@vmz/vmz 0.0.3 → 0.1.0

package/dist/release-pack.js

@@ -0,0 +1,346 @@
+/**
+ * A3 filesystem release packaging — digests, atomic pointer, rollback, artifact diff.
+ *
+ * Not the full CDN/StaticDelivery matrix. Same VPG build (`dist/`) is packed into
+ * `_vmz/*` manifests + content digests; publish retains previous release for rollback
+ * without rebuild.
+ */
+// @ts-nocheck
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+export const RELEASE_ENVELOPE_SCHEMA = 'vmz.release.envelope.v0';
+export const APPLICATION_ARTIFACT_SCHEMA = 'vmz.application.artifact.v0';
+export const DELIVERY_ARTIFACT_MANIFEST_SCHEMA = 'vmz.profile.delivery_artifact_manifest.v0';
+export const ROUTE_REALIZATION_TABLE_SCHEMA = 'vmz.profile.route_realization_table.v0';
+export const ARTIFACT_DIFF_SCHEMA = 'vmz.artifact.diff.v0';
+/**
+ * @param {Buffer | string} data
+ */
+export function sha256Hex(data) {
+    return crypto.createHash('sha256').update(data).digest('hex');
+}
+/**
+ * @param {string} filePath
+ */
+export function sha256File(filePath) {
+    return sha256Hex(fs.readFileSync(filePath));
+}
+/**
+ * @param {unknown} value
+ */
+export function canonicalJson(value) {
+    return JSON.stringify(sortKeys(value));
+}
+/**
+ * @param {unknown} value
+ * @returns {unknown}
+ */
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value && typeof value === 'object') {
+        /** @type {Record<string, unknown>} */
+        const out = {};
+        for (const k of Object.keys(value).sort()) {
+            out[k] = sortKeys(/** @type {Record<string, unknown>} */ (value)[k]);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * @param {string} distDir
+ * @returns {string[]}
+ */
+function listContentFiles(distDir) {
+    /** @type {string[]} */
+    const out = [];
+    const skipDir = new Set(['_vmz', 'node_modules']);
+    const skipName = new Set(['vmz-serve-host.mjs', 'vmz-serve-host.js']);
+    /** @param {string} abs */
+    /** @param {string} rel */
+    function walk(abs, rel) {
+        let ents;
+        try {
+            ents = fs.readdirSync(abs, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of ents) {
+            if (e.name.startsWith('.'))
+                continue;
+            const nextAbs = path.join(abs, e.name);
+            const nextRel = rel ? `${rel}/${e.name}` : e.name;
+            if (e.isDirectory()) {
+                if (skipDir.has(e.name))
+                    continue;
+                walk(nextAbs, nextRel);
+                continue;
+            }
+            if (skipName.has(e.name))
+                continue;
+            out.push(nextRel.replace(/\\/g, '/'));
+        }
+    }
+    walk(distDir, '');
+    out.sort();
+    return out;
+}
+/**
+ * @param {string} chunkId
+ */
+function pathPatternFromChunk(chunkId) {
+    const rel = chunkId.replace(/^pages\//, '');
+    const parts = rel.split('/').filter(Boolean);
+    const segs = [];
+    for (let i = 0; i < parts.length; i++) {
+        const p = parts[i];
+        if (p === 'index' && i === parts.length - 1)
+            continue;
+        segs.push(p);
+    }
+    return segs.length ? `/${segs.join('/')}` : '/';
+}
+/**
+ * Pack `dist/` into `_vmz` manifests + release envelope (filesystem Delivery Profile).
