@agent-teams/engineering-foundation 0.4.1 → 0.6.0

package/dist/scaffolding/kernel/receipt.js

@@ -0,0 +1,206 @@
+import { ScaffoldError } from "../scaffold-error.js";
+import { sha256Json } from "./canonical-json.js";
+import { assertScaffoldPlanDigest } from "./plan-validation.js";
+const SHA_256_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/u;
+function invalidReceipt(message) {
+    throw new ScaffoldError("SCAFFOLD_RECEIPT_INVALID", message);
+}
+function isSha256Digest(value) {
+    return value !== undefined && SHA_256_DIGEST_PATTERN.test(value);
+}
+function hasObservedPostImage(outcome) {
+    return (outcome === "already-satisfied" ||
+        outcome === "applied" ||
+        outcome === "recovered");
+}
+function assertOperationOutcomes(receipt, allowed, required) {
+    if (receipt.operations.some((operation) => !allowed.includes(operation.outcome))) {
+        invalidReceipt("Scaffolding Receipt operation outcome is incompatible with its Receipt outcome.");
+    }
+    if (required !== undefined &&
+        !receipt.operations.some((operation) => operation.outcome === required)) {
+        invalidReceipt("Scaffolding Receipt does not contain the required operation evidence.");
+    }
+}
+function assertReceiptVersionContract(receipt) {
+    if (receipt.schemaVersion !== 1 || receipt.protocolVersion !== 1) {
+        invalidReceipt("Scaffolding Receipt does not use protocol v1.");
+    }
+}
+function assertReceiptDigestShape(receipt) {
+    if (!isSha256Digest(receipt.planDigest)) {
+        invalidReceipt("Scaffolding Receipt Plan digest is invalid.");
+    }
+}
+function assertAdapterAndCommitContract(receipt) {
+    if (receipt.adapter.contractVersion !== 1) {
+        invalidReceipt("Scaffolding Receipt adapter contract version is not supported.");
+    }
+    const expectedAtomicity = receipt.adapter.id === "foundation.filesystem/v1"
+        ? "journaled-recoverable"
+        : receipt.adapter.id === "foundation.memory/v1"
+            ? "memory-atomic"
+            : invalidReceipt("Scaffolding Receipt adapter is not supported by protocol v1.");
+    const filesystemAdapter = receipt.adapter.id === "foundation.filesystem/v1";
+    if (receipt.commit.atomicity !== expectedAtomicity) {
+        invalidReceipt("Scaffolding Receipt adapter and commit atomicity are incompatible.");
+    }
+    const expectedCommitState = (() => {
+        switch (receipt.outcome) {
+            case "applied":
+            case "already-applied":
+                return "committed";
+            case "failed-recovered":
+                return "recovered";
+            case "recovery-required":
+                return "recovery-required";
+            case "rejected":
+                return "rejected";
+            default:
+                return invalidReceipt("Scaffolding Receipt outcome is not supported by protocol v1.");
+        }
+    })();
+    if (receipt.commit.state !== expectedCommitState) {
+        invalidReceipt("Scaffolding Receipt outcome and commit state are incompatible.");
+    }
+    if (!filesystemAdapter &&
+        (receipt.outcome === "failed-recovered" ||
+            receipt.outcome === "recovery-required")) {
+        invalidReceipt("Scaffolding Receipt outcome requires a journaled filesystem adapter.");
+    }
+}
+function assertReceiptOperationEvidence(receipt) {
+    const operationIds = new Set();
+    const operationPaths = new Set();
+    for (const operation of receipt.operations) {
+        if (operationIds.has(operation.operationId) ||
+            operationPaths.has(operation.path)) {
+            invalidReceipt(`Scaffolding Receipt operation evidence is duplicated: ${operation.operationId}.`);
+        }
+        operationIds.add(operation.operationId);
+        operationPaths.add(operation.path);
+        if (hasObservedPostImage(operation.outcome)) {
+            if (!isSha256Digest(operation.resultDigest)) {
+                invalidReceipt(`Scaffolding Receipt operation lacks a result digest: ${operation.operationId}.`);
+            }
+        }
+        else if (operation.resultDigest !== undefined) {
+            invalidReceipt(`Scaffolding Receipt operation claims an unobserved result: ${operation.operationId}.`);
+        }
+    }
+}
+function assertReceiptOutcomeEvidence(receipt) {
+    switch (receipt.outcome) {
+        case "applied":
+            if (receipt.operations.length === 0) {
+                invalidReceipt("An applied Scaffolding Receipt requires operation evidence.");
+            }
+            assertOperationOutcomes(receipt, ["already-satisfied", "applied"], "applied");
+            break;
+        case "already-applied":
+            if (receipt.operations.length === 0) {
+                invalidReceipt("An already-applied Scaffolding Receipt requires operation evidence.");
+            }
+            assertOperationOutcomes(receipt, ["already-satisfied"]);
+            break;
+        case "failed-recovered":
+            if (receipt.operations.length === 0) {
+                invalidReceipt("A failed-recovered Scaffolding Receipt requires operation evidence.");
+            }
+            assertOperationOutcomes(receipt, ["already-satisfied", "recovered"]);
+            break;
+        case "recovery-required":
+            assertOperationOutcomes(receipt, [
+                "already-satisfied",
+                "conflict",
+                "not-applied"
+            ]);
+            if (!receipt.operations.some((operation) => operation.outcome === "conflict" ||
+                operation.outcome === "not-applied")) {
+                invalidReceipt("A recovery-required Scaffolding Receipt requires unresolved operation evidence.");
+            }
+            break;
+        case "rejected":
+            assertOperationOutcomes(receipt, [
+                "already-satisfied",
+                "conflict",
+                "not-applied"
+            ]);
+            break;
+        default:
+            invalidReceipt("Scaffolding Receipt outcome is not supported by protocol v1.");
+    }
+}
+function assertReceiptContract(receipt) {
+    assertReceiptVersionContract(receipt);
+    assertReceiptDigestShape(receipt);
+    assertAdapterAndCommitContract(receipt);
+    assertReceiptOperationEvidence(receipt);
+    assertReceiptOutcomeEvidence(receipt);
+}
+function assertPlanEvidence(receipt, plan) {
+    assertScaffoldPlanDigest(plan);
+    if (receipt.planDigest !== plan.planDigest) {
+        invalidReceipt("Scaffolding Receipt references a different Plan digest.");
+    }
+    const planOperations = new Map(plan.operations.map((operation) => [operation.id, operation]));
+    for (const operation of receipt.operations) {
+        const planned = planOperations.get(operation.operationId);
+        if (planned === undefined || planned.path !== operation.path) {
+            invalidReceipt(`Scaffolding Receipt operation does not match its Plan evidence: ${operation.operationId}.`);
+        }
+        if (hasObservedPostImage(operation.outcome) &&
+            operation.resultDigest !== planned.after.digest) {
+            invalidReceipt(`Scaffolding Receipt result digest does not match its Plan evidence: ${operation.operationId}.`);
+        }
+    }
+    if ((receipt.outcome === "applied" ||
+        receipt.outcome === "already-applied" ||
+        receipt.outcome === "failed-recovered") &&
+        receipt.operations.length !== plan.operations.length) {
+        invalidReceipt("A completed Scaffolding Receipt must provide evidence for every Plan operation.");
+    }
+}
+function assertScaffoldReceiptCandidateDigest(receipt, plan) {
+    assertReceiptContract(receipt);
+    const { receiptDigest: _receiptDigest, ...body } = receipt;
+    const expected = sha256Json(body);
+    if (receipt.receiptDigest !== expected) {
+        invalidReceipt("Scaffolding Receipt digest does not match its canonical content.");
+    }
+    if (plan !== undefined) {
+        assertPlanEvidence(receipt, plan);
+    }
+}
+/**
+ * Verifies digest and semantic evidence for a schema-validated Receipt.
+ * Use `validateScaffoldReceipt` when the value comes from an untrusted source.
+ */
+export function assertScaffoldReceiptDigest(receipt, plan) {
+    assertScaffoldReceiptCandidateDigest(receipt, plan);
+}
+export function createScaffoldReceipt(options) {
+    const body = {
+        schemaVersion: 1,
+        protocolVersion: 1,
+        planDigest: options.plan.planDigest,
+        adapter: Object.freeze({
+            id: options.adapterId,
+            contractVersion: 1
+        }),
+        outcome: options.outcome,
+        commit: Object.freeze({
+            state: options.commitState,
+            atomicity: options.atomicity
+        }),
+        operations: Object.freeze([...options.operations]),
+        diagnostics: Object.freeze([...(options.diagnostics ?? [])])
+    };
+    const receipt = {
+        ...body,
+        receiptDigest: sha256Json(body)
+    };
+    assertScaffoldReceiptCandidateDigest(receipt, options.plan);
+    return Object.freeze(receipt);
+}
+//# sourceMappingURL=receipt.js.map

