gate-evm-tools 1.0.28 → 1.2.0

package/dist-runtime/delivery/plan.js

@@ -0,0 +1,209 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDeliveryPlanHeader = parseDeliveryPlanHeader;
+exports.sealDeliveryPlan = sealDeliveryPlan;
+exports.parseDeliveryPlan = parseDeliveryPlan;
+/** Pure internal canonical plan. This does not establish release readiness or verify project files. */
+const transactionPlanner_1 = require("../workflow/lib/transactionPlanner");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const identities_1 = require("./identities");
+const closure_format_1 = require("./closure-format");
+const custom_format_1 = require("./custom-format");
+const policy_1 = require("./policy");
+const bindings_1 = require("./bindings");
+const headerKeys = [
+    "version",
+    "schema",
+    "deploymentId",
+    "environment",
+    "target",
+    "chainId",
+    "executionId",
+    "operator",
+    "sourceDefinitionHash",
+    "inputsHash",
+    "runtimeIdentity",
+];
+const bodyKeys = [
+    ...headerKeys,
+    "transactions",
+    "deploymentBindings",
+    "verificationBindings",
+    "derivedBindings",
+    "operationBindings",
+    "customBindings",
+    "customInputClosure",
+    "transactionBindings",
+];
+function parseDeliveryPlanHeader(raw) {
+    const value = (0, canonicalData_1.exactObject)(raw, headerKeys, "delivery plan header");
+    if (value.version !== 1 || value.schema !== "gate-delivery-plan")
+        throw new Error("Unsupported delivery plan schema/version");
+    if (value.environment !== "dev" && value.environment !== "prod")
+        throw new Error("delivery environment must be dev or prod");
+    (0, policy_1.validateNetworkAlias)(value.target, "target", false);
+    if (typeof value.chainId !== "string" ||
+        !/^[1-9][0-9]*$/.test(value.chainId) ||
+        BigInt(value.chainId) >= 2n ** 256n)
+        throw new Error("chainId must be a positive uint256 decimal string");
+    if (typeof value.operator !== "string" ||
+        !/^0x[\da-fA-F]{40}$/.test(value.operator) ||
+        /^0x0{40}$/.test(value.operator))
+        throw new Error("Invalid operator");
+    const runtime = (0, canonicalData_1.exactObject)(value.runtimeIdentity, ["version", "digest"], "runtimeIdentity");
+    return (0, canonicalData_1.deepFreeze)({
+        version: 1,
+        schema: "gate-delivery-plan",
+        deploymentId: (0, canonicalData_1.nonempty)(value.deploymentId, "deploymentId"),
+        environment: value.environment,
+        target: value.target,
+        chainId: value.chainId,
+        executionId: (0, canonicalData_1.nonempty)(value.executionId, "executionId"),
+        operator: value.operator.toLowerCase(),
+        sourceDefinitionHash: (0, canonicalData_1.digest)(value.sourceDefinitionHash, "sourceDefinitionHash"),
+        inputsHash: (0, canonicalData_1.digest)(value.inputsHash, "inputsHash"),
+        runtimeIdentity: {
+            version: (0, canonicalData_1.nonempty)(runtime.version, "runtime version"),
+            digest: (0, canonicalData_1.digest)(runtime.digest, "runtime"),
+        },
+    });
+}
+function strings(raw, label) {
+    if (!Array.isArray(raw))
+        throw new Error(`${label} must be an array`);
+    const list = raw.map((v) => (0, canonicalData_1.nonempty)(v, label));
+    if (new Set(list).size !== list.length)
+        throw new Error(`${label} contains duplicates`);
+    return list;
+}
+function normalizeBody(raw) {
+    const value = (0, canonicalData_1.exactObject)(raw, bodyKeys, "delivery plan");
+    const header = parseDeliveryPlanHeader(Object.fromEntries(headerKeys.map((k) => [k, value[k]])));
+    const transactions = (0, transactionPlanner_1.normalizeTransactions)(value.transactions, header.operator);
+    if (transactions.some((tx) => tx.scheme !== undefined || tx.factoryDeps !== undefined))
+        throw new Error("Delivery plans support explicit EVM transactions only");
+    if (transactions.some((tx) => BigInt(tx.value) >= 2n ** 256n))
+        throw new Error("transaction value exceeds uint256");
+    const operationBindings = (0, identities_1.parseOperationBindings)(value.operationBindings);
+    if (!Array.isArray(value.customBindings))
+        throw new Error("custom bindings must be an array");
+    const customBindings = value.customBindings.map(custom_format_1.parseCustomEvidence);
+    const customInputClosure = value.customInputClosure === null
+        ? null
+        : (0, closure_format_1.parseCustomInputClosure)(value.customInputClosure);
+    if (!!customBindings.length !== !!customInputClosure)
+        throw new Error("Missing or unrelated custom input closure");
+    if (customInputClosure) {
