gate-evm-tools 1.0.28 → 1.2.0

package/dist-runtime/delivery/setup.js

@@ -0,0 +1,230 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureDeliveryEnvironment = exports.loadDeliveryTarget = exports.readPublicProjectNetworkSnapshots = exports.readProjectNetworkSnapshots = void 0;
+exports.inspectDeliveryProject = inspectDeliveryProject;
+exports.setupDeliveryProject = setupDeliveryProject;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_module_1 = require("node:module");
+const node_child_process_1 = require("node:child_process");
+const yaml_1 = __importDefault(require("yaml"));
+const toolchain_1 = require("./toolchain");
+const protocol_1 = require("./protocol");
+const project_1 = require("./project");
+const config_1 = require("./config");
+var project_2 = require("./project");
+Object.defineProperty(exports, "readProjectNetworkSnapshots", { enumerable: true, get: function () { return project_2.readProjectNetworkSnapshots; } });
+Object.defineProperty(exports, "readPublicProjectNetworkSnapshots", { enumerable: true, get: function () { return project_2.readPublicProjectNetworkSnapshots; } });
+var config_2 = require("./config");
+Object.defineProperty(exports, "loadDeliveryTarget", { enumerable: true, get: function () { return config_2.loadDeliveryTarget; } });
+var manifest_1 = require("./manifest");
+Object.defineProperty(exports, "configureDeliveryEnvironment", { enumerable: true, get: function () { return manifest_1.configureDeliveryEnvironment; } });
+const TOOLCHAIN = { hardhat: '2.26.3', ethers: '6.15.0', '@nomicfoundation/hardhat-ethers': '3.1.0', typescript: '5.9.3', 'ts-node': '10.9.2' };
+// Resolve our identity from the executing package, including an explicitly installed tarball.
+const toolIdentity = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(__dirname, '../../package.json'), 'utf8'));
+if (toolIdentity.name !== 'gate-evm-tools' || typeof toolIdentity.version !== 'string')
+    throw new Error('Invalid GateTool package identity');
+const DEPENDENCIES = { 'gate-evm-tools': toolIdentity.version, '@openzeppelin/hardhat-upgrades': '3.9.1', '@openzeppelin/upgrades-core': '1.44.2', '@openzeppelin/contracts': '5.4.0' };
+function dependencyTreeProblem(root) {
+    const result = (0, node_child_process_1.spawnSync)(process.platform === 'win32' ? 'npm.cmd' : 'npm', ['ls', '--all', '--long', '--json', '--depth=Infinity', '--link=false', '--global=false', '--workspaces=false', '--include=dev', '--include=optional', '--include=peer'], { cwd: root, encoding: 'utf8', timeout: 30000, maxBuffer: 16 * 1024 * 1024 });
+    if (result.error || result.status !== 0)
+        return 'local dependency graph is incomplete or invalid; install project dependencies explicitly';
+    try {
+        const visit = (entry, top = false) => {
+            if (entry.path && !top) {
+                const actual = node_fs_1.default.realpathSync(entry.path);
+                if (!actual.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                    throw new Error('dependency resolves outside project node_modules');
+            }
+            for (const dependency of Object.values(entry.dependencies ?? {}))
+                visit(dependency);
+        };
+        visit(JSON.parse(result.stdout), true);
+        return undefined;
+    }
+    catch {
+        return 'dependency graph contains a missing or nonlocal package';
+    }
+}
+function businessUsesUpgradeable(root) {
+    const contracts = (0, project_1.projectSourcesDirectory)(root);
+    const visit = (dir) => {
+        if (!(0, project_1.stat)(dir))
+            return false;
+        for (const entry of node_fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+            if (entry.isSymbolicLink())
+                throw new Error('Business source symlinks cannot be inspected safely');
+            const file = node_path_1.default.join(dir, entry.name);
+            if (entry.isDirectory() ? visit(file) : entry.isFile() && entry.name.endsWith('.sol') && /["']@openzeppelin\/contracts-upgradeable\//.test(node_fs_1.default.readFileSync(file, 'utf8')))
+                return true;
+        }
+        return false;
+    };
+    return visit(contracts);
+}
+function preflight(input) {
+    const [major, minor] = process.versions.node.split('.').map(Number);
+    if (major < 22 || (major === 22 && minor < 13))
+        throw Error('Delivery requires Node >=22.13.0');
+    (0, protocol_1.object)(input, 'setup options', ['workspaceRoot', 'projectRoot', 'targets', 'toolPackage']);
+    if (!Array.isArray(input.targets) || !input.targets.length)
+        throw new Error('Selected delivery targets are required');
+    const targets = input.targets.map(config_1.validateDeliveryTarget);
+    if (new Set(targets.map(target => target.network)).size !== targets.length)
+        throw new Error('Duplicate selected target');
+    const root = (0, project_1.projectRoot)(input.workspaceRoot, input.projectRoot);
+    (0, project_1.deliveryProjectMarker)(root);
+    const before = new Map();
+    for (const file of ['.gate-template.json', 'package.json', 'hardhat.config.ts', 'config.yaml', 'contractInfo.json'])
+        before.set(file, (0, project_1.readFile)(root, file));
+    const pkg = (0, protocol_1.object)(JSON.parse(before.get('package.json') ?? 'null'), 'package.json');
+    const overrides = pkg.overrides === undefined ? {} : (0, protocol_1.object)(pkg.overrides, 'package overrides');
+    for (const [name, version] of Object.entries(toolchain_1.REVIEWED_DELIVERY_OVERRIDES)) {
+        if (overrides[name] !== undefined && overrides[name] !== version)
+            throw new Error(`Reviewed delivery dependency override conflict: ${name}`);
+    }
+    const declarations = {};
+    for (const section of ['dependencies', 'devDependencies']) {
+        const entries = pkg[section] === undefined ? {} : (0, protocol_1.object)(pkg[section], section);
+        for (const [name, value] of Object.entries(entries)) {
+            if (name in declarations && declarations[name] !== value)
+                throw new Error(`Dependency declaration conflict: ${name}`);
+            declarations[name] = value;
+        }
+    }
+    const required = { ...DEPENDENCIES };
+    if (input.toolPackage !== undefined) {
+        if (!node_path_1.default.isAbsolute(input.toolPackage) || !input.toolPackage.endsWith('.tgz') || !(0, project_1.stat)(input.toolPackage)?.isFile() || (0, project_1.stat)(input.toolPackage)?.isSymbolicLink())
+            throw new Error('toolPackage must be an explicit absolute local tarball path');
+        required['gate-evm-tools'] = `file:${input.toolPackage}`;
+    }
+    if (businessUsesUpgradeable(root))
+        required['@openzeppelin/contracts-upgradeable'] = '5.4.0';
+    for (const [name, version] of Object.entries({ ...TOOLCHAIN, ...required })) {
+        const declared = declarations[name];
+        // Preserve an existing explicit local tarball declaration when rerunning after installation.
+        const localTool = name === 'gate-evm-tools' && input.toolPackage === undefined && typeof declared === 'string' && /^file:.*\.tgz$/.test(declared);
+        if ((name in TOOLCHAIN && declared === undefined) || (declared !== undefined && declared !== version && !localTool))