package/dist/scaffolding/kernel/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../../src/scaffolding/kernel/receipt.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAoChE,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAExD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAiC;IAC7D,OAAO,CACL,OAAO,KAAK,mBAAmB;QAC/B,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,WAAW,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAmC,EACnC,OAA4C,EAC5C,QAAmC;IAEnC,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CACpD,EACD,CAAC;QACD,cAAc,CACZ,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,KAAK,SAAS;QACtB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,EACvE,CAAC;QACD,cAAc,CACZ,uEAAuE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAmC;IACvE,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QACjE,cAAc,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAmC;IACnE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,OAAmC;IAEnC,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1C,cAAc,CAAC,gEAAgE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,iBAAiB,GACrB,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,0BAA0B;QAC/C,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,sBAAsB;YAC7C,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,cAAc,CAAC,8DAA8D,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,0BAA0B,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACnD,cAAc,CACZ,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE;QAChC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC;YACf,KAAK,iBAAiB;gBACpB,OAAO,WAAW,CAAC;YACrB,KAAK,kBAAkB;gBACrB,OAAO,WAAW,CAAC;YACrB,KAAK,mBAAmB;gBACtB,OAAO,mBAAmB,CAAC;YAC7B,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC;YACpB;gBACE,OAAO,cAAc,CACnB,8DAA8D,CAC/D,CAAC;QACN,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QACjD,cAAc,CACZ,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IACE,CAAC,iBAAiB;QAClB,CAAC,OAAO,CAAC,OAAO,KAAK,kBAAkB;YACrC,OAAO,CAAC,OAAO,KAAK,mBAAmB,CAAC,EAC1C,CAAC;QACD,cAAc,CACZ,sEAAsE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAmC;IACzE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,IACE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC;YACvC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAClC,CAAC;YACD,cAAc,CACZ,yDAAyD,SAAS,CAAC,WAAW,GAAG,CAClF,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5C,cAAc,CACZ,wDAAwD,SAAS,CAAC,WAAW,GAAG,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAChD,cAAc,CACZ,8DAA8D,SAAS,CAAC,WAAW,GAAG,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAmC;IACvE,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,cAAc,CAAC,6DAA6D,CAAC,CAAC;YAChF,CAAC;YACD,uBAAuB,CAAC,OAAO,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9E,MAAM;QACR,KAAK,iBAAiB;YACpB,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,cAAc,CACZ,qEAAqE,CACtE,CAAC;YACJ,CAAC;YACD,uBAAuB,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,kBAAkB;YACrB,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,cAAc,CACZ,qEAAqE,CACtE,CAAC;YACJ,CAAC;YACD,uBAAuB,CAAC,OAAO,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC;YACrE,MAAM;QACR,KAAK,mBAAmB;YACtB,uBAAuB,CAAC,OAAO,EAAE;gBAC/B,mBAAmB;gBACnB,UAAU;gBACV,aAAa;aACd,CAAC,CAAC;YACH,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CACtB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,OAAO,KAAK,UAAU;gBAChC,SAAS,CAAC,OAAO,KAAK,aAAa,CACtC,EACD,CAAC;gBACD,cAAc,CACZ,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,MAAM;QACR,KAAK,UAAU;YACb,uBAAuB,CAAC,OAAO,EAAE;gBAC/B,mBAAmB;gBACnB,UAAU;gBACV,aAAa;aACd,CAAC,CAAC;YACH,MAAM;QACR;YACE,cAAc,CAAC,8DAA8D,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACtC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACxC,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACxC,4BAA4B,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAmC,EACnC,IAAoB;IAEpB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,cAAc,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAU,CAAC,CACvE,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC7D,cAAc,CACZ,mEAAmE,SAAS,CAAC,WAAW,GAAG,CAC5F,CAAC;QACJ,CAAC;QACD,IACE,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,SAAS,CAAC,YAAY,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,EAC/C,CAAC;YACD,cAAc,CACZ,uEAAuE,SAAS,CAAC,WAAW,GAAG,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;QAC5B,OAAO,CAAC,OAAO,KAAK,iBAAiB;QACrC,OAAO,CAAC,OAAO,KAAK,kBAAkB,CAAC;QACzC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,EACpD,CAAC;QACD,cAAc,CACZ,iFAAiF,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oCAAoC,CAC3C,OAAmC,EACnC,IAAqB;IAErB,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAA4B,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACvC,cAAc,CACZ,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA0B,EAC1B,IAAqB;IAErB,oCAAoC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAqC;IAErC,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAU;QACzB,eAAe,EAAE,CAAU;QAC3B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;QACnC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,eAAe,EAAE,CAAU;SAC5B,CAAC;QACF,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,OAAO,CAAC,WAAW;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;QACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;KAC7D,CAAC;IACF,MAAM,OAAO,GAA+B;QAC1C,GAAG,IAAI;QACP,aAAa,EAAE,UAAU,CAAC,IAA4B,CAAC;KACxD,CAAC;IACF,oCAAoC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAiC,CAAC;AAChE,CAAC"}

