gate-evm-tools 1.0.28 → 1.2.0

package/dist-runtime/delivery/materialization.js

@@ -0,0 +1,138 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.byteHash = void 0;
+exports.developmentPath = developmentPath;
+exports.fileBytes = fileBytes;
+exports.atomicDevelopmentWrite = atomicDevelopmentWrite;
+exports.readDevelopmentJournal = readDevelopmentJournal;
+exports.withDevelopmentFileLock = withDevelopmentFileLock;
+exports.commitDevelopmentFiles = commitDevelopmentFiles;
+exports.commitDevelopmentFilesLocked = commitDevelopmentFilesLocked;
+/** Recoverable file-only commit. SQLite supplies an OS-released cross-process mutex;
+ * the fsynced intent survives that mutex's rollback after a process crash. */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const node_sqlite_1 = require("node:sqlite");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const protocol_1 = require("./protocol");
+const byteHash = (bytes) => (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex');
+exports.byteHash = byteHash;
+function developmentPath(root, relative) {
+    (0, protocol_1.portablePath)(relative, 'materialization path');
+    let current = node_fs_1.default.realpathSync(root);
+    for (const part of relative.split('/')) {
+        current = node_path_1.default.join(current, part);
+        if (node_fs_1.default.existsSync(current)) {
+            const s = node_fs_1.default.lstatSync(current);
+            if (s.isSymbolicLink() || (!s.isDirectory() && !s.isFile()) || s.isFile() && s.nlink !== 1)
+                throw Error('Unsafe materialization path');
+        }
+    }
+    return current;
+}
+function fileBytes(root, relative) { const file = developmentPath(root, relative); return node_fs_1.default.existsSync(file) ? node_fs_1.default.readFileSync(file, 'utf8') : null; }
+function syncDir(directory) { const fd = node_fs_1.default.openSync(directory, 'r'); try {
+    node_fs_1.default.fsyncSync(fd);
+}
+finally {
+    node_fs_1.default.closeSync(fd);
+} }
+function mkdir(directory) { if (node_fs_1.default.existsSync(directory))
+    return; mkdir(node_path_1.default.dirname(directory)); node_fs_1.default.mkdirSync(directory, { mode: 0o700 }); syncDir(node_path_1.default.dirname(directory)); }
+function atomicDevelopmentWrite(root, relative, bytes) {
+    const file = developmentPath(root, relative);
+    mkdir(node_path_1.default.dirname(file));
+    const temp = `${file}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+    const fd = node_fs_1.default.openSync(temp, 'wx', 0o600);
+    try {
+        node_fs_1.default.writeFileSync(fd, bytes);
+        node_fs_1.default.fsyncSync(fd);
+    }
+    finally {
+        node_fs_1.default.closeSync(fd);
+    }
+    node_fs_1.default.renameSync(temp, file);
+    syncDir(node_path_1.default.dirname(file));
+}
+function readDevelopmentJournal(root, executionId) {
+    const bytes = fileBytes(root, `.gate-delivery/materialization/${(0, protocol_1.safeId)(executionId, 'executionId')}.json`);
+    if (bytes === null)
+        return;
+    const j = JSON.parse(bytes);
+    (0, canonicalData_1.exactObject)(j, ['version', 'executionId', 'identity', 'files', 'state', 'intentHash'], 'materialization journal');
+    if (j.version !== 1 || j.executionId !== executionId || !['prepared', 'committed'].includes(j.state) || !Array.isArray(j.files) || !j.files.length)
+        throw Error('Invalid materialization journal');
+    for (const f of j.files) {
+        (0, canonicalData_1.exactObject)(f, ['path', 'before', 'after', 'beforeHash', 'afterHash'], 'journal file');
+        (0, protocol_1.portablePath)(f.path, 'journal path');
+        if ((f.before !== null && typeof f.before !== 'string') || typeof f.after !== 'string' || f.beforeHash !== (f.before === null ? null : (0, exports.byteHash)(f.before)) || f.afterHash !== (0, exports.byteHash)(f.after))
+            throw Error('Invalid materialization journal bytes');
+    }
+    if (new Set(j.files.map((f) => f.path)).size !== j.files.length || j.intentHash !== (0, canonicalData_1.semanticHash)({ version: j.version, executionId: j.executionId, identity: j.identity, files: j.files }))
+        throw Error('Invalid materialization journal identity');
+    return j;
+}
+async function withDevelopmentFileLock(root, work) {
+    const file = developmentPath(root, '.gate-delivery/materialization.sqlite');
+    mkdir(node_path_1.default.dirname(file));
+    const db = new node_sqlite_1.DatabaseSync(file);
+    try {
+        db.exec('PRAGMA busy_timeout=5000; PRAGMA synchronous=FULL; BEGIN IMMEDIATE');
+        return await work();
+    }
+    finally {
+        try {
+            db.exec('ROLLBACK');
+        }
+        finally {
+            db.close();
+        }
+    }
+}
+/** Caller holds no file lock. onFileCommitted is a progress notification, never acceptance authority. */
+async function commitDevelopmentFiles(input, onFileCommitted) {
+    return withDevelopmentFileLock(input.root, () => commitDevelopmentFilesLocked(input, onFileCommitted));
+}
+async function commitDevelopmentFilesLocked(input, onFileCommitted) {
+    (0, protocol_1.safeId)(input.executionId, 'executionId');
+    if (!/^[a-f0-9]{64}$/.test(input.identity) || !input.files.length)
+        throw Error('Invalid materialization identity/files');
+    const files = input.files.map(f => { (0, canonicalData_1.exactObject)(f, ['path', 'before', 'after'], 'materialization file'); developmentPath(input.root, f.path); if ((f.before !== null && typeof f.before !== 'string') || typeof f.after !== 'string')
+        throw Error('Invalid file bytes'); return { ...f, beforeHash: f.before === null ? null : (0, exports.byteHash)(f.before), afterHash: (0, exports.byteHash)(f.after) }; });
+    if (new Set(files.map(f => f.path)).size !== files.length)
+        throw Error('Duplicate materialization path');
+    const body = { version: 1, executionId: input.executionId, identity: input.identity, files }, intentHash = (0, canonicalData_1.semanticHash)(body);
+    let journal = readDevelopmentJournal(input.root, input.executionId);
+    if (journal && journal.intentHash !== intentHash)
+        throw Error('Materialization identity/candidate conflict');
+    const journalPath = `.gate-delivery/materialization/${input.executionId}.json`;
+    // Validate the entire set before changing even the first file.
+    for (const f of files) {
+        const bytes = fileBytes(input.root, f.path);
+        if (bytes !== f.before && bytes !== f.after)
+            throw Error(`Materialization byte conflict: ${f.path}`);
+        if (journal?.state === 'committed' && bytes !== f.after)
+            throw Error(`Committed materialization conflict: ${f.path}`);
+    }
+    if (!journal) {
+        journal = { ...body, state: 'prepared', intentHash };
+        atomicDevelopmentWrite(input.root, journalPath, (0, canonicalData_1.canonicalJson)(journal) + '\n');
+    }
+    for (const f of files) {
+        const current = fileBytes(input.root, f.path);
+        if (current === f.after)
+            continue;
+        if (current !== f.before)
+            throw Error(`Materialization byte conflict: ${f.path}`);
+        atomicDevelopmentWrite(input.root, f.path, f.after);
+        onFileCommitted?.(f.path);
+    }
+    journal = { ...journal, state: 'committed' };
+    atomicDevelopmentWrite(input.root, journalPath, (0, canonicalData_1.canonicalJson)(journal) + '\n');
+    return journal;
+}
+//# sourceMappingURL=materialization.js.map

