@provian/mcp 1.2.3 → 1.3.0

package/dist/core/pinned-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-connection.js","sourceRoot":"","sources":["../../src/core/pinned-connection.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,oCASC;AAGD,4BAYC;AAOD,gCAMC;AAsBD,0CAkCC;AAtGD,mFAAmF;AACnF,gDAAkC;AAClC,kDAAoC;AACpC,uCAAgC;AAEhC,mCAAwC;AACxC,gDAA2C;AAG3C,SAAgB,YAAY,CAAC,QAAgB,EAAE,SAA4B;IACzE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7I,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAA,eAAI,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC3E,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjG,IAAI,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;YACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAgB,QAAQ,CAAC,GAAQ;IAC/B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAC3I,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC9G,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,WAA0B;IAC/E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAA,eAAI,EAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,iBAAM,EAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5G,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,IAAA,eAAI,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iGAAiG;AAC1F,KAAK,UAAU,eAAe,CAAC,GAAQ,EAAE,SAA4B,EAAE,WAA0B;IACtG,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACzH,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,GAAG,IAAA,eAAI,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC9E,MAAM,OAAO,GAA2B,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChM,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAM,EAAE,CAAC,CAAC;QAClK,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACtD,IAAI,QAAQ;gBAAE,OAAO;YAAC,QAAQ,GAAG,IAAI,CAAC;YACtC,IAAI,GAAG,EAAE,CAAC;gBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;;gBAC7C,QAAQ,CAAC,IAAI,EAAE,MAAO,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC/C,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACrI,qFAAqF;YACrF,qDAAqD;YACrD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;;gBAClI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/protocol-pointer-pin.generated.d.ts

@@ -0,0 +1,6 @@
+export declare const PROTOCOL_POINTER_PIN: Readonly<{
+    chainId: 8453;
+    address: string | null;
+    runtimeHash: string | null;
+}>;
+//# sourceMappingURL=protocol-pointer-pin.generated.d.ts.map

package/dist/core/protocol-pointer-pin.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-pointer-pin.generated.d.ts","sourceRoot":"","sources":["../../src/core/protocol-pointer-pin.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAA6K,CAAC"}

package/dist/core/protocol-pointer-pin.generated.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROTOCOL_POINTER_PIN = void 0;
+// Generated from config/protocol-pointer.json; never a current-contract address fallback.
+exports.PROTOCOL_POINTER_PIN = Object.freeze({ "chainId": 8453, "address": "0x619eae740ce56c5a8edbb2b047e58369281ddad7", "runtimeHash": "0x2648893ab83577f448cee74590d37439ffb8f8e6703ef6c72c176d9b50a4f0a7" });
+//# sourceMappingURL=protocol-pointer-pin.generated.js.map

package/dist/core/protocol-pointer-pin.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-pointer-pin.generated.js","sourceRoot":"","sources":["../../src/core/protocol-pointer-pin.generated.ts"],"names":[],"mappings":";;;AAAA,0FAA0F;AAC7E,QAAA,oBAAoB,GAAoF,MAAM,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,IAAI,EAAC,SAAS,EAAC,4CAA4C,EAAC,aAAa,EAAC,oEAAoE,EAAC,CAAC,CAAC"}

package/dist/core/protocol-pointer.d.ts

@@ -0,0 +1,25 @@
+export declare const PROTOCOL_COMPONENTS: readonly ["kernel", "eligibilityVerifier", "beneficiaryVerifier", "escrow", "promises", "projectPool", "bonds", "court", "recoursePool", "settlement"];
+export type ProtocolComponent = typeof PROTOCOL_COMPONENTS[number];
+export interface PointerRpc {
+    request(method: string, params: readonly unknown[]): Promise<unknown>;
+}
+export interface ProtocolDeployment {
+    readonly pointer: string;
+    readonly revision: bigint;
+    readonly manifestHash: string;
+    readonly blockHash: string;
+    readonly addresses: Readonly<Record<ProtocolComponent, string>>;
+    readonly runtimeHashes: readonly string[];
+}
+/** Checks only protocol retirement; it imposes no restriction on ordinary
+ * recipients or an agent's spending choices. The caller must freshly resolve
+ * the deployment and recheck its manifest before signing. */
+export declare function assertNoRetiredProtocolAddresses(rpcs: readonly [PointerRpc, PointerRpc], deployment: ProtocolDeployment, addresses: readonly string[]): Promise<void>;
+/** No relay response, deployment-file fallback or cached address can authorize a transaction.
+ * Callers supply two independently operated chain transports and the permanent pointer pin. */
+export declare function resolveProtocolDeployment(rpcs: readonly [PointerRpc, PointerRpc], pointer: string, pointerRuntimeHash: string, minimumRevision?: bigint): Promise<ProtocolDeployment>;
+/** Historical end-of-block evidence only; never authorizes a new operation.
+ * Callers verify finality separately and account for publication log order when
+ * a receipt and a pointer change occur within the same block. */
+export declare function resolveHistoricalProtocolDeployment(rpcs: readonly [PointerRpc, PointerRpc], pointer: string, pointerRuntimeHash: string, block: number, blockHash: string): Promise<ProtocolDeployment>;
+//# sourceMappingURL=protocol-pointer.d.ts.map

