@akagilnc/pi-workflow-roles 0.1.5949 → 0.1.6011

package/src/notary-contracts.ts

@@ -3,7 +3,7 @@
  * Lawful explicit releases: converged | continue | escalate.
  * No usable result is infrastructure failure via public settlement, not a judgment status (#475).
  */
-import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME, notaryReviewSubmissionSchema } from "./review-submission.ts";
+import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.ts";
 
 import { isRecord } from "./unknown-value.ts";
 
@@ -25,9 +25,6 @@ export const NOTARY_TICKET_FLAG = {
   },
 } as const;
 
-/** #1195: generation-required clauses; package still records missing tables as-is. */
-export const notaryOutputSchema = notaryReviewSubmissionSchema;
-
 export type NotarySourceRunLocator = {
   readonly runDirectory: string;
   readonly runId: string;
@@ -44,28 +41,6 @@ export type NotaryOutput =
       readonly findings?: unknown;
     };
 
-/**
- * Recognize one lawful explicit Notary release (converged | continue | escalate).
- * #753: no field rewrite — submitted params retained as-is (no disposition forge,
- * no findings array rewrite). Recognition only for recording/settlement callers.
- */
-export function projectLawfulNotaryOutput(value: unknown): NotaryOutput | undefined {
-  // #836: no field drop
-  return (isRecord(value))
-    ? (value as NotaryOutput)
-    : undefined;
-}
-
-/** Retain submitted Notary params as-is for the failure channel (no shape rewrite). */
-export function retainNotarySubmission(value: unknown): unknown {
-  if (value === undefined) return { missing: "arguments" as const };
-  try {
-    return structuredClone(value);
-  } catch {
-    return value;
-  }
-}
-
 /**
  * Settlement/recording path: only lawful recorded converged/continue/escalate.
  * Does not gate role admission — callers must not use this to reject a submission.

package/src/package-contracts/auditor-output.ts

@@ -2,14 +2,12 @@
  * Public Auditor (审刑院) terminating receipt contracts (#675 / #754).
  * Lawful explicit releases: converged | continue | escalate.
  */
-import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME, reviewSubmissionSchema } from "../review-submission.ts";
+import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "../review-submission.ts";
 
 import { isRecord } from "../unknown-value.ts";
 
 export const AUDITOR_OUTPUT_TOOL_NAME: string = REVIEW_SUBMISSION_OUTPUT_TOOL_NAME;
 
-export const auditorOutputSchema = reviewSubmissionSchema;
-
 export type AuditorOutput =
   | { readonly status: "converged" }
   | { readonly status: "continue"; readonly violations?: unknown }

package/src/package-contracts/gatekeeper-output.ts

@@ -40,16 +40,6 @@ function asStringArray(value: unknown): readonly string[] {
   return value.filter((item): item is string => typeof item === "string");
 }
 
-/**
- * Project one explicit Gatekeeper decision.
- * No throw on shape — ADR 0055 / 仓内 CLAUDE.md 开篇: already-submitted params are retained as-is;
- * public-terminal projects non-usable releases via typed failure cause.
- */
-/** #836: no field drop — original object is the receipt. */
-export function projectLawfulGatekeeperOutput(value: unknown): GatekeeperDirectOutput | undefined {
-  return isRecord(value) ? (value as GatekeeperDirectOutput) : undefined;
-}
-
 /** #836: no status allowlist rejection — pass object through. */
 export function validateRecordedGatekeeperOutput(value: unknown): GatekeeperDirectOutput {
   if (!isRecord(value)) throw new Error("Gatekeeper output is not an object");

