gate-evm-tools 1.0.28 → 1.0.31

package/dist-runtime/delivery/safe.d.ts

@@ -0,0 +1,91 @@
+/** Pure, finite official Safe 1.4.1 CALL adapter. No provider, signer or file access. */
+import { Interface } from "ethers";
+import type { EoaFinality } from "./eoa-observation";
+import type { DeliveryPlan } from "./plan";
+export declare const SAFE_ADAPTER: {
+    id: string;
+    version: string;
+    runtime: Readonly<{
+        Safe: "0x1fe2df852ba3299d6534ef416eefa406e56ced995bca886ab7a553e6d0c5e1c4";
+        SafeProxy: "0xd7d408ebcd99b2b70be43e20253d6d92a8ea8fab29bd3be7f55b10032331fb4c";
+        MultiSendCallOnly: "0xecd5bd14a08c5d2122379900b2f272bdf107a7e92423c10dd5fe3254386c9939";
+    }>;
+    collector: string;
+    refund: string;
+    maxCalldataBytes: number;
+};
+export declare const SAFE_DEFINITION_HASH: string;
+export declare const SAFE_TYPES: {
+    SafeTx: {
+        name: string;
+        type: string;
+    }[];
+};
+export declare const SAFE_INTERFACE: Interface;
+export declare const ZERO_ADDRESS: string;
+export declare function safeAddress(v: unknown): string;
+export declare function safeBytes(v: unknown): string;
+export declare function safeFinality(v: unknown): EoaFinality;
+export interface SafeBinding {
+    adapter: string;
+    start: number;
+    count: number;
+    safe: string;
+    singleton: string;
+    multiSend: string;
+    nonce: string;
+    safeTxGas: string;
+    submitter: {
+        kind: "any";
+    } | {
+        kind: "address";
+        address: string;
+    };
+    finality: EoaFinality;
+}
+export interface SafeEnvelope extends SafeBinding {
+    schema: "gate-safe-envelope";
+    version: 1;
+    definitionHash: string;
+    executionId: string;
+    planHash: string;
+    chainId: string;
+    transactionIds: string[];
+    to: string;
+    value: string;
+    data: string;
+    operation: 0 | 1;
+    baseGas: string;
+    gasPrice: string;
+    gasToken: string;
+    refundReceiver: string;
+    expectedSafeTxHash: string;
+    envelopeId: string;
+}
+export type SafeCall = {
+    to: string;
+    value: string;
+    data: string;
+    operation: 0;
+};
+export declare function decodeSafeCalls(raw: unknown): SafeCall[];
+export declare function freezeSafeEnvelope(rawPlan: unknown, raw: unknown): SafeEnvelope;
+export declare function parseSafeEnvelope(raw: unknown, plan: DeliveryPlan): SafeEnvelope;
+export declare function encodeSafeExec(e: Pick<SafeEnvelope, "to" | "value" | "data" | "operation" | "safeTxGas" | "baseGas" | "gasPrice" | "gasToken" | "refundReceiver">, signatures: string): string;
+export declare function verifySafeExec(plan: DeliveryPlan, raw: unknown, input: unknown): {
+    envelope: SafeEnvelope;
+    calls: SafeCall[];
+    signatures: string;
+};
+export declare function renderSafeExport(rawPlan: unknown, raw: unknown): {
+    model: {
+        schema: string;
+        version: number;
+        status: string;
+        plan: DeliveryPlan;
+        envelope: SafeEnvelope;
+        unsignedExecTransaction: string;
+    };
+    json: string;
+    markdown: string;
+};

package/dist-runtime/delivery/safe.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZERO_ADDRESS = exports.SAFE_INTERFACE = exports.SAFE_TYPES = exports.SAFE_DEFINITION_HASH = exports.SAFE_ADAPTER = void 0;
+exports.safeAddress = safeAddress;
+exports.safeBytes = safeBytes;
+exports.safeFinality = safeFinality;
+exports.decodeSafeCalls = decodeSafeCalls;
+exports.freezeSafeEnvelope = freezeSafeEnvelope;
+exports.parseSafeEnvelope = parseSafeEnvelope;
+exports.encodeSafeExec = encodeSafeExec;
+exports.verifySafeExec = verifySafeExec;
+exports.renderSafeExport = renderSafeExport;
+/** Pure, finite official Safe 1.4.1 CALL adapter. No provider, signer or file access. */
+const ethers_1 = require("ethers");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const export_1 = require("./export");
+const data_1 = require("./data");
+const observations_1 = require("./observations");
+const safe_manifest_1 = require("./safe-manifest");
+exports.SAFE_ADAPTER = (0, canonicalData_1.deepFreeze)({
+    id: "safe-1.4.1-call-only/v1",
+    version: "1.4.1",
+    runtime: safe_manifest_1.SAFE_RUNTIME_HASHES,
+    collector: "geth-1.15.11-prestate-opcodes/v1",
+    refund: "zero",
+    maxCalldataBytes: 262144,
+});
+exports.SAFE_DEFINITION_HASH = (0, canonicalData_1.semanticHash)(exports.SAFE_ADAPTER);
+exports.SAFE_TYPES = {
+    SafeTx: [
+        { name: "to", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "data", type: "bytes" },
