@labacacia/nps-sdk 1.0.0-alpha.6 → 1.0.0-alpha.7

package/CHANGELOG.cn.md

@@ -8,6 +8,120 @@
 
 ---
 
+## [1.0.0-alpha.7] —— 2026-05-17
+
+### 新增
+
+- **`nip/reputation-client.ts` — `ReputationLogClient`（NPS-RFC-0004 Phase 2）**：基于 fetch 的声誉日志 operator 完整客户端。`submitEntry`、`queryEntries`、`getSth`、`getProof`、`getGossipSth`。`verifyInclusion` 使用 `@noble/hashes/sha256` 在本地执行 RFC 9162 §2.1.3.2 Merkle audit-path 验证。`signEntry` / `verifyEntry` 使用 `@noble/ed25519` 签名验证条目。Wire 类型：`ReputationLogEntry`、`SignedTreeHead`、`InclusionProof`、`ObservationWindow`。`AnchorTopologyError` 携带 `nwpErrorCode` + `npsStatus`。30 条回归测试。从 `@labacacia/nps-sdk/nip` 重新导出。
+
+- **`nwp/anchor-client.ts` — `AnchorNodeClient`（NPS-CR-0002）**：基于 fetch 的 Anchor Node 拓扑查询客户端。`getSnapshot`（topology.snapshot）和 `subscribe` async generator（topology.stream NDJSON）。判别联合类型 `TopologyEvent`，包含 `member_joined`、`member_left`、`member_updated`、`anchor_state`、`resync_required` 五种 kind。`AnchorTopologyError` 处理协议错误。24 条回归测试。
+
+### 跟随套件
+
+本次跟随 NPS 套件 `v1.0.0-alpha.7`。
+
+---
+
+## [1.0.0-alpha.6] —— 2026-05-14
+
+### 变更
+
+- **`nip/x509/oids.ts` — IANA PEN 65715（Breaking，CR-0004）**：`LAB_ACACIA_PEN_ARC` 从 `"1.3.6.1.4.1.99999"` 更新为 `"1.3.6.1.4.1.65715"`。在临时弧下签发的证书必须吊销并重新签发。
+
+- **`nwp/index.ts` — 移除 `NwpErrorCodes` 重导出（Breaking）**：从桶文件中移除了 `export * as NwpErrorCodes from "./error-codes.js"`。如需使用，请直接从 `@labacacia/nps-sdk/nwp/error-codes` 导入。
+
+- **版本升级至 `1.0.0-alpha.6`** —— 与 NPS 套件 alpha.6 版本同步。
+
+---
+
+## [1.0.0-alpha.5] —— 2026-05-01
+
+### 新增
+
+- **NWP 错误码常量** —— 新增 `NwpErrorCodes` 命名空间，从 `@labacacia/nps-sdk/nwp` 导出，包含全部 30 个 NWP wire 错误码（auth、query、action、task、subscribe、infrastructure、manifest、topology、reserved-type）。此前版本均未提供。
+- **`NpsStatusCodes.NPS_SERVER_UNSUPPORTED`** —— 在 `src/core/status-codes.ts` 新增状态码 `"NPS-SERVER-UNSUPPORTED"`（HTTP 501），符合 spec/status-codes.md alpha.5 更新。
+- **`NDP.resolveWithDns` —— DNS TXT 回退解析** —— 新增 `InMemoryNdpRegistry.resolveWithDns(target, resolver?)`，当内存注册表无匹配时回退查询 `_nps-node.{host}` TXT 记录（NPS-4 §5）。新增 `DnsTxtLookup` 接口 + `SystemDnsTxtLookup`（Node.js `dns.promises`）；`parseNpsTxtRecord` + `extractHostFromTarget` 从 `@labacacia/nps-sdk/ndp` 导出。测试数：284 → 294。
+
+### 变更
+
+- **`AssuranceLevel.fromWire("")` 返回 `Anonymous`** —— `if (wire == null)` 改为 `if (!wire)`，使 `""` 返回 `Anonymous` 而非 `Unknown`（spec §5.1.1 向后兼容修复）。
+- **版本升至 `1.0.0-alpha.5`** —— 与 NPS 套件 alpha.5 同步。
+
+### 修复
+
+- **`REPUTATION_GOSSIP_FORK` / `REPUTATION_GOSSIP_SIG_INVALID`** —— 向 `src/nip/error-codes.ts` 新增两个 NIP 声誉 gossip 错误码（RFC-0004 Phase 3）。
+
+---
+
+## [1.0.0-alpha.4] —— 2026-04-30
+
+### 新增
+
+- **NPS-RFC-0001 Phase 2 —— NCP 连接前导（TypeScript helper 跟进）。**
+  `src/ncp/preamble.ts` 暴露 `writePreamble(stream)` /
+  `readPreamble(stream)`，往返字面量 `b"NPS/1.0\n"` 哨兵；