package/dist/core/protocol-pointer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-pointer.d.ts","sourceRoot":"","sources":["../../src/core/protocol-pointer.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,wJACqD,CAAC;AACtF,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAUD;;6DAE6D;AAC7D,wBAAsB,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,EAC5F,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7E;AAkBD;+FAC+F;AAC/F,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,EACrF,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,SAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEhG;AACD;;iEAEiE;AACjE,wBAAsB,mCAAmC,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,EAC/F,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG5G"}

package/dist/core/protocol-pointer.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROTOCOL_COMPONENTS = void 0;
+exports.assertNoRetiredProtocolAddresses = assertNoRetiredProtocolAddresses;
+exports.resolveProtocolDeployment = resolveProtocolDeployment;
+exports.resolveHistoricalProtocolDeployment = resolveHistoricalProtocolDeployment;
+const ethers_1 = require("ethers");
+exports.PROTOCOL_COMPONENTS = ['kernel', 'eligibilityVerifier', 'beneficiaryVerifier', 'escrow',
+    'promises', 'projectPool', 'bonds', 'court', 'recoursePool', 'settlement'];
+const iface = new ethers_1.Interface([
+    'function current() view returns (uint256,bytes32,address[10],bytes32[10])',
+    'function requireCurrent(uint256,uint256,address) view',
+    'function retired(address) view returns(bool)',
+]);
+function hex(value) {
+    if (typeof value !== 'string' || !/^0x(?:[0-9a-fA-F]{2})*$/.test(value))
+        throw new Error('protocol_pointer_invalid_rpc');
+    return value.toLowerCase();
+}
+/** Checks only protocol retirement; it imposes no restriction on ordinary
+ * recipients or an agent's spending choices. The caller must freshly resolve
+ * the deployment and recheck its manifest before signing. */
+async function assertNoRetiredProtocolAddresses(rpcs, deployment, addresses) {
+    for (const address of new Set(addresses.map(ethers_1.getAddress))) {
+        const encoded = await agreement(rpcs, 'eth_call', [{ to: deployment.pointer,
+                data: iface.encodeFunctionData('retired', [address]) }, { blockHash: deployment.blockHash, requireCanonical: true }]);
+        if (iface.decodeFunctionResult('retired', hex(encoded))[0] !== false)
+            throw new Error('protocol_contract_retired');
+    }
+}
+function quantity(value) {
+    if (typeof value !== 'string' || !/^0x[0-9a-fA-F]+$/.test(value))
+        throw new Error('protocol_pointer_invalid_rpc');
+    return BigInt(value);
+}
+function normalized(value) {
+    if (Array.isArray(value))
+        return value.map(normalized);
+    if (value && typeof value === 'object') {
+        const record = value;
+        return Object.fromEntries(Object.keys(record).sort().map(key => [key, normalized(record[key])]));
+    }
+    return value;
+}
+async function agreement(rpcs, method, params) {
+    const values = await Promise.all(rpcs.map(rpc => rpc.request(method, params)));
+    if (JSON.stringify(normalized(values[0])) !== JSON.stringify(normalized(values[1])))
+        throw new Error('protocol_pointer_rpc_disagreement');
+    return values[0];
+}
+/** No relay response, deployment-file fallback or cached address can authorize a transaction.
+ * Callers supply two independently operated chain transports and the permanent pointer pin. */
+async function resolveProtocolDeployment(rpcs, pointer, pointerRuntimeHash, minimumRevision = 0n) {
+    return resolveDeployment(rpcs, pointer, pointerRuntimeHash, minimumRevision);
+}
+/** Historical end-of-block evidence only; never authorizes a new operation.
+ * Callers verify finality separately and account for publication log order when
+ * a receipt and a pointer change occur within the same block. */
+async function resolveHistoricalProtocolDeployment(rpcs, pointer, pointerRuntimeHash, block, blockHash) {
+    if (!Number.isSafeInteger(block) || block < 0 || !/^0x[0-9a-f]{64}$/.test(blockHash))
+        throw Error('protocol_pointer_invalid_block');
+    return resolveDeployment(rpcs, pointer, pointerRuntimeHash, 0n, { height: BigInt(block), hash: blockHash });
+}
+async function resolveDeployment(rpcs, pointer, pointerRuntimeHash, minimumRevision, historical) {
+    pointer = (0, ethers_1.getAddress)(pointer);
+    if (quantity(await agreement(rpcs, 'eth_chainId', [])) !== 8453n)
