gate-evm-tools 1.0.26 → 1.0.28

package/dist-runtime/workflow/lib/checkCode/finalize.js

@@ -0,0 +1,174 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDevelopmentCheckCodeFinalizeCli = exports.finalizeDevelopmentCheckCode = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const checkCodeRunner_1 = require("../checkCodeRunner");
+const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/;
+const safeId = (value, label) => {
+    if (!SAFE_ID.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+};
+const readObject = (filePath, label) => {
+    const value = JSON.parse(fs_1.default.readFileSync(filePath, "utf8"));
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+};
+const object = (value) => (value && typeof value === "object" && !Array.isArray(value)
+    ? value
+    : {});
+const writeAtomic = (filePath, contents) => {
+    fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+    const temporary = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        fs_1.default.writeFileSync(temporary, contents);
+        fs_1.default.renameSync(temporary, filePath);
+    }
+    catch (error) {
+        if (fs_1.default.existsSync(temporary))
+            fs_1.default.unlinkSync(temporary);
+        throw error;
+    }
+};
+const writeJsonAtomic = (filePath, value) => {
+    writeAtomic(filePath, JSON.stringify(value, null, 2) + "\n");
+};
+const finalizeDevelopmentCheckCode = (input) => {
+    const deploymentId = safeId(input.deploymentId, "deploymentId");
+    const sourceSuperTaskId = safeId(input.sourceSuperTaskId, "sourceSuperTaskId");
+    const developmentNetwork = safeId(input.developmentNetwork, "developmentNetwork");
+    const executionId = safeId(input.executionId, "executionId");
+    const runId = safeId(input.runId, "CheckCode runId");
+    const updatedAt = (input.now || (() => new Date().toISOString()))();
+    if (!Number.isFinite(Date.parse(updatedAt)))
+        throw new Error("Finalize timestamp is invalid");
+    const taskBase = `scripts/tasks/${deploymentId}`;
+    const reportPath = `scripts/checkcode/runs/${runId}/report.json`;
+    const statusPath = `${taskBase}/status.json`;
+    const handoffPath = `${taskBase}/handoff.json`;
+    const documentPath = `${taskBase}/docs/checkcode-report.md`;
+    const absolute = (relative) => path_1.default.join(input.root, ...relative.split("/"));
+    const report = (0, checkCodeRunner_1.validateCheckCodeRunReport)(readObject(absolute(reportPath), "CheckCode report"));
+    if (report.status !== "succeeded"
+        || report.runId !== runId
+        || report.reportPath !== reportPath) {
+        throw new Error("Development CheckCode requires the selected canonical succeeded report");
+    }
+    const status = readObject(absolute(statusPath), "status.json");
+    const phases = object(status.phases);
+    const networks = object(status.networks);
+    const network = object(networks[developmentNetwork]);
+    if (status.sourceSuperTaskId !== sourceSuperTaskId
+        || status.developmentNetwork !== developmentNetwork
+        || network.registryExecutionId !== executionId
+        || network.deployStatus !== "deployed_pending_code_audit") {
+        throw new Error("Development CheckCode status identity is invalid");
+    }
+    const nextStatus = {
+        ...status,
+        status: "code_checked",
+        phases: {
+            ...phases,
+            checkCode: {
+                networks: [developmentNetwork],
+                status: "succeeded",
+                report: reportPath,
+            },
+        },
+        networks: {
+            ...networks,
+            [developmentNetwork]: {
+                ...network,
+                deployStatus: "deployed_pending_code_audit",
+                checkCodeStatus: "succeeded",
+                checkCodeRunId: runId,
+                checkCodeReportPath: reportPath,
+                updatedAt,
+            },
+        },
+        updatedAt,
+    };
+    const existingHandoff = readObject(absolute(handoffPath), "handoff.json");
+    const { checkCodeReport: _legacyCheckCodeReport, ...handoff } = existingHandoff;
+    const nextHandoff = {
+        ...handoff,
+        stageKind: "check_code",
+        status: "code_checked",
+        sourceSuperTaskId,
+        deploymentId,
+        developmentNetwork,
+        executionId,
+        networks: [developmentNetwork],
+        development_deployed: true,
+        checkCode: {
+            runId,
+            reportPath,
+            artifactHash: report.artifactHash,
+        },
+        updatedAt,
+    };
+    const lines = [
+        "# CheckCode Report",
+        "",
+        `sourceSuperTaskId: ${sourceSuperTaskId}`,
+        `deploymentId: ${deploymentId}`,
+        `developmentNetwork: ${developmentNetwork}`,
+        `executionId: ${executionId}`,
+        `runId: ${runId}`,
+        `artifactHash: ${report.artifactHash}`,
+        `reportPath: ${reportPath}`,
+        `status: ${report.status}`,
+        `startedAt: ${report.startedAt}`,
+        `completedAt: ${report.completedAt}`,
+        "",
+        "## Commands",
+        ...report.commands.map((command) => (`- ${command.command} ${command.args.join(" ")} — exit ${command.status}`)),
+        "",
+    ];
+    writeJsonAtomic(absolute(statusPath), nextStatus);
+    writeJsonAtomic(absolute(handoffPath), nextHandoff);
+    writeAtomic(absolute(documentPath), lines.join("\n"));
+    return { reportPath, handoffPath, statusPath, documentPath };
+};
+exports.finalizeDevelopmentCheckCode = finalizeDevelopmentCheckCode;
+const runDevelopmentCheckCodeFinalizeCli = (argv, defaultRoot = process.cwd()) => {
+    const values = new Map();
+    for (let index = 0; index < argv.length; index += 1) {
+        const item = argv[index];
+        if (!item.startsWith("--"))
+            continue;
+        const equalAt = item.indexOf("=");
+        const key = item.slice(2, equalAt > 2 ? equalAt : undefined);
+        const next = argv[index + 1];
+        const value = equalAt > 2 ? item.slice(equalAt + 1) : next;
+        if (!value || value.startsWith("--"))
+            throw new Error(`--${key} requires a value`);
+        if (values.has(key))
+            throw new Error(`--${key} may be provided only once`);
+        values.set(key, value.trim());
+        if (equalAt < 0)
+            index += 1;
+    }
+    const required = (key) => {
+        const value = values.get(key);
+        if (!value)
+            throw new Error(`--${key} is required`);
+        return value;
+    };
+    return (0, exports.finalizeDevelopmentCheckCode)({
+        root: path_1.default.resolve(values.get("root") || defaultRoot),
+        deploymentId: required("deploymentId"),
+        sourceSuperTaskId: required("sourceSuperTaskId"),
+        developmentNetwork: required("developmentNetwork"),
+        executionId: required("executionId"),
+        runId: required("runId"),
+    });
+};
+exports.runDevelopmentCheckCodeFinalizeCli = runDevelopmentCheckCodeFinalizeCli;
+//# sourceMappingURL=finalize.js.map

