gate-evm-tools 1.0.28 → 1.2.0

package/dist-runtime/delivery/parameters.js

@@ -0,0 +1,279 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.strictData = void 0;
+exports.resolveDeliveryParameters = resolveDeliveryParameters;
+exports.validateHistoricalParameterExtension = validateHistoricalParameterExtension;
+exports.consumeDeliveryParameters = consumeDeliveryParameters;
+const ajv_1 = __importDefault(require("ajv"));
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const data_1 = require("./data");
+var data_2 = require("./data");
+Object.defineProperty(exports, "strictData", { enumerable: true, get: function () { return data_2.strictData; } });
+const DIALECT = "http://json-schema.org/draft-07/schema#";
+const KEYWORDS = new Set([
+    "$schema",
+    "title",
+    "description",
+    "type",
+    "properties",
+    "required",
+    "additionalProperties",
+    "items",
+    "minItems",
+    "maxItems",
+    "uniqueItems",
+    "minProperties",
+    "maxProperties",
+    "enum",
+    "const",
+    "minimum",
+    "maximum",
+    "exclusiveMinimum",
+    "exclusiveMaximum",
+    "multipleOf",
+    "minLength",
+    "maxLength",
+    "pattern",
+    "x-policy",
+]);
+const ajv = new ajv_1.default({
+    strict: true,
+    allErrors: true,
+    coerceTypes: false,
+    useDefaults: false,
+    removeAdditional: false,
+    ownProperties: true,
+});
+ajv.addKeyword({ keyword: "x-policy", valid: true });
+function checkedSchema(raw) {
+    const schema = (0, data_1.strictData)(raw);
+    if (schema.$schema !== DIALECT)
+        throw new Error("Delivery schema requires explicit draft-07 dialect");
+    const visit = (s, root = false) => {
+        if (!s || typeof s !== "object" || Array.isArray(s))
+            throw new Error("Delivery schema nodes must be objects");
+        for (const key of Object.keys(s))
+            if (!KEYWORDS.has(key))
+                throw new Error(`Unsupported delivery schema keyword ${key}`);
+        if (!root && s.$schema !== undefined)
+            throw new Error("Nested schema dialect unsupported");
+        if (![
+            "object",
+            "array",
+            "string",
+            "boolean",
+            "integer",
+            "number",
+            "null",
+        ].includes(s.type))
+            throw new Error("Each delivery schema node requires one explicit type");
+        if (s.type === "object") {
+            if (s.additionalProperties !== false ||
+                !s.properties ||
+                typeof s.properties !== "object" ||
+                Array.isArray(s.properties))
+                throw new Error("Object schemas require properties and additionalProperties:false");
+            if (Object.keys(s.properties).some((key) => ["__proto__", "constructor", "prototype"].includes(key)))
+                throw new Error("Delivery schemas explicitly disallow prototype-like property names");
+            Object.values(s.properties).forEach((child) => visit(child));
+        }
+        else if (s.properties !== undefined ||
+            s.additionalProperties !== undefined)
+            throw new Error("Object keywords require object type");
+        if (s.type === "array")
+            visit(s.items);
+        else if (s.items !== undefined)
+            throw new Error("items requires array type");
+        if (s["x-policy"] !== undefined) {
+            const p = s["x-policy"];
+            if (!p || typeof p !== "object" || Array.isArray(p))
+                throw new Error("Invalid parameter policy");
+            const keys = p.kind === "copy"
+                ? ["kind", "target", "path"]
+                : p.kind === "computed"
+                    ? ["kind", "producer", "version"]
+                    : p.kind === "manual"
+                        ? ["kind"]
+                        : [];
+            if (!keys.length ||
+                Object.keys(p).sort().join() !== keys.sort().join() ||
+                keys.some((k) => typeof p[k] !== "string" || (k !== "path" && !p[k])))
+                throw new Error("Invalid parameter policy fields");
+            if (p.kind === "copy")
+                (0, data_1.pointerParts)(p.path);
+        }
+    };
+    visit(schema, true);
+    // Ajv's code generator rejects some prototype-like property names; refuse these schema
+    // names explicitly rather than silently omitting validation. strictData itself preserves them.