+        for (const binding of customBindings) {
+            for (const key of ["roots", "edges", "packages"]) {
+                const union = new Set(customInputClosure[key].map((item) => (0, canonicalData_1.canonicalJson)(item)));
+                if (binding.closure[key].some((item) => !union.has((0, canonicalData_1.canonicalJson)(item))))
+                    throw new Error("Custom closure union mismatch");
+            }
+            for (const file of binding.closure.files) {
+                if (!customInputClosure.files.some((candidate) => candidate.path === file.path &&
+                    candidate.digest === file.digest &&
+                    (file.emittedDigest === null ||
+                        candidate.emittedDigest === file.emittedDigest)))
+                    throw new Error("Custom closure file union mismatch");
+            }
+            if ((0, canonicalData_1.canonicalJson)(binding.closure.compiler) !==
+                (0, canonicalData_1.canonicalJson)(customInputClosure.compiler) ||
+                (0, canonicalData_1.canonicalJson)(binding.closure.hostAdapter) !==
+                    (0, canonicalData_1.canonicalJson)(customInputClosure.hostAdapter) ||
+                (0, canonicalData_1.canonicalJson)(binding.closure.resolver) !==
+                    (0, canonicalData_1.canonicalJson)(customInputClosure.resolver))
+                throw new Error("Custom closure compiler mismatch");
+        }
+    }
+    if (new Set(customBindings.map((b) => b.sourceStepId)).size !==
+        customBindings.length)
+        throw new Error("duplicate custom binding");
+    for (const custom of customBindings) {
+        const operations = operationBindings.filter((b) => b.sourceStepId === custom.sourceStepId);
+        if ((0, canonicalData_1.canonicalJson)(operations.map((b) => [b.operationId, b.kind])) !==
+            (0, canonicalData_1.canonicalJson)(custom.operations.map((o) => [o.id, o.kind])))
+            throw new Error("custom operation order/identity mismatch");
+    }
+    if (operationBindings.some((b) => b.operationId !== null &&
+        !customBindings.some((c) => c.sourceStepId === b.sourceStepId)))
+        throw new Error("Missing custom evidence");
+    const transactionBindings = (0, identities_1.bindDeliveryTransactions)(transactions, operationBindings);
+    if ((0, canonicalData_1.canonicalJson)(value.transactionBindings) !==
+        (0, canonicalData_1.canonicalJson)(transactionBindings))
+        throw new Error("Delivery transaction reverse mapping mismatch");
+    const derivedBindings = (0, bindings_1.parseDerivedBindings)(value.derivedBindings);
+    if (derivedBindings.executionId !== header.executionId)
+        throw new Error("derived bindings execution identity mismatch");
+    if (!Array.isArray(value.deploymentBindings) ||
+        !Array.isArray(value.verificationBindings))
+        throw new Error("plan bindings must be arrays");
+    const used = new Set();
+    const deploymentBindings = value.deploymentBindings.map((raw) => {
+        const b = (0, canonicalData_1.exactObject)(raw, ["stepId", "preparationHash", "transactionIds", "derivedKeys"], "deployment binding");
+        const stepId = (0, canonicalData_1.nonempty)(b.stepId, "stepId"), transactionIds = strings(b.transactionIds, "transactionIds"), derivedKeys = strings(b.derivedKeys, "derivedKeys");
+        for (const id of transactionIds) {
+            if (used.has(id) ||
+                !transactions.some((tx) => tx.transactionId === id &&
+                    (tx.stepId === stepId || tx.stepId === `${stepId}-implementation`)))
+                throw new Error("deployment binding transaction mismatch");
+            used.add(id);
+        }
+        if (derivedKeys.some((k) => !Object.hasOwn(derivedBindings.values, k)))
+            throw new Error("deployment binding derived key mismatch");
+        return {
+            stepId,
+            preparationHash: (0, canonicalData_1.digest)(b.preparationHash, "preparation"),
+            transactionIds,
+            derivedKeys,
+        };
+    });
+    if (new Set(deploymentBindings.map((b) => b.stepId)).size !==
+        deploymentBindings.length)
+        throw new Error("duplicate deployment binding");
+    const assertions = new Set();
+    const verificationBindings = value.verificationBindings.map((raw) => {
+        const b = (0, canonicalData_1.exactObject)(raw, ["stepId", "assertionIds", "verificationHash"], "verification binding");
+        const assertionIds = strings(b.assertionIds, "assertionIds");
+        for (const id of assertionIds) {
+            if (assertions.has(id))
+                throw new Error("duplicate assertionId");