package/dist/scaffolding/scaffold-error.d.ts

@@ -0,0 +1,8 @@
+import type { ScaffoldDiagnosticV1 } from "./contract/types.js";
+export type ScaffoldErrorCode = "SCAFFOLD_APPLY_CONFLICT" | "SCAFFOLD_INPUT_INVALID" | "SCAFFOLD_PLAN_INVALID" | "SCAFFOLD_RECEIPT_INVALID" | "SCAFFOLD_RECOVERY_REQUIRED";
+export declare class ScaffoldError extends Error {
+    readonly code: ScaffoldErrorCode;
+    readonly diagnostics: readonly ScaffoldDiagnosticV1[];
+    constructor(code: ScaffoldErrorCode, message: string, diagnostics?: readonly ScaffoldDiagnosticV1[], options?: ErrorOptions);
+}
+//# sourceMappingURL=scaffold-error.d.ts.map

package/dist/scaffolding/scaffold-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold-error.d.ts","sourceRoot":"","sources":["../../src/scaffolding/scaffold-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GACzB,yBAAyB,GACzB,wBAAwB,GACxB,uBAAuB,GACvB,0BAA0B,GAC1B,4BAA4B,CAAC;AAEjC,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAEtD,YACE,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,SAAS,oBAAoB,EAAO,EACjD,OAAO,CAAC,EAAE,YAAY,EAMvB;CACF"}

package/dist/scaffolding/scaffold-error.js

@@ -0,0 +1,11 @@
+export class ScaffoldError extends Error {
+    code;
+    diagnostics;
+    constructor(code, message, diagnostics = [], options) {
+        super(message, options);
+        this.name = "ScaffoldError";
+        this.code = code;
+        this.diagnostics = diagnostics;
+    }
+}
+//# sourceMappingURL=scaffold-error.js.map

package/dist/scaffolding/scaffold-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold-error.js","sourceRoot":"","sources":["../../src/scaffolding/scaffold-error.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAoB;IACxB,WAAW,CAAkC;IAEtD,YACE,IAAuB,EACvB,OAAe,EACf,WAAW,GAAoC,EAAE,EACjD,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF"}

package/dist/scaffolding/service.d.ts

@@ -0,0 +1,8 @@
+import type { ScaffoldPlanV1 } from "./contract/types.js";
+export declare const DEFAULT_SCAFFOLDING_CONFIG_PATH = "architecture/foundation/scaffolding.yaml";
+export declare function planScaffoldFromFile(options: {
+    readonly consumerRoot: string;
+    readonly intentPath: string;
+    readonly configPath?: string;
+}): Promise<ScaffoldPlanV1>;
+//# sourceMappingURL=service.d.ts.map

package/dist/scaffolding/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/scaffolding/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,eAAO,MAAM,+BAA+B,6CACA,CAAC;AAE7C,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,OAAO,CAAC,cAAc,CAAC,CAW1B"}