+    ajv.compile(schema);
+    return schema;
+}
+function attest(input, producers) {
+    const schema = checkedSchema(input.schema), validate = ajv.compile(schema);
+    if (!validate(input.values))
+        throw new Error(`Delivery parameter schema: ${ajv.errorsText(validate.errors)}`);
+    if (!input.target || typeof input.target !== "string")
+        throw new Error("Parameter target required");
+    const provenance = [];
+    const usedManual = new Set(), usedComputed = new Set();
+    const visit = (s, value, path, inherited) => {
+        const selected = s["x-policy"]
+            ? { policy: s["x-policy"], root: path }
+            : inherited;
+        const entries = value && typeof value === "object"
+            ? Object.entries(value).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            : [];
+        if (entries.length) {
+            for (const [key, v] of entries)
+                visit(s.type === "array" ? s.items : s.properties[key], v, `${path}/${(0, data_1.pointerPart)(key)}`, selected);
+            return;
+        }
+        if (!selected)
+            throw new Error(`Missing parameter policy at ${path}`);
+        const p = selected.policy;
+        let observation;
+        if (p.kind === "copy") {
+            const sourcePath = p.path + path.slice(selected.root.length);
+            const source = (0, data_1.ownPath)(input.sources, [p.target, ...(0, data_1.pointerParts)(sourcePath)], `Copy source ${p.target}${sourcePath}`);
+            if ((0, canonicalData_1.canonicalJson)(source) !== (0, canonicalData_1.canonicalJson)(value))
+                throw new Error(`Copy value mismatch at ${path}`);
+            observation = {
+                target: p.target,
+                path: sourcePath,
+                contentIdentity: (0, canonicalData_1.semanticHash)(source),
+                sourceIdentity: (0, canonicalData_1.semanticHash)((0, data_1.ownPath)(input.sources, [p.target])),
+            };
+        }
+        else if (p.kind === "manual") {
+            const o = (0, data_1.ownPath)(input.manual, [path]);
+            usedManual.add(path);
+            if (!o ||
+                Object.keys(o).sort().join() !== "source,value" ||
+                typeof o.source !== "string" ||
+                !o.source ||
+                (0, canonicalData_1.canonicalJson)(o.value) !== (0, canonicalData_1.canonicalJson)(value))
+                throw new Error(`Manual observation mismatch at ${path}`);
+            observation = {
+                source: o.source,
+                contentIdentity: (0, canonicalData_1.semanticHash)(o.value),
+            };
+        }
+        else {
+            const o = (0, data_1.ownPath)(input.computed, [path]);
+            usedComputed.add(path);
+            if (!o ||
+                Object.keys(o).sort().join() !== "inputs,output,producer,version" ||
+                o.producer !== p.producer ||
+                o.version !== p.version ||
+                (0, canonicalData_1.canonicalJson)(o.output) !== (0, canonicalData_1.canonicalJson)(value))
+                throw new Error(`Computed observation mismatch at ${path}`);
+            if (producers) {
+                const producer = (0, data_1.ownPath)(producers, [
+                    p.producer,
+                ]);
+                if (producer.version !== p.version ||
+                    (0, canonicalData_1.canonicalJson)((0, data_1.strictData)(producer.produce((0, canonicalData_1.deepFreeze)((0, data_1.strictData)(o.inputs))))) !== (0, canonicalData_1.canonicalJson)(value))
+                    throw new Error(`Computed producer mismatch at ${path}`);
+            }
+            observation = {
+                producer: p.producer,
+                version: p.version,
+                inputIdentity: (0, canonicalData_1.semanticHash)(o.inputs),
+                outputIdentity: (0, canonicalData_1.semanticHash)(o.output),
+            };
+        }
+        provenance.push({
+            target: input.target,
+            path,
+            policy: p.kind,
+            valueIdentity: (0, canonicalData_1.semanticHash)(value),
+            observation,
+        });
+    };
+    visit(schema, input.values, "");
+    for (const [observations, used] of [
+        [input.manual, usedManual],
+        [input.computed, usedComputed],
+    ])
+        if (Object.keys(observations).some((k) => !used.has(k)))
+            throw new Error("Unused parameter observation");
+    return provenance.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+}
+/** Development only. Producers are a versioned trusted seam, not independent production authority. */
+function resolveDeliveryParameters(raw) {
+    const allowed = [
+        "schema",
+        "target",
+        "values",
+        "sources",
+        "manual",
+        "computed",
+        "producers",
+    ];
+    if (!raw ||
+        typeof raw !== "object" ||
+        Array.isArray(raw) ||
+        ![Object.prototype, null].includes(Object.getPrototypeOf(raw)) ||
+        Object.getOwnPropertySymbols(raw).length)
+        throw new Error("Parameter inputs require own data fields");
+    const detached = {};
+    for (const key of Object.getOwnPropertyNames(raw)) {
+        if (!allowed.includes(key))
+            throw new Error("Unsupported parameter input field (overrides are not accepted)");
+        detached[key] = (0, data_1.ownPath)(raw, [key], "parameter input");
+    }
+    raw = detached;
+    const input = (0, data_1.strictData)({
+        schema: raw.schema,
+        target: raw.target,
+        values: raw.values,
+        sources: raw.sources ?? {},
+        manual: raw.manual ?? {},
+        computed: raw.computed ?? {},
+    });
+    const provenance = attest(input, raw.producers ?? {});
+    const body = { version: 1, ...input, provenance };
+    return (0, canonicalData_1.deepFreeze)({ ...body, identity: (0, canonicalData_1.semanticHash)(body) });
+}
+/** Read-only migration check, never a producer receipt or production authority. */
+function validateHistoricalParameterExtension(previous, current) {
+    consumeDeliveryParameters(previous, previous.identity);
+    const input = (0, data_1.strictData)({ schema: current.schema, target: current.target, values: current.values,
+        sources: current.sources ?? {}, manual: current.manual ?? {}, computed: current.computed ?? {} });
+    if (input.target !== previous.target)
+        throw Error('Historical parameter target changed');
+    // A historical consumer cannot rerun or grant authority to a newly introduced producer.