+            throw new Error(`Dependency declaration conflict for ${name}: expected ${version}`);
+    }
+    const networks = (0, project_1.readPublicProjectNetworkSnapshots)(root, targets.map(target => target.network));
+    const source = before.get('hardhat.config.ts');
+    const withPlugin = (0, project_1.integratedConfig)(source); // Check integration conflicts even when dependencies are missing.
+    const doc = (0, config_1.configDocument)(root);
+    let changedYaml = before.get('config.yaml') === undefined;
+    const merge = (keys, expected) => {
+        const actual = doc.getIn(keys, true);
+        if (actual === undefined) {
+            doc.setIn(keys, expected);
+            changedYaml = true;
+            return;
+        }
+        if (expected && typeof expected === 'object' && !Array.isArray(expected)) {
+            if (!yaml_1.default.isMap(actual))
+                throw new Error(`Config conflict at ${keys.join('.')}`);
+            for (const [key, value] of Object.entries(expected))
+                merge([...keys, key], value);
+        }
+        else if (!yaml_1.default.isScalar(actual) || actual.value !== expected)
+            throw new Error(`Config conflict at ${keys.join('.')}`);
+    };
+    for (const { network, ...target } of targets) {
+        (0, project_1.confinedFile)(root, target.openzeppelin.manifestDir, 'directory');
+        merge([network], target);
+    }
+    // Validate the same effective facilities used by input qualification, while keeping inherited
+    // addresses in their profiles so later base edits propagate to non-overridden targets.
+    (0, config_1.parseDeliveryPublicTargets)(Buffer.from(doc.toString()), Buffer.from(source), targets);
+    if (before.get('contractInfo.json') !== undefined)
+        (0, protocol_1.object)(JSON.parse(before.get('contractInfo.json')), 'contractInfo.json');
+    const dependencies = [];
+    const projectRequire = (0, node_module_1.createRequire)(node_path_1.default.join(root, 'package.json'));
+    for (const [name, requested] of Object.entries({ ...TOOLCHAIN, ...required })) {
+        const metadata = (0, project_1.confinedFile)(root, `node_modules/${name}/package.json`);
+        if (!(0, project_1.stat)(metadata)) {
+            dependencies.push({ name, required: requested, reason: 'not installed locally' });
+            continue;
+        }
+        const installed = JSON.parse(node_fs_1.default.readFileSync(metadata, 'utf8'));
+        const expected = name === 'gate-evm-tools' ? DEPENDENCIES[name] : requested;
+        if (installed.name !== name || installed.version !== expected)
+            throw new Error(`Installed dependency conflict for ${name}: expected ${expected}`);
+        if (name !== 'gate-evm-tools') {
+            const entry = name === '@openzeppelin/contracts' ? `${name}/proxy/ERC1967/ERC1967Proxy.sol`
+                : name === '@openzeppelin/contracts-upgradeable' ? `${name}/package.json` : name;
+            try {
+                const resolved = node_fs_1.default.realpathSync(projectRequire.resolve(entry));
+                if (!(0, project_1.stat)(resolved)?.isFile() || !resolved.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                    throw new Error('nonlocal entry');
+            }
+            catch {
+                dependencies.push({ name, required: requested, reason: 'required entry point is missing or nonlocal' });
+            }
+        }
+        if (name === 'gate-evm-tools') {
+            try {
+                for (const entry of ['delivery-setup', 'delivery-protocol', 'delivery-hardhat', 'delivery-policy']) {
+                    const resolved = projectRequire.resolve(`gate-evm-tools/${entry}`);
+                    if (!resolved.startsWith(node_path_1.default.join(root, 'node_modules') + node_path_1.default.sep))
+                        throw new Error('nonlocal API');
+                }
+            }
+            catch {
+                dependencies.push({ name, required: requested, reason: 'installed package lacks delivery API exports; install a built delivery package' });
+            }
+        }
+    }
+    if (!dependencies.length) {
+        const reason = dependencyTreeProblem(root);
+        if (reason)
+            dependencies.push({ name: 'dependency-tree', required: 'complete local dependency graph', reason });
+    }
+    const writes = new Map();
+    const missing = Object.entries(required).filter(([name]) => declarations[name] === undefined);
+    const missingOverrides = Object.entries(toolchain_1.REVIEWED_DELIVERY_OVERRIDES).some(([name]) => overrides[name] === undefined);
+    if (missing.length || missingOverrides) {
+        const dev = { ...(pkg.devDependencies ?? {}) };
+        for (const [name, version] of missing)
+            dev[name] = version;
+        writes.set('package.json', JSON.stringify({ ...pkg, devDependencies: dev, overrides: { ...overrides, ...toolchain_1.REVIEWED_DELIVERY_OVERRIDES } }, null, 2) + '\n');
+    }
+    if (changedYaml)
+        writes.set('config.yaml', doc.toString());
+    if (before.get('contractInfo.json') === undefined)
+        writes.set('contractInfo.json', '{}\n');
+    if (!dependencies.length && source !== withPlugin)
+        writes.set('hardhat.config.ts', withPlugin);
+    return { before, writes, result: { status: dependencies.length ? 'dependencies_pending' : writes.size ? 'setup_pending' : 'ready', projectRoot: root, dependencies, changes: [...writes.keys()],
+            networks: networks.map(({ network, chainId, url }) => ({ network, chainId, rpcConfigured: Boolean(url) })) } };
+}
+/** Read-only, never imports the project's config/HRE or contacts an RPC. */
+function inspectDeliveryProject(options) { return preflight(options).result; }
+/** Stage declarations/config; caller explicitly installs dependencies then reruns to enable the plugin. */
+function setupDeliveryProject(options) {
+    const { result, writes, before } = preflight(options);
+    const root = (0, project_1.projectRoot)(options.workspaceRoot, options.projectRoot);
+    // Recheck every output before the first write, including concurrent human edits.
+    for (const [file, content] of before)
+        if ((0, project_1.readFile)(root, file) !== content)
+            throw new Error(`Concurrent setup conflict: ${file}`);
+    for (const [file, contents] of writes) {
+        const destination = (0, project_1.confinedFile)(root, file);
+        const temporary = (0, project_1.confinedFile)(root, `.gate-delivery-${node_crypto_1.default.randomUUID()}.tmp`);
+        try {
+            node_fs_1.default.writeFileSync(temporary, contents, { flag: 'wx' });
+            if ((0, project_1.readFile)(root, file) !== before.get(file))
+                throw new Error(`Concurrent setup conflict: ${file}`);
+            node_fs_1.default.renameSync(temporary, destination);
+        }
+        finally {
+            if ((0, project_1.stat)(temporary))
+                node_fs_1.default.unlinkSync(temporary);
+        }
+    }
+    return { ...result, status: result.dependencies.length ? 'dependencies_pending' : 'ready' };
+}
+//# sourceMappingURL=setup.js.map