package/src/package-contracts/terminating-tools.ts

@@ -24,8 +24,8 @@ import { NAVIGATOR_OUTPUT_TOOL_NAME, validateRecordedNavigatorOutput, type Navig
 import { AUDITOR_OUTPUT_TOOL_NAME, validateRecordedAuditorOutput, type AuditorOutput } from "./auditor-output.ts";
 import { MERGER_OUTPUT_TOOL_NAME, validateMergerOutput, type MergerOutput } from "../merger-contracts.ts";
 import { NOTARY_OUTPUT_TOOL_NAME, validateRecordedNotaryOutput, type NotaryOutput } from "../notary-contracts.ts";
-import { COUNTERSIGN_OUTPUT_TOOL_NAME, validateRecordedCountersignOutput, type CountersignVerdict } from "../countersign-contracts.ts";
-import { GLEANER_LEFT_OUTPUT_TOOL_NAME, validateRecordedGleanerLeftOutput, type GleanerLeftOutput } from "../gleaner-left-contracts.ts";
+import type { CountersignVerdict } from "../countersign-contracts.ts";
+import type { GleanerLeftOutput } from "../gleaner-left-contracts.ts";
 import { INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput, type InspectorOutput } from "../inspector-contracts.ts";
 import { DIARIST_OUTPUT_TOOL_NAME, validateRecordedDiaristOutput, type DiaristOutput } from "../diarist-contracts.ts";
 import { SECRETARIAT_OUTPUT_TOOL_NAME, type SecretariatVerdict } from "../secretariat-contracts.ts";
@@ -51,8 +51,6 @@ export {
   validateRecordedDoctorOutput,
   validateMergerOutput,
   validateRecordedNotaryOutput,
-  validateRecordedCountersignOutput,
-  validateRecordedGleanerLeftOutput,
   validateRecordedInspectorOutput,
   validateRecordedGatekeeperOutput,
   validateRecordedNavigatorOutput,

package/src/package-resources/engine-material.ts

@@ -5,7 +5,7 @@
  * Only path-safety syntax is checked at real I/O seams.
  * Delivery is startup readingMaterial (handbook bodies), never the transport prompt.
  */
-import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 
 const ENGINE_MATERIAL_RELATIVE_ROOT = "resources/engines" as const;
@@ -65,21 +65,6 @@ export function resolveEngineDispatchMaterialPath(packageRoot: string): string {
   return join(packageRoot, ENGINE_DISPATCH_RELATIVE_PATH);
 }
 
-/**
- * Enumerate packaged engine notes stems (discovery only — not a legal-name gate).
- * Only `*.md` stems that pass name syntax are listed.
- */
-export function listEngineMaterialNames(packageRoot: string): readonly string[] {
-  const dir = resolveEngineMaterialDirectory(packageRoot);
-  if (!existsSync(dir)) return Object.freeze([]);
-  const names = readdirSync(dir)
-    .filter((entry) => entry.endsWith(".md"))
-    .map((entry) => entry.slice(0, -".md".length))
-    .filter((stem) => isEngineNameSyntax(stem))
-    .sort();
-  return Object.freeze([...names]);
-}
-
 /**
  * Build the packaged notes path for a syntax-legal engine name.
  * Does not require the file to exist (material is optional data).

package/src/pi/role-turn-host.ts

@@ -460,9 +460,6 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
       // Selected host axis (#537 / ADR 0082): omit must not inherit a parent env value.
       if (request.host === undefined || request.host.trim() === "") delete env.AK_ROLE_HOST;
       else env.AK_ROLE_HOST = request.host.trim();
-      // #1199: 传召词 is unknown-length body — never argv/env (execve ARG_MAX / E2BIG).
-      // Typed stdin envelope carries dialogue + optional progress 传召词.
-      delete env.AK_ROLE_SUMMONS_INSTRUCTION;
       // #1132: the one effective delivery-request ceiling travels to the child
       // on its own env so the in-child role runtime and the worker submission
       // gate count with the same configured number the AK seam resolved. Omit

package/src/public-cli/cli.ts

@@ -70,7 +70,6 @@ import {
   createTypedOptionConsumer,
   optionsForOwner,
   projectCommandHelp,
-  projectOwnerOptions,
   PUBLIC_NAVIGATOR_HELP_NOTE,
   PUBLIC_ROLE_OPTION_OWNERS,
   renderHumanOwnerOptionLines,
@@ -604,34 +603,11 @@ function loadAndValidateConfig(
 /** Typed facts used by help presentation — not layout. */
 export function helpDocument() {
   return {
-    executable: "ak-role",
     capabilities: listHelpCapabilities(),
     internalEntrypoint: INTERNAL_ROLE_ENTRYPOINT_RELATIVE,
-    /** #342 structured global options from the sole option table. */
-    globalOptions: projectOwnerOptions("global"),
   };
 }
 