+        throw new Error('protocol_pointer_wrong_chain');
+    const heights = historical ? [historical.height, historical.height]
+        : await Promise.all(rpcs.map(async (rpc) => quantity(await rpc.request('eth_blockNumber', []))));
+    const height = heights[0] < heights[1] ? heights[0] : heights[1];
+    const block = await agreement(rpcs, 'eth_getBlockByNumber', [`0x${height.toString(16)}`, false]);
+    if (!block || typeof block !== 'object' || !('hash' in block) || !('number' in block)
+        || quantity(block.number) !== height)
+        throw new Error('protocol_pointer_invalid_block');
+    const blockHash = hex(block.hash);
+    if (blockHash.length !== 66 || (historical && blockHash !== historical.hash))
+        throw new Error('protocol_pointer_invalid_block');
+    const pin = { blockHash, requireCanonical: true };
+    const code = hex(await agreement(rpcs, 'eth_getCode', [pointer, pin]));
+    if (code === '0x' || (0, ethers_1.keccak256)(code) !== pointerRuntimeHash.toLowerCase())
+        throw new Error('protocol_pointer_runtime_mismatch');
+    const data = iface.encodeFunctionData('current');
+    const encoded = hex(await agreement(rpcs, 'eth_call', [{ to: pointer, data }, pin]));
+    const decoded = iface.decodeFunctionResult('current', encoded);
+    const revision = BigInt(decoded[0]);
+    if (revision === 0n || revision < minimumRevision)
+        throw new Error('protocol_pointer_rollback');
+    const addresses = Array.from(decoded[2]).map(ethers_1.getAddress);
+    const hashes = Array.from(decoded[3]);
+    if (new Set(addresses).size !== exports.PROTOCOL_COMPONENTS.length)
+        throw new Error('protocol_pointer_duplicate_component');
+    const manifestHash = (0, ethers_1.keccak256)(ethers_1.AbiCoder.defaultAbiCoder().encode(['uint256', 'address', 'uint256', 'address[10]', 'bytes32[10]'], [8453, pointer, revision, addresses, hashes]));
+    if (manifestHash !== decoded[1])
+        throw new Error('protocol_pointer_manifest_mismatch');
+    await Promise.all(addresses.map(async (address, index) => {
+        if (index === 2 && address === '0x0000000000000000000000000000000000000000' && hashes[index] === `0x${'00'.repeat(32)}`)
+            return;
+        const runtime = hex(await agreement(rpcs, 'eth_getCode', [address, pin]));
+        if (runtime === '0x' || (0, ethers_1.keccak256)(runtime) !== hashes[index])
+            throw new Error('protocol_component_runtime_mismatch');
+        await agreement(rpcs, 'eth_call', [{ to: pointer,
+                data: iface.encodeFunctionData('requireCurrent', [revision, index, address]) }, pin]);
+    }));
+    // A set of authentic bytecodes can still be wired to different kernels.
+    const links = [
+        [1, 'KERNEL', 0], [3, 'pvt', 0], [4, 'pvt', 0], [5, 'pvt', 0], [6, 'pvt', 0], [7, 'pvt', 0],
+        [3, 'epochClock', 0], [4, 'epochClock', 0], [5, 'epochClock', 0], [6, 'epochClock', 0], [7, 'epochClock', 0],
+        [8, 'token', 0], [8, 'settlement', 9], [9, 'kernel', 0], [9, 'pool', 8],
+        [0, 'protocolPointer', pointer], [8, 'pointer', pointer], [9, 'pointer', pointer],
+    ];
+    await Promise.all(links.map(async ([source, getter, expected]) => {
+        const binding = new ethers_1.Interface([`function ${getter}() view returns(address)`]);
+        const result = hex(await agreement(rpcs, 'eth_call', [{ to: addresses[source], data: binding.encodeFunctionData(getter) }, pin]));
+        const actual = (0, ethers_1.getAddress)(binding.decodeFunctionResult(getter, result)[0]);
+        if (actual !== (typeof expected === 'number' ? addresses[expected] : expected))
+            throw new Error('protocol_component_binding_mismatch');
+    }));
+    // Reject a newer pointer seen by either provider while the pinned read ran.
+    if (!historical) {
+        const latest = await agreement(rpcs, 'eth_call', [{ to: pointer, data }, 'latest']);
+        if (hex(latest) !== encoded)
+            throw new Error('protocol_pointer_changed');
+    }
+    const canonical = await agreement(rpcs, 'eth_getBlockByNumber', [`0x${height.toString(16)}`, false]);
+    if (!canonical || typeof canonical !== 'object' || !('hash' in canonical)
+        || hex(canonical.hash) !== blockHash)
+        throw new Error('protocol_pointer_reorg');
+    return { pointer, revision, manifestHash, blockHash,
+        addresses: Object.fromEntries(exports.PROTOCOL_COMPONENTS.map((key, i) => [key, addresses[i]])),
+        runtimeHashes: hashes };
+}
+//# sourceMappingURL=protocol-pointer.js.map

