gate-evm-tools 1.0.26 → 1.0.28

package/dist-runtime/workflow/lib/gateToolSync.js

@@ -0,0 +1,253 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncGateToolUups = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const projectHardhat_1 = __importDefault(require("../../projectHardhat"));
+const sync_1 = require("gate-evm-tools/sync");
+const config_1 = require("./config");
+const SAFE_FILE_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/;
+const HASH = /^[a-f0-9]{64}$/;
+const TRANSACTION_HASH = /^0x[a-fA-F0-9]{64}$/;
+const confinedPath = (root, requested, label) => {
+    const resolvedRoot = path_1.default.resolve(root);
+    const resolved = path_1.default.resolve(requested);
+    const relative = path_1.default.relative(resolvedRoot, resolved);
+    if (!relative || relative.startsWith("..") || path_1.default.isAbsolute(relative)) {
+        throw new Error(`${label} must be inside the project root`);
+    }
+    let current = resolvedRoot;
+    for (const segment of relative.split(path_1.default.sep).filter(Boolean)) {
+        current = path_1.default.join(current, segment);
+        if (fs_1.default.existsSync(current) && fs_1.default.lstatSync(current).isSymbolicLink()) {
+            throw new Error(`${label} path cannot contain a symlink`);
+        }
+    }
+    return resolved;
+};
+const record = (value, label) => {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+};
+const stringField = (value, key) => {
+    const field = value[key];
+    if (typeof field !== "string" || !field) {
+        throw new Error(`GateTool sync result is missing ${key}`);
+    }
+    return field;
+};
+const sameAddress = (left, right) => (left.toLowerCase() === right.toLowerCase());
+const readRegularBytes = (filePath, label) => {
+    const stat = fs_1.default.lstatSync(filePath);
+    if (!stat.isFile())
+        throw new Error(`${label} must be a regular file`);
+    return fs_1.default.readFileSync(filePath);
+};
+const jsonFromBytes = (contents, label) => {
+    return record(JSON.parse(contents.toString("utf8")), label);
+};
+const canonicalJsonBytes = (value) => (Buffer.from(`${JSON.stringify(value, null, 2)}\n`));
+const writeImmutableFile = (filePath, contents, root, label) => {
+    const confined = confinedPath(root, filePath, label);
+    fs_1.default.mkdirSync(path_1.default.dirname(confined), { recursive: true });
+    confinedPath(root, path_1.default.dirname(confined), `${label} directory`);
+    if (fs_1.default.existsSync(confined)) {
+        const existing = readRegularBytes(confined, label);
+        if (!existing.equals(contents)) {
+            throw new Error(`${label} already exists with different bytes`);
+        }
+        return existing;
+    }
+    const temporary = confinedPath(root, `${confined}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`, `${label} temporary file`);
+    let descriptor;
+    try {
+        descriptor = fs_1.default.openSync(temporary, "wx", 0o600);
+        fs_1.default.writeFileSync(descriptor, contents);
+        fs_1.default.fsyncSync(descriptor);
+        fs_1.default.closeSync(descriptor);
+        descriptor = undefined;
+        try {
+            fs_1.default.linkSync(temporary, confined);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            const existing = readRegularBytes(confined, label);
+            if (!existing.equals(contents)) {
+                throw new Error(`${label} already exists with different bytes`);
+            }
+        }
+        const stored = readRegularBytes(confined, label);
+        if (!stored.equals(contents)) {
+            throw new Error(`${label} does not match the committed source report`);
+        }
+        return stored;
+    }
+    finally {
+        if (descriptor !== undefined)
+            fs_1.default.closeSync(descriptor);
+        if (fs_1.default.existsSync(temporary))
+            fs_1.default.unlinkSync(temporary);
+    }
+};
+const validateManifestTransaction = (syncReport, options) => {
+    if (syncReport.version !== 1
+        || syncReport.status !== "committed"
+        || typeof syncReport.beforeHash !== "string"
+        || typeof syncReport.afterHash !== "string"
+        || !HASH.test(syncReport.beforeHash)
+        || !HASH.test(syncReport.afterHash)) {
+        throw new Error("GateTool manifest transaction report is not committed evidence");
+    }
+    const manifestFile = stringField(syncReport, "manifestFile");
+    const expectedManifestRoot = path_1.default.resolve(options.root, options.manifestDir);
+    const resolvedManifest = path_1.default.resolve(options.root, manifestFile);
+    if (!resolvedManifest.startsWith(`${expectedManifestRoot}${path_1.default.sep}`)) {
+        throw new Error("GateTool sync wrote outside the target manifest directory");
+    }
+};
+const validateEvidenceIdentity = (raw, options) => {
+    if (raw.version !== 1
+        || raw.status !== "succeeded"
+        || raw.evidenceName !== options.evidenceName
+        || raw.scheme !== options.scheme
+        || raw.network !== options.network
+        || raw.target !== options.target