+ * @param {string} distDir
+ * @param {{ applicationId?: string }} [opts]
+ */
+export function packRelease(distDir, opts = {}) {
+    const abs = path.resolve(distDir);
+    if (!fs.existsSync(abs)) {
+        throw new Error(`packRelease: missing dist ${abs}`);
+    }
+    const deploymentPath = path.join(abs, 'vmz-deployment.json');
+    if (!fs.existsSync(deploymentPath)) {
+        throw new Error(`packRelease: missing ${deploymentPath}`);
+    }
+    const deployment = JSON.parse(fs.readFileSync(deploymentPath, 'utf8'));
+    const files = listContentFiles(abs);
+    /** @type {Record<string, string>} */
+    const fileDigests = {};
+    for (const rel of files) {
+        fileDigests[rel] = sha256File(path.join(abs, ...rel.split('/')));
+    }
+    const pages = (deployment.units || []).filter((u) => u.kind === 'page');
+    const routeRealization = {
+        schema: ROUTE_REALIZATION_TABLE_SCHEMA,
+        routes: pages.map((u) => ({
+            routeId: String(u.chunkId),
+            chunkId: String(u.chunkId),
+            pathPattern: pathPatternFromChunk(String(u.chunkId)),
+            clientEntry: u.clientEntry || null,
+            programIr: u.programIr || null,
+        })),
+    };
+    const programParts = pages
+        .map((u) => u.programIr)
+        .filter(Boolean)
+        .map((rel) => fileDigests[String(rel).replace(/\\/g, '/')] || '')
+        .filter(Boolean)
+        .sort();
+    const programDigest = sha256Hex(programParts.join('|'));
+    const styleDigest = typeof deployment.styleBundleHash === 'string' && deployment.styleBundleHash ? deployment.styleBundleHash : null;
+    const deploymentDigest = fileDigests['vmz-deployment.json'] || sha256File(deploymentPath);
+    const applicationId = opts.applicationId || 'production-router';
+    const applicationArtifact = {
+        schema: APPLICATION_ARTIFACT_SCHEMA,
+        applicationId,
+        deliveryProfile: 'filesystem',
+        programDigest,
+        planDigest: programDigest,
+        deploymentDigest,
+        styleDigest,
+        routeDigest: sha256Hex(canonicalJson(routeRealization)),
+        fileDigests,
+        publicRouteContracts: routeRealization.routes.map((r) => r.routeId),
+    };
+    applicationArtifact.integrity = sha256Hex(canonicalJson({ ...applicationArtifact, integrity: undefined }));
+    const deliveryManifest = {
+        schema: DELIVERY_ARTIFACT_MANIFEST_SCHEMA,
+        deliveryProfile: 'filesystem',
+        copiesSemanticIr: false,
+        applicationId,
+        applicationIntegrity: applicationArtifact.integrity,
+        routeCount: routeRealization.routes.length,
+        assetCount: Object.keys(fileDigests).length,
+        styleDigest,
+        deploymentDigest,
+    };
+    const envelopeBody = {
+        schema: RELEASE_ENVELOPE_SCHEMA,
+        applicationId,
+        deliveryProfile: 'filesystem',
+        applicationIntegrity: applicationArtifact.integrity,
+        deploymentDigest,
+        programDigest,
+        styleDigest,
+        routeDigest: applicationArtifact.routeDigest,
+        fileDigests,
+        manifests: {
+            applicationArtifact: '_vmz/application-artifact.json',
+            deliveryArtifactManifest: '_vmz/delivery-artifact-manifest.json',
+            routeRealization: '_vmz/route-realization.json',
+        },
+    };
+    const artifactDigest = sha256Hex(canonicalJson(envelopeBody));
+    const envelope = { ...envelopeBody, artifactDigest };
+    const vmzDir = path.join(abs, '_vmz');
+    fs.mkdirSync(vmzDir, { recursive: true });
+    writeJson(path.join(vmzDir, 'application-artifact.json'), applicationArtifact);
+    writeJson(path.join(vmzDir, 'delivery-artifact-manifest.json'), deliveryManifest);
+    writeJson(path.join(vmzDir, 'route-realization.json'), routeRealization);
+    writeJson(path.join(vmzDir, 'release-envelope.json'), envelope);
+    return envelope;
+}
+/**
+ * @param {string} file
+ * @param {unknown} value
+ */
+function writeJson(file, value) {
+    fs.writeFileSync(file, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+}
+/**
+ * @param {string} pointerPath
+ * @param {string} digest
+ */
+export function atomicWritePointer(pointerPath, digest) {
+    const dir = path.dirname(pointerPath);
+    fs.mkdirSync(dir, { recursive: true });
+    const tmp = `${pointerPath}.${process.pid}.${Date.now()}.tmp`;
+    fs.writeFileSync(tmp, `${digest.trim()}\n`, 'utf8');
+    try {
+        fs.renameSync(tmp, pointerPath);
+    }
+    catch {
+        if (fs.existsSync(pointerPath))
+            fs.unlinkSync(pointerPath);
+        fs.renameSync(tmp, pointerPath);
+    }
+}
+/**
+ * @param {string} pointerPath
+ * @returns {string | null}
+ */
+export function readPointer(pointerPath) {
+    if (!fs.existsSync(pointerPath))
+        return null;
+    const t = fs.readFileSync(pointerPath, 'utf8').trim();
+    return t || null;
+}
+/**
+ * Publish packed dist into releases root; retain previous pointer for rollback.