package/dist/scaffolding/service.js

@@ -0,0 +1,15 @@
+import { loadScaffoldCompilationInput } from "./adapters/node/node-input-loader.js";
+import { installedFoundationVersion } from "./adapters/node/installed-foundation-version.js";
+import { createDefaultScaffoldRegistry } from "./definitions/registry.js";
+import { compileScaffoldPlan } from "./kernel/compiler.js";
+export const DEFAULT_SCAFFOLDING_CONFIG_PATH = "architecture/foundation/scaffolding.yaml";
+export async function planScaffoldFromFile(options) {
+    const input = await loadScaffoldCompilationInput({
+        consumerRoot: options.consumerRoot,
+        configPath: options.configPath ?? DEFAULT_SCAFFOLDING_CONFIG_PATH,
+        intentPath: options.intentPath,
+        foundationVersion: await installedFoundationVersion()
+    });
+    return compileScaffoldPlan(input, createDefaultScaffoldRegistry());
+}
+//# sourceMappingURL=service.js.map

package/dist/scaffolding/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/scaffolding/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAE7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,CAAC,MAAM,+BAA+B,GAC1C,0CAA0C,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAI1C;IACC,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC;QAC/C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,+BAA+B;QACjE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,0BAA0B,EAAE;KACtD,CAAC,CAAC;IACH,OAAO,mBAAmB,CACxB,KAAK,EACL,6BAA6B,EAAE,CAChC,CAAC;AACJ,CAAC"}

package/dist/schema-ids.d.ts

@@ -1,3 +1,3 @@
-export declare const FOUNDATION_SCHEMA_IDS: readonly ["architecture-source-dependencies/v1", "foundation-config/v1", "foundation-check-report/v1", "package-public-api-baseline/v1", "package-public-api-compatibility/v1", "quality-suppression-governance/v1", "repository-security-baseline/v1", "workspace-dependency-declarations/v1"];
+export declare const FOUNDATION_SCHEMA_IDS: readonly ["architecture-source-dependencies/v1", "architecture-source-dependencies/v2", "contract-json-schema-release-baseline/v1", "contract-json-schema-releases/v1", "contract-protobuf-evolution-baseline/v1", "contract-protobuf-evolution/v1", "documentation-local-references/v1", "foundation-config/v1", "foundation-check-report/v1", "governance-architecture-decision-baseline/v1", "governance-architecture-decisions/v1", "package-public-api-baseline/v1", "package-public-api-baseline/v2", "package-public-api-compatibility/v1", "package-public-api-compatibility/v2", "quality-suppression-governance/v1", "repository-agent-workflow/v1", "repository-security-baseline/v1", "scaffold-intent/v1", "scaffold-plan/v1", "scaffold-receipt/v1", "scaffold-target-catalog/v1", "scaffolding-config/v1", "workspace-dependency-declarations/v1"];
 export type FoundationSchemaId = (typeof FOUNDATION_SCHEMA_IDS)[number];
 //# sourceMappingURL=schema-ids.d.ts.map

package/dist/schema-ids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-ids.d.ts","sourceRoot":"","sources":["../src/schema-ids.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,YAChC,qCAAqC,EACrC,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,mCAAmC,EACnC,iCAAiC,EACjC,sCAAsC,CAC9B,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"schema-ids.d.ts","sourceRoot":"","sources":["../src/schema-ids.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,YAChC,qCAAqC,EACrC,qCAAqC,EACrC,0CAA0C,EAC1C,kCAAkC,EAClC,yCAAyC,EACzC,gCAAgC,EAChC,mCAAmC,EACnC,sBAAsB,EACtB,4BAA4B,EAC5B,8CAA8C,EAC9C,sCAAsC,EACtC,gCAAgC,EAChC,gCAAgC,EAChC,qCAAqC,EACrC,qCAAqC,EACrC,mCAAmC,EACnC,8BAA8B,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,sCAAsC,CAC9B,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/schema-ids.js

@@ -1,11 +1,27 @@
 export const FOUNDATION_SCHEMA_IDS = [
     "architecture-source-dependencies/v1",
+    "architecture-source-dependencies/v2",
+    "contract-json-schema-release-baseline/v1",
+    "contract-json-schema-releases/v1",
+    "contract-protobuf-evolution-baseline/v1",
+    "contract-protobuf-evolution/v1",
+    "documentation-local-references/v1",
     "foundation-config/v1",
     "foundation-check-report/v1",
+    "governance-architecture-decision-baseline/v1",
+    "governance-architecture-decisions/v1",
     "package-public-api-baseline/v1",
+    "package-public-api-baseline/v2",
     "package-public-api-compatibility/v1",
+    "package-public-api-compatibility/v2",
     "quality-suppression-governance/v1",
+    "repository-agent-workflow/v1",
     "repository-security-baseline/v1",
+    "scaffold-intent/v1",
+    "scaffold-plan/v1",
+    "scaffold-receipt/v1",
+    "scaffold-target-catalog/v1",
+    "scaffolding-config/v1",
     "workspace-dependency-declarations/v1"
 ];
 //# sourceMappingURL=schema-ids.js.map