package/dist-runtime/delivery/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../runtime/delivery/setup.ts"],"names":[],"mappings":";;;;;;AAsKA,wDAA+H;AAE/H,oDAeC;AAvLD,sDAAyB;AACzB,0DAA6B;AAC7B,8DAAiC;AACjC,6CAA4C;AAC5C,2DAA+C;AAC/C,gDAAwB;AACxB,2CAA0D;AAC1D,yCAAoC;AACpC,uCAA2K;AAC3K,qCAAmH;AACnH,qCAA2F;AAAlF,sHAAA,2BAA2B,OAAA;AAAE,4HAAA,iCAAiC,OAAA;AACvE,mCAA8C;AAArC,4GAAA,kBAAkB,OAAA;AAC3B,uCAA0D;AAAjD,wHAAA,4BAA4B,OAAA;AAGrC,MAAM,SAAS,GAA2B,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iCAAiC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACxK,8FAA8F;AAC9F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACxG,IAAI,YAAY,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ;IAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AAC7I,MAAM,YAAY,GAA2B,EAAE,gBAAgB,EAAE,YAAY,CAAC,OAAO,EAAE,gCAAgC,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC;AAehN,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EACvE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,EACxK,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0FAA0F,CAAC;IAC3I,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,KAAgE,EAAE,GAAG,GAAG,KAAK,EAAQ,EAAE;YACpG,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,mBAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC1I,CAAC;YACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;gBAAE,KAAK,CAAC,UAA0B,CAAC,CAAC;QACtG,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,yDAAyD,CAAC;IAAC,CAAC;AAC/E,CAAC;AACD,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,SAAS,GAAG,IAAA,iCAAuB,EAAC,IAAI,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAW,EAAE;QACrC,IAAI,CAAC,IAAA,cAAI,EAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,iBAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACnG,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,4CAA4C,CAAC,IAAI,CAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC;AACD,SAAS,SAAS,CAAC,KAA2B;IAC5C,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,GAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAAA,IAAG,KAAK,GAAC,EAAE,IAAE,CAAC,KAAK,KAAG,EAAE,IAAE,KAAK,GAAC,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrJ,IAAA,iBAAM,EAAC,KAAK,EAAE,eAAe,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,+BAAsB,CAAC,CAAC;IAC1D,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACzH,MAAM,IAAI,GAAG,IAAA,qBAAW,EAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACjE,IAAA,+BAAqB,EAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5J,MAAM,GAAG,GAAG,IAAA,iBAAM,EAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAM,EAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uCAA2B,CAAC,EAAE,CAAC;QAC1E,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAM,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;YACtH,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,mBAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,cAAI,EAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,IAAA,cAAI,EAAC,KAAK,CAAC,WAAW,CAAC,EAAE,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAClP,QAAQ,CAAC,gBAAgB,CAAC,GAAG,QAAQ,KAAK,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,qCAAqC,CAAC,GAAG,OAAO,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,6FAA6F;QAC7F,MAAM,SAAS,GAAG,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClJ,IAAI,CAAC,IAAI,IAAI,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,cAAc,OAAO,EAAE,CAAC,CAAC;IAC3M,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,2CAAiC,EAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC;IAChD,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC,CAAC,kEAAkE;IAC/G,MAAM,GAAG,GAAG,IAAA,uBAAc,EAAC,IAAI,CAAC,CAAC;IACjC,IAAI,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,QAAiB,EAAQ,EAAE;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAAC,WAAW,GAAG,IAAI,CAAC;YAAC,OAAO;QAAC,CAAC;QACpF,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,cAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,CAAC,cAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC,CAAC;IACF,KAAK,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QAC7C,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,YAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAClE,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,8FAA8F;IAC9F,uFAAuF;IACvF,IAAA,mCAA0B,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,SAAS;QAAE,IAAA,iBAAM,EAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC7H,MAAM,YAAY,GAAuC,EAAE,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAA,2BAAa,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,gBAAgB,IAAI,eAAe,CAAC,CAAC;QACzE,IAAI,CAAC,IAAA,cAAI,EAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACrH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,cAAc,QAAQ,EAAE,CAAC,CAAC;QAClJ,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,GAAG,IAAI,iCAAiC;gBACzF,CAAC,CAAC,IAAI,KAAK,qCAAqC,CAAC,CAAC,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YACnF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,iBAAE,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAA,cAAI,EAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,mBAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACvI,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBACnG,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;oBACnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,mBAAI,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,gFAAgF,EAAE,CAAC,CAAC;YAAC,CAAC;QACzJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iCAAiC,EAAE,MAAM,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAC9F,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,uCAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IACrH,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,eAA0C,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,GAAG,uCAA2B,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5J,CAAC;IACD,IAAI,WAAW;QAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC3F,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,MAAM,KAAK,UAAU;QAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7L,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AACnH,CAAC;AACD,4EAA4E;AAC5E,SAAgB,sBAAsB,CAAC,OAA6B,IAAwB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/H,2GAA2G;AAC3G,SAAgB,oBAAoB,CAAC,OAA6B;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAA,qBAAW,EAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,iFAAiF;IACjF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM;QAAE,IAAI,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IAClI,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,kBAAkB,qBAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,iBAAE,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YACrG,iBAAE,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAA,cAAI,EAAC,SAAS,CAAC;gBAAE,iBAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAC9F,CAAC"}