-/** Structured help facts for one public command/role (#342). */
-export function helpDocumentForCommand(command: string) {
-  if (command === "global") {
-    return {
-      command: "global" as const,
-      kind: "global" as const,
-      options: projectOwnerOptions("global"),
-    };
-  }
-  if (command in PUBLIC_ROLE_ARGV) {
-    const owner = command as keyof typeof PUBLIC_ROLE_ARGV;
-    return {
-      command: owner,
-      kind: owner === "analyst" ? ("deterministic" as const) : ("role" as const),
-      options: projectOwnerOptions(owner),
-    };
-  }
-  return undefined;
-}
-
 /** Append USAGE + EXAMPLES blocks from the sole public help-copy owner. */
 function appendUsageAndExamples(
   lines: string[],

package/src/public-cli/config.ts

@@ -29,18 +29,12 @@ import {
 } from "./registry.ts";
 import { isEnoent, isRecord } from "../unknown-value.ts";
 
-/** Province officers that may carry a persistent model override (#453). Registry order. */
-type ProvinceConfigRole = Extract<
+/** Province officers that may carry a persistent model override (#453). */
+export type GateOfficerSeat = Extract<
   (typeof PUBLIC_ROLE_RECORDS)[number],
   { readonly provinceConfig: true }
 >["role"];
 
-export const GATE_OFFICER_SEATS: readonly ProvinceConfigRole[] = PUBLIC_ROLE_RECORDS.flatMap(
-  (record) => ("provinceConfig" in record && record.provinceConfig === true ? [record.role] : []),
-);
-
-export type GateOfficerSeat = (typeof GATE_OFFICER_SEATS)[number];
-
 export function isGateOfficerSeat(value: string): value is GateOfficerSeat {
   return packagedProvinceConfig(value);
 }

package/src/public-cli/invocation.ts

@@ -846,17 +846,6 @@ function rejectUnlessTicketNumber(raw: string, message: string): number {
   return parsed;
 }
 
-/** Positive ticket number for analyst query-scope face (and shared integer parse). */
-export function parsePositiveTicketNumber(
-  raw: string,
-  flag: string,
-): number {
-  return rejectUnlessTicketNumber(
-    raw,
-    `${flag} must be a positive integer, got ${raw}`,
-  );
-}
-
 /**
  * One token scan for public argv.
  * Callers assign values; `--` still ends flag parsing.
@@ -2066,23 +2055,6 @@ export async function materializeCountersignInvocation(
   );
 }
 
-export type AdmitFixerInvocationOptions = {
-  home: string;
-  principalAuthority: DurablePrincipalAuthority;
-  cwd: string;
-  phase: FixerPhase;
-  instruction: string;
-  attachmentPaths: readonly string[];
-  /** Optional caller --prerequisites path as-is (#1168). */
-  prerequisitesPath?: string;
-  project?: string;
-  createRunId?: () => string;
-  /** Effective model for this invocation — written onto the state.jsonl invocation row. */
-  model?: InvocationEffectiveModel;
-  /** Typed ticket already on this summons. Placement uses it; code does not infer one. */
-  assertedTicketNumber?: number;
-};
-
 function parsePositivePrOption(raw: string | undefined): number {
   if (raw === undefined || raw.trim() === "") throw new CliUsageError("--pr requires a positive pull request number");
   try { return parseCollectorPrNumber(raw); } catch (error) { throw new CliUsageError(errorText(error), { cause: error }); }

package/src/public-cli/option-definitions.ts

@@ -1042,7 +1042,7 @@ export function createTypedOptionConsumer(
   };
 }
 
-/** Structured option projection used by help and acceptance tests. */
+/** Structured option projection used by help. */
 export type StructuredOptionProjection = {
   readonly id: string;
   readonly owner: OptionOwner;
@@ -1091,15 +1091,6 @@ export function projectOwnerOptions(
   }));
 }
 
