gate-evm-tools 1.0.28 → 1.0.31

package/dist-runtime/delivery/eoa-observation.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EoaRpcFailure = void 0;
+exports.executionContext = executionContext;
+exports.rpcQuantity = rpcQuantity;
+exports.verifyEoaChain = verifyEoaChain;
+exports.verifyEoaCode = verifyEoaCode;
+exports.eoaObservationReference = eoaObservationReference;
+exports.observeEoaTransaction = observeEoaTransaction;
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const export_1 = require("./export");
+const data_1 = require("./data");
+const execution_model_1 = require("./execution-model");
+const eoa_signed_1 = require("./eoa-signed");
+const observations_1 = require("./observations");
+class EoaRpcFailure extends Error {
+    constructor(cause) { super(`EOA RPC failed: ${cause instanceof Error ? cause.message : String(cause)}`, { cause }); }
+}
+exports.EoaRpcFailure = EoaRpcFailure;
+function executionContext(raw, plan) {
+    const c = (0, canonicalData_1.exactObject)((0, data_1.strictData)(raw), ['executionId', 'planHash', 'releaseHash', 'operator', 'policyHash', 'chainId', 'target', 'finality'], 'EOA execution context');
+    for (const key of ['executionId', 'planHash', 'operator', 'chainId', 'target'])
+        if (c[key] !== plan[key])
+            throw new Error(`Execution context ${key} mismatch`);
+    (0, canonicalData_1.digest)(c.releaseHash, 'release');
+    (0, canonicalData_1.digest)(c.policyHash, 'policy');
+    const f = c.finality;
+    (0, canonicalData_1.exactObject)(f, f?.kind === 'rpc_finalized' ? ['kind'] : ['kind', 'depth'], 'finality policy');
+    if (f.kind !== 'rpc_finalized' && (f.kind !== 'confirmations' || BigInt((0, observations_1.uint256)(f.depth, 'confirmation depth')) < 1n))
+        throw new Error('Invalid explicit finality policy');
+    return (0, canonicalData_1.deepFreeze)(c);
+}
+function object(v, label) { if (!v || typeof v !== 'object' || Array.isArray(v))
+    throw new Error(`Invalid RPC ${label}`); return v; }
+function rpcQuantity(v) {
+    // Some providers zero-pad hex quantities. Parse exactly with BigInt, never Number.
+    if (typeof v !== 'string' || !/^0x[0-9a-fA-F]+$/.test(v))
+        throw new Error('Invalid RPC quantity');
+    return (0, observations_1.uint256)(BigInt(v).toString(), 'RPC quantity');
+}
+function address(v) { if (typeof v !== 'string' || !/^0x[0-9a-fA-F]{40}$/.test(v))
+    throw new Error('Invalid RPC address'); return v.toLowerCase(); }
+function bytes(v) { if (typeof v !== 'string' || !/^0x(?:[0-9a-fA-F]{2})*$/.test(v))
+    throw new Error('Invalid RPC bytes'); return v.toLowerCase(); }
+function hash(v) { return (0, observations_1.hash32)(bytes(v), 'RPC hash'); }
+const tag = (v) => '0x' + BigInt(v).toString(16);
+async function verifyEoaChain(provider, context) {
+    if (rpcQuantity(await provider.request('eth_chainId', [])) !== context.chainId)
+        throw new Error('RPC chain identity mismatch');
+}
+async function verifyEoaCode(provider, executor, block) {
+    if (await provider.request('eth_getCode', [executor, block]) !== '0x')
+        throw new Error('Unsupported executor: EOA with empty code required');
+}
+function rpcEnvelope(tx) {
+    const typeString = rpcQuantity(tx.type);
+    if (!['0', '1', '2'].includes(typeString))
+        throw new Error('Unsupported RPC transaction type');
+    const type = Number(typeString);
+    const accessList = type === 0 ? [] : (() => {
+        if (!Array.isArray(tx.accessList))
+            throw new Error('Missing RPC access list');
+        return tx.accessList.map(item => { const a = object(item, 'access list'); if (!Array.isArray(a.storageKeys))
+            throw new Error('Invalid RPC storage keys'); return { address: address(a.address), storageKeys: a.storageKeys.map(hash) }; });
+    })();
+    if (type === 0 && tx.accessList !== undefined && !(0, execution_model_1.same)(tx.accessList, []))
+        throw new Error('Legacy RPC access list mismatch');
+    let chainId;
+    if (type === 0) {
+        // EIP-155 legacy JSON-RPC responses need not expose chainId. The protected
+        // signature's v is the chain identity; never substitute the current RPC chain.