package/dist-runtime/workflow/lib/checkCode/finalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize.js","sourceRoot":"","sources":["../../../../runtime/workflow/lib/checkCode/finalize.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,wDAAgE;AAmBhE,MAAM,OAAO,GAAG,mCAAmC,CAAC;AAEpD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,KAAa,EAA2B,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CAAC,CAC1D,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACzD,CAAC,CAAC,KAAgC;IAClC,CAAC,CAAC,EAAE,CACP,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAQ,EAAE;IAC/D,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACjE,IAAI,CAAC;QACH,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtC,YAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,KAAc,EAAQ,EAAE;IACjE,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEK,MAAM,4BAA4B,GAAG,CAC1C,KAAwC,EACJ,EAAE;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC/E,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAG,iBAAiB,YAAY,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,0BAA0B,KAAK,cAAc,CAAC;IACjE,MAAM,UAAU,GAAG,GAAG,QAAQ,cAAc,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,QAAQ,eAAe,CAAC;IAC/C,MAAM,YAAY,GAAG,GAAG,QAAQ,2BAA2B,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAA,4CAA0B,EAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChG,IACE,MAAM,CAAC,MAAM,KAAK,WAAW;WAC1B,MAAM,CAAC,KAAK,KAAK,KAAK;WACtB,MAAM,CAAC,UAAU,KAAK,UAAU,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrD,IACE,MAAM,CAAC,iBAAiB,KAAK,iBAAiB;WAC3C,MAAM,CAAC,kBAAkB,KAAK,kBAAkB;WAChD,OAAO,CAAC,mBAAmB,KAAK,WAAW;WAC3C,OAAO,CAAC,YAAY,KAAK,6BAA6B,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM;QACT,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE;YACN,GAAG,MAAM;YACT,SAAS,EAAE;gBACT,QAAQ,EAAE,CAAC,kBAAkB,CAAC;gBAC9B,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,UAAU;aACnB;SACF;QACD,QAAQ,EAAE;YACR,GAAG,QAAQ;YACX,CAAC,kBAAkB,CAAC,EAAE;gBACpB,GAAG,OAAO;gBACV,YAAY,EAAE,6BAA6B;gBAC3C,eAAe,EAAE,WAAW;gBAC5B,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,UAAU;gBAC/B,SAAS;aACV;SACF;QACD,SAAS;KACV,CAAC;IAEF,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,OAAO,EAAE,GAAG,eAAe,CAAC;IAChF,MAAM,WAAW,GAAG;QAClB,GAAG,OAAO;QACV,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE,cAAc;QACtB,iBAAiB;QACjB,YAAY;QACZ,kBAAkB;QAClB,WAAW;QACX,QAAQ,EAAE,CAAC,kBAAkB,CAAC;QAC9B,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE;YACT,KAAK;YACL,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC;QACD,SAAS;KACV,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,oBAAoB;QACpB,EAAE;QACF,sBAAsB,iBAAiB,EAAE;QACzC,iBAAiB,YAAY,EAAE;QAC/B,uBAAuB,kBAAkB,EAAE;QAC3C,gBAAgB,WAAW,EAAE;QAC7B,UAAU,KAAK,EAAE;QACjB,iBAAiB,MAAM,CAAC,YAAY,EAAE;QACtC,eAAe,UAAU,EAAE;QAC3B,WAAW,MAAM,CAAC,MAAM,EAAE;QAC1B,cAAc,MAAM,CAAC,SAAS,EAAE;QAChC,gBAAgB,MAAM,CAAC,WAAW,EAAE;QACpC,EAAE;QACF,aAAa;QACb,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAClC,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAC1E,CAAC;QACF,EAAE;KACH,CAAC;IACF,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAClD,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IACpD,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAC/D,CAAC,CAAC;AA3GW,QAAA,4BAA4B,gCA2GvC;AAEK,MAAM,kCAAkC,GAAG,CAChD,IAAc,EACd,cAAsB,OAAO,CAAC,GAAG,EAAE,EACC,EAAE;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,mBAAmB,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,4BAA4B,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAA,oCAA4B,EAAC;QAClC,IAAI,EAAE,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC;QACrD,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC;QACtC,iBAAiB,EAAE,QAAQ,CAAC,mBAAmB,CAAC;QAChD,kBAAkB,EAAE,QAAQ,CAAC,oBAAoB,CAAC;QAClD,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC;QACpC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AA9BW,QAAA,kCAAkC,sCA8B7C"}

