gate-evm-tools 1.0.27 → 1.0.31

package/dist-runtime/delivery/plan.js

@@ -0,0 +1,209 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDeliveryPlanHeader = parseDeliveryPlanHeader;
+exports.sealDeliveryPlan = sealDeliveryPlan;
+exports.parseDeliveryPlan = parseDeliveryPlan;
+/** Pure internal canonical plan. This does not establish release readiness or verify project files. */
+const transactionPlanner_1 = require("../workflow/lib/transactionPlanner");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const identities_1 = require("./identities");
+const closure_format_1 = require("./closure-format");
+const custom_format_1 = require("./custom-format");
+const policy_1 = require("./policy");
+const bindings_1 = require("./bindings");
+const headerKeys = [
+    "version",
+    "schema",
+    "deploymentId",
+    "environment",
+    "target",
+    "chainId",
+    "executionId",
+    "operator",
+    "sourceDefinitionHash",
+    "inputsHash",
+    "runtimeIdentity",
+];
+const bodyKeys = [
+    ...headerKeys,
+    "transactions",
+    "deploymentBindings",
+    "verificationBindings",
+    "derivedBindings",
+    "operationBindings",
+    "customBindings",
+    "customInputClosure",
+    "transactionBindings",
+];
+function parseDeliveryPlanHeader(raw) {
+    const value = (0, canonicalData_1.exactObject)(raw, headerKeys, "delivery plan header");
+    if (value.version !== 1 || value.schema !== "gate-delivery-plan")
+        throw new Error("Unsupported delivery plan schema/version");
+    if (value.environment !== "dev" && value.environment !== "prod")
+        throw new Error("delivery environment must be dev or prod");
+    (0, policy_1.validateNetworkAlias)(value.target, "target", false);
+    if (typeof value.chainId !== "string" ||
+        !/^[1-9][0-9]*$/.test(value.chainId) ||
+        BigInt(value.chainId) >= 2n ** 256n)
+        throw new Error("chainId must be a positive uint256 decimal string");
+    if (typeof value.operator !== "string" ||
+        !/^0x[\da-fA-F]{40}$/.test(value.operator) ||
+        /^0x0{40}$/.test(value.operator))
+        throw new Error("Invalid operator");
+    const runtime = (0, canonicalData_1.exactObject)(value.runtimeIdentity, ["version", "digest"], "runtimeIdentity");
+    return (0, canonicalData_1.deepFreeze)({
+        version: 1,
+        schema: "gate-delivery-plan",
+        deploymentId: (0, canonicalData_1.nonempty)(value.deploymentId, "deploymentId"),
+        environment: value.environment,
+        target: value.target,
+        chainId: value.chainId,
+        executionId: (0, canonicalData_1.nonempty)(value.executionId, "executionId"),
+        operator: value.operator.toLowerCase(),
+        sourceDefinitionHash: (0, canonicalData_1.digest)(value.sourceDefinitionHash, "sourceDefinitionHash"),
+        inputsHash: (0, canonicalData_1.digest)(value.inputsHash, "inputsHash"),
+        runtimeIdentity: {
+            version: (0, canonicalData_1.nonempty)(runtime.version, "runtime version"),
+            digest: (0, canonicalData_1.digest)(runtime.digest, "runtime"),
+        },
+    });
+}
+function strings(raw, label) {
+    if (!Array.isArray(raw))
+        throw new Error(`${label} must be an array`);
+    const list = raw.map((v) => (0, canonicalData_1.nonempty)(v, label));
+    if (new Set(list).size !== list.length)
+        throw new Error(`${label} contains duplicates`);
+    return list;
+}
+function normalizeBody(raw) {
+    const value = (0, canonicalData_1.exactObject)(raw, bodyKeys, "delivery plan");
+    const header = parseDeliveryPlanHeader(Object.fromEntries(headerKeys.map((k) => [k, value[k]])));
+    const transactions = (0, transactionPlanner_1.normalizeTransactions)(value.transactions, header.operator);
+    if (transactions.some((tx) => tx.scheme !== undefined || tx.factoryDeps !== undefined))
+        throw new Error("Delivery plans support explicit EVM transactions only");
+    if (transactions.some((tx) => BigInt(tx.value) >= 2n ** 256n))
+        throw new Error("transaction value exceeds uint256");
+    const operationBindings = (0, identities_1.parseOperationBindings)(value.operationBindings);
+    if (!Array.isArray(value.customBindings))
+        throw new Error("custom bindings must be an array");
+    const customBindings = value.customBindings.map(custom_format_1.parseCustomEvidence);
+    const customInputClosure = value.customInputClosure === null
+        ? null
+        : (0, closure_format_1.parseCustomInputClosure)(value.customInputClosure);
+    if (!!customBindings.length !== !!customInputClosure)
+        throw new Error("Missing or unrelated custom input closure");
+    if (customInputClosure) {
+        for (const binding of customBindings) {
+            for (const key of ["roots", "edges", "packages"]) {
+                const union = new Set(customInputClosure[key].map((item) => (0, canonicalData_1.canonicalJson)(item)));
+                if (binding.closure[key].some((item) => !union.has((0, canonicalData_1.canonicalJson)(item))))
+                    throw new Error("Custom closure union mismatch");
+            }
+            for (const file of binding.closure.files) {
+                if (!customInputClosure.files.some((candidate) => candidate.path === file.path &&
+                    candidate.digest === file.digest &&
+                    (file.emittedDigest === null ||
+                        candidate.emittedDigest === file.emittedDigest)))
+                    throw new Error("Custom closure file union mismatch");
+            }
+            if ((0, canonicalData_1.canonicalJson)(binding.closure.compiler) !==
+                (0, canonicalData_1.canonicalJson)(customInputClosure.compiler) ||
+                (0, canonicalData_1.canonicalJson)(binding.closure.hostAdapter) !==
+                    (0, canonicalData_1.canonicalJson)(customInputClosure.hostAdapter) ||
+                (0, canonicalData_1.canonicalJson)(binding.closure.resolver) !==
+                    (0, canonicalData_1.canonicalJson)(customInputClosure.resolver))
+                throw new Error("Custom closure compiler mismatch");
+        }
+    }
+    if (new Set(customBindings.map((b) => b.sourceStepId)).size !==
+        customBindings.length)
+        throw new Error("duplicate custom binding");