+        const v = BigInt(rpcQuantity(tx.v));
+        if (v < 37n)
+            throw new Error('Unprotected legacy RPC chain identity');
+        chainId = ((v - 35n) / 2n).toString();
+        if (tx.chainId !== undefined && rpcQuantity(tx.chainId) !== chainId)
+            throw new Error('Legacy RPC chainId/v mismatch');
+    }
+    else
+        chainId = rpcQuantity(tx.chainId);
+    return { chainId, signer: address(tx.from), nonce: rpcQuantity(tx.nonce), to: address(tx.to), value: rpcQuantity(tx.value), data: bytes(tx.input), operation: 0, type, gasLimit: rpcQuantity(tx.gas), gasPrice: type === 2 ? null : rpcQuantity(tx.gasPrice), maxFeePerGas: type === 2 ? rpcQuantity(tx.maxFeePerGas) : null, maxPriorityFeePerGas: type === 2 ? rpcQuantity(tx.maxPriorityFeePerGas) : null, accessList };
+}
+function eoaObservationReference(transactionId, transactionHash) { return `${transactionId}@${(0, observations_1.hash32)(transactionHash, 'transaction hash')}`; }
+/** Finite, read-only hash query. Missing RPC results remain pending. No block scanning or fallback finality. */
+async function observeEoaTransaction(input) {
+    const plan = (0, export_1.immutableDeliveryPlan)(input.plan), context = executionContext(input.context, plan), { index } = input;
+    const provider = { async request(method, params) { try {
+            return await input.provider.request(method, params);
+        }
+        catch (error) {
+            throw new EoaRpcFailure(error);
+        } } };
+    const expected = plan.transactions[index], transactionHash = (0, observations_1.hash32)(input.transactionHash, 'transaction hash');
+    if (!expected)
+        throw new Error('Unknown plan transaction index');
+    if (expected.operation !== 0)
+        throw new Error('Unsupported EOA operation');
+    await verifyEoaChain(provider, context);
+    const txRaw = await provider.request('eth_getTransactionByHash', [transactionHash]);
+    const receiptRaw = await provider.request('eth_getTransactionReceipt', [transactionHash]);
+    if (txRaw === null || receiptRaw === null)
+        return;
+    const tx = object(txRaw, 'transaction'), receipt = object(receiptRaw, 'receipt'), actual = rpcEnvelope(tx);
+    if (hash(tx.hash) !== transactionHash || hash(receipt.transactionHash) !== transactionHash || actual.chainId !== plan.chainId || actual.signer !== expected.executor || actual.to !== expected.to || actual.value !== expected.value || actual.data !== expected.data || address(receipt.from) !== expected.executor || address(receipt.to) !== expected.to)
+        throw new Error('RPC transaction/receipt identity mismatch');
+    if (input.original) {
+        const signed = (0, eoa_signed_1.verifyEoaSigned)(input.original.signed.rawTransaction, input.original.unsigned);
+        if (!(0, execution_model_1.same)(signed, input.original.signed) || signed.transactionHash !== transactionHash || !(0, execution_model_1.same)(actual, input.original.unsigned))
+            throw new Error('RPC transaction differs from original signed envelope');
+    }
+    if (tx.blockHash === null || tx.blockNumber === null || tx.transactionIndex === null)
+        return;
+    const blockHash = hash(receipt.blockHash), blockNumber = rpcQuantity(receipt.blockNumber), indexString = rpcQuantity(receipt.transactionIndex);
+    if (hash(tx.blockHash) !== blockHash || rpcQuantity(tx.blockNumber) !== blockNumber || rpcQuantity(tx.transactionIndex) !== indexString)
+        throw new Error('RPC inclusion identity mismatch');
+    const canonicalRaw = await provider.request('eth_getBlockByNumber', [tag(blockNumber), false]);
+    if (canonicalRaw === null)
+        return;
+    const canonical = object(canonicalRaw, 'canonical block');
+    if (hash(canonical.hash) !== blockHash)
+        return; // Unfinalized reorg: reread the same hash later.
+    if (rpcQuantity(canonical.number) !== blockNumber || !Array.isArray(canonical.transactions) || BigInt(indexString) >= BigInt(canonical.transactions.length) || hash(canonical.transactions[Number(indexString)]) !== transactionHash)
+        throw new Error('RPC canonical inclusion mismatch');
+    await verifyEoaCode(provider, expected.executor, tag(blockNumber));
+    const headRaw = await provider.request('eth_getBlockByNumber', [context.finality.kind === 'rpc_finalized' ? 'finalized' : 'latest', false]);
+    if (headRaw === null)
+        return;
+    const head = object(headRaw, 'finality block'), headNumber = rpcQuantity(head.number), headHash = hash(head.hash);
+    const headCanonicalRaw = await provider.request('eth_getBlockByNumber', [tag(headNumber), false]);
+    if (headCanonicalRaw === null)
+        return;
+    const headCanonical = object(headCanonicalRaw, 'canonical finality block');
+    if (hash(headCanonical.hash) !== headHash || rpcQuantity(headCanonical.number) !== headNumber)
+        return;
+    // Close the observation window by rereading inclusion after finality/code queries.
