gate-evm-tools 1.0.28 → 1.2.0

package/dist-runtime/delivery/calldata-preparations.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.preparationCalldataReviews = preparationCalldataReviews;
+/** Planning-only adapter: reconstruct deployment intent from frozen requests and compiled artifacts. */
+const ethers_1 = require("ethers");
+const calldata_review_1 = require("./calldata-review");
+const factoryAbi = ['function deploy(bytes32 salt,bytes initCode,bytes data,uint256 create2ForwardValue,uint256 callForwardValue) payable returns(address)'];
+const upgradeAbi = ['function upgradeToAndCall(address newImplementation,bytes data) payable'];
+const adminAbi = ['function upgradeAndCall(address proxy,address implementation,bytes data) payable'];
+const multicallAbi = [
+    'function aggregate3(tuple(address target,bool allowFailure,bytes callData)[] calls) payable returns(tuple(bool success,bytes returnData)[])',
+    'function aggregate3Value(tuple(address target,bool allowFailure,uint256 value,bytes callData)[] calls) payable returns(tuple(bool success,bytes returnData)[])',
+];
+async function preparationCalldataReviews(entries, transactions, artifacts) {
+    const result = [];
+    for (const entry of entries) {
+        const { request, plan } = entry.prepared;
+        const artifact = await artifacts.readArtifact(request.contract);
+        const implementation = plan.deployments.find(d => d.role === 'implementation');
+        const initializer = request.kind !== 'create2-deploy' && request.call
+            ? (0, calldata_review_1.createCalldataInvocation)({ abi: artifact.abi, method: request.call.method, args: request.call.args,
+                data: new ethers_1.Interface(artifact.abi).encodeFunctionData(request.call.method, request.call.args) }) : undefined;
+        const inner = new Map();
+        for (const tx of plan.transactions) {
+            let invocation;
+            if (tx.purpose === 'upgrade-proxy') {
+                if (request.kind === 'create2-deploy' || !implementation)
+                    throw Error('Upgrade ABI intent missing');
+                const transparent = request.kind === 'transparent-upgrade';
+                const args = transparent ? [request.proxy, implementation.address, initializer?.data ?? '0x'] : [implementation.address, initializer?.data ?? '0x'];
+                invocation = (0, calldata_review_1.createCalldataInvocation)({ abi: transparent ? adminAbi : upgradeAbi, method: transparent ? 'upgradeAndCall' : 'upgradeToAndCall', args, data: tx.data,
+                    payloads: initializer ? [{ argumentPath: [transparent ? 2 : 1], invocation: initializer }] : [] });
+            }
+            else {
+                const role = tx.purpose === 'deploy-proxy' ? 'proxy' : tx.purpose === 'deploy-implementation' ? 'implementation' : 'contract';
+                const deployed = plan.deployments.find(d => d.role === role);
+                if (!deployed)
+                    throw Error('Deployment ABI intent missing');
+                const proxy = role === 'proxy';
+                const transparent = request.kind === 'transparent-deploy';
+                const code = proxy ? await artifacts.readArtifact(transparent
+                    ? '@openzeppelin/contracts/proxy/transparent/TransparentUpgradeableProxy.sol:TransparentUpgradeableProxy'
+                    : '@openzeppelin/contracts/proxy/ERC1967/ERC1967Proxy.sol:ERC1967Proxy') : artifact;
+                const args = !proxy ? request.constructorArgs : request.kind === 'uups-placeholder-deploy'
+                    ? [request.placeholderImplementation, '0x'] : transparent
+                    ? [implementation.address, request.proxyAdminOwner, initializer?.data ?? '0x'] : undefined;
+                if (!args)
+                    throw Error('Proxy constructor ABI intent missing');
+                const constructor = (0, calldata_review_1.createCalldataInvocation)({ abi: code.abi, method: null, args, bytecode: code.bytecode,
+                    data: (0, ethers_1.concat)([code.bytecode, new ethers_1.Interface(code.abi).encodeDeploy(args)]),
+                    payloads: proxy && transparent && initializer ? [{ argumentPath: [2], invocation: initializer }] : [] });
+                if (new ethers_1.Interface(code.abi).encodeDeploy(args).toLowerCase() !== deployed.constructorInput.toLowerCase())
+                    throw Error('Constructor calldata differs from preparation');