+    for (const custom of customBindings) {
+        const operations = operationBindings.filter((b) => b.sourceStepId === custom.sourceStepId);
+        if ((0, canonicalData_1.canonicalJson)(operations.map((b) => [b.operationId, b.kind])) !==
+            (0, canonicalData_1.canonicalJson)(custom.operations.map((o) => [o.id, o.kind])))
+            throw new Error("custom operation order/identity mismatch");
+    }
+    if (operationBindings.some((b) => b.operationId !== null &&
+        !customBindings.some((c) => c.sourceStepId === b.sourceStepId)))
+        throw new Error("Missing custom evidence");
+    const transactionBindings = (0, identities_1.bindDeliveryTransactions)(transactions, operationBindings);
+    if ((0, canonicalData_1.canonicalJson)(value.transactionBindings) !==
+        (0, canonicalData_1.canonicalJson)(transactionBindings))
+        throw new Error("Delivery transaction reverse mapping mismatch");
+    const derivedBindings = (0, bindings_1.parseDerivedBindings)(value.derivedBindings);
+    if (derivedBindings.executionId !== header.executionId)
+        throw new Error("derived bindings execution identity mismatch");
+    if (!Array.isArray(value.deploymentBindings) ||
+        !Array.isArray(value.verificationBindings))
+        throw new Error("plan bindings must be arrays");
+    const used = new Set();
+    const deploymentBindings = value.deploymentBindings.map((raw) => {
+        const b = (0, canonicalData_1.exactObject)(raw, ["stepId", "preparationHash", "transactionIds", "derivedKeys"], "deployment binding");
+        const stepId = (0, canonicalData_1.nonempty)(b.stepId, "stepId"), transactionIds = strings(b.transactionIds, "transactionIds"), derivedKeys = strings(b.derivedKeys, "derivedKeys");
+        for (const id of transactionIds) {
+            if (used.has(id) ||
+                !transactions.some((tx) => tx.transactionId === id &&
+                    (tx.stepId === stepId || tx.stepId === `${stepId}-implementation`)))
+                throw new Error("deployment binding transaction mismatch");
+            used.add(id);
+        }
+        if (derivedKeys.some((k) => !Object.hasOwn(derivedBindings.values, k)))
+            throw new Error("deployment binding derived key mismatch");
+        return {
+            stepId,
+            preparationHash: (0, canonicalData_1.digest)(b.preparationHash, "preparation"),
+            transactionIds,
+            derivedKeys,
+        };
+    });
+    if (new Set(deploymentBindings.map((b) => b.stepId)).size !==
+        deploymentBindings.length)
+        throw new Error("duplicate deployment binding");
+    const assertions = new Set();
+    const verificationBindings = value.verificationBindings.map((raw) => {
+        const b = (0, canonicalData_1.exactObject)(raw, ["stepId", "assertionIds", "verificationHash"], "verification binding");
+        const assertionIds = strings(b.assertionIds, "assertionIds");
+        for (const id of assertionIds) {
+            if (assertions.has(id))
+                throw new Error("duplicate assertionId");
+            assertions.add(id);
+        }
+        return {
+            stepId: (0, canonicalData_1.nonempty)(b.stepId, "stepId"),
+            assertionIds,
+            verificationHash: (0, canonicalData_1.digest)(b.verificationHash, "verification"),
+        };
+    });
+    if (new Set(verificationBindings.map((b) => b.stepId)).size !==
+        verificationBindings.length)
+        throw new Error("duplicate verification binding");
+    return {
+        ...header,
+        transactions,
+        deploymentBindings,
+        verificationBindings,
+        derivedBindings,
+        operationBindings,
+        customBindings,
+        customInputClosure,
+        transactionBindings,
+    };
+}
+function sealDeliveryPlan(raw) {
+    const body = normalizeBody(raw);
+    return (0, canonicalData_1.deepFreeze)({ ...body, planHash: (0, canonicalData_1.semanticHash)(body) });
+}
+function parseDeliveryPlan(raw, expectedIdentity) {
+    const value = (0, canonicalData_1.exactObject)(raw, [...bodyKeys, "planHash"], "delivery plan");
+    const { planHash, ...body } = value;
+    const plan = sealDeliveryPlan(body);
+    if ((0, canonicalData_1.digest)(planHash, "planHash") !== plan.planHash)
+        throw new Error("delivery plan hash mismatch");
+    if (expectedIdentity &&
+        (0, canonicalData_1.canonicalJson)(parseDeliveryPlanHeader(Object.fromEntries(headerKeys.map((k) => [k, plan[k]])))) !== (0, canonicalData_1.canonicalJson)(parseDeliveryPlanHeader(expectedIdentity)))
+        throw new Error("delivery plan identity mismatch");
+    return plan;
+}
+//# sourceMappingURL=plan.js.map

package/dist-runtime/delivery/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../runtime/delivery/plan.ts"],"names":[],"mappings":";;AAwFA,0DA2CC;AAoLD,4CAGC;AACD,8CAqBC;AAhVD,uGAAuG;AACvG,2EAG4C;AAC5C,iEAOuC;AACvC,6CAKsB;AACtB,qDAG0B;AAC1B,mDAA2E;AAC3E,qCAAgD;AAChD,yCAAwE;AAuCxE,MAAM,UAAU,GAAG;IACjB,SAAS;IACT,QAAQ;IACR,cAAc;IACd,aAAa;IACb,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;IACV,sBAAsB;IACtB,YAAY;IACZ,iBAAiB;CAClB,CAAC;AACF,MAAM,QAAQ,GAAG;IACf,GAAG,UAAU;IACb,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AACF,SAAgB,uBAAuB,CAAC,GAAY;IAClD,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM;QAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAA,6BAAoB,EAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI;QAEnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAEhC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAA,2BAAW,EACzB,KAAK,CAAC,eAAe,EACrB,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,iBAAiB,CAClB,CAAC;IACF,OAAO,IAAA,0BAAU,EAAC;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAgB;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QACtC,oBAAoB,EAAE,IAAA,sBAAM,EAC1B,KAAK,CAAC,oBAAoB,EAC1B,sBAAsB,CACvB;QACD,UAAU,EAAE,IAAA,sBAAM,EAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;QAClD,eAAe,EAAE;YACf,OAAO,EAAE,IAAA,wBAAQ,EAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACrD,MAAM,EAAE,IAAA,sBAAM,EAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;SAC1C;KACF,CAAC,CAAC;AACL,CAAC;AACD,SAAS,OAAO,CAAC,GAAY,EAAE,KAAa;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,uBAAuB,CACpC