+    for (const [pointer, observation] of Object.entries(input.computed)) {
+        if ((0, canonicalData_1.canonicalJson)(observation) !== (0, canonicalData_1.canonicalJson)(previous.computed[pointer] ?? null))
+            throw Error('Historical computed parameter changed; new development acceptance required');
+    }
+    const provenance = attest(input);
+    for (const leaf of previous.provenance) {
+        const next = provenance.find(candidate => candidate.path === leaf.path);
+        if (!next || (0, canonicalData_1.canonicalJson)(next) !== (0, canonicalData_1.canonicalJson)(leaf))
+            throw Error(`Historical parameter value/provenance changed: ${leaf.path}`);
+    }
+    const body = { version: 1, ...input, provenance };
+    return (0, canonicalData_1.deepFreeze)({ ...body, identity: (0, canonicalData_1.semanticHash)(body) });
+}
+/** Consume a previously trusted identity; no fill-in, override, or producer invocation. */
+function consumeDeliveryParameters(raw, expectedIdentity) {
+    if (arguments.length !== 2)
+        throw new Error("Production parameter consumption accepts no override arguments");
+    const result = (0, data_1.strictData)(raw);
+    if (Object.keys(result).sort().join() !==
+        "computed,identity,manual,provenance,schema,sources,target,values,version" ||
+        result.version !== 1)
+        throw new Error("Invalid resolved parameter envelope");
+    const { identity, ...body } = result;
+    if (identity !== expectedIdentity || identity !== (0, canonicalData_1.semanticHash)(body))
+        throw new Error("Resolved parameter identity mismatch");
+    if ((0, canonicalData_1.canonicalJson)(attest(result)) !== (0, canonicalData_1.canonicalJson)(result.provenance))
+        throw new Error("Resolved parameter provenance mismatch");
+    return (0, canonicalData_1.deepFreeze)(result.values);
+}
+//# sourceMappingURL=parameters.js.map

package/dist-runtime/delivery/parameters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameters.js","sourceRoot":"","sources":["../../runtime/delivery/parameters.ts"],"names":[],"mappings":";;;;;;AA2RA,8DA0CC;AAED,oFAgBC;AAED,8DAqBC;AA9WD,8CAAsB;AACtB,iEAIuC;AACvC,iCAAwE;AACxE,+BAAoC;AAA3B,kGAAA,UAAU,OAAA;AAyCnB,MAAM,OAAO,GAAG,yCAAyC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,SAAS;IACT,OAAO;IACP,aAAa;IACb,MAAM;IACN,YAAY;IACZ,UAAU;IACV,sBAAsB;IACtB,OAAO;IACP,UAAU;IACV,UAAU;IACV,aAAa;IACb,eAAe;IACf,eAAe;IACf,MAAM;IACN,OAAO;IACP,SAAS;IACT,SAAS;IACT,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;IACZ,WAAW;IACX,WAAW;IACX,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AACH,MAAM,GAAG,GAAG,IAAI,aAAG,CAAC;IAClB,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AACH,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,IAAI,GAAG,KAAK,EAAQ,EAAE;QAC9C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,IACE,CAAC;YACC,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,SAAS;YACT,SAAS;YACT,QAAQ;YACR,MAAM;SACP,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAElB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,IACE,CAAC,CAAC,oBAAoB,KAAK,KAAK;gBAChC,CAAC,CAAC,CAAC,UAAU;gBACb,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAChC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;gBAE3B,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;YACJ,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACrC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxD;gBAED,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;YACJ,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC;QACzE,CAAC;aAAM,IACL,CAAC,CAAC,UAAU,KAAK,SAAS;YAC1B,CAAC,CAAC,oBAAoB,KAAK,SAAS;YAEpC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aAClC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,MAAM,IAAI,GACR,CAAC,CAAC,IAAI,KAAK,MAAM;gBACf,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;oBACrB,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;oBACjC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ;wBACnB,CAAC,CAAC,CAAC,MAAM,CAAC;wBACV,CAAC,CAAC,EAAE,CAAC;YACb,IACE,CAAC,IAAI,CAAC,MAAM;gBACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;gBACnD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,IAAA,mBAAY,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpB,uFAAuF;IACvF,+FAA+F;IAC/F,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,MAAM,CACb,KAAgC,EAChC,SAAoD;IAEpD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EACxC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAChE,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QACnD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,EAClC