+            assertions.add(id);
+        }
+        return {
+            stepId: (0, canonicalData_1.nonempty)(b.stepId, "stepId"),
+            assertionIds,
+            verificationHash: (0, canonicalData_1.digest)(b.verificationHash, "verification"),
+        };
+    });
+    if (new Set(verificationBindings.map((b) => b.stepId)).size !==
+        verificationBindings.length)
+        throw new Error("duplicate verification binding");
+    return {
+        ...header,
+        transactions,
+        deploymentBindings,
+        verificationBindings,
+        derivedBindings,
+        operationBindings,
+        customBindings,
+        customInputClosure,
+        transactionBindings,
+    };
+}
+function sealDeliveryPlan(raw) {
+    const body = normalizeBody(raw);
+    return (0, canonicalData_1.deepFreeze)({ ...body, planHash: (0, canonicalData_1.semanticHash)(body) });
+}
+function parseDeliveryPlan(raw, expectedIdentity) {
+    const value = (0, canonicalData_1.exactObject)(raw, [...bodyKeys, "planHash"], "delivery plan");
+    const { planHash, ...body } = value;
+    const plan = sealDeliveryPlan(body);
+    if ((0, canonicalData_1.digest)(planHash, "planHash") !== plan.planHash)
+        throw new Error("delivery plan hash mismatch");
+    if (expectedIdentity &&
+        (0, canonicalData_1.canonicalJson)(parseDeliveryPlanHeader(Object.fromEntries(headerKeys.map((k) => [k, plan[k]])))) !== (0, canonicalData_1.canonicalJson)(parseDeliveryPlanHeader(expectedIdentity)))
+        throw new Error("delivery plan identity mismatch");
+    return plan;
+}
+//# sourceMappingURL=plan.js.map

package/dist-runtime/delivery/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../runtime/delivery/plan.ts"],"names":[],"mappings":";;AAwFA,0DA2CC;AAoLD,4CAGC;AACD,8CAqBC;AAhVD,uGAAuG;AACvG,2EAG4C;AAC5C,iEAOuC;AACvC,6CAKsB;AACtB,qDAG0B;AAC1B,mDAA2E;AAC3E,qCAAgD;AAChD,yCAAwE;AAuCxE,MAAM,UAAU,GAAG;IACjB,SAAS;IACT,QAAQ;IACR,cAAc;IACd,aAAa;IACb,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;IACV,sBAAsB;IACtB,YAAY;IACZ,iBAAiB;CAClB,CAAC;AACF,MAAM,QAAQ,GAAG;IACf,GAAG,UAAU;IACb,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AACF,SAAgB,uBAAuB,CAAC,GAAY;IAClD,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM;QAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,IAAA,6BAAoB,EAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI;QAEnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAEhC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAA,2BAAW,EACzB,KAAK,CAAC,eAAe,EACrB,CAAC,SAAS,EAAE,QAAQ,CAAC,EACrB,iBAAiB,CAClB,CAAC;IACF,OAAO,IAAA,0BAAU,EAAC;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAgB;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,IAAA,wBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QACtC,oBAAoB,EAAE,IAAA,sBAAM,EAC1B,KAAK,CAAC,oBAAoB,EAC1B,sBAAsB,CACvB;QACD,UAAU,EAAE,IAAA,sBAAM,EAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;QAClD,eAAe,EAAE;YACf,OAAO,EAAE,IAAA,wBAAQ,EAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACrD,MAAM,EAAE,IAAA,sBAAM,EAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;SAC1C;KACF,CAAC,CAAC;AACL,CAAC;AACD,SAAS,OAAO,CAAC,GAAY,EAAE,KAAa;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,uBAAuB,CACpC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzD,CAAC;IACF,MAAM,YAAY,GAAG,IAAA,0CAAqB,EACxC,KAAK,CAAC,YAAY,EAClB,MAAM,CAAC,QAAQ,CAChB,CAAC;IACF,IACE,YAAY,CAAC,IAAI,CACf,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,CAChE;QAED,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,IAAA,mCAAsB,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,mCAAmB,CAAC,CAAC;IACrE,MAAM,kBAAkB,GACtB,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAC/B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAA,wCAAuB,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,kBAAkB;QAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,IAAI,kBAAkB,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAU,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC,CAC3D,CAAC;gBACF,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC,CAAC;oBAEpE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,IACE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAC5B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;oBAC5B,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAChC,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI;wBAC1B,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,CAAC,CACpD;oBAED,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC1D,CAAC;YACD,IACE,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACrC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,QAAQ,CAAC;gBAC5C,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