package/dist/schema-ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-ids.js","sourceRoot":"","sources":["../src/schema-ids.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qCAAqC;IACrC,sBAAsB;IACtB,4BAA4B;IAC5B,gCAAgC;IAChC,qCAAqC;IACrC,mCAAmC;IACnC,iCAAiC;IACjC,sCAAsC;CAC9B,CAAC"}
+{"version":3,"file":"schema-ids.js","sourceRoot":"","sources":["../src/schema-ids.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qCAAqC;IACrC,qCAAqC;IACrC,0CAA0C;IAC1C,kCAAkC;IAClC,yCAAyC;IACzC,gCAAgC;IAChC,mCAAmC;IACnC,sBAAsB;IACtB,4BAA4B;IAC5B,8CAA8C;IAC9C,sCAAsC;IACtC,gCAAgC;IAChC,gCAAgC;IAChC,qCAAqC;IACrC,qCAAqC;IACrC,mCAAmC;IACnC,8BAA8B;IAC9B,iCAAiC;IACjC,oBAAoB;IACpB,kBAAkB;IAClB,qBAAqB;IACrB,4BAA4B;IAC5B,uBAAuB;IACvB,sCAAsC;CAC9B,CAAC"}

package/dist/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-source-tree-reader.d.ts","sourceRoot":"","sources":["../../../../../src/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAyLzF,qBAAa,0BAA2B,YAAW,gBAAgB;IAC3D,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAcxC;CACF"}
+{"version":3,"file":"filesystem-source-tree-reader.d.ts","sourceRoot":"","sources":["../../../../../src/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAsMzF,qBAAa,0BAA2B,YAAW,gBAAgB;IAC3D,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAcxC;CACF"}

package/dist/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.js

@@ -67,18 +67,7 @@ async function discoverSourcePaths(canonicalRoot, governedRoots, signal) {
             for await (const entry of directory) {
                 assertNotCancelled(signal);
                 const absoluteEntry = join(directoryPath, entry.name);
-                if (entry.isSymbolicLink()) {
-                    inputError("SOURCE_SYMLINK_PROHIBITED", `Source trees cannot contain symbolic links: ${toPosixPath(relative(canonicalRoot, absoluteEntry))}.`, "source-discovery");
-                }
-                if (entry.isDirectory()) {
-                    directories.push(absoluteEntry);
-                }
-                else if (entry.isFile() && SOURCE_EXTENSIONS.has(posix.extname(entry.name))) {
-                    paths.push(toPosixPath(relative(canonicalRoot, absoluteEntry)));
-                    if (paths.length > MAX_SOURCE_FILES) {
-                        inputError("SOURCE_FILE_LIMIT_EXCEEDED", `Governed source contains more than ${MAX_SOURCE_FILES} files.`, "source-discovery");
-                    }
-                }
+                inspectSourceEntry(canonicalRoot, absoluteEntry, entry, directories, paths);
             }
         }
     }
@@ -94,6 +83,22 @@ async function discoverSourcePaths(canonicalRoot, governedRoots, signal) {
     }
     return uniquePaths;
 }
+function inspectSourceEntry(canonicalRoot, absoluteEntry, entry, directories, paths) {
+    if (entry.isSymbolicLink()) {
+        inputError("SOURCE_SYMLINK_PROHIBITED", `Source trees cannot contain symbolic links: ${toPosixPath(relative(canonicalRoot, absoluteEntry))}.`, "source-discovery");
+    }
+    if (entry.isDirectory()) {
+        directories.push(absoluteEntry);
+        return;
+    }
+    if (!entry.isFile() || !SOURCE_EXTENSIONS.has(posix.extname(entry.name))) {
+        return;
+    }
+    paths.push(toPosixPath(relative(canonicalRoot, absoluteEntry)));
+    if (paths.length > MAX_SOURCE_FILES) {
+        inputError("SOURCE_FILE_LIMIT_EXCEEDED", `Governed source contains more than ${MAX_SOURCE_FILES} files.`, "source-discovery");
+    }
+}
 async function readSourceFiles(canonicalRoot, paths, signal) {
     const files = [];
     let totalBytes = 0;

