gate-evm-tools 1.2.1 → 1.2.2

package/runtime/delivery/setup.ts

@@ -4,7 +4,6 @@ import crypto from 'node:crypto';
 import { createRequire } from 'node:module';
 import { spawnSync } from 'node:child_process';
 import YAML from 'yaml';
-import { REVIEWED_DELIVERY_OVERRIDES } from './toolchain';
 import { object } from './protocol';
 import { deliveryProjectMarker, projectRoot, readFile, confinedFile, stat, integratedConfig, readPublicProjectNetworkSnapshots, projectSourcesDirectory } from './project';
 import { configDocument, parseDeliveryPublicTargets, validateDeliveryTarget, type DeliveryTarget } from './config';
@@ -13,11 +12,10 @@ export { loadDeliveryTarget } from './config';
 export { configureDeliveryEnvironment } from './manifest';
 export type { DeliveryTarget, DeliveryTargetConfig } from './config';
 
-const TOOLCHAIN: Record<string, string> = { hardhat: '2.26.3', ethers: '6.15.0', '@nomicfoundation/hardhat-ethers': '3.1.0', typescript: '5.9.3', 'ts-node': '10.9.2' };
-// Resolve our identity from the executing package, including an explicitly installed tarball.
-const toolIdentity = JSON.parse(fs.readFileSync(path.resolve(__dirname, '../../package.json'), 'utf8'));
-if (toolIdentity.name !== 'gate-evm-tools' || typeof toolIdentity.version !== 'string') throw new Error('Invalid GateTool package identity');
-const DEPENDENCIES: Record<string, string> = { 'gate-evm-tools': toolIdentity.version, '@openzeppelin/hardhat-upgrades': '3.9.1', '@openzeppelin/upgrades-core': '1.44.2', '@openzeppelin/contracts': '5.4.0' };
+// Setup checks locally available capabilities. The project owns dependency versions;
+// compiler qualification separately validates the toolchain used for deployment.
+const DEPENDENCIES = ['hardhat', 'ethers', '@nomicfoundation/hardhat-ethers', 'typescript', 'ts-node',
+  'gate-evm-tools', '@openzeppelin/hardhat-upgrades', '@openzeppelin/upgrades-core', '@openzeppelin/contracts'];
 export interface DeliverySetupOptions {
   workspaceRoot: string;
   projectRoot: string;
@@ -73,10 +71,6 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
   const before = new Map<string, string | undefined>();
   for (const file of ['.gate-template.json', 'package.json', 'hardhat.config.ts', 'config.yaml', 'contractInfo.json']) before.set(file, readFile(root, file));
   const pkg = object(JSON.parse(before.get('package.json') ?? 'null'), 'package.json');
-  const overrides = pkg.overrides === undefined ? {} : object(pkg.overrides, 'package overrides');
-  for (const [name, version] of Object.entries(REVIEWED_DELIVERY_OVERRIDES)) {
-    if (overrides[name] !== undefined && overrides[name] !== version) throw new Error(`Reviewed delivery dependency override conflict: ${name}`);
-  }
   const declarations: Record<string, unknown> = {};
   for (const section of ['dependencies', 'devDependencies']) {
     const entries = pkg[section] === undefined ? {} : object(pkg[section], section);
@@ -85,18 +79,14 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
       declarations[name] = value;
     }
   }
-  const required = { ...DEPENDENCIES };
+  const required = [...DEPENDENCIES];
+  let toolDeclaration: string | undefined;
   if (input.toolPackage !== undefined) {
     if (!path.isAbsolute(input.toolPackage) || !input.toolPackage.endsWith('.tgz') || !stat(input.toolPackage)?.isFile() || stat(input.toolPackage)?.isSymbolicLink()) throw new Error('toolPackage must be an explicit absolute local tarball path');
-    required['gate-evm-tools'] = `file:${input.toolPackage}`;
-  }
-  if (businessUsesUpgradeable(root)) required['@openzeppelin/contracts-upgradeable'] = '5.4.0';
-  for (const [name, version] of Object.entries({ ...TOOLCHAIN, ...required })) {
-    const declared = declarations[name];
-    // Preserve an existing explicit local tarball declaration when rerunning after installation.
-    const localTool = name === 'gate-evm-tools' && input.toolPackage === undefined && typeof declared === 'string' && /^file:.*\.tgz$/.test(declared);
-    if ((name in TOOLCHAIN && declared === undefined) || (declared !== undefined && declared !== version && !localTool)) throw new Error(`Dependency declaration conflict for ${name}: expected ${version}`);
+    toolDeclaration = `file:${input.toolPackage}`;
+    if (declarations['gate-evm-tools'] !== undefined && declarations['gate-evm-tools'] !== toolDeclaration) throw new Error('Explicit toolPackage conflicts with the project gate-evm-tools declaration');
   }
+  if (businessUsesUpgradeable(root)) required.push('@openzeppelin/contracts-upgradeable');
   const networks = readPublicProjectNetworkSnapshots(root, targets.map(target => target.network));
   const source = before.get('hardhat.config.ts')!;
   const withPlugin = integratedConfig(source); // Check integration conflicts even when dependencies are missing.
@@ -120,12 +110,14 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
