ccprofiles-core 0.7.2 → 0.7.3

package/dist/apply.js

@@ -11,8 +11,26 @@ function configPathFor(dir, home, agent) {
         return join(dir, 'config.toml');
     return dir === join(home, '.claude') ? join(home, '.claude.json') : join(dir, '.claude.json');
 }
-function sortKeys(o) {
-    return Object.fromEntries(Object.entries(o).sort(([a], [b]) => a.localeCompare(b)));
+/**
+ * Deep, order-insensitive normalization for drift comparison. Plain-object keys are sorted
+ * recursively at every depth (array element order is preserved — arrays like `args` are
+ * order-significant). Without recursing into nested objects, two semantically identical
+ * server defs could compare unequal purely from key-insertion order — which genuinely
+ * happens: Zod's `.passthrough()` always places schema-declared keys before passthrough
+ * (unknown) keys in its output, e.g. Codex's `startup_timeout_sec` (not in McpServerSchema)
+ * ends up after `env` once a manifest round-trips through the schema, while the live
+ * TOML file has it before `env` in source order — a manifest reload would otherwise never
+ * converge to "in sync" for any Codex server combining an `env` table with a vendor field.
+ */
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeys);
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .map(([k, v]) => [k, sortKeys(v)])
+            .sort(([a], [b]) => a.localeCompare(b)));
+    }
+    return value;
 }
 const SECRET_PREFIX = 'secret://';
 // exported so adopt.ts (buildManifest) can recognize pooled session-dir symlinks with the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccprofiles-core",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "description": "Core library for ccprofiles — discovery, manifest, secrets, apply, and LAN sync for Claude Code multi-account setups",
   "type": "module",
   "main": "./dist/index.js",