, 0x01000193);
-    }
-    return `fnv1a-${(hash >>> 0).toString(16).padStart(8, '0')}`;
-}
-/** Package-relative docs path with fragment for a public ruleId. */
-export function adapterDocsCodePath(ruleId) {
-    return `${ADAPTER_DIAGNOSTIC_DOCS_RELATIVE_PATH}#${ruleId}`;
-}
 function nextActionForDiagnostic(ruleId, evidence, violation) {
     return deterministicNextAction({
         ruleId,
@@ -240,122 +183,3 @@ export function createAdapterResult(input) {
     }
     return { ...base, mode, valid: false, completeness, ...evidence };
 }
-export const ARK_ANALYSIS_RESULT_SCHEMA = {
-    $schema: 'https://json-schema.org/draft/2020-12/schema',
-    $id: 'https://unpkg.com/arkgate@3/schemas/ark.analysis-result.schema.json',
-    title: 'ArkGate analysis result',
-    type: 'object',
-    additionalProperties: false,
-    required: [
-        'schemaVersion',
-        'mode',
-        'valid',
-        'completeness',
-        'completenessReasons',
-        'diagnostics',
-    ],
-    allOf: [
-        {
-            if: {
-                properties: { completeness: { enum: ['partial', 'unavailable'] } },
-                required: ['completeness'],
-            },
-            then: { properties: { valid: { const: false } } },
-        },
-        {
-            if: {
-                properties: {
-                    mode: { const: 'resolved-candidate-facts' },
-                    completeness: { enum: ['complete', 'partial'] },
-                },
-                required: ['mode', 'completeness'],
-            },
-            then: {
-                required: ['policyHash', 'resolverIdentity', 'factsHash', 'candidateTreeHash'],
-            },
-        },
-        {
-            if: {
-                properties: { completeness: { const: 'complete' } },
-                required: ['completeness'],
-            },
-            then: { properties: { completenessReasons: { maxItems: 0 } } },
-            else: { properties: { completenessReasons: { minItems: 1 } } },
-        },
-    ],
-    properties: {
-        schemaVersion: { const: ARK_ANALYSIS_RESULT_SCHEMA_VERSION },
-        mode: { enum: ['lexical-compatibility', 'resolved-candidate-facts'] },
-        valid: { type: 'boolean' },
-        completeness: { enum: ['complete', 'partial', 'unavailable'] },
-        completenessReasons: {
-            type: 'array',
-            items: {
-                type: 'object',
-                additionalProperties: false,
-                required: ['code', 'message'],
-                properties: {
-                    code: { type: 'string', minLength: 1 },
-                    message: { type: 'string', minLength: 1 },
-                    file: { type: 'string', minLength: 1 },
-                },
-            },
-        },
-        policyHash: { type: 'string', minLength: 1 },
-        resolverIdentity: { type: 'string', minLength: 1 },
-        factsHash: { type: 'string', minLength: 1 },
-        candidateTreeHash: { type: 'string', minLength: 1 },
-        diagnostics: {
-            type: 'array',
-            items: {
-                type: 'object',
-                additionalProperties: false,
-                required: ['ruleId', 'severity', 'message', 'location', 'evidence'],
-                properties: {
-                    ruleId: { type: 'string', minLength: 1 },
-                    severity: { enum: ['error', 'warning'] },
-                    message: { type: 'string', minLength: 1 },
-                    location: {
-                        type: 'object',
-                        additionalProperties: false,
-                        required: ['file', 'line', 'column'],
-                        properties: {
-                            file: { type: 'string', minLength: 1 },
-                            line: { type: 'integer', minimum: 1 },
-                            column: { type: 'integer', minimum: 1 },
-                        },
-                    },
-                    evidence: {
-                        type: 'object',
-                        additionalProperties: false,
-                        properties: {
-                            target: { type: 'string' },
-                            fromLayer: { type: 'string' },
-                            toLayer: { type: 'string' },
-                            typeOnly: { type: 'boolean' },
-                            targetTypeOnlyExports: { type: 'boolean' },
-                            sourcePureTypeModule: { type: 'boolean' },
-                            namedBindingsTypeOnly: { type: 'boolean' },
-                            portProofEligible: { type: 'boolean' },
-                            peerIsolation: { type: 'boolean' },
-                            capability: { type: 'string', minLength: 1 },
-                            edgeKind: { type: 'string', minLength: 1 },
-                            arkruleId: { type: 'string', minLength: 1 },
-                            arkruleSource: { type: 'string', minLength: 1 },
-                        },
-                    },
-                    nextAction: { type: 'string', minLength: 1 },
-                    /** ACS06 — compact multi-turn id; always derived from targetKey when emitted. */
-                    findingRef: { type: 'string', minLength: 1, pattern: '^fnv1a-[0-9a-f]{8}$' },
-                    /**
-                     * ACS06 — baseline-compatible freeze identity
-                     * (`ruleId|file|from|to|target` with optional `#N` occurrence suffix).
-                     */
-                    targetKey: { type: 'string', minLength: 1 },
-                    /** ACS06 — package-relative diagnostics anchor path. */
-                    docsCodePath: { type: 'string', minLength: 1 },
-                },
-            },
-        },
-    },
-};