+        { name: "operation", type: "uint8" },
+        { name: "safeTxGas", type: "uint256" },
+        { name: "baseGas", type: "uint256" },
+        { name: "gasPrice", type: "uint256" },
+        { name: "gasToken", type: "address" },
+        { name: "refundReceiver", type: "address" },
+        { name: "nonce", type: "uint256" },
+    ],
+};
+exports.SAFE_INTERFACE = new ethers_1.Interface([
+    "function execTransaction(address to,uint256 value,bytes data,uint8 operation,uint256 safeTxGas,uint256 baseGas,uint256 gasPrice,address gasToken,address refundReceiver,bytes signatures) returns (bool)",
+    "event ExecutionSuccess(bytes32 indexed txHash,uint256 payment)",
+    "event ExecutionFailure(bytes32 indexed txHash,uint256 payment)",
+]);
+const multi = new ethers_1.Interface(["function multiSend(bytes transactions)"]);
+exports.ZERO_ADDRESS = "0x" + "00".repeat(20);
+function safeAddress(v) {
+    if (typeof v !== "string" ||
+        !/^0x[0-9a-f]{40}$/.test(v) ||
+        v === exports.ZERO_ADDRESS)
+        throw Error("Invalid canonical Safe address");
+    return v;
+}
+function safeBytes(v) {
+    if (typeof v !== "string" ||
+        !/^0x(?:[0-9a-f]{2})*$/.test(v) ||
+        v.length > 2 + exports.SAFE_ADAPTER.maxCalldataBytes * 2)
+        throw Error("Invalid or oversized Safe bytes");
+    return v;
+}
+function safeFinality(v) {
+    const f = v;
+    (0, canonicalData_1.exactObject)(f, f?.kind === "rpc_finalized" ? ["kind"] : ["kind", "depth"], "Safe finality");
+    if (f.kind !== "rpc_finalized" &&
+        (f.kind !== "confirmations" || BigInt((0, observations_1.uint256)(f.depth, "depth")) < 1n))
+        throw Error("Invalid Safe finality");
+    return f;
+}
+const bindingKeys = [
+    "adapter",
+    "start",
+    "count",
+    "safe",
+    "singleton",
+    "multiSend",
+    "nonce",
+    "safeTxGas",
+    "submitter",
+    "finality",
+];
+function decodeSafeCalls(raw) {
+    const data = safeBytes(raw).slice(2);
+    const result = [];
+    let cursor = 0;
+    while (cursor < data.length) {
+        if (data.length - cursor < 170)
+            throw Error("Truncated Safe packed call");
+        const operation = data.slice(cursor, cursor + 2);
+        if (operation !== "00")
+            throw Error("Only CALL inner operations supported");
+        const to = safeAddress("0x" + data.slice(cursor + 2, cursor + 42)), value = BigInt("0x" + data.slice(cursor + 42, cursor + 106)).toString(), length = BigInt("0x" + data.slice(cursor + 106, cursor + 170));
+        cursor += 170;
+        if (length > BigInt((data.length - cursor) / 2))
+            throw Error("Truncated Safe packed data length");
+        const end = cursor + Number(length) * 2;
+        result.push({
+            to,
+            value,
+            data: "0x" + data.slice(cursor, end),
+            operation: 0,
+        });
+        cursor = end;
+    }
+    if (!result.length)
+        throw Error("Empty Safe batch");
+    return result;
+}
+function freezeSafeEnvelope(rawPlan, raw) {
+    const plan = (0, export_1.immutableDeliveryPlan)(rawPlan), b = (0, canonicalData_1.exactObject)((0, data_1.strictData)(raw), bindingKeys, "Safe binding");
+    if (b.adapter !== exports.SAFE_ADAPTER.id)
+        throw Error("Unsupported Safe adapter");
+    for (const a of [b.safe, b.singleton, b.multiSend])
+        safeAddress(a);
+    if (new Set([b.safe, b.singleton, b.multiSend]).size !== 3)
+        throw Error("Safe asset addresses must differ");
+    (0, observations_1.uint256)(b.nonce, "Safe nonce");
+    (0, observations_1.uint256)(b.safeTxGas, "safeTxGas");
+    safeFinality(b.finality);
+    (0, canonicalData_1.exactObject)(b.submitter, b.submitter?.kind === "any" ? ["kind"] : ["kind", "address"], "Safe submitter");
+    if (b.submitter.kind === "address")
+        safeAddress(b.submitter.address);
+    else if (b.submitter.kind !== "any")
+        throw Error("Invalid Safe submitter");
+    if (!Number.isSafeInteger(b.start) ||
+        !Number.isSafeInteger(b.count) ||
+        b.start < 0 ||
+        b.count < 1 ||
+        b.start + b.count > plan.transactions.length)
+        throw Error("Invalid Safe transaction range");
+    const txs = plan.transactions.slice(b.start, b.start + b.count);
+    if (txs.some((t) => t.executor !== b.safe ||
+        t.route !== "external" ||
+        t.operation !== 0 ||
+        [b.safe, b.singleton, b.multiSend].includes(t.to)))