package/dist-runtime/delivery/source.d.ts

@@ -0,0 +1,42 @@
+import { type DeliveryRequest, type ChainIdProvider, type ProjectNetworkSnapshot } from './protocol';
+import { loadPlanCodec } from './codec';
+import type { Plan, PlanTask, DefinitionSelection, DefinitionSnapshot, DeepReadonly } from '../vendor/plan-codec/index.cjs';
+export type { DefinitionSelection, DefinitionSnapshot, DeepReadonly } from '../vendor/plan-codec/index.cjs';
+export interface DeliverySourceOptions {
+    workspaceRoot: string;
+    /** Workspace-relative path or '.'. */
+    projectRoot: string;
+    request: unknown;
+    /** Explicit upstream roots, independent of the invocation sourceRef task. */
+    sourceRoots: string[];
+}
+export interface DeliverySourceBinding {
+    request: DeliveryRequest;
+    workspaceRoot: string;
+    projectRoot: string;
+    observation: {
+        path: string;
+        sha256: string;
+    };
+    invocation: {
+        lane: string;
+        task: PlanTask;
+    };
+    sourceDefinition: DefinitionSnapshot;
+    sourceDefinitionBytes: string;
+    sourceDefinitionHash: string;
+    prodTaskGraph?: DefinitionSnapshot;
+    prodTaskGraphBytes?: string;
+    prodTaskGraphHash?: string;
+}
+export declare function parseCanonicalPlan(text: string): Plan;
+export declare function projectCanonicalDefinitions(text: string, selection: DefinitionSelection): ReturnType<ReturnType<typeof loadPlanCodec>['projectDefinitions']>;
+export declare function deploymentPurpose(task: Pick<PlanTask, 'step' | 'scope'>): import("../vendor/plan-codec/index.cjs").DeploymentPurpose | undefined;
+/** Read one confined handoff snapshot and bind the current invocation to it before any RPC work. */
+export declare function readDeliverySource(input: DeliverySourceOptions): DeepReadonly<DeliverySourceBinding>;
+/** Owned business selection derives upstream roots from the same actual invocation bytes. */
+export declare function readOwnedDeliverySource(input: Omit<DeliverySourceOptions, 'sourceRoots'>): DeepReadonly<DeliverySourceBinding>;
+/** Read/validate actual source before a provider can be loaded; still not host authorization. */
+export declare function validateDeliverySourceRpc(input: DeliverySourceOptions, snapshot: ProjectNetworkSnapshot, loadProvider: (snapshot: ProjectNetworkSnapshot) => Promise<ChainIdProvider>): Promise<DeepReadonly<DeliverySourceBinding & {
+    chainId: number;
+}>>;