;oBACxC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,WAAW,CAAC;gBAC/C,IAAA,6BAAa,EAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACrC,IAAA,6BAAa,EAAC,kBAAkB,CAAC,QAAQ,CAAC;gBAE5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,IACE,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACvD,cAAc,CAAC,MAAM;QAErB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAC9C,CAAC;QACF,IACE,IAAA,6BAAa,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAA,6BAAa,EAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAE3D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,CAAC;IACD,IACE,iBAAiB,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC,CACjE;QAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,IAAA,qCAAwB,EAClD,YAAY,EACZ,iBAAiB,CAClB,CAAC;IACF,IACE,IAAA,6BAAa,EAAC,KAAK,CAAC,mBAAmB,CAAC;QACxC,IAAA,6BAAa,EAAC,mBAAmB,CAAC;QAElC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,IAAA,+BAAoB,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,eAAe,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAE1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9D,MAAM,CAAC,GAAG,IAAA,2BAAW,EACnB,GAAG,EACH,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAC9D,oBAAoB,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EACzC,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAC5D,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACtD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,IACE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACZ,CAAC,YAAY,CAAC,IAAI,CAChB,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,aAAa,KAAK,EAAE;oBACvB,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,CACrE;gBAED,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,OAAO;YACL,MAAM;YACN,eAAe,EAAE,IAAA,sBAAM,EAAC,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC;YACzD,cAAc;YACd,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IACE,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACrD,kBAAkB,CAAC,MAAM;QAEzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAClE,MAAM,CAAC,GAAG,IAAA,2BAAW,EACnB,GAAG,EACH,CAAC,QAAQ,EAAE,cAAc,EAAE,kBAAkB,CAAC,EAC9C,sBAAsB,CACvB,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC7D,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACjE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAA,wBAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC;YACpC,YAAY;YACZ,gBAAgB,EAAE,IAAA,sBAAM,EAAC,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC;SAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IACE,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACvD,oBAAoB,CAAC,MAAM;QAE3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO;QACL,GAAG,MAAM;QACT,YAAY;QACZ,kBAAkB;QAClB,oBAAoB;QACpB,eAAe;QACf,iBAAiB;QACjB,cAAc;QACd,kBAAkB;QAClB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AACD,SAAgB,gBAAgB,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAA,0BAAU,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAA,4BAAY,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AACD,SAAgB,iBAAiB,CAC/B,GAAY,EACZ,gBAAqC;IAErC,MAAM,KAAK,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;IAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAA,sBAAM,EAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,IAAI,CAAC,QAAQ;QAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,IACE,gBAAgB;QAChB,IAAA,6BAAa,EACX,uBAAuB,CACrB,MAAM,CAAC,WAAW,CAChB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAuB,CAAC,CAAC,CAAC,CAC1D,CACF,CACF,KAAK,IAAA,6BAAa,EAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAE9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist-runtime/delivery/planning.d.ts

@@ -0,0 +1,84 @@
+import { type CalldataTransactionReview } from './calldata-review';
+import type { ReferenceObservation } from "./references";
+import { type CustomPlanningInputSession } from "./custom";
+import { type ForkAuditEvidence } from "./forkAudit";
+import type { WorkflowStep } from "../workflow/lib/parameters";
+import type { CompletedExecutionTransaction } from "../workflow/lib/transactionPlanner";
+import { type DeliveryStepContext } from "./engine";
+import { type DeliveryPlan, type DeliveryPlanHeader, type DeliveryPlanBody } from "./plan";
+import { type PreparationEntry } from "./journal";
+import type { VerificationObservation } from "../workflow/lib/evidencePorts";
+import type { PendingReuseBinding } from "../workflow/lib/pendingUupsBinding";
+import { type DeliveryCompilerCollector, type CompilerEvidence } from './compiler';
+export interface PlanningIdentityPort {
+    /** Launcher supplies validated source/inputs/runtime identity; parser does not inspect project files. */
+    read(): Promise<DeliveryPlanHeader>;