-/** All rejected spelling tokens flattened (for leakage scans). */
-export function allRejectedSpellingTokens(): readonly string[] {
-  const out: string[] = [];
-  for (const entry of REJECTED_PUBLIC_SPELLINGS) {
-    out.push(...entry.spellings);
-  }
-  return out;
-}
-
 /**
  * #125 — public command help facts on the sole option-owner module.
  * Presentation inputs only (USAGE synopsis + public `ak-role` examples).

package/src/session-dialogue.ts

@@ -6,7 +6,8 @@ import { isRecord } from "./unknown-value.ts";
  * 排除按来源、不按正文：说话人自己写下的文字一律原样保留，其中引用了 ADR 段落
  * 或工具结果也不删（#901 Out of Scope「不做正文过滤」）。
  *
- * 不入录的是工具结果载荷、附件记录与注入块——它们是独立的机器事件，不是谁说的话。
+ * 不入录的是工具结果载荷、入队行、请求快照与注入块。附件记录同样不入录，
+ * 只有 `queued_command` 例外：它是被吸收插话的带 uuid 说话记录（#1260）。
  *
  * 适配规则按宿主并列，不硬套某一宿主的类型名；一行产出 0..n 条对话事实。
  */
@@ -107,25 +108,12 @@ function isCodexOwnerResponseItemUser(message: Record<string, unknown>): boolean
   return kinds.some((kind) => kind.startsWith("user."));
 }
 
-/**
- * 入队事件适配：人类这次输入经队列的来源。
- * 被吸收的插话靠入队事件入录（无独立消息记录，#901 用户故事 11）。
- * 机器入队由整卷适配层排除（#918）；本函数不读正文、不自判机器。
- */
-function fromQueueEvent(row: Record<string, unknown>): DialogueEvent[] {
-  if (row.type !== "queue-operation" || row.operation !== "enqueue") return [];
-  const content = row.content;
-  if (typeof content !== "string" || content === "") return [];
-  const id = nativeEventId(row);
-  return [{ speaker: "owner", text: content, ...(id === undefined ? {} : { id }) }];
-}
-
 /**
  * 票面 #918 准许的唯一固定起始形状：`<task-notification`。
  * 其它标签不在御裁射程内——不得扩表，不得伪造 decision key / 「陛下拍定」。
  * 开标签后可直接 `>`（无属性）、EOF 或空白再接属性；其它字符不成立。
  *
- * 机器 enqueue 的完整判据＝结构化来源（origin.kind）／本固定形状／真实因果与位置；
+ * 无 origin 的 `queued_command` 只靠本固定形状排除；不得扩表。
  * 用可变载荷正文（全等或子串）做 identity join 仍为锚定宪法所禁。
  */
 const TASK_NOTIFICATION_OPEN_TAG = "<task-notification";
@@ -143,9 +131,20 @@ function hasFixedOpenTagPrefix(content: string, tag: string): boolean {
   );
 }
 
-/** enqueue.content 是否以票面准许的 `<task-notification` 固定开标签起头。 */
-function isFixedNonOwnerEnqueueShape(content: string): boolean {
-  return hasFixedOpenTagPrefix(content, TASK_NOTIFICATION_OPEN_TAG);
+/**
+ * 被吸收的中途插话取 `queued_command` 附件原文（#1260）。
+ * 来源按附件 `origin.kind` 判；缺 origin 就当真人，只排除固定开头。
+ * 入队行不再是来源，本函数不读入队行、不做正文比对。
+ */
+function fromQueuedCommandAttachment(row: Record<string, unknown>): DialogueEvent[] {
+  if (!isRecord(row.attachment) || row.attachment.type !== "queued_command") return [];
+  const kind = materializationOriginKind(row.attachment);
+  if (isNonOwnerOriginKind(kind)) return [];
+  const text = textParts(row.attachment.prompt).join("");
+  if (text === "") return [];
+  if (kind === undefined && hasFixedOpenTagPrefix(text, TASK_NOTIFICATION_OPEN_TAG)) return [];
+  const id = nativeEventId(row);
+  return [{ speaker: "owner", text, ...(id === undefined ? {} : { id }) }];
 }
 
 /**
@@ -172,7 +171,7 @@ function isNonOwnerOriginKind(kind: string | undefined): boolean {
 }
 