package/dist-runtime/delivery/materialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialization.js","sourceRoot":"","sources":["../../runtime/delivery/materialization.ts"],"names":[],"mappings":";;;;;;AAWA,0CAIC;AACD,8BAA4K;AAG5K,wDAIC;AACD,wDAMC;AACD,0DAGC;AAED,wDAEC;AACD,oEAaC;AApDD;8EAC8E;AAC9E,sDAAyB;AACzB,0DAA6B;AAC7B,6CAAkD;AAClD,6CAAyC;AACzC,iEAAqF;AACrF,yCAA+C;AAGxC,MAAM,QAAQ,GAAC,CAAC,KAAmB,EAAC,EAAE,CAAA,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAjF,QAAA,QAAQ,YAAyE;AAC9F,SAAgB,eAAe,CAAC,IAAW,EAAC,QAAe;IAC1D,IAAA,uBAAY,EAAC,QAAQ,EAAC,sBAAsB,CAAC,CAAC;IAAA,IAAI,OAAO,GAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAChF,KAAI,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,CAAC;QAAA,OAAO,GAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,iBAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAC,CAAC;YAAA,MAAM,CAAC,GAAC,iBAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAA,IAAG,CAAC,CAAC,cAAc,EAAE,IAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAE,CAAC,CAAC,MAAM,EAAE,IAAE,CAAC,CAAC,KAAK,KAAG,CAAC;gBAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAAA,CAAC;IAAA,CAAC;IAC7P,OAAO,OAAO,CAAC;AAChB,CAAC;AACD,SAAgB,SAAS,CAAC,IAAW,EAAC,QAAe,IAAe,MAAM,IAAI,GAAC,eAAe,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,CAAA,OAAO,iBAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,CAAC;AAC5K,SAAS,OAAO,CAAC,SAAgB,IAAE,MAAM,EAAE,GAAC,iBAAE,CAAC,QAAQ,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC,CAAA,IAAG,CAAC;IAAA,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAAA,CAAC;QAAO,CAAC;IAAA,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAAA,CAAC,CAAA,CAAC;AACxH,SAAS,KAAK,CAAC,SAAgB,IAAE,IAAG,iBAAE,CAAC,UAAU,CAAC,SAAS,CAAC;IAAC,OAAO,CAAA,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA,CAAC;AAC1K,SAAgB,sBAAsB,CAAC,IAAW,EAAC,QAAe,EAAC,KAAY;IAC9E,MAAM,IAAI,GAAC,eAAe,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;IAAA,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAA,MAAM,IAAI,GAAC,GAAG,IAAI,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC;IAC7G,MAAM,EAAE,GAAC,iBAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;IAAA,IAAG,CAAC;QAAA,iBAAE,CAAC,aAAa,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;QAAA,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAA,CAAC;IACjH,iBAAE,CAAC,UAAU,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAAA,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,SAAgB,sBAAsB,CAAC,IAAW,EAAC,WAAkB;IACpE,MAAM,KAAK,GAAC,SAAS,CAAC,IAAI,EAAC,kCAAkC,IAAA,iBAAM,EAAC,WAAW,EAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAAA,IAAG,KAAK,KAAG,IAAI;QAAC,OAAO;IAC9H,MAAM,CAAC,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAA,IAAA,2BAAW,EAAC,CAAC,EAAC,CAAC,SAAS,EAAC,aAAa,EAAC,UAAU,EAAC,OAAO,EAAC,OAAO,EAAC,YAAY,CAAC,EAAC,yBAAyB,CAAC,CAAC;IACrI,IAAG,CAAC,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,CAAC,WAAW,KAAG,WAAW,IAAE,CAAC,CAAC,UAAU,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpL,KAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,CAAC;QAAA,IAAA,2BAAW,EAAC,CAAC,EAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,YAAY,EAAC,WAAW,CAAC,EAAC,cAAc,CAAC,CAAC;QAAA,IAAA,uBAAY,EAAC,CAAC,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,CAAC,MAAM,KAAG,IAAI,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,QAAQ,CAAC,IAAE,OAAO,CAAC,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,CAAC,MAAM,KAAG,IAAI,