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAAG,CACZ,CAAS,EACT,KAAc,EACd,IAAY,EACZ,SAA4C,EAC5C,EAAE;QACF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,CAAW,EAAE,IAAI,EAAE,IAAI,EAAE;YACjD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GACX,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAChC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,OAAO;gBAC5B,KAAK,CACH,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAChD,CAAC,EACD,GAAG,IAAI,IAAI,IAAA,kBAAW,EAAC,GAAG,CAAC,EAAE,EAC7B,QAAQ,CACT,CAAC;YACJ,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,WAAoC,CAAC;QACzC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAA,cAAO,EACpB,KAAK,CAAC,OAAO,EACb,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAA,mBAAY,EAAC,UAAU,CAAC,CAAC,EACvC,eAAe,CAAC,CAAC,MAAM,GAAG,UAAU,EAAE,CACvC,CAAC;YACF,IAAI,IAAA,6BAAa,EAAC,MAAM,CAAC,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;YACpD,WAAW,GAAG;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,UAAU;gBAChB,eAAe,EAAE,IAAA,4BAAY,EAAC,MAAM,CAAC;gBACrC,cAAc,EAAE,IAAA,4BAAY,EAAC,IAAA,cAAO,EAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACjE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAsB,CAAC;YAC7D,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrB,IACE,CAAC,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,cAAc;gBAC/C,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,CAAC,MAAM;gBACT,IAAA,6BAAa,EAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC;gBAE/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;YAC5D,WAAW,GAAG;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,eAAe,EAAE,IAAA,4BAAY,EAAC,CAAC,CAAC,KAAK,CAAC;aACvC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAwB,CAAC;YACjE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,IACE,CAAC,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,gCAAgC;gBACjE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;gBACzB,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;gBACvB,IAAA,6BAAa,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC;gBAEhD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,SAAS,EAAE;oBAClC,CAAC,CAAC,QAAQ;iBACX,CAA6B,CAAC;gBAC/B,IACE,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;oBAC9B,IAAA,6BAAa,EACX,IAAA,iBAAU,EAAC,QAAQ,CAAC,OAAO,CAAC,IAAA,0BAAU,EAAC,IAAA,iBAAU,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC/D,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC;oBAE1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,WAAW,GAAG;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,aAAa,EAAE,IAAA,4BAAY,EAAC,CAAC,CAAC,MAAM,CAAC;gBACrC,cAAc,EAAE,IAAA,4BAAY,EAAC,CAAC,CAAC,MAAM,CAAC;aACvC,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI;YACJ,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,aAAa,EAAE,IAAA,4BAAY,EAAC,KAAK,CAAC;YAClC,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI;QACjC,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1B,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;KACtB;QACR,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;AACJ,CAAC;AACD,sGAAsG;AACtG,SAAgB,yBAAyB,CACvC,GAEC;IAED,MAAM,OAAO,GAAG;QACd,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,UAAU;QACV,WAAW;KACZ,CAAC;IACF,IACE,CAAC,GAAG;QACJ,OAAO,GAAG,KAAK,QAAQ;QACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,MAAM;QAExC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAA,cAAO,EAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,GAAG,GAAG,QAAiC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QAC1B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;KAC7B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC;IAC3D,OAAO,IAAA,0BAAU,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAA,4BAAY,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AACD,mFAAmF;AACnF,SAAgB,oCAAoC,CAAC,QAAoC,EAAE,OAAwB;IACjH,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,EAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;QAC9F,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzF,wFAAwF;IACxF,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,IAAI,IAAA,6BAAa,EAAC,WAAW,CAAC,KAAK,IAAA,6BAAa,EAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAClL,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,IAAI,IAAA,6BAAa,EAAC,IAAI,CAAC,KAAK,IAAA,6BAAa,EAAC,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,IAAI,GAAG,EAAC,OAAO,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,UAAU,EAAC,CAAC;IACzD,OAAO,IAAA,0BAAU,EAAC,EAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAA,4BAAY,EAAC,IAAI,CAAC,EAAC,CAAC,CAAC;AAC7D,CAAC;AACD,2FAA2F;AAC3F,SAAgB,yBAAyB,CACvC,GAA+B,EAC/B,gBAAwB;IAExB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,MAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC;IAC/B,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;QAC/B,0EAA0E;QAC5E,MAAM,CAAC,OAAO,KAAK,CAAC;QAEpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,KAAK,IAAA,4BAAY,EAAC,IAAI,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,IAAA,6BAAa,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,MAAM,CAAC,UAAU,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,IAAA,0BAAU,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/dist-runtime/delivery/pending.d.ts

