gate-evm-tools 1.0.28 → 1.0.31

package/dist-runtime/delivery/aggregate.js

@@ -0,0 +1,190 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectDeliveryAggregate = collectDeliveryAggregate;
+/** Owned multi-target input qualification. This grants no release-ready or broadcast authority. */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const inputs_1 = require("./inputs");
+const aggregate_inputs_1 = require("./aggregate-inputs");
+const protocol_1 = require("./protocol");
+const data_1 = require("./data");
+const input_files_1 = require("./input-files");
+const project_files_1 = require("./project-files");
+const configuration_runtime_1 = require("./configuration-runtime");
+const aggregate_channel_1 = require("./aggregate-channel");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+function same(a, b, label) { if ((0, canonicalData_1.canonicalJson)(a) !== (0, canonicalData_1.canonicalJson)(b))
+    throw new Error(`${label} drift or mismatch`); }
+/** Derives business data once; only actual worker channels can contribute staged authority. */
+class DiscoveryReplayError extends Error {
+}
+async function collectDeliveryAggregate(raw) {
+    try {
+        return await collectOwnedAggregate(raw);
+    }
+    catch (error) {
+        if (error instanceof aggregate_channel_1.OwnedWorkerFailure || error instanceof DiscoveryReplayError)
+            throw error;
+        throw new Error('Delivery aggregate input qualification failed');
+    }
+}
+async function collectOwnedAggregate(raw) {
+    const input = (0, data_1.strictData)(raw);
+    (0, canonicalData_1.exactObject)(input, ['workspaceRoot', 'projectRoot', 'selection', 'targets'], 'aggregate options');
+    if (!['development', 'release', 'all'].includes(input.selection) || !Array.isArray(input.targets) || !input.targets.length)
+        throw new Error('Aggregate requires selected target requests');
+    const root = (0, project_files_1.projectRoot)(input.workspaceRoot, input.projectRoot), workspace = (0, project_files_1.projectRoot)(input.workspaceRoot, '.');
+    if (node_path_1.default.resolve(process.cwd()) !== root)
+        throw new Error('Aggregate must run from the original project root');
+    const targets = input.targets.map(value => {
+        if (!value || Object.keys(value).some(k => !['request', 'executionId', 'expected'].includes(k)))
+            throw new Error('Invalid aggregate target');
+        if (Object.hasOwn(value, 'expected'))
+            throw new DiscoveryReplayError('Staged replay requires independently closed current inputs; use known-final collection');
+        const request = (0, protocol_1.parseDeliveryRequest)(value.request);
+        (0, protocol_1.safeId)(value.executionId, 'executionId');
+        if (request.mode !== 'simulate' || request.purpose === 'prod-execution')
+            throw new Error('Aggregate input qualification requires simulation');
+        return { ...value, request };
+    });
+    if (new Set(targets.map(x => x.request.network)).size !== targets.length || new Set(targets.map(x => x.executionId)).size !== targets.length)
+        throw new Error('Aggregate target and execution IDs must be distinct');
+    // Every invocation gets its own actual environment/network/step/sourceRef validation.
+    const sourceOwner = (0, aggregate_inputs_1.openAggregateSources)({ workspaceRoot: workspace, projectRoot: input.projectRoot, requests: targets.map(x => x.request) });
+    const { sources, definitions: sourceDefinitions, sourceDefinitionHash } = sourceOwner;
+    for (const source of sources) {
+        const scope = source.invocation.task.scope.deployment, first = sources[0].invocation.task.scope.deployment;
+        for (const key of ['deploymentId', 'developmentNetwork', 'releaseTargetNetworks', 'projectRoot'])
+            same(scope[key], first[key], 'Aggregate business scope');
+    }
+    let runtime, business;
+    const workers = [];
+    let failure;
+    const session = (0, node_crypto_1.randomUUID)(), directory = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'gate-delivery-aggregate-'));
+    const live = () => { if (failure)
+        throw failure; for (const worker of workers)
+        worker.assertLive(); };
+    const checkSources = () => sourceOwner.assertUnchanged();
+    try {
+        runtime = new configuration_runtime_1.RuntimeObservation(root);
+        business = (0, inputs_1.openDeliveryInputs)({ workspaceRoot: workspace, projectRoot: input.projectRoot, request: targets[0].request, selection: input.selection });
+        same(targets.map(x => x.request.network), business.snapshot.targets.map(x => x.id), 'Selected target request order');
+        const receipts = targets.map(({ request }) => business.parameters(request.network));
+        const rows = [];
+        for (const [index, target] of targets.entries()) {
+            live();
+            checkSources();
+            const publicTarget = business.snapshot.targets[index];
+            if (publicTarget.environment !== target.request.environment)
+                throw new Error('Selected request environment mismatch');
+            const common = { root, workspaceRoot: workspace, projectRoot: input.projectRoot, request: target.request };
+            const source = new aggregate_channel_1.OwnedWorker(root, session, target.request.network, 'source', error => { failure ??= error; });
+            workers.push(source);
+            const handshakePath = node_path_1.default.join(directory, `${index}.json`);
+            const ready = await source.request('stage', { ...common, role: 'source', handshakePath });
+            if (ready.ready !== true || !node_fs_1.default.existsSync(handshakePath))
+                throw new Error('Source handshake is not READY');
+            const bytes = node_fs_1.default.readFileSync(handshakePath, 'utf8'), handshake = JSON.parse(bytes);
+            same(handshake, ready.handshake, 'Source handshake');
+            if (handshake.version !== 1 || handshake.session !== session || handshake.epoch !== source.epoch || handshake.target !== target.request.network)
+                throw new Error('Source handshake association mismatch');
+            const worker = new aggregate_channel_1.OwnedWorker(root, session, target.request.network, 'target', error => { failure ??= error; });
+            workers.push(worker);
+            const staged = await worker.request('stage', { ...common, role: 'target', handshake, target: publicTarget, params: business.values(publicTarget.id), steps: business.snapshot.steps,
+                deploymentId: business.snapshot.deploymentId, businessRoot: business.snapshot.businessRoot, executionId: target.executionId, sourceDefinitionHash });
+            if (staged.ready !== true)
+                throw new Error('Target stage is not READY');
+            rows.push({ target: publicTarget.id, source, worker, staged });
+        }
+        // Producer/evaluation ports terminate before the final union. No producer runs below this point.