+        || raw.manifestDir !== options.manifestDir
+        || raw.contract !== options.contract
+        || JSON.stringify(raw.constructorArgs) !== JSON.stringify(options.constructorArgs)
+        || raw.transactionHash !== options.transactionHash.toLowerCase()
+        || typeof raw.proxy !== "string"
+        || typeof raw.implementation !== "string"
+        || !sameAddress(raw.proxy, options.proxy)
+        || !sameAddress(raw.implementation, options.implementation)) {
+        throw new Error("GateTool sync metadata identity does not match the immutable UUPS receipt");
+    }
+};
+const validateEvidenceBinding = (raw, options, expectedSyncReportPath) => {
+    validateEvidenceIdentity(raw, options);
+    const syncReportPath = confinedPath(options.root, path_1.default.resolve(options.root, stringField(raw, "syncReportPath")), "GateTool manifest transaction report");
+    if (syncReportPath !== expectedSyncReportPath) {
+        throw new Error("GateTool sync evidence does not reference its immutable report snapshot");
+    }
+    const syncReport = record(raw.manifestTransaction, "GateTool sync manifest transaction");
+    validateManifestTransaction(syncReport, options);
+    const syncReportBytes = canonicalJsonBytes(syncReport);
+    const syncReportHash = crypto_1.default
+        .createHash("sha256")
+        .update(syncReportBytes)
+        .digest("hex");
+    if (raw.syncReportHash !== syncReportHash
+        || raw.completedAt !== syncReport.completedAt) {
+        throw new Error("GateTool sync evidence does not match its committed manifest transaction");
+    }
+    return { syncReport, syncReportBytes };
+};
+const validateExistingEvidence = (raw, options, expectedSyncReportPath) => {
+    const binding = validateEvidenceBinding(raw, options, expectedSyncReportPath);
+    const storedBytes = readRegularBytes(expectedSyncReportPath, "GateTool manifest transaction snapshot");
+    if (!storedBytes.equals(binding.syncReportBytes)) {
+        throw new Error("GateTool sync evidence does not match its immutable report snapshot");
+    }
+};
+const buildSyncEvidence = (options, syncReportPath, syncReportBytes, syncReport) => ({
+    version: 1,
+    status: "succeeded",
+    evidenceName: options.evidenceName,
+    scheme: options.scheme,
+    network: options.network,
+    target: options.target,
+    manifestDir: options.manifestDir,
+    proxy: options.proxy.toLowerCase(),
+    implementation: options.implementation.toLowerCase(),
+    contract: options.contract,
+    constructorArgs: options.constructorArgs,
+    transactionHash: options.transactionHash.toLowerCase(),
+    syncReportPath: path_1.default.relative(options.root, syncReportPath).split(path_1.default.sep).join("/"),
+    syncReportHash: crypto_1.default.createHash("sha256").update(syncReportBytes).digest("hex"),
+    manifestTransaction: syncReport,
+    completedAt: syncReport.completedAt,
+});
+const syncGateToolUups = async (options) => {
+    if (!SAFE_FILE_ID.test(options.evidenceName)) {
+        throw new Error(`GateTool sync evidenceName must match ${SAFE_FILE_ID}`);
+    }
+    if (!TRANSACTION_HASH.test(options.transactionHash)) {
+        throw new Error("GateTool sync requires a confirmed transaction hash");
+    }
+    const evidenceDir = confinedPath(options.root, options.evidenceDir, "GateTool sync evidence directory");
+    const outputPath = confinedPath(options.root, path_1.default.join(evidenceDir, `${options.evidenceName}-sync.json`), "GateTool sync evidence");
+    const syncReportSnapshotPath = confinedPath(options.root, path_1.default.join(evidenceDir, `${options.evidenceName}-manifest-transaction.json`), "GateTool manifest transaction snapshot");
+    const syncMetadataPath = confinedPath(options.root, path_1.default.join(evidenceDir, `${options.evidenceName}-manifest-transaction-metadata.json`), "GateTool manifest transaction metadata");
+    const relativeOutputPath = path_1.default.relative(options.root, outputPath).split(path_1.default.sep).join("/");
+    if (fs_1.default.existsSync(outputPath)) {
+        const outputBytes = readRegularBytes(outputPath, "GateTool sync evidence");
+        const data = jsonFromBytes(outputBytes, "GateTool sync evidence");
+        if (!fs_1.default.existsSync(syncMetadataPath)) {
+            throw new Error("GateTool sync evidence is missing its immutable identity metadata");
+        }
+        const metadataBytes = readRegularBytes(syncMetadataPath, "GateTool manifest transaction metadata");
+        if (!outputBytes.equals(metadataBytes)) {
+            throw new Error("GateTool sync evidence does not match its immutable identity metadata");
+        }
+        validateExistingEvidence(data, options, syncReportSnapshotPath);
+        return { outputPath: relativeOutputPath, data };
+    }
+    if (fs_1.default.existsSync(syncMetadataPath)) {
+        const metadataBytes = readRegularBytes(syncMetadataPath, "GateTool manifest transaction metadata");
+        const data = jsonFromBytes(metadataBytes, "GateTool manifest transaction metadata");