@@ -0,0 +1,70 @@
+/** Typed evidence consumer. Durable finalized observation production/query is supplied by the launcher (Task6a). */
+import type { ReleaseExecutionTransaction } from '../workflow/lib/transactionPlanner';
+import { type PendingUupsBindingInput, type PendingUupsResolution, type PendingUupsResolverPort } from '../workflow/lib/pendingUupsBinding';
+import { type DeliveryPlan } from './plan';
+import { type DerivedBindings } from './bindings';
+import { type PreparationEntry } from './journal';
+export interface PendingEvidenceIdentity {
+    executionId: string;
+    target: string;
+    inputsHash: string;
+    artifactHash: string;
+    planHash: string;
+    selectedStepIds: string[];
+    infrastructure: {
+        scheme: 'evm';
+        factory: string;
+        multicall: string;
+        placeholderImplementation: string;
+    };
+    derivedValues: DerivedBindings;
+}
+export interface ObservationReference {
+    observationId: string;
+    transactionId: string;
+    transactionHash: string;
+}
+export interface PendingUupsEvidence {
+    identity: PendingEvidenceIdentity;
+    candidate: {
+        deploymentId: string;
+        executionId: string;
+        target: string;
+        instanceId: string;
+        contractInfoKey: string;
+        address: string;
+    };
+    plan: DeliveryPlan;
+    preparations: PreparationEntry[];
+    observations: ObservationReference[];
+}
+export interface FinalizedTransactionObservation {
+    observationId: string;
+    executionId: string;
+    target: string;
+    planHash: string;
+    transaction: ReleaseExecutionTransaction;
+    transactionHash: string;
+    receipt: {
+        transactionHash: string;
+        status: 1;
+        blockNumber: string;
+        blockHash: string;
+    };
+}
+export interface FinalizedObservationPort {
+    /** Trusted query capability must establish canonical inclusion and configured finality before returning.
+     * This consumer cannot establish finality from caller JSON or a `finalized: true` flag. */
+    readFinalized(observationId: string): Promise<FinalizedTransactionObservation | undefined>;
+}
+export declare function validatePendingUupsEvidence(options: {
+    input: PendingUupsBindingInput;
+    identity: PendingEvidenceIdentity;
+    evidence: unknown;
+    finalized: FinalizedObservationPort;
+}): Promise<PendingUupsResolution>;
+export declare function pendingUupsResolver(input: {
+    identity: PendingEvidenceIdentity;
+    resolveEvidence(query: PendingUupsBindingInput): Promise<unknown | undefined>;
+    finalized: FinalizedObservationPort;
+}): PendingUupsResolverPort;

package/dist-runtime/delivery/pending.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePendingUupsEvidence = validatePendingUupsEvidence;
+exports.pendingUupsResolver = pendingUupsResolver;
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const pendingUupsBinding_1 = require("../workflow/lib/pendingUupsBinding");
+const plan_1 = require("./plan");
+const bindings_1 = require("./bindings");
+const journal_1 = require("./journal");
+const policy_1 = require("./policy");
+function hash32(raw, label) {
+    if (typeof raw !== 'string' || !/^0x[\da-f]{64}$/.test(raw))
+        throw new Error(`Invalid ${label}`);
+    return raw;
+}
+function parseIdentity(raw) {
+    const v = (0, canonicalData_1.exactObject)(raw, ['executionId', 'target', 'inputsHash', 'artifactHash', 'planHash', 'selectedStepIds', 'infrastructure', 'derivedValues'], 'pending evidence identity');
+    (0, canonicalData_1.nonempty)(v.executionId, 'executionId');
+    (0, policy_1.validateNetworkAlias)(v.target, 'target', false);
+    (0, canonicalData_1.digest)(v.inputsHash, 'inputsHash');
+    (0, canonicalData_1.digest)(v.artifactHash, 'artifactHash');
+    (0, canonicalData_1.digest)(v.planHash, 'planHash');
+    if (!Array.isArray(v.selectedStepIds) || !v.selectedStepIds.length || v.selectedStepIds.some(id => typeof id !== 'string' || !id) || new Set(v.selectedStepIds).size !== v.selectedStepIds.length)