+  `tests/ncp/preamble.test.ts` 覆盖。让 TypeScript SDK 与 .NET /
+  Python / Go / Java 在 alpha.4 的 preamble helper 持平。
+- **NPS-RFC-0002 Phase A/B —— X.509 NID 证书 + ACME `agent-01`
+  （TypeScript 端口）。** 新增 `src/nip/` 子模块：
+  - `nip/x509/` —— X.509 NID 证书 builder + verifier
+    （`x509.Builder`、`x509.Verifier`）。
+  - `nip/acme/` —— ACME `agent-01` 客户端 + 服务端参考实现
+    （`AcmeServer`、`AcmeClient`）；按 NPS-RFC-0002 Phase B 的 JWS
+    签名 wire 包络。
+  - `nip/assurance-level.ts` —— Agent 身份保证等级
+    （`anonymous` / `attested` / `verified`），承接 NPS-RFC-0003。
+  - `nip/cert-format.ts` —— IdentFrame `cert_format` 判别器
+    （`v1` Ed25519 vs. `x509`）。
+  - `nip/error-codes.ts` —— NIP 错误码命名空间。
+  - `nip/verifier.ts` —— dual-trust IdentFrame 验证器（v1 + X.509）。
+- 20 个新测试覆盖 preamble 往返、X.509 签发 + 解析、dual-trust 验证、
+  ACME agent-01 全流程。总数：284 tests 全绿（alpha.3 时 264）。
+
+### 变更
+
+- 分发版本升至 `1.0.0-alpha.4`。
+- `src/nip/frames.ts` —— IdentFrame wire 形状扩展，可携带可选的
+  `cert_format` 判别器 + `x509_chain` 字段，与 v1 Ed25519 字段并存。
+  alpha.3 写出的 v1 IdentFrame 仍可被 alpha.4 验签。
+
+### npm 发布说明
+
+- 本仓库 / tag 是 `@labacacia/nps-sdk` `1.0.0-alpha.4` 的权威参考。
+  延续 alpha.3 的情况，npm publish 可能需要带 2FA-bypass 的 granular
+  access token —— 如果 npm registry 上的版本暂时落后于本仓库 tag，
+  以 tag 为准；下一次 registry cut 后 `npm install` 即可解析到本
+  commit。
+
+### 套件级 alpha.4 要点
+
+- **NPS-RFC-0002 X.509 + ACME** —— 完整跨 SDK 端口波（.NET / Java /
+  Python / TypeScript / Go / Rust）。
+- **NPS-CR-0002 —— Anchor Node topology 查询** —— `topology.snapshot`
+  / `topology.stream`（.NET 参考 + L2 conformance）。TypeScript 消费
+  侧 helper 后续版本跟进。
+- **`nps-registry` SQLite 实仓** + **`nps-ledger` Phase 2**
+  （RFC 9162 Merkle + STH + inclusion proof）已在 daemon 仓库交付。
+
+---
+
+## [1.0.0-alpha.3] —— 2026-04-25
+
+### Changed
+
+- 版本升级至 `1.0.0-alpha.3`，与 NPS `v1.0.0-alpha.3` 套件同步。本次 TypeScript SDK 无功能变更。
+- 264 tests, ≥98% 覆盖率仍全绿。
+
+### 套件级 alpha.3 要点（各语言 helper 在 alpha.4 跟进）
+
+- **NPS-RFC-0001 —— NCP 连接前导**（Accepted）。原生模式连接现以字面量 `b"NPS/1.0\n"`（8 字节）开头。.NET SDK 已落地参考实现；TypeScript helper 在 alpha.4 跟进。
+- **NPS-RFC-0003 —— Agent 身份保证等级**（Accepted）。NIP IdentFrame 与 NWM 新增三态 `assurance_level`（`anonymous`/`attested`/`verified`）。.NET 参考类型已落地；TypeScript 同步在 alpha.4。
+- **NPS-RFC-0004 —— NID 声誉日志（CT 风格）**（Accepted）。append-only Merkle 日志条目结构发布；.NET 参考签名器已落地（并以 `nps-ledger` daemon Phase 1 形态发布）。TypeScript helper 在 alpha.4 跟进。
+- **NPS-CR-0001 —— Anchor / Bridge 节点拆分。** 旧的 "Gateway Node" 角色更名为 **Anchor Node**；"NPS↔外部协议翻译" 单独成为 **Bridge Node** 类型。AnnounceFrame 新增 `node_kind` / `cluster_anchor` / `bridge_protocols`。源代码层面变更落在 `spec/` + .NET 参考实现。
+- **6 个 NPS 常驻 daemon。** NPS-Dev 新建 `daemons/` 目录，定义 `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`；其中 `npsd` 提供 L1 功能性参考实现，其余为 Phase 1 骨架。
+
+---
+
 ## [1.0.0-alpha.2] —— 2026-04-19
 