+    const endRaw = await provider.request('eth_getBlockByNumber', [tag(blockNumber), false]);
+    if (endRaw === null || hash(object(endRaw, 'canonical block').hash) !== blockHash)
+        return;
+    const finalized = context.finality.kind === 'rpc_finalized' ? BigInt(headNumber) >= BigInt(blockNumber) : BigInt(headNumber) - BigInt(blockNumber) + 1n >= BigInt(context.finality.depth);
+    const status = rpcQuantity(receipt.status);
+    if (status !== '0' && status !== '1')
+        throw new Error('Invalid RPC receipt status');
+    return (0, canonicalData_1.deepFreeze)({ observationId: eoaObservationReference(expected.transactionId, transactionHash), executionId: plan.executionId, planHash: plan.planHash, chainId: plan.chainId, target: plan.target, transaction: expected, transactionHash, state: finalized ? status === '1' ? 'finalized-success' : 'finalized-reverted' : 'included-unfinalized', blockNumber, blockHash });
+}
+//# sourceMappingURL=eoa-observation.js.map

package/dist-runtime/delivery/eoa-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eoa-observation.js","sourceRoot":"","sources":["../../runtime/delivery/eoa-observation.ts"],"names":[],"mappings":";;;AAeA,4CAQC;AAED,kCAIC;AAKD,wCAEC;AACD,sCAEC;AAqBD,0DAA6K;AAM7K,sDAuCC;AAzGD,iEAAgF;AAChF,qCAAiD;AACjD,iCAAoC;AACpC,uDAAmF;AACnF,6CAA+C;AAC/C,iDAA8E;AAG9E,MAAa,aAAc,SAAQ,KAAK;IAAG,YAAY,KAAc,IAAI,KAAK,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;CAAE;AAA3K,sCAA2K;AAO3K,SAAgB,gBAAgB,CAAC,GAAY,EAAE,IAAkB;IAC7D,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAC,UAAU,EAAC,aAAa,EAAC,UAAU,EAAC,YAAY,EAAC,SAAS,EAAC,QAAQ,EAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAChK,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAC,UAAU,EAAC,UAAU,EAAC,SAAS,EAAC,QAAQ,CAAU;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,WAAW,CAAC,CAAC;IACpK,IAAA,sBAAM,EAAC,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAAC,IAAA,sBAAM,EAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAuB,CAAC;IACpC,IAAA,2BAAW,EAAC,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC7F,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC3K,OAAO,IAAA,0BAAU,EAAC,CAAmC,CAAC,CAAC;AAC3D,CAAC;AACD,SAAS,MAAM,CAAC,CAAU,EAAE,KAAa,IAA6B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAA4B,CAAC,CAAC,CAAC;AAC1M,SAAgB,WAAW,CAAC,CAAU;IAClC,mFAAmF;IACnF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAClG,OAAO,IAAA,sBAAO,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC;AACzD,CAAC;AACD,SAAS,OAAO,CAAC,CAAU,IAAY,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACrK,SAAS,KAAK,CAAC,CAAU,IAAY,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACrK,SAAS,IAAI,CAAC,CAAU,IAAY,OAAO,IAAA,qBAAM,EAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AAC1E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClD,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAA4B;IAC/E,IAAI,WAAW,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACnI,CAAC;AACM,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAAa;IACjF,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACjJ,CAAC;AACD,SAAS,WAAW,CAAC,EAA2B;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAc,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9E,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/O,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAA,sBAAI,EAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9H,IAAI,OAAe,CAAC;IACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACb,2EAA2E;QAC3E,+EAA+E;QAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1H,CAAC;;QAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;AAC/Z,CAAC;AACD,SAAgB,uBAAuB,CAAC,aAAqB,EAAE,eAAuB,IAAY,OAAO,GAAG,aAAa,IAAI,IAAA,qBAAM,EAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;AAK7K,gHAAgH;AACzG,KAAK,UAAU,qBAAqB,CAAC,KAA4B;IACpE,MAAM,IAAI,GAAG,IAAA,8BAAqB,EAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACnH,MAAM,QAAQ,GAAW,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;YAAC,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9K,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAA,qBAAM,EAAC,KAAK,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAC/G,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3E,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3G,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1Z,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAA,sBAAI,EAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,KAAK,eAAe,IAAI,CAAC,IAAA,sBAAI,EAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC/M,CAAC;IACD,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/I,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5L,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/F,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,iDAAiD;IACjG,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1R,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5I,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClH,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAClG,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,OAAO;IACtG,mFAAmF;IACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO;IAC1F,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1L,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpF,OAAO,IAAA,0BAAU,EAAC,EAAE,aAAa,EAAE,uBAAuB,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AACxX,CAAC"}

package/dist-runtime/delivery/eoa-signed.d.ts

@@ -0,0 +1,2 @@
+import { type UnsignedEnvelope, type SignedRecord } from './execution-model';
+export declare function verifyEoaSigned(raw: unknown, frozen: UnsignedEnvelope): SignedRecord;