package/dist-runtime/workflow/lib/checkCode/index.d.ts

@@ -0,0 +1,3 @@
+import { type CheckCodeRunReport } from "../checkCodeRunner";
+export { parseCheckCodeOptions } from "./args";
+export declare const runCheckCodeWorkflow: (argv?: string[], defaultRoot?: string) => Promise<CheckCodeRunReport>;

package/dist-runtime/workflow/lib/checkCode/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCheckCodeWorkflow = exports.parseCheckCodeOptions = void 0;
+const checkCodeRunner_1 = require("../checkCodeRunner");
+const args_1 = require("./args");
+const dependencies_1 = require("./dependencies");
+var args_2 = require("./args");
+Object.defineProperty(exports, "parseCheckCodeOptions", { enumerable: true, get: function () { return args_2.parseCheckCodeOptions; } });
+const runCheckCodeWorkflow = async (argv = process.argv.slice(2), defaultRoot = process.cwd()) => {
+    const options = (0, args_1.parseCheckCodeOptions)(argv, defaultRoot);
+    const runtime = (0, dependencies_1.createCheckCodeDependencies)(options.root);
+    try {
+        return await (0, checkCodeRunner_1.runCheckCode)(options, runtime.dependencies);
+    }
+    finally {
+        runtime.dispose();
+    }
+};
+exports.runCheckCodeWorkflow = runCheckCodeWorkflow;
+//# sourceMappingURL=index.js.map