 ### Fixed
@@ -35,5 +149,6 @@
 
 作为 NPS 套件 `v1.0.0-alpha.1` 的一部分首次公开 alpha。
 
+[1.0.0-alpha.7]: https://github.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.7
 [1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
 [1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1

package/CHANGELOG.md

@@ -8,6 +8,129 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 ---
 
+## [1.0.0-alpha.7] — 2026-05-17
+
+### Added
+
+- **`nip/reputation-client.ts` — `ReputationLogClient` (NPS-RFC-0004 Phase 2)**: Full fetch-based client for the reputation-log operator API. `submitEntry`, `queryEntries`, `getSth`, `getProof`, `getGossipSth`. `verifyInclusion` performs RFC 9162 §2.1.3.2 Merkle audit-path verification locally using `@noble/hashes/sha256`. `signEntry` / `verifyEntry` sign and verify entries with `@noble/ed25519`. Wire types: `ReputationLogEntry`, `SignedTreeHead`, `InclusionProof`, `ObservationWindow`. `AnchorTopologyError` carries `nwpErrorCode` + `npsStatus`. 30 regression tests. Re-exported from `@labacacia/nps-sdk/nip`.
+
+- **`nwp/anchor-client.ts` — `AnchorNodeClient` (NPS-CR-0002)**: Fetch-based client for Anchor Node topology queries. `getSnapshot` (topology.snapshot) and `subscribe` async generator (topology.stream NDJSON). Discriminated-union `TopologyEvent` with kinds: `member_joined`, `member_left`, `member_updated`, `anchor_state`, `resync_required`. `AnchorTopologyError` for protocol errors. 24 regression tests.
+
+### Tracking the suite
+
+This release tracks NPS suite `v1.0.0-alpha.7`.
+
+---
+
+## [1.0.0-alpha.6] — 2026-05-14
+
+### Changed
+
+- **`nip/x509/oids.ts` — IANA PEN 65715 (Breaking, CR-0004)**: `LAB_ACACIA_PEN_ARC` updated from `"1.3.6.1.4.1.99999"` to `"1.3.6.1.4.1.65715"`. Certificates issued under the provisional arc must be revoked and re-issued.
+
+- **`nwp/index.ts` — `NwpErrorCodes` re-export removed (Breaking)**: `export * as NwpErrorCodes from "./error-codes.js"` removed from the barrel. Import directly from `@labacacia/nps-sdk/nwp/error-codes` if needed.
+
+- **Version bump to `1.0.0-alpha.6`** — synchronized with NPS suite alpha.6 release.
+
+---
+
+## [1.0.0-alpha.5] — 2026-05-01
+
+### Added
+
+- **NWP error code constants** — new `NwpErrorCodes` namespace exported from `@labacacia/nps-sdk/nwp` with all 30 NWP wire error codes (auth, query, action, task, subscribe, infrastructure, manifest, topology, reserved-type). Missing from previous releases.
+- **`NpsStatusCodes.NPS_SERVER_UNSUPPORTED`** — new status code `"NPS-SERVER-UNSUPPORTED"` (HTTP 501) in `src/core/status-codes.ts`, per spec/status-codes.md alpha.5 update.
+- **`NDP.resolveWithDns` — DNS TXT fallback resolution** — new `InMemoryNdpRegistry.resolveWithDns(target, resolver?)` falls back to `_nps-node.{host}` TXT record lookup (NPS-4 §5) when no in-memory entry matches. New `DnsTxtLookup` interface + `SystemDnsTxtLookup` (Node.js `dns.promises`); `parseNpsTxtRecord` + `extractHostFromTarget` helpers exported from `@labacacia/nps-sdk/ndp`. Tests: 284 → 294.
+
+### Changed
+
+- **`AssuranceLevel.fromWire("")` returns `Anonymous`** — `if (wire == null)` changed to `if (!wire)` so `""` returns `Anonymous` instead of `Unknown` (spec §5.1.1 backward-compat fix).
+- **Version bump to `1.0.0-alpha.5`** — synchronized with NPS suite alpha.5 release.
+
+### Fixed
+
+- **`REPUTATION_GOSSIP_FORK` / `REPUTATION_GOSSIP_SIG_INVALID`** — two new NIP reputation gossip error codes added to `src/nip/error-codes.ts` (RFC-0004 Phase 3).
+
+---
+
+## [1.0.0-alpha.4] — 2026-04-30
+
+### Added
+
+- **NPS-RFC-0001 Phase 2 — NCP connection preamble (TypeScript helper
+  parity).** `src/ncp/preamble.ts` exposes `writePreamble(stream)` and
+  `readPreamble(stream)` round-tripping the literal `b"NPS/1.0\n"`
+  sentinel; matched by `tests/ncp/preamble.test.ts`. Brings TypeScript
+  in line with the .NET / Python / Go / Java preamble helpers shipped
+  at alpha.4.