+        checkSources();
+        const sealed = business.seal();
+        for (const [index, receipt] of receipts.entries())
+            same((0, inputs_1.consumeDeliveryInputParameters)(receipt), sealed.parameters[index].resolved.values, 'Owned parameter receipt');
+        const contributions = [];
+        for (const row of rows) {
+            live();
+            const checked = await row.worker.request('check');
+            same(checked.compiler, row.staged.compiler, 'Compiler stage');
+            same(checked.custom, row.staged.custom, 'Target custom closure');
+            same(checked.payloadHash, row.staged.payloadHash, 'Staged payload');
+            same(checked.invariantHash, row.staged.invariantHash, 'Staged invariant');
+            const sourceChecked = await row.source.request('check');
+            contributions.push({ target: row.target, configuration: checked.configuration, sourceConfiguration: sourceChecked.configuration, compiler: checked.compiler, custom: checked.custom });
+        }
+        checkSources();
+        runtime.assertUnchanged();
+        const parentRuntime = runtime.observe();
+        const files = new Map();
+        const add = (path, digest) => { if (files.has(path) && files.get(path) !== digest)
+            throw new Error('Conflicting aggregate immutable input'); files.set(path, digest); };
+        for (const file of sealed.files)
+            add(file.path, file.digest);
+        for (const parameter of sealed.parameters)
+            for (const file of parameter.closure?.files ?? [])
+                add(file.path, file.digest);
+        for (const row of contributions) {
+            for (const file of row.custom?.files ?? [])
+                add(file.path, file.digest);
+            for (const artifact of row.compiler.artifacts) {
+                add(artifact.path, (0, input_files_1.inputDigest)(artifact.contents));
+                add(artifact.debugPath, (0, input_files_1.inputDigest)(artifact.debugContents));
+            }
+            for (const build of row.compiler.builds)
+                add(build.path, (0, input_files_1.inputDigest)(build.contents));
+            for (const job of row.compiler.jobs)
+                for (const file of job.sources)
+                    add(file.path, file.digest);
+            for (const file of row.compiler.toolchain.modules)
+                add(file.path, file.digest);
+            for (const config of [row.configuration, row.sourceConfiguration]) {
+                for (const file of config.files)
+                    add(file.path, file.digest);
+                for (const file of config.runtime.modules)
+                    add(file.path, file.digest);
+                for (const pkg of [config.runtime.package, ...config.runtime.dependencies])
+                    for (const file of pkg.payload)
+                        add(`${pkg.lockLocation}/${file.path}`, file.digest);
+            }
+        }
+        const union = [...files].sort(([a], [b]) => a.localeCompare(b, 'en')).map(([path, digest]) => ({ path, digest }));
+        // No runtime state, observation, plan hash or randomized compiler exact evidence enters this preimage.
+        const inputsHash = (0, canonicalData_1.semanticHash)({ version: 1, business: sealed, sourceDefinitions, runtime: parentRuntime, files: union,
+            targets: contributions.map(row => ({ target: row.target, configuration: row.configuration.configurationRuntimeHash, sourceConfiguration: row.sourceConfiguration.configurationRuntimeHash, compiler: row.compiler.stableDigest, custom: row.custom })) });
+        live();
+        const collections = [];
+        for (const row of rows) {
+            const collection = await row.worker.request('bind', { inputsHash });
+            if (collection.plan.inputsHash !== inputsHash || collection.plan.sourceDefinitionHash !== sourceDefinitionHash)
+                throw new Error('Final target identity mismatch');
+            const { inputsHash: _, planHash: __, ...payload } = collection.plan;
+            same((0, canonicalData_1.semanticHash)(payload), row.staged.payloadHash, 'Final staged payload');
+            collections.push(collection);
+        }
+        // No externally reachable plan exists until every actual child has exited successfully.
