project-tiny-context-harness 0.2.84 → 0.6.0

package/dist/lib/source-pack-export.js

@@ -1,8 +1,8 @@
 import path from "node:path";
-import { artifactReport, buildManifest, pruneTimestampedExports, readPackageVersion, writeArtifactSet } from "./source-pack-manifest.js";
-import { mergePatterns, parseContextAreas, readSourcePackProfile, validatePatternList } from "./source-pack-config.js";
-import { collectCodeRecords, collectContextArtifacts, countRedactionWarnings, repoRelative } from "./source-pack-records.js";
-import { renderBundleArtifact, renderCodeIndexArtifact, renderFullProjectContextArtifact, renderTaskContextArtifact } from "./source-pack-render.js";
+import { artifactReport, buildManifest, pruneTimestampedExports, readPackageVersion, writeArtifactSet, } from "./source-pack-manifest.js";
+import { mergePatterns, parseContextAreas, readSourcePackProfile, validatePatternList, } from "./source-pack-config.js";
+import { collectCodeRecords, collectContextArtifacts, countRedactionWarnings, repoRelative, } from "./source-pack-records.js";
+import { renderBundleArtifact, renderCodeIndexArtifact, renderFullProjectContextArtifact, renderTaskContextArtifact, } from "./source-pack-render.js";
 const DEFAULT_EXPORT_DIR = "tmp/ty-context/context-exports";
 const DEFAULT_MAX_PACK_FILES = 5;
 const DEFAULT_MAX_BUNDLE_CHARACTERS = 800_000;
@@ -18,20 +18,27 @@ export async function runSourcePackExport(projectRoot, options) {
     const includeCode = mergePatterns(profile.code, validatePatternList(options.includeCode ?? [], "include code path"));
     const includeContext = mergePatterns(profile.context, validatePatternList(options.includeContext ?? [], "include context path"));
     const exclude = mergePatterns(profile.exclude);
-    const maxBundleCharacters = options.maxBundleCharacters ?? profile.maxBundleCharacters ?? DEFAULT_MAX_BUNDLE_CHARACTERS;
+    const maxBundleCharacters = options.maxBundleCharacters ??
+        profile.maxBundleCharacters ??
+        DEFAULT_MAX_BUNDLE_CHARACTERS;
     const bundleStrategy = options.bundleStrategy ?? "auto";
     const records = await collectCodeRecords(projectRoot, warnings, {
         include: includeCode.length > 0 ? includeCode : undefined,
         exclude,
-        areas
+        areas,
     });
-    const contexts = await collectContextArtifacts(projectRoot, warnings, options.mode === "task-context" && includeContext.length > 0 ? includeContext : undefined);
+    const contexts = await collectContextArtifacts(projectRoot, warnings, options.mode === "task-context" && includeContext.length > 0
+        ? includeContext
+        : undefined);
     const taskName = options.taskName ?? "";
     const command = options.command ?? commandFor(options);
     const toolVersion = await readPackageVersion();
     const recommendedUploadSets = uploadSets(options.mode, taskName);
     const artifacts = [];
-    if (options.mode === "code-index" || options.mode === "source-pack" || options.mode === "code-bundles" || options.mode === "task-context") {
+    if (options.mode === "code-index" ||
+        options.mode === "source-pack" ||
+        options.mode === "code-bundles" ||
+        options.mode === "task-context") {
         assignBundles(records, maxBundleCharacters, bundleStrategy);
         artifacts.push(markdownArtifact("code-index", "code-index.md", renderCodeIndexArtifact(records, areas, warnings, meta(generatedAt, "code-index.md", command, toolVersion)), records.length, sumLines(records), warnings.length));
     }
@@ -52,10 +59,13 @@ export async function runSourcePackExport(projectRoot, options) {
         generatedAt,
         command,
         maxPackFiles,
-        artifacts: nonManifestArtifacts.map((artifact) => ({ ...artifact, relativePath: `${DEFAULT_EXPORT_DIR}/latest/${artifact.name}` })),
+        artifacts: nonManifestArtifacts.map((artifact) => ({
+            ...artifact,
+            relativePath: `${DEFAULT_EXPORT_DIR}/latest/${artifact.name}`,
+        })),
         warnings,
         omitted,
-        recommendedUploadSets
+        recommendedUploadSets,
     });
     artifacts.unshift({
         kind: "manifest",
@@ -64,7 +74,7 @@ export async function runSourcePackExport(projectRoot, options) {
         content: manifest,
         sourceCount: 0,
         sourceLineCount: 0,
-        warningCount: warnings.length
+        warningCount: warnings.length,
     });
     for (const artifact of artifacts) {
         if (!artifact.relativePath) {
@@ -95,7 +105,7 @@ export async function runSourcePackExport(projectRoot, options) {
         warnings,
         omitted,
         recommendedUploadSets,
-        wrote: !options.check
+        wrote: !options.check,
     };
 }
 function addDefaultBundles(artifacts, records, contexts, maxPackFiles, warnings, generatedAt, command, toolVersion) {
@@ -160,12 +170,18 @@ function assignTaskBundles(records, maxCharacters) {
 function sortedRecords(records, bundleStrategy) {
     return [...records].sort((left, right) => {
         if (bundleStrategy === "area" || bundleStrategy === "config") {