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAA,gBAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAE,CAAC,CAAC,SAAS,KAAG,IAAA,gBAAQ,EAAC,CAAC,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAAA,CAAC;IAC1W,IAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAK,EAAC,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAE,CAAC,CAAC,UAAU,KAAG,IAAA,4BAAY,EAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,WAAW,EAAC,CAAC,CAAC,WAAW,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,CAAC;QAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAAA,OAAO,CAAC,CAAC;AAC/O,CAAC;AACM,KAAK,UAAU,uBAAuB,CAAI,IAAW,EAAC,IAAmB;IAC/E,MAAM,IAAI,GAAC,eAAe,CAAC,IAAI,EAAC,uCAAuC,CAAC,CAAC;IAAA,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAA,MAAM,EAAE,GAAC,IAAI,0BAAY,CAAC,IAAI,CAAC,CAAC;IACnI,IAAG,CAAC;QAAA,EAAE,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAAA,OAAO,MAAM,IAAI,EAAE,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IAAA,CAAC;AAC9J,CAAC;AACD,yGAAyG;AAClG,KAAK,UAAU,sBAAsB,CAAC,KAA2B,EAAC,eAAoC;IAC5G,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAC,GAAE,EAAE,CAAA,4BAA4B,CAAC,KAAK,EAAC,eAAe,CAAC,CAAC,CAAC;AACpG,CAAC;AACM,KAAK,UAAU,4BAA4B,CAAC,KAA2B,EAAC,eAAoC;IAClH,IAAA,iBAAM,EAAC,KAAK,CAAC,WAAW,EAAC,aAAa,CAAC,CAAC;IAAA,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7J,MAAM,KAAK,GAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,GAAC,IAAA,2BAAW,EAAC,CAAC,EAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,CAAC,EAAC,sBAAsB,CAAC,CAAC,CAAA,eAAe,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,CAAC,MAAM,KAAG,IAAI,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,QAAQ,CAAC,IAAE,OAAO,CAAC,CAAC,KAAK,KAAG,QAAQ;QAAC,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAA,OAAO,EAAC,GAAG,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,KAAG,IAAI,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAA,gBAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACjV,IAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAG,KAAK,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnG,MAAM,IAAI,GAAC,EAAC,OAAO,EAAC,CAAC,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,EAAC,UAAU,GAAC,IAAA,4BAAY,EAAC,IAAI,CAAC,CAAC;IACjH,IAAI,OAAO,GAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjE,IAAG,OAAO,IAAE,OAAO,CAAC,UAAU,KAAG,UAAU;QAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvG,MAAM,WAAW,GAAC,kCAAkC,KAAK,CAAC,WAAW,OAAO,CAAC;IAC7E,+DAA+D;IAC/D,KAAI,MAAM,CAAC,IAAI,KAAK,EAAC,CAAC;QAAA,MAAM,KAAK,GAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,KAAK,KAAG,CAAC,CAAC,MAAM,IAAE,KAAK,KAAG,CAAC,CAAC,KAAK;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAAA,IAAG,OAAO,EAAE,KAAK,KAAG,WAAW,IAAE,KAAK,KAAG,CAAC,CAAC,KAAK;YAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAAA,CAAC;IAC3Q,IAAG,CAAC,OAAO,EAAC,CAAC;QAAA,OAAO,GAAC,EAAC,GAAG,IAAI,EAAC,KAAK,EAAC,UAAU,EAAC,UAAU,EAAC,CAAC;QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,IAAA,6BAAa,EAAC,OAAO,CAAC,GAAC,IAAI,CAAC,CAAC;IAAA,CAAC;IACvI,KAAI,MAAM,CAAC,IAAI,KAAK,EAAC,CAAC;QAAA,MAAM,OAAO,GAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,OAAO,KAAG,CAAC,CAAC,KAAK;YAAC,SAAS;QAAA,IAAG,OAAO,KAAG,CAAC,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAAA,CAAC;IAC1P,OAAO,GAAC,EAAC,GAAG,OAAO,EAAC,KAAK,EAAC,WAAW,EAAC,CAAC;IAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,IAAA,6BAAa,EAAC,OAAO,CAAC,GAAC,IAAI,CAAC,CAAC;IAAA,OAAO,OAAO,CAAC;AAClI,CAAC"}