+                const forward = request.kind === 'create2-deploy' ? [request.create2ForwardValue ?? '0', request.callForwardValue ?? '0'] : ['0', '0'];
+                invocation = (0, calldata_review_1.createCalldataInvocation)({ abi: factoryAbi, method: 'deploy', args: [deployed.salt, constructor.data, '0x', ...forward], data: tx.data,
+                    payloads: [{ argumentPath: [1], invocation: constructor }] });
+            }
+            inner.set(tx.id, invocation);
+        }
+        for (const mapping of entry.mappings) {
+            const tx = transactions.find(t => t.transactionId === mapping.transactionId);
+            if (!tx)
+                throw Error('Calldata preparation mapping missing');
+            const calls = mapping.gateToolTransactionIds.map(id => {
+                const intent = inner.get(id), prepared = plan.transactions.find(t => t.id === id);
+                if (!intent || !prepared)
+                    throw Error('Inner calldata ABI intent missing');
+                return { intent, prepared };
+            });
+            if (mapping.kind === 'direct') {
+                if (calls.length !== 1)
+                    throw Error('Direct calldata mapping must contain one invocation');
+                result.push((0, calldata_review_1.reviewTransaction)(tx, calls[0].intent));
+            }
+            else {
+                const withValue = calls.some(c => BigInt(c.prepared.value) !== 0n), method = withValue ? 'aggregate3Value' : 'aggregate3';
+                const args = [calls.map(({ prepared: p }) => withValue ? [p.to, false, p.value, p.data] : [p.to, false, p.data])];
+                result.push((0, calldata_review_1.reviewTransaction)(tx, (0, calldata_review_1.createCalldataInvocation)({ abi: multicallAbi, method, args, data: tx.data,
+                    payloads: calls.map((c, index) => ({ argumentPath: [0, index, withValue ? 3 : 2], invocation: c.intent })) })));
+            }
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=calldata-preparations.js.map

package/dist-runtime/delivery/calldata-preparations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calldata-preparations.js","sourceRoot":"","sources":["../../runtime/delivery/calldata-preparations.ts"],"names":[],"mappings":";;AAcA,gEA6DC;AA3ED,wGAAwG;AACxG,mCAA8D;AAG9D,uDAAyI;AAEzI,MAAM,UAAU,GAAG,CAAC,uIAAuI,CAAC,CAAC;AAC7J,MAAM,UAAU,GAAG,CAAC,yEAAyE,CAAC,CAAC;AAC/F,MAAM,QAAQ,GAAG,CAAC,kFAAkF,CAAC,CAAC;AACtG,MAAM,YAAY,GAAG;IACjB,6IAA6I;IAC7I,gKAAgK;CACnK,CAAC;AAEK,KAAK,UAAU,0BAA0B,CAAC,OAAoC,EAAE,YAAoD,EAAE,SAAyB;IAClK,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,IAAI;YACjE,CAAC,CAAC,IAAA,0CAAwB,EAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBAChG,IAAI,EAAE,IAAI,kBAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;QACpD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,IAAI,UAA8B,CAAC;YACnC,IAAI,EAAE,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,cAAc;oBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACpG,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;gBACpJ,UAAU,GAAG,IAAA,0CAAwB,EAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;oBAC9J,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3G,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,KAAK,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC9H,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC7D,IAAI,CAAC,QAAQ;oBAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC5D,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC;gBAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,oBAAoB,CAAC;gBAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW;oBACzD,CAAC,CAAC,uGAAuG;oBACzG,CAAC,CAAC,qEAAqE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACxF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,yBAAyB;oBACtF,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW;oBACzD,CAAC,CAAC,CAAC,cAAe,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChG,IAAI,CAAC,IAAI;oBAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC/D,MAAM,WAAW,GAAG,IAAA,0CAAwB,EAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACrG,IAAI,EAAE,IAAA,eAAM,EAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,kBAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;oBACzE,QAAQ,EAAE,KAAK,IAAI,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7G,IAAI,IAAI,kBAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE;oBAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACvK,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,GAAG,EAAE,