 /**
- * 消息事件适配：助手回话，以及未经入队事件记录的人类输入。
+ * 消息事件适配：助手回话，以及 `type=user` 的人类输入。
  * 思考块、工具调用块、工具结果块按块排除；同消息的说话人 text 保留
  * （#901 排除按来源不按正文；混合块不得整条丢弃）。
  * Codex response_item user：仅 `content_item_kinds` 含 `user.*` 时入录。
@@ -199,27 +198,19 @@ function fromMessageEvent(row: Record<string, unknown>): DialogueEvent[] {
 /**
  * 整卷适配：返回与入参行等长的对话事实数组（该行不是对话则为空数组）。
  *
+ * 说话来源只取 `type=user` 行与 `queued_command` 附件。入队行与 `api-request-blob`
+ * 不投。有原生 id 则带上，不另编。不做正文比对或 id 去重。
  * 物化 user 只消费自身的 typed `origin.kind`：human 保留，具名非 human 排除。
- * enqueue 没有与物化 user 的 typed 关联，故不得以位置把某个 user 来源反扣给它；
- * 仅票面准许的 `<task-notification` 固定形状可直接排除，其余维持既有投影。
  */
 export function adaptSessionDialogue(
   rows: readonly (Record<string, unknown> | undefined)[],
 ): DialogueEvent[][] {
   return rows.map((row) => {
     if (row === undefined) return [];
+    if (row.type === "queue-operation" || row.type === "api-request-blob") return [];
+    if (row.type === "attachment") return fromQueuedCommandAttachment(row);
     const originKind = materializationOriginKind(row);
     if (isNonOwnerOriginKind(originKind)) return [];
-    if (
-      row.type === "queue-operation" &&
-      row.operation === "enqueue" &&
-      typeof row.content === "string" &&
-      isFixedNonOwnerEnqueueShape(row.content)
-    ) {
-      return [];
-    }
-    const queued = fromQueueEvent(row);
-    if (queued.length > 0) return queued;
     return fromMessageEvent(row);
   });
 }

package/dist/canonical-json.js

@@ -1,75 +0,0 @@
-const CANONICAL_JSON_VALIDATION_ERROR_CODE = "canonical-json-invalid";
-class CanonicalJsonValidationError extends Error {
-  constructor(path, reason) {
-    super(`Canonical JSON validation failed at ${path}: ${reason}`);
-    this.path = path;
-    this.reason = reason;
-    this.name = "CanonicalJsonValidationError";
-  }
-  path;
-  reason;
-  code = CANONICAL_JSON_VALIDATION_ERROR_CODE;
-}
-function childPath(path, segment) {
-  return `${path}/${String(segment).replaceAll("~", "~0").replaceAll("/", "~1")}`;
-}
-function ownStringKeys(value, path) {
-  const keys = Reflect.ownKeys(value);
-  if (keys.some((key) => typeof key === "symbol")) {
-    throw new CanonicalJsonValidationError(childPath(path, "<symbol>"), "symbol-keyed member is not a JSON member");
-  }
-  return keys;
-}
-function canonicalJson(value) {
-  const ancestors = /* @__PURE__ */ new WeakSet();
-  const serialize = (item, path) => {
-    if (item === null) return "null";
-    switch (typeof item) {
-      case "boolean":
-      case "string":
-        return JSON.stringify(item);
-      case "number":
-        if (!Number.isFinite(item)) throw new CanonicalJsonValidationError(path, "number must be finite");
-        return JSON.stringify(item);
-      case "undefined":
-      case "function":
-      case "symbol":
-      case "bigint":
-        throw new CanonicalJsonValidationError(path, `${typeof item} is not a JSON value`);
-      case "object": {
-        if (ancestors.has(item)) throw new CanonicalJsonValidationError(path, "cycle is not a JSON value");
-        ancestors.add(item);
-        try {
-          if (Array.isArray(item)) {
-            if (Object.getPrototypeOf(item) !== Array.prototype) throw new CanonicalJsonValidationError(path, "array must not be a custom object");
-            const keys = ownStringKeys(item, path);
-            const extraKey = keys.find((key) => key !== "length" && (!/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= item.length));
-            if (extraKey !== void 0) throw new CanonicalJsonValidationError(childPath(path, extraKey), "non-index array member is not a JSON member");
-            const values = [];
-            for (let index = 0; index < item.length; index += 1) {
-              if (!Object.hasOwn(item, index)) throw new CanonicalJsonValidationError(childPath(path, index), "sparse array slot is not a JSON value");
-              values.push(serialize(item[index], childPath(path, index)));
-            }
-            return `[${values.join(",")}]`;
-          }
-          const prototype = Object.getPrototypeOf(item);
-          if (prototype !== Object.prototype && prototype !== null) throw new CanonicalJsonValidationError(path, "object must be a plain record");
-          return `{${ownStringKeys(item, path).sort().map((key) => `${JSON.stringify(key)}:${serialize(item[key], childPath(path, key))}`).join(",")}}`;
-        } finally {
-          ancestors.delete(item);
-        }
-      }
-    }
-    throw new Error("Unreachable canonical JSON value type");
-  };
-  return serialize(value, "$");
-}
-function canonicalJsonBytes(value) {
-  return new TextEncoder().encode(canonicalJson(value));
-}
-export {
-  CANONICAL_JSON_VALIDATION_ERROR_CODE,
-  CanonicalJsonValidationError,
-  canonicalJson,
-  canonicalJsonBytes
-};