package/dist/core/protocol-pointer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-pointer.js","sourceRoot":"","sources":["../../src/core/protocol-pointer.ts"],"names":[],"mappings":";;;AA4BA,4EAOC;AAoBD,8DAGC;AAID,kFAIC;AAlED,mCAAoE;AAEvD,QAAA,mBAAmB,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,QAAQ;IAClG,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAatF,MAAM,KAAK,GAAG,IAAI,kBAAS,CAAC;IAC1B,2EAA2E;IAC3E,uDAAuD;IACvD,8CAA8C;CAC/C,CAAC,CAAC;AACH,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzH,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AACD;;6DAE6D;AACtD,KAAK,UAAU,gCAAgC,CAAC,IAAuC,EAC5F,UAA8B,EAAE,SAA4B;IAC5D,KAAK,MAAM,OAAO,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAU,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,OAAO;gBACzE,IAAI,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxH,IAAI,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,IAAuC,EAAE,MAAc,EAAE,MAA0B;IAC1G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1I,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AACD;+FAC+F;AACxF,KAAK,UAAU,yBAAyB,CAAC,IAAuC,EACrF,OAAe,EAAE,kBAA0B,EAAE,eAAe,GAAG,EAAE;IACjE,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;AAC/E,CAAC;AACD;;iEAEiE;AAC1D,KAAK,UAAU,mCAAmC,CAAC,IAAuC,EAC/F,OAAe,EAAE,kBAA0B,EAAE,KAAa,EAAE,SAAiB;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpI,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9G,CAAC;AACD,KAAK,UAAU,iBAAiB,CAAC,IAAuC,EAAE,OAAe,EACvF,kBAA0B,EAAE,eAAuB,EAAE,UAA+D;IACpH,OAAO,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;QACjE,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;WAChF,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS,KAAK,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChI,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChG,MAAM,SAAS,GAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAc,CAAC,GAAG,CAAC,mBAAU,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAa,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,2BAAmB,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpH,MAAM,YAAY,GAAG,IAAA,kBAAS,EAAC,iBAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CAC9D,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvF,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,4CAA4C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO;QAChI,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,KAAK,IAAI,IAAI,IAAA,kBAAS,EAAC,OAAO,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrH,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO;gBAC9C,IAAI,EAAE,KAAK,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC,CAAC;IACJ,wEAAwE;IACxE,MAAM,KAAK,GAAiD;QAC1D,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC;KAClF,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,IAAI,kBAAS,CAAC,CAAC,YAAY,MAAM,0BAA0B,CAAC,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAClI,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzI,CAAC,CAAC,CAAC,CAAC;IACJ,4EAA4E;IAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpF,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;WACpE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS;QACjD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,2BAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAsC;QAC5H,aAAa,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/core/protocol-runtime.d.ts

@@ -0,0 +1,4 @@
+import { type ProtocolDeployment } from './protocol-pointer';
+/** Plans are independently resolved on chain. Relay credentials are never sent to RPCs. */
+export declare function currentProtocolDeployment(): Promise<ProtocolDeployment>;
+//# sourceMappingURL=protocol-runtime.d.ts.map

package/dist/core/protocol-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-runtime.d.ts","sourceRoot":"","sources":["../../src/core/protocol-runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8C,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAazG,2FAA2F;AAC3F,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAM7E"}

package/dist/core/protocol-runtime.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.currentProtocolDeployment = currentProtocolDeployment;
+const guarded_fetch_1 = require("./guarded-fetch");
+const protocol_pointer_pin_generated_1 = require("./protocol-pointer-pin.generated");
+const protocol_pointer_1 = require("./protocol-pointer");
+const endpoints = ['https://mainnet.base.org', 'https://base.drpc.org'];
+let minimumRevision = 0n;
+function rpc(url) {
+    return { async request(method, params) {
+            const response = await (0, guarded_fetch_1.guardedFetch)(url, { method: 'POST', headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }), signal: AbortSignal.timeout(20000) });
+            if (!response.ok)
+                throw new Error('protocol_rpc_unavailable');
+            const reply = await response.json();
+            if (!reply || typeof reply !== 'object' || 'error' in reply || !('result' in reply))
+                throw new Error('protocol_rpc_invalid');
+            return reply.result;
+        } };
+}
+/** Plans are independently resolved on chain. Relay credentials are never sent to RPCs. */
+async function currentProtocolDeployment() {
+    const { address, runtimeHash } = protocol_pointer_pin_generated_1.PROTOCOL_POINTER_PIN;
+    if (!address || !runtimeHash)
+        throw new Error('protocol_pointer_not_deployed');
+    const deployment = await (0, protocol_pointer_1.resolveProtocolDeployment)([rpc(endpoints[0]), rpc(endpoints[1])], address, runtimeHash, minimumRevision);
+    if (deployment.revision > minimumRevision)
+        minimumRevision = deployment.revision;
+    return deployment;
+}
+//# sourceMappingURL=protocol-runtime.js.map