+ * @param {string} releasesRoot
+ * @param {string} distDir
+ * @param {ReturnType<typeof packRelease>} envelope
+ */
+export function publishRelease(releasesRoot, distDir, envelope) {
+    const digest = envelope.artifactDigest;
+    if (!digest)
+        throw new Error('publishRelease: envelope missing artifactDigest');
+    const root = path.resolve(releasesRoot);
+    const srcDist = path.resolve(distDir);
+    // Node fs.cpSync refuses copying a directory into any subdirectory of itself.
+    // Releases root must sit beside dist (e.g. .vmz-releases), never under dist/.
+    const dest = path.join(root, digest);
+    const destDist = path.join(dest, 'dist');
+    if (root === srcDist || root.startsWith(srcDist + path.sep) || destDist.startsWith(srcDist + path.sep)) {
+        throw new Error(`publishRelease: releasesRoot must not be under distDir (got releasesRoot=${root}, distDir=${srcDist})`);
+    }
+    fs.mkdirSync(dest, { recursive: true });
+    // Immutable snapshot of packed dist (exclude prior releases nesting).
+    fs.rmSync(destDist, { recursive: true, force: true });
+    fs.cpSync(srcDist, destDist, {
+        recursive: true,
+        filter: (src) => {
+            const n = src.replace(/\\/g, '/');
+            return (!n.includes('/.vmz-releases/') &&
+                !n.includes('/.vmz-cdn-releases/') &&
+                !n.includes('/releases-cdn/') &&
+                !/\/dist\/releases(\/|$)/.test(n));
+        },
+    });
+    writeJson(path.join(dest, 'envelope.json'), envelope);
+    const currentPath = path.join(root, 'CURRENT');
+    const previousPath = path.join(root, 'PREVIOUS');
+    const prev = readPointer(currentPath);
+    if (prev && prev !== digest) {
+        atomicWritePointer(previousPath, prev);
+    }
+    atomicWritePointer(currentPath, digest);
+    return {
+        digest,
+        previous: prev && prev !== digest ? prev : readPointer(previousPath),
+        currentPath,
+        releaseDir: dest,
+    };
+}
+/**
+ * Rollback CURRENT → PREVIOUS without rebuild.
+ * @param {string} releasesRoot
+ */
+export function rollbackRelease(releasesRoot) {
+    const root = path.resolve(releasesRoot);
+    const currentPath = path.join(root, 'CURRENT');
+    const previousPath = path.join(root, 'PREVIOUS');
+    const current = readPointer(currentPath);
+    const previous = readPointer(previousPath);
+    if (!previous) {
+        throw new Error('rollbackRelease: no PREVIOUS pointer');
+    }
+    if (!fs.existsSync(path.join(root, previous, 'envelope.json'))) {
+        throw new Error(`rollbackRelease: missing retained release ${previous}`);
+    }
+    if (current) {
+        atomicWritePointer(previousPath, current);
+    }
+    atomicWritePointer(currentPath, previous);
+    return {
+        restored: previous,
+        demoted: current,
+        releaseDir: path.join(root, previous),
+    };
+}
+/**
+ * Structured diff between two release envelopes / digest maps.
