@frontera-sdk/cli 1.52.40 → 1.52.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontera-sdk/cli",
-  "version": "1.52.40",
+  "version": "1.52.41",
   "description": "The frontera CLI — scaffold, pull, save and deploy Frontera apps and automations.",
   "keywords": [
     "frontera",
@@ -40,8 +40,8 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.251",
     "@faker-js/faker": "10.6.0",
-    "@frontera-sdk/core": "1.52.40",
-    "@frontera-sdk/functions": "1.52.40",
+    "@frontera-sdk/core": "1.52.41",
+    "@frontera-sdk/functions": "1.52.41",
     "ai": "^6.0.116",
     "axe-core": "4.12.1",
     "gray-matter": "^4.0.3",
@@ -49,7 +49,7 @@
     "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@frontera-sdk/forge-contracts": "1.52.40",
+    "@frontera-sdk/forge-contracts": "1.52.41",
     "@types/bun": "^1.3.14",
     "typescript": "^5.9.3"
   }

package/src/blueprint/ontology-edit-plan.ts

@@ -73,7 +73,7 @@ export function ontologyEditCompatibilityFingerprint(
 ): string {
   const canonical = JSON.stringify({
     objectTypeId,
-    usedProperties: [...new Set(usedProperties)].sort(),
+    usedProperties: [...new Set(usedProperties)].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)),
   })
   return `sha256:${createHash('sha256').update(canonical).digest('hex')}`
 }

package/src/commands/agent/draft-changes.ts

@@ -79,7 +79,7 @@ export async function agentDraftChanges(api: PlatformApi, id: string): Promise<A
           (k) => stableStringify(draftSections[k]) !== stableStringify(liveSnapshot[k]),
         )
       : []),
-  ].sort()
+  ].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 
   return { hasDraft: true, published, revision: draft.revision, changed }
 }

package/src/commands/blueprint/declarative.ts

@@ -1522,7 +1522,7 @@ export function orderForPrune(
   if (blocked.length > 0) {
     const named = blocked
       .map((action) => `${action.apiName} → ${action.compensates}`)
-      .sort()
+      .sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
       .join(', ')
     throw new CliError(
       `${blocked.length === 1 ? 'An action that survives this prune still names' : 'Actions that survive this prune still name'} `

package/src/commands/blueprint/editable.ts

@@ -40,7 +40,7 @@ export function nextEditableSelection(
   const base = selection.set ?? [...current]
   const removed = new Set(selection.remove ?? [])
   const next = new Set([...base, ...(selection.add ?? [])].filter((name) => !removed.has(name)))
-  return [...next].sort()
+  return [...next].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 function api(ctx: CommandContext): BlueprintAuthoringApi {
@@ -93,7 +93,7 @@ export const blueprintEditable: Command = {
     // the way out. Mapping them through the property ids again read every one
     // as unknown and reported an empty set — which would have let `--add` post
     // a set containing only the addition, silently dropping the rest.
-    const current = [...detail.editableProperties].sort()
+    const current = [...detail.editableProperties].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 
     if (!hasSet && add.length === 0 && remove.length === 0) {
       return {
@@ -119,7 +119,7 @@ export const blueprintEditable: Command = {
         `${unknown.join(', ')} ${unknown.length === 1 ? 'is not a property' : 'are not properties'} of "${apiName}".`,
         {
           code: 'USAGE',
-          hint: `Properties: ${[...known].sort().join(', ')}`,
+          hint: `Properties: ${[...known].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).join(', ')}`,
         },
       )
     }

package/src/commands/local/dev.ts

@@ -315,7 +315,7 @@ async function apply(project: LocalProject, target: SyncTarget, opts: ApplyOptio
   if (!result.ok && fallback?.when.test(result.output)) {
     // An empty fallback means there was nothing more to do.
     result = { ok: true, output: '' }
-    for (const args of fallback.then) {
+    for (const args of fallback.steps) {
       result = await runCli(project, args, opts.auth)
       if (!result.ok) break
     }

package/src/commands/local/sync-request.ts

@@ -723,7 +723,7 @@ async function show(ctx: CommandContext) {
   const checks = lastChecks(view)
   const items = view.items.map((item) => {
     const base = bases[item.ref]!
-    const paths = [...new Set([...Object.keys(base.files), ...Object.keys(item.files)])].sort()
+    const paths = [...new Set([...Object.keys(base.files), ...Object.keys(item.files)])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     const files = paths.map((path) => ({ path, base: base.files[path] ?? null, local: item.files[path] ?? null })).filter((f) => f.base !== f.local || !base.known)
     const change = item.deleted ? ('deleted' as const) : item.baseRevision ? ('changed' as const) : ('new' as const)
     const title = titleOf(item, titles)