package/dist/judge-recording-anti-forge.js

@@ -1,39 +0,0 @@
-import { sha256Hex } from "./sha256.js";
-/**
- * On-demand anti-forge for judge recordings.
- *
- * Standing CI must not byte-pin soul free text. Call these only when a
- * concrete recording is being consumed as evidence and must be checked
- * against the soul body supplied at that moment (current or packaged).
- */
-export function soulTextDigest(soulText) {
-    return sha256Hex(soulText);
-}
-export function assertRecordingSoulDigest(options) {
-    if (typeof options.claimedDigest !== "string") {
-        throw new Error(`${options.label} metadata soulDigest must be a string`);
-    }
-    const actual = soulTextDigest(options.soulText);
-    if (actual !== options.claimedDigest) {
-        throw new Error(`${options.label} metadata soulDigest must match the soul supplied at consumption`);
-    }
-}
-/**
- * Construct-at-consumption check: resolve the packaged soul via the injected
- * reader, then verify meta.soulDigest. Reader is injected so callers control
- * git/fs access and tests stay synthetic.
- */
-export function assertPackagedSoulMatchesMeta(meta, label, readPackagedSoul) {
-    if (typeof meta.packageSha !== "string") {
-        throw new Error(`${label} metadata packageSha must be a string`);
-    }
-    if (typeof meta.soulDigest !== "string") {
-        throw new Error(`${label} metadata soulDigest must be a string`);
-    }
-    const packagedSoul = readPackagedSoul(meta.packageSha, label);
-    assertRecordingSoulDigest({
-        claimedDigest: meta.soulDigest,
-        soulText: packagedSoul,
-        label,
-    });
-}