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvI,UAAU,GAAG,IAAA,0CAAwB,EAAC,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;oBAC/I,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7E,IAAI,CAAC,EAAE;gBAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAClD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClF,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;oBAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAC3E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBAC3F,MAAM,CAAC,IAAI,CAAC,IAAA,mCAAiB,EAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACJ,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC1H,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClH,MAAM,CAAC,IAAI,CAAC,IAAA,mCAAiB,EAAC,EAAE,EAAE,IAAA,0CAAwB,EAAC,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;oBACvG,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxH,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist-runtime/delivery/calldata-review.d.ts

@@ -0,0 +1,44 @@
+/** Pure ABI review. Expected arguments come from planning, never from decoding submitted bytes. */
+import { type InterfaceAbi } from 'ethers';
+import type { ReleaseExecutionTransaction } from '../workflow/lib/transactionPlanner';
+export interface CalldataPayload {
+    argumentPath: number[];
+    invocation: CalldataInvocation;
+}
+export interface CalldataInvocation {
+    kind: 'function' | 'constructor';
+    abi: unknown[];
+    method: string;
+    selector: string | null;
+    bytecode: string | null;
+    expectedArguments: unknown[];
+    decodedArguments: unknown[];
+    data: string;
+    payloads: CalldataPayload[];
+    check: 'matches-frozen-intent';
+}
+export interface CalldataTransactionReview {
+    transactionId: string;
+    to: string;
+    value: string;
+    operation: 0 | 1;
+    invocation: CalldataInvocation;
+}
+export interface CalldataReviewSink {
+    record(transaction: ReleaseExecutionTransaction, input: {
+        abi: InterfaceAbi;
+        method: string;
+        args: readonly unknown[];
+    }): void;
+}
+export declare function createCalldataInvocation(input: {
+    abi: InterfaceAbi;
+    method: string | null;
+    args: readonly unknown[];
+    data: string;
+    bytecode?: string;
+    payloads?: CalldataPayload[];
+}): CalldataInvocation;
+export declare function parseCalldataInvocation(raw: unknown): CalldataInvocation;
+export declare function reviewTransaction(tx: ReleaseExecutionTransaction, invocation: CalldataInvocation): CalldataTransactionReview;
+export declare function parseCalldataReviews(raw: unknown, transactions: readonly ReleaseExecutionTransaction[]): CalldataTransactionReview[];

package/dist-runtime/delivery/calldata-review.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCalldataInvocation = createCalldataInvocation;
+exports.parseCalldataInvocation = parseCalldataInvocation;
+exports.reviewTransaction = reviewTransaction;
+exports.parseCalldataReviews = parseCalldataReviews;
+/** Pure ABI review. Expected arguments come from planning, never from decoding submitted bytes. */
+const ethers_1 = require("ethers");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const data_1 = require("./data");
+function bytes(value) {
+    if (typeof value !== 'string' || !/^0x(?:[a-fA-F0-9]{2})*$/.test(value))
+        throw Error('Invalid ABI review bytes');
+    return value.toLowerCase();
+}
+/** Decimal strings retain uint256 precision; positional tuples are unambiguous even with duplicate names. */
+function argument(type, value) {
+    if (type.baseType === 'array') {
+        if (!Array.isArray(value) || (type.arrayLength !== -1 && value.length !== type.arrayLength))
+            throw Error('Invalid ABI review array');
+        return Array.from(value, v => argument(type.arrayChildren, v));
+    }
+    if (type.baseType === 'tuple') {
+        if (!value || typeof value !== 'object')
+            throw Error('Invalid ABI review tuple');
+        return type.components.map((p, i) => argument(p, Array.isArray(value) ? value[i] : value[p.name]));
+    }
+    if (/^u?int\d*$/.test(type.type)) {
+        if (typeof value === 'number' && !Number.isSafeInteger(value))
+            throw Error('Unsafe ABI review integer');
+        if (!['bigint', 'number', 'string'].includes(typeof value) || (typeof value === 'string' && !value.trim()))
+            throw Error('Invalid ABI review integer');
+        return BigInt(value).toString();
+    }
+    if (type.type === 'address')