   if (before.get('contractInfo.json') !== undefined) object(JSON.parse(before.get('contractInfo.json')!), 'contractInfo.json');
   const dependencies: DeliveryInspection['dependencies'] = [];
   const projectRequire = createRequire(path.join(root, 'package.json'));
-  for (const [name, requested] of Object.entries({ ...TOOLCHAIN, ...required })) {
+  for (const name of required) {
+    const requested = name === 'gate-evm-tools' && toolDeclaration !== undefined ? toolDeclaration : declarations[name];
+    const selection = typeof requested === 'string' ? requested : 'project-selected version';
+    if (requested === undefined) { dependencies.push({ name, required: selection, reason: 'not declared in the project' }); continue; }
     const metadata = confinedFile(root, `node_modules/${name}/package.json`);
-    if (!stat(metadata)) { dependencies.push({ name, required: requested, reason: 'not installed locally' }); continue; }
+    if (!stat(metadata)) { dependencies.push({ name, required: selection, reason: 'not installed locally' }); continue; }
     const installed = JSON.parse(fs.readFileSync(metadata, 'utf8'));
-    const expected = name === 'gate-evm-tools' ? DEPENDENCIES[name] : requested;
-    if (installed.name !== name || installed.version !== expected) throw new Error(`Installed dependency conflict for ${name}: expected ${expected}`);
+    if (installed.name !== name) throw new Error(`Installed dependency identity mismatch for ${name}`);
     if (name !== 'gate-evm-tools') {
       const entry = name === '@openzeppelin/contracts' ? `${name}/proxy/ERC1967/ERC1967Proxy.sol`
         : name === '@openzeppelin/contracts-upgradeable' ? `${name}/package.json` : name;
@@ -133,7 +125,7 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
         const resolved = fs.realpathSync(projectRequire.resolve(entry));
         if (!stat(resolved)?.isFile() || !resolved.startsWith(path.join(root, 'node_modules') + path.sep)) throw new Error('nonlocal entry');
       } catch {
-        dependencies.push({ name, required: requested, reason: 'required entry point is missing or nonlocal' });
+        dependencies.push({ name, required: selection, reason: 'required entry point is missing or nonlocal' });
       }
     }
     if (name === 'gate-evm-tools') {
@@ -142,7 +134,7 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
           const resolved = projectRequire.resolve(`gate-evm-tools/${entry}`);
           if (!resolved.startsWith(path.join(root, 'node_modules') + path.sep)) throw new Error('nonlocal API');
         }
-      } catch { dependencies.push({ name, required: requested, reason: 'installed package lacks delivery API exports; install a built delivery package' }); }
+      } catch { dependencies.push({ name, required: selection, reason: 'installed package lacks delivery API exports; install a built delivery package' }); }
     }
   }
   if (!dependencies.length) {
@@ -150,12 +142,10 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
     if (reason) dependencies.push({ name: 'dependency-tree', required: 'complete local dependency graph', reason });
   }
   const writes = new Map<string, string>();
-  const missing = Object.entries(required).filter(([name]) => declarations[name] === undefined);
-  const missingOverrides = Object.entries(REVIEWED_DELIVERY_OVERRIDES).some(([name]) => overrides[name] === undefined);
-  if (missing.length || missingOverrides) {
+  if (toolDeclaration !== undefined && declarations['gate-evm-tools'] === undefined) {
     const dev = { ...(pkg.devDependencies as Record<string, unknown> ?? {}) };
-    for (const [name, version] of missing) dev[name] = version;
-    writes.set('package.json', JSON.stringify({ ...pkg, devDependencies: dev, overrides: { ...overrides, ...REVIEWED_DELIVERY_OVERRIDES } }, null, 2) + '\n');
+    dev['gate-evm-tools'] = toolDeclaration;
+    writes.set('package.json', JSON.stringify({ ...pkg, devDependencies: dev }, null, 2) + '\n');
   }
   if (changedYaml) writes.set('config.yaml', doc.toString());
   if (before.get('contractInfo.json') === undefined) writes.set('contractInfo.json', '{}\n');
@@ -165,7 +155,7 @@ function preflight(input: DeliverySetupOptions): { result: DeliveryInspection; w
 }
 /** Read-only, never imports the project's config/HRE or contacts an RPC. */
 export function inspectDeliveryProject(options: DeliverySetupOptions): DeliveryInspection { return preflight(options).result; }
-/** Stage declarations/config; caller explicitly installs dependencies then reruns to enable the plugin. */
+/** Stage config; dependency selections remain project-owned except an explicit missing toolPackage. */
 export function setupDeliveryProject(options: DeliverySetupOptions): DeliveryInspection {
   const { result, writes, before } = preflight(options);
   const root = projectRoot(options.workspaceRoot, options.projectRoot);