package/dist-runtime/delivery/eoa-signed.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyEoaSigned = verifyEoaSigned;
+/** Exact EIP-155 / EIP-2930 / EIP-1559 signed bytes. No Number conversion of quantities. */
+const ethers_1 = require("ethers");
+const execution_model_1 = require("./execution-model");
+const observations_1 = require("./observations");
+function list(v, length) {
+    if (!Array.isArray(v) || (length !== undefined && v.length !== length))
+        throw new Error('Invalid signed RLP list');
+    return v;
+}
+function bytes(v) {
+    if (typeof v !== 'string' || !/^0x(?:[0-9a-f]{2})*$/.test(v))
+        throw new Error('Invalid signed RLP bytes');
+    return v;
+}
+function quantity(v) {
+    const b = bytes(v);
+    if (b.startsWith('0x00'))
+        throw new Error('Noncanonical signed quantity');
+    return (0, observations_1.uint256)(b === '0x' ? '0' : BigInt(b).toString(), 'signed quantity');
+}
+function address(v) {
+    const b = bytes(v);
+    if (!/^0x[0-9a-f]{40}$/.test(b))
+        throw new Error('Invalid signed destination/address');
+    return b;
+}
+function rlpQuantity(n) { const s = n.toString(16); return n === 0n ? '0x' : '0x' + (s.length % 2 ? '0' : '') + s; }
+function verifyEoaSigned(raw, frozen) {
+    if (frozen.operation !== 0)
+        throw new Error('Unsupported EOA operation');
+    if (typeof raw !== 'string' || !/^0x(?:[0-9a-f]{2})+$/.test(raw))
+        throw new Error('Invalid signed bytes');
+    const first = parseInt(raw.slice(2, 4), 16), type = first >= 0xc0 ? 0 : first;
+    if (![0, 1, 2].includes(type))
+        throw new Error('Unsupported signed transaction type');
+    const prefix = type ? raw.slice(0, 4) : '0x', payload = type ? '0x' + raw.slice(4) : raw;
+    const fields = list((0, ethers_1.decodeRlp)(payload), type === 0 ? 9 : type === 1 ? 11 : 12);
+    if ((0, ethers_1.encodeRlp)(fields) !== payload)
+        throw new Error('Noncanonical signed RLP');
+    const unsigned = fields.slice(0, -3), [v, r, s] = fields.slice(-3).map(quantity);
+    let parity, chainId;
+    if (type === 0) {
+        if (BigInt(v) < 35n)
+            throw new Error('Signed legacy transaction requires EIP-155 chain identity');
+        parity = (BigInt(v) - 35n) % 2n;
+        chainId = ((BigInt(v) - 35n) / 2n).toString();
+        unsigned.push(rlpQuantity(BigInt(chainId)), '0x', '0x');
+    }
+    else {
+        chainId = quantity(fields[0]);
+        parity = BigInt(v);
+    }
+    if (parity > 1n)
+        throw new Error('Invalid signed parity');
+    const signingHash = (0, ethers_1.keccak256)(prefix + (0, ethers_1.encodeRlp)(unsigned).slice(2));
+    const signer = (0, ethers_1.recoverAddress)(signingHash, { r: '0x' + BigInt(r).toString(16).padStart(64, '0'), s: '0x' + BigInt(s).toString(16).padStart(64, '0'), yParity: Number(parity) }).toLowerCase();
+    const offset = type ? 1 : 0, gasIndex = type === 2 ? 4 : offset + 2;
+    const accessList = type === 0 ? [] : list(fields[gasIndex + 4]).map(entry => {
+        const [a, keys] = list(entry, 2);
+        return { address: address(a), storageKeys: list(keys).map(k => { const b = bytes(k); if (!/^0x[0-9a-f]{64}$/.test(b))
+                throw new Error('Invalid signed storage key'); return b; }) };
+    });
+    const actual = {
+        chainId, signer, nonce: quantity(fields[offset]), to: address(fields[gasIndex + 1]), value: quantity(fields[gasIndex + 2]), data: bytes(fields[gasIndex + 3]), operation: 0, type: type,
+        gasLimit: quantity(fields[gasIndex]), gasPrice: type === 2 ? null : quantity(fields[offset + 1]), maxFeePerGas: type === 2 ? quantity(fields[3]) : null, maxPriorityFeePerGas: type === 2 ? quantity(fields[2]) : null, accessList,
+    };
+    if (!(0, execution_model_1.same)(actual, frozen))
+        throw new Error('Actual signed transaction differs from frozen approval snapshot');
+    return { rawTransaction: raw, transactionHash: (0, ethers_1.keccak256)(raw), unsignedDigest: (0, execution_model_1.unsignedHash)(frozen) };
+}
+//# sourceMappingURL=eoa-signed.js.map

package/dist-runtime/delivery/eoa-signed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eoa-signed.js","sourceRoot":"","sources":["../../runtime/delivery/eoa-signed.ts"],"names":[],"mappings":";;AAyBA,0CA6BC;AAtDD,4FAA4F;AAC5F,mCAAyE;AACzE,uDAAiG;AACjG,iDAAyC;AAGzC,SAAS,IAAI,CAAC,CAAM,EAAE,MAAe;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACnH,OAAO,CAAC,CAAC;AACb,CAAC;AACD,SAAS,KAAK,CAAC,CAAM;IACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1G,OAAO,CAAC,CAAC;AACb,CAAC;AACD,SAAS,QAAQ,CAAC,CAAM;IACpB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1E,OAAO,IAAA,sBAAO,EAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC/E,CAAC;AACD,SAAS,OAAO,CAAC,CAAM;IACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvF,OAAO,CAAC,CAAC;AACb,CAAC;AACD,SAAS,WAAW,CAAC,CAAS,IAAY,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACpI,SAAgB,eAAe,CAAC,GAAY,EAAE,MAAwB;IAClE,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACzE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAQ,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,IAAA,kBAAS,EAAC,MAAM,CAAC,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,MAAc,EAAE,OAAe,CAAC;IACpC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;QAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/E,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7D,IAAI,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAA,kBAAS,EAAC,MAAM,GAAG,IAAA,kBAAS,EAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvM,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACxE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxL,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAqB;QAC7B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAiB;QACpM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU;KACrO,CAAC;IACF,IAAI,CAAC,IAAA,sBAAI,EAAC,MAAM,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC9G,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,cAAc,EAAE,IAAA,8BAAY,EAAC,MAAM,CAAC,EAAE,CAAC;AAC1G,CAAC"}