package/src/commands/local/sync.ts

@@ -809,7 +809,7 @@ async function itemState(project: LocalProject, link: SyncLink, ref: string) {
   const item = remote.items.find((i) => i.ref === ref) ?? null
   const entry = lock?.workspace === link.workspace ? lock.items[ref] : undefined
   if (!row && !item && !entry) throw new UsageError(`not in the workspace or the project: ${ref}`, 'list items with `frontera local sync pull --preview`')
-  const paths = [...new Set([...Object.keys(item?.files ?? {}), ...Object.keys(entry?.files ?? {}), ...(entry?.conflict?.files ?? [])])].sort()
+  const paths = [...new Set([...Object.keys(item?.files ?? {}), ...Object.keys(entry?.files ?? {}), ...(entry?.conflict?.files ?? [])])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const base = baseFiles(entry, (p) => readBase(project.root, p))
   const local = localFiles(project.root, paths)
   const theirs = item?.files ?? {}

package/src/commands/registry.ts

@@ -476,7 +476,7 @@ export function renderCommandHelp(meta: CommandMeta): string {
   // Command flags first, then the ones every command shares — what is specific
   // to this command is what the reader came for.
   const shared = new Set(Object.keys(GLOBAL_FLAGS))
-  const own = Object.keys(spec).filter((f) => !shared.has(f)).sort()
+  const own = Object.keys(spec).filter((f) => !shared.has(f)).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const short = Object.entries(aliasesFor(meta)).reduce<Record<string, string>>((acc, [s, long]) => {
     acc[long] = s
     return acc
@@ -545,7 +545,7 @@ export function describeCommand(meta: CommandMeta): CommandDescriptor {
     ...(meta.reserved ? { unavailableReason: meta.reserved } : {}),
     args: meta.args.map((a) => ({ ...a })),
     flags: Object.keys(spec)
-      .sort()
+      .sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
       .map((name) => ({
         name,
         type: spec[name]!,

package/src/forge/claude-commands.ts

@@ -59,12 +59,17 @@ async function probe(cwd: string, claudePath: string, log?: Logger): Promise<For
     const session = query({
       // Never yields: the initialization response is all this call is for, and
       // a prompt that resolved would send a turn to the model.
-      prompt: (async function* () {
-        await new Promise<void>((resolve) => {
-          if (abort.signal.aborted) resolve()
-          else abort.signal.addEventListener('abort', () => resolve(), { once: true })
-        })
-      })(),
+      prompt: {
+        [Symbol.asyncIterator]() {
+          return {
+            next: () => new Promise<IteratorResult<never>>((resolve) => {
+              const done = () => resolve({ done: true, value: undefined })
+              if (abort.signal.aborted) done()
+              else abort.signal.addEventListener('abort', done, { once: true })
+            }),
+          }
+        },
+      },
       options: {
         cwd,
         pathToClaudeCodeExecutable: claudePath,

package/src/forge/claude-skills.ts

@@ -58,7 +58,7 @@ function readSkillDir(dir: string): Array<{ dirName: string; path: string; conte
     return []
   }
   const out: Array<{ dirName: string; path: string; contents: string }> = []
-  for (const entry of [...entries].sort()) {
+  for (const entry of [...entries].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     const path = join(dir, entry, 'SKILL.md')
     try {
       out.push({ dirName: entry, path, contents: readFileSync(path, 'utf8') })
@@ -92,14 +92,14 @@ function pluginSkillRoots(configDir: string): Array<{ plugin: string; dir: strin
   } catch {
     return []
   }
-  for (const marketplace of marketplaces.sort()) {
+  for (const marketplace of marketplaces.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     let plugins: string[]
     try {
       plugins = readdirSync(join(cache, marketplace))
     } catch {
       continue
     }
-    for (const plugin of plugins.sort()) {
+    for (const plugin of plugins.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
       let versions: string[]
       try {
         versions = readdirSync(join(cache, marketplace, plugin))
@@ -107,7 +107,7 @@ function pluginSkillRoots(configDir: string): Array<{ plugin: string; dir: strin
         continue
       }
       // Newest version wins when a cache holds more than one.
-      for (const version of versions.sort().reverse()) {
+      for (const version of versions.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).reverse()) {
         const dir = join(cache, marketplace, plugin, version, 'skills')
         try {
           if (statSync(dir).isDirectory()) {

package/src/heal.ts

@@ -491,7 +491,7 @@ function vendorSdkPackage(dir: string, pkg: AppSdkPackage): void {
  */
 export function vendoredManifest(pkg: AppSdkPackage, files: string[]): Record<string, unknown> {
   const exports: Record<string, unknown> = { './package.json': './package.json' }
-  for (const rel of files.sort()) {
+  for (const rel of files.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     if (!/\.tsx?$/.test(rel)) continue
     exports[`./${rel.replace(/\.tsx?$/, '')}`] = { types: `./${rel}`, import: `./${rel}` }
   }