package/dist-runtime/delivery/observations.d.ts

@@ -0,0 +1,31 @@
+import type { DeliveryPlan } from './plan';
+export type ObservationState = 'included-unfinalized' | 'finalized-success' | 'finalized-reverted';
+export interface TransactionObservation {
+    observationId: string;
+    executionId: string;
+    planHash: string;
+    chainId: string;
+    target: string;
+    transaction: DeliveryPlan['transactions'][number];
+    transactionHash: string;
+    state: ObservationState;
+    blockNumber: string;
+    blockHash: string;
+    safe?: {
+        envelopeId: string;
+        innerCallIndex: number;
+        transactionIndex: string;
+    };
+}
+/** Trusted producer must verify exact transaction/chain inclusion, execution outcome,
+ * canonicality and configured finality. A user JSON object or receipt hash is not this capability.
+ * Hosts must supply this port from controlled code, never agent-supplied implementations. */
+export interface TrustedObservationPort {
+    readObservation(observationId: string): Promise<TransactionObservation | undefined>;
+}
+export interface TrustedFinalizedProgressPort {
+    readFinalized(observationId: string): Promise<TransactionObservation | undefined>;
+}
+export declare function uint256(raw: unknown, label: string): string;
+export declare function hash32(raw: unknown, label: string): string;
+export declare function parseObservation(raw: unknown, plan: DeliveryPlan, index: number): TransactionObservation;