+ * @param {{ fileDigests?: Record<string, string>, artifactDigest?: string }} a
+ * @param {{ fileDigests?: Record<string, string>, artifactDigest?: string }} b
+ */
+export function diffArtifacts(a, b) {
+    const da = a.fileDigests || {};
+    const db = b.fileDigests || {};
+    const keys = new Set([...Object.keys(da), ...Object.keys(db)]);
+    /** @type {string[]} */
+    const added = [];
+    /** @type {string[]} */
+    const removed = [];
+    /** @type {Array<{ path: string, before: string, after: string }>} */
+    const changed = [];
+    for (const k of [...keys].sort()) {
+        if (!(k in da))
+            added.push(k);
+        else if (!(k in db))
+            removed.push(k);
+        else if (da[k] !== db[k])
+            changed.push({ path: k, before: da[k], after: db[k] });
+    }
+    return {
+        schema: ARTIFACT_DIFF_SCHEMA,
+        beforeDigest: a.artifactDigest || null,
+        afterDigest: b.artifactDigest || null,
+        added,
+        removed,
+        changed,
+        identical: added.length === 0 && removed.length === 0 && changed.length === 0,
+    };
+}
+/**
+ * @param {string} releasesRoot
+ * @param {string} digest
+ */
+export function loadReleaseEnvelope(releasesRoot, digest) {
+    const p = path.join(path.resolve(releasesRoot), digest, 'envelope.json');
+    return JSON.parse(fs.readFileSync(p, 'utf8'));
+}

package/dist/server-artifact.d.ts

@@ -0,0 +1,140 @@
+/**
+ * P4 ServerArtifact — compiled route decision tree + public ServerRoute contracts
+ * + internal capability units + selected runtime adapter. Web Standards Fetch entry.
+ */
+export declare const SERVER_ARTIFACT_SCHEMA = "vmz.server.artifact.v0";
+export declare const HTTP_CONTRACT_SCHEMA = "vmz.http.contract.v0";
+export declare const SERVER_RUNTIME_ADAPTER_SCHEMA = "vmz.server.runtime_adapter.v0";
+/**
+ * @param {string} outDir
+ * @param {{
+ *   profileId?: string | null,
+ *   assembly?: string | null,
+ *   serverRuntime?: string | null,
+ *   packDigest?: string | null,
+ * }} [opts]
+ */
+export declare function emitServerArtifact(outDir: any, opts?: {}): {
+    artifact: {
+        schema: string;
+        profileId: any;
+        assembly: any;
+        selectedRuntime: string;
+        entry: {
+            kind: string;
+            standards: string[];
+            rpcPath: string;
+        };
+        httpContract: {
+            schema: string;
+            digest: string;
+        };
+        publicRoutes: {
+            verb: string;
+            path: string;
+            moduleId: string;
+            method: string;
+            className: string;
+            visibility: string;
+            kind: string;
+        }[];
+        internalCapabilities: any[];
+        middlewareUnits: any[];
+        routeDecisionTree: ({
+            id: string;
+            match: {
+                method: string;
+                path: string;
+            };
+            action: string;
+            target: {
+                moduleId: string;
+                method: string;
+            };
+            visibility: string;
+        } | {
+            id: string;
+            match: {
+                method: string;
+                path: string;
+            };
+            action: string;
+            visibility: string;
+        })[];
+        deploymentSchema: any;
+        packDigest: any;
+        adapters: {
+            node: {
+                kind: string;
+                status: string;
+                entry: string;
+            };
+            worker: {
+                kind: string;
+                status: string;
+                entry: string;
+            };
+            deno: {
+                kind: string;
+                status: string;
+                entry: string;
+            };
+            bun: {
+                kind: string;
+                status: string;
+                entry: string;
+            };
+            'rust-host': {
+                kind: string;
+                status: string;
+                entry: string;
+            };
+        };
+    };
+    path: string;
+    httpContractDigest: string;
+};
+/**
+ * @param {Record<string, any>} artifact
+ * @param {string} adapterId
+ */
+export declare function projectServerRuntimeAdapter(artifact: any, adapterId: any): {
+    host: string;
+    invoke: string;
+    status: string;
+    schema: string;
+    adapterId: string;
+    artifactDigest: any;
+    httpContractDigest: any;
+    spaFallback: boolean;
+    entry: any;
+    publicRouteCount: any;
+    internalCapabilityCount: any;
+} | {
+    host: string;
+    invoke: string;
+    status: string;
+    note: string;
+    schema: string;
+    adapterId: string;
+    artifactDigest: any;
+    httpContractDigest: any;
+    spaFallback: boolean;
+    entry: any;
+    publicRouteCount: any;
+    internalCapabilityCount: any;
+} | {
+    host: string;
+    invoke: string;
+    status: string;
+    note: string;
+    consumes: string[];
+    schema: string;
+    adapterId: string;
+    artifactDigest: any;
+    httpContractDigest: any;
+    spaFallback: boolean;
+    entry: any;
+    publicRouteCount: any;
+    internalCapabilityCount: any;
+};

package/dist/server-artifact.js

@@ -0,0 +1,205 @@
+/**
+ * P4 ServerArtifact — compiled route decision tree + public ServerRoute contracts
+ * + internal capability units + selected runtime adapter. Web Standards Fetch entry.