+        return String(value).toLowerCase();
+    if (/^bytes\d*$/.test(type.type))
+        return bytes(value);
+    if ((type.type === 'bool' && typeof value !== 'boolean') || (type.type === 'string' && typeof value !== 'string'))
+        throw Error('Invalid ABI review scalar');
+    return value;
+}
+function argumentsOf(types, args) {
+    if (!Array.isArray(args) || types.length !== args.length)
+        throw Error('ABI review argument count mismatch');
+    return types.map((p, i) => argument(p, args[i]));
+}
+function createCalldataInvocation(input) {
+    const iface = new ethers_1.Interface(input.abi), fragment = input.method === null ? iface.deploy : iface.getFunction(input.method);
+    if (!fragment)
+        throw Error('ABI review method missing');
+    const expectedArguments = argumentsOf(fragment.inputs, input.args), data = bytes(input.data);
+    const bytecode = input.method === null ? bytes(input.bytecode) : null;
+    if (input.method !== null && input.bytecode !== undefined)
+        throw Error('Function review cannot contain constructor bytecode');
+    const encoded = input.method === null ? bytecode + iface.encodeDeploy(expectedArguments).slice(2) : iface.encodeFunctionData(input.method, expectedArguments).toLowerCase();
+    if (encoded !== data)
+        throw Error('Calldata differs from expected ABI encoding');
+    const decoded = input.method === null
+        ? ethers_1.AbiCoder.defaultAbiCoder().decode(fragment.inputs, '0x' + data.slice(bytecode.length))
+        : iface.decodeFunctionData(input.method, data);
+    const decodedArguments = argumentsOf(fragment.inputs, Array.from(decoded));
+    if ((0, canonicalData_1.canonicalJson)(expectedArguments) !== (0, canonicalData_1.canonicalJson)(decodedArguments))
+        throw Error('Decoded calldata differs from frozen intent');
+    const payloads = (input.payloads ?? []).map(p => {
+        if (!Array.isArray(p.argumentPath) || !p.argumentPath.length || p.argumentPath.some(i => !Number.isSafeInteger(i) || i < 0))
+            throw Error('Invalid nested calldata argument path');
+        let value = expectedArguments;
+        for (const index of p.argumentPath) {
+            if (!Array.isArray(value) || index >= value.length)
+                throw Error('Nested calldata argument path missing');
+            value = value[index];
+        }
+        const invocation = parseCalldataInvocation(p.invocation);
+        if (value !== invocation.data)
+            throw Error('Nested calldata differs from enclosing payload');
+        return { argumentPath: p.argumentPath, invocation };
+    });
+    if (new Set(payloads.map(p => (0, canonicalData_1.canonicalJson)(p.argumentPath))).size !== payloads.length)
+        throw Error('Duplicate nested calldata payload');
+    const method = input.method === null ? 'constructor' : fragment.format('sighash');
+    const required = [];
+    if (method === 'deploy(bytes32,bytes,bytes,uint256,uint256)') {
+        required.push([1]);
+        if (expectedArguments[2] !== '0x')
+            required.push([2]);
+        if (payloads.find(p => (0, canonicalData_1.canonicalJson)(p.argumentPath) === '[1]')?.invocation.kind !== 'constructor')
+            throw Error('CREATE2 constructor ABI review required');
+    }
+    else if (method === 'upgradeToAndCall(address,bytes)' && expectedArguments[1] !== '0x')
+        required.push([1]);
+    else if (method === 'upgradeAndCall(address,address,bytes)' && expectedArguments[2] !== '0x')
+        required.push([2]);
+    else if (['aggregate3((address,bool,bytes)[])', 'aggregate3Value((address,bool,uint256,bytes)[])'].includes(method)) {
+        const index = method.startsWith('aggregate3Value') ? 3 : 2;
+        expectedArguments[0].forEach((_, i) => required.push([0, i, index]));
+    }
+    for (const path of required)
+        if (!payloads.some(p => (0, canonicalData_1.canonicalJson)(p.argumentPath) === (0, canonicalData_1.canonicalJson)(path)))
+            throw Error('Nested calldata ABI review required');
+    return (0, canonicalData_1.deepFreeze)({ kind: input.method === null ? 'constructor' : 'function', abi: [JSON.parse(fragment.format('json'))],
+        method, selector: input.method === null ? null : iface.getFunction(input.method).selector,
+        bytecode, expectedArguments, decodedArguments, data, payloads, check: 'matches-frozen-intent' });
+}
+function parseCalldataInvocation(raw) {
+    const v = (0, data_1.strictData)(raw);