package/dist-runtime/delivery/observations.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uint256 = uint256;
+exports.hash32 = hash32;
+exports.parseObservation = parseObservation;
+/** Structural observation validation grants neither chain finality nor send authority. */
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const data_1 = require("./data");
+function uint256(raw, label) {
+    if (typeof raw !== 'string' || !/^(0|[1-9][0-9]*)$/.test(raw) || BigInt(raw) >= 2n ** 256n)
+        throw new Error(`Invalid canonical uint256 ${label}`);
+    return raw;
+}
+function hash32(raw, label) {
+    if (typeof raw !== 'string' || !/^0x[0-9a-f]{64}$/.test(raw))
+        throw new Error(`Invalid ${label}`);
+    return raw;
+}
+function parseObservation(raw, plan, index) {
+    const data = (0, data_1.strictData)(raw);
+    const v = (0, canonicalData_1.exactObject)(data, ['observationId', 'executionId', 'planHash', 'chainId', 'target', 'transaction', 'transactionHash', 'state', 'blockNumber', 'blockHash', ...(Object.hasOwn(data, 'safe') ? ['safe'] : [])], 'transaction observation');
+    if (v.safe !== undefined) {
+        const m = (0, canonicalData_1.exactObject)(v.safe, ['envelopeId', 'innerCallIndex', 'transactionIndex'], 'Safe observation mapping');
+        if (typeof m.envelopeId !== 'string' || !/^[0-9a-f]{64}$/.test(m.envelopeId) || !Number.isSafeInteger(m.innerCallIndex) || Number(m.innerCallIndex) < 0)
+            throw Error('Invalid Safe observation mapping');
+        uint256(m.transactionIndex, 'Safe transactionIndex');
+    }
+    (0, canonicalData_1.nonempty)(v.observationId, 'observationId');
+    hash32(v.transactionHash, 'transactionHash');
+    hash32(v.blockHash, 'blockHash');
+    uint256(v.blockNumber, 'blockNumber');
+    if (!['included-unfinalized', 'finalized-success', 'finalized-reverted'].includes(String(v.state)))
+        throw new Error('Invalid observation state');
+    if (v.executionId !== plan.executionId || v.planHash !== plan.planHash || v.chainId !== plan.chainId || v.target !== plan.target || !plan.transactions[index] || (0, canonicalData_1.canonicalJson)(v.transaction) !== (0, canonicalData_1.canonicalJson)(plan.transactions[index]))
+        throw new Error('Observation plan identity/order mismatch');
+    return (0, canonicalData_1.deepFreeze)(v);
+}
+//# sourceMappingURL=observations.js.map

package/dist-runtime/delivery/observations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observations.js","sourceRoot":"","sources":["../../runtime/delivery/observations.ts"],"names":[],"mappings":";;AA+BA,0BAIC;AACD,wBAIC;AACD,4CAkBC;AA3DD,0FAA0F;AAC1F,iEAAiG;AACjG,iCAAoC;AA6BpC,SAAgB,OAAO,CAAC,GAAY,EAAE,KAAa;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI;QACtF,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAgB,MAAM,CAAC,GAAY,EAAE,KAAa;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAgB,gBAAgB,CAAC,GAAY,EAAE,IAAkB,EAAE,KAAa;IAC5E,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,IAAI,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC7P,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAChH,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC;YACnJ,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IACD,IAAA,wBAAQ,EAAC,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,IAAA,6BAAa,EAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAA,6BAAa,EAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACrO,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,OAAO,IAAA,0BAAU,EAAC,CAAsC,CAAC,CAAC;AAC9D,CAAC"}

package/dist-runtime/delivery/parameter-defaults.d.ts

@@ -0,0 +1,10 @@
+type Observations = {
+    manual: Record<string, unknown>;
+    computed: Record<string, unknown>;
+};
+export declare function resolveParameterTargets(rawValues: unknown, rawProvenance: unknown, networks: readonly string[]): {
+    params: Record<string, unknown>;
+    observations: Record<string, Observations>;
+    definitions: Record<string, unknown>;
+};
+export {};