+    /** Launcher-owned read-only source connection. It must read the requested pinned block. */
+    readSourceBlock(blockNumber: number): Promise<{
+        chainId: string;
+        blockNumber: number;
+        blockHash: string;
+    }>;
+}
+export interface DeliveryRuntimeEvidence {
+    /** Validated during this collection only; never hashed or compared as canonical replay content. */
+    pendingUupsReuse: {
+        stepId: string;
+        binding: PendingReuseBinding;
+    }[];
+    forkAudit: ForkAuditEvidence;
+    references: {
+        sourceStepId: string;
+        observations: readonly ReferenceObservation[];
+    }[];
+}
+export interface DeliveryCollection {
+    plan: DeliveryPlan;
+    calldata: CalldataTransactionReview[];
+    preparations: PreparationEntry[];
+    verification: VerificationObservation[];
+    runtimeEvidence: DeliveryRuntimeEvidence;
+}
+/** Strict compiler-owned contribution path. Header identities are still launcher-owned until aggregate c.2. */
+export declare function collectCompilerQualifiedDeliveryPlan(input: Parameters<typeof collectDeliveryPlan>[0] & {
+    compiler: DeliveryCompilerCollector;
+}): Promise<{
+    collection: DeliveryCollection;
+    compilerEvidence: CompilerEvidence;
+}>;
+export interface DeliveryPlanningOptions {
+    context: DeliveryStepContext;
+    header: DeliveryPlanHeader;
+    identities: PlanningIdentityPort;
+    steps: readonly WorkflowStep[];
+    derivationSeed: string;
+    expected?: Pick<DeliveryCollection, "plan" | "preparations" | "verification"> & Partial<Pick<DeliveryCollection, 'calldata'>>;
+    completedTransactions?: CompletedExecutionTransaction[];
+    customSession?: CustomPlanningInputSession;
+}
+export interface StagedDeliveryCollection {
+    readonly payload: Omit<DeliveryPlanBody, 'inputsHash'>;
+    readonly invariantHash: string;
+    readonly snapshot: {
+        payload: Omit<DeliveryPlanBody, 'inputsHash'>;
+        calldata: CalldataTransactionReview[];
+        preparations: PreparationEntry[];
+        verification: VerificationObservation[];
+        runtimeEvidence: Omit<DeliveryRuntimeEvidence, 'forkAudit'> & {
+            forkAudit: Omit<ForkAuditEvidence, 'planHash' | 'evidenceHash'>;
+        };
+    };
+    assertUnchanged(): Promise<void>;
+    bind(inputsHash: string): DeliveryCollection;
+    close(): void;
+}
+export declare function collectDeliveryPlan(input: DeliveryPlanningOptions): Promise<DeliveryCollection>;
+/** Internal worker seam. JSON cannot manufacture this live interval/closure authority. */
+export declare function stageDeliveryPlan(input: Omit<DeliveryPlanningOptions, 'header' | 'identities'> & {
+    header: Omit<DeliveryPlanHeader, 'inputsHash'>;
+    identities: Omit<PlanningIdentityPort, 'read'> & {
+        read(): Promise<Omit<DeliveryPlanHeader, 'inputsHash'>>;
+    };
+}): Promise<StagedDeliveryCollection>;
+/** Comparison only; this hash creates no collection/staging authority. */
+export declare function collectionInvariantHash(collection: DeliveryCollection): string;

package/dist-runtime/delivery/planning.js

@@ -0,0 +1,318 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectCompilerQualifiedDeliveryPlan = collectCompilerQualifiedDeliveryPlan;
+exports.collectDeliveryPlan = collectDeliveryPlan;
+exports.stageDeliveryPlan = stageDeliveryPlan;
+exports.collectionInvariantHash = collectionInvariantHash;
+const compiler_io_1 = require("./compiler-io");
+const calldata_review_1 = require("./calldata-review");
+const calldata_preparations_1 = require("./calldata-preparations");
+const aggregate_bootstrap_1 = require("./aggregate-bootstrap");
+const validation_1 = require("./validation");
+const data_1 = require("./data");
+/** Internal simulation collection only. No release_ready, business acceptance or broadcast API. */
+const identities_1 = require("./identities");
+const custom_1 = require("./custom");
+const forkAudit_1 = require("./forkAudit");
+const transactionPlanner_1 = require("../workflow/lib/transactionPlanner");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const runtime_1 = require("../workflow/lib/runtime");
+const engine_1 = require("./engine");
+const plan_1 = require("./plan");
+const bindings_1 = require("./bindings");
+const journal_1 = require("./journal");
+const verification_1 = require("./verification");
+const compiler_1 = require("./compiler");
+async function readCompilerEvidence(compiler) {
+    try {
+        return compiler.evidence();
+    }
+    finally {
+        // Full payload rereads can outlast an idle HTTP connection. Yield before
+        // the first collection RPC as well as before returning to its caller.