package/dist/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-source-tree-reader.js","sourceRoot":"","sources":["../../../../../src/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAIpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa;IAC9D,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,SAAiB;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,aAAqB,EACrB,cAAsB;IAEtB,4BAA4B,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,MAAM,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9D,UAAU,CACR,2BAA2B,EAC3B,mDAAmD,cAAc,GAAG,EACpE,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CACR,8BAA8B,EAC9B,6CAA6C,cAAc,GAAG,EAC9D,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpD,UAAU,CACR,yBAAyB,EACzB,qDAAqD,cAAc,GAAG,EACtE,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACpD,UAAU,CACR,0BAA0B,EAC1B,oCAAoC,cAAc,GAAG,EACrD,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,aAAqB,EACrB,aAAgC,EAChC,MAAoB;IAEpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM;YACR,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACpC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,UAAU,CACR,2BAA2B,EAC3B,+CAA+C,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,GAAG,EACrG,kBAAkB,CACnB,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAClC,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9E,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;oBAChE,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;wBACpC,UAAU,CACR,4BAA4B,EAC5B,sCAAsC,gBAAgB,SAAS,EAC/D,kBAAkB,CACnB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,UAAU,CACR,4BAA4B,EAC5B,4CAA4C,QAAQ,QAAQ,IAAI,GAAG,EACnE,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,aAAqB,EACrB,KAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;YAC3C,IACE,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAClB,QAAQ,CAAC,cAAc,EAAE;gBACzB,QAAQ,CAAC,IAAI,GAAG,qBAAqB,EACrC,CAAC;gBACD,UAAU,CACR,qBAAqB,EACrB,gDAAgD,qBAAqB,WAAW,IAAI,GAAG,EACvF,aAAa,CACd,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,UAAU,CACR,qBAAqB,EACrB,8CAA8C,IAAI,GAAG,EACrD,aAAa,CACd,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC,CAAC,CACH,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,UAAU,GAAG,sBAAsB,EAAE,CAAC;gBACxC,UAAU,CACR,4BAA4B,EAC5B,2BAA2B,sBAAsB,SAAS,EAC1D,aAAa,CACd,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,aAAgC,EAChC,MAAoB;QAEpB,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAC5D,UAAU,CACR,2BAA2B,EAC3B,yDAAyD,EACzD,kBAAkB,CACnB,CACF,CAAC;QACF,OAAO,eAAe,CACpB,aAAa,EACb,MAAM,mBAAmB,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAC/D,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"filesystem-source-tree-reader.js","sourceRoot":"","sources":["../../../../../src/source-inventory/adapters/outbound/filesystem/filesystem-source-tree-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAIpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa;IAC9D,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,SAAiB;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,aAAqB,EACrB,cAAsB;IAEtB,4BAA4B,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,MAAM,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9D,UAAU,CACR,2BAA2B,EAC3B,mDAAmD,cAAc,GAAG,EACpE,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CACR,8BAA8B,EAC9B,6CAA6C,cAAc,GAAG,EAC9D,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpD,UAAU,CACR,yBAAyB,EACzB,qDAAqD,cAAc,GAAG,EACtE,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACpD,UAAU,CACR,0BAA0B,EAC1B,oCAAoC,cAAc,GAAG,EACrD,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,aAAqB,EACrB,aAAgC,EAChC,MAAoB;IAEpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM;YACR,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACpC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,kBAAkB,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,UAAU,CACR,4BAA4B,EAC5B,4CAA4C,QAAQ,QAAQ,IAAI,GAAG,EACnE,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CACzB,aAAqB,EACrB,aAAqB,EACrB,KAA6F,EAC7F,WAAqB,EACrB,KAAe;IAEf,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,UAAU,CACR,2BAA2B,EAC3B,+CAA+C,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,GAAG,EACrG,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACpC,UAAU,CACR,4BAA4B,EAC5B,sCAAsC,gBAAgB,SAAS,EAC/D,kBAAkB,CACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,aAAqB,EACrB,KAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;YAC3C,IACE,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAClB,QAAQ,CAAC,cAAc,EAAE;gBACzB,QAAQ,CAAC,IAAI,GAAG,qBAAqB,EACrC,CAAC;gBACD,UAAU,CACR,qBAAqB,EACrB,gDAAgD,qBAAqB,WAAW,IAAI,GAAG,EACvF,aAAa,CACd,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,UAAU,CACR,qBAAqB,EACrB,8CAA8C,IAAI,GAAG,EACrD,aAAa,CACd,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC,CAAC,CACH,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,UAAU,GAAG,sBAAsB,EAAE,CAAC;gBACxC,UAAU,CACR,4BAA4B,EAC5B,2BAA2B,sBAAsB,SAAS,EAC1D,aAAa,CACd,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,aAAgC,EAChC,MAAoB;QAEpB,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAC5D,UAAU,CACR,2BAA2B,EAC3B,yDAAyD,EACzD,kBAAkB,CACnB,CACF,CAAC;QACF,OAAO,eAAe,CACpB,aAAa,EACb,MAAM,mBAAmB,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAC/D,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/strict-yaml.d.ts

@@ -1,4 +1,4 @@
-export declare function assertNotCancelled(signal: AbortSignal | undefined): void;
+export { assertNotCancelled } from "./cancellation.js";
 export declare function assertRepositoryRelativePath(path: string, phase: string): void;
 export declare function parseStrictYamlSource(source: string, phase: string): unknown;
 export declare function loadStrictYamlFile(consumerRoot: string, repositoryPath: string, phase: string, signal?: AbortSignal): Promise<unknown>;

package/dist/strict-yaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-yaml.d.ts","sourceRoot":"","sources":["../src/strict-yaml.ts"],"names":[],"mappings":"AAaA,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CASxE;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAc9E;AA2DD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA6C5E;AAED,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC,CAMlB"}
+{"version":3,"file":"strict-yaml.d.ts","sourceRoot":"","sources":["../src/strict-yaml.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAMvD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAc9E;AA2BD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA6C5E;AAED,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC,CA6ClB"}