package/dist-runtime/delivery/parameter-defaults.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveParameterTargets = resolveParameterTargets;
+/** Expand task-owned defaults before schema/provenance validation. Never a production override port. */
+const data_1 = require("./data");
+const protocol_1 = require("./protocol");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const record = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+function observations(raw) {
+    const value = (0, canonicalData_1.exactObject)(raw, ['manual', 'computed'], 'target provenance');
+    return { manual: (0, protocol_1.object)(value.manual, 'manual observations'), computed: (0, protocol_1.object)(value.computed, 'computed observations') };
+}
+function leaves(value, path = '', result = new Map()) {
+    const entries = value !== null && typeof value === 'object' ? Object.entries(value) : [];
+    if (!entries.length)
+        result.set(path, value);
+    else
+        for (const [key, child] of entries)
+            leaves(child, `${path}/${(0, data_1.pointerPart)(key)}`, result);
+    return result;
+}
+function merge(base, override) {
+    return Object.fromEntries([...new Set([...Object.keys(base), ...Object.keys(override)])].map(key => [key,
+        !Object.hasOwn(override, key) ? base[key]
+            : Object.hasOwn(base, key) && record(base[key]) && record(override[key]) ? merge(base[key], override[key])
+                : override[key],
+    ]));
+}
+/** Only leaves actually inherited from defaults may inherit default observations. Arrays replace as a unit. */
+function inheritedLeaves(base, override, path = '', result = new Set()) {
+    if (!record(base) || !record(override))
+        return result;
+    for (const [key, value] of Object.entries(base)) {
+        const child = `${path}/${(0, data_1.pointerPart)(key)}`;
+        if (!Object.hasOwn(override, key))
+            for (const pointer of leaves(value, child).keys())
+                result.add(pointer);
+        else if (record(value) && record(override[key]))
+            inheritedLeaves(value, override[key], child, result);
+    }
+    // The empty root/container is itself a schema leaf.
+    if (!Object.keys(base).length && !Object.keys(override).length)
+        result.add(path);
+    return result;
+}
+function resolveParameterTargets(rawValues, rawProvenance, networks) {
+    const values = (0, protocol_1.object)(rawValues, 'parameters.yaml', ['defaults', 'params']);
+    const params = (0, protocol_1.object)((0, data_1.ownPath)(values, ['params'], 'target parameters'), 'target parameters');
+    const provenance = (0, protocol_1.object)(rawProvenance, 'parameters provenance', ['version', 'producers', 'defaults', 'targets']);
+    if (provenance.version !== 1)
+        throw new Error('Unsupported provenance version');
+    const definitions = (0, protocol_1.object)(provenance.producers, 'producers'), targets = (0, protocol_1.object)(provenance.targets, 'provenance targets');
+    for (const name of [...Object.keys(params), ...Object.keys(targets)])
+        if (!networks.includes(name))
+            throw new Error('Unknown parameter target');
+    const observed = Object.fromEntries(Object.entries(targets).map(([name, value]) => [name, observations(value)]));
+    if (!Object.hasOwn(values, 'defaults')) {
+        if (Object.hasOwn(provenance, 'defaults'))
+            throw new Error('Default provenance requires parameter defaults');
+        return { params, observations: observed, definitions };
+    }
+    const defaults = (0, protocol_1.object)(values.defaults, 'parameter defaults');
+    const shared = Object.hasOwn(provenance, 'defaults') ? observations(provenance.defaults) : { manual: {}, computed: {} };
+    const defaultLeaves = leaves(defaults);
+    for (const kind of ['manual', 'computed'])
+        for (const [path, raw] of Object.entries(shared[kind])) {
+            if (!defaultLeaves.has(path))
+                throw new Error(`Unused default parameter observation at ${path}`);
+            const observation = (0, canonicalData_1.exactObject)(raw, kind === 'manual' ? ['source', 'value'] : ['producer', 'version', 'inputs', 'output'], 'default observation');
+            if ((0, canonicalData_1.canonicalJson)(observation[kind === 'manual' ? 'value' : 'output']) !== (0, canonicalData_1.canonicalJson)(defaultLeaves.get(path)))
+                throw new Error(`Default observation mismatch at ${path}`);
+        }
+    const effective = Object.fromEntries(networks.map(name => {
+        const override = Object.hasOwn(params, name) ? (0, protocol_1.object)(params[name], 'network parameter overrides') : {};
+        return [name, merge(defaults, override)];
+    }));
+    const effectiveObservations = Object.fromEntries(networks.map(name => {
+        const override = Object.hasOwn(params, name) ? params[name] : {};
+        const inherited = inheritedLeaves(defaults, override), local = Object.hasOwn(observed, name) ? observed[name] : { manual: {}, computed: {} };
+        return [name, Object.fromEntries(['manual', 'computed'].map(kind => [kind, {
+                    ...Object.fromEntries(Object.entries(shared[kind]).filter(([path]) => inherited.has(path))), ...local[kind],
+                }]))];
+    }));
+    return { params: effective, observations: effectiveObservations, definitions };
+}
+//# sourceMappingURL=parameter-defaults.js.map