+- **NPS-RFC-0002 Phase A/B — X.509 NID certificates + ACME `agent-01`
+  (TypeScript port).** New surface under `src/nip/`:
+  - `nip/x509/` — X.509 NID certificate builder + verifier
+    (`x509.Builder`, `x509.Verifier`).
+  - `nip/acme/` — ACME `agent-01` client + server reference
+    (`AcmeServer`, `AcmeClient`); JWS-signed wire envelope per
+    NPS-RFC-0002 Phase B.
+  - `nip/assurance-level.ts` — agent identity assurance levels
+    (`anonymous` / `attested` / `verified`) per NPS-RFC-0003.
+  - `nip/cert-format.ts` — IdentFrame `cert_format` discriminator
+    (`v1` Ed25519 vs. `x509`).
+  - `nip/error-codes.ts` — NIP error code namespace strings.
+  - `nip/verifier.ts` — dual-trust IdentFrame verifier (v1 + X.509).
+- 20 new tests covering preamble round-trip, X.509 issuance + parsing,
+  dual-trust verification, and ACME agent-01 round-trip. Total: 284
+  tests green (was 264 at alpha.3).
+
+### Changed
+
+- Distribution version bumped to `1.0.0-alpha.4`.
+- `src/nip/frames.ts` — IdentFrame wire shape extended with optional
+  `cert_format` discriminator + `x509_chain` field alongside the
+  existing v1 Ed25519 fields. v1 IdentFrames written by alpha.3
+  consumers continue to verify unchanged.
+
+### Note: npm publish status
+
+- This repo / tag is the canonical `1.0.0-alpha.4` reference for
+  `@labacacia/nps-sdk`. As at the alpha.3 ship cycle, npm publish
+  may require a granular access token with 2FA-bypass enabled — if
+  the registry version lags this repo's tag, the tag is the
+  authoritative artifact and `npm install` against the next
+  registry cut will resolve to this commit.
+
+### Suite-wide highlights at alpha.4
+
+- **NPS-RFC-0002 X.509 + ACME** — full cross-SDK port wave (.NET /
+  Java / Python / TypeScript / Go / Rust). Servers can now issue
+  dual-trust IdentFrames (v1 Ed25519 + X.509 leaf cert chained to a
+  self-signed root) and self-onboard NIDs over ACME's `agent-01`
+  challenge type.
+- **NPS-CR-0002 — Anchor Node topology queries** — `topology.snapshot`
+  / `topology.stream` query types (.NET reference + L2 conformance
+  suite). TypeScript consumer-side helpers planned for a later
+  release.
+- **`nps-registry` SQLite-backed real registry** + **`nps-ledger`
+  Phase 2** (RFC 9162 Merkle + STH + inclusion proofs) shipped in the
+  daemon repos.
+
+---
+
+## [1.0.0-alpha.3] — 2026-04-25
+
+### Changed
+
+- Version bump to `1.0.0-alpha.3` for suite-wide synchronization with the NPS `v1.0.0-alpha.3` release. No functional changes in the TypeScript SDK at this milestone.
+- 264 tests, ≥98% coverage still green.
+
+### Suite-wide highlights at alpha.3 (per-language helpers planned for alpha.4)
+
+- **NPS-RFC-0001 — NCP connection preamble** (Accepted). Native-mode connections now begin with the literal `b"NPS/1.0\n"` (8 bytes). Reference helper landed in the .NET SDK; TypeScript helper deferred to alpha.4.
+- **NPS-RFC-0003 — Agent identity assurance levels** (Accepted). NIP IdentFrame and NWM gain a tri-state `assurance_level` (`anonymous`/`attested`/`verified`). Reference types landed in .NET; TypeScript parity deferred to alpha.4.
+- **NPS-RFC-0004 — NID reputation log (CT-style)** (Accepted). Append-only Merkle log entry shape published; reference signer landed in .NET (and shipped as the `nps-ledger` daemon Phase 1). TypeScript helpers deferred to alpha.4.
+- **NPS-CR-0001 — Anchor / Bridge node split.** The legacy "Gateway Node" role is renamed to **Anchor Node**; the "translate NPS↔external protocol" role is now its own **Bridge Node** type. AnnounceFrame gained `node_kind` / `cluster_anchor` / `bridge_protocols`. Source-of-truth changes are in `spec/` + the .NET reference implementation.
+- **6 NPS resident daemons.** New `daemons/` tree in NPS-Dev defines `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`; `npsd` ships an L1-functional reference and the rest ship as Phase 1 skeletons.
+
+---
+
 ## [1.0.0-alpha.2] — 2026-04-19
 