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzD,CAAC;IACF,MAAM,YAAY,GAAG,IAAA,0CAAqB,EACxC,KAAK,CAAC,YAAY,EAClB,MAAM,CAAC,QAAQ,CAChB,CAAC;IACF,IACE,YAAY,CAAC,IAAI,CACf,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,CAChE;QAED,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,IAAA,mCAAsB,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,mCAAmB,CAAC,CAAC;IACrE,MAAM,kBAAkB,GACtB,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAA,wCAAuB,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,kBAAkB;QAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,IAAI,kBAAkB,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAU,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC,CAC3D,CAAC;gBACF,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC,CAAC;oBAEpE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,IACE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAC5B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;oBAC5B,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAChC,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI;wBAC1B,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,CAAC,CACpD;oBAED,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC1D,CAAC;YACD,IACE,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACrC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,QAAQ,CAAC;gBAC5C,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;oBACxC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,WAAW,CAAC;gBAC/C,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACrC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,QAAQ,CAAC;gBAE5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,IACE,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACvD,cAAc,CAAC,MAAM;QAErB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAC9C,CAAC;QACF,IACE,IAAA,6BAAa,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAA,6BAAa,EAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAE3D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,CAAC;IACD,IACE,iBAAiB,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC,CACjE;QAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,IAAA,qCAAwB,EAClD,YAAY,EACZ,iBAAiB,CAClB,CAAC;IACF,IACE,IAAA,6BAAa,EAAC,KAAK,CAAC,mBAAmB,CAAC;QACxC,IAAA,6BAAa,EAAC,mBAAmB,CAAC;QAElC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,IAAA,+BAAoB,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,eAAe,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAE1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9D,MAAM,CAAC,GAAG,IAAA,2BAAW,EACnB,GAAG,EACH,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAC9D,oBAAoB,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EACzC,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAC5D,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACtD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IACE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACZ,CAAC,YAAY,CAAC,IAAI,CAChB,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,aAAa,KAAK,EAAE;oBACvB,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,CACrE;gBAED,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,OAAO;YACL,MAAM;YACN,eAAe,EAAE,IAAA,sBAAM,EAAC,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC;YACzD,cAAc;YACd,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IACE,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACrD,kBAAkB,CAAC,MAAM;QAEzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAClE,MAAM,CAAC,GAAG,IAAA,2BAAW,EACnB,GAAG,EACH,CAAC,QAAQ,EAAE,cAAc,EAAE,kBAAkB,CAAC,EAC9C,sBAAsB,CACvB,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC7D,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACjE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAA,wBAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC;YACpC,YAAY;YACZ,gBAAgB,EAAE,IAAA,sBAAM,EAAC,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC;SAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IACE,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACvD,oBAAoB,CAAC,MAAM;QAE3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO;QACL,GAAG,MAAM;QACT,YAAY;QACZ,kBAAkB;QAClB,oBAAoB;QACpB,eAAe;QACf,iBAAiB;QACjB,cAAc;QACd,kBAAkB;QAClB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AACD,SAAgB,gBAAgB,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAA,0BAAU,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAA,4BAAY,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AACD,SAAgB,iBAAiB,CAC/B,GAAY,EACZ,gBAAqC;IAErC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;IAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAA,sBAAM,EAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,IAAI,CAAC,QAAQ;QAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,IACE,gBAAgB;QAChB,IAAA,6BAAa,EACX,uBAAuB,CACrB,MAAM,CAAC,WAAW,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAuB,CAAC,CAAC,CAAC,CAC1D,CACF,CACF,KAAK,IAAA,6BAAa,EAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAE9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist-runtime/delivery/planning.d.ts

@@ -0,0 +1,81 @@
+import type { ReferenceObservation } from "./references";
+import { type CustomPlanningInputSession } from "./custom";
+import { type ForkAuditEvidence } from "./forkAudit";
+import type { WorkflowStep } from "../workflow/lib/parameters";
+import type { CompletedExecutionTransaction } from "../workflow/lib/transactionPlanner";
+import { type DeliveryStepContext } from "./engine";
+import { type DeliveryPlan, type DeliveryPlanHeader, type DeliveryPlanBody } from "./plan";
+import { type PreparationEntry } from "./journal";
+import type { VerificationObservation } from "../workflow/lib/evidencePorts";
+import type { PendingReuseBinding } from "../workflow/lib/pendingUupsBinding";
+import { type DeliveryCompilerCollector, type CompilerEvidence } from './compiler';
+export interface PlanningIdentityPort {
+    /** Launcher supplies validated source/inputs/runtime identity; parser does not inspect project files. */
+    read(): Promise<DeliveryPlanHeader>;
+    /** Launcher-owned read-only source connection. It must read the requested pinned block. */
+    readSourceBlock(blockNumber: number): Promise<{
+        chainId: string;
+        blockNumber: number;
+        blockHash: string;
+    }>;
+}
+export interface DeliveryRuntimeEvidence {