package/dist-runtime/workflow/lib/checkCode/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../runtime/workflow/lib/checkCode/index.ts"],"names":[],"mappings":";;;AAAA,wDAA2E;AAC3E,iCAA+C;AAC/C,iDAA6D;AAE7D,+BAA+C;AAAtC,6GAAA,qBAAqB,OAAA;AAEvB,MAAM,oBAAoB,GAAG,KAAK,EACvC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACtC,cAAsB,OAAO,CAAC,GAAG,EAAE,EACN,EAAE;IAC/B,MAAM,OAAO,GAAG,IAAA,4BAAqB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAA,0CAA2B,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,8BAAY,EAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B"}

package/dist-runtime/workflow/lib/checkCode/plan.d.ts

@@ -0,0 +1,22 @@
+export interface CheckCodePlanTarget {
+    network: string;
+    manifestDir: string;
+    contracts: string[];
+}
+export interface CheckCodePlanInput {
+    root: string;
+    runId: string;
+    artifactHash: string;
+    deploymentId?: string;
+    sourceSuperTaskId?: string;
+    developmentNetwork?: string;
+    executionId?: string;
+    targets: CheckCodePlanTarget[];
+}
+export interface CheckCodePlanResult {
+    planPath: string;
+    runId: string;
+    artifactHash: string;
+}
+export declare const prepareCheckCodePlan: (input: CheckCodePlanInput) => CheckCodePlanResult;
+export declare const runCheckCodePlanCli: (argv: string[], defaultRoot?: string) => CheckCodePlanResult;