+    if (!v || !['function', 'constructor'].includes(v.kind) || !Array.isArray(v.payloads))
+        throw Error('Invalid calldata invocation');
+    const parsed = createCalldataInvocation({ abi: v.abi, method: v.kind === 'constructor' ? null : v.method,
+        args: v.expectedArguments, data: v.data, ...(v.kind === 'constructor' ? { bytecode: v.bytecode } : {}), payloads: v.payloads });
+    if ((0, canonicalData_1.canonicalJson)(parsed) !== (0, canonicalData_1.canonicalJson)(v))
+        throw Error('Noncanonical or modified ABI review');
+    return parsed;
+}
+function reviewTransaction(tx, invocation) {
+    const parsed = parseCalldataInvocation(invocation);
+    if (parsed.kind !== 'function' || parsed.data !== tx.data)
+        throw Error('ABI review transaction calldata mismatch');
+    return (0, canonicalData_1.deepFreeze)({ transactionId: tx.transactionId, to: tx.to, value: tx.value, operation: tx.operation, invocation: parsed });
+}
+function parseCalldataReviews(raw, transactions) {
+    if (!Array.isArray(raw) || raw.length !== transactions.length)
+        throw Error('Complete calldata ABI review required');
+    return (0, canonicalData_1.deepFreeze)(raw.map((value, index) => {
+        const v = (0, data_1.strictData)(value), expected = reviewTransaction(transactions[index], v.invocation);
+        if ((0, canonicalData_1.canonicalJson)(v) !== (0, canonicalData_1.canonicalJson)(expected))
+            throw Error('ABI review transaction binding mismatch');
+        return expected;
+    }));
+}
+//# sourceMappingURL=calldata-review.js.map

package/dist-runtime/delivery/calldata-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calldata-review.js","sourceRoot":"","sources":["../../runtime/delivery/calldata-review.ts"],"names":[],"mappings":";;AA4DA,4DA4CC;AACD,0DAOC;AACD,8CAIC;AACD,oDAOC;AA7HD,mGAAmG;AACnG,mCAA2E;AAC3E,iEAA0E;AAE1E,iCAAoC;AA4BpC,SAAS,KAAK,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AACD,6GAA6G;AAC7G,SAAS,QAAQ,CAAC,IAAe,EAAE,KAAU;IACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,UAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACxG,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtJ,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5J,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,WAAW,CAAC,KAA2B,EAAE,IAAwB;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5G,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AACD,SAAgB,wBAAwB,CAAC,KAGxC;IACG,MAAM,KAAK,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1H,IAAI,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5K,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI;QACjC,CAAC,CAAC,iBAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAS,CAAC,MAAM,CAAC,CAAC;QACzF,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAA,6BAAa,EAAC,iBAAiB,CAAC,KAAK,IAAA,6BAAa,EAAC,gBAAgB,CAAC;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACrI,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAClL,IAAI,KAAK,GAAQ,iBAAiB,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,UAAU,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC7F,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,6BAAa,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzI,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,IAAI,MAAM,KAAK,6CAA6C,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,6BAAa,EAAC,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,EAAE,UAAU,CAAC,IAAI,KAAK,aAAa;YAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/J,CAAC;SAAM,IAAI,MAAM,KAAK,iCAAiC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxG,IAAI,MAAM,KAAK,uCAAuC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC5G,IAAI,CAAC,oCAAoC,EAAE,iDAAiD,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,iBAAiB,CAAC,CAAC,CAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ;QAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,6BAAa,EAAC,CAAC,CAAC,YAAY,CAAC,KAAK,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChK,OAAO,IAAA,0BAAU,EAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACpH,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,QAAQ;QAC1F,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACzG,CAAC;AACD,SAAgB,uBAAuB,CAAC,GAAY;IAChD,MAAM,CAAC,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAuB,CAAC;IAChD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QACpH,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrI,IAAI,IAAA,6BAAa,EAAC,MAAM,CAAC,KAAK,IAAA,6BAAa,EAAC,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,SAAgB,iBAAiB,CAAC,EAA+B,EAAE,UAA8B;IAC7F,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACnH,OAAO,IAAA,0BAAU,EAAC,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;AACpI,CAAC;AACD,SAAgB,oBAAoB,CAAC,GAAY,EAAE,YAAoD;IACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpH,OAAO,IAAA,0BAAU,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,IAAA,iBAAU,EAAC,KAAK,CAA8B,EAAE,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1H,IAAI,IAAA,6BAAa,EAAC,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzG,OAAO,QAAQ,CAAC;IACpB,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist-runtime/delivery/check-code.d.ts