+        for (const row of rows) {
+            if (failure)
+                throw failure;
+            await row.worker.request('close');
+            await row.source.request('close');
+        }
+        if (failure)
+            throw failure;
+        return (0, canonicalData_1.deepFreeze)({ version: 1, inputsHash, sourceDefinitionHash, inputs: { business: sealed, sourceDefinitions, runtime: parentRuntime, targets: contributions, files: union }, collections,
+            observations: rows.map(row => ({ target: row.target, ...row.staged.observation, sourcePid: row.source.pid, payloadHash: row.staged.payloadHash, invariantHash: row.staged.invariantHash, exited: true })) });
+    }
+    finally {
+        business?.close();
+        runtime?.close();
+        const results = await Promise.allSettled(workers.map(worker => worker.reap()));
+        node_fs_1.default.rmSync(directory, { recursive: true, force: true });
+        if (results.some(x => x.status === 'rejected'))
+            throw new Error('Aggregate worker cleanup failed');
+    }
+}
+//# sourceMappingURL=aggregate.js.map

package/dist-runtime/delivery/aggregate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate.js","sourceRoot":"","sources":["../../runtime/delivery/aggregate.ts"],"names":[],"mappings":";;;;;AAkCA,4DAGC;AArCD,mGAAmG;AACnG,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,6CAAuC;AACvC,qCAAsG;AACtG,yDAAwD;AACxD,yCAA4E;AAC5E,iCAAkC;AAClC,+CAA0C;AAC1C,mDAA4C;AAC5C,mEAA2D;AAC3D,2DAAmE;AACnE,iEAAgG;AAkBhG,SAAS,IAAI,CAAC,CAAS,EAAC,CAAS,EAAC,KAAY,IAAO,IAAG,IAAA,6BAAa,EAAC,CAAC,CAAC,KAAG,IAAA,6BAAa,EAAC,CAAC,CAAC;IAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC,CAAA,CAAC;AAC3I,+FAA+F;AAC/F,MAAM,oBAAqB,SAAQ,KAAK;CAAG;AACpC,KAAK,UAAU,wBAAwB,CAAC,GAA4B;IACzE,IAAG,CAAC;QAAA,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAAA,CAAC;IAC7C,OAAM,KAAK,EAAC,CAAC;QAAA,IAAG,KAAK,YAAY,sCAAkB,IAAE,KAAK,YAAY,oBAAoB;YAAC,MAAM,KAAK,CAAC;QAAA,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAAA,CAAC;AAC3K,CAAC;AACD,KAAK,UAAU,qBAAqB,CAAC,GAA4B;IAC/D,MAAM,KAAK,GAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;IAC5B,IAAA,2BAAW,EAAC,KAAK,EAAC,CAAC,eAAe,EAAC,aAAa,EAAC,WAAW,EAAC,SAAS,CAAC,EAAC,mBAAmB,CAAC,CAAC;IAC7F,IAAG,CAAC,CAAC,aAAa,EAAC,SAAS,EAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;QAAC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnL,MAAM,IAAI,GAAC,IAAA,2BAAW,EAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,WAAW,CAAC,EAAC,SAAS,GAAC,IAAA,2BAAW,EAAC,KAAK,CAAC,aAAa,EAAC,GAAG,CAAC,CAAC;IAC7G,IAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAG,IAAI;QAAC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE;QACrC,IAAG,CAAC,KAAK,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,EAAC,aAAa,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrI,IAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAC,UAAU,CAAC;YAAC,MAAM,IAAI,oBAAoB,CAAC,wFAAwF,CAAC,CAAC;QAC5J,MAAM,OAAO,GAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAA,IAAA,iBAAM,EAAC,KAAK,CAAC,WAAW,EAAC,aAAa,CAAC,CAAC;QAC1F,IAAG,OAAO,CAAC,IAAI,KAAG,UAAU,IAAE,OAAO,CAAC,OAAO,KAAG,gBAAgB;YAAC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtI,OAAO,EAAC,GAAG,KAAK,EAAC,OAAO,EAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,IAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAG,OAAO,CAAC,MAAM,IAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAG,OAAO,CAAC,MAAM;QAAC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzM,sFAAsF;IACtF,MAAM,WAAW,GAAC,IAAA,uCAAoB,EAAC,EAAC,aAAa,EAAC,SAAS,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,QAAQ,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;IACnI,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,iBAAiB,EAAC,oBAAoB,EAAC,GAAC,WAAW,CAAC;IAC/E,KAAI,MAAM,MAAM,IAAI,OAAO,EAAC,CAAC;QAAA,MAAM,KAAK,GAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAM,CAAC,UAAiB,EAAC,KAAK,GAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAM,CAAC,UAAiB,CAAC;QACjJ,KAAI,MAAM,GAAG,IAAI,CAAC,cAAc,EAAC,oBAAoB,EAAC,uBAAuB,EAAC,aAAa,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,CAAC,GAAG,CAAC,EAAC,0BAA0B,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,OAAoC,EAAC,QAAwD,CAAC;IAClG,MAAM,OAAO,GAAe,EAAE,CAAC;IAAA,IAAI,OAAuB,CAAC;IAC3D,MAAM,OAAO,GAAC,IAAA,wBAAU,GAAE,EAAC,SAAS,GAAC,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAC,0BAA0B,CAAC,CAAC,CAAC;IACvG,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,IAAG,OAAO;QAAC,MAAM,OAAO,CAAC,CAAA,KAAI,MAAM,MAAM,IAAI,OAAO;QAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAC,GAAE,EAAE,CAAA,WAAW,CAAC,eAAe,EAAE,CAAC;IACrD,IAAG,CAAC;QACF,OAAO,GAAC,IAAI,0CAAkB,CAAC,IAAI,CAAC,CAAC;QACrC,QAAQ,GAAC,IAAA,2BAAkB,EAAC,EAAC,aAAa,EAAC,SAAS,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,OAAO,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC,CAAC,CAAC;QAC1I,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,+BAA+B,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAC,OAAO,EAAC,EAAC,EAAE,CAAA,QAAS,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAO,EAAE,CAAC;QACpB,KAAI,MAAM,CAAC,KAAK,EAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;YAC7C,IAAI,EAAE,CAAC;YAAA,YAAY,EAAE,CAAC;YACtB,MAAM,YAAY,GAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpD,IAAG,YAAY,CAAC,WAAW,KAAG,MAAM,CAAC,OAAO,CAAC,WAAW;gBAAC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAClH,MAAM,MAAM,GAAC,EAAC,IAAI,EAAC,aAAa,EAAC,SAAS,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