package/dist-runtime/workflow/lib/checkCode/plan.js

@@ -0,0 +1,145 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCheckCodePlanCli = exports.prepareCheckCodePlan = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/;
+const HASH = /^[0-9a-f]{64}$/;
+const MANIFEST_DIR = /^\.openzeppelin(?:\.[a-z0-9][a-z0-9-]*)?$/;
+const safeId = (value, label) => {
+    if (!SAFE_ID.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+};
+const superTaskIdentity = (input) => {
+    const values = [
+        input.deploymentId,
+        input.sourceSuperTaskId,
+        input.developmentNetwork,
+        input.executionId,
+    ];
+    if (values.every(Boolean))
+        return true;
+    if (values.some(Boolean)) {
+        throw new Error("SuperTask CheckCode plan requires deploymentId, sourceSuperTaskId, developmentNetwork, and executionId together");
+    }
+    return false;
+};
+const writeTextAtomic = (filePath, contents) => {
+    fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+    const temporary = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        fs_1.default.writeFileSync(temporary, contents);
+        fs_1.default.renameSync(temporary, filePath);
+    }
+    catch (error) {
+        if (fs_1.default.existsSync(temporary))
+            fs_1.default.unlinkSync(temporary);
+        throw error;
+    }
+};
+const prepareCheckCodePlan = (input) => {
+    const runId = safeId(input.runId, "CheckCode runId");
+    if (!HASH.test(input.artifactHash))
+        throw new Error("CheckCode artifactHash is invalid");
+    const isSuperTask = superTaskIdentity(input);
+    const targets = [...input.targets]
+        .map((target) => ({
+        network: safeId(target.network, "CheckCode target network"),
+        manifestDir: target.manifestDir,
+        contracts: [...new Set(target.contracts.map((item) => item.trim()).filter(Boolean))].sort(),
+    }))
+        .sort((left, right) => left.network.localeCompare(right.network));
+    if (targets.length === 0)
+        throw new Error("CheckCode plan requires at least one target");
+    if (new Set(targets.map((target) => target.network)).size !== targets.length) {
+        throw new Error("CheckCode plan target networks must be unique");
+    }
+    for (const target of targets) {
+        if (!MANIFEST_DIR.test(target.manifestDir)) {
+            throw new Error(`CheckCode manifestDir is invalid for ${target.network}`);
+        }
+    }
+    if (isSuperTask && (targets.length !== 1 || targets[0].network !== input.developmentNetwork)) {
+        throw new Error("SuperTask CheckCode plan must target only developmentNetwork");
+    }
+    const relativePath = isSuperTask
+        ? `scripts/tasks/${safeId(input.deploymentId, "deploymentId")}/docs/checkcode-plan.md`
+        : "docs/checkcode-plan.md";
+    const lines = [
+        "# CheckCode Plan",
+        "",
+        `runId: ${runId}`,
+        `artifactHash: ${input.artifactHash}`,
+        ...(isSuperTask ? [
+            `deploymentId: ${safeId(input.deploymentId, "deploymentId")}`,
+            `sourceSuperTaskId: ${safeId(input.sourceSuperTaskId, "sourceSuperTaskId")}`,
+            `developmentNetwork: ${safeId(input.developmentNetwork, "developmentNetwork")}`,
+            `executionId: ${safeId(input.executionId, "executionId")}`,
+        ] : []),
+        "",
+        "## Targets",
+        ...targets.flatMap((target) => [
+            `- network: ${target.network}`,
+            `  manifestDir: ${target.manifestDir}`,
+            `  contracts: ${target.contracts.join(", ") || "<all>"}`,
+        ]),
+        "",
+    ];
+    writeTextAtomic(path_1.default.join(input.root, ...relativePath.split("/")), lines.join("\n"));
+    return { planPath: relativePath, runId, artifactHash: input.artifactHash };
+};
+exports.prepareCheckCodePlan = prepareCheckCodePlan;
+const runCheckCodePlanCli = (argv, defaultRoot = process.cwd()) => {
+    const values = new Map();
+    for (let index = 0; index < argv.length; index += 1) {
+        const item = argv[index];
+        if (!item.startsWith("--"))
+            continue;
+        const equalAt = item.indexOf("=");
+        const key = item.slice(2, equalAt > 2 ? equalAt : undefined);
+        const next = argv[index + 1];
+        const value = equalAt > 2 ? item.slice(equalAt + 1) : next;
+        if (!value || value.startsWith("--"))
+            throw new Error(`--${key} requires a value`);
+        if (equalAt < 0)
+            index += 1;
+        const current = values.get(key) || [];
+        current.push(value);
+        values.set(key, current);
+    }
+    const one = (key, required = false) => {
+        const items = values.get(key) || [];
+        if (items.length > 1)
+            throw new Error(`--${key} may be provided only once`);
+        if (required && !items[0]?.trim())
+            throw new Error(`--${key} is required`);
+        return items[0]?.trim() || undefined;
+    };
+    const developmentNetwork = one("developmentNetwork");
+    const network = one("network") || developmentNetwork;
+    if (!network)
+        throw new Error("--network or --developmentNetwork is required");
+    return (0, exports.prepareCheckCodePlan)({
+        root: path_1.default.resolve(one("root") || defaultRoot),
+        runId: one("runId", true),
+        artifactHash: one("artifactHash", true),
+        deploymentId: one("deploymentId"),
+        sourceSuperTaskId: one("sourceSuperTaskId"),
+        developmentNetwork,
+        executionId: one("executionId"),
+        targets: [{
+                network,
+                manifestDir: one("manifestDir", true),
+                contracts: (values.get("contract") || [])
+                    .flatMap((item) => item.split(","))
+                    .map((item) => item.trim())
+                    .filter(Boolean),
+            }],
+    });
+};
+exports.runCheckCodePlanCli = runCheckCodePlanCli;
+//# sourceMappingURL=plan.js.map