package/dist/core/protocol-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-runtime.js","sourceRoot":"","sources":["../../src/core/protocol-runtime.ts"],"names":[],"mappings":";;AAgBA,8DAMC;AAtBD,mDAA+C;AAC/C,qFAAwE;AACxE,yDAAyG;AACzG,MAAM,SAAS,GAAG,CAAC,0BAA0B,EAAE,uBAAuB,CAAU,CAAC;AACjF,IAAI,eAAe,GAAG,EAAE,CAAC;AACzB,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7H,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC,EAAE,CAAC;AACN,CAAC;AACD,2FAA2F;AACpF,KAAK,UAAU,yBAAyB;IAC7C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,qDAAoB,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,IAAA,4CAAyB,EAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAClI,IAAI,UAAU,CAAC,QAAQ,GAAG,eAAe;QAAE,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC;IACjF,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/tools.d.ts

@@ -62,7 +62,7 @@
 import { type PeFact } from './presentation';
 import type { ProvianToolDef, ToolContext, ToolResult } from './types';
 /** Version reported by both transports. Keep in sync with provian-mcp/package.json. */
-export declare const PROVIAN_MCP_VERSION = "1.2.3";
+export declare const PROVIAN_MCP_VERSION = "1.3.0";
 export declare const PROVIAN_MCP_SERVER_NAME = "provian";
 /**
  * §5 : what an agent's work mints from — the same witnesses on every surface that
@@ -72,19 +72,6 @@ export declare const PROVIAN_MCP_SERVER_NAME = "provian";
  * Capture health per device is the source of truth for which lanes are live. No tool reports the agent's own work.
  */
 export declare const WHAT_EARNS_NOTE: string;
-/**
- * Base mainnet pins the on-chain plans sign against. Mirrors the checked-in sources of
- * truth — ProvianEscrowV4 from contracts/deployments/base-pvt9-institutions.json, the
- * PVT9 kernel and USDC from config/pvt9-base.json (tools.test.ts binds each to its file).
- */
-export declare const COMMONS_HIRE_BASE_PINS: {
-    readonly chainId: 8453;
-    readonly escrow: "0x96560fdf49e563efcdc2d502934676dc074732d0";
-    readonly tokens: {
-        readonly pvt: "0x8811441914381143b9408c5c32247367f86f173a";
-        readonly usdc: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
-    };
-};
 /**
  * The on-chain escrow id for a Commons hire — byte-identical to the SDK's
  * `deriveHireOnchainEscrowId`: keccak256(abi.encode("provian.commons.hire-escrow.v1", depositor,

package/dist/core/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/core/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAOH,OAAO,EAQL,KAAK,MAAM,EAMZ,MAAM,gBAAgB,CAAC;AAkBxB,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACX,MAAM,SAAS,CAAC;AAEjB,uFAAuF;AACvF,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAMjD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,QAQJ,CAAC;AAuiBzB;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAC;AA4BX;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAM1F;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAC5B,EAAE,EAAE,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe,GAAG,eAAe,GAAG,qBAAqB,EACzG,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACpI,MAAM,CA0BR;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIvD;AAwiCD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAuBtF;AA89BD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAa3D;AAmND,oGAAoG;AACpG,eAAO,MAAM,yBAAyB;;;;;;CAM5B,CAAC;AA2aX;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,uBAAuB,CAAC;AACxE,eAAO,MAAM,2BAA2B,6BAA6B,CAAC;AACtE,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AAuExE,eAAO,MAAM,aAAa,EAAE,cAAc,EA8DzC,CAAC;AAEF,8BAA8B;AAC9B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAwBrB"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/core/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AASH,OAAO,EAQL,KAAK,MAAM,EAMZ,MAAM,gBAAgB,CAAC;AAkBxB,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACX,MAAM,SAAS,CAAC;AAEjB,uFAAuF;AACvF,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAC3C,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAMjD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,QAQJ,CAAC;AA2kBzB;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAM1F;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAC5B,EAAE,EAAE,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe,GAAG,eAAe,GAAG,qBAAqB,EACzG,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACpI,MAAM,CA0BR;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIvD;AA8iCD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAuBtF;AA89BD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAa3D;AAmND,oGAAoG;AACpG,eAAO,MAAM,yBAAyB;;;;;;CAM5B,CAAC;AA2aX;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,uBAAuB,CAAC;AACxE,eAAO,MAAM,2BAA2B,6BAA6B,CAAC;AACtE,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AAuExE,eAAO,MAAM,aAAa,EAAE,cAAc,EA8DzC,CAAC;AAEF,8BAA8B;AAC9B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAwBrB"}