package/src/kit.ts

@@ -135,7 +135,7 @@ export interface RenderedProject {
 /** One source, two native projections — Codex reads neither host's other tree. */
 export function renderKit(kit: KitAssets = KIT): RenderedProject {
   const generated: Record<string, string> = {}
-  for (const rel of Object.keys(kit.assets).sort()) {
+  for (const rel of Object.keys(kit.assets).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     const content = kit.assets[rel]!
     if (kit.hosts.codex) generated[join('.agents', 'skills', rel)] = content
     if (kit.hosts.claudeCode) generated[join('.claude', 'skills', rel)] = content

package/src/local/local-agent-grants.ts

@@ -88,7 +88,7 @@ export async function applyAgentGrants(input: {
       continue
     }
     // `read` is implied by the others (`read_sensitive`, `act`), as the runtime stores the grant.
-    wanted.set(ref.name, [...new Set(['read', ...(Array.isArray(g.permissions) ? g.permissions : [])])].sort())
+    wanted.set(ref.name, [...new Set(['read', ...(Array.isArray(g.permissions) ? g.permissions : [])])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)))
     if (input.keepHeld || !Array.isArray(g.permissions)) keep.add(ref.name)
   }
 
@@ -103,7 +103,7 @@ export async function applyAgentGrants(input: {
   const onRuntime = new Set(held.ok ? list<{ apiName?: string }>(held.data).flatMap((t) => (t.apiName ? [t.apiName] : [])) : [])
   const current = await call(creds.orgKey, `/v1/blueprint/grants/agent/${encodeURIComponent(agent.id)}`)
   if (!current.ok) return { failures: [...failures, `  agent/${slug}: its Blueprint access could not be read: ${brief(current)}`], notes }
-  const has = new Map(list<{ objectTypeApiName: string; permissions?: string[] }>(current.data).map((g) => [g.objectTypeApiName, [...new Set(['read', ...(g.permissions ?? [])])].sort()]))
+  const has = new Map(list<{ objectTypeApiName: string; permissions?: string[] }>(current.data).map((g) => [g.objectTypeApiName, [...new Set(['read', ...(g.permissions ?? [])])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))]))
 
   let granted = 0
   const acting: string[] = []
@@ -111,7 +111,7 @@ export async function applyAgentGrants(input: {
   for (const [apiName, stated] of wanted) {
     const held = has.get(apiName) ?? []
     const extras = keep.has(apiName) ? held.filter((p) => !stated.includes(p)) : []
-    const permissions = extras.length ? [...stated, ...extras].sort() : stated
+    const permissions = extras.length ? [...stated, ...extras].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)) : stated
     const why = input.leftOff(apiName)
     if (why) {
       notes.push(`  warning: Context and data: ${apiName} is left off here (${why}), so ${slug} can’t read it locally`)
@@ -141,7 +141,7 @@ export async function applyAgentGrants(input: {
     const res = await call(creds.orgKey, `/v1/blueprint/grants/agent/${encodeURIComponent(agent.id)}/${encodeURIComponent(apiName)}`, 'DELETE')
     if (!res.ok) failures.push(`  objectType/${apiName}: could not be revoked: ${brief(res)}`)
   }
-  if (granted) notes.push(`  Context and data: ${granted} object type${granted === 1 ? '' : 's'}${acting.length ? `; ${slug} can submit Actions on ${acting.sort().join(', ')} (act)` : ''}`)
+  if (granted) notes.push(`  Context and data: ${granted} object type${granted === 1 ? '' : 's'}${acting.length ? `; ${slug} can submit Actions on ${acting.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).join(', ')} (act)` : ''}`)
   if (kept.length) notes.push(`  Context and data: kept what ${slug}'s grants already held where its bindings.json names no permissions: ${kept.join('; ')}`)
   return { failures, notes }
 }

package/src/local/local-applied.ts

@@ -91,7 +91,7 @@ export function contentHash(project: LocalProject, target: SyncTarget): string |
   // shared files it imports from outside functions/.
   if (target.kind === 'function') {
     hash.update(treeHash(join(project.root, 'functions')) ?? '').update(treeHash(join(project.root, 'vendor')) ?? '')
-    for (const path of importedFiles(project.root, target.file).filter((p) => !p.startsWith('functions/')).sort()) hash.update(path).update('\0').update(fileDigest(join(project.root, path)) ?? '')
+    for (const path of importedFiles(project.root, target.file).filter((p) => !p.startsWith('functions/')).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) hash.update(path).update('\0').update(fileDigest(join(project.root, path)) ?? '')
   }
   // Context and data the pull could not read is assumed on the project's object types: a new one changes it.
   if (target.kind === 'bindings' && /"blueprintUnread"\s*:\s*true/.test(readFileSync(join(project.root, target.file), 'utf8'))) {