package/dist-runtime/delivery/eoa.d.ts

@@ -0,0 +1,81 @@
+import { type ExecutionSnapshot, type UnsignedEnvelope } from './execution-model';
+import type { ExecutionStore } from './execution-store';
+import { type TransactionObservation } from './observations';
+import { type EoaExecutionContext, type EoaRpc } from './eoa-observation';
+export { verifyEoaSigned } from './eoa-signed';
+export { observeEoaTransaction, eoaObservationReference } from './eoa-observation';
+export type { EoaRpc, EoaExecutionContext, EoaFinality, EoaObservationRequest } from './eoa-observation';
+export interface EoaApprovalSnapshot {
+    context: EoaExecutionContext;
+    transaction: ExecutionSnapshot['plan']['transactions'][number];
+    unsigned: UnsignedEnvelope;
+    signingRequestId: string;
+}
+/** Supplied only by controlled trusted host code. JSON flags and agent-provided functions confer no authority. */
+export interface EoaApprovalCapability {
+    withApproval<T>(snapshot: EoaApprovalSnapshot, controlledWork: () => Promise<T>): Promise<T>;
+}
+export interface EoaSignOnlySigner {
+    address: string;
+    /** Must sign only, retain the result under this immutable request ID, and NEVER broadcast. */
+    sign(signingRequestId: string, unsigned: UnsignedEnvelope): Promise<string>;
+    /** Read-only original-result lookup. Never start new signing when the intent is uncertain. */
+    recover?(signingRequestId: string): Promise<string | undefined>;
+}
+export interface EoaExecutionOptions {
+    plan: unknown;
+    context: EoaExecutionContext;
+    store: ExecutionStore;
+    provider: EoaRpc;
+    signer?: EoaSignOnlySigner;
+    approval?: EoaApprovalCapability;
+}
+export interface EoaExecutionResult {
+    status: 'submitted' | 'pending' | 'advanced' | 'complete' | 'reverted' | 'signing-result-unavailable';
+    snapshot: ExecutionSnapshot;
+}
+/** Explicit finite hash sets by plan transaction ID. No discovery, scanning, or implicit resend. */
+export type EoaHashReferences = Readonly<Record<string, readonly string[]>>;
+export declare function createDeliveryEoaExecution(options: EoaExecutionOptions): Readonly<{
+    /** Current segment only; an existing frozen payload is returned without nonce rebasing. */
+    prepareSafe(rawProfile: unknown): Promise<{
+        envelope: import("./safe").SafeEnvelope;
+        snapshot: ExecutionSnapshot;
+    }>;
+    /** One active operator transaction per call. Frozen envelopes are explicit; no implicit gas/nonce defaults. */
+    execute(rawUnsigned?: unknown): Promise<EoaExecutionResult>;
+    reconcile(references?: EoaHashReferences): Promise<EoaExecutionResult>;
+    /** Revalidates the durable contiguous prefix under the claim before producing trusted export progress. */
+    export(): Promise<{
+        model: {
+            safeEnvelopes: {
+                schema: string;
+                version: number;
+                status: string;
+                plan: import("./plan").DeliveryPlan;
+                envelope: import("./safe").SafeEnvelope;
+                unsignedExecTransaction: string;
+            }[];
+            safePreparation: string;
+            version: 1;
+            schema: "gate-delivery-export";
+            status: "artifact-delivered";
+            plan: import("./plan").DeliveryPlan;
+            fullRange: {
+                start: number;
+                end: number;
+            };
+            actionableRange: {
+                start: number;
+                end: number;
+            } | null;
+            completed: TransactionObservation[];
+            dependencies: {
+                transactionId: string;
+                after: string[];
+            }[];
+        };
+        json: string;
+        markdown: string;
+    }>;
+}>;

package/dist-runtime/delivery/eoa.js

@@ -0,0 +1,274 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.eoaObservationReference = exports.observeEoaTransaction = exports.verifyEoaSigned = void 0;
+exports.createDeliveryEoaExecution = createDeliveryEoaExecution;
+/** Host-injected EOA execution kernel. It is not a production host or Safe adapter. */
+const safe_observation_1 = require("./safe-observation");
+const safe_prepare_1 = require("./safe-prepare");
+const safe_1 = require("./safe");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const export_1 = require("./export");
+const execution_model_1 = require("./execution-model");
+const observations_1 = require("./observations");
+const eoa_observation_1 = require("./eoa-observation");
+const eoa_signed_1 = require("./eoa-signed");
+var eoa_signed_2 = require("./eoa-signed");
+Object.defineProperty(exports, "verifyEoaSigned", { enumerable: true, get: function () { return eoa_signed_2.verifyEoaSigned; } });
+var eoa_observation_2 = require("./eoa-observation");
+Object.defineProperty(exports, "observeEoaTransaction", { enumerable: true, get: function () { return eoa_observation_2.observeEoaTransaction; } });
+Object.defineProperty(exports, "eoaObservationReference", { enumerable: true, get: function () { return eoa_observation_2.eoaObservationReference; } });