+        if (!metadataBytes.equals(canonicalJsonBytes(data))) {
+            throw new Error("GateTool manifest transaction metadata must be canonical JSON");
+        }
+        const binding = validateEvidenceBinding(data, options, syncReportSnapshotPath);
+        writeImmutableFile(syncReportSnapshotPath, binding.syncReportBytes, options.root, "GateTool manifest transaction snapshot");
+        validateExistingEvidence(data, options, syncReportSnapshotPath);
+        (0, config_1.writeJsonFile)(outputPath, data);
+        return { outputPath: relativeOutputPath, data };
+    }
+    if (fs_1.default.existsSync(syncReportSnapshotPath)) {
+        throw new Error("GateTool manifest transaction snapshot is missing immutable identity metadata");
+    }
+    const rawResult = record(await (0, sync_1.syncWithHre)({
+        scheme: options.scheme,
+        network: options.network,
+        target: options.target,
+        proxy: options.proxy,
+        contract: options.contract,
+        constructorArgs: options.constructorArgs,
+        ...(options.scheme === "evm"
+            ? { skipTxHash: true }
+            : { transactionHash: options.transactionHash }),
+    }, options.hre ?? projectHardhat_1.default, options.root), "GateTool sync result");
+    const returnedProxy = typeof rawResult.proxyAddress === "string"
+        ? rawResult.proxyAddress
+        : stringField(rawResult, "proxy");
+    const returnedImplementation = typeof rawResult.implementationAddress === "string"
+        ? rawResult.implementationAddress
+        : stringField(rawResult, "implementation");
+    if (!sameAddress(returnedProxy, options.proxy)
+        || !sameAddress(returnedImplementation, options.implementation)) {
+        throw new Error("GateTool sync result does not match the confirmed UUPS chain state");
+    }
+    const returnedSyncReport = record(rawResult.manifestTransaction, "GateTool returned manifest transaction");
+    validateManifestTransaction(returnedSyncReport, options);
+    const returnedSyncReportBytes = canonicalJsonBytes(returnedSyncReport);
+    const syncReportPath = confinedPath(options.root, stringField(rawResult, "syncReport"), "GateTool manifest transaction report");
+    const sourceSyncReportBytes = readRegularBytes(syncReportPath, "GateTool manifest transaction report");
+    if (!sourceSyncReportBytes.equals(returnedSyncReportBytes)) {
+        throw new Error("GateTool source report does not match its returned manifest transaction");
+    }
+    const data = buildSyncEvidence(options, syncReportSnapshotPath, returnedSyncReportBytes, returnedSyncReport);
+    writeImmutableFile(syncMetadataPath, canonicalJsonBytes(data), options.root, "GateTool manifest transaction metadata");
+    writeImmutableFile(syncReportSnapshotPath, returnedSyncReportBytes, options.root, "GateTool manifest transaction snapshot");
+    (0, config_1.writeJsonFile)(outputPath, data);
+    return { outputPath: relativeOutputPath, data };
+};
+exports.syncGateToolUups = syncGateToolUups;
+//# sourceMappingURL=gateToolSync.js.map

package/dist-runtime/workflow/lib/gateToolSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateToolSync.js","sourceRoot":"","sources":["../../../runtime/workflow/lib/gateToolSync.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AACxB,0EAA2C;AAC3C,8CAAkD;AAClD,qCAAyC;AAyBzC,MAAM,YAAY,GAAG,mCAAmC,CAAC;AACzD,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAE,KAAa,EAAU,EAAE;IAC9E,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,YAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAa,EAA2B,EAAE;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAA8B,EAAE,GAAW,EAAU,EAAE;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CAAC,CAC5D,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAC3C,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,KAAa,EAAU,EAAE;IACnE,MAAM,IAAI,GAAG,YAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACvE,OAAO,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,KAAa,EAA2B,EAAE;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,EAAE,KAAK,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CACrD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CACnD,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAgB,EAChB,QAAgB,EAChB,IAAY,EACZ,KAAa,EACL,EAAE;IACV,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrD,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,YAAY,CAAC,IAAI,EAAE,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACjE,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAC5B,IAAI,EACJ,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EACrF,GAAG,KAAK,iBAAiB,CAC1B,CAAC;IACF,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,YAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,YAAE,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvC,YAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzB,YAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC;YACH,YAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,YAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,UAAmC,EACnC,OAAgC,EAC1B,EAAE;IACR,IACE,UAAU,CAAC,OAAO,KAAK,CAAC;WACrB