-            return left.bucket.localeCompare(right.bucket) || right.score - left.score || left.relative.localeCompare(right.relative);
+            return (left.bucket.localeCompare(right.bucket) ||
+                right.score - left.score ||
+                left.relative.localeCompare(right.relative));
         }
         if (bundleStrategy === "topdir") {
-            return topDir(left).localeCompare(topDir(right)) || right.score - left.score || left.relative.localeCompare(right.relative);
+            return (topDir(left).localeCompare(topDir(right)) ||
+                right.score - left.score ||
+                left.relative.localeCompare(right.relative));
         }
-        return right.score - left.score || left.bucket.localeCompare(right.bucket) || left.relative.localeCompare(right.relative);
+        return (right.score - left.score ||
+            left.bucket.localeCompare(right.bucket) ||
+            left.relative.localeCompare(right.relative));
     });
 }
 function topDir(record) {
@@ -173,23 +189,55 @@ function topDir(record) {
 }
 function omittedSummary(records) {
     const omitted = records.filter((record) => record.bundle === "omitted");
-    return { source_file_count: omitted.length, reason_counts: omitted.length > 0 ? { bundle_budget: omitted.length } : {} };
+    return {
+        source_file_count: omitted.length,
+        reason_counts: omitted.length > 0 ? { bundle_budget: omitted.length } : {},
+    };
 }
 function markdownArtifact(kind, name, content, sourceCount, sourceLineCount, warningCount) {
-    return { kind, name, relativePath: "", content, sourceCount, sourceLineCount, warningCount };
+    return {
+        kind,
+        name,
+        relativePath: "",
+        content,
+        sourceCount,
+        sourceLineCount,
+        warningCount,
+    };
 }
 function meta(generatedAt, artifactName, command, toolVersion) {
-    return { generatedAt, outputPath: `tmp/ty-context/context-exports/latest/${artifactName}`, command, toolVersion };
+    return {
+        generatedAt,
+        outputPath: `tmp/ty-context/context-exports/latest/${artifactName}`,
+        command,
+        toolVersion,
+    };
 }
 function uploadSets(mode, taskName) {
     const base = `${DEFAULT_EXPORT_DIR}/latest`;
     const sets = {
-        daily_planning: [`${base}/full-project-context.md`, `${base}/code-index.md`],
-        cross_module_review: [`${base}/full-project-context.md`, `${base}/code-index.md`, `${base}/code-bundle-core.md`, `${base}/code-bundle-extended.md`],
-        full_fallback: [`${base}/full-project-context.md`, `${base}/code-index.md`, `${DEFAULT_EXPORT_DIR}/code-level-implementation-<timestamp>/code-level-implementation.md`]
+        daily_planning: [
+            `${base}/full-project-context.md`,
+            `${base}/code-index.md`,
+        ],
+        cross_module_review: [
+            `${base}/full-project-context.md`,
+            `${base}/code-index.md`,
+            `${base}/code-bundle-core.md`,
+            `${base}/code-bundle-extended.md`,
+        ],
+        full_fallback: [
+            `${base}/full-project-context.md`,
+            `${base}/code-index.md`,
+            `${DEFAULT_EXPORT_DIR}/code-level-implementation-<timestamp>/code-level-implementation.md`,
+        ],
     };
     if (mode === "task-context") {
-        sets.focused_task_handoff = [`${base}/full-project-context.md`, `${base}/code-index.md`, `${base}/task-contexts/task-context-${taskSlug(taskName)}.md`];
+        sets.focused_task_handoff = [
+            `${base}/full-project-context.md`,
+            `${base}/code-index.md`,
+            `${base}/task-contexts/task-context-${taskSlug(taskName)}.md`,
+        ];
     }
     return sets;
 }
@@ -200,17 +248,28 @@ function validateMaxPackFiles(mode, maxPackFiles) {
     if (maxPackFiles > DEFAULT_MAX_PACK_FILES) {
         throw new Error("export-context --max-pack-files cannot exceed 5 for Source Pack modes");
     }
-    const required = mode === "code-index" ? 2 : mode === "task-context" ? 4 : mode === "code-bundles" ? 3 : 3;
+    const required = mode === "code-index"
+        ? 2
+        : mode === "task-context"
+            ? 4
+            : mode === "code-bundles"
+                ? 3
+                : 3;
     if (maxPackFiles < required) {
         throw new Error(`export-context ${mode} requires --max-pack-files >= ${required}`);
     }
 }
 function commandFor(options) {
-    const flag = options.mode === "task-context" ? `--task-context ${options.taskName ?? ""}` : `--${options.mode}`;
+    const flag = options.mode === "task-context"
+        ? `--task-context ${options.taskName ?? ""}`
+        : `--${options.mode}`;
     return `ty-context export-context ${flag}`;
 }
 function taskSlug(value) {
-    return value.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "task";
+    return (value
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/^-+|-+$/g, "") || "task");
 }
 function sumLines(records) {
     return records.reduce((sum, record) => sum + record.lines, 0);