 ### Fixed
@@ -35,5 +158,6 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 First public alpha as part of the NPS suite `v1.0.0-alpha.1` release.
 
+[1.0.0-alpha.7]: https://github.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.7
 [1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
 [1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1

package/README.cn.md

@@ -9,6 +9,8 @@
 
 **v1.0.0-alpha.6 — RFC-0002 跨 SDK 端口波（第三棒）** · 5 个协议 · 271 个测试 · 覆盖率 ≥ 98%
 
+> npm registry 说明：`@labacacia/nps-sdk@1.0.0-alpha.6` 已 deprecated，因为发布到 npm 的 tarball 缺少 `dist/`。当前 `alpha` dist-tag 临时指向 `1.0.0-alpha.5`；需要 alpha.6 源码时请使用 GitHub `v1.0.0-alpha.6` tag，等待下一个 npm 预发布。
+
 | 协议 | 类 | 状态 |
 |------|----|------|
 | NCP — Neural Communication Protocol | 帧、编解码器 | ✅ |
@@ -26,7 +28,7 @@
 ## 安装
 
 ```bash
-npm install @labacacia/nps-sdk
+npm install @labacacia/nps-sdk@alpha
 ```
 
 > **对等依赖：** Node.js 22+

package/README.md

@@ -9,6 +9,8 @@ Part of the [LabAcacia](https://github.com/LabAcacia) / INNO LOTUS PTY LTD open-
 
 **v1.0.0-alpha.6 — RFC-0002 cross-SDK port (third language)** · 5 protocols · 271 tests · ≥ 98% coverage
 
+> npm registry note: `@labacacia/nps-sdk@1.0.0-alpha.6` is deprecated because the published tarball omitted `dist/`. The `alpha` dist-tag currently resolves to `1.0.0-alpha.5`; use the GitHub `v1.0.0-alpha.6` tag for source until the next npm prerelease.
+
 | Protocol | Class | Status |
 |----------|-------|--------|
 | NCP — Neural Communication Protocol | Framing, codec | ✅ |
@@ -26,7 +28,7 @@ Part of the [LabAcacia](https://github.com/LabAcacia) / INNO LOTUS PTY LTD open-
 ## Installation
 
 ```bash
-npm install @labacacia/nps-sdk
+npm install @labacacia/nps-sdk@alpha
 ```
 
 > **Peer requirement:** Node.js 22+

package/dist/core/anchor-cache.d.ts

@@ -0,0 +1,42 @@
+import type { AnchorFrame } from "../ncp/frames/anchor-frame.js";
+/**
+ * AnchorFrame cache with:
+ * - TTL-based expiry (NPS-1 §5.3)
+ * - LRU eviction at maxSize (NPS-1 §9, default 1000)
+ * - Anchor poisoning detection (NPS-1 §7.2)
+ */
+export declare class AnchorCache {
+    private readonly cache;
+    private readonly maxSize;
+    private readonly getNow;
+    constructor(options?: {
+        maxSize?: number;
+        getNow?: () => number;
+    });
+    /**
+     * Cache an AnchorFrame.
+     *
+     * - ttl=0: frame is valid but not cached (NPS-1 §4.1)
+     * - Same anchor_id + same schema: idempotent (no-op)
+     * - Same anchor_id + different schema: NCP-ANCHOR-ID-MISMATCH (poison detection)
+     *
+     * @throws {NcpError} NCP-ANCHOR-ID-MISMATCH on anchor poisoning.
+     */
+    set(frame: AnchorFrame): void;
+    /**
+     * Get a cached AnchorFrame by anchor_id.
+     *
+     * @returns The cached frame, or null if not found or expired.
+     */
+    get(anchorId: string): AnchorFrame | null;
+    /**
+     * Get a cached AnchorFrame, throwing if not found.
+     * @throws {NcpError} NCP-ANCHOR-NOT-FOUND if not in cache or expired.
+     */
+    getRequired(anchorId: string): AnchorFrame;
+    /** Current cache size. */
+    get size(): number;
+    /** Evict the least recently accessed entry. */
+    private evictLru;
+}
+//# sourceMappingURL=anchor-cache.d.ts.map