+        await (0, compiler_io_1.yieldCompilerIo)();
+    }
+}
+/** Strict compiler-owned contribution path. Header identities are still launcher-owned until aggregate c.2. */
+async function collectCompilerQualifiedDeliveryPlan(input) {
+    if ((0, compiler_1.ownedDeliveryCompiler)(input.context.runtime.hre) !== input.compiler)
+        throw new Error('Compiler-qualified collection requires its actual owned HRE collector');
+    await readCompilerEvidence(input.compiler);
+    const collection = await collectDeliveryPlan(input);
+    return { collection, compilerEvidence: await readCompilerEvidence(input.compiler) };
+}
+async function collectDeliveryPlan(input) {
+    return collectOwned(input, false);
+}
+/** Internal worker seam. JSON cannot manufacture this live interval/closure authority. */
+async function stageDeliveryPlan(input) {
+    (0, aggregate_bootstrap_1.assertOwnedTargetWorker)();
+    if (input.expected)
+        throw new Error('Staged replay requires independently closed current inputs; use known-final collection');
+    if (input.context.pendingUupsReuse)
+        throw new Error('Unknown aggregate inputs cannot authorize pending reuse');
+    const hash = '0'.repeat(64);
+    return collectOwned({ ...input, header: { ...input.header, inputsHash: hash }, identities: { ...input.identities, read: async () => ({ ...await input.identities.read(), inputsHash: hash }) } }, true);
+}
+async function collectOwned(input, staging) {
+    const sourceSteps = (0, data_1.strictData)(input.steps);
+    const header = (0, plan_1.parseDeliveryPlanHeader)(input.header), context = input.context;
+    if (context.mode !== "simulate")
+        throw new Error("Delivery planning requires simulate mode");
+    if (context.target.create2?.scheme && context.target.create2.scheme !== "evm")
+        throw new Error("Delivery planning requires EVM");
+    if (new Set(sourceSteps.map((s) => s.id)).size !== input.steps.length)
+        throw new Error("Duplicate selected step IDs");
+    (0, runtime_1.assertLocalForkRuntime)(context.runtime);
+    if (context.executionId !== header.executionId ||
+        context.taskId !== header.deploymentId ||
+        context.targetId !== header.target ||
+        context.signerAddress?.toLowerCase() !== header.operator ||
+        !context.signer ||
+        (await context.signer.getAddress()).toLowerCase() !== header.operator)
+        throw new Error("Delivery context/header/operator identity mismatch");
+    const snapshot = context.simulation.snapshot;
+    if (!snapshot ||
+        !Number.isSafeInteger(snapshot.blockNumber) ||
+        snapshot.blockNumber < 0 ||
+        !/^0x[\da-fA-F]{64}$/.test(snapshot.blockHash))
+        throw new Error("Delivery planning requires pinned fork identity");
+    const pinned = {
+        blockNumber: snapshot.blockNumber,
+        blockHash: snapshot.blockHash.toLowerCase(),
+    };
+    const verifyIdentities = async () => {
+        (0, runtime_1.assertLocalForkRuntime)(context.runtime);
+        const [identity, source, local, network] = await Promise.all([
+            input.identities.read(),
+            input.identities.readSourceBlock(pinned.blockNumber),
+            context.runtime.hre.network.provider.request({
+                method: "eth_getBlockByNumber",
+                params: [`0x${pinned.blockNumber.toString(16)}`, false],
+            }),
+            context.runtime.hre.ethers.provider.getNetwork(),
+        ]);
+        if ((0, canonicalData_1.canonicalJson)((0, plan_1.parseDeliveryPlanHeader)(identity)) !== (0, canonicalData_1.canonicalJson)(header))
+            throw new Error("Planning source/input/runtime identity drift");
+        if (network.chainId.toString() !== header.chainId ||
+            source.chainId !== header.chainId ||
+            source.blockNumber !== pinned.blockNumber ||
+            source.blockHash.toLowerCase() !== pinned.blockHash ||
+            !local ||
+            typeof local !== "object" ||
+            local.hash?.toLowerCase() !== pinned.blockHash)
+            throw new Error("Planning pinned fork/source identity mismatch");
+    };
+    await verifyIdentities();
+    await (0, validation_1.createDeliveryValidation)(context).preflight(sourceSteps.filter((step) => step.kind !== "custom"));
+    const audit = await forkAudit_1.LocalForkAudit.start({
+        provider: context.runtime.hre.network.provider,
+        chainId: header.chainId,
+        sourceSnapshot: pinned,
+    });
+    let retained = false;
+    try {
+        const expected = input.expected && (0, plan_1.parseDeliveryPlan)(input.expected.plan, header);
+        const journalIdentity = {
+            target: header.target,
+            chainId: header.chainId,
+            expectedStepIds: expected?.deploymentBindings.map((b) => b.stepId) ?? [],
+        };
+        const prior = expected &&
+            (0, journal_1.parsePreparationJournal)(input.expected.preparations, expected.transactions, expected.derivedBindings, journalIdentity);
+        const bindings = new bindings_1.DeliveryExecutionBindings({
+            executionId: header.executionId,
+            derivationSeed: input.derivationSeed,
+            expected: expected?.derivedBindings,
+        });
+        const planner = new transactionPlanner_1.TransactionPlanner({
+            operator: header.operator,
+            expectedTransactions: expected?.transactions,
+            replayCompletedPrefix: true,
+            completedTransactions: input.completedTransactions,
+        });
+        const preparations = new journal_1.PreparationJournal({
+            ...journalIdentity,
+            expectedStepIds: [],
+            expected: prior,
+            qualifiedSameFork: initial => (0, compiler_1.hasCompilerSameForkInitial)(context.runtime.hre, initial),
+        });
+        const verification = new verification_1.VerificationJournal([]);
+        const pendingObservations = [];
+        const callReviews = new Map();
+        const operationIds = new identities_1.DeliveryOperationIdentities();
+        const references = [];
+        const customBindings = [], executed = [];
+        const session = sourceSteps.some((step) => step.kind === "custom")
+            ? (0, custom_1.ownedCustomSession)(input.customSession ??