+    /** Validated during this collection only; never hashed or compared as canonical replay content. */
+    pendingUupsReuse: {
+        stepId: string;
+        binding: PendingReuseBinding;
+    }[];
+    forkAudit: ForkAuditEvidence;
+    references: {
+        sourceStepId: string;
+        observations: readonly ReferenceObservation[];
+    }[];
+}
+export interface DeliveryCollection {
+    plan: DeliveryPlan;
+    preparations: PreparationEntry[];
+    verification: VerificationObservation[];
+    runtimeEvidence: DeliveryRuntimeEvidence;
+}
+/** Strict compiler-owned contribution path. Header identities are still launcher-owned until aggregate c.2. */
+export declare function collectCompilerQualifiedDeliveryPlan(input: Parameters<typeof collectDeliveryPlan>[0] & {
+    compiler: DeliveryCompilerCollector;
+}): Promise<{
+    collection: DeliveryCollection;
+    compilerEvidence: CompilerEvidence;
+}>;
+export interface DeliveryPlanningOptions {
+    context: DeliveryStepContext;
+    header: DeliveryPlanHeader;
+    identities: PlanningIdentityPort;
+    steps: readonly WorkflowStep[];
+    derivationSeed: string;
+    expected?: Pick<DeliveryCollection, "plan" | "preparations" | "verification">;
+    completedTransactions?: CompletedExecutionTransaction[];
+    customSession?: CustomPlanningInputSession;
+}
+export interface StagedDeliveryCollection {
+    readonly payload: Omit<DeliveryPlanBody, 'inputsHash'>;
+    readonly invariantHash: string;
+    readonly snapshot: {
+        payload: Omit<DeliveryPlanBody, 'inputsHash'>;
+        preparations: PreparationEntry[];
+        verification: VerificationObservation[];
+        runtimeEvidence: Omit<DeliveryRuntimeEvidence, 'forkAudit'> & {
+            forkAudit: Omit<ForkAuditEvidence, 'planHash' | 'evidenceHash'>;
+        };
+    };
+    assertUnchanged(): Promise<void>;
+    bind(inputsHash: string): DeliveryCollection;
+    close(): void;
+}
+export declare function collectDeliveryPlan(input: DeliveryPlanningOptions): Promise<DeliveryCollection>;
+/** Internal worker seam. JSON cannot manufacture this live interval/closure authority. */
+export declare function stageDeliveryPlan(input: Omit<DeliveryPlanningOptions, 'header' | 'identities'> & {
+    header: Omit<DeliveryPlanHeader, 'inputsHash'>;
+    identities: Omit<PlanningIdentityPort, 'read'> & {
+        read(): Promise<Omit<DeliveryPlanHeader, 'inputsHash'>>;
+    };
+}): Promise<StagedDeliveryCollection>;
+/** Comparison only; this hash creates no collection/staging authority. */
+export declare function collectionInvariantHash(collection: DeliveryCollection): string;

package/dist-runtime/delivery/planning.js

@@ -0,0 +1,302 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectCompilerQualifiedDeliveryPlan = collectCompilerQualifiedDeliveryPlan;
+exports.collectDeliveryPlan = collectDeliveryPlan;
+exports.stageDeliveryPlan = stageDeliveryPlan;
+exports.collectionInvariantHash = collectionInvariantHash;
+const compiler_io_1 = require("./compiler-io");
+const aggregate_bootstrap_1 = require("./aggregate-bootstrap");
+const validation_1 = require("./validation");
+const data_1 = require("./data");
+/** Internal simulation collection only. No release_ready, business acceptance or broadcast API. */
+const identities_1 = require("./identities");
+const custom_1 = require("./custom");
+const forkAudit_1 = require("./forkAudit");
+const transactionPlanner_1 = require("../workflow/lib/transactionPlanner");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const runtime_1 = require("../workflow/lib/runtime");
+const engine_1 = require("./engine");
+const plan_1 = require("./plan");
+const bindings_1 = require("./bindings");
+const journal_1 = require("./journal");
+const verification_1 = require("./verification");
+const compiler_1 = require("./compiler");
+async function readCompilerEvidence(compiler) {
+    try {
+        return compiler.evidence();
+    }
+    finally {
+        // Full payload rereads can outlast an idle HTTP connection. Yield before
+        // the first collection RPC as well as before returning to its caller.
+        await (0, compiler_io_1.yieldCompilerIo)();
+    }
+}
+/** Strict compiler-owned contribution path. Header identities are still launcher-owned until aggregate c.2. */
+async function collectCompilerQualifiedDeliveryPlan(input) {
+    if ((0, compiler_1.ownedDeliveryCompiler)(input.context.runtime.hre) !== input.compiler)
+        throw new Error('Compiler-qualified collection requires its actual owned HRE collector');
+    await readCompilerEvidence(input.compiler);
+    const collection = await collectDeliveryPlan(input);
+    return { collection, compilerEvidence: await readCompilerEvidence(input.compiler) };
+}
+async function collectDeliveryPlan(input) {
+    return collectOwned(input, false);
+}
+/** Internal worker seam. JSON cannot manufacture this live interval/closure authority. */
+async function stageDeliveryPlan(input) {
+    (0, aggregate_bootstrap_1.assertOwnedTargetWorker)();
+    if (input.expected)
+        throw new Error('Staged replay requires independently closed current inputs; use known-final collection');
+    if (input.context.pendingUupsReuse)
+        throw new Error('Unknown aggregate inputs cannot authorize pending reuse');
+    const hash = '0'.repeat(64);
+    return collectOwned({ ...input, header: { ...input.header, inputsHash: hash }, identities: { ...input.identities, read: async () => ({ ...await input.identities.read(), inputsHash: hash }) } }, true);
+}
+async function collectOwned(input, staging) {
+    const sourceSteps = (0, data_1.strictData)(input.steps);
+    const header = (0, plan_1.parseDeliveryPlanHeader)(input.header), context = input.context;
+    if (context.mode !== "simulate")
+        throw new Error("Delivery planning requires simulate mode");
+    if (context.target.create2?.scheme && context.target.create2.scheme !== "evm")
+        throw new Error("Delivery planning requires EVM");
+    if (new Set(sourceSteps.map((s) => s.id)).size !== input.steps.length)
+        throw new Error("Duplicate selected step IDs");
+    (0, runtime_1.assertLocalForkRuntime)(context.runtime);
+    if (context.executionId !== header.executionId ||
+        context.taskId !== header.deploymentId ||