package/dist-runtime/delivery/source.js

@@ -0,0 +1,139 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseCanonicalPlan = parseCanonicalPlan;
+exports.projectCanonicalDefinitions = projectCanonicalDefinitions;
+exports.deploymentPurpose = deploymentPurpose;
+exports.readDeliverySource = readDeliverySource;
+exports.readOwnedDeliverySource = readOwnedDeliverySource;
+exports.validateDeliverySourceRpc = validateDeliverySourceRpc;
+/** Actual-file source binding only. This API grants no host approval or execution authority. */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_crypto_1 = require("node:crypto");
+const project_files_1 = require("./project-files");
+const protocol_1 = require("./protocol");
+const codec_1 = require("./codec");
+const sha256 = (bytes) => (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex');
+function freeze(value) {
+    if (value && typeof value === 'object') {
+        Object.values(value).forEach(freeze);
+        Object.freeze(value);
+    }
+    return value;
+}
+function parseCanonicalPlan(text) { return (0, codec_1.loadPlanCodec)().parsePlan(text); }
+function projectCanonicalDefinitions(text, selection) {
+    return (0, codec_1.loadPlanCodec)().projectDefinitions(text, selection);
+}
+function deploymentPurpose(task) {
+    return (0, codec_1.loadPlanCodec)().deploymentPurpose(task);
+}
+function sameRelease(actual, expected) {
+    if (expected === undefined)
+        return actual === undefined;
+    if (!actual || typeof actual !== 'object' || Array.isArray(actual))
+        return false;
+    const ref = actual;
+    return Object.keys(ref).length === 3 && ref.path === expected.path && ref.releaseId === expected.releaseId && ref.inputsHash === expected.inputsHash;
+}
+function actualSource(workspace, relative) {
+    const file = (0, project_files_1.confinedFile)(workspace, relative);
+    const fd = node_fs_1.default.openSync(file, node_fs_1.default.constants.O_RDONLY | node_fs_1.default.constants.O_NOFOLLOW);
+    try {
+        const before = node_fs_1.default.fstatSync(fd);
+        if (!before.isFile() || before.nlink !== 1)
+            throw new Error('Unsafe handoff file type');
+        const bytes = node_fs_1.default.readFileSync(fd);
+        const after = node_fs_1.default.fstatSync(fd);
+        // Fail if the observed file was replaced or changed during reading.
+        (0, project_files_1.confinedFile)(workspace, relative);
+        const current = node_fs_1.default.lstatSync(file);
+        if (before.dev !== current.dev || before.ino !== current.ino || before.size !== after.size
+            || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs)
+            throw new Error('Handoff changed while reading');
+        return bytes;
+    }
+    finally {
+        node_fs_1.default.closeSync(fd);
+    }
+}
+/** Read one confined handoff snapshot and bind the current invocation to it before any RPC work. */
+function readDeliverySource(input) {
+    (0, protocol_1.object)(input, 'source options', ['workspaceRoot', 'projectRoot', 'request', 'sourceRoots']);
+    return readSource(input);
+}
+/** Owned business selection derives upstream roots from the same actual invocation bytes. */
+function readOwnedDeliverySource(input) {
+    (0, protocol_1.object)(input, 'owned source options', ['workspaceRoot', 'projectRoot', 'request']);
+    return readSource(input);
+}
+function readSource(input) {
+    const request = (0, protocol_1.parseDeliveryRequest)(input.request);
+    const workspace = (0, project_files_1.projectRoot)(input.workspaceRoot, '.');
+    const root = (0, project_files_1.projectRoot)(workspace, input.projectRoot);
+    (0, project_files_1.deliveryProjectMarker)(root);
+    const bytes = actualSource(workspace, request.sourceRef.path);
+    const text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    if (input.sourceRoots === undefined)
+        require('./input-files').assertUnambiguousHandoff(text);
+    const codec = (0, codec_1.loadPlanCodec)();
+    const plan = codec.parsePlan(text);
+    if (plan.taskId !== request.sourceRef.taskId)
+        throw new Error('sourceRef.taskId does not match actual handoff');
+    const entries = Object.entries(plan.tasks).flatMap(([lane, tasks]) => tasks.map(task => ({ lane, task })));
+    const invocation = entries.find(({ task }) => task.planKey === request.sourceRef.planKey);
+    if (!invocation || invocation.task.rev !== request.sourceRef.rev)
+        throw new Error('sourceRef planKey/rev does not match actual handoff');
+    if (plan.lanes[invocation.lane].state !== 'enabled' || invocation.task.status === 'cancelled')
+        throw new Error('Invocation task is disabled or cancelled');
+    const requirementIssue = codec.deploymentRequirementIssue(plan, invocation.task);
+    if (requirementIssue)
+        throw new Error(requirementIssue);
+    const deployment = (0, protocol_1.object)(invocation.task.scope?.deployment, 'invocation scope.deployment');
+    if (deployment.projectRoot !== input.projectRoot)
+        throw new Error('Invocation projectRoot mismatch');
+    if (deployment.chainFamily !== 'evm' || deployment.framework !== 'hardhat2')
+        throw new Error('Invocation requires an EVM Hardhat2 deployment');
+    if (deploymentPurpose(invocation.task) !== request.purpose)
+        throw new Error('Invocation purpose mismatch');
+    if (deployment.environment !== request.environment || deployment.targetNetwork !== request.network)
+        throw new Error('Invocation environment/targetNetwork mismatch');
+    if (!Array.isArray(deployment.allowedActions) || !deployment.allowedActions.includes(request.mode))
+        throw new Error('Invocation mode is not in allowedActions');
+    if (!sameRelease(deployment.releaseRef, request.releaseRef))
+        throw new Error('Invocation releaseRef mismatch');
+    const sourceRoots = input.sourceRoots ?? (request.purpose === 'prod-execution'
+        ? entries.filter(({ task }) => deploymentPurpose(task) === 'prod-qualification'
+            && task.scope?.deployment?.projectRoot === input.projectRoot
+            && task.scope?.deployment?.deploymentId === deployment.deploymentId).map(({ task }) => task.planKey)
+        : [invocation.task.planKey]);
+    if (!sourceRoots.length)
+        throw new Error('Owned source requires an upstream qualification definition');
+    const source = codec.projectDefinitions(text, { roots: sourceRoots, mode: 'upstream' });
+    for (const task of source.snapshot.tasks) {
+        const selectedDeployment = task.scope?.deployment;
+        if (selectedDeployment && selectedDeployment.projectRoot !== input.projectRoot)
+            throw new Error(`Selected upstream deployment projectRoot mismatch: ${task.planKey}`);
+    }
+    let production;
+    if (request.purpose === 'prod-execution') {
+        const roots = entries.filter(({ task }) => deploymentPurpose(task) === 'prod-execution'
+            && task.scope?.deployment && task.scope.deployment.projectRoot === input.projectRoot
+            && sameRelease(task.scope.deployment.releaseRef, request.releaseRef)).map(({ task }) => task.planKey);
+        production = codec.projectDefinitions(text, { roots, mode: 'full' });
+    }
+    // All values came from detached request parsing and actual handoff text; freeze before exposing.
+    return freeze({ request, workspaceRoot: workspace, projectRoot: root, observation: { path: request.sourceRef.path, sha256: sha256(bytes) },
+        invocation, sourceDefinition: source.snapshot, sourceDefinitionBytes: source.bytes, sourceDefinitionHash: sha256(source.bytes),
+        ...(production ? { prodTaskGraph: production.snapshot, prodTaskGraphBytes: production.bytes, prodTaskGraphHash: sha256(production.bytes) } : {}),
+    });
+}
+/** Read/validate actual source before a provider can be loaded; still not host authorization. */
+async function validateDeliverySourceRpc(input, snapshot, loadProvider) {
+    const binding = readDeliverySource(input);
+    const { chainId } = await (0, protocol_1.validateDeliveryRpc)(binding.request, snapshot, loadProvider);
+    return freeze({ ...binding, chainId });
+}
+//# sourceMappingURL=source.js.map