package/src/local/local-apps.ts

@@ -154,7 +154,7 @@ export async function applyApp(root: string, slug: string, call: Call, provides:
     const gone = await call('DELETE', `/v1/functions/${encodeURIComponent(fn)}/app-bindings/${encodeURIComponent(slug)}`)
     if (gone.status >= 400 && gone.status !== 404) lines.push(`  warning: Function ${fn} could not be unbound from it (${errorOf(gone)})`)
   }
-  lines.unshift(`  saved App ${name}${named.size ? ` (may start ${[...named].sort().join(', ')})` : ''}`)
+  lines.unshift(`  saved App ${name}${named.size ? ` (may start ${[...named].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).join(', ')})` : ''}`)
   return { ok: true, output: lines.join('\n') }
 }
 

package/src/local/local-dev-references.ts

@@ -730,7 +730,7 @@ export function editableSets(dir: string, subjects: ReadonlySet<string> | null):
     try {
       const doc = parseYaml(readFileSync(join(at, name), 'utf8')) as { apiName?: unknown; backing?: { editable?: unknown } } | null
       const editable = doc?.backing?.editable
-      if (typeof doc?.apiName === 'string' && (!subjects || subjects.has(doc.apiName)) && Array.isArray(editable) && editable.length) out.set(doc.apiName, editable.map(String).sort())
+      if (typeof doc?.apiName === 'string' && (!subjects || subjects.has(doc.apiName)) && Array.isArray(editable) && editable.length) out.set(doc.apiName, editable.map(String).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)))
     } catch {
       // A file that does not parse is refused by the apply itself.
     }
@@ -1420,7 +1420,7 @@ export async function applyBindings(project: LocalProject, target: Extract<SyncT
   const unread = !Array.isArray(doc.blueprint) && (doc as { blueprintUnread?: unknown }).blueprintUnread === true
   if (Array.isArray(doc.blueprint) || unread) {
     const types = projectObjectTypes(project.root)
-    const keptHere = [...types].filter(([, type]) => !objectTypeFit(type, () => true).leftOff).map(([apiName]) => apiName).sort()
+    const keptHere = [...types].filter(([, type]) => !objectTypeFit(type, () => true).leftOff).map(([apiName]) => apiName).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     const granted = await applyAgentGrants({
       slug: target.slug,
       grants: unread ? keptHere.map((apiName) => ({ objectType: `objectType/${apiName}`, permissions: ['read'] })) : (doc.blueprint as AgentGrant[]),

package/src/local/local-dev-sync.ts

@@ -299,10 +299,10 @@ export function commandFor(target: SyncTarget, profiles: SyncProfiles): string[]
   }
 }
 
-/** When the first command fails with `when`, run `then` instead. */
+/** When the first command fails with `when`, run `steps` instead. */
 export interface Fallback {
   when: RegExp
-  then: string[][]
+  steps: string[][]
 }
 
 /**
@@ -310,7 +310,7 @@ export interface Fallback {
  * Agent applied for the first time is created, then applied (`agent apply`
  * stages onto an existing draft); a dataset that exists already gets its CSV
  * as a new snapshot (`dataset create` refuses a name in use). A dataset with
- * no CSV that exists already has nothing more to load: an empty `then`.
+ * no CSV that exists already has nothing more to load: an empty `steps`.
  *
  * Only rows reach an existing dataset. A CSV with empty values a column of its
  * revision does not allow is refused; `local dev` then cuts the dataset's next
@@ -322,14 +322,14 @@ export function fallbackFor(target: SyncTarget, profiles: SyncProfiles, root: st
   if (target.kind === 'agent') {
     // Created with its name, or every list reads the slug until it is published.
     const named = createFlags(agentIdentity(root, target.file))
-    return { when: /NOT_FOUND/, then: [['agent', 'create', target.slug, ...named, '--profile', profiles.workspace], commandFor(target, profiles)] }
+    return { when: /NOT_FOUND/, steps: [['agent', 'create', target.slug, ...named, '--profile', profiles.workspace], commandFor(target, profiles)] }
   }
   // A workflow archived on the runtime takes no new version: restored, then pushed (the files say it is in service).
-  if (target.kind === 'workflow') return { when: /is archived, so it cannot/i, then: [['workflow', 'restore', target.slug, '--profile', profiles.workspace], commandFor(target, profiles)] }
+  if (target.kind === 'workflow') return { when: /is archived, so it cannot/i, steps: [['workflow', 'restore', target.slug, '--profile', profiles.workspace], commandFor(target, profiles)] }
   if (target.kind === 'dataset') {
     const doc = datasetDocument(root, target)
     const upload = doc?.csv ? [['dataset', 'upload', doc.apiName, doc.csv, '--profile', profiles.organization]] : []
-    return { when: /already in use/i, then: upload }
+    return { when: /already in use/i, steps: upload }
   }
   return null
 }

package/src/local/local-knowledge-documents.ts

@@ -179,7 +179,7 @@ export function documentPaths(root: string, kb: string): string[] {
     }
   }
   if (existsSync(top)) walk('', 0)
-  return out.sort()
+  return out.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 /** The documents in a knowledge base's folder and its subfolders, by path. */