+        throw Error("Safe range crosses executor/segment barrier or unsupported nesting");
+    const calls = txs.map(({ to, value, data }) => ({
+        to,
+        value,
+        data,
+        operation: 0,
+    }));
+    let to = txs[0].to, value = txs[0].value, data = txs[0].data, operation = 0;
+    if (b.count > 1) {
+        to = b.multiSend;
+        value = "0";
+        operation = 1;
+        data = multi.encodeFunctionData("multiSend", [
+            "0x" +
+                calls
+                    .map((c) => (0, ethers_1.solidityPacked)(["uint8", "address", "uint256", "uint256", "bytes"], [0, c.to, c.value, BigInt((c.data.length - 2) / 2), c.data]).slice(2))
+                    .join(""),
+        ]);
+    }
+    safeBytes(data);
+    const body = {
+        ...b,
+        schema: "gate-safe-envelope",
+        version: 1,
+        definitionHash: exports.SAFE_DEFINITION_HASH,
+        executionId: plan.executionId,
+        planHash: plan.planHash,
+        chainId: plan.chainId,
+        transactionIds: txs.map((t) => t.transactionId),
+        to,
+        value,
+        data,
+        operation,
+        baseGas: "0",
+        gasPrice: "0",
+        gasToken: exports.ZERO_ADDRESS,
+        refundReceiver: exports.ZERO_ADDRESS,
+    };
+    const expectedSafeTxHash = ethers_1.TypedDataEncoder.hash({ chainId: plan.chainId, verifyingContract: b.safe }, exports.SAFE_TYPES, body);
+    const hashed = { ...body, expectedSafeTxHash };
+    return (0, canonicalData_1.deepFreeze)({ ...hashed, envelopeId: (0, canonicalData_1.semanticHash)(hashed) });
+}
+function parseSafeEnvelope(raw, plan) {
+    const v = (0, data_1.strictData)(raw);
+    const e = freezeSafeEnvelope(plan, Object.fromEntries(bindingKeys.map((k) => [k, v[k]])));
+    if ((0, canonicalData_1.canonicalJson)(v) !== (0, canonicalData_1.canonicalJson)(e))
+        throw Error("Frozen Safe envelope mismatch");
+    return e;
+}
+const execKeys = [
+    "to",
+    "value",
+    "data",
+    "operation",
+    "safeTxGas",
+    "baseGas",
+    "gasPrice",
+    "gasToken",
+    "refundReceiver",
+];
+function encodeSafeExec(e, signatures) {
+    return exports.SAFE_INTERFACE.encodeFunctionData("execTransaction", [
+        ...execKeys.map((k) => e[k]),
+        safeBytes(signatures),
+    ]);
+}
+function verifySafeExec(plan, raw, input) {
+    const e = parseSafeEnvelope(raw, plan), data = safeBytes(input);
+    const decoded = exports.SAFE_INTERFACE.decodeFunctionData("execTransaction", data);
+    if (exports.SAFE_INTERFACE.encodeFunctionData("execTransaction", decoded).toLowerCase() !== data)
+        throw Error("Noncanonical Safe calldata");
+    if (encodeSafeExec(e, decoded[9]) !== data)
+        throw Error("Actual Safe envelope mismatch");
+    let calls;
+    if (e.operation === 0)
+        calls = [{ to: e.to, value: e.value, data: e.data, operation: 0 }];
+    else {
+        const packed = multi.decodeFunctionData("multiSend", e.data);
+        if (multi.encodeFunctionData("multiSend", packed) !== e.data)
+            throw Error("Noncanonical MultiSend calldata");
+        calls = decodeSafeCalls(packed[0]);
+    }
+    const expected = plan.transactions
+        .slice(e.start, e.start + e.count)
+        .map(({ to, value, data }) => ({ to, value, data, operation: 0 }));
+    if ((0, canonicalData_1.canonicalJson)(calls) !== (0, canonicalData_1.canonicalJson)(expected))
+        throw Error("Safe calls differ from full frozen range");
+    return { envelope: e, calls, signatures: decoded[9] };
+}
+function renderSafeExport(rawPlan, raw) {
+    const plan = (0, export_1.immutableDeliveryPlan)(rawPlan), envelope = parseSafeEnvelope(raw, plan), model = (0, canonicalData_1.deepFreeze)({
+        schema: "gate-safe-export",
+        version: 1,
+        status: "artifact-delivered",
+        plan,
+        envelope,
+        unsignedExecTransaction: encodeSafeExec(envelope, "0x"),
+    });
+    const json = (0, canonicalData_1.canonicalJson)(model);
+    return (0, canonicalData_1.deepFreeze)({
+        model,
+        json,
+        markdown: `# Safe calldata\n\nFrozen Safe envelope. Signatures must be collected externally.\n\n\`\`\`json\n${json}\n\`\`\`\n`,
+    });
+}
+//# sourceMappingURL=safe.js.map