package/runtime/delivery/source.ts

@@ -4,6 +4,7 @@ import { createHash } from 'node:crypto';
 import { deliveryProjectMarker, projectRoot, confinedFile } from './project-files';
 import { object, parseDeliveryRequest, validateDeliveryRpc, type DeliveryRequest, type ChainIdProvider, type ProjectNetworkSnapshot } from './protocol';
 import { loadPlanCodec } from './codec';
+import type { StandaloneDefinition } from './standalone-source';
 import type { Plan, PlanTask, DefinitionSelection, DefinitionSnapshot, DeepReadonly } from '../vendor/plan-codec/index.cjs';
 export type { DefinitionSelection, DefinitionSnapshot, DeepReadonly } from '../vendor/plan-codec/index.cjs';
 
@@ -20,8 +21,10 @@ export interface DeliverySourceBinding {
   workspaceRoot: string;
   projectRoot: string;
   observation: { path: string; sha256: string };
-  invocation: { lane: string; task: PlanTask };
-  sourceDefinition: DefinitionSnapshot;
+  kind: 'gateflow' | 'standalone';
+  scope: Readonly<Record<string, any>>;
+  invocation?: { lane: string; task: PlanTask };
+  sourceDefinition: DefinitionSnapshot | StandaloneDefinition;
   sourceDefinitionBytes: string;
   sourceDefinitionHash: string;
   prodTaskGraph?: DefinitionSnapshot;
@@ -77,6 +80,7 @@ function readSource(input: Omit<DeliverySourceOptions, 'sourceRoots'> & { source
   const workspace = projectRoot(input.workspaceRoot, '.');
   const root = projectRoot(workspace, input.projectRoot);
   deliveryProjectMarker(root);
+  if(request.sourceRef.kind==='standalone')return freeze((require('./standalone-source') as typeof import('./standalone-source')).standaloneSource(workspace,root,input.projectRoot,request)) as DeepReadonly<DeliverySourceBinding>;
   const bytes = actualSource(workspace, request.sourceRef.path);
   const text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
   if (input.sourceRoots === undefined) (require('./input-files') as typeof import('./input-files')).assertUnambiguousHandoff(text);
@@ -116,7 +120,7 @@ function readSource(input: Omit<DeliverySourceOptions, 'sourceRoots'> & { source
   }
   // All values came from detached request parsing and actual handoff text; freeze before exposing.
   return freeze({ request, workspaceRoot: workspace, projectRoot: root, observation: { path: request.sourceRef.path, sha256: sha256(bytes) },
-    invocation, sourceDefinition: source.snapshot, sourceDefinitionBytes: source.bytes, sourceDefinitionHash: sha256(source.bytes),
+    kind:'gateflow' as const, scope:deployment, invocation, sourceDefinition: source.snapshot, sourceDefinitionBytes: source.bytes, sourceDefinitionHash: sha256(source.bytes),
     ...(production ? { prodTaskGraph: production.snapshot, prodTaskGraphBytes: production.bytes, prodTaskGraphHash: sha256(production.bytes) } : {}),
   }) as DeepReadonly<DeliverySourceBinding>;
 }