+        throw new Error('Invalid selectedStepIds');
+    const infra = (0, canonicalData_1.exactObject)(v.infrastructure, ['scheme', 'factory', 'multicall', 'placeholderImplementation'], 'pending infrastructure');
+    if (infra.scheme !== 'evm')
+        throw new Error('Pending delivery evidence requires EVM');
+    for (const key of ['factory', 'multicall', 'placeholderImplementation'])
+        if (typeof infra[key] !== 'string' || !/^0x[\da-f]{40}$/.test(infra[key]))
+            throw new Error('Invalid pending infrastructure address');
+    const derived = (0, bindings_1.parseDerivedBindings)(v.derivedValues);
+    if (derived.executionId !== v.executionId)
+        throw new Error('Pending derived execution identity mismatch');
+    return (0, canonicalData_1.deepFreeze)(v);
+}
+async function validatePendingUupsEvidence(options) {
+    if (!options.finalized || typeof options.finalized.readFinalized !== 'function')
+        throw new Error('Pending reuse requires a trusted finalized observation resolver');
+    const identity = parseIdentity(options.identity), input = options.input;
+    const v = (0, canonicalData_1.exactObject)(options.evidence, ['identity', 'candidate', 'plan', 'preparations', 'observations'], 'pending UUPS evidence');
+    if ((0, canonicalData_1.canonicalJson)(parseIdentity(v.identity)) !== (0, canonicalData_1.canonicalJson)(identity))
+        throw new Error('Pending evidence identity mismatch');
+    const plan = (0, plan_1.parseDeliveryPlan)(v.plan);
+    if (plan.executionId !== identity.executionId || plan.target !== identity.target || plan.inputsHash !== identity.inputsHash || plan.planHash !== identity.planHash || (0, canonicalData_1.canonicalJson)(plan.derivedBindings) !== (0, canonicalData_1.canonicalJson)(identity.derivedValues))
+        throw new Error('Pending plan identity mismatch');
+    if (input.network !== identity.target || !identity.selectedStepIds.includes(input.stepId) || input.scheme !== identity.infrastructure.scheme || !(0, pendingUupsBinding_1.sameAddress)(input.factory, identity.infrastructure.factory) || !(0, pendingUupsBinding_1.sameAddress)(input.multicall, identity.infrastructure.multicall) || !(0, pendingUupsBinding_1.sameAddress)(input.placeholderImplementationAddress, identity.infrastructure.placeholderImplementation))
+        throw new Error('Pending selection/infrastructure identity mismatch');
+    const candidate = (0, canonicalData_1.exactObject)(v.candidate, ['deploymentId', 'executionId', 'target', 'instanceId', 'contractInfoKey', 'address'], 'pending candidate');
+    if (candidate.deploymentId !== input.taskId || candidate.deploymentId !== plan.deploymentId || candidate.executionId !== identity.executionId || candidate.target !== input.network || candidate.instanceId !== input.instanceId || candidate.contractInfoKey !== input.contractInfoKey)
+        throw new Error('Pending candidate identity mismatch');
+    const preparations = (0, journal_1.parsePreparationJournal)(v.preparations, plan.transactions, plan.derivedBindings, { target: plan.target, chainId: plan.chainId, expectedStepIds: plan.deploymentBindings.map(b => b.stepId) });
+    for (const entry of preparations) {
+        const binding = plan.deploymentBindings.find(b => b.stepId === entry.stepId);
+        if (binding.preparationHash !== entry.preparationHash || (0, canonicalData_1.canonicalJson)(binding.transactionIds) !== (0, canonicalData_1.canonicalJson)(entry.mappings.map(m => m.transactionId)) || (0, canonicalData_1.canonicalJson)(binding.derivedKeys) !== (0, canonicalData_1.canonicalJson)(entry.derivedKeys))
+            throw new Error('Pending plan preparation binding mismatch');
+    }
+    const matching = preparations.filter(p => p.stepId === input.stepId);
+    if (matching.length !== 1)
+        throw new Error('Pending evidence requires exactly one matching preparation');
+    const entry = matching[0], { request, plan: gatePlan } = entry.prepared;
+    (0, pendingUupsBinding_1.assertPendingUupsPreparation)(input, entry.change, request, gatePlan);
+    const proxy = (0, pendingUupsBinding_1.planDeployment)(gatePlan, 'proxy'), implementation = (0, pendingUupsBinding_1.planDeployment)(gatePlan, 'implementation');
+    if (!(0, pendingUupsBinding_1.sameAddress)(candidate.address, proxy.address))
+        throw new Error('Pending candidate address mismatch');
+    if (!Array.isArray(v.observations) || v.observations.length !== plan.transactions.length || !v.observations.length)
+        throw new Error('Pending receipt completeness mismatch');