package/dist-runtime/delivery/safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe.js","sourceRoot":"","sources":["../../runtime/delivery/safe.ts"],"names":[],"mappings":";;;AA4CA,kCAQC;AACD,8BAQC;AACD,oCAaC;AAkDD,0CAyBC;AACD,gDAiGC;AACD,8CAYC;AAYD,wCAmBC;AACD,wCAgCC;AACD,4CAiBC;AAvVD,yFAAyF;AACzF,mCAAqE;AACrE,iEAKuC;AACvC,qCAAiD;AACjD,iCAAoC;AACpC,iDAAyC;AAGzC,mDAAsD;AACzC,QAAA,YAAY,GAAG,IAAA,0BAAU,EAAC;IACrC,EAAE,EAAE,yBAAyB;IAC7B,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,mCAAmB;IAC5B,SAAS,EAAE,kCAAkC;IAC7C,MAAM,EAAE,MAAM;IACd,gBAAgB,EAAE,MAAM;CACzB,CAAC,CAAC;AACU,QAAA,oBAAoB,GAAG,IAAA,4BAAY,EAAC,oBAAY,CAAC,CAAC;AAClD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACF,CAAC;AACW,QAAA,cAAc,GAAG,IAAI,kBAAS,CAAC;IAC1C,0MAA0M;IAC1M,gEAAgE;IAChE,gEAAgE;CACjE,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,IAAI,kBAAS,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;AAC3D,QAAA,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnD,SAAgB,WAAW,CAAC,CAAU;IACpC,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,CAAC,KAAK,oBAAY;QAElB,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAgB,SAAS,CAAC,CAAU;IAClC,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,oBAAY,CAAC,gBAAgB,GAAG,CAAC;QAEhD,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAgB,YAAY,CAAC,CAAU;IACrC,MAAM,CAAC,GAAG,CAAgB,CAAC;IAC3B,IAAA,2BAAW,EACT,CAAC,EACD,CAAC,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1D,eAAe,CAChB,CAAC;IACF,IACE,CAAC,CAAC,IAAI,KAAK,eAAe;QAC1B,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;QAEtE,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC;AAgCD,MAAM,WAAW,GAAG;IAClB,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,WAAW;IACX,WAAW;IACX,OAAO;IACP,WAAW;IACX,WAAW;IACX,UAAU;CACX,CAAC;AAOF,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,GAAG;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,EAChE,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EACvE,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC;QACd,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE;YACF,KAAK;YACL,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;YACpC,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAgB,kBAAkB,CAChC,OAAgB,EAChB,GAAY;IAEZ,MAAM,IAAI,GAAG,IAAA,8BAAqB,EAAC,OAAO,CAAC,EACzC,CAAC,GAAG,IAAA,2BAAW,EACb,IAAA,iBAAU,EAAC,GAAG,CAAC,EACf,WAAW,EACX,cAAc,CACW,CAAC;IAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,oBAAY,CAAC,EAAE;QAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QACxD,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,IAAA,sBAAO,EAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/B,IAAA,sBAAO,EAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAA,2BAAW,EACT,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,SAAS,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAC5D,gBAAgB,CACjB,CAAC;IACF,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,KAAK,GAAG,CAAC;QACX,CAAC,CAAC,KAAK,GAAG,CAAC;QACX,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM;QAE5C,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAChE,IACE,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI;QACrB,CAAC,CAAC,KAAK,KAAK,UAAU;QACtB,CAAC,CAAC,SAAS,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CACpD;QAED,MAAM,KAAK,CACT,oEAAoE,CACrE,CAAC;IACJ,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE;QACF,KAAK;QACL,IAAI;QACJ,SAAS,EAAE,CAAU;KACtB,CAAC,CAAC,CAAC;IACJ,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAChB,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EACpB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAClB,SAAS,GAAU,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAChB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;QACjB,KAAK,GAAG,GAAG,CAAC;QACZ,SAAS,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE;YAC3C,IAAI;gBACF,KAAK;qBACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,IAAA,uBAAc,EACZ,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EACnD,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAC5D,CAAC,KAAK,CAAC,CAAC,CAAC,CACX;qBACA,IAAI,CAAC,EAAE,CAAC;SACd,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG;QACX,GAAG,CAAC;QACJ,MAAM,EAAE,oBAA6B;QACrC,OAAO,EAAE,CAAU;QACnB,cAAc,EAAE,4BAAoB;QACpC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/C,EAAE;QACF,KAAK;QACL,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,oBAAY;QACtB,cAAc,EAAE,oBAAY;KAC7B,CAAC;IACF,MAAM,kBAAkB,GAAG,yBAAgB,CAAC,IAAI,CAC9C,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,IAAI,EAAE,EACpD,kBAAU,EACV,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC/C,OAAO,IAAA,0BAAU,EAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAA,4BAAY,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrE,CAAC;AACD,SAAgB,iBAAiB,CAC/B,GAAY,EACZ,IAAkB;IAElB,MAAM,CAAC,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAiB,CAAC;IAC1C,MAAM,CAAC,GAAG,kBAAkB,CAC1B,IAAI,EACJ,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAG,CAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,IAAI,IAAA,6BAAa,EAAC,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,QAAQ,GAAG;IACf,IAAI;IACJ,OAAO;IACP,MAAM;IACN,WAAW;IACX,WAAW;IACX,SAAS;IACT,UAAU;IACV,UAAU;IACV,gBAAgB;CACjB,CAAC;AACF,SAAgB,cAAc,CAC5B,CAWC,EACD,UAAkB;IAElB,OAAO,sBAAc,CAAC,kBAAkB,CAAC,iBAAiB,EAAE;QAC1D,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAS,CAAC,CAAC,CAAC,CAAC;QACrC,SAAS,CAAC,UAAU,CAAC;KACtB,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,cAAc,CAC5B,IAAkB,EAClB,GAAY,EACZ,KAAc;IAEd,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,EACpC,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,sBAAc,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC3E,IACE,sBAAc,CAAC,kBAAkB,CAC/B,iBAAiB,EACjB,OAAO,CACR,CAAC,WAAW,EAAE,KAAK,IAAI;QAExB,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,IAAI,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACxC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/C,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC;QACnB,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;SAChE,CAAC;QACJ,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI;YAC1D,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY;SAC/B,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SACjC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,IAAA,6BAAa,EAAC,KAAK,CAAC,KAAK,IAAA,6BAAa,EAAC,QAAQ,CAAC;QAClD,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAW,EAAE,CAAC;AAClE,CAAC;AACD,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,GAAY;IAC7D,MAAM,IAAI,GAAG,IAAA,8BAAqB,EAAC,OAAO,CAAC,EACzC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,EACvC,KAAK,GAAG,IAAA,0BAAU,EAAC;QACjB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,oBAAoB;QAC5B,IAAI;QACJ,QAAQ;QACR,uBAAuB,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC;KACxD,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,IAAA,6BAAa,EAAC,KAAK,CAAC,CAAC;IAClC,OAAO,IAAA,0BAAU,EAAC;QAChB,KAAK;QACL,IAAI;QACJ,QAAQ,EAAE,oGAAoG,IAAI,YAAY;KAC/H,CAAC,CAAC;AACL,CAAC"}

package/dist-runtime/delivery/same-fork-baseline.d.ts

@@ -0,0 +1,8 @@
+import { type GateToolPreparationPlanV1, type GateToolPreparationRequestV1 } from 'gate-evm-tools/workflow';
+export interface SameForkInitialPreparation {
+    request: GateToolPreparationRequestV1;
+    plan: GateToolPreparationPlanV1;
+}
+/** Stable initial preparation and full prior layout commitment. Auxiliary compiler randomness is excluded. */
+export declare function sameForkBaselineDigest(initial: SameForkInitialPreparation, oldLayoutHash: string): string;
+export declare function matchesSameForkInitial(initial: SameForkInitialPreparation, target: string, chainId: string, proxy: string, implementation?: string): boolean;

package/dist-runtime/delivery/same-fork-baseline.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sameForkBaselineDigest = sameForkBaselineDigest;
+exports.matchesSameForkInitial = matchesSameForkInitial;
+const workflow_1 = require("gate-evm-tools/workflow");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+/** Stable initial preparation and full prior layout commitment. Auxiliary compiler randomness is excluded. */
+function sameForkBaselineDigest(initial, oldLayoutHash) {
+    const request = (0, workflow_1.normalizePreparationRequest)(initial.request), plan = (0, workflow_1.normalizePreparationPlan)(initial.plan);
+    if (request.kind !== 'uups-placeholder-deploy' || plan.kind !== request.kind || plan.requestHash !== (0, workflow_1.hashPreparationRequest)(request)
+        || plan.target !== request.target || !/^[a-f0-9]{64}$/.test(oldLayoutHash))
+        throw new Error('Invalid same-fork initial preparation');
+    return (0, canonicalData_1.semanticHash)({ kind: 'same-fork', request, plan, oldLayoutHash });
+}
+function matchesSameForkInitial(initial, target, chainId, proxy, implementation) {
+    return initial.request.kind === 'uups-placeholder-deploy' && initial.request.target === target && initial.plan.target === target && initial.plan.chainId === chainId
+        && initial.plan.deployments.some(d => d.role === 'proxy' && d.address.toLowerCase() === proxy.toLowerCase())
+        && (implementation === undefined || initial.plan.deployments.some(d => d.role === 'implementation' && d.address.toLowerCase() === implementation.toLowerCase()));
+}
+//# sourceMappingURL=same-fork-baseline.js.map