package/dist-runtime/delivery/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../runtime/delivery/source.ts"],"names":[],"mappings":";;;;;AAmCA,gDAAkG;AAClG,kEAEC;AACD,8CAEC;AAwBD,gDAGC;AAED,0DAGC;AAkDD,8DAMC;AAjID,gGAAgG;AAChG,sDAAyB;AACzB,6CAAyC;AACzC,mDAAmF;AACnF,yCAAwJ;AACxJ,mCAAwC;AAyBxC,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpG,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACvG,OAAO,KAAwB,CAAC;AAClC,CAAC;AACD,SAAgB,kBAAkB,CAAC,IAAY,IAAU,OAAO,IAAA,qBAAa,GAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClG,SAAgB,2BAA2B,CAAC,IAAY,EAAE,SAA8B;IACtF,OAAO,IAAA,qBAAa,GAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AACD,SAAgB,iBAAiB,CAAC,IAAsC;IACtE,OAAO,IAAA,qBAAa,GAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AACD,SAAS,WAAW,CAAC,MAAe,EAAE,QAAuC;IAC3E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,KAAK,SAAS,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC;AACvJ,CAAC;AACD,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAgB;IACvD,MAAM,IAAI,GAAG,IAAA,4BAAY,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,iBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,iBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,iBAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,oEAAoE;QACpE,IAAA,4BAAY,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eACrF,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5H,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QAAC,iBAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AACD,oGAAoG;AACpG,SAAgB,kBAAkB,CAAC,KAA4B;IAC7D,IAAA,iBAAM,EAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5F,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AACD,6FAA6F;AAC7F,SAAgB,uBAAuB,CAAC,KAAiD;IACvF,IAAA,iBAAM,EAAC,KAAK,EAAE,sBAAsB,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IACnF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,UAAU,CAAC,KAA8E;IAChG,MAAM,OAAO,GAAG,IAAA,+BAAoB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,IAAA,qCAAqB,EAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAG,OAAO,CAAC,eAAe,CAAoC,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACjI,MAAM,KAAK,GAAG,IAAA,qBAAa,GAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC3J,MAAM,gBAAgB,GAAG,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAA,iBAAM,EAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAC;IAC5F,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrG,IAAI,UAAU,CAAC,WAAW,KAAK,KAAK,IAAI,UAAU,CAAC,SAAS,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC/I,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3G,IAAI,UAAU,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChK,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/G,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,gBAAgB;QAC5E,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,oBAAoB;eACzE,IAAI,CAAC,KAAK,EAAE,UAAkD,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW;eACjG,IAAI,CAAC,KAAK,EAAE,UAAkD,EAAE,YAAY,KAAK,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/I,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,EAAE,UAA2D,CAAC;QACnG,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACxK,CAAC;IACD,IAAI,UAAmE,CAAC;IACxE,IAAI,OAAO,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,gBAAgB;eAClF,IAAI,CAAC,KAAK,EAAE,UAAU,IAAK,IAAI,CAAC,KAAK,CAAC,UAAsC,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;eAC9G,WAAW,CAAE,IAAI,CAAC,KAAK,CAAC,UAAsC,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrI,UAAU,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,iGAAiG;IACjG,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;QACxI,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9H,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjJ,CAAwC,CAAC;AAC5C,CAAC;AACD,iGAAiG;AAC1F,KAAK,UAAU,yBAAyB,CAAC,KAA4B,EAAE,QAAgC,EAC5G,YAA4E;IAE5E,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,8BAAmB,EAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAA8D,CAAC;AACtG,CAAC"}

package/dist-runtime/delivery/target-fields.d.ts

@@ -0,0 +1,2 @@
+/** Complete scalar public target boundary shared by native references and custom ports. */
+export declare const PUBLIC_TARGET_FIELDS: Set<string>;

package/dist-runtime/delivery/target-fields.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUBLIC_TARGET_FIELDS = void 0;
+/** Complete scalar public target boundary shared by native references and custom ports. */
+exports.PUBLIC_TARGET_FIELDS = new Set([
+    'version', 'id', 'network', 'environment', 'chainId', 'admin',
+    'finality.confirmations', 'openzeppelin.manifestDir',
+    'create2.scheme', 'create2.factory', 'create2.leadingZeroBytes', 'create2.caller',
+    'uups.placeholderImplementation', 'multicall.controlledMulticall',
+]);
+//# sourceMappingURL=target-fields.js.map

package/dist-runtime/delivery/target-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-fields.js","sourceRoot":"","sources":["../../runtime/delivery/target-fields.ts"],"names":[],"mappings":";;;AAAA,2FAA2F;AAC9E,QAAA,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO;IAC7D,wBAAwB,EAAE,0BAA0B;IACpD,gBAAgB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,gBAAgB;IACjF,gCAAgC,EAAE,+BAA+B;CAClE,CAAC,CAAC"}

package/dist-runtime/delivery/task-identity.d.ts

@@ -0,0 +1,23 @@
+export interface DeploymentRequirementRef {
+    planKey: string;
+    rev: number;
+}
+export declare function parseDeploymentRequirementRef(raw: unknown): DeploymentRequirementRef;
+export interface CreateDeliveryTaskOptions {
+    workspaceRoot: string;
+    projectRoot: string;
+    handoff: string;
+    taskId: string;
+    requirementRef: DeploymentRequirementRef;
+    businessSlug: string;
+    referenceDeploymentId?: string;
+}
+/** A reservation creates metadata only. The deployment Agent supplies executable content afterwards. */
+export declare function createDeliveryTask(input: CreateDeliveryTaskOptions): Promise<{
+    status: "created";
+    deploymentId: string;
+    releaseId: string;
+    businessRoot: string;
+    specPath: string;
+    requirementRef: DeploymentRequirementRef;
+}>;