,UAAU,CAAC,MAAM,KAAK,WAAW;WACjC,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ;WACzC,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;WACxC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;WACjC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,oBAAoB,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,oBAAoB,GAAG,cAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,GAA4B,EAC5B,OAAgC,EAC1B,EAAE;IACR,IACE,GAAG,CAAC,OAAO,KAAK,CAAC;WACd,GAAG,CAAC,MAAM,KAAK,WAAW;WAC1B,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;WACzC,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;WAC7B,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;WAC/B,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;WAC7B,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;WACvC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;WACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;WAC/E,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE;WAC7D,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;WAC7B,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;WACtC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;WACtC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,GAA4B,EAC5B,OAAgC,EAChC,sBAA8B,EACoC,EAAE;IACpE,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,IAAI,EACZ,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,EAC9D,sCAAsC,CACvC,CAAC;IACF,IAAI,cAAc,KAAK,sBAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CACvB,GAAG,CAAC,mBAAmB,EACvB,oCAAoC,CACrC,CAAC;IACF,2BAA2B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,gBAAM;SAC1B,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,IACE,GAAG,CAAC,cAAc,KAAK,cAAc;WAClC,GAAG,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,GAA4B,EAC5B,OAAgC,EAChC,sBAA8B,EACxB,EAAE;IACR,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,gBAAgB,CAClC,sBAAsB,EACtB,wCAAwC,CACzC,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,OAAgC,EAChC,cAAsB,EACtB,eAAuB,EACvB,UAAmC,EACV,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,WAAW;IACnB,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;IAClC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE;IACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;IACxC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE;IACtD,cAAc,EAAE,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,cAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACrF,cAAc,EAAE,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACjF,mBAAmB,EAAE,UAAU;IAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;CACpC,CAAC,CAAC;AAEI,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAgC,EACD,EAAE;IACjC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAC9B,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,WAAW,EACnB,kCAAkC,CACnC,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAC7B,OAAO,CAAC,IAAI,EACZ,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,YAAY,YAAY,CAAC,EAC3D,wBAAwB,CACzB,CAAC;IACF,MAAM,sBAAsB,GAAG,YAAY,CACzC,OAAO,CAAC,IAAI,EACZ,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,YAAY,4BAA4B,CAAC,EAC3E,wCAAwC,CACzC,CAAC;IACF,MAAM,gBAAgB,GAAG,YAAY,CACnC,OAAO,CAAC,IAAI,EACZ,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,YAAY,qCAAqC,CAAC,EACpF,wCAAwC,CACzC,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,cAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,IAAI,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAClE,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CACpC,gBAAgB,EAChB,wCAAwC,CACzC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAChE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,YAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,gBAAgB,CACpC,gBAAgB,EAChB,wCAAwC,CACzC,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CACxB,aAAa,EACb,wCAAwC,CACzC,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CACrC,IAAI,EACJ,OAAO,EACP,sBAAsB,CACvB,CAAC;QACF,kBAAkB,CAChB,sBAAsB,EACtB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,IAAI,EACZ,wCAAwC,CACzC,CAAC;QACF,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAChE,IAAA,sBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,YAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAA,kBAAW,EAAC;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE;YACtB,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;KAClD,EAAE,OAAO,CAAC,GAAG,IAAI,wBAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAC9D,CAAC,CAAC,SAAS,CAAC,YAAY;QACxB,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,sBAAsB,GAAG,OAAO,SAAS,CAAC,qBAAqB,KAAK,QAAQ;QAChF,CAAC,CAAC,SAAS,CAAC,qBAAqB;QACjC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC7C,IACE,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC;WACvC,CAAC,WAAW,CAAC,sBAAsB,EAAE,OAAO,CAAC,cAAc,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAC/B,SAAS,CAAC,mBAAmB,EAC7B,wCAAwC,CACzC,CAAC;IACF,2BAA2B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAEvE,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,IAAI,EACZ,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,EACpC,sCAAsC,CACvC,CAAC;IACF,MAAM,qBAAqB,GAAG,gBAAgB,CAC5C,cAAc,EACd,sCAAsC,CACvC,CAAC;IACF,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAC5B,OAAO,EACP,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,CACnB,CAAC;IACF,kBAAkB,CAChB,gBAAgB,EAChB,kBAAkB,CAAC,IAAI,CAAC,EACxB,OAAO,CAAC,IAAI,EACZ,wCAAwC,CACzC,CAAC;IACF,kBAAkB,CAChB,sBAAsB,EACtB,uBAAuB,EACvB,OAAO,CAAC,IAAI,EACZ,wCAAwC,CACzC,CAAC;IACF,IAAA,sBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC,CAAC;AAhJW,QAAA,gBAAgB,oBAgJ3B"}