@@ -0,0 +1,19 @@
+export interface ExpectedDevelopmentCode {
+    key: string;
+    contract: string;
+    address: string;
+}
+/** The checker incrementally merges output. A fresh private output file is mandatory. */
+export declare function validateDevelopmentCheckReport(raw: unknown, target: string, expected: readonly ExpectedDevelopmentCode[]): unknown;
+export declare function runDevelopmentCheckCode(input: {
+    root: string;
+    target: string;
+    executionId: string;
+    planHash: string;
+    manifestDir: string;
+    registry: string;
+    metadata: string;
+    effective: Record<string, Record<string, string>>;
+    expected: ExpectedDevelopmentCode[];
+    assertArtifacts: () => Promise<unknown>;
+}): Promise<unknown>;

package/dist-runtime/delivery/check-code.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateDevelopmentCheckReport = validateDevelopmentCheckReport;
+exports.runDevelopmentCheckCode = runDevelopmentCheckCode;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const materialization_1 = require("./materialization");
+/** The checker incrementally merges output. A fresh private output file is mandatory. */
+function validateDevelopmentCheckReport(raw, target, expected) {
+    const value = (0, canonicalData_1.canonicalData)(raw);
+    if (!expected.length || new Set(expected.map(e => e.key)).size !== expected.length)
+        throw Error('Empty expected CheckCode set or key collision');
+    if (!value || Array.isArray(value) || (0, canonicalData_1.canonicalJson)(Object.keys(value)) !== (0, canonicalData_1.canonicalJson)([target]))
+        throw Error('CheckCode target mismatch');
+    const entries = value[target];
+    if (!entries || Array.isArray(entries) || (0, canonicalData_1.canonicalJson)(Object.keys(entries).sort()) !== (0, canonicalData_1.canonicalJson)(expected.map(e => e.key).sort()))
+        throw Error('CheckCode missing/extra entries');
+    for (const e of expected) {
+        const row = entries[e.key];
+        if (!row || row.contract !== e.contract || row.scheme !== 'evm' || typeof row.address !== 'string' || row.address.toLowerCase() !== e.address.toLowerCase() || row.matches !== true || row.error !== null || typeof row.reason !== 'string' || !Number.isSafeInteger(row.onChainBytecodeLength) || row.onChainBytecodeLength <= 0 || !Number.isSafeInteger(row.localBytecodeLength) || row.localBytecodeLength <= 0)
+            throw Error(`CheckCode identity/match failure: ${e.key}`);
+    }
+    return value;
+}
+function command(root, cmd, args, env, log) {
+    return new Promise((resolve, reject) => { const output = node_fs_1.default.createWriteStream(log, { flags: 'wx', mode: 0o600 }); const child = (0, node_child_process_1.spawn)(cmd, args, { cwd: root, env, stdio: ['ignore', 'pipe', 'pipe'] }); child.stdout.pipe(output, { end: false }); child.stderr.pipe(output, { end: false }); child.on('error', error => { output.end(); reject(error); }); child.on('close', code => { output.end(() => code === 0 ? resolve() : reject(Error(`CheckCode command failed (${code}): ${cmd}; see ${log}`))); }); });
+}
+async function runDevelopmentCheckCode(input) {
+    const relative = `.gate-delivery/check-code/${input.executionId}/${(0, node_crypto_1.randomUUID)()}`, directory = (0, materialization_1.developmentPath)(input.root, relative);
+    node_fs_1.default.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const effective = (0, canonicalData_1.canonicalJson)(input.effective) + '\n';
+    (0, materialization_1.atomicDevelopmentWrite)(input.root, `${relative}/effective.json`, effective);
+    const raw = node_path_1.default.join(directory, `${input.target}.raw.json`), env = { ...process.env, HARDHAT_NETWORK: input.target, GATE_WORKFLOW_TARGET: input.target, MANIFEST_DEFAULT_DIR: input.manifestDir };
+    // Configuration's runtime loader selects the actual named target, never a fork.