package/dist-runtime/workflow/lib/checkCode/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../runtime/workflow/lib/checkCode/plan.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAyBxB,MAAM,OAAO,GAAG,mCAAmC,CAAC;AACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,YAAY,GAAG,2CAA2C,CAAC;AAEjE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAyB,EAAW,EAAE;IAC/D,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,WAAW;KAClB,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAQ,EAAE;IACnE,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACjE,IAAI,CAAC;QACH,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtC,YAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,oBAAoB,GAAG,CAClC,KAAyB,EACJ,EAAE;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;SAC/B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KAC5F,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,WAAW,IAAI,CACjB,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,kBAAkB,CACxE,EAAE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,YAAY,GAAG,WAAW;QAC9B,CAAC,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,YAAa,EAAE,cAAc,CAAC,yBAAyB;QACvF,CAAC,CAAC,wBAAwB,CAAC;IAC7B,MAAM,KAAK,GAAG;QACZ,kBAAkB;QAClB,EAAE;QACF,UAAU,KAAK,EAAE;QACjB,iBAAiB,KAAK,CAAC,YAAY,EAAE;QACrC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAChB,iBAAiB,MAAM,CAAC,KAAK,CAAC,YAAa,EAAE,cAAc,CAAC,EAAE;YAC9D,sBAAsB,MAAM,CAAC,KAAK,CAAC,iBAAkB,EAAE,mBAAmB,CAAC,EAAE;YAC7E,uBAAuB,MAAM,CAAC,KAAK,CAAC,kBAAmB,EAAE,oBAAoB,CAAC,EAAE;YAChF,gBAAgB,MAAM,CAAC,KAAK,CAAC,WAAY,EAAE,aAAa,CAAC,EAAE;SAC5D,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,EAAE;QACF,YAAY;QACZ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7B,cAAc,MAAM,CAAC,OAAO,EAAE;YAC9B,kBAAkB,MAAM,CAAC,WAAW,EAAE;YACtC,gBAAgB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE;SACzD,CAAC;QACF,EAAE;KACH,CAAC;IACF,eAAe,CAAC,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAC7E,CAAC,CAAC;AArDW,QAAA,oBAAoB,wBAqD/B;AAEK,MAAM,mBAAmB,GAAG,CACjC,IAAc,EACd,cAAsB,OAAO,CAAC,GAAG,EAAE,EACd,EAAE;IACvB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,mBAAmB,CAAC,CAAC;QACnF,IAAI,OAAO,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,QAAQ,GAAG,KAAK,EAAsB,EAAE;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,4BAA4B,CAAC,CAAC;QAC5E,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/E,OAAO,IAAA,4BAAoB,EAAC;QAC1B,IAAI,EAAE,cAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC;QAC9C,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAE;QAC1B,YAAY,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAE;QACxC,YAAY,EAAE,GAAG,CAAC,cAAc,CAAC;QACjC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,CAAC;QAC3C,kBAAkB;QAClB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;QAC/B,OAAO,EAAE,CAAC;gBACR,OAAO;gBACP,WAAW,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,CAAE;gBACtC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;qBACtC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;qBAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;qBAC1B,MAAM,CAAC,OAAO,CAAC;aACnB,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AA5CW,QAAA,mBAAmB,uBA4C9B"}

package/dist-runtime/workflow/lib/checkCodeReport.d.ts

@@ -0,0 +1,25 @@
+export interface CheckCodeEvidenceEntry {
+    status: "passed";
+    network: string;
+    scheme: "evm" | "zksync-eravm";
+    instanceId: string;
+    contractInfoKey: string;
+    address: string;
+    artifactHash: string;
+    runId: string;
+    checkedAt: string;
+}
+export interface CheckCodeEvidenceIndex {
+    version: 1;
+    entries: Record<string, CheckCodeEvidenceEntry>;
+}
+export interface ReusableDeploymentExpectation {
+    network: string;
+    scheme: "evm" | "zksync-eravm";
+    instanceId: string;
+    address: string;
+    artifactHash: string;
+}
+export declare const loadCheckCodeEvidenceIndex: (root: string) => CheckCodeEvidenceIndex;
+export declare const assertReusableDeployment: (root: string, expected: ReusableDeploymentExpectation) => CheckCodeEvidenceEntry;
+export declare const updateCheckCodeEvidenceIndex: (root: string, evidenceEntries: CheckCodeEvidenceEntry[]) => CheckCodeEvidenceIndex;