package/dist-runtime/workflow/lib/lock.d.ts

@@ -0,0 +1,52 @@
+import { ReleaseFingerprint } from "./release";
+import type { ExistingDeploymentPolicies } from "./parameters";
+export interface ParameterLockTargetSnapshot {
+    network: string;
+    signer: string;
+    admin: string;
+    chainId?: number;
+    create2Scheme: "evm" | "zksync-eravm";
+    create2Factory?: string;
+    create2Caller?: string;
+    controlledMulticall?: string;
+    uupsPlaceholderImplementation?: string;
+    leadingZeroBytes?: number;
+}
+export type FinalSimulation = {
+    status: "pending";
+} | {
+    status: "succeeded";
+    result: string;
+    simulatedAt: string;
+    executionPlanHash: string;
+    executionPlanPath: string;
+};
+export interface ParameterLockInput {
+    taskDir: string;
+    deploymentId: string;
+    executionId: string;
+    sourceSuperTaskId: string;
+    mergeCommit: string;
+    selectedExecuteNetworks: string[];
+    selectedStepIds: string[];
+    operator: string;
+    baselineParameters: Record<string, unknown>;
+    overrides: Record<string, unknown>;
+    resolvedParameters: Record<string, unknown>;
+    releaseFingerprint: ReleaseFingerprint;
+    finalSimulation: FinalSimulation;
+    targetSnapshot: ParameterLockTargetSnapshot;
+    existingDeploymentPolicies?: ExistingDeploymentPolicies;
+    implementationSalts?: Record<string, string>;
+}
+export interface ParameterLockExecution extends Omit<ParameterLockInput, "taskDir" | "targetSnapshot"> {
+    manifestHash: string;
+    parameterHash: string;
+    lockedAt: string;
+    target: ParameterLockTargetSnapshot;
+}
+export declare const writeParameterLock: (input: ParameterLockInput) => void;
+export declare const readParameterLockExecution: (taskDir: string, executionId: string) => ParameterLockExecution;
+export declare const assertParameterLockExecutable: (execution: ParameterLockExecution, targetId: string, currentFingerprint: ReleaseFingerprint) => ParameterLockExecution;
+export declare const recordParameterLockImplementationSalts: (taskDir: string, executionId: string, salts: Record<string, string>) => void;
+export declare const markParameterLockSimulationSucceeded: (taskDir: string, executionId: string, result: string, simulatedAt: string, signerAddress: string, executionPlanHash: string, executionPlanPath: string) => void;

package/dist-runtime/workflow/lib/lock.js

@@ -0,0 +1,269 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.markParameterLockSimulationSucceeded = exports.recordParameterLockImplementationSalts = exports.assertParameterLockExecutable = exports.readParameterLockExecution = exports.writeParameterLock = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const config_1 = require("./config");
+const executionId_1 = require("./executionId");
+const release_1 = require("./release");
+const sha256 = (value) => {
+    return crypto_1.default.createHash("sha256").update(value).digest("hex");
+};
+const isRecord = (value) => {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+};
+const isNonZeroEvmAddress = (value) => {
+    return typeof value === "string"
+        && /^0x[0-9a-fA-F]{40}$/.test(value)
+        && value.toLowerCase() !== "0x0000000000000000000000000000000000000000";
+};
+const assertSignerBinding = (execution) => {
+    if (!isNonZeroEvmAddress(execution.operator)) {
+        throw new Error("Parameter lock operator must be a valid non-zero EVM address");
+    }
+    if (!isNonZeroEvmAddress(execution.target?.signer)) {
+        throw new Error("Parameter lock target signer must be a valid non-zero EVM address");
+    }
+    if (execution.operator.toLowerCase() !== execution.target.signer.toLowerCase()) {
+        throw new Error("Parameter lock operator does not match target signer");
+    }
+};
+const assertCreate2Scheme = (value, required) => {
+    if (!required && value === undefined)
+        return;
+    if (value !== "evm" && value !== "zksync-eravm") {
+        throw new Error("Parameter lock target create2Scheme must be evm or zksync-eravm");
+    }
+};
+const assertFinalSimulation = (execution) => {
+    const evidence = execution.finalSimulation;
+    if (!isRecord(evidence) || (evidence.status !== "pending" && evidence.status !== "succeeded")) {
+        throw new Error("Parameter lock finalSimulation is invalid");
+    }
+    if (evidence.status === "pending") {
+        if (Object.keys(evidence).length !== 1) {
+            throw new Error("Pending finalSimulation cannot contain execution evidence");
+        }
+        return;
+    }
+    if (typeof evidence.result !== "string" || !evidence.result.trim()) {
+        throw new Error("Succeeded finalSimulation requires result");