package/dist-runtime/delivery/parameter-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameter-defaults.js","sourceRoot":"","sources":["../../runtime/delivery/parameter-defaults.ts"],"names":[],"mappings":";;AAsCA,0DAoCC;AA1ED,wGAAwG;AACxG,iCAA8C;AAC9C,yCAAoC;AACpC,iEAA2E;AAG3E,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC5E,OAAO,EAAE,MAAM,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,CAAC;AAC5H,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,IAAI,GAAG,EAAmB;IAC5E,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,IAAA,kBAAW,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,KAAK,CAAC,IAA6B,EAAE,QAAiC;IAC7E,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG;QACtG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;KACpB,CAAC,CAAC,CAAC;AACN,CAAC;AACD,+GAA+G;AAC/G,SAAS,eAAe,CAAC,IAAa,EAAE,QAAiB,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,IAAI,GAAG,EAAU;IAC9F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,IAAA,kBAAW,EAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC;YAAE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aACrG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACxG,CAAC;IACD,oDAAoD;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAAkB,EAAE,aAAsB,EAAE,QAA2B;IAG7G,MAAM,MAAM,GAAG,IAAA,iBAAM,EAAC,SAAS,EAAE,iBAAiB,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAA,iBAAM,EAAC,IAAA,cAAO,EAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,IAAA,iBAAM,EAAC,aAAa,EAAE,uBAAuB,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACnH,IAAI,UAAU,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,IAAA,iBAAM,EAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,IAAA,iBAAM,EAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC1H,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC7G,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,iBAAM,EAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAU;QAAE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;YACjG,MAAM,WAAW,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACnJ,IAAI,IAAA,6BAAa,EAAC,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/G,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAM,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC7I,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAE,CAAC,QAAQ,EAAE,UAAU,CAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;oBACpF,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;iBAC5G,CAAC,CAAC,CAAiB,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AACjF,CAAC"}

package/dist-runtime/delivery/parameters.d.ts

@@ -0,0 +1,55 @@
+export { strictData } from "./data";
+type Schema = Record<string, any>;
+type Policy = {
+    kind: "copy";
+    target: string;
+    path: string;
+} | {
+    kind: "manual";
+} | {
+    kind: "computed";
+    producer: string;
+    version: string;
+};
+export interface ManualObservation {
+    source: string;
+    value: unknown;
+}
+export interface ComputedObservation {
+    producer: string;
+    version: string;
+    inputs: unknown;
+    output: unknown;
+}
+export interface ParameterInputs {
+    schema: Schema;
+    target: string;
+    values: unknown;
+    sources?: Record<string, unknown>;
+    manual?: Record<string, ManualObservation>;
+    computed?: Record<string, ComputedObservation>;
+}
+export interface TrustedParameterProducer {
+    version: string;
+    produce(inputs: unknown): unknown;
+}
+export interface LeafProvenance {
+    target: string;
+    path: string;
+    policy: Policy["kind"];
+    valueIdentity: string;
+    observation: Record<string, unknown>;
+}
+export interface ResolvedDeliveryParameters extends Required<ParameterInputs> {
+    version: 1;
+    provenance: LeafProvenance[];
+    identity: string;
+}
+/** Development only. Producers are a versioned trusted seam, not independent production authority. */
+export declare function resolveDeliveryParameters(raw: ParameterInputs & {
+    producers?: Record<string, TrustedParameterProducer>;
+}): ResolvedDeliveryParameters;
+/** Read-only migration check, never a producer receipt or production authority. */
+export declare function validateHistoricalParameterExtension(previous: ResolvedDeliveryParameters, current: ParameterInputs): ResolvedDeliveryParameters;
+/** Consume a previously trusted identity; no fill-in, override, or producer invocation. */
+export declare function consumeDeliveryParameters(raw: ResolvedDeliveryParameters, expectedIdentity: string): unknown;