package/dist-runtime/workflow/lib/checkCodeReport.js

@@ -0,0 +1,102 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateCheckCodeEvidenceIndex = exports.assertReusableDeployment = exports.loadCheckCodeEvidenceIndex = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const isRecord = (value) => {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+};
+const evidenceIndexPath = (root) => {
+    return path_1.default.join(root, "scripts", "checkcode", "index.json");
+};
+const writeJsonAtomic = (filePath, value) => {
+    fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
+    const temporary = filePath + "." + process.pid + "." + Date.now() + ".tmp";
+    try {
+        fs_1.default.writeFileSync(temporary, JSON.stringify(value, null, 2) + "\n");
+        fs_1.default.renameSync(temporary, filePath);
+    }
+    catch (error) {
+        if (fs_1.default.existsSync(temporary))
+            fs_1.default.unlinkSync(temporary);
+        throw error;
+    }
+};
+const loadCheckCodeEvidenceIndex = (root) => {
+    const filePath = evidenceIndexPath(root);
+    if (!fs_1.default.existsSync(filePath)) {
+        throw new Error("Existing deployment has no passed CheckCode evidence index");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(fs_1.default.readFileSync(filePath, "utf8"));
+    }
+    catch (error) {
+        throw new Error("CheckCode evidence index must contain valid JSON: "
+            + (error instanceof Error ? error.message : String(error)));
+    }
+    if (!isRecord(parsed) || parsed.version !== 1 || !isRecord(parsed.entries)) {
+        throw new Error("CheckCode evidence index must contain version 1 entries");
+    }
+    const entries = {};
+    for (const [key, entryValue] of Object.entries(parsed.entries)) {
+        if (!isRecord(entryValue) || entryValue.status !== "passed") {
+            throw new Error("CheckCode evidence entry " + key + " must have passed status");
+        }
+        for (const field of [
+            "network",
+            "scheme",
+            "instanceId",
+            "contractInfoKey",
+            "address",
+            "artifactHash",
+            "runId",
+            "checkedAt",
+        ]) {
+            if (typeof entryValue[field] !== "string" || !String(entryValue[field]).trim()) {
+                throw new Error("CheckCode evidence entry " + key + "." + field + " is required");
+            }
+        }
+        entries[key] = entryValue;
+    }
+    return { version: 1, entries };
+};
+exports.loadCheckCodeEvidenceIndex = loadCheckCodeEvidenceIndex;
+const assertReusableDeployment = (root, expected) => {
+    const index = (0, exports.loadCheckCodeEvidenceIndex)(root);
+    const evidence = Object.values(index.entries).find((entry) => (entry.network === expected.network && entry.instanceId === expected.instanceId));
+    if (!evidence) {
+        throw new Error("Existing deployment " + expected.network + "." + expected.instanceId
+            + " has no passed CheckCode evidence");
+    }
+    if (evidence.address.toLowerCase() !== expected.address.toLowerCase()) {
+        throw new Error("CheckCode address does not match the existing deployment");
+    }
+    if (evidence.scheme !== expected.scheme) {
+        throw new Error("CheckCode scheme does not match the existing deployment");
+    }
+    if (evidence.artifactHash !== expected.artifactHash) {
+        throw new Error("CheckCode artifactHash does not match the execution artifactHash");
+    }
+    return evidence;
+};
+exports.assertReusableDeployment = assertReusableDeployment;
+const updateCheckCodeEvidenceIndex = (root, evidenceEntries) => {
+    const filePath = evidenceIndexPath(root);
+    let current = { version: 1, entries: {} };
+    if (fs_1.default.existsSync(filePath)) {
+        current = (0, exports.loadCheckCodeEvidenceIndex)(root);
+    }
+    const entries = { ...current.entries };
+    for (const evidence of evidenceEntries) {
+        entries[evidence.network + "." + evidence.instanceId] = evidence;
+    }
+    const next = { version: 1, entries };
+    writeJsonAtomic(filePath, next);
+    return next;
+};
+exports.updateCheckCodeEvidenceIndex = updateCheckCodeEvidenceIndex;
+//# sourceMappingURL=checkCodeReport.js.map