package/src/local/local-lessons.ts

@@ -96,7 +96,7 @@ export async function pullLessons(root: string, workspace: string, ws: SyncClien
   const byAgent = new Map(rows<LessonsRow>(found).map((r) => [r.agent, r.rules]))
   const record = readRecord(root, workspace)
   const out: LessonsPulled = { written: [], removed: [], kept: [], rules: 0 }
-  for (const slug of [...new Set(agents)].sort()) {
+  for (const slug of [...new Set(agents)].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     const path = join(root, lessonsPath(slug))
     const here = existsSync(path) ? readFileSync(path, 'utf8') : null
     const editedHere = here !== null && record.files[slug] !== sha(here)

package/src/local/local-library.ts

@@ -64,7 +64,7 @@ export function readLibrary(rows: LibraryRow[], directory: Directory): RemoteIte
       release: { number: r.release.number, version: r.release.version },
       ...(r.state && r.state !== 'installed' ? { state: r.state } : {}),
       ...(agent ? { agent: `agent/${agent}` } : {}),
-      ...(made.length ? { skills: [...new Set(made)].sort() } : {}),
+      ...(made.length ? { skills: [...new Set(made)].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)) } : {}),
     }
   })
   const doc: LibraryFile = { installations }

package/src/local/local-org-settings.ts

@@ -145,7 +145,7 @@ export function settingsDifferences(workspace: OrgSettings, local: OrgSettings,
   if (both('voiceSpeed') && differs(workspace.voiceSpeed, local.voiceSpeed)) out.push(`Voice speed is ${workspace.voiceSpeed ?? DEFAULT} in the workspace and ${local.voiceSpeed ?? DEFAULT} here`)
   const ws = workspace.featureFlags ?? {}
   const here = local.featureFlags ?? {}
-  for (const key of Object.keys(ws).sort()) {
+  for (const key of Object.keys(ws).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     if (NOT_A_DIFFERENCE_HERE.has(key)) continue
     if (key in here && ws[key] !== here[key]) out.push(`Feature ${key} is ${onOff(ws[key])} in the workspace and ${onOff(here[key])} here`)
   }

package/src/local/local-portability.ts

@@ -427,9 +427,9 @@ export function itemNeeds(kind: string, files: Record<string, string>, connectio
     }
     needs.push({ kind: 'app-code', ...(external ? { external } : {}) })
   }
-  for (const name of [...actions].sort()) needs.push({ kind: 'action', name })
+  for (const name of [...actions].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) needs.push({ kind: 'action', name })
   if (unnamed) needs.push({ kind: 'action-unnamed', count: unnamed })
-  for (const name of [...plugins].sort()) needs.push({ kind: builtIns.get(name) ?? 'connection', name })
+  for (const name of [...plugins].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) needs.push({ kind: builtIns.get(name) ?? 'connection', name })
   return needs
 }
 

package/src/local/local-secrets.ts

@@ -55,7 +55,7 @@ export function pluginSecretName(plugin: string, field: string): string {
 
 /** The `secret:NAME` grants a Function's source names. */
 export function functionSecretNames(source: string): string[] {
-  return [...new Set([...source.matchAll(/['"`]secret:([A-Z][A-Z0-9_]*)['"`]/g)].map((m) => m[1]!))].sort()
+  return [...new Set([...source.matchAll(/['"`]secret:([A-Z][A-Z0-9_]*)['"`]/g)].map((m) => m[1]!))].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 /** The secrets a workflow's HTTP steps and webhook trigger name in their `auth`, at any depth. */
@@ -70,7 +70,7 @@ export function workflowSecretNames(doc: unknown): string[] {
     }
   }
   visit(doc)
-  return [...out].sort()
+  return [...out].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 /** A Plugin setting declared empty in its file: a header or a config key, and the local secret that fills it. */
@@ -262,7 +262,7 @@ function sameBesideSecrets(text: string, base: string): boolean {
 
 function sortKeys(v: unknown): unknown {
   if (Array.isArray(v)) return v.map(sortKeys)
-  if (v && typeof v === 'object') return Object.fromEntries(Object.keys(v as Record<string, unknown>).sort().map((k) => [k, sortKeys((v as Record<string, unknown>)[k])]))
+  if (v && typeof v === 'object') return Object.fromEntries(Object.keys(v as Record<string, unknown>).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).map((k) => [k, sortKeys((v as Record<string, unknown>)[k])]))
   return v
 }
 

package/src/local/local-stand-ins.ts

@@ -70,7 +70,7 @@ const DOCS_TOOLS: StandInFile['tools'] = [
 
 /** The built-in Plugins these items need that get a stand-in (connections, the Documentation plugin), by install name. */
 export function connectionsNeeded(items: Array<Pick<RemoteItem, 'portability'>>): string[] {
-  return [...new Set(items.flatMap((i) => (i.portability?.needs ?? []).flatMap((n) => (n.kind === 'connection' || n.kind === 'documentation' ? [n.name] : []))))].sort()
+  return [...new Set(items.flatMap((i) => (i.portability?.needs ?? []).flatMap((n) => (n.kind === 'connection' || n.kind === 'documentation' ? [n.name] : []))))].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 /** Which of those are the Documentation plugin. */
@@ -80,7 +80,7 @@ export function documentationNeeded(items: Array<Pick<RemoteItem, 'portability'>
 