+    const seen = new Set(), observationIds = [];
+    for (const [index, raw] of v.observations.entries()) {
+        const ref = (0, canonicalData_1.exactObject)(raw, ['observationId', 'transactionId', 'transactionHash'], 'observation reference');
+        const observationId = (0, canonicalData_1.nonempty)(ref.observationId, 'observationId'), tx = plan.transactions[index];
+        if (seen.has(observationId) || ref.transactionId !== tx.transactionId)
+            throw new Error('Duplicate or unordered pending receipt mapping');
+        seen.add(observationId);
+        observationIds.push(observationId);
+        hash32(ref.transactionHash, 'reference transaction hash');
+        const observed = await options.finalized.readFinalized(observationId);
+        if (!observed)
+            throw new Error('Finalized observation is unavailable');
+        const o = (0, canonicalData_1.exactObject)(observed, ['observationId', 'executionId', 'target', 'planHash', 'transaction', 'transactionHash', 'receipt'], 'finalized observation');
+        const receipt = (0, canonicalData_1.exactObject)(o.receipt, ['transactionHash', 'status', 'blockNumber', 'blockHash'], 'finalized receipt');
+        if (o.observationId !== observationId || o.executionId !== identity.executionId || o.target !== identity.target || o.planHash !== identity.planHash || o.transactionHash !== ref.transactionHash || (0, canonicalData_1.canonicalJson)(o.transaction) !== (0, canonicalData_1.canonicalJson)(tx) || receipt.transactionHash !== o.transactionHash || receipt.status !== 1)
+            throw new Error('Finalized receipt/transaction/plan identity mismatch');
+        hash32(o.transactionHash, 'observed transaction hash');
+        hash32(receipt.blockHash, 'receipt block hash');
+        if (typeof receipt.blockNumber !== 'string' || !/^(0|[1-9][0-9]*)$/.test(receipt.blockNumber))
+            throw new Error('Invalid finalized block number');
+    }
+    await (0, pendingUupsBinding_1.assertPendingUupsCurrentState)(input, proxy.address, implementation.address);
+    return (0, canonicalData_1.deepFreeze)({ implementationAddress: implementation.address, implementationSalt: implementation.salt, proxyAddress: proxy.address, artifactDigest: gatePlan.artifact.digest,
+        binding: { executionId: identity.executionId, target: identity.target, planHash: identity.planHash, artifactDigest: gatePlan.artifact.digest, observationIds } });
+}
+function pendingUupsResolver(input) {
+    const identity = parseIdentity((0, canonicalData_1.canonicalData)(input.identity));
+    return { resolve: async (query) => {
+            const evidence = await input.resolveEvidence(query);
+            return evidence === undefined ? undefined : validatePendingUupsEvidence({ input: query, identity, evidence, finalized: input.finalized });
+        } };
+}
+//# sourceMappingURL=pending.js.map

package/dist-runtime/delivery/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../../runtime/delivery/pending.ts"],"names":[],"mappings":";;AA6CA,kEAyCC;AACD,kDAUC;AA/FD,iEAAwH;AACxH,2EAAsO;AACtO,iCAA8D;AAC9D,yCAAwE;AACxE,uCAA2E;AAC3E,qCAAgD;AAuBhD,SAAS,MAAM,CAAC,GAAY,EAAE,KAAa;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAAC,OAAO,GAAG,CAAC;AAC/G,CAAC;AACD,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACnL,IAAA,wBAAQ,EAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAAC,IAAA,6BAAoB,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxF,IAAA,sBAAM,EAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAAC,IAAA,sBAAM,EAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAAC,IAAA,sBAAM,EAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC9O,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACvI,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,2BAA2B,CAAC;QAAE,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxN,MAAM,OAAO,GAAG,IAAA,+BAAoB,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1G,OAAO,IAAA,0BAAU,EAAC,CAAuC,CAAC,CAAC;AAC7D,CAAC;AACM,KAAK,UAAU,2BAA2B,CAAC,OAEjD;IACC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,aAAa,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACpK,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACxE,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACpI,IAAI,IAAA,6BAAa,EAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAA,6BAAa,EAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,IAAA,wBAAiB,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,IAAA,6BAAa,EAAC,IAAI,CAAC,eAAe,CAAC,KAAK,IAAA,6BAAa,EAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvS,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