package/dist/core/anchor-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-cache.d.ts","sourceRoot":"","sources":["../../src/core/anchor-cache.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAQjE;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAE1B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAKjE;;;;;;;;OAQG;IACH,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAiC7B;;;;OAIG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAczC;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW;IAW1C,0BAA0B;IAC1B,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+CAA+C;IAC/C,OAAO,CAAC,QAAQ;CAejB"}

package/dist/core/anchor-cache.js

@@ -0,0 +1,104 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 LabAcacia / INNO LOTUS PTY LTD
+//
+// AnchorCache — Schema cache with TTL, LRU eviction, poison detection
+// NPS-1 §5.3, §7.2, §9
+import { NcpError } from "./frame-header.js";
+/**
+ * AnchorFrame cache with:
+ * - TTL-based expiry (NPS-1 §5.3)
+ * - LRU eviction at maxSize (NPS-1 §9, default 1000)
+ * - Anchor poisoning detection (NPS-1 §7.2)
+ */
+export class AnchorCache {
+    cache = new Map();
+    maxSize;
+    getNow;
+    constructor(options) {
+        this.maxSize = options?.maxSize ?? 1000;
+        this.getNow = options?.getNow ?? (() => Date.now());
+    }
+    /**
+     * Cache an AnchorFrame.
+     *
+     * - ttl=0: frame is valid but not cached (NPS-1 §4.1)
+     * - Same anchor_id + same schema: idempotent (no-op)
+     * - Same anchor_id + different schema: NCP-ANCHOR-ID-MISMATCH (poison detection)
+     *
+     * @throws {NcpError} NCP-ANCHOR-ID-MISMATCH on anchor poisoning.
+     */
+    set(frame) {
+        // ttl=0 means use once, don't cache
+        if (frame.ttl === 0)
+            return;
+        const existing = this.cache.get(frame.anchor_id);
+        if (existing) {
+            // Poison detection: same ID, different schema
+            const existingJson = JSON.stringify(existing.frame.schema);
+            const newJson = JSON.stringify(frame.schema);
+            if (existingJson !== newJson) {
+                throw new NcpError("NCP-ANCHOR-ID-MISMATCH", `Anchor poisoning detected: anchor_id ${frame.anchor_id} received with different schema`);
+            }
+            // Same schema — idempotent, update access time
+            existing.lastAccessed = this.getNow();
+            return;
+        }
+        // LRU eviction if at capacity
+        if (this.cache.size >= this.maxSize) {
+            this.evictLru();
+        }
+        const ttlMs = (frame.ttl ?? 3600) * 1000;
+        this.cache.set(frame.anchor_id, {
+            frame,
+            expiresAt: this.getNow() + ttlMs,
+            lastAccessed: this.getNow(),
+        });
+    }
+    /**
+     * Get a cached AnchorFrame by anchor_id.
+     *
+     * @returns The cached frame, or null if not found or expired.
+     */
+    get(anchorId) {
+        const entry = this.cache.get(anchorId);
+        if (!entry)
+            return null;
+        // Check TTL expiry
+        if (this.getNow() >= entry.expiresAt) {
+            this.cache.delete(anchorId);
+            return null;
+        }
+        entry.lastAccessed = this.getNow();
+        return entry.frame;
+    }
+    /**
+     * Get a cached AnchorFrame, throwing if not found.
+     * @throws {NcpError} NCP-ANCHOR-NOT-FOUND if not in cache or expired.
+     */
+    getRequired(anchorId) {
+        const frame = this.get(anchorId);
+        if (!frame) {
+            throw new NcpError("NCP-ANCHOR-NOT-FOUND", `Schema anchor ${anchorId} not found in cache`);
+        }
+        return frame;
+    }
+    /** Current cache size. */
+    get size() {
+        return this.cache.size;
+    }
+    /** Evict the least recently accessed entry. */
+    evictLru() {
+        let oldestKey;
+        let oldestTime = Infinity;
+        for (const [key, entry] of this.cache) {
+            if (entry.lastAccessed < oldestTime) {
+                oldestTime = entry.lastAccessed;
+                oldestKey = key;
+            }
+        }
+        if (oldestKey) {
+            this.cache.delete(oldestKey);
+        }
+    }
+}
+//# sourceMappingURL=anchor-cache.js.map