+                new custom_1.CustomPlanningSession({
+                    root: context.root,
+                    businessRoot: context.taskDir,
+                    params: context.targetParams,
+                    target: context.target,
+                    state: () => context.state.snapshot(),
+                }), context.root, context.taskDir)
+            : undefined;
+        const pendingUupsReuse = context.pendingUupsReuse;
+        const stepContext = {
+            ...context,
+            deploymentRecorder: undefined,
+            bindings,
+            preparations,
+            verification,
+            calldataReview: { record(tx, intent) {
+                    if (callReviews.has(tx.transactionId))
+                        throw Error('Duplicate calldata ABI intent');
+                    callReviews.set(tx.transactionId, (0, calldata_review_1.reviewTransaction)(tx, (0, calldata_review_1.createCalldataInvocation)({ ...intent, data: tx.data })));
+                } },
+            executionPlanner: planner,
+            transactionIdentity: operationIds,
+            transactionObserver: audit,
+            runtime: {
+                ...context.runtime,
+                localFork: {
+                    ...context.runtime.localFork,
+                    impersonate: (address) => audit.setup(address, () => context.runtime.localFork.impersonate(address)),
+                },
+            },
+            pendingUupsReuse: pendingUupsReuse && {
+                resolve: async (query) => {
+                    const resolution = await pendingUupsReuse.resolve(query);
+                    if (resolution?.binding)
+                        pendingObservations.push({
+                            stepId: query.stepId,
+                            binding: (0, canonicalData_1.canonicalData)(resolution.binding),
+                        });
+                    return resolution;
+                },
+            },
+        };
+        for (const sourceStep of sourceSteps) {
+            let operations;
+            if (sourceStep.kind === "custom") {
+                const evidence = (0, custom_1.parseCustomEvidence)(await session.evaluate(sourceStep));
+                if (evidence.sourceStepId !== sourceStep.id)
+                    throw new Error("Custom session source identity mismatch");
+                customBindings.push(evidence);
+                operations = evidence.operations;
+            }
+            else
+                operations = [sourceStep];
+            // Register and validate the complete emitted list before dispatching its first operation.