 /** The workspace's analytics Plugins these items use: platform-only. */
 export function analyticsNeeded(items: Array<Pick<RemoteItem, 'portability'>>): string[] {
-  return [...new Set(items.flatMap((i) => (i.portability?.needs ?? []).flatMap((n) => (n.kind === 'analytics' ? [n.name] : []))))].sort()
+  return [...new Set(items.flatMap((i) => (i.portability?.needs ?? []).flatMap((n) => (n.kind === 'analytics' ? [n.name] : []))))].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
 }
 
 // ── Platform-only Plugins ────────────────────────────────────────────────────

package/src/local/local-sync-merge.ts

@@ -372,7 +372,7 @@ export function mergeItemFiles(
   theirs: Record<string, string | null>,
   opts: Omit<MergeOptions, 'offset'> = {},
 ): { files: FileMerge[]; conflicts: number } {
-  const paths = [...new Set([...Object.keys(base), ...Object.keys(ours), ...Object.keys(theirs)])].sort()
+  const paths = [...new Set([...Object.keys(base), ...Object.keys(ours), ...Object.keys(theirs)])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const files: FileMerge[] = []
   let offset = 0
   for (const path of paths) {

package/src/local/local-sync-plan.ts

@@ -223,7 +223,7 @@ export function hash(text: string): string {
 }
 
 export function itemHash(files: Record<string, string>): string {
-  return hash(Object.keys(files).sort().map((p) => `${p}\0${files[p]}`).join('\0\0'))
+  return hash(Object.keys(files).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).map((p) => `${p}\0${files[p]}`).join('\0\0'))
 }
 
 export function readLock(root: string): SyncLock | null {
@@ -240,7 +240,7 @@ export function readLock(root: string): SyncLock | null {
 
 /** Sorted keys, two spaces, a final newline: a lock diffs cleanly in review. Always written as v2. */
 export function writeLock(root: string, lock: SyncLock): void {
-  const items = Object.fromEntries(Object.keys(lock.items).sort().map((k) => [k, sortEntry(lock.items[k]!)]))
+  const items = Object.fromEntries(Object.keys(lock.items).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).map((k) => [k, sortEntry(lock.items[k]!)]))
   writeFileSync(join(root, LOCK_FILE), `${JSON.stringify({ version: 2, workspace: lock.workspace, ...(lock.pulledAt ? { pulledAt: lock.pulledAt } : {}), items }, null, 2)}\n`)
 }
 
@@ -249,7 +249,7 @@ function sortEntry(entry: LockEntry): LockEntry {
     ...(entry.id ? { id: entry.id } : {}),
     ...(entry.revision ? { revision: entry.revision } : {}),
     remote: entry.remote,
-    files: Object.fromEntries(Object.keys(entry.files).sort().map((k) => [k, entry.files[k]!])),
+    files: Object.fromEntries(Object.keys(entry.files).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)).map((k) => [k, entry.files[k]!])),
     ...(entry.version ? { version: entry.version } : {}),
     ...(entry.state ? { state: entry.state } : {}),
     pulledAt: entry.pulledAt,
@@ -262,7 +262,7 @@ function sortConflict(c: LockConflict): LockConflict {
   return {
     remote: c.remote,
     ...(c.revision ? { revision: c.revision } : {}),
-    files: [...c.files].sort(),
+    files: [...c.files].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)),
     at: c.at,
     ...(c.count !== undefined ? { count: c.count } : {}),
     ...(c.id ? { id: c.id } : {}),
@@ -400,7 +400,7 @@ export function computePlan(root: string, remote: RemoteItem[], lock: SyncLock |
   for (const item of remote) {
     seen.add(item.ref)
     const entry = lock?.items[item.ref]
-    const paths = [...new Set([...Object.keys(item.files), ...Object.keys(entry?.files ?? {})])].sort()
+    const paths = [...new Set([...Object.keys(item.files), ...Object.keys(entry?.files ?? {})])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     const files: FileChange[] = paths.map((path) => ({ path, local: readComparable(root, path, opts.base), remote: item.files[path] ?? null }))
     // An Agent's file that neither the base nor the workspace has but the folder does (its first tools, in a new
     // `bindings.json`) is a change here too, as push reads it: otherwise status says nothing while push proposes it.
@@ -553,7 +553,7 @@ export function applyItems(root: string, workspace: string, items: RemoteItem[],
   for (const item of items) {
     const previous = next.items[item.ref]
     if (opts.merge?.has(item.ref)) {
-      const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous?.files ?? {})])].sort()
+      const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous?.files ?? {})])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
       const result = mergeItemFiles(baseFiles(previous, opts.base), localFiles(root, paths), item.files)
       if (result.conflicts) {
         const files = result.files.filter((f) => f.conflicts.length).map((f) => f.path)
@@ -633,7 +633,7 @@ export function refreshConflict(root: string, workspace: string, item: RemoteIte
   const previous = next.items[item.ref]
   const remote = itemHash(item.files)
   if (!previous?.conflict || previous.conflict.remote === remote) return { lock: next, outcome: 'unchanged', conflicts: previous?.conflict?.count ?? 0, written: [], removed: [] }
-  const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous.files), ...previous.conflict.files])].sort()
+  const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous.files), ...previous.conflict.files])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const result = mergeItemFiles(baseFiles(previous, base), localFiles(root, paths), item.files)
   const now = new Date().toISOString()
   const written: string[] = []
@@ -673,7 +673,7 @@ export type Resolution = { edited: true } | { keep?: Side; picks?: Map<number, C
 export function resolveItem(root: string, workspace: string, item: RemoteItem, lock: SyncLock | null, how: Resolution, base?: (path: string) => string | null): { written: string[]; removed: string[]; lock: SyncLock } {
   const next: SyncLock = { version: 2, workspace, items: { ...(lock?.workspace === workspace ? lock.items : {}) } }
   const previous = next.items[item.ref]
-  const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous?.files ?? {}), ...(previous?.conflict?.files ?? [])])].sort()
+  const paths = [...new Set([...Object.keys(item.files), ...Object.keys(previous?.files ?? {}), ...(previous?.conflict?.files ?? [])])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const written: string[] = []
   const removed: string[] = []
   if (!('edited' in how)) {