+function createDeliveryEoaExecution(options) {
+    const plan = (0, export_1.immutableDeliveryPlan)(options.plan), context = (0, eoa_observation_1.executionContext)(options.context, plan);
+    const contextHash = (0, canonicalData_1.semanticHash)({ schema: 'gate-delivery-eoa-context', version: 1, context });
+    const { store, provider, signer, approval } = options;
+    async function claim(work) {
+        const previous = await store.readExecution(plan.executionId);
+        return store.withExecutionClaim({ plan, contextHash, expectedRevision: previous?.revision ?? null }, async (c, s) => {
+            if (s.blockedReason !== null)
+                throw new Error(`Execution blocked: ${s.blockedReason}`);
+            await verifyPrefix(c, s);
+            return work(c, s);
+        });
+    }
+    function read(tx, transactionHash) {
+        return (0, eoa_observation_1.observeEoaTransaction)({ plan, context, provider, index: tx.index, transactionHash, original: tx.signed && tx.unsigned ? { unsigned: tx.unsigned, signed: tx.signed } : undefined });
+    }
+    async function verifyPrefix(c, s) {
+        const completed = [], hashes = new Set(), batches = new Map();
+        for (const tx of s.transactions.slice(0, s.completedCount)) {
+            // Transport errors stop this invocation. A successful query showing lost evidence is durable finality loss.
+            let current;
+            try {
+                if (tx.observation?.safe) {
+                    const id = tx.observation.safe.envelopeId, e = s.safeEnvelopes.find(e => e.envelopeId === id);
+                    if (!e)
+                        throw Error('Missing frozen Safe prefix');
+                    let rows = batches.get(id);
+                    if (!rows) {
+                        rows = await (0, safe_observation_1.observeSafeTransaction)({ plan, envelope: e, provider, transactionHash: tx.observation.transactionHash });
+                        if (rows)
+                            batches.set(id, rows);
+                    }
+                    current = rows?.[tx.observation.safe.innerCallIndex];
+                }
+                else
+                    current = await read(tx, tx.observation.transactionHash);
+            }
+            catch (error) {
+                if (error instanceof eoa_observation_1.EoaRpcFailure)
+                    throw error;
+                store.blockExecution(c, s.revision, 'Previously finalized execution identity no longer verifies');
+                throw new Error('Previously finalized execution identity no longer verifies; execution blocked', { cause: error });
+            }
+            if (!current || current.state !== 'finalized-success' || !(0, execution_model_1.same)(current, tx.observation) || (hashes.has(current.transactionHash) && (!current.safe || current.safe.innerCallIndex === 0))) {
+                store.blockExecution(c, s.revision, 'Previously finalized execution progress lost canonical finality');
+                throw new Error('Previously finalized execution progress lost canonical finality; execution blocked');
+            }
+            hashes.add(current.transactionHash);
+            completed.push(current);
+        }
+        return completed;
+    }
+    async function reconcileActive(c, s, references) {
+        const start = s.completedCount;
+        while (s.completedCount < s.transactions.length) {
+            const tx = s.transactions[s.completedCount];
+            if (tx.state === 'finalized-reverted')
+                return { status: 'reverted', snapshot: s };
+            if (tx.state === 'blocked')
+                throw new Error('Transaction blocked');
+            const safe = s.safeEnvelopes.find(e => e.start === tx.index);
+            if (safe) {
+                const supplied = safe.transactionIds.flatMap(id => references[id] ?? []), candidates = [...new Set(supplied)];
+                if (candidates.length > 1)
+                    throw Error('Supply one original outer Safe hash per envelope');
+                if (!candidates.length)
+                    break;
+                const hash = (0, observations_1.hash32)(candidates[0], 'Safe original hash');
+                if (s.transactions.some(t => t.observation?.transactionHash === hash))
+                    throw Error('Safe hash already consumed');
+                const rows = await (0, safe_observation_1.observeSafeTransaction)({ plan, envelope: safe, provider, transactionHash: hash });
+                if (!rows)
+                    break;
+                if (rows[0].state === 'finalized-reverted')
+                    return { status: 'reverted', snapshot: s };
+                if (rows[0].state !== 'finalized-success')
+                    break;
+                s = await store.recordSafeObservations(c, s.revision, safe.envelopeId, { readSafeObservations: async () => rows });
+                await verifyPrefix(c, s);
+                continue;
+            }
+            const supplied = references[tx.transactionId] ?? [];
+            if (!Array.isArray(supplied))
+                throw new Error('Expected explicit transaction hash set');
+            const candidates = tx.signed ? [tx.signed.transactionHash] : [...new Set([...supplied, ...(tx.observation ? [tx.observation.transactionHash] : [])])];
+            if (tx.signed && supplied.some(h => h !== tx.signed.transactionHash))
+                throw new Error('Hash reference differs from original signed identity');
+            // Signing intent without durable bytes may only recover the original signature first.