package/runtime/delivery/standalone-source.ts

@@ -0,0 +1,40 @@
+/** Native task-file adapter. No synthetic handoff, lanes, PlanTask or JSON approval. */
+import path from 'node:path';
+import { readInputBytes, parseInputDocument, inputDigest } from './input-files';
+import { object, safeId, portablePath, type DeliveryRequest } from './protocol';
+import { canonicalJson, deepFreeze, semanticHash } from '../workflow/lib/canonicalData';
+export interface StandaloneDefinition {
+  schema: 'gate-delivery-standalone'; version: 1; deploymentId: string;
+  description: string; developmentNetwork: string; releaseTargetNetworks: string[];
+  referenceDeploymentId?: string;
+  script: string; selectedSteps: string[];
+}
+export function readStandaloneTask(root: string, relative: string): StandaloneDefinition {
+  portablePath(relative,'standalone task');
+  const t=object(parseInputDocument(readInputBytes(root,relative),'yaml'),'standalone task',
+    ['version','id','source','description','developmentNetwork','releaseTargetNetworks','referenceDeploymentId','script','selectedSteps']);
+  if(t.version!==2 || t.source!=='standalone') throw Error('Native standalone task.yaml version 2 required');
+  const id=safeId(t.id,'deploymentId');
+  if(relative!==`scripts/tasks/${id}/task.yaml`)throw Error('Noncanonical standalone task path');
+  if(typeof t.description!=='string'||!t.description.trim())throw Error('Explicit operation description required');
+  safeId(t.developmentNetwork,'developmentNetwork');portablePath(t.script,'business script');
+  if(!Array.isArray(t.releaseTargetNetworks)||new Set(t.releaseTargetNetworks).size!==t.releaseTargetNetworks.length)throw Error('Invalid release targets');
+  for(const n of t.releaseTargetNetworks){safeId(n,'release target');if(n===t.developmentNetwork)throw Error('Development network cannot be a production target');}
+  if(!Array.isArray(t.selectedSteps)||!t.selectedSteps.length||new Set(t.selectedSteps).size!==t.selectedSteps.length)throw Error('Selected steps required');
+  t.selectedSteps.forEach(s=>safeId(s,'selected step'));
+  if(t.referenceDeploymentId!==undefined)safeId(t.referenceDeploymentId,'referenceDeploymentId');
+  return deepFreeze({schema:'gate-delivery-standalone' as const,version:1 as const,deploymentId:id,description:t.description,
+    developmentNetwork:t.developmentNetwork as string,releaseTargetNetworks:t.releaseTargetNetworks as string[],script:t.script as string,
+    selectedSteps:t.selectedSteps as string[],...(t.referenceDeploymentId?{referenceDeploymentId:t.referenceDeploymentId as string}:{})});
+}
+export function standaloneSource(workspace:string,root:string,relativeProject:string,request:DeliveryRequest) {
+  const relative=path.relative(root,path.resolve(workspace,request.sourceRef.path)).split(path.sep).join('/');
+  const definition=readStandaloneTask(root,relative);
+  if(definition.deploymentId!==request.sourceRef.deploymentId)throw Error('Standalone source deployment mismatch');
+  if(request.purpose==='dev-execution'?request.network!==definition.developmentNetwork:!definition.releaseTargetNetworks.includes(request.network))throw Error('Target outside standalone scope');
+  const scope={...definition,projectRoot:relativeProject,chainFamily:'evm',framework:'hardhat2'};
+  const bytes=canonicalJson(definition);
+  return {request,workspaceRoot:workspace,projectRoot:root,kind:'standalone' as const,scope,
+    observation:{path:request.sourceRef.path,sha256:inputDigest(readInputBytes(workspace,request.sourceRef.path))},
+    sourceDefinition:definition,sourceDefinitionBytes:bytes,sourceDefinitionHash:semanticHash(definition)};
+}