package/src/local/local-sync-push.ts

@@ -228,7 +228,7 @@ export function itemFiles(root: string, kind: SyncKind, name: string, entry?: Lo
   // What the last pull wrote for it comes along when it is still here (an agent's files are fixed; the rest may not be).
   if (kind !== 'agent' && kind !== 'knowledge') for (const p of Object.keys(entry?.files ?? {})) if (!paths.includes(p)) paths.push(p)
   const files: Record<string, string> = {}
-  for (const path of [...new Set(paths)].sort()) {
+  for (const path of [...new Set(paths)].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     if (path.endsWith('.workspace') || assets.includes(path)) continue
     const text = readLocal(root, path)
     if (text === null) continue
@@ -372,7 +372,7 @@ export function pushCandidates(input: CandidateInput): PushItem[] {
   const here = projectRefs(root)
   const refs = new Set<string>([...plan.map((p) => p.ref), ...here.keys()])
   const out: PushItem[] = []
-  for (const ref of [...refs].sort()) {
+  for (const ref of [...refs].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))) {
     const slash = ref.indexOf('/')
     const kind = (byPlan.get(ref)?.kind ?? here.get(ref)?.kind ?? ref.slice(0, slash)) as SyncKind
     const name = byPlan.get(ref)?.name ?? here.get(ref)?.name ?? ref.slice(slash + 1)
@@ -404,7 +404,7 @@ export function pushCandidates(input: CandidateInput): PushItem[] {
     if (status === 'same' && Object.keys(files).length === 0) continue
     const isNew = !entry && !theirs
     const baseFiles: Record<string, string> = !isNew && theirs && entry && itemHash(theirs.files) === entry.remote ? theirs.files : {}
-    const diffPaths = [...new Set([...Object.keys(baseFiles), ...Object.keys(files)])].sort()
+    const diffPaths = [...new Set([...Object.keys(baseFiles), ...Object.keys(files)])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     const diff: PushFile[] = diffPaths.map((path) => ({ path, base: baseFiles[path] ?? null, local: files[path] ?? null })).filter((f) => f.base !== f.local)
     const item: PushItem = {
       ref,
@@ -629,7 +629,7 @@ export function recordRequest(root: string, workspace: string, view: RequestView
   const file = readRequests(root, workspace)
   const now = (opts.now ?? new Date()).toISOString()
   const before = file.requests[view.request.id]
-  const refs = view.items.map((i) => i.ref).sort()
+  const refs = view.items.map((i) => i.ref).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   const titles = Object.fromEntries(refs.map((r) => [r, opts.titles?.[r] ?? before?.titles[r] ?? r]))
   file.requests[view.request.id] = {
     id: view.request.id,
@@ -716,7 +716,7 @@ export function sameDocument(path: string, a: string, b: string): boolean {
 /** Quality checks as a set: by question, each one's lists in order of their words. */
 function checkSet(text: string): unknown {
   return readQualityChecks(text)
-    .map((c) => ({ ...c, documents: [...(c.documents ?? [])].sort(), keywords: [...(c.keywords ?? [])].sort() }))
+    .map((c) => ({ ...c, documents: [...(c.documents ?? [])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)), keywords: [...(c.keywords ?? [])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)) }))
     .sort((x, y) => x.question.localeCompare(y.question))
 }
 

package/src/local/local-sync-remote.ts

@@ -375,7 +375,7 @@ function finish(it: RemoteItem, directory: Directory, docs: Array<{ path: string
     }
     it.files[path] = format === 'json' ? json(named) : stringifyYaml(named, { lineWidth: 0 })
   }
-  it.requires = [...requires].sort()
+  it.requires = [...requires].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
   return it
 }
 