,IAAA,gCAAW,EAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,gCAAW,EAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,IAAA,gCAAW,EAAC,KAAK,CAAC,gCAAgC,EAAE,QAAQ,CAAC,cAAc,CAAC,yBAAyB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACnc,MAAM,SAAS,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACvJ,IAAI,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAChV,MAAM,YAAY,GAAG,IAAA,iCAAuB,EAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnN,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAE,CAAC;QAC9E,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,IAAI,IAAA,6BAAa,EAAC,OAAO,CAAC,cAAc,CAAC,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,IAAA,6BAAa,EAAC,OAAO,CAAC,WAAW,CAAC,KAAK,IAAA,6BAAa,EAAC,KAAK,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtS,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;IACxE,IAAA,iDAA4B,EAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,IAAA,mCAAc,EAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,IAAA,mCAAc,EAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC7G,IAAI,CAAC,IAAA,gCAAW,EAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7K,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,EAAE,cAAc,GAAa,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC7G,MAAM,aAAa,GAAG,IAAA,wBAAQ,EAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAClG,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,EAAE,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACzI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;QACvH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,IAAA,2BAAW,EAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC9J,MAAM,OAAO,GAAG,IAAA,2BAAW,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACvH,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,IAAI,IAAA,6BAAa,EAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAA,6BAAa,EAAC,EAAE,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACzY,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;QAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACxG,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,IAAA,kDAA6B,EAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,IAAA,0BAAU,EAAC,EAAE,qBAAqB,EAAE,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;QAC/K,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;AACtK,CAAC;AACD,SAAgB,mBAAmB,CAAC,KAInC;IACC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAA,6BAAa,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5I,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist-runtime/delivery/plan.d.ts

@@ -0,0 +1,50 @@
+/** Pure internal canonical plan. This does not establish release readiness or verify project files. */
+import { type ReleaseExecutionTransaction } from "../workflow/lib/transactionPlanner";
+import { type OperationBinding, type TransactionBinding } from "./identities";
+import { type CustomInputClosure } from "./closure-format";
+import { type CustomEvidence } from "./custom-format";
+import { type DerivedBindings } from "./bindings";
+export interface DeliveryPlanHeader {
+    version: 1;
+    schema: "gate-delivery-plan";
+    deploymentId: string;
+    environment: "dev" | "prod";
+    target: string;
+    chainId: string;
+    executionId: string;
+    operator: string;
+    sourceDefinitionHash: string;
+    inputsHash: string;
+    runtimeIdentity: {
+        version: string;
+        digest: string;
+    };
+}
+export interface DeploymentBinding {
+    stepId: string;
+    preparationHash: string;
+    transactionIds: string[];
+    derivedKeys: string[];
+}
+export interface VerificationBinding {
+    stepId: string;
+    assertionIds: string[];
+    verificationHash: string;
+}
+export interface DeliveryPlanBody extends DeliveryPlanHeader {
+    /** Total execution order: each entry follows every preceding entry, including external routes. */
+    transactions: ReleaseExecutionTransaction[];
+    deploymentBindings: DeploymentBinding[];
+    verificationBindings: VerificationBinding[];
+    derivedBindings: DerivedBindings;
+    operationBindings: OperationBinding[];
+    customBindings: CustomEvidence[];
+    customInputClosure: CustomInputClosure | null;
+    transactionBindings: TransactionBinding[];
+}
+export interface DeliveryPlan extends DeliveryPlanBody {
+    planHash: string;
+}
+export declare function parseDeliveryPlanHeader(raw: unknown): DeliveryPlanHeader;
+export declare function sealDeliveryPlan(raw: unknown): DeliveryPlan;
+export declare function parseDeliveryPlan(raw: unknown, expectedIdentity?: DeliveryPlanHeader): DeliveryPlan;