package/dist/core/anchor-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor-cache.js","sourceRoot":"","sources":["../../src/core/anchor-cache.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,EAAE;AACF,sEAAsE;AACtE,uBAAuB;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAS7C;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,OAAO,CAAS;IAChB,MAAM,CAAe;IAEtC,YAAY,OAAqD;QAC/D,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACH,GAAG,CAAC,KAAkB;QACpB,oCAAoC;QACpC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC;YAAE,OAAO;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,8CAA8C;YAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAChB,wBAAwB,EACxB,wCAAwC,KAAK,CAAC,SAAS,iCAAiC,CACzF,CAAC;YACJ,CAAC;YACD,+CAA+C;YAC/C,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;YAC9B,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,QAAgB;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,QAAgB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,iBAAiB,QAAQ,qBAAqB,CAC/C,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0BAA0B;IAC1B,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,+CAA+C;IACvC,QAAQ;QACd,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,YAAY,GAAG,UAAU,EAAE,CAAC;gBACpC,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC;gBAChC,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF"}

package/dist/core/cache.d.ts

@@ -0,0 +1,14 @@
+import type { AnchorFrame, FrameSchema } from "../ncp/frames.js";
+export declare class AnchorFrameCache {
+    private readonly _store;
+    clock: () => number;
+    set(frame: AnchorFrame): string;
+    get(anchorId: string): AnchorFrame | undefined;
+    getRequired(anchorId: string): AnchorFrame;
+    invalidate(anchorId: string): void;
+    get size(): number;
+    static computeAnchorId(schema: FrameSchema): string;
+    private _evictExpired;
+    private static _schemasEqual;
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/core/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/core/cache.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEjE,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgE;IAGvF,KAAK,EAAE,MAAM,MAAM,CAAoB;IAIvC,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM;IAmB/B,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAU9C,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW;IAM1C,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIlC,IAAI,IAAI,IAAI,MAAM,CAGjB;IAID,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAiBnD,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,MAAM,CAAC,aAAa;CAG7B"}