@@ -408,7 +408,7 @@ export type AgentContext = { grants: Grants; note?: string } | { unread: string
 
 const asGrants = (granted: Array<{ objectTypeApiName?: string; permissions?: string[] }>): Grants =>
   granted
-    .flatMap((g) => (typeof g.objectTypeApiName === 'string' ? [{ objectType: `objectType/${g.objectTypeApiName}`, permissions: [...(g.permissions?.length ? g.permissions : ['read'])].sort() }] : []))
+    .flatMap((g) => (typeof g.objectTypeApiName === 'string' ? [{ objectType: `objectType/${g.objectTypeApiName}`, permissions: [...(g.permissions?.length ? g.permissions : ['read'])].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)) }] : []))
     .sort((a, b) => a.objectType.localeCompare(b.objectType))
 
 const STEWARD_FIX = 'An organization key made by a Blueprint Steward with organization update reads it, and so does the workspace key on a newer platform'
@@ -866,7 +866,7 @@ async function readFunctions(source: SyncSource, lists: Lists, opts: ReadOptions
       const keep = imported.filter((p) => p.startsWith('functions/'))
       const test = `functions/${row.slug}.test.ts`
       if (files.has(test)) keep.push(test)
-      const beyond = imported.filter((p) => !p.startsWith('functions/') && !p.startsWith('vendor/')).sort()
+      const beyond = imported.filter((p) => !p.startsWith('functions/') && !p.startsWith('vendor/')).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
       const shared = beyond.filter(isSharedFunctionFile)
       const outside = beyond.filter((p) => !isSharedFunctionFile(p))
       for (const p of [...keep, ...shared]) it.files[p] = files.get(p)!
@@ -936,7 +936,7 @@ export function noteSharedFunctionFiles(items: RemoteItem[], warnings: string[])
   for (const it of items) for (const path of Object.keys(it.files)) holders.set(path, [...(holders.get(path) ?? []), it])
   for (const [path, list] of holders) {
     if (list.length < 2 || new Set(list.map((i) => i.files[path])).size < 2) continue
-    const names = list.map((i) => i.name).sort()
+    const names = list.map((i) => i.name).sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     const and = (words: string[]) => (words.length < 2 ? words.join('') : `${words.slice(0, -1).join(', ')} and ${words[words.length - 1]}`)
     for (const it of list) {
       const others = names.filter((n) => n !== it.name)
@@ -1202,7 +1202,7 @@ export function objectSetItems(sets: ObjectSetRow[], directory: Directory, objec
     it.unresolved.push(...unresolved.map((u) => ({ ...u, path: `blueprint/object-sets/${name}.yaml: ${u.path}` })))
     it.files[`blueprint/object-sets/${name}.yaml`] = stringifyYaml(named, { lineWidth: 0 })
     const others = referencesIn(named).filter((r) => r.kind === 'objectSet' && r.name !== name).map((r) => itemRef(r.kind, r.name))
-    it.requires = [itemRef('objectType', set.objectType), ...new Set(others)].sort()
+    it.requires = [itemRef('objectType', set.objectType), ...new Set(others)].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0))
     if (set.kind === 'static') {
       const n = set.staticPks?.length ?? 0
       it.notes.push(`Lists ${n} ${set.objectType} record${n === 1 ? '' : 's'} by key; locally it holds those of them this runtime’s data has`)
@@ -1595,7 +1595,7 @@ async function readEvaluations(source: SyncSource, lists: Lists, directory: Dire
       const file = `agents/${slug}/evals/${slugify(ds.name)}.yaml`
       const header = `# Test cases from the platform's evaluation dataset "${ds.name}" (frontera local sync).\n`
       const doc = { ...(isRegression ? { regression: true } : {}), cases }
-      out.push(item('evaluation', `${slug}.${slugify(ds.name)}`, `${ds.name} → ${slug}`, { [file]: header + stringifyYaml(doc, { lineWidth: 0 }) }, { notes, requires: [...requires].sort() }))
+      out.push(item('evaluation', `${slug}.${slugify(ds.name)}`, `${ds.name} → ${slug}`, { [file]: header + stringifyYaml(doc, { lineWidth: 0 }) }, { notes, requires: [...requires].sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0)) }))
     }
   }
   return out