+        context.targetId !== header.target ||
+        context.signerAddress?.toLowerCase() !== header.operator ||
+        !context.signer ||
+        (await context.signer.getAddress()).toLowerCase() !== header.operator)
+        throw new Error("Delivery context/header/operator identity mismatch");
+    const snapshot = context.simulation.snapshot;
+    if (!snapshot ||
+        !Number.isSafeInteger(snapshot.blockNumber) ||
+        snapshot.blockNumber < 0 ||
+        !/^0x[\da-fA-F]{64}$/.test(snapshot.blockHash))
+        throw new Error("Delivery planning requires pinned fork identity");
+    const pinned = {
+        blockNumber: snapshot.blockNumber,
+        blockHash: snapshot.blockHash.toLowerCase(),
+    };
+    const verifyIdentities = async () => {
+        (0, runtime_1.assertLocalForkRuntime)(context.runtime);
+        const [identity, source, local, network] = await Promise.all([
+            input.identities.read(),
+            input.identities.readSourceBlock(pinned.blockNumber),
+            context.runtime.hre.network.provider.request({
+                method: "eth_getBlockByNumber",
+                params: [`0x${pinned.blockNumber.toString(16)}`, false],
+            }),
+            context.runtime.hre.ethers.provider.getNetwork(),
+        ]);
+        if ((0, canonicalData_1.canonicalJson)((0, plan_1.parseDeliveryPlanHeader)(identity)) !== (0, canonicalData_1.canonicalJson)(header))
+            throw new Error("Planning source/input/runtime identity drift");
+        if (network.chainId.toString() !== header.chainId ||
+            source.chainId !== header.chainId ||
+            source.blockNumber !== pinned.blockNumber ||
+            source.blockHash.toLowerCase() !== pinned.blockHash ||
+            !local ||
+            typeof local !== "object" ||
+            local.hash?.toLowerCase() !== pinned.blockHash)
+            throw new Error("Planning pinned fork/source identity mismatch");
+    };
+    await verifyIdentities();
+    await (0, validation_1.createDeliveryValidation)(context).preflight(sourceSteps.filter((step) => step.kind !== "custom"));
+    const audit = await forkAudit_1.LocalForkAudit.start({
+        provider: context.runtime.hre.network.provider,
+        chainId: header.chainId,
+        sourceSnapshot: pinned,
+    });
+    let retained = false;
+    try {
+        const expected = input.expected && (0, plan_1.parseDeliveryPlan)(input.expected.plan, header);
+        const journalIdentity = {
+            target: header.target,
+            chainId: header.chainId,
+            expectedStepIds: expected?.deploymentBindings.map((b) => b.stepId) ?? [],
+        };
+        const prior = expected &&
+            (0, journal_1.parsePreparationJournal)(input.expected.preparations, expected.transactions, expected.derivedBindings, journalIdentity);
+        const bindings = new bindings_1.DeliveryExecutionBindings({
+            executionId: header.executionId,
+            derivationSeed: input.derivationSeed,
+            expected: expected?.derivedBindings,
+        });
+        const planner = new transactionPlanner_1.TransactionPlanner({
+            operator: header.operator,
+            expectedTransactions: expected?.transactions,
+            replayCompletedPrefix: true,
+            completedTransactions: input.completedTransactions,
+        });
+        const preparations = new journal_1.PreparationJournal({
+            ...journalIdentity,
+            expectedStepIds: [],
+            expected: prior,
+            qualifiedSameFork: initial => (0, compiler_1.hasCompilerSameForkInitial)(context.runtime.hre, initial),
+        });
+        const verification = new verification_1.VerificationJournal([]);
+        const pendingObservations = [];
+        const operationIds = new identities_1.DeliveryOperationIdentities();
+        const references = [];
+        const customBindings = [], executed = [];
+        const session = sourceSteps.some((step) => step.kind === "custom")
+            ? (0, custom_1.ownedCustomSession)(input.customSession ??
+                new custom_1.CustomPlanningSession({
+                    root: context.root,
+                    businessRoot: context.taskDir,
+                    params: context.targetParams,
+                    target: context.target,
+                    state: () => context.state.snapshot(),
+                }), context.root, context.taskDir)
+            : undefined;
+        const pendingUupsReuse = context.pendingUupsReuse;
+        const stepContext = {
+            ...context,
+            deploymentRecorder: undefined,
+            bindings,
+            preparations,
+            verification,
+            executionPlanner: planner,
+            transactionIdentity: operationIds,
+            transactionObserver: audit,
+            runtime: {
+                ...context.runtime,
+                localFork: {
+                    ...context.runtime.localFork,
+                    impersonate: (address) => audit.setup(address, () => context.runtime.localFork.impersonate(address)),
+                },
+            },
+            pendingUupsReuse: pendingUupsReuse && {
+                resolve: async (query) => {
+                    const resolution = await pendingUupsReuse.resolve(query);
+                    if (resolution?.binding)
+                        pendingObservations.push({
+                            stepId: query.stepId,
+                            binding: (0, canonicalData_1.canonicalData)(resolution.binding),
+                        });
+                    return resolution;
+                },
+            },
+        };
+        for (const sourceStep of sourceSteps) {
+            let operations;
+            if (sourceStep.kind === "custom") {
+                const evidence = (0, custom_1.parseCustomEvidence)(await session.evaluate(sourceStep));
+                if (evidence.sourceStepId !== sourceStep.id)
+                    throw new Error("Custom session source identity mismatch");
+                customBindings.push(evidence);
+                operations = evidence.operations;
+            }
+            else
+                operations = [sourceStep];
+            // Register and validate the complete emitted list before dispatching its first operation.