package/dist/lib/source-pack-manifest.js

@@ -19,7 +19,7 @@ export async function buildManifest(params) {
         artifacts: params.artifacts.map((artifact) => artifactReport(artifact)),
         warnings: params.warnings,
         omitted: params.omitted,
-        recommended_upload_sets: params.recommendedUploadSets
+        recommended_upload_sets: params.recommendedUploadSets,
     };
     return `${JSON.stringify(manifest, null, 2)}\n`;
 }
@@ -32,7 +32,7 @@ export function artifactReport(artifact) {
         characters: artifact.content.length,
         source_count: artifact.sourceCount,
         source_line_count: artifact.sourceLineCount,
-        warning_count: artifact.warningCount
+        warning_count: artifact.warningCount,
     };
 }
 export async function writeArtifactSet(projectRoot, outputDir, artifacts) {
@@ -55,13 +55,22 @@ export async function pruneTimestampedExports(projectRoot, keepCount) {
     catch {
         return;
     }
-    const timestampDirs = entries.filter((entry) => /^\d{8}T\d{6}Z$/.test(entry)).sort().reverse();
+    const timestampDirs = entries
+        .filter((entry) => /^\d{8}T\d{6}Z$/.test(entry))
+        .sort()
+        .reverse();
     for (const entry of timestampDirs.slice(keepCount)) {
-        await fs.rm(path.join(exportsRoot, entry), { recursive: true, force: true });
+        await fs.rm(path.join(exportsRoot, entry), {
+            recursive: true,
+            force: true,
+        });
     }
 }
 export function timestampForFile(now) {
-    return now.toISOString().replace(/[-:]/g, "").replace(/\.\d{3}Z$/, "Z");
+    return now
+        .toISOString()
+        .replace(/[-:]/g, "")
+        .replace(/\.\d{3}Z$/, "Z");
 }
 async function writeArtifacts(projectRoot, outputDir, artifacts) {
     for (const artifact of artifacts) {
@@ -78,7 +87,10 @@ async function gitInfo(projectRoot) {
     try {
         const shaResult = await execFileAsync("git", ["-C", projectRoot, "rev-parse", "HEAD"], { encoding: "utf8" });
         const dirtyResult = await execFileAsync("git", ["-C", projectRoot, "status", "--porcelain"], { encoding: "utf8" });
-        return { sha: shaResult.stdout.trim() || null, dirty: dirtyResult.stdout.trim().length > 0 };
+        return {
+            sha: shaResult.stdout.trim() || null,
+            dirty: dirtyResult.stdout.trim().length > 0,
+        };
     }
     catch {
         return { sha: null, dirty: false };