package/runtime/workflow/lib/calls.ts

@@ -350,21 +350,39 @@ export const runContractViewCalls = async (
   const resolved = await resolveContract(context, step);
   const calls = resolveStepCalls(step);
   const results: Record<string, string> = {};
+  const typedResults: Record<string, unknown> = {};
+  const queries: unknown[] = [];
+  const provider=context.runtime.hre.network.provider;
+  const caller=context.signerAddress??await context.signer?.getAddress()??"0x0000000000000000000000000000000000000001";
+  const block:any=await provider.request({method:"eth_getBlockByNumber",params:["latest",false]});
+  const chainId=BigInt(await provider.request({method:"eth_chainId",params:[]}) as string).toString();
 
   for (const [index, call] of calls.entries()) {
     const args = resolveCallArgs(context, call);
     await context.validation?.call(resolved.abiName, call.method, args, call.value === undefined ? undefined : resolveWorkflowValue(context, call.value));
     context.validation?.callInterface(resolved.contract.interface.fragments, call.method, args);
-    const value = await resolved.contract.getFunction(call.method).staticCall(...args);
+    const fn = resolved.contract.interface.getFunction(call.method);
+    let value: unknown;
+    if (fn && ["view", "pure"].includes(fn.stateMutability)) {
+      const query=await require("../../delivery/query").readScriptContract({address:resolved.address,abi:resolved.contract.interface.fragments.filter(f=>f.type==="function").map(f=>f.format("full")),method:call.method,args}, {request:(method:string,params:unknown[])=>provider.request({method,params}),chainId,block:{number:block.number,hash:block.hash},caller,source:{blockNumber:context.simulation.snapshot?.blockNumber??Number(BigInt(block.number)),blockHash:context.simulation.snapshot?.blockHash??block.hash}});
+      value=query.value;queries.push(query.evidence);
+    } else {
+      // Legacy view steps may statically inspect a non-view ABI. Keep that
+      // eth_call behavior without presenting it as a reusable view dependency.
+      value = await resolved.contract.getFunction(call.method).staticCall(...args);
+    }
     results[resultKey(call, index, calls)] = context.validation ? context.validation.stringify(value) : stringifyCallResult(value);
+    typedResults[resultKey(call,index,calls)] = require("../../delivery/abi").normalizeRuntimeValue(value);
   }
 
+  context.state.set(String(step.saveAs ?? step.id), { ...typedResults, values: Object.values(typedResults), value: Object.values(typedResults).length===1?Object.values(typedResults)[0]:Object.values(typedResults) });
   context.reporter.result("view", {
     stepId: step.id,
     kind: step.kind,
     contract: resolved.contractName,
     address: resolved.address,
     results,
+    queries,
   });
 };
 

package/dist-runtime/delivery/toolchain.d.ts

@@ -1,3 +0,0 @@
-/** Reviewed compiler adapter dependency selections; payload checks remain authoritative.
- * Range-scoped entries preserve distinct dependency majors. Setup never overrides a conflicting project choice. */
-export declare const REVIEWED_DELIVERY_OVERRIDES: Record<string, string>;