,CAAC;YACjG,MAAM,MAAM,GAAC,IAAI,+BAAW,CAAC,IAAI,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAC,QAAQ,EAAC,KAAK,CAAA,EAAE,GAAC,OAAO,KAAG,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1H,MAAM,aAAa,GAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,KAAK,OAAO,CAAC,CAAC;YACzD,MAAM,KAAK,GAAC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAC,EAAC,GAAG,MAAM,EAAC,IAAI,EAAC,QAAQ,EAAC,aAAa,EAAC,CAAC,CAAC;YAClF,IAAG,KAAK,CAAC,KAAK,KAAG,IAAI,IAAE,CAAC,iBAAE,CAAC,UAAU,CAAC,aAAa,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACtG,MAAM,KAAK,GAAC,iBAAE,CAAC,YAAY,CAAC,aAAa,EAAC,MAAM,CAAC,EAAC,SAAS,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9E,IAAI,CAAC,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC,kBAAkB,CAAC,CAAC;YACnD,IAAG,SAAS,CAAC,OAAO,KAAG,CAAC,IAAE,SAAS,CAAC,OAAO,KAAG,OAAO,IAAE,SAAS,CAAC,KAAK,KAAG,MAAM,CAAC,KAAK,IAAE,SAAS,CAAC,MAAM,KAAG,MAAM,CAAC,OAAO,CAAC,OAAO;gBAAC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1L,MAAM,MAAM,GAAC,IAAI,+BAAW,CAAC,IAAI,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAC,QAAQ,EAAC,KAAK,CAAA,EAAE,GAAC,OAAO,KAAG,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1H,MAAM,MAAM,GAAC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAC,EAAC,GAAG,MAAM,EAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,YAAY,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,EAAC,KAAK,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;gBACpK,YAAY,EAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAC,YAAY,EAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAC,WAAW,EAAC,MAAM,CAAC,WAAW,EAAC,oBAAoB,EAAC,CAAC,CAAC;YAChJ,IAAG,MAAM,CAAC,KAAK,KAAG,IAAI;gBAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,YAAY,CAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC;QAC3D,CAAC;QACD,iGAAiG;QACjG,YAAY,EAAE,CAAC;QAAA,MAAM,MAAM,GAAC,QAAQ,CAAC,IAAI,EAA2B,CAAC;QACrE,KAAI,MAAM,CAAC,KAAK,EAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;YAAC,IAAI,CAAC,IAAA,uCAA8B,EAAC,OAAO,CAAC,EAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,yBAAyB,CAAC,CAAC;QACjK,MAAM,aAAa,GAAwC,EAAE,CAAC;QAC9D,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;YACrB,IAAI,EAAE,CAAC;YACP,MAAM,OAAO,GAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAC,gBAAgB,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAC,uBAAuB,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,WAAW,EAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAC,gBAAgB,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,aAAa,EAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAC,kBAAkB,CAAC,CAAC;YACrQ,MAAM,aAAa,GAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtD,aAAa,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,aAAa,EAAC,OAAO,CAAC,aAAa,EAAC,mBAAmB,EAAC,aAAa,CAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAC,CAAC;QAC9K,CAAC;QACD,YAAY,EAAE,CAAC;QAAA,OAAO,CAAC,eAAe,EAAE,CAAC;QAAA,MAAM,aAAa,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAC,IAAI,GAAG,EAAiB,CAAC;QACrC,MAAM,GAAG,GAAC,CAAC,IAAW,EAAC,MAAa,EAAC,EAAE,GAAC,IAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAG,MAAM;YAAC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAC;QACvK,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,KAAI,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU;YAAC,KAAI,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,KAAK,IAAE,EAAE;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnH,KAAI,MAAM,GAAG,IAAI,aAAa,EAAC,CAAC;YAC9B,KAAI,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,IAAE,EAAE;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnE,KAAI,MAAM,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAC,CAAC;gBAAA,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAA,yBAAW,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAA,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAC,IAAA,yBAAW,EAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAAA,CAAC;YAC7J,KAAI,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM;gBAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAC,IAAA,yBAAW,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,KAAI,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI;gBAAC,KAAI,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO;oBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5F,KAAI,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5E,KAAI,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAC,GAAG,CAAC,mBAAmB,CAAC,EAAC,CAAC;gBAC/D,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;oBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1D,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO;oBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpE,KAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAC,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;oBAAC,KAAI,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO;wBAAC,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7J,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,CAAC,aAAa,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,MAAM,CAAC,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACtG,uGAAuG;QACvG,MAAM,UAAU,GAAC,IAAA,4BAAY,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,iBAAiB,EAAC,OAAO,EAAC,aAAa,EAAC,KAAK,EAAC,KAAK;YAC1G,OAAO,EAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,aAAa,EAAC,GAAG,CAAC,aAAa,CAAC,wBAAwB,EAAC,mBAAmB,EAAC,GAAG,CAAC,mBAAmB,CAAC,wBAAwB,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC;QAC7O,IAAI,EAAE,CAAC;QACP,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;YACrB,MAAM,UAAU,GAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAC,EAAC,UAAU,EAAC,CAAuB,CAAC;YACrF,IAAG,UAAU,CAAC,IAAI,CAAC,UAAU,KAAG,UAAU,IAAE,UAAU,CAAC,IAAI,CAAC,oBAAoB,KAAG,oBAAoB;gBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC1J,MAAM,EAAC,UAAU,EAAC,CAAC,EAAC,QAAQ,EAAC,EAAE,EAAC,GAAG,OAAO,EAAC,GAAC,UAAU,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,IAAA,4BAAY,EAAC,OAAO,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAC,sBAAsB,CAAC,CAAC;YAAA,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzG,CAAC;QACD,wFAAwF;QACxF,KAAI,MAAM,GAAG,IAAI,IAAI,EAAC,CAAC;YAAA,IAAG,OAAO;gBAAC,MAAM,OAAO,CAAC;YAAA,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAA,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QACrH,IAAG,OAAO;YAAC,MAAM,OAAO,CAAC;QACzB,OAAO,IAAA,0BAAU,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,oBAAoB,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,iBAAiB,EAAC,OAAO,EAAC,aAAa,EAAC,OAAO,EAAC,aAAa,EAAC,KAAK,EAAC,KAAK,EAAC,EAAC,WAAW;YACzK,YAAY,EAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,EAAC,MAAM,EAAC,GAAG,CAAC,MAAM,EAAC,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAC,SAAS,EAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAC,WAAW,EAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAC,aAAa,EAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC,EAAC,CAAsB,CAAC;IACtN,CAAC;YAAO,CAAC;QACP,QAAQ,EAAE,KAAK,EAAE,CAAC;QAAA,OAAO,EAAE,KAAK,EAAE,CAAC;QACnC,MAAM,OAAO,GAAC,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3E,iBAAE,CAAC,MAAM,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;QACjD,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,UAAU,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist-runtime/delivery/bindings.d.ts

@@ -0,0 +1,21 @@
+import type { ExecutionBindings } from '../workflow/lib/context';
+export interface DerivedBindings {
+    executionId: string;
+    derivationSeed: string;
+    values: Record<string, string>;
+}
+export declare function parseDerivedBindings(raw: unknown): DerivedBindings;
+export declare class DeliveryExecutionBindings implements ExecutionBindings {
+    readonly derivationSeed: string;
+    private readonly executionId;
+    private readonly expected?;
+    private readonly values;
+    private sealed;
+    constructor(input: {
+        executionId: string;
+        derivationSeed: string;
+        expected?: DerivedBindings;
+    });
+    recordOrAssertDerivedValue(key: string, value: string): void;
+    seal(): DerivedBindings;
+}

package/dist-runtime/delivery/bindings.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliveryExecutionBindings = void 0;
+exports.parseDerivedBindings = parseDerivedBindings;
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+function parseDerivedBindings(raw) {
+    const input = (0, canonicalData_1.exactObject)(raw, ['executionId', 'derivationSeed', 'values'], 'derived bindings');
+    const values = (0, canonicalData_1.canonicalData)(input.values);
+    if (!values || typeof values !== 'object' || Array.isArray(values))
+        throw new Error('derived values must be an object');
+    for (const [key, value] of Object.entries(values)) {
+        (0, canonicalData_1.nonempty)(key, 'derived key');
+        (0, canonicalData_1.nonempty)(value, 'derived value');
+    }
+    return (0, canonicalData_1.deepFreeze)({ executionId: (0, canonicalData_1.nonempty)(input.executionId, 'executionId'), derivationSeed: (0, canonicalData_1.nonempty)(input.derivationSeed, 'derivationSeed'), values: values });
+}
+class DeliveryExecutionBindings {
+    derivationSeed;
+    executionId;
+    expected;
+    values = Object.create(null);
+    sealed = false;
+    constructor(input) {
+        this.executionId = (0, canonicalData_1.nonempty)(input.executionId, 'executionId');
+        this.derivationSeed = (0, canonicalData_1.nonempty)(input.derivationSeed, 'derivationSeed');
+        this.expected = input.expected && parseDerivedBindings(input.expected);
+        if (this.expected && (this.expected.executionId !== this.executionId || this.expected.derivationSeed !== this.derivationSeed))
+            throw new Error('derived binding identity mismatch');
+    }
+    recordOrAssertDerivedValue(key, value) {
+        if (this.sealed)
+            throw new Error('derived bindings are sealed');
+        (0, canonicalData_1.nonempty)(key, 'derived key');
+        (0, canonicalData_1.nonempty)(value, 'derived value');
+        if (Object.hasOwn(this.values, key))
+            throw new Error(`duplicate derived binding ${key}`);
+        if (this.expected) {
+            if (!Object.hasOwn(this.expected.values, key))
+                throw new Error(`unexpected derived binding ${key}`);
+            if (this.expected.values[key] !== value)
+                throw new Error(`derived binding ${key} differs`);
+        }
+        this.values[key] = value;
+    }
+    seal() {
+        if (this.expected && Object.keys(this.expected.values).some(key => !Object.hasOwn(this.values, key)))
+            throw new Error('missing expected derived bindings');
+        this.sealed = true;
+        return parseDerivedBindings({ executionId: this.executionId, derivationSeed: this.derivationSeed, values: this.values });
+    }
+}
+exports.DeliveryExecutionBindings = DeliveryExecutionBindings;
+//# sourceMappingURL=bindings.js.map