package/dist/lib/source-pack-records.js

@@ -4,7 +4,7 @@ import { promises as fs } from "node:fs";
 import path from "node:path";
 import { promisify } from "node:util";
 import { listFiles, pathExists, readText } from "./fs.js";
-import { shouldExcludeRelativePath, shouldIncludeCodeFile, toPosix } from "./source-files.js";
+import { shouldExcludeRelativePath, shouldIncludeCodeFile, toPosix, } from "./source-files.js";
 import { classifyCodeFile } from "./source-pack-classify.js";
 import { matchesAny } from "./source-pack-config.js";
 const execFileAsync = promisify(execFile);
@@ -16,10 +16,13 @@ export async function collectCodeRecords(projectRoot, warnings, options = {}) {
     const records = [];
     for (const file of candidates) {
         const relative = repoRelative(projectRoot, file);
-        if (!shouldIncludeCodeFile(relative) || matchesAny(relative, options.exclude ?? [])) {
+        if (!shouldIncludeCodeFile(relative) ||
+            matchesAny(relative, options.exclude ?? [])) {
             continue;
         }
-        if (options.include && options.include.length > 0 && !matchesAny(relative, options.include)) {
+        if (options.include &&
+            options.include.length > 0 &&
+            !matchesAny(relative, options.include)) {
             continue;
         }
         if (!(await isRegularFile(file))) {
@@ -44,26 +47,36 @@ export async function collectCodeRecords(projectRoot, warnings, options = {}) {
             routes: classification.routes,
             score: classification.score,
             bucket: classification.bucket,
-            bundle: "omitted"
+            bundle: "omitted",
         });
     }
     return records.sort((left, right) => left.relative.localeCompare(right.relative));
 }
 export async function collectContextArtifacts(projectRoot, warnings, includePatterns) {
     const files = new Set();
-    for (const relative of ["AGENTS.md", "README.md", "DESIGN.md", "project_context/global.md", "project_context/architecture.md", "project_context/context.toml"]) {
+    for (const relative of [
+        "AGENTS.md",
+        "README.md",
+        "DESIGN.md",
+        "project_context/global.md",
+        "project_context/architecture.md",
+        "project_context/context.toml",
+    ]) {
         await addIfExists(projectRoot, files, warnings, relative, relative.startsWith("project_context/"));
     }
     for (const file of await listFiles(path.join(projectRoot, "project_context"))) {
         const relative = repoRelative(projectRoot, file);
-        if ((relative.endsWith(".md") || relative.endsWith(".toml")) && !shouldExcludeRelativePath(relative)) {
+        if ((relative.endsWith(".md") || relative.endsWith(".toml")) &&
+            !shouldExcludeRelativePath(relative)) {
             files.add(file);
         }
     }
     const artifacts = [];
     for (const file of [...files].sort((a, b) => repoRelative(projectRoot, a).localeCompare(repoRelative(projectRoot, b)))) {
         const relative = repoRelative(projectRoot, file);
-        if (includePatterns && includePatterns.length > 0 && !matchesAny(relative, includePatterns)) {
+        if (includePatterns &&
+            includePatterns.length > 0 &&
+            !matchesAny(relative, includePatterns)) {
             continue;
         }
         const rawContent = await readText(file);
@@ -75,7 +88,7 @@ export async function collectContextArtifacts(projectRoot, warnings, includePatt
             relative,
             content: redacted.content,
             lines: countLines(redacted.content),
-            characters: redacted.content.length
+            characters: redacted.content.length,
         });
     }
     return artifacts;
@@ -103,11 +116,22 @@ async function addIfExists(projectRoot, files, warnings, relative, required) {
 }
 async function listGitCandidateFiles(projectRoot) {
     try {
-        const result = await execFileAsync("git", ["-C", projectRoot, "ls-files", "--cached", "--others", "--exclude-standard", "-z"], {
+        const result = await execFileAsync("git", [
+            "-C",
+            projectRoot,
+            "ls-files",
+            "--cached",
+            "--others",
+            "--exclude-standard",
+            "-z",
+        ], {
             encoding: "utf8",
-            maxBuffer: GIT_LS_MAX_BUFFER
+            maxBuffer: GIT_LS_MAX_BUFFER,
         });
-        return result.stdout.split("\0").filter(Boolean).map((relative) => path.join(projectRoot, ...toPosix(relative).split("/")));
+        return result.stdout
+            .split("\0")
+            .filter(Boolean)
+            .map((relative) => path.join(projectRoot, ...toPosix(relative).split("/")));
     }
     catch {
         return undefined;