package/dist-runtime/delivery/task-identity.js

@@ -0,0 +1,109 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDeploymentRequirementRef = parseDeploymentRequirementRef;
+exports.createDeliveryTask = createDeliveryTask;
+/** Allocate a round only after its concrete requirement revision is confirmed. */
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_crypto_1 = require("node:crypto");
+const source_1 = require("./source");
+const project_files_1 = require("./project-files");
+const input_files_1 = require("./input-files");
+const materialization_1 = require("./materialization");
+const canonicalData_1 = require("../workflow/lib/canonicalData");
+const protocol_1 = require("./protocol");
+function parseDeploymentRequirementRef(raw) {
+    const ref = (0, canonicalData_1.exactObject)(raw, ['planKey', 'rev'], 'requirementRef');
+    (0, protocol_1.safeId)(ref.planKey, 'requirementRef.planKey');
+    if (!Number.isSafeInteger(ref.rev) || ref.rev < 1)
+        throw Error('Invalid requirement revision');
+    return { planKey: ref.planKey, rev: ref.rev };
+}
+/** A reservation creates metadata only. The deployment Agent supplies executable content afterwards. */
+async function createDeliveryTask(input) {
+    (0, protocol_1.object)(input, 'create deployment task', ['workspaceRoot', 'projectRoot', 'handoff', 'taskId', 'requirementRef', 'businessSlug', 'referenceDeploymentId']);
+    const root = (0, project_files_1.projectRoot)(input.workspaceRoot, input.projectRoot), workspace = (0, project_files_1.projectRoot)(input.workspaceRoot, '.');
+    (0, project_files_1.deliveryProjectMarker)(root);
+    (0, protocol_1.portablePath)(input.handoff, 'handoff');
+    (0, protocol_1.safeId)(input.taskId, 'taskId');
+    const ref = parseDeploymentRequirementRef(input.requirementRef);
+    if (typeof input.businessSlug !== 'string' || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(input.businessSlug))
+        throw Error('businessSlug must be a short lowercase business name');
+    if (input.referenceDeploymentId !== undefined)
+        (0, protocol_1.safeId)(input.referenceDeploymentId, 'referenceDeploymentId');
+    return (0, materialization_1.withDevelopmentFileLock)(root, async () => {
+        const text = (0, input_files_1.readInputBytes)(workspace, input.handoff).toString();
+        (0, input_files_1.assertUnambiguousHandoff)(text);
+        const plan = (0, source_1.parseCanonicalPlan)(text);
+        if (plan.taskId !== input.taskId)
+            throw Error('Requirement taskId mismatch');
+        const requirement = Object.values(plan.tasks).flat().find(t => t.planKey === ref.planKey);
+        if (!requirement || requirement.rev !== ref.rev || requirement.requirementConfirmation?.rev !== ref.rev
+            || requirement.status === 'cancelled' || (0, source_1.deploymentPurpose)(requirement) !== 'analysis'
+            || requirement.scope?.deployment?.projectRoot !== input.projectRoot)
+            throw Error('Deployment requirement is unconfirmed or stale');
+        const d = requirement.scope.deployment;
+        if (!d.requiredOperations?.length || !d.developmentNetwork || !Array.isArray(d.releaseTargetNetworks))
+            throw Error('Confirmed requirement scope is incomplete');
+        const identity = (0, canonicalData_1.semanticHash)({ taskId: input.taskId, projectRoot: input.projectRoot, requirementRef: ref });
+        const requirementHash = (0, canonicalData_1.semanticHash)((0, source_1.projectCanonicalDefinitions)(text, { roots: [ref.planKey], mode: 'upstream' }).snapshot);
+        const registry = `.gate-delivery/deployment-requests/${identity}.json`;
+        const requestIdentity = { taskId: input.taskId, requirementRef: ref, requirementHash,
+            referenceDeploymentId: input.referenceDeploymentId ?? null };
+        let record;
+        const existing = (0, materialization_1.fileBytes)(root, registry);
+        if (existing !== null) {
+            record = JSON.parse(existing);
+            if ((0, canonicalData_1.canonicalJson)(record.requestIdentity) !== (0, canonicalData_1.canonicalJson)(requestIdentity))
+                throw Error('Confirmed requirement identity conflict');
+            (0, protocol_1.safeId)(record.deploymentId, 'reserved deploymentId');
+        }
+        else {
+            const known = new Set(Object.values(plan.tasks).flat().map(t => t.scope?.deployment?.deploymentId).filter(Boolean));
+            const history = (0, materialization_1.fileBytes)(workspace, input.handoff.includes('/') ? `${input.handoff.slice(0, input.handoff.lastIndexOf('/'))}/handoff-ledger.jsonl` : 'handoff-ledger.jsonl');
+            if (history)
+                for (const line of history.split('\n').filter(Boolean)) {
+                    const item = JSON.parse(line);
+                    for (const entry of item.tasks ?? []) {
+                        const id = entry.task?.scope?.deployment?.deploymentId;
+                        if (id)
+                            known.add(id);
+                    }
+                }
+            const date = new Date().toISOString().slice(0, 10).replaceAll('-', '');
+            let deploymentId;
+            do {
+                deploymentId = `${input.businessSlug}-${date}-${(0, node_crypto_1.randomBytes)(4).toString('hex')}`;
+            } while (known.has(deploymentId) || (0, project_files_1.stat)((0, project_files_1.confinedFile)(root, `scripts/tasks/${deploymentId}`, 'directory')));
+            record = { version: 1, deploymentId, releaseId: `${deploymentId}-release`, requestIdentity, state: 'reserved' };
+            // Publish reservation before creating the package, so a retry uses the same ID.
+            (0, materialization_1.atomicDevelopmentWrite)(root, registry, (0, canonicalData_1.canonicalJson)(record) + '\n');
+        }
+        const businessRoot = `scripts/tasks/${record.deploymentId}`;
+        const directory = (0, project_files_1.confinedFile)(root, businessRoot, 'directory');
+        const marker = `${businessRoot}/.request.json`;
+        const markerBytes = (0, canonicalData_1.canonicalJson)({ identity }) + '\n';
+        const previousMarker = (0, materialization_1.fileBytes)(root, marker);
+        if ((0, project_files_1.stat)(directory) && previousMarker !== markerBytes && node_fs_1.default.readdirSync(directory).length)
+            throw Error('Reserved deployment directory is occupied; refusing to overwrite');
+        if (previousMarker !== null && previousMarker !== markerBytes)
+            throw Error('Deployment reservation ownership mismatch');
+        if (previousMarker === null)
+            (0, materialization_1.atomicDevelopmentWrite)(root, marker, markerBytes);
+        const metadata = { version: 1, id: record.deploymentId, requirementRef: ref,
+            developmentNetwork: d.developmentNetwork, releaseTargetNetworks: d.releaseTargetNetworks,
+            ...(input.referenceDeploymentId ? { referenceDeploymentId: input.referenceDeploymentId } : {}) };
+        const taskPath = `${businessRoot}/task.yaml`, bytes = (0, canonicalData_1.canonicalJson)(metadata) + '\n';
+        const previous = (0, materialization_1.fileBytes)(root, taskPath);
+        if (previous !== null && previous !== bytes)
+            throw Error('Reserved task metadata changed; refusing to overwrite');
+        if (previous === null)
+            (0, materialization_1.atomicDevelopmentWrite)(root, taskPath, bytes);
+        if (record.state !== 'complete')
+            (0, materialization_1.atomicDevelopmentWrite)(root, registry, (0, canonicalData_1.canonicalJson)({ ...record, state: 'complete' }) + '\n');
+        return { status: 'created', deploymentId: record.deploymentId, releaseId: record.releaseId, businessRoot, specPath: taskPath, requirementRef: ref };
+    });
+}
+//# sourceMappingURL=task-identity.js.map