package/src/canonical-json.ts

@@ -1,74 +0,0 @@
-export const CANONICAL_JSON_VALIDATION_ERROR_CODE = "canonical-json-invalid" as const;
-
-export class CanonicalJsonValidationError extends Error {
-  readonly code = CANONICAL_JSON_VALIDATION_ERROR_CODE;
-
-  constructor(readonly path: string, readonly reason: string) {
-    super(`Canonical JSON validation failed at ${path}: ${reason}`);
-    this.name = "CanonicalJsonValidationError";
-  }
-}
-
-function childPath(path: string, segment: string | number): string {
-  return `${path}/${String(segment).replaceAll("~", "~0").replaceAll("/", "~1")}`;
-}
-
-function ownStringKeys(value: object, path: string): string[] {
-  const keys = Reflect.ownKeys(value);
-  if (keys.some((key) => typeof key === "symbol")) {
-    throw new CanonicalJsonValidationError(childPath(path, "<symbol>"), "symbol-keyed member is not a JSON member");
-  }
-  return keys as string[];
-}
-
-/** Deterministic serialization of the closed JSON value domain. */
-export function canonicalJson(value: unknown): string {
-  const ancestors = new WeakSet<object>();
-
-  const serialize = (item: unknown, path: string): string => {
-    if (item === null) return "null";
-    switch (typeof item) {
-      case "boolean":
-      case "string":
-        return JSON.stringify(item);
-      case "number":
-        if (!Number.isFinite(item)) throw new CanonicalJsonValidationError(path, "number must be finite");
-        return JSON.stringify(item);
-      case "undefined":
-      case "function":
-      case "symbol":
-      case "bigint":
-        throw new CanonicalJsonValidationError(path, `${typeof item} is not a JSON value`);
-      case "object": {
-        if (ancestors.has(item)) throw new CanonicalJsonValidationError(path, "cycle is not a JSON value");
-        ancestors.add(item);
-        try {
-          if (Array.isArray(item)) {
-            if (Object.getPrototypeOf(item) !== Array.prototype) throw new CanonicalJsonValidationError(path, "array must not be a custom object");
-            const keys = ownStringKeys(item, path);
-            const extraKey = keys.find((key) => key !== "length" && (!/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= item.length));
-            if (extraKey !== undefined) throw new CanonicalJsonValidationError(childPath(path, extraKey), "non-index array member is not a JSON member");
-            const values: string[] = [];
-            for (let index = 0; index < item.length; index += 1) {
-              if (!Object.hasOwn(item, index)) throw new CanonicalJsonValidationError(childPath(path, index), "sparse array slot is not a JSON value");
-              values.push(serialize(item[index], childPath(path, index)));
-            }
-            return `[${values.join(",")}]`;
-          }
-          const prototype = Object.getPrototypeOf(item);
-          if (prototype !== Object.prototype && prototype !== null) throw new CanonicalJsonValidationError(path, "object must be a plain record");
-          return `{${ownStringKeys(item, path).sort().map((key) => `${JSON.stringify(key)}:${serialize((item as Record<string, unknown>)[key], childPath(path, key))}`).join(",")}}`;
-        } finally {
-          ancestors.delete(item);
-        }
-      }
-    }
-    throw new Error("Unreachable canonical JSON value type");
-  };
-
-  return serialize(value, "$");
-}
-
-export function canonicalJsonBytes(value: unknown): Uint8Array {
-  return new TextEncoder().encode(canonicalJson(value));
-}

package/src/judge-recording-anti-forge.ts

@@ -1,53 +0,0 @@
-import { sha256Hex } from "./sha256.ts";
-
-/**
- * On-demand anti-forge for judge recordings.
- *
- * Standing CI must not byte-pin soul free text. Call these only when a
- * concrete recording is being consumed as evidence and must be checked
- * against the soul body supplied at that moment (current or packaged).
- */
-
-export function soulTextDigest(soulText: string): string {
-  return sha256Hex(soulText);
-}
-
-export function assertRecordingSoulDigest(options: {
-  claimedDigest: unknown;
-  soulText: string;
-  label: string;
-}): void {
-  if (typeof options.claimedDigest !== "string") {
-    throw new Error(`${options.label} metadata soulDigest must be a string`);
-  }
-  const actual = soulTextDigest(options.soulText);
-  if (actual !== options.claimedDigest) {
-    throw new Error(
-      `${options.label} metadata soulDigest must match the soul supplied at consumption`,
-    );
-  }
-}
-
-/**
- * Construct-at-consumption check: resolve the packaged soul via the injected
- * reader, then verify meta.soulDigest. Reader is injected so callers control
- * git/fs access and tests stay synthetic.
- */
-export function assertPackagedSoulMatchesMeta(
-  meta: Record<string, unknown>,
-  label: string,
-  readPackagedSoul: (packageSha: string, label: string) => string,
-): void {
-  if (typeof meta.packageSha !== "string") {
-    throw new Error(`${label} metadata packageSha must be a string`);
-  }
-  if (typeof meta.soulDigest !== "string") {
-    throw new Error(`${label} metadata soulDigest must be a string`);
-  }
-  const packagedSoul = readPackagedSoul(meta.packageSha, label);
-  assertRecordingSoulDigest({
-    claimedDigest: meta.soulDigest,
-    soulText: packagedSoul,
-    label,
-  });
-}