package/dist/core/tools.js

@@ -61,7 +61,7 @@
  * every action earns PVT, and never state or imply a fiat value for PVT.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PROVIAN_TOOLS = exports.OUTPUT_SIGNATURE_JSON_KEY_MCP = exports.OUTPUT_SIGNATURE_HEADER_MCP = exports.OUTPUT_SIGNATURE_MESSAGE_PREFIX_MCP = exports.WALLET_POP_SIGNING_RECIPE = exports.COMMONS_HIRE_BASE_PINS = exports.WHAT_EARNS_NOTE = exports.PROVIAN_MCP_SERVER_NAME = exports.PROVIAN_MCP_VERSION = void 0;
+exports.PROVIAN_TOOLS = exports.OUTPUT_SIGNATURE_JSON_KEY_MCP = exports.OUTPUT_SIGNATURE_HEADER_MCP = exports.OUTPUT_SIGNATURE_MESSAGE_PREFIX_MCP = exports.WALLET_POP_SIGNING_RECIPE = exports.WHAT_EARNS_NOTE = exports.PROVIAN_MCP_SERVER_NAME = exports.PROVIAN_MCP_VERSION = void 0;
 exports.deriveHireOnchainEscrowId = deriveHireOnchainEscrowId;
 exports.encodeHireCall = encodeHireCall;
 exports.usdcToAtomic = usdcToAtomic;
@@ -70,6 +70,7 @@ exports.replyInstructionFor = replyInstructionFor;
 exports.findTool = findTool;
 exports.callProvianTool = callProvianTool;
 const crypto_1 = require("crypto");
+const protocol_runtime_1 = require("./protocol-runtime");
 const crypto_2 = require("./crypto");
 const keccak256_1 = require("./keccak256");
 const recovery_seal_1 = require("./recovery-seal");
@@ -78,7 +79,7 @@ const presentation_1 = require("./presentation");
 const disclosure_request_1 = require("./disclosure-request");
 const challenge_1 = require("./challenge");
 /** Version reported by both transports. Keep in sync with provian-mcp/package.json. */
-exports.PROVIAN_MCP_VERSION = '1.2.3';
+exports.PROVIAN_MCP_VERSION = '1.3.0';
 exports.PROVIAN_MCP_SERVER_NAME = 'provian';
 const ELIGIBILITY_DISCLAIMER = 'Every act of work mints PVT once at its best-supported value. The PE mints its base; ' +
     'telemetry and independence multiply on top.';
@@ -401,14 +402,14 @@ const getAgentRecord = {
         'transacting, computed from the relay\'s running totals (the relay keeps no PE; the PEs themselves live with ' +
         'their owner): PE count and families, attestation-tier mix, chain-verified transfer/x402 summary, bond ' +
         'status, court history, promise performance, vouches, wallet age, and linked/unlinked status. Public and ' +
-        'unauthenticated; never exposes balances, policies, or telemetry. Works with a wallet id or a proven ' +
-        'external address.',
+        'unauthenticated; never exposes balances, policies, or telemetry. Works with a wallet id or its published ' +
+        'native address. Private external addresses never resolve to their owner.',
     inputSchema: {
         type: 'object',
         properties: {
             agent_id: {
                 type: 'string',
-                description: 'Agent wallet id (wallet_aw_…) or a proven external Base address (0x…).',
+                description: 'Agent wallet id (wallet_aw_…) or its published native Base address (0x…).',
             },
         },
         required: ['agent_id'],
@@ -549,39 +550,11 @@ const getActionTypeStatus = {
         return relayErrorResult('Action type status', res);
     },
 };
-// ---------------------------------------------------------------------------
-// The Commons hire — ONE board, four directions, PVT or USDC.
-//
-// The agent-only `/v1/jobs` board folded into the Commons jobs board
-// (`/v1/commons/jobs`): people and agents hire each other there in all four
-// directions (agent→agent, agent→person, person→person, person→agent). A hire
-// escrows in PVT or USDC on ProvianEscrowV4 (Base), with a dispute fallback: the
-// Provian's admin key resolves (until the Court opens); if nobody does within 30 days the payer takes the
-// permissionless refund. Court escalation stays hidden.
-//
-// The on-chain legs (fund / release / dispute) are signed by the POSTER (the
-// escrow depositor) with its OWN key. This core never signs an EVM transaction
-// (remote /mcp holds no key material; local stdio exposes only binding
-// signatures), so those tools are two-step, like record_burn: step "plan" returns
-// the exact unsigned calls — each target checked against the pinned Base escrow +
-// token contracts below, never taken blindly from the relay — and step "record"
-// tells the relay once the calls mined. The SDK (fundCommonsJob / releaseCommonsJob
-// / disputeCommonsJob) and CLI (provian job-fund / job-release / job-dispute) sign
-// in-process for an agent that holds its key.
-// ---------------------------------------------------------------------------
-/**