+ */
+// @ts-nocheck
+import crypto from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { SERVER_RUNTIMES } from './delivery-profile.js';
+export const SERVER_ARTIFACT_SCHEMA = 'vmz.server.artifact.v0';
+export const HTTP_CONTRACT_SCHEMA = 'vmz.http.contract.v0';
+export const SERVER_RUNTIME_ADAPTER_SCHEMA = 'vmz.server.runtime_adapter.v0';
+const DEFAULT_RPC_PATH = '/__vmz/rpc';
+/**
+ * @param {string} outDir
+ * @param {{
+ *   profileId?: string | null,
+ *   assembly?: string | null,
+ *   serverRuntime?: string | null,
+ *   packDigest?: string | null,
+ * }} [opts]
+ */
+export function emitServerArtifact(outDir, opts = {}) {
+    const deployment = readJson(path.join(outDir, 'vmz-deployment.json')) || { schema: null, units: [] };
+    const routes = readJson(path.join(outDir, 'vmz-routes.json'));
+    const routeRows = Array.isArray(routes) ? routes : [];
+    const selectedRuntime = normalizeRuntime(opts.serverRuntime);
+    const units = Array.isArray(deployment.units) ? deployment.units : [];
+    const publicRoutes = routeRows.map((r) => ({
+        verb: String(r.verb || 'GET').toUpperCase(),
+        path: String(r.path || ''),
+        moduleId: String(r.moduleId || ''),
+        method: String(r.method || ''),
+        className: r.className != null ? String(r.className) : null,
+        visibility: 'public',
+        kind: 'server-route',
+    }));
+    const publicKeys = new Set(publicRoutes.map((r) => `${r.moduleId}::${r.method}`));
+    /** @type {Array<Record<string, unknown>>} */
+    const internalCapabilities = [];
+    for (const u of units) {
+        const moduleId = u.serverModuleId != null ? String(u.serverModuleId) : '';
+        if (!moduleId)
+            continue;
+        const caps = Array.isArray(u.capabilities) ? u.capabilities.map(String) : [];
+        for (const method of caps) {
+            const key = `${moduleId}::${method}`;
+            if (publicKeys.has(key))
+                continue;
+            internalCapabilities.push({
+                chunkId: String(u.chunkId || ''),
+                moduleId,
+                method,
+                visibility: 'internal',
+                kind: 'capability',
+            });
+        }
+    }
+    const routeDecisionTree = [
+        {
+            id: 'rpc',
+            match: { method: 'POST', path: DEFAULT_RPC_PATH },
+            action: 'invoke-rpc',
+            visibility: 'internal-transport',
+        },
+        ...publicRoutes.map((r, i) => ({
+            id: `public-route-${i}`,
+            match: { method: r.verb, path: r.path },
+            action: 'invoke-server-route',
+            target: { moduleId: r.moduleId, method: r.method },
+            visibility: 'public',
+        })),
+    ];
+    const httpContractBody = {
+        schema: HTTP_CONTRACT_SCHEMA,
+        rpcPath: DEFAULT_RPC_PATH,
+        publicRoutes: publicRoutes.map((r) => ({
+            verb: r.verb,
+            path: r.path,
+            moduleId: r.moduleId,
+            method: r.method,
+        })),
+        internalCapabilityCount: internalCapabilities.length,
+        entry: 'fetch',
+    };
+    const httpContractDigest = sha256Hex(canonicalJson(httpContractBody));
+    const artifact = {
+        schema: SERVER_ARTIFACT_SCHEMA,
+        profileId: opts.profileId || null,
+        assembly: opts.assembly || null,
+        selectedRuntime,
+        entry: {
+            kind: 'fetch',
+            standards: ['Request', 'Response', 'Streams', 'AbortSignal'],
+            rpcPath: DEFAULT_RPC_PATH,
+        },
+        httpContract: {
+            schema: HTTP_CONTRACT_SCHEMA,
+            digest: httpContractDigest,
+        },
+        publicRoutes,
+        internalCapabilities,
+        middlewareUnits: [],