+    }
+    if (typeof evidence.simulatedAt !== "string" || !Number.isFinite(Date.parse(evidence.simulatedAt))) {
+        throw new Error("Succeeded finalSimulation requires simulatedAt");
+    }
+    if (typeof evidence.executionPlanHash !== "string" || !/^[0-9a-f]{64}$/.test(evidence.executionPlanHash)) {
+        throw new Error("Succeeded finalSimulation requires executionPlanHash");
+    }
+    const expectedPlanPath = [
+        "results",
+        execution.target.network,
+        execution.executionId,
+        "execution-plan.json",
+    ].join("/");
+    if (evidence.executionPlanPath !== expectedPlanPath) {
+        throw new Error("Succeeded finalSimulation executionPlanPath does not match its execution");
+    }
+};
+const validateLockFile = (value) => {
+    if (!isRecord(value)) {
+        throw new Error("parameters.lock.json must be an object");
+    }
+    if (!Array.isArray(value.executions)) {
+        throw new Error("parameters.lock.json.executions must be an array");
+    }
+    const executionIds = new Set();
+    for (const [index, execution] of value.executions.entries()) {
+        if (!isRecord(execution)) {
+            throw new Error(`parameters.lock.json.executions[${index}] must be an object`);
+        }
+        const executionId = (0, executionId_1.validateExecutionId)(execution.executionId, `parameters.lock.json.executions[${index}].executionId`);
+        if (executionIds.has(executionId)) {
+            throw new Error("parameters.lock.json contains duplicate executionId: " + executionId);
+        }
+        executionIds.add(executionId);
+        assertSignerBinding(execution);
+        assertCreate2Scheme(isRecord(execution.target) ? execution.target.create2Scheme : undefined, false);
+        assertFinalSimulation(execution);
+    }
+    const latestExecutionId = (0, executionId_1.validateExecutionId)(value.latestExecutionId, "parameters.lock.json.latestExecutionId");
+    const latestMatches = value.executions.filter((execution) => execution.executionId === latestExecutionId).length;
+    if (latestMatches !== 1) {
+        throw new Error("parameters.lock.json.latestExecutionId must identify exactly one execution");
+    }
+    return value;
+};
+const writeLockFile = (filePath, lock) => {
+    (0, config_1.writeJsonFile)(filePath, validateLockFile(lock));
+};
+const readLockFile = (filePath) => {
+    if (!fs_1.default.existsSync(filePath))
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(fs_1.default.readFileSync(filePath, "utf8"));
+    }
+    catch (error) {
+        throw new Error("parameters.lock.json must contain valid JSON: "
+            + (error instanceof Error ? error.message : String(error)));
+    }
+    return validateLockFile(parsed);
+};
+const immutableExecutionHash = (execution) => {
+    const { finalSimulation: _finalSimulation, lockedAt: _lockedAt, ...immutable } = execution;
+    return (0, release_1.hashValue)(immutable);
+};
+const requireSingleNetwork = (networks) => {
+    if (networks.length !== 1 || !networks[0]) {
+        throw new Error("A parameter lock execution must select exactly one network");
+    }
+};
+const buildExecution = (input, manifestHash, parameterHash) => {
+    const { taskDir: _taskDir, targetSnapshot, ...executionInput } = input;
+    return {
+        ...executionInput,
+        manifestHash,
+        parameterHash,
+        lockedAt: new Date().toISOString(),
+        target: targetSnapshot,
+    };
+};
+const writeParameterLock = (input) => {
+    const executionId = (0, executionId_1.validateExecutionId)(input.executionId);
+    requireSingleNetwork(input.selectedExecuteNetworks);
+    assertCreate2Scheme(input.targetSnapshot.create2Scheme, true);
+    if (input.finalSimulation.status !== "pending") {
+        throw new Error("A new parameter lock execution must start with pending finalSimulation");
+    }
+    const manifest = fs_1.default.readFileSync(path_1.default.join(input.taskDir, "manifest.yaml"), "utf8");
+    const parameters = fs_1.default.readFileSync(path_1.default.join(input.taskDir, "parameters.yaml"), "utf8");
+    const manifestHash = sha256(manifest);
+    const parameterHash = sha256(parameters);
+    const lockPath = path_1.default.join(input.taskDir, "parameters.lock.json");
+    const existing = readLockFile(lockPath);
+    const execution = buildExecution(input, manifestHash, parameterHash);
+    const previousExecution = existing?.executions.find((item) => item.executionId === executionId);
+    if (previousExecution) {
+        if (immutableExecutionHash(previousExecution) !== immutableExecutionHash(execution)) {
+            throw new Error("executionId already exists with different content: " + executionId);
+        }
+        return;
+    }
+    writeLockFile(lockPath, {
+        version: 2,
+        deploymentId: input.deploymentId,
+        latestExecutionId: executionId,
+        manifestHash,
+        parametersHash: parameterHash,
+        executions: [...(existing?.executions || []), execution],
+    });
+};
+exports.writeParameterLock = writeParameterLock;