+    delete env.GATE_DELIVERY_CONTEXT;
+    const snapshot = async () => {
+        if (node_fs_1.default.readFileSync(node_path_1.default.join(input.root, 'contractInfo.json'), 'utf8') !== input.registry || node_fs_1.default.readFileSync(node_path_1.default.join(input.root, 'deploymentInfo.json'), 'utf8') !== input.metadata)
+            throw Error('Registry/metadata changed during CheckCode');
+        return await input.assertArtifacts();
+    };
+    await snapshot();
+    await command(input.root, 'npm', ['run', 'compile', '--', '--network', input.target], env, node_path_1.default.join(directory, 'compile.log'));
+    await snapshot();
+    if (node_fs_1.default.existsSync(raw))
+        throw Error('CheckCode raw output must be fresh');
+    await command(input.root, process.execPath, [node_path_1.default.join(input.root, 'node_modules/gate-evm-tools/bin/cli.js'), 'check', '--scheme', 'evm', '--network', input.target, '--config', node_path_1.default.join(directory, 'effective.json'), '--output', raw], env, node_path_1.default.join(directory, 'check.log'));
+    const artifacts = await snapshot();
+    if (!node_fs_1.default.existsSync(raw))
+        throw Error('CheckCode completed without raw output');
+    const stat = node_fs_1.default.lstatSync(raw);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+        throw Error('Invalid CheckCode raw output');
+    const bytes = node_fs_1.default.readFileSync(raw);
+    validateDevelopmentCheckReport(JSON.parse(bytes.toString('utf8')), input.target, input.expected);
+    return { version: 1, executionId: input.executionId, planHash: input.planHash, target: input.target, rawFile: `${relative}/${input.target}.raw.json`, rawHash: (0, materialization_1.byteHash)(bytes), registryHash: (0, materialization_1.byteHash)(input.registry), metadataHash: (0, materialization_1.byteHash)(input.metadata), effectiveHash: (0, materialization_1.byteHash)(effective), artifacts };
+}
+//# sourceMappingURL=check-code.js.map

package/dist-runtime/delivery/check-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-code.js","sourceRoot":"","sources":["../../runtime/delivery/check-code.ts"],"names":[],"mappings":";;;;;AAQA,wEAOC;AAID,0DAkBC;AArCD,sDAAyB;AACzB,0DAA6B;AAC7B,2DAAyC;AACzC,6CAAuC;AACvC,iEAA0E;AAC1E,uDAAkF;AAElF,yFAAyF;AACzF,SAAgB,8BAA8B,CAAC,GAAW,EAAC,MAAa,EAAC,QAA2C;IACnH,MAAM,KAAK,GAAC,IAAA,6BAAa,EAAC,GAAG,CAAQ,CAAC;IACtC,IAAG,CAAC,QAAQ,CAAC,MAAM,IAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzI,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,IAAA,6BAAa,EAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAG,IAAA,6BAAa,EAAC,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACtI,MAAM,OAAO,GAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,IAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAE,IAAA,6BAAa,EAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAG,IAAA,6BAAa,EAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1M,KAAI,MAAM,CAAC,IAAI,QAAQ,EAAC,CAAC;QAAA,MAAM,GAAG,GAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,GAAG,IAAE,GAAG,CAAC,QAAQ,KAAG,CAAC,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,KAAG,KAAK,IAAE,OAAO,GAAG,CAAC,OAAO,KAAG,QAAQ,IAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAE,GAAG,CAAC,OAAO,KAAG,IAAI,IAAE,GAAG,CAAC,KAAK,KAAG,IAAI,IAAE,OAAO,GAAG,CAAC,MAAM,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAE,GAAG,CAAC,qBAAqB,IAAE,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAE,GAAG,CAAC,mBAAmB,IAAE,CAAC;YAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAAA,CAAC;IACxd,OAAO,KAAK,CAAC;AACd,CAAC;AACD,SAAS,OAAO,CAAC,IAAW,EAAC,GAAU,EAAC,IAAa,EAAC,GAAqB,EAAC,GAAU;IACrF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,MAAM,GAAC,iBAAE,CAAC,iBAAiB,CAAC,GAAG,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAA,0BAAK,EAAC,GAAG,EAAC,IAAI,EAAC,EAAC,GAAG,EAAC,IAAI,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,KAAK,CAAC,EAAE,CAAC,OAAO,EAAC,IAAI,CAAA,EAAE,GAAC,MAAM,CAAC,GAAG,CAAC,GAAE,EAAE,CAAA,IAAI,KAAG,CAAC,CAAA,CAAC,CAAA,OAAO,EAAE,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,MAAM,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;AAC5b,CAAC;AACM,KAAK,UAAU,uBAAuB,CAAC,KAA8O;IAC3R,MAAM,QAAQ,GAAC,6BAA6B,KAAK,CAAC,WAAW,IAAI,IAAA,wBAAU,GAAE,EAAE,EAAC,SAAS,GAAC,IAAA,iCAAe,EAAC,KAAK,