package/dist-runtime/workflow/lib/checkCodeReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkCodeReport.js","sourceRoot":"","sources":["../../../runtime/workflow/lib/checkCodeReport.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AA2BxB,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE;IACpE,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE;IACjD,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,KAAc,EAAQ,EAAE;IACjE,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC3E,IAAI,CAAC;QACH,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACnE,YAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,0BAA0B,GAAG,CAAC,IAAY,EAA0B,EAAE;IACjF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,oDAAoD;cAClD,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,GAAG,GAAG,0BAA0B,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,KAAK,IAAI;YAClB,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,iBAAiB;YACjB,SAAS;YACT,cAAc;YACd,OAAO;YACP,WAAW;SACH,EAAE,CAAC;YACX,IAAI,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,GAAG,GAAG,GAAG,GAAG,KAAK,GAAG,cAAc,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,UAA+C,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC,CAAC;AAxCW,QAAA,0BAA0B,8BAwCrC;AAEK,MAAM,wBAAwB,GAAG,CACtC,IAAY,EACZ,QAAuC,EACf,EAAE;IAC1B,MAAM,KAAK,GAAG,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC5D,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC/E,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,sBAAsB,GAAG,QAAQ,CAAC,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC,UAAU;cACnE,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAxBW,QAAA,wBAAwB,4BAwBnC;AAEK,MAAM,4BAA4B,GAAG,CAC1C,IAAY,EACZ,eAAyC,EACjB,EAAE;IAC1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClE,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,OAAO,EAAE,CAAC;IAC9C,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAhBW,QAAA,4BAA4B,gCAgBvC"}

package/dist-runtime/workflow/lib/checkCodeRunner.d.ts

@@ -0,0 +1,87 @@
+import type { DeploymentInfo } from "./deploymentInfo";
+export type ManifestSyncStatus = "not_required" | "already_current" | "synced" | "proxy_kind_unknown" | "failed";
+export type CheckCodeStatus = "compile_failed" | "check_failed" | "sync_partial" | "succeeded";
+export type DeploymentScheme = "evm" | "zksync-eravm";
+export type EffectiveContractInfo = Record<string, Record<string, string>>;
+export interface CheckCodeOptions {
+    root: string;
+    runId: string;
+    artifactHash: string;
+    networks?: string[];
+    contracts?: string[];
+    deploymentAudit?: {
+        deploymentId: string;
+        registryCommitId: string;
+    };
+}
+export interface CheckCodeDeploymentAuditEvidence {
+    deploymentId: string;
+    registryCommitId: string;
+    registryCommitPath: string;
+    registryCommitHash: string;
+    selections: Array<{
+        network: string;
+        executionId: string;
+    }>;
+}
+export interface CommandResult {
+    status: number;
+    error?: string;
+}
+export interface CommandEvidence {
+    command: string;
+    args: string[];
+    status: number;
+    network: string;
+    scheme: DeploymentScheme;
+    manifestDir?: string;
+    manifestFile?: string;
+    error?: string;
+}
+export interface CheckCodeEntry {
+    network: string;
+    scheme: DeploymentScheme;
+    instanceId: string;
+    contractInfoKey: string;
+    actualContract: string;
+    address: string;
+    proxyKind?: string;
+    implementationAddress?: string;
+    manifestDir: string;
+    manifestFile: string;
+    syncStatus: ManifestSyncStatus;
+    beforeHash: string;
+    afterHash: string;
+}
+export interface CheckCodeRunReport {
+    version: 1;
+    runId: string;
+    status: CheckCodeStatus;
+    artifactHash: string;
+    sourceContractInfoPath: "contractInfo.json";
+    deploymentAudit?: CheckCodeDeploymentAuditEvidence;
+    effectiveContractInfoPath?: string;
+    rawCheckReportPath?: string;
+    entries: CheckCodeEntry[];
+    commands: CommandEvidence[];
+    startedAt: string;
+    completedAt: string;
+    error?: string;
+    reportPath: string;
+}
+export interface CheckCodeDependencies {
+    runCommand: (command: string, args: string[], options?: {
+        cwd: string;
+        env?: NodeJS.ProcessEnv;
+    }) => Promise<CommandResult> | CommandResult;
+    loadContractInfo: () => EffectiveContractInfo;
+    loadDeploymentInfo: () => DeploymentInfo;
+    resolveScheme: (network: string) => DeploymentScheme;
+    resolveManifestDir: (network: string) => string;
+    resolveManifestFile: (network: string, manifestDir: string) => Promise<string> | string;
+    getImplementation: (network: string, address: string) => Promise<string | undefined>;
+    getStorageLayoutHash: (contractName: string) => Promise<string>;
+    now?: () => string;
+}
+export declare const validateCheckCodeRunReport: (value: unknown) => CheckCodeRunReport;
+export declare const runCheckCode: (options: CheckCodeOptions, dependencies: CheckCodeDependencies) => Promise<CheckCodeRunReport>;