+            if (tx.state === 'signing')
+                return { status: 'signing-result-unavailable', snapshot: s };
+            let selected;
+            for (const hash of candidates) {
+                (0, observations_1.hash32)(hash, 'explicit transaction hash');
+                if (s.transactions.slice(0, s.completedCount).some(t => t.observation?.transactionHash === hash))
+                    throw new Error('Duplicate hash already completed a plan entry');
+                const observation = await read(tx, hash);
+                if (!observation)
+                    continue;
+                if (selected && selected.transactionHash !== observation.transactionHash)
+                    throw new Error('Ambiguous matching transaction hash set; supply one reference');
+                selected = observation;
+            }
+            if (!selected)
+                break;
+            const observed = selected;
+            s = await store.recordObservation(c, s.revision, observed.observationId, { readObservation: async () => observed });
+            if (observed.state === 'finalized-reverted')
+                return { status: 'reverted', snapshot: s };
+            if (observed.state !== 'finalized-success')
+                break;
+            // Recheck the entire accepted prefix before a subsequent advancement.
+            await verifyPrefix(c, s);
+        }
+        return { status: s.completedCount === s.transactions.length ? 'complete' : s.completedCount > start ? 'advanced' : 'pending', snapshot: s };
+    }
+    async function approved(snapshot, work) {
+        if (typeof approval?.withApproval !== 'function')
+            throw new Error('Trusted host approval capability unavailable');
+        let started = false, accepting = true, pending;
+        try {
+            await approval.withApproval(snapshot, () => {
+                if (!accepting || started)
+                    throw new Error('Approval work is revoked or already consumed');
+                started = true;
+                pending = work(() => {
+                    if (!accepting)
+                        throw new Error('Host approval scope revoked');
+                });
+                return pending;
+            });
+            accepting = false;
+            if (!pending)
+                throw new Error('Host approval did not authorize controlled work');
+            return await pending;
+        }
+        finally {
+            accepting = false;
+            if (pending)
+                await pending.catch(() => undefined);
+        }
+    }
+    return Object.freeze({
+        /** Current segment only; an existing frozen payload is returned without nonce rebasing. */
+        async prepareSafe(rawProfile) {
+            const profile = (0, safe_prepare_1.parseSafeTarget)(rawProfile);
+            return claim(async (c, s) => {
+                const prior = s.safeEnvelopes.find(e => e.start === s.completedCount);
+                if (prior) {
+                    if (prior.adapter !== profile.adapter || prior.multiSend !== profile.multiSendCallOnly || prior.safeTxGas !== profile.safeTxGas || !(0, execution_model_1.same)(prior.submitter, profile.submitterPolicy) || !(0, execution_model_1.same)(prior.finality, context.finality))
+                        throw Error('Frozen Safe policy conflict');
+                    const live = await (0, safe_prepare_1.prepareSafeEnvelope)(plan, s.completedCount, profile, provider, context.finality);
+                    if (live.nonce !== prior.nonce)
+                        throw Error('Frozen Safe nonce consumed; reconcile the original hash without rebasing');
+                    if (!(0, execution_model_1.same)(live, prior))
+                        throw Error('Frozen Safe execution identity changed');
+                    return { envelope: prior, snapshot: s };
+                }
+                const envelope = await (0, safe_prepare_1.prepareSafeEnvelope)(plan, s.completedCount, profile, provider, context.finality);
+                s = store.freezeSafeEnvelope(c, s.revision, envelope);
+                return { envelope, snapshot: s };
+            });
+        },
+        /** One active operator transaction per call. Frozen envelopes are explicit; no implicit gas/nonce defaults. */
+        async execute(rawUnsigned) {
+            return claim(async (c, initial) => {
+                let s = initial, tx = s.transactions[s.completedCount];
+                if (!tx)
+                    return { status: 'complete', snapshot: s };
+                if (tx.state === 'finalized-reverted' || tx.state === 'blocked')
+                    throw new Error('Reverted or blocked transaction');
+                if (['submission-uncertain', 'included-unfinalized'].includes(tx.state))
+                    return reconcileActive(c, s, {});
+                const planned = plan.transactions[tx.index];
+                if (planned.operation !== 0)
+                    throw new Error('Unsupported EOA operation');
+                if (planned.route !== 'operator' || planned.executor !== context.operator)
+                    throw new Error('Only active operator-route executor may sign');
+                if (!signer || typeof signer.sign !== 'function' || signer.address !== context.operator)
+                    throw new Error('Approved EOA signer unavailable or mismatched');
+                if (typeof approval?.withApproval !== 'function')
+                    throw new Error('Trusted host approval capability unavailable');
+                await (0, eoa_observation_1.verifyEoaChain)(provider, context);
+                await (0, eoa_observation_1.verifyEoaCode)(provider, planned.executor, 'latest');
+                const unsigned = rawUnsigned === undefined ? tx.unsigned : (0, execution_model_1.parseUnsigned)(rawUnsigned, plan, tx.index);
+                if (!unsigned)
+                    throw new Error('Complete explicit unsigned approval snapshot required');
+                if (tx.unsigned && !(0, execution_model_1.same)(unsigned, tx.unsigned))
+                    throw new Error('Frozen approval snapshot mismatch');
+                s = store.freezeAndReserve(c, s.revision, tx.transactionId, unsigned);
+                tx = s.transactions[s.completedCount];
+                const signingRequestId = (0, canonicalData_1.semanticHash)({ schema: 'gate-delivery-eoa-signing-request', version: 1, context, transaction: planned, unsigned });
+                if (tx.signingRequestId && tx.signingRequestId !== signingRequestId)
+                    throw new Error('Stable signing request identity mismatch');
+                const approvalSnapshot = (0, canonicalData_1.deepFreeze)({ context, transaction: planned, unsigned, signingRequestId });
+                return approved(approvalSnapshot, async (assertApproval) => {
+                    // Approval may await user interaction; revalidate chain and finalized prefix immediately before controlled signing/send.