package/dist/strict-yaml.js

@@ -1,21 +1,14 @@
-import { readFile, realpath, stat } from "node:fs/promises";
-import { isAbsolute, relative, resolve, sep } from "node:path";
+import { realpath, stat } from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
 import { isAlias, isMap, isNode, isPair, parseDocument, visit } from "yaml";
+import { assertNotCancelled } from "./cancellation.js";
 import { CapabilityInputError } from "./capability-runtime.js";
+import { ContainedFileReadError, readContainedRegularFile } from "./filesystem-path-safety.js";
 const MAX_CONFIG_BYTES = 1024 * 1024;
+export { assertNotCancelled } from "./cancellation.js";
 function inputError(code, message, phase) {
     throw new CapabilityInputError({ code, message, phase, retryable: false });
 }
-export function assertNotCancelled(signal) {
-    if (signal?.aborted === true) {
-        throw new CapabilityInputError({
-            code: "EXECUTION_CANCELLED",
-            message: "Foundation check was cancelled.",
-            phase: "execution",
-            retryable: false
-        });
-    }
-}
 export function assertRepositoryRelativePath(path, phase) {
     const segments = path.split("/");
     if (path.length === 0 ||
@@ -25,8 +18,7 @@ export function assertRepositoryRelativePath(path, phase) {
         inputError("CONFIG_PATH_INVALID", "Configuration paths must be normalized repository-relative POSIX paths.", phase);
     }
 }
-async function resolveContainedFile(consumerRoot, repositoryPath, phase) {
-    assertRepositoryRelativePath(repositoryPath, phase);
+async function resolveConsumerRoot(consumerRoot, phase) {
     let canonicalRoot;
     try {
         canonicalRoot = await realpath(consumerRoot);
@@ -41,23 +33,7 @@ async function resolveContainedFile(consumerRoot, repositoryPath, phase) {
         }
         inputError("CONSUMER_ROOT_UNAVAILABLE", "Consumer root must be an existing accessible directory.", phase);
     }
-    const candidate = resolve(canonicalRoot, repositoryPath);
-    let canonicalCandidate;
-    try {
-        canonicalCandidate = await realpath(candidate);
-    }
-    catch {
-        inputError("CONFIG_FILE_UNAVAILABLE", `Required configuration file is unavailable: ${repositoryPath}.`, phase);
-    }
-    const relation = relative(canonicalRoot, canonicalCandidate);
-    if (relation === ".." || relation.startsWith(`..${sep}`) || isAbsolute(relation)) {
-        inputError("CONFIG_PATH_ESCAPE", `Configuration path escapes the consumer repository: ${repositoryPath}.`, phase);
-    }
-    const metadata = await stat(canonicalCandidate);
-    if (!metadata.isFile() || metadata.size > MAX_CONFIG_BYTES) {
-        inputError("CONFIG_FILE_INVALID", `Configuration file must be a regular file no larger than ${MAX_CONFIG_BYTES} bytes: ${repositoryPath}.`, phase);
-    }
-    return canonicalCandidate;
+    return canonicalRoot;
 }
 export function parseStrictYamlSource(source, phase) {
     const document = parseDocument(source, {
@@ -104,8 +80,32 @@ export function parseStrictYamlSource(source, phase) {
 }
 export async function loadStrictYamlFile(consumerRoot, repositoryPath, phase, signal) {
     assertNotCancelled(signal);
-    const path = await resolveContainedFile(consumerRoot, repositoryPath, phase);
-    const source = await readFile(path, "utf8");
+    assertRepositoryRelativePath(repositoryPath, phase);
+    const root = await resolveConsumerRoot(consumerRoot, phase);
+    let bytes;
+    try {
+        bytes = await readContainedRegularFile({
+            candidate: resolve(root, repositoryPath),
+            maxBytes: MAX_CONFIG_BYTES,
+            root
+        });
+    }
+    catch (error) {
+        if (!(error instanceof ContainedFileReadError)) {
+            throw error;
+        }
+        if (error.failure === "escape") {
+            inputError("CONFIG_PATH_ESCAPE", `Configuration path escapes the consumer repository: ${repositoryPath}.`, phase);
+        }
+        if (error.failure === "invalid") {
+            inputError("CONFIG_FILE_INVALID", `Configuration file must be a regular file no larger than ${MAX_CONFIG_BYTES} bytes: ${repositoryPath}.`, phase);
+        }
+        if (error.failure === "symlink") {
+            inputError("CONFIG_SYMLINK_PROHIBITED", `Configuration path cannot be a symbolic link: ${repositoryPath}.`, phase);
+        }
+        inputError("CONFIG_FILE_UNAVAILABLE", `Required configuration file is unavailable or changed while reading: ${repositoryPath}.`, phase);
+    }
+    const source = bytes.toString("utf8");
     assertNotCancelled(signal);
     return parseStrictYamlSource(source, phase);
 }

package/dist/strict-yaml.js.map

@@ -1 +1 @@
-{"version":3,"file":"strict-yaml.js","sourceRoot":"","sources":["../src/strict-yaml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa;IAC9D,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA+B;IAChE,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,oBAAoB,CAAC;YAC7B,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,iCAAiC;YAC1C,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAa;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EACjF,CAAC;QACD,UAAU,CACR,qBAAqB,EACrB,yEAAyE,EACzE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,cAAsB,EACtB,KAAa;IAEb,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YAChC,UAAU,CACR,uBAAuB,EACvB,8CAA8C,EAC9C,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,UAAU,CACR,2BAA2B,EAC3B,yDAAyD,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CACR,yBAAyB,EACzB,+CAA+C,cAAc,GAAG,EAChE,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,UAAU,CACR,oBAAoB,EACpB,uDAAuD,cAAc,GAAG,EACxE,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAC3D,UAAU,CACR,qBAAqB,EACrB,4DAA4D,gBAAgB,WAAW,cAAc,GAAG,EACxG,KAAK,CACN,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,KAAa;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE;QACrC,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;aACvD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClB,UAAU,CAAC,cAAc,EAAE,OAAO,IAAI,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,SAA6B,CAAC;IAClC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,SAAS,GAAG,8BAA8B,CAAC;YAC3C,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1E,SAAS,GAAG,gDAAgD,CAAC;YAC7D,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IACE,MAAM,CAAC,IAAI,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC,GAAG;YACnB,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,EACvB,CAAC;YACD,SAAS,GAAG,iCAAiC,CAAC;YAC9C,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC9C,SAAS,GAAG,gDAAgD,CAAC;YAC7D,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,OAAO;IACT,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,UAAU,CAAC,yBAAyB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAY,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,cAAsB,EACtB,KAAa,EACb,MAAoB;IAEpB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"strict-yaml.js","sourceRoot":"","sources":["../src/strict-yaml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,KAAa;IAC9D,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAa;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EACjF,CAAC;QACD,UAAU,CACR,qBAAqB,EACrB,yEAAyE,EACzE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,KAAa;IACpE,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YAChC,UAAU,CACR,uBAAuB,EACvB,8CAA8C,EAC9C,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,UAAU,CACR,2BAA2B,EAC3B,yDAAyD,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,KAAa;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE;QACrC,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;aACvD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClB,UAAU,CAAC,cAAc,EAAE,OAAO,IAAI,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,SAA6B,CAAC;IAClC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,SAAS,GAAG,8BAA8B,CAAC;YAC3C,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1E,SAAS,GAAG,gDAAgD,CAAC;YAC7D,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IACE,MAAM,CAAC,IAAI,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC,GAAG;YACnB,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,EACvB,CAAC;YACD,SAAS,GAAG,iCAAiC,CAAC;YAC9C,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC9C,SAAS,GAAG,gDAAgD,CAAC;YAC7D,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,OAAO;IACT,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,UAAU,CAAC,yBAAyB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAY,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,cAAsB,EACtB,KAAa,EACb,MAAoB;IAEpB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,4BAA4B,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;YACxC,QAAQ,EAAE,gBAAgB;YAC1B,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/B,UAAU,CACR,oBAAoB,EACpB,uDAAuD,cAAc,GAAG,EACxE,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,UAAU,CACR,qBAAqB,EACrB,4DAA4D,gBAAgB,WAAW,cAAc,GAAG,EACxG,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,UAAU,CACR,2BAA2B,EAC3B,iDAAiD,cAAc,GAAG,EAClE,KAAK,CACN,CAAC;QACJ,CAAC;QACD,UAAU,CACR,yBAAyB,EACzB,wEAAwE,cAAc,GAAG,EACzF,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC"}