+const readParameterLockExecution = (taskDir, executionId) => {
+    const validatedExecutionId = (0, executionId_1.validateExecutionId)(executionId);
+    const lockPath = path_1.default.join(taskDir, "parameters.lock.json");
+    const lock = readLockFile(lockPath);
+    if (!lock) {
+        throw new Error("Missing parameters.lock.json");
+    }
+    const execution = lock.executions.find((item) => item.executionId === validatedExecutionId);
+    if (!execution) {
+        throw new Error("Unknown parameter lock executionId: " + validatedExecutionId);
+    }
+    return execution;
+};
+exports.readParameterLockExecution = readParameterLockExecution;
+const assertParameterLockExecutable = (execution, targetId, currentFingerprint) => {
+    (0, executionId_1.validateExecutionId)(execution.executionId);
+    assertSignerBinding(execution);
+    if (execution.selectedExecuteNetworks.length !== 1
+        || execution.selectedExecuteNetworks[0] !== targetId
+        || execution.target.network !== targetId) {
+        throw new Error("Parameter lock target does not match requested network " + targetId);
+    }
+    for (const key of ["manifestHash", "artifactHash", "parametersHash", "configHash"]) {
+        if (execution.releaseFingerprint[key] !== currentFingerprint[key]) {
+            throw new Error("parameter lock fingerprint changed: " + key);
+        }
+    }
+    if (execution.finalSimulation.status !== "succeeded") {
+        throw new Error("Parameter lock final simulation has not succeeded");
+    }
+    return execution;
+};
+exports.assertParameterLockExecutable = assertParameterLockExecutable;
+const recordParameterLockImplementationSalts = (taskDir, executionId, salts) => {
+    const validatedExecutionId = (0, executionId_1.validateExecutionId)(executionId);
+    const lockPath = path_1.default.join(taskDir, "parameters.lock.json");
+    const lock = readLockFile(lockPath);
+    if (!lock)
+        throw new Error("Missing parameters.lock.json");
+    const index = lock.executions.findIndex((item) => item.executionId === validatedExecutionId);
+    if (index < 0) {
+        throw new Error("Unknown parameter lock executionId: " + validatedExecutionId);
+    }
+    const existing = lock.executions[index].implementationSalts || {};
+    const next = { ...existing };
+    for (const [key, salt] of Object.entries(salts)) {
+        if (!key.trim())
+            throw new Error("implementation salt key must not be empty");
+        if (!/^0x[0-9a-fA-F]{64}$/.test(salt)) {
+            throw new Error("implementation salt must be bytes32 for " + key);
+        }
+        if (existing[key] && existing[key].toLowerCase() !== salt.toLowerCase()) {
+            throw new Error("implementation salt already locked with different content: " + key);
+        }
+        next[key] = salt;
+    }
+    lock.executions[index] = {
+        ...lock.executions[index],
+        implementationSalts: next,
+    };
+    writeLockFile(lockPath, lock);
+};
+exports.recordParameterLockImplementationSalts = recordParameterLockImplementationSalts;
+const markParameterLockSimulationSucceeded = (taskDir, executionId, result, simulatedAt, signerAddress, executionPlanHash, executionPlanPath) => {
+    const validatedExecutionId = (0, executionId_1.validateExecutionId)(executionId);
+    const lockPath = path_1.default.join(taskDir, "parameters.lock.json");
+    const lock = readLockFile(lockPath);
+    if (!lock) {
+        throw new Error("Missing parameters.lock.json");
+    }
+    const index = lock.executions.findIndex((item) => item.executionId === validatedExecutionId);
+    if (index < 0) {
+        throw new Error("Unknown parameter lock executionId: " + validatedExecutionId);
+    }
+    const execution = lock.executions[index];
+    assertSignerBinding(execution);
+    if (!isNonZeroEvmAddress(signerAddress)
+        || execution.operator.toLowerCase() !== signerAddress.toLowerCase()) {
+        throw new Error("Simulation signer does not match parameter lock operator");
+    }
+    const current = execution.finalSimulation;
+    if (current.status === "succeeded") {
+        if (current.result !== result
+            || current.simulatedAt !== simulatedAt
+            || current.executionPlanHash !== executionPlanHash
+            || current.executionPlanPath !== executionPlanPath) {
+            throw new Error("finalSimulation already succeeded with different evidence");
+        }
+        return;
+    }
+    lock.executions[index] = {
+        ...lock.executions[index],
+        finalSimulation: {
+            status: "succeeded",
+            result,
+            simulatedAt,
+            executionPlanHash,
+            executionPlanPath,
+        },
+    };
+    writeLockFile(lockPath, lock);
+};
+exports.markParameterLockSimulationSucceeded = markParameterLockSimulationSucceeded;
+//# sourceMappingURL=lock.js.map