+            const steps = operations.map((operation) => ({
+                ...operation,
+                id: operationIds.register(sourceStep.id, sourceStep.kind === "custom" ? operation.id : null, operation.kind),
+            }));
+            preparations.declare(steps
+                .filter((s) => s.kind === "deploy" || s.kind === "upgrade")
+                .map((s) => s.id));
+            verification.declare(steps
+                .filter((s) => s.kind === "check")
+                .flatMap((s) => {
+                if (!Array.isArray(s.calls) || !s.calls.length)
+                    throw new Error(`Check ${s.id} requires calls`);
+                return s.calls.map((_, callIndex) => ({
+                    stepId: s.id,
+                    callIndex,
+                    assertionId: `${s.id}:${callIndex}`,
+                }));
+            }));
+            executed.push(...steps);
+            const result = await (0, engine_1.runDeliverySteps)(stepContext, steps);
+            references.push({
+                sourceStepId: sourceStep.id,
+                observations: result.references,
+            });
+        }
+        await verifyIdentities();
+        const transactions = planner.complete(), derivedBindings = bindings.seal();
+        const prepared = preparations.seal(transactions, derivedBindings), observations = verification.seal();
+        const { inputsHash: knownHash, ...base } = header;
+        const payload = (0, canonicalData_1.deepFreeze)({
+            ...base,
+            transactions,
+            derivedBindings,
+            operationBindings: operationIds.seal(),
+            transactionBindings: (0, identities_1.bindDeliveryTransactions)(transactions, operationIds.seal()),
+            customBindings,
+            customInputClosure: session?.seal() ?? null,
+            deploymentBindings: prepared.map((p) => ({
+                stepId: p.stepId,
+                preparationHash: p.preparationHash,
+                transactionIds: p.mappings.map((m) => m.transactionId),
+                derivedKeys: p.derivedKeys,
+            })),
+            verificationBindings: executed
+                .filter((s) => s.kind === "check")
+                .map((s) => {
+                const checks = observations.filter((o) => o.stepId === s.id);
+                return {
+                    stepId: s.id,
+                    assertionIds: checks.map((o) => o.assertionId),
+                    verificationHash: (0, canonicalData_1.semanticHash)(checks),
+                };
+            }),
+        });
+        if (input.expected && (0, canonicalData_1.canonicalJson)(input.expected.verification.map(verification_1.parseVerificationObservation)) !== (0, canonicalData_1.canonicalJson)(observations))
+            throw new Error("Replayed verification evidence differs");
+        session?.closeReads();
+        const interval = await audit.capture({ transactions, completedTransactions: input.completedTransactions ?? [] });
+        const stagedSnapshot = (0, canonicalData_1.deepFreeze)({ payload, preparations: prepared, verification: observations, runtimeEvidence: { pendingUupsReuse: pendingObservations, forkAudit: interval.snapshot, references } });
+        const invariantHash = (0, canonicalData_1.semanticHash)(stagedSnapshot);
+        let state = 'staged';
+        const open = () => { if (state !== 'staged')
+            throw new Error('Staged collection closed or already bound'); };
+        const bind = (inputsHash) => {
+            open();
+            state = 'failed';
+            const plan = (0, plan_1.sealDeliveryPlan)({ ...payload, inputsHash });
+            if (expected && plan.planHash !== expected.planHash)
+                throw new Error('Replayed delivery plan differs from expected plan');
+            const forkAudit = interval.bind(plan.planHash);
+            const result = (0, canonicalData_1.deepFreeze)((0, canonicalData_1.canonicalData)({ plan, preparations: prepared, verification: observations,
+                runtimeEvidence: { pendingUupsReuse: pendingObservations, forkAudit, references } }));
+            if (collectionInvariantHash(result) !== invariantHash)
+                throw new Error('Binding changed staged collection payload');
+            state = 'bound';
+            return result;
+        };
+        const check = async () => {
+            open();
+            try {
+                await verifyIdentities();
+                await interval.assertUnchanged();
+                if (session && (0, canonicalData_1.canonicalJson)(session.seal()) !== (0, canonicalData_1.canonicalJson)(payload.customInputClosure))
+                    throw new Error('Custom input closure drift at collection completion');
+            }
+            catch (error) {
+                state = 'failed';
+                throw error;
+            }
+        };
+        if (!staging) {
+            await check();
+            return bind(knownHash);
+        }
+        retained = true;
+        return Object.freeze({ payload, invariantHash, snapshot: stagedSnapshot, assertUnchanged: check, bind, close() { state = 'closed'; audit.close(); } });
+    }
+    finally {
+        if (!retained)
+            audit.close();
+    }
+}
+/** Comparison only; this hash creates no collection/staging authority. */
+function collectionInvariantHash(collection) {
+    const { inputsHash: _, planHash: __, ...payload } = collection.plan;
+    const { planHash: ___, evidenceHash: ____, ...forkAudit } = collection.runtimeEvidence.forkAudit;
+    return (0, canonicalData_1.semanticHash)({ payload, preparations: collection.preparations, verification: collection.verification, runtimeEvidence: { ...collection.runtimeEvidence, forkAudit } });
+}
+//# sourceMappingURL=planning.js.map