- * Base mainnet pins the on-chain plans sign against. Mirrors the checked-in sources of
- * truth — ProvianEscrowV4 from contracts/deployments/base-pvt9-institutions.json, the
- * PVT9 kernel and USDC from config/pvt9-base.json (tools.test.ts binds each to its file).
- */
-exports.COMMONS_HIRE_BASE_PINS = {
-    chainId: 8453,
-    escrow: '0x96560fdf49e563efcdc2d502934676dc074732d0',
-    tokens: {
-        pvt: '0x8811441914381143b9408c5c32247367f86f173a',
-        usdc: '0x833589fcd6edb6e08f4c7c32d4f71b54bda02913',
-    },
-};
+function hireDeployment(deployment) {
+    return { chainId: 8453, escrow: deployment.addresses.escrow.toLowerCase(),
+        tokens: { pvt: deployment.addresses.kernel.toLowerCase(), usdc: '0x833589fcd6edb6e08f4c7c32d4f71b54bda02913' },
+        pointer: deployment.pointer, revision: deployment.revision.toString(), manifest: deployment.manifestHash };
+}
 /** ProvianEscrowV4 `Currency` enum (USDC = 0, PVT = 1). */
 const ESCROW_CURRENCY_ENUM = { usdc: 0, pvt: 1 };
 const BYTES32 = /^0x[0-9a-fA-F]{64}$/;
@@ -661,13 +634,13 @@ function lower(v) {
     return typeof v === 'string' ? v.toLowerCase() : '';
 }
 /** Refuse unless the relay's escrow names exactly the pinned Base escrow for a known currency. */
-function checkPinnedEscrow(e) {
+function checkPinnedEscrow(e, pins) {
     if (e.currency !== 'pvt' && e.currency !== 'usdc')
         return { refusal: `unsupported escrow currency '${String(e.currency)}'` };
     if (e.chain !== 'base')
         return { refusal: `the escrow is on '${String(e.chain)}'; Commons hires settle on Base` };
-    if (lower(e.contract_address) !== exports.COMMONS_HIRE_BASE_PINS.escrow) {
-        return { refusal: `the relay named escrow ${String(e.contract_address)}, not the pinned ProvianEscrowV4 ${exports.COMMONS_HIRE_BASE_PINS.escrow}; refusing to build calls` };
+    if (lower(e.contract_address) !== pins.escrow) {
+        return { refusal: `the relay named escrow ${String(e.contract_address)}, not the pinned ProvianEscrowV4 ${pins.escrow}; refusing to build calls` };
     }
     return { currency: e.currency };
 }
@@ -953,13 +926,14 @@ const fundJob = {
         if ('error' in read)
             return read.error;
         const e = read.escrow;
-        const pinned = checkPinnedEscrow(e);
+        const pins = hireDeployment(await (0, protocol_runtime_1.currentProtocolDeployment)());
+        const pinned = checkPinnedEscrow(e, pins);
         if ('refusal' in pinned)
             return errorResult(pinned.refusal);
         const currency = pinned.currency;
         if (e.status !== 'created')
             return errorResult(`the escrow is '${String(e.status)}', not 'created' — already funded or closed (record a mined funding with step="record")`);
-        const token = exports.COMMONS_HIRE_BASE_PINS.tokens[currency];
+        const token = pins.tokens[currency];
         if (lower(e.token_address) !== token)
             return errorResult(`the relay named token ${String(e.token_address)} for a ${currency} escrow; the pinned ${currency.toUpperCase()} is ${token} — refusing`);
         let amount;
@@ -1004,15 +978,16 @@ const fundJob = {
             currency,
             amount_atomic: amount.toString(),
             decimals: currency === 'pvt' ? 18 : 6,
-            chain_id: exports.COMMONS_HIRE_BASE_PINS.chainId,
+            chain_id: pins.chainId,
+            protocol_pointer: pins.pointer, protocol_revision: pins.revision, protocol_manifest: pins.manifest,
             from: e.depositor_address,
             onchain_escrow_id: escrowId,
             calls: [
-                { label: 'createEscrow', to: exports.COMMONS_HIRE_BASE_PINS.escrow, value: '0', data: encodeHireCall('createEscrow', { escrowId, recipient: e.recipient_address, amount, autoReleaseAt, currency }) },
-                { label: 'approve', to: token, value: '0', data: encodeHireCall('approve', { spender: exports.COMMONS_HIRE_BASE_PINS.escrow, amount }) },
-                { label: 'fundEscrow', to: exports.COMMONS_HIRE_BASE_PINS.escrow, value: '0', data: encodeHireCall('fundEscrow', { escrowId }) },
+                { label: 'createEscrow', to: pins.escrow, value: '0', data: encodeHireCall('createEscrow', { escrowId, recipient: e.recipient_address, amount, autoReleaseAt, currency }) },
+                { label: 'approve', to: token, value: '0', data: encodeHireCall('approve', { spender: pins.escrow, amount }) },
+                { label: 'fundEscrow', to: pins.escrow, value: '0', data: encodeHireCall('fundEscrow', { escrowId }) },