package/dist-runtime/delivery/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../runtime/delivery/bindings.ts"],"names":[],"mappings":";;;AAGA,oDAMC;AARD,iEAAiG;AAEjG,SAAgB,oBAAoB,CAAC,GAAY;IAC/C,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,KAAK,CAAC,MAAM,CAA4B,CAAC;IACtE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,IAAA,wBAAQ,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAAC,IAAA,wBAAQ,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IACtH,OAAO,IAAA,0BAAU,EAAC,EAAE,WAAW,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,cAAc,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAgC,EAAE,CAAC,CAAC;AAC7L,CAAC;AACD,MAAa,yBAAyB;IAC3B,cAAc,CAAS;IACf,WAAW,CAAS;IACpB,QAAQ,CAAmB;IAC3B,MAAM,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,GAAG,KAAK,CAAC;IACvB,YAAY,KAAkF;QAC5F,IAAI,CAAC,WAAW,GAAG,IAAA,wBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAAC,IAAI,CAAC,cAAc,GAAG,IAAA,wBAAQ,EAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtI,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtL,CAAC;IACD,0BAA0B,CAAC,GAAW,EAAE,KAAa;QACnD,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAChE,IAAA,wBAAQ,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAAC,IAAA,wBAAQ,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,UAAU,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IACD,IAAI;QACF,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3J,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3H,CAAC;CACF;AA1BD,8DA0BC"}

package/dist-runtime/delivery/check-code.d.ts

@@ -0,0 +1,19 @@
+export interface ExpectedDevelopmentCode {
+    key: string;
+    contract: string;
+    address: string;
+}
+/** The checker incrementally merges output. A fresh private output file is mandatory. */
+export declare function validateDevelopmentCheckReport(raw: unknown, target: string, expected: readonly ExpectedDevelopmentCode[]): unknown;
+export declare function runDevelopmentCheckCode(input: {
+    root: string;
+    target: string;
+    executionId: string;
+    planHash: string;
+    manifestDir: string;
+    registry: string;
+    metadata: string;
+    effective: Record<string, Record<string, string>>;
+    expected: ExpectedDevelopmentCode[];
+    assertArtifacts: () => Promise<unknown>;
+}): Promise<unknown>;

package/dist-runtime/delivery/check-code.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateDevelopmentCheckReport = validateDevelopmentCheckReport;
+exports.runDevelopmentCheckCode = runDevelopmentCheckCode;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const materialization_1 = require("./materialization");
+/** The checker incrementally merges output. A fresh private output file is mandatory. */
+function validateDevelopmentCheckReport(raw, target, expected) {
+    const value = (0, canonicalData_1.canonicalData)(raw);
+    if (!expected.length || new Set(expected.map(e => e.key)).size !== expected.length)
+        throw Error('Empty expected CheckCode set or key collision');
+    if (!value || Array.isArray(value) || (0, canonicalData_1.canonicalJson)(Object.keys(value)) !== (0, canonicalData_1.canonicalJson)([target]))
+        throw Error('CheckCode target mismatch');
+    const entries = value[target];
+    if (!entries || Array.isArray(entries) || (0, canonicalData_1.canonicalJson)(Object.keys(entries).sort()) !== (0, canonicalData_1.canonicalJson)(expected.map(e => e.key).sort()))
+        throw Error('CheckCode missing/extra entries');
+    for (const e of expected) {
+        const row = entries[e.key];
+        if (!row || row.contract !== e.contract || row.scheme !== 'evm' || typeof row.address !== 'string' || row.address.toLowerCase() !== e.address.toLowerCase() || row.matches !== true || row.error !== null || typeof row.reason !== 'string' || !Number.isSafeInteger(row.onChainBytecodeLength) || row.onChainBytecodeLength <= 0 || !Number.isSafeInteger(row.localBytecodeLength) || row.localBytecodeLength <= 0)
+            throw Error(`CheckCode identity/match failure: ${e.key}`);
+    }
+    return value;
+}
+function command(root, cmd, args, env, log) {
+    return new Promise((resolve, reject) => { const output = node_fs_1.default.createWriteStream(log, { flags: 'wx', mode: 0o600 }); const child = (0, node_child_process_1.spawn)(cmd, args, { cwd: root, env, stdio: ['ignore', 'pipe', 'pipe'] }); child.stdout.pipe(output, { end: false }); child.stderr.pipe(output, { end: false }); child.on('error', error => { output.end(); reject(error); }); child.on('close', code => { output.end(() => code === 0 ? resolve() : reject(Error(`CheckCode command failed (${code}): ${cmd}; see ${log}`))); }); });
+}
+async function runDevelopmentCheckCode(input) {
+    const relative = `.gate-delivery/check-code/${input.executionId}/${(0, node_crypto_1.randomUUID)()}`, directory = (0, materialization_1.developmentPath)(input.root, relative);
+    node_fs_1.default.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const effective = (0, canonicalData_1.canonicalJson)(input.effective) + '\n';
+    (0, materialization_1.atomicDevelopmentWrite)(input.root, `${relative}/effective.json`, effective);
+    const raw = node_path_1.default.join(directory, `${input.target}.raw.json`), env = { ...process.env, HARDHAT_NETWORK: input.target, GATE_WORKFLOW_TARGET: input.target, MANIFEST_DEFAULT_DIR: input.manifestDir };
+    // Configuration's runtime loader selects the actual named target, never a fork.