+        routeDecisionTree,
+        deploymentSchema: deployment.schema || null,
+        packDigest: opts.packDigest || null,
+        adapters: {
+            node: { kind: 'node-http', status: 'runtime', entry: 'handleNodeRequest' },
+            worker: { kind: 'fetch', status: 'runtime', entry: 'handleFetchRequest' },
+            deno: { kind: 'fetch', status: 'projected', entry: 'handleFetchRequest' },
+            bun: { kind: 'fetch', status: 'projected', entry: 'handleFetchRequest' },
+            'rust-host': { kind: 'contract-projection', status: 'projected', entry: 'fetch' },
+        },
+    };
+    artifact.artifactDigest = sha256Hex(canonicalJson({ ...artifact, artifactDigest: undefined }));
+    const vmzDir = path.join(outDir, '_vmz');
+    mkdirSync(vmzDir, { recursive: true });
+    const file = path.join(vmzDir, 'server-artifact.json');
+    writeFileSync(file, `${JSON.stringify(artifact, null, 2)}\n`, 'utf8');
+    const adapterDir = path.join(vmzDir, 'adapters');
+    mkdirSync(adapterDir, { recursive: true });
+    for (const adapterId of ['worker', 'rust-host']) {
+        const projection = projectServerRuntimeAdapter(artifact, adapterId);
+        const dir = path.join(adapterDir, adapterId);
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(path.join(dir, 'adapter.json'), `${JSON.stringify(projection, null, 2)}\n`, 'utf8');
+    }
+    return { artifact, path: file, httpContractDigest };
+}
+/**
+ * @param {Record<string, any>} artifact
+ * @param {string} adapterId
+ */
+export function projectServerRuntimeAdapter(artifact, adapterId) {
+    const id = String(adapterId || '').trim();
+    if (!SERVER_RUNTIMES.includes(id) && id !== 'worker') {
+        throw new Error(`projectServerRuntimeAdapter: unknown adapter ${id}`);
+    }
+    const base = {
+        schema: SERVER_RUNTIME_ADAPTER_SCHEMA,
+        adapterId: id,
+        artifactDigest: artifact.artifactDigest,
+        httpContractDigest: artifact.httpContract?.digest || null,
+        spaFallback: false,
+        entry: artifact.entry,
+        publicRouteCount: Array.isArray(artifact.publicRoutes) ? artifact.publicRoutes.length : 0,
+        internalCapabilityCount: Array.isArray(artifact.internalCapabilities)
+            ? artifact.internalCapabilities.length
+            : 0,
+    };
+    if (id === 'node') {
+        return { ...base, host: 'node:http', invoke: 'handleNodeRequest', status: 'runtime' };
+    }
+    if (id === 'worker' || id === 'deno' || id === 'bun') {
+        return {
+            ...base,
+            host: 'fetch',
+            invoke: 'handleFetchRequest',
+            status: id === 'worker' ? 'runtime' : 'projected',
+            note: id === 'worker'
+                ? 'Fetch entry; live thin gated via worker-shaped subprocess host'
+                : 'Fetch contract projection; live runtime not gated',
+        };
+    }
+    // rust-host
+    return {
+        ...base,
+        host: 'rust-fetch-consumer',
+        invoke: 'fetch',
+        status: 'projected',
+        note: 'contract projection only — live Rust host binary parity not gated',
+        consumes: ['server-artifact.json', 'vmz-routes.json', 'vmz-deployment.json'],
+    };
+}
+function normalizeRuntime(raw) {
+    const v = String(raw || 'node').trim();
+    return SERVER_RUNTIMES.includes(v) ? v : 'node';
+}
+function readJson(file) {
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function canonicalJson(value) {
+    return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const k of Object.keys(value).sort())
+            out[k] = sortKeys(value[k]);
+        return out;
+    }
+    return value;
+}
+function sha256Hex(text) {
+    return crypto.createHash('sha256').update(text, 'utf8').digest('hex');
+}