             ],
-            next_step: `Sign and broadcast the three calls IN ORDER on Base (chain id 8453) from ${e.depositor_address}, waiting for each receipt to succeed. ` +
+            next_step: `Resolve the protocol pointer again before each signature and refuse a changed manifest or retired address. Sign and broadcast the three calls IN ORDER on Base (chain id 8453) from ${e.depositor_address}, waiting for each receipt to succeed. ` +
                 'Then call fund_job with step="record" and tx_hash = the fundEscrow transaction hash. If createEscrow or approve reverts, nothing was ' +
                 'escrowed; if fundEscrow reverts, revoke the approval (approve the escrow for 0). If a run stops part-way, plan again WITH THE SAME ' +
                 'onchain_escrow_id (the default plan for this hire always names it): a createEscrow reverting EscrowAlreadyExists means it already ' +
@@ -1085,7 +1060,8 @@ const releaseJob = {
         if ('error' in read)
             return read.error;
         const e = read.escrow;
-        const pinned = checkPinnedEscrow(e);
+        const pins = hireDeployment(await (0, protocol_runtime_1.currentProtocolDeployment)());
+        const pinned = checkPinnedEscrow(e, pins);
         if ('refusal' in pinned)
             return errorResult(pinned.refusal);
         if (e.status !== 'funded')
@@ -1097,11 +1073,12 @@ const releaseJob = {
             return errorResult(`only the depositor ${String(e.depositor_address)} can release before auto-release; this machine's agent is ${me}`);
         return jsonResult({
             job_id: jobId,
-            chain_id: exports.COMMONS_HIRE_BASE_PINS.chainId,
+            chain_id: pins.chainId,
+            protocol_pointer: pins.pointer, protocol_revision: pins.revision, protocol_manifest: pins.manifest,
             from: e.depositor_address,
             onchain_escrow_id: e.onchain_escrow_id,
-            calls: [{ label: 'releaseEscrow', to: exports.COMMONS_HIRE_BASE_PINS.escrow, value: '0', data: encodeHireCall('releaseEscrow', { escrowId: e.onchain_escrow_id }) }],
-            next_step: `Sign and broadcast releaseEscrow on Base from ${String(e.depositor_address)}; once it mines call release_job with step="record".`,
+            calls: [{ label: 'releaseEscrow', to: pins.escrow, value: '0', data: encodeHireCall('releaseEscrow', { escrowId: e.onchain_escrow_id }) }],
+            next_step: `Resolve the protocol pointer again and refuse a changed manifest or retired address. Sign and broadcast releaseEscrow on Base from ${String(e.depositor_address)}; once it mines call release_job with step="record".`,
         });
     },
 };
@@ -1146,7 +1123,8 @@ const disputeJob = {
         if ('error' in read)
             return read.error;
         const e = read.escrow;
-        const pinned = checkPinnedEscrow(e);
+        const pins = hireDeployment(await (0, protocol_runtime_1.currentProtocolDeployment)());
+        const pinned = checkPinnedEscrow(e, pins);
         if ('refusal' in pinned)
             return errorResult(pinned.refusal);
         if (e.status !== 'funded')
@@ -1160,11 +1138,12 @@ const disputeJob = {
             return errorResult(`only the depositor ${String(e.depositor_address)} can dispute (the contract is onlyDepositor); this machine's agent is ${me}`);
         return jsonResult({
             job_id: jobId,
-            chain_id: exports.COMMONS_HIRE_BASE_PINS.chainId,
+            chain_id: pins.chainId,
+            protocol_pointer: pins.pointer, protocol_revision: pins.revision, protocol_manifest: pins.manifest,
             from: e.depositor_address,
             onchain_escrow_id: e.onchain_escrow_id,
-            calls: [{ label: 'disputeEscrow', to: exports.COMMONS_HIRE_BASE_PINS.escrow, value: '0', data: encodeHireCall('disputeEscrow', { escrowId: e.onchain_escrow_id }) }],
-            next_step: `Sign and broadcast disputeEscrow on Base from ${String(e.depositor_address)}; once it mines call dispute_job with step="record", your reason and optional evidence.`,
+            calls: [{ label: 'disputeEscrow', to: pins.escrow, value: '0', data: encodeHireCall('disputeEscrow', { escrowId: e.onchain_escrow_id }) }],
+            next_step: `Resolve the protocol pointer again and refuse a changed manifest or retired address. Sign and broadcast disputeEscrow on Base from ${String(e.depositor_address)}; once it mines call dispute_job with step="record", your reason and optional evidence.`,
         });
     },
 };