package/dist-runtime/delivery/same-fork-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"same-fork-baseline.js","sourceRoot":"","sources":["../../runtime/delivery/same-fork-baseline.ts"],"names":[],"mappings":";;AAKA,wDAKC;AACD,wDAIC;AAfD,sDAA2L;AAC3L,iEAA6D;AAG7D,8GAA8G;AAC9G,SAAgB,sBAAsB,CAAC,OAAmC,EAAE,aAAqB;IAC/F,MAAM,OAAO,GAAG,IAAA,sCAA2B,EAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,IAAA,mCAAwB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,IAAI,KAAK,yBAAyB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAA,iCAAsB,EAAC,OAAO,CAAC;WAC/H,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvI,OAAO,IAAA,4BAAY,EAAC,EAAC,IAAI,EAAC,WAAW,EAAC,OAAO,EAAC,IAAI,EAAC,aAAa,EAAC,CAAC,CAAC;AACrE,CAAC;AACD,SAAgB,sBAAsB,CAAC,OAAmC,EAAE,MAAc,EAAE,OAAe,EAAE,KAAa,EAAE,cAAuB;IACjJ,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,yBAAyB,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO;WAC/J,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;WACzG,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACrK,CAAC"}

package/dist-runtime/delivery/setup.d.ts

@@ -0,0 +1,31 @@
+import { type DeliveryTarget } from './config';
+export { readProjectNetworkSnapshots } from './project';
+export { loadDeliveryTarget } from './config';
+export { configureDeliveryEnvironment } from './manifest';
+export type { DeliveryTarget, DeliveryTargetConfig } from './config';
+export interface DeliverySetupOptions {
+    workspaceRoot: string;
+    projectRoot: string;
+    targets: DeliveryTarget[];
+    /** An explicit local built tarball for unpublished delivery APIs. Never installed implicitly. */
+    toolPackage?: string;
+}
+export interface DeliveryInspection {
+    status: 'dependencies_pending' | 'setup_pending' | 'ready';
+    projectRoot: string;
+    dependencies: Array<{
+        name: string;
+        required: string;
+        reason: string;
+    }>;
+    changes: string[];
+    networks: Array<{
+        network: string;
+        chainId: number;
+        rpcConfigured: boolean;
+    }>;
+}
+/** Read-only, never imports the project's config/HRE or contacts an RPC. */
+export declare function inspectDeliveryProject(options: DeliverySetupOptions): DeliveryInspection;
+/** Stage declarations/config; caller explicitly installs dependencies then reruns to enable the plugin. */
+export declare function setupDeliveryProject(options: DeliverySetupOptions): DeliveryInspection;

package/dist-runtime/delivery/setup.js

@@ -0,0 +1,215 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureDeliveryEnvironment = exports.loadDeliveryTarget = exports.readProjectNetworkSnapshots = void 0;
+exports.inspectDeliveryProject = inspectDeliveryProject;
+exports.setupDeliveryProject = setupDeliveryProject;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_module_1 = require("node:module");
+const node_child_process_1 = require("node:child_process");
+const yaml_1 = __importDefault(require("yaml"));
+const protocol_1 = require("./protocol");
+const project_1 = require("./project");
+const config_1 = require("./config");
+var project_2 = require("./project");
+Object.defineProperty(exports, "readProjectNetworkSnapshots", { enumerable: true, get: function () { return project_2.readProjectNetworkSnapshots; } });
+var config_2 = require("./config");
+Object.defineProperty(exports, "loadDeliveryTarget", { enumerable: true, get: function () { return config_2.loadDeliveryTarget; } });
+var manifest_1 = require("./manifest");
+Object.defineProperty(exports, "configureDeliveryEnvironment", { enumerable: true, get: function () { return manifest_1.configureDeliveryEnvironment; } });
+const TOOLCHAIN = { hardhat: '2.26.3', ethers: '6.15.0', '@nomicfoundation/hardhat-ethers': '3.1.0', typescript: '5.9.3', 'ts-node': '10.9.2' };
+const DEPENDENCIES = { 'gate-evm-tools': '1.0.29', '@openzeppelin/hardhat-upgrades': '3.9.1', '@openzeppelin/upgrades-core': '1.44.2', '@openzeppelin/contracts': '5.4.0' };
+function dependencyTreeProblem(root) {
+    const result = (0, node_child_process_1.spawnSync)(process.platform === 'win32' ? 'npm.cmd' : 'npm', ['ls', '--all', '--long', '--json', '--depth=Infinity', '--link=false', '--global=false', '--workspaces=false', '--include=dev', '--include=optional', '--include=peer'], { cwd: root, encoding: 'utf8', timeout: 30000, maxBuffer: 16 * 1024 * 1024 });
+    if (result.error || result.status !== 0)
+        return 'local dependency graph is incomplete or invalid; install project dependencies explicitly';
+    try {
+        const visit = (entry, top = false) => {