+                    await verifyPrefix(c, s);
+                    await (0, eoa_observation_1.verifyEoaChain)(provider, context);
+                    await (0, eoa_observation_1.verifyEoaCode)(provider, planned.executor, 'latest');
+                    assertApproval();
+                    if (tx.state === 'claimed') {
+                        s = store.markSigning(c, s.revision, signingRequestId);
+                        const raw = await signer.sign(signingRequestId, unsigned);
+                        assertApproval();
+                        s = store.commitSigned(c, s.revision, (0, eoa_signed_1.verifyEoaSigned)(raw, unsigned));
+                    }
+                    else if (tx.state === 'signing') {
+                        const recovered = await signer.recover?.(signingRequestId);
+                        assertApproval();
+                        if (recovered === undefined)
+                            return { status: 'signing-result-unavailable', snapshot: s };
+                        s = store.commitSigned(c, s.revision, (0, eoa_signed_1.verifyEoaSigned)(recovered, unsigned));
+                    }
+                    tx = s.transactions[s.completedCount];
+                    if (tx.state !== 'signed' || !tx.signed)
+                        throw new Error('Original durable signed bytes required');
+                    const signed = (0, eoa_signed_1.verifyEoaSigned)(tx.signed.rawTransaction, unsigned);
+                    if (!(0, execution_model_1.same)(signed, tx.signed))
+                        throw new Error('Durable signed identity mismatch');
+                    await verifyPrefix(c, s);
+                    await (0, eoa_observation_1.verifyEoaChain)(provider, context);
+                    await (0, eoa_observation_1.verifyEoaCode)(provider, planned.executor, 'latest');
+                    assertApproval();
+                    s = store.recordSubmissionIntent(c, s.revision);
+                    const returnedHash = await provider.request('eth_sendRawTransaction', [signed.rawTransaction]);
+                    if (returnedHash !== signed.transactionHash)
+                        throw new Error('Broadcast returned wrong hash; original submission remains uncertain');
+                    return { status: 'submitted', snapshot: s };
+                });
+            });
+        },
+        async reconcile(references = {}) {
+            // Copy only explicit data before any awaited calls; caller mutation cannot change the route/hash set.
+            const refs = (0, canonicalData_1.deepFreeze)(JSON.parse(JSON.stringify(references)));
+            for (const [id, hashes] of Object.entries(refs)) {
+                if (!plan.transactions.some(tx => tx.transactionId === id) || !Array.isArray(hashes))
+                    throw new Error('Unknown transaction hash reference');
+                hashes.forEach(h => (0, observations_1.hash32)(h, 'explicit transaction hash'));
+            }
+            return claim((c, s) => reconcileActive(c, s, refs));
+        },
+        /** Revalidates the durable contiguous prefix under the claim before producing trusted export progress. */
+        async export() {
+            return claim(async (c, s) => {
+                const completed = await verifyPrefix(c, s), byId = new Map(completed.map(o => [o.observationId, o]));
+                const progress = await (0, export_1.validateDeliveryProgress)({ plan, completed: completed.map(o => o.observationId), finalized: { readFinalized: async (ref) => byId.get(ref) } });
+                const exported = (0, export_1.renderDeliveryExport)(plan, progress);
+                const model = (0, canonicalData_1.deepFreeze)({ ...exported.model, safeEnvelopes: s.safeEnvelopes.map(e => (0, safe_1.renderSafeExport)(plan, e).model), safePreparation: plan.transactions[s.completedCount]?.route !== 'external' ? 'not-applicable' : s.safeEnvelopes.some(e => e.start === s.completedCount) ? 'ready' : 'preparation-required' });
+                const json = JSON.stringify(model);
+                return (0, canonicalData_1.deepFreeze)({ model, json, markdown: `# Delivery calldata\n\nFrozen Safe envelopes cover only prepared segments. Future segments remain pending.\n\n\`\`\`json\n${json}\n\`\`\`\n` });
+            });
+        },
+    });
+}
+//# sourceMappingURL=eoa.js.map