package/dist-runtime/delivery/planning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planning.js","sourceRoot":"","sources":["../../runtime/delivery/planning.ts"],"names":[],"mappings":";;AAmFA,oFAOC;AAmBD,kDAEC;AAED,8CASC;AA8QD,0DAIC;AA5YD,+CAAgD;AAChD,+DAA8D;AAE9D,6CAAwD;AACxD,iCAAoC;AACpC,mGAAmG;AACnG,6CAGsB;AACtB,qCAMkB;AAClB,2CAAqE;AAGrE,2EAAwE;AACxE,iEAKuC;AACvC,qDAAiE;AACjE,qCAAsE;AACtE,iCAOgB;AAChB,yCAAuD;AACvD,uCAImB;AACnB,iDAGwB;AAGxB,yCAAsI;AAwBtI,KAAK,UAAU,oBAAoB,CAAC,QAAmC;IACrE,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,IAAA,6BAAe,GAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AACD,+GAA+G;AACxG,KAAK,UAAU,oCAAoC,CACxD,KAA0F;IAE1F,IAAI,IAAA,gCAAqB,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAClK,MAAM,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtF,CAAC;AAmBM,KAAK,UAAU,mBAAmB,CAAC,KAA6B;IACrE,OAAO,YAAY,CAAC,KAAK,EAAC,KAAK,CAAgC,CAAC;AAClE,CAAC;AACD,0FAA0F;AACnF,KAAK,UAAU,iBAAiB,CAAC,KAGvC;IACC,IAAA,6CAAuB,GAAE,CAAC;IAC1B,IAAG,KAAK,CAAC,QAAQ;QAAC,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5H,IAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB;QAAC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,YAAY,CAAC,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,EAAC,GAAG,KAAK,CAAC,MAAM,EAAC,UAAU,EAAC,IAAI,EAAC,EAAC,UAAU,EAAC,EAAC,GAAG,KAAK,CAAC,UAAU,EAAC,IAAI,EAAC,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,EAAC,EAAC,EAAC,IAAI,CAAsC,CAAC;AACzN,CAAC;AACD,KAAK,UAAU,YAAY,CAAC,KAA6B,EAAC,OAAe;IACvE,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAA,8BAAuB,EAAC,KAAK,CAAC,MAAM,CAAC,EAClD,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;QAC3E,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;QACnE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,IAAA,gCAAsB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,IACE,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAC1C,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY;QACtC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM;QAClC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC,QAAQ;QACxD,CAAC,OAAO,CAAC,MAAM;QACf,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,QAAQ;QAErE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC7C,IACE,CAAC,QAAQ;QACT,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,QAAQ,CAAC,WAAW,GAAG,CAAC;QACxB,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAE9C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;KAC5C,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAClC,IAAA,gCAAsB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3D,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE;YACvB,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC;YACpD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC;aACxD,CAAC;YACF,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE;SACjD,CAAC,CAAC;QACH,IACE,IAAA,6BAAa,EAAC,IAAA,8BAAuB,EAAC,QAAQ,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,MAAM,CAAC;YAE1E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,IACE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,OAAO;YAC7C,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YACzC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,SAAS;YACnD,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACxB,KAA2B,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC,SAAS;YAErE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,IAAA,qCAAwB,EAAC,OAAO,CAAC,CAAC,SAAS,CAC/C,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CACrD,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,0BAAc,CAAC,KAAK,CAAC;QACvC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ;QAC9C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,QAAQ,GAAC,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,IAAA,wBAAiB,EAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,eAAe,GAAG;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;SACzE,CAAC;QACF,MAAM,KAAK,GACT,QAAQ;YACR,IAAA,iCAAuB,EACrB,KAAK,CAAC,QAAS,CAAC,YAAY,EAC5B,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,eAAe,EACxB,eAAe,CAChB,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,oCAAyB,CAAC;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,QAAQ,EAAE,eAAe;SACpC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,uCAAkB,CAAC;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,oBAAoB,EAAE,QAAQ,EAAE,YAAY;YAC5C,qBAAqB,EAAE,IAAI;YAC3B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,4BAAkB,CAAC;YAC1C,GAAG,eAAe;YAClB,eAAe,EAAE,EAAE;YACnB,QAAQ,EAAE,KAAK;YACf,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,IAAA,qCAA0B,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAC,OAAO,CAAC;SACtF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,kCAAmB,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,mBAAmB,GAAgD,EAAE,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,wCAA2B,EAAE,CAAC;QACvD,MAAM,UAAU,GAA0C,EAAE,CAAC;QAC7D,MAAM,cAAc,GAAqB,EAAE,EACzC,QAAQ,GAAmB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;YAChE,CAAC,CAAC,IAAA,2BAAkB,EAChB,KAAK,CAAC,aAAa;gBACjB,IAAI,8BAAqB,CAAC;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,YAAY,EAAE,OAAO,CAAC,OAAO;oBAC7B,MAAM,EAAE,OAAO,CAAC,YAAY;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;iBACtC,CAAC,EACJ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,OAAO,CAChB;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClD,MAAM,WAAW,GAAwB;YACvC,GAAG,OAAO;YACV,kBAAkB,EAAE,SAAS;YAC7B,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,gBAAgB,EAAE,OAAO;YACzB,mBAAmB,EAAE,YAAY;YACjC,mBAAmB,EAAE,KAAK;YAC1B,OAAO,EAAE;gBACP,GAAG,OAAO,CAAC,OAAO;gBAClB,SAAS,EAAE;oBACT,GAAG,OAAO,CAAC,OAAO,CAAC,SAAU;oBAC7B,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CACxB,OAAO,CAAC,OAAO,CAAC,SAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAChD;iBACJ;aACF;YACD,gBAAgB,EAAE,gBAAgB,IAAI;gBACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACvB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACzD,IAAI,UAAU,EAAE,OAAO;wBACrB,mBAAmB,CAAC,IAAI,CAAC;4BACvB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,OAAO,EAAE,IAAA,6BAAa,EACpB,UAAU,CAAC,OAAO,CACe;yBACpC,CAAC,CAAC;oBACL,OAAO,UAAU,CAAC;gBACpB,CAAC;aACF;SACF,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,UAAmC,CAAC;YACxC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAA,4BAAmB,EAClC,MAAM,OAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