package/dist-runtime/delivery/toolchain.js

@@ -1,52 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.REVIEWED_DELIVERY_OVERRIDES = void 0;
-const compiler_dependency_pins_1 = require("./compiler-dependency-pins");
-/** Reviewed compiler adapter dependency selections; payload checks remain authoritative.
- * Range-scoped entries preserve distinct dependency majors. Setup never overrides a conflicting project choice. */
-exports.REVIEWED_DELIVERY_OVERRIDES = {
-    "axios": "1.20.0",
-    "@aws-sdk/client-lambda": "3.1152.0",
-    "@aws-sdk/core": "3.978.3",
-    "@aws-sdk/credential-provider-env": "3.972.74",
-    "@aws-sdk/credential-provider-http": "3.972.76",
-    "@aws-sdk/credential-provider-ini": "3.973.19",
-    "@aws-sdk/credential-provider-login": "3.972.81",
-    "@aws-sdk/credential-provider-node": "3.972.86",
-    "@aws-sdk/credential-provider-process": "3.972.74",
-    "@aws-sdk/credential-provider-sso": "3.973.18",
-    "@aws-sdk/credential-provider-web-identity": "3.972.80",
-    "@aws-sdk/nested-clients": "3.997.48",
-    "@aws-sdk/signature-v4-multi-region": "3.996.48",
-    "@aws-sdk/token-providers": "3.1150.0",
-    "@aws-sdk/types": "3.974.6",
-    "@smithy/types": "4.19.0",
-    "@smithy/signature-v4": "5.7.4",
-    "@smithy/fetch-http-handler": "5.8.0",
-    "@smithy/credential-provider-imds": "4.5.2",
-    "@smithy/core": "3.36.0",
-    "@smithy/node-http-handler": "4.12.1",
-    "bowser": "2.14.1",
-    "follow-redirects": "1.16.1",
-    "undici@>=5 <6": "5.29.0",
-    "undici@>=6 <7": "6.29.0",
-    "tslib@>=1 <2": "1.14.1",
-    "tslib@>=2 <3": "2.7.0",
-    "semver@>=5 <6": "5.7.2",
-    "semver@>=6 <7": "6.3.1",
-    "semver@>=7 <8": "7.8.5",
-    "ansi-regex@>=6 <7": "6.4.0"
-};
-// OZ's compiler adapter follows floating AWS/Smithy ranges. Freeze that reviewed
-// family closure so a fresh npm resolution cannot select unqualified payloads.
-// Other project dependencies keep their original constraints and payload checks.
-for (const key of Object.keys(compiler_dependency_pins_1.compilerDependencyPins)) {
-    if (!key.startsWith('@aws-sdk/') && !key.startsWith('@smithy/'))
-        continue;
-    const at = key.lastIndexOf('@'), name = key.slice(0, at), version = key.slice(at + 1);
-    const existing = exports.REVIEWED_DELIVERY_OVERRIDES[name];
-    if (existing && existing !== version)
-        throw new Error('Ambiguous reviewed compiler dependency: ' + name);
-    exports.REVIEWED_DELIVERY_OVERRIDES[name] = version;
-}
-//# sourceMappingURL=toolchain.js.map