package/dist/lib/source-pack-render.js

@@ -22,7 +22,7 @@ export function renderFullProjectContextArtifact(contexts, warnings, meta) {
         "## Context Sources",
         "",
         ...contexts.map(renderContextArtifact),
-        ""
+        "",
     ].join("\n");
 }
 export function renderCodeIndexArtifact(records, areas, warnings, meta) {
@@ -52,7 +52,11 @@ export function renderCodeIndexArtifact(records, areas, warnings, meta) {
         "## Context Area Mapping",
         "",
         "Inferred buckets below are export routing only; they are not durable architecture or product ownership facts.",
-        areas.length > 0 ? areas.map((area) => `- ${area.id}: root=${area.root}; context=${area.context}`).join("\n") : "- No Context area mappings found.",
+        areas.length > 0
+            ? areas
+                .map((area) => `- ${area.id}: root=${area.root}; context=${area.context}`)
+                .join("\n")
+            : "- No Context area mappings found.",
         "",
         "## Key Entry Points",
         "",
@@ -68,7 +72,9 @@ export function renderCodeIndexArtifact(records, areas, warnings, meta) {
         "",
         "## CLI / Worker / Script Index",
         "",
-        renderRecordList(records.filter((record) => record.tags.includes("cli") || record.tags.includes("worker")).slice(0, 30)),
+        renderRecordList(records
+            .filter((record) => record.tags.includes("cli") || record.tags.includes("worker"))
+            .slice(0, 30)),
         "",
         "## Test / Verification Index",
         "",
@@ -76,12 +82,14 @@ export function renderCodeIndexArtifact(records, areas, warnings, meta) {
         "",
         "## Oversized Files",
         "",
-        renderRecordList(records.filter((record) => record.tags.includes("oversized")).slice(0, 30)),
+        renderRecordList(records
+            .filter((record) => record.tags.includes("oversized"))
+            .slice(0, 30)),
         "",
         "## Source File Index",
         "",
         renderSourceFileIndex(records),
-        ""
+        "",
     ].join("\n");
 }
 export function renderBundleArtifact(title, records, contexts, omitted, warnings, meta, policy) {
@@ -109,16 +117,21 @@ export function renderBundleArtifact(title, records, contexts, omitted, warnings
         "",
         "## Related Context Paths",
         "",
-        contexts.length > 0 ? contexts.map((context) => `- ${context.relative} (${context.lines} lines)`).join("\n") : "- No related Context files selected.",
+        contexts.length > 0
+            ? contexts
+                .map((context) => `- ${context.relative} (${context.lines} lines)`)
+                .join("\n")
+            : "- No related Context files selected.",
         "",
         "## Source Files",
         "",
-        records.map(renderSourceRecord).join("\n\n") || "- No source files selected for this bundle.",
+        records.map(renderSourceRecord).join("\n\n") ||
+            "- No source files selected for this bundle.",
         "",
         "## Omitted Files Summary",
         "",
         renderOmittedSummary(omitted),
-        ""
+        "",
     ].join("\n");
 }
 export function renderTaskContextArtifact(taskName, contexts, records, verification, omitted, warnings, meta) {
@@ -150,21 +163,31 @@ export function renderTaskContextArtifact(taskName, contexts, records, verificat
         "",
         "## Selected Source Files",
         "",
-        records.map(renderSourceRecord).join("\n\n") || "- No selected source files matched the task filters.",
+        records.map(renderSourceRecord).join("\n\n") ||
+            "- No selected source files matched the task filters.",