+            if (entry.path && !top) {
+                const actual = node_fs_1.default.realpathSync(entry.path);
+                if (!actual.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                    throw new Error('dependency resolves outside project node_modules');
+            }
+            for (const dependency of Object.values(entry.dependencies ?? {}))
+                visit(dependency);
+        };
+        visit(JSON.parse(result.stdout), true);
+        return undefined;
+    }
+    catch {
+        return 'dependency graph contains a missing or nonlocal package';
+    }
+}
+function businessUsesUpgradeable(root) {
+    const contracts = (0, project_1.projectSourcesDirectory)(root);
+    const visit = (dir) => {
+        if (!(0, project_1.stat)(dir))
+            return false;
+        for (const entry of node_fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+            if (entry.isSymbolicLink())
+                throw new Error('Business source symlinks cannot be inspected safely');
+            const file = node_path_1.default.join(dir, entry.name);
+            if (entry.isDirectory() ? visit(file) : entry.isFile() && entry.name.endsWith('.sol') && /["']@openzeppelin\/contracts-upgradeable\//.test(node_fs_1.default.readFileSync(file, 'utf8')))
+                return true;
+        }
+        return false;
+    };
+    return visit(contracts);
+}
+function preflight(input) {
+    const [major, minor] = process.versions.node.split('.').map(Number);
+    if (major < 22 || (major === 22 && minor < 13))
+        throw Error('Delivery requires Node >=22.13.0');
+    (0, protocol_1.object)(input, 'setup options', ['workspaceRoot', 'projectRoot', 'targets', 'toolPackage']);
+    if (!Array.isArray(input.targets) || !input.targets.length)
+        throw new Error('Selected delivery targets are required');
+    const targets = input.targets.map(config_1.validateDeliveryTarget);
+    if (new Set(targets.map(target => target.network)).size !== targets.length)
+        throw new Error('Duplicate selected target');
+    const root = (0, project_1.projectRoot)(input.workspaceRoot, input.projectRoot);
+    (0, project_1.coreMarker)(root);
+    const before = new Map();
+    for (const file of ['.gate-template.json', 'package.json', 'hardhat.config.ts', 'config.yaml', 'contractInfo.json'])
+        before.set(file, (0, project_1.readFile)(root, file));
+    const pkg = (0, protocol_1.object)(JSON.parse(before.get('package.json') ?? 'null'), 'package.json');
+    const declarations = {};
+    for (const section of ['dependencies', 'devDependencies']) {
+        const entries = pkg[section] === undefined ? {} : (0, protocol_1.object)(pkg[section], section);
+        for (const [name, value] of Object.entries(entries)) {
+            if (name in declarations && declarations[name] !== value)
+                throw new Error(`Dependency declaration conflict: ${name}`);
+            declarations[name] = value;
+        }
+    }
+    const required = { ...DEPENDENCIES };
+    if (input.toolPackage !== undefined) {
+        if (!node_path_1.default.isAbsolute(input.toolPackage) || !input.toolPackage.endsWith('.tgz') || !(0, project_1.stat)(input.toolPackage)?.isFile() || (0, project_1.stat)(input.toolPackage)?.isSymbolicLink())
+            throw new Error('toolPackage must be an explicit absolute local tarball path');
+        required['gate-evm-tools'] = `file:${input.toolPackage}`;
+    }
+    if (businessUsesUpgradeable(root))
+        required['@openzeppelin/contracts-upgradeable'] = '5.4.0';
+    for (const [name, version] of Object.entries({ ...TOOLCHAIN, ...required })) {
+        const declared = declarations[name];
+        // Preserve an existing explicit local tarball declaration when rerunning after installation.
+        const localTool = name === 'gate-evm-tools' && input.toolPackage === undefined && typeof declared === 'string' && /^file:.*\.tgz$/.test(declared);
+        if ((name in TOOLCHAIN && declared === undefined) || (declared !== undefined && declared !== version && !localTool))
+            throw new Error(`Dependency declaration conflict for ${name}: expected ${version}`);
+    }
+    const networks = (0, project_1.readProjectNetworkSnapshots)(root, targets.map(target => target.network));
+    const source = before.get('hardhat.config.ts');
+    const withPlugin = (0, project_1.integratedConfig)(source); // Check integration conflicts even when dependencies are missing.