package/dist-runtime/delivery/toolchain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolchain.js","sourceRoot":"","sources":["../../runtime/delivery/toolchain.ts"],"names":[],"mappings":";;;AAAA,yEAAoE;AAEpE;mHACmH;AACtG,QAAA,2BAA2B,GAA2B;IACjE,OAAO,EAAE,QAAQ;IACjB,wBAAwB,EAAE,UAAU;IACpC,eAAe,EAAE,SAAS;IAC1B,kCAAkC,EAAE,UAAU;IAC9C,mCAAmC,EAAE,UAAU;IAC/C,kCAAkC,EAAE,UAAU;IAC9C,oCAAoC,EAAE,UAAU;IAChD,mCAAmC,EAAE,UAAU;IAC/C,sCAAsC,EAAE,UAAU;IAClD,kCAAkC,EAAE,UAAU;IAC9C,2CAA2C,EAAE,UAAU;IACvD,yBAAyB,EAAE,UAAU;IACrC,oCAAoC,EAAE,UAAU;IAChD,0BAA0B,EAAE,UAAU;IACtC,gBAAgB,EAAE,SAAS;IAC3B,eAAe,EAAE,QAAQ;IACzB,sBAAsB,EAAE,OAAO;IAC/B,4BAA4B,EAAE,OAAO;IACrC,kCAAkC,EAAE,OAAO;IAC3C,cAAc,EAAE,QAAQ;IACxB,2BAA2B,EAAE,QAAQ;IACrC,QAAQ,EAAE,QAAQ;IAClB,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,OAAO;IACvB,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,OAAO;IACxB,mBAAmB,EAAE,OAAO;CAC7B,CAAC;AAEF,iFAAiF;AACjF,+EAA+E;AAC/E,iFAAiF;AACjF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,iDAAsB,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,SAAS;IAC1E,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,mCAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAC;IACzG,mCAA2B,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;AAC9C,CAAC"}

package/runtime/delivery/toolchain.ts

@@ -1,48 +0,0 @@
-import { compilerDependencyPins } from './compiler-dependency-pins';
-
-/** Reviewed compiler adapter dependency selections; payload checks remain authoritative.
- * Range-scoped entries preserve distinct dependency majors. Setup never overrides a conflicting project choice. */
-export const REVIEWED_DELIVERY_OVERRIDES: Record<string, string> = {
-  "axios": "1.20.0",
-  "@aws-sdk/client-lambda": "3.1152.0",
-  "@aws-sdk/core": "3.978.3",
-  "@aws-sdk/credential-provider-env": "3.972.74",
-  "@aws-sdk/credential-provider-http": "3.972.76",
-  "@aws-sdk/credential-provider-ini": "3.973.19",
-  "@aws-sdk/credential-provider-login": "3.972.81",
-  "@aws-sdk/credential-provider-node": "3.972.86",
-  "@aws-sdk/credential-provider-process": "3.972.74",
-  "@aws-sdk/credential-provider-sso": "3.973.18",
-  "@aws-sdk/credential-provider-web-identity": "3.972.80",
-  "@aws-sdk/nested-clients": "3.997.48",
-  "@aws-sdk/signature-v4-multi-region": "3.996.48",
-  "@aws-sdk/token-providers": "3.1150.0",
-  "@aws-sdk/types": "3.974.6",
-  "@smithy/types": "4.19.0",
-  "@smithy/signature-v4": "5.7.4",
-  "@smithy/fetch-http-handler": "5.8.0",
-  "@smithy/credential-provider-imds": "4.5.2",
-  "@smithy/core": "3.36.0",
-  "@smithy/node-http-handler": "4.12.1",
-  "bowser": "2.14.1",
-  "follow-redirects": "1.16.1",
-  "undici@>=5 <6": "5.29.0",
-  "undici@>=6 <7": "6.29.0",
-  "tslib@>=1 <2": "1.14.1",
-  "tslib@>=2 <3": "2.7.0",
-  "semver@>=5 <6": "5.7.2",
-  "semver@>=6 <7": "6.3.1",
-  "semver@>=7 <8": "7.8.5",
-  "ansi-regex@>=6 <7": "6.4.0"
-};
-
-// OZ's compiler adapter follows floating AWS/Smithy ranges. Freeze that reviewed
-// family closure so a fresh npm resolution cannot select unqualified payloads.
-// Other project dependencies keep their original constraints and payload checks.
-for (const key of Object.keys(compilerDependencyPins)) {
-  if (!key.startsWith('@aws-sdk/') && !key.startsWith('@smithy/')) continue;
-  const at = key.lastIndexOf('@'), name = key.slice(0, at), version = key.slice(at + 1);
-  const existing = REVIEWED_DELIVERY_OVERRIDES[name];
-  if (existing && existing !== version) throw new Error('Ambiguous reviewed compiler dependency: ' + name);
-  REVIEWED_DELIVERY_OVERRIDES[name] = version;
-}