         "",
         "## Verification Entry Points",
         "",
-        verification.length > 0 ? verification.map((entry) => `- ${entry}`).join("\n") : "- No profile verification entries selected.",
+        verification.length > 0
+            ? verification.map((entry) => `- ${entry}`).join("\n")
+            : "- No profile verification entries selected.",
         "",
         "## Omitted / Support Notes",
         "",
         renderOmittedSummary(omitted),
-        ""
+        "",
     ].join("\n");
 }
 function renderContextArtifact(context) {
     const fence = fenceFor(context.content);
-    return [`### ${context.relative}`, "", `${fence}markdown`, context.content.trimEnd(), fence, ""].join("\n");
+    return [
+        `### ${context.relative}`,
+        "",
+        `${fence}markdown`,
+        context.content.trimEnd(),
+        fence,
+        "",
+    ].join("\n");
 }
 function renderSourceRecord(record) {
     const fence = fenceFor(record.content);
@@ -183,7 +206,7 @@ function renderSourceRecord(record) {
         "",
         `${fence}${record.language}`,
         record.content.trimEnd(),
-        fence
+        fence,
     ].join("\n");
 }
 function renderSourceFileIndex(records) {
@@ -193,7 +216,7 @@ function renderSourceFileIndex(records) {
     return [
         "| Path | Type | Lines | Characters | SHA256 | Summary | Bundle | Tags |",
         "|---|---:|---:|---:|---|---|---|---|",
-        ...records.map((record) => `| ${escapeTableCell(record.relative)} | ${escapeTableCell(record.language)} | ${record.lines} | ${record.characters} | ${record.sha256.slice(0, 12)} | ${escapeTableCell(record.summary)} | ${record.bundle} | ${escapeTableCell(record.tags.join(", "))} |`)
+        ...records.map((record) => `| ${escapeTableCell(record.relative)} | ${escapeTableCell(record.language)} | ${record.lines} | ${record.characters} | ${record.sha256.slice(0, 12)} | ${escapeTableCell(record.summary)} | ${record.bundle} | ${escapeTableCell(record.tags.join(", "))} |`),
     ].join("\n");
 }
 function renderRepositoryShape(records) {
@@ -202,10 +225,10 @@ function renderRepositoryShape(records) {
         const top = record.relative.split("/")[0] || ".";
         counts.set(top, (counts.get(top) ?? 0) + 1);
     }
-    return [...counts.entries()]
+    return ([...counts.entries()]
         .sort((left, right) => right[1] - left[1] || left[0].localeCompare(right[0]))
         .map(([name, count]) => `- ${name}: ${count} source file(s)`)
-        .join("\n") || "- No source files matched.";
+        .join("\n") || "- No source files matched.");
 }
 function renderRecordList(records, includeRoutes = false) {
     if (records.length === 0) {
@@ -216,13 +239,19 @@ function renderRecordList(records, includeRoutes = false) {
         .join("\n");
 }
 function renderWarningList(warnings) {
-    return warnings.length > 0 ? warnings.map((warning) => `  - ${warning}`) : ["  - none"];
+    return warnings.length > 0
+        ? warnings.map((warning) => `  - ${warning}`)
+        : ["  - none"];
 }
 function renderOmittedSummary(omitted) {
     const reasons = Object.entries(omitted.reason_counts)
         .sort((left, right) => left[0].localeCompare(right[0]))
         .map(([reason, count]) => `  - ${reason}: ${count}`);
-    return [`- omitted_source_file_count: ${omitted.source_file_count}`, "- reason_counts:", ...(reasons.length > 0 ? reasons : ["  - none: 0"])].join("\n");
+    return [
+        `- omitted_source_file_count: ${omitted.source_file_count}`,
+        "- reason_counts:",
+        ...(reasons.length > 0 ? reasons : ["  - none: 0"]),
+    ].join("\n");
 }
 function fenceFor(content) {
     let fence = "```";