package/dist-runtime/workflow/lib/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../runtime/workflow/lib/lock.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AACxB,qCAAyC;AACzC,+CAAoD;AACpD,uCAA0D;AAG1D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE;IACvC,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC,CAAC;AA4DF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE;IACpE,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAmB,EAAE;IAC9D,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;WACjC,KAAK,CAAC,WAAW,EAAE,KAAK,4CAA4C,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,SAA8D,EACxD,EAAE;IACR,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAc,EACd,QAAiB,EACX,EAAE;IACR,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAC7C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,SAAqF,EAC/E,EAAE;IACR,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,gBAAgB,GAAG;QACvB,SAAS;QACT,SAAS,CAAC,MAAM,CAAC,OAAO;QACxB,SAAS,CAAC,WAAW;QACrB,qBAAqB;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,QAAQ,CAAC,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAqB,EAAE;IAC7D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,qBAAqB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,iCAAmB,EACrC,SAAS,CAAC,WAAW,EACrB,mCAAmC,KAAK,eAAe,CACxD,CAAC;QACF,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,WAAW,CAAC,CAAC;QACzF,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9B,mBAAmB,CAAC,SAA8C,CAAC,CAAC;QACpE,mBAAmB,CACjB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EACvE,KAAK,CACN,CAAC;QACF,qBAAqB,CAAC,SAA8C,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAA,iCAAmB,EAC3C,KAAK,CAAC,iBAAiB,EACvB,wCAAwC,CACzC,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,iBAAiB,CAC3D,CAAC,MAAM,CAAC;IACT,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,KAAqC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,IAAuB,EAAQ,EAAE;IACxE,IAAA,sBAAa,EAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAiC,EAAE;IACvE,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gDAAgD;cAC9C,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,SAAiC,EAAU,EAAE;IAC3E,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC;IAC3F,OAAO,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,QAAkB,EAAQ,EAAE;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,KAAyB,EACzB,YAAoB,EACpB,aAAqB,EACG,EAAE;IAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;IACvE,OAAO;QACL,GAAG,cAAc;QACjB,YAAY;QACZ,aAAa;QACb,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,cAAc;KACvB,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,kBAAkB,GAAG,CAAC,KAAyB,EAAQ,EAAE;IACpE,MAAM,WAAW,GAAG,IAAA,iCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3D,oBAAoB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IAEhG,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,KAAK,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,qDAAqD,GAAG,WAAW,CAAC,CAAC;QACvF,CAAC;QACD,OAAO;IACT,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE;QACtB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,WAAW;QAC9B,YAAY;QACZ,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC;KAC7B,CAAC,CAAC;AACjC,CAAC,CAAC;AAhCW,QAAA,kBAAkB,sBAgC7B;AAEK,MAAM,0BAA0B,GAAG,CACxC,OAAe,EACf,WAAmB,EACK,EAAE;IAC1B,MAAM,oBAAoB,GAAG,IAAA,iCAAmB,EAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,oBAAoB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAfW,QAAA,0BAA0B,8BAerC;AAEK,MAAM,6BAA6B,GAAG,CAC3C,SAAiC,EACjC,QAAgB,EAChB,kBAAsC,EACd,EAAE;IAC1B,IAAA,iCAAmB,EAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,IACE,SAAS,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC;WAC3C,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,QAAQ;WACjD,SAAS,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,EACxC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,QAAQ,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,CAAU,EAAE,CAAC;QAC5F,IAAI,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAvBW,QAAA,6BAA6B,iCAuBxC;AAEK,MAAM,sCAAsC,GAAG,CACpD,OAAe,EACf,WAAmB,EACnB,KAA6B,EACvB,EAAE;IACR,MAAM,oBAAoB,GAAG,IAAA,iCAAmB,EAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAC;IAC7F,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,oBAAoB,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;QACvB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACzB,mBAAmB,EAAE,IAAI;KAC1B,CAAC;IACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC;AA9BW,QAAA,sCAAsC,0CA8BjD;AAEK,MAAM,oCAAoC,GAAG,CAClD,OAAe,EACf,WAAmB,EACnB,MAAc,EACd,WAAmB,EACnB,aAAqB,EACrB,iBAAyB,EACzB,iBAAyB,EACnB,EAAE;IACR,MAAM,oBAAoB,GAAG,IAAA,iCAAmB,EAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAC;IAC7F,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,oBAAoB,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/B,IACE,CAAC,mBAAmB,CAAC,aAAa,CAAC;WAChC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,EACnE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;eACtB,OAAO,CAAC,WAAW,KAAK,WAAW;eACnC,OAAO,CAAC,iBAAiB,KAAK,iBAAiB;eAC/C,OAAO,CAAC,iBAAiB,KAAK,iBAAiB,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;QACvB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACzB,eAAe,EAAE;YACf,MAAM,EAAE,WAAW;YACnB,MAAM;YACN,WAAW;YACX,iBAAiB;YACjB,iBAAiB;SAClB;KACF,CAAC;IACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC;AArDW,QAAA,oCAAoC,wCAqD/C"}