+    delete env.GATE_DELIVERY_CONTEXT;
+    const snapshot = async () => {
+        if (node_fs_1.default.readFileSync(node_path_1.default.join(input.root, 'contractInfo.json'), 'utf8') !== input.registry || node_fs_1.default.readFileSync(node_path_1.default.join(input.root, 'deploymentInfo.json'), 'utf8') !== input.metadata)
+            throw Error('Registry/metadata changed during CheckCode');
+        return await input.assertArtifacts();
+    };
+    await snapshot();
+    await command(input.root, 'npm', ['run', 'compile', '--', '--network', input.target], env, node_path_1.default.join(directory, 'compile.log'));
+    await snapshot();
+    if (node_fs_1.default.existsSync(raw))
+        throw Error('CheckCode raw output must be fresh');
+    await command(input.root, process.execPath, [node_path_1.default.join(input.root, 'node_modules/gate-evm-tools/bin/cli.js'), 'check', '--scheme', 'evm', '--network', input.target, '--config', node_path_1.default.join(directory, 'effective.json'), '--output', raw], env, node_path_1.default.join(directory, 'check.log'));
+    const artifacts = await snapshot();
+    if (!node_fs_1.default.existsSync(raw))
+        throw Error('CheckCode completed without raw output');
+    const stat = node_fs_1.default.lstatSync(raw);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+        throw Error('Invalid CheckCode raw output');
+    const bytes = node_fs_1.default.readFileSync(raw);
+    validateDevelopmentCheckReport(JSON.parse(bytes.toString('utf8')), input.target, input.expected);
+    return { version: 1, executionId: input.executionId, planHash: input.planHash, target: input.target, rawFile: `${relative}/${input.target}.raw.json`, rawHash: (0, materialization_1.byteHash)(bytes), registryHash: (0, materialization_1.byteHash)(input.registry), metadataHash: (0, materialization_1.byteHash)(input.metadata), effectiveHash: (0, materialization_1.byteHash)(effective), artifacts };
+}
+//# sourceMappingURL=check-code.js.map

package/dist-runtime/delivery/check-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-code.js","sourceRoot":"","sources":["../../runtime/delivery/check-code.ts"],"names":[],"mappings":";;;;;AAQA,wEAOC;AAID,0DAkBC;AArCD,sDAAyB;AACzB,0DAA6B;AAC7B,2DAAyC;AACzC,6CAAuC;AACvC,iEAA0E;AAC1E,uDAAkF;AAElF,yFAAyF;AACzF,SAAgB,8BAA8B,CAAC,GAAW,EAAC,MAAa,EAAC,QAA2C;IACnH,MAAM,KAAK,GAAC,IAAA,6BAAa,EAAC,GAAG,CAAQ,CAAC;IACtC,IAAG,CAAC,QAAQ,CAAC,MAAM,IAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzI,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,IAAA,6BAAa,EAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAG,IAAA,6BAAa,EAAC,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACtI,MAAM,OAAO,GAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,IAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAE,IAAA,6BAAa,EAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAA,6BAAa,EAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1M,KAAI,MAAM,CAAC,IAAI,QAAQ,EAAC,CAAC;QAAA,MAAM,GAAG,GAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,QAAQ,KAAG,CAAC,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,KAAG,KAAK,IAAE,OAAO,GAAG,CAAC,OAAO,KAAG,QAAQ,IAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAE,GAAG,CAAC,OAAO,KAAG,IAAI,IAAE,GAAG,CAAC,KAAK,KAAG,IAAI,IAAE,OAAO,GAAG,CAAC,MAAM,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAE,GAAG,CAAC,qBAAqB,IAAE,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAE,GAAG,CAAC,mBAAmB,IAAE,CAAC;YAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAAA,CAAC;IACxd,OAAO,KAAK,CAAC;AACd,CAAC;AACD,SAAS,OAAO,CAAC,IAAW,EAAC,GAAU,EAAC,IAAa,EAAC,GAAqB,EAAC,GAAU;IACrF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,MAAM,GAAC,iBAAE,CAAC,iBAAiB,CAAC,GAAG,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAA,0BAAK,EAAC,GAAG,EAAC,IAAI,EAAC,EAAC,GAAG,EAAC,IAAI,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,IAAI,CAAA,EAAE,GAAC,MAAM,CAAC,GAAG,CAAC,GAAE,EAAE,CAAA,IAAI,KAAG,CAAC,CAAA,CAAC,CAAA,OAAO,EAAE,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,MAAM,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;AAC5b,CAAC;AACM,KAAK,UAAU,uBAAuB,CAAC,KAA8O;IAC3R,MAAM,QAAQ,GAAC,6BAA6B,KAAK,CAAC,WAAW,IAAI,IAAA,wBAAU,GAAE,EAAE,EAAC,SAAS,GAAC,IAAA,iCAAe,EAAC,KAAK,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