package/dist/lib/stable-json.d.ts

@@ -0,0 +1,2 @@
+export declare function stableJson(value: unknown): string;
+export declare function sha256(value: string): string;

package/dist/lib/stable-json.js

@@ -0,0 +1,21 @@
+import { createHash } from "node:crypto";
+export function stableJson(value) {
+    return JSON.stringify(sortJson(value), null, 2);
+}
+export function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function sortJson(value) {
+    if (Array.isArray(value)) {
+        return value.map(sortJson);
+    }
+    if (!isRecord(value)) {
+        return value;
+    }
+    return Object.fromEntries(Object.keys(value)
+        .sort()
+        .map((key) => [key, sortJson(value[key])]));
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}

package/dist/lib/strict-codec.d.ts

@@ -0,0 +1,4 @@
+export declare function canonicalJson(value: unknown): string;
+export declare function canonicalValueJson(value: unknown): string;
+export declare function sha256Hex(value: string | Uint8Array): string;
+export declare function parseStrictYaml(content: string): unknown;

package/dist/lib/strict-codec.js

@@ -0,0 +1,65 @@
+import { createHash } from "node:crypto";
+import YAML, { isAlias, isMap, isPair, isScalar, isSeq, visit, } from "yaml";
+export function canonicalJson(value) {
+    return `${JSON.stringify(sortCanonical(value), null, 2)}\n`;
+}
+export function canonicalValueJson(value) {
+    return JSON.stringify(sortCanonical(value));
+}
+export function sha256Hex(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+export function parseStrictYaml(content) {
+    if (content.charCodeAt(0) === 0xfeff)
+        throw new Error("YAML byte-order marks are not allowed");
+    if (/^%(?:YAML|TAG)\b/m.test(content))
+        throw new Error("YAML directives are not allowed");
+    const documents = YAML.parseAllDocuments(content, {
+        merge: false,
+        schema: "core",
+        strict: true,
+        stringKeys: true,
+        uniqueKeys: true,
+    });
+    const document = assertSingleDocument(documents);
+    if (document.directives.yaml.explicit ||
+        Object.keys(document.directives.tags).some((handle) => handle !== "!!"))
+        throw new Error("YAML directives are not allowed");
+    visit(document, (_key, node) => inspectNode(node));
+    return document.toJS({ maxAliasCount: 0 });
+}
+function assertSingleDocument(documents) {
+    if (documents.length !== 1)
+        throw new Error("YAML must contain exactly one document");
+    const document = documents[0];
+    const issue = document.errors[0] ?? document.warnings[0];
+    if (issue)
+        throw new Error(`Invalid YAML: ${issue.message}`);
+    return document;
+}
+function inspectNode(node) {
+    if (isAlias(node))
+        throw new Error("YAML aliases are not allowed");
+    const tagged = node;
+    if (tagged.anchor)
+        throw new Error("YAML anchors are not allowed");
+    if (tagged.tag)
+        throw new Error("YAML explicit tags are not allowed");
+    if (isPair(node) && isScalar(node.key) && node.key.value === "<<")
+        throw new Error("YAML merge keys are not allowed");
+    if (isMap(node) || isSeq(node) || isScalar(node) || isPair(node))
+        return;
+    throw new Error("Unsupported YAML node");
+}
+function sortCanonical(value) {
+    if (Array.isArray(value))
+        return value.map(sortCanonical);
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.keys(value)
+            .sort()
+            .map((key) => [
+            key,
+            sortCanonical(value[key]),
+        ]));
+    return value;
+}