package/dist/workspace-inventory/adapters/outbound/pnpm/pnpm-workspace-inventory-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-workspace-inventory-reader.d.ts","sourceRoot":"","sources":["../../../../../src/workspace-inventory/adapters/outbound/pnpm/pnpm-workspace-inventory-reader.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAKV,kBAAkB,EAEnB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAmZzG,qBAAa,4BAA6B,YAAW,wBAAwB;IACrE,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,qBAAqB,EAAE,MAAM,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;CACF"}
+{"version":3,"file":"pnpm-workspace-inventory-reader.d.ts","sourceRoot":"","sources":["../../../../../src/workspace-inventory/adapters/outbound/pnpm/pnpm-workspace-inventory-reader.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAKV,kBAAkB,EAEnB,MAAM,mDAAmD,CAAC;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAqZzG,qBAAa,4BAA6B,YAAW,wBAAwB;IACrE,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,qBAAqB,EAAE,MAAM,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;CACF"}

package/dist/workspace-inventory/adapters/outbound/pnpm/pnpm-workspace-inventory-reader.js

@@ -1,5 +1,6 @@
 import { glob, readFile, realpath, stat } from "node:fs/promises";
 import { isAbsolute, posix, relative, resolve, sep } from "node:path";
+import { compareBinaryStrings } from "../../../../binary-string-comparator.js";
 import { CapabilityInputError } from "../../../../capability-runtime.js";
 import { pathTraversesSymbolicLink } from "../../../../filesystem-path-safety.js";
 import { assertNotCancelled, loadStrictYamlFile } from "../../../../strict-yaml.js";
@@ -130,7 +131,7 @@ function normalizeExportSurface(value, manifestPath) {
     }
     return {
         explicit: true,
-        entries: entries.toSorted((left, right) => left.subpath.localeCompare(right.subpath))
+        entries: entries.toSorted((left, right) => compareBinaryStrings(left.subpath, right.subpath))
     };
 }
 async function readJsonManifest(consumerRoot, manifestPath, signal) {
@@ -185,8 +186,8 @@ async function readJsonManifest(consumerRoot, manifestPath, signal) {
         ...(typeof input["packageManager"] === "string"
             ? { packageManager: input["packageManager"] }
             : {}),
-        dependencies: dependencies.toSorted((left, right) => left.dependencyName.localeCompare(right.dependencyName) ||
-            left.section.localeCompare(right.section)),
+        dependencies: dependencies.toSorted((left, right) => compareBinaryStrings(left.dependencyName, right.dependencyName) ||
+            compareBinaryStrings(left.section, right.section)),
         bundledDependencies: [
             ...optionalStringArray(input["bundleDependencies"], `${manifestPath} bundleDependencies`),
             ...optionalStringArray(input["bundledDependencies"], `${manifestPath} bundledDependencies`)
@@ -262,7 +263,7 @@ async function readManifestBatch(consumerRoot, paths, signal) {
             .slice(index, index + READ_CONCURRENCY)
             .map((path) => readJsonManifest(consumerRoot, path, signal)))));
     }
-    return packages.toSorted((left, right) => left.manifestPath.localeCompare(right.manifestPath));
+    return packages.toSorted((left, right) => compareBinaryStrings(left.manifestPath, right.manifestPath));
 }
 export class PnpmWorkspaceInventoryReader {
     async read(consumerRoot, workspaceManifestPath, signal) {
@@ -279,8 +280,8 @@ export class PnpmWorkspaceInventoryReader {
             catalogs: [
                 ...parseCatalog(input, "catalog"),
                 ...parseCatalog(input, "catalogs")
-            ].toSorted((left, right) => left.catalogName.localeCompare(right.catalogName) ||
-                left.dependencyName.localeCompare(right.dependencyName)),
+            ].toSorted((left, right) => compareBinaryStrings(left.catalogName, right.catalogName) ||
+                compareBinaryStrings(left.dependencyName, right.dependencyName)),
             packages: await readManifestBatch(consumerRoot, manifestPaths, signal)
         };
     }