+    const doc = (0, config_1.configDocument)(root);
+    let changedYaml = before.get('config.yaml') === undefined;
+    const merge = (keys, expected) => {
+        const actual = doc.getIn(keys, true);
+        if (actual === undefined) {
+            doc.setIn(keys, expected);
+            changedYaml = true;
+            return;
+        }
+        if (expected && typeof expected === 'object' && !Array.isArray(expected)) {
+            if (!yaml_1.default.isMap(actual))
+                throw new Error(`Config conflict at ${keys.join('.')}`);
+            for (const [key, value] of Object.entries(expected))
+                merge([...keys, key], value);
+        }
+        else if (!yaml_1.default.isScalar(actual) || actual.value !== expected)
+            throw new Error(`Config conflict at ${keys.join('.')}`);
+    };
+    for (const { network, ...target } of targets) {
+        (0, project_1.confinedFile)(root, target.openzeppelin.manifestDir, 'directory');
+        merge([network], target);
+    }
+    if (before.get('contractInfo.json') !== undefined)
+        (0, protocol_1.object)(JSON.parse(before.get('contractInfo.json')), 'contractInfo.json');
+    const dependencies = [];
+    const projectRequire = (0, node_module_1.createRequire)(node_path_1.default.join(root, 'package.json'));
+    for (const [name, requested] of Object.entries({ ...TOOLCHAIN, ...required })) {
+        const metadata = (0, project_1.confinedFile)(root, `node_modules/${name}/package.json`);
+        if (!(0, project_1.stat)(metadata)) {
+            dependencies.push({ name, required: requested, reason: 'not installed locally' });
+            continue;
+        }
+        const installed = JSON.parse(node_fs_1.default.readFileSync(metadata, 'utf8'));
+        const expected = name === 'gate-evm-tools' ? DEPENDENCIES[name] : requested;
+        if (installed.name !== name || installed.version !== expected)
+            throw new Error(`Installed dependency conflict for ${name}: expected ${expected}`);
+        if (name !== 'gate-evm-tools') {
+            const entry = name === '@openzeppelin/contracts' ? `${name}/proxy/ERC1967/ERC1967Proxy.sol`
+                : name === '@openzeppelin/contracts-upgradeable' ? `${name}/package.json` : name;
+            try {
+                const resolved = node_fs_1.default.realpathSync(projectRequire.resolve(entry));
+                if (!(0, project_1.stat)(resolved)?.isFile() || !resolved.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                    throw new Error('nonlocal entry');
+            }
+            catch {
+                dependencies.push({ name, required: requested, reason: 'required entry point is missing or nonlocal' });
+            }
+        }
+        if (name === 'gate-evm-tools') {
+            try {
+                for (const entry of ['delivery-setup', 'delivery-protocol', 'delivery-hardhat', 'delivery-policy']) {
+                    const resolved = projectRequire.resolve(`gate-evm-tools/${entry}`);
+                    if (!resolved.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                        throw new Error('nonlocal API');
+                }
+            }
+            catch {
+                dependencies.push({ name, required: requested, reason: 'installed package lacks delivery API exports; install a built delivery package' });
+            }
+        }
+    }
+    if (!dependencies.length) {
+        const reason = dependencyTreeProblem(root);
+        if (reason)
+            dependencies.push({ name: 'dependency-tree', required: 'complete local dependency graph', reason });
+    }
+    const writes = new Map();
+    const missing = Object.entries(required).filter(([name]) => declarations[name] === undefined);
+    if (missing.length) {
+        const dev = { ...(pkg.devDependencies ?? {}) };
+        for (const [name, version] of missing)
+            dev[name] = version;
+        writes.set('package.json', JSON.stringify({ ...pkg, devDependencies: dev }, null, 2) + '\n');
+    }
+    if (changedYaml)
+        writes.set('config.yaml', doc.toString());
+    if (before.get('contractInfo.json') === undefined)
+        writes.set('contractInfo.json', '{}\n');
+    if (!dependencies.length && source !== withPlugin)
+        writes.set('hardhat.config.ts', withPlugin);
+    return { before, writes, result: { status: dependencies.length ? 'dependencies_pending' : writes.size ? 'setup_pending' : 'ready', projectRoot: root, dependencies, changes: [...writes.keys()],
+            networks: networks.map(({ network, chainId, url }) => ({ network, chainId, rpcConfigured: Boolean(url) })) } };
+}
+/** Read-only, never imports the project's config/HRE or contacts an RPC. */
+function inspectDeliveryProject(options) { return preflight(options).result; }
+/** Stage declarations/config; caller explicitly installs dependencies then reruns to enable the plugin. */
+function setupDeliveryProject(options) {
+    const { result, writes, before } = preflight(options);
+    const root = (0, project_1.projectRoot)(options.workspaceRoot, options.projectRoot);
+    // Recheck every output before the first write, including concurrent human edits.
+    for (const [file, content] of before)
+        if ((0, project_1.readFile)(root, file) !== content)
+            throw new Error(`Concurrent setup conflict: ${file}`);
+    for (const [file, contents] of writes) {
+        const destination = (0, project_1.confinedFile)(root, file);
+        const temporary = (0, project_1.confinedFile)(root, `.gate-delivery-${node_crypto_1.default.randomUUID()}.tmp`);
+        try {
+            node_fs_1.default.writeFileSync(temporary, contents, { flag: 'wx' });
+            if ((0, project_1.readFile)(root, file) !== before.get(file))
+                throw new Error(`Concurrent setup conflict: ${file}`);
+            node_fs_1.default.renameSync(temporary, destination);
+        }
+        finally {
+            if ((0, project_1.stat)(temporary))
+                node_fs_1.default.unlinkSync(temporary);
+        }
+    }
+    return { ...result, status: result.dependencies.length ? 'dependencies_pending' : 'ready' };
+}
+//# sourceMappingURL=setup.js.map