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;IAAA,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IACnL,MAAM,SAAS,GAAC,IAAA,6BAAa,EAAC,KAAK,CAAC,SAAS,CAAC,GAAC,IAAI,CAAC;IAAA,IAAA,wCAAsB,EAAC,KAAK,CAAC,IAAI,EAAC,GAAG,QAAQ,iBAAiB,EAAC,SAAS,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC,EAAC,GAAG,GAAmB,EAAC,GAAG,OAAO,CAAC,GAAG,EAAC,eAAe,EAAC,KAAK,CAAC,MAAM,EAAC,oBAAoB,EAAC,KAAK,CAAC,MAAM,EAAC,oBAAoB,EAAC,KAAK,CAAC,WAAW,EAAC,CAAC;IACvM,gFAAgF;IAChF,OAAO,GAAG,CAAC,qBAAqB,CAAC;IACjC,MAAM,QAAQ,GAAC,KAAK,IAAE,EAAE;QACvB,IAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,mBAAmB,CAAC,EAAC,MAAM,CAAC,KAAG,KAAK,CAAC,QAAQ,IAAE,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,qBAAqB,CAAC,EAAC,MAAM,CAAC,KAAG,KAAK,CAAC,QAAQ;YAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtO,OAAO,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,QAAQ,EAAE,CAAC;IAAA,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,KAAK,EAAC,CAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,MAAM,CAAC,EAAC,GAAG,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,aAAa,CAAC,CAAC,CAAC;IAAA,MAAM,QAAQ,EAAE,CAAC;IACzJ,IAAG,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxE,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,wCAAwC,CAAC,EAAC,OAAO,EAAC,UAAU,EAAC,KAAK,EAAC,WAAW,EAAC,KAAK,CAAC,MAAM,EAAC,UAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,gBAAgB,CAAC,EAAC,UAAU,EAAC,GAAG,CAAC,EAAC,GAAG,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAC,WAAW,CAAC,CAAC,CAAC;IACnQ,MAAM,SAAS,GAAC,MAAM,QAAQ,EAAE,CAAC;IACjC,IAAG,CAAC,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAC,iBAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,KAAK,KAAG,CAAC;QAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClI,MAAM,KAAK,GAAC,iBAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAAA,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAC,KAAK,CAAC,MAAM,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChI,OAAO,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,MAAM,WAAW,EAAC,OAAO,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,EAAC,YAAY,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,YAAY,EAAC,IAAA,0BAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,aAAa,EAAC,IAAA,0BAAQ,EAAC,SAAS,CAAC,EAAC,SAAS,EAAC,CAAC;AAC7R,CAAC"}

package/dist-runtime/delivery/closure-format.d.ts

@@ -0,0 +1,77 @@
+declare const policy: "gate-custom-cjs@1";
+export interface ClosureFile {
+    path: string;
+    kind: "module" | "json" | "data" | "config" | "metadata";
+    digest: string;
+    emittedDigest: string | null;
+}
+export interface ClosureEdge {
+    importer: string;
+    specifier: string;
+    target: string;
+    kind: "runtime" | "config";
+}
+export interface ClosurePackage {
+    lockLocation: string;
+    name: string;
+    version: string;
+    integrity: string;
+    source: {
+        kind: "registry" | "tarball";
+        identity: string;
+    };
+    metadataDigest: string;
+    resolution: Record<string, unknown>;
+    payload: {
+        path: string;
+        digest: string;
+    }[];
+    payloadDigest: string;
+}
+export interface HostAdapter {
+    kind: "isolated-cjs" | "hardhat-2.26.3-ts-node-10.9.2";
+    preload: {
+        path: string;
+        digest: string;
+    } | null;
+    packages: {
+        name: string;
+        version: string;
+        metadataDigest: string;
+    }[];
+}
+export interface CustomInputClosure {
+    version: 1;
+    policy: typeof policy;
+    roots: string[];
+    files: ClosureFile[];
+    edges: ClosureEdge[];
+    packages: ClosurePackage[];
+    compiler: {
+        version: string;
+        options: Record<string, unknown>;
+        config: string | null;
+    };
+    hostAdapter: HostAdapter;
+    resolver: {
+        policy: "node-default-cjs";
+        version: string;
+        flags: string[];
+        environment: "empty";
+    };
+    closureHash: string;
+}
+export declare const closureRuntimeOptions: {
+    target: number;
+    module: number;
+    esModuleInterop: boolean;
+    resolveJsonModule: boolean;
+    isolatedModules: boolean;
+    sourceMap: boolean;
+    inlineSourceMap: boolean;
+    importHelpers: boolean;
+    removeComments: boolean;
+    newLine: number;
+};
+export declare function parseCustomInputClosure(raw: unknown): CustomInputClosure;
+export {};