+            const steps = operations.map((operation) => ({
+                ...operation,
+                id: operationIds.register(sourceStep.id, sourceStep.kind === "custom" ? operation.id : null, operation.kind),
+            }));
+            preparations.declare(steps
+                .filter((s) => s.kind === "deploy" || s.kind === "upgrade")
+                .map((s) => s.id));
+            verification.declare(steps
+                .filter((s) => s.kind === "check")
+                .flatMap((s) => {
+                if (!Array.isArray(s.calls) || !s.calls.length)
+                    throw new Error(`Check ${s.id} requires calls`);
+                return s.calls.map((_, callIndex) => ({
+                    stepId: s.id,
+                    callIndex,
+                    assertionId: `${s.id}:${callIndex}`,
+                }));
+            }));
+            executed.push(...steps);
+            const result = await (0, engine_1.runDeliverySteps)(stepContext, steps);
+            references.push({
+                sourceStepId: sourceStep.id,
+                observations: result.references,
+            });
+        }
+        await verifyIdentities();
+        const transactions = planner.complete(), derivedBindings = bindings.seal();
+        const prepared = preparations.seal(transactions, derivedBindings), observations = verification.seal();
+        for (const review of await (0, calldata_preparations_1.preparationCalldataReviews)(prepared, transactions, context.runtime.hre.artifacts)) {
+            if (callReviews.has(review.transactionId))
+                throw Error('Duplicate calldata preparation intent');
+            callReviews.set(review.transactionId, review);
+        }
+        const calldata = (0, calldata_review_1.parseCalldataReviews)(transactions.map(tx => callReviews.get(tx.transactionId)), transactions);
+        if (input.expected?.calldata && (0, canonicalData_1.canonicalJson)((0, calldata_review_1.parseCalldataReviews)(input.expected.calldata, transactions)) !== (0, canonicalData_1.canonicalJson)(calldata))
+            throw Error('Replayed calldata ABI intent differs');
+        const { inputsHash: knownHash, ...base } = header;
+        const payload = (0, canonicalData_1.deepFreeze)({
+            ...base,
+            transactions,
+            derivedBindings,
+            operationBindings: operationIds.seal(),
+            transactionBindings: (0, identities_1.bindDeliveryTransactions)(transactions, operationIds.seal()),
+            customBindings,
+            customInputClosure: session?.seal() ?? null,
+            deploymentBindings: prepared.map((p) => ({
+                stepId: p.stepId,
+                preparationHash: p.preparationHash,
+                transactionIds: p.mappings.map((m) => m.transactionId),
+                derivedKeys: p.derivedKeys,
+            })),
+            verificationBindings: executed
+                .filter((s) => s.kind === "check")
+                .map((s) => {
+                const checks = observations.filter((o) => o.stepId === s.id);
+                return {
+                    stepId: s.id,
+                    assertionIds: checks.map((o) => o.assertionId),
+                    verificationHash: (0, canonicalData_1.semanticHash)(checks),
+                };
+            }),
+        });
+        if (input.expected && (0, canonicalData_1.canonicalJson)(input.expected.verification.map(verification_1.parseVerificationObservation)) !== (0, canonicalData_1.canonicalJson)(observations))
+            throw new Error("Replayed verification evidence differs");
+        session?.closeReads();
+        const interval = await audit.capture({ transactions, completedTransactions: input.completedTransactions ?? [] });
+        const stagedSnapshot = (0, canonicalData_1.deepFreeze)({ payload, calldata, preparations: prepared, verification: observations, runtimeEvidence: { pendingUupsReuse: pendingObservations, forkAudit: interval.snapshot, references } });
+        const invariantHash = (0, canonicalData_1.semanticHash)(stagedSnapshot);
+        let state = 'staged';
+        const open = () => { if (state !== 'staged')
+            throw new Error('Staged collection closed or already bound'); };
+        const bind = (inputsHash) => {
+            open();
+            state = 'failed';
+            const plan = (0, plan_1.sealDeliveryPlan)({ ...payload, inputsHash });
+            if (expected && plan.planHash !== expected.planHash)
+                throw new Error('Replayed delivery plan differs from expected plan');
+            const forkAudit = interval.bind(plan.planHash);
+            const result = (0, canonicalData_1.deepFreeze)((0, canonicalData_1.canonicalData)({ plan, calldata, preparations: prepared, verification: observations,
+                runtimeEvidence: { pendingUupsReuse: pendingObservations, forkAudit, references } }));
+            if (collectionInvariantHash(result) !== invariantHash)
+                throw new Error('Binding changed staged collection payload');
+            state = 'bound';
+            return result;
+        };
+        const check = async () => {
+            open();
+            try {
+                await verifyIdentities();
+                await interval.assertUnchanged();
+                if (session && (0, canonicalData_1.canonicalJson)(session.seal()) !== (0, canonicalData_1.canonicalJson)(payload.customInputClosure))
+                    throw new Error('Custom input closure drift at collection completion');
+            }
+            catch (error) {
+                state = 'failed';
+                throw error;
+            }
+        };
+        if (!staging) {
+            await check();
+            return bind(knownHash);
+        }
+        retained = true;
+        return Object.freeze({ payload, invariantHash, snapshot: stagedSnapshot, assertUnchanged: check, bind, close() { state = 'closed'; audit.close(); } });
+    }
+    finally {
+        if (!retained)
+            audit.close();
+    }
+}
+/** Comparison only; this hash creates no collection/staging authority. */
+function collectionInvariantHash(collection) {
+    const { inputsHash: _, planHash: __, ...payload } = collection.plan;
+    const { planHash: ___, evidenceHash: ____, ...forkAudit } = collection.runtimeEvidence.forkAudit;
+    return (0, canonicalData_1.semanticHash)({ payload, calldata: collection.calldata, preparations: collection.preparations, verification: collection.verification, runtimeEvidence: { ...collection.runtimeEvidence, forkAudit } });
+}
+//# sourceMappingURL=planning.js.map