CACpC,CAAC;gBACF,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;YACnC,CAAC;;gBAAM,UAAU,GAAG,CAAC,UAAU,CAAC,CAAC;YACjC,0FAA0F;YAC1F,MAAM,KAAK,GAAmB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC3D,GAAG,SAAS;gBACZ,EAAE,EAAE,YAAY,CAAC,QAAQ,CACvB,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAClD,SAAS,CAAC,IAAI,CACf;aACF,CAAC,CAAC,CAAC;YACJ,YAAY,CAAC,OAAO,CAClB,KAAK;iBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;iBAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACpB,CAAC;YACF,YAAY,CAAC,OAAO,CAClB,KAAK;iBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;iBACjC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;oBAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;oBACpC,MAAM,EAAE,CAAC,CAAC,EAAE;oBACZ,SAAS;oBACT,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,SAAS,EAAE;iBACpC,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CACL,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAgB,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC;gBACd,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,YAAY,EAAE,MAAM,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,gBAAgB,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,EACrC,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAC/D,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAC,UAAU,EAAC,SAAS,EAAC,GAAG,IAAI,EAAC,GAAC,MAAM,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAA,0BAAU,EAAC;YACzB,GAAG,IAAI;YACP,YAAY;YACZ,eAAe;YACf,iBAAiB,EAAE,YAAY,CAAC,IAAI,EAAE;YACtC,mBAAmB,EAAE,IAAA,qCAAwB,EAC3C,YAAY,EACZ,YAAY,CAAC,IAAI,EAAE,CACpB;YACD,cAAc;YACd,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI;YAC3C,kBAAkB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;gBACtD,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,oBAAoB,EAAE,QAAQ;iBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7D,OAAO;oBACL,MAAM,EAAE,CAAC,CAAC,EAAE;oBACZ,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;oBAC9C,gBAAgB,EAAE,IAAA,4BAAY,EAAC,MAAM,CAAC;iBACvC,CAAC;YACJ,CAAC,CAAC;SACL,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAA,6BAAa,EAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,2CAA4B,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,YAAY,CAAC;YAChI,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,OAAO,EAAE,UAAU,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAC,YAAY,EAAC,qBAAqB,EAAC,KAAK,CAAC,qBAAqB,IAAE,EAAE,EAAC,CAAC,CAAC;QACzG,MAAM,cAAc,GAAC,IAAA,0BAAU,EAAC,EAAC,OAAO,EAAC,YAAY,EAAC,QAAQ,EAAC,YAAY,EAAC,YAAY,EAAC,eAAe,EAAC,EAAC,gBAAgB,EAAC,mBAAmB,EAAC,SAAS,EAAC,QAAQ,CAAC,QAAQ,EAAC,UAAU,EAAC,EAAC,CAAC,CAAC;QACzL,MAAM,aAAa,GAAC,IAAA,4BAAY,EAAC,cAAc,CAAC,CAAC;QACjD,IAAI,KAAK,GAAoC,QAAQ,CAAC;QACtD,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,IAAG,KAAK,KAAG,QAAQ;YAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAA,CAAC,CAAC;QACnG,MAAM,IAAI,GAAC,CAAC,UAAiB,EAAoB,EAAE;YACjD,IAAI,EAAE,CAAC;YAAC,KAAK,GAAC,QAAQ,CAAC;YACvB,MAAM,IAAI,GAAC,IAAA,uBAAgB,EAAC,EAAC,GAAG,OAAO,EAAC,UAAU,EAAC,CAAC,CAAC;YACrD,IAAG,QAAQ,IAAE,IAAI,CAAC,QAAQ,KAAG,QAAQ,CAAC,QAAQ;gBAAC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACpH,MAAM,SAAS,GAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAC,IAAA,0BAAU,EAAC,IAAA,6BAAa,EAAC,EAAC,IAAI,EAAC,YAAY,EAAC,QAAQ,EAAC,YAAY,EAAC,YAAY;gBACzF,eAAe,EAAC,EAAC,gBAAgB,EAAC,mBAAmB,EAAC,SAAS,EAAC,UAAU,EAAC,EAAC,CAAkC,CAAC,CAAC;YAClH,IAAG,uBAAuB,CAAC,MAAM,CAAC,KAAG,aAAa;gBAAC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAChH,KAAK,GAAC,OAAO,CAAC;YAAA,OAAO,MAAM,CAAC;QAC9B,CAAC,CAAC;QACF,MAAM,KAAK,GAAC,KAAK,IAAE,EAAE;YACnB,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,gBAAgB,EAAE,CAAC;gBAAA,MAAM,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC1D,IAAG,OAAO,IAAE,IAAA,6BAAa,EAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAG,IAAA,6BAAa,EAAC,OAAO,CAAC,kBAAkB,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC/J,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBAAA,KAAK,GAAC,QAAQ,CAAC;gBAAA,MAAM,KAAK,CAAC;YAAA,CAAC;QAC5C,CAAC,CAAC;QACF,IAAG,CAAC,OAAO,EAAC,CAAC;YAAA,MAAM,KAAK,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;QACnD,QAAQ,GAAC,IAAI,CAAC;QACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,aAAa,EAAC,QAAQ,EAAC,cAAc,EAAC,eAAe,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,KAAG,KAAK,GAAC,QAAQ,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAE1I,CAAC;YAAS,CAAC;QACT,IAAG,CAAC,QAAQ;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAgB,uBAAuB,CAAC,UAA6B;IACnE,MAAM,EAAC,UAAU,EAAC,CAAC,EAAC,QAAQ,EAAC,EAAE,EAAC,GAAG,OAAO,EAAC,GAAC,UAAU,CAAC,IAAI,CAAC;IAC5D,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,YAAY,EAAC,IAAI,EAAC,GAAG,SAAS,EAAC,GAAC,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC;IACzF,OAAO,IAAA,4BAAY,EAAC,EAAC,OAAO,EAAC,YAAY,EAAC,UAAU,CAAC,YAAY,EAAC,YAAY,EAAC,UAAU,CAAC,YAAY,EAAC,eAAe,EAAC,EAAC,GAAG,UAAU,CAAC,eAAe,EAAC,SAAS,EAAC,EAAC,CAAC,CAAC;AACrK,CAAC"}

package/dist-runtime/delivery/policy.d.ts

@@ -0,0 +1,4 @@
+export declare const validateManifestPolicy: typeof import('gate-evm-tools/delivery-policy').validateManifestPolicy;
+export declare const validateNetworkAlias: typeof import('gate-evm-tools/delivery-policy').validateNetworkAlias;
+export declare const isSafeNetworkAlias: typeof import('gate-evm-tools/delivery-policy').isSafeNetworkAlias;
+export type { ManifestEnvironment } from 'gate-evm-tools/delivery-policy';

package/dist-runtime/delivery/policy.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSafeNetworkAlias = exports.validateNetworkAlias = exports.validateManifestPolicy = void 0;
+// dist-runtime is a separate CommonJS package boundary. Resolve our built policy by
+// location rather than package self-reference, which is unavailable in a checkout.
+exports.validateManifestPolicy = require('../../dist-cjs/delivery/policy.js').validateManifestPolicy;
+exports.validateNetworkAlias = require('../../dist-cjs/delivery/policy.js').validateNetworkAlias;
+exports.isSafeNetworkAlias = require('../../dist-cjs/delivery/policy.js').isSafeNetworkAlias;
+//# sourceMappingURL=policy.js.map