package/dist/core/cache.js

@@ -0,0 +1,80 @@
+// Copyright 2026 INNO LOTUS PTY LTD
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * AnchorFrameCache — in-process cache for AnchorFrame instances (NPS-1 §4.1).
+ */
+import { createHash } from "node:crypto";
+import { NpsAnchorNotFoundError, NpsAnchorPoisonError } from "./exceptions.js";
+export class AnchorFrameCache {
+    _store = new Map();
+    // Allow clock injection for testing
+    clock = () => Date.now();
+    // ── Public API ────────────────────────────────────────────────────────────
+    set(frame) {
+        const anchorId = frame.anchorId.startsWith("sha256:")
+            ? frame.anchorId
+            : AnchorFrameCache.computeAnchorId(frame.schema);
+        const existing = this._store.get(anchorId);
+        if (existing !== undefined && this.clock() < existing.expiresAt) {
+            if (!AnchorFrameCache._schemasEqual(existing.frame.schema, frame.schema)) {
+                throw new NpsAnchorPoisonError(anchorId);
+            }
+            // Same schema — idempotent; refresh TTL below
+        }
+        const ttlMs = (frame.ttl ?? 3600) * 1000;
+        const expiresAt = this.clock() + ttlMs;
+        this._store.set(anchorId, { frame, expiresAt });
+        return anchorId;
+    }
+    get(anchorId) {
+        const entry = this._store.get(anchorId);
+        if (entry === undefined)
+            return undefined;
+        if (this.clock() > entry.expiresAt) {
+            this._store.delete(anchorId);
+            return undefined;
+        }
+        return entry.frame;
+    }
+    getRequired(anchorId) {
+        const frame = this.get(anchorId);
+        if (frame === undefined)
+            throw new NpsAnchorNotFoundError(anchorId);
+        return frame;
+    }
+    invalidate(anchorId) {
+        this._store.delete(anchorId);
+    }
+    get size() {
+        this._evictExpired();
+        return this._store.size;
+    }
+    // ── Static helpers ────────────────────────────────────────────────────────
+    static computeAnchorId(schema) {
+        const sorted = [...schema.fields]
+            .map((f) => {
+            const obj = { name: f.name, type: f.type };
+            if (f.semantic !== undefined)
+                obj["semantic"] = f.semantic;
+            if (f.nullable !== undefined)
+                obj["nullable"] = f.nullable;
+            return obj;
+        })
+            .sort((a, b) => String(a["name"]).localeCompare(String(b["name"])));
+        const canonical = JSON.stringify(sorted);
+        const digest = createHash("sha256").update(canonical, "utf8").digest("hex");
+        return `sha256:${digest}`;
+    }
+    // ── Private ───────────────────────────────────────────────────────────────
+    _evictExpired() {
+        const now = this.clock();
+        for (const [k, entry] of this._store) {
+            if (now > entry.expiresAt)
+                this._store.delete(k);
+        }
+    }
+    static _schemasEqual(a, b) {
+        return AnchorFrameCache.computeAnchorId(a) === AnchorFrameCache.computeAnchorId(b);
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/core/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/core/cache.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,sCAAsC;AAEtC;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,MAAM,OAAO,gBAAgB;IACV,MAAM,GAAG,IAAI,GAAG,EAAqD,CAAC;IAEvF,oCAAoC;IACpC,KAAK,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvC,6EAA6E;IAE7E,GAAG,CAAC,KAAkB;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YAChE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YACD,8CAA8C;QAChD,CAAC;QAED,MAAM,KAAK,GAAK,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI;QACN,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAE7E,MAAM,CAAC,eAAe,CAAC,MAAmB;QACxC,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC3D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC3D,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/E,OAAO,UAAU,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,6EAA6E;IAErE,aAAa;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,aAAa,CAAC,CAAc,EAAE,CAAc;QACzD,OAAO,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;CACF"}

package/dist/core/canonical-json.d.ts

@@ -0,0 +1,12 @@
+/**
+ * JCS (RFC 8785) canonical JSON stringify.
+ * Used for AnchorFrame anchor_id computation.
+ */
+export declare function jcsStringify(obj: unknown): string;
+/**
+ * Sorted-key JSON stringify — matches Python's
+ * `json.dumps(obj, sort_keys=True, separators=(",",":"))`.
+ * Used for NIP signing.
+ */
+export declare function sortKeysStringify(obj: unknown): string;
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/core/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/core/canonical-json.ts"],"names":[],"mappings":"AAgBA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAMjD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEtD"}

package/dist/core/canonical-json.js

@@ -0,0 +1,44 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) 2026 LabAcacia / INNO LOTUS PTY LTD
+//
+// Canonical JSON helpers — two distinct serialisation paths used in NPS.
+//
+// AnchorFrame uses JCS (RFC 8785) for anchor_id hashing → jcsStringify.
+// NIP signing uses Python-compatible sorted-key JSON → sortKeysStringify.
+import canonicalizeImport from "canonicalize";
+// `canonicalize` is a CJS module whose default export resolves to a namespace
+// under NodeNext. Cast once to the call signature its .d.ts promises.
+const canonicalize = canonicalizeImport;
+/**
+ * JCS (RFC 8785) canonical JSON stringify.
+ * Used for AnchorFrame anchor_id computation.
+ */
+export function jcsStringify(obj) {
+    const result = canonicalize(obj);
+    if (result === undefined) {
+        throw new Error("canonicalize returned undefined for input");
+    }
+    return result;
+}
+/**
+ * Sorted-key JSON stringify — matches Python's
+ * `json.dumps(obj, sort_keys=True, separators=(",",":"))`.
+ * Used for NIP signing.
+ */
+export function sortKeysStringify(obj) {
+    return JSON.stringify(sortKeys(obj));
+}
+function sortKeys(value) {
+    if (Array.isArray(value)) {
+        return value.map(sortKeys);
+    }
+    if (value !== null && typeof value === "object") {
+        const sorted = {};
+        for (const key of Object.keys(value).sort()) {
+            sorted[key] = sortKeys(value[key]);
+        }
+        return sorted;
+    }
+    return value;
+}
+//# sourceMappingURL=canonical-json.js.map

package/dist/core/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/core/canonical-json.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAE1E,OAAO,kBAAkB,MAAM,cAAc,CAAC;AAE9C,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,YAAY,GAAG,kBAEE,CAAC;AAExB;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}