;IAAA,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IACnL,MAAM,SAAS,GAAC,IAAA,6BAAa,EAAC,KAAK,CAAC,SAAS,CAAC,GAAC,IAAI,CAAC;IAAA,IAAA,wCAAsB,EAAC,KAAK,CAAC,IAAI,EAAC,GAAG,QAAQ,iBAAiB,EAAC,SAAS,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC,EAAC,GAAG,GAAmB,EAAC,GAAG,OAAO,CAAC,GAAG,EAAC,eAAe,EAAC,KAAK,CAAC,MAAM,EAAC,oBAAoB,EAAC,KAAK,CAAC,MAAM,EAAC,oBAAoB,EAAC,KAAK,CAAC,WAAW,EAAC,CAAC;IACvM,gFAAgF;IAChF,OAAO,GAAG,CAAC,qBAAqB,CAAC;IACjC,MAAM,QAAQ,GAAC,KAAK,IAAE,EAAE;QACvB,IAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,mBAAmB,CAAC,EAAC,MAAM,CAAC,KAAG,KAAK,CAAC,QAAQ,IAAE,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,qBAAqB,CAAC,EAAC,MAAM,CAAC,KAAG,KAAK,CAAC,QAAQ;YAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtO,OAAO,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,QAAQ,EAAE,CAAC;IAAA,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,KAAK,EAAC,CAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,MAAM,CAAC,EAAC,GAAG,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC;IAAA,MAAM,QAAQ,EAAE,CAAC;IACzJ,IAAG,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxE,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,wCAAwC,CAAC,EAAC,OAAO,EAAC,UAAU,EAAC,KAAK,EAAC,WAAW,EAAC,KAAK,CAAC,MAAM,EAAC,UAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,gBAAgB,CAAC,EAAC,UAAU,EAAC,GAAG,CAAC,EAAC,GAAG,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,WAAW,CAAC,CAAC,CAAC;IACnQ,MAAM,SAAS,GAAC,MAAM,QAAQ,EAAE,CAAC;IACjC,IAAG,CAAC,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAC,iBAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,KAAK,KAAG,CAAC;QAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClI,MAAM,KAAK,GAAC,iBAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAAA,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAC,KAAK,CAAC,MAAM,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChI,OAAO,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,MAAM,WAAW,EAAC,OAAO,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,EAAC,YAAY,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,YAAY,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,aAAa,EAAC,IAAA,0BAAQ,EAAC,SAAS,CAAC,EAAC,SAAS,EAAC,CAAC;AAC7R,CAAC"}

package/dist-runtime/delivery/closure-format.d.ts

@@ -0,0 +1,77 @@
+declare const policy: "gate-custom-cjs@1";
+export interface ClosureFile {
+    path: string;
+    kind: "module" | "json" | "data" | "config" | "metadata";
+    digest: string;
+    emittedDigest: string | null;
+}
+export interface ClosureEdge {
+    importer: string;
+    specifier: string;
+    target: string;
+    kind: "runtime" | "config";
+}
+export interface ClosurePackage {
+    lockLocation: string;
+    name: string;
+    version: string;
+    integrity: string;
+    source: {
+        kind: "registry" | "tarball";
+        identity: string;
+    };
+    metadataDigest: string;
+    resolution: Record<string, unknown>;
+    payload: {
+        path: string;
+        digest: string;
+    }[];
+    payloadDigest: string;
+}
+export interface HostAdapter {
+    kind: "isolated-cjs" | "hardhat-2.26.3-ts-node-10.9.2";
+    preload: {
+        path: string;
+        digest: string;
+    } | null;
+    packages: {
+        name: string;
+        version: string;
+        metadataDigest: string;
+    }[];
+}
+export interface CustomInputClosure {
+    version: 1;
+    policy: typeof policy;
+    roots: string[];
+    files: ClosureFile[];
+    edges: ClosureEdge[];
+    packages: ClosurePackage[];
+    compiler: {
+        version: string;
+        options: Record<string, unknown>;
+        config: string | null;
+    };
+    hostAdapter: HostAdapter;
+    resolver: {
+        policy: "node-default-cjs";
+        version: string;
+        flags: string[];
+        environment: "empty";
+    };
+    closureHash: string;
+}
+export declare const closureRuntimeOptions: {
+    target: number;
+    module: number;
+    esModuleInterop: boolean;
+    resolveJsonModule: boolean;
+    isolatedModules: boolean;
+    sourceMap: boolean;
+    inlineSourceMap: boolean;
+    importHelpers: boolean;
+    removeComments: boolean;
+    newLine: number;
+};
+export declare function parseCustomInputClosure(raw: unknown): CustomInputClosure;
+export {};