package/dist-runtime/delivery/task-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-identity.js","sourceRoot":"","sources":["../../runtime/delivery/task-identity.ts"],"names":[],"mappings":";;;;;AAWA,sEAKC;AAMD,gDA8DC;AApFD,kFAAkF;AAClF,sDAAyB;AACzB,6CAA0C;AAC1C,qCAA8F;AAC9F,mDAAyF;AACzF,+CAAyE;AACzE,uDAA+F;AAC/F,iEAAyF;AACzF,yCAA0D;AAG1D,SAAgB,6BAA6B,CAAC,GAAY;IACxD,MAAM,GAAG,GAAG,IAAA,2BAAW,EAAC,GAAG,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAA,iBAAM,EAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,GAAc,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3G,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,GAAa,EAAE,CAAC;AACpE,CAAC;AAKD,wGAAwG;AACjG,KAAK,UAAU,kBAAkB,CAAC,KAAgC;IACvE,IAAA,iBAAM,EAAC,KAAK,EAAE,wBAAwB,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC1J,MAAM,IAAI,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACpH,IAAA,qCAAqB,EAAC,IAAI,CAAC,CAAC;IAC5B,IAAA,uBAAY,EAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAAC,IAAA,iBAAM,EAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,6BAA6B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzK,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS;QAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IAC5G,OAAO,IAAA,yCAAuB,EAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,IAAA,4BAAc,EAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAAC,IAAA,sCAAwB,EAAC,IAAI,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAA,2BAAkB,EAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,uBAAuB,EAAE,GAAG,KAAK,GAAG,CAAC,GAAG;eAClG,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,IAAA,0BAAiB,EAAC,WAAW,CAAC,KAAK,UAAU;eAClF,WAAW,CAAC,KAAK,EAAE,UAAkB,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC9I,MAAM,CAAC,GAAG,WAAW,CAAC,KAAM,CAAC,UAAiB,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAAE,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAChK,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7G,MAAM,eAAe,GAAG,IAAA,4BAAY,EAAC,IAAA,oCAA2B,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7H,MAAM,QAAQ,GAAG,sCAAsC,QAAQ,OAAO,CAAC;QACvE,MAAM,eAAe,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe;YAClF,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QAC/D,IAAI,MAAW,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAA,2BAAS,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,IAAA,6BAAa,EAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAA,6BAAa,EAAC,eAAe,CAAC;gBAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACrI,IAAA,iBAAM,EAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,KAAK,EAAE,UAAkB,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7H,MAAM,OAAO,GAAG,IAAA,2BAAS,EAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC9K,IAAI,OAAO;gBAAE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;wBAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC;wBAAC,IAAI,EAAE;4BAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBAC1H,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvE,IAAI,YAAoB,CAAC;YACzB,GAAG,CAAC;gBAAC,YAAY,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,CAAC,QACjF,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAA,oBAAI,EAAC,IAAA,4BAAY,EAAC,IAAI,EAAE,iBAAiB,YAAY,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE;YAC1G,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,YAAY,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YAChH,gFAAgF;YAChF,IAAA,wCAAsB,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAA,6BAAa,EAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,YAAY,GAAG,iBAAiB,MAAM,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAA,4BAAY,EAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,GAAG,YAAY,gBAAgB,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAA,6BAAa,EAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC;QACvD,MAAM,cAAc,GAAG,IAAA,2BAAS,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAA,oBAAI,EAAC,SAAS,CAAC,IAAI,cAAc,KAAK,WAAW,IAAI,iBAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC3K,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,WAAW;YAAE,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACxH,IAAI,cAAc,KAAK,IAAI;YAAE,IAAA,wCAAsB,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,GAAG;YACzE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;YACxF,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,GAAG,YAAY,YAAY,EAAE,KAAK,GAAG,IAAA,6BAAa,EAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAA,2BAAS,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,KAAK;YAAE,MAAM,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAClH,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAA,wCAAsB,EAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,IAAA,wCAAsB,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAA,6BAAa,EAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAChI,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACnL,CAAC,CAAC,CAAC;AACL,CAAC"}